Losing money to an online scam is frightening because every hour can matter. In the Philippines, the best chance of recovery usually comes from acting fast: reporting the disputed transaction to your bank or e-wallet, asking for a temporary hold of the funds, preserving evidence, and filing the right complaint with the proper agency. This guide explains what to do immediately, which Philippine laws apply, where to report the scam, what documents to prepare, and what recovery options are realistically available.

Can You Still Recover Money Lost to an Online Scam?

Yes, but the chances depend on what happened after the money left your account.

Recovery is most realistic when:

The money is still in the receiving bank or e-wallet account.
The transfer can still be traced through the financial system.
You report the transaction quickly.
You provide complete transaction details and screenshots.
The bank, e-wallet, or financial institution can identify the receiving account and coordinate with other institutions.

Recovery becomes harder when:

The scammer immediately cashed out.
The money passed through several “mule” accounts.
The funds were converted to cryptocurrency.
The scammer used fake identities, foreign platforms, or unregistered accounts.
The victim waited days or weeks before reporting.

Your first goal is not to argue with the scammer. Your first goal is to stop the money from moving.

What to Do Immediately After an Online Scam

1. Report the transaction to your bank or e-wallet right away

Contact the bank, e-wallet, credit card issuer, or payment provider where the money came from. This is your source financial institution.

Use the official app, official hotline, verified website, or in-branch fraud desk. Do not use phone numbers or links sent by the scammer.

Say clearly:

“I am reporting a disputed transaction caused by an online scam. Please treat this as a fraud report under the Anti-Financial Account Scamming Act and initiate temporary holding of the disputed funds and coordinated verification.”

Ask for:

A fraud report or case number
Written acknowledgement by email, app message, or ticket
Confirmation that the receiving bank or e-wallet has been notified
Instructions for submitting an affidavit, police report, or supporting documents

Do this even if you do not yet have a police report. A police report helps, but waiting for one before calling your bank may cost you the chance to freeze the funds.

2. Secure your accounts

If the scam involved phishing, fake customer service, remote access, OTP sharing, or unauthorized login, protect your accounts immediately:

Change your online banking, e-wallet, email, and social media passwords.
Revoke unknown devices or sessions.
Turn on multi-factor authentication.
Block or replace compromised cards.
Ask your bank or e-wallet to restrict suspicious access.
Do not share OTPs, PINs, passwords, recovery codes, or screen-sharing access.

If the scammer gained access to your email, they may also access bank alerts, password reset links, and identity documents.

3. Save all evidence before it disappears

Preserve everything while it is still visible.

Important evidence includes:

Transfer receipts
Reference numbers or transaction IDs
Date and exact time of transfer
Amount sent
Source account and receiving account details
Name shown on the receiving bank or e-wallet account
Mobile number, username, email address, or profile link of the scammer
Screenshots of chats, posts, product listings, fake receipts, QR codes, websites, or ads
Courier details, tracking numbers, invoices, and order confirmations
Emails with full headers, if the scam involved phishing
Crypto wallet addresses and transaction hashes, if cryptocurrency was involved

Do not rely only on cropped screenshots. Investigators and banks need details such as URLs, account names, timestamps, and transaction reference numbers.

4. Do not warn the scammer too early

Many victims message the scammer immediately: “I already reported you.” That may cause the scammer to delete accounts, remove posts, cash out funds, or move the money again.

Once you have saved evidence, prioritize formal reporting to your bank, e-wallet, platform, PNP, NBI, SEC, or other relevant agency.

5. Watch out for “money recovery” scams

After posting publicly about being scammed, victims are often contacted by people claiming they can “hack back,” “trace the wallet,” “recover GCash funds,” or “guarantee refund” for an upfront fee.

Be very careful. Many “recovery agents” are secondary scammers. A legitimate recovery process in the Philippines usually goes through banks, e-wallets, regulators, law enforcement, prosecutors, courts, or recognized platform dispute channels.

The Main Philippine Law for Bank and E-Wallet Scam Recovery

The most important recent law for online financial scams is the Anti-Financial Account Scamming Act, Republic Act No. 12010, signed in 2024.

This law is commonly called AFASA.

It applies to scams involving financial accounts such as:

Bank accounts
E-wallets
Payment accounts
Credit card accounts
Transaction accounts
Other financial products or services regulated by the Bangko Sentral ng Pilipinas

AFASA targets common online scam patterns such as:

Money muling — using, lending, selling, buying, renting, or allowing the use of a financial account to receive or move scam proceeds
Social engineering schemes — tricking a person into giving information or access that allows unauthorized control of a financial account
Fraud involving multiple victims, organized groups, or mass scam operations

Why AFASA matters for victims

AFASA gives financial institutions a legal framework to temporarily hold disputed funds and coordinate verification with other banks or financial institutions.

Under AFASA and the BSP implementing rules, banks and other BSP-supervised institutions may temporarily hold funds involved in a disputed transaction for up to 30 calendar days, unless extended by a court. The process can begin through a complaint by the source account owner, fraud monitoring systems, or a request from another financial institution.

This is why speed matters. If you report while the funds are still in the receiving account, there may be a practical recovery path.

How the AFASA Temporary Hold Process Works

The BSP has issued implementing rules through its AFASA handbook and circulars. In simple terms, here is how the process works.

Term	Meaning
Source account	The victim’s account where the money came from
Source financial institution	The bank, e-wallet, or provider of the victim’s account
Receiving financial institution	The bank, e-wallet, or provider that received the money
Subsequent receiving institution	Another financial institution where the funds were transferred after the first receiving account
Disputed transaction	A transaction reported as suspicious, fraudulent, unauthorized, or connected to a scam

Step-by-step AFASA process

You file a fraud report with your bank or e-wallet. Use the official fraud channel, app, hotline, or branch. Ask them to treat the matter as a disputed transaction under AFASA.
Your bank or e-wallet verifies your identity. They may ask for your ID, account details, transaction reference number, screenshots, and a short explanation of what happened.
Your bank prepares a disputed transaction report. It may restrict your source account if necessary to prevent further unauthorized transfers.
Your bank contacts the receiving institution. The receiving bank or e-wallet may initially hold the disputed funds for up to 5 calendar days from receipt of the request.
You submit supporting documents. Within the initial holding period, you may be asked for a sworn complaint, affidavit, police report, or other documents explaining why the transaction is fraudulent.
The hold may be extended. If there are reasonable grounds to believe the funds are connected to a scam, the hold may be extended for up to 25 more calendar days, for a total of 30 calendar days, unless a court orders a longer hold.
The banks coordinate verification. Institutions involved in the transfer chain may share relevant information despite bank secrecy and data privacy rules, but only for the coordinated verification process required by law.
Funds may be returned, released, or held by court order. If verification shows that the funds came from a scam, money muling, social engineering, or another unlawful source, the amount may be returned through the financial institution chain. If the transaction is found legitimate, the hold is lifted. If law enforcement or prosecutors act quickly, a court order may extend the hold.

What to say when calling the bank or e-wallet

Use clear language:

“I am the source account owner. I am reporting a disputed transaction caused by an online scam. Please initiate complaint-initiated temporary holding of funds and coordinated verification under AFASA. The transaction reference number is [reference number], sent on [date and time], amounting to [amount], to [receiving bank/e-wallet/account name/account number if known].”

This wording helps the front-line agent understand that you are not merely asking for “customer service assistance.” You are asking for a specific fraud-handling process.

Other Philippine Laws That May Apply

Online scams often involve several laws at the same time.

Law	When it may apply
Anti-Financial Account Scamming Act, RA 12010	Bank transfer scams, e-wallet scams, money mule accounts, social engineering, financial account fraud
Cybercrime Prevention Act, RA 10175	Computer-related fraud, identity theft, phishing, unauthorized access, scams committed through ICT
Revised Penal Code, Article 315 on Estafa	Deceit, false pretenses, fake sellers, fake investments, romance scams, fraudulent representations
Access Devices Regulation Act, RA 8484, as amended by RA 11449	Credit card fraud, debit card fraud, ATM card fraud, access device misuse, skimming, unauthorized card transactions
Financial Products and Services Consumer Protection Act, RA 11765	Complaints against banks, e-wallets, insurers, investment firms, lending companies, and other financial service providers
Civil Code of the Philippines	Civil recovery, damages, fraud, negligence, unjust enrichment, return of money
SIM Registration Act, RA 11934	Scams using mobile numbers or SIM-based accounts, subject to lawful request and proper process

Estafa and online scams

Many online scams may fall under estafa under Article 315 of the Revised Penal Code, especially when the scammer used deceit or false pretenses to make the victim part with money.

Common examples include:

Fake online sellers who never intended to deliver
Fake investment recruiters
Fake job processing or visa processing schemes
Romance scams
Emergency impersonation scams
Fake agents pretending to represent banks, government offices, or companies

If the scam was committed through the internet, mobile apps, social media, email, or other information and communications technology, the Cybercrime Prevention Act may also apply.

Civil Code remedies

Even when a criminal case is difficult, civil law may still help if the scammer is identifiable.

Relevant Civil Code principles include:

Article 22 — no one should unjustly enrich themselves at the expense of another
Article 1170 — those guilty of fraud, negligence, delay, or violation of obligations may be liable for damages
Article 33 — a civil action for damages in cases of fraud may proceed independently of the criminal case
Article 2176 — negligence causing damage may create liability under quasi-delict

Civil recovery is more practical when you know the scammer’s real name, address, business identity, or company affiliation.

Where to Report an Online Scam in the Philippines

Different offices have different roles. Filing with the wrong office alone may delay recovery.

Where to report	Best for	What it can do
Your bank, e-wallet, or card issuer	Immediate fund hold and transaction dispute	Start AFASA hold, block accounts, investigate unauthorized transactions, coordinate with receiving institutions
BSP Consumer Assistance / BSP Online Buddy	Complaints against BSP-supervised banks, e-wallets, payment providers	Escalate unresolved or mishandled complaints after you first complain to the financial institution
NBI Cybercrime Division	Cybercrime investigation, sworn statements, digital evidence	Receive complaints, conduct investigation, coordinate for cybercrime-related evidence
PNP Anti-Cybercrime Group eComplaint	Cybercrime complaint and law enforcement response	Receive cybercrime complaints and assist in investigation
CICC / Scam Watch Pilipinas 1326	Scam reporting, suspicious links, public cyber response	Help route online scam reports and support anti-scam response
SEC iMessage Portal	Investment scams, unauthorized solicitation, suspicious companies	Receive reports involving investment schemes, lending or financing issues, and securities-related violations
Marketplace or social media platform	Fake seller accounts, impersonation pages, scam ads	Takedown, account suspension, preservation of platform records
Telco or NTC channels	Scam texts and SIM-related abuse	Report abusive numbers, but identity disclosure usually requires lawful process

BSP complaints: when to use BSP Online Buddy

The BSP is not a police station. It usually becomes relevant when your complaint is against a BSP-supervised financial institution, such as a bank, e-wallet, payment provider, or other regulated financial service provider.

Before escalating to BSP, first file with the institution’s Financial Consumer Protection Assistance Mechanism or customer assistance channel. Then, if the response is inadequate, delayed, unclear, or unresolved, you may escalate through BSP’s consumer assistance channels.

Keep:

Your bank or e-wallet complaint ticket number
Copies of emails or app messages
Screenshots of the transaction
Your written timeline
The institution’s reply or proof that they failed to reply

NBI or PNP: when to file a criminal complaint

File with the NBI Cybercrime Division or PNP Anti-Cybercrime Group when:

The scammer used fake identities, phishing, social engineering, or hacking.
You need law enforcement to trace accounts, devices, IP logs, or platform records.
There are multiple victims.
The amount is significant.
The bank or e-wallet requires a police report or sworn complaint for extended action.
You want the case evaluated for estafa, cybercrime, money muling, or related offenses.

The NBI Cybercrime Division Citizen’s Charter describes a process involving a complaint sheet, preliminary interview, sworn statement or affidavit, supporting documents, and further investigation. There is no filing fee listed for that service.

SEC: when the scam is an investment scheme

Report to the SEC if the scam involved:

Guaranteed high returns
“Double your money” promises
Crypto, forex, casino, or trading pools marketed as investments
Referral commissions or recruitment
A company claiming SEC registration as proof that it can solicit investments
Lending, financing, or investment-related misrepresentation

A corporation’s SEC registration does not automatically mean it is authorized to solicit investments from the public. Investment solicitation generally requires proper authority from the SEC.

Documents and Evidence You Should Prepare

Prepare a clean folder, either physical or digital. Label files clearly.

Document or evidence	Why it matters
Valid government ID or passport	Proves identity of complainant
Proof of account ownership	Shows you own the source account
Transaction receipt	Shows amount, date, time, and reference number
Bank or e-wallet statement	Confirms debit and account details
Screenshots of chats	Shows inducement, promises, threats, or false representations
Screenshots of profile, page, listing, or website	Helps identify the scammer or platform
Receiving account details	Helps the bank trace the transaction
Written timeline	Helps investigators understand events quickly
Sworn affidavit or complaint-affidavit	Formal statement for police, NBI, prosecutor, or bank extension requests
Police report or NBI acknowledgement	Supports extended holds, investigation, and prosecutor referral
Demand letter, if identity is known	Useful for civil recovery or settlement record
Special Power of Attorney, if filing through a representative	Needed when an OFW, foreigner, or unavailable victim authorizes someone in the Philippines

What your written timeline should include

A good timeline can be one or two pages. Include:

When and how you first encountered the scammer
What the scammer represented or promised
Why you believed the representation
When you sent money
Exact amount and transaction reference numbers
What happened after payment
When you realized it was a scam
What reports you already filed
Case numbers, ticket numbers, and names of institutions involved

Investigators handle many complaints. A clear timeline makes your complaint easier to act on.

Filing a Criminal Complaint: What Usually Happens

A criminal complaint is different from a bank dispute. It may help identify the scammer, support court action, and create a record for prosecution.

Typical process

Complaint intake You go to NBI, PNP ACG, or another proper law enforcement office, or use their online complaint channels where available.
Initial interview An investigator asks what happened, how much was lost, what platforms were used, and what evidence you have.
Sworn statement or affidavit You may be asked to execute a sworn statement. Bring a valid ID and copies of evidence.
Evidence review The investigator checks receipts, screenshots, account details, URLs, mobile numbers, email addresses, and other identifiers.
Coordination or lawful requests Law enforcement may coordinate with banks, e-wallets, platforms, telcos, or service providers. Under the Cybercrime Prevention Act, certain subscriber or traffic data may require proper legal process, court warrants, or authorized requests.
Referral to the prosecutor If there is enough basis, the complaint may be referred for preliminary investigation. The prosecutor decides whether there is probable cause to file the case in court.
Court proceedings If a case is filed, the court may hear the criminal case and related civil liability. AFASA cases are within the jurisdiction of the Regional Trial Court.

Practical timelines

Step	Practical timing
Bank or e-wallet fraud report	Same day, ideally immediately
Initial AFASA hold, if funds are found	Up to 5 calendar days from receipt of request
Extended AFASA hold	Up to 25 additional calendar days, total 30 without court extension
BSP escalation	After first reporting to the institution; timing depends on response and records
NBI or PNP intake	Often same day or by appointment/queue, depending on office
Investigation and coordination	Weeks to months, depending on complexity
Prosecutor preliminary investigation	Often months, depending on docket and evidence
Court case	Can take significantly longer

The fastest possible recovery usually comes from the bank or e-wallet hold process, not from waiting for a full criminal case to finish.

Civil Recovery Options If the Scammer Is Known

If you know the scammer’s real identity, address, business name, or company, civil remedies may be available.

Civil action connected with a criminal case

Under the Rules of Criminal Procedure, the civil action for recovery of civil liability arising from the offense is generally deemed included in the criminal action unless it is waived, reserved, or filed separately before the criminal action.

In practical terms, this means that when filing a criminal complaint, you should clearly state:

The exact amount lost
Other damages claimed, if any
The basis for the amount
Copies of receipts and proof of payment
Any partial payments or attempted settlements

Separate civil action

A separate civil case may be considered when:

The scammer is identifiable and can be served with court papers.
The facts show fraud, unjust enrichment, breach of obligation, or negligence.
Criminal prosecution may be slow or difficult, but documentary evidence is strong.
The defendant is a business, company, or person with reachable assets.

Small claims

Small claims may be useful for straightforward money claims where the defendant is known and the claim fits within the current small-claims rules. It is usually not the best first option when the scammer is unknown, used fake identities, or needs cybercrime tracing.

Small claims also cannot imprison the scammer. It is a civil recovery route, not a criminal prosecution.

Common Online Scam Scenarios in the Philippines

GCash, Maya, or bank transfer scam

This is one of the most common situations. Report first to your own bank or e-wallet. Give the exact transaction reference number, receiving account name, amount, and time.

Ask specifically for AFASA temporary holding and coordinated verification.

Then prepare a sworn complaint or affidavit, especially if the institution asks for it to support an extended hold.

Fake online seller

If the seller simply failed to deliver due to delay or misunderstanding, it may start as a consumer or civil dispute. But if the seller used a fake identity, fake proof of stock, fake courier receipt, multiple victim pattern, or never intended to deliver, it may become estafa, cybercrime, or financial account scamming.

Report to:

Bank or e-wallet
Marketplace or social media platform
PNP ACG or NBI Cybercrime Division
DTI or platform dispute channels, where appropriate for consumer issues

Investment or crypto scam

If the scheme involved pooled money, promised profits, guaranteed returns, referral commissions, or public investment solicitation, report to the SEC.

If you paid through a bank or e-wallet, also report to your financial institution immediately. Even if the investment was framed as “crypto,” the peso transfer may have passed through Philippine financial accounts first.

If crypto was transferred, preserve:

Wallet addresses
Transaction hashes
Exchange account details
Screenshots of dashboards and chats
Names of groups, admins, and recruiters

Crypto recovery is difficult once funds move to private wallets or foreign exchanges, but proper documentation may still help investigators and regulators.

Romance scam or emergency impersonation scam

These scams often involve social engineering. The scammer may pretend to be a romantic partner, relative, boss, soldier, foreigner, lawyer, doctor, or government officer.

Common excuses include:

Medical emergency
Customs release fee
Travel document problem
Detention or police issue
Package delivery fee
Business emergency
Investment opportunity

Do not send additional money to “unlock” funds, release a package, or prove loyalty. Report the transaction and preserve the entire conversation.

Unauthorized transfer from your account

If money left your account without your instruction, treat it as an unauthorized transaction, not merely a scam payment.

Report immediately and ask the institution to:

Block compromised access
Investigate login history and device activity
Preserve transaction logs
Review fraud controls
Initiate AFASA procedures if funds moved to another account
Provide a written resolution

If the institution failed to act with adequate security controls or did not handle the fraud report properly, escalation to BSP may become important.

Special Considerations for OFWs, Foreigners, and Victims Abroad

Victims outside the Philippines can still report scams involving Philippine bank accounts, e-wallets, Filipino scammers, Philippine platforms, or funds sent to the Philippines.

Practical issues include:

Time zone delays in calling banks or e-wallets
Need for a Philippine mobile number or app access
Difficulty appearing personally before NBI, PNP, or a notary
Need to authorize a family member or representative
Need for authenticated or apostilled documents

If you are abroad and someone in the Philippines will file for you, prepare:

Special Power of Attorney or written authorization
Copy of your passport or government ID
Proof of account ownership
Sworn statement or affidavit
Transaction records
Screenshots and evidence folder

Depending on the receiving office, documents executed abroad may need notarization before a Philippine embassy or consulate, or apostille through the proper foreign authority. The DFA provides information through its Apostille appointment system.

Foreigners should also keep copies of passport pages, Philippine visa records if relevant, ACR I-Card if any, and proof of the Philippine transaction or relationship to the Philippines.

Common Mistakes That Reduce Your Chances of Recovery

Waiting too long before reporting

Funds can move within minutes. Report first to the bank or e-wallet, then complete affidavits and police reports.

Only reporting to Facebook, Instagram, TikTok, or the marketplace

Platform reports can remove accounts, but they usually do not freeze bank or e-wallet funds. Report to the payment institution and law enforcement too.

Sending incomplete screenshots

A screenshot without the URL, username, phone number, transaction ID, or timestamp may be less useful. Capture the full screen when possible.

Deleting conversations

Do not delete chats, emails, posts, call logs, or text messages. Even embarrassing or emotional messages may help prove the scam.

Paying a second “recovery fee”

Scammers often return under a new identity and claim they can recover your money for a fee. Do not send more money to unknown recovery agents.

Publicly accusing people without complete verification

Stick to factual reports to banks, platforms, regulators, and law enforcement. Public accusations can create separate legal problems, especially if the wrong person is named.

Filing with only one office

Many cases require parallel action:

Bank or e-wallet for fund hold
NBI or PNP for investigation
BSP for financial institution complaints
SEC for investment scams
Platform for takedown and records

Practical Checklist: What to Do in Order

Stop further loss. Block cards, change passwords, secure email, revoke unknown devices, and stop communicating with suspicious accounts.
Call or message your bank or e-wallet through official channels. Report the transaction as fraud and ask for AFASA temporary holding and coordinated verification.
Get a case number. Save the ticket number, agent name if available, date, and time of report.
Prepare evidence. Save receipts, screenshots, URLs, chat logs, account names, phone numbers, and transaction IDs.
Submit required documents to the financial institution. If asked, submit a sworn complaint, affidavit, police report, or other supporting document quickly.
File with NBI Cybercrime Division or PNP ACG. Bring your evidence and written timeline.
Report to SEC if it is an investment scam. Include the names of recruiters, company names, promised returns, and proof of payment.
Escalate to BSP if the bank or e-wallet mishandles the complaint. Use your original complaint ticket and proof of follow-up.
Preserve all original evidence. Do not edit, delete, or alter digital records.
Track deadlines and follow up. The first 5 days and the 30-day AFASA period are especially important.

Frequently Asked Questions

Can I get my money back from a GCash, Maya, or bank transfer scam?

Possibly, especially if you report quickly and the money is still in the receiving account. Ask your bank or e-wallet to initiate AFASA temporary holding and coordinated verification. Recovery becomes harder if the scammer already cashed out or moved the funds through several accounts.

How fast should I report an online scam in the Philippines?

Immediately. Report within minutes if possible. Do not wait for a police report before notifying your bank or e-wallet. You can file the bank or e-wallet fraud report first, then submit sworn documents or police reports as soon as available.

Do I need a police report before the bank can freeze the funds?

Not always for the initial report. Under the AFASA process, a complaint-initiated hold can begin through your financial institution’s fraud reporting channel. However, a sworn complaint, affidavit, police report, or similar document may be required to support an extended hold or further investigation.

Should I report to NBI or PNP?

You may report to either the NBI Cybercrime Division or the PNP Anti-Cybercrime Group. Both handle cybercrime complaints. In urgent financial scams, also report to your bank or e-wallet immediately because law enforcement investigation alone may not stop the funds from moving.

When should I report to BSP?

Report to BSP when the issue involves a BSP-supervised financial institution, such as a bank, e-wallet, or payment service provider, and you have already filed a complaint with that institution. BSP consumer assistance is especially relevant when the institution fails to respond, gives an unclear response, mishandles your complaint, or refuses to explain its action.

When should I report to SEC?

Report to SEC if the scam involves investments, securities, trading pools, crypto investment schemes, lending or financing companies, guaranteed returns, referral commissions, or public solicitation of money for profit. SEC registration as a corporation does not automatically authorize a company to solicit investments.

What if the scammer already cashed out?

Recovery becomes harder, but reporting is still important. Law enforcement may trace the receiving account, identify money mules, connect related complaints, and support criminal prosecution. Your bank or e-wallet may also need the report to complete its investigation and determine whether institutional fault or restitution issues exist.

Can I sue the bank or e-wallet?

A bank or e-wallet is not automatically liable just because a scam happened. However, under AFASA and financial consumer protection rules, liability may arise if the institution failed to employ adequate risk management systems, failed to exercise the required degree of diligence, or failed to temporarily hold disputed funds when required. BSP escalation may be appropriate for mishandled complaints involving BSP-supervised institutions.

Is an online scam considered estafa?

Many online scams may qualify as estafa if the scammer used deceit, false pretenses, or fraudulent representations to make the victim send money. If the scam was committed through the internet, mobile apps, social media, or digital systems, cybercrime laws may also apply.

Can I trace the owner of a scammer’s mobile number or bank account myself?

Usually, no. Banks, e-wallets, telcos, and platforms generally cannot disclose private account or subscriber information directly to victims. Proper requests usually go through the financial institution’s fraud process, law enforcement, regulators, prosecutors, or court-authorized procedures.

Key Takeaways

Report the scam to your bank or e-wallet immediately. The first hours are critical.
Ask specifically for AFASA temporary holding of disputed funds and coordinated verification.
Save complete evidence: receipts, transaction IDs, screenshots, chats, URLs, account names, and timestamps.
File with NBI Cybercrime Division or PNP Anti-Cybercrime Group for criminal investigation.
Escalate to BSP if a bank, e-wallet, or payment provider mishandles your complaint.
Report investment scams to SEC, especially if there were promised returns or public solicitation.
Recovery is most realistic when the funds are still in the financial system.
Do not pay “recovery agents” who promise guaranteed refunds for an upfront fee.
OFWs and foreigners can still file complaints involving Philippine accounts or scammers, but may need proper authorization, notarized documents, or apostilled papers.
Keep all case numbers, complaint tickets, and written follow-ups organized from day one.