If you were tricked into sending money to a bank account, GCash, Maya, or another Philippine e-wallet, speed matters. The practical goal is not simply to “report the scam.” It is to give your bank or e-wallet enough specific information to trace the transfer, trigger a temporary hold of disputed funds, coordinate with the receiving institution, and preserve evidence for a criminal complaint. Philippine law now gives banks and BSP-supervised e-wallets clearer authority to hold scam-related funds, but the process is time-sensitive and depends heavily on how complete your first report is.
Can You Freeze a Bank or E-Wallet Account After an Online Scam?
In the Philippines, ordinary victims usually cannot personally “freeze” another person’s bank or e-wallet account by merely demanding it. What you can do is ask the involved financial institution to act under its fraud process.
There are two different concepts people often confuse:
| Term people use | What it usually means in practice | Who can do it |
|---|---|---|
| “Freeze the account” | A legal freeze order over an account or property, usually under anti-money laundering law | Court of Appeals, upon petition by the Anti-Money Laundering Council |
| “Hold the funds” | A temporary restriction on scam-related funds while the transaction is verified | Bank, e-wallet, or other BSP-supervised institution under AFASA and BSP rules |
| “Block my account” | Protecting your own account from further unauthorized transfers | Your own bank/e-wallet |
| “Reverse the transfer” | Returning funds to the source account if rules and verification support it | Involved financial institutions, depending on results of verification |
For most scam victims, the urgent remedy is the temporary holding of disputed funds, not an immediate court freeze order.
This remedy is now covered by the Anti-Financial Account Scamming Act, Republic Act No. 12010, also called AFASA, and the BSP’s implementing rules, especially BSP Circular No. 1215, Series of 2025.
The Legal Basis for Holding Scam-Related Funds
Anti-Financial Account Scamming Act or AFASA
AFASA applies to banks, non-banks, e-wallets, payment service providers, and other financial institutions under the supervision of the Bangko Sentral ng Pilipinas.
It specifically covers financial accounts, including:
- Bank deposit accounts
- Transaction accounts
- E-wallets
- Payment accounts
- Other accounts used for financial products or services
AFASA defines and penalizes conduct commonly seen in online scams, such as:
- Money muling — using, lending, selling, renting, or allowing the use of an account to receive or move criminal proceeds.
- Social engineering schemes — using deception, fake identities, phishing, fake customer support, fake investment offers, or electronic messages to obtain sensitive account information.
- Buying or selling financial accounts — a common method used by scam networks to hide the real operator.
Under Section 7 of AFASA, institutions may temporarily hold funds subject of a disputed transaction for the period prescribed by the BSP, which cannot exceed 30 calendar days unless extended by a competent court.
BSP Circular No. 1215 and the 5-day / 30-day rule
Under BSP Circular No. 1215, the usual process is:
- Initial holding of disputed funds for up to 5 calendar days.
- Possible extended holding for up to 25 additional calendar days.
- Total temporary holding period of up to 30 calendar days, unless a court extends it.
This is important because a victim’s first report should not be vague. The bank or e-wallet needs enough information to identify:
- The source account
- The transaction reference number
- The amount
- The date and time
- The receiving institution
- The beneficiary account or wallet, if known
- Why the transaction appears to be a scam or unauthorized transaction
The BSP rules also require a coordinated verification process, meaning the source institution and receiving institution should coordinate to trace the disputed transaction chain. This matters when funds move from one e-wallet to another wallet, then to a bank, then to cash-out.
Financial Products and Services Consumer Protection Act
The Financial Products and Services Consumer Protection Act, Republic Act No. 11765, protects financial consumers’ rights, including:
- Protection of consumer assets against fraud and misuse
- Timely handling and redress of complaints
- Fair and equitable treatment
- Data privacy and protection
It also supports the BSP consumer complaint system. In practice, this means you normally report first to the bank or e-wallet’s Financial Consumer Protection Assistance Mechanism or FCPAM. If the response is inadequate, you may escalate to the BSP through its Consumer Assistance Channels and BSP Online Buddy.
Cybercrime Prevention Act
Many online scams may also involve the Cybercrime Prevention Act of 2012, Republic Act No. 10175, especially when the scam was committed through Facebook, Messenger, Telegram, Viber, SMS, email, fake websites, QR codes, or online banking credentials.
RA 10175 is important because cybercrime investigators may seek cybercrime warrants, preservation orders, and disclosure of computer data. These are useful for obtaining subscriber information, traffic data, device data, account logs, IP logs, and other digital evidence.
Estafa under the Revised Penal Code
Many online scams are also prosecuted as estafa, or swindling, under Article 315 of the Revised Penal Code. Estafa generally involves deceit or abuse of confidence causing damage to another person.
Common examples include:
- Fake sellers who never deliver goods
- Fake investment schemes
- Romance scams
- Fake job processing fees
- Fake loan release fees
- Fake customs or delivery charges
- Impersonation scams involving fake bank, government, or company representatives
If the fraud was committed through information and communications technology, RA 10175 may also apply.
AMLA freeze orders
A true legal freeze order is usually connected with the Anti-Money Laundering Act, Republic Act No. 9160, as amended by RA 11521. Under the AMLA, the Anti-Money Laundering Council may file a verified ex parte petition with the Court of Appeals. If the Court of Appeals finds probable cause that the monetary instrument or property is related to unlawful activity, it may issue a freeze order.
This is not the ordinary first step for a small consumer scam. It is usually relevant where the money trail suggests money laundering, organized fraud, large-scale scams, multiple victims, mule accounts, or proceeds of predicate crimes.
The Supreme Court in Manganip v. Republic of the Philippines, Powerlink.com Corp. v. Republic of the Philippines, and Codeworks.ph Inc. v. Republic of the Philippines recognized that related and materially linked accounts may be covered by AMLA freeze orders, but with safeguards. The freeze should be based on probable cause, limited to the amount probably connected to unlawful proceeds, and subject to court review. The Supreme Court’s summary is available through the official Supreme Court announcement on AMLA freeze order safeguards.
What to Do Immediately After You Discover the Scam
1. Stop communicating with the scammer
Do not send more money, even if the scammer claims that payment is needed to:
- “Release” your funds
- “Unfreeze” your account
- Pay tax, customs, or clearance fees
- Upgrade your account
- Recover your previous payment
- Avoid arrest or blacklisting
Many victims lose more money because the first scam becomes a second “recovery” scam.
2. Secure your own account
If your own bank or e-wallet credentials may have been compromised:
- Change your password and PIN.
- Log out all devices, if the app allows it.
- Disable linked devices.
- Reduce transaction limits.
- Remove saved cards.
- Turn on multi-factor authentication.
- Call your bank or e-wallet and ask them to restrict outgoing transfers if needed.
This protects your remaining funds while the disputed transfer is being reported.
3. Report to your own bank or e-wallet first
Your own bank or e-wallet is usually the originating financial institution. Under the BSP rules, complaint-initiated holding begins through the source account owner’s report to the originating institution’s 24/7 fraud reporting channel or FCPAM.
When you contact them, use clear wording:
I am reporting a disputed transaction caused by an online scam. Please treat this as a fraud report under AFASA and BSP rules, initiate temporary holding of disputed funds if possible, coordinate with the receiving institution, and give me a case reference number.
Do not merely say, “I got scammed.” Give transaction-level details.
4. Ask for a case reference number
Always ask for:
- Case number
- Ticket number
- Name or ID of the agent, if available
- Date and time of report
- Email address or portal where supporting documents should be uploaded
- Whether an initial holding request was sent to the receiving institution
- What documents are needed for extended holding
A reference number matters because it proves that you reported within a specific time. It also helps when escalating to BSP, PNP, NBI, or another institution.
5. Notify the receiving bank or e-wallet, if known
If you know where the money went, also report to the receiving institution. For example, if you sent money from Bank A to a GCash number, report to Bank A first, then also report to GCash.
Send only factual information:
- “I sent PHP ___ on ___ at ___.”
- “The recipient wallet/account was ___.”
- “The transaction reference number is ___.”
- “This was induced by an online scam.”
- “I already reported to my own bank/e-wallet under case number ___.”
The receiving institution may not give you private information about its account holder, but your report can help it locate the transaction and preserve records.
Documents You Should Prepare
Prepare a clean evidence folder. Banks and investigators handle many scam complaints, so organized evidence helps your case move faster.
| Document or information | Why it matters |
|---|---|
| Valid ID | Confirms you are the source account owner or authorized representative |
| Transaction receipt | Shows amount, date, time, reference number, and destination |
| Bank/e-wallet statement | Confirms the debit from your account |
| Screenshots of chat | Shows deceit, promises, instructions, and identity used |
| Scammer’s profile link or page URL | Helps trace the online account |
| Mobile number, email, username, QR code, or account number | Helps identify the transaction chain |
| Product listing, fake ad, website, or investment page | Shows how the scam was presented |
| Timeline of events | Helps the bank, police, and prosecutor understand the story quickly |
| Police report, sworn complaint, or affidavit | Often needed to support extended holding beyond the initial period |
| Proof of prior bank/e-wallet report | Needed for BSP escalation |
For extended holding under the BSP rules, supporting documents may include a sworn complaint, affidavit, police report, or other supporting document submitted within the initial holding period, unless the applicable industry protocol provides otherwise.
In practical terms, prepare a one- to two-page narrative with this format:
- Who contacted you
- Where the conversation happened
- What the scammer promised or represented
- Why you believed it
- How much you sent
- Exact date, time, and channel of transfer
- Account or wallet where money was sent
- When you realized it was a scam
- What you did afterward
- What documents are attached
Step-by-Step Process to Request a Temporary Hold
Step 1: Call or message the official fraud channel
Use the official app, website, hotline, or verified customer support channel of your bank or e-wallet. Avoid random numbers posted in comments or social media replies.
Give the transaction details in one message or call:
- Full name on your account
- Account or wallet number used
- Transaction reference number
- Amount
- Date and exact time
- Recipient account, wallet, or QR details
- Short description of scam
- Whether your credentials were compromised
- Whether there are other unauthorized transactions
Step 2: Ask the institution to initiate AFASA temporary holding
Use specific terms:
- “disputed transaction”
- “temporary holding of disputed funds”
- “coordinated verification process”
- “receiving financial institution”
- “extended holding”
- “case reference number”
These are the terms used in AFASA and BSP Circular No. 1215.
Step 3: Submit supporting documents immediately
Do not wait for the police report if you already have transaction receipts and screenshots. Send what you have first, then supplement.
A practical approach:
- Submit transaction receipt and screenshots immediately.
- Ask what document is required for extended holding.
- Prepare a sworn affidavit or police report as soon as possible.
- Upload the additional documents under the same case number.
Step 4: File a cybercrime or police report
For online scams, reports may be filed with law enforcement agencies such as:
- PNP Anti-Cybercrime Group
- National Bureau of Investigation online complaint portal
- DOJ Office of Cybercrime reporting page
- CICC / Inter-Agency Response Center hotline 1326, where available
A law enforcement report helps because banks may need a police report, affidavit, or official complaint to justify extended holding or further investigation.
Step 5: Follow up within the initial 5-day period
Because the initial holding period is short, follow up quickly.
Ask:
- Were any funds successfully held?
- Was an initial holding request sent to the receiving institution?
- Was the transaction already withdrawn or transferred?
- Do you need a sworn complaint, affidavit, or police report for extended holding?
- Has extended holding been approved?
- Will I receive written updates?
Do not rely only on verbal assurances. Ask for written confirmation by email, app message, ticket note, or case update.
Step 6: Escalate to BSP if the bank or e-wallet fails to act properly
The BSP is generally a second-level recourse. This means you first report to the bank or e-wallet. If there is no action, delayed action, or an unsatisfactory response, escalate through BSP-CAM or BSP Online Buddy.
When escalating, attach:
- Your bank/e-wallet case number
- Date and time of your first report
- Transaction receipt
- Screenshots
- Follow-up messages
- The institution’s response or lack of response
- Police report or affidavit, if available
Typical Timelines
| Stage | Usual timing | Practical note |
|---|---|---|
| Fraud report to your own bank/e-wallet | Immediately, ideally within minutes or hours | The faster you report, the higher the chance funds are still traceable |
| Initial holding | Up to 5 calendar days | Requires enough transaction details to identify disputed funds |
| Submission of sworn complaint, affidavit, police report, or supporting documents | During initial holding period | Important for extended holding |
| Extended holding | Up to 25 more calendar days | Total temporary holding generally cannot exceed 30 calendar days without court extension |
| Coordinated verification if funds were held | Within the 30-day holding period | Institutions check whether funds should be released or returned |
| Coordinated verification if no funds were held | Usually within 30 calendar days, extendible up to 60 calendar days for meritorious reasons | Useful for tracing and evidence, but recovery may be harder |
| AMLA freeze order | Court of Appeals acts on AMLC petition under AMLA rules | Usually not a direct consumer hotline process |
What Happens After the Funds Are Held?
Temporary holding does not automatically mean the money will be returned to you.
The institutions still need to verify the transaction. Possible outcomes include:
| Outcome | Meaning |
|---|---|
| Funds are returned to source account owner | Verification supports that the funds were derived from scam, money muling, unlawful activity, or no legitimate economic purpose |
| Funds are released to recipient | Recipient proves legitimate purpose, or holding period lapses without basis to continue |
| Holding is extended by court | A court order allows holding beyond the ordinary AFASA period |
| Matter proceeds to criminal investigation | Police, NBI, prosecutor, or AMLC may pursue further action |
| No funds are recovered | Funds were already withdrawn, transferred, cashed out, or moved beyond the system before the hold took effect |
This is why the first hours are critical.
Common Problems Victims Face
The money was already cashed out
If the recipient immediately withdrew the money, the bank or e-wallet may no longer have funds to hold. However, the transaction trail is still useful for identifying mule accounts and supporting a criminal complaint.
The receiving account is under a fake or borrowed name
Scammers often use mule accounts. AFASA specifically targets money muling because scam networks commonly buy, rent, borrow, or trick people into lending accounts.
Even if the named account holder says “I was only asked to receive money,” that may still be relevant to money muling, estafa, or money laundering investigation.
The bank says it cannot disclose recipient information
This is common. Banks and e-wallets cannot simply disclose another customer’s private information to you. But under AFASA, the BSP rules, AMLA, cybercrime warrants, and law enforcement processes, information may be shared with competent authorities or involved institutions under proper legal procedures.
The platform where the scam happened is outside the Philippines
A foreign website, Telegram account, or overseas phone number does not prevent reporting if the money went through a Philippine bank, e-wallet, or payment channel. The Philippine financial account is enough reason to report to the Philippine institution.
The victim is abroad
OFWs, dual citizens, and foreigners abroad can still report to Philippine banks and e-wallets using official fraud channels. For sworn documents, agencies may require:
- A consularized affidavit through a Philippine Embassy or Consulate;
- An apostilled affidavit, depending on the country and receiving agency requirements;
- Scanned copies first, with originals to follow;
- Personal appearance later for law enforcement or prosecutor proceedings.
For foreign-issued public documents, the DFA’s authentication and apostille guidance is useful.
The scammer used a QR code
Save the QR image. Do not crop it if possible. Keep the full screenshot showing the page, seller name, chat, time, and transaction context. QR transactions may still have reference numbers and receiving account details in your app history.
The bank refuses to process because you “voluntarily sent” the money
Voluntary transfer does not automatically defeat a fraud report. Many scams involve the victim voluntarily sending money because of deceit. That may still be estafa, social engineering, money muling, or a disputed transaction under AFASA.
However, recovery may be harder where:
- You authorized the transfer with full credentials;
- The bank had no system failure;
- Funds were already withdrawn;
- The recipient can prove a legitimate transaction;
- Your evidence does not show deceit.
What Not to Do
Avoid these mistakes:
- Do not delete chats, emails, call logs, or screenshots.
- Do not edit screenshots except to make copies for presentation.
- Do not post the scammer’s full account details publicly in a way that may expose innocent third parties or affect investigation.
- Do not threaten bank staff; focus on case numbers and written escalation.
- Do not send more money to “recover” the first amount.
- Do not rely only on a barangay blotter if the case involves cybercrime, banks, or e-wallets.
- Do not file a false or exaggerated report. AFASA penalizes malicious reporting made in bad faith that results in temporary holding of funds.
- Do not use “recovery hackers” or private agents who promise to retrieve money for an upfront fee.
When an AMLC Freeze Order May Become Relevant
An AMLC-related freeze order may become relevant when the facts suggest more than a simple one-off consumer dispute, such as:
- Multiple victims sending money to the same account
- Large amounts
- Layered transfers across several banks or e-wallets
- Use of multiple mule accounts
- Connection to organized criminal groups
- Investment scam operations
- Human trafficking, illegal gambling, cybercrime syndicates, or other predicate offenses
- Rapid cash-outs and transfer chains suggesting laundering
Under AMLA as amended, the Court of Appeals may issue a freeze order effective immediately for an initial 20 days upon proper AMLC petition and probable cause. Within that period, the court conducts a summary hearing to decide whether to lift, modify, or extend the order. The total Court of Appeals freeze period under the relevant AMLA provision generally cannot exceed six months, unless a separate asset preservation or forfeiture process applies.
For ordinary victims, the practical route is to make your bank/e-wallet report strong enough that the financial institution, law enforcement, and regulators have usable transaction details. The AMLC process is not a shortcut customer service channel; it is an anti-money laundering mechanism handled by competent authorities.
Sample Wording for Your Bank or E-Wallet Report
Use this as a guide when writing to your bank or e-wallet:
I am reporting a disputed transaction caused by an online scam. On [date] at around [time], I transferred PHP [amount] from my [bank/e-wallet account] to [recipient account/wallet/number, if known] through [InstaPay/PESONet/QR/e-wallet transfer/other channel]. The transaction reference number is [reference number].
The transfer was induced by fraudulent representations made through [platform], as shown in the attached screenshots. I request that you treat this as a fraud report under the Anti-Financial Account Scamming Act and BSP Circular No. 1215, initiate temporary holding of disputed funds if still possible, coordinate with the receiving financial institution, preserve relevant records, and provide me with a case reference number.
Attached are my transaction receipt, screenshots, account statement, and identification document. I am preparing a sworn complaint/police report and will submit it under this same case number.
Frequently Asked Questions
Can GCash or Maya freeze a scammer’s wallet?
They may temporarily hold disputed funds if the transaction qualifies under AFASA and BSP rules, and if the funds can still be identified or are still within the system. This is not automatic. You must report quickly and provide transaction details, screenshots, and supporting documents.
Can my bank reverse an InstaPay transfer after a scam?
It depends. If the funds are still in the receiving account or traceable within the system, the bank may initiate temporary holding and coordinated verification. If the funds were already withdrawn or transferred onward, reversal becomes harder, but the transaction trail may still support a criminal complaint.
How fast should I report an online scam to my bank?
Immediately. Minutes matter. Scam funds are often moved or cashed out quickly. Report first to your own bank or e-wallet, get a case number, then submit supporting documents and report to law enforcement.
Do I need a police report before the bank acts?
Not always for the initial report. You should report to the bank or e-wallet immediately even before getting a police report. However, a police report, sworn complaint, or affidavit may be important for extended holding and investigation.
How long can scam-related funds be held?
Under BSP Circular No. 1215, initial holding is up to 5 calendar days, with possible extended holding of up to 25 additional calendar days. The total is generally up to 30 calendar days unless a competent court extends it.
Will the bank tell me the name of the scammer?
Usually, no. Banks and e-wallets are limited by privacy and secrecy rules. However, information may be shared among involved institutions and competent authorities under AFASA, AMLA, cybercrime procedures, and BSP rules.
Can I file directly with the BSP to freeze the account?
The BSP is generally a second-level consumer recourse after you first report to the bank or e-wallet. For urgent holding of funds, report to your own institution’s fraud channel first. Escalate to BSP if the institution fails to act, delays unreasonably, or gives an unsatisfactory response.
What if I am a foreigner scammed by someone using a Philippine account?
You may report to the Philippine bank or e-wallet involved, especially if the recipient account is in the Philippines. Include passport or government ID, transfer receipts, screenshots, and proof of the Philippine account or wallet. You may also report to your local police because cross-border scams often require agency-to-agency coordination.
Is an online selling scam a cybercrime or estafa?
It can be both, depending on the facts. A fake seller who deceives a buyer into sending money may be liable for estafa under Article 315 of the Revised Penal Code. If the scam used electronic communications, online platforms, or digital systems, RA 10175 may also apply.
Can I sue the bank if it failed to hold the funds?
AFASA provides that an institution that fails to temporarily hold funds subject of a disputed transaction, as required by law and BSP rules, may be liable for loss or damage arising from that failure, including restitution of disputed funds. Separately, Civil Code provisions on negligence, abuse of rights, and damages may be relevant depending on the facts. Philippine jurisprudence, including Simex International (Manila), Inc. v. Court of Appeals, recognizes that banking is impressed with public interest and demands a high degree of diligence.
Key Takeaways
- Report to your own bank or e-wallet immediately and ask for temporary holding of disputed funds under AFASA and BSP rules.
- Use precise transaction details: amount, date, time, reference number, receiving account or wallet, and screenshots.
- Initial holding may last up to 5 calendar days, with possible extension up to a total of 30 calendar days unless a court extends it.
- Submit a sworn complaint, affidavit, police report, or supporting documents quickly, especially for extended holding.
- A true legal freeze order is usually an AMLC and Court of Appeals process under AMLA, not an ordinary customer service request.
- File a cybercrime or police report with PNP ACG, NBI, DOJ Office of Cybercrime channels, or CICC where appropriate.
- Escalate to BSP only after reporting to the bank or e-wallet, or when the institution fails to act properly.
- Recovery is most realistic when the report is fast, specific, documented, and made through official channels.