If money has just been sent to a scammer’s Philippine bank account or e-wallet, the goal is to stop the money before it is withdrawn, transferred again, or cashed out. In Philippine practice, victims often say they want to “freeze the scammer’s account,” but there are actually two different remedies: a fast temporary holding of disputed funds by the bank or e-wallet under the Anti-Financial Account Scamming Act, and a formal freeze order issued by the Court of Appeals upon application by the Anti-Money Laundering Council. The steps below explain what to do immediately, what documents to prepare, which agencies are involved, and what to expect if the money has already moved.

What “freezing a bank account” really means in the Philippines

In ordinary language, “freeze the account” means “do not let the scammer withdraw the money.” Legally, the Philippines has several mechanisms that may achieve that result, but they are not the same.

Remedy	Who can trigger or request it	Who issues or acts on it	Typical effect
Temporary holding of disputed funds under RA 12010, the Anti-Financial Account Scamming Act or AFASA	The victim’s complaint, the bank’s fraud management system, or information from another financial institution	The bank, e-wallet provider, or other BSP-supervised institution	Holds disputed funds initially, then verifies the transaction with other involved institutions
AMLA freeze order	AMLC, usually based on law enforcement, financial intelligence, bank reports, or investigation	Court of Appeals	Freezes monetary instruments or property linked to unlawful activity or money laundering
Cybercrime preservation or disclosure orders	Law enforcement, such as NBI or PNP cybercrime units	Court or law enforcement process under cybercrime rules	Preserves or obtains digital evidence such as account data, logs, subscriber information, and transaction records
Criminal restitution or civil recovery	Prosecutor, court, or private complainant through criminal/civil case	Court	May result in return of money, damages, forfeiture, or other remedies after proceedings

The most important practical point is this: a private scam victim does not personally file an AMLA freeze-order petition in the Court of Appeals. Under the Anti-Money Laundering Act, the AMLC files a verified ex parte petition, and the Court of Appeals determines probable cause. The victim’s role is to move fast, preserve evidence, report correctly, and give banks and investigators enough detail to trace and hold the funds.

Legal basis for stopping scam funds

Republic Act No. 12010, signed in 2024, is the main Philippine law designed specifically for financial account scams. AFASA covers financial accounts such as bank deposit accounts, transaction accounts, credit card accounts, and e-wallets, and applies to banks, non-banks, financial institutions, payment service providers, and other institutions under BSP supervision. (Lawphil)

AFASA penalizes money muling, including using, borrowing, selling, lending, buying, renting, or allowing the use of a financial account to receive, move, or withdraw proceeds known to come from crimes, offenses, or social engineering schemes. It also penalizes social engineering schemes, meaning deception or fraud used to obtain sensitive identifying information that results in unauthorized access or control over a person’s financial account. (Lawphil)

AFASA gives financial institutions authority to temporarily hold funds subject of a disputed transaction for a period set by BSP, not exceeding 30 calendar days unless extended by a competent court. A transaction may be treated as disputed if there are reasonable grounds to believe it is unusual, has no clear economic purpose, comes from an unknown or illegal source or unlawful activity, or was facilitated through social engineering. (Lawphil)

The implementing BSP rules, particularly BSP Circular No. 1215, Series of 2025, regulate the temporary holding of disputed funds and the coordinated verification process. The rules provide that disputed funds may be held for not more than 30 calendar days, consisting of initial and extended holding periods, and that the period may be extended further only by a court. Once held, the equivalent amount is credited but cannot be withdrawn during the holding period. (Bureau of the Treasury)

Separate from AFASA, the Anti-Money Laundering Act or AMLA, Republic Act No. 9160 as amended, allows the Court of Appeals to issue a freeze order upon a verified ex parte petition by the AMLC if probable cause exists that a monetary instrument or property is related to unlawful activity. The current rule is generally an initial 20-day freeze order, with a summary hearing within that period, and a total Court of Appeals freeze period not exceeding six months, subject to proper cases and asset preservation proceedings. (Supreme Court E-Library)

Online scams may also involve estafa under Article 315 of the Revised Penal Code, especially when deceit or false pretenses induced the victim to part with money. Article 45 of the Revised Penal Code also recognizes forfeiture of the proceeds and instruments of a felony. (Lawphil) Depending on the facts, other laws may apply, including the Cybercrime Prevention Act of 2012, RA 10175; the Access Devices Regulation Act, RA 8484 as amended by RA 11449; and the Electronic Commerce Act, RA 8792, which supports the legal use of electronic documents and data messages. (Lawphil)

Step-by-step guide: what to do in the first 24 hours

1. Secure your own accounts first

Before chasing the receiving account, protect your own access.

Change passwords, revoke suspicious device access, disable linked cards if necessary, and call your bank or e-wallet provider’s official fraud hotline. If the scam involved OTPs, SIM swap, phishing links, remote-access apps, or screen sharing, tell the bank exactly that. Do not delete the scammer’s messages yet because they may be evidence.

2. Gather the transaction details banks actually need

Banks cannot act on vague reports such as “I was scammed by a person on Facebook.” They need transaction identifiers.

Prepare:

Amount sent
Date and exact time of transfer
Sending bank or e-wallet
Receiving bank, e-wallet, or payment platform
Receiving account name, account number, mobile number, QR code, or merchant name
InstaPay, PESONet, QR Ph, remittance, or internal transfer reference number
Screenshots of transfer receipts
Screenshots of chat messages, marketplace posts, profiles, phone numbers, email addresses, usernames, URLs, and payment instructions
Short timeline of what happened
Your valid ID and proof that the sending account belongs to you

For mobile screenshots, include the phone’s status bar where possible so the date and time are visible. For social media profiles, capture the profile URL, not just the display name. Scammers often change names after receiving payment.

3. Report immediately to your sending bank or e-wallet

Your first formal report should be to the originating financial institution, meaning the bank or e-wallet from which your money was sent. Use the official fraud hotline, app support channel, branch, or published email—not a number from a random social media post.

Use clear language:

“I am reporting a suspected online scam and disputed transaction. Please treat this as a complaint-initiated holding request under AFASA, create a case reference number, coordinate with the receiving financial institution, and tell me whether the disputed funds can be temporarily held.”

Under the BSP rules, a complaint by the source account owner through the financial institution’s 24/7 fraud reporting channel can trigger complaint-initiated holding. The bank should verify your identity, identify the disputed transaction, prepare a disputed transaction report, preserve your account if needed, and coordinate with receiving institutions. (Bureau of the Treasury)

Ask for these details before ending the call or chat:

Case or ticket number
Name or ID of the agent who received the report
Date and time of report
Whether the receiving institution has been contacted
Whether an initial hold request was sent
What documents are still needed
When you should expect an update

4. Report to the receiving bank or e-wallet, but manage expectations

You may also report the receiving account to the receiving bank or e-wallet. This is useful because the receiving institution may already have its own fraud management alerts. However, do not expect the receiving bank to disclose the account holder’s address, balance, KYC documents, or transaction history to you directly.

During the coordinated verification process, financial institutions may share necessary information with each other and with proper authorities, but that does not mean the victim can personally obtain confidential banking data. AFASA and BSP rules allow information-sharing for investigation and verification while still requiring safeguards and limited use. (Bureau of the Treasury)

5. Call the government anti-scam hotline and document the report

The Inter-Agency Response Center hotline 1326 is a government anti-scam reporting channel connected with cybercrime response. Public government information states that 1326 operates as a 24/7 hotline for reporting scams, including investment scams, phishing, text scams, email scams, caller ID spoofing, romance scams, and other online scams. (Philippine News Agency)

If you are outside the Philippines, use your bank’s international hotline, app support, email fraud channel, or a representative in the Philippines. Keep screenshots or call logs showing that you reported promptly.

6. File a formal cybercrime or estafa complaint

A bank report may help stop funds, but a formal complaint helps investigators obtain evidence and coordinate with financial institutions. You may file with the NBI Cybercrime Division, the PNP Anti-Cybercrime Group, or appropriate local law enforcement depending on the case.

The NBI’s citizen charter for computer-crime complaints describes the process as filing a complaint, undergoing preliminary interview and investigation, executing sworn statements or submitting affidavits, and submitting supporting documents. It lists no filing fee for these steps and indicates an initial processing time of about one hour and ten minutes, although the actual investigation can take much longer depending on complexity. (National Bureau of Investigation)

For the complaint, prepare a short affidavit or sworn statement containing:

Your complete name, address, contact details, and government ID.
The date and time you first contacted the scammer.
The exact representations made to you.
Why you believed the transaction was legitimate.
How much you sent, when, and to what account.
What happened after payment.
The steps you already took with the bank, e-wallet, platform, CICC, NBI, or PNP.
A list of attached screenshots, receipts, and reference numbers.

7. Ask investigators about preservation and financial-account tracing

In online scams, evidence disappears quickly. Chat accounts get deleted, SIMs are abandoned, and funds move through several accounts.

Under the Cybercrime Prevention Act and the Rule on Cybercrime Warrants, traffic data and subscriber information are generally preserved for at least six months from the transaction, while content data may be preserved for six months from receipt of a preservation order, with possible extension. A Warrant to Disclose Computer Data may require disclosure of subscriber information, traffic data, or relevant data within 72 hours from receipt of the order in relation to a valid complaint. (Office of the Court Administrator)

Ask the investigator handling your case whether preservation requests, cybercrime warrants, or referrals to appropriate agencies are needed. The BSP also has authority under AFASA to inquire into financial accounts that may have been involved in prohibited acts, and BSP Circular No. 1214 identifies competent authorities such as the PNP, NBI, DOJ, AMLC, CICC, and financial regulators.

8. Escalate unresolved bank handling to BSP

For bank and e-wallet complaints, the BSP expects consumers to first use the financial institution’s own Financial Consumer Protection Assistance Mechanism or FCPAM. If the institution does not act, gives an unsatisfactory response, or mishandles the matter, you may escalate through the BSP Online Buddy or BSP consumer assistance channels. BSP’s official consumer page states that BOB can guide users through the Consumer Assistance Mechanism and refer concerns to the involved BSP-supervised financial institution. (Bureau of the Treasury)

BSP contact information for unresolved complaints includes the Consumer Protection and Market Conduct Office, with email address consumeraffairs@bsp.gov.ph and published direct lines. (Bureau of the Treasury) BSP materials on its Consumer Assistance Mechanism state that the entire BSP-CAM process may take around 55 to 65 days from receipt of the complaint to termination, so this is usually not the first emergency tool for stopping money in the first few hours. (Bureau of the Treasury)

What happens after the bank receives your scam report

Under BSP Circular No. 1215, the temporary holding and coordinated verification process may begin through:

A complaint filed by the source account owner;
A fraud management system finding by the sending or receiving institution; or
A holding request based on information from another institution. (Bureau of the Treasury)

The rules generally provide an initial holding period of not more than five calendar days. If the disputed funds were transferred within the same institution, that institution may initially hold them. If the funds moved to another institution, the sending institution may transmit an initial holding request to the receiving institution or later institutions in the transaction chain. (Bureau of the Treasury)

If extended holding is warranted, the rules allow an additional period of not more than 25 calendar days, making the total temporary holding period not more than 30 calendar days unless a court extends it. (Bureau of the Treasury)

During coordinated verification, involved institutions may trace, verify, and validate the transaction by sharing relevant information, reviewing sworn complaints, police reports, fraud management findings, investigation reports, and other supporting documents. They may also communicate with account owners to ask about the purpose of the transaction, relationship of the parties, source of funds, and proof of legitimacy or illegitimacy. (Bureau of the Treasury)

At the end of the process, the bank may release funds to the beneficiary account owner if the transaction is substantiated as legitimate or the holding period lapses. But if the beneficiary account owner waives the claim, or the verification process reasonably concludes that the funds are linked to money muling, unlawful activities, illegal sources, lack of economic purpose, or social engineering, the institution holding the funds may return the equivalent amount to the source account owner’s institution. (Bureau of the Treasury)

When an AMLC freeze order becomes relevant

AFASA temporary holding is designed for urgent disputed transactions. An AMLC freeze order is different. It is a court-supervised anti-money laundering remedy used when the account, funds, or related property may be connected to unlawful activity or money laundering.

The Supreme Court has explained in Melissa Manganip, et al. v. Republic, involving accounts linked to alleged unlawful activity, that freeze orders may cover related and materially linked accounts if the Court of Appeals independently finds probable cause. The freeze must also be limited to the amount or value that the court finds probably represents proceeds of a predicate offense. (Supreme Court of the Philippines)

This matters in scam cases because stolen money often moves through several accounts:

Victim sends money to Account A.
Account A transfers to Account B within minutes.
Account B splits the amount to several e-wallets.
Part is withdrawn through cash-out agents.
Another part is used for crypto, gaming credits, online purchases, or remittance.

A proper AMLC freeze request may target accounts or monetary instruments linked to that movement, but the account trail must be supported by evidence. That is why your first reports, receipts, reference numbers, and sworn complaint are important.

Documents usually needed

Document or information	Why it matters
Valid government ID or passport	Proves identity of complainant
Proof of ownership of sending account	Shows you are the source account owner
Transfer receipt or transaction confirmation	Gives amount, date, time, reference number, and destination
Screenshots of scam conversation	Shows deceit, payment instructions, promises, threats, or false identity
Profile links, phone numbers, email addresses, QR codes	Helps trace the scammer and connected accounts
Bank or e-wallet case number	Shows prompt reporting and allows follow-up
Police, NBI, PNP, or CICC report number	Supports coordinated verification and possible legal action
Sworn affidavit or complaint-affidavit	Needed for formal investigation and prosecution
Authorization letter or Special Power of Attorney	Needed if someone else will file or follow up for you

For Filipinos abroad and foreigners, a Philippine representative may need a Special Power of Attorney to file, follow up, receive notices, or coordinate with banks and agencies. If signed abroad, the document may need notarization, apostille, or Philippine consular notarization depending on where it is executed and where it will be used. DFA apostille guidance treats notarized instruments such as Special Powers of Attorney as documents that may require proper authentication steps. (Apostille Philippines)

Common problems victims face

The money was transferred out before the bank acted

This is common. Scam accounts are often mule accounts used only for minutes or hours. Even if the first receiving account is empty, the transaction trail may still matter. Under BSP rules, coordinated verification can involve institutions in the disputed transaction chain, even if funds were transferred onward or withdrawn. (Bureau of the Treasury)

The receiving bank refuses to give the scammer’s details

This is frustrating but normal. Banks generally cannot give private account information directly to a victim just because the victim asks. The proper route is bank-to-bank coordination, BSP processes, law enforcement requests, cybercrime warrants, AMLC involvement, or court orders.

The police report alone did not freeze the account

A police report is important evidence, but it is not automatically a freeze order. It can support bank verification, cybercrime investigation, AMLC referral, prosecutor action, and future court remedies.

The bank says it was an “authorized” transfer

Many scam cases involve authorized push payments: the victim personally sent the funds because of deception. That does not automatically defeat the complaint. AFASA expressly covers social engineering schemes and disputed transactions facilitated by deception, but the evidence must show why the transfer was fraudulent and why the receiving account appears connected to the scam. (Lawphil)

The scammer used a real person’s name

Many mule accounts are opened by real people who sold, rented, lent, or allowed use of their accounts. Under AFASA, selling, lending, buying, renting, or allowing use of a financial account for criminal proceeds may constitute money muling. (Lawphil)

The victim is abroad

Being outside the Philippines does not prevent reporting, but it adds practical hurdles. Use official bank channels immediately, preserve electronic evidence, and authorize a trusted Philippine representative if physical filing is required. For affidavits or SPAs signed abroad, check notarization, apostille, or consular requirements early because investigators, banks, or prosecutors may require properly executed documents.

Frequently Asked Questions

Can I personally ask the Court of Appeals to freeze the scammer’s bank account?

For an AMLA freeze order, no. The AMLC files the verified ex parte petition, and the Court of Appeals decides whether probable cause exists. As a victim, you help by reporting quickly, giving evidence, filing a formal complaint, and asking investigators or banks to coordinate with the proper agencies.

Can a bank or e-wallet hold scam funds without a court order?

Yes, under AFASA and BSP rules, BSP-supervised institutions may temporarily hold disputed funds for a limited period while conducting coordinated verification. The total administrative holding period is generally not more than 30 calendar days unless a court extends it. (Bureau of the Treasury)

How fast should I report an online scam transaction?

Report immediately—ideally within minutes. Many scam transfers are moved or cashed out quickly. The earlier you provide the transaction reference number and receiving account details, the higher the chance that funds may still be located and held.

How long is the initial bank hold under AFASA?

The initial holding period under the BSP rules is generally not more than five calendar days. If justified, it may be extended by up to 25 additional calendar days, for a total not exceeding 30 calendar days unless a court extends it. (Bureau of the Treasury)

Will I automatically get my money back if the receiving account is held?

Not automatically. The bank must complete coordinated verification. Funds may be returned if the beneficiary waives the claim or if the verification process reasonably concludes that the funds are linked to money muling, unlawful activity, illegal sources, lack of economic purpose, social engineering, or similar grounds. (Bureau of the Treasury)

What if the scammer withdrew the money already?

You may still file complaints and submit evidence. Investigators may trace the transaction chain, request preservation or disclosure of data, identify mule accounts, and pursue criminal, civil, or forfeiture remedies. Recovery is harder once funds are withdrawn, but the paper trail can still support prosecution and possible restitution.

Is malicious reporting punishable?

Yes. AFASA penalizes malicious or bad-faith reports that are completely unwarranted or false and result in temporary holding of funds. This is why your complaint should be factual, specific, and supported by receipts and screenshots. (Lawphil)

Should I still file with NBI or PNP if I already reported to the bank?

Yes. The bank process focuses on the transaction and possible temporary holding. NBI or PNP complaints support criminal investigation, preservation of digital evidence, identification of suspects, prosecutor action, and possible AMLC or BSP coordination.

Can I post the scammer’s account number online to warn others?

Be careful. Public posting can create privacy, defamation, harassment, or mistaken-identity problems, especially when mule accounts or stolen identities are involved. It is safer to submit the details to your bank, e-wallet provider, platform, CICC, NBI, PNP, BSP, or investigators.

Do I need a lawyer to report to the bank, NBI, PNP, CICC, or BSP?

For the initial reports, usually no. A clear timeline, complete transaction details, screenshots, IDs, and a sworn complaint are often more urgent in the first few hours. Legal assistance may become more important if a large amount is involved, multiple victims are affected, the case involves companies or foreigners, or court proceedings begin.

Key Takeaways

Act within minutes, not days. Scam funds are often moved quickly through mule accounts.
Ask your sending bank or e-wallet to treat the case as a disputed transaction under AFASA and to start coordinated verification.
AFASA temporary holding is different from an AMLA freeze order, which is sought by the AMLC before the Court of Appeals.
Prepare transaction reference numbers, screenshots, profile links, account details, IDs, and a clear timeline.
File with NBI or PNP cybercrime units for formal investigation, and use CICC 1326 for government anti-scam reporting.
Escalate poor bank handling to BSP only after reporting first to the financial institution, unless the situation requires urgent parallel reporting.
Recovery is most realistic when the report is fast, specific, well-documented, and routed through the proper bank, law enforcement, BSP, and AMLC channels.