Quick answer

If you suspect a scam, act immediately. Stop communicating with the suspected scammer, contact the bank, e-wallet, card issuer, remittance company, or payment platform through its official fraud channel, and ask it to:

secure your account;
flag and investigate the transaction;
trace the receiving account;
coordinate with the receiving institution;
temporarily hold any remaining disputed funds when legally warranted; and
give you a complaint or case-reference number.

Then report the incident to the Philippine National Police (PNP) or National Bureau of Investigation (NBI), particularly their cybercrime units if phones, social media, websites, email, messaging apps, or digital payments were used.

Reporting quickly improves the chance that funds still within the financial system can be identified or held. It does not guarantee reimbursement. Recovery depends on factors such as whether money remains traceable, whether the transaction was authorized, how the deception occurred, the institution’s security controls and diligence, and the available evidence.

What to do immediately

1. Stop further loss

Do not send another payment, even if the scammer claims it is needed to release a refund, investment profit, parcel, loan, prize, or frozen account.

If account access or identifying information may have been exposed:

call the provider using the number in its official app, website, card, or account statement;
lock or suspend affected cards and accounts;
change passwords from a device you believe is safe;
sign out other devices and revoke unfamiliar sessions;
replace compromised PINs and enable multi-factor authentication;
tell your mobile provider if your SIM stopped working unexpectedly or may have been taken over; and
check linked accounts, scheduled transfers, new beneficiaries, and recent transactions.

Do not rely on a phone number or link supplied in the suspicious message. A caller ID, social-media profile, company logo, government seal, or screenshot can be spoofed.

2. Contact every institution in the payment chain

Report the transaction to both the institution that sent the money and, if identifiable, the recipient’s bank or e-wallet provider. Give them:

your name and account details;
transaction reference number;
date, time, amount, and payment channel;
recipient name and account, wallet, card, or mobile number;
a short explanation of the deception or unauthorized access;
the time you discovered and reported it;
copies of receipts and communications; and
the remedy requested, such as a hold, recall, reversal, charge dispute, investigation, or reimbursement.

Use the words “suspected scam,” “disputed transaction,” or “unauthorized transaction” accurately. Explain whether you personally initiated the transfer, were deceived into doing so, or did not authorize it at all. These are materially different circumstances.

Ask for written confirmation and a reference number. Record the name or employee number of each representative, the date and time of contact, and what action was promised.

3. Ask for preservation—not disclosure—of records

Ask the provider, platform, telecommunications company, or online marketplace to preserve relevant records for law-enforcement use. Private companies may be unable to disclose subscriber or account information directly to you because disclosure can require lawful authority or a court warrant.

Under the Cybercrime Prevention Act of 2012, traffic data and subscriber information relating to communications must generally be preserved for at least six months from the transaction. Content data must be preserved for six months after a law-enforcement preservation order, with a possible one-time six-month extension. This is a reason to report promptly rather than wait for profiles, logs, or messages to disappear.

How Philippine law may apply

“Scam” is a practical description, not a single criminal charge. Investigators and prosecutors determine the proper offense from the evidence.

Depending on the conduct, possible laws include:

Estafa or swindling. Article 315 of the Revised Penal Code can apply when deceit or abuse of confidence causes another person to part with money or property.
Cyber-enabled offenses. The Cybercrime Prevention Act covers computer-related fraud, computer-related identity theft, illegal access, and other offenses. Crimes under the Revised Penal Code or special laws committed through information and communications technology may also fall within its Section 6.
Financial-account scamming. The Anti-Financial Account Scamming Act, Republic Act No. 12010, or AFASA, prohibits specified money-muling activities and social-engineering schemes involving financial accounts.
Investment fraud. The Financial Products and Services Consumer Protection Act, Republic Act No. 11765, prohibits deceptive investment solicitation, including specified Ponzi-type schemes and unlicensed public offerings, subject to statutory exceptions.
Unauthorized use of access devices. Cards, account numbers, codes, and similar access devices may bring the Access Devices Regulation Act into consideration.
Identity or personal-data misuse. The Cybercrime Prevention Act and, depending on the facts, the Data Privacy Act may apply.

A failed transaction or broken promise is not automatically criminal fraud. The evidence must show the elements of the applicable offense—often including deception or fraudulent intent—not merely nonpayment, poor service, delay, or a contractual dispute.

Temporary holding and recovery of disputed funds

AFASA authorizes covered BSP-supervised institutions to temporarily hold funds involved in a disputed transaction when the legal and regulatory conditions are met. The statutory holding period may not exceed 30 calendar days unless extended by a competent court.

A transaction may be treated as disputed where the institution has reasonable grounds to believe it is unusual, lacks a clear economic purpose, comes from an unknown or illegal source or unlawful activity, or was facilitated through social engineering. Institutions and affected account owners must participate in coordinated verification.

A report does not automatically freeze an account, and a temporary hold is not a final finding that the recipient committed a crime. The institution must follow the law and applicable BSP rules. Making a knowingly false or malicious report that results in a hold is itself punishable under AFASA.

When the financial institution may be responsible

AFASA requires covered institutions to use adequate risk-management systems and controls. Subject to the statute and BSP rules:

an institution that fails to employ adequate controls or fails to exercise the highest degree of diligence may be liable to restore funds;
criminal conviction of the scammer is not a prerequisite to that statutory restitution; and
an institution required to hold disputed funds may be liable for loss caused by its failure to do so.

This does not make every scam loss automatically refundable. The provider may dispute liability based on its controls, the customer’s actions, authorization records, warnings, transaction history, and the circumstances of the deception. Preserve all documents needed to test those claims.

Under Republic Act No. 11765, a financial service provider handling an alleged unauthorized transaction or disputed amount must, while its final investigation is pending, suspend interest, fees, and charges on that amount or provide a similar reasonable accommodation.

Other recovery routes

Depending on the facts, recovery may also be pursued through:

a transfer recall, card dispute, chargeback, or platform buyer-protection procedure;
the provider’s internal complaint process;
mediation, conciliation, or adjudication before the appropriate financial regulator;
restitution or damages connected with a criminal case;
an independent civil action against responsible persons; or
enforcement against restrained, forfeited, or traceable assets when authorized by law.

A police report helps establish a record, but it does not itself reverse a transaction or award damages.

Where to report

Bank, e-wallet, card, or remittance transaction

Complain first to the provider’s consumer-assistance or fraud unit. If unresolved, complaints involving BSP-supervised institutions may be elevated through the BSP Consumer Assistance Mechanism.

The BSP currently accepts escalated complaints through its BSP Online Buddy and through a completed Complaints, Inquiries and Requests form sent to consumeraffairs@bsp.gov.ph. Include the complaint previously sent to the institution, its response if any, supporting documents, your contact information, and the resolution requested.

Republic Act No. 11765 authorizes the BSP and SEC, within their respective jurisdiction, to adjudicate purely civil financial-transaction claims seeking only payment or reimbursement of up to ₱10 million. That authority is not a substitute for criminal investigation, and procedural eligibility depends on the nature of the respondent, transaction, and relief requested.

Online or technology-enabled scam

Report to the:

PNP Anti-Cybercrime Group;
National Bureau of Investigation, including its cybercrime investigators; or
nearest police station or NBI office, which can receive or route the complaint.

The Cybercrime Prevention Act assigns cybercrime enforcement responsibilities to the PNP and NBI. Investigators can seek preservation orders, subscriber information, transaction records, and cybercrime warrants through lawful procedures.

For immediate danger, threats, kidnapping claims, extortion, or an ongoing attempt to obtain more money, contact emergency law enforcement without confronting the suspected offender.

Investment solicitation

Report suspected unlicensed or fraudulent investment activity to the Securities and Exchange Commission. Preserve the investment pitch, promised returns, payment instructions, contracts, group-chat messages, recruiter identities, and proof of payment.

SEC registration of a company does not necessarily mean it is authorized to solicit investments from the public. The particular securities or investment offering may require separate registration or an applicable exemption.

Insurance, cooperative, or other regulated financial product

Use the provider’s complaint mechanism first, then approach the regulator with jurisdiction:

Insurance Commission for regulated insurance, pre-need, and HMO matters;
Cooperative Development Authority for covered cooperative financial services;
BSP for BSP-supervised entities; or
SEC for securities and entities under its jurisdiction.

A regulator may address the conduct of a supervised provider, but the criminal aspect should still be reported to law enforcement.

Preparing the complaint

Create a clear, chronological account. Avoid conclusions you cannot prove. State:

how and when the suspected scammer contacted you;
what identity or authority the person claimed;
the precise representations or promises made;
why you relied on them;
what information, access, money, or property you provided;
each transaction’s date, time, amount, reference number, and recipient;
when and how you discovered the suspected fraud;
what happened after you demanded an explanation or refund;
every provider, platform, and agency already notified; and
the action you are requesting.

Law enforcement or prosecutors may require a sworn complaint-affidavit and supporting affidavits. Tell the truth, distinguish personal knowledge from information supplied by others, and have the affidavit executed in the form required by the receiving office.

If several victims are involved, each should preserve and submit their own transaction records and account of what happened. A shared spreadsheet can identify patterns, but it should not replace individual evidence.

Evidence to preserve

Keep original files where possible, not only cropped screenshots. Preserve:

deposit slips, bank statements, e-wallet histories, card statements, and official receipts;
transaction and merchant reference numbers;
emails with full headers;
complete chat threads and exported conversations;
SMS messages, call logs, voicemail, and phone numbers;
usernames, profile links, account IDs, group names, and page URLs;
website addresses, advertisements, job posts, product listings, and investment presentations;
contracts, invoices, identification documents shown to you, and delivery records;
QR codes and the account details displayed after scanning them;
device or account security alerts, OTP notices, login notifications, and password-change emails;
recordings lawfully obtained and the unedited original files;
your communications with providers, including reference numbers and final responses; and
a timeline showing when each event and report occurred.

Save copies in a secure location. Do not alter filenames, annotate the only copy, delete the conversation after taking screenshots, or surrender your only device or original document without obtaining a receipt and retaining a lawful copy when possible.

Do not publicly post unredacted IDs, account numbers, OTPs, addresses, signatures, or complaint affidavits. Public accusations can expose victims and other account holders and may create separate legal problems.

Common mistakes that reduce the chance of recovery

Waiting for the scammer’s promised refund before reporting.
Paying a supposed tax, verification fee, legal fee, or “unlocking” charge.
Reporting only to a social-media platform and not to the payment provider or law enforcement.
Describing a deceived transfer as simply “unauthorized,” or vice versa.
Deleting chats, blocking the account before preserving the full conversation, or resetting the affected device too early.
Giving investigators only screenshots without transaction references, URLs, usernames, and original files.
Assuming that the name shown on a receiving account identifies the organizer. It may belong to a money mule, identity-theft victim, or trafficked person.
Paying a “recovery agent,” hacker, or supposed government employee who guarantees retrieval of the funds.
Filing exaggerated or knowingly false allegations to force an account freeze.
Treating a police blotter entry as the end of the complaint process.
Missing a bank, card-network, platform, contractual, civil, or statutory deadline while waiting for another agency.

Deadlines and urgency

There is no single deadline covering every scam. Relevant periods vary according to the offense, payment product, provider rules, civil cause of action, and regulator.

For claims arising under Republic Act No. 11765 and its implementing rules, the general statutory period is five years from consummation of the financial-consumer transaction or five years from discovery of deceit or nondisclosure of material facts, with an ultimate limit of ten years from the violation. Insurance contracts follow the applicable period under the Insurance Code. Other criminal and civil claims may have different periods.

Card disputes, transfer recalls, platform protections, and provider investigations may have much shorter contractual or operational windows. Do not treat a long legal prescriptive period as permission to delay. Funds can be moved within minutes, and digital evidence may be deleted or become harder to obtain.

When legal help is urgent

Consult a Philippine lawyer promptly when:

the loss is substantial or involves life savings, business funds, borrowed money, or several victims;
an institution denies reimbursement despite alleged security failures;
funds, real property, cryptocurrency, or other assets need urgent restraint or preservation;
the suspected offender is known and may dispose of assets;
you are asked to sign a settlement, quitclaim, waiver, or affidavit you do not understand;
investigators treat you as a possible money mule or participant;
your account was used to receive or forward suspicious funds;
you surrendered IDs, opened accounts for another person, or allowed someone to control your account;
the case crosses national borders;
a filing or review deadline is approaching; or
threats, blackmail, intimate images, trafficking, or physical danger are involved.

The Public Attorney’s Office may assist qualified indigent persons, subject to its mandate, merit assessment, and conflict rules. Law-school legal-aid clinics and the Integrated Bar of the Philippines may also provide referral options.

Frequently asked questions

Can a bank or e-wallet reverse the payment immediately?

Sometimes, but not automatically. A provider may attempt a recall, block access, or hold remaining funds. A completed transfer may already have been withdrawn or moved through several accounts. The provider must also verify the dispute and respect the rights of affected account holders.

Am I entitled to reimbursement if I entered the OTP myself?

Not necessarily—and entering an OTP does not automatically end the inquiry. The result depends on what the OTP authorized, how it was obtained, the provider’s security controls and warnings, whether the transaction was properly authenticated, and whether the provider exercised the diligence required by law. Give an exact account of what happened.

Should I contact the receiving bank even if I am not its customer?

Yes. Provide the transaction details and ask it to preserve records and coordinate with your institution. It may be unable to discuss the recipient’s account because of confidentiality rules, but that does not prevent it from receiving a fraud report.

Can I recover money from the account holder whose name appears on the receipt?

Possibly, but the displayed account holder is not necessarily the person who planned the scam. Liability depends on evidence of participation, knowledge, benefit, negligence, or another valid legal basis. Let investigators trace the chain of accounts and communications.

Is a company registration certificate proof that an investment is legitimate?

No. Entity registration does not by itself authorize the public sale of securities or validate a particular investment scheme. Verify the specific authority and offering through the SEC.

Can I report an attempted scam even if I did not lose money?

Yes. Preserve the message, number, profile, website, and payment instructions. An attempted offense, identity misuse, compromised account, or money-mule recruitment may still warrant reporting.

Should I negotiate with the suspected scammer?

A written demand may be useful in some disputes, but continuing contact can also lead to more loss, threats, deletion of evidence, or interference with an investigation. Do not send more money or disclose investigative steps. Seek advice before confronting a known suspect or signing a settlement.

Does filing a criminal complaint guarantee repayment?

No. Criminal proceedings determine criminal responsibility. Restitution or civil liability may accompany a conviction in appropriate cases, but actual recovery depends on the judgment, identifiable assets, and enforcement. Administrative or independent civil remedies may also be available.

What if I accidentally received suspected scam proceeds?

Do not withdraw, transfer, return, or spend the money on instructions from an unknown person. Notify your institution through its official channel and document the report. Obtain legal advice promptly if your account has been frozen or you are contacted by investigators.

Official legal and reporting resources

This article provides general Philippine legal information, not legal advice or a prediction of recovery. The correct remedy depends on the transaction documents, evidence, provider, and facts. Official sources and procedures were checked as of 11 September 2026.