Quick answer

If you suspect a scam, act immediately. Contact the bank, e-wallet, card issuer, remittance company, or other payment provider through its official fraud channel; ask it to secure your account, trace the transaction, and place any legally available hold on the disputed funds. Then report the incident to the Philippine National Police (PNP), National Bureau of Investigation (NBI), or Cybercrime Investigation and Coordinating Center (CICC). Keep the complaint and reference numbers from every institution.

Recovery is possible but never guaranteed. It usually depends on whether money remains traceable, whether the recipient account can be restricted in time, what the evidence shows, and whether the transfer was unauthorized or was approved because of deception. A police report alone does not automatically reverse a transfer.

Do not send an additional “verification,” “tax,” “release,” or “recovery” payment. Scammers commonly return pretending to be investigators, bank employees, lawyers, or recovery agents.

What to do immediately

1. Call the financial institution using a verified channel

Use the number printed on your card, the official app, or the institution’s verified website—not a number or link supplied by the suspected scammer.

Tell the institution:

the transaction is disputed and may involve fraud or social engineering;
the amount, date, time, transaction reference, and recipient account or wallet;
whether you disclosed a password, PIN, one-time password, card number, ID, selfie, or device access;
whether the transaction was unauthorized or you personally approved it because of a false representation;
whether other transactions may still be pending; and
what action you want: secure the account, block compromised access, trace the funds, notify receiving institutions, and initiate the applicable dispute or temporary-hold process.

Ask for a case or ticket number and written confirmation. If the first representative treats an authorized-but-deceived transfer as automatically non-disputable, ask that it still be recorded as a suspected social-engineering transaction and escalated to the institution’s fraud unit.

Under BSP regulations implementing the Anti-Financial Account Scamming Act, account owners must immediately report disputed transactions and cooperate by supplying requested information and documents. Covered institutions must maintain processes for tracing, temporarily holding, and verifying disputed funds. The initial hold may last up to five calendar days and, where the prescribed grounds and supporting requirements are met, may be extended so that the total institutional hold does not exceed 30 calendar days. A longer hold requires an order from a competent court. These rules do not guarantee that funds will be found, held, or returned, particularly if they have already been withdrawn or moved outside the covered financial system. See the BSP’s AFASA statute-and-regulations booklet.

Submit any sworn complaint, affidavit, police report, or other document requested within the institution’s stated deadline. Missing the initial verification period may make an extension or recovery more difficult.

2. Secure every affected account and device

From a trusted device:

change the financial account password, PIN, and recovery details;
change the password of the connected email account first if it may be compromised;
sign out other sessions and remove unknown devices;
enable multi-factor authentication;
lock or replace affected cards;
ask your mobile network to secure the SIM if SIM takeover is possible;
remove unfamiliar forwarding rules, linked accounts, payees, or app permissions; and
have a qualified person check the device if you installed remote-access software or an unknown app.

Never disclose a one-time password or screen-sharing code to someone who calls after the report. A real complaint reference number does not prove that the caller is legitimate.

3. Preserve evidence before blocking or deleting anything

Save the original material where possible, not just edited screenshots. Preserve:

the advertisement, listing, profile, page, website address, email address, phone number, and username;
the complete conversation, including voice messages and call logs;
transaction receipts, reference numbers, account names and numbers, QR codes, and payment links;
bank or e-wallet statements showing the debit;
contracts, invoices, order confirmations, delivery promises, and refund requests;
the scammer’s representations about identity, authority, products, returns, jobs, prizes, investments, or emergencies;
copies of IDs or documents sent to you;
proof of when and how you discovered the deception;
your reports to the platform and financial institution, their replies, and all case numbers; and
the original device and files, if keeping them is safe.

Export chats when the platform permits it. Take screenshots that show dates, times, account identifiers, and the surrounding conversation. Do not crop away useful context. Keep a simple chronology identifying what was represented, why you believed it, when you paid, where the money went, and what happened afterward.

Do not hack the suspect’s account, impersonate another person, publish private data, or threaten the suspected scammer. Those actions can create new legal problems and may alert the person before investigators can preserve evidence.

4. Make a law-enforcement report

For an online or technology-assisted scam, report to the PNP’s cybercrime unit, the NBI’s cybercrime service, or the CICC. An ordinary police station may also receive a report and direct it to the appropriate unit. Use only contact details obtained from the agencies’ official sites:

Bring a valid ID, your chronology, transaction records, communications, account identifiers, and copies of reports already made to financial institutions or platforms. Be prepared to execute a sworn statement and later produce original evidence.

A report does not itself establish guilt. Investigators and prosecutors must determine the proper offense and whether the evidence supports probable cause. If the recipient is abroad, the identity is unknown, or the transaction crossed several accounts, tracing may require cooperation among institutions and government authorities.

5. Report the matter to the relevant regulator or platform

Use the channel that fits the transaction:

Bank, e-wallet, credit, remittance, or other BSP-supervised financial service: complain first to the institution. If unresolved, escalate through the BSP Consumer Assistance Mechanism. The BSP lists its Online Buddy and alternative complaint channels on its consumer-assistance page. Attach the complaint sent to the institution and its response, if any.
Online sale or consumer transaction: report the seller and listing to the marketplace. A genuine consumer dispute involving a business may also be brought to the Department of Trade and Industry, although DTI mediation is not a substitute for a criminal report where fraud is suspected.
Investment solicitation, lending entity, corporation, or claimed securities offering: preserve the solicitation and report it to the Securities and Exchange Commission. Registration of a company does not by itself authorize it to solicit investments from the public.
Insurance product or purported insurer: contact the Insurance Commission.
Personal information or identity misuse: secure the affected accounts and consider contacting the National Privacy Commission. Its process addresses data-privacy issues; it does not replace a fraud complaint or payment dispute.
Social-media, messaging, email, or marketplace account: report the profile, content, and payment destination through the platform’s official reporting process, but preserve the evidence first.

Submitting the same accurate facts to several bodies is generally appropriate when their functions differ. Avoid inconsistent descriptions or exaggerated amounts.

What Philippine law may apply

The correct charge depends on what actually occurred. “Scam” is a practical description, not a single offense.

Estafa by deceit

Article 315 of the Revised Penal Code may apply when a person used a false pretense or fraudulent representation before or at the time of the transaction, the victim relied on it and parted with money or property, and damage resulted. The Supreme Court restated these elements in Rivera v. People.

A broken promise, unpaid loan, delayed delivery, or failed business arrangement is not automatically estafa. The evidence must ordinarily show the required deceit or other statutory mode of estafa, not merely later non-performance. The Supreme Court has explained that an ordinary failure to repay a loan is generally civil unless the creditor was induced to lend through fraudulent misrepresentations. See Gabionza v. Court of Appeals.

Cybercrime-related offenses

The Cybercrime Prevention Act of 2012 covers specified conduct such as computer-related fraud and computer-related identity theft. It also addresses certain offenses under other laws when committed through information and communications technology. The precise charge depends on how the computer system, data, account, or device was used; merely communicating online does not make every dispute computer-related fraud.

Financial-account scamming and money-mule activity

The Anti-Financial Account Scamming Act, Republic Act No. 12010, penalizes specified money-mule activities and social-engineering schemes involving financial accounts. It covers bank and other transaction accounts, credit-card accounts, investments, and e-wallets offered by BSP-supervised institutions.

The law can apply to people who knowingly lend, sell, buy, rent, open, or allow the use of accounts to receive or move criminal or social-engineering proceeds. A person should not accept a commission to receive and forward money for someone else or permit an account to be used merely because the organizer calls it a job or favor.

AFASA authorizes temporary holding and coordinated verification of disputed funds and permits BSP inquiries into financial accounts within the law’s scope. It also provides for civil liability upon conviction, which may include restitution. Recovery still depends on the evidence, the availability of funds or assets, and the outcome of the applicable process.

Other laws—such as the Access Devices Regulation Act, anti-money-laundering laws, consumer laws, or laws governing particular investment, recruitment, or impersonation schemes—may apply. Investigators and prosecutors should select the charge supported by the evidence.

Routes for seeking recovery

Several routes may proceed at the same time, but payment cannot be collected twice for the same loss.

Financial-institution dispute and AFASA process

This is usually the fastest potential route when money has just moved through a covered account. The institution may trace the transaction chain and temporarily hold funds that remain available. During coordinated verification, affected account owners may be asked to explain the transaction and provide documents.

Funds are not returned merely because a complaint was made. The regulations contemplate return where, after verification, the prescribed circumstances support the conclusion that the funds are connected to money muling, unlawful activity, an illegal source, or a social-engineering scheme, or where the beneficiary waives a claim. Otherwise, the hold may be lifted. A court can extend a hold where legally justified.

Card chargebacks and marketplace refunds may offer separate remedies under the provider’s rules. Their conditions and time limits vary, so request them promptly and in writing.

Civil liability connected with the criminal case

Under the Rules of Criminal Procedure, the civil action to recover civil liability arising from the offense is generally deemed instituted with the criminal action unless the offended party waives it, reserves the right to file it separately, or files the civil action first. Those choices have procedural consequences. A victim considering a separate suit should obtain legal advice before signing a waiver or reservation.

A conviction under AFASA carries civil liability that may include restitution. An award, however, is not the same as actual collection: enforcement still depends on locating reachable assets.

A separate civil claim

A separate civil action may be appropriate when the evidence supports breach of contract, rescission, damages, unjust enrichment, or another civil cause of action—even if criminal fraud cannot be proved beyond reasonable doubt. The proper theory, defendant, venue, and prescriptive period depend on the documents and facts.

Qualifying money claims not exceeding ₱1,000,000, exclusive of interest and costs, may fall under the Supreme Court’s small-claims procedure in first-level courts. Small claims are designed to be simpler, and lawyers generally may not appear for a party at the hearing, subject to the rule’s provisions. Use the current official forms and instructions in the 2022 Rules on Expedited Procedures in the First Level Courts.

Small claims are not suitable for every scam-related demand. Questions about the defendant’s true identity, service of summons, the location of assets, the nature of the claim, prior criminal proceedings, or mandatory barangay conciliation may affect the case.

Important limits and exceptions

A voluntary transfer can still involve fraud. Entering a PIN or approving a transfer does not necessarily disprove deception, but it may affect the financial institution’s contractual assessment and the evidence needed.
An unauthorized transaction is not automatically reimbursable. Responsibility may depend on the institution’s investigation, governing law, security controls, customer conduct, and proof of compromise.
A recipient account name is not conclusive proof of who committed the scam. An account may belong to a mule, an identity-theft victim, or another intermediary.
A civil dispute is not automatically a crime. Deceit, conversion, unauthorized access, or another required criminal element must be proved.
A regulator’s complaint process is not a criminal prosecution. A BSP, DTI, SEC, Insurance Commission, or platform complaint may help address the regulated service but does not replace reporting a suspected offense.
Criminal reporting does not stop every civil deadline. Prescription and procedural deadlines depend on the cause of action and events that legally interrupt the period. Do not assume that a police, platform, or bank report preserves all claims.
Recovery services have no special power to unlock funds. Anyone demanding cryptocurrency, gift cards, an advance “court fee,” or remote access as a condition for recovery should be treated as a new fraud risk.

Common mistakes that reduce the chance of recovery

Waiting for the scammer’s promised refund before notifying the bank or e-wallet.
Reporting only to the social-media platform.
Deleting the conversation after blocking the account.
Sending more money to “complete” the transaction or recover the first payment.
Giving investigators only screenshots without transaction records or original files.
Filing an inaccurate report, guessing identities, or naming an account owner as the mastermind without evidence.
Paying an unofficial fixer who claims to have contacts inside a bank, police office, court, BSP, or NBI.
Publicly confronting the suspected scammer before funds and electronic evidence can be preserved.
Ignoring calls or document requests from the financial institution during the verification period.
Assuming that a company’s SEC registration, government ID, permit, or professional-looking page proves that the solicitation is lawful.

When legal help is urgent

Consult a Philippine lawyer promptly if:

the loss is substantial or represents essential household or business funds;
a temporary hold is about to expire;
the institution has located funds but says a court order is required;
you are being asked to choose between reserving, waiving, or pursuing civil liability;
the suspect, recipient accounts, or assets are in several jurisdictions;
the scam involves land, investments, overseas employment, corporate officers, cryptocurrency, or forged documents;
you signed a settlement, release, loan acknowledgment, or confidentiality agreement;
you received a subpoena, prosecutor’s resolution, counter-affidavit, summons, or court order;
your identity or account was used as a money mule; or
there is a threat of violence, blackmail, intimate-image exposure, kidnapping, or continuing unauthorized access.

If cost is a barrier, ask whether you qualify for assistance from the Public Attorney’s Office or an accredited legal-aid organization. Eligibility and representation remain subject to their rules and assessment.

Practical complaint checklist

Prepare one organized file containing:

A one-page chronology.
Your full name and reliable contact details.
The amount lost and a transaction-by-transaction table.
The sender and recipient account details exactly as shown in the records.
Receipts and official statements.
The complete communications and representations that induced payment.
The advertisement, profile, website, or solicitation.
Proof of non-delivery, false identity, blocked contact, rejected withdrawal, or other relevant event.
Reports made to institutions, agencies, and platforms.
Every reference number and response received.
A clear request, such as account security, transaction tracing, temporary holding, reversal, refund, investigation, or prosecution.

Keep originals and submit copies unless an authorized officer formally receives an original. Obtain a receipt or acknowledgment for important submissions.

FAQ

Can the bank or e-wallet freeze the recipient’s money?

A BSP-supervised institution may temporarily hold disputed funds under AFASA and BSP rules when the applicable grounds and procedures are satisfied. The initial hold is up to five calendar days; the overall institutional hold may reach 30 calendar days, while a further extension requires a competent court’s order. Only funds that remain traceable and available can be held.

Will I automatically get the money back after reporting?

No. Reporting creates an opportunity to secure accounts, trace money, preserve evidence, and investigate. Return may depend on coordinated verification, provider rules, consent of the beneficiary, a court or agency process, or a final judgment.

I approved the transfer because I believed the scammer. Can I still report it?

Yes. State clearly that you approved the payment because of specified false representations. Preserve the messages or documents showing those representations. Do not describe the transaction as technically unauthorized if you personally confirmed it; accuracy strengthens the complaint.

Is failure to deliver an online order automatically estafa?

No. It may be a consumer or contractual dispute. Estafa by deceit generally requires proof that a false pretense or fraudulent representation existed before or when you parted with the money, that you relied on it, and that you suffered damage. The full circumstances matter.

Should I report the account owner shown on the receipt?

Provide the account details as evidence, but do not assume that the named owner planned the entire scheme. Investigators must determine whether the owner was the scammer, a knowing mule, an unwitting intermediary, or an identity-theft victim.

Can I file both a criminal complaint and a civil case?

Possibly. Civil liability arising from the offense is generally included with the criminal action unless waived, reserved, or previously filed. Separate contractual or other independent civil claims may also exist. Because filing choices can affect one another, obtain legal advice before pursuing parallel cases.

Can a small-claims case recover the payment?

It may be available for a qualifying money claim of up to ₱1,000,000, exclusive of interest and costs. It is not a substitute for urgent fund tracing or criminal investigation, and practical recovery still depends on identifying and serving the correct defendant and enforcing the judgment.

What if the scammer or account is overseas?

Report immediately to your financial institution and Philippine law enforcement. Cross-border tracing and enforcement may require foreign cooperation and can be slower. Preserve country codes, foreign account details, cryptocurrency wallet addresses, platform records, and all communications.

What if I was tricked into letting someone use my account?

Stop transfers, notify the institution, preserve the recruiter’s instructions, and seek legal advice immediately. AFASA penalizes specified knowing money-mule activities, but the person’s knowledge, purpose, and circumstances matter. Do not move or return disputed funds on private instructions after the account has been flagged; follow the institution’s and lawful authorities’ directions.

Official legal and procedural sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Procedures and available remedies depend on the transaction, evidence, institution, location, and governing documents. Official sources were checked as of 14 September 2026.