If an online gaming site in the Philippines took your deposit, refused to release winnings, used a fake “PAGCOR licensed” badge, phished your e-wallet, or suddenly disappeared, treat it as both a gaming regulatory issue and a possible cybercrime or financial scam. The best report is not just “this site is a scam”; it is a well-documented complaint showing the website, payment trail, account used, conversations, promises made, and what exactly happened to your money.

What counts as a fraudulent online gaming site in the Philippines?

A fraudulent online gaming site usually falls into one or more of these categories:

Situation	What may be happening	Where to report first
Site claims to be “PAGCOR licensed” but the domain is not in PAGCOR’s registered list	Unlicensed or fake gaming operation	PAGCOR, PNP Anti-Cybercrime Group, NBI Cybercrime Division
Site accepts deposits but blocks withdrawals for fake “tax,” “VIP,” “verification,” or “unlocking” fees	Estafa, cyber fraud, financial account scamming	PNP/NBI, bank/e-wallet, CICC hotline
Site asks for OTPs, passwords, selfie videos, ID photos, or remote access to your phone	Phishing, identity theft, access device fraud	PNP/NBI, bank/e-wallet, BSP if unresolved
“Gaming” app promises guaranteed income, commissions, or investment returns	Possible investment scam or securities violation	SEC, PNP/NBI
Offshore operator says it still has a Philippine POGO or IGL license	Red flag after the offshore gaming ban	PAGCOR, law enforcement

PAGCOR regulates games of chance and issues licenses for gaming operations within Philippine territory, including electronic casino games, e-bingo, sports betting, specialty games, online poker, and numeric games under its Electronic Gaming Licensing Department. PAGCOR’s own description says remote or online gaming platforms must be connected to approved licensed gaming venues and registered players, not simply any website that puts a PAGCOR logo on its homepage. (Pagcor)

A major practical point: Philippine Offshore Gaming Operators (POGOs), Internet Gaming Licensees (IGLs), and other offshore gaming operations have been banned under Executive Order No. 74, series of 2024. PAGCOR has also publicly stated that any previous POGO licensee or service provider that continues to operate after the ban is illegal. (Presidential Communications Office)

This does not mean every local Philippine e-games platform is automatically illegal. It means you must distinguish between a PAGCOR-registered local gaming brand/domain and a fake, offshore, cloned, or unregistered site. PAGCOR maintains lists of accredited gaming system administrators and registered brands/domain names, including the list current as of June 30, 2026. (Pagcor)

Legal basis: what laws may apply?

1. PAGCOR gaming regulation

PAGCOR’s authority comes from its charter, Presidential Decree No. 1869, as amended, which centralized the authority to operate, conduct, administer, and supervise games of chance under a government-controlled corporation. (Supreme Court E-Library)

For ordinary players, this matters because a gaming complaint should first answer:

Is the site connected to a PAGCOR-licensed operator?
Is the exact domain name listed or verified?
Is the operator using a cloned brand, similar URL, fake seal, or fake certificate?
Is the dispute a normal player-account issue, or does it show fraud?

If the site is not licensed or uses a fake PAGCOR claim, PAGCOR may treat it as an illegal gaming report, while the PNP or NBI may handle the fraud or cybercrime angle.

2. Cybercrime Prevention Act of 2012, RA 10175

RA 10175 covers computer-related offenses. It includes computer-related fraud, which involves unauthorized input, alteration, deletion of computer data, or interference with a computer system causing damage with fraudulent intent. It also names the NBI and PNP as law enforcement authorities for cybercrime cases and requires them to organize cybercrime units or centers. (Supreme Court E-Library)

RA 10175 is important because online gaming scams usually involve electronic evidence: websites, app dashboards, chats, transaction confirmations, device logs, domain names, IP-related records, and payment account information.

The law also has jurisdiction when any element of the offense happens in the Philippines, when a computer system wholly or partly situated in the Philippines is used, or when damage is caused to a person in the Philippines. This can matter for OFWs, foreigners in the Philippines, and foreign victims dealing with Philippine-based operators or payment accounts. (Supreme Court E-Library)

3. Estafa under Article 315 of the Revised Penal Code

If the site used lies or false promises to get your money, the conduct may amount to estafa, or swindling. Article 315 of the Revised Penal Code punishes a person who defrauds another through abuse of confidence, false pretenses, fraudulent acts, or similar deceit. One common form is using a fictitious name, pretending to have authority, pretending to have a business, or using similar deceit before or at the same time the victim parts with money. (Lawphil)

In online gaming complaints, estafa may be relevant when the operator says things like:

“Pay this ₱5,000 tax and your ₱80,000 winnings will be released.”
“Upgrade to VIP first or we cannot unlock your withdrawal.”
“Your account is frozen because of suspicious activity; deposit more to verify.”
“We are PAGCOR licensed,” but the license or domain is fake.

4. Anti-Financial Account Scamming Act, RA 12010 of 2024

RA 12010, the Anti-Financial Account Scamming Act (AFASA), specifically addresses cybercrime schemes involving bank accounts, e-wallets, and other financial accounts. It defines financial accounts to include bank, credit card, transaction, and e-wallet accounts, and it covers money-muling activities and social engineering schemes. (Lawphil)

This is especially relevant if the fraudulent gaming site instructed you to send money to a personal bank account, e-wallet, QR code, crypto on-ramp account, or “agent” account. The account holder may be a scammer, mule, recruited intermediary, or fake identity.

5. Access Devices Regulation Act, RA 8484, as amended by RA 11449

RA 8484 covers fraud involving “access devices,” a term broad enough to include cards, account numbers, PINs, codes, and other means of account access used to obtain money or transfer funds. It prohibits using unauthorized access devices, trafficking in such devices, or obtaining money through them with intent to defraud. (Lawphil)

This law may be relevant when the gaming site or its “agent” gets your OTP, card number, login credentials, GCash/Maya account, bank app details, or other access information.

6. Civil liability for damages

A criminal complaint focuses on punishment and prosecution. It does not automatically guarantee that your money will be returned. Civil recovery may be pursued separately or alongside criminal proceedings when an identifiable person or company caused loss.

Civil Code Articles 19, 20, and 21 recognize duties of justice, honesty, good faith, and compensation for damage caused contrary to law, morals, good customs, or public policy. Article 2176 also recognizes liability for damage caused by fault or negligence, known as quasi-delict when there is no pre-existing contract. (Lawphil)

Step-by-step guide: how to report a fraudulent online gaming site

Step 1: Preserve evidence before the site disappears

Do this immediately, preferably before you confront the site’s agent.

Save:

Website URL and domain name
- Copy the full URL, not just the brand name.
- Take screenshots showing the address bar.
- Note if the domain uses odd endings, hyphens, extra letters, or Telegram-only access.
Your player account details
- Username, user ID, account number, registered mobile number or email.
- Screenshots of wallet balance, winnings, deposits, withdrawal attempts, locked-account messages.
Payment trail
- GCash/Maya transaction reference numbers.
- Bank transfer receipts.
- QR code screenshots.
- Recipient name, mobile number, account number, bank, branch if shown.
- Crypto wallet address or exchange account, if any.
Communications
- Messenger, Telegram, Viber, WhatsApp, SMS, email, in-app support chats.
- Screenshots showing names, phone numbers, profile links, timestamps, and promises made.
Advertising materials
- Facebook or TikTok ads.
- Influencer posts.
- Referral links.
- “PAGCOR licensed” images.
- Fake certificates, permits, or “tax clearance” claims.
Device and account security evidence
- Login alerts.
- OTP messages.
- Unauthorized transaction notifications.
- Emails showing password or mobile number changes.

Do not rely on screenshots alone if the loss is significant. Export chats where possible, keep original files, and avoid editing images. Investigators prefer evidence that can be traced to its original source.

Step 2: Check whether the site is listed by PAGCOR

Go to PAGCOR’s regulatory pages and check the official lists of registered brands and domains. PAGCOR’s Electronic Gaming Licensing Department page links to lists of accredited gaming system administrators, registered brands, domain names, URLs, licensed casinos, affiliates, service providers, and gaming venue licensees. (Pagcor)

When comparing, check the exact spelling:

example.ph is not the same as example-vip.com
brand.com.ph is not the same as brandph.cc
A site using a licensed brand’s logo may still be a fake clone
A Telegram bot or Facebook page is not automatically licensed just because it links to a licensed-looking site

If the site is not listed, or if the listed domain is different from the domain you used, include that in your PAGCOR and law enforcement complaint.

Step 3: Report to PAGCOR if the site claims to be licensed or operates as an online casino/betting platform

Report to PAGCOR when the issue involves:

fake PAGCOR license claims;
unregistered online casino, sportsbook, bingo, poker, or specialty games;
cloned site using a licensed brand;
refusal by a licensed gaming operator to address a legitimate player complaint;
suspected offshore gaming operation still claiming Philippine authority.

PAGCOR’s regulatory contact page lists the Electronic Gaming Licensing Department and other regulatory departments, with contact numbers and email channels. The regulatory contact numbers shown by PAGCOR include +632 8521-1542 and +632 8522-0299 for several departments, including Electronic Gaming Licensing. (Pagcor)

Your PAGCOR report should include:

subject line: “Report of suspected fraudulent/unlicensed online gaming site”
website URL and screenshots;
name of the site/app/agent;
reason you believe it is fraudulent;
whether it claims to be PAGCOR licensed;
transaction history and amount lost;
your contact details;
whether you already reported to PNP, NBI, CICC, bank, e-wallet, or BSP.

PAGCOR can help with the gaming regulatory side, but it is not a substitute for a police or NBI cybercrime complaint when money was stolen.

Step 4: Report to your bank, e-wallet, card issuer, or payment provider immediately

Do this the same day you discover the scam. The goal is to create a record, request investigation, and ask whether the recipient account can be blocked, frozen, tagged, or subjected to dispute handling.

For GCash, the official help page for scams tells users to report the scammer to authorities such as the PNP or NBI, report to GCash immediately with details and screenshots, and block the scammer on SMS or social media. (GCash Help Center)

For banks, e-wallets, and other BSP-supervised financial institutions, the usual sequence is:

Report first to the institution’s own consumer assistance or fraud channel.
Get a ticket number, reference number, or case number.
Submit evidence.
Ask for written confirmation of the action taken.
If unresolved or mishandled, escalate to the BSP consumer assistance channels.

The BSP explains that financial consumers may use the BSP Consumer Assistance Channels and BSP Online Buddy for complaints involving BSP-supervised institutions, and provides consumer assistance contact channels on its official site. (Bangko Sentral ng Pilipinas)

Important: a bank or e-wallet complaint is not the same as a criminal complaint. The provider may help investigate the transaction, but the PNP or NBI is still needed for subpoenas, warrants, coordination with prosecutors, and possible case filing.

Step 5: Report the cybercrime to NBI or PNP

For a formal cybercrime complaint, go to:

NBI Cybercrime Division, especially if you are near Manila or an NBI regional cybercrime center;
PNP Anti-Cybercrime Group or its regional anti-cybercrime units;
the nearest police station for initial blotter and referral if there is no cybercrime unit nearby.

Under RA 10175, both the NBI and PNP are responsible for cybercrime law enforcement and must have cybercrime units or centers for violations of the law. (Supreme Court E-Library)

The NBI Citizen’s Charter for investigative assistance to victims of computer crimes says the service is available to the general public, has no listed checklist requirement and no fee, and includes complaint-sheet preparation, preliminary interview, sworn statements, and collection of supporting documents. The listed frontline processing time for the initial service is about 1 hour and 10 minutes, although the actual investigation can take much longer depending on the evidence, witnesses, platforms, and account tracing needed. (National Bureau of Investigation)

Bring or prepare:

government-issued ID;
printed complaint narrative;
screenshots and digital copies;
transaction receipts;
chat exports;
site URLs;
names, numbers, emails, account details, and profile links of suspects;
bank/e-wallet ticket numbers;
PAGCOR report, if already filed;
CICC hotline reference, if any.

A practical complaint narrative should answer:

Who contacted you or what site you used?
When did you register, deposit, play, or try to withdraw?
What did the site or agent promise?
What made you send money?
How much did you send, to whom, and through what channel?
What happened when you tried to withdraw or complain?
What evidence links the person/account/site to the fraud?
What action are you requesting: investigation, account tracing, preservation of data, and filing of appropriate charges?

Step 6: Use CICC / Inter-Agency Response Center for fast scam reporting

For fast reporting or triage, especially if you are unsure where to start, the Cybercrime Investigation and Coordinating Center has promoted hotline 1326 for reporting online harms and scams. Scam Watch Pilipinas also lists hotline 1326 and alternative Inter-Agency Response Center numbers for online scam reports. (Facebook)

Use the hotline when:

the scam is ongoing;
the same site is victimizing many people;
you need guidance on which agency should receive the report;
you are abroad and need an initial reporting channel;
the site is connected to broader scam activity, such as fake jobs, investment fraud, or trafficking.

For serious financial loss, follow up with a formal NBI or PNP complaint because criminal cases usually require sworn statements and documentary evidence.

Step 7: Report to SEC or DTI if the “gaming” site is really an investment or consumer scam

Report to the SEC if the platform offers “gaming packages,” “VIP levels,” “staking,” “play-to-earn investments,” referral commissions, guaranteed daily income, or profit-sharing that looks like an investment contract or securities offering. The SEC iMessage portal accepts complaints and tickets through its official online system. (imessage.sec.gov.ph)

Report to DTI Consumer CARe if the issue is framed as a consumer transaction involving deceptive sales practices, advertising, or online service complaints within DTI jurisdiction. DTI’s Consumer Complaints Assistance and Resolution system is its online consumer complaint portal. (DTI Consumer Care)

Some complaints belong in several offices at once. For example, a fake casino app that promises investment returns, uses an unregistered domain, and receives money through mule e-wallets may involve PAGCOR, PNP/NBI, SEC, the bank/e-wallet, BSP, and possibly DTI.

What to include in your complaint

A strong report is organized, factual, and easy to verify. Avoid emotional accusations without supporting details. Use this format:

Section	What to write
Complainant details	Full name, address, phone, email, nationality if relevant
Site details	Brand name, exact URL, app name, social media page, Telegram link
Suspect details	Agent name, profile URL, phone number, email, account name, bank/e-wallet account
Timeline	Date of registration, deposits, games, withdrawal request, refusal, extra payment demands
Amounts	Total deposited, winnings shown, extra fees demanded, total loss
Misrepresentation	Fake license, guaranteed withdrawal, false tax, fake verification, VIP upgrade
Evidence list	Screenshots, receipts, chat exports, IDs sent, reference numbers
Reports already made	PAGCOR, bank/e-wallet, BSP, PNP, NBI, CICC, SEC, DTI
Requested action	Investigation, account tracing, data preservation, prosecution, regulatory action

For electronic files, use clear filenames:

01_site_homepage_with_url.png
02_pagcor_license_claim.png
03_deposit_receipt_gcash_ref_12345.png
04_withdrawal_denied_message.png
05_agent_telegram_profile.png
06_bank_ticket_number.pdf

Timelines, fees, and practical expectations

Action	Usual fee	Practical timeline	Notes
Preserve your own evidence	None	Immediately	Do this before the site or agent deletes chats
Report to bank/e-wallet	Usually none	Same day to several business days	Speed matters; recovery is harder if funds are moved
Report to PAGCOR	No public filing fee for a report	Variable	Useful for fake license, unregistered gaming, or licensed-operator complaints
NBI Cybercrime Division complaint intake	None listed in NBI Citizen’s Charter	Initial frontline service about 1 hour and 10 minutes	Investigation and case build-up may take weeks or months depending on complexity (National Bureau of Investigation)
PNP cybercrime complaint	Usually none for reporting	Variable	Regional units may refer or coordinate with other offices
CICC/I-ARC hotline 1326	None for hotline reporting	Immediate triage	Best for initial reporting and direction; formal affidavit may still be needed
BSP escalation	None	Variable	Usually for unresolved complaints against BSP-supervised institutions
SEC/DTI complaint	Usually none for initial online complaint	Variable	Best for investment-like schemes or consumer deception

The biggest bottlenecks are usually not the first report. They are identifying the real operator, getting platform or telecom records before they expire, tracing funds through mule accounts, coordinating with foreign platforms, and preparing evidence in a form prosecutors can use.

RA 10175 allows preservation and disclosure procedures for computer data. Service providers must preserve certain traffic data and subscriber information for at least six months, and law enforcement may require disclosure of relevant data upon proper legal process. This is one reason delay can hurt a cybercrime case. (Supreme Court E-Library)

Special situations Filipinos and foreigners commonly face

You are an OFW or foreign victim outside the Philippines

You can still prepare a detailed written complaint, preserve evidence, and report through online or hotline channels. If the NBI, PNP, prosecutor, or court later requires a sworn affidavit executed abroad, you may need notarization, consular notarization, or an apostille/authentication process depending on where the document was executed and how it will be used.

The DFA’s apostille guidance explains that apostille processes are for Philippine public documents for use abroad, while foreign documents for use in the Philippines follow separate certification requirements and may need prior attestation depending on the document and country. (Apostille Services)

The site says you must pay “tax” before withdrawing winnings

This is one of the most common red flags. Legitimate Philippine tax obligations are not normally settled by sending money to a random personal e-wallet or “agent” before a platform releases winnings. Save the demand message, payment instructions, recipient account, and any fake BIR/PAGCOR certificate shown to you.

The gaming site is licensed, but your withdrawal is delayed

Not every delayed withdrawal is criminal fraud. First check whether the operator is actually listed, whether you used the exact registered domain, and whether the dispute is about KYC verification, responsible gaming limits, account duplication, bonus abuse, or technical review. If the operator is licensed and refuses to address a legitimate complaint, report the issue to PAGCOR with your account ID, transaction history, and support-ticket records.

You voluntarily sent money, so you think you cannot complain

You can still report. Many scams involve voluntary transfers induced by deceit. Estafa focuses on fraud, false pretenses, abuse of confidence, and deceit—not only forced taking. The practical problem is recovery: once funds are voluntarily transferred and quickly moved, tracing and freezing becomes harder.

The scammer used a Filipino bank or e-wallet account but may be abroad

Report both the cybercrime and the financial account. RA 12010 is designed for financial account scamming and money mule activity, including use of accounts to receive, transfer, or withdraw proceeds from crimes or social engineering schemes. (Lawphil)

The site used your ID or selfie

Report immediately to the platform, your bank/e-wallet, and law enforcement. Ask your financial institutions to note possible identity misuse. Save proof of what you submitted and where. If new accounts, loans, SIM registrations, or wallets appear under your name, those may become separate identity-theft or financial-account complaints.

Common mistakes to avoid

Reporting only to Facebook or Telegram. Platform reports may remove a page, but they do not create a Philippine criminal complaint.
Sending more money to “recover” winnings. Fraudulent sites often ask for tax, activation, VIP, anti-money-laundering clearance, or final verification fees. Paying more usually increases the loss.
Deleting chats out of embarrassment. Many victims are ashamed because the matter involves gambling. Deleting evidence makes investigation harder.
Posting accusations with personal names before verifying facts. Public posts can create separate legal risk. It is safer to document and report to agencies first.
Assuming a PAGCOR logo proves legitimacy. Check the exact registered domain and official lists. A fake site can copy a real logo in seconds.
Waiting too long before reporting to the bank or e-wallet. Money can pass through several accounts quickly. Even if recovery is not guaranteed, early reporting improves the chance of useful account action.
Filing a vague complaint. “Na-scam ako” is understandable, but investigators need dates, amounts, accounts, URLs, screenshots, and names.

Frequently Asked Questions

How do I report an illegal online casino in the Philippines?

Preserve screenshots and transaction records, check whether the exact domain appears in PAGCOR’s registered lists, then report the site to PAGCOR for the gaming regulatory issue and to the NBI Cybercrime Division or PNP Anti-Cybercrime Group for the fraud or cybercrime aspect. If money passed through a bank or e-wallet, report to that provider immediately.

Where can I check if an online gaming site is PAGCOR licensed?

Use PAGCOR’s official regulatory pages, especially the Electronic Gaming Licensing Department page and its linked lists of accredited gaming system administrators, registered brands, domain names, licensed casinos, affiliates, service providers, and gaming venues. Compare the exact URL, not just the brand name or logo. (Pagcor)

Can PAGCOR get my money back from a fake gaming site?

PAGCOR can act on gaming regulatory issues, but recovery of money from a fake or unlicensed site usually requires fast reporting to your bank/e-wallet and a cybercrime complaint with the PNP or NBI. If the operator is licensed, PAGCOR may be more relevant for player dispute handling, but a refund is still not automatic.

Is online gambling illegal in the Philippines?

Not all online gaming is illegal. PAGCOR licenses and regulates certain local electronic gaming and online gaming platforms tied to authorized operations. However, offshore gaming operations such as POGOs and IGLs have been banned under EO No. 74, and any entity claiming authority to continue offshore gaming under a PAGCOR license is a serious red flag. (Presidential Communications Office)

What crime is committed if an online casino refuses to release winnings?

It depends on the facts. A normal account review or terms-of-service dispute may be regulatory or contractual. But if the site used deceit, fake licenses, false tax demands, or fraudulent withdrawal conditions to obtain money, possible offenses include estafa, computer-related fraud under RA 10175, financial account scamming under RA 12010, or access device fraud if credentials or account access were misused. (Lawphil)

Should I go to the barangay first?

For online gaming fraud, the barangay is usually not the best first stop unless you personally know the suspect and both parties are in the same locality. Cybercrime complaints are better brought to the NBI Cybercrime Division, PNP Anti-Cybercrime Group, or a police station that can refer the matter to a cybercrime unit. A barangay blotter does not replace cybercrime evidence preservation or formal investigation.

What if I only have the scammer’s GCash or Maya number?

That can still be useful. Save the transaction receipt, reference number, recipient name or number, QR code, and all related chats. Report immediately to the e-wallet provider and to law enforcement. Do not assume the account holder is the mastermind; it may be a mule account, but it is still an important lead.

Can foreigners report a fraudulent Philippine online gaming site?

Yes. A foreigner may report if the operator, payment account, website activity, or damage has a Philippine connection. RA 10175 recognizes jurisdiction where elements occur in the Philippines, a Philippine computer system is involved, or damage is caused to a person in the Philippines. For documents executed abroad, additional notarization, consular, or apostille-related steps may be required later. (Supreme Court E-Library)

How long does an online gaming scam investigation take?

Initial reporting can be same-day. NBI’s Citizen’s Charter lists the initial Cybercrime Division intake process as having no fee and a frontline processing time of about 1 hour and 10 minutes. The full investigation can take weeks or months because investigators may need financial records, platform data, account tracing, sworn statements, prosecutor review, and sometimes foreign cooperation. (National Bureau of Investigation)

What is the fastest thing to do if I was just scammed today?

Stop communicating with the scammer except to preserve evidence. Screenshot everything, save the URL, report the transaction to your bank/e-wallet immediately, call or report through CICC/I-ARC hotline 1326 for scam triage, and prepare a formal complaint for the NBI or PNP cybercrime unit. If the site claims to be PAGCOR licensed, also report it to PAGCOR with the exact domain and screenshots.

Key Takeaways

Check the exact domain, not just the gaming brand or PAGCOR logo.
Report fake or unlicensed gaming sites to PAGCOR, but report stolen money and deception to PNP or NBI as cybercrime.
Report payment transactions immediately to your bank, e-wallet, or card issuer; ask for a reference number.
Use CICC/I-ARC hotline 1326 for fast scam reporting and routing, especially when the scam is ongoing.
Preserve evidence before confronting the site or agent because chats, pages, and domains can disappear quickly.
POGOs, IGLs, and offshore gaming operations are banned; any site claiming continuing Philippine offshore gaming authority should be treated with extreme caution.
Recovery is not automatic, but a clear, well-documented complaint gives regulators, banks, investigators, and prosecutors the best chance to act.