Yes. In the Philippines, an e-wallet number, account name, QR code, transaction reference number, or screenshot can be enough to start chasing a scammer—but it is usually not enough for you, as a private person, to personally identify or confront the scammer. E-wallet details are leads. They can help the e-wallet provider, bank, PNP Anti-Cybercrime Group, NBI Cybercrime Division, CICC, BSP, prosecutors, and courts trace the account, preserve records, temporarily hold funds when legally allowed, and build a case. The key is to act fast, preserve evidence properly, and file the right reports in the right order.

What E-Wallet Details Can Actually Prove

When someone scams you through GCash, Maya, ShopeePay, GrabPay, QR Ph, bank-to-wallet transfer, or another Philippine e-wallet, the information you have may include:

Mobile number linked to the e-wallet
Display name or partial account name
Transaction reference number
Date, time, and amount sent
QR code or merchant QR
Screenshot of the receipt
Chat messages, SMS, email, Facebook/Marketplace/Lazada/Shopee/Viber/Telegram conversation
Delivery promise, fake ID, fake business permit, or fake page
Link used for phishing or login capture
Proof that the seller blocked you or deleted the listing

These details are useful because Philippine e-wallets and payment providers are required to keep customer and transaction records as part of onboarding, know-your-customer, anti-fraud, anti-money laundering, and consumer protection obligations. Under the Anti-Financial Account Scamming Act, an e-wallet is expressly treated as a “financial account,” and “financial account” also includes bank, non-bank, and payment service accounts used for financial products and services. (Supreme Court E-Library)

But there is a practical limit: the name you see in the app is not always the real mastermind. Many scams use:

Mule accounts owned by poor, recruited, or paid individuals
Accounts opened using stolen or fake IDs
SIMs registered under another person’s name
Hacked accounts of innocent people
Layered transfers from one wallet to another wallet, then to a bank, crypto platform, cash-out agent, or ATM withdrawal

So the short answer is: yes, you can chase the scammer with only e-wallet details, but you chase them through formal channels—not by doxxing, threatening, or trying to force the e-wallet company to reveal private data directly to you.

Why the E-Wallet Company May Not Give You the Scammer’s Full Identity

Victims often ask: “I have the GCash number. Can GCash tell me the owner’s full name and address?”

Usually, no.

The account holder’s full name, address, ID, selfie verification, phone records, device logs, and linked bank information are personal data. The Data Privacy Act of 2012, Republic Act No. 10173, protects personal information and sensitive personal information, while still allowing lawful processing when authorized by law, regulation, subpoena, or legal obligation. (National Privacy Commission)

If the money later moved to a bank account, bank secrecy may also become relevant. Republic Act No. 1405 treats bank deposits in the Philippines as confidential and generally prohibits inquiry or disclosure except in recognized legal situations such as written depositor permission, certain court orders, impeachment, bribery or dereliction cases involving public officials, or where the money deposited is the subject matter of litigation. (Lawphil)

This does not mean the scammer is protected from investigation. It means the information must usually pass through lawful channels: e-wallet provider fraud teams, coordinated verification, BSP processes, law enforcement, prosecutor subpoenas, cybercrime warrants, court orders, or other legally recognized mechanisms.

RA 12010 significantly improved this area. It allows temporary holding of disputed funds, coordinated verification among institutions, BSP investigation and inquiry into financial accounts involved in account scamming, and information-sharing with law enforcement and competent authorities for investigation and prosecution. (Supreme Court E-Library) (Supreme Court E-Library)

Legal Bases for Chasing an E-Wallet Scammer in the Philippines

Several laws may apply at the same time. The exact charge depends on how the scam happened.

Situation	Possible legal basis	Why it matters
Fake seller, fake investment, fake job task, fake loan fee, fake ticket, romance scam	Estafa under Article 315 of the Revised Penal Code	Estafa generally involves deceit or abuse of confidence causing damage. The Supreme Court has repeatedly described estafa as requiring fraud by deceit or abuse of confidence and damage capable of money valuation. (Supreme Court E-Library)
Scam committed through Facebook, Messenger, SMS, email, website, app, QR, or other electronic means	Cybercrime Prevention Act of 2012, RA 10175	Crimes under the Revised Penal Code and special laws may become cybercrime-related when committed through information and communications technology. RA 10175 also provides tools for preservation, disclosure, search, seizure, and examination of computer data. (Lawphil)
Use of mule wallet or account rented, bought, lent, or opened using fake/stolen identity	Anti-Financial Account Scamming Act, RA 12010	AFASA penalizes money muling activities, including using, borrowing, allowing use of, buying, renting, selling, lending, or recruiting people to use financial accounts for scam proceeds. (Supreme Court E-Library)
Phishing, OTP capture, fake bank/e-wallet representative, account takeover	RA 12010 social engineering schemes; RA 10175; possibly Access Devices Regulation Act	AFASA covers social engineering schemes where sensitive identifying information is obtained through deception or fraud, resulting in unauthorized access or control over a financial account. (Supreme Court E-Library)
Provider failed to act on fraud reports or consumer complaints	RA 11765 Financial Products and Services Consumer Protection Act; BSP rules	BSP-supervised institutions must have a Financial Consumer Protection Assistance Mechanism or FCPAM. BSP’s Consumer Assistance Mechanism is the second-level recourse after the provider’s own complaint channel.
You want the criminal case to move forward	Rules of Criminal Procedure	A criminal complaint is a sworn written statement charging a person with an offense, and criminal actions are prosecuted under the direction and control of the prosecutor. (Supreme Court E-Library)

The First 24 Hours: What to Do Immediately

Speed matters because stolen funds can move within minutes. The first receiving e-wallet may not be where the money stays.

1. Secure your own accounts first

Before chasing the scammer, stop further loss.

Do these immediately:

Change your e-wallet MPIN/password.
Change passwords for email, Facebook, bank apps, and shopping apps connected to the wallet.
Log out other devices where possible.
Disable linked cards or accounts if suspicious.
Activate app security features such as biometrics, device registration, transaction limits, real-time alerts, and multi-factor authentication.
Use the app’s account lock, card lock, or “kill switch” feature if available.

BSP Circular No. 1213, Series of 2025, requires digital platforms facilitating retail interbank transfers and high-risk transactions to offer protective features such as a self-service “kill switch” that allows customers to suspend accounts, block outgoing transactions, and prevent unauthorized account changes when fraud or suspicious activity is detected.

2. Preserve evidence before the scammer deletes it

Do not rely only on screenshots saved in Messenger or the app. Export and organize everything.

Prepare a folder with:

Evidence	What to save
E-wallet receipt	Screenshot showing reference number, amount, date, time, sender, recipient, and transaction status
Transaction history	In-app transaction record, email receipt, SMS confirmation, bank debit record
Chat trail	Full conversation from first contact to payment to refusal/blocking
Scammer profile	URL, username, page name, mobile number, profile photo, seller listing, group post
Proof of deceit	Promises, fake tracking number, fake ID, fake permit, fake screenshots, false investment claims
Proof of loss	Amount paid, failed delivery, blocked account, refund refusal
Your identity	Valid ID and contact details for the complaint
Timeline	Short chronological summary: when you saw the offer, when you paid, what happened after

For GCash users, transaction history can be requested in the app for older records, and GCash states that users can only request their own transaction history, not another person’s account history. (GCash Help Center)

3. Report to the e-wallet provider immediately

File a fraud report with the provider as soon as possible. Ask for a ticket number and state clearly that you are reporting a scam or disputed transaction and requesting urgent fraud review, possible temporary holding, and coordinated verification if funds remain traceable.

GCash’s Help Center says that for a scam transaction, the victim should report the scammer to the authorities, report to GCash immediately with details and screenshots, and block the scammer on SMS or social media. (GCash Help Center)

For unauthorized GCash transactions, GCash states that users should report within 15 days of the transaction date, and that investigation may take 48 hours to 7 days depending on the case. (GCash Help Center)

Maya provides a fraud report channel and states that users should submit complete details so the concern can be addressed efficiently. Maya’s contact page also tells users to prepare screenshots, prior messages, transaction receipts, and ticket/reference numbers, and provides emergency assistance for lost phones or suspected unauthorized transactions. (support.maya.ph) (Maya)

4. Ask for temporary holding and coordinated verification

Under RA 12010, institutions have authority to temporarily hold funds subject to a disputed transaction within the BSP-prescribed period, not exceeding 30 calendar days unless extended by a court. A transaction may be considered disputed if, based on a complaint, information from another institution, or fraud management system finding, it appears unusual, without clear economic purpose, from an unknown or illegal source, from unlawful activity, or facilitated through social engineering. (Supreme Court E-Library)

BSP Circular No. 1215, Series of 2025, implements temporary holding and coordinated verification. It defines an initial holding period of not more than 5 calendar days, an extended holding request of not more than 25 calendar days, and temporary holding of disputed funds for not more than 30 calendar days consisting of initial and extended holding periods.

In plain English: report fast enough so there is still something to hold. If the scammer already cashed out, the case may still proceed, but recovery becomes harder.

5. Report to law enforcement

A provider ticket is not the same as a criminal complaint. If you want the scammer investigated and potentially prosecuted, file with law enforcement.

Common options:

Office/channel	Best for	Practical notes
PNP Anti-Cybercrime Group / Regional Anti-Cybercrime Units	Online scams, e-wallet fraud, Facebook/Marketplace scams, phishing, cyber-enabled estafa	Bring screenshots, receipts, IDs, and a written timeline.
NBI Cybercrime Division / Regional Cybercrime Centers	Cybercrime complaints, digital evidence, more complex or multi-victim scams	NBI’s citizen charter for computer-crime victims includes complaint form submission, sworn statements or affidavits, device examination when relevant, and forwarding of the complaint sheet or authority to investigate. (National Bureau of Investigation)
CICC / Inter-Agency Response Center hotline 1326	Fast reporting and guidance, especially active scams	The 1326 hotline is a 24/7 hotline for reporting scams and is linked to the DICT-CICC initiative, with coordination involving agencies such as PNP and NBI. (Philippine News Agency)
City or Provincial Prosecutor	Formal criminal complaint after evidence is organized	A complaint-affidavit and supporting evidence are usually needed for preliminary investigation when the offense requires it.

A barangay blotter can help document that you complained, but it usually does not trace e-wallet accounts, preserve digital evidence, or compel providers to disclose KYC records. For cyber-enabled scams, PNP ACG, NBI Cybercrime, CICC, the prosecutor, and the provider’s fraud unit are usually more useful.

How to Write Your Complaint-Affidavit

A complaint-affidavit is your sworn story. It should be factual, chronological, and supported by attachments.

Use this structure:

Your identity
- Full name, address, contact number, email
- Attach valid ID
How you encountered the scammer
- Platform used
- Username, profile link, phone number, page name
- Date and time of first contact
What the scammer represented
- Product, service, job, investment, loan, ticket, rental, relationship, or emergency story
- Exact promise or false representation
Why you believed it
- Screenshots of messages, fake proof, fake reviews, fake tracking, fake IDs, false assurances
How you paid
- E-wallet provider
- Recipient number/name/QR
- Amount
- Reference number
- Date and time
What happened after payment
- No delivery, blocked account, excuses, deleted page, refusal to refund, further demands
Your actions
- Reported to provider
- Ticket number
- Reported to CICC/PNP/NBI
- Attempts to recover money
Attachments
- Number each attachment clearly: Annex A, Annex B, Annex C, etc.

Do not exaggerate. Do not add rumors from other victims unless they provide their own statements or screenshots. A clean, well-organized complaint is more useful than a dramatic but unsupported narrative.

What Happens After You File

The process often looks like this:

Provider fraud review
- The e-wallet checks the transaction, account status, device signals, recipient account, and whether funds remain.
- The provider may flag, restrict, or hold funds if legal and operational requirements are met.
Coordinated verification
- If funds moved across institutions, the originating and receiving institutions may coordinate to trace the disputed transaction chain under BSP rules.
Law enforcement evaluation
- PNP ACG or NBI reviews the complaint, evidence, and possible offense.
- You may be asked to execute or revise a sworn statement.
Requests for records
- Investigators or prosecutors may seek account, transaction, device, IP, SIM, or platform records through proper legal process.
Preliminary investigation
- The prosecutor determines whether there is probable cause to charge the respondent in court.
Court case
- If an Information is filed, the case proceeds in court.
- If the offender is convicted under RA 12010, civil liability may include restitution for damage or unwarranted benefit derived from the violation. (Supreme Court E-Library)

Common Problems Victims Face

The e-wallet name is incomplete

Many apps show only a partial name. That is normal. Do not assume the displayed name is enough to identify the offender publicly. Treat it as an investigative lead.

The account owner says, “I only lent my wallet”

That may still be serious. RA 12010 penalizes money muling activities, including allowing the use of a financial account, selling or lending a financial account, and recruiting others to do so when used for proceeds of crimes or social engineering schemes. (Supreme Court E-Library)

The scammer used a registered SIM

SIM registration helps, but it does not guarantee that the visible number belongs to the mastermind. The SIM may have been registered using false documents, sold, borrowed, stolen, or used only briefly.

The scammer is abroad or you are abroad

If you are outside the Philippines, you can still organize your evidence and file reports online or through a representative where accepted. If a sworn affidavit, Special Power of Attorney, or foreign-notarized document must be used in the Philippines, it may need consular notarization or an apostille, depending on the country. Philippine Embassy guidance commonly explains that documents notarized locally abroad may need an apostille from the competent authority before use in the Philippines, while documents notarized by a Philippine Embassy or Consulate are generally for use in the Philippines without further apostille. (Philippine Embassy) (Philippine Consulate Melbourne)

The platform is Facebook, Telegram, or a foreign website

The e-wallet trail is still important because it connects the online persona to a financial account. But platform records may require separate preservation and disclosure processes. Take screenshots of URLs, profile IDs, group names, and timestamps before the scammer deletes them.

You posted the scammer’s details online

Warning others is understandable, but public accusations can create separate legal risks if you post private information, threaten the person, or accuse the wrong account owner. It is safer to preserve the evidence, report to authorities, and share warnings without exposing sensitive personal data beyond what is necessary.

Documents You Should Prepare

Document	Why it matters
Valid government ID	Establishes your identity as complainant
Complaint-affidavit	Main sworn statement for police, NBI, or prosecutor
E-wallet receipt	Proves payment, amount, date, time, and reference number
Transaction history	Confirms the transaction came from your account
Chat screenshots	Shows deceit, promise, demand for payment, refusal to deliver, or blocking
Profile screenshots and URLs	Helps trace the online account
Provider ticket number	Shows you promptly reported to the e-wallet company
CICC/PNP/NBI report reference	Shows official reporting trail
Demand/refund attempts	Helps show loss and refusal
For OFWs/foreigners abroad: apostilled or consularized affidavit or SPA, if needed	Helps local representatives file or follow up in the Philippines

Practical Timeline

Step	Typical timing	Important note
Secure your account	Immediately	Change passwords and use lock/kill-switch features where available
Provider fraud report	Same day, ideally within hours	Faster reports improve the chance that funds remain traceable
GCash unauthorized transaction report	Within 15 days according to GCash guidance	GCash states investigation may take 48 hours to 7 days depending on the case. (GCash Help Center)
Temporary holding under AFASA/BSP rules	Initial period up to 5 calendar days; possible extension up to 25 more calendar days	Maximum generally 30 calendar days unless extended by a court.
NBI/PNP intake	Often same day if documents are ready	Full investigation usually takes longer than intake
Prosecutor review	Weeks to months	Depends on completeness of evidence, respondent identification, subpoenas, and docket load
Court case	Months to years	Recovery is easier if funds were held early or assets are identifiable

Frequently Asked Questions

Can I file a complaint if I only have the e-wallet number?

Yes. An e-wallet number, transaction receipt, and chat screenshots can be enough to start a complaint. The complaint can later be supplemented if the provider, police, NBI, prosecutor, BSP, or court obtains more identifying information.

Can GCash or Maya reveal the scammer’s real name to me?

Usually not directly. The provider may act on your report, investigate internally, preserve records, coordinate with other institutions, or respond to lawful requests, but full KYC information is generally handled through legally authorized channels because of privacy and financial confidentiality rules.

Can the e-wallet provider reverse the transaction?

Sometimes, but not always. A reversal is more likely if the funds are still in the recipient account, the transaction is quickly reported, and the facts fit the provider’s dispute process or AFASA temporary holding rules. If the scammer already transferred or withdrew the funds, recovery becomes harder, but the transaction trail may still support a criminal case.

Is this estafa or cybercrime?

It can be both. A fake seller or investment scam may be estafa under Article 315 of the Revised Penal Code. If the deceit was carried out through ICT, social media, SMS, email, apps, or online payment systems, RA 10175 and RA 12010 may also become relevant.

Should I go to the barangay first?

For e-wallet scams, going directly to the e-wallet provider, CICC 1326, PNP ACG, or NBI Cybercrime is usually more practical. A barangay blotter may document the incident, but the barangay normally cannot compel e-wallet KYC disclosure or trace digital payment chains.

What if the account owner is only a money mule?

A mule may still be liable depending on the facts. RA 12010 specifically penalizes money muling activities such as selling, lending, buying, renting, using, borrowing, or allowing the use of financial accounts for scam proceeds. The mule may also help investigators reach recruiters or the main syndicate.

Can I file even if the amount is small?

Yes. Small amounts are still evidence of a possible offense, especially if the same account scammed many people. For small losses, the practical challenge is time and enforcement resources, but reporting can still help flag the account and connect your complaint with other victims.

What if I am an OFW or foreigner outside the Philippines?

You can still preserve evidence, report to the e-wallet provider, call or message Philippine reporting channels where available, and authorize a representative in the Philippines if needed. If you must submit a sworn document from abroad, check whether it needs consular notarization or an apostille for Philippine use.

Can I sue if I do not know the scammer’s real name?

A complaint can describe an unknown accused by a fictitious name if the true name cannot yet be ascertained, and the true name can later be inserted when disclosed or discovered. The Rules of Criminal Procedure allow this approach for complaints or informations when the accused’s name is unknown. (Supreme Court E-Library)

Should I message the scammer again?

You may send one calm refund demand if it is safe and useful for evidence, but do not threaten, harass, or reveal private information online. If the scammer is still communicating, preserve the conversation. If they are trying to extract more money, stop engaging and report immediately.

Key Takeaways

E-wallet details are enough to start tracing, reporting, and building a case, but they usually do not give you the legal right to personally obtain the account owner’s full KYC information.
Act fast: report to the provider, secure your own accounts, and preserve screenshots, receipts, transaction history, and chat logs.
RA 12010 treats e-wallets as financial accounts and provides tools for temporary holding, coordinated verification, BSP inquiry, and information-sharing for enforcement.
Fake sellers, fake investments, romance scams, task scams, loan-fee scams, and phishing incidents may involve estafa, cybercrime, AFASA violations, or other offenses depending on the facts.
A provider ticket is not the same as a criminal complaint. For investigation and prosecution, report to PNP ACG, NBI Cybercrime, CICC 1326, or the prosecutor.
Do not rely on the displayed e-wallet name alone. The visible recipient may be a mule, hacked account, or fake identity.
The best chance of recovery is within the first hours, before the money is transferred, withdrawn, or layered through other accounts.