Quick answer

If you suspect a scam, contact the bank, e-wallet, card issuer, remittance company, or cryptocurrency platform involved immediately through its official fraud channel. Ask it to secure your account, trace the transaction, notify the receiving institution, and apply any available hold or recovery process. Then preserve the evidence and report the incident to the Philippine National Police Anti-Cybercrime Group (PNP-ACG) or the National Bureau of Investigation (NBI).

Recovery is possible but never guaranteed. It depends heavily on how quickly the transaction is reported, whether the money remains identifiable and available, how it was transferred, and what the evidence shows. A criminal complaint can help identify and prosecute those responsible, but it does not automatically return the money.

Do not send another payment for a supposed “release fee,” “tax,” “verification charge,” or “recovery service.” That is often a second scam.

What to do immediately

1. Stop further loss

If the scammer may still have access to your account or device:

Stop communicating with the scammer, but do not delete the conversation.
Call the financial institution using the number in its official app, website, or the back of your card—not a number supplied by the scammer.
Freeze or block affected cards, accounts, and e-wallets.
Change passwords from a device you believe is safe. Start with your email account, then financial and social-media accounts.
Sign out other sessions and enable multi-factor authentication.
Revoke suspicious app permissions and remove unfamiliar devices.
Contact your mobile provider if your SIM stopped working unexpectedly or you suspect SIM swapping.
Tell trusted contacts if the scammer is impersonating you.
If you installed remote-access software, disconnect the device from the internet and seek competent technical assistance before using it for banking again.

Never disclose an OTP, PIN, CVV, recovery code, or password—even to someone claiming to investigate the scam. Legitimate investigators and financial institutions may verify your identity, but they should not ask for credentials that authorize a transaction.

2. Report the transaction to every institution involved

Report both to the institution from which the money left and, if identifiable, the institution that received it. Provide:

the transaction date and exact time;
amount and currency;
transaction or reference number;
sending and receiving account, wallet, card, or merchant details;
recipient name shown before or after payment;
the circumstances showing deception or unauthorized access; and
the police, NBI, or CICC reference number when available.

Ask for a written complaint or case-reference number. Specifically request:

an immediate fraud investigation;
preservation of account and transaction records;
an attempted recall, reversal, chargeback, or merchant dispute, if applicable;
notification of the receiving institution;
temporary holding of disputed funds when legally and operationally available; and
written confirmation of any additional documents or deadline.

Do not describe a transaction you personally authorized as “unauthorized” merely because you were deceived. State exactly what happened. A payment induced by deception and a transaction made without your consent involve different facts and may be treated differently.

Under the Anti-Financial Account Scamming Act or AFASA, Republic Act No. 12010, covered institutions have authority to temporarily hold funds involved in a disputed transaction under BSP rules. The statutory period is subject to limits and possible lawful extensions. A hold is not an automatic refund: institutions must conduct a coordinated verification process, and money may already have been withdrawn or moved through other accounts.

3. Preserve the evidence before it disappears

Keep original electronic records whenever possible. Useful evidence includes:

complete chat, text, and email threads;
the scammer’s usernames, profile links, telephone numbers, email addresses, and account identifiers;
advertisements, listings, webpages, QR codes, and shortened links;
payment confirmations, bank statements, receipts, and transaction histories;
photographs or videos of items received;
contracts, invoices, identification documents, investment presentations, and voice recordings lawfully obtained;
delivery records and courier information;
call logs and voicemail;
platform complaint confirmations; and
a chronological account written while events are fresh.

Capture context, not just isolated messages. Screenshots should show dates, times, usernames, URLs, and transaction details. Export chats where the application permits it. Keep the original files and make backups. Do not crop, annotate, rename, or repeatedly forward the only copy.

Record when and how each item was obtained. Electronic evidence may be admissible, but its authenticity and integrity may need to be established under the Rules on Electronic Evidence.

Do not publicly post the suspect’s identification documents, account details, or private information. The documents may be stolen, altered, or associated with a mule rather than the principal offender. Public accusations can also create privacy, harassment, or defamation issues.

Where to report the scam

PNP Anti-Cybercrime Group or NBI

For an online, mobile, account-takeover, phishing, identity-theft, or computer-assisted scam, report to:

the PNP Anti-Cybercrime Group; or
the National Bureau of Investigation, particularly its cybercrime investigators.

Bring a valid ID, a clear narrative, copies of the evidence, and proof of payment. Ask what form of affidavit or complaint is required and obtain a receiving or docket reference.

The Cybercrime Prevention Act of 2012 assigns cybercrime law-enforcement functions to the PNP and NBI. It also provides mechanisms for preserving and obtaining computer data. Subscriber and traffic information generally must be preserved by service providers for at least six months from the transaction, while preservation of content data ordinarily depends on an official law-enforcement order. That makes early reporting important.

The Cybercrime Investigation and Coordinating Center also operates the government’s anti-scam assistance and coordination service. Confirm its current reporting options through the official CICC website before submitting personal information.

Your financial institution, followed by the BSP

A complaint about a bank, e-money issuer, remittance company, financing company, lending company, or another BSP-supervised institution should first be raised through that institution’s formal consumer-assistance channel.

If the institution does not resolve the complaint, escalate it through the BSP consumer-assistance channels. Attach the institution’s response or proof that you first complained to it. BSP escalation can address the regulated institution’s handling of the complaint, but BSP does not decide criminal guilt or guarantee reimbursement.

The Financial Products and Services Consumer Protection Act requires regulated financial-service providers to maintain consumer-protection and complaint-handling mechanisms. BSP’s consumer-assistance process is further governed by BSP Circular No. 1169.

DTI for consumer transactions

If the dispute concerns goods or services bought from a business, file a consumer complaint through the DTI Consumer Care system. Include proof of purchase, the seller’s details, your demand for a refund or performance, and the seller’s response.

DTI mediation may be appropriate for a genuine consumer dispute. It is not a substitute for promptly reporting deliberate fraud, identity theft, or account misuse to law enforcement and the financial institutions involved.

SEC for investment solicitations

Report suspicious investment schemes, unregistered securities solicitations, fake trading platforms, or misuse of a company’s identity to the Securities and Exchange Commission. Preserve the investment offer, promised returns, payment instructions, recruiter details, and proof of remittance.

A business registration does not by itself authorize a company to solicit investments from the public. The legal analysis may depend on the investment structure, licensing, representations made, and how funds were collected.

The platform or marketplace

Report the account, advertisement, listing, page, or merchant to the relevant social-media platform, marketplace, messaging service, domain host, or payment platform. Ask it to preserve relevant records.

Platform reporting may stop further victimization, but do not rely on it as your only complaint. Platforms may remove content quickly, so save the evidence first when it is safe to do so.

What law may apply

The correct offense depends on the proven facts. Calling conduct a “scam” does not determine the charge.

Estafa through deceit

Article 315 of the Revised Penal Code may apply where a person used false pretenses or fraudulent acts to induce another to part with money or property, causing damage. Prosecutors generally look for evidence that the deceit preceded or accompanied the victim’s payment and that the victim relied on it.

A broken promise, delayed delivery, failed business, or unpaid debt is not automatically estafa. The evidence must support criminal deceit, not merely nonperformance of a civil obligation.

Cybercrime-related liability

When an offense under the Revised Penal Code or another special law is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act may apply. The same law separately addresses computer-related fraud, computer-related identity theft, illegal access, forgery, and interference with computer data or systems.

Computer-related fraud under the Act requires unauthorized input, alteration, or deletion of computer data or interference with a computer system, coupled with fraudulent intent and damage. Not every lie communicated online fits that specific offense, although another crime committed through ICT may still be involved.

Financial-account misuse and money-mule activity

AFASA prohibits conduct involving financial accounts used for fraudulent schemes, including prohibited account selling, renting, or lending and certain money-mule activities. Liability depends on the person’s conduct and required state of mind; receipt of funds alone does not establish every element of an offense.

Other possible laws

Depending on the evidence, a case may also involve:

access-device fraud involving credit or debit cards;
identity theft or falsification;
violations relating to securities or investment solicitation;
unlawful collection or use of personal data;
deceptive online sales; or
money laundering connected with proceeds of crime.

The complainant does not need to select every possible offense correctly before seeking help. Give investigators the complete facts and documents without exaggeration.

How a criminal complaint proceeds

A police or NBI report starts an investigation; it is not itself a conviction or an order to refund money. Investigators may ask for a sworn complaint-affidavit and supporting affidavits. Where required, the complaint is submitted to the proper prosecutor for preliminary investigation.

Under Rules 110 and 112 of the Revised Rules of Criminal Procedure, the prosecutor determines whether the evidence supports filing a criminal information in court. The respondent must ordinarily be given an opportunity to answer during preliminary investigation. If a case is filed, guilt must still be proved in court beyond reasonable doubt.

Accurately identify what you personally know and what you only inferred. A bank-account name, telephone subscriber, or social-media profile may point to a lead, but it does not by itself prove who planned or committed the fraud.

Ways to seek recovery

Recall, reversal, chargeback, or temporary hold

This is usually the fastest potential route, but availability varies:

Bank or e-wallet transfer: The sending institution may try to trace or recall the transfer and coordinate with the receiving institution. Completed real-time transfers are not automatically reversible.
Credit or debit card: Ask the issuer whether a chargeback or card dispute is available and observe the deadline stated in the card agreement or issuer’s instructions.
Marketplace payment: Use the platform’s dispute or buyer-protection process promptly.
Remittance: Contact both the remittance provider and payout partner before collection if possible.
Cryptocurrency: Contact the exchange or custodial platform immediately. Blockchain transfers are generally not reversible merely because they were fraudulent, but a regulated intermediary may be able to preserve account information or restrict assets still under its control.

Do not wait for a police report before alerting the institution if doing so would delay the fraud response. Submit the police or NBI reference afterward if required.

Civil liability in the criminal case

Article 100 of the Revised Penal Code recognizes civil liability arising from a crime. Under Rule 111, the civil action to recover civil liability arising from the offense is generally deemed instituted with the criminal action unless the offended party waives it, reserves the right to sue separately, or filed the civil action first.

This rule has procedural exceptions. A reservation, prior civil case, settlement, insurance payment, or claim based on a source independent of the crime can affect the proper remedy. Before signing a waiver, quitclaim, settlement, or reservation, obtain advice about its effect on both the criminal and civil claims.

Even a favorable judgment may be difficult to collect if the offender or liable party has no identifiable assets.

A separate civil action

Depending on the documents and facts, recovery may also be pursued through an action based on contract, fraud, unjust enrichment, or another recognized source of obligation. The proper defendant may include more than the person who communicated with the victim, but liability should not be assumed merely because an account received funds.

Small claims procedure may be available for certain qualifying actions solely for payment or reimbursement of money within the Supreme Court’s current jurisdictional ceiling. It is not the correct procedure for every fraud dispute, particularly where the principal relief is not a qualifying money claim or the facts and parties require a different action. Check the current Supreme Court small-claims guidance or consult counsel before filing.

Deadlines matter

There is no single deadline covering every scam.

Possible time limits include:

the institution’s deadline for card, marketplace, or transaction disputes;
prescription periods for the specific criminal offense;
limitation periods for civil actions, which vary according to the legal basis and written documents;
periods for seeking review of a prosecutor’s resolution; and
court deadlines once a case is filed.

The amount involved, date of discovery, place of commission, manner of payment, applicable statute, and acts that interrupt prescription can change the analysis. Report immediately rather than attempting to calculate the last possible day yourself.

Common mistakes that reduce the chance of recovery

Waiting for the scammer’s promised refund before contacting the bank.
Paying a “recovery agent” who guarantees retrieval of the money.
Deleting chats, blocking the account before preserving evidence, or losing access to the original device.
Editing screenshots or submitting only selected messages that omit context.
Giving investigators unsupported assumptions as established facts.
Using unofficial telephone numbers or links supplied by the scammer.
Sharing OTPs or installing a screen-sharing app during a supposed investigation.
Posting IDs or account details publicly.
Threatening, hacking, doxxing, or attempting to seize property personally.
Signing a settlement, waiver, or quitclaim without understanding its effect.
Assuming that a police blotter, platform report, or BSP complaint automatically starts every necessary legal proceeding.
Failing to obtain and keep complaint-reference numbers.

When legal help is urgent

Consult a Philippine lawyer promptly when:

the loss is substantial or involves several victims;
the scammer or recipient is abroad;
funds passed through several banks, wallets, or cryptocurrency exchanges;
the institution rejected the dispute or says you authorized the payment;
investigators ask you to execute an affidavit you do not understand;
you know of assets that may be transferred or concealed;
a court order, preservation request, injunction, attachment, or cross-border process may be needed;
you received a subpoena, prosecutor’s resolution, or court pleading;
you are being accused of acting as an account mule;
the incident involves intimate images, threats, extortion, children, physical danger, or continuing identity theft; or
a filing or appeal deadline is approaching.

If you face an immediate threat to life or safety, contact emergency services or the nearest police station. Do not arrange an in-person meeting with the suspected scammer to recover the money yourself.

Practical complaint checklist

Before submitting a complaint, prepare:

A one- to two-page chronology in date-and-time order.
Your full contact details and a copy of valid identification.
The total loss, itemized by transaction.
Transaction records and statements from the institution.
Full communications and account identifiers.
The false representation or unauthorized act you are reporting.
An explanation of why you relied on it and what loss followed.
Names and contact details of witnesses.
Prior reports and their reference numbers.
The relief requested, such as investigation, preservation, recall, refund, or prosecution.

Keep the originals. Give copies unless an investigator properly requires an original, and obtain a receipt for any device or document surrendered.

Frequently asked questions

Can a bank or e-wallet reverse the transfer?

Sometimes, but not automatically. Recovery is more likely if the report is immediate and the funds remain in an identifiable account. The institution must follow applicable laws, BSP rules, its verification procedures, and any valid law-enforcement or court orders.

Am I entitled to reimbursement if I personally sent the money?

Not necessarily. A transaction induced by deception can still support criminal or civil remedies against the offender, but reimbursement by the financial institution depends on the facts, applicable consumer-protection duties, security controls, account terms, and the institution’s investigation.

Should I negotiate with the scammer?

Do not send more money or reveal additional personal information. Preserve any voluntary communication, but avoid threats or promises that may compromise the case. If a settlement is proposed, have its terms and the identity of the payer verified before signing a release.

Can I file even if I know only an account number or username?

Yes. Give investigators all available identifiers. Law enforcement may use lawful preservation, disclosure, and warrant procedures to seek additional records. An account holder may be a lead, a victim of identity theft, or a mule, so avoid assuming that the named holder is the principal offender.

Is a barangay complaint required first?

Not in every case. Barangay conciliation depends on factors such as the parties’ residences, the nature of the dispute, the offense and its penalty, and statutory exceptions. Cybercrime, cross-city or cross-municipality parties, urgent provisional relief, or other circumstances may take the matter outside ordinary barangay conciliation. Ask the prosecutor, court, or a lawyer about the specific case.

Will filing a criminal case guarantee repayment?

No. A criminal case determines criminal responsibility and may include civil liability, but actual collection depends on the judgment, available assets, competing claims, and enforcement.

What if the scam used a legitimate company’s name?

Contact the company through independently verified channels and ask it to confirm the impersonation in writing. Preserve the fake page, email domain, payment instructions, and representations. Report both the impersonating account and the underlying payment.

Can multiple victims report together?

Yes. Coordinated reporting may help investigators identify a pattern, but each victim should preserve individual proof of the representation, payment, and loss and may need a separate sworn statement.

Official sources

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Procedures and available remedies depend on the evidence, institutions, parties, and applicable law. Official sources and current procedures were checked on 14 September 2026.