Being outside the Philippines does not prevent you from reporting a Philippine loan scam. The most important point is to act quickly: report the transfer to the bank, e-wallet, card issuer, remittance company, or crypto exchange first, preserve the evidence, obtain a police or cybercrime report in the country where you are located, and then submit a coordinated complaint to the appropriate Philippine authorities. You may begin many of these steps remotely, although investigators or prosecutors may later require a properly sworn complaint-affidavit, authenticated overseas documents, or your participation in an interview or hearing.
What Counts as a Philippine Loan Scam?
A loan scam usually involves someone pretending to be a lender, financing company, bank employee, loan agent, or government-accredited representative to obtain money or personal information through deception.
Common examples include:
- Asking for a “processing fee,” “insurance deposit,” “tax,” “AML clearance fee,” or “release charge” before supposedly releasing a loan.
- Claiming that a loan has already been approved but requiring payment to a personal bank or e-wallet account.
- Using a fake lending app, website, Facebook page, Telegram account, or WhatsApp profile.
- Displaying a fabricated Securities and Exchange Commission registration certificate or using the name of a real company without permission.
- Asking for one-time passwords, online banking credentials, card details, selfie videos, or remote access to the victim’s phone.
- Repeatedly demanding additional payments after each supposed obstacle to releasing the loan.
- Offering “debt consolidation” or loan refinancing and then disappearing after receiving payment.
- Misusing a borrower’s identity documents, phone contacts, photographs, or account information.
A failed loan application is not automatically a crime. A criminal scam generally requires evidence that the person made a false representation before or while obtaining your money, that you relied on it, and that you suffered financial loss.
Philippine Laws That May Apply
Estafa under Article 315 of the Revised Penal Code
Many fake-loan schemes may constitute estafa, commonly called swindling, under Article 315(2)(a) of the Revised Penal Code.
The Supreme Court has explained that estafa by false pretenses generally requires proof that:
- The offender made a false representation concerning matters such as identity, authority, credit, business, agency, qualifications, or an imaginary transaction.
- The misrepresentation was made before or at the same time as the fraud.
- The victim relied on it and was induced to part with money or property.
- The victim suffered damage. (Supreme Court E-Library)
This is why your evidence should show not only that money was transferred, but also what the scammer said before you made the transfer.
Cybercrime Prevention Act of 2012
When estafa or another offense is committed through email, social media, messaging apps, websites, computers, or mobile devices, Section 6 of Republic Act No. 10175, the Cybercrime Prevention Act of 2012, may apply. It covers crimes under the Revised Penal Code and special laws when committed by, through, or with the use of information and communications technology. (Lawphil)
Philippine jurisdiction may exist even when the victim is abroad if, for example:
- An element of the offense occurred in the Philippines.
- The offender operated from the Philippines.
- A computer system or infrastructure involved was wholly or partly situated in the Philippines.
- Another jurisdictional basis under Philippine cybercrime law is present.
Jurisdiction is fact-specific. A Philippine phone number, bank account, website, or claimed address is useful evidence, but investigators must still determine where the offenders and relevant systems were actually located.
Anti-Financial Account Scamming Act
Republic Act No. 12010, the Anti-Financial Account Scamming Act or AFASA, addresses financial-account scams involving banks, e-wallets, payment providers, money mules, stolen identities, and social-engineering schemes.
A money mule is generally a person who allows an account to be used to receive, transfer, or withdraw criminal proceeds. The account holder receiving your payment may therefore be a participant, a paid mule, a person whose identity was stolen, or another victim recruited without fully understanding the scheme. (Bangko Sentral ng Pilipinas)
AFASA and its BSP implementing regulations provide procedures for financial institutions to trace, temporarily hold, verify, and potentially recover disputed funds. The law also allows liability under other laws, including the Revised Penal Code and RA 10175. (Bangko Sentral ng Pilipinas)
Laws regulating lenders and financing companies
A legitimate Philippine lending company normally needs authority to operate under Republic Act No. 9474, the Lending Company Regulation Act of 2007. A financing company may be regulated under Republic Act No. 8556, while credit disclosures may also be governed by Republic Act No. 3765, the Truth in Lending Act. (Lawphil)
A company’s SEC registration alone does not necessarily mean it is authorized to operate as a lending company. Check whether it has the required Certificate of Authority and whether the exact company name, registration details, website, app, and contact information match the SEC records.
Which Philippine Agency Should Receive the Report?
More than one agency may have a role. Filing with one does not necessarily replace reporting to the others.
| Problem | Main office or reporting channel |
|---|---|
| Fake lender, advance-fee loan scam, or online impersonation | NBI Cybercrime Division, NBI Fraud and Financial Crimes Division, or PNP Anti-Cybercrime Group |
| Money transferred to a Philippine bank or e-wallet | Sending institution and receiving institution, followed by BSP escalation when applicable |
| Unregistered or impersonated lending company | Securities and Exchange Commission |
| Unauthorized access, account takeover, or financial-account social engineering | Bank or payment provider, NBI or PNP, and possibly BSP |
| Misuse of identification documents, contacts, photographs, or personal data | National Privacy Commission |
| Broader cybercrime coordination | DOJ Office of Cybercrime or Cybercrime Investigation and Coordinating Center |
| Investment scheme disguised as a loan program | SEC enforcement authorities and law enforcement |
What to Do Immediately After Discovering the Scam
1. Contact the payment provider before doing anything else
Contact the fraud department of the bank, credit card company, e-wallet, remittance provider, or crypto exchange used to send the money.
Do not rely only on an ordinary customer-service chat. Clearly state:
“I am reporting a fraudulent transaction caused by a loan scam. Please mark the transaction as disputed, initiate a recall or recovery request, notify the beneficiary institution, preserve all transaction records, and assess whether the funds can be temporarily held.”
Provide:
- Transaction date and exact time.
- Amount and currency.
- Transaction or reference number.
- Beneficiary’s name.
- Bank, account, e-wallet, card, or wallet details.
- A concise explanation of the deception.
- Screenshots and payment receipts.
- Your police or law-enforcement reference number, once available.
Under the BSP’s current AFASA framework, complaint-initiated holding begins through the financial institution’s fraud-reporting mechanism. The initial holding period may be up to five calendar days, with a possible extension that brings the total to no more than 30 calendar days unless a competent court extends it. Supporting records such as a sworn complaint, affidavit, or police report may be needed during the initial period. (Bangko Sentral ng Pilipinas)
A temporary hold is not automatic recovery. It is useful only if funds remain in an identifiable participating account. Scammers often move money within minutes through several mule accounts, withdraw it in cash, purchase cryptocurrency, or send it outside the Philippines.
2. Stop all further payments and communication involving money
Do not pay another “release,” “verification,” “recovery,” “tax,” or “legal processing” fee. A common tactic is to demand progressively larger amounts by claiming that the earlier payment created a new problem.
Do not delete the conversation or immediately block every account before preserving the evidence. Export the chats, save profile details, record the username and URL, and take screenshots showing dates and times.
Avoid warning the scammer that a bank freeze or police report is being pursued. Advance warning may cause the funds and online accounts to disappear more quickly.
3. Secure your accounts and identity
When you shared passwords, OTPs, card details, identification documents, selfie videos, or remote-access permissions:
- Change affected passwords from a clean device.
- Sign out other active sessions.
- Enable multi-factor authentication.
- Contact the bank to replace compromised cards or account credentials.
- Ask your mobile provider about protecting the number from SIM-swap activity.
- Remove unfamiliar remote-access or device-management applications.
- Monitor bank, credit, email, and social-media accounts.
- Preserve evidence before resetting a device when possible.
How to Report the Scam to Philippine Authorities From Abroad
Step 1: Prepare one organized evidence package
Create a folder containing the original evidence and a separate working copy. Do not crop, highlight, rename, or annotate the only copy of a file.
Your evidence package should contain:
| Document or evidence | What it should show |
|---|---|
| Chronology | Events in date-and-time order, including your local time and Philippine time |
| Scam communications | Full chats, emails, call logs, SMS messages, voice recordings, and email headers |
| Loan representations | Advertisements, approval notices, contracts, fee schedules, permits, and promises made |
| Payment evidence | Statements, receipts, SWIFT references, remittance records, transaction IDs, or crypto hashes |
| Recipient information | Account names, numbers, e-wallet details, bank names, wallet addresses, and QR codes |
| Online identifiers | Usernames, profile URLs, websites, app names, phone numbers, and email addresses |
| Identity evidence | Copy of your passport or government ID and proof that the affected account belongs to you |
| Loss calculation | Total amount transferred, converted amounts, bank charges, and dates |
| Prior reports | Bank case numbers, platform reports, local police reports, and correspondence with agencies |
| Data provided to scammers | IDs, selfies, signatures, contact lists, employment records, and account credentials |
For each screenshot, keep enough of the screen visible to identify the platform, username, date, time, and context. Screenshots that show only a single message without the surrounding conversation are easier to dispute.
Step 2: Make a police or cybercrime report where you are located
Report the incident to the police, national fraud center, or cybercrime authority in your current country.
This accomplishes several things:
- It creates an independent record that you reported promptly.
- Banks and payment providers may request the report number.
- Local authorities can preserve evidence located in your country.
- Philippine investigators may later coordinate through formal international channels.
- It helps establish your identity, residence, and location when the scam occurred.
Ask for a copy of the report or at least the incident number, investigating officer’s name, office, email address, and telephone number.
Victims ordinarily report through their local law-enforcement authority rather than approaching INTERPOL directly. The involved agencies decide whether international police cooperation, preservation requests, or mutual legal assistance is appropriate.
Step 3: Submit an NBI complaint
The National Bureau of Investigation maintains an official NBI Online Complaint page. You may also send an organized report to:
- NBI Cybercrime Division: ccd@nbi.gov.ph
- NBI Fraud and Financial Crimes Division: ffcd@nbi.gov.ph
- NBI Complaints and Assessment Division: cad@nbi.gov.ph
These addresses appear in the NBI’s official divisions directory. (National Bureau of Investigation)
Use a clear subject line such as:
Overseas Complaint – Philippine Loan Scam – [Amount] – [Receiving Bank or E-Wallet] – [Date]
The body should state:
- Your full name, nationality, and current country.
- Your contact information and preferred communication method.
- The amount and date of the loss.
- How the scammer represented the supposed loan.
- The Philippine connections, such as bank accounts, telephone numbers, persons, addresses, websites, or businesses.
- What you already reported to the bank and local police.
- A list of attachments.
- The assistance requested, such as investigation, account tracing, data preservation, and referral for prosecution.
Do not send passwords, OTPs, or unnecessary complete account credentials by ordinary email. Mask unrelated balances and transactions while leaving the relevant transfer details visible.
Step 4: Report through Philippine cybercrime channels
The DOJ Office of Cybercrime reporting page provides government guidance for reporting cybercrime incidents. The Cybercrime Investigation and Coordinating Center may also assist in coordinating cybercrime reports, particularly where multiple institutions or jurisdictions are involved.
A DOJ or cybercrime report does not replace the urgent fraud notice to the bank. Law-enforcement investigation and financial-account recovery are separate processes that should begin in parallel.
Step 5: Report a fake or illegal lender to the SEC
Use the SEC iMessage ticketing system when the scam involves:
- A person or company falsely claiming to be SEC-registered.
- An unauthorized lending or financing company.
- A fake loan app or website.
- The impersonation of a legitimate lender.
- An investment or deposit-taking operation disguised as a loan program.
Within iMessage, complaints concerning financing and lending companies are routed to the SEC’s Financing and Lending Companies Department, while investment-scam matters may be handled by its enforcement authorities. (Securities and Exchange Commission)
Include:
- The exact business name used.
- SEC registration or Certificate of Authority number claimed.
- Website, app-store page, and social-media links.
- Screenshots of permits or certificates.
- Names of purported officers or agents.
- Payment details.
- Evidence of the misrepresentation.
- A statement identifying whether you received any actual loan proceeds.
A scammer may copy a real company’s name and certificate. Compare the contact details used by the scammer with those appearing in official SEC records rather than relying on a certificate image sent through chat.
Step 6: Escalate complaints involving BSP-supervised institutions
When the dispute involves a Philippine bank, e-wallet issuer, payment provider, or other BSP-supervised financial institution, report first through that institution’s official fraud or consumer-assistance channel.
If the matter remains unresolved, use the BSP Consumer Assistance Mechanism. The BSP accepts escalation through its Online Buddy system or through a completed Complaints, Inquiries and Requests form sent to consumeraffairs@bsp.gov.ph.
The BSP asks complainants to include the details of the concern, the remedy requested, contact information, the complaint previously submitted to the financial institution, its response if any, and supporting documents. Online submissions receive a case reference number; email submissions receive an acknowledgment, and matters may be evaluated or referred to the supervised institution. (Bangko Sentral ng Pilipinas)
BSP escalation is especially relevant when the complaint concerns how a regulated institution handled the disputed transaction. It is not a substitute for an estafa or cybercrime complaint against the scammers.
Step 7: File a privacy complaint when personal data was abused
The Data Privacy Act of 2012, Republic Act No. 10173, may apply when a fake lender or loan app:
- Accessed or uploaded your contact list without lawful authority.
- Used your photographs or identification documents for another account.
- Publicly disclosed your alleged debt.
- Sent threats or defamatory messages to relatives, employers, or contacts.
- Continued processing your data without a lawful basis.
- Used your identity to open accounts or apply for loans.
The National Privacy Commission complaint page provides its current forms and filing procedures. (National Privacy Commission)
A privacy complaint addresses misuse of personal information. It does not by itself replace the financial-fraud report or criminal complaint.
Preparing a Philippine Complaint-Affidavit While Abroad
An initial online report may start the process, but a formal criminal case will ordinarily require a complaint-affidavit—a written statement made under oath explaining the facts and identifying the evidence.
The affidavit should be based on facts you personally know and should cover:
- Your identity, nationality, overseas address, and contact details.
- How and when the scammer contacted you.
- Every material representation made about the loan.
- Why the representation appeared credible.
- The payment instructions given.
- Each transaction made in reliance on those representations.
- What happened after payment.
- The total damage suffered.
- The Philippine persons, accounts, companies, devices, or locations involved.
- A numbered list of supporting exhibits.
Under Rule 112 of the Rules of Criminal Procedure, a complaint used for preliminary investigation should include the respondent’s address when known, the affidavits of the complainant and witnesses, and supporting documents. Copies are generally required for each respondent, plus additional copies for the investigating office. Affidavits must be properly subscribed and sworn before an authorized official or notary in accordance with the applicable rules. (Lawphil)
Do not guess the identity or residential address of an account holder. State exactly what the bank record or payment screen shows and identify the source of that information.
Notarization, Apostille, and Overseas Authentication
Documents signed abroad may require additional authentication before Philippine authorities accept them for formal use.
The usual options are:
Signing before a Philippine consular officer
Some Philippine embassies and consulates provide notarial services. Their requirements may include personal appearance, identification, unsigned documents, witnesses, and appointment scheduling.
Availability and eligibility vary by foreign service post, so the rules of the embassy or consulate serving your location should be checked.
Local notarization followed by an apostille
When the document is executed in a country that participates in the Hague Apostille Convention, the common process is:
- Sign before a local notary or other authorized official.
- Obtain an apostille from that country’s designated competent authority.
- Submit the apostilled document for use in the Philippines.
An apostille authenticates the origin of the signature, official capacity, and seal. It does not prove that every statement in the affidavit is true.
Philippine foreign service posts recognize the local-notarization-and-apostille route for documents intended for use in the Philippines. (Philippine Embassy)
Documents from a non-Apostille country
When the country is not covered by the Apostille Convention, consular authentication or another legalization process may be required. The exact process depends on the country and the Philippine embassy or consulate with jurisdiction.
A document written in another language may also require a certified English translation.
Can Someone in the Philippines File for You?
A lawyer, relative, or authorized representative may help submit documents, follow up with agencies, obtain records, and coordinate appointments. A Special Power of Attorney, or SPA, may be requested for particular acts.
However, an SPA does not replace:
- Your personal complaint-affidavit.
- Your direct knowledge of what the scammer said.
- Proper authentication of documents executed abroad.
- Your participation when investigators or prosecutors require clarification.
- Your testimony if the case eventually proceeds to trial.
The receiving office should be asked what form of SPA and authentication it requires. An overseas SPA may need consular notarization or local notarization followed by an apostille.
What Happens After the Report Is Filed?
Law-enforcement assessment
The NBI, PNP, or another investigating agency may:
- Evaluate whether the facts indicate estafa, cybercrime, financial-account scamming, identity misuse, or another offense.
- Request additional affidavits or original electronic evidence.
- Send preservation requests to platforms or service providers.
- Coordinate with banks, payment providers, the BSP, SEC, or foreign authorities.
- Trace beneficiary accounts and possible money mules.
- Identify whether the same accounts or profiles appear in other complaints.
- Refer the evidence to a prosecutor.
Investigators may not immediately disclose account-owner information to the complainant because of privacy, bank-secrecy, investigative, and due-process considerations.
Preliminary investigation
When the evidence is referred for prosecution, the prosecutor conducts a preliminary investigation to determine whether there is sufficient ground to believe that a crime was committed and that the respondent is probably guilty and should be tried.
Under Rule 112, the prosecutor may dismiss the complaint or issue a subpoena requiring the respondent to submit a counter-affidavit and supporting evidence. The Rules prescribe relatively short periods for several stages, but actual completion may take longer because of incomplete addresses, difficulty serving respondents, multiple suspects, account tracing, foreign evidence, document authentication, or heavy caseloads. (Lawphil)
Filing in court
If probable cause is found, an Information—a formal criminal charge—may be filed in the proper Philippine court. Jurisdiction and venue depend on the offense, where its elements occurred, the accounts and systems involved, and the applicable law.
Financial recovery is not guaranteed by the filing of criminal charges. Recovery may come from:
- A successful transfer recall.
- Funds temporarily held before withdrawal.
- Voluntary reimbursement.
- Restitution or civil liability adjudged in the criminal case.
- A separate civil remedy where legally appropriate.
- Institution liability established under applicable consumer-protection or AFASA rules.
Common Problems That Weaken Overseas Complaints
Reporting too late
Delay gives scammers time to transfer, withdraw, or convert the funds. A complete affidavit can follow; the urgent bank fraud report should not wait.
Sending only screenshots of payment receipts
A receipt proves that money moved, but not necessarily why. Include the false loan representations that caused you to pay.
Cropping out usernames, dates, and URLs
Preserve context. Investigators need to connect the statement, speaker, platform, date, and resulting transfer.
Assuming the receiving account holder is the mastermind
The account may belong to a mule, identity-theft victim, recruited worker, or intermediary. Describe the evidence without making unsupported accusations.
Treating SEC registration as proof of legitimacy
Scammers frequently use fabricated certificates or copy the identity of a registered company. Verify both registration and authority to engage in lending.
Paying a supposed recovery agent
Fraud victims are often targeted again by people claiming they can recover the money through a bank employee, hacker, police contact, or court insider. Demands for another advance payment are a serious warning sign.
Posting evidence publicly
Publishing passports, account numbers, signatures, or unredacted bank records can create further identity-theft risks and may compromise the investigation. Submit complete evidence only through verified official channels.
Using an improperly sworn affidavit
An affidavit notarized overseas without the required apostille, legalization, or consular formalities may need to be redone, delaying the case.
Frequently Asked Questions
Can a foreigner report a loan scam in the Philippines?
Yes. Philippine criminal and regulatory processes are not limited to Filipino complainants. The important questions are whether Philippine law has jurisdiction and whether there is sufficient evidence connecting the offense to the Philippines.
Do I have to travel to the Philippines to file the initial report?
Usually not. Initial reports may be made to the bank, NBI, SEC, BSP, DOJ cybercrime channels, and other agencies remotely. Personal appearance may later be required for an interview, clarification, identification, prosecutor proceeding, or court testimony, although some stages may allow remote coordination.
Should I report to the NBI, SEC, or BSP first?
Report first to the payment provider because recovery opportunities are time-sensitive. Report to the NBI or PNP for criminal investigation. Use the SEC for fake or unauthorized lending companies and the BSP for unresolved concerns involving BSP-supervised financial institutions.
Can a Philippine bank freeze the scammer’s account?
A bank or covered institution may temporarily hold disputed funds under AFASA and BSP rules when the legal and regulatory requirements are satisfied. A complainant cannot personally order a freeze, and the process will not recover money already withdrawn or moved outside reachable accounts.
Is every advance fee for a loan illegal?
Not necessarily. Some legitimate credit transactions may involve properly disclosed fees. Major warning signs include payment to a personal account, repeated surprise charges, refusal to deduct fees from legitimate proceeds, fake permits, guaranteed approval, pressure to pay immediately, and failure to release any actual loan.
Can I recover money sent through cryptocurrency?
Recovery is difficult but not always impossible. Report immediately to the exchange, provide the transaction hash and wallet addresses, and ask the exchange to preserve records or restrict an account where permitted. Transfers to private wallets may be irreversible, but blockchain records can still assist an investigation.
What if I do not know the scammer’s real name?
You may still report the case. Provide every available identifier: account names, account numbers, phone numbers, emails, usernames, URLs, QR codes, wallet addresses, device information, call recordings, and payment references. Investigators can pursue subscriber and account records through lawful processes.
Does my complaint-affidavit need an apostille?
It may, when it is notarized in another Apostille Convention country for official use in the Philippines. An affidavit notarized by a Philippine consular officer may follow a different process. Confirm the receiving office’s current requirements before sending originals.
How long does a Philippine loan-scam investigation take?
Urgent bank tracing may begin quickly, but a full criminal investigation can take months or longer. Cases involving several mule accounts, fake identities, foreign platforms, incomplete addresses, or international evidence usually take more time than a straightforward case with an identified suspect and intact funds.
Can my relative in the Philippines handle the entire case?
A relative or representative can assist with submissions and follow-ups if properly authorized, but cannot replace your sworn first-hand account. Investigators, prosecutors, or the court may still need to communicate with you or receive your testimony.
Key Takeaways
- Report the transfer to the bank, e-wallet, remittance provider, card issuer, or crypto exchange immediately.
- Ask for a fraud case number, transaction recall, beneficiary-bank notification, record preservation, and assessment for a temporary hold.
- Preserve complete chats, advertisements, account details, transaction references, and the scammer’s representations.
- Obtain a police or cybercrime report in the country where you are located.
- Report criminal conduct to the NBI or PNP and use the SEC, BSP, or NPC for the specific regulatory issues within their authority.
- A formal Philippine case may require a sworn complaint-affidavit and properly apostilled, legalized, or consularized overseas documents.
- An authorized Philippine representative can assist, but cannot replace your own affidavit and evidence.
- Fund recovery and criminal prosecution are separate processes; both should be pursued promptly without assuming that either guarantees reimbursement.