Yes. Police can help you report, investigate, preserve digital evidence, trace accounts, coordinate with banks or e-wallets, and build a criminal case after an online scam in the Philippines. But there is one important reality: the police usually cannot simply “get your money back” on the spot. Recovery depends on how fast you report, whether the money is still in the receiving account, whether the bank or e-wallet can temporarily hold the funds, and whether the scammer or mule account can be identified.

For most victims, the best approach is not “police only.” You should act on two tracks at the same time: immediate bank/e-wallet reporting to stop or hold the funds, and law-enforcement reporting to investigate the scam and support criminal recovery. The first few hours matter.

What Police Can and Cannot Do After an Online Scam

The Philippine National Police Anti-Cybercrime Group (PNP-ACG), local police stations, and the National Bureau of Investigation Cybercrime Division can assist victims of online scams. Their role is mainly investigative and prosecutorial support.

Police can help with:

Receiving your complaint or blotter report
Referring the case to a cybercrime unit
Taking your sworn statement or complaint-affidavit
Preserving digital evidence
Requesting or applying for cybercrime warrants when legally required
Coordinating with banks, e-wallets, telcos, platforms, or other agencies
Identifying suspects, mule accounts, IP logs, device information, phone numbers, and linked accounts when legally accessible
Referring the case to the prosecutor for preliminary investigation
Supporting possible arrest, prosecution, and restitution if a case is filed and proven

The NBI Citizen’s Charter for computer-crime complaints states that the general public may request investigative assistance from the Cybercrime Division, with initial complaint intake, interview, sworn statements, and evidence collection as part of the process. The listed government fee is none for that service. (National Bureau of Investigation)

Police usually cannot:

Force GCash, Maya, a bank, Facebook, Telegram, or Shopee/Lazada to return your money immediately
Freeze a bank account by verbal request alone
Reveal the owner of a bank account, SIM, or social media profile without proper legal process
Hack into a scammer’s account
Arrest someone based only on screenshots, unless the legal requirements for a warrantless arrest are present
Guarantee recovery if the funds were already withdrawn, converted to crypto, transferred abroad, or moved through multiple mule accounts

In practice, money recovery often starts with the financial institution, not the police. Police action becomes very important when the bank or e-wallet needs a complaint reference, when the case involves a syndicate, when the suspect must be identified, or when criminal prosecution is needed.

The Legal Basis: What Crime Is an Online Scam in the Philippines?

An online scam may fall under several Philippine laws, depending on how it was done.

Estafa Under Article 315 of the Revised Penal Code

Many online scams are treated as estafa, also called swindling, under Article 315 of the Revised Penal Code. Estafa generally involves deceit or fraudulent means that caused the victim to part with money or property.

Common examples include:

A fake online seller who never intended to deliver the item
A person pretending to be a friend or relative asking for emergency money
A fake job recruiter collecting “processing fees”
A romance scammer asking for remittances
A fake investment scheme promising guaranteed high returns
A person using false identity, fake documents, or fake proof of payment

The Supreme Court has described the usual elements of estafa as: a false pretense, fraudulent act, or fraudulent means; the victim’s reliance on that fraud; and damage suffered because the victim was induced to part with money or property. (Lawphil)

Cybercrime Under RA 10175

If the scam was done using Facebook, Messenger, Telegram, Viber, email, SMS, online banking, e-wallets, websites, apps, or other information and communications technology, the case may also involve the Cybercrime Prevention Act of 2012, or Republic Act No. 10175.

Section 6 of RA 10175 provides that crimes under the Revised Penal Code or special laws, when committed through information and communications technology, are covered by the Cybercrime Prevention Act and may carry a penalty one degree higher than the ordinary offense. (Human Rights Library)

This matters because a scam that would normally be estafa can become cyber-related estafa when committed online.

RA 10175 also recognizes computer-related offenses such as illegal access, data interference, computer-related fraud, and identity-related cybercrimes. In Disini v. Secretary of Justice, the Supreme Court reviewed several provisions of RA 10175 and discussed the law’s cybercrime offenses, including offenses against computer data and computer systems. (Supreme Court E-Library)

Financial Account Scamming Under RA 12010

A newer and very important law is Republic Act No. 12010, the Anti-Financial Account Scamming Act (AFASA), signed on July 20, 2024. AFASA specifically targets scams involving bank accounts, e-wallets, payment accounts, money mule accounts, and social engineering. (Lawphil)

AFASA is highly relevant when money was sent to:

A bank account
GCash
Maya
A payment service provider
A digital wallet
An account later used as a “mule” to receive or move scam proceeds

AFASA penalizes money muling activities, including using, borrowing, buying, renting, selling, lending, or recruiting someone to use a financial account to receive or transfer proceeds known to come from crimes, offenses, or social engineering schemes. It also penalizes social engineering schemes, such as obtaining sensitive financial information through deception or electronic communications. (Lawphil)

This is why a person who says “pinahiram ko lang ang GCash ko” or “pinagamit ko lang ang bank account ko” may still face serious legal exposure if the account was used for scam proceeds.

Can the Bank or E-Wallet Hold the Money?

Yes, in some cases. This is the part victims should act on immediately.

Under AFASA, banks, e-wallets, and BSP-supervised institutions may temporarily hold funds subject of a disputed transaction for a period prescribed by the Bangko Sentral ng Pilipinas, which must not exceed 30 calendar days, unless extended by a court. A transaction may be considered disputed if there is reasonable ground to believe it is unusual, has no clear economic purpose, came from an unlawful source, or was facilitated through social engineering. (Lawphil)

AFASA also requires a coordinated verification process once a complaint, information from another institution, or fraud-management detection arises. This process can involve the institutions and account owners connected to the disputed transaction. (Lawphil)

The practical point is simple: call and message your bank or e-wallet immediately. Do not wait for the police report before making the first report to the financial institution. If the receiving account still has the funds, speed can make the difference.

What to Do Immediately After You Realize You Were Scammed

Step-by-Step Guide to Reporting an Online Scam in the Philippines

1. Contact your bank or e-wallet immediately

Use the official hotline, app help center, branch, or verified support channel of your bank or e-wallet.

Tell them clearly:

“I am reporting a scam transaction.”
“Please treat this as a disputed transaction.”
“Please check if the funds can be held, recalled, or flagged.”
“Please give me a case number or ticket number.”
“Please tell me what documents you need for investigation.”

Prepare these details:

Information	Why it matters
Date and exact time of transfer	Helps trace the transaction quickly
Amount sent	Identifies the disputed funds
Reference number	Used by banks/e-wallets to locate the transaction
Sender account or wallet	Confirms you are the complainant
Receiver name, number, wallet, or account	Helps locate the receiving account
Screenshots of conversation	Shows deception or fraudulent inducement
Police/NBI reference number, if already available	Often requested later by financial institutions

If your complaint is not resolved by the bank or e-wallet, the BSP says financial consumers may escalate complaints through the BSP Online Buddy (BOB) or BSP Consumer Assistance Mechanism after first raising the concern with the BSP-supervised financial institution. (BSP)

2. Preserve all evidence before confronting the scammer

Do not delete chats, block the account immediately, or unsend anything before saving evidence.

Preserve:

Screenshots of the entire conversation
The profile URL, username, phone number, email address, Telegram handle, or Viber number
The online listing, post, advertisement, group post, or marketplace page
Payment receipts and reference numbers
Proof of account name and account number or wallet number
Delivery details, tracking numbers, or fake invoices
Voice notes, call logs, emails, and SMS messages
Any ID, business permit, DTI/SEC registration, or proof sent by the scammer
The dates and times of each important event

For screenshots, include the date, time, account name, URL, and full context whenever possible. Courts and investigators prefer evidence that shows a clear sequence, not isolated cropped images.

3. File a report with PNP-ACG, the local police, or NBI Cybercrime Division

You may report to:

Office	Best for
PNP Anti-Cybercrime Group	Online scams, hacked accounts, identity theft, cyber-enabled estafa, mule accounts
Local police station	Initial blotter, local suspect, urgent report, basic documentation
NBI Cybercrime Division	Cybercrime investigation, complex online fraud, digital evidence, multi-victim scams
DOJ Office of Cybercrime	Cybercrime coordination, referrals, and prosecution support
SEC	Investment scams, Ponzi schemes, unauthorized solicitation of investments
BSP	Complaints against banks, e-wallets, payment providers, and unresolved financial consumer issues

A local police blotter can be useful, especially if the bank or e-wallet asks for a police report. But for serious online scams, it is better to file with or request referral to a cybercrime unit because cybercrime investigators are more familiar with digital evidence, platform requests, and cyber warrants.

A PNP FOI response has directed scam victims to report to the PNP Anti-Cybercrime Group’s e-complaint channel or email for cybercrime-related complaints. (www.foi.gov.ph)

4. Prepare a clear written narrative

Your complaint should be chronological. Investigators need to understand exactly how the scam happened.

Use this format:

Who contacted whom?
Where did the communication happen?
What did the scammer promise or represent?
What made you believe the transaction was legitimate?
How much did you send?
Where did you send it?
What happened after payment?
What steps did you already take with the bank, e-wallet, platform, or barangay?
What evidence do you have?
What remedy are you requesting?

Avoid emotional but vague statements like “scammer po siya, paki-trace.” Instead, give investigators concrete facts: names, numbers, dates, accounts, links, screenshots, and transaction references.

5. Execute a complaint-affidavit if needed

For a formal criminal complaint, you will usually need a complaint-affidavit. This is your sworn written statement explaining the facts and attaching evidence.

A strong complaint-affidavit includes:

Your full name, address, contact number, and ID details
A factual narration of the scam
The amount lost
The exact account or wallet where money was sent
Screenshots and transaction receipts as annexes
Names or usernames of suspects, if known
A statement that the facts are true based on your personal knowledge
Notarization or oath before an authorized officer

If you are abroad, you may need to execute the affidavit before a Philippine Embassy or Consulate, or before a foreign notary with apostille or authentication, depending on where the document will be used. If a relative in the Philippines will file or follow up for you, prepare a Special Power of Attorney with proper notarization or consular acknowledgment.

6. Follow up with both law enforcement and the bank/e-wallet

After filing, keep your reference numbers:

Bank or e-wallet ticket number
BSP complaint reference, if escalated
Police blotter number
PNP-ACG or NBI complaint reference
Prosecutor docket number, if a criminal complaint is filed

The common bottleneck is that each office may be waiting for something from another office. The bank may ask for a police report. The police may ask for bank details. The prosecutor may ask for clearer affidavits. The platform may require a legal request before disclosing user data. Keep copies of every submission and response.

What If the Money Was Sent Through GCash, Maya, or Bank Transfer?

If the scam payment was recent, immediately report it through the official customer service channel of your e-wallet or bank. Ask whether they can:

Flag the transaction
Temporarily hold remaining funds
Coordinate with the receiving institution
Require verification from the receiving account owner
Provide a ticket number
Tell you what police or affidavit documents are needed

Do this even if you also plan to go to the police. AFASA gives financial institutions a framework for temporary holding and coordinated verification of disputed transactions, but the funds must still be traceable and available. If the scammer already withdrew the money, sent it to another wallet, bought crypto, or cashed out through an agent, recovery becomes much harder.

Can Police Freeze the Scammer’s Bank Account?

Usually, police do not freeze accounts by themselves. Freezing or holding funds usually happens through one of these mechanisms:

Mechanism	Who acts	When it may apply
Temporary holding of disputed funds	Bank, e-wallet, or BSP-supervised institution under AFASA and BSP rules	Fast-moving disputed transactions, social engineering, mule-account cases
Cybercrime warrants or related orders	Court, upon proper application by law enforcement or authorized agencies	Need for subscriber data, traffic data, account data, device search, or digital evidence
AMLC freeze order	Anti-Money Laundering Council through the Court of Appeals	Money laundering, large-scale fraud, predicate offenses, syndicate movement of funds
Court order in a criminal/civil case	Court	Restitution, damages, forfeiture, attachment, or execution after proper proceedings

AFASA expressly recognizes the authority of the BSP to investigate financial accounts involved in financial account scamming and allows information sharing with law enforcement for investigation and prosecution. It also provides that the BSP may request assistance from the NBI and PNP in investigating AFASA violations and enforcing cybercrime warrants and related orders. (Lawphil)

For money laundering matters, the Supreme Court has explained that AMLC freeze orders are issued by the Court of Appeals upon probable cause and are subject to safeguards, including limits on duration and a process to challenge or lift the freeze. (Supreme Court of the Philippines)

Can You Recover Money Through a Criminal Case?

Yes, but it is not automatic.

In a criminal case for estafa or cyber-related estafa, the court may order the accused to pay civil liability if convicted. This may include the amount defrauded, and in some cases damages, interest, or costs.

But there are practical issues:

The scammer may be using a fake identity.
The receiving account may belong to a mule.
The mule may have already passed the money to another person.
The suspect may be abroad.
The accused may have no attachable assets.
Criminal cases can take months or years.
A conviction does not guarantee actual collection if the accused is insolvent or hidden.

That is why immediate financial reporting is often more useful for short-term recovery, while police and prosecutor action are necessary for accountability and long-term recovery.

When Should You Report to the SEC Instead of Just the Police?

Report to the Securities and Exchange Commission (SEC) if the scam involved:

Investment contracts
“Guaranteed” returns
Crypto trading pools
Forex trading pools
Ponzi or pyramiding schemes
“Double your money” offers
Paid recruitment with investment returns
A company claiming SEC registration as proof it can solicit investments

SEC registration as a corporation is not the same as authority to solicit investments from the public. Investment-taking usually requires proper authority, registration, or licensing depending on the product.

The SEC maintains an online complaint and ticketing portal through SEC iMessage, where the public may submit complaints and check ticket status. (iMessage)

For investment scams, you may report to both the SEC and law enforcement. The SEC may issue advisories, investigate securities-law violations, or refer matters for criminal action, while police or NBI may investigate estafa, cybercrime, identity theft, or money-muling aspects.

Common Online Scam Scenarios and What Usually Happens

Fake online seller

This is common on Facebook Marketplace, Instagram, TikTok, Carousell, and buy-and-sell groups.

If the seller accepted payment but never intended to deliver, this may be estafa. If the seller initially had a real transaction but later failed to perform, the issue can sometimes look civil. The key question is whether there was fraud from the beginning.

Helpful evidence includes:

The item post
Seller’s representations
Payment receipt
Promise of delivery
Fake tracking number
Multiple victims
Deletion or blocking after payment

Hacked Facebook or Messenger account asking for money

The person in the profile picture may also be a victim. The actual offender may have taken over the account and used it to ask friends for money.

Report:

The hacked account to Facebook
The receiving wallet or bank to the financial institution
The incident to PNP-ACG or NBI Cybercrime Division

This may involve identity theft, illegal access, cyber-related fraud, estafa, and financial account scamming.

Fake job or work-from-home task scam

Victims are often asked to pay “activation,” “verification,” “tax,” “withdrawal,” or “upgrade” fees. Many of these scams use Telegram, WhatsApp, Viber, or fake websites.

Preserve:

Recruitment messages
Task platform screenshots
Payment instructions
Wallet/account details
Names of group admins
Promised commissions
Withdrawal denial messages

These cases often involve mule accounts and may fall under AFASA.

Romance scam

Romance scams are difficult because payments may be spread out over time and may look voluntary. Still, if money was obtained through lies, fake emergencies, fake identity, or manipulation, it may support estafa or cyber-related fraud.

Evidence is usually extensive, so organize it by date and amount.

Crypto scam

Crypto recovery is difficult once assets leave a Philippine-regulated platform or move to private wallets. Still, report to:

The originating bank or e-wallet
The crypto exchange, if identifiable
PNP-ACG or NBI
SEC, if the scheme involved investment solicitation

Screenshots of wallet addresses, transaction hashes, exchange accounts, and group chats are important.

Scam by someone you personally know

If the person is known, local police, barangay documentation, demand letters, and prosecutor complaints may be more practical. Barangay conciliation may apply in some disputes between individuals living in the same city or municipality, but many cybercrime and serious criminal complaints go directly to law enforcement or the prosecutor.

Documents Usually Needed

Document or Evidence	Notes
Valid government ID	Passport, driver’s license, national ID, UMID, or other acceptable ID
Complaint-affidavit	Usually needed for formal criminal complaint
Transaction receipt	Must show amount, date, time, reference number
Bank/e-wallet complaint ticket	Shows you reported promptly
Screenshots of chats	Include full names, usernames, numbers, dates, and context
Profile links and URLs	Better than screenshots alone
Scam post or listing	Save before it is deleted
Proof of non-delivery or refusal	Useful in online seller cases
Demand message, if safe and appropriate	Shows refusal or fraudulent intent, but do not threaten
Police blotter or cybercrime complaint reference	Often requested by banks/e-wallets
Special Power of Attorney	Useful if an OFW/foreigner authorizes someone in the Philippines
Consularized or apostilled affidavit	Often needed if signed abroad

Typical Timelines in Real Life

Stage	Possible timeline	Practical reality
Bank/e-wallet reporting	Same day	Best done within minutes or hours
Temporary holding under AFASA	Up to 30 calendar days unless court-extended	Useful only if funds remain traceable and available
Police blotter or complaint intake	Same day to a few days	Depends on office, completeness of evidence, and queue
NBI cybercrime intake	Same day intake may be possible	Full investigation takes longer
Platform or bank data requests	Days to months	May require legal process or warrants
Prosecutor preliminary investigation	Several months	Varies by city, docket congestion, and respondent availability
Court case	Months to years	Recovery may depend on conviction, settlement, or available assets

The NBI Citizen’s Charter lists the initial Cybercrime Division complaint process as involving complaint-sheet assistance, preliminary interview, sworn statements, and evidence collection, with no government fee stated for the listed service. (National Bureau of Investigation)

Practical Tips That Improve Your Chance of Recovery

Report to the bank or e-wallet first, then police. Do both, but do not wait before contacting the financial institution.
Use the words “disputed transaction,” “fraud,” “scam,” and “temporary hold” when reporting to the financial institution.
Get reference numbers. A verbal report without a ticket number is harder to follow up.
Do not rely only on screenshots. Save URLs, transaction IDs, account numbers, and full chat exports when possible.
Do not send more money to “recover” the first payment. Recovery-fee scams are common.
Do not pay anyone claiming to be police, NBI, AMLC, BSP, or a bank officer who can “unlock” funds for a fee. Real agencies do not ask victims to pay private release fees through personal wallets.
Do not publicly accuse a person without evidence. You may expose yourself to defamation or cyberlibel issues.
Do not threaten the account holder. If the receiving account is a mule or identity-theft victim, threats can complicate your case.
Organize evidence before filing. Investigators can move faster when your facts are clear.

Frequently Asked Questions

Can police recover my money from GCash or Maya?

Police can help investigate and document the scam, but GCash, Maya, or the relevant financial institution handles the immediate transaction dispute. Report to the e-wallet immediately and ask if the funds can be held, recalled, or investigated. A police report or cybercrime complaint can support your e-wallet complaint, especially if the provider asks for one.

Should I go to the police first or call the bank first?

Call the bank or e-wallet first if the transfer was recent. The chance of holding funds is highest before the scammer withdraws or transfers them. After reporting to the financial institution, file a police or cybercrime complaint and provide the ticket number.

Can the police trace the owner of a bank account or phone number?

They may be able to investigate, but banks, telcos, and online platforms generally cannot disclose private account information just because a victim asks. Disclosure may require proper legal process, cybercrime warrants, coordination with the BSP, or official law-enforcement requests.

What if the scammer used a fake name?

That is common. Investigators may look at transaction trails, account verification records, SIM registration, device data, IP logs, platform records, and linked accounts. A fake profile name does not end the case, but it can make the investigation slower.

Is an online scam a civil case or criminal case?

It depends on the facts. If the issue is merely failure to pay a debt or breach of contract, it may be civil. If the person used deceit from the beginning to make you send money, it may be estafa or cyber-related estafa. Many online scam cases have both criminal and civil aspects because the criminal case may include civil liability for the amount lost.

Can I file a case if I am an OFW or foreigner outside the Philippines?

Yes, if the scam has a Philippine connection, such as a Philippine bank account, e-wallet, suspect, victim, platform activity, or damage caused to a person in the Philippines. If you are abroad, you may need a notarized, consularized, or apostilled affidavit and a Special Power of Attorney for a representative in the Philippines.

What if the bank says the money was already withdrawn?

You can still file a police, NBI, or cybercrime complaint. Recovery becomes harder, but the transaction trail may help identify the receiving account, mule, cash-out point, or wider scam network. Also ask the bank or e-wallet for a written response so you can use it in your complaint and possible BSP escalation.

Can I report an investment scam to the police?

Yes. You can report to police or NBI if there is fraud, estafa, cybercrime, or money-muling activity. You should also report investment-related scams to the SEC, especially if the scheme involved public solicitation of investments, guaranteed returns, crypto pools, or Ponzi-style recruitment.

Do I need a lawyer to report an online scam?

You do not need a lawyer just to report to the bank, PNP, NBI, BSP, or SEC. However, a lawyer can help prepare a stronger complaint-affidavit, organize evidence, assess whether the case is civil or criminal, and pursue recovery if the amount is large or the facts are complex.

How long do online scam investigations take in the Philippines?

Simple intake can happen quickly, but full investigation may take weeks or months. If the case needs platform data, bank coordination, cybercrime warrants, prosecutor proceedings, or international cooperation, it can take longer. The most urgent action is still immediate reporting to the financial institution while the funds may still be traceable.

Key Takeaways

Police can help investigate an online scam, but they usually cannot instantly force a refund.
Report to your bank or e-wallet immediately and ask for a fraud investigation, recall, flagging, or temporary hold.
AFASA allows temporary holding of disputed funds for up to 30 calendar days unless extended by a court.
Online scams may involve estafa under Article 315 of the Revised Penal Code, cybercrime under RA 10175, and financial account scamming under RA 12010.
PNP-ACG, NBI Cybercrime Division, BSP, SEC, and the affected bank or e-wallet may all have roles depending on the type of scam.
Evidence quality matters: save full chats, URLs, transaction receipts, account details, ticket numbers, and screenshots with dates and context.
Recovery is most realistic when you act fast, the funds remain in the financial system, and your complaint is complete and well-documented.