A loan deposit scam usually begins with a promise of fast approval, followed by a demand for a “security deposit,” “processing fee,” “insurance,” “tax,” “verification payment,” or “release fee” before the loan can be sent. After you pay, the supposed lender disappears or invents another charge. If this happened to you, act immediately: the best chance of recovering the money is often during the first few hours or days, while the funds may still be held in the recipient’s bank or e-wallet account.

What Is a Loan Deposit Scam?

A loan deposit scam is a form of advance-fee fraud. The scammer persuades the victim to pay money first by falsely claiming that a larger loan has already been approved or will be released after payment.

Common warning signs include:

The lender contacts you through Facebook, Messenger, Telegram, Viber, WhatsApp, or text message.
You are approved without meaningful identity, income, or credit checks.
The lender guarantees approval regardless of your financial condition.
You are told to transfer money to a personal bank or e-wallet account.
The account name is different from the company’s name.
The lender sends an “approval certificate” containing fake government seals.
You are pressured to pay immediately because the loan will supposedly expire.
After the first payment, another fee appears.
The lender claims your loan is “frozen” because you entered an incorrect account number.
You are asked to pay money to receive a refund of your earlier payment.

A genuine lender may charge lawful and properly disclosed fees. An upfront charge is therefore not automatically fraudulent. The serious warning signs are false representations, payment to unofficial accounts, lack of written disclosure, repeated release charges, and refusal to verify the lender’s identity and authority.

Can You Get the Money Back?

Recovery is possible, but it depends mainly on how quickly you report the transaction and whether the money can still be located.

Situation	Likely recovery route
Funds are still in the recipient account	Bank or e-wallet temporary hold and coordinated verification
Funds were transferred to another financial institution	Inter-institution tracing under anti-scam procedures
Funds were already withdrawn or converted to cash	Criminal investigation and asset recovery
Recipient is identifiable and has a usable address	Demand letter, barangay proceedings where applicable, or court action
Scammer used a fake identity or overseas account	Cybercrime investigation, platform records, and international cooperation
Legitimate financial institution mishandled the complaint	Escalation to the BSP or SEC, depending on the institution

A bank or e-wallet does not automatically owe you a refund merely because you were deceived into authorizing the transfer. However, Philippine anti-scam rules now provide procedures for temporarily holding disputed funds, tracing transfers, verifying the transaction, and returning funds when the evidence supports the victim’s claim.

Philippine Laws That Apply to Loan Deposit Scams

Estafa under Article 315 of the Revised Penal Code

A loan deposit scam may constitute estafa by false pretenses under Article 315(2)(a) of the Revised Penal Code.

The prosecution generally needs to show that:

The scammer made a false representation about authority, qualifications, business, credit, property, or another material fact.
The false representation was made before or at the time the victim paid.
The victim relied on the misrepresentation.
The victim suffered financial damage.

For example, a person may commit estafa by falsely claiming to represent a registered lending company, presenting a fabricated loan approval, and inducing the victim to send a deposit.

The Supreme Court has repeatedly explained that deceit must ordinarily precede or accompany the payment and must be the reason the victim parted with the money. Mere failure to repay a genuine loan or comply with an actual contract is not automatically estafa. The difference is whether fraudulent intent and deception existed from the beginning. (Lawphil)

The full law may be reviewed under Article 315 of the Revised Penal Code.

Cybercrime Prevention Act

When estafa is committed through Facebook, messaging applications, email, a fake website, an online lending application, or another information and communications technology system, Section 6 of Republic Act No. 10175, the Cybercrime Prevention Act of 2012, may apply.

Section 6 provides that crimes under the Revised Penal Code committed through information and communications technology may receive a penalty one degree higher than the penalty otherwise prescribed. (Lawphil)

See the Cybercrime Prevention Act of 2012.

Anti-Financial Account Scamming Act

Republic Act No. 12010, the Anti-Financial Account Scamming Act of 2024 or AFASA, addresses financial scams involving bank accounts, e-wallets, and other financial accounts.

Under implementing rules issued by the Bangko Sentral ng Pilipinas, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction. The framework is designed to allow financial institutions to trace, hold, verify, and potentially return disputed funds.

The initial hold may last up to five calendar days. It may be extended for up to another 25 calendar days, for a total administrative holding period of up to 30 calendar days. A longer hold generally requires a court order. Victims should provide supporting documents during the initial period because the financial institution may need them to justify an extension. (Bureau of the Treasury)

After coordinated verification, the institution may return funds to the source account when the available evidence reasonably shows that the transaction arose from social engineering, fraud, or another transaction without a legitimate economic purpose. A return remains evidence-based rather than automatic. (Bureau of the Treasury)

See the Anti-Financial Account Scamming Act and the BSP’s AFASA rules and implementing issuances.

Lending Company Regulation Act

Under Republic Act No. 9474, the Lending Company Regulation Act of 2007, a lending company must generally be organized as a stock corporation and obtain a Certificate of Authority from the Securities and Exchange Commission before operating as a lending business.

A company’s SEC registration alone does not necessarily mean that it is authorized to lend. Scammers sometimes use the name, logo, registration number, or documents of a real corporation. Verify the exact company name, Certificate of Authority, website, contact details, and official payment channels. (Lawphil)

See the Lending Company Regulation Act of 2007.

Financial consumer protection and disclosure

Republic Act No. 11765, the Financial Products and Services Consumer Protection Act of 2022, recognizes rights involving fair treatment, transparency, protection of assets and personal data, and effective complaint handling by regulated financial service providers.

The Truth in Lending Act, Republic Act No. 3765, also requires creditors covered by the law to disclose the true cost of credit and finance charges before the transaction is completed. These laws are particularly relevant when the complaint involves a real regulated lender rather than an entirely fictitious operation. (Lawphil)

Civil liability and return of the money

The Civil Code may provide additional grounds for recovery against an identifiable scammer or recipient.

Relevant provisions include:

Article 19: Every person must act with justice, give everyone their due, and observe honesty and good faith.
Article 20: A person who causes damage through an act contrary to law must compensate the injured person.
Article 21: A person who willfully causes loss in a manner contrary to morals, good customs, or public policy may be liable for damages.
Article 22: A person who acquires something at another’s expense without legal ground must return it under the principle against unjust enrichment.
Article 1159: Valid contractual obligations have the force of law between the parties.

Article 22 is especially relevant when the recipient received money without a lawful basis and would otherwise be unjustly enriched. (Lawphil)

See the Civil Code of the Philippines.

What to Do Immediately After Discovering the Scam

1. Stop sending money

Do not pay another “verification fee,” “penalty,” “AML clearance,” “tax,” “account correction fee,” or “refund processing fee.”

A common scam tactic is to exploit the victim’s desire to recover the first payment. The scammer may promise that all previous payments will be returned after one final transfer. In practice, each payment usually leads to another demand.

Do not give the scammer additional identification documents, selfies, one-time passwords, PINs, passwords, or access to your phone.

2. Contact your bank or e-wallet’s fraud channel immediately

Use the official telephone number, in-app support function, branch, or fraud-reporting channel of the institution from which you sent the money.

State clearly:

I am reporting a disputed transaction caused by a loan deposit scam. Please open a fraud case, request a temporary hold under the Anti-Financial Account Scamming Act procedures, and coordinate with the recipient institution.

Provide:

Amount transferred
Date and exact time
Transaction reference number
Recipient account name and number
Recipient bank or e-wallet
Screenshots of the payment instructions
A short explanation of the deception

Ask for:

A case or ticket number
Written acknowledgment of the report
The name or unit handling the complaint
Instructions for submitting an affidavit, police report, or other evidence
Confirmation that the recipient institution has been contacted

The originating institution’s 24/7 fraud channel is the primary route for starting an AFASA complaint-initiated hold. The institution should provide an acknowledgment or case reference. (Bureau of the Treasury)

3. Contact the recipient institution

You may also report the recipient account directly to the receiving bank or e-wallet. Give the transaction reference and your originating institution’s case number.

The recipient institution may not disclose the account holder’s private information directly to you because of bank secrecy and data-protection rules. However, it can preserve records, flag the account, coordinate with your institution, and respond to lawful requests from investigators or courts.

4. Submit supporting documents within the first five days

Do not wait for the institution to repeatedly follow up. The initial temporary hold may be limited to five calendar days, and supporting documents may be needed to extend it.

Submit whatever the institution requests, which may include:

Sworn affidavit describing the scam
Police or NBI report
Transaction receipt
Bank statement or e-wallet history
Screenshots or exported conversations
Fake loan agreement or approval notice
Advertisements and social-media profile links
Payment instructions
Copies of identification documents used by the scammer
Chronological account of events

A notarized affidavit is stronger than an informal narrative because it identifies you and places your account under oath. Nevertheless, do not delay the initial fraud report merely because the affidavit is not yet ready.

5. Protect your accounts and identity

If you gave the scammer sensitive information:

Change your email, banking, and social-media passwords.
Enable multi-factor authentication.
Change compromised PINs.
Contact your mobile provider if your SIM may be at risk.
Remove unknown devices from your accounts.
Check whether the scammer created accounts using your identity.
Inform your bank if you shared an OTP, card number, online-banking credentials, or remote-access permission.

If you installed an application sent by the scammer, remove it and inspect your phone for screen-sharing, remote-access, or accessibility permissions.

How to Preserve Evidence

Good evidence can determine whether a bank extends a hold, whether investigators can identify the account holder, and whether a prosecutor finds probable cause.

Preserve:

The original transaction receipt
Full account numbers and recipient names
Uncropped screenshots showing dates and times
Complete chat histories, not only selected messages
Email headers and sender addresses
Website and social-media profile links
Usernames and telephone numbers
Voice messages and call logs
Loan documents, company IDs, permits, and certificates
QR codes and payment links
Advertisements that led you to the scammer
Proof of later demands for additional money
Evidence that the account or profile disappeared

Prepare a simple chronology:

Date and time	Event	Supporting evidence
July 10, 10:15 a.m.	Scammer offered ₱100,000 loan	Messenger conversation
July 10, 11:40 a.m.	“Approval letter” received	PDF and screenshot
July 10, 1:05 p.m.	₱8,000 deposit transferred	Transaction receipt
July 10, 1:20 p.m.	Scammer demanded another ₱12,000	Chat screenshot
July 10, 2:00 p.m.	Fraud reported to bank	Case acknowledgment

Keep original files. Do not edit screenshots, alter metadata, or delete conversations after making copies. Avoid publicly posting complete IDs, bank account numbers, addresses, or private conversations, as public accusations may create privacy or defamation issues.

Where to File Complaints

Police, NBI, and cybercrime authorities

Report the incident to one or more of the following:

Philippine National Police Anti-Cybercrime Group
Nearest police station or cybercrime unit
National Bureau of Investigation Cybercrime Division
Cybercrime Investigation and Coordinating Center
Department of Justice Office of Cybercrime

The DOJ identifies the NBI Cybercrime Division and PNP Anti-Cybercrime Group as appropriate law-enforcement channels for cybercrime complaints. (Department of Justice)

The DOJ cybercrime reporting page provides official reporting guidance.

Bring printed and electronic copies of your evidence. Ask for a complaint reference, police blotter entry, or certified report that you can submit to the bank or e-wallet.

SEC complaint against a lender or loan application

Send the complaint to the SEC when it concerns:

A lending or financing company
An online lending platform or application
Unauthorized lending activity
Misuse of a registered company’s identity
Unfair conduct by a real lending company
Failure to disclose charges
Harassment or abusive collection practices

Complaints may be submitted through the SEC iMessage portal. The BSP’s consumer guidance likewise directs complaints involving lending companies, financing companies, online lending platforms, and collection agencies to the SEC.

Attach proof of payment, communications, the supposed loan documents, company details, and any SEC certificate shown to you.

An SEC complaint may help stop an unauthorized lender or establish regulatory violations, but it should not replace the immediate bank report or criminal complaint.

BSP complaint against a bank or e-wallet

First complain directly to the institution through its Financial Consumer Protection Assistance Mechanism, usually its formal customer-service or complaint channel.

Escalate to the BSP when the institution:

Does not acknowledge the complaint
Fails to provide a case number
Refuses to process a fraud report without explanation
Does not follow its complaint procedure
Unreasonably delays its response
Closes the complaint without addressing the evidence

The BSP treats the institution’s complaint mechanism as the first level of recourse and BSP consumer assistance as the second level. Complaints can be escalated through the BSP Consumer Assistance Channels, including BSP Online Buddy.

Sending a Formal Demand Letter

A demand letter is useful when the recipient or supposed lender can be identified and contacted. It creates a written record that you requested the return of the money.

Include:

Your name and contact details.
The recipient’s name and address.
The transaction date, amount, and reference number.
The representations that caused you to pay.
An explanation that the loan was not released.
A demand for repayment by a reasonable date.
Payment instructions.
A statement that you reserve your legal remedies.

A concise demand may read:

On [date], I transferred ₱[amount] to [account name and number] after you represented that the payment was required for the release of an approved loan. The loan was not released, and further payments were demanded. I therefore demand the return of ₱[amount] within ten calendar days from receipt of this letter. If payment is not made, I will pursue the appropriate complaints and civil remedies available under Philippine law.

Send it through a method that proves delivery, such as registered mail, reputable courier, or email with delivery records. Keep the original letter, courier receipt, tracking result, and proof of receipt.

Do not use threats, insults, or demands unrelated to the amount lost.

Can You File a Small Claims Case?

A small claims case may be available when:

The defendant’s true identity is known.
The defendant has a usable Philippine address where court papers can be served.
The claim is purely for payment or reimbursement of money.
The amount does not exceed ₱1,000,000, excluding interest and costs.
The claim fits the coverage of the small claims rules.

Small claims cases are filed in first-level courts, such as the Metropolitan Trial Court, Municipal Trial Court in Cities, Municipal Trial Court, or Municipal Circuit Trial Court. The process uses standardized forms and is designed to be simpler than an ordinary civil action. Lawyers generally do not appear for the parties during the small claims hearing, although a party may obtain legal assistance before filing. (Supreme Court of the Philippines)

Official forms and guidance are available on the Supreme Court small claims page.

Small claims will usually be impractical when the scammer used a fabricated name, cannot be located, or cannot be served. In that situation, law-enforcement investigation may first be needed to identify the person behind the recipient account.

Where a criminal case has already been filed, the civil liability arising from the offense is generally deemed included in the criminal action unless it was waived, reserved for separate filing, or filed beforehand. Filing a separate civil case without considering Rule 111 of the Rules of Criminal Procedure can create procedural problems. (Lawphil)

Does Barangay Conciliation Apply?

Barangay conciliation may be required before court action when the parties are natural persons who actually reside in the same city or municipality and the dispute falls within the Lupon Tagapamayapa’s authority.

It commonly does not apply when:

The scammer’s identity or residence is unknown.
The parties live in different cities or municipalities, subject to limited exceptions.
A corporation or government entity is a party.
The offense falls outside the barangay’s statutory authority.
Urgent court action is necessary.
Another legal exception applies.

Because estafa penalties depend on the amount and circumstances, ask the court clerk, prosecutor, or barangay whether a Certificate to File Action is required in your particular case.

Documents, Costs, and Practical Timelines

Action	Documents commonly needed	Cost	Practical timing
Bank or e-wallet fraud report	Receipt, account details, screenshots, ID	Normally none	Immediately
AFASA supporting submission	Affidavit, police report, transaction records	Notarization may cost extra	Ideally within the initial five-day period
Police or NBI complaint	Affidavit, IDs, printed and electronic evidence	Usually no complaint filing fee	As soon as possible
SEC complaint	Loan documents, company information, communications, proof of payment	Normally no complaint filing fee	After preserving evidence; do not delay bank report
BSP escalation	Institution’s final response or case number, complaint documents	None	After first complaining to the institution
Demand letter	Letter, evidence, recipient address	Courier and possible notarization costs	Often gives 5–15 days to pay
Small claims case	Court forms, evidence, demand and proof of delivery	Filing fees vary	Often weeks to months, depending on service and court docket
Ordinary civil case	Complaint, affidavits, documentary evidence	Filing and possible professional fees	Commonly longer than small claims

The 30-day AFASA holding and verification framework should not be confused with a guaranteed 30-day refund. If the money has already been withdrawn, transferred through several accounts, converted into cryptocurrency, or sent abroad, recovery can take substantially longer and may depend on criminal investigation and asset tracing.

For Victims Living Outside the Philippines

A Filipino or foreign victim abroad may still:

Report the transaction to a Philippine bank or e-wallet remotely.
File online complaints with the BSP or SEC.
Send evidence to Philippine law-enforcement authorities.
Execute an affidavit before a Philippine embassy or consulate.
Appoint a Philippine representative through a Special Power of Attorney.
Pursue a claim against a defendant located in the Philippines.

A public document executed in a country that is a party to the Apostille Convention will generally need an apostille from that country’s competent authority for use in the Philippines. Documents from non-member countries may require authentication or consular legalization under the applicable rules. The Philippines has applied the Apostille Convention since May 14, 2019. (Philippine Embassy in New Delhi)

The Special Power of Attorney should specifically authorize the representative to file complaints, submit evidence, receive documents, attend permitted proceedings, and take other necessary actions. A court may still require the victim’s participation or testimony, although remote appearance may be available in appropriate proceedings.

Common Mistakes That Reduce the Chance of Recovery

Waiting for the scammer’s promised refund

Every hour can matter when funds can be withdrawn or moved instantly. Report first and continue communicating only if investigators or the financial institution advise you to do so.

Sending another payment

A demand for a fee to “unfreeze,” “correct,” “insure,” or refund the loan is usually part of the same scam.

Reporting only to Facebook or the loan application

A platform report may remove the account but does not automatically preserve bank funds or begin a criminal investigation.

Deleting messages out of embarrassment

Many victims delete chats or block the scammer immediately. Preserve the evidence before blocking or reporting the account.

Assuming an authorized transfer cannot be disputed

You may have personally entered the account number and approved the transfer, but your consent may have been obtained through social engineering. Report it accurately as an authorized transfer induced by fraud rather than falsely claiming that your account was hacked.

Treating an SEC registration certificate as proof of legitimacy

A scammer may impersonate a real company. Verify the Certificate of Authority, official website, email domain, telephone number, office address, and authorized payment account independently.

Expecting the police report alone to produce a refund

A police or NBI report supports the investigation and financial-institution review, but it does not itself reverse a transfer. Continue pursuing the bank or e-wallet dispute and submit the report to the institution handling the hold.

Frequently Asked Questions

Can GCash, Maya, or a bank reverse money sent to a scammer?

It may be possible if the funds remain available and the institutions can hold and verify them. Report through the official fraud channel immediately and request action under AFASA procedures. A reversal is not guaranteed, particularly if the funds have already been withdrawn or transferred.

What if I personally authorized the transfer?

You should still report it. Explain that you approved the payment because of false loan representations. Do not describe it as an unauthorized transaction unless someone accessed your account without permission.

Is every loan processing fee illegal?

No. A legitimate lender may impose lawful, transparent, and properly disclosed fees. The strongest scam indicators are payment to a personal account, repeated undisclosed charges, guaranteed approval, fabricated documents, and refusal to release the loan after payment.

Can I file estafa even if I lost only a small amount?

Yes. A smaller loss does not make deliberate deception lawful. The amount may affect the applicable penalty and case handling, but victims may still report the incident and submit evidence.

Do I need a lawyer to report a loan scam?

No lawyer is required to report fraud to your bank, e-wallet, the police, NBI, SEC, BSP, or other authorities. Legal assistance can be useful when preparing affidavits, coordinating criminal and civil remedies, identifying defendants, or filing an ordinary civil action.

Can I sue the owner of the recipient account?

Possibly, but receiving the money does not automatically prove that the account owner personally planned the scam. Some accounts are sold, rented, stolen, or used as “mule accounts.” Investigators must determine the account owner’s knowledge and participation. Civil recovery may still be pursued when the recipient retained money without lawful basis and can be properly identified and served.

What if the scammer used the name of a real lending company?

Contact the real company through independently verified channels and ask whether the person, account, website, or loan offer is authorized. Include the company’s response in your complaints. Report the impersonation to the SEC, law-enforcement authorities, and the financial institutions involved.

How long does a refund take?

There is no universal period. An institution’s AFASA verification may operate within a period of up to 30 calendar days when funds are held, subject to court-authorized extensions. Actual recovery may take longer when the transfer passed through several accounts or requires criminal investigation.

Can the scammer be required to pay damages in addition to returning the deposit?

Potentially. Courts may award proven damages when the factual and legal requirements are met. Restitution of the amount lost is usually the central claim. Additional actual, moral, exemplary, attorney’s fees, or other damages are not automatic and require an appropriate legal basis and evidence.

Should I post the scammer’s identity on social media?

Preserve and submit the information to the proper institutions and authorities. Publicly posting unverified accusations, IDs, account details, addresses, or private information can expose you to privacy, harassment, or defamation disputes and may alert the scammer before records or funds are preserved.

Key Takeaways

Report the transfer to your bank or e-wallet’s official fraud channel immediately.
Specifically request a disputed-transaction case, temporary hold, and coordinated verification under AFASA procedures.
Obtain a case number and submit supporting evidence as early as possible, ideally within the initial five-day holding period.
Stop all further payments, even when the scammer promises a refund.
Preserve complete chats, payment records, account details, advertisements, and loan documents.
File a cybercrime or estafa complaint with the police, NBI, or other appropriate law-enforcement authority.
Send lending-company and online-loan complaints to the SEC; escalate mishandled bank or e-wallet complaints to the BSP.
Consider a demand letter and small claims or civil action when the recipient can be identified and served.
A fast report improves the possibility of recovery, but a refund depends on whether the funds can still be traced, held, and legally returned.