How to Report a Fake Casino App or Online Gambling Scam in the Philippines

How to Report a Fake Casino App or Online Gambling Scam in the Philippines

This article explains—step by step—how to recognize, document, and report fake casino apps and online gambling scams in the Philippines, and what legal, administrative, and civil remedies are available. It’s written for everyday users, parents, and businesses, and aligns with Philippine laws and enforcement practice.


1) What counts as a “fake” or illegal online casino?

Fake/illegal operators typically fall into one or more of these buckets:

  • Unlicensed “casino” websites or apps using logos/claims without a Philippine license or authorization.
  • Phishing clones of legitimate casinos or e-wallets that steal login credentials and OTPs.
  • Rigged apps/games (no real randomization, impossible withdrawal, “deposit to unlock” tricks).
  • Investment-disguised betting (“Guaranteed 5% daily from casino arbitrage,” referral pyramids).
  • Coerced gambling via romance/job scams (“recharge tasks,” “pig-butchering” schemes).
  • Offshore operators targeting Filipinos without local authority permission.

In the Philippines, gambling is generally state-regulated. Activities outside the scope of authorization (e.g., PAGCOR for casinos, CEZA/Aurora for certain zones in special cases, and specific local ordinances) may constitute illegal gambling. Fraud, computer-related offenses, and money laundering laws can also apply.


2) Core laws and why they matter

  • P.D. No. 1869 (PAGCOR Charter), as amended by R.A. No. 9487 – Establishes PAGCOR’s franchise and regulatory role over casinos and certain gaming operations. Offers a benchmark: If it isn’t authorized, it’s likely illegal.
  • P.D. No. 1602 – Increases penalties for illegal gambling (still relevant for non-authorized gaming).
  • R.A. No. 10175 (Cybercrime Prevention Act) – Covers computer-related fraud, identity theft, illegal access, data interference, and provides for real-time collection of traffic data and international cooperation.
  • R.A. No. 10173 (Data Privacy Act) – Protects personal data; breaches by fake apps trigger privacy complaints and possible criminal liability.
  • R.A. No. 8792 (E-Commerce Act) – Penalizes ICT-facilitated fraud and recognizes electronic evidence.
  • Revised Penal Code, Art. 315 (Estafa) – For deceitful schemes that cause loss.
  • R.A. No. 9160 (AMLA), as amended – Enables freezing/forfeiture of criminal proceeds and requires banks/e-money issuers to file suspicious transaction reports (STRs).
  • R.A. No. 11934 (SIM Registration Act) – Aids tracing of numbers used in scam texts/calls; enables telco/NTC actions.
  • Consumer protection – Deceptive digital marketing and unfair trade practices may involve DTI; investment-like solicitations may fall under the SEC.

3) Who does what (Philippine agencies & platforms)

  • PAGCOR (Philippine Amusement and Gaming Corporation) Regulates licensed gaming; receives reports about unlicensed online gambling or misuse of its name/marks. Can coordinate blocking requests and enforcement referrals.

  • NBI – Cybercrime Division (NBI-CCD) & PNP – Anti-Cybercrime Group (PNP-ACG) Investigate cyber-enabled crimes (phishing, social engineering, computer-related fraud, illegal access) and illegal gambling complaints. They can execute preservation orders, seize devices, and coordinate with prosecutors.

  • DOJ – Office of Cybercrime (OOC) Central authority for international cooperation/MLAT requests, takedown coordination, and prosecutorial support for cybercrime.

  • NTC (National Telecommunications Commission) Can order blocking of domains/URLs upon proper referral; acts on SIM and messaging abuse with telcos.

  • BSP (Bangko Sentral ng Pilipinas) & Your bank/e-money issuer For unauthorized transfers and disputed transactions (GCash, Maya, banks). BSP handles complaints against supervised institutions; providers can freeze suspect accounts and file STRs with AMLC.

  • AMLC (Anti-Money Laundering Council) Can freeze suspicious funds (ex parte) and work with law enforcement to restrain proceeds of crime.

  • DTI (deceptive online marketing) & SEC (unregistered investment solicitation disguised as “casino earnings”). File here when the “casino” is a front for securities/investment fraud or uses deceptive e-commerce tactics.

  • App stores & platforms Google Play / Apple App Store, Facebook/Instagram/TikTok, Telegram/WhatsApp groups—all have reporting systems for fraudulent apps, impersonation, and illegal gambling promotion.


4) Evidence checklist (collect before you report)

Gather as much as you can—without engaging further with scammers:

  1. URLs / App package names / App Store or Play links

  2. Screenshots / screen recordings of:

    • Registration pages, deposit prompts, withdrawal failures
    • Chats, SMS, call logs, social media posts/ads
    • In-app balances and error messages
  3. Transaction proofs: bank/e-wallet statements, receipts, reference numbers, date/time, merchant names, device used, IP if available.

  4. Correspondence: emails, DMs, phone numbers, usernames, invitation/referral codes.

  5. Device identifiers: your phone/OS model, app version, any permissions requested.

  6. Witnesses: names/contacts of others affected (with their consent).

  7. Timeline: concise chronology (when you saw ad, installed, deposited, tried to withdraw, etc.).

Tip: Export statements in PDF/CSV, keep original files, and hash (optional) important artifacts to show integrity. Do not share OTPs or full card numbers in your complaint.


5) Where and how to report (step-by-step)

A) If money moved (bank/e-wallet/crypto)

  1. Immediately notify your bank or e-wallet (fraud team). Ask for:

    • Account freeze/hold on recipient if funds are still within the network
    • Start a dispute/chargeback (card rails) or fraud claim (e-money).
    • Confirmation that an STR will be filed if warranted (AMLA).
  2. Escalate to BSP if you are not assisted or need regulator intervention.

B) If it’s an illegal/fake casino or phishing app/site

  1. File a criminal complaint with NBI-CCD or PNP-ACG:

    • Bring your Affidavit-Complaint (see template below), evidence, valid ID.
    • Ask for data preservation requests (to app stores/hosts) and takedown referrals.
  2. Report to PAGCOR:

    • Identify the operator, URLs, payment channels, and how Filipinos are targeted.
    • Attach proof of unauthorized use of PAGCOR’s name (if any), fake “license” claims, or refusal to pay winnings.
  3. Request site/app blocking via NTC referral (often through PAGCOR/DOJ/NBI/PNP).

  4. Report the app/page to Google/Apple and social platforms for fraud/illegal gambling.

  5. If the “casino” is actually an investment scheme, report to SEC.

  6. If you were misled by deceptive advertising, also report to DTI.

  7. If your personal data was misused or leaked, complain to NPC (National Privacy Commission).

Parents/Schools: If a minor is involved, emphasize age in your report; most platforms and regulators treat under-18 gambling as aggravating and move faster.


6) Affidavit-Complaint template (you can adapt this)

Title: Affidavit-Complaint for Estafa, Illegal Gambling, and Violations of the Cybercrime Prevention Act Complainant: [Full Name], of legal age, [civil status], Filipino, with address at [complete address], holder of [ID], states:

  1. On [date/time], I encountered a purported online casino [name/URL/app] via [ad/platform/message].
  2. I registered using [device/model/OS], username [handle], and was prompted to deposit [amount] through [bank/e-wallet/merchant ref no.].
  3. On attempting withdrawal on [date], I was blocked/required to “recharge” or the funds disappeared.
  4. I later learned the operator is not authorized by Philippine regulators and/or is impersonating a licensed entity.
  5. I suffered loss totaling ₱[amount].
  6. Attached are Annexes “A” to “__” (screenshots, receipts, chat logs, transaction numbers, timeline).
  7. I respectfully pray that respondents be investigated and prosecuted for Illegal Gambling (P.D. 1602), Estafa (Art. 315, RPC), and violations of R.A. 10175 (computer-related fraud/illegal access), and that their domains/apps/accounts be blocked, and proceeds frozen under AMLA.

[Signature over printed name] [Jurat/Notarization]

Note: Bring both printed and digital copies (USB/cloud). Use timestamps and keep originals.


7) Civil, administrative, and criminal tracks (your options)

  • Criminal – Estafa, illegal gambling, cybercrime charges. Leads to arrest warrants, asset seizure, and prosecution.
  • Administrative – PAGCOR licensing actions; NTC blocking; NPC data privacy sanctions; DTI deceptive marketing sanctions; SEC cease-and-desist for investment-style scams.
  • Civil – Sue for damages (actual, moral, exemplary) under the Civil Code; unjust enrichment theories may apply. For smaller sums, the Small Claims procedure (no lawyer needed) may be available (check current threshold; prepare contracts/receipts/screenshots).

8) Handling payments & recovery tips

  • Act fast. Reversals are time-sensitive. Provide exact transaction IDs and times.
  • Card payments: Request a chargeback citing fraud/merchandise not received/illegal transaction, depending on the facts.
  • E-wallets/bank transfers: Ask for internal freezes and beneficiary KYC escalation; push for AMLC coordination.
  • Crypto: Give TXIDs, wallet addresses, and exchange names. If an exchange is involved, ask law enforcement to send a preservation request.

9) Red flags of fake casino apps

  • Recharge to withdraw,” “pay tax to unlock,” or “VIP upgrade required” to release winnings.
  • No physical address, no verifiable license number, or fabricated “PAGCOR certificate.”
  • One-way deposits, constant downlines/referrals, pressure tactics, “guaranteed profits.”
  • Unusual payment rails (gift cards, random personal bank accounts).
  • App sideload outside official stores; permissions to read SMS/notifications (to capture OTPs).
  • Grammar mistakes and support agents who dodge basic questions.

10) Business & ISP quick guide

  • Platforms/Hosts/ISPs should maintain terms forbidding illegal gambling; act on valid government referrals for blocking.
  • Keep logs (retention consistent with law), and respond to preservation/takedown requests.
  • Payment aggregators and e-money issuers must monitor for transaction laundering and promptly file STRs.

11) Safety, privacy, and defamation cautions

  • Do not dox. Let authorities name suspects. Stick to evidence-based reporting.
  • Protect your IDs in submissions (mask numbers where appropriate).
  • Avoid retaliation—block and do not re-engage with scammers.
  • Mental health: Gambling-linked fraud is distressing. Seek support if needed.

12) Practical reporting script (copy/paste)

  • Subject: Report of Fake/Unlicensed Online Casino Targeting Filipinos

  • Body (concise):

    • Operator/App: [name/URL/link]
    • What happened: [2–4 sentences]
    • Loss: ₱[amount] | Date/Time: [range]
    • Evidence list: [Annex A–__]
    • Payment channel(s): [bank/e-wallet/crypto; refs]
    • Requested action: investigation, blocking, account freeze, data preservation, prosecution
    • Your contact: [name, phone/email]

13) Frequently asked questions

Q: I “won” money but they won’t let me withdraw. Is that a crime? A: It can be. Refusal to pay and coercing more deposits suggests fraud and illegal gambling. Report it with proof.

Q: I used my real ID for KYC. What now? A: Treat it as a data breach risk. Change passwords, enable MFA, freeze high-risk features, and consider a Data Privacy complaint.

Q: Can I get my money back? A: Maybe—through chargebacks, e-wallet reversals, or asset freezes if law enforcement acts quickly. Recovery is uncertain; report immediately.

Q: The app claims to be “licensed abroad.” A: If it targets Philippine users without proper local authorization, it can still be illegal here. Report it.


14) Quick action list (one page)

  1. Stop all contact with the app or “agent.”
  2. Secure accounts: change passwords, revoke SMS/notification access, scan device.
  3. Collect evidence (Section 4).
  4. Alert your bank/e-wallet; seek freeze/chargeback.
  5. File with NBI-CCD/PNP-ACG (+ Affidavit-Complaint).
  6. Report to PAGCOR and request referral for blocking.
  7. Report to app store/social platform and, if applicable, DTI/SEC/NPC.
  8. Consider civil action (damages/small claims).
  9. Monitor credit/e-wallets; beware follow-up “recovery” scams.

Final note

This guide gives you a practical, Philippine-focused roadmap. Regulations and agency workflows evolve, but the evidence-first, multi-channel reporting approach above remains your best shot at stopping the fraud, protecting others, and maximizing your chances of recovery.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.