Being scammed is stressful, but the first few hours matter. In the Philippines, reporting a scam is not one single action: you may need to alert your bank or e-wallet, preserve electronic evidence, report the account to the platform, contact cybercrime authorities, and file a sworn criminal complaint. Acting quickly gives banks and investigators a better chance of tracing the transaction, preserving account records, and stopping the money from moving through additional “mule” accounts.

The correct reporting route depends on what happened. A fake online seller may involve estafa and consumer-protection remedies. A phishing attack may fall under cybercrime and financial-account scamming laws. A fraudulent investment scheme should also be reported to the Securities and Exchange Commission. This guide explains what to do immediately, where to report the scam, what evidence to prepare, and what normally happens after a complaint is filed.

What to Do Immediately After Being Scammed

1. Contact your bank or e-wallet before doing anything else

Call the official fraud hotline of the bank or e-wallet you used. Do not use a telephone number sent by the scammer or found in the suspicious message.

Tell the institution that:

The transaction resulted from fraud, phishing, account takeover, social engineering, or an unauthorized transfer.
You are formally disputing the transaction.
You want the recipient account traced and the disputed funds temporarily held.
You want your account secured against further transactions.
You need a case or reference number and written acknowledgment of your report.

Provide the transaction reference number, amount, date and time, recipient’s account name, account number or mobile number, and a brief explanation of the scam.

Under the Anti-Financial Account Scamming Act, Republic Act No. 12010 of 2024, banks, e-wallet providers, and other institutions supervised by the Bangko Sentral ng Pilipinas may temporarily hold funds involved in a disputed transaction. The statutory maximum is 30 calendar days unless a court extends the period. BSP Circular No. 1215, issued in 2025, provides the implementing rules for temporary holding and coordinated verification. A hold is not automatic, and recovery is not guaranteed, especially if the money has already been withdrawn or transferred outside the regulated financial system. (Lawphil)

Report the transaction even when several hours or days have passed. The receiving account, related accounts, and transaction trail may still be useful to investigators.

2. Secure your accounts and devices

If you disclosed a password, one-time PIN, card number, security code, recovery phrase, or personal information:

Change the affected password immediately.
Change passwords on other accounts where you reused the same credentials.
Log out all active sessions.
Block or temporarily lock affected cards and accounts.
Contact your mobile network if your SIM stopped working or may have been replaced.
Remove unfamiliar devices and linked accounts.
Check whether the scammer changed your recovery email, mobile number, or transaction limits.
Scan the device for malware if you installed an application or opened a suspicious file.

Do not reset or discard the device until important evidence has been copied and preserved.

3. Preserve the evidence before blocking the scammer

Save more than a few cropped screenshots. Investigators need information that identifies the account, transaction, and sequence of events.

Preserve:

The scammer’s profile name, username, profile URL, page ID, mobile number, and email address
The complete conversation, including earlier messages that created trust or made false promises
Advertisements, product listings, livestreams, group posts, and sponsored content
Payment instructions and QR codes
Transaction receipts and bank or e-wallet statements
Order confirmations, invoices, contracts, and delivery details
Email headers, not merely the visible email message
Call logs, voicemails, and existing recordings
Names and statements of witnesses
Written replies from the bank, platform, courier, or merchant
The original files of photographs, videos, PDFs, or documents sent by the scammer

Capture the URL, account identifier, date, and time whenever possible. Avoid editing, annotating, or repeatedly compressing the original files. Keep one untouched copy and prepare a separate set for submission.

Republic Act No. 10175 allows the preservation of specified computer data for at least six months after the proper preservation process is initiated. Prompt reporting is important because platforms and service providers do not retain every type of record indefinitely. (Lawphil)

Do not secretly record private telephone or online conversations without first considering the Anti-Wiretapping Act, Republic Act No. 4200. Existing messages, voicemails, call logs, and recordings voluntarily sent by the scammer may be preserved, but making a covert recording can create a separate legal issue.

Is It a Scam or Only a Failed Transaction?

Not every unpaid debt, delayed delivery, or broken promise is automatically a criminal scam.

A common criminal charge is estafa by false pretenses under Article 315(2)(a) of the Revised Penal Code. In general, the prosecution must show that:

The accused made a false representation or used deceit.
The deceit occurred before or at the time the victim gave the money or property.
The victim relied on the false representation.
The victim suffered financial damage.

The timing of the deceit is important. If a legitimate seller accepted an order but later encountered a delivery problem, the dispute may primarily involve a refund, breach of contract, or consumer complaint. If the seller used a stolen identity, fake inventory, fabricated receipts, false business registrations, or the same scheme against several victims, those facts support an inference that the fraudulent intent existed from the beginning. The Supreme Court has repeatedly explained that the false pretense must precede or accompany the victim’s transfer of money. (Lawphil)

A civil or consumer remedy and a criminal complaint may sometimes proceed at the same time. For example, a buyer may seek a refund through the Department of Trade and Industry while law-enforcement authorities investigate evidence of deliberate fraud.

Philippine Laws Commonly Used Against Scammers

Revised Penal Code: Estafa

Article 315 of the Revised Penal Code penalizes several forms of estafa, including fraud through false pretenses, fraudulent acts, misappropriation, and certain bad-check transactions.

The precise penalty depends on the type of estafa, the amount involved, applicable amendments such as Republic Act No. 10951, and the circumstances of the offense.

Cybercrime Prevention Act of 2012

Republic Act No. 10175 covers offenses such as:

Illegal access to a computer account or system
Computer-related fraud
Computer-related identity theft
Data and system interference
Traditional crimes committed through information and communications technology

Section 6 generally imposes a penalty one degree higher when a crime under the Revised Penal Code or a special law is committed through information and communications technology. (Lawphil)

Anti-Financial Account Scamming Act of 2024

Republic Act No. 12010, or AFASA, specifically addresses:

Selling, lending, renting, or buying financial accounts
Using accounts to receive or transfer criminal proceeds
Recruiting money mules
Opening accounts under false identities
Social-engineering schemes used to obtain financial credentials
Fraud involving bank accounts, e-wallets, and other financial accounts

AFASA also authorizes temporary holding and coordinated verification of disputed funds. It recognizes potential restitution when an institution fails to maintain adequate risk controls or exercise the degree of diligence required by law, although liability depends on the facts and is not automatic. A criminal conviction is not always a prerequisite for restitution under the statute. (Lawphil)

Access Devices Regulation Act

Republic Act No. 8484, as strengthened by Republic Act No. 11449, applies to fraudulent activities involving credit cards, debit cards, account numbers, access codes, telecommunications identifiers, and similar access devices. (Lawphil)

Internet Transactions Act of 2023

Republic Act No. 11967 protects online consumers and regulates online merchants, e-retailers, and digital platforms. It can be relevant when a transaction involves an identifiable merchant or online marketplace rather than an anonymous criminal account. The law places primary responsibility on an online merchant or e-retailer for liabilities arising from its goods or services, subject to the law’s specific rules. (Lawphil)

Where to Report a Scammer in the Philippines

Where to report	Best used for	What the office can do
Bank or e-wallet fraud department	Unauthorized transfers, phishing, social engineering, account takeover	Secure the account, trace transactions, coordinate with receiving institutions, and potentially hold disputed funds
CICC Hotline 1326	Online scams and urgent cybercrime reports	Receive and coordinate scam reports through the government’s anti-scam response system
PNP Anti-Cybercrime Group	Social-media scams, hacking, phishing, identity theft, online extortion, digital fraud	Investigate, preserve digital evidence, identify suspects, and prepare cases for prosecution
National Bureau of Investigation	Organized, complex, cross-regional, or cyber-enabled fraud	Conduct investigation, digital forensics, surveillance, and case build-up
Local police station	Immediate documentation, local suspect, threats, or an urgent incident	Make a blotter entry, receive an initial report, and refer the case to the appropriate cybercrime unit
Department of Trade and Industry	Online seller disputes involving a business or merchant	Conduct consumer mediation and administrative complaint handling
Securities and Exchange Commission	Fake investments, Ponzi schemes, unauthorized securities, illegal lending	Investigate regulated entities, issue advisories or orders, and receive investment-scam complaints
Bangko Sentral ng Pilipinas	Unresolved complaint against a BSP-supervised bank, e-wallet, or financial institution	Escalate the consumer complaint after the institution has first been given an opportunity to respond
National Privacy Commission	Identity misuse, malicious disclosure, improper processing, or personal-data violations	Investigate and adjudicate complaints under the Data Privacy Act

CICC Hotline 1326

The government identifies 1326 as an anti-scam reporting hotline. It is intended for reports involving online scams, compromised accounts, fraudulent messages, and related cyber incidents. Reports may also be initiated through the CICC online reporting page. (Facebook)

A hotline report is useful for rapid coordination, but it may not replace the sworn complaint and personal appearance required for a full criminal case.

PNP Anti-Cybercrime Group

You may approach the PNP Anti-Cybercrime Group or a regional anti-cybercrime unit. Bring your identification, evidence, transaction records, and a chronological account.

For an urgent threat, blackmail attempt, or continuing account intrusion, report immediately rather than waiting until every document is complete.

National Bureau of Investigation

The National Bureau of Investigation handles cybercrime and fraud investigations through its specialized and regional offices. Complex cases involving multiple victims, several bank accounts, organized groups, or suspects operating across provinces may require extensive record requests and coordination. (National Bureau of Investigation)

Department of Trade and Industry

For a dispute involving an identifiable online merchant, file through the DTI Consumer CARe portal. DTI also accepts consumer complaints through its Fair Trade Enforcement Bureau and regional or provincial offices.

DTI mediation can help obtain a refund or replacement, but it does not substitute for a police, NBI, or prosecutor’s complaint when there is evidence of criminal fraud. (DTI Consumer Care System)

Securities and Exchange Commission

Report fraudulent investments through the SEC iMessage ticketing system. Select the service for eComplaints on Investment Scams under the Enforcement and Investor Protection Department. The same portal includes complaint channels for financing and lending companies. (Securities and Exchange Commission)

Bangko Sentral ng Pilipinas

First complain directly to the bank, e-wallet provider, or other BSP-supervised financial institution. If the matter remains unresolved, escalate it through the BSP Consumer Assistance Mechanism.

The BSP accepts complaints through its Online Buddy, email, mail, telephone, and designated consumer-assistance desks. Supporting documents should include your original complaint to the institution and its response, if any. (Bangko Sentral ng Pilipinas)

National Privacy Commission

When the scam involves misuse, disclosure, or unauthorized processing of your personal information, you may file a separate complaint through the National Privacy Commission’s complaint procedure.

The NPC generally requires a completed complaint form or verified complaint, supporting evidence, identification, and notarization. (National Privacy Commission)

How to File a Formal Criminal Complaint

1. Prepare a clear chronological narrative

Write the events in date-and-time order. Explain:

How you encountered the scammer
What the scammer represented
Why you believed the representation
What money, property, credentials, or access you gave
Where the money was sent
What happened afterward
What attempts you made to recover the money
What facts indicate that the representation was fraudulent from the beginning

Use exact statements rather than conclusions. For example, “The seller sent a photograph of a supposed warehouse and claimed the item was ready for shipment” is more useful than simply saying, “The seller is a scammer.”

2. Organize and label your evidence

Mark each document as an annex:

Annex A — Screenshot of advertisement
Annex B — Complete chat conversation
Annex C — Transfer receipt
Annex D — Bank statement
Annex E — Scammer’s profile and URL
Annex F — Bank fraud-report acknowledgment
Annex G — Statement of another victim

Prepare an evidence index so investigators can understand the file without searching through hundreds of unsorted screenshots.

3. Execute a complaint-affidavit

A complaint-affidavit is your sworn written statement describing the offense and identifying the supporting evidence. It should contain facts within your personal knowledge and identify each attachment.

For a preliminary investigation, the complaint is ordinarily supported by the complainant’s affidavit, witness affidavits, and documents establishing probable cause. The affidavit must be sworn before a prosecutor or another officer authorized to administer oaths. Depending on the receiving office, a properly notarized affidavit may be submitted initially, although the prosecutor or investigator may require personal confirmation.

Bring a valid government-issued ID and several photocopies. Local offices may require one copy for the file and additional copies for each named respondent.

4. File with law enforcement or the prosecutor

You may first submit the case to the PNP Anti-Cybercrime Group or NBI for investigation. Investigators can request records, coordinate with financial institutions, identify the account holder, and prepare the matter for referral to the prosecutor.

A criminal complaint may also be filed with the appropriate city or provincial prosecutor’s office. During preliminary investigation, the prosecutor determines whether there is probable cause to charge the respondent in court. The respondent is normally allowed to submit a counter-affidavit before the prosecutor resolves the case.

A police blotter entry alone does not necessarily begin a criminal prosecution. Ask whether your submission has been treated as:

An incident report
A request for investigation
A formal complaint
A case referral to the prosecutor

Keep the reference number and obtain a receiving copy.

Documents to Bring

Document	Practical purpose
Valid government-issued ID	Establishes the complainant’s identity
Complaint-affidavit	Provides the sworn factual basis of the case
Chronology of events	Helps investigators understand the sequence
Evidence index	Connects each allegation to an attachment
Transfer receipts and statements	Proves payment, amount, recipient, date, and reference number
Complete chats and emails	Shows the representations, instructions, and admissions
Profile URLs and account identifiers	Helps platforms and investigators identify the account
Bank or e-wallet case reference	Shows that the disputed transaction was promptly reported
Witness affidavits	Supports facts observed by other people
Device containing original evidence	May be needed for inspection or forensic examination

Do not hand over the only copy of an original document or device without a proper acknowledgment or evidence receipt. Keep backup copies, but do not alter the original data.

Is Barangay Conciliation Required?

Barangay conciliation is not automatically required for every scam complaint.

Under Sections 408 and 412 of the Local Government Code, barangay conciliation generally applies when the parties are natural persons who actually reside in the same city or municipality and the dispute is within the lupon’s authority. Important exceptions include offenses punishable by imprisonment exceeding one year or a fine exceeding ₱5,000, as well as disputes involving parties who do not reside in the same city or municipality. (Lawphil)

Most anonymous online scams, cross-city transactions, organized fraud schemes, and cases involving serious cybercrime offenses do not fit the usual barangay process. However, a low-value dispute between identified individuals living in the same city or municipality may require barangay proceedings, depending on the offense and penalty.

Do not assume that a barangay certificate is always unnecessary. Ask the investigating prosecutor or receiving officer whether the Katarungang Pambarangay requirements apply to the particular facts.

Can You Recover Money From a Scammer?

Recovery is possible, but it depends heavily on timing and traceability.

The best chance usually exists when:

The transfer is reported immediately.
The funds remain in the recipient account.
The money moved only through regulated Philippine institutions.
The receiving institution can identify and hold the disputed funds.
The account holder and subsequent recipients can be traced.
The victim provides complete transaction information.

Recovery becomes more difficult when the funds have been withdrawn in cash, converted into cryptocurrency, transferred through several mule accounts, sent overseas, or moved through unregulated channels.

AFASA allows institutions to hold disputed funds for coordinated verification and provides possible liability and restitution in specified circumstances. It does not mean every scam loss must automatically be reimbursed by the bank. Investigators will examine whether the transaction was authorized, whether credentials were voluntarily disclosed, what security controls were used, how the institution responded, and whether the institution complied with BSP requirements. (Lawphil)

A criminal conviction may also carry civil liability, including restitution or payment of the victim’s proven loss.

Common Reporting Mistakes

Waiting for the scammer to promise another refund

Scammers often delay victims by claiming that a refund is “processing” or that an additional payment is needed for tax, insurance, verification, customs, or account release. Do not send more money to recover the first payment.

Reporting only to Facebook, Telegram, or the marketplace

Platform reporting may remove an account, but it does not automatically freeze the bank account or initiate a Philippine criminal case.

Submitting only cropped screenshots

Cropped screenshots may omit the URL, username, date, or surrounding conversation needed to establish authenticity and context.

Deleting the conversation after taking screenshots

The original conversation, device, metadata, and account identifiers may be more valuable than the screenshots alone.

Publicly posting accusations and personal information

Public accusations can expose a victim to harassment, retaliation, privacy complaints, or even cyberlibel allegations if the information is inaccurate. Submit evidence privately to banks, platforms, regulators, and law-enforcement authorities.

Paying a “recovery agent”

Victims are frequently targeted a second time by people claiming they can hack, trace, or retrieve the funds for an advance fee. Verify any person claiming to represent a government agency, bank, law office, or digital-forensics company.

Reporting From Abroad or as a Foreigner

A victim does not have to be a Filipino citizen to report a scam affecting a Philippine account, institution, suspect, or victim.

AFASA gives Philippine courts jurisdiction in circumstances that include damage to a person who was in the Philippines when the offense occurred or involvement of a financial account maintained with an institution operating in the Philippines. It also recognizes international cooperation for investigations and electronic evidence. (Lawphil)

A victim abroad may begin by:

Reporting the transfer to the sending and receiving financial institutions
Calling Hotline 1326 or contacting Philippine cybercrime authorities
Preserving electronic evidence
Preparing a sworn complaint-affidavit
Authorizing a representative in the Philippines when appropriate

An affidavit signed abroad may be notarized through a Philippine embassy or consulate. Another possible route is notarization under the law of the foreign country followed by an apostille when both countries participate in the Apostille Convention. Requirements can vary by prosecutor or investigating office, so confirm the required form before sending the original document. Philippine evidence rules recognize apostilles as a method of authenticating qualifying foreign public documents. (Lawphil)

A special power of attorney may allow a Philippine representative to submit documents and follow up, but investigators may still require the victim’s personal affidavit, interview, or testimony.

Typical Fees and Timelines

Stage	Typical cost or timing
Reporting to a bank, e-wallet, CICC, PNP, or NBI	Normally no government complaint fee
Notarization	Depends on the notary and number of documents
Photocopying, printing, courier, or apostille	Paid by the complainant
Bank or e-wallet fraud acknowledgment	Often issued immediately or within the institution’s internal processing period
Temporary holding and coordinated verification	Up to 30 calendar days under AFASA rules, unless extended by a court
Police or NBI investigation	May take weeks or months depending on identification, account records, and cooperation of service providers
Preliminary investigation	Rules prescribe procedural periods, but actual completion may take longer because of service, extensions, multiple respondents, and caseload
Court proceedings	Commonly take substantially longer, especially in multi-accused or technically complex cases

A delay does not necessarily mean the complaint has been abandoned. Follow up using the official reference number and keep written records of every submission.

Frequently Asked Questions

Where should I report an online scammer in the Philippines?

Report the transaction immediately to your bank or e-wallet, then contact CICC Hotline 1326 and file with the PNP Anti-Cybercrime Group or NBI. Use DTI, SEC, BSP, or NPC as additional channels when the facts fall within their regulatory authority.

Can I report a scammer using only a mobile number?

Yes. A mobile number, account number, profile URL, transaction reference, QR code, and conversation may provide investigative leads. You do not need to know the scammer’s true name before making an initial report.

Can the police trace a GCash, Maya, or bank account?

Law-enforcement authorities can seek subscriber, account, transaction, and related records through lawful investigative procedures. The name displayed in the application may belong to a money mule rather than the person who designed the scam.

How do I report a Facebook Marketplace scam?

Save the listing, seller profile URL, messages, payment receipt, delivery representations, and platform report. Contact the bank or e-wallet first, report the profile to Facebook, and submit the evidence to CICC, PNP ACG, or NBI. An identifiable business may also be reported to DTI.

Can I file a case when the amount is small?

Yes. A small amount does not automatically prevent a criminal or consumer complaint. The available procedure, applicable penalty, barangay requirements, and practical investigation priorities may depend on the amount and circumstances.

Do I need a lawyer to report a scammer?

A lawyer is not ordinarily required to make an initial bank report, hotline report, police report, NBI complaint, or consumer complaint. Legal assistance can become important when the facts are complex, several offenses are involved, the complaint was dismissed, or substantial money is at stake.

Will the bank automatically refund my money?

No. The bank or e-wallet will investigate the transaction, security controls, account activity, and available funds. AFASA creates stronger holding, verification, and possible restitution mechanisms, but reimbursement remains fact-dependent.

What if the scammer is outside the Philippines?

Report the scam to Philippine authorities when a Philippine victim, account, institution, or transaction is involved. Cross-border cases are harder because they may require international record requests and cooperation, but the location of the scammer is not a reason to avoid reporting.

Can I report anonymously?

Anonymous information may help authorities identify patterns, but recovering money or prosecuting a case normally requires an identifiable complainant, supporting documents, and eventually a sworn statement.

What if the scammer returns part of the money?

Preserve proof of the partial refund and do not sign a waiver without understanding its effect. A partial repayment does not necessarily erase an already completed crime, although it may affect the remaining civil claim and how the parties or authorities evaluate the case.

Key Takeaways

Report the transaction to the bank or e-wallet immediately and request a fraud case number, coordinated verification, and temporary holding of disputed funds.
Preserve complete chats, profile URLs, transaction records, account details, emails, and original electronic files.
Call CICC Hotline 1326 and file a formal report with the PNP Anti-Cybercrime Group or NBI.
Prepare a chronological complaint-affidavit with organized and clearly labeled evidence.
Use DTI for merchant disputes, SEC for investment scams, BSP for unresolved financial-institution complaints, and NPC for personal-data violations.
A police blotter or platform report alone may not start a criminal prosecution.
Non-delivery or nonpayment is not automatically estafa; evidence that the deceit existed before or during payment is critical.
Recovery is most likely when the transaction is reported quickly and the funds remain traceable within regulated financial accounts.