If you sent money to a scammer through a Philippine bank transfer, e-wallet, QR payment, or online platform, the first hours matter. Your goal is not simply to “report the scam”; it is to preserve evidence, alert your own bank or e-wallet immediately, request temporary holding of the disputed funds, and file the right cybercrime or fraud report before the money is moved again. Philippine law now gives banks and e-wallet providers clearer authority to temporarily hold disputed funds in scam-related electronic transfers, but the process works best when your report is complete, fast, and properly documented.

What “account freeze” means in an online scam case

In ordinary language, victims say, “I want the scammer’s account frozen.” In Philippine practice, there are several different legal mechanisms:

Remedy	Who acts	What it does	Usual use
Temporary holding of disputed funds	Bank, e-wallet, or other BSP-supervised institution	Holds scam-related funds for a limited period while institutions verify the transaction	Fastest practical remedy after a fraudulent electronic transfer
Coordinated verification	Originating and receiving institutions	Traces the transaction chain across banks/e-wallets	Used when funds moved from one account to another
Cybercrime investigation	NBI Cybercrime Division or PNP Anti-Cybercrime Group	Preserves digital evidence, identifies suspects, supports prosecution	Needed for criminal case and platform/telco/account data
AMLC/Court of Appeals freeze order	AMLC applies; Court of Appeals issues	Freezes money or property related to money laundering or unlawful activity	Larger or organized schemes, laundering, related accounts
Court order in a criminal or civil case	Prosecutor/court	May support restitution, forfeiture, or damages	Later stage after complaint or case filing

A private person generally cannot directly freeze another person’s bank or e-wallet account. What you can do is file a disputed transaction report with your own financial institution and provide enough evidence for it to trigger the temporary holding and coordinated verification process under the Anti-Financial Account Scamming Act.

Legal basis: Philippine laws that apply to online scams and account freezes

The most important law for scam-related account holding is Republic Act No. 12010, or the Anti-Financial Account Scamming Act (AFASA). AFASA covers financial accounts such as bank accounts, other transaction accounts, e-wallets, and accounts used for financial products or services. It also defines sensitive identifying information to include usernames, passwords, bank details, credit card and e-wallet information, and other credentials used to access financial accounts. (Supreme Court E-Library)

AFASA penalizes money muling and social engineering schemes. Money muling includes allowing one’s financial account to be used to receive, transfer, or withdraw proceeds known to be derived from crimes, offenses, or social engineering schemes. Social engineering covers deception or fraud used to obtain another person’s sensitive identifying information, including through calls, SMS, email, social media messages, and other electronic communications. (Supreme Court E-Library)

AFASA also gives institutions authority to temporarily hold funds subject of a disputed transaction for a period prescribed by the BSP, not exceeding 30 calendar days, unless extended by a court. A disputed transaction may include one that appears unusual, has no clear economic purpose, comes from an unknown or illegal source, or was facilitated through social engineering. (Supreme Court E-Library)

The BSP implemented this through BSP Circular No. 1215, Series of 2025, which created rules on temporary holding of disputed funds and coordinated verification. The rules apply to electronic transfers from one financial account to another, but not to simple erroneous transfers, and generally not to credit card transactions unless the credit card was used to perform an electronic fund transfer through an automated clearing house. (Bureau of Small and Medium Enterprises)

Other laws may also apply:

Republic Act No. 10175, Cybercrime Prevention Act of 2012: covers computer-related fraud, computer-related identity theft, and crimes committed through information and communications technology. Its rules assign cybercrime enforcement to the NBI and PNP cybercrime units. (Supreme Court E-Library) (Supreme Court E-Library)
Article 315 of the Revised Penal Code: online selling scams, fake investment solicitations, romance scams, and impersonation scams may also constitute estafa, or swindling, when deceit causes damage.
Republic Act No. 8484, Access Devices Regulation Act of 1998, as amended: may apply to unauthorized use of credit cards, debit cards, account numbers, and similar access devices. (Lawphil)
Republic Act No. 9160, Anti-Money Laundering Act, as amended: in money laundering situations, the AMLC may apply to the Court of Appeals for a freeze order over funds or related accounts. The Supreme Court has recognized that a freeze order may cover related and materially linked accounts when properly identified. (Supreme Court of the Philippines)

Step-by-step: what to do immediately after discovering the scam

1. Stop the loss first

Do these before arguing with the scammer:

Stop sending money.
Do not click any new links sent by the scammer.
Change your online banking, e-wallet, email, and social media passwords.
Enable multi-factor authentication.
If your SIM, email, or device may be compromised, secure them before logging in again.
If your card details were exposed, request card blocking or replacement.

This matters because banks and e-wallets may ask whether you took reasonable steps to protect your credentials. BSP rules also expect account owners to protect usernames, passwords, PINs, OTPs, and other authentication factors, and to immediately report disputed transactions to their institutions. (Bureau of Small and Medium Enterprises)

2. Preserve evidence before it disappears

Scammers often delete posts, deactivate accounts, change display names, or block victims. Take screenshots and, when possible, screen recordings showing:

The scammer’s profile, username, phone number, email address, website, shop link, or QR code
The conversation from the start, not only the final payment request
Promises made: product delivery, investment returns, job offer, loan approval, “verification fee,” romance emergency, or crypto payout
Payment instructions and account details
Proof of payment: transaction reference number, date, time, amount, sender account, recipient account, bank/e-wallet name
Delivery tracking, receipts, invoices, fake IDs, fake permits, fake DTI/SEC certificates, or other documents sent to you
Any attempt to threaten, blackmail, impersonate police, impersonate a bank, or demand more money

Save copies in more than one place. Do not edit screenshots except to organize them into labeled folders.

3. Report first to your own bank or e-wallet

Your first formal report should be to the originating financial institution—the bank or e-wallet where your money came from. Use its fraud hotline, in-app help center, branch, or official customer service channel.

Use clear wording:

“I am the source account owner. I am reporting a disputed transaction caused by fraud or social engineering. Please create a Financial Consumer Protection Assistance Mechanism complaint, provide a case reference number, and initiate temporary holding of disputed funds and coordinated verification under RA 12010 and BSP Circular No. 1215.”

Give the institution:

Your full name and contact details
Source account or e-wallet number
Date, time, amount, and transaction reference number
Recipient account number, e-wallet number, QR merchant name, or bank details
Brief facts of the scam
Evidence files
Request to disable transfers temporarily if your account may be compromised

Under BSP rules, temporary holding may be triggered by a complaint from the source account owner through the institution’s 24/7 fraud reporting channel. The originating institution must verify minimum details such as the transaction reference number, source account, amount, date and time, mode of transfer, and receiving institution or beneficiary account if known. (Bureau of Small and Medium Enterprises) (Bureau of Small and Medium Enterprises)

4. Ask for the case number and written acknowledgment

Do not rely only on a phone call. Ask for:

Complaint or ticket number
Name or ID of the agent who received the report, if available
Date and time of report
Email address or portal where you can upload documents
Confirmation that temporary holding or coordinated verification was requested

For complaint-initiated holding, BSP rules require the originating institution to generate an acknowledgment and provide the source account owner with a case reference number. (Bureau of Small and Medium Enterprises)

5. Submit a sworn complaint, affidavit, or police/NBI report within the initial holding period

The initial hold is short. BSP rules define initial holding as not more than five calendar days, and extended holding as not more than 25 additional calendar days after the initial period. Together, temporary holding may last up to 30 calendar days, unless a court extends it. (Bureau of Small and Medium Enterprises) (Bureau of Small and Medium Enterprises)

For extended holding, the source account owner should submit supporting documents such as a sworn complaint, affidavit, police report, or other supporting document within the initial holding period, unless the industry protocol provides otherwise. These documents should explain what happened and why the transaction is probably disputed. (Bureau of Small and Medium Enterprises)

In practice, this is where many victims lose time. A bank or e-wallet may accept your initial hotline report, but still ask for a notarized affidavit, police blotter, NBI/PNP complaint, or additional screenshots before requesting or maintaining an extended hold.

6. Report to CICC Hotline 1326 for cyber scam triage

The Inter-Agency Response Center Hotline 1326 is a government cybercrime response channel where the public can report online selling scams, phishing, text scams, email scams, romance scams, impersonation, investment fraud, and other cybercrimes. Government sources describe it as a 24/7 central number connected with agencies such as CICC, DICT, NPC, NTC, PNP, and NBI. (Philippine Information Agency) (Philippine News Agency)

This is especially useful when:

The scammer is still active online
There are multiple victims
The scam involves phishing links, fake websites, or impersonation
You need guidance on which agency should handle the case

7. File a complaint with NBI Cybercrime Division or PNP Anti-Cybercrime Group

For criminal investigation, file with either:

NBI Cybercrime Division, or the nearest NBI regional cybercrime center
PNP Anti-Cybercrime Group, or the nearest PNP cybercrime unit

The NBI Citizen’s Charter for computer crime complaints states that the general public may proceed to the Cybercrime Division to file a complaint or request investigation; the process includes a complaint sheet, preliminary interview, initial investigation, sworn statements, and submission of supporting documents. The listed government fee is none, and the initial citizen-charter processing time is about 1 hour and 10 minutes, although the full investigation can take much longer depending on complexity, warrants, platform cooperation, and suspect identification. (National Bureau of Investigation)

Bring:

Valid government ID
Printed and digital evidence
Bank/e-wallet proof of transaction
Bank/e-wallet complaint reference number
Draft affidavit or written narration
Your phone or device, if relevant and safe to present
Names and contact details of other victims or witnesses, if any

8. Escalate to BSP if your bank or e-wallet mishandles the complaint

For BSP-supervised institutions, the BSP Consumer Assistance Mechanism is a second-level recourse. BSP instructs consumers to report first to the institution’s Financial Consumer Protection Assistance Mechanism or customer service channel. If unsatisfied, the consumer may escalate to BSP through the BSP Online Buddy chatbot until a BSPCMS reference number is generated; if BOB is not accessible, the consumer may use the CIR form and email BSP with proof that the matter was first raised with the institution.

Escalate when:

The institution refuses to issue a reference number
You reported quickly but the institution did not act or coordinate
You are not informed of the result of temporary holding
The institution gives inconsistent instructions
Your complaint involves possible failure of security controls, unauthorized transactions, or mishandling of your disputed transaction report

What happens after you request temporary holding

Once your bank or e-wallet receives a complaint involving an outgoing disputed transaction, it should verify the transaction, document why it appears disputed, preserve the source account when needed, and either hold funds internally if the beneficiary is in the same institution or send an initial holding request to the receiving institution if the funds went elsewhere. (Bureau of Small and Medium Enterprises)

If the receiving institution successfully holds the funds, the money is considered credited to the beneficiary account but cannot be withdrawn during the holding period. Simultaneously, the institutions and account owners go through coordinated verification. (Bureau of Small and Medium Enterprises)

Possible outcomes include:

Situation	Likely result
Funds are still intact and the scam is substantiated	Funds may be returned to the source institution/account owner after coordinated verification
Beneficiary proves the transaction was legitimate	Hold may be lifted and funds released to the beneficiary
Initial 5-day hold is not supported by documents	Hold may lapse unless extended based on proper grounds
Funds already moved to another account	Institutions may trace the transaction chain and send requests to subsequent receiving institutions
Funds already withdrawn as cash or moved outside the system	Recovery becomes harder; criminal investigation remains important
Court extends the holding period	Funds may remain frozen beyond the 30-day AFASA temporary holding period

BSP rules require coordinated verification to be completed within the 30-calendar-day temporary holding period if funds were held, unless extended by a court. If no funds were held, the coordinated verification process should generally be completed within 30 calendar days, extendible for meritorious reasons up to a total of 60 calendar days. (Bureau of Small and Medium Enterprises)

Required documents checklist

Document or evidence	Why it matters
Valid ID	Proves you are the account owner or complainant
Transaction receipt or screenshot	Shows amount, date, time, reference number, and recipient
Bank/e-wallet statement	Confirms source account and debit
Recipient account details	Helps trace the receiving financial institution
Chat logs and call logs	Shows deception, promises, threats, or impersonation
Scam post, website, QR code, or profile URL	Helps law enforcement and platforms identify the scam infrastructure
Affidavit or sworn complaint	Supports extended holding and criminal complaint
Police/NBI/PNP report or complaint reference	Helps banks justify further verification and supports prosecution
Platform complaint ticket	Useful for Facebook, Marketplace, Shopee, Lazada, TikTok, Telegram, WhatsApp, crypto exchange, or job platform scams
IDs or documents sent by the scammer	May show identity theft or falsification, but do not assume they belong to the scammer

For affidavits signed abroad, Filipinos often execute them before a Philippine embassy or consulate. Foreign notarized documents for use in the Philippines may need an apostille if issued in an Apostille Convention country, or consular authentication if applicable. Philippine embassy guidance confirms that documents issued abroad for use in the Philippines may no longer need “red ribbon” authentication when properly apostilled, while consular officers may notarize documents through acknowledgment or jurat for personal appearances before the consulate. (Philippine Embassy in New Delhi)

Where to report depending on the type of scam

Type of scam	Report to
Bank transfer or e-wallet scam	Your own bank/e-wallet first; then BSP if mishandled
Phishing link, OTP theft, account takeover	Bank/e-wallet, CICC 1326, NBI/PNP cybercrime
Fake online seller	Bank/e-wallet, platform, CICC 1326, NBI/PNP
Investment scam, crypto “guaranteed returns,” Ponzi-style scheme	SEC, NBI/PNP, CICC, bank/e-wallet
Fake lending app or abusive online lending	SEC for lending/financing company issues; NPC if personal data misuse is involved
Credit card or debit card misuse	Card issuer immediately; may involve RA 8484
Identity documents or selfies used without consent	NPC, NBI/PNP, bank/e-wallet if financial account involved
Large organized scam or laundering indicators	NBI/PNP, AMLC referral through authorities, bank suspicious transaction processes

For SEC-related complaints, the SEC’s iMessage portal is its web-based platform for public inquiries, complaints, incidents, and requests, and it generates electronic tickets for submissions. (Securities and Exchange Commission)

For privacy-related complaints, the National Privacy Commission requires a formal complaint in a specific format; its process generally involves downloading the complaint form, filling it out, having it notarized, and submitting it through the accepted channels. (National Privacy Commission)

Common mistakes that weaken online scam reports

Waiting too long before reporting to the bank or e-wallet

Scam funds often move within minutes. Report immediately even if your evidence is not yet complete. You can submit additional documents afterward.

Reporting only to the receiving bank

Start with your own bank or e-wallet. Under BSP rules, the originating financial institution is the key actor that can initiate complaint-based holding and send requests to receiving institutions.

Sending incomplete transaction details

A report saying “I was scammed” is not enough. Always provide the transaction reference number, amount, date, time, recipient account, and screenshots.

Deleting the conversation out of shame or anger

Do not delete chats. Even embarrassing conversations can be important evidence in romance scams, sextortion, fake job scams, and social engineering cases.

Posting the alleged scammer’s personal data online

Publicly posting IDs, account numbers, addresses, or accusations can create privacy, defamation, or mistaken-identity problems. Give the information to your bank, platform, CICC, NBI, PNP, or prosecutor instead.

Filing a false or exaggerated report

AFASA penalizes malicious reporting. A person who, with malice or bad faith, files completely unwarranted or false information that results in temporary holding of funds may face imprisonment of one to five years, a fine of ₱50,000 to ₱200,000, or both. (Supreme Court E-Library)

Practical realities: refunds are possible, but not automatic

A successful temporary hold does not always mean instant refund. The bank or e-wallet must verify whether the transaction is truly disputed. The beneficiary account owner may challenge the hold and submit evidence showing the transaction was legitimate. BSP rules allow the beneficiary to request lifting of the hold by submitting documents such as affidavits, sworn statements, police reports, or evidence on the purpose of the transaction, relationship of the parties, or source of funds. (Bureau of Small and Medium Enterprises)

You are more likely to recover funds when:

You report within minutes or hours
The funds remain in the receiving account
You provide complete transaction details
You submit a sworn complaint or police/NBI report within the initial holding period
The scam involves clear deception, impersonation, phishing, or unauthorized access
There are multiple victims with similar evidence

Recovery is harder when:

The scammer cashed out immediately
Funds passed through several mule accounts
You sent crypto to an offshore wallet
You voluntarily sent repeated transfers over several weeks without documenting the deception
The receiving account belongs to an identity-theft victim or paid mule who also lacks records
The platform or foreign service provider is outside Philippine jurisdiction

Special notes for OFWs, foreigners, and victims abroad

A Filipino abroad or a foreigner can still report a scam involving a Philippine bank, e-wallet, phone number, platform user, or victim in the Philippines. AFASA jurisdiction applies where any element was committed in the Philippines, where Philippine computer or financial infrastructure was used, where damage was caused to a person in the Philippines, or where the financial account is maintained with an institution operating in the Philippines. (Supreme Court E-Library)

Practical issues for overseas complainants:

Banks and e-wallets may require identity verification through their app, hotline, video process, or branch/representative procedure.
Law enforcement may require a sworn complaint. If signed abroad, ask whether the receiving office will accept a consular-notarized affidavit, apostilled foreign notarization, or later personal affirmation.
Time zone delays matter. Use 24/7 fraud channels first, then send documents by email or portal.
If you need someone in the Philippines to follow up, prepare a properly notarized or consularized Special Power of Attorney if the agency or bank requires it.

Frequently Asked Questions

Can I directly freeze the scammer’s bank account or GCash account?

No. A private person cannot directly freeze another person’s account. You can report the disputed transaction to your own bank or e-wallet and request temporary holding and coordinated verification. Law enforcement, AMLC, BSP processes, or courts may become involved depending on the case.

Do I need a police report before reporting to my bank or e-wallet?

No. Report to your bank or e-wallet immediately, even before you get a police report. But for extended holding beyond the initial period, you may be asked to submit a sworn complaint, affidavit, police report, NBI/PNP complaint, or similar supporting document.

How long can scam-related funds be held?

Under BSP rules implementing AFASA, the initial holding period is up to five calendar days, and it may be extended by up to 25 more calendar days, for a total of up to 30 calendar days. A longer hold requires a court of competent jurisdiction. (Bureau of Small and Medium Enterprises) (Bureau of Small and Medium Enterprises)

What if the scammer already withdrew the money?

The institution may no longer have funds to hold, but you should still report. Coordinated verification can trace the transaction chain, and law enforcement can use the transaction records, account data, platform data, and other evidence for investigation.

Will the bank tell me the scammer’s full name and address?

Usually not directly. Banks and e-wallets must protect customer information, but AFASA allows coordinated verification and information sharing among institutions and competent authorities for covered investigations. Law enforcement and BSP processes are the proper channels for obtaining account information.

Can I get a refund from the bank or e-wallet?

Possibly, but it depends on the facts. AFASA states that institutions may be liable for restitution if they failed to employ adequate risk management systems or failed to exercise the required diligence in preventing loss from covered offenses; conviction is not required before restitution. (Supreme Court E-Library) But if the institution complied with security rules and the funds were withdrawn before any hold could be made, recovery may be difficult.

Is an online selling scam estafa?

It can be. If the seller used deceit—such as pretending to sell goods, using a fake identity, accepting payment with no intent to deliver, or making false promises before payment—the facts may support estafa under Article 315 of the Revised Penal Code. If the deception used online systems, cybercrime laws may also apply.

Should I report an investment scam to the SEC?

Yes, if the scam involves investment solicitation, guaranteed returns, crypto trading pools, staking schemes, “tasking” investments, fake lending/financing companies, or any offer that looks like securities or investment contracts. Also report the payment transaction to your bank/e-wallet and file with NBI/PNP if there is fraud.

What if I accidentally sent money to the wrong account?

That is different from a scam. BSP Circular No. 1215 states that temporary holding rules for disputed scam-related funds do not apply to erroneous transactions, such as sending to an incorrect beneficiary account because of wrong encoding or sending the wrong amount. Erroneous transfers are handled under consumer protection and institutional procedures, not the AFASA scam-hold process. (Bureau of Small and Medium Enterprises)

Can I report if I am abroad?

Yes. Report first through your bank/e-wallet’s official fraud channel and CICC 1326 if accessible. For sworn documents, you may need consular notarization or apostille depending on where the document is executed and how the Philippine agency or institution wants it submitted.

Key Takeaways

Report to your own bank or e-wallet immediately and request temporary holding of disputed funds under AFASA.
Get a case reference number and submit complete transaction details.
The initial hold is short: up to five calendar days, extendible up to a total of 30 calendar days unless a court extends it.
File with CICC 1326, NBI Cybercrime Division, or PNP Anti-Cybercrime Group for cybercrime investigation.
Submit a sworn complaint, affidavit, police report, or NBI/PNP report quickly to support extended holding.
Escalate to BSP Consumer Assistance Mechanism only after first reporting to the bank or e-wallet, unless the institution gives no usable complaint channel.
Report investment schemes to the SEC and personal data misuse to the NPC when those issues are involved.
Preserve evidence carefully; do not delete chats, edit screenshots, or post sensitive personal data online.