A withdrawal scam usually starts with a promise that you can withdraw your money anytime—until you actually try. Then the “platform,” “trader,” “agent,” or “customer service officer” suddenly asks for a tax payment, verification fee, anti-money-laundering clearance, wallet upgrade, VIP fee, or additional deposit before releasing your funds. In the Philippines, this should be treated as a possible online fraud, investment scam, cybercrime, and financial account scam, especially if payments passed through a bank, e-wallet, crypto wallet, or remittance channel.

The most important thing is speed. The faster you report, the better the chance that a bank, e-wallet provider, or law enforcement agency can trace or temporarily hold remaining funds. A report filed weeks later may still help build a criminal case, but recovery becomes harder once the money is transferred through several accounts, converted to crypto, withdrawn in cash, or sent abroad.

What Is a Withdrawal Scam?

A withdrawal scam is a fraud pattern where the victim is encouraged to deposit money into a supposed trading, crypto, forex, investment, gambling, lending, job, romance, or “task earning” platform, but is blocked from withdrawing funds later.

Common versions in the Philippines include:

A fake crypto or forex platform showing fake profits on a dashboard.
A “pig butchering” scam where a romantic or friendly contact coaches the victim to invest.
A Telegram, WhatsApp, Facebook, Viber, or TikTok “mentor” who says withdrawals require extra payment.
A fake investment company claiming SEC registration but not authorized to solicit investments.
A task scam where small withdrawals are allowed at first, then larger withdrawals are blocked unless the victim “recharges.”
An online casino, gaming, or betting-style app that refuses withdrawals after deposits.
A fake bank, exchange, or wallet “compliance team” asking for taxes, AML fees, or verification charges.

A major red flag is the demand to pay more money to withdraw your own money. Legitimate financial institutions may require identity verification, but they do not normally require victims to send personal payments to random bank accounts, e-wallets, crypto wallets, or “agents” before releasing funds.

Is a Withdrawal Scam a Crime in the Philippines?

Yes, depending on the facts. A withdrawal scam may fall under several Philippine laws at the same time.

Estafa under the Revised Penal Code

The usual criminal charge is estafa, or swindling, under Article 315 of the Revised Penal Code. Estafa generally involves fraud or deceit that causes another person to part with money or property.

For withdrawal scams, the most common theory is estafa by false pretenses or fraudulent acts under Article 315(2)(a), where the scammer falsely pretends to have a legitimate business, trading platform, authority, investment opportunity, or ability to release funds. Article 315 also covers misappropriation or conversion in some situations, such as when money was received under an obligation to deliver or return it.

The Supreme Court has repeatedly emphasized that the heart of estafa is deceit or fraud causing damage. In a withdrawal scam, the evidence must show not only that you lost money, but that you were induced by false representations before or at the time you deposited or paid.

Official reference: Revised Penal Code, Article 315 on estafa

Cybercrime if the Scam Happened Online

If the scam used Facebook, Messenger, Telegram, WhatsApp, email, SMS, a website, app, QR code, online dashboard, or digital wallet, the case may also involve Republic Act No. 10175, the Cybercrime Prevention Act of 2012.

Under Section 6 of RA 10175, crimes already punishable under the Revised Penal Code or special laws may be covered by the Cybercrime Prevention Act if committed through information and communications technologies. This is why an online estafa case is often described as estafa in relation to the Cybercrime Prevention Act.

Official reference: RA 10175, Cybercrime Prevention Act of 2012

Investment Fraud under RA 11765 and Securities Laws

If the scam involved a promise of profits, passive income, crypto trading, forex trading, pooled funds, staking, bot trading, or managed investments, the Securities and Exchange Commission may treat it as an investment scam.

Republic Act No. 11765, the Financial Products and Services Consumer Protection Act of 2022, defines investment fraud as deceptive solicitation of investments from the public, including Ponzi schemes and offerings of investment schemes without the required SEC license or permit.

Official reference: RA 11765, Financial Products and Services Consumer Protection Act

The Securities Regulation Code, Republic Act No. 8799, also requires securities to be registered before being sold or offered to the public in the Philippines. “Investment contracts” may be securities. In Power Homes Unlimited Corporation v. SEC, the Supreme Court applied the Howey Test and recognized that a scheme may be an investment contract when people invest money in a common enterprise expecting profits mainly from the efforts of others.

Official references:

Anti-Financial Account Scamming Act

Republic Act No. 12010, the Anti-Financial Account Scamming Act or AFASA, signed in 2024, is highly relevant when the scam used bank accounts, e-wallets, or other financial accounts.

AFASA penalizes financial account scamming, including:

Money muling, such as using, lending, selling, buying, renting, or allowing the use of a financial account to receive or move scam proceeds.
Social engineering schemes that obtain sensitive identifying information through deception.
Economic sabotage when committed by a group, against multiple victims, using mass messaging, or through human trafficking.

AFASA also allows institutions to temporarily hold funds involved in a disputed transaction, subject to legal requirements and BSP rules. The law states that the temporary hold cannot exceed 30 calendar days unless extended by a court.

Official reference: RA 12010, Anti-Financial Account Scamming Act

Where to Report a Withdrawal Scam in the Philippines

Different offices handle different parts of the problem. In practice, victims often need to report to more than one office.

Where to report	Best for	What they can usually do
Your bank or e-wallet provider	Recent transfer, GCash/Maya/bank deposit, QR payment, Instapay/PESONet transfer	Flag the transaction, start dispute process, coordinate with receiving institution, possibly hold remaining funds
CICC / 1326 Anti-Scam Hotline	Urgent online scam reports	Give immediate reporting guidance and coordinate scam response channels
PNP Anti-Cybercrime Group	Online fraud, fake accounts, scam websites, digital evidence	Receive cybercrime complaints, investigate, coordinate with platforms and financial institutions
NBI Cybercrime Division	Cybercrime investigation, complex online scams, digital evidence	Receive complaints, take sworn statements, examine devices, conduct investigation
SEC	Investment, crypto, forex, trading, Ponzi, pooled funds, fake company registration	Receive investment scam reports, issue advisories, investigate unauthorized solicitation
BSP	Bank or e-wallet complaint against a BSP-supervised financial institution	Handle consumer complaints after reporting first to the bank/e-wallet
Office of the City or Provincial Prosecutor	Formal criminal complaint	Conduct preliminary investigation and determine probable cause
Civil court / small claims court	Recovery of money in a purely civil claim	Order payment if defendant is identifiable and within jurisdiction

What to Do Immediately After Discovering the Scam

1. Stop sending money

Do not pay the “withdrawal fee,” “tax,” “clearance,” “AML fee,” “wallet unlock,” “VIP upgrade,” or “verification deposit.” In real cases, each new fee is usually another layer of the scam.

Scammers often say:

“Your funds are frozen because of tax.”
“You must deposit 10% to prove the account is yours.”
“You violated AML rules and must pay a penalty.”
“The withdrawal channel is congested.”
“The regulator requires a release fee.”
“You need to upgrade to VIP to withdraw.”

These explanations are usually designed to pressure you into sending more money.

2. Contact your bank or e-wallet immediately

Report the transaction through your bank or e-wallet’s official hotline, app support, branch, or fraud channel. Use the word fraud or scam, and ask for a transaction dispute and urgent tracing.

Prepare these details:

Your full name and account number or wallet number.
Date and time of transfer.
Amount sent.
Reference number, transaction ID, or screenshot of receipt.
Recipient account name, account number, wallet number, QR merchant name, or bank.
Short explanation: “I was deceived into sending funds to a fake investment/trading platform and was blocked from withdrawing.”

Ask for a case number. Save the chat transcript or email confirming your report.

Under AFASA, banks, non-bank financial institutions, and payment service providers have duties relating to disputed transactions, fraud management, and temporary holding of funds when legal conditions are met. Reporting quickly matters because funds may move through multiple accounts within minutes.

3. Call or report to the CICC 1326 anti-scam hotline

For online scams, the government-backed anti-scam reporting channel commonly publicized to the public is the 1326 hotline through the Cybercrime Investigation and Coordinating Center and partner agencies.

This is useful when the scam is fresh and you need guidance on where to report, especially if the money moved through mobile wallets, bank transfers, suspicious links, or scam phone numbers.

Useful reference: DICT-CICC information on the 1326 National Anti-Scam Hotline

4. Preserve digital evidence before the scammer deletes it

Do not rely only on screenshots. Scammers delete accounts, change usernames, remove websites, and unsend messages.

Preserve:

Screenshots of the full conversation, including profile name, username, phone number, and URL.
Screen recordings showing the platform dashboard, blocked withdrawal, payment demands, and account details.
Deposit receipts, bank transfer slips, e-wallet receipts, remittance forms, and crypto transaction hashes.
Website URL, app name, APK file source, domain name, email address, and social media links.
Names and numbers of recruiters, “agents,” “mentors,” “customer service,” and recipient account holders.
Copies of IDs or selfies you sent to the platform.
Any document claiming SEC, DTI, BSP, BIR, or “international regulator” approval.
Email headers if the scam used email.
The exact date and time of each deposit and withdrawal attempt.

If possible, export chats instead of merely taking cropped screenshots. For WhatsApp and Telegram, preserve usernames, phone numbers, group names, invite links, and message IDs where visible.

5. File a complaint with NBI Cybercrime Division or PNP Anti-Cybercrime Group

For online withdrawal scams, file with either the NBI Cybercrime Division or the PNP Anti-Cybercrime Group. You do not need to file with both first, but many victims make initial inquiries with both depending on location and urgency.

The DOJ Office of Cybercrime has advised the public that cybercrime complaints may be brought to the NBI Cybercrime Division or PNP Anti-Cybercrime Group.

Official reference: DOJ Office of Cybercrime guidance on reporting cybercrime incidents

The NBI Citizens Charter for computer crime complaints describes the process as including:

Filing a complaint or request for investigation.
Initial interview.
Complaint sheet.
Sworn statements or prepared affidavits.
Submission of supporting documents.
Possible device examination when relevant.

Official reference: NBI Investigative Assistance for Victims of Computer Crimes

6. Report investment-related scams to the SEC

Report to the SEC if the withdrawal scam involved:

Crypto, forex, stocks, commodities, or trading.
Passive income or guaranteed returns.
Pooled investment funds.
“Staking,” “mining,” “AI trading,” “copy trading,” or “bot trading.”
A company claiming SEC registration.
A recruiter offering commissions for bringing in investors.
A Ponzi-like system where withdrawals depend on new deposits.

Use the SEC’s official complaint portal: SEC iMessage portal

Before investing or when preparing your complaint, also check whether the entity is actually registered and whether it has authority to solicit investments. SEC registration as a corporation only means the entity exists as a registered corporation; it does not automatically mean it has a license to sell securities, solicit investments, or operate a trading platform.

Useful official tool: Check with SEC

7. Escalate to BSP if the bank or e-wallet response is inadequate

If your complaint involves a bank, e-wallet, remittance company, payment service provider, or other BSP-supervised financial institution, first report directly to that institution. If unresolved or mishandled, file a complaint with the BSP Consumer Assistance Mechanism.

The BSP says complaints may be filed through BSP Online Buddy or by sending a completed Complaint, Inquiry, and Request form to consumeraffairs@bsp.gov.ph, with copies of the complaint filed with the BSP-supervised financial institution, the institution’s reply if any, and supporting documents.

Official reference: BSP Consumer Assistance Channels

BSP complaints are not a substitute for a criminal complaint against the scammer. They are most useful when the issue involves the conduct, response, systems, or obligations of a regulated financial institution.

Documents You Should Prepare

Document or evidence	Why it matters
Government ID	Confirms your identity as complainant
Written timeline	Helps investigators understand the sequence of deception, payments, and withdrawal denial
Proof of deposits	Shows actual loss and money trail
Withdrawal request screenshots	Shows that the platform refused or blocked withdrawal
Fee demands	Shows the scam pattern and continuing deception
Chat logs	Identifies recruiters, agents, numbers, usernames, and promises made
Website/app screenshots	Shows the fake platform, dashboard, claimed profits, and account details
Recipient account details	Helps banks, e-wallets, and investigators trace funds
SEC/BSP/BIR “certificates” shown by scammer	May prove misrepresentation or fake authority
Police/NBI report number	Useful for bank follow-ups and regulator complaints
Affidavit or sworn statement	Needed for formal investigation and prosecutor filing

For criminal complaints, an affidavit should be factual and chronological. Avoid exaggeration. State what happened, who contacted you, what was promised, how much you paid, where you sent money, when you tried to withdraw, and what excuses were given.

Sample Timeline Format for Your Complaint

Use a simple timeline like this:

Date	Event	Evidence
March 3, 2026	I was contacted on Telegram by “Anna,” username @____, who introduced a crypto trading platform.	Screenshot A
March 5, 2026	I created an account on the website and was told I could withdraw anytime.	Screenshot B
March 6, 2026	I sent ₱20,000 to GCash number ____ under the name ____.	Receipt C
March 8, 2026	The platform showed a profit of ₱31,500.	Screenshot D
March 9, 2026	I requested withdrawal but was told to pay a ₱5,000 tax clearance fee.	Screenshot E
March 10, 2026	I paid the fee but withdrawal was still blocked.	Receipt F
March 11, 2026	I realized it was a scam and reported to my bank/e-wallet.	Case number G

A clear timeline often matters more than a long emotional narrative. Investigators need names, numbers, dates, amounts, account details, and links.

What Happens After You Report?

Bank or e-wallet stage

The bank or e-wallet may:

Create a fraud case number.
Ask for screenshots and receipts.
Coordinate with the receiving institution.
Attempt to trace the transaction chain.
Temporarily hold funds if still available and legally justified.
Deny reimbursement if the institution finds the transaction was authorized and its systems were not at fault.

Under AFASA, restitution may be possible in situations where an institution failed to employ adequate risk management systems or failed to exercise the required diligence, but recovery is not automatic in every scam.

NBI or PNP investigation stage

The investigator may:

Take your sworn statement.
Ask for original files, not just screenshots.
Request device inspection if needed.
Coordinate with banks, e-wallets, telcos, platforms, or service providers.
Prepare a case for filing before the prosecutor.
Ask you to return for clarification or supplemental affidavit.

The practical bottleneck is usually identification. Fake names are common, but recipient bank or e-wallet accounts, SIM numbers, IP logs, KYC records, and withdrawal points may help identify suspects.

Prosecutor stage

A criminal case generally proceeds through preliminary investigation when the offense requires it. The prosecutor evaluates whether there is probable cause to charge a person in court.

Usually, the complainant submits:

Complaint-affidavit.
Supporting affidavits of witnesses, if any.
Evidence attachments.
IDs and contact information.
Law enforcement referral or investigation report, if available.

The respondent may be required to submit a counter-affidavit. If the prosecutor finds probable cause, an Information may be filed in court. If not, the complaint may be dismissed, subject to available remedies under the Rules of Criminal Procedure and DOJ procedures.

Court stage

If a criminal case is filed, the court process may include arraignment, pre-trial, trial, and judgment. If there is conviction, civil liability such as restitution may be awarded. However, criminal cases take time, especially if the suspects are unidentified, abroad, using fake identities, or part of a syndicate.

Can You Recover the Money?

Recovery depends on where the money is.

Situation	Chance of recovery
Funds still in the receiving bank/e-wallet account	Better, especially if reported quickly
Funds moved to another local account	Possible but harder; requires tracing and coordinated verification
Funds withdrawn in cash	Difficult
Funds converted to crypto	Very difficult unless wallet/exchange information is usable
Funds sent abroad	Difficult and may require cross-border cooperation
Scammer is identified and has assets	Possible through criminal restitution, civil action, or settlement
Scammer used fake identities and mule accounts	Harder, but mule accounts may still help investigators trace the network

Do not assume that a police or NBI report automatically freezes funds. The bank/e-wallet fraud report should be made immediately and separately. Law enforcement can help, but the financial institution’s early internal fraud process is often the fastest first step.

Common Mistakes That Hurt Withdrawal Scam Complaints

Paying more after the first failed withdrawal

Once a platform blocks withdrawal and demands extra payment, treat it as a major red flag. Many victims lose more money not from the original deposit but from repeated “release fees.”

Deleting chats out of embarrassment

Embarrassment is understandable, especially in romance or investment scams, but deleting evidence makes the case harder. Preserve everything, including messages that feel personal.

Reporting only to Facebook or Telegram

Platform reports may remove the scam account, but they do not automatically create a Philippine criminal complaint or bank dispute. Report to the platform, but also report to your bank/e-wallet and the proper government agency.

Relying on SEC registration alone

A company may be registered with the SEC as a corporation but still have no authority to solicit investments. For investment scams, the important question is whether the offering itself is registered or exempt, and whether the entity has the proper license.

Filing a vague complaint

A complaint saying “I was scammed online” is weaker than a complaint showing:

Who contacted you.
What was promised.
What false statements were made.
How much you sent.
Where you sent it.
How withdrawal was blocked.
What additional fees were demanded.
What evidence supports each event.

Waiting for the scammer to “fix” the withdrawal

Scammers often use delay tactics: system maintenance, compliance review, holiday closures, tax processing, or blockchain congestion. These excuses buy time while funds are moved.

Special Notes for OFWs and Foreign Victims

OFWs and foreigners can still report a withdrawal scam connected to the Philippines, especially if:

The victim was in the Philippines when targeted.
The scammer used Philippine bank accounts, e-wallets, SIM cards, or addresses.
The financial account involved is maintained with an institution operating in the Philippines.
Part of the scam was committed using Philippine-based infrastructure or persons.

RA 12010 expressly provides jurisdiction where elements are committed in the Philippines, where Philippine-based systems or financial accounts are used, or where damage is caused to a person in the Philippines or to an account maintained with an institution operating in the Philippines.

If you are abroad, you may need to execute affidavits before a Philippine Embassy or Consulate, or prepare documents in a form acceptable for Philippine proceedings. For documents that need authentication for cross-border use, check the DFA’s official Apostille information: DFA Apostille official website

Foreign victims should also preserve passport entry stamps, Philippine address information, local SIM records, remittance receipts, bank records, and communications showing the Philippine connection.

Should You File a Barangay Complaint?

Usually, a withdrawal scam is not best handled first through barangay conciliation, especially when:

The scammer is unknown.
The scammer is abroad.
The parties do not live in the same city or municipality.
The offense is cybercrime-related.
The amount and possible penalty exceed barangay conciliation coverage.
Urgent tracing or freezing of funds is needed.

Barangay proceedings are designed for certain disputes between persons within the same locality and within limited legal coverage. For online fraud, the practical first steps are financial institution reporting, cybercrime reporting, and law enforcement documentation.

Civil Recovery Options

A withdrawal scam can have both criminal and civil aspects.

Possible civil bases include:

Civil Code Article 19, requiring every person to act with justice, give everyone his due, and observe honesty and good faith.
Civil Code Article 20, which allows damages when a person willfully or negligently causes damage contrary to law.
Civil Code Article 21, which allows damages for acts contrary to morals, good customs, or public policy.
Civil Code Article 1170, which imposes liability for damages arising from fraud, negligence, delay, or contravention of obligations.

If the defendant is known and the case is primarily for recovery of money, a civil action may be considered. For smaller monetary claims, the Supreme Court’s small claims procedure may be relevant, subject to the amount and nature of the claim. The small claims process is designed to be simpler, but it is useful only when the defendant can be identified and served.

Official reference: Supreme Court information on Small Claims

Frequently Asked Questions

How do I report a withdrawal scam in the Philippines?

Report first to your bank or e-wallet provider, then report the online scam to the CICC 1326 hotline, PNP Anti-Cybercrime Group, or NBI Cybercrime Division. If it involved investments, crypto, forex, or promised profits, also report to the SEC through its iMessage portal. If your bank or e-wallet mishandles the complaint, escalate to BSP.

Can I still report if I voluntarily sent the money?

Yes. Many scam victims voluntarily sent money because they were deceived. In estafa, the issue is not simply whether you clicked “send,” but whether fraud or false pretenses induced you to part with your money.

Is a fake crypto trading platform reportable to the SEC?

Yes, if it solicited investments from the public, promised profits, offered trading returns, pooled funds, or operated like an investment scheme. Also report to cybercrime authorities because crypto-related scams often involve online fraud and fake identities.

Can the police or NBI freeze the scammer’s account immediately?

Not always. You should immediately report to the bank or e-wallet because they are usually the fastest channel for transaction dispute and possible temporary holding of funds. Law enforcement may support investigation and requests, but financial tracing and account action depend on legal process, institutional rules, and whether funds remain traceable.

What if the scammer used GCash, Maya, or a Philippine bank account?

Report to your own provider and identify the receiving account. Ask for a fraud case number. Also file a cybercrime complaint and include the wallet number, account name, transaction reference number, date, time, and amount. The recipient may be a money mule, but mule accounts are still important evidence.

What if the platform says I must pay tax before withdrawal?

Be very cautious. Legitimate taxes are generally paid through proper government channels, not through random personal accounts, e-wallets, crypto wallets, or “platform agents.” A demand for “tax” or “AML clearance” before withdrawal is a common scam tactic.

Do I need a notarized affidavit?

For an initial bank or hotline report, usually no. For a formal criminal complaint, sworn statements or affidavits are commonly required. The NBI process for computer crime complaints includes sworn statements or prepared affidavits as part of investigation documentation.

Can foreigners file a complaint in the Philippines?

Yes, if the scam has a Philippine connection, such as Philippine accounts, Philippine-based suspects, Philippine SIM cards, or damage connected to a person or financial account in the Philippines. Foreign complainants abroad may need properly executed or authenticated affidavits for formal proceedings.

How long does a withdrawal scam case take?

Urgent bank or e-wallet reporting should be done immediately. A financial institution may create a case quickly, but tracing and resolution vary. Cybercrime investigation may take weeks or months, especially if subpoenas, account records, platform data, or digital forensic work are needed. Prosecutor and court proceedings can take longer.

Is reporting enough to get my money back?

Reporting improves your chances, especially if done quickly, but it does not guarantee recovery. Money recovery depends on whether funds remain in traceable accounts, whether the receiving institution can hold them, whether suspects are identified, and whether civil or criminal remedies lead to restitution.

Key Takeaways

A withdrawal scam should be reported quickly because funds can move within minutes.
Stop paying additional “release,” “tax,” “AML,” “verification,” or “VIP” fees.
Report immediately to your bank or e-wallet and ask for a fraud case number.
Preserve full digital evidence: chats, receipts, URLs, usernames, wallet addresses, and withdrawal-denial screenshots.
File with NBI Cybercrime Division or PNP Anti-Cybercrime Group for online fraud investigation.
Report investment, crypto, forex, and trading scams to the SEC through its official complaint portal.
Escalate bank or e-wallet issues to BSP if the financial institution fails to address the complaint properly.
Estafa, cybercrime, investment fraud, and AFASA violations may overlap in one withdrawal scam.
Recovery is possible in some cases, but it is hardest when funds are withdrawn, converted to crypto, or sent abroad.
A clear timeline with documents is stronger than a vague complaint.