How to Report Illegal Online Casino Scams in the Philippines (PAGCOR & NBI Guide)

Philippine legal context. Practical steps you can act on today. This is general information, not legal advice.

Quick checklist (do this first)

Stop all contact and payments. Don’t “verify” identity or send “taxes/fees” to unlock withdrawals.
Preserve evidence. Screenshot full pages with URL bars and timestamps; export chats; download statements; keep reference numbers.
List every transaction. Date, time, amount, channel (bank/e-wallet/crypto), recipient name/number/account, reference/txid.
Decide where to report:
- PAGCOR → for licensed-operator disputes or to report unlicensed/illegal operators targeting persons in the Philippines.
- NBI–Cybercrime Division → for criminal fraud, online scams, identity theft, hacking, cross-border schemes.
- (Often you’ll do both: PAGCOR for regulatory action + NBI for criminal investigation.)
File financial disputes immediately. Notify your bank/e-wallet/crypto exchange; ask for transaction dispute/freeze/trace; escalate under the Financial Products and Services Consumer Protection Act (RA 11765).
Consider parallel reports when relevant: PNP Anti-Cybercrime Group (ACG), BSP (for banks/e-wallets/virtual asset providers), NPC (privacy breaches), DOJ-OOC/CICC (coordination/blocking).

The legal frame you’re operating in (why these steps matter)

PAGCOR (Philippine Amusement and Gaming Corporation) regulates and licenses lawful gaming under PD 1869, as amended by RA 9487. It can license/sanction operators and coordinate domain/IP blocking and enforcement with other agencies.
Illegal gambling is penalized under PD 1602 (stiffer penalties), with RA 9287 (numbers games) as a specific amendment.
Online conduct aggravates penalties. Under RA 10175 (Cybercrime Prevention Act), offenses under the Revised Penal Code or special laws committed through ICT carry a penalty one degree higher (Sec. 6).
Fraud/Scam conduct is typically Estafa (Art. 315, Revised Penal Code); may overlap with Access Devices (RA 8484), Computer-related fraud/identity theft (RA 10175), and Data Privacy violations (RA 10173).
Money flows matter. AMLA (RA 9160) as amended by RA 10927 (casinos as covered persons) supports tracing/freeze actions via AMLC; BSP regulates banks/e-money issuers and VASPs (virtual asset service providers).
Electronic proof is admissible. The Rules on Electronic Evidence (A.M. No. 01-7-01-SC) govern authentication, integrity, and chain of custody of your screenshots, logs, and exports.
Extraterritorial reach. RA 10175 Sec. 21 allows prosecution where any element occurs in the Philippines, the victim or offender is Filipino, or the computer system/data is in the Philippines—useful against offshore sites.

Step-by-step: Reporting to PAGCOR

When to use:

You suspect an illegal/unlicensed online casino is soliciting players in the Philippines.
You’re dealing with a PAGCOR-licensed operator but face non-payment, unfair terms, rigged games, or abusive conduct.

What to prepare (attach copies, keep originals):

Narrative of events (dates, URLs, game titles, deposit/withdrawal attempts).
Evidence packet: site/app screenshots (with URL and clock), chat/email logs, promotional materials, T&Cs, recorded calls (if any).
Transactions list + proofs (receipts, bank/e-wallet statements, crypto txids).
Your ID (to verify complainant identity; redact sensitive numbers except last 4 if submitting digitally).

How PAGCOR handles it (what to expect):

If the operator is licensed, PAGCOR can investigate, mediate, require corrective action/refund, levy administrative sanctions, or suspend/revoke licenses.
If unlicensed, PAGCOR can flag for enforcement, coordinate with NBI/PNP, AMLC, and telecom/ISP regulators for blocking and asset tracing. You may be advised to file (or PAGCOR may endorse you) to NBI for the criminal aspect.

Pro-tips:

Be precise about where you accessed the site/app and how they reached you (SMS/FB/TikTok/Telegram/agents). Marketing channel details are crucial for takedown and tracing.
Include agent/handler numbers, GCASH/Maya QR codes, bank accounts, or wallet addresses used.

Step-by-step: Reporting to the NBI–Cybercrime Division (CCD)

When to use:

Any scam/fraud connected to an online casino (fake winnings, withdrawal “taxes/clearance fees,” account takeovers, spoofed apps).
Identity/document theft, phishing, device compromise, or SIM swap used to drain accounts.
Cross-border operations or organized “agent networks.”

What to file:

Affidavit-Complaint (see template below) narrating facts in chronological order, identifying persons/accounts/domains/apps, and stating laws violated (e.g., Estafa, PD 1602/RA 10175).
Annexes: your evidence packet (exports/screenshots/logs), transaction matrices, proof of financial disputes initiated with banks/e-wallets/VASPs.

Process (typical path):

Intake (walk-in or online portal, if available): initial assessment; you receive a reference number.
Case build: digital forensics review; subpoenas to banks/e-wallets/telcos to unmask account holders and secure logs/CCTV/KYC.
Coordination: with PAGCOR (licensing intel), PNP-ACG, AMLC (freeze applications), DICT/CICC (takedown/blocking support).
Filing with the Prosecutor’s Office: determination of probable cause; then information is filed in court.
Recovery (best case): frozen funds may be applied for civil restitution; in practice recovery is not guaranteed, especially after fast cash-outs/crypto hops—hence the need to report ASAP.

Pro-tips:

Ask the NBI to preserve and request logs within providers’ retention windows. The earlier the subpoena, the better the traceability.
If you fear retaliation/doxxing, request that your address/contact details be redacted from copies supplied to respondents (where allowed).

Also consider parallel reports

PNP Anti-Cybercrime Group (ACG): Another frontline for cyberfraud; choose the unit most accessible to you or file with both (agencies often coordinate).
Your bank/e-wallet/crypto exchange (BSP-supervised FSPs/VASPs): File a dispute/chargeback/recall and ask for temporary hold on counterpart accounts. Cite RA 11765 (consumer protection) and request written outcomes for your NBI annexes.
BSP (Bangko Sentral ng Pilipinas): If your provider mishandles your complaint or misses timelines, elevate to BSP’s consumer protection office.
AMLC (Anti-Money Laundering Council): Law enforcement channels generally trigger AMLC action; provide all recipient account identifiers to help freezing/tracing.
NPC (National Privacy Commission): If the “casino” misused your IDs/biometrics or leaked your data.
DICT/CICC: For coordination on site/app takedowns and awareness of ongoing threat campaigns.

How to build court-ready evidence

Integrity first. Don’t edit or crop originals; save full-page screenshots (show URL, time, system clock). Keep original files and share copies.
Export everything: chats (Messenger/WhatsApp/Telegram), emails (.eml/.msg), transaction PDFs, bank/e-wallet SMS. Note message IDs or reference numbers.
Hash & backup (optional but strong): If you can, compute a SHA-256 hash of key files and note it in your affidavit; store backups in two media.
Chain of custody log: Who collected, when, using which device; where files were stored/transferred.
Link the money: Make a “flow table”:
- Date | Channel | Amount | Sender | Recipient name | Account/Wallet No. | Reference/TxID | Screenshot file name
Capture the pitch: promos/bonuses, odds, “guaranteed winnings,” or demands for “release fees/taxes.” These often prove deceit and illegal gambling elements.

Is it illegal or merely a payment dispute?

Likely illegal if: no visible PAGCOR license; targets PH players; crypto-only deposits; absurd bonuses; spoofed/clone apps; agents push you to deposit to personal accounts; demands “taxes” to release funds; site changes URLs often.
Licensed dispute if: the brand appears on PAGCOR’s licensee list for PH-facing gaming and the gripe is over delayed payout, KYC friction, or bonus terms. Still report—but expect a regulatory rather than criminal track (unless fraud/forgery is involved).

Note: Many offshore sites (“POGOs”) are not authorized to offer games to persons in the Philippines even if they hold a license elsewhere. That typically places local solicitation in illegal territory.

Remedies & realistic expectations

Administrative (PAGCOR): reprimand, fines, suspension/revocation, mediation; possible refunds in licensed-operator disputes.
Criminal (NBI/Prosecution/Courts): arrest, prosecution for Estafa/illegal gambling/cybercrime; penalties increased when committed via ICT.
Financial recovery: best chances are early recalls/chargebacks/holds. Once funds are layered through multiple accounts/crypto mixers, recovery odds fall sharply—another reason to report immediately.
Civil damages: possible, but cross-border service and asset location can be costly and slow.

Common red flags & playbook to avoid re-victimization

“You owe taxes/clearance to withdraw.” Philippine taxes are not collected by casinos via personal wallets; scammers say this to bleed more money.
Recovery/chargeback “experts.” Many are secondary scams. Only work with your bank/e-wallet/legitimate counsel.
Agent “fronts.” They will ask you to split deposits to different personal accounts—collect each account as evidence.
Fake regulator seals. Look for misspellings, odd URLs, and no verifiable license reference.

Template: Affidavit-Complaint (outline you can adapt)

Title: Affidavit-Complaint for Estafa, Illegal Gambling (PD 1602), and Violations of RA 10175 Complainant: [Your Name, Address, Contact] Respondents: [If known; otherwise “John/Jane Does” and identified account holders] Facts:

On [date/time], I was invited via [platform/link/agent number] to join [site/app name at URL].

I deposited the following amounts: [insert flow table or annex].

I won/were shown a balance of [amount] but was asked to pay [“taxes/fees”] to withdraw.

After paying, withdrawal was denied/blocked; my account was locked on [date]; I was threatened/harassed via [details].

The operator is not licensed by PAGCOR to serve players in the Philippines to my knowledge. Legal grounds: Estafa (Art. 315 RPC), Illegal Gambling (PD 1602/RA 9287 as applicable), Cybercrime Act (RA 10175 Sec. 6, computer-related fraud), Data Privacy Act (if applicable). Evidence: Annexes “A–__” (screenshots, chats, statements, txids). Relief sought: Criminal investigation and filing of charges; coordination for freezing/recall of funds; referral to PAGCOR and AMLC for regulatory/AML action. Verification & Undertaking: I attest the foregoing are true and I will appear to subscribe this affidavit before the Prosecutor/NBI and submit original evidence on request. Signature/Date/Place; ID presented.

(Have it subscribed and sworn before a prosecutor or duly authorized officer.)

Frequently asked questions

Q: Can I stay anonymous? You must identify yourself to authorities, but you can request privacy safeguards (e.g., redact address in respondent-served copies, where permissible). For public awareness posts, avoid sharing sensitive IDs.

Q: The site says it’s licensed abroad. Does that protect them? No. Offering games to persons in the Philippines without PH authority typically constitutes illegal gambling here, regardless of a foreign license.

Q: I used crypto. Is there any point reporting? Yes. Exchanges and VASPs maintain KYC and may freeze funds; blockchain analysis can trace flows. Speed matters.

Q: Can PAGCOR get my money back? PAGCOR can push licensed operators to make players whole and can sanction them. For illegal operators, criminal/AML routes are your path; recovery depends on tracing and timing.

What to include in your PAGCOR and NBI submissions (copy-paste list)

Full timeline (who contacted you, when, where).
URLs/app names, version numbers, download sources (App Store/APK/website).
Handles/usernames/phone numbers of agents; payment recipients (names, account nos., e-wallet IDs, wallet addresses).
All promos/assurances you relied on (screenshots of ads, group chats).
Transaction matrix with proofs.
Any previous complaints you filed with banks/e-wallets/ISPs and their ticket numbers.

Final reminders

Act fast, be thorough, and report to both PAGCOR and NBI when in doubt.
Keep communications calm and factual; do not negotiate with scammers once you’ve decided to report.
If the amounts or risks are significant, consult a Philippine lawyer experienced in cybercrime/financial fraud to maximize your chances of recovery and to protect your privacy.

If you want, I can adapt the affidavit and a transaction matrix to your specifics (names redacted) so you can submit them right away.