Quick answer

If you suspect a scam, stop all contact and payments, secure your accounts, and immediately report the disputed transaction to the bank, e-wallet, card issuer, remittance company, or other financial institution from which the money was sent. Ask it to activate its fraud process, trace the funds, coordinate with receiving institutions, and give you a case reference number.

Speed matters. Under the Anti-Financial Account Scamming Act and current Bangko Sentral ng Pilipinas (BSP) rules, disputed funds within the supervised financial system may be temporarily held while participating institutions verify the transaction. An initial hold may last up to five calendar days; the total temporary-holding period may reach 30 calendar days and may be extended further only by a competent court. A report does not guarantee that money will still be available or ultimately returned.

Also report the incident to the Philippine National Police Anti-Cybercrime Group (PNP-ACG) or National Bureau of Investigation (NBI). Depending on the scam, you may need a regulatory complaint, a criminal complaint, a civil claim, or a combination of these. Filing a police report alone does not automatically reverse a transfer or produce compensation.

What to do immediately

1. Stop the loss

Do not send another payment, even if the scammer calls it a “release fee,” “tax,” “verification charge,” “insurance,” or “refund processing fee.” Do not install software, share your screen, disclose an OTP, approve another login, or follow instructions to move money into a supposedly safe account.

If the scammer threatens violence, claims to have abducted someone, or appears to be monitoring your location, contact emergency services or the nearest police station and move to a safe place.

2. Contact the sending financial institution

Use only the institution’s official app, website, card hotline, or a number printed on the card. Tell the fraud team that you are reporting a suspected scam or unauthorized transaction and request:

Immediate restriction or security review of the affected account;
Blocking or replacement of compromised cards and credentials;
Tracing and temporary holding of disputed funds under applicable BSP rules;
Coordination with every receiving institution in the transaction chain;
A complaint acknowledgment and case reference number;
Written confirmation of the transaction details and actions taken; and
Instructions for submitting an affidavit, dispute form, identification, or supporting evidence.

Provide the transaction reference number, amount, date and exact time, source account, destination account or wallet, recipient name, and the reason you believe the transaction was fraudulent.

The distinction between an unauthorized transaction and a payment that you personally approved after being deceived can affect the institution’s assessment. Describe exactly what happened. Do not say that you did not authorize a transfer if you actually entered the OTP or confirmed it; explain the deception, impersonation, account takeover, or coercion instead.

3. Secure all connected accounts

From a device you reasonably believe is safe:

Change the password of the affected financial account and the email account linked to it;
Sign out unknown devices and revoke suspicious sessions;
Enable multi-factor authentication using a secure method offered by the provider;
Change reused passwords on other accounts;
Contact your mobile provider if your SIM stopped working or you suspect a SIM swap;
Remove unfamiliar apps, remote-access tools, browser extensions, and device administrators;
Check whether contact details, transfer limits, beneficiaries, recovery addresses, or security settings were changed; and
Review recent transactions across all linked banks, cards, wallets, and online accounts.

If identity documents or personal information were exposed, notify the relevant issuer and monitor for accounts, loans, SIMs, or transactions opened in your name.

How the fund-holding process works

Republic Act No. 12010, the Anti-Financial Account Scamming Act (AFASA), covers financial accounts such as bank accounts, credit-card accounts, transaction accounts, and e-wallets maintained with institutions under BSP jurisdiction. It penalizes specified money-muling activities and social-engineering schemes and requires covered institutions to maintain proportionate fraud controls.

Under BSP Circular No. 1215, Series of 2025, a complaint by the source-account owner can trigger coordinated verification and the temporary holding of identifiable disputed funds. The rules generally provide for:

An initial hold of no more than five calendar days;
Tracing through receiving and subsequent receiving institutions;
Notice to the source-account owner about whether funds were successfully held;
Coordinated verification of the transaction; and
A total temporary-holding period of no more than 30 calendar days, unless a court extends it.

A hold preserves funds while the dispute is examined; it is not a final ruling that the complainant owns the money. Funds may be unavailable if they were withdrawn, spent, converted, transferred outside the covered system, or otherwise dissipated before the report reached the institutions.

AFASA also provides that a covered institution may be liable for restitution if it failed to employ adequate risk-management controls or failed to exercise the legally required degree of diligence in preventing losses from covered offenses. Conviction of the scammer is not a prerequisite to restitution under that provision. Liability is nevertheless fact-dependent: the institution’s controls, the transaction, the customer’s actions, the evidence, and the BSP rules must all be assessed. AFASA does not create an automatic refund for every scam.

Knowingly filing a completely unwarranted or false report in bad faith can itself result in liability. Report truthfully and distinguish confirmed facts from suspicions.

Where to report

Your bank, e-wallet, card issuer, or remittance provider

This should normally be the first report when money or account access is at risk. Use the provider’s own fraud or consumer-assistance channel. Keep the reference number and copies of every submission.

If the institution does not resolve the complaint, escalate it through its formal consumer-assistance mechanism. Complaints involving a BSP-supervised institution may then be brought to the BSP’s consumer-assistance channels, subject to BSP procedures. BSP escalation is generally not a substitute for first filing a formal complaint with the institution.

PNP Anti-Cybercrime Group

Online scams, phishing, account takeovers, impersonation, fraudulent online sales, and other technology-assisted offenses may be reported to the PNP Anti-Cybercrime Group or the nearest PNP cybercrime unit or police station.

An online report may begin the process, but investigators may require you to appear, establish your identity, submit original or properly preserved evidence, and execute a sworn complaint.

National Bureau of Investigation

You may also approach the NBI for investigation, particularly through its cybercrime or fraud-investigation services. Check the official NBI site for current appointment, clearance, and complaint-submission instructions before visiting.

Cybercrime Investigation and Coordinating Center

The Cybercrime Investigation and Coordinating Center receives and coordinates reports concerning cybercrime. Its official reporting facilities can help route a cyber incident, but you may still need to deal directly with the financial institution and execute a formal complaint before law enforcement.

Securities and Exchange Commission

Report bogus investments, unregistered securities solicitations, Ponzi-style schemes, fake trading operations, and impersonation of regulated companies to the Securities and Exchange Commission. Check the SEC’s advisories and registration records, but remember that company registration alone does not authorize a person to solicit investments or sell securities.

Department of Trade and Industry

For disputes with an identifiable online merchant or e-commerce platform, use the merchant’s and platform’s internal complaint process and, where applicable, seek assistance from the Department of Trade and Industry. DTI consumer remedies may be relevant to a genuine seller’s failure to deliver, refund, or comply with consumer obligations. A fabricated seller that simply took the money may also require a criminal report.

The Internet Transactions Act applies duties to covered online merchants and platforms, but platform liability depends on the statutory conditions and the facts. The existence of a listing does not automatically make the platform responsible for every scam.

National Privacy Commission

If the incident involves unlawful processing, exposure, or misuse of personal data, consider a complaint to the National Privacy Commission. Use the Commission’s current complaint-affidavit form and filing instructions. A privacy complaint addresses data-protection violations; it does not replace reporting a theft or urgently disputing a financial transaction.

Evidence to preserve

Preserve evidence before blocking accounts or deleting conversations. Keep original electronic files whenever possible, not only cropped screenshots.

Useful evidence includes:

The complete conversation, including usernames, profile URLs, phone numbers, email addresses, dates, and timestamps;
The original email, including full headers where available;
SMS messages, call logs, voice messages, recordings lawfully made, and video-call details;
Advertisements, listings, websites, QR codes, referral links, and app-download links;
Transaction receipts, reference numbers, statements, card records, and deposit slips;
Recipient names, account or wallet numbers, bank or provider names, and cryptocurrency addresses;
Invoices, contracts, order confirmations, delivery promises, investment materials, and refund demands;
Photos of goods, packaging, waybills, or delivery records;
Security alerts, OTP messages, password-reset notices, login histories, and device notifications;
Copies of reports sent to institutions, platforms, regulators, and law enforcement;
Complaint acknowledgments, ticket numbers, replies, and names of personnel spoken to; and
A chronological account written while events are still fresh.

Export chats when the app permits it. Save files in at least two secure locations. Do not edit originals, annotate them, or rename them in a way that destroys identifying information. Keep a separate working copy for highlighting.

Do not publicly post full account numbers, government IDs, home addresses, OTPs, or other sensitive evidence. Public accusations can expose you to separate legal risks and may warn suspects before investigators can act.

What laws may apply

The legal classification depends on what the offender did and what the evidence proves. Possible laws include:

AFASA: money-muling, social-engineering schemes involving financial accounts, and related offenses;
Revised Penal Code: estafa or other forms of deceit and fraudulent misappropriation;
Cybercrime Prevention Act: computer-related fraud, illegal access, identity theft, and offenses committed through information and communications technology;
Access Devices Regulation Act: fraudulent conduct involving cards, account numbers, codes, or other access devices;
Securities Regulation Code: unlawful securities offerings or investment solicitation;
Internet Transactions Act and Consumer Act: obligations arising from covered online consumer transactions; and
Data Privacy Act: unlawful processing or misuse of personal information.

Not every failed deal is automatically criminal fraud. A genuine contractual dispute, delayed delivery, bad investment, or inability to pay may be civil unless the required elements of a crime are proved. Conversely, calling a scheme an “investment,” “loan,” “business opportunity,” or “online sale” does not prevent prosecution when the transaction was built on deceit.

Under the Cybercrime Prevention Act, an offense otherwise punishable under the Revised Penal Code or a special law may carry cybercrime consequences when committed by, through, or with the use of information and communications technology. Charging and penalty questions should be left to investigators, prosecutors, and counsel after reviewing the evidence.

Routes to financial recovery

Reversal, chargeback, or institutional restitution

Ask the financial institution what remedy applies to the payment method. Card disputes, bank transfers, e-wallet transfers, remittances, and cryptocurrency transactions follow different networks and rules. A “chargeback” is not universally available and is not guaranteed merely because a customer was deceived.

A prompt AFASA complaint may preserve funds that remain within the participating financial system. Separately, restitution may be pursued against an institution when the legal conditions for institutional liability are established.

Refund through a merchant or platform process

For an identifiable seller or platform transaction, open the dispute within the platform’s stated period and avoid marking the order as received before inspecting it. Preserve the platform’s promised buyer protections as they appeared when you transacted.

Platform procedures are contractual or administrative remedies. They do not prevent you from reporting suspected crime, and their deadlines may be much shorter than court limitation periods.

Civil claim against the responsible person

A victim may seek repayment or damages from an identifiable and legally suable defendant. The proper theory may involve restitution, recovery of a sum of money, breach of contract, fraud, or damages. Before filing, determine the defendant’s correct legal name and address; a social-media alias is rarely enough to serve court papers or enforce a judgment.

A claim seeking only payment or reimbursement of money not exceeding ₱1,000,000, excluding interest and costs, may qualify for the Supreme Court’s small-claims procedure, depending on its legal basis and the relief requested. Small claims are designed for specified civil money claims in first-level courts and generally do not permit lawyers to appear as representatives at the hearing, although legal advice before filing can be valuable. Use only the current Supreme Court/OCA small-claims forms and guidance.

If the parties reside in the same city or municipality, barangay conciliation may be a precondition to court action unless a statutory exception applies. Venue, jurisdiction, prior demand, barangay proceedings, and the defendant’s address should be checked before filing.

Winning a judgment does not ensure collection. The defendant must have identifiable property, income, accounts, or other assets against which lawful enforcement can proceed.

Restitution in a criminal case

A criminal conviction may include civil liability or restitution when legally supported. AFASA expressly provides for civil liability upon conviction. Criminal investigators and prosecutors, however, act for the State; they are not private collection agents, and the timing and outcome of a prosecution cannot be guaranteed.

Ask counsel whether to reserve, waive, or separately pursue the civil action. A mistaken procedural choice may affect later remedies.

Deadlines and delay

Report immediately even if you are embarrassed, uncertain, or missing some evidence. Funds and electronic records can move or disappear quickly.

There is no single deadline for every scam-related remedy. Relevant periods can depend on:

The particular offense and penalty;
When the offense occurred or was discovered;
Whether proceedings interrupted prescription;
The legal basis of the civil claim;
A written or oral contract;
Platform, card-network, or provider dispute rules;
Barangay-conciliation requirements; and
Whether the offender or evidence is outside the Philippines.

Do not assume that a long statutory prescriptive period means it is safe to wait. Contractual dispute windows can expire much sooner, evidence can be overwritten, and a receiving account can be emptied within minutes.

Common mistakes

Paying a supposed recovery agent who promises guaranteed retrieval of funds;
Sending more money to “unlock” a withdrawal or refund;
Reporting only to social media and not to the financial institution;
Waiting for the recipient to respond before disputing the transfer;
Deleting messages, resetting the affected device, or discarding the SIM before preserving evidence;
Submitting cropped screenshots that omit account names, URLs, dates, or transaction identifiers;
Exaggerating facts or falsely calling an authorized payment unauthorized;
Assuming a police blotter automatically starts a prosecution or recovers money;
Believing that SEC or DTI registration proves an investment or seller is legitimate;
Contacting a mule-account holder directly and alerting the network;
Posting sensitive evidence or unverified accusations publicly; and
Treating a platform’s rejection of a refund as the end of all legal remedies.

When legal help is urgent

Consult a Philippine lawyer promptly when:

The loss is substantial or involves several victims;
The bank denies the dispute or attributes the loss to your actions;
Funds have been located but a court order may be needed to preserve them;
You know the defendant and are considering a civil action;
The scam involves land, corporate shares, securities, cryptocurrency, or cross-border transfers;
You are asked to sign a waiver, settlement, quitclaim, or admission;
You received a subpoena, demand letter, or notice that your own account was used as a mule account;
You lent, rented, sold, or allowed another person to use your account;
Your identity was used to open accounts or obtain loans;
The victim is a senior citizen, minor, trafficked person, or person under coercion; or
Prescription, jurisdiction, or the relationship between the criminal and civil cases may be disputed.

If you were recruited to receive and forward money, stop moving the funds and obtain legal advice. AFASA penalizes specified money-muling conduct, including knowingly allowing, lending, selling, buying, or recruiting the use of financial accounts for criminal proceeds or social-engineering schemes. Do not return or redirect funds based solely on instructions from an unknown sender; coordinate with the institution and law enforcement.

Frequently asked questions

Can the bank recover an instant transfer?

Possibly, if the funds can still be identified and held, but there is no guarantee. Report to the sending institution immediately and request AFASA tracing and temporary holding. The chance of preservation generally falls as funds are withdrawn or moved onward.

Is sharing an OTP fatal to my claim?

Not automatically. It is important evidence, but liability still depends on the full circumstances, including deception, impersonation, account access, transaction controls, warnings, and the institution’s compliance with its legal duties. Give an accurate account of what you disclosed and why.

Should I report to both the bank and the police?

Usually, yes. The financial institution can act on the transaction and account; law enforcement investigates possible crime. Each process serves a different purpose.

Can I recover money if I voluntarily sent it?

Sometimes. A transfer made under deceit may still support a fraud complaint and may qualify as a disputed transaction under applicable rules. Recovery depends on whether funds remain traceable and on the evidence and legal basis of the claim.

What if the scammer is abroad?

Report locally and to the financial institution. Philippine jurisdiction may still exist in circumstances specified by AFASA and the Cybercrime Prevention Act, but investigation, service, asset tracing, and enforcement are more difficult across borders.

Can I file anonymously?

You may provide intelligence or an initial report through some channels, but recovery, a formal complaint, or prosecution will ordinarily require identification, verification, supporting evidence, and often a sworn statement.

Will a criminal complaint guarantee a refund?

No. A criminal case may lead to restitution or civil liability, but conviction, asset availability, and enforcement are separate issues. Pursuing institutional, platform, regulatory, and civil remedies may also be necessary.

Should I hire someone who says they can hack the scammer or retrieve cryptocurrency?

No. Do not provide more credentials or money. “Recovery” offers often target victims a second time, and unauthorized access can itself be illegal. Use regulated professionals, official institutions, law enforcement, and licensed Philippine counsel.

Official legal references

This article provides general Philippine legal information, not advice for a particular case and not a guarantee of recovery. Procedures and outcomes depend on the transaction, documents, institutions, parties, and available evidence. Official sources and procedures were checked as of 12 September 2026.