Quick answer

If you have been scammed online, act immediately. Contact the bank, e-wallet, card issuer, or payment provider through its official 24/7 fraud channel; ask it to secure your account, trace the transfer, and place any recoverable funds on temporary hold. Then preserve the evidence and report the incident to the Philippine National Police, National Bureau of Investigation, or another agency with jurisdiction.

Philippine law may provide several remedies at the same time:

A criminal complaint for estafa or another offense, potentially with the higher penalty applicable when the crime is committed through information and communications technology.
Action under the Anti-Financial Account Scamming Act for money muling, social-engineering schemes, or misuse of financial accounts.
A complaint against a financial institution, online merchant, digital platform, or investment promoter.
A civil claim to recover money and proven damages.

Recovery is not automatic. It depends heavily on how quickly the transaction is reported, whether the funds remain traceable, how the payment was authorized, what security controls were involved, and the available evidence.

What to do immediately

1. Call the financial institution first

Use only the telephone number, app, website, or branch listed in the institution’s official channels. Do not call a number supplied by the suspected scammer.

Ask the institution to:

Block or restrict the affected account, card, device, or online access.
Stop pending transactions, if still possible.
Begin its disputed-transaction and coordinated-verification process.
Send holding requests to recipient institutions when applicable.
Preserve account-opening, device, access, authentication, and transaction records.
Give you a complaint reference number and written acknowledgment.
Provide the transaction reference number, date, time, amount, and recipient institution information available to you.
Explain what affidavit, police report, identification, or other documents must be submitted and by when.

Change your passwords and PINs from a trusted device. Revoke unfamiliar devices and sessions, replace compromised cards or SIMs, and secure the email account connected to your financial accounts. If the scammer persuaded you to install a remote-access app, disconnect the device from the internet and have it examined before using it for banking again.

2. Invoke the disputed-funds process where it applies

Under the Anti-Financial Account Scamming Act and current BSP regulations, BSP-supervised institutions may temporarily hold funds involved in a disputed electronic account-to-account transfer while they trace and verify the transaction.

A complaint through the originating institution’s 24/7 fraud-reporting channel can trigger the process. The institution must verify essential transaction details and, when appropriate, initiate a hold within its own system or send holding requests along the transfer chain.

The current framework provides:

An initial hold of no more than five calendar days.
A possible extension of up to 25 additional calendar days when the regulatory grounds are met.
A maximum administrative holding period of 30 calendar days, unless a competent court extends it.
Coordinated verification by institutions involved in the transaction chain.
Return of held funds to the source account when the verification produces a reasonable conclusion that the funds came from a social-engineering scheme, money muling, unlawful activity, an illegal source, or a transaction without an underlying economic purpose.

These measures apply to disputed electronic transfers between financial accounts. They do not apply in the same way to a simple mistaken transfer or to an ordinary credit-card purchase, except when a credit card was used to perform an electronic fund transfer through an automated clearing house. Separate rules and contractual dispute procedures may apply in those situations.

A temporary hold does not guarantee reimbursement. Funds may already have been withdrawn, converted, spent, or transferred beyond reach. A recipient may also challenge the hold and present proof that the transaction was legitimate.

Official text: Republic Act No. 12010—Anti-Financial Account Scamming Act and the BSP’s current Manual of Regulations for Payment Systems.

3. Make a formal fraud report

For a cyber-enabled scam, reports may be made to the PNP’s cybercrime investigators or the NBI Cybercrime Division. The NBI also maintains an online complaint page and publishes its Cybercrime Division information.

Bring or submit:

A chronological statement explaining what happened.
Your government-issued identification.
Proof of payment and complete transaction details.
Copies of chats, emails, advertisements, listings, receipts, contracts, and account statements.
The suspect’s names, aliases, usernames, telephone numbers, email addresses, account numbers, wallet addresses, and profile links.
Your complaint reference numbers from the bank, e-wallet, marketplace, courier, or other provider.
Details of other known victims, without altering or coordinating their accounts of events.

A police or NBI report is not the same as filing a criminal case in court. Investigators may gather evidence and identify suspects. A complaint supported by affidavits and evidence may then undergo preliminary investigation before the proper prosecutor when required.

The DOJ’s published checklist for a complaint for preliminary investigation includes a complaint-affidavit or sworn statement and supporting evidence, with copies based on the number of respondents. Confirm the current local filing requirements before submitting: DOJ filing requirements for preliminary investigation.

Which laws may apply?

Estafa committed online

Article 315 of the Revised Penal Code may apply when a person obtains money or property through qualifying deceit or another statutory form of estafa and causes damage. The prosecution must prove the particular elements of the form charged; a broken promise or unpaid debt is not automatically estafa.

Section 6 of the Cybercrime Prevention Act of 2012 covers crimes under the Revised Penal Code or special laws committed by, through, and with the use of information and communications technology. When Section 6 properly applies, the prescribed penalty is generally one degree higher. The precise charge and penalty depend on the proven acts, amount, dates, and governing penal provisions.

Other possible offenses include computer-related fraud, computer-related identity theft, illegal access, misuse of devices, falsification, threats, extortion, violations involving access devices, or offenses under special laws. Investigators and prosecutors must select charges supported by the evidence; labels such as “phishing,” “romance scam,” or “investment scam” do not by themselves establish every element of a crime.

Financial-account scams and money mules

The Anti-Financial Account Scamming Act prohibits defined forms of money muling and social-engineering schemes. Liability may arise when a person knowingly provides, lends, sells, buys, possesses, controls, or uses a financial account for fraudulent activity, or performs prohibited acts to obtain sensitive identifying or financial information.

Do not accept a stranger’s request to receive and forward money through your account in exchange for a fee. An account owner can face investigation even if someone else directed the transfers. The eventual result will depend on proof of knowledge, participation, and the specific prohibited act.

Knowingly making a completely unwarranted or false report in bad faith that causes funds to be held can also create criminal liability. Report accurately, identify uncertainties, and do not exaggerate.

Unauthorized access-device transactions

The Access Devices Regulation Act may apply to fraudulent activity involving cards, account numbers, codes, telecommunications identifiers, and other access devices covered by the statute. The applicable offense depends on how the device or account information was obtained, possessed, or used.

Investment scams

Offers of profits or returns may fall under securities laws and SEC jurisdiction. Company registration alone does not authorize an entity to solicit investments from the public. Preserve the investment contract, presentation, referral structure, wallet or bank trail, promised returns, and proof of solicitation.

Reports or complaints may be submitted through the SEC’s official iMessage portal. A criminal report should also be considered when deception or account misuse is involved.

Online-shopping and merchant disputes

For a business-to-consumer sale, the Consumer Act and the Internet Transactions Act may provide consumer remedies. Start with the seller and platform’s internal complaint process, asking for a refund, replacement, delivery, or other appropriate relief.

If unresolved, file through the DTI Consumer CARe System. Include the identities and contact details of the parties, a clear narration, your requested remedy, proof of the transaction, and identification. Pure consumer-to-consumer transactions are excluded from the Internet Transactions Act’s coverage, although criminal and ordinary civil remedies may still be available.

Complaints against banks, e-wallets, and payment providers

Financial consumers have statutory rights to protection of their assets against fraud and misuse, data protection, and timely complaint handling under the Financial Products and Services Consumer Protection Act.

File first with the financial institution’s own consumer-assistance mechanism. If the complaint concerns an allegedly unauthorized or disputed amount, the provider must, pending its final investigation, suspend interest, fees, and charges on that amount or provide a similar reasonable accommodation.

If the institution’s response is unsatisfactory, escalate the complaint to the BSP through its Consumer Assistance Channels and Online Buddy. Include the institution’s final response or proof that you first complained to it, together with your reference number and supporting documents.

A regulatory complaint examines the institution’s conduct and compliance. It does not replace a criminal complaint against the scammer or guarantee that the institution must reimburse every loss. Liability may depend on matters such as authentication, security failures, negligence, consumer conduct, and compliance with the temporary-holding rules. Under the current BSP framework, an institution that fails to make a required temporary hold may be liable for loss or damage arising from that failure, including restitution of the disputed funds.

Can the money be recovered through a civil case?

Possibly. A victim may pursue restitution in the criminal case or bring an appropriate civil action based on fraud, contract, unjust enrichment, or another legally supported cause of action. The proper defendant must be identified and served, and the claimant must prove both the legal basis and the amount sought.

A small-claims case may be an efficient option when the dispute falls within the permitted categories and the money claim does not exceed ₱1,000,000, excluding interest and costs. Small claims are heard in first-level courts under simplified procedures, generally without lawyers appearing for the parties at the hearing. Not every scam-related demand qualifies, particularly when the true defendant is unknown or the case requires relief other than payment of money.

Review the Supreme Court’s Rules on Expedited Procedures in the First Level Courts and ask the appropriate first-level court about current forms, venue, fees, and service requirements.

Do not delay while deciding between criminal, administrative, and civil remedies. Different causes of action have different prescriptive periods, and the correct deadline can depend on the offense, amount, date of discovery, respondent, and procedural step taken.

Evidence to preserve

Keep the original device and original electronic data whenever possible. Save copies in at least two secure locations.

Preserve:

Complete chats and email threads, not only selected screenshots.
Usernames, numeric profile IDs, account URLs, group links, and posting URLs.
Email headers and original message files.
Advertisements, livestreams, product pages, investment presentations, and terms.
Audio recordings or video supplied by the parties, with their original files and metadata.
Deposit slips, QR codes, transaction confirmations, reference numbers, statements, and receipts.
Bank and e-wallet complaint acknowledgments and written responses.
Call logs, telephone numbers, OTP or security alerts, and device-login notifications.
Delivery records, waybills, invoices, contracts, and proof of non-delivery or misrepresentation.
A timeline recording dates, times, amounts, representations, and actions taken.
Proof connecting an online identity to the person or account involved.

Electronic evidence must still be relevant, authentic, and reliable. Under the Rules on Electronic Evidence, the party offering a private electronic document generally bears the burden of authenticating it. Text messages and similar communications may be proved through testimony from a participant or another person with personal knowledge. A screenshot can be useful, but an unexplained or altered screenshot may be challenged.

Do not crop out timestamps or account identifiers, edit files, add annotations to the only copy, impersonate another person to obtain more evidence, hack an account, or publicly post sensitive information. Give investigators a working copy and retain the original.

What not to do

Do not pay a “recovery agent,” “hacker,” or supposed government officer who promises guaranteed retrieval.
Do not send another payment for taxes, verification, unlocking, insurance, or withdrawal.
Do not give anyone an OTP, PIN, password, card verification value, seed phrase, or remote access.
Do not rely only on reporting the social-media profile; report the financial transaction as well.
Do not delete chats or reset the affected device before preserving evidence.
Do not threaten, dox, or publicly accuse an unverified person.
Do not assume that a SIM registration, bank-account name, or social-media profile conclusively identifies the offender.
Do not sign an affidavit of desistance or settlement document without understanding its effect.
Do not treat the filing of a report as proof that funds have been frozen or that a criminal case has already been filed.

When legal help is urgent

Consult a Philippine lawyer promptly when:

A large amount, business account, trust fund, or several victims are involved.
The institution denies the claim or alleges that you authorized or enabled the transfer.
You received a prosecutor’s subpoena, court notice, demand letter, or account-freeze notice.
Your account was used to receive or forward suspicious funds.
The scam involves identity theft, forged documents, cryptocurrency, assets abroad, or an unidentified respondent.
There are threats, blackmail, intimate images, stalking, or risk of physical harm.
A child, senior citizen, person with disability, or otherwise vulnerable victim is involved.
You need urgent court relief before the 30-day temporary holding period expires.
A filing deadline or prescriptive period may be approaching.

If there is an immediate threat to life or safety, contact emergency law enforcement services rather than attempting to negotiate with the offender.

Frequently asked questions

Can a bank or e-wallet reverse the transfer immediately?

Sometimes, but not always. A pending transfer may be stopped, and traceable funds may be held under the applicable process. A completed transfer cannot simply be reversed without a legal, contractual, or regulatory basis and appropriate verification.

What if I personally pressed “send” because the scammer deceived me?

Report it anyway. A transaction induced by social engineering may fall within the AFASA disputed-transaction framework. However, reimbursement still depends on the evidence, location of the funds, verification results, and any responsibility attributable to the institutions or account holders.

What if I sent money to the wrong account?

That is generally an erroneous transaction rather than a disputed transaction caused by fraud. The AFASA temporary-holding rules do not apply in the same way. Contact the financial institution immediately and request assistance under its erroneous-transaction procedures.

Is a police blotter enough?

No. It is useful documentation, but further investigation, sworn statements, supporting evidence, and prosecutor action may be necessary. Continue following up and keep every reference number.

Can I sue the bank instead of the scammer?

Only if there is a sustainable legal basis for holding the institution liable. The fact that a scammer used an account does not automatically make the bank responsible. Security controls, timely reporting, authentication records, statutory duties, and causation must be examined.

Can screenshots prove the case?

They can help, especially when authenticated by a participant or another competent witness, but they should be supported by original files, device data, transaction records, testimony, and identifying evidence whenever available.

Should I report a small loss?

Yes. Reporting may assist fund tracing, expose linked accounts, and help investigators connect multiple victims. Whether to pursue a court case should also account for evidence, costs, time, and the ability to identify and serve the responsible person.

Can I recover legal fees and emotional-distress damages?

Only when the applicable law and proven facts justify them. Courts do not award damages merely because they were requested. The claimant must establish the legal basis, causation, and sufficient proof.

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Procedures and remedies depend on the transaction, evidence, institutions, and parties involved. Official sources and current rules were checked as of September 3, 2026.