I. Introduction

An advance fee loan scam is a fraudulent lending scheme where a person or entity promises to release a loan but first requires the borrower to pay money upfront. The payment may be described as a “processing fee,” “insurance fee,” “release fee,” “activation fee,” “collateral fee,” “tax,” “notarial fee,” “guarantee fee,” “anti-money laundering clearance,” or similar charge. After the victim pays, the supposed lender either disappears, demands more money, blocks the victim, or refuses to release the promised loan.

In the Philippine context, advance fee loan scams are commonly committed through Facebook pages, Messenger, Telegram, Viber, text messages, online lending advertisements, fake websites, fake company profiles, and impostor accounts pretending to be banks, financing companies, cooperatives, government agencies, or private lenders.

Victims may report the scam through several channels, depending on the facts: the Philippine National Police Anti-Cybercrime Group, the National Bureau of Investigation Cybercrime Division, the Securities and Exchange Commission, the Bangko Sentral ng Pilipinas, the Department of Trade and Industry, the National Privacy Commission, the lending platform or bank involved, and the victim’s own bank or e-wallet provider.

The correct reporting route depends on whether the scam involved a registered lending company, an unregistered lender, a bank or e-wallet account, identity theft, harassment, data privacy abuse, forged documents, or cyber-enabled fraud.

II. What Is an Advance Fee Loan Scam?

An advance fee loan scam occurs when a scammer induces a borrower to pay money in advance by falsely promising loan approval or loan release.

The usual pattern is:

the scammer advertises “easy loans,” “no collateral,” “no credit check,” or “guaranteed approval”;
the victim applies and submits personal information;
the scammer says the loan is approved;
the scammer asks for an upfront payment before release;
the victim pays through bank transfer, e-wallet, remittance center, cryptocurrency, or payment app;
the scammer invents more fees or disappears;
no loan is released.

The fraud lies in the false representation that the payment is necessary for a legitimate loan that will actually be released.

III. Common Forms of Advance Fee Loan Scams

1. Fake Processing Fee Scam

The scammer says the loan has been approved but requires a processing fee before release. After payment, the scammer demands another fee or blocks the victim.

2. Insurance Fee Scam

The scammer claims the borrower must pay insurance so the loan can be released. The fee is usually fake and not connected to any legitimate insurance provider.

3. Bank Release Fee Scam

The scammer claims that the loan is already in a bank account but needs a “release code,” “transfer fee,” or “bank clearance fee.”

4. Anti-Money Laundering Clearance Scam

The scammer falsely claims the borrower must pay a fee to satisfy anti-money laundering requirements. Legitimate AML compliance does not work this way.

5. Government Loan Impersonation

The scammer pretends to represent a government loan program, public assistance program, cooperative, or livelihood fund.

6. Fake Online Lending App Scam

A fake app or website collects personal data and asks for payment before loan release.

7. Social Media Loan Agent Scam

A person claiming to be a loan agent asks the victim to send money to a personal GCash, Maya, bank, or remittance account.

8. Company Impersonation Scam

The scammer uses the name, logo, certificate, or business permit of a real lending company, bank, or financing company without authority.

9. Document Fee Scam

The scammer says the borrower must pay for notarization, stamps, contract preparation, legal fees, or verification before the loan can be released.

10. Repeated Fee or “Layered” Scam

After the first payment, the scammer claims there is another problem: wrong account number, frozen funds, verification failure, tax, penalty, insurance, or compliance issue. Each “problem” requires another payment.

IV. Legal Character of the Scam

An advance fee loan scam may involve several violations of Philippine law.

A. Estafa under the Revised Penal Code

The most common criminal theory is estafa, particularly where the scammer used deceit to obtain money from the victim.

The essential idea is that the victim was induced to part with money because of false representations, such as:

the loan was approved;
the lender was legitimate;
the upfront fee was required;
the loan would be released after payment;
the person had authority to lend or process the loan.

If the promise was fraudulent from the beginning, the case may be treated as estafa.

B. Cybercrime-Related Estafa

If the scam was committed through the internet, social media, messaging apps, email, online platforms, or other computer systems, it may be treated as a cybercrime-related offense. This is important because many advance fee loan scams are conducted entirely online.

Cyber-enabled estafa may carry higher penalties than ordinary estafa because information and communications technology was used to commit the fraud.

C. Illegal Lending or Unauthorized Lending Activity

If the supposed lender is not registered or authorized to engage in lending or financing business, the matter may also involve violations of rules governing lending companies, financing companies, or similar entities.

A person cannot simply operate a lending business using social media without the legal authority required by Philippine law.

D. False Advertising and Deceptive Practices

Where the scam involves misleading advertisements, fake loan approvals, hidden charges, or deceptive representations to consumers, the matter may also involve consumer protection concerns.

E. Identity Theft

If the scammer used another person’s name, fake IDs, stolen company certificates, or impersonated a real employee, bank, lender, or government agency, identity theft or falsification issues may arise.

F. Data Privacy Violations

If the victim submitted IDs, selfies, contact lists, employment details, bank information, or other personal data, and the scammer misused that information, the incident may also involve data privacy concerns.

G. Harassment and Unfair Debt Collection

Some fraudulent lenders not only steal advance fees but also threaten, shame, or harass victims. If the scammer uses the victim’s personal data to contact family, employers, or friends, additional legal issues may arise.

V. Immediate Steps for Victims

A victim should act quickly. Delay can make fund recovery and account tracing more difficult.

1. Stop Paying

Do not send additional payments. Scammers often create urgency and say that the previous payment will be forfeited unless another fee is paid. This is usually part of the fraud.

2. Preserve Evidence

Do not delete messages, screenshots, emails, receipts, call logs, account names, or transaction confirmations.

Important evidence includes:

screenshots of advertisements;
Facebook page or profile links;
Messenger, Viber, Telegram, WhatsApp, SMS, or email conversations;
loan application forms;
fake certificates, IDs, permits, or contracts sent by the scammer;
payment receipts;
GCash, Maya, bank, or remittance transaction details;
account names, numbers, mobile numbers, and QR codes used;
voice recordings, if lawfully obtained;
call logs;
URLs, website links, app links, and email addresses;
names of persons who communicated with the victim;
dates and times of each communication and payment.

Screenshots should show the profile name, username, number, date, time, and full conversation thread whenever possible.

3. Contact the Bank or E-Wallet Provider Immediately

If payment was sent through a bank, GCash, Maya, Coins.ph, remittance service, or other provider, report the transaction immediately and request:

account freezing, if still possible;
fraud investigation;
transaction dispute or recall, if available;
preservation of transaction records;
blocking of the recipient account.

Victims should understand that fund recovery is not guaranteed, especially if the scammer has already withdrawn or transferred the money. However, quick reporting improves the chance of tracing and possible freezing.

4. Report to Law Enforcement

If the scam involved online communications, social media, messaging apps, websites, emails, or digital payments, report to cybercrime authorities.

The two principal law enforcement options are:

PNP Anti-Cybercrime Group; and
NBI Cybercrime Division.

Victims may also report to the local police station, especially if they need a blotter, but cybercrime offices are usually more appropriate for online loan scams.

5. Report to the SEC if a Lending Company Is Involved

If the scammer claims to be a lending company, financing company, online lending app, investment group, or loan provider, report the matter to the Securities and Exchange Commission.

The SEC is relevant where the issue involves:

unauthorized lending;
fake lending company;
misuse of a registered company’s name;
abusive online lending app;
deceptive loan advertisements;
fake certificates of registration;
investment-lending hybrid scams;
lending company violations.

6. Report to BSP if a Bank, E-Wallet, or Financial Institution Is Involved

The Bangko Sentral ng Pilipinas may be relevant if the complaint involves a BSP-supervised financial institution, such as a bank, e-money issuer, or other covered financial service provider.

However, BSP usually handles the conduct of regulated institutions. The criminal fraud itself should still be reported to law enforcement.

7. Report Data Privacy Misuse to the NPC

If the scammer collected or misused personal data, or threatened to expose the victim’s identity, contacts, photos, IDs, or loan application information, the matter may be reported to the National Privacy Commission.

This is especially relevant where:

the victim’s ID was misused;
the scammer created fake accounts using the victim’s identity;
personal data was disclosed to third parties;
contacts were harvested;
threats of public shaming were made;
the victim’s personal information was used for another scam.

VI. Where to Report an Advance Fee Loan Scam

A. PNP Anti-Cybercrime Group

The PNP Anti-Cybercrime Group is a primary reporting venue for online scams. A complaint may be filed when the scam occurred through Facebook, Messenger, text, email, Telegram, Viber, fake websites, online lending apps, or electronic transfers.

The complainant should bring:

government-issued ID;
written complaint-affidavit, if available;
screenshots of conversations;
payment receipts;
account details of the scammer;
links to social media profiles or pages;
phone numbers and email addresses used;
any fake contracts or documents;
timeline of events.

B. NBI Cybercrime Division

The NBI Cybercrime Division also receives cybercrime complaints. Victims may file a complaint for online fraud, cyber estafa, identity theft, phishing, or related offenses.

The NBI may require a complaint-affidavit and supporting evidence. The victim should be ready to identify the platforms used, the transaction details, and the persons or accounts involved.

C. Local Police Station

A local police station may record the incident in the police blotter and may refer the case to the appropriate cybercrime unit. A blotter is useful as a record, but it is not the same as a full criminal investigation or prosecution.

D. City or Provincial Prosecutor’s Office

A victim may eventually file a criminal complaint with the prosecutor’s office for preliminary investigation. This is usually done after preparing a complaint-affidavit and supporting evidence.

For cyber-enabled scams, law enforcement investigation may help identify account holders, obtain records, and support the criminal complaint.

E. Securities and Exchange Commission

The SEC is important if the supposed lender is a lending company, financing company, online lending platform, or business entity.

The SEC can be asked to verify whether the entity is registered or authorized to lend. It may also receive complaints involving abusive, deceptive, or unauthorized lending practices.

F. Bangko Sentral ng Pilipinas

The BSP is relevant if the complaint concerns a bank, e-wallet, remittance company, or other BSP-regulated financial institution. A victim may complain about the failure of a regulated institution to act properly on a fraud report, failure to handle a dispute, or issues involving account misuse.

G. National Privacy Commission

The NPC is relevant when the scam includes misuse of personal information, unauthorized processing of personal data, identity theft, public shaming, contact list harvesting, or threats involving personal data.

H. Platform Reporting

Victims should also report the scam account, page, group, app, advertisement, or post to the platform used, such as Facebook, Messenger, Telegram, Viber, WhatsApp, TikTok, Instagram, Google, Apple App Store, or a website host.

Platform reporting does not replace legal reporting, but it may help remove the scam and preserve or flag abusive accounts.

VII. Evidence Checklist

A strong complaint should contain organized evidence. The victim should prepare a folder, printed copies, and digital copies.

A. Identity and Contact Information of the Victim

Include:

full name;
address;
contact number;
email address;
valid government ID.

B. Timeline of Events

The timeline should state:

when the victim saw the loan offer;
where the offer appeared;
who contacted the victim;
what was promised;
what documents were submitted;
what payment was requested;
when payment was made;
what happened after payment;
whether additional fees were demanded;
when the scammer stopped responding.

C. Proof of Deceit

Include screenshots showing:

loan approval claims;
promises of release after payment;
fake company claims;
use of official-looking names or logos;
instructions to pay;
repeated demands for fees;
refusal or failure to release the loan.

D. Proof of Payment

Include:

transaction receipt;
reference number;
sender account;
recipient account;
account name;
mobile number;
amount;
date and time;
payment channel.

E. Digital Identifiers

Include:

profile URLs;
usernames;
email addresses;
mobile numbers;
QR codes;
app names;
website URLs;
IP-related information, if available;
group names;
page names.

F. Documents Sent by the Scammer

Include:

fake contracts;
fake approvals;
fake receipts;
fake IDs;
fake business permits;
fake SEC certificates;
fake bank notices;
fake insurance forms;
fake notarial documents.

VIII. Complaint-Affidavit

For criminal proceedings, a victim will usually need a complaint-affidavit. This is a sworn written statement narrating the facts and attaching evidence.

A complaint-affidavit should contain:

the complainant’s identity;
the respondent’s identity, if known;
the facts in chronological order;
the representations made by the scammer;
the reason the victim believed the scammer;
the amount paid;
proof of payment;
how the scammer failed to release the loan;
damages suffered;
request for investigation and prosecution.

If the real identity of the scammer is unknown, the complaint may initially identify the respondent by account name, mobile number, bank account, e-wallet account, page name, email address, or “John/Jane Doe,” subject to further investigation.

IX. Sample Structure of a Complaint-Affidavit

A complaint-affidavit may follow this structure:

title and venue;
personal circumstances of the complainant;
statement that the affidavit is being executed to file a complaint for online fraud, estafa, cybercrime-related estafa, identity theft, or other applicable offenses;
factual narration;
table of payments made;
list of evidence;
statement of loss and damages;
request for investigation and prosecution;
verification and oath before a notary or authorized officer.

The affidavit should be truthful, specific, and supported by attachments.

X. Civil Remedies

Aside from criminal remedies, a victim may consider civil remedies to recover money.

Possible civil claims include:

recovery of sum of money;
damages;
attorney’s fees, where legally justified;
restitution as part of the criminal case;
small claims action, if the respondent’s identity and address are known and the claim qualifies.

However, civil recovery may be difficult if the scammer used fake identity, mule accounts, or immediately withdrew the funds.

XI. Bank and E-Wallet Recovery Issues

A common question is whether the victim can recover money from the bank or e-wallet provider.

The answer depends on the facts. If the victim voluntarily sent money to the scammer, reversal may be difficult unless the funds remain in the recipient account or the provider can freeze the account quickly. The provider may not simply return money without legal basis, internal investigation, consent, or order.

The victim should nevertheless immediately request:

transaction investigation;
temporary hold or freezing, if available;
preservation of records;
recipient account details for law enforcement, subject to privacy and banking rules;
written acknowledgment of the fraud report.

Banks and e-wallet providers may require a police report, notarized complaint, affidavit, or law enforcement request before disclosing account information.

XII. Mule Accounts

Many advance fee loan scams use mule accounts. A mule account is a bank, e-wallet, or remittance account used to receive scam proceeds. The registered account holder may be:

the scammer;
an accomplice;
a paid account seller;
a recruited person;
a person whose identity was stolen;
someone who allowed another person to use the account.

The account name on the receipt is important evidence, but it does not always prove that the named person is the mastermind. Investigation is needed to determine the role of the account holder.

XIII. If the Scammer Used a Real Company’s Name

Sometimes scammers impersonate legitimate banks, lending companies, cooperatives, or government programs.

In that case, the victim should:

contact the real company through official channels;
ask whether the person or page is authorized;
request confirmation that the account is fake;
report the impersonation to law enforcement;
report the fake page or account to the platform;
include the real company’s denial or warning in the complaint, if available.

A legitimate company generally will not ask borrowers to pay personal accounts through informal channels before releasing a loan.

XIV. If the Victim Submitted IDs or Personal Data

Victims often submit:

driver’s license;
passport;
UMID;
PhilSys ID;
SSS, GSIS, Pag-IBIG, or PhilHealth information;
employment certificate;
payslip;
bank statement;
selfie with ID;
proof of billing;
contact list;
family information.

If this happened, the victim should take additional protective steps:

monitor bank and e-wallet accounts;
change passwords;
enable two-factor authentication;
notify banks if sensitive information was shared;
report possible identity theft;
watch for unauthorized loans or accounts;
report fake accounts using the victim’s identity;
consider filing a data privacy complaint if personal data is misused.

XV. If the Scammer Threatens the Victim

Some scammers threaten victims after payment. They may say:

the victim will be arrested for not completing the loan;
the victim committed money laundering;
the victim’s ID will be posted online;
the victim’s employer will be contacted;
the victim’s contacts will be messaged;
the victim must pay a penalty;
the victim’s bank account will be frozen.

These threats are often intimidation tactics. A borrower is not criminally liable simply because they refused to pay another fake fee. Victims should preserve threats as evidence and report them.

If the scammer threatens physical harm, extortion, or public shaming, the victim should report immediately to law enforcement.

XVI. Red Flags of an Advance Fee Loan Scam

A loan offer is suspicious if:

approval is guaranteed;
no credit check is required;
the lender refuses to disclose a verifiable office address;
payment must be made to a personal account;
the lender uses only social media or messaging apps;
the page was recently created;
the lender sends fake-looking certificates;
the loan requires payment before release;
the lender pressures the borrower to act immediately;
the lender uses poor grammar but official-looking logos;
the lender refuses video calls or office visits;
the lender asks for OTPs or passwords;
the lender asks for repeated fees;
the lender threatens arrest for nonpayment of fees;
the account name does not match the company name.

XVII. Can a Lender Charge Fees Before Releasing a Loan?

Legitimate financial institutions may charge lawful fees, but the manner, timing, disclosure, and recipient matter.

A legitimate lender should clearly disclose fees in the loan documents and should not require borrowers to send unexplained payments to personal accounts as a condition for release. In many legitimate lending arrangements, processing charges may be deducted from loan proceeds or paid through official channels, not through informal transfers to random individuals.

The mere use of the phrase “processing fee” does not make a transaction legitimate. The key questions are:

Is the lender authorized?
Is the fee disclosed in writing?
Is the payment made to the official company account?
Is there a real loan agreement?
Is the person collecting authorized?
Is the charge lawful and reasonable?
Is the loan actually released?

XVIII. Reporting to the SEC

A complaint to the SEC should include:

name of the lending company or app;
screenshots of advertisements;
SEC registration number shown by the scammer, if any;
loan offer details;
payment demands;
proof of payment;
identity of the agent or page;
explanation of why the transaction appears fraudulent;
evidence of impersonation, if applicable.

The SEC complaint is especially important if the scam involves an entity holding itself out as a lending company. The SEC may determine whether the entity is registered, whether it has authority to operate as a lending or financing company, or whether it is using deceptive practices.

XIX. Reporting to PNP or NBI

When filing with PNP or NBI, the victim should bring both printed and digital evidence.

The complaint should emphasize:

the scam was committed online;
the victim was deceived by a loan offer;
the victim paid money because of the promise of loan release;
the loan was never released;
the scammer demanded additional fees or disappeared;
the transaction involved specific accounts and digital identifiers.

The victim should request investigation for possible estafa, cybercrime-related estafa, identity theft, unauthorized access, computer-related fraud, or other applicable offenses depending on the facts.

XX. Prosecutor’s Complaint

To pursue a criminal case, the complaint may be filed with the prosecutor’s office after evidence is prepared. The prosecutor determines whether probable cause exists.

The complaint should attach:

complaint-affidavit;
screenshots;
payment receipts;
bank or e-wallet reports;
police or cybercrime report;
identity documents;
certifications from platforms or institutions, if available;
witness affidavits, if any.

If the respondent’s real identity is unknown, law enforcement assistance may be needed before a formal complaint against a named person can proceed effectively.

XXI. If the Victim Is Abroad

A Filipino or foreign victim outside the Philippines may still preserve evidence and report through:

Philippine law enforcement cybercrime channels;
the Philippine embassy or consulate for guidance;
the victim’s bank or payment provider;
the platform used;
a Philippine lawyer or authorized representative;
local law enforcement in the victim’s country, if money was sent from abroad.

If a complaint-affidavit is needed, the victim may execute it before a Philippine consular officer or through a form acceptable for use in the Philippines.

XXII. If the Scam Is Ongoing

If the scammer is still communicating, the victim should not threaten or alert the scammer prematurely if law enforcement may still trace the transaction. The victim should preserve messages and promptly consult law enforcement.

However, the victim should not send more money merely to keep the scammer engaged. Any engagement should be safe, documented, and preferably guided by law enforcement.

XXIII. Reporting the Advertisement or Social Media Page

Victims should report the page, profile, ad, group, or app to the platform. The report should identify it as:

scam;
fraud;
impersonation;
fake financial service;
phishing;
misuse of personal information.

The victim should take screenshots before reporting because the page may later be removed and evidence may be lost.

XXIV. What Not to Do

Victims should avoid:

sending more money;
deleting messages;
confronting the scammer without preserving evidence;
posting accusations without proof;
sharing personal information publicly;
giving OTPs, passwords, or account access;
paying “recovery agents” who promise to get the money back;
relying on fixers;
filing false statements;
ignoring identity theft risks.

Recovery scams are common after loan scams. A second scammer may pretend to be a lawyer, police officer, hacker, bank insider, or investigator who can recover funds for a fee.

XXV. Possible Charges Against the Scammer

Depending on the evidence, possible charges may include:

estafa;
cybercrime-related estafa;
computer-related fraud;
identity theft;
falsification;
use of fictitious name;
unauthorized lending activity;
threats or coercion;
unjust vexation, where applicable;
data privacy violations;
violations of lending company or financing company regulations.

The exact charge should be determined by the prosecutor or investigating authority based on the facts.

XXVI. Practical Reporting Package

A victim should prepare the following package:

one-page summary of the incident;
detailed timeline;
complaint-affidavit;
copy of valid ID;
screenshots of the loan offer;
screenshots of all conversations;
screenshots of profile/page/account details;
copies of fake documents sent;
proof of payment;
bank or e-wallet fraud report acknowledgment;
list of account numbers, mobile numbers, names, and links;
evidence of threats or harassment;
proof of identity misuse, if any;
printed copies and USB or digital folder.

The evidence should be arranged chronologically.

XXVII. Sample Incident Summary

An incident summary may read as follows:

On [date], I saw an online loan advertisement on [platform]. I contacted the account named [name/account]. The person represented that I was approved for a loan of ₱[amount], but before release I had to pay ₱[amount] as [processing/insurance/release] fee. Relying on this representation, I transferred ₱[amount] to [bank/e-wallet/account name/account number] on [date/time]. After payment, the person demanded additional fees and failed to release the loan. I later realized that the loan offer was fraudulent. I am filing this complaint for investigation and appropriate legal action.

This summary should be supported by full evidence and a sworn affidavit.

XXVIII. Prevention Tips

Borrowers should verify before applying for any loan.

Before sending money or documents, check:

whether the lender is registered and authorized;
whether the website or page is official;
whether the phone number and email match official channels;
whether the payment account is in the company’s name;
whether the loan agreement is real and complete;
whether fees are disclosed;
whether the agent is authorized;
whether the company has a physical office;
whether the offer is too good to be true;
whether the lender demands upfront payment before release.

A legitimate lender should not require payment to a random personal account before releasing a supposed approved loan.

XXIX. Frequently Asked Questions

1. Is paying a processing fee always illegal?

Not necessarily. Some legitimate financial institutions charge fees. The problem arises when the fee is deceptive, unauthorized, undisclosed, paid to a personal account, or used as a device to steal money without releasing any loan.

2. Can I recover my money?

Possibly, but recovery is not guaranteed. Immediate reporting to the bank or e-wallet provider gives the best chance of freezing funds. If the money has already been withdrawn or transferred, recovery may require criminal investigation or civil action.

3. Should I file with PNP or NBI?

For online scams, either may be appropriate. The PNP Anti-Cybercrime Group and NBI Cybercrime Division both handle cyber-enabled fraud. The choice may depend on accessibility, urgency, and local availability.

4. Should I also report to SEC?

Yes, if the scammer pretended to be a lending company, financing company, online lending app, investment lender, or loan provider.

5. Should I report to BSP?

Yes, if the complaint involves a bank, e-wallet, remittance company, or other financial institution, especially for fraud reporting, account freezing, or dispute handling. Criminal liability should still be reported to law enforcement.

6. What if I only know the scammer’s GCash number or bank account?

That information is still useful. Law enforcement may use the account details to request information through proper legal channels.

7. What if the account holder says their account was only borrowed?

That is a matter for investigation. The account holder may be a mule, accomplice, negligent participant, or identity theft victim. Provide the information to authorities.

8. Can the scammer have me arrested for not paying more fees?

A victim is not criminally liable merely for refusing to pay additional fake fees. Threats of arrest are often part of the scam.

9. What if I sent my ID and selfie?

Treat it as an identity theft risk. Monitor accounts, change passwords, notify financial institutions, preserve evidence, and report misuse.

10. Do I need a lawyer?

A lawyer is not always required to make an initial report, but legal assistance is helpful when preparing a complaint-affidavit, filing with the prosecutor, recovering money, or dealing with identity theft and data privacy issues.

XXX. Conclusion

An advance fee loan scam in the Philippines is not merely a failed loan transaction. It may constitute estafa, cybercrime-related fraud, unauthorized lending, identity theft, data privacy abuse, or related offenses. The victim should stop paying, preserve evidence, immediately notify the bank or e-wallet provider, and report the incident to the proper authorities.

The strongest complaint is one that clearly shows the false loan promise, the upfront fee demand, the victim’s reliance, the payment made, and the failure to release the loan. Victims should report promptly, organize their evidence, and avoid further engagement that could lead to additional losses.

In practical terms, the best approach is usually simultaneous action: report to the payment provider for possible freezing, report to cybercrime authorities for investigation, report to the SEC if a lending company or fake lender is involved, report to the BSP if a regulated financial institution is implicated, and report to the NPC if personal data was misused.