An online gambling scam can move your money through several bank, e-wallet, or cryptocurrency accounts within minutes. Act immediately: stop sending money, report the transaction to your bank or e-wallet, preserve every piece of digital evidence, and file reports with the Philippine cybercrime authorities. Do not pay any additional “withdrawal tax,” “verification deposit,” “anti-money laundering fee,” or “account-unlocking charge”—these demands are common ways scammers extract a second or third payment from the same victim.

Is It an Online Gambling Scam or an Ordinary Gambling Loss?

Losing a legitimate wager is not automatically fraud. A scam usually involves deception, impersonation, unauthorized account access, a fake gambling platform, manipulated withdrawals, or false promises made before you transferred money.

Common online gambling scams in the Philippines include:

A website shows large winnings but refuses withdrawal unless you first pay a “tax” or “release fee.”
A fake agent claims to represent a PAGCOR-licensed operator and collects deposits through a personal bank or e-wallet account.
A cloned website or app copies the name, logo, and design of a legitimate gambling company.
A “betting investment” promises guaranteed daily returns or claims that an algorithm cannot lose.
A Telegram, Facebook, or Viber group instructs members to complete betting “tasks” and deposit progressively larger amounts.
A platform accepts deposits but suddenly blocks the account, removes the balance, or disappears.
Someone obtains your password, one-time password, card details, or e-wallet credentials and uses them to fund gambling transactions.
A supposed gaming employee offers to recover your balance for an advance fee.

A dispute with a licensed operator may instead concern account verification, bonus conditions, responsible-gaming restrictions, or legitimate withdrawal review. Even then, the operator should have an official complaint procedure, verifiable contact information, and a domain listed by the regulator.

Check Whether the Gambling Website Is Really Licensed

Do not rely on a PAGCOR logo, screenshot of a license, social-media verification badge, or statement from an agent. Scammers can copy all of these.

Check the exact website domain, including its spelling and extension, against PAGCOR’s official list. PAGCOR’s current list identifies accredited gaming system administrators, registered brands, and approved domain names. A familiar brand reached through a different domain may be a clone. The PAGCOR list of accredited administrators, brands, and registered domains was updated as of June 30, 2026. (PAGCOR)

There is an important legal distinction:

Offshore gaming operations formerly known as POGOs or IGLs were banned. Executive Order No. 74 required all Philippine offshore gaming operations and related services to cease by December 31, 2024.
That ban did not automatically outlaw every form of domestic online gaming. PAGCOR continues to regulate authorized domestic electronic gaming, bingo, sports betting, and other approved offerings.

Therefore, a website claiming that it presently holds a Philippine offshore gaming license is a serious red flag. A domestic gaming site should appear under the correct operator, brand, and exact domain in PAGCOR’s current records. (Lawphil)

What to Do Immediately After an Online Gambling Scam

1. Stop all payments and communication

Do not send another peso, even when the scammer says the payment is refundable or necessary to release a larger balance.

Avoid confronting the scammer before preserving evidence. A confrontation may cause the person to delete messages, close accounts, remove the website, or move the remaining funds.

2. Contact your bank, card issuer, or e-wallet immediately

Use only the institution’s official app, website, hotline, or branch. Do not use a number supplied by the gambling agent.

Tell the institution that:

You are reporting a suspected fraudulent or disputed transaction.
The payment was connected to an online gambling scam.
You want the recipient account and downstream transfers traced.
You are requesting temporary holding of any remaining disputed funds under the Anti-Financial Account Scamming Act.
You need a written acknowledgment and case reference number.

Republic Act No. 12010, the Anti-Financial Account Scamming Act of 2024 or AFASA, authorizes covered financial institutions to temporarily hold disputed funds and conduct coordinated verification with other institutions. Current BSP rules provide for an initial hold of up to five calendar days and, when justified, an extended period that must not exceed 30 calendar days in total unless a court orders a longer hold. A hold is not an automatic refund; it is intended to prevent funds that remain in the financial system from being withdrawn or transferred while the transaction is verified. (Lawphil)

Report even when you personally pressed “Send.” A transfer may still have been induced by fraud. The institution will determine whether the transaction qualifies under its fraud and disputed-transaction procedures.

3. Secure your financial and online accounts

Immediately:

Change passwords using a clean, trusted device.
Log out other active sessions.
Enable multi-factor authentication.
Block affected cards.
Remove unknown linked devices and payment methods.
Contact your mobile network if your SIM suddenly lost service.
Check for unauthorized loans, transfers, or new beneficiaries.
Remove any remote-access application the scammer instructed you to install.
Scan the device for malware, but preserve evidence before resetting it.

Never give an OTP, PIN, recovery code, screen-sharing access, or password to someone claiming to be an investigator, bank employee, PAGCOR officer, or recovery specialist.

4. Preserve the evidence before accounts disappear

Save the original material, not only cropped screenshots.

Capture:

The complete website address and each relevant webpage.
The app name, download link, APK file name, and developer information.
Chats, emails, text messages, voice notes, and call logs.
The scammer’s usernames, profile links, telephone numbers, and email addresses.
Bank or e-wallet account names and numbers.
QR codes and payment links.
Cryptocurrency wallet addresses and transaction hashes.
Deposit and withdrawal histories.
Advertisements, referral codes, and promotional promises.
The supposed PAGCOR license or certificate.
Messages demanding taxes, deposits, or unlocking fees.
Proof that the site blocked or refused withdrawal.

Take screenshots that show the date, time, sender, recipient, and surrounding conversation. Export chats where the platform permits it. Keep original electronic files and retain the device used during the transaction.

Electronic documents are admissible in Philippine proceedings when properly authenticated. The Rules on Electronic Evidence require proof that an electronic record is what the presenting party claims it to be. The Supreme Court has rejected unauthenticated screenshots in cases where the required foundation was not established, so retaining original devices, full conversations, and file metadata can be important. (Lawphil)

5. Call the government’s cybercrime hotline

The CICC’s Hotline 1326 operates as a central reporting channel for online scams and can refer matters to participating agencies, including the PNP and NBI. Reports may also be made through the eGovPH application. (Philippine News Agency)

A hotline report is useful for rapid triage, but a substantial financial loss will normally require a more detailed complaint, evidence submission, and sworn statement with a law-enforcement agency.

Where to Report an Online Gambling Scam in the Philippines

Where to report	When to use it	What to request
Your bank, card issuer, or e-wallet	Immediately after any payment or unauthorized transaction	Account security, transaction trace, temporary hold, reversal or chargeback assessment, and a reference number
CICC Hotline 1326 or eGovPH	For rapid scam reporting and referral	Incident recording and referral to the proper cybercrime unit
PNP Anti-Cybercrime Group	For criminal investigation, digital evidence, account tracing, or identification of scammers	Complaint intake, investigation, evidence preservation, and referral for prosecution
NBI Cybercrime Division	For organized, multi-jurisdictional, technically complex, or significant online fraud	Formal investigation and preparation of the case for prosecution
PAGCOR	To verify a license or report a fake or noncompliant gaming website	Domain verification, regulatory investigation, and action against unauthorized operators
Bangko Sentral ng Pilipinas	After first reporting to a BSP-supervised bank or e-money issuer and receiving an inadequate response	Second-level consumer assistance through BSP Online Buddy
National Privacy Commission	When identity documents, selfies, account data, or other personal information were stolen, exposed, or misused	Data-privacy complaint or breach-related action

Reporting to the PNP Anti-Cybercrime Group

You may approach a PNP Anti-Cybercrime Group office or begin at the nearest police station and request referral to the appropriate cybercrime response unit.

Bring printed and electronic copies of your evidence. Ask for:

The complaint or incident reference number.
The investigator’s name and contact details.
Instructions for executing a complaint-affidavit.
A list of any missing documents.
Confirmation of whether your device must be submitted for forensic examination.

Do not surrender your only copy of a device or document without obtaining a proper acknowledgment or inventory.

Reporting to the NBI Cybercrime Division

The NBI provides an official online complaint portal and accepts in-person complaints through its Cybercrime Division and regional cybercrime centers. Its published Citizens’ Charter states that complaint intake itself has no filing fee. The initial filing may be completed on the same day when the complainant has sufficient information, although the actual investigation can take much longer. (National Bureau of Investigation)

The NBI may be particularly useful when:

Several victims are involved.
The scheme uses multiple mule accounts.
The operators appear to be part of an organized group.
The website, servers, or suspects are located in different places.
The scam involves foreign nationals, cryptocurrency, or cross-border transfers.
Technical examination or coordinated enforcement is necessary.

Reporting to PAGCOR

Use PAGCOR to verify whether the operator and exact domain are authorized. You may send the website address, screenshots, agent details, payment accounts, and claimed license through PAGCOR’s regulatory contact channels.

PAGCOR has repeatedly warned that illegal sites use copied logos and fabricated certificates. Its regulatory report is separate from a criminal complaint: report the fraud to the PNP or NBI even when you have already contacted PAGCOR. (PAGCOR)

Escalating a bank or e-wallet complaint to the BSP

The bank or e-wallet is the first-level recourse. Obtain its case number before escalating.

When the institution fails to respond properly or you disagree with its action, file through the BSP Online Buddy and Consumer Assistance Mechanism. BSP advises consumers to report first to the concerned supervised financial institution and include the institution’s reference number in the escalation. (Bureau of Soils and Water Management)

The BSP complaint does not replace a criminal complaint with the PNP or NBI.

Filing a data-privacy complaint

Consider a complaint with the National Privacy Commission when the gambling site or agent collected or misused:

Passport or government ID images.
Facial-verification selfies.
Contact lists.
Bank statements.
Card information.
Account credentials.
Private photographs or messages.

A formal NPC complaint follows prescribed requirements and may require a verified complaint and supporting evidence. (National Privacy Commission)

Documents to Prepare

Prepare one organized folder containing:

Government-issued identification
A one-page transaction summary, showing:
- Date and time
- Amount
- Sending institution
- Recipient institution
- Recipient name and account number
- Transaction reference
A chronological narrative explaining:
- How you found the website or agent
- What representations were made
- Why you believed them
- Each payment you made
- When you discovered the fraud
Bank, card, e-wallet, or crypto records
Complete communications and screenshots
Website and app information
The scammer’s identifying details
Copies of reports already filed, including reference numbers
Names and affidavits of witnesses, when applicable
A loss table if there were several transfers

A simple loss table can prevent errors:

Date and time	Payment channel	Recipient	Reference number	Amount
4 July 2026, 2:14 p.m.	E-wallet	Account name and number	Reference	₱10,000
4 July 2026, 4:38 p.m.	Bank transfer	Account name and number	Reference	₱25,000

How to Prepare a Complaint-Affidavit

A complaint-affidavit is a sworn written account of what happened. It should use numbered paragraphs and state facts in chronological order.

Include:

Your full name, citizenship, address, and contact details.
The known identity and address of the respondent, or a statement that the identity is unknown.
The exact false representations made.
The dates, amounts, and recipients of payments.
How the fraud caused financial loss.
The discovery of the scam.
A numbered list of attachments.
A request for investigation and prosecution.

Do not guess or exaggerate. Clearly distinguish between facts you personally witnessed and information you learned from someone else.

Under Rule 112 of the Rules of Criminal Procedure, a complaint for preliminary investigation is accompanied by the affidavits of the complainant and witnesses and other supporting documents. The affidavits may be sworn before a prosecutor or another government officer authorized to administer oaths. (Lawphil)

What Laws May Apply?

The victim does not need to identify the final criminal charge before reporting. Investigators and prosecutors determine the appropriate offenses from the evidence.

Estafa under Article 315 of the Revised Penal Code

An online gambling scam may constitute estafa by false pretenses when the offender makes a fraudulent representation before or at the time the victim parts with money, the victim relies on it, and financial damage results.

Examples include falsely claiming that:

A platform is licensed.
A betting system guarantees profit.
A deposit is required to release existing winnings.
An agent is authorized by a legitimate operator.
A withdrawal fee will be refunded.

When an offense under the Revised Penal Code is committed through information and communications technology, Section 6 of Republic Act No. 10175, the Cybercrime Prevention Act of 2012, may apply in addition to the underlying offense. (Lawphil)

Anti-Financial Account Scamming Act

RA 12010 penalizes financial-account scamming, including:

Money-mule activities.
Buying, selling, lending, or renting financial accounts.
Opening accounts under fictitious or stolen identities.
Social-engineering schemes used to obtain financial credentials.
Attempts, assistance, and related offenses.

The law also permits investigation and information sharing involving financial accounts and recognizes restitution as possible civil liability after conviction. (Lawphil)

Illegal gambling laws

Presidential Decree No. 1602 penalizes participation in and operation of unauthorized gambling. Executive Order No. 13 directed law-enforcement agencies to intensify action against illegal gambling, while RA 9287 specifically increased penalties for illegal numbers games such as jueteng and masiao.

Not every gambling-related fraud is charged only as illegal gambling. Deception, account theft, access-device fraud, money laundering, and financial-account scamming may create separate liability. (Lawphil)

Civil recovery under the Civil Code

Articles 2014 and 2015 of the Civil Code contain remedies relating to games of chance. Article 2014 allows a loser to seek recovery of the loss from the winner, with legal interest, and subsidiarily from the operator or manager. Article 2015 provides additional exemplary damages when the winner committed cheating or deceit.

Whether these provisions can practically be used against a particular online platform depends on the facts, the identity and location of the defendants, the nature of the transaction, and the available evidence. Anonymous offshore operators and rapidly emptied mule accounts make enforcement difficult even when a legal remedy exists. (Lawphil)

Other possible laws

Depending on the method used, authorities may also consider:

RA 8484, the Access Devices Regulation Act, for fraudulent card or account access.
RA 10173, the Data Privacy Act, for unlawful processing or misuse of personal data.
RA 9160, the Anti-Money Laundering Act, when criminal proceeds are transferred, concealed, or layered through accounts.
PD 1689, when estafa is committed by a syndicate under circumstances covered by that decree.

(Lawphil)

What Happens After You File the Complaint?

The normal process may include:

Complaint evaluation. An investigator reviews the narrative, transactions, and available identifiers.
Evidence preservation. Law enforcement may request preservation of computer data before records are deleted.
Financial tracing. Banks, e-wallets, and other institutions may be asked to identify account holders and trace downstream transfers.
Digital investigation. Investigators may examine devices, IP records, domain information, social-media accounts, and transaction logs.
Cybercrime warrants or court orders. Authorities may seek lawful disclosure, interception, search, seizure, or examination orders when required.
Referral to the prosecutor. The investigator or complainant submits the complaint-affidavit and evidence for preliminary investigation.
Respondent’s counter-affidavit. If an identifiable respondent is found and probable cause evaluation proceeds, the prosecutor may require a response.
Prosecutor’s resolution. The prosecutor determines whether there is probable cause to file an Information in court.

RA 10175 requires service providers to preserve specified computer data for at least six months when the legal requirements are met. The Rule on Cybercrime Warrants governs judicial processes for disclosure, interception, search, seizure, and examination of computer data. (Lawphil)

Typical Timelines and Common Bottlenecks

Stage	Practical expectation
Bank or e-wallet report	File immediately; acknowledgment may be issued the same day
Initial temporary hold	Up to five calendar days when the transaction qualifies and funds can be located
Extended financial hold	Total holding period generally cannot exceed 30 calendar days without a court order
Police or NBI complaint intake	Often completed in one visit when evidence is organized
Account and subscriber identification	May take weeks or months, especially across several institutions
Prosecutor’s preliminary investigation	Commonly takes several months, depending on service of subpoenas, evidence volume, and office workload
Criminal case in court	May take considerably longer, particularly with multiple accused or foreign evidence

The most common obstacles are:

Reporting after the money has already been withdrawn.
Transfers through several mule accounts.
Recipient accounts opened using stolen identities.
Cryptocurrency transfers to self-hosted wallets.
Platforms and servers located abroad.
Missing transaction reference numbers.
Deleted chats or factory-reset devices.
Screenshots that omit the URL, date, sender, or surrounding conversation.
Inconsistent statements from the complainant.
Payments made through cash agents without identifying records.

Special Considerations for Foreigners and Victims Abroad

A foreign national may report a scam involving the Philippines. RA 12010 recognizes Philippine jurisdiction in circumstances that include the use of Philippine systems, damage caused to a person in the Philippines, or a financial account maintained with an institution operating in the country. (Lawphil)

A victim abroad should:

Report immediately to the sending bank or payment service in the country of origin.
Contact the Philippine recipient institution when its official fraud channel accepts third-party reports.
File through CICC, PNP-ACG, or NBI.
Provide a passport copy, foreign address, telephone number, and time zone.
Preserve international transfer records, SWIFT details, card statements, crypto hashes, and correspondence.
Ask the receiving Philippine agency how the complaint-affidavit must be sworn.

Depending on the country and the agency’s requirements, an affidavit executed abroad may be notarized before a Philippine consular officer or notarized locally and apostilled where the Apostille Convention applies. Confirm the required form before paying for authentication because procedures can vary by country and by intended use. (Philippine Embassy in New Delhi)

Mistakes That Can Weaken an Online Gambling Scam Complaint

Paying another fee. No payment should be made merely to “prove liquidity,” “clear AML review,” or release supposed winnings.
Deleting the app or conversations too early. Preserve evidence first.
Editing screenshots. Keep the uncropped originals.
Reporting only to Facebook, Telegram, or the app store. Platform reporting may remove the account but does not start a Philippine criminal case.
Posting the suspected account holder’s personal data publicly. This may alert the suspects, compromise the investigation, or create separate legal problems.
Hiring a recovery agent who asks for an advance fee. Recovery scams often target people who have already been defrauded.
Concealing that the payment involved gambling. Investigators need the complete and truthful context to evaluate the proper charges.
Filing only a barangay blotter. A barangay record may support the chronology, but it does not replace reporting to the bank, PNP, NBI, or prosecutor.
Assuming the displayed account balance proves real winnings. A number shown on a scam website may be entirely fabricated.

Frequently Asked Questions

Can I report the scam even if I knowingly used an unlicensed gambling website?

Yes. Report the deception and financial loss truthfully. Participation in unauthorized gambling may raise a separate legal issue, but hiding or changing material facts can damage your credibility. Do not assume that reporting automatically grants immunity, and do not allow that concern to delay urgent efforts to preserve funds and evidence.

Can GCash, Maya, or a bank recover money sent to a gambling scammer?

Recovery is possible when funds remain traceable and available, but it is not guaranteed. Report through the official fraud channel immediately, request a disputed-transaction investigation and temporary hold, and obtain a case number. Escalate to BSP only after first reporting to the institution.

What if I do not know the scammer’s real name?

You can still report. Provide the recipient account, telephone numbers, usernames, profile links, email addresses, website domains, QR codes, wallet addresses, and transaction references. Investigators may use lawful processes to identify account holders and service subscribers.

Is a PAGCOR logo proof that a gambling site is legitimate?

No. Fake websites copy PAGCOR logos and fabricate certificates. Verify the exact domain against PAGCOR’s current official list rather than searching only for the brand name. (PAGCOR)

The website says I must pay tax before withdrawing. Should I pay?

No. Stop and verify independently with the operator through contact details published on its verified domain. A demand to send “tax” to a personal bank account, e-wallet, crypto address, or chat agent is a strong scam indicator.

Should I report to the PNP or the NBI?

Either agency can receive a cybercrime complaint. The PNP-ACG has nationwide cybercrime units, while the NBI Cybercrime Division commonly handles complex and organized online fraud. Hotline 1326 can also assist with initial referral. Do not delay a report while deciding which agency is ideal.

Are screenshots enough to file a complaint?

Screenshots are useful, but stronger evidence includes the original device, complete chat exports, transaction statements, URLs, electronic files, and testimony explaining how the records were obtained. Keep both digital originals and printed copies.

Do I need to notarize my affidavit before going to the police or prosecutor?

Not necessarily. Investigators, prosecutors, and other authorized government officers may administer the oath. Ask the receiving office for its preferred form before using a private notary. Affidavits executed abroad may require consular notarization or an apostille.

Can I file a report if the scam happened months ago?

Yes, but delay reduces the chance of freezing money or preserving temporary online records. Gather the remaining evidence and report as soon as possible. Investigators and prosecutors will determine whether the applicable prescriptive period has expired.

Key Takeaways

Report the transaction to the bank, card issuer, or e-wallet immediately and request tracing and a temporary hold.
Call 1326 and file a detailed complaint with the PNP Anti-Cybercrime Group or NBI Cybercrime Division.
Verify the exact website domain, not merely the brand or PAGCOR logo.
Preserve original chats, devices, transaction records, URLs, QR codes, wallet addresses, and withdrawal demands.
Do not pay a second “tax,” “verification,” “unlocking,” or “recovery” fee.
Obtain and keep every complaint reference number.
Be completely truthful about how the transaction occurred.
Fast reporting improves the possibility of locating funds, identifying mule accounts, and preserving digital evidence.