Quick answer

If you suspect a scam, act immediately. Contact the bank, e-wallet, card issuer, remittance company, or other financial institution from which the money left through its official 24/7 fraud-reporting channel. Ask it to secure your account, identify the transaction as disputed, trace the transfer, and request the temporary holding of any funds that remain in the recipient account or later accounts.

Then preserve the evidence and report the incident to the Philippine National Police Anti-Cybercrime Group (PNP-ACG) or the National Bureau of Investigation (NBI). If the financial institution does not resolve your complaint satisfactorily, escalate it to the Bangko Sentral ng Pilipinas (BSP), provided the institution is BSP-supervised.

Reporting quickly can improve the chance of recovery, but it does not guarantee a refund. The outcome depends on whether funds remain traceable, how the transaction occurred, what the evidence shows, and whether the financial institution complied with its legal duties.

What to do immediately

1. Stop further loss

Using contact details from the institution’s official app, website, card, or statement:

Lock or suspend the affected account, card, or e-wallet.
Disable online transfers and remove unfamiliar devices.
Change the account password and the password of the linked email account.
Revoke suspicious app permissions and active sessions.
Ask the institution to replace compromised cards, credentials, or account numbers.
Tell your mobile network if your SIM suddenly lost service or you suspect SIM takeover.
Contact other institutions if the same password, PIN, device, email, or identity documents were exposed.

Do not call a number supplied by the suspected scammer or click a “refund,” “verification,” or “recovery” link sent after the incident.

If remote-access software was installed, disconnect the device from the internet. Preserve evidence before deleting the application, then have the device checked by a competent technician. Use a separate, trusted device to change important passwords.

2. Report the disputed transaction to the institution that sent the money

The sending institution—called the originating financial institution in BSP rules—is normally the first point of contact. Use its official 24/7 fraud-reporting channel and provide enough information to identify the transfer:

Your name and source-account details
Transaction reference or confirmation number
Amount, date, and exact time
Transfer or payment method
Recipient institution and account or wallet details
A short, factual explanation of what happened
Whether you personally initiated the transaction
Whether deception, impersonation, phishing, account takeover, or unauthorized access was involved

Ask for:

A complaint or case-reference number
Written acknowledgment of the report
Confirmation that the matter was classified as a disputed transaction
Immediate tracing and an initial holding request to every identified receiving institution
Confirmation of how much, if any, was successfully held
The documents required to support an extended hold and possible return
The expected investigation timeline and a written final decision

If a card transaction is still pending, also ask whether it can be stopped. If it has posted, request the applicable card-dispute or chargeback process. Chargeback eligibility and deadlines depend on the card network, transaction type, and issuer rules, so do not wait for a police report before notifying the issuer.

How the temporary-hold process works

Republic Act No. 12010, the Anti-Financial Account Scamming Act (AFASA), authorizes covered institutions to temporarily hold funds involved in a disputed transaction and requires coordinated verification among the institutions and account owners involved.

Under BSP Circular No. 1215:

A complaint by the source-account owner through the originating institution’s 24/7 fraud-reporting channel may trigger the process.
The initial holding period is no more than five calendar days.
If the originating institution finds an extension warranted, the hold may be extended by up to 25 additional calendar days.
The combined temporary-holding period may not exceed 30 calendar days, unless a competent court extends it.
Supporting documents—such as a sworn complaint, affidavit, police report, or other proof—should generally be submitted within the initial holding period, subject to the applicable industry protocol.
If funds were held, coordinated verification should be completed within the 30-day holding period unless a court extends the hold.
If no funds were held, verification should ordinarily be completed within 30 calendar days. For meritorious reasons, the originating institution may extend the verification process, but the total may not exceed 60 calendar days.

These periods are not waiting periods for the victim. The five-day initial window makes immediate reporting and prompt submission of documents especially important.

The process generally covers electronic fund transfers through covered BSP-supervised institutions. BSP Circular No. 1215 expressly excludes credit-card transactions from its temporary-holding rules, although cardholders may have separate dispute or chargeback remedies.

A hold is also not automatically a refund. If verification reasonably establishes that the funds came from social engineering, money muling, unlawful activity, an illegal source, or a transaction without an underlying economic purpose, the rules permit return of the held amount to the source institution. If the beneficiary proves the transaction was legitimate, or the holding period expires without a lawful basis to retain or return the money, the hold must be lifted unless a court has extended it.

Only funds still found within the transaction chain can practically be held. Money already withdrawn, converted, spent, or moved outside reachable institutions may require law-enforcement investigation, court process, or a separate civil claim.

Does authorizing the transfer prevent recovery?

Not necessarily. There is an important difference between:

A transaction you did not make or approve, such as one caused by account takeover; and
A transfer you personally confirmed because a scammer deceived, pressured, or impersonated someone.

A bank or e-wallet may initially describe the second type as “authorized.” That fact matters, but it does not automatically prove that the transaction was legitimate or that no remedy exists. AFASA expressly recognizes transactions facilitated through social-engineering schemes.

State exactly what occurred. Do not merely say “unauthorized” if you entered an OTP or pressed the transfer button. Explain the deception—for example, that the caller pretended to be bank staff, the seller used a false identity, or the recipient promised a nonexistent investment. Accuracy protects your credibility and helps the institution apply the proper rules.

When the institution may be liable

AFASA states that covered institutions may be liable to restore funds when loss results from their failure to employ adequate risk-management systems and controls or to exercise the highest degree of diligence in preventing loss or damage arising from offenses covered by the law. A criminal conviction is not a prerequisite to restitution.

The law also provides liability where an institution fails to hold disputed funds when required by AFASA and BSP regulations, including restitution for loss or damage arising from that failure.

This does not mean every scam loss must automatically be reimbursed. Liability may depend on matters such as:

When and how the report was received
Whether the funds were still available to be held
Whether the transaction was within the applicable rules
The security measures and fraud alerts in place
Whether the institution followed the required tracing, holding, verification, and notification procedures
What the account owner did before and after the transaction
The institution’s contract and other applicable consumer-protection rules

Ask for the institution’s factual findings and legal or contractual basis in writing. A generic statement that the transfer was “successful,” “authorized,” or completed using an OTP may not answer whether its fraud-management and complaint-handling duties were properly performed.

Report the crime separately

A complaint to a bank or e-wallet is not a substitute for a criminal report. For an online or technology-assisted scam, approach the nearest PNP station, a PNP Anti-Cybercrime Group office, or the NBI Cybercrime Division. The DOJ’s cybercrime-reporting page identifies the government units that receive cybercrime reports, while the NBI directory lists its investigative divisions.

Bring or prepare:

A chronological written account
Government-issued identification
Transaction receipts and account statements
Full chat, email, SMS, and call records
Usernames, profile links, phone numbers, email addresses, websites, and advertisements
Recipient names, account numbers, wallet numbers, QR codes, and transaction references
Documents showing the offer or representations made
The institution’s acknowledgment, case number, and responses
Any delivery records, contracts, invoices, or proof that goods or services were not provided

Possible offenses depend on the facts. They may include estafa under Article 315 of the Revised Penal Code, offenses under AFASA, identity theft or other offenses under the Cybercrime Prevention Act, and violations of special laws. When a crime under the Revised Penal Code or a special law is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act may apply. Investigators and prosecutors—not the complainant—should determine the proper charge from the evidence.

Avoid publicly accusing a named person unless necessary and legally justified. A recipient account may belong to a money mule, identity-theft victim, intermediary, or another person whose precise role still requires investigation.

Escalating an unresolved financial complaint to the BSP

For a complaint against a BSP-supervised institution, first use that institution’s Financial Consumer Protection Assistance Mechanism. This is the required first-level recourse.

If its action or response is unsatisfactory, escalate through the BSP Consumer Assistance Mechanism, which is a second-level recourse. The BSP’s current instructions allow escalation through the BSP Online Buddy on the BSP website or the BSP’s official Facebook page. If the chatbot is unavailable, the BSP says a completed Complaint/Inquiry/Reply form may be emailed to consumeraffairs@bsp.gov.ph, together with proof that the complaint was first raised with the institution and the supporting documents. See the BSP’s official complaint guide.

Include:

Your institution complaint or reference number
The date and channel used to report the scam
The institution’s replies and final decision, if any
The disputed amount and transaction details
The precise resolution requested
Evidence supporting your version of events

Do not send PINs, passwords, OTPs, full card credentials, passbooks, passports, or unnecessary identity documents to an unverified address or social-media account. The BSP’s complaint guide specifically warns consumers not to provide such sensitive information for complaint processing.

BSP assistance does not replace a criminal complaint, automatically compel reimbursement, or adjudicate every private dispute. Depending on the issue, formal adjudication or court action may still be necessary.

Other agencies that may be relevant

The right forum depends on the scheme:

Report suspected securities or investment solicitation to the Securities and Exchange Commission.
Raise consumer-transaction concerns within its jurisdiction with the Department of Trade and Industry.
Report insurance-related concerns to the Insurance Commission.
Use the platform’s official reporting process for a fake marketplace listing, social-media account, website, or advertisement, while preserving the evidence before the content disappears.

An agency’s investigation or regulatory action does not necessarily recover an individual victim’s money. Continue pursuing the financial-institution, criminal, and appropriate civil routes.

Evidence to preserve

Save evidence in its original form whenever possible:

Complete conversations, not only selected screenshots
Original emails with headers
SMS messages and call logs
Audio or video files lawfully in your possession
Account statements and official transaction receipts
Reference numbers, timestamps, IP or device alerts, and login notices
URLs, profile identifiers, QR codes, advertisements, and website details
Contracts, invoices, delivery promises, and proof of payment
Copies of every complaint and response

For screenshots, include the account name, date, time, and surrounding conversation. Export chats where the platform permits. Save webpages or profiles as PDF and record the full URL. Keep original files unchanged and make working copies. Do not crop, annotate, forward, or repeatedly compress the only copy.

Create a timeline showing:

How contact began
What representations were made
What information or access you disclosed
Each payment or attempted payment
When you discovered the problem
When and how you notified each institution or authority
What each recipient said or did

Back up the evidence in at least two secure locations. Do not surrender the only copy of a device or document without obtaining a receipt and confirming how it will be preserved.

Seeking repayment outside the temporary-hold process

Recovery may also be pursued through:

A voluntary refund or settlement
A card dispute or chargeback
Restitution or return of property connected with a criminal case
A civil claim against the responsible person
A properly supported claim against a financial institution
Provisional court remedies where the legal requirements are met

A demand letter can document the amount sought and give the recipient a clear opportunity to return it, but do not alert a suspect if investigators advise that doing so could jeopardize an entrapment, preservation request, or other lawful operation.

Small claims procedure may be available for certain qualifying money claims within the current jurisdictional limit, including specified claims arising from loans, leases, services, sales, mortgages, and the civil aspect of a bouncing-check case. A scam-related damages claim does not automatically qualify merely because the amount is below the limit. Classification, venue, parties, and supporting documents matter. Consult the Supreme Court’s information on first-level court procedures or a lawyer before relying on small claims.

For substantial losses or identifiable assets at risk of disappearance, obtain legal advice promptly. Court orders to preserve assets or extend a temporary hold require specific facts, evidence, proper parties, and compliance with procedural rules.

Common mistakes that reduce the chance of recovery

Waiting for the scammer to “process” a refund before contacting the institution
Reporting only to the receiving bank instead of immediately notifying the institution that sent the money
Failing to obtain a case-reference number
Missing the initial five-day period for submitting documents supporting an extended hold
Deleting messages, reinstalling the device, or closing an account before preserving evidence
Describing a deception-induced transfer inaccurately as purely unauthorized
Sending more money for supposed taxes, unlocking fees, verification deposits, or recovery charges
Paying a self-described hacker or recovery agent who promises guaranteed retrieval
Posting unverified names and account details publicly
Assuming a police blotter alone starts every required bank, prosecutor, or court process
Signing a waiver, quitclaim, or settlement without understanding whether it releases other claims
Fabricating or exaggerating facts; malicious reporting that causes funds to be held is itself punishable under AFASA

When legal help is urgent

Seek help from a Philippine lawyer without delay when:

The loss is substantial or essential living funds are involved.
The institution denies the claim despite evidence of prompt reporting or security failures.
A 30-day hold is about to expire and a court extension may be necessary.
The suspect or assets have been identified and may disappear.
Multiple victims, money mules, shell companies, cryptocurrency, or overseas transfers are involved.
You received a subpoena, demand, freeze notice, or notice that your own account was used.
You were asked to lend, sell, or register an account, SIM, or e-wallet for another person.
The scam includes threats, extortion, intimate images, trafficking, or danger to anyone’s safety.
You are considering a settlement, waiver, affidavit of desistance, or release of claims.
Limitation or prescriptive periods may be approaching.

Those unable to afford private counsel may inquire with the Public Attorney’s Office, subject to its legal and indigency requirements.

Frequently asked questions

Can the bank reverse an InstaPay, PESONet, or e-wallet transfer?

A completed transfer is not automatically reversible. The originating institution can trace the transaction and request a hold under applicable rules, but recovery depends largely on whether the funds remain in reachable accounts and what coordinated verification establishes.

Should I contact the receiving bank myself?

You may report the recipient account through the receiving institution’s official fraud channel, but immediately notify your own originating institution as well. Under BSP rules, the originating institution leads the complaint-initiated holding request and coordinates with receiving institutions.

Do I need a police report before notifying my bank?

No. Notify the institution immediately. A complaint through its 24/7 fraud-reporting channel can trigger the initial process. A sworn complaint, affidavit, police report, or other supporting document may then be needed within the initial holding period to support an extension.

What if I gave the OTP or personally pressed “send”?

Disclose that accurately. It may affect the assessment, but a transaction induced by impersonation or social engineering can still be disputed. The institution should examine the entire transaction and its own compliance with applicable safeguards.

Will filing with the BSP refund my money?

Not automatically. BSP-CAM facilitates handling of complaints against BSP-supervised institutions and serves as second-level recourse. Restitution depends on the applicable law, evidence, institutional findings, and—where necessary—adjudication or court action.

Can I recover money already withdrawn by the scammer?

Recovery becomes more difficult once funds leave the financial system or are converted, spent, or transferred abroad, but a criminal investigation or civil case may still identify responsible persons or reachable assets. Report the incident even if the institution says no funds remain.

Is a screenshot enough?

A screenshot can help, but it is stronger when supported by complete chat exports, original messages or emails, transaction records, account statements, device alerts, URLs, witness information, and a clear timeline. Preserve originals and surrounding context.

Should I pay someone who promises to recover the money?

Be extremely cautious. “Recovery scams” target prior victims and demand advance fees, passwords, OTPs, remote access, or cryptocurrency. Use licensed lawyers, official authorities, and verified institutional channels. No legitimate person can guarantee recovery.

Official legal and procedural sources

This article provides general Philippine legal information, not advice for a particular case. Rights, remedies, deadlines, and the proper forum can depend on the transaction, documents, institutions, parties, and later legal developments. Official sources and procedures were checked as of 15 September 2026.