If an online game took your deposit, blocked your withdrawal, demanded more money for a supposed “tax” or “unlocking fee,” used a fake PAGCOR license, or disappeared after you paid, act quickly. The most effective approach is to stop further losses, preserve evidence, notify the bank or e-wallet immediately, verify whether the operator is licensed, and report the incident to the correct Philippine agencies. The proper route depends on whether you are dealing with an unlicensed gambling site, a licensed operator with a payout dispute, a fake gaming platform, an account takeover, or an investment scam disguised as a game.

Is the Online Game Illegal, Fraudulent, or Both?

“Online game” can describe several different activities. Identifying the problem correctly helps investigators and regulators act on your complaint.

Situation	What it may involve	Where to start
Online casino, sportsbook, bingo, poker, or similar platform with no valid Philippine license	Illegal gambling	PAGCOR and PNP Anti-Cybercrime Group or NBI Cybercrime Division
PAGCOR-licensed operator refusing a legitimate withdrawal	Regulatory or contractual dispute; possible fraud depending on the facts	Operator’s complaint channel, then PAGCOR
Fake gaming website or app designed only to collect deposits	Estafa or online fraud	Bank or e-wallet, PNP ACG, NBI, or CICC
Game account or e-wallet taken over through phishing or an OTP scam	Unauthorized access, identity theft, access-device fraud, or account scamming	Bank or e-wallet, PNP ACG, NBI
“Play-to-earn,” task game, recharge game, or betting app promising guaranteed returns	Possible investment scam, pyramiding, or estafa	SEC when an investment is involved, plus cybercrime authorities
Offshore gaming operation or former POGO targeting customers from the Philippines	Prohibited offshore gaming activity and possible fraud	PAGCOR, PNP, NBI, or CICC

An online gambling activity is not automatically illegal merely because it is conducted through the internet. The decisive question is whether the operator has authority from the government agency legally empowered to regulate the activity and whether it is operating within the terms of that authority. In a 2025 decision, the Supreme Court emphasized that the absence of the required authority or license is the key feature that makes a gambling operation illegal.

PAGCOR continues to regulate licensed domestic electronic gaming activities, including certain online casino games, sports betting, poker, and other approved products. However, Executive Order No. 74, issued on November 5, 2024, banned Philippine Offshore Gaming Operators and other offshore gaming operations and required them to cease operations by December 31, 2024. The offshore-gaming ban did not abolish all PAGCOR-licensed domestic online gaming. (PAGCOR)

How to Check Whether an Online Game Is Licensed by PAGCOR

Do not rely on a PAGCOR logo, certificate image, social-media post, or license number displayed by the platform. Scam sites routinely copy the branding and license details of legitimate operators.

Check the exact website domain through the official PAGCOR Guarantee verification portal. PAGCOR maintains this portal as a regularly updated reference for licensed online gaming platforms and to help the public avoid fraudulent, unlicensed, or non-paying sites. (PAGCOR)

When verifying a platform:

Copy the full domain from the browser address bar.
Check spelling carefully. A scam site may change only one letter or use a different domain ending.
Compare the domain with the one listed by PAGCOR.
Confirm that the game type offered is covered by the operator’s authority.
Save a screenshot showing the verification result and the date checked.
Do not treat an app-store listing as proof of a Philippine gaming license.

A platform should be treated as suspicious when it:

Claims to be PAGCOR-licensed but its exact domain is not on the official list.
Uses only Telegram, Messenger, Viber, or WhatsApp for customer service.
Accepts deposits through changing personal bank or e-wallet accounts.
Requires a “withdrawal tax,” “AML fee,” “verification deposit,” “credit score repair,” or “account unlocking fee.”
Promises guaranteed winnings or risk-free returns.
Pressures users to recruit new players.
Refuses to provide its registered company name and physical business address.
Repeatedly changes its website, app name, or payment account.
Asks for your OTP, PIN, screen-sharing access, or remote-control software.

Philippine Laws That May Apply

Illegal gambling under Presidential Decree No. 1602

Presidential Decree No. 1602 penalizes illegal gambling activities, including participation in gambling conducted without legal authority. Liability may extend beyond the operator to collectors, agents, maintainers, financiers, and, in appropriate cases, participants. (Lawphil)

The law is relevant when an online casino, sportsbook, numbers game, or similar platform operates without a valid license or outside the scope of its authority.

A person who merely lost money to a deceptive platform may be a fraud victim. However, a person who knowingly recruited players, collected bets, supplied payment accounts, or promoted an unauthorized gambling operation may face a different legal position. Reports should therefore be complete and truthful about the complainant’s participation.

Estafa under Article 315 of the Revised Penal Code

Article 315 of the Revised Penal Code punishes estafa, commonly called swindling. It may apply when a gaming operator or promoter obtains money through false representations, fraudulent promises, abuse of confidence, or deceptive practices. Article 315 also expressly refers to fraudulent practices in gambling. (Lawphil)

Possible examples include:

A fake casino accepts deposits but has no functioning game or withdrawal system.
A promoter falsely claims that a game is licensed or government-approved.
A platform manipulates account balances and demands additional deposits before allowing withdrawal.
A “gaming agent” promises guaranteed profits and disappears after receiving payment.
A site falsely tells a player that taxes must be paid directly to a personal e-wallet before winnings can be released.

To establish estafa, investigators generally look for the false representation or fraudulent act, the victim’s reliance on it, the transfer of money or property, and the resulting damage.

Cybercrime Prevention Act

Under Section 6 of Republic Act No. 10175, the Cybercrime Prevention Act of 2012, crimes already punishable under the Revised Penal Code or special laws may carry a higher penalty when committed through information and communications technology. This is why an online estafa complaint may be investigated and charged as estafa in relation to the Cybercrime Prevention Act. (Lawphil)

RA 10175 may also apply to illegal access, computer-related fraud, identity theft, data interference, and other acts involving compromised gaming, banking, or e-wallet accounts.

Anti-Financial Account Scamming Act

Republic Act No. 12010, the Anti-Financial Account Scamming Act of 2024, or AFASA, addresses money-mule activity, social-engineering schemes, and the misuse of financial accounts in scams. A money mule is a person who allows an account to receive, transfer, or withdraw proceeds of fraud, whether knowingly or under circumstances covered by the law. (Lawphil)

AFASA allows financial institutions to place temporary holds on disputed funds under applicable BSP rules, including holds lasting up to 30 calendar days in qualifying cases. This does not guarantee recovery, but it makes immediate reporting to the bank or e-wallet especially important. (Lawphil)

Access-device fraud

Republic Act No. 8484, the Access Devices Regulation Act of 1998, may apply when fraud involves credit cards, account numbers, codes, credentials, or other access devices used without authority. (Lawphil)

Electronic evidence

Electronic records may be used as evidence in Philippine proceedings. The Electronic Commerce Act of 2000 recognizes electronic documents, while the Rules on Electronic Evidence govern their admissibility and authentication. (Lawphil)

This is why original chat exports, transaction records, full URLs, email headers, device data, and unedited files are more useful than isolated or heavily cropped screenshots.

What to Do Immediately After Discovering the Fraud

1. Stop sending money

Do not pay another “release fee,” “withdrawal tax,” “security deposit,” “AML clearance,” or “account reactivation fee.” In many gaming scams, each payment leads to a new invented requirement.

Do not send money to a person claiming to be a hacker, recovery agent, regulator, police officer, or lawyer who promises guaranteed fund recovery. Recovery scams commonly target people who have already lost money.

2. Contact the bank, e-wallet, card issuer, or cryptocurrency exchange

Report the transaction through the institution’s official fraud channel immediately. Ask it to:

Flag the transaction as fraudulent.
Attempt to hold, trace, or recall the funds.
Restrict the receiving account when legally permitted.
Preserve transaction and account records.
Give you a complaint or reference number.
Explain what affidavit or dispute form is required.
Secure or replace compromised cards and accounts.

Provide the exact amount, date, time, reference number, recipient account, and reason the transaction was fraudulent.

When the institution does not resolve the complaint through its internal process, the matter may be escalated through the Bangko Sentral ng Pilipinas consumer-assistance channels. BSP generally expects the consumer to complain first to the supervised financial institution and obtain a reference number. (Bureau of the Treasury)

For cryptocurrency payments, immediately contact the exchange from which the funds were sent. Provide the transaction hash or TXID, destination wallet address, network used, amount, and police or agency reference number when available. Blockchain transfers usually cannot be reversed, but a regulated exchange may be able to identify or freeze an account if the assets reach its platform.

3. Secure your accounts and devices

Change passwords for your email, game account, bank, e-wallet, and social-media accounts. Use different passwords and enable multi-factor authentication.

Also:

Log out of active sessions on unfamiliar devices.
Remove unauthorized apps and browser extensions.
Revoke remote-access permissions.
Ask your mobile provider about a possible SIM-swap if your number suddenly stopped working.
Inform the bank if you revealed an OTP, PIN, card verification value, or recovery code.
Scan the device for malware, but preserve important evidence before resetting it.

4. Preserve evidence before the site disappears

Save evidence as soon as possible. Fraudulent gaming sites often change domains, delete chats, block users, or remove apps after receiving complaints.

Preserve:

Full website URL and domain name.
App name, developer name, app-store page, and installation file when safely available.
Account username, player ID, referral code, and registered phone number.
Screenshots and screen recordings of the account balance and withdrawal error.
Deposit and withdrawal history.
Bank, e-wallet, card, or cryptocurrency transaction records.
Recipient name, account number, mobile number, wallet address, and QR code.
Chats with agents, customer support, recruiters, or payment collectors.
Emails, including full headers where possible.
Advertisements and social-media profiles used to recruit players.
Claims of PAGCOR licensing or government registration.
Names and contact details of other victims or witnesses.
A written chronology showing what happened in date-and-time order.

Keep original files. Do not add annotations to the only copy. Save a working copy separately if you need to highlight important details.

5. Verify the operator’s license

Check the exact domain through the PAGCOR Guarantee portal. If the platform is not listed, take a screenshot of the result and include it in your report.

If the operator is listed, save proof of its licensed status and report the payout or conduct dispute to the operator and PAGCOR. A license does not excuse fraud, unauthorized payment practices, or violations of regulatory conditions.

6. Report the incident to the appropriate agencies

For serious losses, multiple victims, identity theft, repeated payment demands, or an unlicensed gambling operation, report to both the financial institution and a law-enforcement or cybercrime agency. A PAGCOR report alone may address licensing and regulatory issues but does not replace a criminal complaint when estafa or account theft is involved.

Where to Report an Illegal or Fraudulent Online Game

Office or institution	Report here when	Practical notes
PAGCOR	The platform claims to be licensed, appears unlicensed, violates gaming rules, or refuses a legitimate payout	Submit the exact domain, player ID, transaction records, screenshots, and communications. Use the official PAGCOR contact channels.
PNP Anti-Cybercrime Group	The case involves online estafa, phishing, account takeover, fake apps, identity theft, or organized cyber fraud	Report through the official PNP ACG channels or the nearest PNP anti-cybercrime unit. Bring original identification and organized evidence.
NBI Cybercrime Division	The scheme involves substantial losses, several victims, technical investigation, cross-border actors, or complex financial trails	The NBI accepts requests for cybercrime investigative assistance and provides an online complaint facility. (National Bureau of Investigation)
CICC Inter-Agency Response Center	You need rapid reporting or guidance for an active online scam	Call 1326, the government’s 24-hour cybercrime reporting hotline. (Philippine News Agency)
Bank, e-wallet, card issuer, or exchange	Money has been sent or an account was compromised	Report first and immediately. Obtain a reference number and request preservation or temporary holding of disputed funds where available.
Bangko Sentral ng Pilipinas	A BSP-supervised bank or e-wallet has not properly acted on your complaint	Escalate only after using the institution’s own complaint process. (Bureau of the Treasury)
National Privacy Commission	Personal data, identification documents, selfies, or account information were unlawfully collected, leaked, sold, or misused	A formal NPC complaint generally requires a completed complaint form, supporting records, and notarization. (National Privacy Commission)
Securities and Exchange Commission	The “game” solicits investments, promises passive or guaranteed returns, or pays mainly through recruitment	Include promotional materials, compensation plans, contracts, and proof of payment.

PAGCOR may be reached through its published regulatory and support channels, including its official contact page and trunk lines. PAGCOR’s role is particularly important in confirming whether an operator is licensed and whether a licensed operator has violated gaming regulations. (PAGCOR)

How to Prepare a Strong Complaint-Affidavit

A complaint-affidavit is a sworn written statement describing the offense, identifying the people or accounts involved, and attaching supporting evidence. It is commonly required when a criminal complaint proceeds to preliminary investigation before a prosecutor.

1. Write a clear chronology

Use numbered paragraphs and state:

Your full name, address, citizenship, and contact information.
How you discovered the website, app, or promoter.
The representations made to you.
Why you believed those representations.
Each payment, with date, amount, method, and recipient.
What happened when you attempted to withdraw or request a refund.
Every additional payment demanded.
When you learned that the platform or representation was false.
The total amount lost.
The steps already taken with the bank, e-wallet, PAGCOR, PNP, NBI, or other agencies.

Separate what you personally saw from information supplied by other people. Do not guess the identity of an account holder or platform owner unless you have evidence.

2. Label your attachments

Use a simple index:

Annex “A” — Screenshot of the website and full URL.
Annex “B” — PAGCOR verification result.
Annex “C” — Chat with the gaming agent.
Annex “D” — Bank or e-wallet receipt.
Annex “E” — Withdrawal request and rejection.
Annex “F” — Demand for an additional fee.
Annex “G” — Complaint reference from the bank.
Annex “H” — Identification document.

For videos, chat exports, and large files, place them in an organized digital folder and identify each file in the affidavit.

3. Sign and swear to the affidavit properly

The receiving agency may provide its own complaint form or arrange the administration of an oath. When notarization is required, bring a valid government-issued identification document.

The Department of Justice’s filing requirements for preliminary investigation generally include an investigation data form, a complaint-affidavit or sworn statement, and supporting documents in the required number of copies. (Department of Justice)

4. Obtain and preserve the reference number

Keep the receiving copy, stamp, email acknowledgment, or reference number. Record the name of the office and the date of submission.

Follow up using the reference number rather than repeatedly filing identical reports with the same office. However, reports to different institutions may serve different purposes: a bank report seeks to stop funds, PAGCOR addresses licensing, and a criminal complaint seeks investigation and prosecution.

Documents to Bring or Submit

A well-prepared report usually includes:

Valid government-issued identification.
Contact details and current address.
Printed or digital chronology.
Complaint-affidavit when required.
Full URLs and platform details.
Screenshots, screen recordings, and chat exports.
Bank statements, e-wallet histories, card statements, or exchange records.
Transaction reference numbers and recipient-account details.
Proof of the platform’s licensing claim.
PAGCOR verification result.
Copies of complaints sent to the operator and financial institution.
Device information, including phone model and relevant applications.
Witness statements or details of other victims, when available.

Do not surrender your only copy of original records. Ask whether investigators need printed copies, a storage device, or access to the original phone.

Fees and Typical Timelines

Reporting a cybercrime, illegal gambling operation, or regulatory violation to government agencies is generally free. Possible out-of-pocket expenses include notarization, photocopying, printing, secure storage devices, translation, courier charges, and apostille or consular services for documents executed abroad.

The NBI’s published citizen’s charter describes its initial cybercrime investigative-assistance intake as a free service with an intake workflow measured in roughly an hour. This refers only to receiving and evaluating the request—not to completing the investigation. (National Bureau of Investigation)

Actual timelines vary significantly:

Stage	Practical expectation
Bank or e-wallet fraud report	File immediately; the possibility of a hold decreases as funds move through other accounts
Initial police, CICC, or NBI intake	Often completed on the filing date if documents are complete
Technical tracing and account identification	May take weeks or months, especially when records must be obtained from several providers
Prosecutor’s preliminary investigation	Often takes several months and may require counter-affidavits and additional evidence
Court proceedings	May take considerably longer, especially with multiple accused persons or overseas evidence
Recovery of money	Depends on whether funds or assets remain traceable and legally reachable

Common bottlenecks include incomplete transaction details, fake identities, disposable SIM cards, rapidly transferred funds, overseas servers, cryptocurrency mixers, delayed preservation requests, and victims who deleted the app or reset their phone before evidence was secured.

Do You Need to Go to the Barangay First?

Usually not for a serious cyber-estafa or illegal online gambling complaint.

Barangay conciliation applies only to disputes within its legal coverage. Exceptions include offenses punishable by more than one year of imprisonment or a fine exceeding the statutory threshold, disputes involving parties who do not reside in the same city or municipality, cases involving corporations, and situations requiring urgent legal action. (Lawphil)

A barangay blotter can document that you reported an incident, but it does not replace reporting to the bank, PAGCOR, PNP ACG, NBI, CICC, or prosecutor. Barangay officials also cannot compel a bank, e-wallet, telecommunications company, or online platform to disclose account records.

What Foreigners and Overseas Victims Should Know

A foreign national may report a fraud committed in or connected with the Philippines. Useful connections include a Philippine-based operator, local receiving account, Philippine phone number, Filipino promoter, local victim, or conduct occurring within Philippine territory.

Victims abroad should preserve:

Passport or government identification.
Proof of residence.
International remittance or card records.
Currency-conversion records.
Complete communications with the Philippine-based party.
Time-zone information for each transaction.
Local police or financial-fraud reports filed in the country of residence.

Documents signed abroad may be acknowledged before a Philippine embassy or consulate. Alternatively, a document notarized in another country may need an apostille when issued in a country covered by the Apostille Convention. Philippine consular guidance explains that apostilled documents from participating countries generally no longer require authentication by a Philippine embassy or consulate. (Philippine Embassy)

A representative in the Philippines may be authorized through a properly executed special power of attorney for certain administrative steps. However, investigators or courts may still require the victim’s personal affidavit, interview, testimony, or remote participation.

Common Mistakes That Weaken a Report

Paying more money to “complete” the withdrawal

Legitimate taxes are not normally paid to changing personal e-wallet accounts controlled by a gaming agent. A new payment demand after every attempted withdrawal is a strong scam indicator.

Reporting only the nickname of the agent

Provide every available identifier: phone number, username, profile link, bank account, e-wallet number, QR code, email address, website, referral code, and device or transaction information.

Submitting only cropped screenshots

Cropped images may omit the URL, date, sender, account number, or surrounding conversation needed to authenticate the evidence. Preserve the complete chat and original files.

Deleting the app or resetting the phone too early

Deleting malware may be necessary for security, but first preserve screenshots, app details, messages, transaction records, and other evidence. Investigators may need information stored on the original device.

Accusing people publicly without verified evidence

Posting names, photographs, account details, or accusations on social media may complicate the investigation and can create privacy, defamation, or cyberlibel issues. Give the complete evidence to the proper authorities and describe publicly only what you can prove.

Concealing your own involvement

Be truthful if you played, recruited others, received commissions, processed payments, or allowed your account to be used. Investigators will compare your statement with financial and digital records. Knowingly acting as an agent, collector, recruiter, operator, or money mule can create separate liability.

Waiting for the platform to return the money voluntarily

Delay allows funds to pass through several accounts, be converted to cryptocurrency, or leave the country. Report first while continuing only safe, documented communication.

Frequently Asked Questions

Can I report a fraudulent online game even if I did not lose money?

Yes. An attempted scam, unlicensed gambling operation, phishing page, fake app, or unlawful collection of personal data may still be reported. Preserve the advertisement, URL, communications, account details, and payment instructions. Early reporting may prevent other people from losing money.

How do I know whether an online casino is really PAGCOR-licensed?

Check the exact domain through the PAGCOR Guarantee portal. Do not rely on a logo, certificate screenshot, app-store listing, or statement from an agent. The domain you actually used should match the official listing. (PAGCOR)

Can I recover money sent to a fraudulent gaming site?

Recovery is possible in some cases but never guaranteed. The chances are generally better when the victim reports immediately, the receiving account still contains funds, the financial institution can place a lawful hold, and investigators can identify reachable assets. Recovery becomes more difficult after funds are withdrawn, divided among money-mule accounts, converted to cryptocurrency, or sent abroad.

What should I do if a licensed online gaming site refuses my withdrawal?

Save the operator’s terms, account history, wagering records, withdrawal request, rejection notice, and all communications. Use the operator’s formal dispute process and obtain a ticket number. If the issue remains unresolved, report it to PAGCOR with the exact domain, player ID, transaction details, and evidence. File a criminal complaint as well when there are clear signs of deception rather than an ordinary verification or terms-of-service dispute.

Do I need a lawyer to file a report?

A person may directly report to the bank, PAGCOR, CICC, PNP, NBI, NPC, or other relevant agency. The receiving office may provide forms and explain its filing requirements. A detailed, truthful chronology and organized evidence are more important at the initial reporting stage than technical legal language.

Can a foreigner file a complaint in the Philippines?

Yes, when the fraud has a sufficient Philippine connection. Documents executed abroad may require consular notarization or an apostille. The complainant should also report the incident to the appropriate authority in the country where the payment originated, particularly when a foreign bank or exchange is involved.

Do I need to report the case to the barangay?

Usually not when the matter involves serious cybercrime, parties in different cities or countries, a corporation, or an offense outside the scope of mandatory barangay conciliation. A barangay blotter may supplement the record but does not replace a cybercrime or financial-fraud report.

What if I paid using cryptocurrency?

Preserve the wallet address, transaction hash, blockchain network, exchange account records, screenshots, and communications. Report immediately to the exchange used to purchase or send the cryptocurrency and to cybercrime authorities. Although blockchain transfers generally cannot be reversed, exchanges may preserve records or restrict assets that enter an identifiable account.

Could I get in trouble for playing on an illegal online gambling site?

Participation in unauthorized gambling can potentially create liability under PD 1602. The risk is greater for people who knowingly operate, recruit, collect bets, receive commissions, provide payment accounts, or finance the activity. A victim should not falsify or omit facts. Clearly explain how the platform represented itself and whether you believed it was licensed.

Can I report anonymously?

Hotlines and regulatory tip channels may accept initial information without a complete formal complaint. However, investigators usually need an identifiable complainant, sworn statement, transaction records, and a person willing to authenticate the evidence before a criminal case can proceed. Ask the receiving agency how it protects complainant information when there are safety concerns.

Key Takeaways

Stop all further payments, especially supposed withdrawal taxes, unlocking fees, or verification deposits.
Report the transaction immediately to the bank, e-wallet, card issuer, or cryptocurrency exchange and obtain a reference number.
Verify the exact website domain through the official PAGCOR Guarantee portal; a logo or certificate image is not proof of licensing.
Preserve complete, original electronic evidence, including URLs, chats, transaction records, account details, advertisements, and withdrawal messages.
Report licensing issues to PAGCOR and suspected fraud, phishing, account theft, or organized scams to PNP ACG, NBI, or the CICC hotline at 1326.
Escalate unresolved complaints against BSP-supervised banks and e-wallets through BSP’s consumer-assistance process.
Barangay conciliation is generally not a prerequisite for serious cyber-estafa, cross-border fraud, or illegal online gambling cases.
Be complete and truthful about your own involvement because operators, recruiters, payment collectors, and money mules may face separate liability.
Fast reporting improves the chance of preserving records, identifying accounts, and holding funds, but no agency can guarantee that stolen money will be recovered.