Quick answer

Yes. A person who loses money to an online scam in the Philippines may pursue several remedies at the same time:

Ask the bank, e-wallet, or other BSP-supervised institution to trace and temporarily hold the transferred funds.
Dispute an unauthorized transaction and seek restitution from the financial institution when inadequate security controls or lack of required diligence contributed to the loss.
File a criminal complaint with the NBI, PNP, or another competent authority.
Escalate unresolved complaints against a BSP-supervised institution to the Bangko Sentral ng Pilipinas.
Bring a civil claim against an identified scammer or another legally responsible party.

Recovery is not automatic. It depends heavily on how quickly the incident is reported, whether the money remains in the financial system, what evidence exists, and whether the recipient or responsible institution can be identified. Report the transaction immediately—even if you voluntarily pressed “send” after being deceived.

What to do immediately

1. Contact the sending bank or e-wallet through its official fraud channel

Use the institution’s official app, website, hotline, or branch—not a number or link supplied by the scammer.

Ask the institution to:

secure or temporarily disable the compromised account;
block cards, tokens, devices, or online-banking access as necessary;
record the transaction as fraudulent or disputed;
initiate tracing and coordinated verification under the Anti-Financial Account Scamming Act;
send holding requests to recipient and subsequent financial institutions;
give you a case or complaint reference number;
preserve transaction, authentication, device, and communication records; and
explain what affidavit, police report, or other supporting document it requires.

Provide the transaction reference number, amount, date and time, source account, receiving institution, recipient account or wallet, and a clear description of the deception.

Do not wait for a police report before making the first fraud report. The immediate objective is to reach any funds that have not yet been withdrawn or moved.

2. Submit supporting documents within the initial holding period

Under BSP Circular No. 1215, Series of 2025, a complaint through the originating institution’s 24/7 fraud-reporting channel can trigger an initial hold of available disputed funds for not more than five calendar days. If funds went to another institution, the receiving institution’s five-day period runs from its receipt of the holding request.

For a possible extension, the source-account owner should submit a sworn complaint, affidavit, police report, or other supporting document within that initial period, unless the applicable industry protocol provides otherwise. The document should explain the transaction, how the deception or unauthorized access occurred, and why the transaction is disputed.

The initial hold may be extended by up to 25 additional calendar days when the required grounds exist. The combined administrative holding period cannot exceed 30 calendar days unless a competent court extends it.

This is why a same-day report is far better than a report made after several days.

3. Secure every affected account

If passwords, one-time passwords, PINs, card details, identification documents, or remote access were exposed:

change passwords using a clean device;
sign out other sessions and remove unfamiliar devices;
replace compromised cards or credentials;
reset the password of the linked email account;
enable multi-factor authentication;
inform other financial institutions where the same credentials were used;
contact the mobile provider if SIM takeover is possible; and
remove remote-access or screen-sharing software installed at the scammer’s direction.

Never give a caller an OTP, PIN, password, recovery code, or screen-sharing access—even if the caller claims to be helping recover the money.

How the AFASA fund-holding process works

Republic Act No. 12010, the Anti-Financial Account Scamming Act, allows covered financial institutions to temporarily hold funds that they reasonably believe are connected with an unusual transaction, an unlawful source or activity, a transaction without clear economic purpose, or a social-engineering scheme.

The law and BSP rules establish a coordinated verification process involving the originating, receiving, and subsequent receiving institutions. This process applies even when the funds are no longer in their systems, although money that has already been withdrawn or moved outside reachable institutions may be much harder to recover.

Important limits and exceptions include:

A hold affects only funds that can be located in beneficiary accounts; it does not guarantee full reimbursement.
The BSP rules on temporary holding apply to electronic transfers from one financial account to another.
They do not govern a mere erroneous transfer, such as sending money to the wrong account without fraud. Other consumer-protection rules apply to those transactions.
Credit-card transactions are generally outside these temporary-holding rules, except when the card was used for an electronic fund transfer through an Automated Clearing House. A cardholder should still promptly use the issuer’s unauthorized-transaction or charge-dispute process.
A false report made maliciously or in bad faith can result in criminal liability. A genuine report that ultimately cannot be proven is not automatically malicious.

If disputed funds were successfully held, coordinated verification should ordinarily be completed within the 30-day holding period unless a court extends it. If no funds were held, verification should ordinarily finish within 30 calendar days; for meritorious reasons, the originating institution may extend that process, but the total cannot exceed 60 calendar days.

If verification establishes that held funds should be returned, the institutions may debit the beneficiary account and release the amount to the source-account owner in accordance with the BSP rules. If the transaction is shown to be legitimate, the hold must be lifted. The result therefore depends on the records and evidence from both sides.

When the financial institution may have to reimburse the victim

AFASA requires covered institutions to maintain adequate risk-management systems and controls, including appropriate multi-factor authentication, fraud-management systems, and account-owner verification.

A compliant institution is not automatically liable for every scam loss. However, AFASA provides that an institution may be liable for restitution when it:

failed to employ adequate risk-management systems and controls;
failed to exercise the highest degree of diligence in preventing loss arising from offenses covered by AFASA; or
failed to hold disputed funds when required, causing loss or damage.

A criminal conviction of the scammer is not a prerequisite to restitution based on an institution’s failure to meet these duties.

Liability is fact-sensitive. Relevant questions may include whether the transaction was genuinely authenticated, whether the institution ignored fraud indicators, whether security controls met BSP requirements, how quickly the customer reported the incident, and whether a required hold could have prevented the loss. Voluntary entry of an OTP or approval of a transfer does not by itself answer every liability question, especially when social engineering or account takeover is alleged.

Escalating a complaint to the BSP

For a dispute against a bank, e-wallet provider, or another BSP-supervised institution, first use that institution’s Financial Consumer Protection Assistance Mechanism. Preserve the complaint reference number and every response.

If the institution does not act or the result remains unsatisfactory, escalate the matter through the BSP Consumer Assistance Mechanism. Complaints may be submitted through the BSP Online Buddy on the official BSP website or through the other channels listed there, including consumeraffairs@bsp.gov.ph.

Include:

a concise chronology;
the exact relief requested;
copies of the original complaint and the institution’s response;
transaction records and reference numbers;
proof of the fraud or unauthorized access; and
your contact details.

BSP consumer assistance is a remedy concerning the conduct, service, inaction, or potential liability of a supervised institution. It is not a substitute for a criminal complaint against the scammer. BSP guidance states that a lawyer is not required for its consumer-assistance process.

Depending on the product, the proper financial regulator may instead be the Securities and Exchange Commission, Insurance Commission, or Cooperative Development Authority.

Filing a criminal complaint

Online scams may fall under different laws depending on what actually occurred. Possible offenses include:

estafa under Article 315 of the Revised Penal Code when deceit causes the victim to part with money or property;
offenses under the Cybercrime Prevention Act of 2012, including computer-related fraud or an offense committed through information and communications technology;
financial-account scamming, money-muling, social engineering, aiding, or related conduct under AFASA;
access-device fraud under the Access Devices Regulation Act; or
another offense applicable to the particular scheme.

The exact charge is for investigators, prosecutors, and ultimately the courts to determine. A failed investment, delayed delivery, or unpaid debt is not automatically criminal fraud; evidence of deception, unauthorized access, fraudulent intent, or another statutory element remains necessary.

Complaints may be made to the PNP’s cybercrime unit, the NBI Cybercrime Division or an appropriate regional office, or another agency with authority over the scheme. The NBI’s official procedure contemplates a complaint sheet, preliminary interview, sworn statements, and submission or examination of relevant documents and devices.

The government’s National Anti-Scam Hotline 1326 may also be used to report suspected scams. Current DICT information lists 1326@dict.gov.ph as a reporting or feedback channel. A hotline report is useful, but follow through with the financial institution and the investigating agency handling the formal complaint.

Investigators can seek preservation, disclosure, search, seizure, or examination of computer data through procedures under the Supreme Court’s Rule on Cybercrime Warrants. Victims ordinarily provide the evidence and facts; law-enforcement officers or other legally authorized bodies pursue the necessary court orders.

Civil recovery and small claims

A criminal case can include civil liability, and an AFASA conviction may carry restitution or other civil liability in favor of the aggrieved party. Depending on the facts, a victim may also pursue an independent civil action against an identified scammer or another responsible person.

A civil case is most practical when:

the defendant’s legal identity and address can be established;
there is proof connecting the defendant to the transaction;
the defendant has reachable assets or income; and
the probable recovery justifies the time and expense.

The small-claims procedure may be available for qualifying money claims of up to ₱1,000,000, exclusive of interest and costs, under the Supreme Court’s Rules on Expedited Procedures in the First Level Courts. Not every scam-loss claim automatically qualifies. The nature of the cause of action, the relief sought, venue, identity of the defendant, and supporting documents must fit the rule.

Do not file against a person merely because their name appears on a transfer receipt. The account may belong to an identity-theft victim or an unwitting intermediary. Evidence is needed to establish the proper defendant and a legal basis for liability.

Evidence to preserve

Keep original, complete copies where possible:

bank or e-wallet statements and transaction receipts;
transaction IDs, timestamps, amounts, and recipient details;
the fraud complaint and every case reference number;
emails, SMS messages, chat histories, voice messages, and call logs;
the full profile, page, group, website, advertisement, and listing URLs;
screenshots showing usernames, dates, times, and surrounding context;
invoices, contracts, order forms, investment materials, and delivery promises;
proof of the scammer’s representations and your reliance on them;
login alerts, OTP messages, password-reset notices, and device notifications;
names of witnesses and their contact information;
police, NBI, CICC, platform, and regulator reports; and
the device used during the incident, especially if malware or remote access is suspected.

Export chats before an account is deleted. Preserve electronic originals rather than relying only on cropped screenshots. Do not alter metadata, impersonate another person, hack an account, or publicly post sensitive account details in an attempt to identify the scammer.

Common mistakes that reduce the chance of recovery

Waiting for the scammer to honor another promise before reporting.
Paying a supposed “release,” “tax,” “verification,” or “recovery” fee.
Contacting only the receiving institution and failing to lodge a formal complaint with the sending institution.
Reporting without obtaining a case reference number.
Deleting chats, blocking the scammer before preserving evidence, or resetting a device before relevant data is secured.
Describing a socially engineered transfer merely as an “accidental transfer.”
Assuming the bank must reimburse every authorized transfer.
Treating a platform report as a substitute for bank and law-enforcement reports.
Posting the recipient’s private information publicly, which may endanger an innocent account owner or compromise the investigation.
Hiring an unverified “hacker,” “asset recovery agent,” or person claiming inside access to a bank or government office.

When legal help is urgent

Speak promptly with a Philippine lawyer when:

the loss is substantial or involves several victims;
the financial institution denies the claim despite evidence of account takeover, ignored fraud alerts, or security failures;
the institution refuses or fails to explain its handling of a timely fraud report;
the scammer, recipient, or assets have been identified and court relief may be needed;
funds are under a temporary hold that is about to expire;
the case involves real property, corporate funds, securities, cryptocurrency, overseas transfers, or multiple jurisdictions;
your identity or account was used as a money mule;
police or investigators identify you as a suspect rather than only as a victim;
you are being threatened, blackmailed, or subjected to intimate-image abuse; or
a filing deadline may be approaching.

Prescription periods vary by offense and civil cause of action, and their computation can depend on discovery, interruption, and procedural events. Do not assume that an old loss is already barred—or that there is no urgency.

Frequently asked questions

Can money sent through InstaPay, PESONet, or an e-wallet still be recovered?

Possibly. The sending institution can trace the transfer and request holds through the coordinated process. Recovery is more likely when funds remain in a reachable account. Completed settlement does not necessarily prevent a hold, but money already withdrawn or transferred outside the covered chain may be unavailable.

What if I personally authorized the transfer?

Report it anyway if authorization was obtained through deception. AFASA expressly addresses social-engineering schemes. Whether the facts support a hold, restitution, or criminal liability will depend on the evidence and the applicable legal elements.

Is a screenshot enough to prove the scam?

Usually not by itself. It is useful evidence, but stronger proof includes complete conversations, account statements, transaction records, URLs, device alerts, affidavits, and records obtained through lawful investigation.

Should I contact the recipient directly?

Generally, preserve the evidence and let the financial institutions or authorities handle contact. Direct confrontation may alert the scammer, trigger destruction of evidence, expose you to further manipulation, or interfere with tracing.

Can the bank disclose the recipient’s identity to me?

Not necessarily. Privacy, banking, investigative, and due-process rules may restrict direct disclosure to a private complainant. Under AFASA, covered institutions, the BSP, and competent authorities may exchange specified information for authorized verification, investigation, and prosecution.

Does filing a police or NBI complaint automatically return the money?

No. A criminal complaint supports investigation and may help preserve or trace evidence, but restitution depends on locating funds or assets, institutional liability, an agreement, an administrative remedy, or an enforceable judgment.

Can I recover from the bank instead of the scammer?

Only when a legal basis for institutional liability is established. AFASA recognizes restitution for inadequate risk controls, failure to exercise the required diligence, or a culpable failure to hold disputed funds. It does not make financial institutions insurers against every scam.

Do I need a lawyer immediately?

Not to report the transaction, use the bank’s fraud channel, approach the NBI or PNP, or begin BSP consumer assistance. A lawyer becomes especially valuable when liability is disputed, court relief is needed, the amount is substantial, or you may face criminal exposure yourself.

This article provides general legal information, not legal advice or a prediction of recovery. The correct remedy depends on the transaction records, communications, institutions involved, and other facts. Official legal and procedural sources were checked as of 24 July 2026.