If you were tricked into sending money through a bank transfer, e-wallet, QR payment, online marketplace, investment chat group, romance scam, phishing link, or fake customer service account, the most urgent goal is usually not yet “filing a case.” It is stopping the money from moving further. In the Philippines, this now means reporting the scam immediately to your bank or e-wallet provider and asking for a temporary holding of disputed funds under the Anti-Financial Account Scamming Act, while also filing a cybercrime complaint with the proper authorities.

Many victims call this a “bank freeze order,” but Philippine law uses several different mechanisms. A bank or e-wallet may temporarily hold disputed funds under Republic Act No. 12010, or the Anti-Financial Account Scamming Act (AFASA). A true court-issued freeze order, usually for suspected money laundering, is different and is generally applied for by the Anti-Money Laundering Council before the Court of Appeals. Understanding this difference helps you ask the right office for the right remedy at the right time.

First: Know What Kind of “Freeze” You Are Asking For

What people usually say	Proper legal or practical term	Who acts on it	Typical use
“Freeze the scammer’s bank account”	Temporary holding of disputed funds under AFASA	Bank, e-wallet, or other BSP-supervised institution	To stop recently transferred scam proceeds from being withdrawn or moved
“Bank freeze order”	Court-issued freeze order under the Anti-Money Laundering Act	Court of Appeals, upon petition by AMLC	For assets probably linked to unlawful activity or money laundering
“Trace the account holder”	Warrant to Disclose Computer Data or lawful information-sharing	PNP-ACG, NBI Cybercrime Division, BSP, or other competent authority	To identify the account holder or digital trail
“Refund my money”	Return or restitution of disputed funds	Bank/e-wallet after coordinated verification, court, or prosecutor/court process	To recover money if funds are still traceable or legal liability is established

Under AFASA, banks, e-wallets, and other Bangko Sentral ng Pilipinas-supervised institutions have authority to temporarily hold funds involved in a disputed transaction for up to 30 calendar days, unless extended by a court of competent jurisdiction. The law also requires a coordinated verification process among the involved financial institutions. (Lawphil)

Legal Basis for Reporting Online Scams in the Philippines

Online scams can fall under several Philippine laws, depending on what happened.

1. Anti-Financial Account Scamming Act — RA 12010

The most important law for bank-transfer and e-wallet scams is Republic Act No. 12010, the Anti-Financial Account Scamming Act, signed in 2024. AFASA covers financial accounts such as bank deposits, transaction accounts, credit card accounts, investment accounts, and e-wallets. (Lawphil)

AFASA penalizes:

Money muling, such as selling, lending, renting, or allowing another person to use a bank or e-wallet account to receive scam proceeds.
Social engineering schemes, where someone obtains sensitive identifying information through deception or fraud, leading to unauthorized access or control over another person’s financial account.
Economic sabotage, when the scam is done by a group, against multiple victims, through mass messaging, or through human trafficking. (Lawphil)

AFASA also says that a bank or financial institution may be liable for restitution if it failed to employ adequate risk management systems and controls, or failed to exercise the required high degree of diligence in preventing loss from the offenses covered by the law. Conviction of the scammer is not a prerequisite for restitution under this provision. (Lawphil)

2. Cybercrime Prevention Act — RA 10175

If the scam involved Facebook, Messenger, Viber, Telegram, SMS, email, websites, fake apps, phishing links, hacked accounts, or online banking, the Cybercrime Prevention Act of 2012 may apply.

RA 10175 penalizes computer-related fraud, computer-related identity theft, illegal access, and other cybercrime offenses. It also covers crimes under the Revised Penal Code and special laws when committed through information and communications technology, with a higher penalty. (Supreme Court E-Library)

This matters because cybercrime investigators may use court-issued cybercrime warrants. For example, law enforcement authorities may, upon securing a court warrant, require disclosure of subscriber information, traffic data, or relevant computer data within 72 hours from receipt of the order. (Supreme Court E-Library)

In EastWest Rural Bank v. Philippine National Police Anti-Cybercrime Group, the Supreme Court held that bank deposits remain confidential, but basic account holder information may be disclosed for cybercrime investigation when allowed by law and supported by a proper court-issued warrant. (Supreme Court of the Philippines)

3. Estafa under Article 315 of the Revised Penal Code

Many online scams are also estafa, or swindling, under Article 315 of the Revised Penal Code. In ordinary terms, estafa usually involves deceit that induces the victim to part with money or property, causing damage.

For example, estafa may apply when a scammer:

pretends to be a legitimate seller;
promises investment returns that do not exist;
uses a fictitious name or fake authority;
pretends to be an employee, agent, broker, courier, or bank representative;
receives money because of false promises made before or at the time of payment.

The Supreme Court has described estafa by false pretenses under Article 315(2)(a) as involving a fraudulent representation made before or simultaneously with the fraud, reliance by the victim, and damage resulting from that reliance. (Supreme Court E-Library)

4. Access Devices Regulation Act — RA 8484, as amended by RA 11449

If the scam involved credit cards, debit cards, account numbers, PINs, online banking credentials, OTPs, or other account-access tools, RA 8484, as amended by RA 11449, may also apply. The Access Devices Regulation Act penalizes unauthorized or fraudulent use of access devices, including account numbers and similar means of account access. (Lawphil)

5. Civil Code remedies for damages

A victim may also have civil remedies. The Civil Code provides that a person who, contrary to law, willfully or negligently causes damage to another must indemnify the injured person, and a person who willfully causes loss in a manner contrary to morals, good customs, or public policy must compensate the injured party. (Lawphil)

This is why a criminal complaint often includes a claim for restitution or damages. In practice, however, recovering money depends heavily on whether the funds are still traceable, whether the receiving account can be identified, and whether the offender or account holder can be located.

What To Do Immediately After an Online Scam

1. Call your bank or e-wallet provider first

Do this as soon as you realize you were scammed. Do not wait for a police report before making the first fraud report.

Ask for the bank’s or e-wallet’s:

24/7 fraud hotline;
complaint reference number;
written acknowledgment by email or in-app ticket;
temporary holding of disputed funds under AFASA;
coordinated verification with the receiving financial institution;
blocking or disabling of your online banking or e-wallet access if your account was compromised.

Under BSP rules implementing AFASA, complaint-initiated holding begins when the source account owner files a complaint through the financial institution’s 24/7 fraud reporting channel. The originating financial institution must verify information such as the transaction reference number, source account, amount, mode of transfer, date and time, receiving financial institution, and beneficiary account details, if known. (Bureau of the Treasury)

2. Use the words “temporary holding of disputed funds”

Be specific. Say something like:

“I am reporting a fraudulent transaction and requesting temporary holding of the disputed funds under RA 12010, the Anti-Financial Account Scamming Act. Please initiate coordinated verification with the receiving bank or e-wallet and give me a case reference number.”

This wording matters because frontline staff may understand “freeze account” differently. AFASA does not simply allow a victim to freeze any account on demand. It allows financial institutions to temporarily hold disputed funds when there are reasonable grounds to believe the transaction is unusual, without clear economic purpose, from an unlawful source, or facilitated through social engineering. (Lawphil)

3. Gather and preserve evidence before it disappears

Do not delete conversations even if they are embarrassing. Scammers often unsend messages, rename accounts, delete posts, or block victims.

Save:

screenshots of chats, posts, profiles, usernames, phone numbers, and email addresses;
payment receipts and transaction reference numbers;
bank or e-wallet statements;
QR codes, account names, account numbers, and mobile numbers used;
URLs of websites, Facebook pages, Telegram groups, Shopee/Lazada pages, or investment platforms;
delivery details, tracking numbers, invoices, or order confirmations;
voice notes, call logs, and SMS messages;
proof that you reported to the platform, bank, or e-wallet.

For screenshots, capture the full screen showing the date, time, username, profile link, and message context. If the amount is large, prepare a chronological timeline: when you first saw the offer, what representations were made, when you paid, and what happened after payment.

4. File a report with the proper cybercrime authority

For online scams, the usual government channels are:

Office or channel	Use it for	Notes
Your bank or e-wallet provider	Immediate fund holding, tracing, account protection, complaint reference number	This is usually the fastest path to stop funds
PNP Anti-Cybercrime Group	Cybercrime investigation and police complaint	PNP has referred complainants to the ACG e-Complaint portal and acg@pnp.gov.ph in official FOI responses. (www.foi.gov.ph)
NBI Cybercrime Division	Investigation of computer crimes	NBI’s Citizen’s Charter lists investigative assistance for victims of computer crimes and sworn statements/affidavits as part of processing. (National Bureau of Investigation)
CICC / I-ARC hotline 1326	Initial reporting and routing for online scams	Government sources describe 1326 as a 24/7 hotline for reporting scams, including phishing, text scams, romance scams, and online scams. (Philippine News Agency)
BSP Consumer Assistance Mechanism	Escalation if a BSP-supervised bank/e-wallet mishandles your complaint	BSP accepts consumer complaints through its official consumer assistance channels, including email to consumeraffairs@bsp.gov.ph. (Bureau of the Treasury)

5. Prepare a sworn complaint or affidavit

Banks may initially accept a hotline or in-app report, but for extension of the temporary hold and for law enforcement, you will usually need a sworn complaint, affidavit, police report, or similar supporting document.

Under the BSP AFASA rules, the source account owner must submit supporting documents such as a sworn complaint, affidavit, police report, or other supporting document within the initial holding period, unless the industry protocol provides otherwise. These documents should explain the circumstances of the transaction and why you believe it is probably disputed or fraudulent. (Bureau of the Treasury)

A useful affidavit usually includes:

Your full name, address, contact details, and ID details.
The date and time you discovered the scam.
How the scammer contacted you.
What the scammer represented or promised.
The exact amount sent.
The bank/e-wallet used, reference number, and recipient details.
What happened after payment.
A list of attached screenshots and transaction records.
A statement that the facts are true based on your personal knowledge and records.

If you are abroad, you may need to execute the affidavit before a Philippine Embassy or Consulate, or have it notarized abroad and apostilled if the country is a party to the Apostille Convention. Philippine banks and investigators may still ask for a local contact number, email, and authorization if someone in the Philippines will follow up for you.

How the AFASA Temporary Holding Process Works

AFASA and the BSP rules create a practical process for holding, tracing, verifying, and possibly returning disputed funds.

Step 1: The complaint triggers the process

The process may start through:

your complaint to your bank or e-wallet;
the financial institution’s own fraud management system;
a request from another financial institution.

The involved bank or e-wallet must keep logs of the actual date and time it received the trigger. These logs matter because delay can affect whether funds are still recoverable and whether the institution complied with its obligations. (Bureau of the Treasury)

Step 2: Initial holding may last up to 5 calendar days

The initial holding period is for not more than 5 calendar days. If the disputed funds were transferred to a different bank or e-wallet, the originating financial institution sends an initial holding request to the receiving institution and any later institutions in the transaction chain. (Bureau of the Treasury)

In real life, this is why speed matters. Scam proceeds are often moved from one account to another within minutes. If the funds have already been withdrawn as cash, converted, or transferred repeatedly, a bank may still trace the transaction chain, but actual recovery becomes harder.

Step 3: Extended holding may add up to 25 calendar days

The initial holding may be extended by not more than 25 calendar days, making the total temporary holding period up to 30 calendar days, if there are reasonable grounds to believe the held funds are likely disputed funds and more time is needed for coordinated verification. (Bureau of the Treasury)

This is where your supporting documents become important. A bare statement saying “I was scammed” is weaker than a complete packet containing your affidavit, police report, screenshots, receipts, and transaction reference numbers.

Step 4: Banks conduct coordinated verification

All involved BSP-supervised institutions must participate in the coordinated verification process, even if the money has already left their system. They may share information needed to trace and verify the transaction, including account owner names, contact details, transaction dates and times, reference numbers, account information, and supporting documents such as sworn complaints, police reports, fraud findings, and investigation reports. (Bureau of the Treasury)

During this process, bank secrecy and data privacy restrictions do not apply in the ordinary way to the coordinated verification of a disputed transaction, although the shared information must still be handled securely and only within the authorized scope. (Bureau of the Treasury)

Step 5: Funds may be released, returned, or held longer by court order

At the end of the initial or extended holding period, the bank must lift the hold and release the funds to the beneficiary account owner unless:

a court extends the holding period;
the beneficiary account owner waives any claim over the funds; or
the coordinated verification reasonably shows that the funds are linked to money muling, unlawful activity, illegal sources, no economic purpose, social engineering, or similar grounds.

If the rules allow return, the holding institution must deduct the equivalent amount from the beneficiary account and return it to the source account owner’s financial institution. The bank’s decision does not prevent either side from pursuing other legal remedies. (Bureau of the Treasury)

When a Court-Issued Freeze Order Is Needed

A bank’s AFASA temporary hold is not the same as a Court of Appeals freeze order.

Under the Anti-Money Laundering Act framework, a freeze order is generally sought by the Anti-Money Laundering Council before the Court of Appeals when there is probable cause that a monetary instrument or property is related to unlawful activity. In Manganip v. Republic of the Philippines, the Supreme Court explained that a freeze order may include related and materially linked accounts if they are properly included, described, and supported by probable cause. (Supreme Court of the Philippines)

The Supreme Court also summarized key safeguards:

the Court of Appeals must make an independent finding of probable cause;
the freeze order must be limited to the amount or value probably linked to unlawful activity;
the initial freeze is effective immediately for 20 days;
the Court of Appeals must conduct a summary hearing within that period;
any extension should not exceed six months;
a person whose account is frozen may move to lift the order;
if no case is filed within the period set by the court, the freeze order is automatically lifted. (Supreme Court of the Philippines)

For an ordinary scam victim, this means you usually do not personally file a Court of Appeals freeze petition. You report to your bank, law enforcement, and appropriate agencies. If the facts show money laundering or a broader criminal network, AMLC or another competent authority may take the appropriate steps.

Required Documents Checklist

Document	Why it matters	Practical tip
Government ID	Proves you are the source account owner or authorized representative	Use the same name as your bank or e-wallet account
Transaction receipt	Identifies the transfer	Include reference number, amount, date, time, and receiving account
Bank/e-wallet statement	Shows debit from your account	Highlight the disputed transaction
Screenshots of chats/posts	Shows deceit, representations, and account identity	Capture profile URL, username, number, and timestamps
Sworn affidavit or complaint	Needed for police/NBI and often for extended holding	Attach evidence as annexes
Police report or cybercrime complaint acknowledgment	Supports the seriousness of the claim	Ask for a reference number
Bank complaint reference number	Tracks the AFASA request	Record date, time, agent name, and channel used
Authorization letter or SPA	Needed if someone else follows up for you	For overseas victims, notarization/apostille may be required

Common Problems Victims Face

“The bank said it cannot freeze the account without a police report.”

Ask the bank to record your complaint immediately and initiate its AFASA process. A police report or sworn complaint may be required for extension or further action, but the first fraud report should be made right away because the initial holding process is time-sensitive.

“The scammer already withdrew the money.”

Recovery becomes harder, but reporting is still useful. Banks may still trace the disputed transaction chain, identify receiving financial institutions, and provide information to competent authorities through proper channels. Cybercrime investigators may also seek warrants or coordinate with platforms and financial institutions.

“The receiving account name looks real. Can I sue that person?”

Possibly, but be careful. Some receiving account holders are money mules; others may be victims of identity theft or trafficking. AFASA specifically penalizes money muling activities, but the evidence must show the account holder’s role, knowledge, or participation. (Lawphil)

“The scam happened on Facebook or Telegram, not a bank app.”

Still report to your bank or e-wallet if money moved through a financial account. Also report the online account or page to the platform and file a cybercrime complaint. The digital platform evidence may help prove identity theft, computer-related fraud, or estafa.

“I am a foreigner scammed by someone in the Philippines.”

Foreigners may file reports if the transaction, account, victim impact, or offender has a Philippine connection. Keep passport ID pages, proof of remittance, platform messages, and any Philippine account details. If executing documents abroad, expect possible notarization, consular acknowledgment, or apostille requirements depending on where the document is signed.

Frequently Asked Questions

Can I ask my bank to freeze the scammer’s account?

You can ask your bank or e-wallet to initiate temporary holding of disputed funds under AFASA. The bank will not simply freeze an entire account just because you request it. It must identify the disputed transaction and follow the AFASA and BSP process.

How long can a bank hold scam funds in the Philippines?

Under AFASA and BSP rules, disputed funds may be temporarily held for up to 30 calendar days, including the initial and extended holding periods. A longer hold requires extension by a court of competent jurisdiction. (Bureau of the Treasury)

Do I need a police report before reporting to the bank?

No. Report to the bank or e-wallet immediately. A police report, sworn complaint, or affidavit may be needed shortly after, especially to support extended holding and law enforcement action. Waiting for the police report before calling the bank may allow the funds to disappear.

Where do I report online scams in the Philippines?

Report first to your bank or e-wallet provider. Then report to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or the CICC/I-ARC hotline 1326. For mishandled bank or e-wallet complaints, you may escalate to the BSP Consumer Assistance Mechanism after using the financial institution’s complaint channel. (Bureau of the Treasury)

Can I recover money sent through GCash, Maya, bank transfer, InstaPay, or PESONet?

Recovery is possible if the funds are still in the receiving account or traceable within the financial system and the coordinated verification supports return. If the funds were withdrawn or transferred many times, recovery becomes more difficult, but the complaint may still support criminal investigation and later restitution.

What if I voluntarily sent the money?

You may still have a case if your consent was obtained through deceit, phishing, impersonation, fake investment promises, or other fraudulent representations. Many estafa and social engineering cases involve victims who voluntarily clicked, paid, or transferred because they were deceived.

Can the bank reveal the scammer’s account holder name to me?

Not automatically. Bank information is protected by secrecy and privacy rules. However, under AFASA coordinated verification, cybercrime warrants, and lawful information-sharing processes, banks may share necessary information with authorized institutions or government authorities. The Supreme Court has recognized that basic identifying information may be disclosed for cybercrime investigation under a proper court-issued warrant. (Supreme Court of the Philippines)

What happens if someone falsely reports my account as a scam account?

AFASA penalizes malicious reporting. A person who, with malice or bad faith, files completely unwarranted or false information that results in temporary holding of funds may face imprisonment and/or fines. (Lawphil)

Is an online scam a civil case or criminal case?

It can be both. The criminal side may involve AFASA, cybercrime, estafa, access device fraud, money laundering, or other offenses. The civil side may involve restitution, damages, or return of money. A criminal case may include civil liability, but separate civil remedies may also be available depending on the facts.

Key Takeaways

Report the scam to your bank or e-wallet immediately and ask for temporary holding of disputed funds under AFASA.
A bank’s AFASA temporary hold is different from a Court of Appeals freeze order under the Anti-Money Laundering Act.
The first few hours matter because scam proceeds can move through multiple accounts very quickly.
Prepare a strong evidence packet: receipts, reference numbers, screenshots, account details, affidavit, and police or cybercrime complaint.
File with PNP-ACG, NBI Cybercrime Division, or the CICC/I-ARC hotline 1326 for law enforcement action.
Escalate to BSP if a BSP-supervised bank or e-wallet mishandles your consumer complaint after you have reported through its own channel.
Recovery is most realistic when funds are still held, traceable, or supported by coordinated verification and proper documentation.