If an online gaming site says you must pay a “withdrawal tax,” “verification deposit,” “AML clearance fee,” “insurance,” or “VIP upgrade” before it will release your winnings, stop sending money. Repeated demands for new fees are a common form of advance-fee fraud: the displayed balance may be fictitious, and every payment simply leads to another invented charge. Your immediate priorities are to preserve evidence, contact your bank or e-wallet provider, request that the receiving account be traced or temporarily held, and report the exact website or app to the proper Philippine authorities.

Is an Extra Withdrawal Fee Legitimate or a Scam?

Not every gaming-related charge is automatically fraudulent. A licensed operator may impose transaction charges, wagering requirements, account-verification procedures, or tax-related deductions that were clearly disclosed before the player deposited or placed a bet.

The danger arises when the site invents a new payment requirement only after the player tries to withdraw.

Common warning signs

What the site does	Why it is suspicious
Demands a “refundable verification deposit” before releasing funds	Legitimate identity verification usually requires documents, not another cash transfer
Adds a new fee after each payment	This is the classic pattern of an advance-fee scam
Tells you to send money to a personal GCash, Maya, bank, or cryptocurrency account	The payment may be going to a money mule rather than a licensed operator
Claims the fee cannot be deducted from your displayed balance	This may indicate that the displayed balance does not exist
Uses a PAGCOR logo or sends a certificate but cannot be found on PAGCOR’s official lists	Logos, screenshots, and certificates can be copied or fabricated
Threatens to freeze, confiscate, or “burn” your winnings within minutes	Artificial urgency is intended to prevent verification
Communicates only through Telegram, WhatsApp, Facebook Messenger, or Viber	The people contacting you may not represent the operator named on the website
Requests your OTP, PIN, password, recovery code, or screen-sharing access	These credentials can be used to take over your financial accounts
Calls the payment an “AML certificate,” “anti-money laundering clearance,” or “BIR activation fee”	Government agencies generally do not collect such charges through personal wallets or chat-based payment instructions
Claims to have an active Philippine offshore gaming licence	Philippine Offshore Gaming Operators were banned effective December 31, 2024, so a site claiming a current PAGCOR offshore licence is a major red flag (Pagcor)

A site may copy the name, branding, licence number, or interface of a real operator. Verify the exact domain name, including spelling, subdomains, and unusual extensions. A legitimate brand listed as example.ph does not make example-vip.net, example88.com, or a similarly named mobile app legitimate.

PAGCOR has repeatedly warned the public about illegal gaming sites using copied PAGCOR logos and fabricated accreditation documents. Its Electronic Gaming Licensing Department publishes lists of registered brands and their authorised website addresses. Verification should be done through PAGCOR’s official electronic gaming licensing page, not through a link supplied by the gaming site. (Pagcor)

Philippine Laws That May Apply

The legal treatment depends on what actually happened: whether the operator was licensed, whether the displayed winnings were real, how the money was transferred, and whether false representations induced the victim to pay.

Estafa through false pretences

Article 315 of the Revised Penal Code punishes estafa, commonly called swindling. Estafa by false pretences may exist when a person:

Makes a false statement about authority, business, qualifications, credit, agency, goods, services, or another material fact;
Makes the false statement before or at the same time the victim parts with money;
Causes the victim to rely on the statement; and
Causes financial loss or damage.

For example, a person may commit estafa by falsely claiming that a player has won ₱500,000, that PAGCOR requires a ₱25,000 release fee, and that payment will immediately unlock the withdrawal—when no real winnings or PAGCOR requirement exists. The Supreme Court has consistently identified prior or simultaneous false representation, reliance, and resulting damage as central elements of estafa by false pretences. (Supreme Court E-Library)

Cybercrime penalties

When estafa is committed through a website, mobile app, online chat, electronic wallet, or another information and communications technology system, Section 6 of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, may apply. It provides that crimes already punishable under the Revised Penal Code or special laws receive a penalty one degree higher when committed through information and communications technology. The Supreme Court upheld the application of this provision to technology-enabled crimes in Disini v. Secretary of Justice. (Lawphil)

Financial Accounts Regulation Act

The Anti-Financial Account Scamming Act, Republic Act No. 12010 of 2024, or AFASA, applies to bank accounts, e-wallets, and other financial accounts used in fraudulent schemes. It penalises activities such as money muling and social engineering and gives financial institutions mechanisms to investigate and temporarily hold disputed funds. (Lawphil)

Under the implementing rules issued through BSP Circular No. 1215, a financial institution may impose an initial hold of up to five calendar days on disputed funds. A further hold of up to 25 additional calendar days may follow when justified, for a maximum of 30 calendar days. During the initial period, the account holder or complainant may be asked to submit supporting documents such as a sworn complaint, affidavit, police report, transaction records, and screenshots.

A temporary hold is not an automatic refund. Recovery becomes more difficult once the recipient has withdrawn the money, transferred it through several accounts, converted it to cryptocurrency, or sent it outside the Philippines.

Fraudulent use of cards and account credentials

The Access Devices Regulation Act of 1998, Republic Act No. 8484, may apply when scammers obtain or misuse credit card numbers, debit card details, account numbers, PINs, access codes, or similar credentials. (Lawphil)

Never provide an OTP, PIN, password, CVV, recovery phrase, or remote-access permission to a gaming site. A legitimate withdrawal process does not require a player to surrender control of a bank or e-wallet account.

Misuse of identification documents and personal data

Online gaming scammers may collect passports, Philippine identification cards, selfies, signatures, proof of address, or videos supposedly for “KYC,” meaning know-your-customer verification. If the documents are later disclosed, sold, or used to open accounts without consent, the Data Privacy Act of 2012, Republic Act No. 10173, may apply. (Lawphil)

A privacy complaint may be filed with the National Privacy Commission. Its formal procedure generally requires the prescribed complaint form, supporting evidence, and a notarised submission filed personally, by courier, or through the permitted electronic channel described on the NPC complaint page. (National Privacy Commission)

Civil claims and unjust enrichment

Articles 19, 20, 21, and 22 of the Civil Code require people to act with justice, honesty, and good faith; impose liability for unlawful or negligent acts that cause damage; recognise liability for wilful conduct contrary to morals or public policy; and prohibit unjust enrichment. These provisions may support claims for the return of money, damages, and other relief when identifiable persons or companies received payments through fraud. (Lawphil)

There is an important distinction between:

Recovering actual deposits or “release fees” obtained through fraud; and
Suing solely to collect supposed winnings from an illegal gambling arrangement.

Article 2014 of the Civil Code limits an action by a winner to collect winnings from a game of chance and provides remedies for losses in illegal gambling. Article 2015 addresses situations involving cheating or deceit. The Supreme Court explained in Montano v. Gambino that Article 2014 refers to illegal gambling. A person dealing with an unlawful site may therefore have a stronger claim for the return of fraudulently obtained payments than for enforcement of the site’s fictitious or illegal promised winnings. (Lawphil)

What to Do Immediately After a Withdrawal-Fee Demand

1. Stop sending money

Do not pay a “final fee” simply because you have already paid earlier charges. Scammers often exploit the sunk-cost effect—the belief that one more payment is necessary to avoid losing everything already paid.

Do not borrow money, use another person’s account, or follow instructions to recruit someone else to fund the withdrawal. That may increase the loss and could cause another person’s account to become involved in the transaction trail.

2. Preserve evidence before the account disappears

Capture and retain:

The exact website address, including every character in the domain;
Screenshots or screen recordings of the account balance and withdrawal page;
Your player username, user ID, referral code, and registered contact details;
The site’s terms and conditions, bonus rules, withdrawal rules, and fee notices;
Complete chat conversations, not merely selected messages;
Email headers, telephone numbers, social-media profiles, and usernames;
QR codes and recipient account details;
Bank, card, e-wallet, or cryptocurrency transaction records;
Transaction reference numbers, dates, times, and amounts;
Names displayed for recipient accounts;
Copies of claimed licences, certificates, invoices, or BIR documents;
The app name, developer name, download link, and app-store listing;
Any remote-access application the scammers instructed you to install.

Keep the original files. Avoid relying only on cropped screenshots, because investigators may need timestamps, URLs, and surrounding context. Prepare a one-page chronology showing what happened, what was promised, and how much was transferred at each stage.

3. Secure your financial and online accounts

After saving the evidence:

Change your email, banking, e-wallet, and gaming passwords using a device you believe is secure.
Sign out other devices and revoke active sessions.
Contact your card issuer if card details were entered.
Disable or replace compromised cards.
Remove remote-access applications such as screen-sharing or device-control tools.
Check whether new beneficiaries, linked devices, or recovery contact details were added.
Turn on transaction alerts and multi-factor authentication.
Monitor your credit, bank, and e-wallet accounts for unfamiliar transactions.

Do not delete the fraudulent app until you have preserved the relevant evidence, but stop opening it or communicating through it once the records have been captured.

4. Contact your bank or e-wallet provider immediately

Report the transaction through the institution’s official fraud, customer-service, or consumer-assistance channel. Do not rely only on a chat with the recipient or a social-media page.

State clearly:

“I am reporting a fraud-induced disputed transaction. I was deceived into sending funds based on false representations about gaming winnings and withdrawal fees. Please trace the recipient account, initiate the applicable AFASA procedures, and give me a complaint reference number.”

This wording is more accurate than claiming the transfer was “unauthorised” when you personally approved it. A voluntarily confirmed transfer can still be fraud-induced. Giving a false account of what happened may delay the investigation or undermine your credibility.

Provide:

Transaction reference numbers;
Recipient account or wallet details;
Amounts and timestamps;
A concise description of the deception;
Screenshots of the withdrawal demand;
Your identification and account details; and
Any police report, affidavit, or sworn complaint available.

Ask whether the institution has sent an urgent trace or hold request to the recipient institution. Submit the required documents as early as possible, particularly within the initial five-day holding period contemplated by the AFASA rules. (Lawphil)

5. Escalate unresolved bank or e-wallet complaints to the BSP

The Bangko Sentral ng Pilipinas follows a two-level consumer-assistance process:

First complain to the bank, e-wallet provider, or other BSP-supervised financial institution through its Financial Consumer Protection Assistance Mechanism.
If the matter remains unresolved or the response is unsatisfactory, escalate it to the BSP Consumer Assistance Mechanism.

Complaints may be escalated through the BSP Online Buddy, commonly called BOB, or by sending the BSP complaint form with proof of the prior complaint and supporting documents. Official instructions are available through the BSP consumer assistance channels.

The BSP complaint process addresses the conduct or handling of a BSP-supervised institution. It does not replace a criminal complaint against the scammers.

6. Verify and report the operator to PAGCOR

Search PAGCOR’s official lists for:

The operator’s legal name;
The registered gaming brand;
The exact authorised domain;
The licence category; and
Any accredited gaming-system administrator or service provider involved.

A PAGCOR logo is not proof of licensing. If the exact domain is missing, contact PAGCOR through its official regulatory contact page and provide screenshots, the domain, account details, and copies of any purported licence. PAGCOR’s Electronic Gaming Licensing Department regulates local online gaming categories such as electronic casino games, electronic bingo, sports betting, online poker, and other authorised remote products. (Pagcor)

For a licensed operator, ask PAGCOR which complaint or patron-dispute process applies to that particular licence. PAGCOR’s casino rules illustrate that regulated disputes may involve an internal resolution period followed by regulator review; under the 2025 casino manual, an unresolved patron complaint is referred to PAGCOR, the licensee is given seven days to attempt resolution, and an award to the patron must generally be paid within 30 days. The exact procedure for an online licensee may differ, so the applicable licensing unit should confirm the correct route.

7. File a cybercrime report

The following agencies may receive reports involving online gaming scams:

Agency	When it is useful	Official contact channel
Philippine National Police Anti-Cybercrime Group	Online fraud, fake websites, social-media accounts, electronic evidence, local suspects	`acg@pnp.gov.ph`, 0998-598-8116, or (02) 8414-1560
National Bureau of Investigation Cybercrime Division	Larger fraud schemes, organised groups, digital investigation, cross-regional cases	`ccd@nbi.gov.ph` or (02) 8523-8231 to 38, local 3454/3455
Cybercrime Investigation and Coordinating Center	Scam reporting and referral through the national anti-scam system	Hotline 1326 or `report@cicc.gov.ph`
PAGCOR	Verification of gaming licence, domain, regulatory status, or licensed-operator dispute	PAGCOR regulatory and electronic gaming channels
National Privacy Commission	Misuse, disclosure, or fraudulent use of identification documents and personal information	NPC formal complaint procedure

The BSP’s official fraud-reporting guidance lists the PNP Anti-Cybercrime Group, NBI Cybercrime Division, and CICC as law-enforcement or cybercrime reporting channels.

A police blotter records that you reported an incident, but a formal investigation may require a complaint-affidavit, supporting documents, and follow-up with the assigned investigator or prosecutor.

Documents to Prepare

Document	Why it matters
Chronology of events	Helps investigators understand the scheme quickly
Government-issued identification	Confirms the complainant’s identity
Bank or e-wallet statements	Establishes actual financial loss
Transaction receipts and reference numbers	Allows institutions to trace funds
Full chat and email records	Shows the representations that induced payment
Website and account screenshots	Preserves the displayed winnings, fees, and withdrawal refusal
Terms and conditions in effect at the time	Helps determine whether the fee was disclosed or invented later
Recipient names, account numbers, wallet numbers, and QR codes	Identifies possible money-mule accounts
Copies of fake licences or tax documents	Supports the claim of fraudulent misrepresentation
Complaint reference numbers	Shows prior reporting to banks, e-wallets, PAGCOR, or law enforcement
Complaint-affidavit or police report	May support an extended AFASA hold and criminal proceedings

A complaint-affidavit is a sworn written narration of the facts. It is normally signed before a prosecutor, investigator authorised to administer oaths, or notary public. Bring the original evidence and at least two organised sets of copies when filing personally. Requirements may vary depending on the receiving office and complexity of the case.

How Long Does Recovery Usually Take?

There is no guaranteed recovery period.

The first hours and days matter because funds may still be in the recipient account. The AFASA framework permits an initial hold of up to five calendar days and, when justified, an additional hold of up to 25 days. This is an investigation and preservation mechanism, not a promise that the money will be returned.

A bank or e-wallet investigation may take days or weeks, depending on the number of institutions involved, the availability of records, and whether the funds remain traceable. Criminal investigations may take months or longer, particularly when investigators must identify account holders, obtain platform records, secure warrants or court orders, or coordinate across jurisdictions.

Recovery is usually more difficult when:

Payment was made in cryptocurrency;
The money was transferred through several mule accounts;
The recipient immediately withdrew the funds in cash;
The site and its operators are located abroad;
The operator used false identities;
Evidence was deleted or submitted late; or
The displayed “winnings” never existed.

What If the Site Says the Extra Payment Is a Tax?

Gaming winnings may be taxable under Philippine tax law, depending on their nature, source, amount, and the taxpayer’s circumstances. Current tax rules address final taxes on certain prizes and winnings. However, the existence of a tax rule does not validate a demand to send a “tax payment” to a private individual, personal wallet, cryptocurrency address, or unrelated account. (Lawphil)

Before paying, require the operator to provide:

Its complete registered corporate name;
Taxpayer identification details;
The exact legal basis and tax computation;
An official receipt or recognised tax document;
An explanation of why the amount cannot be properly withheld or deducted;
The name of the licensed operator responsible for remittance; and
Confirmation through PAGCOR or the appropriate BIR channel.

A screenshot bearing a BIR logo is not proof that a tax is due.

Special Issues for OFWs and Foreign Victims

A victim outside the Philippines may still report the matter when a Philippine bank, e-wallet, recipient account, device, victim, or other material element is located in the country. RA 12010 includes jurisdictional provisions covering offences where an element occurs in the Philippines, Philippine financial infrastructure is used, or damage is caused to a person in the Philippines. (Lawphil)

When reporting from abroad:

Record all timestamps and identify the applicable time zone;
Contact the Philippine bank or e-wallet through its official remote channels;
Save the recipient’s Philippine account information;
Report the website to PAGCOR and the relevant cybercrime agency;
Report cryptocurrency transactions to the exchange used, where identifiable;
Keep passport-entry records or proof of residence if location becomes relevant; and
Ask the investigator whether a remote interview or electronically submitted affidavit is acceptable.

If a sworn document executed abroad is later required for a Philippine proceeding, it may need notarisation and an apostille in a country that is party to the Apostille Convention. In other countries, Philippine consular authentication or legalisation may be required. The exact requirement depends on the document and the office where it will be used. (Philippine Embassy in New Delhi)

Documents written in another language may also require an English translation acceptable to the investigator, prosecutor, regulator, or court.

Common Mistakes That Can Make the Situation Worse

Paying one more “final” fee

The scammer may promise that the next payment is the last. In practice, payment often triggers another demand for an account upgrade, tax adjustment, transfer code, liquidity deposit, or late penalty.

Falsely claiming that a transfer was unauthorised

Be precise. Tell the financial institution that you personally approved the transfer but did so because of fraudulent representations. This allows the complaint to be assessed as a fraud-induced disputed transaction.

Hiring a recovery agent who requires an upfront payment

Victims are often approached by supposed hackers, tracing specialists, lawyers, regulators, or “fund recovery” companies that promise guaranteed recovery in exchange for another advance fee. Verify professional licences, office addresses, engagement documents, and official payment accounts before sharing information or paying anything.

Posting full evidence publicly

Public posts may warn others, but do not publish complete ID cards, account numbers, home addresses, phone numbers, QR codes, signatures, or bank statements. Public exposure can create a second identity-theft risk and may alert suspects before accounts are preserved.

Deleting the app or conversation too early

Save the evidence first. Some fraudulent apps, disappearing messages, and private chat groups become inaccessible once the user is blocked.

Relying only on the site’s PAGCOR logo

PAGCOR verification should match the legal operator, gaming brand, and exact website domain. A copied logo or certificate has little evidentiary value by itself. (Pagcor)

Frequently Asked Questions

Is it normal for an online gaming site to require payment before withdrawal?

A previously disclosed transaction charge may be legitimate, particularly if it is deducted through the operator’s official system. A new “refundable” fee demanded only after you win—especially through a personal wallet or cryptocurrency address—is a serious warning sign.

Can GCash, Maya, or a bank reverse the transfer?

A reversal is possible in some cases but is not guaranteed. Report immediately and request an AFASA trace or hold. Recovery depends largely on whether the funds are still in a traceable account and whether the receiving institution can preserve them.

What should I tell my bank or e-wallet provider?

Say that you are reporting a fraud-induced disputed transaction caused by false representations about online gaming winnings and withdrawal fees. Provide exact transaction references and ask for an urgent trace, hold request, and written complaint reference number.

Can I report the scam even though I voluntarily pressed “Send”?

Yes. Your approval of the transfer does not automatically eliminate fraud. The relevant issue is whether you were deceived into sending the money. Do not describe it as an unauthorised transfer if you personally approved it.

Does a PAGCOR logo prove that the website is legal?

No. Verify the exact brand and domain on PAGCOR’s official lists. Scammers can copy logos, certificates, licence numbers, and website designs. (Pagcor)

Can I sue to collect the winnings shown on an illegal gaming site?

That may be difficult, particularly if the balance was fictitious or the gambling arrangement was illegal. Philippine law distinguishes between enforcing alleged gambling winnings and recovering actual money obtained through deceit. Focus first on documenting and recovering deposits and fraudulent fees.

How quickly should I report the transaction?

Immediately. Even a delay of several hours may allow the recipient to withdraw or transfer the money. Supporting documents should be submitted as early as possible because the initial AFASA holding period may be limited to five calendar days.

What if the site asks only for identification and not another payment?

Identity verification can be legitimate, but confirm the exact domain and operator before submitting sensitive documents. Do not provide banking passwords, OTPs, PINs, recovery codes, or unnecessary copies of IDs. Add a watermark to an ID copy stating the intended recipient, purpose, and date when appropriate.

What if I paid through cryptocurrency?

Preserve the wallet address, transaction hash, exchange account, chat records, and screenshots. Report the transaction to the exchange immediately. Blockchain transactions normally cannot be reversed directly, but an exchange may preserve account records or restrict an account when funds reach a regulated platform.

Can an OFW or foreigner report a Philippine online gaming scam from abroad?

Yes. Contact the Philippine financial institution, PAGCOR, and the relevant cybercrime agency remotely. A later complaint-affidavit may need notarisation, apostille, consular authentication, or translation depending on where it is executed and how it will be used.

Key Takeaways

Stop paying when an online gaming site invents new withdrawal, verification, tax, AML, insurance, or upgrade fees.
Verify the operator’s legal name, brand, and exact domain through PAGCOR’s official lists rather than relying on logos or certificates.
Preserve full chats, website details, transaction references, recipient accounts, terms and conditions, and a clear chronology.
Immediately report the transfer as a fraud-induced disputed transaction and request an AFASA trace or temporary hold.
Escalate unresolved financial-institution complaints to the BSP and separately report the scheme to PAGCOR, the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or CICC.
A temporary hold does not guarantee recovery, but early reporting provides the best chance of preserving funds.
Distinguish between recovering actual money obtained through fraud and attempting to enforce purported winnings from an illegal or fictitious gaming site.