If you were scammed online and money was sent to a Philippine bank account, e-wallet, crypto-linked account, or payment channel, the most important thing is speed. Philippine law now gives banks and e-wallet providers tools to temporarily hold suspicious funds, but a true court-issued freeze order is handled through the Anti-Money Laundering Council (AMLC) and the Court of Appeals—not by a private complainant filing directly on their own. This guide explains how to report an online scam in the Philippines, what evidence to prepare, where to file, how temporary holding under the Anti-Financial Account Scamming Act works, and how a freeze order may be sought in practice.
What “Freezing the Money” Means in a Philippine Online Scam
People often use “freeze the account” to mean any action that stops the scammer from withdrawing or moving the money. Under Philippine law, there are two different mechanisms to understand.
| Mechanism | Who initiates it | Who issues it | Typical purpose | Time limit |
|---|---|---|---|---|
| Temporary holding of funds | Bank, e-wallet, or other BSP-supervised financial institution | Financial institution under BSP rules | Fast, first-response action for disputed electronic transfers | Generally up to 30 calendar days unless extended by court |
| Freeze order | AMLC through a verified petition | Court of Appeals | Preserve money or property probably related to unlawful activity or money laundering | Initially 20 days; may extend up to 6 months after summary hearing |
The first mechanism is usually what victims need immediately. The second is stronger, court-based, and normally requires law enforcement and AMLC evaluation.
Legal Basis: Philippine Laws That Apply to Online Scams
Online scams in the Philippines may involve several laws at the same time. The exact charge depends on what happened.
Estafa or Swindling Under the Revised Penal Code
Many online scams are prosecuted as estafa under Article 315 of the Revised Penal Code. Estafa generally involves deceit or abuse of confidence that causes damage to another person.
Common examples include:
- A seller accepts payment but never intends to deliver the item.
- A fake recruiter asks for “processing fees” for a nonexistent job.
- A person pretends to be someone else to borrow money.
- A fake investment promoter promises impossible returns and disappears.
If the fraud was committed through a computer system, social media, messaging app, email, or similar technology, the Cybercrime Prevention Act may also apply.
Cybercrime Prevention Act of 2012
Republic Act No. 10175, or the Cybercrime Prevention Act of 2012, covers computer-related fraud, computer-related identity theft, illegal access, misuse of devices, and other cyber-enabled offenses.
It is especially relevant when the scam involves:
- Hacked accounts
- Phishing links
- OTP theft
- Fake login pages
- Identity theft
- Unauthorized account access
- Deceptive online payment instructions
- Fraud committed through Facebook, Telegram, Viber, WhatsApp, email, marketplace platforms, or online banking channels
The law also gives the PNP and NBI cybercrime units authority to investigate cybercrime complaints and obtain court orders for preservation, disclosure, search, seizure, and examination of computer data.
Anti-Financial Account Scamming Act
Republic Act No. 12010, or the Anti-Financial Account Scamming Act, is highly relevant to online scam victims because it directly targets money muling, social engineering schemes, and the misuse of bank accounts, e-wallets, and other financial accounts.
AFASA covers financial accounts such as:
- Bank deposit accounts
- Credit card accounts
- Investment accounts
- Transaction accounts
- E-wallet accounts
- Other accounts under financial consumer protection laws
It penalizes activities such as:
- Selling, lending, renting, or allowing another person to use a financial account for scam proceeds
- Opening accounts using fictitious names or another person’s identity
- Recruiting people to become money mules
- Social engineering schemes that trick people into giving sensitive identifying information
- Fraudulent access or control over a financial account
AFASA also authorizes financial institutions to temporarily hold funds involved in disputed transactions, subject to BSP rules.
Anti-Money Laundering Law and Freeze Orders
Republic Act No. 9160, as amended by later laws including Republic Act No. 11521, governs money laundering investigations and freeze orders.
A freeze order is issued by the Court of Appeals upon a verified ex parte petition by the AMLC. “Ex parte” means the petition may be heard without first notifying the account holder, because advance notice could allow funds to be moved.
The Court of Appeals may issue a freeze order when there is probable cause that a monetary instrument or property is related to an unlawful activity or money laundering offense. Scam proceeds may qualify when connected to covered unlawful activities such as estafa, securities fraud, cybercrime, or similar offenses.
In Manganip v. Republic, Powerlink.com Corp. v. Republic, and Codeworks.ph Inc. v. Republic, decided in 2025, the Supreme Court clarified that freeze orders may cover related and materially linked accounts, but safeguards apply. The AMLC petition must describe the accounts and amounts involved, the Court of Appeals must independently determine probable cause, and the freeze must be limited to the value supported by probable cause.
What to Do Immediately After an Online Scam
The first few hours matter. Many scam proceeds are moved through layers of mule accounts, e-wallets, withdrawals, crypto purchases, or transfers to other banks.
1. Stop Communicating in a Way That Helps the Scammer
Do not send more money, even if the scammer says the payment is “for refund processing,” “tax clearance,” “unlocking fee,” “anti-money laundering clearance,” or “final verification.”
Do not warn the scammer that you are reporting them if doing so may cause them to delete accounts, block you, or move funds faster.
2. Call or Message Your Bank or E-Wallet Immediately
Report the transaction to your own bank, e-wallet, or payment provider as a fraud or scam transaction.
Ask for:
- A fraud report or ticket number
- Temporary holding or recall assistance
- Coordinated verification with the receiving financial institution
- Written confirmation of your report
- Instructions for submitting evidence
Use clear language such as:
“I am reporting a disputed transaction caused by an online scam. Please initiate fraud handling, coordinate with the receiving financial institution, and assess temporary holding of funds under the Anti-Financial Account Scamming Act and BSP rules.”
For banks and e-wallets, the faster you report, the better the chance that some funds remain in the recipient account.
3. Report to Law Enforcement
For cyber-enabled scams, report to the PNP Anti-Cybercrime Group, the NBI Cybercrime Division, or both.
Useful official channels include:
- PNP Anti-Cybercrime Group eComplaint portal
- NBI Cybercrime Division citizen’s charter
- NBI Fraud and Financial Crimes Division citizen’s charter
- CICC Inter-Agency Response Center hotline 1326 for cybercrime and online scam reports
- CICC email channel: report@cicc.gov.ph
Keep your complaint number, investigator’s name, and the office where your report was received.
4. Preserve All Digital Evidence
Do not delete chats, emails, SMS messages, call logs, app notifications, marketplace listings, or transaction receipts.
Take screenshots, but also preserve the original data inside the app or device. Screenshots are helpful, but investigators may later need metadata, URLs, full headers, account identifiers, timestamps, or device information.
5. Prepare a Short Timeline
Write a simple timeline while your memory is fresh:
| Date and time | What happened | Evidence |
|---|---|---|
| July 1, 9:15 AM | Saw Facebook Marketplace listing | Screenshot of listing and seller profile |
| July 1, 10:05 AM | Seller sent payment details | Chat screenshot |
| July 1, 10:15 AM | Sent ₱15,000 via bank transfer | Transfer receipt |
| July 1, 11:30 AM | Seller stopped replying | Chat record |
| July 1, 12:00 PM | Reported to bank | Ticket number |
This makes your bank report, police complaint, and affidavit much stronger.
Where to Report an Online Scam in the Philippines
Different offices handle different parts of the problem. Filing with the wrong office can waste valuable time.
| Situation | Where to report | Purpose |
|---|---|---|
| Money sent through bank or e-wallet | Your bank/e-wallet first | Attempt temporary hold, recall, investigation, account tracing |
| Bank/e-wallet does not act properly | BSP consumer assistance after first reporting to the institution | Escalate financial consumer complaint |
| Scam happened online or through digital account | PNP ACG or NBI Cybercrime Division | Cybercrime investigation, evidence preservation, possible criminal complaint |
| Investment scam, fake securities, unregistered investment solicitation | SEC through its official complaint channels | Regulatory action and possible referral for prosecution |
| Estafa with identifiable suspect | Prosecutor’s Office, often with help from PNP/NBI | Preliminary investigation and criminal prosecution |
| Possible money laundering or scam network | Law enforcement, bank compliance unit, AMLC referral path | Possible AMLC investigation and freeze order petition |
For BSP-supervised institutions, the usual process is to complain first to the bank, e-wallet, or financial institution through its consumer assistance mechanism. If the response is inadequate or unresolved, you may escalate through the BSP Consumer Assistance Channels.
How to Seek a Freeze Order in Practice
A private scam victim normally does not personally file a freeze order petition in the Court of Appeals. Under the Anti-Money Laundering Act, the AMLC files the verified petition.
What you can do is build the record that allows the bank, law enforcement, and AMLC to act.
Step 1: Ask for Temporary Holding Under AFASA
When you report to your bank or e-wallet, specifically ask them to assess the transaction as a disputed transaction under AFASA and BSP rules.
Under BSP regulations implementing AFASA, a financial institution may temporarily hold funds in a disputed electronic transfer. The initial holding period is generally up to 5 calendar days, with a possible extended holding period of up to 25 additional calendar days. The total holding period generally should not exceed 30 calendar days unless extended by a court.
This is not the same as returning the money. It is a preservation step.
Step 2: Give Complete Receiving Account Details
Provide every detail you have:
- Receiving bank or e-wallet
- Account name
- Account number or mobile number
- QR code, merchant ID, or username
- Transaction reference number
- Date and time of transfer
- Amount
- Screenshots of payment instructions
- Proof that the payment was induced by fraud
Even a mobile number or partial account name can help, but complete transaction details are much better.
Step 3: File a Law Enforcement Report
A law enforcement report helps establish that the transaction is not merely a private payment dispute. It also allows investigators to request preservation of computer data and pursue subscriber information, platform data, and other evidence through proper legal process.
For cybercrime complaints, the NBI citizen’s charter provides for complaint intake, initial interview, sworn statements, submission of documents, and possible device examination. The PNP ACG also accepts online complaints through its eComplaint portal.
Step 4: Ask That the Matter Be Evaluated for AMLC Referral
If the scam appears to involve a large amount, multiple victims, mule accounts, investment fraud, organized activity, or rapid layering of funds, ask the investigator and the financial institution whether the matter can be referred for AMLC evaluation.
Useful wording:
“The transaction appears to involve scam proceeds and possible money muling. I respectfully request that the matter be evaluated for reporting and referral to the AMLC, including possible preservation or freeze action if warranted.”
Banks and covered institutions have their own reporting duties for suspicious transactions. Law enforcement agencies may also coordinate with AMLC when the facts justify it.
Step 5: Understand What the Court of Appeals Freeze Order Does
If the AMLC finds sufficient basis, it may file a verified petition with the Court of Appeals. The court may issue a freeze order effective immediately for 20 days. Within that period, the court conducts a summary hearing to determine whether to extend the freeze. The total freeze period generally cannot exceed 6 months.
A freeze order is meant to preserve property while investigation or prosecution proceeds. It does not automatically transfer the frozen money to the victim.
Documents and Evidence Checklist
Prepare both digital and printed copies where possible.
| Evidence | Why it matters |
|---|---|
| Government ID | Establishes identity of complainant |
| Transaction receipts | Shows amount, date, time, reference number, and account details |
| Full chat history | Proves inducement, false promises, payment instructions, and blocking |
| Seller or scammer profile | Helps identify account, handle, URL, number, or linked pages |
| Marketplace listing or ad | Shows the representation that induced payment |
| Bank/e-wallet ticket numbers | Proves prompt reporting |
| Timeline of events | Helps investigators understand the case quickly |
| Proof of non-delivery or failed promise | Supports fraud, not just delay |
| Device screenshots and app notifications | Useful for phishing, OTP theft, or account takeover |
| Names of witnesses or other victims | May show organized scam activity |
For filing with prosecutors, you may need a sworn complaint-affidavit. If you are abroad, documents signed overseas may need consular acknowledgment, notarization, or apostille depending on where and how they will be used in the Philippines.
Practical Timelines, Fees, and Bottlenecks
| Action | Typical timing | Fees | Common bottleneck |
|---|---|---|---|
| Report to bank/e-wallet | Immediately, ideally within hours | Usually none | Funds already withdrawn or transferred |
| Initial temporary hold under AFASA | Up to 5 calendar days if applicable | None charged to victim in ordinary reporting | Receiving institution may find no remaining funds |
| Extended temporary hold | Up to 25 additional calendar days | Usually none | Need more verification or court action |
| NBI Cybercrime complaint intake | Initial processing may be completed the same day | No filing fee for complaint intake | Incomplete evidence or missing affidavit |
| PNP ACG report | Varies by office and case complexity | Usually no filing fee | High case volume and need for digital evidence |
| Cybercrime data preservation | Data may be preserved for months under RA 10175 procedures | Usually none to complainant | Platform or provider data may require proper legal process |
| AMLC freeze order petition | Court may act quickly once AMLC files | Not filed by private victim | AMLC must first find probable cause and sufficient basis |
| Criminal prosecution | Weeks to months for preliminary investigation; longer for trial | Filing itself generally no prosecutor fee | Identifying the real person behind mule or fake accounts |
The most common reason victims cannot recover money is that the recipient account is only a mule account. By the time the victim reports, the money may already have been withdrawn, transferred to other accounts, converted to crypto, or sent abroad.
Common Scenarios and What to Do
Facebook Marketplace or Online Seller Scam
If you paid for an item and the seller disappeared, report first to your payment provider, then to PNP ACG or NBI. Save the listing, seller profile URL, chats, payment receipt, delivery promise, and proof that the seller blocked you or failed to deliver.
This may be estafa under Article 315 of the Revised Penal Code, and if done online, may also involve RA 10175.
Fake Investment, Crypto, or Trading Scam
If you were promised high guaranteed returns, commissions, or “withdrawal fees” before you can access your money, treat it as an investment scam.
Report to:
- Your bank or e-wallet
- PNP ACG or NBI
- SEC if securities, investment contracts, lending, or public solicitation are involved
- CICC hotline 1326 if cyber-enabled
Save dashboards, wallet addresses, chat groups, referral links, deposit instructions, fake certificates, and names of recruiters.
OTP, Phishing, or Account Takeover
If your account was accessed without permission, immediately change passwords, disable compromised devices, call your bank or e-wallet, and ask for fraud blocking.
Preserve:
- Phishing links
- SMS sender names or numbers
- Email headers, if available
- Unauthorized transaction notices
- Device login alerts
- Screenshots of suspicious app permissions
This may involve cybercrime offenses such as illegal access, computer-related fraud, or identity theft.
OFWs and Foreigners Outside the Philippines
You can still report Philippine online scams from abroad, especially if the receiving account, scammer, or victim impact is connected to the Philippines.
Practical steps:
- Report online to your bank or e-wallet immediately.
- Use PNP ACG, NBI, or CICC online channels where available.
- Prepare a complaint-affidavit and supporting documents.
- If someone in the Philippines will file for you, prepare a Special Power of Attorney.
- Check whether the affidavit or SPA must be apostilled, notarized, or acknowledged at a Philippine Embassy or Consulate.
If the scammer or platform is abroad, Philippine authorities may need international cooperation channels. This can take longer, but the first step is still to preserve evidence and file a report.
Mistakes That Hurt Online Scam Complaints
Avoid these common errors:
- Waiting several days before reporting the transaction
- Sending more money to “unlock” a refund or withdrawal
- Deleting chats after taking screenshots
- Cropping screenshots so timestamps, URLs, and account details are missing
- Posting accusations publicly before filing a report
- Reporting only to the barangay when the issue is cybercrime or bank fraud
- Assuming the bank can disclose the recipient’s full identity without legal process
- Treating a bank ticket as a substitute for a police or NBI complaint
- Filing a vague complaint without a clear timeline and transaction details
A strong complaint is specific, organized, and evidence-based.
Frequently Asked Questions
Can I personally file a freeze order against the scammer’s bank account?
Usually, no. Under the Anti-Money Laundering Act, a freeze order is issued by the Court of Appeals upon a verified petition filed by the AMLC. As a victim, your practical role is to report promptly, preserve evidence, file with law enforcement, and provide enough information for bank compliance teams and authorities to evaluate AMLC referral.
Can my bank or e-wallet freeze the scammer’s account immediately?
A bank or e-wallet may temporarily hold funds involved in a disputed transaction under AFASA and BSP rules, but this depends on the facts, timing, available funds, and verification. It is not the same as a court freeze order and does not guarantee refund.
How fast should I report an online scam?
Report immediately—preferably within minutes or hours. Many scam funds are moved quickly through mule accounts. A same-day report gives your bank or e-wallet the best chance to trace and temporarily hold remaining funds.
Will I automatically get my money back if the funds are held?
No. Temporary holding preserves funds while the transaction is verified. Return of money may require bank investigation, agreement between institutions, court action, criminal proceedings, civil recovery, or other lawful basis. If the money has already been withdrawn or transferred onward, recovery becomes much harder.
Is an online scam considered estafa or cybercrime?
It can be both. The deceitful taking of money may be estafa under Article 315 of the Revised Penal Code. If the fraud was committed through a computer system, online platform, mobile app, email, or messaging service, RA 10175 may also apply.
What if I only have the scammer’s mobile number or e-wallet number?
Report anyway. A mobile number, e-wallet number, username, QR code, transaction reference number, or account name may help investigators and financial institutions trace the transaction. Do not assume the displayed name is the real scammer; many scams use mule accounts or stolen identities.
Should I report to the barangay?
For most online scams, the barangay is not the main reporting office. Cybercrime, estafa, money muling, and bank fraud should be reported to the bank or e-wallet, PNP ACG, NBI, CICC, SEC when investment-related, or the prosecutor’s office. Barangay proceedings may be relevant only in limited local disputes where the suspect is known and both parties live in the same city or municipality.
Do I need a notarized affidavit?
For initial bank or hotline reporting, usually not. For NBI, PNP, or prosecutor proceedings, you may be asked to execute a sworn statement or complaint-affidavit. Prosecutor filings commonly require notarized affidavits and supporting evidence.
Can I report a scammer who is outside the Philippines?
Yes, if there is a Philippine connection, such as a Philippine victim, Philippine receiving account, Philippine platform activity, or Philippine-based accomplice. Cross-border cases may require coordination through law enforcement, the DOJ Office of Cybercrime, AMLC channels, or international cooperation mechanisms.
Should I post the scammer’s name online to warn others?
Be careful. Public posts may alert the scammer, cause evidence deletion, expose you to defamation or privacy complaints if you identify the wrong person, or complicate the investigation. It is usually better to file formal reports first and preserve the evidence properly.
Key Takeaways
- Report the scam to your bank or e-wallet immediately and ask for fraud handling, coordinated verification, and temporary holding under AFASA.
- A true freeze order is issued by the Court of Appeals upon AMLC petition; private victims generally do not file it directly.
- File with PNP ACG, NBI Cybercrime Division, CICC, or SEC depending on the scam type.
- Preserve original digital evidence, not just cropped screenshots.
- Prepare a clear timeline, transaction receipts, account details, chat history, and platform identifiers.
- Temporary holding can preserve remaining funds, but it does not automatically guarantee refund.
- Fast reporting, complete evidence, and proper law enforcement documentation greatly improve the chance of tracing funds and supporting possible AMLC action.