Losing money to an online scam is frightening because every hour matters. In the Philippines, recovery is possible in some cases, but it usually depends on how fast you report the transaction, whether the money is still traceable, and whether the receiving account can be held before the scammer withdraws or transfers the funds. This guide explains what to do immediately, which Philippine laws apply, where to report, what documents to prepare, and the realistic options for getting your money back.

First 24 Hours: What to Do Immediately After an Online Scam

If you just transferred money by bank, e-wallet, QR code, crypto platform, remittance center, or online payment link, act in this order:

Contact your bank or e-wallet immediately. Report the transaction as a scam or unauthorized/fraudulent transaction. Ask for:
- a case or ticket number;
- an investigation;
- a request to hold or trace the receiving account;
- written confirmation of your report.
Report to the receiving bank or e-wallet, if known. If you have the account name, number, mobile wallet number, QR merchant name, or transaction reference, send it to the institution that received the funds.
Preserve all evidence before the scammer deletes it. Take screenshots and screen recordings of:
- chat messages;
- Facebook, Messenger, Telegram, WhatsApp, Viber, Instagram, TikTok, or website pages;
- account names, usernames, phone numbers, URLs, ads, group pages, and profiles;
- payment confirmations and reference numbers;
- delivery tracking, fake receipts, or investment dashboards.
File a cybercrime or fraud complaint. You may report to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or the Cybercrime Investigation and Coordinating Center (CICC).
For investment scams, report to the SEC. If the scam involved “guaranteed returns,” crypto trading pools, forex, lending investments, franchising investments, or Ponzi-style recruitment, report it to the Securities and Exchange Commission through the SEC i-Message Mo portal.

The practical rule is simple: report first, complete documents next. Do not wait until your affidavit is perfect before notifying the bank or e-wallet.

Can You Really Recover Money Lost to an Online Scam?

Yes, but not always.

Recovery is more likely when:

you report within minutes or hours;
the money is still in the receiving account;
the bank or e-wallet can identify the transaction quickly;
the scammer used a Philippine financial account;
law enforcement can obtain account information and preserve evidence;
several victims file coordinated complaints.

Recovery is harder when:

the scammer immediately withdrew the money;
the funds passed through multiple “money mule” accounts;
the scammer used crypto, offshore wallets, foreign accounts, or fake identities;
the victim voluntarily authorized the transfer after being deceived;
evidence was deleted or not preserved;
the receiving account was only rented, borrowed, or bought from another person.

A criminal case can punish the scammer, but criminal prosecution does not automatically return the money. To recover funds, you usually need one or more of these:

Recovery route	What it can do	Practical limitation
Bank/e-wallet dispute	May trace, hold, or reverse funds if still available	Fast reporting is critical
Law enforcement complaint	Can trigger investigation and evidence preservation	Investigation takes time
Criminal case for estafa/cybercrime	Can include restitution if accused is convicted	Requires proof beyond reasonable doubt
Civil action	Can seek repayment and damages	Costs time and filing fees
SEC action for investment scams	Helps stop illegal solicitation and support prosecution	Does not always result in immediate refund

Philippine Laws That Apply to Online Scams

Anti-Financial Account Scamming Act: RA 12010

The most important recent law is Republic Act No. 12010, the Anti-Financial Account Scamming Act (AFASA), signed in 2024. It covers scams involving bank accounts, e-wallets, online payment accounts, and similar financial accounts.

AFASA punishes, among others:

money muling — using, selling, lending, or allowing an account to receive or transfer scam proceeds;
social engineering schemes — manipulating people into revealing sensitive financial information or authorizing transactions;
economic sabotage when committed by syndicates or on a large scale.

You can read the law through the Supreme Court E-Library copy of RA 12010.

AFASA matters because many online scam recoveries fail due to “mule accounts.” These are accounts opened, borrowed, rented, or bought to receive scam proceeds. Even if the person whose name appears on the receiving account claims, “I only lent my account,” that can itself be legally serious.

Cybercrime Prevention Act: RA 10175

The Cybercrime Prevention Act of 2012, or RA 10175, applies when fraud is committed using computers, phones, social media, websites, apps, or electronic communications.

Online scams may involve:

computer-related fraud;
identity theft;
illegal access;
misuse of devices;
cyber libel or threats in related cases;
aiding or abetting cybercrime.

Cybercrime complaints are usually handled by specialized cybercrime units because digital evidence must be preserved properly.

Revised Penal Code: Estafa Under Article 315

Many online scams are also estafa, or swindling, under Article 315 of the Revised Penal Code.

Estafa generally involves:

deceit or abuse of confidence;
damage or loss to the victim;
a connection between the deceit and the victim’s payment or delivery of money.

Examples:

fake seller accepts payment but never intends to deliver;
fake investment promises guaranteed profits;
scammer pretends to be a relative, employer, bank employee, government officer, or courier;
romance scammer asks for emergency money;
person receives funds for a specific purpose and misappropriates them.

The Revised Penal Code is available through Lawphil’s copy of Act No. 3815.

Civil Code: Damages, Fraud, and Unjust Enrichment

Even if a criminal case is difficult, a victim may have civil remedies under the Civil Code of the Philippines.

Relevant provisions include:

Article 19 — everyone must act with justice, give everyone his due, and observe honesty and good faith;
Article 20 — a person who causes damage contrary to law must indemnify the injured person;
Article 21 — a person who willfully causes loss in a manner contrary to morals, good customs, or public policy must compensate the injured person;
Article 22 — no one may unjustly enrich himself at the expense of another;
Article 1170 — those guilty of fraud, negligence, delay, or breach of obligation may be liable for damages.

The Civil Code is available on Lawphil’s Civil Code page.

Step-by-Step Guide to Recover Money From an Online Scam

Step 1: Call or message your bank or e-wallet fraud hotline

Use the official app, website, or hotline only. Do not click links sent by the scammer.

Give these details:

your full name and account number or wallet number;
transaction date and time;
amount;
reference number;
receiving account name and number, if visible;
receiving bank, e-wallet, or merchant;
short explanation of the scam.

Use clear words such as:

“I am reporting an online scam/fraudulent transaction. Please investigate, trace the funds, and request holding of the receiving account or disputed funds if still available.”

Ask for a reference number and save it.

Step 2: File a written complaint with the bank or e-wallet

Most banks and e-wallets require a written dispute form, email, or in-app ticket.

Attach:

valid government ID;
proof of transaction;
screenshots of conversations;
scammer’s profile, phone number, email, URL, or account details;
police or cybercrime complaint, if already available.

If the financial institution is supervised by the Bangko Sentral ng Pilipinas, you may also use the BSP’s consumer assistance channels. The BSP provides guidance through its Consumer Assistance Mechanism.

Step 3: Report to PNP-ACG, NBI, or CICC

For cyber-related scams, report to one of these agencies:

Office	Best for	What to prepare
PNP Anti-Cybercrime Group	Online fraud, fake sellers, phishing, social media scams	Affidavit, screenshots, IDs, transaction records
NBI Cybercrime Division	More complex cybercrime, identity theft, organized scams	Evidence files, sworn statement, digital records
CICC	Cybercrime incident reporting and coordination	Online report details and supporting evidence
SEC	Investment scams and unauthorized solicitation	Proof of investment offer, receipts, chats, company details

The Department of Justice also maintains a page on reporting cybercrime incidents.

Step 4: Execute a complaint-affidavit

A complaint-affidavit is a sworn written statement explaining what happened. It should be notarized.

Include:

your personal details;
how you met or encountered the scammer;
what representations were made;
why you believed them;
how much you paid;
payment details;
what happened after payment;
your efforts to demand refund;
list of attached evidence.

Avoid exaggeration. A clear timeline is more useful than emotional language.

Step 5: Ask about preservation, tracing, and account information

Banks generally cannot freely disclose another person’s account information to you because of bank secrecy, data privacy, and internal rules. But law enforcement, prosecutors, courts, and regulators may request or compel information through proper legal processes.

This is why a formal complaint matters. It creates a paper trail and gives authorities a basis to request records.

Step 6: Consider a demand letter

A demand letter may help when the receiving account holder is identifiable.

It should state:

amount owed;
factual basis;
deadline to return the money;
payment instructions;
warning that criminal, civil, and administrative remedies may be pursued.

For small disputes, a demand letter sometimes works when the account holder was a “mule” who panics after being identified. For organized scammers, it usually does not.

Step 7: File the proper case

Depending on the facts, the case may be:

criminal complaint for estafa;
cybercrime complaint under RA 10175;
AFASA-related complaint for money mule or financial account scamming;
civil action for sum of money and damages;
small claims case, if the issue fits small claims rules;
SEC complaint for investment solicitation violations.

What Documents Do You Need?

Document	Why it matters
Valid government ID	Proves identity of complainant
Proof of payment	Shows amount, date, reference number, and recipient
Screenshots of chats	Shows deceit, promises, instructions, and admissions
URL/profile screenshots	Helps identify scammer accounts before deletion
Demand messages	Shows you asked for refund or delivery
Bank/e-wallet ticket number	Proves timely reporting
Complaint-affidavit	Main sworn statement for investigation
Police blotter or cybercrime report	Supports bank and law enforcement follow-up
SEC report	Important for investment scams

For Filipinos abroad, documents signed overseas may need notarization before a Philippine consulate or apostille/authentication, depending on where the document will be used.

Common Types of Online Scams in the Philippines

Fake seller or marketplace scam

The scammer posts a product, asks for full or partial payment, then blocks the buyer. This may be estafa if there was deceit from the beginning.

Helpful evidence includes the listing, seller profile, payment record, tracking promises, and blocked messages.

Phishing or bank impersonation

The victim receives a fake bank message, link, or call and enters OTPs, passwords, or card details. Report this immediately because speed is crucial.

Banks usually examine whether the transaction was authorized, whether security credentials were shared, and whether fraud detection systems were triggered.

Investment scam

These scams promise unusually high returns, guaranteed profits, referral bonuses, or “daily earnings.” Even if the entity has a business registration, that does not automatically mean it is authorized to sell investments.

Check and report suspicious offers through the SEC i-Message Mo portal.

Love scam or emergency scam

The scammer builds trust, then asks for money due to illness, customs fees, travel emergencies, or fake business problems. These cases are emotionally difficult but still evidence-based: save chats, remittance receipts, profile links, and promises to repay.

Job, task, or “like and earn” scam

Victims are asked to deposit money to unlock commissions or complete tasks. These often involve multiple mule accounts and Telegram groups. Report quickly and preserve all group messages.

Important Practical Realities

A police blotter alone does not freeze money

A blotter records the incident. It is useful, but it does not automatically freeze bank accounts. Banks and e-wallets need internal procedures, regulator rules, law enforcement coordination, or court/prosecutor processes.

The account name may not be the real scammer

Many scammers use borrowed or rented accounts. Do not assume the account holder is innocent or guilty based only on the account name. But the account holder is still an important lead.

Recovery may be partial

Sometimes only part of the money remains. Scammers often split funds quickly across wallets, banks, crypto accounts, and cash-out points.

Do not pay “recovery agents”

A second scam often follows the first. Someone may claim they can recover your funds for an advance fee. Be careful. Real agencies do not require you to pay strangers through personal e-wallets to “unlock” recovered money.

Foreign victims can file complaints in the Philippines

Foreigners may report Philippine-based scams, especially if the receiving account, scammer, platform, or victimization occurred in the Philippines. If abroad, prepare clear documentary evidence and be ready for notarization or consular authentication if a sworn affidavit is required.

Frequently Asked Questions

Can I reverse a GCash, Maya, or bank transfer after being scammed?

Possibly, but only if the receiving institution can still hold or recover the funds. Report immediately through the official app, hotline, or branch. Once the scammer withdraws or transfers the money, reversal becomes much harder.

How fast should I report an online scam?

Report within minutes if possible. The first few hours are often the most important because scammers usually move funds quickly through mule accounts.

Is an online scam considered estafa in the Philippines?

Often, yes. If the scammer used deceit or false promises to make you send money, the facts may support estafa under Article 315 of the Revised Penal Code. If phones, apps, social media, or websites were used, cybercrime laws may also apply.

Can the police freeze the scammer’s bank account?

Police reports help start the process, but freezing or holding funds generally requires bank procedures, regulatory mechanisms, law enforcement coordination, or court-related processes. A blotter alone is usually not enough.

What if I willingly sent the money?

You may still have a case if you sent the money because of fraud, deceit, impersonation, or false promises. “Voluntary transfer” does not automatically mean there was no scam.

Can I sue the owner of the receiving account?

Possibly. If the account owner knowingly allowed the account to be used, benefited from the scam, or acted as a money mule, there may be criminal and civil liability. Evidence is still required.

Should I file with the barangay?

For online scams involving unknown persons, cybercrime, or respondents in different cities, barangay conciliation is often not the main route. Go directly to the bank/e-wallet and cybercrime authorities. Barangay action may help only if the person is known and within barangay conciliation coverage.

Can I recover money from a crypto scam?

It is harder, especially if funds moved to foreign wallets or decentralized platforms. Still, preserve wallet addresses, transaction hashes, exchange records, chats, and screenshots. Report to cybercrime authorities and the platform used.

How long does an online scam case take in the Philippines?

Bank investigations may take days to weeks. Law enforcement investigation and prosecutor proceedings can take months or longer. Court cases may take years. Fast reporting improves recovery chances, but prosecution is usually not quick.

What is the best evidence for an online scam complaint?

The strongest evidence usually includes payment records, transaction reference numbers, screenshots showing the scammer’s promises or instructions, account details, profile links, phone numbers, emails, and a clear sworn timeline.

Key Takeaways

Report immediately to your bank or e-wallet; speed is the biggest factor in recovery.
Preserve screenshots, transaction records, profile links, phone numbers, and URLs before they disappear.
File with PNP-ACG, NBI Cybercrime Division, CICC, or SEC depending on the type of scam.
Online scams may involve estafa, cybercrime, AFASA violations, civil liability, or securities violations.
A criminal case can punish scammers, but money recovery may require bank action, tracing, restitution, settlement, or a civil claim.
Be careful of “fund recovery” agents asking for advance fees; many are secondary scams.