A frozen bank or e-wallet account after an online scam is frightening, especially when rent, payroll, tuition, or remittance money is trapped. For victims of advance payment scams in the Philippines, the urgent questions are usually the same: can the receiving account be frozen, can the money still be recovered, is this estafa, and what should be filed with the bank, police, NBI, BSP, or DTI? This guide explains how frozen accounts and advance payment scams are treated under Philippine law, what steps victims should take immediately, and what account owners should do if their own account was frozen because it allegedly received scam proceeds.

What “frozen account” means in Philippine scam cases

People often use “frozen account” to describe different situations. The legal remedy depends on which type of freeze or hold applies.

Situation	Who usually acts	What it means in practice
Temporary hold of disputed funds	Bank, e-wallet, payment service provider	The institution holds funds linked to a disputed transaction while it verifies whether the transaction is unusual, illegal, without clear economic purpose, or facilitated by social engineering.
Internal compliance or KYC hold	Bank or e-wallet	The institution restricts transactions because of suspicious activity, incomplete identity verification, unusual account use, or fraud alerts.
AMLA freeze order	Court of Appeals, usually on AMLC petition	A court-issued freeze order under anti-money laundering rules, normally used when funds appear linked to unlawful activity.
Police/NBI investigation request	PNP, NBI, prosecutor, or court	Law enforcement may request preservation of records or help trace funds, but account disclosure and actual freezing still depend on the applicable law, court order, or regulatory authority.

The major recent law is Republic Act No. 12010, the Anti-Financial Account Scamming Act (AFASA), approved in 2024. AFASA covers financial accounts such as bank accounts, credit card accounts, other transaction accounts, e-wallets, and similar financial-service accounts. It specifically targets money mule activity, social engineering, and the use of financial accounts to move scam proceeds. (Lawphil)

Under AFASA, a bank or e-wallet may temporarily hold funds subject of a disputed transaction for the period prescribed by the Bangko Sentral ng Pilipinas (BSP), but not more than 30 calendar days, unless extended by a competent court. A transaction may be treated as disputed when there is reasonable ground to believe it is unusual, has no clear economic purpose, comes from an illegal source or unlawful activity, or was facilitated through social engineering. (Lawphil)

How advance payment scams usually happen

An advance payment scam happens when someone convinces the victim to pay first, then disappears, refuses delivery, invents additional fees, or admits that the promised item or service never existed.

Common Philippine examples include:

Paying a “reservation fee” for a condo, apartment, car, gadget, concert ticket, or puppy that does not exist.
Sending a down payment to a fake Facebook Marketplace, Instagram, TikTok, Telegram, or Viber seller.
Paying “customs release fees,” “tax clearance,” “insurance,” or “anti-money laundering clearance” to receive a fake parcel, loan, prize, inheritance, or investment payout.
Paying a recruitment, visa, travel, or work-abroad processing fee to someone with no license or authority.
Sending money to a romance scammer, fake trading mentor, crypto handler, or “tasking” platform that later demands more money before withdrawal.
Paying a “lawyer,” “bank officer,” “police officer,” or “BSP agent” who promises to unfreeze money for a fee.

The key legal question is not only whether the seller failed to deliver. The question is whether there was deceit from the start.

A simple failed transaction may be civil. For example, a legitimate seller accepted payment but later had a supplier problem and is still identifiable and willing to refund. But if the person used a fake identity, fake proof of ownership, fake tracking number, fake company authority, fake investment license, or fake promise to induce payment, the facts may support a criminal complaint.

Legal basis: laws that may apply

Estafa under the Revised Penal Code

Many advance payment scams are treated as estafa, or swindling, under Article 315 of the Revised Penal Code.

For estafa by deceit under Article 315(2)(a), the Supreme Court has explained that there must be a false pretense or fraudulent representation made before or at the same time as the fraud; the victim relied on it and parted with money or property; and the victim suffered damage. (Supreme Court E-Library)

In practical terms, estafa is stronger when the evidence shows that the scammer:

used a fake name, fake ID, fake business registration, or fake office address;
claimed ownership or authority they did not have;
used edited receipts, fake tracking links, or fake screenshots;
collected money from multiple victims using the same script;
blocked the victim immediately after payment;
moved funds through several accounts or e-wallets; or
demanded more money to “release” a nonexistent payout, parcel, loan, or refund.

AFASA: money mules, social engineering, and disputed funds

AFASA is especially important when the scam involved bank accounts, e-wallets, QR payments, transfers, account takeovers, phishing, or people who “lent” accounts to receive money.

AFASA treats money muling as using, borrowing, buying, renting, selling, lending, or allowing the use of a financial account to obtain, receive, deposit, transfer, or withdraw proceeds known to come from crimes, offenses, or social engineering schemes. It also penalizes recruiting or inducing others to do those acts. (Lawphil)

AFASA also covers social engineering schemes, such as deceiving a person into giving passwords, OTPs, bank details, e-wallet credentials, or other sensitive identifying information that results in unauthorized access or control of the victim’s financial account. (Lawphil)

The BSP’s AFASA implementing regulations, including BSP Circular Nos. 1213, 1214, and 1215, Series of 2025, were designed to help prevent, detect, delay, trace, hold, verify, and recover disputed funds, and to provide procedures for access to financial account information for law enforcement purposes. (Bangko Sentral ng Pilipinas)

Cybercrime Prevention Act

If the scam was committed through a computer system, social media, email, website, messaging app, fake app, phishing link, or online platform, Republic Act No. 10175, the Cybercrime Prevention Act of 2012, may also apply. The law covers cybercrime offenses and provides procedures for investigation and enforcement of cybercrime-related cases. (Supreme Court E-Library)

This matters because many online scam cases need digital evidence preservation: chat logs, IP-related data, account records, platform information, transaction logs, and device information. Ordinary screenshots help, but investigators often need properly preserved digital data and official records from platforms or financial institutions.

Access Devices Regulation Act

If the scam involved stolen card details, OTPs, PINs, account numbers, access codes, counterfeit cards, or fraudulently obtained account access, Republic Act No. 8484, the Access Devices Regulation Act of 1998, may apply. RA 8484 defines “access device” broadly to include cards, codes, account numbers, PINs, or other means of account access used to obtain money, goods, services, or transfer funds. (Lawphil)

Financial Consumer Protection Act

If the problem involves a BSP-supervised institution such as a bank, e-wallet issuer, money service business, remittance company, virtual asset service provider, pawnshop, or payment operator, Republic Act No. 11765, the Financial Products and Services Consumer Protection Act, is relevant. It applies to financial products and services, including deposits, payments, remittances, investments, insurance, securities, and digital financial products, and gives regulators such as the BSP and SEC enforcement powers over covered financial service providers. (Supreme Court E-Library)

This does not mean the BSP automatically refunds every scam loss. But it means consumers have a regulatory complaint route when a financial institution failed to handle the dispute properly, ignored timely reports, failed to follow its own fraud process, or failed to give a proper response through its consumer assistance mechanism.

Anti-Money Laundering Act freeze orders

Some frozen account cases are not just bank-level holds. Under the Anti-Money Laundering Act framework, the Court of Appeals may issue freeze orders when there is probable cause that monetary instruments or property are related to unlawful activity. In 2025, the Supreme Court clarified that related and materially linked accounts may be included, subject to safeguards: the freeze order is effective immediately for 20 days, the Court of Appeals must conduct a summary hearing, extensions should not exceed six months, and the account holder may file a motion to lift. (Supreme Court of the Philippines)

This is different from an ordinary customer-service freeze. If there is a Court of Appeals freeze order, the bank may be legally restricted from releasing funds even if the account owner complains directly to the branch.

What victims should do immediately after sending money

Speed matters. In many scam cases, the receiving account is only the first stop. Funds may be withdrawn, converted, transferred to another wallet, sent to crypto, or split among money mule accounts within minutes or hours.

1. Preserve evidence before confronting the scammer

Do not delete chats, block the scammer, or rely only on screenshots. Save:

full chat history, including profile names, usernames, phone numbers, links, and timestamps;
screenshots of posts, ads, marketplace listings, comments, and seller profile pages;
URLs or profile links, not just display names;
proof of payment, bank transfer receipt, e-wallet reference number, QR code, account name, account number, and time of transfer;
photos, IDs, documents, contracts, invoices, delivery receipts, and tracking numbers sent by the scammer;
voice notes, call logs, email headers, and SMS messages;
proof that you demanded refund or delivery; and
proof that the scammer blocked you, deleted the post, changed names, or continued collecting from others.

For social media and marketplace scams, capture the account URL and unique username while the page is still active. Many victims only save the display name, which the scammer can change.

2. Report to your bank or e-wallet immediately

Contact the financial institution you used to send money. Ask for a fraud or disputed transaction ticket number. Give the receiving account details and request urgent tracing, recall, and holding of disputed funds if still possible.

Use clear words: “I am reporting a suspected scam transaction and requesting immediate hold, tracing, recall, and coordinated verification under applicable BSP and AFASA rules.”

If you know the receiving bank or e-wallet, report to that institution too. Some institutions will only speak to their own customer, but the report can still help trigger fraud monitoring.

3. Escalate to BSP if the financial institution does not act properly

For complaints against BSP-supervised institutions, the BSP requires consumers to first report the matter to the institution’s Financial Consumer Protection Assistance Mechanism (FCPAM) or customer service channel. If unsatisfied, the consumer may escalate through BSP Online Buddy (BOB) or, if BOB is not accessible, submit the BSP complaint form by email with proof that the institution was contacted first.

A BSP complaint is most useful when the issue is the institution’s handling of the fraud report, such as delay, lack of response, failure to provide a reference number, failure to explain the dispute process, or refusal to coordinate despite a timely report.

4. Report the scam to law enforcement

For online scams, victims commonly go to the PNP Anti-Cybercrime Group or the NBI Cybercrime Division. The NBI Citizens Charter for computer-crime victims describes the filing process as filling out a complaint form and submitting it to the division personnel. (National Bureau of Investigation)

Prepare a complaint packet before going:

Government-issued ID.
Chronological narration of what happened.
Printed and digital copies of screenshots and receipts.
Account names, numbers, mobile numbers, usernames, links, and reference numbers.
Proof of payment and bank/e-wallet ticket numbers.
Demand messages and replies, if any.
Names of other victims, if known.

A police report or NBI complaint may also be required by some banks or e-wallets before they take further action.

5. File with DTI if the scam involves an identifiable seller or business

If the issue involves an online seller, store, platform merchant, or business that can be identified, a DTI consumer complaint may help. DTI’s Fair Trade Enforcement Bureau states that Metro Manila complainants may use the DTI consumer complaint portal or submit a complaint form or letter by email or in person; DTI’s e-commerce FAQ also states that complaints against online sellers may be sent to the DTI Fair Trade Enforcement Bureau and copied to its e-commerce office. (Fair Trade Enforcement Bureau)

DTI is usually more useful when there is a real merchant, business name, address, platform store, or registered seller. If the “seller” is an anonymous scammer using fake identities, NBI/PNP and bank/e-wallet fraud reporting are usually more urgent.

6. Consider a civil recovery route

A criminal complaint punishes the offender and may include restitution, but it does not always produce fast recovery. If the scammer is identified and the claim is for money, civil recovery may be possible.

For money claims not exceeding ₱1,000,000, small claims may be available in first-level courts, subject to the rules and the nature of the claim. The Supreme Court has stated that the small claims threshold is ₱1,000,000 and covers claims for money owed under certain contracts, services, loans, credit accommodations, and sale of personal property. (Supreme Court of the Philippines)

Small claims can be practical when the other party is identifiable and can be served with summons. It is less useful when the scammer used a fake name, fake address, or mule account only.

If your own bank or e-wallet account was frozen

Some readers arrive at this topic because their account was frozen after receiving money from someone they do not know, after selling goods online, after acting as a “payment receiver” for a friend, or after accepting a job that required them to receive and transfer funds.

Take this seriously. Under AFASA, lending, selling, renting, or allowing the use of a financial account for scam proceeds may be treated as money muling if the required knowledge and purpose are present. Buying or selling a financial account is also expressly penalized. (Lawphil)

What to do if your account is frozen

Ask the institution for the case or ticket number. Request the reason in writing as far as the institution can disclose.
Do not attempt to move funds through another account. That can make the transaction look more suspicious.
Prepare proof of legitimate source. This may include invoices, delivery receipts, order confirmations, buyer messages, employment contracts, payroll records, loan documents, remittance records, or proof of sale.
Submit updated KYC documents. Provide valid IDs, address proof, business registration, or other documents requested by the institution.
Separate disputed funds from personal funds in your explanation. If only one transaction is disputed, ask whether undisputed funds may be released after verification.
If there is a court freeze order, get a copy if possible. A Court of Appeals AMLA freeze is handled differently from a routine compliance hold.
If summoned by police, NBI, prosecutor, or court, appear and bring documents. Non-response often makes the situation worse.

If you were tricked into being a mule through a fake job, romance scam, “crypto arbitrage,” “merchant payment processor,” or “receive-and-forward commission” scheme, gather proof that you were deceived: job posts, recruiter chats, instructions, promised commission, names used, and where the money was sent after you received it.

Documents victims commonly need

Purpose	Documents or evidence to prepare
Bank/e-wallet fraud report	Transaction receipt, reference number, sending and receiving account details, screenshots, short narration, government ID, contact details
BSP escalation	Proof you first complained to the bank/e-wallet, complaint ticket, institution’s reply or lack of reply, BSP-CAM form or BOB reference
NBI/PNP complaint	Complaint-affidavit or written narration, valid ID, payment proof, screenshots, URLs, device or phone used, platform account details
DTI complaint	Complaint letter/form, proof of transaction, seller details, screenshots, refund demand, respondent’s business or online store information
Prosecutor complaint	Notarized complaint-affidavit, affidavits of witnesses, documentary evidence, digital evidence printouts, respondent details if known
Small claims	Statement of claim, proof of payment, demand letter, contract/order records, respondent’s correct name and address
Frozen account response	KYC documents, proof of legitimate source of funds, invoices, delivery records, contracts, chats, explanation letter, bank ticket number

Practical timelines and bottlenecks

Step	Typical reality
Reporting to bank/e-wallet	Should be done immediately. Recovery chances drop sharply once funds leave the receiving account.
Temporary holding of disputed funds	Under AFASA, the temporary hold period prescribed by BSP cannot exceed 30 calendar days unless extended by a court. (Lawphil)
BSP-CAM escalation	BSP materials state that BSP-CAM is a second-level recourse after the financial institution’s own complaint process, with BOB or email channels available.
NBI/PNP investigation	Initial filing may be quick, but tracing accounts, securing records, identifying real persons behind mule accounts, and preparing a case can take time.
Prosecutor preliminary investigation	Can take months depending on docket congestion, respondent address, subpoena service, and completeness of evidence.
Court case	Criminal cases can take years, especially if there are multiple accused, multiple victims, digital forensics, or unavailable witnesses.
Small claims	Faster than ordinary civil cases, but only useful if the defendant’s true identity and address are known and the claim fits the rule.

Common mistakes that hurt scam cases

Waiting too long before reporting

Many victims spend days negotiating with the scammer because they are embarrassed or still hoping the transaction is real. In financial scams, delay is costly. Report first; continue documenting after.

Paying more to “unlock” money

A common second-stage scam is the “release fee.” The scammer claims your payout, parcel, loan, refund, or investment profit is frozen and you must pay tax, AMLC clearance, customs, attorney’s fee, or bank unlocking fee. Legitimate Philippine government agencies do not require random e-wallet transfers to private persons to release scam proceeds.

Sending your ID to strangers

Scammers use victims’ IDs to open accounts, pass KYC, impersonate the victim, or create new scams. If your ID was sent, include that in your report and monitor your bank, e-wallet, SIM, and credit-related accounts.

Posting accusations without preserving evidence

Public warnings can help other victims, but do not rely on Facebook posts as your case file. Save original evidence first. Avoid publishing private information that may create separate legal issues.

Treating every scam as a barangay matter

Barangay conciliation is useful for disputes between identifiable individuals in the same city or municipality, especially if the matter is genuinely civil. But many online scams involve unknown identities, different cities, corporations, cybercrime, or urgent account tracing. Barangay proceedings do not replace bank fraud reporting, NBI/PNP investigation, or prosecutor filing.

Assuming the named account holder is the mastermind

The account name on the receipt may be a mule, a stolen identity, or someone deceived into receiving funds. Include the account holder in the report if supported by evidence, but also give investigators the full chain: recruiter, seller profile, phone numbers, usernames, QR code, destination accounts, and all instructions.

Special notes for OFWs and foreigners

OFWs and foreigners can be victims of Philippine advance payment scams, especially involving rentals, investments, romance scams, visa processing, online selling, and remittances to Philippine accounts.

If the complainant is abroad, practical preparation matters:

Execute a detailed affidavit abroad if needed.
A document signed before a Philippine Embassy or Consulate may be consularized or notarized for use in the Philippines; Philippine Embassy guidance states that affidavits and special powers of attorney are among documents consular officers can notarize. (Philippine Embassy)
If using a foreign notarized document, check whether an apostille is needed. DFA apostille guidance covers documentary requirements for foreign documents for use in the Philippines. (Apostille Philippines)
Issue a Special Power of Attorney if a trusted representative in the Philippines must file, follow up, or receive notices.
Keep original digital evidence and do not rely only on forwarded screenshots from relatives.

Foreign victims should also note that Philippine banks, e-wallets, prosecutors, and courts usually need clear proof tying the scam to a Philippine account, Philippine suspect, Philippine victim location, or Philippine financial institution. AFASA jurisdiction may apply when elements occur in the Philippines, the device or computer system is partly situated in the country, damage is caused to a person in the Philippines, or the financial account is maintained with an institution operating in the Philippines. (Lawphil)

Frequently Asked Questions

Can a bank or e-wallet freeze money without a court order?

Yes, in some situations. Under AFASA, institutions may temporarily hold funds subject of a disputed transaction within the BSP-prescribed period, not exceeding 30 calendar days unless a court extends it. This is different from a longer AMLA freeze order issued by the Court of Appeals. (Lawphil)

How long can a scam-related account stay frozen?

For an AFASA temporary hold, the statutory ceiling is 30 calendar days unless extended by a competent court. For AMLA freeze orders, the Supreme Court has described an immediate 20-day effectivity period, summary hearing, possible modification or lifting, and extension not exceeding six months. (Lawphil)

Can I get my money back if I was scammed after paying in advance?

Recovery depends on whether the funds are still in the financial system, whether the receiving institution can hold them, whether the account holder is identifiable, and whether the bank/e-wallet complied with applicable dispute procedures. AFASA recognizes restitution in certain cases, including where an institution fails to employ adequate risk controls or fails to temporarily hold disputed funds as required. (Lawphil)

Is an advance payment scam automatically estafa?

Not automatically. The strongest estafa cases show deceit before or at the time the victim paid. If the seller was legitimate but later breached the agreement, it may be civil. If the seller used false pretenses to make the victim pay, it may be estafa under Article 315 of the Revised Penal Code. (Supreme Court E-Library)

Should I file with the bank, BSP, NBI, PNP, DTI, or prosecutor?

Often, more than one route is needed. Report to the bank or e-wallet immediately for possible holding or tracing. Escalate to BSP if a BSP-supervised institution mishandles the complaint. File with NBI or PNP for cybercrime investigation. Use DTI if the respondent is an identifiable seller or business. A prosecutor complaint is the formal path for criminal prosecution.

Can I sue the owner of the receiving bank account?

Possibly, but the facts matter. The receiving account holder may be the scammer, a mule, a hacked account holder, or a deceived person. Include the account details in your complaint and let investigators trace the chain. Civil recovery is more practical if the real person can be identified and served.

What if the scammer is using a fake name?

Still report. Fake names are common. Investigators and financial institutions may trace account registration records, KYC documents, linked phone numbers, devices, transaction history, and related accounts through lawful processes. Your job is to preserve every clue.

Can I file a small claims case for an online scam?

Small claims may work if the case is essentially a money claim, the amount is within the ₱1,000,000 threshold, and the defendant’s true name and address are known. It is usually not effective against anonymous scammers or fake accounts unless the real respondent can be identified. (Supreme Court of the Philippines)

What should I do if my account was frozen but I am innocent?

Ask for the complaint or ticket reference, submit KYC documents, provide proof of legitimate source of funds, explain the transaction clearly, and respond to any bank, e-wallet, police, NBI, prosecutor, or court notice. If the freeze is based on a Court of Appeals order, the remedy is different and may require filing the proper motion before the court.

Can a victim abroad file a complaint in the Philippines?

Yes, but documents should be prepared correctly. Affidavits and SPAs may need consular notarization or apostille depending on where they are executed and how they will be used. A Philippine representative may also need an SPA to file or follow up locally. (Philippine Embassy)

Key Takeaways

Advance payment scams may be estafa when the victim paid because of false pretenses made before or during the transaction.
AFASA is now a key Philippine law for bank and e-wallet scams, money mule accounts, social engineering, and temporary holding of disputed funds.
Report to the bank or e-wallet immediately; fast reporting gives the best chance of tracing or holding funds.
BSP complaints are for problems involving BSP-supervised financial institutions, usually after first reporting through the institution’s own complaint mechanism.
NBI or PNP cybercrime reporting is important when the scam happened online or involved digital evidence.
DTI complaints may help when the respondent is an identifiable online seller or business.
A frozen account may be a temporary AFASA hold, an internal compliance hold, or a court-issued AMLA freeze order; each has different remedies.
Victims should preserve full digital evidence, not just screenshots, and should avoid paying any additional “release,” “clearance,” or “unlocking” fee.