Quick answer

If you suspect a scam, act immediately. Contact the bank, e-wallet, card issuer, remittance company, or other financial institution from which the money left through its 24/7 fraud-reporting channel. Ask it to secure your account, treat the transfer as a disputed transaction, trace the funds, coordinate with receiving institutions, and temporarily hold any funds that remain available. Obtain a case-reference number and written confirmation.

Then preserve the evidence and report the incident to the Philippine National Police Anti-Cybercrime Group (PNP-ACG), the National Bureau of Investigation (NBI), or another appropriate law-enforcement office. You may also report phone and online scams through the government’s 1326 anti-scam hotline.

Recovery is possible, but never automatic. It depends heavily on how quickly the incident is reported, whether funds remain traceable, what the financial institutions’ verification establishes, and whether the scammer or other legally responsible party can be identified and pursued.

What to do immediately

1. Stop further loss

Use only the institution’s official app, website, card hotline, or a phone number printed on the card or statement.

Ask the institution to:

block or restrict the affected account, card, or wallet;
reset online access and invalidate active sessions;
stop any pending payment, if still possible;
identify every disputed transaction;
initiate its Anti-Financial Account Scamming Act process;
trace the money through receiving and subsequent financial institutions;
temporarily hold any disputed funds still in the financial system;
preserve transaction, login, device, authentication, and communication records; and
give you a complaint acknowledgment and case-reference number.

If several accounts were exposed, contact each institution separately. Change passwords from a clean device, starting with your email account, and enable multi-factor authentication. Contact your mobile network immediately if your SIM stopped working unexpectedly or may have been taken over.

Do not send another payment for a supposed refund, withdrawal fee, tax, verification charge, account-unfreezing fee, or “recovery service.”

2. Report through the account that sent the money

Under the BSP’s 2025 implementing regulations for Republic Act No. 12010, a complaint-initiated hold begins through the 24/7 fraud-reporting channel of the originating financial institution—the bank or financial service provider holding the source account. That institution coordinates with the receiving institutions.

Give it, as accurately as possible:

your name and account details;
the transaction reference number;
the amount, date, and time;
the receiving bank, e-wallet, account name, and account number, if known;
a short explanation of how the scam occurred;
whether you personally initiated the transfer and, if so, what deception induced it;
whether your credentials, OTP, PIN, device, email, or SIM may be compromised; and
the supporting evidence already available.

Reporting directly to the recipient’s bank may provide useful notice, but it does not replace reporting through your own institution’s official fraud channel.

3. Submit supporting documents within the initial holding period

The BSP rules provide for an initial hold of not more than five calendar days. To support an extension, the source-account owner should submit a sworn complaint, affidavit, police report, or other supporting document within that initial period, unless the applicable industry protocol provides otherwise.

Do not interpret five days as a safe waiting period. Report within minutes or hours whenever possible. Money that has already been withdrawn, converted, or moved outside the participating financial system may no longer be available to hold.

A hold may be extended by up to 25 additional calendar days, for a maximum administrative holding period of 30 calendar days, when there are reasonable grounds to believe the funds are disputed and more time is needed for verification. A further extension requires an order from a court with jurisdiction. See the BSP’s consolidated AFASA booklet and implementing circulars.

What the financial institution must examine

Republic Act No. 12010, the Anti-Financial Account Scamming Act (AFASA), covers financial accounts such as bank accounts, credit-card accounts, transaction accounts, and e-wallets. It addresses money-muling activities and social-engineering schemes involving the deceptive acquisition of sensitive identifying information and unauthorized control of an account.

A transaction may be treated as disputed when the institution has reasonable grounds to believe it appears unusual, lacks a clear economic purpose, involves an unknown or illegal source or unlawful activity, or was facilitated through social engineering.

Once the process is initiated, participating institutions must conduct coordinated verification even if the funds no longer remain in their systems. They may examine transaction records, account behavior, fraud indicators, the parties’ relationship, the stated purpose of the payment, the source of funds, affidavits, police reports, and other reliable information.

If funds were successfully held, verification should be completed within the 30-calendar-day holding period unless a court extends it. If no funds were held, the process should ordinarily be completed within 30 calendar days, although the originating institution may extend verification for meritorious reasons up to a total of 60 calendar days.

If verification reasonably concludes that held funds came from money muling, unlawful activity, an illegal source, a transaction without an underlying economic purpose, or a social-engineering scheme, the regulations allow their return through the participating institutions to the source-account owner. If the payment is established as legitimate, the hold must be lifted. Either side retains any other legal remedy.

A bank or e-wallet’s temporary hold is therefore not a final court judgment, and filing a complaint does not guarantee reimbursement.

When the institution itself may be liable

AFASA does not make an institution automatically liable for every successful scam.

An institution found by the BSP to have adequate risk-management systems and controls is protected from liability for loss arising from the specified AFASA offenses. On the other hand, an institution may be liable to restore funds if it failed to employ adequate controls or failed to exercise the highest degree of diligence required by the law. A criminal conviction of the scammer is not a prerequisite to that form of restitution.

An institution that fails to hold disputed funds when AFASA and the BSP rules require it may also be liable for the resulting loss or damage, including restitution. Whether these provisions apply depends on the transaction records, the timing and substance of the report, the institution’s systems and actions, and the outcome of verification. See Republic Act No. 12010.

Escalating a financial complaint to the BSP

The financial institution’s Financial Consumer Protection Assistance Mechanism is the first-level remedy. If you are dissatisfied with its action or response, escalate the matter to the BSP Consumer Assistance Mechanism.

The BSP’s current instructions allow escalation through the BSP Online Buddy (BOB) on the BSP website or official Facebook page. Continue until the system issues a BSP case-reference number. If BOB is inaccessible, the BSP instructs consumers to complete its Complaint/Inquiry/Reply form and email it to consumeraffairs@bsp.gov.ph, together with proof that the matter was first raised with the institution.

Attach the institution’s case number, its response, your timeline, transaction records, and supporting documents. Redact information that is unnecessary. The BSP specifically warns consumers not to send PINs, passwords, complete card or ATM-card numbers, passbooks, passports, or identification cards merely to process a BSP-CAM complaint. Follow the official BSP complaint instructions.

BSP-CAM facilitates resolution of complaints involving BSP-supervised institutions. It is not a substitute for a criminal complaint, and it does not guarantee recovery.

Reporting the suspected crime

Report an online or technology-assisted scam to the PNP-ACG, the NBI cybercrime unit, or the nearest police station capable of taking and referring the complaint. The Department of Justice also maintains an official cybercrime-reporting information page.

The government’s inter-agency anti-scam reporting channel may be reached by dialing 1326, which government guidance identifies as the official hotline for reporting scams and deceptive online content. See the Philippine Information Agency announcement.

Ask what is required for a formal complaint. You may be directed to submit a sworn narrative, identification, transaction documents, and electronic evidence, or to appear for an interview. Obtain the report, blotter, complaint, or reference number and provide it promptly to your financial institution.

Potential legal characterization depends on the facts. Deceptive taking of money may constitute estafa under the Revised Penal Code. When information and communications technology is used, the Cybercrime Prevention Act may also apply, including its provisions on computer-related fraud and crimes committed through ICT. AFASA separately penalizes specified money-muling and social-engineering conduct. Investigators and prosecutors—not the victim—determine the appropriate charge from the evidence. See Republic Act No. 10175 and Republic Act No. 12010.

Do not threaten, entrap, publicly identify, or confront the suspected scammer on your own. Preserve communications and let investigators decide whether further contact is useful and safe.

Evidence to preserve

Keep original electronic files whenever possible, not only cropped screenshots. Preserve:

the complete chat, email, SMS, and call history;
usernames, profile links, page URLs, phone numbers, and email addresses;
advertisements, product listings, investment pitches, contracts, invoices, and receipts;
transaction confirmations and unique reference numbers;
recipient account names, numbers, QR codes, wallet identifiers, and bank details;
dates, times, amounts, and the sequence of transfers;
website addresses and screenshots showing the address bar;
delivery records and communications with couriers or platforms;
the institution’s complaint acknowledgment and every follow-up;
any request for OTPs, passwords, remote-access software, or screen sharing;
device, SIM, and account-security alerts; and
the names and contact details of witnesses.

Prepare a chronological account while events are fresh. State what the scammer represented, why you relied on it, what you did, when the money moved, and what happened afterward. Separate what you personally observed from what another person told you.

Do not edit or annotate the only copy of a file. Keep a working copy and preserve the original. Back up the evidence in at least one secure location. Avoid forwarding sensitive documents to unofficial accounts or people claiming they can recover the money.

Other recovery routes

Consumer transaction against an identifiable business

If the dispute arose from a business-to-consumer purchase of goods or services, you may seek mediation through the DTI Consumer Complaints Assistance and Resolution System. DTI accepts complaints involving transactions within its consumer-protection jurisdiction and may refer matters governed by another agency.

A DTI complaint is most useful when there is an identifiable seller or business and a genuine consumer transaction. It does not replace an urgent bank fraud report or criminal complaint, and DTI registration by itself does not prove that a seller is trustworthy.

Investment or securities scheme

If money was solicited as an investment, pooled fund, profit-sharing arrangement, franchise-like investment, or securities offering, preserve the pitch and report it to the Securities and Exchange Commission through an official SEC complaint channel. Check the entity’s registration and authority to solicit investments through the SEC’s official systems. Corporate registration alone does not mean that an entity may lawfully offer investments to the public.

Civil recovery or small claims

A victim may have a civil claim against the scammer or another responsible party. If the claim is purely for payment or reimbursement of money and arises from a type of transaction covered by the Rules on Expedited Procedures, the small-claims process may be available for an amount not exceeding ₱1,000,000, exclusive of interest and costs.

Small claims are not suitable in every scam. The defendant must ordinarily be identified and capable of being served, the claim must fall within the rule’s permitted categories, and the relief sought must be solely monetary. Claims requiring other remedies, provisional relief, or complex determinations may need an ordinary civil action. Consult the Supreme Court’s Rules on Expedited Procedures in the First Level Courts.

A criminal case may also include civil liability, but victims should not assume that prosecution will produce prompt repayment. Ask a lawyer whether a separate civil action, provisional remedy, or court order is appropriate and whether filing one case affects another.

Deadlines and why delay is dangerous

There is no single filing deadline for every scam. The applicable prescriptive period depends on the offense, amount, date and manner of commission, identity of the responsible parties, remedy pursued, and events that may interrupt prescription. Civil claims may follow different periods from criminal complaints, consumer proceedings, card disputes, or contractual remedies.

The most urgent operational deadline is the financial-system window: the BSP rules contemplate an initial hold of no more than five calendar days, with supporting documents generally submitted during that period if an extension is sought. This does not mean the funds will remain available for five days.

Report immediately, comply promptly with document requests, and obtain legal advice early if a substantial amount is involved, a limitation period may be approaching, the institution denies the claim, or the scammer’s assets may disappear.

Common mistakes

Waiting for the scammer’s promised refund before reporting.
Reporting only to the social-media platform and not to the financial institution.
Contacting only the receiving bank instead of starting with the source institution’s 24/7 fraud channel.
Giving vague transaction details or failing to obtain a reference number.
Missing requests for a sworn complaint, affidavit, or police report during the initial holding period.
Deleting chats, blocking the account before preserving evidence, or losing original files.
Posting accusations, personal data, or unverified identities publicly.
Paying a stranger who promises guaranteed recovery or claims to work inside a bank, the BSP, police, NBI, or court.
Sharing an OTP, PIN, password, recovery code, or remote access to a device.
Assuming that a police report alone freezes funds or guarantees reimbursement.
Filing knowingly false or malicious reports. AFASA criminalizes malicious or bad-faith reporting that causes a completely unwarranted hold.

When legal help is urgent

Seek advice from a Philippine lawyer without delay when:

the amount is substantial or represents essential household or business funds;
the financial institution refuses to open a fraud case or gives no usable case number;
held funds may be released and a court extension may be necessary;
the scammer or recipient account owner has been identified;
assets, records, or witnesses may disappear;
you are considering a civil case, injunction, attachment, or other provisional remedy;
you signed contracts, waivers, loan papers, or settlement documents;
you are being accused of acting as a money mule;
your account was used to receive or transfer suspicious funds;
the incident involves threats, blackmail, intimate images, identity theft, trafficking, or danger to a child or vulnerable person; or
the transaction crosses borders or involves cryptocurrency that has moved through several services.

If you unknowingly allowed someone to use your account, stop all transfers, preserve the instructions you received, notify the institution, and obtain legal advice before making detailed admissions. AFASA imposes serious liability for specified money-muling conduct, while separately recognizing protection for trafficking victims under stated conditions.

Frequently asked questions

Can the bank reverse a transfer that I personally approved?

Possibly, but approval of the payment does not end the inquiry if deception or social engineering may have been involved. Recovery depends on the evidence, the applicable account agreement and consumer-protection rules, the institution’s controls, whether funds remain available, and the coordinated verification result.

Will reporting within five days guarantee a refund?

No. Five calendar days is the maximum initial holding period under the BSP regulations, not a guaranteed recovery window. Report immediately because funds may be moved or withdrawn almost at once.

Can a recipient account be frozen just because I complained?

The BSP rules allow participating institutions to impose an initial temporary hold when a complaint or another recognized trigger provides the required basis. The hold is provisional and subject to verification. A hold beyond the maximum administrative period requires a court order.

What if the money has already been withdrawn?

The institutions must still conduct coordinated verification, but an administrative hold cannot capture money that is no longer available in the relevant accounts. Criminal investigation, recovery from identified defendants, restitution, or a civil action may still be possible.

Should I contact the BSP before my bank or e-wallet?

Ordinarily, no. First report to the institution’s Financial Consumer Protection Assistance Mechanism or official fraud channel. BSP-CAM is the second-level remedy when you are dissatisfied with the institution’s handling.

Do I need a lawyer to report a scam?

No lawyer is required merely to report the incident to a financial institution or law-enforcement agency. Legal help becomes important when court action may be needed, liability is disputed, the amount is substantial, or you may face criminal or civil exposure yourself.

Can the police or BSP promise recovery?

No legitimate authority can guarantee recovery. Be cautious of anyone demanding an advance payment, secrecy, an OTP, or remote device access in exchange for supposedly releasing recovered funds.

Can I report if I only suspect a scam and no money was lost?

Yes. Preserve the message, number, account, profile, or website and report it through an appropriate official channel. If credentials were disclosed, secure the affected accounts immediately even if no unauthorized transaction is visible.

Official sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Procedures and rights may depend on the transaction, documents, institutions, and parties involved. Official sources were checked as of 14 September 2026.