Quick answer

Stop sending money and cut off the scammer’s access immediately. Call the bank, e-wallet, remittance company, or other financial institution through its official fraud channel and report every transfer as fraudulent or disputed. Ask it to trace the funds, alert receiving institutions, secure the account, and determine whether the funds can be temporarily held under the Anti-Financial Account Scamming Act.

Then preserve the complete conversation and transaction records, secure the victim’s devices and accounts, and promptly report the scheme to the National Bureau of Investigation Cybercrime Division or the Philippine National Police’s cybercrime unit.

A romance scam may support charges for estafa and, depending on how accounts, credentials, identities, and communications were used, offenses under the Cybercrime Prevention Act and Anti-Financial Account Scamming Act. However, recovery is not automatic. It depends heavily on how quickly the fraud is reported, whether funds remain traceable, and what the evidence proves.

What a romance scam looks like

A romance scam usually begins when someone creates emotional trust—often through Facebook, Messenger, dating applications, text messages, or video calls—and then uses false stories to obtain money or financial access.

Common warning signs include:

professing love or commitment unusually quickly;
claiming to be a soldier, engineer, doctor, seafarer, foreign professional, or wealthy investor who cannot meet in person;
repeatedly cancelling visits because of an “emergency”;
requesting money for hospitalization, customs charges, travel, taxes, legal fees, a frozen account, or an investment;
directing payments to different people or accounts;
asking for online-banking credentials, card details, passwords, PINs, one-time passwords, identification documents, or a selfie holding an ID;
telling the older person to hide the relationship or payments from family;
coaching the victim on what to tell bank personnel;
asking the victim to receive, forward, or withdraw money for someone else; or
threatening exposure, abandonment, arrest, or harm when the victim hesitates.

A real photograph, video call, identification card, parcel receipt, bank screenshot, or official-looking document does not by itself establish identity. Images and documents may be stolen, altered, or generated, while another person may appear briefly on video as part of an organized scheme.

What to do in the first hours

1. Stop all payments and communication

Do not send a “final” payment to unlock a refund, release a parcel, pay taxes, or help investigators. Do not warn the scammer that a report is being prepared. A warning may prompt the person to move funds, delete accounts, or destroy evidence.

Do not attempt an entrapment or arrange an in-person meeting without law-enforcement guidance.

If the scammer threatens physical harm or knows the victim’s address, contact the police immediately and move the victim to a safe location if necessary.

2. Call the financial institution immediately

Use the number printed on the card, shown in the institution’s official application, or published on its official website. Do not use contact information supplied by the suspected scammer.

Give the institution:

the victim’s name and account details;
transaction dates, amounts, reference numbers, and recipient accounts;
the recipient’s stated name, telephone number, and platform account;
a brief explanation that the transfers resulted from a suspected romance scam;
whether credentials, an OTP, an ID, or remote access to the device was disclosed; and
the police or NBI report number, once available.

Ask the institution to:

block unauthorized access and replace compromised credentials or cards;
identify and mark every disputed transaction;
contact receiving institutions and trace the transaction chain;
assess whether remaining funds can be temporarily held;
preserve account, access, device, and transaction logs;
provide a complaint reference number and written acknowledgment; and
explain what affidavit, dispute form, or supporting documents it requires.

Do this even when the victim personally pressed “send.” A voluntary transfer can still have resulted from criminal deception, although the legal and reimbursement analysis may differ from an unauthorized account takeover.

3. Report every destination account

If money was sent to several bank accounts, e-wallets, remittance outlets, cryptocurrency platforms, or individuals, report each destination separately. A recipient may be a participant, a paid account seller, an unwitting intermediary, or a money mule. Do not publicly accuse the named account holder before investigators establish that person’s role.

4. Secure accounts and devices

From a clean device where possible:

change the email password first, then banking, e-wallet, social-media, and messaging passwords;
enable multi-factor authentication;
sign out of other sessions and remove unknown devices;
replace compromised cards and PINs;
ask the mobile provider about a replacement SIM if takeover is suspected;
remove remote-access applications the scammer instructed the victim to install;
review forwarding rules, recovery email addresses, beneficiaries, scheduled transfers, and linked devices; and
monitor statements for small “test” transactions and new loans or accounts.

If the device may contain evidence or malware, avoid factory-resetting it before consulting investigators. Disconnect it from the internet if continuing access is suspected, and use another device for urgent account changes.

Can the bank or e-wallet hold the money?

Republic Act No. 12010, the Anti-Financial Account Scamming Act or AFASA, allows BSP-supervised institutions to temporarily hold funds involved in a disputed transaction and to conduct coordinated verification with other institutions.

Under BSP Circular No. 1215, a source-account owner may initiate the process by reporting through the institution’s 24/7 fraud-reporting channel. The implementing regulations provide for an initial and extended holding process totaling no more than 20 calendar days; a longer hold requires a court order.

A report does not guarantee that money will be frozen or returned. The institution must identify traceable disputed funds, and the funds may already have been withdrawn, converted, or moved through several accounts. That is why reporting within minutes or hours is materially better than waiting for certainty.

AFASA also makes restitution possible where an institution failed to employ adequate risk-management controls, failed to exercise the legally required degree of diligence, or failed to hold funds when the law and applicable BSP rules required it. Conviction of the offender is not always a prerequisite to institutional restitution. This does not mean that every scam loss must be reimbursed; liability depends on the transaction, the institution’s conduct, applicable controls, and the evidence.

If the institution’s response is unsatisfactory, first complete its Financial Consumer Protection Assistance Mechanism process, then escalate the complaint through the BSP Consumer Assistance Mechanism, including BSP Online Buddy or the channels identified by BSP.

What crimes may apply?

Estafa through false pretenses

Article 315 of the Revised Penal Code may apply when the offender uses a false pretense or fraudulent representation made before or at the time of the transfer, the victim relies on it, and the deception causes financial damage.

In a romance-scam investigation, relevant misrepresentations may concern the scammer’s identity, employment, intention to marry, emergency, investment, inheritance, parcel, travel, or supposed need for fees. Affection alone is not the offense; the prosecution must prove the legally required deception, reliance, transfer, and damage.

The applicable penalty for estafa depends in part on the amount and circumstances. Charging and penalty calculations should be left to the prosecutor because Article 315’s value brackets have been amended and other laws may affect the charge.

Cyber-related estafa and other computer offenses

When estafa or another offense is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act of 2012 may apply and can affect the penalty.

Other provisions may be relevant if the scheme involved illegal access, data interference, computer-related forgery, computer-related fraud, or computer-related identity theft. The precise charge depends on what the offender did—not simply on the fact that the couple communicated online.

Anti-Financial Account Scamming Act offenses

AFASA separately penalizes certain money-muling and account-related conduct. It covers, among other acts, knowingly using or allowing an account to receive or move proceeds derived from crimes or social-engineering schemes, buying or renting financial accounts, selling or lending accounts, and recruiting people to perform those acts.

AFASA’s “social engineering” offense is more specific than ordinary emotional manipulation. It generally concerns using deception or electronic communications to obtain sensitive identifying information that results in unauthorized access to and control of a financial account. A romance scam that merely persuades a victim to make a transfer may therefore be estafa without necessarily satisfying every element of that AFASA offense.

Where the statutory social-engineering offense targets a senior citizen, AFASA provides an increased penalty. Economic sabotage provisions may apply in specified circumstances, including schemes involving three or more conspirators, three or more victims, mass mailers, or human trafficking. Investigators and prosecutors—not the complainant—should determine which provisions fit the evidence.

Violence Against Women and Their Children

Republic Act No. 9262 may offer additional remedies only in qualifying cases. It protects a woman or her child from specified violence committed by a spouse, former spouse, a person with whom the woman has or had a sexual or dating relationship, or a person with whom she has a common child.

A scammer’s use of romantic language or online courtship does not automatically establish the relationship or economic-abuse elements required by RA 9262. Economic abuse under that law also involves legally defined conduct and, in relevant provisions, a purpose of controlling or restricting the woman. If those facts are genuinely present, the victim should ask a lawyer, prosecutor, police Women and Children Protection Desk, or social worker about a barangay, temporary, or permanent protection order.

Civil recovery

A victim may have civil claims for restitution or damages. A conviction under AFASA may carry civil liability, including restitution.

Where the scam resulted in a contract, deed, authority, or transfer of property, the Civil Code may also be relevant. Consent affected by fraud or undue influence can make certain contracts voidable. Under Article 1391 of the Civil Code, an annulment action generally must be brought within four years, with the starting point depending on whether the ground is fraud, mistake, intimidation, violence, or undue influence.

Not every gift or transfer can be cancelled merely because the relationship ended or the donor later regretted it. The documents, ownership, capacity, consent, representations, and form of the transaction must be examined promptly by a lawyer. Property transfers, powers of attorney, mortgages, changes in beneficiaries, and transfers of retirement funds deserve urgent review.

How to preserve evidence properly

Do not keep only selected screenshots. Preserve the most complete and original records available.

Collect:

the full chat history, including profile names, usernames, account URLs, dates, and timestamps;
emails with full headers where available;
voice notes, call logs, photographs, videos, and documents received;
transaction confirmations, statements, deposit slips, QR codes, wallet addresses, and reference numbers;
the recipient account names and numbers exactly as displayed;
delivery receipts, parcel notices, supposed customs documents, contracts, and investment pages;
the scammer’s telephone numbers, email addresses, websites, social-media profiles, and dating-app profiles;
proof of how each representation led to a payment;
bank and platform complaint acknowledgments;
the names of relatives, bank employees, or other witnesses who observed relevant events; and
a chronological list of promises, requests, transfers, and discoveries.

Preserve original files and devices. Export conversations through the platform’s official tools where possible. Take screenshots that show context, not just isolated statements. Do not crop, annotate, enhance, or repeatedly forward the only copy. Back up the evidence in at least two secure locations and record who collected it.

Electronic messages may be admitted as evidence, but authenticity and integrity still matter under the Supreme Court’s Rules on Electronic Evidence. Investigators may need the original device, account information, testimony from a person who participated in or obtained the communication, or records from service providers.

Do not access the scammer’s account, guess a password, impersonate another person, install surveillance software, or secretly obtain private account data. Preserve what the victim lawfully possesses and let authorities obtain protected data through lawful process.

Where to report

National Bureau of Investigation

A victim may seek investigative assistance from the NBI Cybercrime Division. NBI guidance states that the complainant may be interviewed, execute a sworn statement, submit supporting documents, and allow examination of a relevant device. Complaints may also be brought to an appropriate NBI regional or district office. Current division and contact information is available on the NBI divisions directory.

Philippine National Police

A complaint may also be filed with the PNP Anti-Cybercrime Group or an appropriate police cybercrime unit. If there are threats, stalking, coercion, or immediate danger, also report to the nearest police station.

Financial institution and BSP

Report first through the bank’s, e-wallet’s, or payment provider’s official fraud and consumer-assistance channel. Preserve the complaint number. If the institution does not resolve the matter, use the BSP’s official consumer-assistance channels.

A BSP complaint addresses the conduct of a BSP-supervised institution. It is not a substitute for a criminal complaint against the scammer.

Local social-welfare assistance

If the older person is being isolated, pressured, neglected, threatened, deprived of necessities, or exploited by a caregiver or family member as well as by the online scammer, contact the city or municipal social welfare and development office, the barangay, or the appropriate DSWD field office. Social workers can assess safety, care, housing, and protective-service needs.

The Expanded Senior Citizens Act establishes important protections and government responsibilities toward senior citizens, but it should not be described as a comprehensive standalone criminal law for every form of elder financial abuse. The specific remedy usually comes from the Revised Penal Code, special laws, civil law, banking regulations, or protective laws applicable to the relationship and conduct.

Helping an older person who does not believe it is a scam

Avoid ridicule, confrontation, or taking control without legal authority. Shame can push the victim closer to the scammer.

Use a calm, evidence-based approach:

ask the person to pause payments for 48 hours;
review the transaction history together;
independently verify the claimed employer, hospital, lawyer, embassy, parcel, or government office using official contact details;
conduct a reverse-image search, while remembering that no search result conclusively proves identity;
ask why payments go to unrelated account holders;
suggest a joint call to the bank’s fraud team;
invite a trusted relative, lawyer, social worker, doctor, or financial adviser whom the person respects; and
focus on safety and verification rather than proving the person “wrong.”

An adult who has decision-making capacity generally retains control over personal finances, even when relatives strongly disagree. Family members should not seize devices, withdraw funds, impersonate the person, or use online banking without authority.

If cognitive impairment is suspected, arrange an appropriate medical assessment and obtain legal advice. Age, grief, loneliness, disability, or a poor financial decision does not by itself establish incapacity. Guardianship, changes to account authority, and other restrictions require a valid legal basis and proper procedure.

Common mistakes that make recovery harder

Waiting for the scammer to explain or return the money.
Sending another payment to recover an earlier transfer.
Deleting or blocking the account before preserving the conversation and profile details.
Reporting only to the social-media platform and not to the financial institution or authorities.
Assuming a transfer was irreversible without asking the institution to trace and dispute it.
Posting recipient names, identification documents, or account numbers publicly.
Editing screenshots or losing the original device.
Paying a supposed “recovery agent,” hacker, lawyer, police officer, or foreign investigator without independent verification.
Allowing the scammer continued access to email, cloud storage, banking applications, or the mobile number.
Treating every recipient account holder as the mastermind without proof.
Signing a settlement, quitclaim, deed, loan, or authority without independent legal advice.

When legal help is urgent

Consult a Philippine lawyer promptly when:

land, a condominium, a vehicle, securities, insurance, retirement funds, or a business interest was transferred;
the victim signed a deed, loan, mortgage, power of attorney, will, beneficiary change, or investment agreement;
substantial funds remain in a traceable account and a court order may be needed;
the scammer is known personally or is in the Philippines;
a bank denies the dispute or blames the victim despite possible control failures;
a family member, caregiver, agent, or attorney-in-fact participated;
the victim may lack decision-making capacity;
intimate images are being used for blackmail;
the victim faces threats, stalking, or physical danger; or
a filing deadline may be approaching.

Bring the lawyer a transaction table, the original documents, complete communications, complaint reference numbers, and a list of known persons and accounts.

Frequently asked questions

Can money sent voluntarily still be the subject of estafa?

Yes. Pressing “send” does not prevent an estafa case if the transfer was caused by fraudulent representations satisfying Article 315. The prosecution must still prove every element. A genuine gift made without legally actionable deception is different.

Will the bank automatically refund a romance-scam loss?

No. Refund or restitution depends on such matters as whether the transaction was authorized, how the fraud occurred, whether the institution’s safeguards and diligence were adequate, whether it complied with AFASA holding duties, and whether funds remain recoverable.

Does AFASA cover every romance scam?

No. AFASA may apply to money-mule activity, account trading, prohibited social engineering, or related conduct. Its social-engineering offense has specific elements involving sensitive identifying information and unauthorized account access or control. Ordinary online deception may instead—or additionally—be prosecuted as estafa in relation to the Cybercrime Prevention Act.

Can relatives freeze an older person’s account?

Not merely because they suspect a bad relationship. The account owner should report the fraud, or a person with valid authority should act within that authority. Institutions and courts may take legally authorized measures. Relatives should obtain urgent legal advice where incapacity or coercion is genuinely suspected.

Should the victim continue chatting to gather evidence?

Usually not without instructions from investigators. Continued contact can expose the victim to more manipulation, malware, threats, or payments. Preserve existing evidence first and let law enforcement decide whether further communication is useful.

What if the scammer is overseas?

Report anyway. Philippine jurisdiction may still exist where legally defined elements, infrastructure, damage, or Philippine-maintained financial accounts connect the offense to the country. Cross-border identification and recovery can be difficult, but recipient accounts, devices, platform records, and domestic intermediaries may provide investigative leads.

Can the dating platform remove the profile?

Report the profile through the platform after preserving its URL, username, messages, photographs, and other identifying details. Platform removal may protect others, but it does not replace reports to the financial institution and law enforcement.

Is there a guaranteed deadline for recovering transferred funds?

No. Funds can be moved almost instantly. AFASA and BSP rules provide a temporary-holding and verification framework, but success depends on prompt reporting and the location of identifiable funds. Treat the matter as urgent even when the transfer occurred days or weeks earlier.

Official sources

This article provides general legal information, not advice for a particular case. Outcomes depend on the evidence, documents, relationships, transactions, and current agency or court procedures. Philippine primary and official sources were checked as of 24 July 2026.