If you sent money to a scammer and you have the recipient’s bank account number, e-wallet number, account name, QR code, transaction reference number, or deposit slip, act fast. In the Philippines, those details are not “useless”—they can help your bank trace the transfer, support a temporary hold of disputed funds, and give the PNP Anti-Cybercrime Group, NBI Cybercrime Division, CICC, or prosecutor a concrete lead. This guide explains what to do first, where to report an online scam with bank account details, what documents to prepare, what laws apply, and what usually happens after you report.

What to Do Immediately After Sending Money to an Online Scammer

Speed matters because scam proceeds are often moved quickly from one account to another, withdrawn in cash, converted to crypto, or passed through “money mule” accounts.

Do these in order:

Call or message your own bank or e-wallet provider immediately.
- Report the transaction as fraud or a disputed transaction.
- Ask for a case or ticket number.
- Ask whether they can initiate a fund hold, recall, reversal request, or coordinated verification with the receiving bank or e-wallet.
- Give the exact transaction reference number, date, time, amount, recipient account name, recipient account number, and screenshots.
Lock or secure your own account.
- Change your password and MPIN.
- Revoke unfamiliar devices.
- Disable online transfers temporarily if your provider allows it.
- Report unauthorized access, phishing, or OTP compromise if applicable.
Call the government anti-scam hotline 1326. The Inter-Agency Response Center hotline 1326 is used for reporting online scams, including online selling scams, phishing, investment fraud, romance scams, cybercrimes, and fraudulent messages. It is described by government information offices as a 24/7 central reporting number connected with agencies such as the CICC, DICT, NPC, NTC, PNP Anti-Cybercrime Group, and NBI Cybercrime Division. (Philippine Information Agency)
Preserve evidence before the scammer deletes it. Take screenshots, but also keep the original chats, emails, links, receipts, and phone numbers. Do not delete the conversation even if it is painful to look at.
File a formal report with cybercrime law enforcement. For online scams, the usual agencies are the PNP Anti-Cybercrime Group and the NBI Cybercrime Division. The NBI Citizen’s Charter lists investigative assistance for victims of computer crimes under its CyberCrime Division, with complaint intake, preliminary interview, sworn statements, supporting documents, and device examination as part of the process. (National Bureau of Investigation)

Why Bank Account Details Matter in an Online Scam Report

A scammer’s bank account or e-wallet number is often more useful than a fake Facebook profile name.

Bank and e-wallet details can help authorities identify:

the receiving account;
the account owner’s registered name and KYC records;
linked phone numbers, email addresses, devices, or IP logs, where legally obtainable;
other accounts that received follow-on transfers;
possible money mule activity;
whether the same account has been reported by other victims.

However, a victim normally cannot force a bank to disclose the recipient’s full identity directly. Banks and financial institutions usually treat account information as confidential. Under the Anti-Financial Account Scamming Act, however, the BSP and competent authorities may inquire into financial accounts involved in covered scam offenses, and bank secrecy and data privacy rules do not apply within the specific AFASA investigation or coordinated verification process. (Lawphil)

Legal Basis: What Laws May Apply to Online Scams With Bank Account Details

Estafa Under the Revised Penal Code

Many online scams are prosecuted as estafa, also called swindling, under Article 315 of the Revised Penal Code. Estafa generally involves deceit or abuse of confidence that causes damage. A common online version is when someone uses a fictitious name, false business, fake product listing, fake investment promise, or other deceit to make you send money. Article 315 specifically covers false pretenses, fraudulent acts, fictitious names, imaginary transactions, and similar deceits. (Lawphil)

Cybercrime Prevention Act: RA 10175 of 2012

If the scam was committed through Facebook, Marketplace, Instagram, TikTok, Viber, Telegram, email, SMS, a fake website, online banking, or another computer or communication system, Republic Act No. 10175, the Cybercrime Prevention Act of 2012, may apply.

RA 10175 includes computer-related fraud, computer-related forgery, and computer-related identity theft. It also provides that crimes under the Revised Penal Code and special laws committed through information and communications technologies may be covered by the Cybercrime Prevention Act, with a penalty one degree higher. The same law identifies the NBI and PNP as law enforcement authorities responsible for cybercrime enforcement. (Supreme Court E-Library)

RA 10175 also matters because it gives law enforcement tools for preserving computer data, obtaining disclosure of subscriber or traffic data through proper legal process, and applying for cybercrime warrants. Service providers may be required to preserve traffic data and subscriber information for a minimum period, which is why early reporting is important. (Supreme Court E-Library)

Anti-Financial Account Scamming Act: RA 12010 of 2024

For scams involving bank accounts, e-wallets, payment accounts, money mule accounts, phishing, and social engineering, the most important newer law is Republic Act No. 12010, the Anti-Financial Account Scamming Act or AFASA.

AFASA covers financial accounts such as bank deposit accounts, other transaction accounts, credit card accounts, e-wallets, and other accounts used for financial products or services. It also defines sensitive identifying information to include usernames, passwords, bank account details, credit card information, e-wallet information, and similar credentials. (Lawphil)

AFASA penalizes:

money muling, such as using, lending, selling, renting, or allowing the use of a financial account to receive or move proceeds of crimes or social engineering schemes;
social engineering schemes, such as pretending to be a bank, financial institution, or trusted person to obtain sensitive financial information;
attempts, aiding, abetting, opening accounts under false names, and buying or selling financial accounts;
economic sabotage when the scheme involves certain aggravating circumstances, such as a group of three or more persons, three or more victims, mass mailers, or human trafficking. (Lawphil)

AFASA is especially practical for victims because it allows institutions to temporarily hold funds subject of a disputed transaction, subject to BSP rules. It also states that a bank or financial institution may be liable for restitution if it fails to employ adequate risk management systems or fails to exercise the highest degree of diligence, and conviction is not required before restitution under that provision. (Lawphil)

Access Devices Regulation Act: RA 8484 of 1998, as amended by RA 11449

If the scam involved credit cards, debit cards, account numbers, PINs, codes, online banking credentials, or unauthorized access devices, RA 8484, the Access Devices Regulation Act, may also apply. RA 8484 defines an access device broadly to include a card, code, account number, electronic serial number, PIN, or other means of account access that can obtain money, goods, services, or initiate a fund transfer. (Lawphil)

RA 11449, passed in 2019, amended RA 8484 by adding prohibitions and increasing penalties for access device fraud. (Supreme Court E-Library)

Financial Products and Services Consumer Protection Act: RA 11765 of 2022

If your complaint includes a bank, e-wallet, payment provider, lending app, investment platform, or other financial service provider’s handling of your fraud report, RA 11765, the Financial Products and Services Consumer Protection Act, is relevant. It recognizes financial consumers’ rights to protection of assets against fraud and misuse, data privacy, and timely complaint handling and redress. (Supreme Court E-Library)

Civil Remedies Under the Civil Code

A criminal complaint is not the only possible route. Article 33 of the Civil Code allows an independent civil action for damages in cases of fraud, separate from the criminal case, using the lower civil standard of preponderance of evidence. (Lawphil)

Civil recovery can matter when the scammer is identifiable, when funds were frozen, or when there are related parties who may be civilly liable. It is usually slower than an emergency bank report but can be important for larger losses.

Where to Report an Online Scam With Bank Account Details in the Philippines

Where to report	Best for	What to bring or submit	Practical notes
Your own bank or e-wallet provider	Immediate fund hold, recall, account security, transaction dispute	Transaction receipt, reference number, screenshots, recipient account details, your ID	Do this first. Ask for a case number and written acknowledgment.
Receiving bank or e-wallet provider	Alerting the institution that its account may be used for fraud	Recipient account number/name, amount, transaction date, proof of scam	Some institutions will only act through your source bank or law enforcement, but the report may still be logged.
CICC / I-ARC hotline 1326	Fast government anti-scam reporting and referral	Your identity, contact number, scam type, screenshots, transaction details	Useful for urgent reporting and routing to proper agencies. (Philippine Information Agency)
PNP Anti-Cybercrime Group	Cybercrime investigation, online scam reports, preservation requests, coordination	Complaint narrative, IDs, screenshots, receipts, links, account numbers	Often appropriate for Facebook Marketplace scams, phishing, impersonation, and social media scams.
NBI Cybercrime Division	Technical investigation, sworn statements, evidence gathering	Complaint sheet, sworn statement or affidavit, digital evidence, devices if relevant	NBI’s charter lists no filing fee for computer-crime investigative assistance and a listed total frontline processing time of about 1 hour and 10 minutes for intake steps. (National Bureau of Investigation)
Office of the City or Provincial Prosecutor	Formal criminal complaint for estafa, cybercrime, AFASA, RA 8484, and related offenses	Notarized complaint-affidavit, evidence, witness affidavits, IDs, proof of loss	The prosecutor determines probable cause and may file the case in court.
BSP Consumer Assistance	Escalation when a BSP-supervised bank/e-wallet does not act properly on your complaint	Bank complaint, bank response, ticket number, transaction proof	BSP says consumers should first report to the institution’s consumer assistance mechanism, then escalate through BOB or BSP channels if unresolved. (Bureau of the Treasury)
SEC iMessage portal	Investment scams, Ponzi-style schemes, unregistered investment offers	Screenshots of offers, names of promoters, payment proof, account details	SEC’s iMessage portal receives complaints and includes investment scam complaints. (Securities and Exchange Commission)

Step-by-Step Guide to Reporting the Scam

1. Prepare a one-page incident summary

Before calling agencies or submitting forms, prepare a clear timeline. This helps investigators and bank fraud teams act faster.

Include:

your full name and contact details;
date and time you first encountered the scammer;
platform used, such as Facebook, Messenger, Viber, Telegram, email, SMS, website, or marketplace;
scammer’s profile name, username, phone number, email, and links;
what the scammer promised or represented;
amount sent;
transfer method, such as InstaPay, PESONet, QRPH, bank deposit, e-wallet transfer, remittance, or cash-in;
recipient bank or e-wallet;
account name and account number, if shown;
transaction reference number;
whether you gave an OTP, password, selfie, ID, or other sensitive information;
what you want done: hold funds, investigate, identify account owner, prosecute, or recover money.

2. Report to your bank or e-wallet and ask for AFASA handling

Use strong, specific wording:

“I am reporting a fraudulent or disputed transaction. Please record this under your fraud complaint process and, if applicable, initiate temporary holding, recall, tracing, and coordinated verification under RA 12010 and BSP rules.”

Ask for:

a complaint or ticket number;
confirmation that your report was received;
whether the recipient account is with the same institution or a different institution;
whether an interbank hold or recall request was sent;
the expected timeline for written response;
the name or unit handling the complaint.

Under BSP’s AFASA implementing rules, where disputed funds were transferred to a beneficiary account within the same BSP-supervised institution, the institution may initially hold the disputed funds for not more than five calendar days. If funds were transferred to another institution, an initial holding request may be transmitted to receiving institutions to hold disputed funds for not more than five calendar days from receipt. (Bureau of the Treasury)

The coordinated verification process is not instant. BSP rules state that if funds were successfully held, the process should be completed within the 30-calendar-day temporary holding period, unless extended by a court. If no funds were held, the process should be completed within 30 calendar days, with possible extension up to 60 calendar days for meritorious reasons. (Bureau of the Treasury)

3. Call 1326 and report the recipient account details

When calling 1326, be ready to give the same transaction details. State that you already reported to your bank or e-wallet and give the ticket number.

Do not just say “na-scam ako.” Give actionable details:

“The recipient account is BDO/BPI/UnionBank/GCash/Maya account number ____ under the name ____.”
“The transaction reference number is ____.”
“The transfer happened at 8:42 p.m. on ____.”
“The scammer used this Facebook profile link / phone number / Telegram username.”
“I am requesting referral to PNP ACG or NBI Cybercrime and assistance in preserving evidence.”

4. File with PNP ACG or NBI Cybercrime Division

For a stronger complaint, bring both printed and digital copies.

Useful evidence includes:

screenshots of the scammer’s profile and URL;
full conversation screenshots, preferably showing dates and times;
proof of payment or transfer receipt;
bank statement entry;
account number and account name of the recipient;
shipping/order details if it was an online selling scam;
fake IDs, permits, business registration, invoices, or contracts sent by the scammer;
phone numbers used;
email headers, if email phishing was involved;
links to websites, ads, livestreams, or posts;
names and contact details of other victims, if known;
your valid government ID.

The NBI Cybercrime Division process includes filing or requesting investigation, a preliminary interview, execution of sworn statements or submission of prepared affidavits, and collection of supporting documents. (National Bureau of Investigation)

5. Prepare a complaint-affidavit for formal prosecution

A complaint-affidavit is a sworn written statement explaining the facts. It is often needed when a case is elevated to the prosecutor.

A good complaint-affidavit should state:

who you are;
how the scammer contacted or induced you;
the exact false representations made;
why you believed the scammer;
how much you paid and when;
where you sent the money;
the recipient bank or e-wallet details;
what happened after payment;
what evidence is attached;
what laws may have been violated, such as Article 315 of the Revised Penal Code, RA 10175, RA 12010, RA 8484, or other applicable laws.

Attach evidence as annexes, label them clearly, and avoid submitting messy screenshots without context.

6. Escalate to the BSP if the bank or e-wallet mishandles the complaint

The BSP is not a substitute for PNP, NBI, or the prosecutor. It does not act as your private investigator. But it can help when the issue involves how a BSP-supervised bank, e-wallet, payment provider, or other supervised financial institution handled your complaint.

BSP guidance says to report first to the institution’s Financial Consumer Protection Assistance Mechanism or customer service channel. If you are not satisfied, you may escalate through the BSP Online Buddy or submit the proper complaint form and supporting documents through BSP channels. (Bureau of the Treasury)

Evidence Checklist for Online Scam Reports

Use this checklist before going to the police, NBI, or prosecutor.

Evidence	Why it matters
Transfer receipt or deposit slip	Proves the amount, date, time, and recipient account
Bank or e-wallet statement	Confirms the money left your account
Recipient account name and number	Gives investigators a traceable lead
Transaction reference number	Helps banks locate the exact transfer
Chat screenshots	Shows deceit, promises, instructions, and identity clues
Profile URL or username	More useful than a screenshot of a display name
Phone number and email address	Helps link SIM, account, or platform records
Fake IDs, permits, invoices, contracts	Shows misrepresentation
Delivery or tracking records	Useful in online selling scams
Bank complaint ticket number	Shows you acted promptly
CICC, PNP, or NBI report number	Helps link later reports and follow-ups
Witness affidavits	Useful if another person saw negotiations or payment

Do not edit screenshots. Do not crop out timestamps. If you must redact private information for a public post, keep an unredacted copy for investigators.

Common Mistakes That Hurt Online Scam Complaints

Posting the scammer’s account details publicly before reporting

Public warnings can help others, but posting personal data online may create privacy, defamation, or evidence-integrity issues. Report first to your bank, CICC, PNP, or NBI. Keep a clean evidence file.

Only filing a barangay blotter

A barangay blotter may document that you complained, but online scams involving banks, e-wallets, fake accounts, or cross-border platforms usually need cybercrime-capable agencies. Barangays cannot issue cybercrime warrants or compel banks and platforms to disclose records.

Deleting the chat after taking screenshots

Screenshots help, but original messages may contain dates, links, sender IDs, and metadata. Keep the original conversation unless law enforcement instructs otherwise.

Waiting for the scammer to “refund tomorrow”

Scammers often delay victims until the money has been moved. Report immediately even if the scammer promises a refund.

Sending more money to “unlock” your refund

A common second-stage scam is asking for a “processing fee,” “tax,” “anti-money laundering clearance,” “wallet verification,” “customs fee,” or “account upgrade” before releasing your money. Treat this as another scam.

Assuming the account name is the real mastermind

The account holder may be the scammer, but may also be a mule, a recruited student, a hacked account owner, or a person whose identity documents were misused. Report the account details, but let investigators determine the role.

Special Situations

If you are an OFW or Filipino abroad

You can still report to your Philippine bank or e-wallet, call hotline 1326 if reachable, submit online reports where available, and coordinate with family or a representative in the Philippines.

If a sworn complaint-affidavit is required, check whether the receiving agency will accept:

an affidavit notarized or acknowledged before a Philippine Embassy or Consulate;
a locally notarized affidavit with apostille, if executed in an Apostille Convention country and acceptable for use in the Philippines;
a Special Power of Attorney authorizing someone in the Philippines to submit documents or coordinate, if allowed by the agency.

Philippine embassies and consulates can notarize affidavits and powers of attorney for use in the Philippines, usually requiring personal appearance of the signatory. (Philippine Embassy)

If you are a foreigner scammed by someone using a Philippine bank account

You may report if the receiving account is maintained in the Philippines, if the scam used Philippine-based systems, or if damage was caused in the Philippines. AFASA provides jurisdiction where any element was committed in the Philippines, where a device or computer system in the country was used, where damage was caused to a person in the Philippines, or where the financial account is maintained with an institution operating in the Philippines. (Lawphil)

For documents executed abroad, ask the Philippine agency handling the complaint what form of notarization, apostille, or consular acknowledgment it requires.

If the scam was an investment scheme

Report both the money transfer and the investment offer. File with your bank or e-wallet, CICC, PNP or NBI, and the SEC if the scheme involved investment contracts, guaranteed returns, pooled money, crypto investment packages, “trading bots,” “double your money” offers, or unregistered securities. The SEC iMessage portal is an official complaint channel and includes investment scam complaints. (Securities and Exchange Commission)

If your own account was hacked

Report it as both a fraud transaction and an account compromise. Tell your bank or e-wallet if:

you clicked a phishing link;
you gave an OTP;
you installed an app;
your phone was stolen;
your SIM was replaced or lost signal unexpectedly;
your email was compromised;
you received unknown login alerts.

This may affect whether the bank treats the case as unauthorized access, social engineering, negligence, or a disputed transaction under its fraud rules.

What Usually Happens After You Report

After you file the report, several things may happen:

Your bank or e-wallet logs a fraud case. They may secure your account, ask for documents, and coordinate with the receiving institution.
A temporary hold may be attempted. This depends on whether funds remain in the receiving account or can still be traced. AFASA and BSP rules now provide a clearer framework for temporary holding and coordinated verification, but recovery is still not guaranteed.
CICC may refer the matter. Depending on the scam, the report may be routed to PNP ACG, NBI Cybercrime, NTC, NPC, or another agency.
PNP or NBI may ask for a sworn statement. They may also request additional screenshots, device access, links, or platform information.
The case may be endorsed to the prosecutor. The prosecutor evaluates whether there is probable cause. If there is, an Information is filed in court.
Civil recovery may proceed separately or alongside criminal proceedings. If funds are frozen or the account holder is identified, restitution or damages may become a practical issue.

Frequently Asked Questions

Can I recover money sent to a scammer’s bank account in the Philippines?

Recovery is possible but not guaranteed. The best chance is when you report immediately and the funds are still in the receiving account or traceable within the financial system. Under AFASA and BSP rules, institutions can temporarily hold disputed funds and conduct coordinated verification, but if the funds were withdrawn or transferred onward, recovery becomes harder.

Should I report first to the police or to the bank?

Report to the bank or e-wallet first if money was just sent, because only the financial institution can immediately log the transaction dispute and start recall, hold, or verification channels. Then report to 1326, PNP ACG, or NBI Cybercrime for investigation.

Can the bank give me the scammer’s full name and address?

Usually, no. Banks will often refuse to disclose the recipient’s personal information directly to you because of confidentiality, bank secrecy, and data privacy rules. However, under AFASA, BSP and competent authorities may inquire into financial accounts involved in covered scam offenses through the proper process. (Lawphil)

Is an online seller scam considered estafa?

It can be, especially if the seller used deceit before or during the transaction—such as a fake product, fake identity, fake courier receipt, fake business, or false promise—to make you send money. Estafa under Article 315 covers false pretenses, fictitious names, imaginary transactions, and similar deceits. (Lawphil)

Is GCash, Maya, or an e-wallet covered by AFASA?

Yes. AFASA defines financial accounts to include e-wallets and other accounts used for financial products or services under BSP-supervised institutions. (Lawphil)

What if the scammer used a fake account name?

Still report it. The displayed account name may be fake, incomplete, or a mule’s name, but the account number, transaction reference number, and transfer trail can still help banks and law enforcement.

Can I file a complaint if I only lost a small amount?

Yes. Small losses still matter because the same account or scammer may have victimized many people. Multiple small complaints can show a pattern, support account monitoring, and help authorities connect related reports.

Do I need a lawyer to report an online scam?

You can report to your bank, CICC, PNP ACG, NBI, BSP, or SEC without a lawyer. For high-value losses, multiple victims, corporate accounts, cross-border facts, or a formal prosecutor complaint, a properly prepared complaint-affidavit and organized evidence can make a major difference.

How long does an online scam case take?

The emergency bank-report stage should be done within minutes or hours. Bank verification may take days to weeks depending on the transaction path. Formal investigation and prosecutor proceedings can take months, especially if subpoenas, cyber warrants, platform records, or multiple financial institutions are involved.

Can I report from abroad?

Yes. Start with your bank or e-wallet and government reporting channels. For formal affidavits, you may need consular notarization, apostille, or another authentication method accepted by the Philippine agency handling the case. Philippine consular posts commonly notarize affidavits and powers of attorney for use in the Philippines. (Philippine Embassy)

Key Takeaways

Report the scam to your bank or e-wallet immediately and ask for a fraud case number.
Call 1326 for government anti-scam reporting and referral.
File with PNP ACG or NBI Cybercrime Division when the scam happened online.
Use the recipient’s bank account number, account name, e-wallet number, and transaction reference number as core evidence.
AFASA, or RA 12010, gives Philippine authorities and financial institutions stronger tools for money mule cases, social engineering, temporary holding of disputed funds, coordinated verification, and financial account investigation.
Do not delete chats, crop timestamps, or wait for the scammer’s promised refund.
If the bank or e-wallet does not act properly, escalate through the BSP Consumer Assistance process after first reporting to the institution.
If the scam involved investments or guaranteed returns, also report to the SEC.