If you've lost money to an online scam in the Philippines—whether through a fake investment promising quick returns, a romance scam that built trust over months, a shopping transaction where goods never arrived, or a phishing link that emptied your account—you are facing a situation that thousands of Filipinos and foreigners deal with every year. The good news is that Philippine law treats most of these incidents as criminal acts of estafa (swindling) and provides both criminal and civil pathways to investigate the perpetrators and pursue recovery of your funds. This guide explains exactly how the process works in practice, what steps give you the best chance of meaningful action, and what to expect at each stage.
Online scams usually involve false representations—promises of high-yield investments, romantic relationships leading to “emergency” transfers, or legitimate-looking sales—that induce you to send money. When these acts are committed using computers, mobile apps, social media, or the internet, they fall under both the Revised Penal Code and Republic Act No. 10175, the Cybercrime Prevention Act of 2012. The cybercrime law specifically addresses computer-related fraud and allows authorities broader tools to obtain digital evidence from banks, telecoms, and platforms.
Legal Basis for Action
The primary criminal charge is estafa under Article 315 of the Revised Penal Code, most commonly paragraph 2(a) for estafa by false pretenses or fraudulent acts. To establish this, prosecutors must show that the scammer made a false representation of fact, you relied on it, and you suffered damage as a result. The penalties were updated by Republic Act No. 10951, scaling with the amount involved.
Because the scam occurred online or through digital means, authorities also charge violations of RA 10175. This law covers computer-related fraud and provides mechanisms for preserving and obtaining electronic evidence, including court orders for traffic data and subscriber information from service providers.
Civilly, you can seek recovery of the exact amount lost plus damages. The Civil Code provides the foundation through provisions on obligations and contracts, quasi-delicts (Article 2176), and the principle against unjust enrichment. In a criminal estafa case, civil liability is automatically included unless you expressly reserve the right to file a separate civil action. For smaller amounts, the Rules on Expedited Procedures in First Level Courts (including small claims) offer a faster track.
In cases involving large sums or organized groups, authorities may also invoke the Anti-Money Laundering Act (RA 9160, as amended) to request freeze orders on suspect bank or e-wallet accounts through the Anti-Money Laundering Council.
Immediate Actions That Protect Your Recovery Chances
Speed matters enormously in the first 24 to 72 hours. Once funds leave a Philippine bank or e-wallet and reach mule accounts or are converted to cryptocurrency, tracing and freezing become much harder.
Contact your bank, GCash, Maya, or other e-wallet provider immediately. Report the transaction as fraudulent or part of a scam. Provide all reference numbers, dates, amounts, and beneficiary details. Ask them to flag the recipient account and preserve records. For credit card transactions, request a chargeback right away.
Preserve every piece of digital evidence without alteration. Take clear screenshots or screen recordings that show full conversation threads, usernames or profile links, timestamps, URLs, and any promises or instructions from the scammer. Export complete chat histories from Messenger, WhatsApp, Telegram, Viber, or email. Save original transaction receipts, bank or e-wallet statements showing the debits, and any websites or ads you relied on. Do not delete anything—create working copies and store originals securely.
Stop all communication with the scammer and anyone claiming to be a “recovery agent” or fixer who asks for upfront fees. These are almost always follow-on scams.
Reporting to PNP Anti-Cybercrime Group and NBI
You should file reports with law enforcement even if the amount seems small or you doubt recovery is possible. Official reports create an official record, enable coordination with banks for freezes, and support any future civil action.
Philippine National Police – Anti-Cybercrime Group (PNP ACG) handles most online fraud cases. You can file online through their portal at acg.pnp.gov.ph or cybercrime.pnp.gov.ph, email acg@pnp.gov.ph, call the hotline at (02) 8723-0401 local 7491 (or listed mobile numbers such as 0968-867-4302), or visit Camp Crame in Quezon City or a regional anti-cybercrime unit. Walk-in complainants receive assistance completing forms.
National Bureau of Investigation – Cybercrime Division (NBI CCD) is often preferred for larger or more complex cases because of stronger subpoena powers over banks and telecoms. File online via nbi.gov.ph, email ccd@nbi.gov.ph, call (02) 8523-8231 to 38, or visit the main office on Taft Avenue in Manila or any NBI office.
Many victims file with both agencies. There is no filing fee for the criminal complaint itself—only standard notarization costs for your affidavit if done outside the agency.
After you submit your report and supporting documents, investigators will review the case, request records from banks or platforms, and may issue subpoenas. If they find probable cause, the case moves to the prosecutor’s office for preliminary investigation.
Preparing and Filing Your Complaint-Affidavit
The heart of your filing is a detailed complaint-affidavit. Write it chronologically and factually: how you first encountered the scammer or offer, what specific false representations or promises were made, how and why you relied on them, every transfer you made (with exact dates, amounts, payment methods, and reference numbers), and the total loss you suffered. Clearly identify the scammer using every available detail—usernames, phone numbers, email addresses, bank or wallet details, profile links, and photos. End with a prayer for investigation and the filing of appropriate criminal charges.
Attach your valid government-issued ID and organize all evidence as numbered annexes. You can swear the affidavit before a notary public or before authorized personnel at PNP ACG or NBI. The Public Attorney’s Office (PAO) can assist if you qualify as indigent.
Once filed, the prosecutor conducts a preliminary investigation. This stage typically involves the exchange of affidavits and counter-affidavits and can take several weeks to a few months depending on caseload and complexity.
Civil Recovery Options
You can pursue civil recovery in two main ways. First, the civil aspect of the criminal case allows the court, upon conviction, to order restitution. Second, you can file a separate civil action for sum of money and damages.
For claims of ₱1,000,000 or less (exclusive of interest and costs), the small claims procedure under the Rules on Expedited Procedures in First Level Courts is often the fastest and most accessible route. You generally do not need a lawyer, filing is simpler, and the court aims to resolve the case within 30 days of the hearing. File in the appropriate Metropolitan Trial Court, Municipal Trial Court in Cities, or Municipal Trial Court where you reside or where the defendant resides or the transaction occurred.
For larger amounts, file a regular civil complaint in the Regional Trial Court or first-level court with jurisdiction. You may also request a writ of preliminary attachment in appropriate cases to secure assets early.
Common Challenges and Realistic Scenarios
Full financial recovery is never guaranteed. Success is highest when you report within the first 24–48 hours and the funds remain in identifiable Philippine bank or e-wallet accounts that authorities can freeze. Once money moves to cryptocurrency wallets, overseas accounts, or is quickly laundered through multiple mule accounts, recovery rates drop sharply—often below 20 percent in those situations.
Common bottlenecks include scammers using fake or frequently changed accounts, victims deleting chat histories before reporting, and delays in obtaining digital evidence from platforms. Foreign victims or overseas Filipino workers face additional steps: they can file online or through Philippine embassies and consulates (where affidavits can be notarized or consularized), and they may need to execute a Special Power of Attorney for a Philippine lawyer to handle court appearances.
Investment scams may also warrant a parallel report to the Securities and Exchange Commission for possible violations of securities laws. Crypto-related losses are particularly difficult because of the pseudonymous nature of many wallets, though reporting to NBI and any Philippine-licensed exchange involved can still help with tracing.
Many victims experience shame or delay reporting. Authorities and courts see these cases daily; the focus is on the evidence and the acts committed, not on judging the victim.
Documents and Evidence You Will Need
- Valid government-issued photo ID (passport, driver’s license, PhilID, or UMID)
- Your detailed, sworn complaint-affidavit
- Complete chat or message histories with visible timestamps and usernames
- Screenshots showing full context, profile information, and any links or advertisements
- Bank, e-wallet, or remittance transaction records and receipts
- Proof of any payments or transfers made
- Any websites, social media posts, or other materials that contained the false promises
Organize everything clearly. Digital files on a USB drive or cloud folder with an index are helpful for investigators.
Timelines and What to Expect
- First 24–72 hours: Highest chance of successful freeze or trace if you act immediately with your financial provider and file reports.
- Agency investigation: Days to several weeks for initial assessment and evidence gathering.
- Preliminary investigation: Usually 10 days to two months, though backlogs can extend this.
- Court proceedings: If the case reaches trial, it can take one to several years depending on whether the accused is at large, the complexity of digital evidence, and court dockets. Arrest warrants and hold-departure orders can be issued.
- Small claims resolution: Often within 30 days of the scheduled hearing.
Prescription periods for estafa range from several years to 20 years depending on the penalty involved, so filing promptly protects your rights.
Frequently Asked Questions
How soon after losing money to an online scam should I report it?
Report to your bank or e-wallet within minutes or hours if possible, and file with PNP ACG or NBI within 24 hours. The faster you act, the better the chance that funds can still be frozen or traced.
Can I recover my money if the scammer is located abroad or used cryptocurrency?
Recovery is much harder and often impossible once funds leave Philippine accounts or enter crypto wallets. However, filing still creates an official record, supports international cooperation efforts when applicable, and can lead to arrests if the perpetrators have ties in the Philippines or use local mule accounts.
Do I need to hire a lawyer to start the process?
No. You can file the initial complaint and complaint-affidavit yourself with PNP ACG or NBI. A lawyer becomes more valuable later for court proceedings, especially in complex or high-value cases. The Public Attorney’s Office assists qualified indigent complainants.
Will my bank or GCash automatically reverse the transaction?
Not automatically, because you authorized the transfer. However, providing a police or NBI report promptly gives them grounds to investigate, flag accounts, and cooperate with freeze requests. Chargebacks on credit cards have better success rates within card network time limits.
What if I already deleted some messages or chats?
Report anyway with whatever evidence remains. Investigators can sometimes recover data from devices or obtain records from platforms. The sooner you report, the better.
How long does the entire process usually take?
From report to possible freeze: days to weeks. Preliminary investigation: weeks to months. Full court resolution if it goes to trial: one to several years. Small claims cases move much faster.
Can I file both a criminal complaint and a separate civil case?
Yes. Many victims pursue the criminal route first for investigation and possible freeze orders, then handle civil recovery either as part of the criminal case or through a separate small claims or regular civil action.
Are there any fees I should expect?
There is no filing fee for the criminal complaint at PNP, NBI, or the prosecutor’s office. You will pay standard notarization fees (usually a few hundred pesos) if you notarize the affidavit privately. Court filing fees apply for civil cases but are modest for small claims.
What happens if the scammer is identified and arrested?
The case proceeds through preliminary investigation and, if probable cause is found, to court. Upon conviction, the court can order restitution of the amount lost plus damages. Authorities may also pursue asset forfeiture in appropriate cases.
Key Takeaways
- Act within the first 24–72 hours by contacting your financial provider and preserving every piece of digital evidence.
- File formal reports with PNP Anti-Cybercrime Group and/or NBI Cybercrime Division—these steps enable investigation and possible account freezes.
- Most online scams constitute estafa under Article 315 of the Revised Penal Code combined with violations of RA 10175.
- Civil recovery is available through small claims (up to ₱1,000,000) or regular civil action, and civil liability attaches to a criminal conviction.
- Full recovery is never guaranteed, especially once funds leave Philippine accounts or enter cryptocurrency, but prompt reporting maximizes whatever options exist and helps authorities build cases against scammers.
- You can start the process yourself without a lawyer, and official channels are free of charge except for standard notarization.
Taking these concrete steps transforms a painful loss into an active pursuit of accountability and possible restitution. Many victims who follow the process systematically feel more in control and contribute to stopping the same scammers from harming others.