Quick answer

You may recover money lost to a scam, but there is no automatic refund. Your best chance is to act immediately—before the funds are withdrawn, transferred again, converted to cryptocurrency, or sent abroad.

Contact the bank, e-wallet provider, card issuer, remittance company, or other financial institution that sent the money. Clearly report a scam or disputed transaction, request an urgent trace and temporary hold of the funds, and obtain a case reference number. If another account received the money, give the recipient institution’s name, account details, transaction reference, amount, date, and time.

Under the Anti-Financial Account Scamming Act (Republic Act No. 12010) and its BSP implementing regulations, covered financial institutions may temporarily hold disputed funds and coordinate with other institutions to trace and verify electronic transfers. The rules provide for an initial hold of up to five calendar days and, when justified, an extension of up to 25 more calendar days. A hold preserves available funds while the transaction is investigated; it does not itself guarantee their return.

Report the incident to law enforcement as well. A bank complaint, criminal complaint, and civil claim serve different purposes and may need to proceed together.

What to do immediately

1. Stop further loss

If the scammer accessed your account or obtained security information:

Call the institution using the number in its official app, website, or the back of your card.
Ask it to block affected cards, sessions, devices, payment channels, and online banking access.
Change your password and security questions from a trusted device.
Revoke unfamiliar devices and app permissions.
Change the password of the email account linked to your financial accounts.
Ask your mobile provider to secure your number if a SIM swap is possible.
Do not approve additional prompts, return purported “excess payments,” or pay a supposed recovery, tax, verification, or unlocking fee.

Tell the institution whether you disclosed an OTP, PIN, password, card details, or installed a remote-access application. Do not conceal this information; it may affect the investigation, but an accurate timeline is essential.

2. Report the transfer to the sending institution

Use the institution’s fraud hotline or Financial Consumer Protection Assistance Mechanism—not only an ordinary chat agent. State:

I am reporting a scam or disputed transaction. Please trace the funds, initiate the coordinated verification process, request a temporary hold from every receiving institution, and give me the complaint reference number and written requirements.

Provide:

Your name and affected account;
Transaction reference or trace number;
Exact amount, date, and time;
Receiving bank or e-wallet;
Recipient account number, mobile number, or account name;
How the scam occurred;
Whether you personally initiated the transfer or someone took control of your account;
Any later transfers visible in your records; and
Your police report, affidavit, or sworn complaint when available.

The BSP rules contemplate an initial hold of available disputed funds for no more than five calendar days. Supporting documents—such as a sworn complaint, affidavit, or police report—should ordinarily be submitted within that initial period if an extended hold is needed. Do not wait until day five: send what you have immediately and ask the institution what additional document it requires.

If the institution says the transfer was “successful” or “authorized,” ask it to record the matter specifically as fraud or a disputed transaction and to explain its decision in writing. A completed payment instruction does not answer whether funds can still be traced or whether the institution complied with its legal and regulatory duties.

3. Contact the receiving institution

You may also notify the bank or e-wallet that received the money. It may not disclose its customer’s private information directly to you, but it can record the fraud report, preserve relevant records, and coordinate with your institution and lawful authorities.

Include the sending institution’s case number. Do not threaten employees or demand that they reveal the recipient’s identity without legal authority.

4. Treat card, cash, crypto, and remittance payments differently

Recovery procedures depend on the payment method:

Credit or debit card: Immediately dispute the transaction with the issuer and ask whether chargeback or card-network remedies apply. Observe the deadline stated in the card agreement or billing notice. A chargeback is not guaranteed and is different from a criminal complaint.
Electronic bank or e-wallet transfer: Request tracing, temporary holding, and coordinated verification under the applicable BSP rules.
Cash deposit or over-the-counter remittance: Contact the bank or remittance provider at once. Give the receipt and recipient details. Recovery becomes harder once cash has been released.
Cryptocurrency: Contact the exchange or virtual-asset service provider involved and law enforcement immediately. Preserve wallet addresses and transaction hashes. A blockchain transfer generally cannot simply be reversed, although funds reaching a regulated platform may sometimes be identified or restricted through lawful processes.
Cash handed directly to someone: Preserve proof of delivery, CCTV information, vehicle details, messages, and witness names. Prompt police action is especially important.

The AFASA temporary-hold regulations principally address electronic transfers between financial accounts. They exclude mere encoding mistakes, such as entering the wrong beneficiary or amount, and generally do not cover ordinary credit-card purchases unless the card was used for an electronic fund transfer through an automated clearing house. Other consumer-protection and contractual procedures may still apply.

How the temporary-hold process works

A transaction may be treated as disputed when there are reasonable grounds to believe it is unusual, lacks a clear economic purpose, comes from an illegal source or unlawful activity, or was facilitated through a covered social-engineering scheme.

The originating institution can coordinate with receiving and subsequent receiving institutions to follow the transaction chain. If identifiable funds remain, they may be held initially for up to five calendar days. The hold may be extended for up to 25 additional calendar days when the regulatory grounds are present and more time is needed for verification.

During this period:

Respond promptly to every verification request.
Submit an affidavit, police report, screenshots, and transaction records.
Ask whether any amount was successfully held.
Ask whether funds moved to another institution and whether the trace was continued.
Keep copies of all notices and reference numbers.
Inform the investigating officer so lawful preservation, disclosure, or court processes can be pursued.

Institutions must also allow the beneficiary account owner to explain a legitimate transaction. Funds cannot be held indefinitely without the legal basis required by the rules or a court order.

A malicious or knowingly false report that causes a hold can create criminal liability. Report truthfully and distinguish what you personally know from what you suspect.

Escalate an unresolved bank or e-wallet complaint to the BSP

The institution’s own complaint mechanism is the required first level of recourse. If its response is unsatisfactory, escalate the matter through the BSP Consumer Assistance Mechanism.

The BSP’s current instructions allow escalation through the BSP Online Buddy chatbot on the BSP website. If that channel is unavailable, the BSP says a completed Complaint/Inquiry/Reply form may be emailed to consumeraffairs@bsp.gov.ph with proof that the matter was first reported to the institution.

The BSP complaint guide explains that BSP-CAM covers disputes involving financial products or services of BSP-supervised institutions. It does not replace a criminal complaint against the scammer.

Do not email passwords, PINs, OTPs, full card numbers, passports, or unnecessary identification documents. Use the secure channel and redaction instructions provided by the institution or agency.

Report the scam to law enforcement

For online or account-based scams, reports may be made to:

PNP Anti-Cybercrime Group: acg@pnp.gov.ph
NBI Cybercrime Division: ccd@nbi.gov.ph
Cybercrime Investigation and Coordinating Center: report@cicc.gov.ph or hotline 1326

These channels appear in the BSP’s official complaint guide. Confirm current office details through the agency’s official website before travelling or transmitting sensitive documents.

A proper criminal complaint normally requires more than a brief online report. Be prepared to execute a complaint-affidavit stating, in chronological order:

Who contacted you and through which account or number;
The representations made;
Why those representations were false;
Why you relied on them;
Each transfer or delivery of property;
The loss suffered;
Attempts to recover the money; and
The records supporting each statement.

The investigating agency or prosecutor determines the proper offense from the evidence. Depending on the facts, the conduct may involve estafa under Article 315 of the Revised Penal Code, offenses under AFASA, the Cybercrime Prevention Act, the Access Devices Regulation Act, securities laws, or another statute. Calling every failed transaction a “scam” is not enough: criminal fraud generally requires proof of legally defined deceit or misuse, causation, and damage.

If the scheme involved an investment solicitation, unregistered securities, or a company pretending to hold an SEC license, also report it through the SEC’s official channels. Verify registrations and secondary licenses; company registration alone does not necessarily authorize public investment-taking.

Preserve evidence properly

Save original, unedited copies of:

Bank statements, e-wallet histories, receipts, and confirmation emails;
Transaction references, QR codes, account numbers, and recipient names;
Full chat exports, emails, SMS messages, call logs, and voice messages;
Social-media usernames, profile links, group names, advertisements, and page URLs;
Website addresses, order pages, invoices, contracts, and supposed permits;
Crypto wallet addresses and transaction hashes;
Courier records, deposit slips, and photographs;
The scammer’s phone numbers, email addresses, and device or payment instructions;
Your communications with every institution and agency;
Complaint numbers, names of personnel, and dates and times of calls; and
Proof of later demands for repayment.

Take screenshots, but also preserve the underlying messages or export files where possible. Record the date and time you captured online material because profiles and posts may disappear. Do not crop out information that establishes identity, sequence, or context.

Never hack an account, impersonate another person, publicly post unverified personal information, or pay someone offering illegal access to bank records. Those acts can harm the investigation and expose you to liability.

Can the bank or e-wallet be required to reimburse you?

Possibly, but liability depends on the facts.

AFASA requires covered institutions to protect access to financial accounts through adequate risk-management systems and controls. It provides that an institution may be liable to restore funds when it failed to employ adequate controls or failed to exercise the legally required degree of diligence in preventing loss from covered offenses. A criminal conviction is not a prerequisite to restitution. Conversely, the statute protects an institution found compliant with the prescribed controls from liability for losses arising from the covered offenses.

Important questions include:

Was the transaction genuinely authorized?
Did the scammer obtain control through phishing, account takeover, SIM swapping, malware, or impersonation?
Did the institution’s authentication and fraud-monitoring systems operate properly?
Were warnings meaningful and timely?
How quickly did the customer report the transaction?
Did the institution act promptly after receiving the report?
Did the customer disclose credentials or disregard clear security instructions?
Does AFASA apply to the date and type of transaction?
What do the account agreement and other consumer-protection rules require?

Do not assume that disclosure of an OTP automatically decides the case in either direction. Request the institution’s factual findings and legal basis in writing.

Recovering through a criminal or civil case

When a criminal action is instituted, the civil action to recover liability arising from the offense is generally deemed included unless the victim waives it, reserves the right to file separately, or filed the civil action earlier. This rule is found in Rule 111 of the Rules of Criminal Procedure and is reflected in Supreme Court decisions applying the rule.

Discuss the civil aspect with the prosecutor or a lawyer before filing a separate lawsuit. Filing overlapping claims incorrectly can create procedural problems, while a criminal complaint alone does not guarantee collection. Even a favorable judgment may be difficult to enforce if the offender and assets cannot be found.

A small-claims case may be appropriate only when the claim falls within the causes of action covered by the rules—generally specified money claims arising from contracts—and the total claim does not exceed ₱1,000,000, excluding interest and costs. It is not a universal procedure for every fraud loss. The current threshold and procedure are in the Supreme Court’s Rules on Expedited Procedures in the First Level Courts.

Depending on the parties’ residences and applicable exceptions, barangay conciliation may also be a required step before filing certain court actions. Have venue, jurisdiction, limitation periods, and the relationship between the criminal and civil cases checked before proceeding.

Common mistakes that reduce the chance of recovery

Waiting for the scammer to honor another promise before notifying the bank;
Reporting only to the social-media platform;
Sending more money for a supposed refund or account release;
Deleting chats out of embarrassment;
Filing vague reports without transaction references or a timeline;
Treating a customer-service ticket as a complete criminal complaint;
Posting accusations or personal data publicly before identity is verified;
Accepting a private settlement without confirming that payment has cleared;
Signing a waiver, quitclaim, or desistance document without understanding its effect;
Assuming an arrest automatically returns the money; or
Paying a “recovery agent” who promises insider access, guaranteed tracing, or a court order.

When legal help is urgent

Consult a Philippine lawyer promptly if:

The amount is substantial or represents retirement, tuition, medical, or business funds;
The institution denies reimbursement despite signs of account takeover or control failure;
Funds, land, vehicles, or business assets belonging to an identified suspect may be transferred;
You are asked to sign a waiver, settlement, or affidavit you do not understand;
The scam crosses borders or involves cryptocurrency;
Multiple victims, corporate officers, nominees, or mule accounts are involved;
A prosecutor dismisses the complaint and a review deadline may apply;
You are considering a separate civil action;
You received money or allowed your account to be used and may be treated as a money mule; or
The scammer is threatening you, has intimate material, or has enough personal data to commit identity theft.

Court attachment, injunction, search, disclosure, preservation, and asset-freezing measures require particular legal grounds and proper applications. They are not obtained merely by asking a bank to “freeze” an account.

Frequently asked questions

Can a completed InstaPay or other instant transfer be reversed?

Usually not by simply cancelling it. The institution may still trace the payment and temporarily hold identifiable funds that remain in the transaction chain. Success depends heavily on speed, available funds, and the verification results.

What if I willingly pressed “send” because I believed the scammer?

Report it anyway and describe the deception precisely. A customer-authorized payment and an unauthorized account takeover are not identical, but an apparently authorized transfer may still be investigated as a disputed transaction or as evidence of criminal fraud. Refund liability will depend on the governing law, controls, contract, and facts.

What if the recipient account has already been emptied?

Continue with the bank and law-enforcement reports. The immediate administrative hold may recover nothing if no traceable funds remain, but account and transaction records may assist identification, prosecution, later recovery, or enforcement against other assets.

Will a police blotter automatically freeze the account?

No. It is supporting evidence, not an automatic freeze order. Give it to the originating institution promptly so it can assess an extended hold, and cooperate with investigators who can pursue the appropriate legal process.

Should I confront the account owner?

Usually not. The named account holder may be the scammer, a money mule, an identity-theft victim, or a person whose account was compromised. Confrontation may cause evidence or assets to disappear and may put you at risk.

Can I recover attorney’s fees, interest, or emotional-distress damages?

Possibly, but these are not automatic. They require an applicable legal basis, proper pleading, and proof. The recoverable amount depends on the cause of action and the court’s findings.

Is there a single deadline for every scam case?

No. Bank dispute periods, card rules, criminal prescription, civil prescription, prosecutorial remedies, and court procedures have different deadlines. Report immediately and obtain case-specific advice instead of relying on the longest possible period.

Official sources

This article provides general legal information, not legal advice or a prediction of recovery. Procedures and outcomes depend on the transaction, evidence, institutions, applicable rules, and dates involved. Official sources were checked as of July 27, 2026.