If you just realized you were scammed online, the most important thing is to act within the first few hours. In the Philippines, recovering money from an online scam usually depends on how fast you report the transfer to your bank or e-wallet, whether the receiving account can still be traced or temporarily held, and whether you can preserve clear evidence for the police, NBI, BSP, SEC, or prosecutor. This guide explains where to report an online scam in the Philippines, what laws apply, how to request recovery of your money, what documents to prepare, and what realistic outcomes to expect.
What Counts as an Online Scam in the Philippines?
An online scam is a fraud committed through the internet, mobile apps, electronic messages, social media, online banking, e-wallets, or other digital platforms.
Common examples include:
- Fake online sellers on Facebook Marketplace, Instagram, TikTok, Shopee/Lazada-style pages, or Viber groups
- GCash, Maya, bank, or credit card phishing links
- Fake customer service pages pretending to be a bank, e-wallet, airline, courier, or government agency
- “Tasking,” “like and earn,” crypto, forex, or investment scams
- Romance scams and “emergency” money requests
- Fake job offers requiring processing fees
- SIM swap, OTP theft, account takeover, or unauthorized transfers
- Money mule schemes where someone asks to “borrow,” “rent,” or “use” your account
- Fake parcel, customs, immigration, or police payment demands
- Impersonation scams using hacked Facebook, Messenger, WhatsApp, Telegram, or email accounts
The legal label depends on the facts. The same incident may be treated as estafa, computer-related fraud, financial account scamming, identity theft, access device fraud, investment fraud, money laundering, or a combination of offenses.
First 30 Minutes: What to Do Immediately
Do these steps before arguing with the scammer or posting publicly.
Stop sending money. Scammers often ask for “unlocking fees,” “taxes,” “verification fees,” “anti-money laundering clearance,” or “refund processing fees.” These are usually part of the same scam.
Call your bank or e-wallet provider immediately. Use only the official hotline inside the app, card, official website, or verified social media page. Ask for:
- Blocking or freezing of your account, card, or wallet if compromised
- A fraud or disputed transaction case number
- Recall, reversal, or hold request
- Coordinated verification with the receiving bank or e-wallet
- Written acknowledgment by email or in-app ticket
Report the receiving account. If you know the recipient bank, e-wallet, QR merchant, account name, mobile number, or account number, give it to your bank or e-wallet. You may also report directly to the receiving institution’s fraud channel, but the sending institution is usually the practical starting point.
Preserve evidence before the scammer deletes it.
- Screenshot the profile, chats, phone number, email, URL, QR code, payment instructions, and transaction receipts.
- Export or download chat history where possible.
- Copy URLs, usernames, account names, reference numbers, and timestamps.
- Do not crop screenshots too tightly; include the full screen, date, time, and sender details.
Secure your accounts.
- Change passwords for email, banking, e-wallets, social media, and shopping apps.
- Turn on multi-factor authentication.
- Log out of all devices.
- Remove unknown linked devices, cards, email addresses, or phone numbers.
- If you gave your OTP, PIN, CVV, password, ID, selfie, or SIM information, treat the incident as identity compromise, not just a lost payment.
Legal Basis: Philippine Laws That Apply to Online Scams
Estafa Under the Revised Penal Code
Many online scams fall under estafa, also called swindling, under Article 315 of the Revised Penal Code. In simple terms, estafa usually involves:
- Deceit or abuse of confidence
- The victim relying on that deceit
- Damage or prejudice, usually loss of money or property
A fake seller who receives payment but never intended to deliver, a person pretending to be a bank employee to get your OTP, or an investment recruiter promising guaranteed returns may all potentially fall under estafa depending on the evidence.
Cybercrime Prevention Act: RA 10175
Republic Act No. 10175, the Cybercrime Prevention Act of 2012, is important because online fraud often uses computer systems, digital platforms, or electronic communications. RA 10175 covers offenses such as computer-related fraud, computer-related identity theft, and crimes under the Revised Penal Code or special laws when committed through information and communications technology. The Supreme Court discussed the validity and scope of RA 10175 in Disini v. Secretary of Justice, G.R. No. 203335. (Lawphil)
This matters in practice because cybercrime investigators may use cybercrime procedures to preserve, trace, and request electronic evidence, subject to legal requirements.
Anti-Financial Account Scamming Act: RA 12010
Republic Act No. 12010, the Anti-Financial Account Scamming Act, or AFASA, is now one of the most important laws for online scam victims involving bank accounts, e-wallets, payment accounts, credit cards, or similar financial accounts.
AFASA specifically recognizes that scammers target financial accounts and lure account owners into fraudulent activity. It covers financial accounts such as deposit accounts, transaction accounts, credit card accounts, and e-wallets. (Lawphil)
AFASA penalizes:
- Money muling, such as using, borrowing, opening, buying, selling, lending, or recruiting people to use financial accounts to receive or move scam proceeds
- Social engineering schemes, where a scammer uses deception or electronic communications to obtain sensitive identifying information and gain unauthorized access or control over a financial account
- Certain related acts, attempts, and aiding or abetting (Lawphil)
AFASA also gives banks and covered financial institutions authority to temporarily hold funds subject of a disputed transaction for the period prescribed by the BSP, not exceeding 30 calendar days unless extended by a competent court. This is crucial because the fastest chance of recovery is often a bank-level hold before the money is withdrawn or transferred again. (Lawphil)
AFASA further provides that institutions may be liable for restitution if they fail to employ adequate risk management systems and controls or fail to exercise the highest degree of diligence, and conviction of the scammer is not required before restitution may be considered under that provision. (Lawphil)
Financial Products and Services Consumer Protection Act: RA 11765
Republic Act No. 11765, the Financial Products and Services Consumer Protection Act, protects financial consumers, including users of bank accounts, e-wallets, credit, remittance, investment, insurance, and other financial products.
The law recognizes the right of financial consumers to protection of consumer assets against fraud and misuse, data privacy and protection, and timely handling and redress of complaints. It also requires each financial service provider to maintain a free consumer assistance mechanism. For alleged disputed amounts or unauthorized transactions, the provider must suspend interest, fees, and charges or provide similar reasonable accommodations while the final investigation is pending. (Supreme Court E-Library)
If your bank, e-wallet, or financial provider mishandles your fraud complaint, RA 11765 is one basis for escalating the matter to the proper regulator, such as the BSP, SEC, Insurance Commission, or Cooperative Development Authority, depending on the institution involved.
Other Laws That May Apply
Depending on the scam, these laws may also be relevant:
| Law | When it may apply |
|---|---|
| RA 8484, Access Devices Regulation Act of 1998 | Credit card, debit card, ATM card, account number, or access device fraud |
| RA 9160, Anti-Money Laundering Act of 2001, as amended | Movement, layering, or concealment of scam proceeds through accounts or entities |
| RA 10173, Data Privacy Act of 2012 | Unauthorized use, exposure, or misuse of personal data, IDs, selfies, account credentials, or sensitive personal information |
| RA 11934, SIM Registration Act | Scam texts, spoofing, SIM misuse, or fraud using registered mobile numbers |
| Securities Regulation Code and RA 11765 | Investment scams, Ponzi schemes, fake trading platforms, unregistered securities, or unauthorized solicitation |
Where to Report an Online Scam in the Philippines
Different agencies handle different parts of the problem. Reporting to one agency does not always automatically recover your money, so it is often best to report in parallel.
| Where to report | Best for | What to expect |
|---|---|---|
| Your bank or e-wallet | Immediate hold, recall, dispute, account blocking | Fastest route if funds are still traceable |
| Receiving bank or e-wallet | Notice that its account may be used for fraud | May require coordination through your own provider or law enforcement |
| CICC / I-ARC Hotline 1326 | Initial cyber fraud guidance and routing | 24/7 central hotline for scams, phishing, investment fraud, romance scams, and other online scams (Philippine Information Agency) |
| eGovPH eReport | Scam SMS and cyber fraud reports | Reports may be routed to relevant agencies; scam SMS reports may assist blocking actions (Philippine News Agency) |
| PNP Anti-Cybercrime Group | Criminal investigation of online scams | Case build-up, cybercrime investigation, referral for inquest or preliminary investigation |
| NBI Cybercrime Division | Cybercrime complaints, digital evidence, organized schemes | Investigation, evidence preservation, coordination with prosecutors |
| BSP | Complaints against banks, e-money issuers, remittance companies, payment providers | Escalation if the financial institution fails to properly handle your complaint |
| SEC | Investment scams and unauthorized investment solicitation | Complaint, enforcement, advisories, possible administrative/criminal referral |
| NTC / telco | Scam texts, spoofed messages, SIM-related issues | Number or message reporting, coordination with telcos and government channels |
Step-by-Step Guide to Report an Online Scam and Try to Recover Money
Step 1: File a Fraud Report With Your Bank or E-Wallet
This is the most urgent step.
When you contact your bank or e-wallet, say clearly:
“I am reporting a fraudulent or unauthorized transaction. Please create a fraud case, attempt recall or reversal, coordinate with the receiving institution, and request temporary holding of any remaining disputed funds.”
Provide:
- Your full name and account or wallet number
- Transaction date and exact time
- Amount
- Reference number
- Receiving account name, number, wallet, mobile number, QR merchant, or bank
- Screenshots of chats and payment instructions
- Brief explanation of how you were deceived
- Police/NBI/CICC report number, if already available
Ask for a case number. Write down the date, time, channel, and name or ID of the representative.
In practice, the chance of recovery is higher if the money is still in the receiving account. If it was immediately withdrawn, converted to crypto, moved through several accounts, or cashed out through an agent, recovery becomes much harder.
Step 2: Ask About AFASA Temporary Holding
If the scam involved a bank, e-wallet, credit card, or payment account under BSP supervision, ask whether the institution can initiate a temporary hold of disputed funds under AFASA and applicable BSP rules.
Under AFASA, institutions may temporarily hold funds subject of a disputed transaction for a period prescribed by the BSP, not exceeding 30 calendar days unless extended by a court. A disputed transaction may include one that appears unusual, has no clear economic purpose, comes from an unlawful activity, or was facilitated through social engineering. (Lawphil)
Use practical language when speaking to the bank:
- “Please check if the funds are still in the receiving account.”
- “Please send a hold or recall request to the receiving institution.”
- “Please coordinate verification of the disputed transaction.”
- “Please preserve all logs, account details, device information, and transaction records.”
- “Please confirm in writing what action was taken.”
Do not simply say “refund me” and stop there. Ask for the specific fraud-handling actions.
Step 3: Report to Hotline 1326 or eGovPH
For online scams, cyber fraud, phishing, romance scams, investment fraud, text scams, and similar incidents, you may report through the government’s Inter-Agency Response Center Hotline 1326. Government information materials describe 1326 as a 24/7 central number for reporting online selling scams, dubious text messages, emails, romance scams, impersonation, investment fraud, cybercrimes, and phishing. (Philippine Information Agency)
For scam text messages, the eGovPH eReport feature is also used. CICC has advised that victims of cyber fraud should call 1326, while those who receive scam SMS may report numbers through eGovPH eReport; reported data may be sent to the NTC for blocking. (Philippine News Agency)
Prepare to give:
- Your name and contact details
- Scam platform or app
- Scammer’s phone number, username, email, account, or URL
- Amount lost
- Transaction reference numbers
- Screenshots or files
- Whether your bank or e-wallet was already notified
Step 4: File a Complaint With PNP-ACG or NBI Cybercrime
For criminal investigation, report to either:
- PNP Anti-Cybercrime Group, especially if you need police cybercrime assistance; or
- NBI Cybercrime Division, especially for cybercrime complaints requiring digital evidence handling or broader investigation.
You usually need to prepare:
- Government-issued ID
- Complaint-affidavit or written narration
- Screenshots and printouts of chats, posts, emails, links, phone numbers, account names, and transaction receipts
- Bank or e-wallet statements showing the transfer
- Case numbers from your bank, e-wallet, CICC, or platform
- Device used, if relevant
- URLs and usernames, not just screenshots
- Contact details of witnesses, if any
A complaint-affidavit is a sworn written statement explaining what happened, who was involved, how you were deceived, what money was lost, and what evidence supports your complaint. It may be notarized or sworn before an authorized officer depending on the filing procedure.
Step 5: Escalate to the BSP if the Bank or E-Wallet Mishandles the Complaint
If your complaint is against a BSP-supervised financial institution, such as a bank, e-money issuer, remittance company, or payment service provider, first report to the institution’s own consumer assistance mechanism.
If unresolved or mishandled, you may escalate to the BSP Consumer Assistance Mechanism through BSP Online Buddy (BOB). BSP states that BOB guides consumers through the complaint process and can automatically refer concerns to the BSP-supervised financial institution involved. BSP also allows submission through a CIR form by email to consumeraffairs@bsp.gov.ph, and lists other channels such as mail, phone, and walk-in assistance. (Bureau of the Treasury)
Attach:
- Your bank/e-wallet complaint and reply, if any
- Fraud case number
- Transaction proof
- Screenshots
- Timeline of events
- Requested resolution
- Proof that you first reported to the institution
BSP complaints are not a substitute for a criminal case against the scammer. They are mainly for the conduct of the regulated financial institution: whether it handled your complaint properly, complied with consumer protection rules, and took appropriate action.
Step 6: Report Investment Scams to the SEC
If the scam involved investments, trading, crypto profits, forex, “staking,” guaranteed returns, lending pools, crowdfunding, “double your money,” casino-style investment apps, or recruitment commissions, report it to the Securities and Exchange Commission.
The SEC has an online ticketing system where the public can open and check tickets for complaints and issues. (Securities and Exchange Commission)
For SEC complaints, prepare:
- Name of the company, app, website, group, or recruiter
- SEC registration claims, if any
- Screenshots of investment offers
- Proof of payment
- Promised returns
- Referral or commission structure
- Names of officers, admins, influencers, or agents
- Chat records and marketing materials
A common misunderstanding is that “registered with SEC” automatically means an investment is legal. SEC company registration is not the same as authority to solicit investments from the public.
Can You Recover Money From an Online Scam?
Sometimes, yes. But it depends on where the money is.
Recovery Is More Possible When:
- You reported within minutes or hours
- The funds are still in the receiving account or wallet
- The transaction went through a regulated bank, e-wallet, or payment provider
- The receiving account was flagged quickly
- The institution can perform coordinated verification
- There is clear evidence of fraud or unauthorized access
- The scam involved a failure in security controls or fraud handling by a financial institution
Recovery Is Harder When:
- The scammer already withdrew cash
- The money passed through several mule accounts
- Funds were converted to crypto or gaming credits
- You voluntarily transferred money after repeated persuasion
- You delayed reporting for days or weeks
- You only have a nickname, deleted profile, or cropped screenshot
- The receiving account is outside the Philippines
- The platform is unregulated or fake
“Voluntary transfer” does not automatically mean you have no case. Many scams involve voluntary transfers induced by deception. However, for bank reimbursement, the distinction between unauthorized transaction, authorized but scam-induced transaction, and customer negligence often becomes important.
Bank Hold vs. AMLC Freeze Order vs. Court Case
Many victims say, “I want to freeze the scammer’s account.” In the Philippines, there are different mechanisms.
| Remedy | Who acts | Purpose | Practical note |
|---|---|---|---|
| Temporary hold of disputed funds | Bank, e-wallet, or financial institution under AFASA/BSP rules | Preserve funds while the disputed transaction is verified | Fastest practical remedy if funds remain in the system |
| Recall or reversal request | Sending institution coordinates with receiving institution | Attempt to recover or reverse transfer | Not guaranteed; depends on funds, rules, and receiving account status |
| AMLC freeze order | AMLC petitions the Court of Appeals | Freeze assets related to unlawful activity or money laundering | Usually not filed directly by an ordinary victim |
| Criminal case with civil liability | Prosecutor and court | Punish offender and award restitution/damages if proven | Takes longer; depends on identifying and prosecuting accused |
| Civil case | Victim files in court | Recover money and damages | Cost-benefit depends on amount and identity/assets of defendant |
The Supreme Court has clarified safeguards for AMLC freeze orders, including that the AMLC files a petition before the Court of Appeals, the CA must independently find probable cause, the freeze should be limited to property linked to unlawful activity, and the initial freeze order is effective for 20 days subject to hearing and possible extension. (Supreme Court of the Philippines)
For most victims, the immediate remedy is not an AMLC freeze order. It is a fast fraud report to the bank or e-wallet and a request for temporary holding, recall, and coordinated verification.
Evidence Checklist for Online Scam Complaints
Prepare both digital and printed copies.
| Evidence | Why it matters |
|---|---|
| Screenshot of scammer profile or page | Shows identity used, username, photo, page URL |
| Full chat history | Shows deception, promises, payment instructions, admissions |
| Transaction receipt | Proves amount, time, reference number, recipient |
| Bank or e-wallet statement | Confirms actual debit or transfer |
| URLs and links | Helps investigators trace websites, phishing pages, or fake platforms |
| Phone numbers and email addresses | Useful for telco, platform, and cybercrime tracing |
| QR codes or account numbers | Helps identify receiving accounts |
| Proof of delivery failure or blocked account | Supports intent to defraud |
| Your ID | Needed for complaint filing |
| Timeline of events | Helps police, NBI, bank, BSP, or prosecutor understand the case quickly |
For screenshots, keep the originals. Do not edit, annotate, crop, or filter your only copy. If you need to highlight details, make a duplicate and mark the duplicate.
Sample Timeline of What Usually Happens
| Stage | Typical timeframe | What happens |
|---|---|---|
| Bank/e-wallet fraud report | Same day | Case number issued; account may be blocked; recall or hold request may be initiated |
| Receiving institution coordination | Same day to several banking days | The receiving bank or e-wallet checks whether funds remain and whether a hold is possible |
| CICC / 1326 / eGovPH report | Same day | Initial report is logged and may be routed |
| PNP-ACG or NBI complaint | Same day to several weeks | Complaint is received, evaluated, and investigated |
| Prosecutor preliminary investigation | Weeks to months | Prosecutor determines probable cause for filing in court |
| Criminal court case | Months to years | Trial, judgment, possible restitution or damages |
| BSP escalation | Days to months | BSP consumer assistance, mediation, or adjudication route depending on case status and rules |
Timelines vary widely. Small-value scams can still be reported, but investigation resources, identity tracing, and cross-institution cooperation often affect speed.
Common Mistakes That Hurt Recovery
Waiting Too Long
The biggest mistake is waiting days before contacting the bank or e-wallet. Scam proceeds can move through mule accounts in minutes.
Deleting Chats Out of Embarrassment
Many victims delete messages because they feel ashamed. Do not. The chats are often the strongest evidence of deceit.
Only Reporting to Facebook or the Platform
Platform reports may remove the page but do not necessarily start a money recovery process. Report to the bank/e-wallet and appropriate Philippine authorities.
Sending More Money to “Recover” the First Loss
If someone says you must pay a “clearance fee,” “tax,” “verification,” “wallet unlock,” or “lawyer fee” to recover your money, assume it is another scam unless independently verified through official channels.
Posting the Scammer’s Personal Data Publicly
Publicly posting IDs, bank accounts, addresses, or accusations can create privacy, defamation, or harassment issues. Preserve evidence and report through proper channels.
Filing a Vague Complaint
A complaint that says only “I was scammed by this person” is weak. Include dates, amounts, account details, links, screenshots, and a clear timeline.
Special Situations
If You Are Overseas but the Scam Involves a Philippine Account
Filipinos abroad and foreigners overseas can still report if the receiving bank, e-wallet, scammer, victim, or part of the transaction is connected to the Philippines.
Practical options:
- Report immediately to the Philippine bank or e-wallet involved.
- Use online reporting channels where available.
- Prepare a sworn statement before a notary or consular officer if a Philippine agency requires a sworn affidavit.
- If documents are executed abroad and must be used formally in the Philippines, they may need an apostille if issued in an Apostille Convention country, or consular authentication if not.
- Keep time zone differences clear in your timeline.
If You Sent Money Through GCash, Maya, Bank Transfer, InstaPay, PESONet, or QR PH
Report to the sending institution first. Provide the reference number and exact receiving details. Ask whether the transaction passed through InstaPay, PESONet, QR PH, or an internal wallet transfer because this can affect tracing and coordination.
If Your Account Was Hacked
If money was transferred after your account was taken over, emphasize that it was an unauthorized transaction. Ask the institution to preserve:
- Login logs
- Device IDs
- IP addresses
- OTP delivery logs
- SIM or device change history
- Linked account changes
- Beneficiary enrollment records
If You Were Tricked Into Sending the Money Yourself
This is still reportable. Explain the deception clearly. For example:
- “I was told this was a verified bank representative.”
- “I was told the payment was required to release my parcel.”
- “I was promised guaranteed investment returns.”
- “The seller used fake proof of shipment.”
- “The scammer used my friend’s hacked account.”
If the Scam Involves Crypto
Report the fiat on-ramp: the bank, e-wallet, exchange, or payment channel where your pesos entered the scheme. Crypto transfers are harder to reverse, but exchange accounts, bank cash-ins, and local recruiters may still be traceable.
If Your ID, Selfie, or Personal Data Was Used
Report to the platform, financial institution, and law enforcement. Consider reporting a data privacy concern if your personal data was collected, exposed, or misused. Watch for loan apps, SIM registrations, fake accounts, and new financial accounts opened in your name.
Frequently Asked Questions
How do I report an online scammer in the Philippines?
Report first to your bank or e-wallet if money was transferred. Then report to Hotline 1326 or eGovPH for cyber fraud routing, and file a complaint with PNP-ACG or NBI Cybercrime for investigation. If it is an investment scam, also report to the SEC. If your bank or e-wallet mishandles the complaint, escalate to BSP.
Can I get my money back after being scammed online?
It is possible, especially if you report immediately and the funds are still in the receiving account. Recovery becomes harder once the money is withdrawn, transferred to several mule accounts, converted to crypto, or sent abroad. A bank or e-wallet report within the first few hours gives you the best chance.
Should I report to PNP or NBI?
Either may be appropriate. PNP-ACG and NBI Cybercrime both handle cybercrime complaints. Choose the office that is more accessible, responsive, or appropriate to your location and facts. For urgent money recovery, do not wait for a police appointment before calling your bank or e-wallet.
What if the bank says the transaction was “authorized” because I entered the OTP?
Still ask for a full fraud investigation. Explain how the OTP or transfer was obtained through deception, phishing, impersonation, account takeover, or social engineering. Under AFASA, social engineering schemes are specifically recognized when deception is used to obtain sensitive identifying information and gain unauthorized access or control over a financial account.
Can the scammer’s bank account be frozen?
A bank or e-wallet may temporarily hold disputed funds under applicable rules if the legal and factual requirements are met. A formal AMLC freeze order, however, is different and generally requires AMLC action before the Court of Appeals. For victims, the practical first step is to request temporary holding, recall, and coordinated verification through the financial institutions involved.
Do I need a lawyer to report an online scam?
Not necessarily for the initial bank, e-wallet, CICC, PNP, NBI, BSP, or SEC report. However, legal help may be useful if the amount is large, the bank denies reimbursement, the scammer is identified, you need to file a civil case, or you are preparing affidavits for criminal prosecution.
Is a Facebook post enough evidence?
No. A Facebook post may help warn others, but it is not enough by itself. Preserve the actual profile URL, page URL, Messenger conversation, payment receipts, account details, phone numbers, and transaction records. Investigators need verifiable details, not only screenshots of public accusations.
What if I only lost a small amount?
You can still report. Small scams are often part of larger operations using many victims. Even if full recovery is unlikely, your report may help flag mule accounts, block numbers, support platform takedowns, and build a pattern for enforcement.
Can foreigners report online scams in the Philippines?
Yes, if the scam has a Philippine connection, such as a Philippine bank account, e-wallet, phone number, platform user, company, or victim located in the Philippines. Foreign documents may need notarization, apostille, or consular authentication if used formally in Philippine proceedings.
How long does an online scam case take in the Philippines?
Bank or e-wallet action may begin the same day. Cybercrime investigation can take weeks or months. Prosecutor review and court cases can take much longer. The fastest part of the process is the financial institution’s immediate fraud response, which is why early reporting is critical.
Key Takeaways
- Report the scam to your bank or e-wallet immediately; this is the fastest possible route to holding or recovering funds.
- Ask specifically for a fraud case number, recall request, temporary hold, and coordinated verification.
- Preserve complete evidence: chats, URLs, screenshots, account numbers, transaction receipts, and timestamps.
- Report cyber fraud through Hotline 1326, eGovPH eReport, PNP-ACG, or NBI Cybercrime.
- Escalate bank or e-wallet mishandling to the BSP after first reporting to the financial institution.
- Report investment scams to the SEC, especially if there were guaranteed returns, recruitment commissions, or unauthorized solicitation.
- AFASA, RA 12010, is especially important for scams involving e-wallets, bank accounts, money mules, social engineering, and temporary holding of disputed funds.
- Recovery is most realistic when the report is made quickly and the money has not yet left the financial system.