If you were tricked into sending money through a bank transfer, e-wallet, QR code, crypto platform, online shop, fake investment scheme, romance scam, job scam, or phishing link in the Philippines, time matters. The first goal is not yet “winning a case”; it is to stop the money from moving further, preserve digital evidence, and create an official trail that the bank, e-wallet, police, NBI, BSP, AMLC, prosecutor, or court can act on. This guide explains how online scam reporting works in the Philippines, what a “freeze order” really means, and what practical steps give you the best chance of recovering funds.

What a Freeze Order Means in an Online Scam Case

People often use “freeze order” to mean any hold placed on a bank or e-wallet account. In Philippine law and practice, there are different tools:

Tool	Who initiates it	What it does	Typical use
Temporary holding of disputed funds under AFASA	Bank, e-wallet, or other BSP-supervised institution after a complaint, fraud alert, or coordinated verification	Temporarily holds disputed funds so they cannot be withdrawn during verification	Fast first response after a scam transfer
Court of Appeals freeze order under AMLA	Anti-Money Laundering Council (AMLC), through a verified ex parte petition	Freezes monetary instruments or property linked to unlawful activity or money laundering	Larger or traceable scam proceeds, organized fraud, money mule networks
Cybercrime preservation/disclosure/search orders	PNP, NBI, DOJ cybercrime authorities, with required legal process	Preserves or obtains subscriber data, traffic data, logs, devices, or account evidence	Identifying the scammer, SIM user, IP logs, platform account, or transfer trail

The fastest practical step for most victims is not to wait for a formal court freeze order. It is to report the transaction immediately to your bank or e-wallet and ask for temporary holding and coordinated verification under the Anti-Financial Account Scamming Act, or AFASA.

Legal Basis for Reporting Online Scams in the Philippines

Online scams may fall under several Philippine laws at the same time. The exact charge depends on how the scam was done, what account was used, and what evidence exists.

Anti-Financial Account Scamming Act: RA 12010 of 2024

Republic Act No. 12010, or the Anti-Financial Account Scamming Act (AFASA), directly targets scams involving financial accounts, including bank accounts, deposit accounts, credit card accounts, e-wallets, and other accounts used for financial products or services. It covers money muling, social engineering schemes, and related offenses. AFASA recognizes that scammers often use electronic messages, fake identities, and mule accounts to move stolen money quickly. (Supreme Court E-Library)

AFASA is especially important because it gives BSP-supervised institutions authority to temporarily hold funds subject of a disputed transaction. The law allows holding within the period prescribed by BSP, not exceeding 30 calendar days, unless extended by a court of competent jurisdiction. (Supreme Court E-Library)

BSP Circular No. 1215, Series of 2025, implements the rules on temporary holding of funds subject of disputed transactions and coordinated verification. It provides that the total temporary holding period is not more than 30 calendar days, and defines an initial holding period of not more than five calendar days. (Bureau of the Treasury)

Cybercrime Prevention Act: RA 10175 of 2012

Republic Act No. 10175, or the Cybercrime Prevention Act of 2012, applies when the scam uses computers, phones, online accounts, social media, emails, websites, e-wallet apps, or other digital systems.

Its implementing rules recognize computer-related fraud and computer-related identity theft. They also provide that crimes under the Revised Penal Code and special laws committed through information and communications technology are covered by RA 10175, with the penalty generally one degree higher. (Supreme Court E-Library)

The NBI and PNP are the main law-enforcement authorities for cybercrime cases, with the DOJ Office of Cybercrime coordinating enforcement efforts. (Supreme Court E-Library)

Revised Penal Code: Estafa or Swindling

Many online scams are still prosecuted as estafa under Article 315 of the Revised Penal Code, especially when the scammer used deceit to make the victim part with money. Examples include fake sellers, fake investment managers, fake loan processors, romance scammers, fake travel agents, and persons who pretend to be someone else to obtain payment.

When the fraud is committed through online means, RA 10175 may also apply.

Access Devices Regulation Act: RA 8484

Republic Act No. 8484, as amended, may apply when the scam involves credit cards, debit cards, account numbers, access codes, or unauthorized access devices. It penalizes acts such as using an unauthorized access device with intent to defraud or trafficking in counterfeit or unauthorized access devices. (Lawphil)

Anti-Money Laundering Act: RA 9160, as amended

A formal freeze order is usually discussed under the Anti-Money Laundering Act, or AMLA. Under Section 10 of RA 9160, as amended by RA 10167, the Court of Appeals may issue a freeze order upon a verified ex parte petition by the AMLC if probable cause exists that the monetary instrument or property is related to an unlawful activity. The freeze order is effective immediately. (Supreme Court E-Library)

The Supreme Court has explained that a freeze order is an extraordinary interim relief meant to prevent dissipation, removal, or disposal of property suspected to be proceeds of or related to unlawful activity or money laundering. (Supreme Court E-Library)

Step-by-Step Guide: What to Do Immediately After an Online Scam

1. Secure your accounts first

Before filing reports, stop further loss.

Do these immediately:

Change passwords for your email, banking apps, e-wallets, social media, and marketplace accounts.
Log out all active sessions if the app allows it.
Freeze or lock your card in the app if available.
Disable linked cards, saved payment methods, and auto-debit arrangements.
Turn on multi-factor authentication.
Report any unauthorized SIM swap, lost phone, hacked email, or compromised device.

Do not delete the scammer’s messages. Do not threaten the scammer. Do not announce online that you are gathering evidence. Scammers often delete accounts, change usernames, or move money faster when warned.

2. Report the transaction to your bank or e-wallet immediately

Use the bank or e-wallet’s official fraud hotline, in-app dispute channel, branch, or verified customer support channel. Say clearly:

“I am reporting a disputed transaction caused by an online scam. Please log this as a fraud report, issue a reference number, and initiate temporary holding and coordinated verification under AFASA if the funds are still within the financial system.”

Give the bank or e-wallet:

Your full name and account number or e-wallet number
Date and exact time of transfer
Amount
Transaction reference number
Recipient account name, account number, e-wallet number, QR merchant name, or phone number
Screenshots of the scam conversation
A short timeline of what happened
Any police/NBI/CICC reference number, if already available

AFASA is built around this kind of coordinated verification. Under BSP rules, temporary holding can be triggered by a complaint from the source account owner, information from another institution, or detection by a fraud management system. (Bureau of the Treasury)

3. Ask for a written reference number

A phone call is not enough. Get a case number, ticket number, email confirmation, or incident report. You will need it when filing with PNP, NBI, BSP, or the prosecutor.

If the bank or e-wallet refuses to act, delays unreasonably, or gives only generic replies, escalate through its Financial Consumer Protection Assistance Mechanism, then to the BSP Consumer Assistance Mechanism. BSP states that consumers should first report to the BSP-supervised institution’s own complaint channel, and may escalate to BSP through BSP Online Buddy or by email with supporting documents if dissatisfied. (Bureau of the Treasury)

4. Preserve digital evidence properly

Good evidence is not just a screenshot of a profile picture. Build a clear evidence folder.

Include:

Evidence	Why it matters
Transaction receipt or transfer confirmation	Shows amount, date, time, and reference number
Sender and recipient account details	Helps trace the money trail
Full chat screenshots	Shows deceit, instructions, promises, threats, or impersonation
Profile links, usernames, phone numbers, email addresses	Helps investigators identify accounts
Website URLs, marketplace listings, QR codes	Helps connect the scam to a platform or merchant
Bank/e-wallet complaint reference numbers	Proves immediate reporting
Police, NBI, CICC, or prosecutor reference numbers	Supports escalation and formal investigation
Device information and login alerts	Useful in phishing, hacking, or account takeover cases

For screenshots, capture the date, time, username, URL, phone number, and full conversation context. If possible, export chats or save webpages as PDF. Keep original files and do not alter them.

5. Report to CICC, PNP Anti-Cybercrime Group, or NBI Cybercrime Division

You can report online scams through cybercrime authorities.

The government’s Inter-Agency Response Center Hotline 1326 is described by the Philippine Information Agency as a 24/7 central number for reporting online scams, including online selling scams, phishing, impersonation, investment fraud, cybercrimes, and similar incidents. Enforcement is handled by PNP-ACG and the NBI Cybercrime Division. (Philippine Information Agency)

For PNP-ACG, a PNP response on the official FOI portal directed a scam complainant to the PNP Anti-Cybercrime Group eComplaint Desk and email channel for this type of concern. (www.foi.gov.ph)

For NBI, the NBI Citizen’s Charter for the CyberCrime Division states that the general public may file a complaint or request investigation assistance. It describes intake steps such as filling out a complaint sheet, preliminary interview, sworn statements or affidavits, submission of supporting documents, and device examination when relevant. The listed government fees are none, with the intake process stated as about one hour and ten minutes for the basic frontline transaction. (National Bureau of Investigation)

6. Prepare a complaint-affidavit

For serious cases, repeated follow-ups, prosecutor filing, or bank escalation, a complaint-affidavit is often needed. This is a sworn written statement explaining what happened, usually notarized in the Philippines or executed before an authorized officer if abroad.

A practical complaint-affidavit should include:

Your full name, address, contact details, and ID information.
The scammer’s known name, alias, username, phone number, email, bank/e-wallet account, or platform profile.
A chronological timeline.
Exact amount lost and transaction references.
How the scammer deceived you.
What you did after discovering the scam.
List of attachments.
A request for investigation, preservation of evidence, and financial account tracing.

Use clear language. Do not exaggerate. Do not include facts you cannot support.

7. Ask investigators to preserve data and trace accounts

Digital evidence disappears quickly. Under RA 10175 rules, service providers must preserve traffic data and subscriber information for at least six months from the transaction, and content data for six months from receipt of a preservation order from law enforcement. Law enforcement may order a one-time extension for another six months. (Supreme Court E-Library)

When filing with PNP or NBI, include a request such as:

“I respectfully request preservation of relevant computer data, subscriber information, transaction records, and platform logs, and coordination with the concerned bank/e-wallet for temporary holding and tracing of the disputed funds.”

This wording helps investigators see that the case is not only about identifying a scammer; it is also about preserving the money trail.

How to Seek a Freeze Order in the Philippines

For ordinary victims, the most important point is this:

You usually do not personally file a Court of Appeals freeze order petition.

Under AMLA, the petition for a freeze order is filed by the AMLC, not by the private complainant. The victim’s role is to provide complete evidence to the bank/e-wallet, PNP, NBI, DOJ, prosecutor, or other competent authority so the matter can be evaluated for AMLC action.

The Court of Appeals freeze order is available when there is probable cause that the money, account, or property is related to an unlawful activity or money laundering. It may cover related and materially linked accounts, but the Supreme Court has emphasized safeguards: the related accounts must be included in the application, the amount or value must be identified, the CA must independently find probable cause, and the freeze cannot go beyond the value supported by probable cause. (Supreme Court of the Philippines)

A freeze order is effective immediately for 20 days. During that period, the Court of Appeals must conduct a summary hearing with notice to the parties to determine whether to modify, lift, or extend it. The total period should not exceed six months, and a person whose account is frozen may move to lift the freeze order. (Supreme Court of the Philippines)

What to submit so a freeze order becomes realistic

A freeze order becomes more realistic when your evidence shows:

The exact recipient account or wallet
The transfer chain, if money moved through several accounts
Multiple victims with the same recipient, merchant, QR code, or platform account
Organized activity, such as recruiters, handlers, fake investment groups, or money mules
Large amounts or repeated transactions
Links to unlawful activity, estafa, cybercrime, access device fraud, securities fraud, or other predicate offenses
Prompt reporting to the financial institution and law enforcement

A formal AMLA freeze order does not automatically refund your money. It preserves assets while the State builds a criminal, civil forfeiture, or money laundering case. Actual recovery may come later through restitution, forfeiture, bank/e-wallet responsibility under AFASA or financial consumer protection rules, settlement, or a separate civil action.

Required Documents, Offices, Fees, and Timelines

Step	Office or channel	Documents usually needed	Fees	Practical timeline
Report disputed transfer	Bank, e-wallet, card issuer, payment service provider	Valid ID, transaction receipt, screenshots, recipient details, written timeline	Usually none	Immediately; best within minutes or hours
Temporary holding / coordinated verification	Bank or e-wallet under AFASA/BSP rules	Fraud report, transaction details, supporting screenshots, complaint reference	Usually none	Initial holding may be up to 5 calendar days; total temporary holding up to 30 calendar days unless court-extended
Escalate bank/e-wallet handling	BSP Consumer Assistance Mechanism	Proof you first reported to the institution, reference number, CIR form or BOB complaint details	None for filing	Depends on queue and institution response
Cybercrime report	CICC 1326, PNP-ACG, NBI Cybercrime Division	Valid ID, evidence folder, complaint-affidavit if available	Usually none for reporting	Intake can be same day; investigation depends on evidence and cooperation from platforms/institutions
Prosecutor complaint	Office of the City or Provincial Prosecutor	Notarized complaint-affidavit, affidavits of witnesses, documentary evidence	No criminal filing docket fee, but notarization/certified copies may cost	Weeks to months for preliminary investigation
AMLA freeze order	AMLC petition before Court of Appeals	Usually built from law-enforcement, bank, AMLC, and transaction records	Not filed by victim	Urgent once AMLC acts, but referral and evidence gathering can be the bottleneck

Practical Realities and Common Bottlenecks

The money may move faster than the paperwork

Many scam transfers are withdrawn, cashed out, converted to crypto, or moved to another account within minutes. This is why the first report should go to the sending bank or e-wallet immediately. A police report filed days later may help the criminal case, but it may be too late to stop the funds.

Recipient accounts are often money mule accounts

The name on the recipient bank or e-wallet account may not be the mastermind. AFASA specifically penalizes money muling activities, including using, borrowing, lending, selling, renting, or recruiting others to use financial accounts for criminal proceeds. (Supreme Court E-Library)

This matters because investigators may need to trace beyond the first recipient.

A police blotter is not the same as a criminal case

A barangay blotter or police blotter can document that you reported the incident, but it is not automatically a prosecutor complaint. For criminal prosecution, authorities usually need sworn statements, evidence, and docketing for investigation or preliminary investigation.

Banks may ask for a police report before acting further

Some banks and e-wallets ask for a police report, NBI report, or notarized affidavit. Provide it if requested, but do not wait for it before making the first fraud report. Report to the financial institution first, then supplement your file.

Posting the scammer online can create new risks

It is understandable to warn others, but public posts with names, photos, IDs, addresses, or accusations can create defamation, privacy, or cyberlibel risks if the information is wrong, excessive, or not yet verified. A safer approach is to report to platforms and authorities, and share warnings without exposing unnecessary personal data.

Special Notes for OFWs, Filipinos Abroad, and Foreigners

If you are abroad but the scam involves a Philippine bank, e-wallet, Filipino victim, Philippine phone number, Philippine platform seller, or Philippine-based money mule, you can still prepare a report.

Practical steps:

Report immediately through your bank/e-wallet app or hotline.
Save all evidence in Philippine time if possible, or state the time zone clearly.
Execute a complaint-affidavit before a Philippine Embassy or Consulate if required, or ask the receiving office whether a foreign-notarized and apostilled affidavit is acceptable.
Issue a Special Power of Attorney if a trusted representative in the Philippines will file documents or follow up.
Keep your passport, visa/ID, Philippine ID if any, and proof of account ownership ready.

For apostille-related processes, the DFA’s Apostille system accepts applications from the document owner or an authorized representative, and lists affidavits and Special Powers of Attorney among documents that may require authentication depending on use. (DFA Appointment System)

Foreigners in the Philippines should bring a passport, ACR I-Card if applicable, local address, contact number, and proof of the transaction. The fact that you are not Filipino does not prevent you from reporting a scam involving Philippine accounts, suspects, platforms, or evidence.

Frequently Asked Questions

Can I freeze a scammer’s GCash, Maya, or bank account?

You can report the transaction and request immediate action, but you personally do not “freeze” the account. The bank or e-wallet may temporarily hold disputed funds under AFASA and BSP rules if the circumstances support it. A formal AMLA freeze order must come from the Court of Appeals upon AMLC petition.

Is a police report enough to get my money back?

Not always. A police report helps prove that you reported the scam, but recovery depends on whether the funds are still traceable, whether the financial institution can hold them, whether the recipient account is verified, and whether legal grounds exist for restitution, reversal, civil forfeiture, or court action.

How fast should I report an online scam?

Immediately. In practice, reporting within minutes or hours gives a better chance of temporary holding. Waiting several days often means the money has already been withdrawn or transferred.

Can I report if I only know the scammer’s phone number or Facebook account?

Yes. Report what you have, but strengthen it with screenshots, profile links, usernames, transaction receipts, QR codes, and timestamps. Law enforcement may use preservation or disclosure processes under RA 10175 when a case is properly docketed.

Can I directly ask AMLC for a freeze order?

You can provide information, but the formal Court of Appeals freeze order petition is filed by AMLC, not by the private victim. A practical route is to file a strong report with your bank/e-wallet, PNP, NBI, CICC, or prosecutor and specifically request financial account tracing and AMLC referral if warranted.

What if the recipient account owner says they were only asked to receive money?

That may still be serious. AFASA penalizes money muling activities, including allowing the use of a financial account or selling, lending, renting, or recruiting accounts for criminal proceeds. The account owner’s knowledge, intent, and circumstances will matter in the investigation.

What if the scam was an investment scheme?

Report to law enforcement and also to the SEC if the scheme involved public solicitation of investments, “guaranteed returns,” trading pools, crypto investment clubs, lending schemes, or corporate entities using SEC registration to appear legitimate. The SEC iMessage portal accepts complaints and tickets through its online system. (Securities and Exchange Commission)

What if the bank or e-wallet ignores me?

Escalate internally first through the institution’s Financial Consumer Protection Assistance Mechanism. If unresolved or mishandled, escalate to BSP through BSP Online Buddy or the BSP Consumer Assistance Mechanism with your complaint reference, proof of report, transaction records, and screenshots.

Can I file a case even if the scammer used a fake name?

Yes. Many cybercrime and estafa cases start with aliases, dummy accounts, mule accounts, or fake profiles. The point of early reporting is to preserve data and trace accounts before records disappear or funds move.

Key Takeaways

Report first to your bank or e-wallet and ask for fraud handling, temporary holding, and coordinated verification under AFASA.
A formal Court of Appeals freeze order is filed by AMLC, not directly by the victim.
Save complete evidence: receipts, chats, URLs, usernames, numbers, timestamps, and complaint reference numbers.
File with CICC 1326, PNP-ACG, or NBI Cybercrime Division, especially when the scam involves online accounts, phishing, hacking, mule accounts, or multiple victims.
A police report helps, but recovery usually depends on fast financial reporting, traceable funds, and proper legal follow-through.
OFWs, Filipinos abroad, and foreigners can still report Philippine-linked online scams with properly prepared affidavits, IDs, evidence, and authorization documents when needed.