Quick answer

If money, account access, or personal information may have been taken through a scam, act immediately. Contact the bank, e-wallet, card issuer, remittance company, or payment provider through its official 24/7 fraud channel; ask it to secure the account, trace the transaction, and temporarily hold any disputed funds that remain in the financial system. Obtain a case reference number and promptly submit every supporting document the provider requests.

Also report the incident to the Philippine National Police Anti-Cybercrime Group (PNP-ACG), the National Bureau of Investigation (NBI), or another appropriate law-enforcement office. A bank complaint, police report, regulatory complaint, and court case serve different purposes and may need to be pursued together.

Recovery is possible, but never automatic. It depends on matters such as whether funds are still traceable, whether the transaction was unauthorized or induced by deception, how quickly it was reported, the evidence available, and whether the financial institution complied with its legal duties.

What to do immediately

1. Stop further losses

Using a trusted device and official contact details:

Call the provider’s fraud hotline and ask it to block or restrict the affected account, card, e-wallet, or online-banking access.
Change the compromised account password, PIN, and recovery details. Change reused passwords on other accounts as well.
Disable linked cards, devices, recurring transfers, and third-party access where appropriate.
Tell your mobile network if your SIM was lost, swapped, or taken over.
Secure the email address connected to your financial accounts and sign out unknown devices.
If remote-access software was installed at a stranger’s request, disconnect the device from the internet and have it professionally checked.
Warn trusted contacts if the scammer may impersonate you.

Do not communicate with the provider through a link, number, or account supplied by the suspected scammer. Find the provider’s official channel independently.

2. Report the disputed transaction to the sending institution

Report first to the institution from which the money originated—the bank or e-wallet holding your source account. State clearly that you are reporting suspected fraud and requesting:

immediate protection of the source account;
tracing of the complete transaction chain;
temporary holding of any disputed funds;
coordinated verification with receiving institutions;
recall, reversal, chargeback, or other recovery procedure applicable to the payment method;
written acknowledgment and a case reference number; and
a list of documents and deadlines required to continue the hold or investigation.

Under BSP Circular No. 1215, a complaint concerning an electronic fund transfer may trigger an initial hold of disputed funds for up to five calendar days. An extension of up to 25 more calendar days may be justified, subject to the rules, so the total administrative hold does not exceed 30 calendar days unless extended by a competent court. The source account owner generally must provide supporting documents—such as a sworn complaint, affidavit, police report, or equivalent proof—within the initial holding period, unless the applicable industry protocol provides otherwise. Act on the provider’s instructions at once. BSP Circular No. 1215

These holding rules apply principally to electronic transfers between financial accounts. They do not apply in the same way to a mere encoding mistake or to an ordinary credit-card purchase, except when a credit card was used to make an electronic fund transfer through an automated clearing house. Card disputes remain subject to the card issuer’s procedures and other applicable consumer-protection rules.

A temporary hold does not guarantee reimbursement. It can preserve only funds that can still be located and held. The receiving account owner may challenge the hold and prove that the transaction was legitimate.

3. Preserve evidence before anything disappears

Keep the original files and create a backup. Preserve:

transaction receipts, reference numbers, account numbers, QR codes, amounts, dates, and exact times;
bank statements and transaction histories;
the recipient’s displayed name, telephone number, username, email, profile URL, and wallet address;
full chat histories, emails, SMS messages, call logs, and voice notes;
advertisements, listings, job offers, contracts, invoices, and promised returns;
screenshots showing the full screen, URL, date, and surrounding conversation;
phishing links and email headers, without reopening suspicious links;
photographs or videos of delivered items, packaging, and waybills;
the provider’s complaint acknowledgment and every response;
a chronological account, written while events remain fresh; and
proof of additional loss, such as fees or unauthorized loans.

Do not crop away identifiers or edit original screenshots. Export conversations where the platform allows it. Do not delete the scammer’s account, chat, or application until evidence has been preserved and the account has been secured.

How the financial-account rules can help

The Anti-Financial Account Scamming Act, Republic Act No. 12010, addresses money-mule activities and social-engineering schemes involving financial accounts. It authorizes temporary holding and coordinated verification of disputed transactions and requires BSP-supervised institutions to protect account access through adequate risk-management systems and controls.

An institution may be liable for restitution if it failed to employ adequate controls or failed to exercise the legally required degree of diligence. It may also be liable for loss caused by failure to hold disputed funds when the law and BSP rules required a hold. Conversely, an institution determined by the BSP to have compliant controls is protected from liability for losses arising from the covered offenses. Liability therefore turns on evidence and the institution’s actual compliance—not simply on the fact that a scam occurred. Republic Act No. 12010

The Financial Products and Services Consumer Protection Act also recognizes consumers’ rights to protection of assets against fraud and misuse and to timely complaint handling. It gives financial regulators—including the BSP, Securities and Exchange Commission (SEC), Insurance Commission, and Cooperative Development Authority—complaints-handling and adjudicatory powers within their respective jurisdictions. Republic Act No. 11765

Never file a knowingly false or malicious fraud report. Republic Act No. 12010 separately penalizes a bad-faith report of completely unwarranted or false information that results in funds being held.

Escalating a complaint against a bank or e-wallet provider

A complaint about a BSP-supervised institution should ordinarily follow this order:

File first through the institution’s Financial Consumer Protection Assistance Mechanism.
Keep the acknowledgment, reference number, complete complaint, evidence, and the institution’s final response—or proof of inaction.
If unresolved, escalate the matter to the BSP Consumer Assistance Mechanism.
If still unresolved, consider BSP mediation or adjudication, where applicable.

The BSP accepts consumer-assistance complaints through its official website’s BSP Online Buddy, email at consumeraffairs@bsp.gov.ph, and other channels identified in its guidance. A lawyer is not required for the initial BSP consumer-assistance process. BSP consumer-redress guide under Circular No. 1169

BSP adjudication is not a general lawsuit against the scammer. It concerns qualifying civil claims against a BSP-supervised institution. Under Republic Act No. 11765, the BSP may adjudicate purely civil financial-transaction claims seeking only payment or reimbursement of money not exceeding ₱10 million. Procedural prerequisites and exclusions apply, including prior use of the BSP Consumer Assistance Mechanism. Claims outside the regulator’s authority must be brought through another proper remedy.

Reporting the suspected offender

For online, mobile, or account-based scams, a complaint may be made to:

the PNP Anti-Cybercrime Group or its nearest cybercrime unit;
the National Bureau of Investigation, including its cybercrime or fraud services;
the local police, particularly when immediate protection or local documentation is needed; or
the prosecutor’s office, usually through a properly prepared complaint-affidavit and supporting evidence.

Ask the receiving office what form, affidavit, identification, and number of copies it requires. Bring original evidence for verification but submit copies unless instructed otherwise. Obtain a receiving stamp, complaint number, or other proof of filing.

If the deception was committed through information and communications technology, the underlying offense may also fall under Section 6 of the Cybercrime Prevention Act. The exact charge depends on the proven conduct; not every failed transaction, unpaid debt, or broken promise is automatically criminal fraud. Republic Act No. 10175

Choose the regulator that matches the transaction

Investment or securities scheme

Preserve the investment pitch, proof of solicitation, corporate name, SEC registration claims, wallet addresses, promised returns, and proof of payment. Check the entity through the SEC Philippines and report suspected unauthorized investment solicitation to the SEC.

Company registration alone does not necessarily authorize an entity to solicit investments from the public. Report to law enforcement as well if money was obtained through deception.

Goods or services purchased from a business

Complain first to the seller and platform. For a consumer transaction involving a business, use the DTI Consumer Care process when the dispute falls within DTI jurisdiction. Keep the order confirmation, listing, seller details, delivery proof, cancellation request, and platform decision.

DTI mediation or an administrative remedy does not replace a police complaint where there is evidence of fraud. Conversely, non-delivery or a refund disagreement is not necessarily a crime; some cases are contractual or consumer disputes.

Insurance or pre-need product

Complain first to the provider, then approach the Insurance Commission if the matter falls within its authority.

Cooperative financial product

Complain to the cooperative and, where appropriate, the Cooperative Development Authority. A cooperative bank or another BSP-supervised cooperative financial institution may instead fall under BSP supervision.

Stolen identity or mishandled personal data

Notify every affected institution, request correction or restriction of fraudulent accounts, and preserve proof of identity theft. If a personal-information breach or violation is involved, consult the National Privacy Commission complaint procedures. A privacy complaint is distinct from recovering money and prosecuting fraud.

Paths to recovering money

Provider recall, reversal, or chargeback

This is normally the fastest possible route, but availability depends on the payment instrument, network rules, transaction status, and evidence. An “authorized” transfer induced by deception may be treated differently from a transaction made without the account holder’s authorization. Describe exactly what happened instead of selecting a category merely because it appears more favorable.

Temporary hold and coordinated verification

For a covered electronic fund transfer, rapid reporting may allow the originating and receiving institutions to trace and hold funds under BSP Circular No. 1215. Submit the requested supporting documents within the initial five-calendar-day period if an extension is needed. Recovery becomes harder once funds have been withdrawn, converted, or transferred outside reachable institutions.

Regulatory redress

A financial regulator may facilitate settlement or, within statutory limits, decide a qualifying civil monetary claim against a supervised provider. This route addresses provider responsibility; it does not necessarily establish the scammer’s criminal guilt.

Restitution or damages through legal proceedings

A conviction under Republic Act No. 12010 carries civil liability that may include restitution. Other criminal cases may likewise include civil liability under applicable law. A victim may also have an independent civil claim, depending on the cause of action and the parties involved.

A civil action is most practical when the responsible person or entity can be identified, served with court papers, and has reachable assets. Before filing, obtain advice on the proper defendant, cause of action, venue, possible barangay conciliation, court jurisdiction, filing fees, limitation periods, and whether the civil claim is already included in a criminal case.

A judgment does not by itself guarantee collection. Enforcement still depends on locating property or funds that the law permits to be reached.

What not to do

Do not send a “release fee,” “tax,” “verification deposit,” or “recovery fee” to obtain the supposed refund.
Do not give an OTP, PIN, password, screen-sharing access, or remote-control access to anyone claiming to recover the money.
Do not pay a stranger who promises guaranteed recovery or claims to have an insider at a bank, BSP, police, or court.
Do not threaten, dox, hack, or publicly accuse a person without reliable proof.
Do not impersonate the scammer or attempt a private entrapment operation.
Do not fabricate facts or characterize a voluntary transfer as unauthorized.
Do not wait for a platform’s internal review before informing the financial institution.
Do not assume that reporting to one agency automatically files complaints with every other agency.
Do not accept a settlement or sign a quitclaim without understanding what claims or evidence may be affected.

Common mistakes that weaken a claim

Reporting only to the receiving bank

The source account owner should promptly report through the originating institution’s official fraud channel. That institution is positioned to initiate the complaint-based tracing and holding process.

Missing the initial-document window

An initial hold can last no more than five calendar days. Supporting documents for a possible extension ordinarily must be submitted during that period. Ask the institution immediately what it requires and keep proof of timely submission.

Giving an incomplete timeline

A strong report separates:

what the scammer represented;
what the victim believed;
what access or information was disclosed;
who initiated each transaction;
when suspicion arose; and
when each provider or authority was notified.

Confusing a crime with a payment dispute

A broken promise, delayed delivery, investment loss, or unpaid debt does not automatically prove criminal fraud. Criminal liability generally requires the elements of a specific offense, supported by evidence. Civil and consumer remedies may still be available even when criminal fraud cannot be established.

Treating an account name as the final identity of the offender

A beneficiary account may belong to a money mule, an identity-theft victim, or another intermediary. Give investigators the evidence and avoid presenting an unverified account holder as the mastermind.

When legal help is urgent

Consult a Philippine lawyer promptly when:

the loss is substantial or involves life savings, business funds, or borrowed money;
several victims, accounts, companies, cryptocurrencies, or countries are involved;
a bank denies reimbursement despite indications of a security or control failure;
you need a court order before a temporary hold expires;
the suspect is known and may dispose of property;
you received a subpoena, demand, counterclaim, or notice that your own account has been frozen or held;
you allowed another person to use your account or moved money for someone else;
the scam involves threats, blackmail, intimate images, trafficking, or danger to a child or vulnerable adult;
a settlement, waiver, quitclaim, or confidentiality agreement has been offered; or
a filing deadline or prescriptive period may be approaching.

If you unknowingly became involved as a money mule, stop moving the funds, preserve all instructions and communications, notify the institution, and obtain counsel. Do not return or forward money solely on the instructions of the person who sent it.

Practical complaint checklist

Prepare one indexed file containing:

A one-page summary of what happened and the recovery requested.
A dated, time-specific chronology.
Your identification and proof that you own the affected account.
A transaction table listing every amount, institution, account, reference number, date, and time.
Complete communications and advertisements.
Provider complaint acknowledgments and case numbers.
Proof of account-security measures taken.
Police, NBI, or PNP reports and sworn statements.
Proof of the loss and any partial refund.
A list of witnesses and what each person personally knows.

Send only through verified channels and redact unrelated sensitive information when lawful and appropriate. Never post your full account number, identification document, or complaint affidavit publicly.

Frequently asked questions

Can the bank freeze the recipient’s entire account?

The rules concern holding the disputed funds, not automatically confiscating every peso in the beneficiary’s account. The scope and amount depend on the transaction chain, available balance, and verification. A longer hold beyond the administrative maximum requires a competent court order.

Will I automatically get a refund if I report within five days?

No. Five days is the maximum initial holding period under the BSP rule, not a guaranteed refund period. Fast reporting improves the chance of preserving traceable funds, but recovery depends on the investigation and applicable legal grounds.

What if I personally approved the transfer after being deceived?

Report it truthfully as a transfer induced by deception. Do not call it an unauthorized transaction if you actually initiated it. Social engineering may still be covered, but the recovery and liability analysis differs from a transaction made without your authority.

What if I sent money to the wrong account by mistake?

An erroneous transfer is not automatically a scam or a “disputed transaction” under the temporary-holding rules. Contact the sending institution immediately and follow its erroneous-transaction procedure. Do not make a false fraud report to force a hold.

Do I need the scammer’s real name before reporting?

No. Submit the identifiers you have—account number, wallet address, telephone number, username, profile URL, email, transaction reference, and communications. Investigators and regulated institutions may have lawful methods of obtaining further information.

Is a police blotter enough?

Usually not by itself. It records the report but does not replace the institution’s fraud complaint, a detailed affidavit, the evidence required for investigation, or any regulator or court filing.

Can I report an attempted scam even if no money was lost?

Yes. Report the account, message, link, advertisement, or impersonation to the relevant platform, institution, and law-enforcement agency. Preserve the evidence and avoid further engagement.

Can I recover cryptocurrency?

Possibly, but recovery is often difficult. Immediately notify the exchange or service used, preserve wallet addresses and transaction hashes, and report to law enforcement. Whether assets can be restrained or returned depends on traceability, control of the destination, jurisdiction, and available legal process.

Should I hire a recovery agent?

Be extremely cautious. Fraud victims are frequently targeted again. Verify any lawyer through the Supreme Court’s official lawyer-verification resources and independently verify any company or professional license. No legitimate person can guarantee recovery.

Does reporting guarantee that someone will be charged?

No. Investigators and prosecutors must evaluate jurisdiction, admissible evidence, and the elements of an offense. A report is still important because it may preserve evidence, identify linked complaints, and support efforts to trace funds.

Official sources

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Procedures and rights may depend on the transaction, documents, provider, and later issuances. Official sources were checked as of 12 September 2026.