A suspicious online casino can involve several different problems at once: illegal gambling, a fake PAGCOR license, refusal to release winnings, identity theft, unauthorized bank transfers, or a physical gaming operation hidden behind a website. The correct response depends on what happened, but the safest approach is usually to preserve the evidence, verify the exact website address, report the site to PAGCOR, and immediately notify your bank or law enforcement if money or personal data is at risk.

Is Online Casino Gaming Legal in the Philippines?

Not every online gaming site operating in the Philippines is automatically illegal.

PAGCOR’s Electronic Gaming Licensing Department regulates authorized local offerings such as electronic casino games, electronic bingo, sports betting, online poker, specialty games, and numeric games. PAGCOR publishes lists of approved operators, registered brands, and—most importantly—their specific domain names and URLs on its Electronic Gaming Licensing Department page. The latest published lists should always be checked because operators, brands, and approved domains can change. (PAGCOR)

A site is not proven legitimate merely because it:

Displays the PAGCOR logo;
Claims to be “PAGCOR accredited”;
Shows a photograph of a license or certificate;
Is available through an app store;
Uses the name of a legitimate casino;
Has Filipino agents, endorsers, or customer-service representatives; or
Accepts GCash, Maya, bank transfers, or cryptocurrency.

The exact domain must appear on PAGCOR’s current official list. For example, an approved example.ph domain does not automatically authorize example-vip.com, example88.net, a Telegram mini-app, or a mirror link supplied by an agent.

Offshore gaming and POGOs are different from licensed local online gaming

Executive Order No. 74, issued in 2024, banned Philippine Offshore Gaming Operators, Internet Gaming Licensees, and other offshore gaming operations. Existing offshore operations were ordered to cease by December 31, 2024. The ban covers operations based in the Philippines that offer online gaming to foreign players abroad; it does not abolish every PAGCOR-regulated domestic electronic gaming platform. (Lawphil)

A website claiming that it currently holds a Philippine POGO or offshore gaming license should therefore be treated with serious caution and reported for verification.

Philippine Laws That May Apply

Several laws may apply to an illegal online casino or gaming scam, depending on the conduct involved.

PAGCOR Charter: Presidential Decree No. 1869 and Republic Act No. 9487

PAGCOR’s charter authorizes it to operate, license, and regulate casinos, gaming clubs, gaming pools, and similar activities within Philippine jurisdiction, except activities placed by law under another authorized regulator. PAGCOR’s regulatory authority is the primary reason suspected unlicensed online casinos should be reported to the agency.

Presidential Decree No. 1602

Presidential Decree No. 1602, commonly called the Anti-Illegal Gambling Law, penalizes unauthorized gambling activities and persons who participate in, maintain, finance, manage, or knowingly allow illegal gambling operations. (Lawphil)

Executive Order No. 13, series of 2017

Executive Order No. 13 strengthened enforcement against illegal gambling and clarified that a gambling activity becomes illegal when it operates without the required franchise, license, or permit, or beyond the territorial authority of the licensing body. It directs law-enforcement agencies to coordinate with gaming regulators in suppressing unauthorized operations. (Lawphil)

Cybercrime Prevention Act of 2012

Republic Act No. 10175 applies to cyber-specific offenses such as illegal access, identity theft, and computer-related fraud. Section 6 also covers crimes under the Revised Penal Code or special laws when committed through information and communications technology, with the corresponding cybercrime consequences. An online casino scam may therefore involve estafa under Article 315 of the Revised Penal Code in relation to RA 10175, apart from illegal gambling violations. (Lawphil)

Anti-Financial Account Scamming Act

Republic Act No. 12010, enacted in 2024, penalizes money-mule activities and social-engineering schemes involving bank accounts, e-wallets, and other financial accounts. It also permits covered financial institutions, under applicable BSP rules, to temporarily hold funds involved in disputed transactions for up to 30 calendar days unless a court extends the period. Speed is therefore critical when reporting a fraudulent deposit or withdrawal. (Lawphil)

Data Privacy Act of 2012

Republic Act No. 10173 may apply when a gaming site unlawfully collects, discloses, sells, or misuses identification documents, selfies, contact lists, financial information, or other personal data.

The Supreme Court has also emphasized that a game of chance is not necessarily illegal in every setting; legality depends on the governing law and proper authority. In Republic of the Philippines and the City of Baguio v. Association of Barangay Councils, G.R. No. 207118, April 22, 2025, the Court upheld barangay fundraising bingo under the particular powers involved in that case. The ruling is context-specific and does not authorize private online casino operators to operate without the required regulatory authority. (Supreme Court of the Philippines)

How to Report an Online Casino or Gaming Site

1. Stop sending money and secure your accounts

Do not make another deposit to “verify” that the site is fraudulent. Do not pay a supposed:

Withdrawal tax;
AMLC clearance fee;
Account-unfreezing charge;
VIP upgrade;
Insurance deposit;
Verification fee;
Turnover or wagering shortfall; or
Recovery-agent fee.

If you disclosed a password, PIN, card number, one-time password, authentication code, or identification document:

Change the affected passwords immediately.
Log out other devices and sessions.
Enable multi-factor authentication.
Call the bank or e-wallet’s fraud hotline.
Request the blocking of cards, accounts, or disputed transactions when appropriate.
Ask for a complaint or case-reference number.

Do not send passwords, PINs, OTPs, full card details, passports, or identification cards to someone claiming to process a complaint. BSP specifically warns consumers not to send these sensitive details when escalating complaints.

2. Record the exact website, app, and operator details

Capture more than the casino’s brand name. Record:

Full URL shown in the browser address bar;
Every mirror or alternative domain;
App-store link or Android package name;
QR code used to install the app;
Social-media profile and advertisement link;
Telegram, Viber, Messenger, or WhatsApp account;
Agent’s name, username, telephone number, and referral code;
Claimed company name and office address;
Claimed PAGCOR license number;
Betting-account username or player ID; and
Date and time you accessed the platform.

A common enforcement problem is that a complainant reports only a name such as “Lucky Casino” or “Bet88.” Fraudulent operators frequently reuse generic names, change domains, and create imitation pages. The exact URL allows PAGCOR and cybercrime investigators to identify the correct digital property.

3. Preserve evidence before confronting the operator

Save evidence in its original form whenever possible:

Screenshots showing the URL bar;
Screen recordings of the account, balance, and withdrawal error;
Deposit and withdrawal receipts;
Transaction-reference numbers;
Recipient bank or e-wallet details;
Account statements showing the disputed payment;
Chat exports and emails;
Terms and conditions shown when you registered;
Copies of advertisements and promotional promises;
Fake PAGCOR seals or certificates;
Notices demanding additional payment; and
Customer-service ticket numbers.

Keep a chronological list of events. State the date, amount, payment method, person contacted, promise made, and what happened next.

Avoid cropping or editing the only copy of a screenshot. Keep the original file because its metadata and complete context may later help establish authenticity.

4. Check PAGCOR’s official domain lists

Open PAGCOR’s Electronic Gaming Licensing Department page and review:

The list of PAGCOR-accredited gaming system administrators and registered brands and URLs;
The list of registered brands and URLs of licensed casinos; and
Other current licensing notices relevant to the game offered.

Compare the domain character by character. Watch for:

Extra hyphens or numbers;
Misspellings;
Different domain endings;
Added words such as “VIP,” “PH,” “official,” or “casino”;
Links shortened through URL services;
Subdomains belonging to an unrelated main domain; and
Apps downloaded outside the operator’s registered website.

Absence from the list is a strong reason to seek verification, although PAGCOR should make the final regulatory determination.

5. Report the site to PAGCOR

PAGCOR is the appropriate first regulatory agency for questions about whether a casino, gaming platform, brand, or domain is authorized.

You may use the PAGCOR regulatory contact page, email info@pagcor.ph, or send electronic-gaming concerns to egaming_policy@pagcor.ph. PAGCOR’s published trunk lines are (02) 8521-1542 and (02) 8522-0299. (PAGCOR)

Use a clear subject line such as:

Report of Suspected Illegal Online Gaming Site – example-domain.com – 10 July 2026

Your report should contain:

Your name and reliable contact details;
The exact domain, app, or social-media page;
The name used by the operator or agent;
Why you believe the operation is illegal or noncompliant;
A short chronological account;
The amount involved, if any;
Payment channels and transaction references;
Copies of relevant evidence;
Any claimed PAGCOR license or certificate; and
The action requested, such as license verification, investigation, or referral.

If the operator appears licensed but refuses to resolve a withdrawal, account, exclusion, or responsible-gaming complaint, first obtain a written ticket from the operator and attach it to your PAGCOR submission. PAGCOR’s Responsible Gaming Code requires licensees to maintain gambling-related complaint mechanisms through telephone and online channels and to record gambling-related incidents and the action taken.

6. Make a parallel cybercrime report when fraud is involved

Do not wait for PAGCOR’s licensing determination when money has been stolen, your identity has been misused, or the operator is threatening you.

Agency	Best used for	Current reporting channel
Cybercrime Investigation and Coordinating Center	Online scams, phishing, fraudulent gaming links, referral to appropriate cybercrime authorities	Hotline 1326 or `report@cicc.gov.ph`
PNP Anti-Cybercrime Group	Criminal investigation, urgent online fraud, identification of operators or account holders	`acg@pnp.gov.ph`; `(0998) 598-8116`; `(02) 8414-1560`
NBI Cybercrime Division	Complex, organized, cross-border, high-value, or evidence-heavy cybercrime complaints	`ccd@nbi.gov.ph` or personal filing at the NBI Cybercrime Division
Local police station	Immediate threats, coercion, physical agents, local offices, or identifiable suspects	File at the nearest police station and request a complaint reference or blotter entry

These contact details are also listed in BSP’s official consumer complaint guidance.

The NBI’s Citizen’s Charter states that computer-crime investigative assistance is available to the general public without a filing fee. The listed initial intake process includes a complaint sheet, preliminary interview, sworn statement or affidavit, evidence collection, and internal authority to investigate. Its stated service time of about one hour and ten minutes refers only to the initial intake process—not the full investigation, identification of suspects, filing of charges, or recovery of money. (National Bureau of Investigation)

7. Notify the bank or e-wallet immediately

Report the transaction to the sending bank, card issuer, payment provider, or e-wallet before waiting for any government agency.

Give the institution:

Transaction date and time;
Amount;
Reference number;
Recipient account or wallet;
Reason the transaction is disputed;
Police, CICC, NBI, or PAGCOR reference number, if already available; and
A request to preserve records, flag the recipient account, and attempt recall or temporary holding where legally available.

If the financial institution does not adequately address the complaint, escalate it through the BSP Consumer Assistance Mechanism. BSP requires consumers to complain first through the institution’s Financial Consumer Protection Assistance Mechanism. Unresolved complaints may then be escalated through the BSP Online Buddy chatbot or by submitting the prescribed form to consumeraffairs@bsp.gov.ph.

Reporting quickly does not guarantee recovery. Funds may already have been transferred through several accounts, withdrawn as cash, converted to cryptocurrency, or sent abroad.

8. Use additional agencies when the conduct goes beyond gambling

Report to the appropriate additional agency when necessary:

National Privacy Commission: When identification documents, selfies, contacts, financial data, or other personal information were collected or disclosed unlawfully. A formal NPC complaint uses the prescribed form, must generally be notarized, and may be filed personally, by courier, or through the official submission channel described on the NPC complaint page. (National Privacy Commission)
Securities and Exchange Commission: When the platform offers “casino investments,” profit-sharing, guaranteed daily returns, staking, franchises, agent packages, or commissions for recruiting investors. Complaints may be submitted through the SEC iMessage portal. An SEC company registration by itself is not a PAGCOR gaming license. (Securities and Exchange Commission)
Social-media or advertising platform: Report the advertisement, page, account, or app after preserving evidence. Platform removal can reduce further victimization, but it does not replace a government report.

Documents and Evidence to Prepare

Document or evidence	Why it helps
Government-issued ID	Confirms the complainant’s identity for formal investigation
One-page chronology	Allows the officer to understand the case quickly
Full URLs and app links	Distinguishes the actual site from similarly named platforms
Screenshots and recordings	Shows representations, balances, errors, and demands
Transaction receipts	Connects the loss to specific recipient accounts
Bank or e-wallet statement	Confirms the movement of funds
Chat and email exports	Identifies agents and proves promises or demands
Operator complaint ticket	Shows that a licensed operator was given an opportunity to respond
Claimed license or PAGCOR certificate	Helps PAGCOR determine whether the document is genuine
Sworn affidavit	May be required for a formal criminal investigation or prosecution

An initial email tip to PAGCOR or a call to CICC usually does not require notarization. A formal criminal complaint may require a sworn statement. The investigating officer will tell you whether a notarized affidavit, original device, certified records, or additional identification is needed.

Reporting From Abroad or as a Foreigner

A foreign national, overseas Filipino worker, or victim living abroad can begin by emailing PAGCOR, CICC, PNP-ACG, or NBI-CCD. Include:

Your country and time zone;
A copy of the identification page of your passport only when legitimately requested;
A Philippine telephone number or contact person, if available;
The location of the operator, agent, bank, or victim;
Transaction records showing the Philippine payment destination; and
A secure email address for follow-up.

Do not delay an urgent bank report while arranging notarization or authentication. If a formal affidavit executed abroad becomes necessary, ask the assigned investigator or prosecutor what form of notarization, consular authentication, apostille, translation, or personal appearance will be accepted. Requirements can depend on the country of execution and the stage of the case.

Typical Fees and Timelines

Process	Filing fee	Practical timeline
PAGCOR tip or regulatory email	None ordinarily charged	Acknowledgment varies; regulatory verification may take days or longer
CICC hotline report	None	Initial intake may be immediate; referral and investigation vary
PNP cybercrime complaint	None	Initial complaint may be accepted the same day
NBI Cybercrime Division intake	None under its Citizen’s Charter	About 1 hour and 10 minutes for listed intake steps; investigation may take weeks or months
Bank or e-wallet fraud report	None	File immediately; tracing and recall depend on whether funds remain available
BSP escalation	None	Response time varies with case volume and the institution’s reply
NPC formal complaint	Check the current NPC schedule	Requires the prescribed, generally notarized complaint form

There is no single statutory completion period for an online casino investigation. Domain ownership may be hidden, servers may be overseas, payment accounts may belong to money mules, and operators may change websites while the case is pending.

Common Mistakes That Weaken a Report

Reporting only the casino name

Always provide the exact URL, app link, account, advertisement, and payment details.

Waiting for PAGCOR before contacting the bank

PAGCOR determines regulatory issues. It does not replace the bank’s fraud process or a criminal investigation.

Assuming a PAGCOR logo proves authorization

Logos and certificates are easily copied. Compare the exact domain against PAGCOR’s current official list.

Assuming SEC registration makes the casino legal

SEC registration establishes corporate existence. It does not grant authority to conduct gambling or solicit investments.

Continuing to deposit money to unlock a withdrawal

Repeated fees are a common scam pattern. Stop payments and report the recipient account immediately.

Deleting chats after blocking the agent

Export and preserve the conversation first. The chat may contain account numbers, usernames, admissions, and instructions linking participants to the operation.

Hiring an online “fund recovery” agent

Fraud victims are frequently targeted again by persons claiming they can recover funds through PAGCOR, AMLC, Interpol, the courts, or a cryptocurrency tracing service. Verify any lawyer through the Supreme Court’s official Lawyer’s List and never disclose OTPs or pay into another personal account without independently confirming the arrangement.

Posting unverified accusations instead of filing a report

Public warnings should remain factual. Avoid publishing private information or making accusations that cannot be supported. Send the complete evidence to regulators and investigators.

Frequently Asked Questions

Can I report an online casino anonymously?

You may send information without publicly identifying yourself, but an anonymous report can be difficult to investigate if authorities cannot clarify facts or authenticate evidence. Refund requests, formal criminal complaints, and sworn statements generally require the complainant’s identity.

How can I check whether an online casino is PAGCOR licensed?

Check the exact domain against the current registered brand and URL lists on PAGCOR’s Electronic Gaming Licensing Department page. Do not rely on the site’s logo, certificate, app name, or agent’s statement.

What should I do if a casino refuses to release my winnings?

Save the balance, withdrawal request, terms, customer-service responses, and any demand for additional payment. If the site is licensed, submit a written complaint to the operator and then escalate the unresolved matter to PAGCOR. If the site appears fraudulent or unlicensed, report it simultaneously to PAGCOR, your payment provider, and a cybercrime agency.

Can PAGCOR recover my money?

PAGCOR can investigate regulatory violations and act against licensees, but reporting does not guarantee reimbursement. Recovery may depend on the operator’s status, available funds, bank tracing, contractual records, and criminal or civil proceedings.

Should I report the site to the barangay?

A barangay may document local information or assist when agents, offices, computers, or employees are physically located in the area. For an internet-based operation, however, PAGCOR, PNP-ACG, NBI-CCD, and CICC are more directly relevant. Do not confront a suspected gaming hub personally.

Can I report a casino advertisement or influencer?

Yes. Save the advertisement, posting date, account name, referral link, promo code, and video before it is deleted. Report the underlying site to PAGCOR and the advertisement to the platform. Include evidence showing whether the promotion targets minors, promises guaranteed income, or directs users to an unregistered domain.

Will I get in trouble because I already played on the site?

Participation in unauthorized gambling can carry legal risk, but the facts matter. A victim who deposited money is not automatically treated the same as an operator, recruiter, financier, or agent. Tell the truth, preserve the records, and do not destroy or fabricate evidence. Anyone who actively recruited players, handled accounts, operated payment channels, or earned commissions should obtain legal guidance before executing a detailed sworn statement.

How long does an investigation take?

Initial intake may happen the same day, but a full investigation may take weeks or months. Delays commonly involve obtaining bank records, identifying money-mule accounts, preserving platform data, tracing foreign servers, and securing cybercrime warrants.

Can an online casino be legal if its company is based abroad?

A foreign license does not automatically authorize the operator to offer gambling in the Philippines or claim Philippine regulatory approval. Report the exact domain to PAGCOR for determination, especially when the site accepts Philippine players, uses local agents, or processes payments through Philippine accounts.

Key Takeaways

Verify the exact domain, not merely the casino’s brand or PAGCOR logo.
Local PAGCOR-regulated online gaming still exists, but Philippine offshore gaming operations were ordered to cease by December 31, 2024.
Report suspected unlicensed sites and regulatory violations to PAGCOR.
Report fraud, threats, identity theft, or stolen funds separately to CICC, PNP-ACG, or NBI-CCD.
Contact the bank or e-wallet immediately; do not wait for a regulatory investigation.
Preserve full URLs, chats, advertisements, transaction references, and original screenshots.
Never pay an additional “tax,” “clearance,” “unlock,” or recovery fee to release money.
PAGCOR, cybercrime authorities, financial institutions, the NPC, and the SEC have different roles, so parallel reports may be necessary.