If you were scammed online and you have the scammer’s bank account, e-wallet number, QR code, or transfer receipt, act fast. In the Philippines, the most important first step is not posting the scammer’s name online — it is reporting the transaction to your bank or e-wallet provider immediately so they can try to trace, temporarily hold, or coordinate with the receiving financial institution. This article explains where to report an online scam with bank details, what evidence to prepare, what Philippine laws apply, and what realistically happens after you file the report.

What “bank details” matter when reporting an online scam?

For online scam reports, “bank details” usually means information that can help a bank, e-wallet, law enforcement agency, or prosecutor trace the money trail.

Useful details include:

The name of the receiving bank or e-wallet
The account name shown before or after transfer
The account number, mobile wallet number, QRPh merchant name, or masked account details
The transaction reference number
Date and exact time of transfer
Amount sent
Transfer channel, such as InstaPay, PESONet, QRPh, bank app, GCash, Maya, ShopeePay, GrabPay, remittance center, or crypto exchange
Screenshots of the scammer’s profile, chats, posts, product listing, investment pitch, or payment instructions
The URL or profile link, not just the display name
Any mobile number, email address, Telegram username, Facebook link, Viber number, or website used by the scammer

Even if the scammer used a mule account, fake identity, or rented wallet, these details can still be useful. Under the Anti-Financial Account Scamming Act, banks and other BSP-supervised institutions have mechanisms to trace and temporarily hold funds involved in disputed transactions.

Do this first: report to your bank or e-wallet immediately

If you sent money from your own account, contact your source bank or e-wallet provider right away. This is the bank, app, or financial institution you used to send the money.

Do not wait for a police report before calling your bank. A police report or sworn complaint may be needed later, but delay can make recovery harder because scammers often move the funds within minutes.

What to say to the bank or e-wallet

Use direct wording:

I am reporting a scam transaction. Please treat this as a disputed transaction and initiate the temporary holding and coordinated verification process under RA 12010 and BSP Circular No. 1215. Please coordinate with the receiving financial institution and give me a case reference number.

Then provide:

Your full name and account or wallet involved.
Transaction reference number.
Amount, date, and time.
Receiving bank, e-wallet, account name, account number, or mobile number.
Screenshot of the transfer receipt.
Short explanation of the scam.
Screenshots of the chat, listing, profile, website, or payment instruction.
Your contact details.

Ask the bank or e-wallet for:

A case reference number
Written acknowledgment by email, SMS, in-app ticket, or branch form
Confirmation that they have sent a request to the receiving bank or wallet
The deadline for submitting an affidavit, police report, or other supporting documents
Whether any funds were successfully held

Why speed matters under RA 12010 and BSP Circular No. 1215

The key law is the Anti-Financial Account Scamming Act, RA 12010. It covers financial account scamming, money mule activity, and social engineering schemes involving bank accounts, e-wallets, and other financial accounts.

The implementing BSP rules are found in BSP Circular No. 1215, Series of 2025, which provides rules on the temporary holding of disputed funds and coordinated verification among financial institutions.

In simple terms:

A scam report can trigger complaint-initiated holding through the fraud reporting channel of your bank or e-wallet.
The source bank may coordinate with the receiving bank or later receiving institutions.
The initial holding period may be up to 5 calendar days.
If justified, the holding may be extended by up to 25 more calendar days, for a total of up to 30 calendar days, unless further extended by a court.
Banks must keep logs and coordinate in tracing and verifying disputed transactions.
If no funds are held, the coordinated verification process may still proceed, usually within 30 calendar days, with possible extension up to 60 calendar days in proper cases.

This does not guarantee a refund. If the scammer already withdrew or moved the money, the bank may have nothing left to hold. But reporting quickly gives you the best chance of stopping the funds before they disappear.

Where to report an online scam with bank details in the Philippines

You may need to report to more than one office because each one has a different role.

Where to report	Purpose	Best for
Your bank or e-wallet provider	Trace funds, request temporary hold, start internal dispute process	Any scam involving a transfer, QR payment, bank account, or wallet
Receiving bank or e-wallet	Alert the institution that received the funds	Useful if you know the destination bank or wallet
CICC / 1326	Centralized cybercrime and online scam reporting assistance	Fast initial guidance, especially for online scams
PNP Anti-Cybercrime Group	Criminal investigation of cybercrime and online fraud	Facebook scams, phishing, fake sellers, account takeovers, online extortion
NBI Cybercrime Division	Cybercrime investigation and digital evidence handling	Larger scams, organized groups, identity theft, complex online fraud
BSP	Escalation against a bank or e-wallet if the institution fails to handle the complaint properly	Unresponsive or mishandled bank/e-wallet complaint
SEC	Investment scams, Ponzi schemes, fake trading platforms, unregistered investment solicitations	“Double your money,” crypto investment pools, forex trading scams, online lending/investment fraud
NPC	Misuse of personal data, identity theft, leaked IDs, data privacy issues	Scammer used your ID, selfie, personal data, or account information

Step-by-step guide to reporting the scam

1. Secure your own accounts first

Before focusing on the scammer, protect yourself.

Do the following immediately:

Change your online banking, e-wallet, email, and social media passwords.
Enable multi-factor authentication.
Lock your card or online banking access if your account may be compromised.
Report any unauthorized access to your bank.
Do not send additional money for “refund fees,” “unlocking charges,” “tax,” or “verification.”
Do not share OTPs, PINs, passwords, CVV, or screenshots showing full account details.

If you gave your ID, selfie, OTP, or login details, tell your bank that your personal and financial information may have been compromised.

2. Report to your bank or e-wallet’s fraud channel

Use the fastest available channel: hotline, in-app help center, branch, email, or official chat support.

Ask specifically for the bank’s Financial Consumer Protection Assistance Mechanism, often called FCPAM. Under the Financial Products and Services Consumer Protection Act, RA 11765, financial service providers must have a consumer assistance mechanism for complaints, inquiries, and requests.

Save every reference number and screenshot.

3. Prepare a clear evidence folder

Organize your evidence before going to the police, NBI, or PNP Anti-Cybercrime Group.

Recommended folder structure:

Evidence	What to include
Transaction proof	Transfer receipt, reference number, amount, date, time, sending account, receiving account
Scam conversation	Full chat history, not just selected messages
Scammer identity clues	Profile link, username, phone number, email, account name, bank details
Scam page or listing	URLs, screenshots, product post, investment offer, website domain
Timeline	Short written chronology of what happened
Bank reports	Case numbers, emails, tickets, bank replies
Your ID	Government-issued ID for complaint filing
Affidavit or complaint narrative	Sworn statement if required by bank, PNP, NBI, or prosecutor

Do not delete the original messages. Screenshots help, but investigators may later ask to inspect the original chat thread, account, or device.

4. File a report with CICC or hotline 1326

The Cybercrime Investigation and Coordinating Center (CICC) coordinates cybercrime reporting and assistance. The public anti-scam hotline 1326 is commonly used for online scams.

You may report through:

Hotline 1326
CICC reporting channels, including the official CICC website: CICC report page
Email or mobile numbers published on official CICC channels

Use CICC for initial guidance and routing, especially if you are unsure whether to go to PNP, NBI, NPC, SEC, or your bank regulator.

5. File with PNP Anti-Cybercrime Group or NBI Cybercrime Division

For criminal investigation, you may file with either:

PNP Anti-Cybercrime Group (PNP-ACG) through its official cybercrime reporting channels or regional anti-cybercrime units
NBI Cybercrime Division, listed on the NBI Divisions and Services page

The NBI Citizen’s Charter also provides for investigative assistance for victims of computer crimes through the NBI Cybercrime Division process.

For many victims, the practical process looks like this:

Go to the nearest PNP-ACG office, NBI office, or regional cybercrime unit.
Bring printed and digital copies of your evidence.
Submit your valid ID.
Fill out intake or complaint forms.
Execute a complaint-affidavit or sworn statement.
Provide the bank or e-wallet reference numbers.
Ask for your complaint reference, docket number, or receiving copy.

Some offices allow initial online or email reporting, but a formal complaint often still requires a sworn affidavit, validation of identity, or personal appearance.

6. Escalate to BSP if your bank or e-wallet does not act properly

The Bangko Sentral ng Pilipinas (BSP) does not replace the police and does not act as the criminal investigator. Its role is mainly regulatory and consumer protection.

Escalate to BSP if:

Your bank or e-wallet refuses to receive your complaint.
You are not given a reference number.
The bank does not explain the next steps.
You already filed with the provider’s FCPAM and the response is unsatisfactory.
The provider is unreasonably delayed or unresponsive.

BSP says new complaints should first be reported to the financial institution’s FCPAM or customer service channel. If unresolved or unsatisfactory, you may escalate through the BSP Online Buddy (BOB) and BSP Consumer Assistance Channels. If you cannot access BOB, BSP allows submission of a Complaint/Inquiry/Reply form by email to consumeraffairs@bsp.gov.ph, with proof that you first reported to the bank or financial institution.

When using BOB, continue until you receive a BSP reference number, usually in the format similar to BSPCMS-2024-ABC1234.

What laws apply to online scams involving bank transfers?

Estafa under Article 315 of the Revised Penal Code

Many online scams are treated as estafa, or swindling, under Article 315 of the Revised Penal Code. Estafa generally involves deceit or abuse of confidence that causes damage to another person.

Common examples:

Fake seller accepts payment but never ships the item.
Scammer pretends to be a relative or friend asking for emergency money.
Fake travel agency collects payment for nonexistent bookings.
Fraudster claims to process a visa, job placement, or loan release.
Online investment promoter promises guaranteed returns and disappears.

In practice, prosecutors look for proof of deceit, reliance, payment, and damage. The chat history, payment receipt, and false representations are important.

Cybercrime Prevention Act of 2012, RA 10175

The Cybercrime Prevention Act, RA 10175 applies when the fraud was committed through information and communications technology, such as social media, email, messaging apps, fake websites, phishing links, or online banking systems.

Relevant provisions may include:

Computer-related fraud
Computer-related identity theft
Other crimes under the Revised Penal Code or special laws committed through ICT

RA 10175 also allows preservation and disclosure procedures for computer data, subject to legal requirements. This is why it is important to report early before accounts, websites, messages, or logs disappear.

Anti-Financial Account Scamming Act, RA 12010

RA 12010 is especially important when bank accounts, e-wallets, and financial accounts are used in scams.

It covers:

Money muling, such as selling, lending, renting, or allowing one’s account to receive criminal proceeds
Opening accounts under fictitious names or using another person’s identity
Buying or selling financial accounts
Social engineering schemes involving sensitive identifying information
Temporary holding and coordinated verification of disputed transactions

A “money mule” is a person whose bank account or e-wallet is used to receive or move scam proceeds. Sometimes the mule is part of the syndicate; sometimes the mule was recruited through a “part-time job,” “commission,” or “cash-in/cash-out” arrangement.

Access Devices Regulation Act, RA 8484, as amended

The Access Devices Regulation Act, RA 8484 may apply when the scam involves account numbers, cards, codes, PINs, or other means of account access. An “access device” includes an account number, code, PIN, or other means of account access that can be used to obtain money or initiate fund transfers.

This law becomes relevant in cases involving:

Stolen card or account details
Unauthorized use of account access information
Fraudulent use of banking credentials
Possession or trafficking of unauthorized access devices
Fraudulent acquisition of money using access devices

Financial Products and Services Consumer Protection Act, RA 11765

RA 11765 protects financial consumers and requires financial service providers to handle complaints and protect consumer assets against fraud and misuse.

It is relevant when the issue is not only the scammer’s criminal liability, but also the bank or e-wallet’s response, such as:

Failure to receive or process your complaint
Failure to provide clear information
Failure to maintain adequate consumer assistance channels
Possible failure to use appropriate security and fraud controls
Request for reimbursement in a purely civil financial consumer dispute within the regulator’s jurisdiction

Can the bank freeze the scammer’s account?

In ordinary language, victims often ask for a “freeze.” Under banking and AML rules, “freeze” can have technical meanings. For scam reports under RA 12010 and BSP Circular No. 1215, the more accurate phrase is temporary holding of disputed funds.

A bank or e-wallet may temporarily hold disputed funds when the legal and regulatory requirements are met. The process depends on whether the money is still in the account, whether it moved to another institution, and whether the source bank can identify the transaction chain.

Important realities:

The bank may not disclose the full identity of the receiving account owner directly to you.
The receiving account may belong to a mule, not the mastermind.
If the funds were already withdrawn, the bank cannot hold what is no longer there.
The bank may ask for an affidavit, police report, or supporting documents within a short period.
False or malicious reports can have legal consequences.

What documents are usually required?

Requirements vary by bank, e-wallet, PNP office, NBI office, and prosecutor, but victims are commonly asked for the following:

Document	Usually needed for	Notes
Valid government ID	Bank, PNP, NBI, BSP	Passport, driver’s license, UMID, national ID, PRC ID, etc.
Transfer receipt	Bank, PNP, NBI, prosecutor	Must show reference number, amount, date, and time
Screenshots of conversation	Bank, PNP, NBI	Capture full context and profile identifiers
URL or account link	PNP/NBI	More useful than display name alone
Complaint-affidavit	PNP, NBI, prosecutor, sometimes bank	Usually notarized or sworn before authorized officer
Bank complaint reference	BSP escalation, police follow-up	Shows you reported promptly
Police report or blotter	Some banks/e-wallets	Often requested for extended holding or formal dispute
Chronology of events	All offices	Keep it factual and date-based
Proof of identity if abroad	PNP/NBI/bank	Passport, consular notarization, apostille may be needed depending on use

Sample complaint narrative

You can use this structure for your bank complaint, police report, or affidavit draft.

On [date], I saw [product/service/investment/request] posted by [name/profile/link]. The person represented that [state the false promise]. Relying on this representation, I transferred PHP [amount] from my [bank/e-wallet] account to [receiving bank/e-wallet/account name/account number/mobile number] on [date and time] through [InstaPay/PESONet/QR/e-wallet]. The transaction reference number is [reference number]. After payment, the person [blocked me/deleted the post/stopped replying/failed to deliver/gave false excuses]. I later discovered that the representation was false. I am reporting this as an online scam and requesting assistance in tracing, holding, and recovering the disputed funds, and in investigating the persons responsible.

Keep the narrative factual. Avoid insults, speculation, or unsupported accusations. Investigators and bank officers need dates, amounts, account details, links, and evidence.

If you are abroad or the victim is a foreigner

Filipinos abroad, OFWs, and foreigners can still report a scam involving Philippine bank accounts or Philippine-based platforms.

Practical options:

Report immediately to the Philippine bank or e-wallet through hotline, app, email, or secure message.
File through online reporting channels where available.
Prepare a signed complaint-affidavit.
If the affidavit will be used in the Philippines, ask the receiving agency whether it must be notarized before a Philippine consulate or apostilled in the country where it is executed.
Authorize a trusted representative in the Philippines through a Special Power of Attorney if personal filing or follow-up is needed.
Keep proof of your identity, address, and communication details.

For foreigners, the key is connecting the transaction to the Philippines: a Philippine bank account, Philippine e-wallet, Philippine-based suspect, Philippine victim, or use of a computer system partly situated in the Philippines. RA 10175 recognizes Philippine jurisdiction when elements of the cybercrime or resulting damage have sufficient connection to the Philippines.

Common mistakes that hurt scam reports

Waiting too long before telling the bank

Every hour matters. Report first to the bank or e-wallet, then prepare the rest of your documents.

Only posting on Facebook

Public posts may warn others, but they do not automatically create a bank dispute, police complaint, or prosecutor’s case. They may also expose you to defamation issues if you accuse the wrong person or post personal data recklessly.

Sending more money to “recover” the first payment

Scammers often ask for clearance fees, taxes, wallet unlocking fees, delivery insurance, or verification deposits. Do not send more.

Deleting chats or blocking too early

Do not delete the chat thread. If you block the scammer, you may lose access to useful profile information. First take screenshots, copy links, and preserve evidence.

Reporting only the account name

Account names can be fake, incomplete, or belong to a mule. Investigators need transaction references, dates, amounts, platform links, numbers, and the full story.

Assuming the bank will automatically refund you

Banks and e-wallets do not automatically refund all scam transfers, especially if the customer voluntarily authorized the transfer. Recovery often depends on whether funds remain available, whether the bank failed in its duties, whether the case qualifies under applicable rules, and what the investigation shows.

What happens after you report?

A typical case may move through several tracks at the same time.

Bank or e-wallet track

The bank may:

Receive and acknowledge your complaint
Verify your identity
Lock or secure your account if compromised
Trace the outgoing transaction
Coordinate with the receiving institution
Request temporary holding of disputed funds
Ask for a police report, affidavit, or additional documents
Provide updates on whether funds were held, withdrawn, or transferred further
Issue a final response or resolution

Initial action can happen quickly, but final resolution may take days or weeks depending on the transaction chain and documents submitted.

Law enforcement track

PNP-ACG or NBI may:

Evaluate whether the matter falls under cybercrime or fraud
Receive your complaint-affidavit and evidence
Preserve or request digital evidence through proper legal processes
Coordinate with platforms, telcos, banks, and other agencies
Identify suspects, mules, or syndicate links
Refer the matter for preliminary investigation by the prosecutor

Cybercrime investigations can take time because investigators often need records from platforms, financial institutions, telcos, and sometimes foreign service providers.

Prosecutor and court track

If the evidence supports a criminal case, the complaint may go to the prosecutor for preliminary investigation. This is the stage where the prosecutor determines whether there is probable cause to file a criminal case in court.

If filed in court, cybercrime cases generally fall under Regional Trial Courts designated as cybercrime courts.

Frequently Asked Questions

Can I report an online scam if I only have the bank account number?

Yes. A bank account number, account name, e-wallet number, or transaction reference is useful, but it is better if you also have screenshots of the scam conversation, profile link, payment instruction, and transfer receipt. Report first to your bank or e-wallet so they can trace the transaction through official channels.

Should I report to the bank first or the police first?

Report to your bank or e-wallet first if money was transferred. This gives the best chance of temporary holding or tracing. After that, file with PNP-ACG, NBI, CICC, or your local police station, especially if the bank asks for a police report or affidavit.

Can I get my money back from a scammer’s bank account?

Possibly, but not always. Recovery is more likely if the funds are still in the receiving account or within the traceable transaction chain. If the funds were withdrawn or moved quickly, recovery becomes harder. You may still pursue criminal and civil remedies.

What if I voluntarily sent the money?

You can still report the scam. Many estafa and online fraud cases involve victims who voluntarily sent money because they were deceived. However, voluntary transfer can affect bank reimbursement, especially if the bank’s systems were not breached. The criminal case focuses on deceit and damage; the bank dispute focuses on tracing, holding, consumer protection, and possible institutional responsibility.

Can the bank tell me the real name and address of the scammer?

Usually, the bank will not disclose full customer information directly to you because of bank secrecy, data privacy, and internal rules. However, under RA 12010 and BSP rules, financial institutions may share information within the coordinated verification process and with authorized agencies as allowed by law.

Do I need a notarized affidavit?

For bank initial reporting, usually no. For PNP, NBI, prosecutor, BSP adjudication, NPC complaints, or formal legal proceedings, a sworn complaint-affidavit is commonly required. Some offices allow you to swear before an authorized officer; others may require notarization.

Can I report a GCash or Maya scam the same way as a bank scam?

Yes. E-wallets are financial accounts for purposes of scam reporting and consumer complaints. Report through the e-wallet’s official fraud or help channel immediately, ask for a case number, and provide the transaction reference, wallet number, screenshots, and police report or affidavit if requested.

What if the scammer used a QR code?

Save the QR image, merchant name, reference number, receipt, and screenshots showing where the QR code was sent or displayed. QRPh and merchant QR transactions may involve different parties, so the exact receipt and timestamp are important for tracing.

Should I file with SEC if it was an investment scam?

Yes, if the scam involved investment solicitation, guaranteed profits, trading pools, crypto investment schemes, Ponzi-type returns, or unregistered securities. You may report through the SEC’s official ticketing system, such as SEC iMessage, while also reporting the bank transfer to your financial institution and the cybercrime aspect to law enforcement.

Can I report if I am outside the Philippines?

Yes. Report online to your bank or e-wallet immediately. You may also use official online reporting channels of Philippine agencies where available. If a sworn affidavit or representative is needed, ask whether the document must be consularized, apostilled, or supported by a Special Power of Attorney.

Key Takeaways

Report the scam to your bank or e-wallet immediately and ask for temporary holding and coordinated verification under RA 12010 and BSP Circular No. 1215.
Save the transaction reference number, receiving account details, screenshots, profile links, and full chat history.
File with CICC, PNP-ACG, or NBI Cybercrime Division for criminal investigation.
Escalate to BSP only after using the bank or e-wallet’s consumer assistance mechanism, unless the institution refuses to receive or process your complaint.
Recovery is not guaranteed, especially if the money has already been withdrawn, but fast reporting gives you the best chance.
Avoid public accusations, deleting evidence, sending more money, or sharing OTPs and passwords.
For investment scams, also report to the SEC; for misuse of personal data or IDs, consider reporting to the National Privacy Commission.