If you were scammed online and you already sent money to a Philippine bank account, e-wallet, or payment platform, speed matters. The practical goal is usually not to “file a freeze order” yourself the way you file a regular complaint. In the Philippines, a true freeze order under the Anti-Money Laundering Act is issued by the Court of Appeals upon petition by the Anti-Money Laundering Council (AMLC). But there is also a faster, bank-level remedy called temporary holding of disputed funds under the Anti-Financial Account Scamming Act. Understanding the difference can save precious hours and help you prepare the right documents.

What a Freeze Order Means in an Online Scam Case

A freeze order is a court order that prevents money, bank deposits, e-wallet balances, securities, insurance policies, or other monetary instruments from being moved, withdrawn, transferred, or disposed of.

For online scam victims, the freeze order people usually mean is a freeze order under Republic Act No. 9160, the Anti-Money Laundering Act of 2001, as amended. Under the current law, the Court of Appeals may issue a freeze order upon a verified ex parte petition by the AMLC when there is probable cause that the money or property is related to an unlawful activity. “Ex parte” means the petition may initially be acted on without notifying the account holder, because giving advance notice could allow the money to disappear. (Supreme Court E-Library)

This is different from simply asking your bank or e-wallet provider to “freeze the scammer’s account.” A bank may temporarily hold disputed funds under specific rules, but a full AMLA freeze order comes from the Court of Appeals through AMLC action.

The Most Important Distinction: Bank Hold vs. Court Freeze Order

For most online scam victims, the first urgent remedy is not the Court of Appeals freeze order. It is the bank or e-wallet’s temporary holding process.

Remedy	Who initiates it	Who approves it	Usual purpose	Maximum period
Temporary holding of disputed funds	Victim’s complaint, bank/e-wallet fraud system, or request from another institution	Bank, e-wallet, or BSP-supervised financial institution under BSP rules	Stop funds quickly while banks verify the disputed transaction	Up to 30 calendar days, unless extended by court
AMLA freeze order	AMLC, through a verified petition	Court of Appeals	Preserve suspected proceeds of unlawful activity or money laundering	Initially 20 days; may be extended, total generally not exceeding 6 months
Asset preservation order	Government in an AML/civil forfeiture or related case	Regional Trial Court with jurisdiction	Preserve assets while a forfeiture or AML case proceeds	Depends on court order and case status

Under Republic Act No. 12010, the Anti-Financial Account Scamming Act (AFASA), covered “financial accounts” include bank accounts, transaction accounts, e-wallets, and other accounts used for financial products or services. Institutions covered include banks, non-banks, financial institutions, payment providers, and financial service providers under BSP jurisdiction. (Lawphil)

AFASA allows institutions to temporarily hold funds involved in a disputed transaction for a period prescribed by the BSP, not exceeding 30 calendar days, unless extended by a court. A transaction may be disputed if there is reasonable ground to believe it is unusual, lacks clear economic purpose, comes from an unknown or illegal source, is connected with unlawful activity, or was facilitated through social engineering. (Lawphil)

Legal Basis for Freezing or Holding Scam Funds

Anti-Money Laundering Act: Court of Appeals Freeze Order

The AMLA freeze order is governed by RA 9160, as amended, including amendments under RA 11521. The law provides that the Court of Appeals may issue a freeze order upon AMLC’s verified ex parte petition if probable cause exists that the monetary instrument or property is related to unlawful activity. The Court of Appeals should act on the petition within 24 hours from filing, excluding non-working days when applicable. (Supreme Court E-Library)

The initial freeze order is effective for 20 days. Within that period, the Court of Appeals conducts a summary hearing, with notice to the parties, to determine whether to modify, lift, or extend the freeze order. The total period of the freeze order under this provision generally cannot exceed six months. If no case is filed against the person whose account was frozen within the period fixed by the Court of Appeals, the freeze order is deemed lifted by operation of law. (Supreme Court E-Library)

The freeze order should also be limited to the amount or value that the court finds to be probably connected to the predicate offense. It should not automatically freeze unrelated amounts in the same account beyond the value of the suspected proceeds. (Supreme Court E-Library)

Anti-Financial Account Scamming Act: Temporary Holding of Funds

AFASA, or RA 12010 of 2024, is especially relevant to phishing, fake investment platforms, marketplace scams, romance scams, task scams, fake bank calls, SIM/e-wallet takeovers, and money mule accounts.

AFASA penalizes money muling, which includes using, lending, selling, buying, renting, or opening financial accounts to receive or move proceeds from crimes or social engineering schemes. It also penalizes social engineering schemes, where a person obtains another person’s sensitive identifying information through deception or fraud, resulting in unauthorized access or control over a financial account. (Lawphil)

BSP Circular No. 1215, issued in 2025, implements rules on temporary holding of disputed funds and coordinated verification. It requires BSP-supervised institutions to have procedures for tracing disputed transactions, preserving affected funds, coordinating with other institutions, keeping time logs, notifying affected account owners, and preventing abuse of the holding process.

The circular also recognizes different triggers for temporary holding: a complaint by the source account owner, fraud management system findings, or a request from the originating financial institution to the receiving or subsequent receiving institution.

Cybercrime Prevention Act and Estafa

Many online scams may fall under Article 315 of the Revised Penal Code on estafa, especially where the victim was induced to part with money through false pretenses or fraudulent acts. If the fraud was committed through a computer system, messaging app, website, online platform, or other digital means, Republic Act No. 10175, the Cybercrime Prevention Act of 2012, may also apply.

RA 10175 penalizes computer-related fraud, including unauthorized input, alteration, or deletion of computer data or interference with a computer system, causing damage with fraudulent intent. It also includes cybercrime investigative tools such as preservation of computer data, disclosure upon court warrant, and search, seizure, and examination of computer data. (Supreme Court E-Library)

Supreme Court Guidance on Freeze Orders

The Supreme Court has emphasized that an AMLA freeze order is pre-emptive: its purpose is to preserve suspected proceeds and prevent their disposal while the State builds its case for prosecution or civil forfeiture. (Supreme Court E-Library)

In Bai Sandra Sinsuat A. Sema v. Republic, the Court explained that probable cause for a freeze order requires facts and circumstances that would lead a reasonably discreet, prudent, or cautious person to believe that an unlawful activity or money laundering offense has been, is being, or is about to be committed, and that the account or property sought to be frozen is related to that unlawful activity or money laundering offense. (Supreme Court E-Library)

The Supreme Court has also recognized that freeze orders may cover related accounts when those accounts are materially linked to unlawful activity, but the Court of Appeals must make an independent finding of probable cause and the freeze should be limited to the amount or value probably representing proceeds of the predicate offense. (Supreme Court of the Philippines)

Step-by-Step: What to Do After an Online Scam

1. Secure your own accounts immediately

Before focusing on the scammer, protect yourself from further loss.

Do these as soon as possible:

Change passwords for your banking, e-wallet, email, and social media accounts.
Enable multi-factor authentication.
Call your bank or e-wallet provider through official channels only.
Ask whether your account should be blocked, re-secured, or reissued.
Do not delete chats, screenshots, emails, call logs, or transaction notices.

If the scam involved remote access apps, screen sharing, OTP disclosure, or fake customer service calls, tell your bank clearly. AFASA specifically deals with social engineering and sensitive identifying information, so those facts matter. (Lawphil)

2. Report to your bank or e-wallet provider and request temporary holding

Call or message the source institution first. This is the bank, e-wallet, or payment platform from which the money was sent.

Use clear words:

“I am reporting an unauthorized or fraud-induced disputed transaction. Please initiate temporary holding of disputed funds and coordinated verification under RA 12010 and BSP rules.”

Give the fraud team the following:

Your full name and account number or mobile number.
Date and exact time of transfer.
Amount.
Transaction reference number.
Name, account number, mobile number, QR code, or wallet ID of the recipient.
Screenshots of the scam conversation.
Screenshot or PDF of the successful transfer.
Explanation of how you were deceived.
Police/NBI complaint reference, if already available.

Under BSP rules, the originating institution may identify the disputed transaction, prepare a report, preserve the source account where necessary, and transmit an initial holding request to receiving and subsequent receiving institutions in the disputed transaction chain.

3. Report to the receiving institution if you know it

If you sent money to a named bank, e-wallet, or payment provider, report directly to that institution too. Some victims only report to their own bank, then lose time while the funds move through another wallet or account.

When reporting to the receiving institution, state:

You are the source account owner or scam victim.
The account or wallet received proceeds of an online scam.
You have already reported to your own institution.
You request preservation or temporary holding of any remaining disputed funds.
You are willing to submit a sworn complaint, police report, and supporting evidence.

Do not expect the receiving bank to disclose the account holder’s private information to you. Bank secrecy, data privacy, and internal investigation rules still apply. The practical objective is to make the institution act internally, coordinate through proper channels, and preserve any funds that remain.

4. File a complaint with the PNP Anti-Cybercrime Group or NBI Cybercrime Division

A police or NBI complaint is often needed because banks and e-wallets will ask for official documentation before extending internal action or coordinating with law enforcement.

The NBI Cybercrime Division citizen’s charter lists investigative assistance for victims of computer crimes as available to the general public and provides for complaint forms to be submitted to the division or regional cybercrime centers. The listed total processing time for the front-facing service is about 1 hour and 10 minutes, although actual investigation time can be much longer. (National Bureau of Investigation)

Prepare a simple but complete complaint narrative:

Who contacted you.
What platform was used.
What was promised or represented.
Why you believed it.
What amount you sent.
Where you sent it.
What happened after payment.
What steps you took with the bank or e-wallet.
What evidence you are attaching.

Ask for a copy of the complaint receipt, blotter, referral slip, or acknowledgment. Banks often ask for this when deciding whether to extend the hold, process reimbursement, or coordinate with other institutions.

5. Ask law enforcement to evaluate AMLC referral

You, as a private victim, generally do not walk into the Court of Appeals and apply for an AMLA freeze order. The petition is filed by AMLC, usually represented by the proper government lawyers, when the legal requirements are present.

What you can do is provide law enforcement, the prosecutor, your bank, and the receiving institution with enough organized evidence to show:

the source of the funds;
the exact transaction trail;
the recipient account or wallet;
indicators of fraud, estafa, cybercrime, money muling, or social engineering;
urgency because the funds may be dissipated;
other victims, if known;
links to a wider scam network, if available.

This matters because AMLC freeze orders require probable cause. Vague statements like “I was scammed by a Telegram task job” are less useful than a transaction-by-transaction chronology with screenshots, reference numbers, wallet IDs, account names, and dates.

6. Preserve digital evidence properly

Digital evidence is fragile. Accounts get deleted, scam pages disappear, and messaging apps may auto-delete chats.

Preserve:

Full screenshots showing sender profile, username, number, date, and time.
Screen recordings scrolling through the conversation.
Transfer receipts from bank or e-wallet app.
Email headers if phishing email was involved.
URLs of fake websites.
QR codes used for payment.
SIM numbers, Telegram handles, Viber numbers, Facebook profiles, WhatsApp numbers, and marketplace listings.
Proof of your identity and account ownership.
Any demand for “tax,” “unlocking fee,” “verification fee,” or “withdrawal charge.”

For cybercrime investigations, RA 10175 recognizes preservation and disclosure procedures for computer data. Service providers may be required to preserve data, while disclosure of subscriber or traffic data generally requires proper legal process such as a court warrant. (Human Rights Library)

7. If you are abroad, prepare a usable affidavit

Filipinos abroad and foreigners outside the Philippines can still prepare evidence for a Philippine complaint, especially if the account, bank, e-wallet, victim, or damage is connected to the Philippines. AFASA includes jurisdiction where elements are committed in the Philippines, where Philippine systems or accounts are used, or where damage is caused to a person in the Philippines or to a financial account maintained with an institution operating in the Philippines. (Lawphil)

If you need to submit a sworn affidavit from abroad, check what the receiving office requires. Philippine embassies and consulates can notarize private documents such as affidavits and special powers of attorney for use in the Philippines, and some posts expressly require personal appearance. (Philippine Embassy)

For documents notarized by a foreign notary, the usual route is local notarization plus apostille if the country is an Apostille Convention member and the document type qualifies. Some Philippine offices may still have specific formatting or translation requirements, so confirm before spending time and money on authentication.

Documents Commonly Needed

Document	Why it matters	Practical notes
Government ID or passport	Proves identity of complainant	Foreigners should use passport and Philippine address/contact person if available
Proof of account ownership	Shows you are the source account owner	Bank statement, app profile, e-wallet verification page
Transfer receipt	Identifies transaction	Must show amount, date, time, reference number, recipient details
Screenshots of conversations	Shows deception or fraudulent representation	Capture username, number, profile link, date, and time
Scam website or platform details	Helps trace infrastructure	Save URLs, QR codes, account IDs, referral codes
Complaint affidavit	Main sworn narrative	Keep it chronological and fact-based
Bank/e-wallet ticket number	Shows immediate reporting	Ask for written acknowledgment
Police/NBI report	Supports bank hold, investigation, and possible AMLC referral	Get certified copies if available
List of other victims	Shows pattern or syndicate activity	Useful for economic sabotage or broader scam investigation
Proof of foreign execution	Needed if documents are signed abroad	Consular notarization, apostille, or authentication may be required

Practical Timeline

Time from discovery	Best action
First 1 hour	Call your bank/e-wallet; request temporary hold; secure your account
Same day	Report to receiving institution; preserve all screenshots and receipts
Within 24 hours	File PNP ACG or NBI cybercrime complaint; get acknowledgment
Within days	Submit affidavit and supporting documents to bank, e-wallet, investigator, or prosecutor
During bank investigation	Follow up using ticket numbers; ask if coordinated verification has started
If money trail is significant	Law enforcement or AMLC may evaluate possible freeze order or further asset preservation
If case proceeds	Prosecutor may evaluate estafa, cybercrime, AFASA, money laundering, or related charges

The Court of Appeals freeze order process can move quickly once AMLC files a proper petition because the law requires prompt court action. But getting to that stage usually depends on the quality of the evidence, the money trail, the amount involved, the presence of predicate offenses, and whether the funds are still traceable.

Common Bottlenecks Victims Face

The money was already withdrawn

This is the most common problem. Many scam accounts are mule accounts. Funds may be withdrawn, converted to cash, transferred to another wallet, converted to crypto, or split into several accounts within minutes.

Even if the funds are gone, reporting still matters because:

the account may be linked to other victims;
later incoming funds may be flagged;
banks may preserve records;
law enforcement may identify mule account owners;
AFASA, estafa, cybercrime, and money laundering issues may still be investigated.

The bank says it cannot disclose the recipient’s identity

This is normal. The bank may be restricted from giving you private account holder information. Instead of arguing for disclosure, focus on giving the bank enough information to act internally and coordinate with other institutions or authorities.

The scammer used a real person’s account

Many scam recipients are money mules. Some knowingly lend, sell, rent, or open accounts for criminal proceeds. Others claim they were also deceived. AFASA specifically penalizes money muling and buying or selling financial accounts. (Lawphil)

The platform is outside the Philippines

Foreign websites, crypto exchanges, and messaging platforms create extra difficulty. Philippine authorities may need international cooperation, platform preservation requests, or mutual legal assistance. Still, Philippine law may apply if Philippine accounts, victims, systems, or damage are involved.

Someone offers a “paid AMLC freeze certificate”

Be careful. AMLC has issued public advisories about people misrepresenting themselves as AMLC personnel or using fraudulent freeze-order-related documents. Official AMLC action does not require victims to pay a “release,” “facilitation,” “tax clearance,” or “certificate” fee to recover scam funds. (Anti-Money Laundering Council)

Can the Victim Recover the Money?

A freeze order or temporary hold does not automatically refund the money. It only preserves funds while the dispute, investigation, or case is evaluated.

Recovery may happen through:

reversal or return after coordinated bank verification;
reimbursement if the institution is liable under AFASA or consumer protection rules;
restitution in a criminal case;
settlement with an identified account owner;
civil action for damages or collection;
forfeiture-related proceedings where the law allows return to victims.

AFASA states that institutions may be liable for restitution if they fail to employ adequate risk management systems and controls or fail to exercise the highest degree of diligence in preventing loss or damage from covered offenses, and conviction is not a prerequisite to restitution. (Lawphil)

For claims against the scammer, civil recovery may be based on the Civil Code, including obligations arising from fraud, bad faith, or wrongful acts. In practice, however, recovery depends heavily on whether the scammer or mule account owner can be identified and whether attachable assets remain.

Frequently Asked Questions

Can I personally file a freeze order in the Court of Appeals?

Usually, no. An AMLA freeze order is filed by the AMLC through a verified ex parte petition. As a victim, your role is to report quickly, preserve evidence, file a police or NBI complaint, and provide documents that may support bank action, law enforcement investigation, or AMLC evaluation.

What should I do first: report to the police or call the bank?

Call the bank or e-wallet first if the transfer just happened. A few minutes can matter. Then file the PNP ACG or NBI complaint as soon as possible because the bank may ask for an official report or sworn complaint to support further action.

Can GCash, Maya, or a bank freeze the scammer’s account immediately?

They may temporarily hold disputed funds if legal and regulatory requirements are met. Under AFASA and BSP rules, the process may be triggered by your complaint, fraud system findings, or a request from another financial institution. It is not automatic, and it depends on whether funds remain and whether the transaction can be identified.

How long can disputed funds be held?

Under AFASA, temporary holding by covered institutions cannot exceed 30 calendar days, unless extended by a court. Under AMLA, a Court of Appeals freeze order is initially effective for 20 days and may be extended after summary hearing, generally up to a total of six months. (Lawphil)

What if the receiving bank refuses to help me?

Ask for a ticket number, submit complete documents, and coordinate through your own bank. If the receiving institution is BSP-supervised, the complaint may also be raised through the institution’s official consumer assistance channel and, where appropriate, through BSP consumer assistance mechanisms. Keep all acknowledgments and follow-up records.

Is a police blotter enough to freeze an account?

A blotter or police report helps, but it is usually not enough by itself. Banks need transaction details and supporting documents. AMLC and the Court of Appeals need probable cause and a legally sufficient connection between the account or property and unlawful activity.

What if I only have the scammer’s phone number or Telegram account?

Report anyway, but try to gather more: payment receipt, QR code, wallet number, account name, bank name, transaction reference number, screenshots, links, and timestamps. The money trail is often more useful than the display name used by the scammer.

Can foreigners file an online scam complaint in the Philippines?

Yes, if the facts connect to the Philippines, such as a Philippine bank account, e-wallet, victim, platform operation, or damage suffered in the Philippines. Foreign complainants may need passport identification and properly notarized, consularized, or apostilled affidavits if signing documents abroad.

Will the scammer go to jail?

That depends on evidence, identification, prosecution, and court proceedings. Possible offenses may include estafa under Article 315 of the Revised Penal Code, cybercrime under RA 10175, financial account scamming under RA 12010, money muling, identity theft, or money laundering, depending on the facts.

Can I recover money if it was already cashed out?

Recovery becomes harder once funds are withdrawn, but the case is not useless. The account owner may still be investigated. Other accounts may be traced. The bank may preserve records. If institutional negligence is involved, AFASA and financial consumer protection rules may also become relevant.

Key Takeaways

A true AMLA freeze order is issued by the Court of Appeals upon petition by the AMLC, not by the scam victim directly.
For urgent online scam losses, the faster first step is usually to request temporary holding of disputed funds from your bank or e-wallet under RA 12010 and BSP rules.
Report immediately to both the source and receiving financial institutions if known.
File a complaint with the PNP Anti-Cybercrime Group or NBI Cybercrime Division and keep proof of filing.
Good evidence is transaction-based: reference numbers, timestamps, account details, receipts, screenshots, URLs, and a clear sworn narrative.
A freeze or hold preserves funds; it does not automatically refund them.
If the money has moved through mule accounts, quick reporting still helps investigators trace the chain and may support later AMLC, BSP, criminal, or civil action.