Quick answer

If an online casino took your money through false promises, a fake website or app, manipulated withdrawals, impersonation, or demands for repeated “tax,” “verification,” or “unlocking” payments, act immediately:

Contact your bank, e-wallet, card issuer, or other payment provider through its official fraud channel. Ask it to flag the transaction, secure your account, trace the funds, and initiate any available temporary hold or coordinated verification.
Preserve the website address, account details, messages, transaction records, advertisements, and screenshots.
File a cybercrime report with the Philippine National Police or the National Bureau of Investigation.
Report the operator or website to PAGCOR so its licence status and gaming activities can be checked.
If the financial institution does not properly address your complaint, escalate it to the Bangko Sentral ng Pilipinas when the institution is BSP-supervised.

Do not send another payment merely because the operator calls it a withdrawal fee, tax, anti-money-laundering clearance, account upgrade, or refundable deposit. Reporting promptly improves the chance that remaining funds and electronic records can be preserved, but it does not guarantee recovery.

First, distinguish a scam from an ordinary gambling loss

Losing a wager on a functioning casino game is not, by itself, proof of fraud. A scam may be indicated when an operator or its agent:

falsely claims to be licensed or connected with PAGCOR or a legitimate casino;
displays a fabricated balance, jackpot, bonus, or investment return;
accepts deposits but does not provide the promised game or service;
changes withdrawal conditions after receiving your money;
demands successive payments before releasing supposed winnings;
impersonates casino personnel, payment providers, regulators, or government officials;
uses personal bank or e-wallet accounts unrelated to the named operator;
accesses your account or makes transfers without authority;
recruits you to receive or forward other players’ funds; or
disappears, blocks you, or removes the website after payment.

Withdrawal delays can also arise from legitimate identity checks, wagering conditions, technical problems, or account restrictions. Preserve the operator’s terms and communications before concluding that a crime occurred. PAGCOR and investigators will need the actual facts and documents.

What to do immediately

1. Stop further payments and contact the payment provider

Call the fraud hotline shown in your bank or e-wallet’s official app, website, or card—not a number supplied by the suspected casino.

Tell the provider that the payment is disputed because of suspected online fraud. Give it:

the transaction date and time;
the amount and reference number;
the source and recipient account details;
the payment method;
a concise explanation of the deception;
whether you disclosed an OTP, PIN, password, card details, or identification document; and
any police or NBI reference number already available.

Ask for a complaint or case reference number. Request written confirmation of the action taken. If a card was used, ask whether the transaction qualifies for blocking, reversal, or the issuer’s dispute process. Those remedies depend on the payment network’s rules and the circumstances; they are not automatic.

Republic Act No. 12010, the Anti-Financial Account Scamming Act (AFASA), and BSP Circular No. 1215 authorize covered financial institutions to temporarily hold funds involved in disputed transactions and conduct coordinated verification. A complaint-initiated process begins through the originating institution’s 24/7 fraud-reporting channel. The maximum statutory holding period is generally 30 calendar days, including initial and extended holding periods; a further extension requires a court order. A hold prevents withdrawal of funds still reached by the process—it is not a final ruling that the complainant owns the money and does not ensure reimbursement. See the BSP’s AFASA law and implementing-rules booklet.

Cooperate promptly if the institution requests an affidavit, police report, identification, transaction records, or other supporting documents.

2. Secure your accounts and devices

If you disclosed credentials or installed software at the operator’s request:

change passwords using a device you reasonably believe is safe;
use a different password for each affected account;
sign out unknown sessions and enable multi-factor authentication;
block or replace compromised cards;
ask your mobile provider to secure your SIM if takeover is suspected;
remove remote-access or unknown applications; and
review bank, e-wallet, email, and mobile accounts for other unauthorized activity.

Do not delete the scam messages or app before preserving the evidence. If a device may contain important evidence, avoid factory-resetting it until investigators advise you.

3. Preserve evidence in its original form

Keep more than cropped screenshots when possible. Preserve:

the complete website URL and the date and time you accessed it;
the app name, download source, package details, and store listing;
screenshots or screen recordings of balances, games, withdrawal attempts, and error messages;
advertisements, referral codes, influencer posts, and promises of guaranteed winnings;
full chat histories, emails, SMS messages, usernames, profile links, and telephone numbers;
deposit and withdrawal records, receipts, bank statements, wallet addresses, and transaction hashes;
recipient names, account numbers, QR codes, and merchant descriptors;
the operator’s licence claim, terms and conditions, privacy notice, and withdrawal rules;
names used by agents, group administrators, recruiters, or customer-support representatives;
your complaint to the operator and its response;
files the operator sent, without reopening suspicious attachments; and
a chronological account of what happened.

Export chats where the service permits it. Keep the original files and make a backup. Do not edit screenshots, rename original files unnecessarily, or annotate the only copy. Investigators may need metadata and context to establish authenticity.

Under the Cybercrime Prevention Act of 2012, service providers must preserve specified traffic data and subscriber information for statutory periods, while content data may be preserved following a lawful preservation order. Victims cannot ordinarily compel disclosure of another person’s subscriber or account information themselves; investigators may seek the appropriate preservation, disclosure, or search authority. This is another reason to report without delay.

Where to report

Philippine National Police

Report the incident to the PNP Anti-Cybercrime Group or a police station that can receive and refer a cybercrime complaint. Bring your identification, evidence, written chronology, and payment records. If you face an immediate physical threat, coercion, or extortion, contact emergency police services at once.

A police report records and initiates law-enforcement action. It does not itself reverse a transfer or decide criminal liability, so notify the payment provider separately.

National Bureau of Investigation

You may submit information through the NBI’s official online complaint page or approach the NBI Cybercrime Division or an appropriate regional or district office.

The NBI’s published procedure for computer-crime assistance includes completing a complaint sheet, undergoing an initial interview, executing sworn statements or submitting affidavits, and providing supporting documents or relevant devices. The service is listed as having no filing fee. See the NBI’s Investigative Assistance for Victims of Computer Crimes guidance.

Use only pages under the official nbi.gov.ph domain. Do not pay a private “recovery agent” claiming that it can guarantee NBI action.

PAGCOR

Report the website, app, operator, or licence claim through PAGCOR’s official contact page. Include the exact URL, screenshots of the licence claim, account name, payment details, and communications.

PAGCOR can assess regulatory and licensing concerns, but a report to PAGCOR is not a substitute for promptly contacting your payment provider and law enforcement. Check licence claims only through PAGCOR’s official website; a logo, certificate image, social-media badge, or agent’s assurance is not reliable proof of authorization.

If the operator appears licensed, report the conduct to both PAGCOR and the operator’s formal complaints channel. Licensing does not prevent a fraud investigation, and a dispute with a licensee is not automatically a criminal case.

Bangko Sentral ng Pilipinas

For a complaint involving a BSP-supervised bank, e-wallet issuer, or other supervised financial institution, first use that institution’s Financial Consumer Protection Assistance Mechanism. Keep its reference number and response.

If the issue remains unresolved or the institution fails to act, escalate it through the BSP Consumer Assistance Mechanism. The BSP accepts complaints through its online assistant and lists alternative channels, including the official email address consumeraffairs@bsp.gov.ph.

Include:

a clear summary and the remedy requested;
your contact details;
a copy of the complaint first sent to the institution;
the institution’s response, if any; and
supporting documents.

The BSP route addresses the conduct of a supervised financial institution. It does not replace a criminal complaint against the scammers.

The platform or service provider

After preserving evidence, report the fraudulent account, advertisement, page, app, or group to the relevant platform, domain registrar, app store, hosting provider, or telecommunications company. State that the report concerns fraud and impersonation where applicable.

Platform reporting may remove content or restrict an account, but it is not a substitute for reporting to authorities. Preserve evidence first because takedown may make content harder for you to access.

What laws may apply?

The exact charge depends on how the scheme worked, who participated, where relevant acts occurred, and what the evidence proves.

Possible legal frameworks include:

Estafa under the Revised Penal Code: This may apply when money or property was obtained through legally punishable deceit, subject to proof of all required elements.
Republic Act No. 10175: Crimes under the Revised Penal Code or special laws committed by, through, or with information and communications technology may fall under Section 6 of the Cybercrime Prevention Act, with the statutory consequence stated there.
Republic Act No. 12010: AFASA prohibits specified conduct involving financial accounts, including money-mule activities and social-engineering schemes. Liability depends on the acts, intent, and statutory definitions. See the full text of AFASA.
Republic Act No. 8484: Unauthorized or fraudulent use of cards or other covered access devices may implicate the Access Devices Regulation Act.
Data Privacy Act: Unauthorized processing, disclosure, or misuse of personal information may create a separate privacy issue under Republic Act No. 10173.

Do not label a person publicly as a criminal based only on suspicion. Give identifying information and evidence to the authorities, regulator, payment provider, and relevant platform. Public accusations can create separate legal risks and may also alert suspects before records or funds are secured.

What should a written complaint contain?

A useful complaint is factual, chronological, and supported by documents. State:

Your full name and reliable contact details.
The operator’s name, website, app, usernames, telephone numbers, and claimed licence.
How and when you encountered the offer.
The precise statements that caused you to pay or disclose information.
Each transaction’s date, amount, reference number, and destination.
What happened when you tried to withdraw or complain.
Any later demands, threats, impersonation, or unauthorized transactions.
The total amount you personally transferred or lost, without including speculative winnings as money paid.
The evidence attached and where original files are stored.
Reports already made and their reference numbers.
The action requested, such as investigation, preservation of records, or tracing of funds.

Separate what you personally saw from what another person told you. Do not exaggerate the amount or insert facts you cannot support. If several victims are involved, each should preserve their own records and be prepared to provide an individual statement.

Common mistakes to avoid

Waiting for the scammer’s promised “final verification” before calling the bank.
Paying a supposed tax, bond, insurance fee, or clearance charge to release winnings.
Sending an OTP or approving a login because someone claims to be investigating the fraud.
Relying only on social-media reports instead of contacting the payment provider and law enforcement.
Deleting the app, account, or conversation before preserving evidence.
Posting complete account numbers, IDs, wallet credentials, or personal data publicly.
Altering screenshots or submitting only disconnected images without dates and context.
Assuming a PAGCOR logo proves that a website is licensed.
Hiring a recovery service that asks for an advance fee or promises guaranteed reimbursement.
Letting another person use your bank or e-wallet account to receive and forward casino payments. That conduct may expose the account owner to investigation under AFASA.
Reporting a fabricated or knowingly false transaction. BSP rules specifically require safeguards against malicious use of the temporary-hold process.

When legal help is urgent

Consult a Philippine lawyer promptly if:

the loss is substantial or involves several victims;
funds were converted into cryptocurrency or transferred through many accounts;
the scammer threatens violence, exposure of private material, or harm to your family;
your identity was used to open accounts or obtain credit;
law enforcement asks you to surrender a device containing confidential business or privileged material;
you received a subpoena, prosecutor’s notice, warrant, or court document;
your own account has been frozen or identified as part of the transaction chain;
you acted as an agent, recruiter, cashier, account holder, or fund-transfer intermediary; or
the operator argues that the transaction was a valid wager while you maintain that the game, balance, or withdrawal process was fabricated.

A lawyer can assess possible criminal, civil, regulatory, and contractual remedies. Recovery and liability depend on the documents, applicable terms, location of the parties and assets, and evidence of deception or unauthorized access.

Frequently asked questions

Can PAGCOR return my money?

PAGCOR’s role is regulatory. Reporting may assist licensing or enforcement action, but a PAGCOR complaint does not automatically produce a refund. Notify the payment provider and law enforcement separately.

Should I report even if the amount is small?

Yes. Preserve the evidence and report promptly. Smaller transactions can still be relevant to a wider pattern, and the amount does not determine whether you should secure your accounts.

Can my bank reverse an InstaPay, PESONet, or e-wallet transfer?

Not automatically. A completed transfer may be difficult to reverse, particularly after the recipient withdraws or moves the funds. Immediate reporting may allow the institution to trace the transaction or temporarily hold funds that remain reachable under applicable law and procedures.

What if I voluntarily entered the OTP?

Report anyway and explain exactly how the OTP was obtained. A scammer may have induced authorization through deception. Whether the provider must reimburse you depends on the facts, applicable consumer-protection rules, security controls, and the institution’s investigation.

Do I need a lawyer to file a report?

Generally, you may report directly to the PNP, NBI, PAGCOR, and your financial institution without a lawyer. Legal assistance becomes especially useful where the loss is large, the facts are disputed, several jurisdictions are involved, or you may face allegations yourself.

May I report anonymously?

Some agencies or platforms may accept information without immediately requiring a complete sworn complaint. However, investigation or prosecution will commonly require verifiable evidence and may require your identity, interview, affidavit, or testimony. Ask the receiving agency what confidentiality protections and follow-up requirements apply.

What if the casino is based outside the Philippines?

Report locally if you are in the Philippines, paid from a Philippine account, or experienced relevant acts here. Cross-border location may complicate identification, evidence gathering, jurisdiction, and recovery, but it is not a reason to delay.

Is a displayed casino balance proof that I am owed that amount?

Not necessarily. A screen balance may be fabricated, may include conditional bonuses, or may be subject to valid terms. Preserve the display together with deposits, game records, withdrawal rules, and communications. Investigators will assess the complete evidence.

How long do I have to report?

Different offenses and remedies have different prescriptive periods and contractual deadlines. Payment-dispute windows can also be much shorter than criminal prescriptive periods. Do not wait: report to the payment provider and authorities as soon as the suspected scam is discovered.

Official sources

This article provides general legal information, not legal advice or a prediction of any complaint’s outcome. Procedures and liability depend on the evidence and the agencies or institutions involved. Official sources were checked on July 27, 2026.