An email that says it is from “Philippine Immigration” can be legitimate—but it can also be a phishing message, a love scam, a fake visa notice, or a payment trap using the name of the Bureau of Immigration (BI). The safest approach is to verify the sender, the agency, the transaction, the payment method, and the official contact channel before clicking links, sending documents, or paying any fee.

The practical rule is simple: do not trust the logo, signature, badge, urgent language, or attachment by itself. Scammers can copy all of those. Verify the message against official Philippine government channels and your own immigration records.

Why Fake Immigration Emails Are Common in the Philippines

Immigration-related scams work because they create fear and urgency. A foreigner may worry about deportation, blacklisting, visa cancellation, or overstaying. A Filipino may worry about airport departure issues, eTravel registration, a partner’s visa, or a parcel supposedly “held by immigration.”

The Bureau of Immigration itself has warned the public about scammers claiming to be BI employees or officials. BI has also specifically warned against romance or “love scam” emails using the agency’s name, clarifying that BI does not intercept parcels, facilitate package deliveries, collect fees for parcel release, or operate under a “Ministry of Interior.” (Bureau of Immigration Philippines)

This matters because many scam emails do not ask for a visa filing fee directly. Instead, they claim there is a:

“clearance fee”
“anti-terrorism certificate”
“airport release fee”
“blacklist removal fee”
“package release fee”
“immigration tax”
“urgent penalty”
“travel guarantee bond”
“eTravel registration payment”

Some of these phrases sound official, but they are often red flags.

First Check: Which “Immigration” Agency Is Supposedly Emailing You?

Before checking the email address, identify the agency involved. In the Philippines, different immigration-related matters may involve different offices:

Situation	Usual official source to verify
Philippine visa extension, ACR I-Card, ECC, BI clearance, blacklist/deportation issues	Bureau of Immigration
eTravel registration for Philippine travel declarations	eTravel official website
Philippine passport or consular documents	DFA or Philippine Embassy/Consulate
Visa to another country, such as the US, Canada, Australia, Japan, Korea, Schengen area	The foreign embassy, consulate, or official visa service provider
Cyber scam, phishing, identity theft, fake government email	NBI Cybercrime Division, PNP cybercrime units, DOJ Office of Cybercrime, CICC, bank/e-wallet provider

The Bureau of Immigration is the primary Philippine agency dealing with foreigners’ entry, stay, registration, admission, residence, departure records, and related immigration enforcement. BI describes itself as the primary enforcement arm for ensuring that foreigners in the Philippines comply with existing laws and as the repository of immigration records on entry, temporary stay, admission, residence, and departure. (Bureau of Immigration Philippines)

For BI matters, start with the official Bureau of Immigration website and the BI official contact page, not the link inside the suspicious email.

How to Verify If an Immigration Email Is Legitimate

1. Check the sender’s full email address, not just the display name

A scam email may display “Bureau of Immigration,” “Immigration Officer,” or “Philippine Immigration Authority,” but the real sender may be a free email account or fake domain.

Be careful with addresses such as:

bureauofimmigrationphilippines@gmail.com
immigration.office@yahoo.com
ph-immigration-clearance@outlook.com
support@immigration-ph.com
officer.name@immigration-govph.net
philippinesimmigration@consultant.com

For BI, the official contact page lists official email addresses such as xinfo@immigration.gov.ph and immigPH@immigration.gov.ph, with the main office at Magallanes Drive, Intramuros, Manila. It also lists the BI trunkline and official social media accounts. (Bureau of Immigration Philippines)

A legitimate BI-related email will usually come from a government domain such as @immigration.gov.ph or from the official BI eServices environment. The BI eServices support page lists eservices@immigration.gov.ph and the BI eServices portal as available 24/7, while office hours are Monday to Friday, 7:00 AM to 5:30 PM. (e-services.immigration.gov.ph)

2. Check the “Reply-To” address

Many phishing emails show one sender but direct replies somewhere else.

Look for:

Sender: notice@immigration.gov.ph
Reply-To: immigrationpaymentoffice@gmail.com

That mismatch is suspicious. A scammer may spoof or imitate a sender address, but replies go to their own inbox. On Gmail, click the small arrow beside the sender name to view “mailed-by,” “signed-by,” and “reply-to” details.

3. Do not click the link in the email first

Open a fresh browser tab and manually type the official website:

The BI website itself links to its eServices portal and visa approval verification tools. (Bureau of Immigration Philippines)

For eTravel, the official FAQ states that https://etravel.gov.ph is the only official eTravel website, and that eTravel registration or updating is absolutely free of charge. The FAQ warns against fake, fraudulent, or scam websites that require payment for registration or updating. (eTravel)

4. Match the email to an actual transaction

A legitimate immigration email usually connects to something real, such as:

a visa extension you personally filed
an ACR I-Card application
an Emigration Clearance Certificate (ECC) application
a BI eServices appointment or payment
an official receipt or order of payment
a case, petition, or transaction reference number
a request you made through an official BI channel

Be suspicious if the email refers to a transaction you never started, especially if it asks you to pay immediately.

Ask yourself:

Did I file this application?
Does the reference number appear in my BI eServices account?
Is the service listed on the BI website?
Does the amount match the official assessment or order of payment?
Is the email asking me to pay a person instead of the government?

5. Verify payment instructions very carefully

A fake immigration email often becomes obvious at the payment stage.

Be very cautious if the email asks payment through:

a personal GCash or Maya account
cryptocurrency
Western Union, MoneyGram, or remittance to a private person
bank deposit to an individual
“processing agent” or “immigration officer” account
gift cards or vouchers
screenshots of payment instead of an official receipt

Real government payments should be traceable to the agency, portal, cashier, official payment gateway, or official receipt process. For BI eServices, use the official portal and check whether the service is actually available there before paying.

6. Verify directly using official contact details

Do not reply to the suspicious email to ask if it is real. Use independently verified contact details.

For BI, use the official BI contact page, which lists the trunkline, official email addresses, office address, and division-specific contact details. (Bureau of Immigration Philippines)

When asking BI to verify an email, send a short message with:

the sender email address
subject line
date and time received
screenshot of the email
full email headers, if available
any attachment name
any payment instruction
your BI transaction number, if you have one

Do not send your password, OTP, full card number, or e-wallet PIN.

7. Check whether the email uses fake Philippine government language

Scam emails often use names of offices that do not exist in the Philippine immigration system.

Red flags include:

“Philippine Ministry of Interior Immigration Department”
“Immigration Parcel Control Unit”
“Airport Anti-Terrorism Clearance Office”
“United Nations Immigration Tax Department”
“Bureau of Immigration Courier Division”
“International Monetary Immigration Clearance”
“Diplomatic Package Release Department”

The Philippines has a Bureau of Immigration under the Department of Justice system. BI’s official website lists Philippine immigration laws, including Commonwealth Act No. 613, the Philippine Immigration Law of 1940, and other related laws such as RA 562, RA 9225, RA 9139, RA 9208, and departure formalities guidelines. (Bureau of Immigration Philippines)

8. Preserve evidence before deleting anything

If the email is suspicious, preserve it first.

Save:

screenshots of the full email
the sender and reply-to addresses
full email headers
links, but do not click them
attachments, but do not open them unless needed for reporting
payment details
chat messages connected to the email
bank or e-wallet transaction receipts
the scammer’s phone numbers, social media accounts, and names used

This evidence may matter if you file a cybercrime complaint, bank dispute, or estafa complaint.

Legal Basis: Why Fake Immigration Emails Can Be a Crime

Cybercrime Prevention Act: RA 10175 of 2012

Phishing, fake immigration emails, spoofed government notices, and fraudulent online payment schemes may fall under the Cybercrime Prevention Act of 2012, depending on the facts.

RA 10175 penalizes cyber-related offenses such as computer-related forgery, computer-related fraud, and computer-related identity theft. Computer-related identity theft includes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another without right. (Supreme Court E-Library)

The same law states that crimes under the Revised Penal Code and special laws, when committed through information and communications technology, are covered by the relevant Cybercrime Law provisions. Prosecution under RA 10175 is also without prejudice to liability under the Revised Penal Code or special laws. (Supreme Court E-Library)

RA 10175 designates the NBI and PNP as law enforcement authorities responsible for enforcing the Cybercrime Law, with cybercrime units or centers to handle cybercrime cases. It also provides rules on preservation and disclosure of computer data, usually involving proper legal process and, where required, court warrants. (Supreme Court E-Library)

Data Privacy Act: RA 10173 of 2012

If the email asks for your passport, visa, ACR I-Card, address, birthday, financial details, login credentials, or other identifying information, data privacy issues may arise.

RA 10173 protects personal information in information and communications systems. It defines personal information as information from which an individual’s identity is apparent or can reasonably and directly be ascertained, or which, when combined with other information, directly and certainly identifies an individual. (National Privacy Commission)

Government agencies also have duties to secure sensitive personal information. RA 10173 provides responsibilities for government agencies handling sensitive personal information and requires notification to the National Privacy Commission and affected data subjects when certain breaches involving sensitive personal information or identity fraud risk are reasonably believed to have occurred. (National Privacy Commission)

Anti-Financial Account Scamming Act: RA 12010 of 2024

If the fake immigration email tries to obtain your bank, credit card, or e-wallet credentials, RA 12010, the Anti-Financial Account Scamming Act (AFASA), may apply.

AFASA expressly covers electronic communications, including email. It defines sensitive identifying information as information that can be used to access financial accounts, including usernames, passwords, bank account details, credit card details, e-wallet information, electronic credentials, and other confidential and personal information. (Supreme Court E-Library)

Under AFASA, a social engineering scheme may be committed when a person obtains another’s sensitive identifying information through deception or fraud, resulting in unauthorized access or control over the person’s financial account, including by misrepresenting oneself as acting on behalf of an institution or by using electronic communications to obtain such information. (Supreme Court E-Library)

AFASA also requires regulated institutions to protect access to client financial accounts through measures such as multi-factor authentication, fraud management systems, and verification controls. It provides mechanisms for disputed transactions, temporary holding of funds, and coordinated verification. (Supreme Court E-Library)

Revised Penal Code: Estafa and Falsification

A fake immigration email may also support traditional criminal complaints.

Estafa under Article 315 of the Revised Penal Code may apply where false pretenses or fraudulent representations induce a victim to part with money or property. Philippine Supreme Court cases describe estafa by deceit as involving false pretenses or fraudulent representations made before or at the same time as the fraud, reliance by the victim, and resulting damage. (Supreme Court E-Library)

Falsification may also be relevant if the scam uses fake public documents, forged signatures, fabricated BI orders, fake official receipts, or altered immigration papers. Articles 171 and 172 of the Revised Penal Code cover falsification by public officers and by private individuals, including falsification of public, official, commercial, or private documents, depending on the facts. (Lawphil)

Common Immigration Email Scams in the Philippines

“Your parcel is held by Immigration”

This is usually a romance scam or package scam. The scammer claims a foreign partner sent a parcel containing money, jewelry, gadgets, or documents, but “immigration” supposedly requires a release fee.

BI has specifically clarified that it does not intercept parcels, facilitate deliveries, or collect fees for release of packages. (Bureau of Immigration Philippines)

“Pay for eTravel registration”

eTravel registration or updating is free. The official eTravel FAQ says etravel.gov.ph is the only official website and that eTravel does not collect or require online payment. (eTravel)

“You are blacklisted unless you pay today”

Blacklist, deportation, exclusion, and immigration enforcement issues are serious legal matters. Be cautious of any email that demands immediate payment to a private account to “remove” your name from a blacklist.

Legitimate immigration issues should be verified through BI records, official correspondence, counsel of record if there is a case, or direct inquiry with BI using official channels.

“Airport officer can clear your departure for a fee”

No private person can guarantee airport immigration clearance through email. Philippine immigration inspection happens at the port of departure or arrival based on applicable law, documents, and officer assessment. Paying a stranger for “guaranteed clearance” can expose you to fraud and may create more problems.

“Send your passport and OTP to update your visa”

A passport scan may sometimes be required in a real visa or immigration transaction, but an OTP, password, e-wallet PIN, card CVV, or online banking login should never be sent by email. Those are financial access credentials, not immigration requirements.

What to Do If You Already Clicked, Paid, or Sent Documents

If you clicked a suspicious link

Disconnect from the suspicious site immediately.
Do not enter more information.
Change passwords for affected accounts using a different device if possible.
Enable multi-factor authentication.
Scan your device for malware.
Watch your email, bank, e-wallet, and social accounts for unusual activity.

If you paid money

Contact your bank or e-wallet provider immediately.
Ask about fraud dispute, reversal, temporary hold, or account blocking.
Preserve proof of payment and the scam email.
Report the incident to cybercrime authorities.
If the payment was to a Philippine bank or e-wallet account, give the receiving account name, number, transaction reference, amount, and time.

AFASA is especially important where the scam involved social engineering, financial account credentials, money mule activity, or disputed financial transactions. (Supreme Court E-Library)

If you sent your passport, ID, or ACR I-Card

Monitor for identity theft.
Save the exact files and information you sent.
Notify the relevant agency if a government-issued document may be misused.
For passport-related concerns, check DFA/consular guidance.
For ACR I-Card or BI documents, verify with BI.
Consider filing a cybercrime or identity theft report.

If you are abroad

If you need to submit a sworn statement or affidavit from outside the Philippines, ask the receiving Philippine agency what form it requires. In practice, agencies may ask for a notarized affidavit, consular acknowledgment, or apostilled document depending on where it was executed and how it will be used.

For documents to be used abroad, the DFA Apostille system applies to Philippine public documents, while foreign documents for use in the Philippines generally follow the authentication or apostille rules of the issuing country and the receiving Philippine office’s requirements. The DFA’s Apostille site provides documentary requirements and verification contact channels. (Apostille Philippines)

Where to Report a Fake Immigration Email

Concern	Where to verify or report	What to prepare
Email claiming to be from BI	BI official contact channels	Full email, headers, screenshots, transaction number
Fake BI eServices payment or account issue	BI eServices support	Account email, application reference, payment proof
Fake eTravel payment site	eTravel/CICC reporting channel	URL, screenshots, payment proof
Phishing, identity theft, hacked account	NBI Cybercrime Division or PNP cybercrime unit	Email headers, device, screenshots, affidavit
Money sent to scammer	Bank/e-wallet provider and cybercrime authorities	Transaction reference, receiving account, amount, time
Fake public document or forged BI order	BI, NBI, prosecutor/law enforcement	Copy of document, source, messages, payment proof

The NBI website lists a Cybercrime Division with contact email ccd@nbi.gov.ph. (National Bureau of Investigation) For investigative assistance for victims of computer crimes, the NBI citizen’s charter refers to complainants and witnesses executing sworn statements or submitting prepared affidavits, examination of relevant devices, collection of supporting documents, and forwarding of the complaint sheet or authority to investigate; the listed counter-processing total is about 1 hour and 10 minutes, not the full investigation period. (National Bureau of Investigation)

Documents and Evidence to Prepare

Prepare a clean folder with:

screenshot of the email
screenshot showing sender, reply-to, date, and subject
full email headers
all links shown in the email
attachment names and file types
screenshots of related chats or calls
proof of payment, if any
receiving bank, e-wallet, or remittance details
copy of any fake receipt, order, visa notice, or “clearance”
your passport bio page or ACR I-Card only if needed for official verification
your BI transaction number, if any
short written timeline of what happened
affidavit or sworn statement, if filing a formal complaint

For email headers, download or copy the “original message” if your email provider allows it. Headers can show technical routing details that ordinary screenshots do not capture.

Practical Verification Checklist

Use this checklist before trusting an immigration email:

Agency check: Does the email identify a real Philippine agency?
Domain check: Does the sender use an official domain such as @immigration.gov.ph for BI matters?
Reply-to check: Does the reply address match the official sender?
Website check: Does the link lead to the official government website, not a lookalike domain?
Transaction check: Do you have an actual pending application or case?
Payment check: Is payment through an official portal, cashier, or government process—not a private account?
Language check: Does it use strange office names, threats, or unrealistic urgency?
Document check: Are attachments verifiable through official records?
Privacy check: Is it asking for passwords, OTPs, banking details, or e-wallet credentials?
Direct verification: Have you contacted the agency using contact details from the official website, not the email?

Frequently Asked Questions

Is an email from Philippine Immigration using Gmail legitimate?

For BI matters, treat a Gmail, Yahoo, Outlook, or other free email address as suspicious unless you independently verify it through an official BI channel. The official BI contact page lists government email addresses under immigration.gov.ph, not random free email accounts. (Bureau of Immigration Philippines)

How do I know if a Bureau of Immigration email is real?

Check the sender domain, reply-to address, transaction reference, payment instructions, and whether the message matches an application or case you actually filed. Then verify through the BI official website or contact page, not through the link or phone number inside the email.

Can the Bureau of Immigration ask for payment by GCash?

Be cautious. A demand to pay a personal GCash, Maya, bank, or remittance account is a major red flag. Use only official payment channels connected to the BI office, cashier, official receipt, or eServices process.

Is eTravel registration really free?

Yes. The official eTravel FAQ says eTravel registration or updating is free of charge and does not require online payment. It also states that etravel.gov.ph is the only official eTravel website. (eTravel)

What should I do if an immigration email says my parcel is detained?

Treat it as highly suspicious. BI has clarified that it does not intercept parcels, facilitate deliveries, or collect package release fees. Do not pay. Preserve the email and verify directly through official channels. (Bureau of Immigration Philippines)

Can a fake immigration email lead to identity theft?

Yes. If you send passport copies, ACR I-Card details, birth date, address, financial information, OTPs, or passwords, scammers may use them for account takeover, fake accounts, loans, or further scams. This may involve RA 10175, RA 10173, and, where financial accounts are targeted, RA 12010.

Should I open the attachment to check if it is a real notice?

Do not open suspicious attachments casually. They may contain malware or lead to credential theft. Verify the email first through official channels. If needed for a complaint, preserve the file without repeatedly opening or forwarding it.

Can foreigners report fake Philippine immigration emails?

Yes. Foreigners can report scams involving Philippine immigration matters, especially if they are in the Philippines, dealing with BI, using Philippine financial accounts, or were victimized by persons or accounts connected to the Philippines. Prepare evidence and verify with BI, your bank or e-wallet provider, and cybercrime authorities.

How fast can I verify an immigration email?

A simple verification may be resolved the same day if you can call the proper office during business hours or check your BI eServices account. Email verification may take longer depending on the office, completeness of details, holidays, and workload. Cybercrime investigations take longer than initial complaint intake.

What is the safest response to a suspicious immigration email?

Do not click, do not pay, do not send more documents, and do not reply using the suspicious thread. Save the evidence, verify through the official agency website or hotline, and report it if it involves payment demands, identity theft, fake documents, or threats.

Key Takeaways

A logo, signature, badge, or urgent warning does not prove that an immigration email is legitimate.
For BI matters, verify through the official Bureau of Immigration website, contact page, eServices portal, or office directory.
BI’s official contact channels use government domains such as immigration.gov.ph; free email accounts and private payment accounts are major red flags.
eTravel registration or updating is free, and the official website is etravel.gov.ph.
Fake immigration emails may involve cybercrime, identity theft, estafa, falsification, data privacy violations, or financial account scamming.
Preserve screenshots, email headers, links, attachments, payment receipts, and chat records before deleting anything.
Never send passwords, OTPs, banking credentials, e-wallet PINs, or card security codes to anyone claiming to be from immigration.
When in doubt, verify directly through official government channels before paying or responding.