Reporting a Suspected Scam and Seeking Recovery

Quick answer

If you suspect a scam, act immediately. Contact the bank, e-wallet, card issuer, remittance company, or other payment provider through its official 24/7 fraud channel; identify every disputed transaction; ask that the funds be traced and temporarily held; secure your accounts; and obtain a case-reference number. Then submit the supporting documents the institution requests and report the incident to the National Bureau of Investigation (NBI), Philippine National Police (PNP), or another appropriate law-enforcement agency.

Speed matters because money may be withdrawn, converted, or transferred through several accounts within minutes. Reporting does not guarantee recovery. Recovery usually depends on whether funds remain traceable, whether an institution can hold them, what the evidence shows, and whether a court order or further legal action becomes necessary.

What to do immediately

1. Stop further losses

Using a different, trusted device if account compromise is possible:

  • Call the institution using the number in its official app, website, card, or account statement—not a number supplied by the suspected scammer.
  • Ask it to block or restrict affected cards, accounts, online-banking access, and outgoing transfers.
  • Change passwords for banking, e-wallet, email, social-media, shopping, and cloud accounts. Use unique passwords and enable multi-factor authentication.
  • Sign out other devices and remove unfamiliar linked devices, beneficiaries, forwarding rules, recovery addresses, and app permissions.
  • Contact your mobile provider if your SIM suddenly stopped working or you suspect SIM replacement or takeover.
  • Do not send another payment for a supposed refund, tax, clearance fee, account verification, or fund-release charge.
  • If the scammer remotely accessed your device, disconnect it from the internet, stop using it for financial transactions, and have it examined before restoring access.

If there is an immediate threat to life or physical safety, contact emergency services or the nearest police station first.

2. Report the transaction to the sending institution

Report each disputed transfer through the sending institution’s Financial Consumer Protection Assistance Mechanism or official fraud-reporting channel. State clearly whether:

  • you did not make or authorize the transaction;
  • you were deceived into authorizing it;
  • the recipient failed to provide the promised goods, service, investment, or return; or
  • your credentials, device, card, or account were compromised.

Provide, as available:

  • your name and verified account details;
  • the exact amount, date, and time;
  • the transaction reference or trace number;
  • the recipient’s name, account or wallet number, institution, QR code, mobile number, or other identifier;
  • a short chronological account of what happened; and
  • the specific action requested, such as blocking access, tracing the transaction, initiating a temporary hold, recalling funds, or opening an unauthorized-transaction investigation.

Ask for written acknowledgment and a case-reference number. Record the time, channel, and name or identifier of every representative contacted.

3. Submit supporting documents without delay

Under BSP Circular No. 1215, an initial hold of disputed funds may last no more than five calendar days. To support an extension, the source-account owner generally must submit a sworn complaint, affidavit, police report, or another supporting document within that initial period, subject to the applicable industry protocol.

Do not assume that an initial telephone or chat report completes the process. Ask the institution exactly what documents it needs, where they must be submitted, and by what time.

How the AFASA temporary-hold process works

Republic Act No. 12010, the Anti-Financial Account Scamming Act, or AFASA, regulates financial-account scamming, including money-muling activities and social-engineering schemes. Its implementing BSP regulations are consolidated in the AFASA booklet containing BSP Circular Nos. 1213, 1214, and 1215.

For covered electronic fund transfers:

  1. A complaint through the sending institution’s 24/7 fraud channel can trigger tracing, an initial hold, and coordinated verification.
  2. The sending institution may ask the receiving institution—and later institutions in the transaction chain—to hold any identifiable disputed funds.
  3. The initial hold is limited to five calendar days.
  4. If there are reasonable grounds to believe that the money is disputed and more time is needed, the hold may be extended for up to 25 additional calendar days.
  5. The combined administrative holding period cannot exceed 30 calendar days. Only a court of competent jurisdiction may extend it further.
  6. Institutions involved in the chain must conduct coordinated verification even if the money no longer remains in their systems.
  7. When money was successfully held, verification should be completed within the 30-day holding period unless a court extends it. When no money was held, verification generally must be completed within 30 calendar days, extendible for meritorious reasons to a total not exceeding 60 calendar days.

A temporary hold is not yet a final judgment that either party owns the money. The receiving account owner must be allowed to challenge the hold and present evidence that the transaction was legitimate.

If verification reasonably concludes that the funds came from money muling, unlawful activity, an illegal source, a transaction without an underlying economic purpose, or a social-engineering scheme, the rules allow the held amount to be returned through the institutions to the source-account owner. If legitimacy is established—or the holding period expires without a lawful reason to retain the funds—the hold ordinarily must be lifted. Other court remedies remain available to an aggrieved party.

A BSP-supervised institution that fails to hold disputed funds when required may be liable for resulting loss or damage, including restitution. Whether that rule applies in a particular case depends on the transaction, timing, available funds, institutional obligations, and evidence.

Important limits and exceptions

The Circular No. 1215 temporary-hold procedure:

  • applies to electronic transfers from one financial account to another;
  • does not apply to an ordinary erroneous transaction, such as sending money to the wrong recipient without fraud;
  • generally does not cover credit-card purchases, except when a credit card is used to make an electronic fund transfer through an automated clearing house; and
  • cannot recover funds that have already been withdrawn or moved beyond effective tracing and holding.

Erroneous transfers and ordinary card disputes remain subject to other consumer-protection rules, contracts, card-network procedures, and applicable law. Cash payments, cryptocurrency transfers, payments through an unregulated entity, and overseas transactions may require different measures.

Report the crime as well as the financial dispute

A complaint to a bank or e-wallet is not the same as a criminal complaint. For an online or technology-enabled scam, report the facts to the cybercrime unit of the NBI or PNP. The NBI provides an online complaint page and publishes its process for investigative assistance to victims of computer crimes. Its procedure may require a complaint form, sworn statement or affidavit, supporting documents, and examination of a relevant device.

The Department of Justice also maintains an official page for reporting cybercrime incidents. Use only verified government websites and addresses; scammers sometimes impersonate investigators or recovery agents.

Depending on the proven facts, possible offenses may include estafa under Article 315 of the Revised Penal Code, offenses under AFASA, access-device offenses, identity-related offenses, or offenses under the Cybercrime Prevention Act. When a Revised Penal Code or special-law offense is committed through information and communications technology, Section 6 of Republic Act No. 10175 may affect the applicable penalty. The investigating authority and prosecutor—not the complainant’s label—determine the proper charge from the evidence.

A criminal complaint may support investigation, preservation requests, warrants, prosecution, and recovery, but it does not automatically reverse a transfer. Civil liability arising from the alleged offense is generally included with the criminal action unless it is waived, reserved, or previously filed separately, subject to Rule 111 and other procedural rules. Obtain legal advice before waiving, reserving, settling, or separately filing a civil claim.

Escalating a complaint against a financial institution

For a bank, e-wallet issuer, or other BSP-supervised institution, the institution’s own consumer-assistance mechanism is the required first-level recourse.

If the institution does not act or its response is unsatisfactory, escalate the complaint through the BSP Consumer Assistance Mechanism. The BSP’s current complaint instructions direct consumers to:

  • first report the matter to the institution;
  • retain proof of that report and its response or inaction;
  • use the BSP Online Buddy, or BOB, available through the BSP website or its official Facebook page; or
  • if BOB is unavailable, submit the prescribed form and proof of prior resort to the institution by email to consumeraffairs@bsp.gov.ph.

BSP-CAM is a second-level complaint mechanism. It is not a substitute for urgently notifying the financial institution or reporting a crime.

For an investment solicitation, verify the entity and investment through the Securities and Exchange Commission and report suspected unauthorized investment-taking to the SEC. For a consumer purchase from a business, an appropriate complaint may also be brought to the Department of Trade and Industry. Regulatory complaints may address regulated conduct, but they do not necessarily produce immediate reimbursement or replace a police, prosecutorial, or court proceeding.

Evidence to preserve

Keep originals and make secure, read-only backup copies where possible. Preserve:

  • complete chats, emails, SMS messages, call logs, usernames, profile links, group names, and advertisements;
  • screenshots showing the entire screen, date, time, account name, URL, and surrounding conversation;
  • original electronic messages and files, not only cropped screenshots;
  • payment receipts, transaction confirmations, reference numbers, QR codes, account numbers, and statements;
  • the fraudulent website address, order page, wallet address, marketplace listing, or app name;
  • contracts, invoices, delivery promises, investment materials, and proof of what was represented;
  • recordings you lawfully possess;
  • names and contact details of witnesses;
  • reports to platforms, financial institutions, regulators, and law enforcement, including ticket numbers and responses; and
  • a written timeline prepared while events are fresh.

Do not alter messages, fabricate missing details, impersonate another person, access someone else’s account, or attempt to “hack back.” Avoid posting unredacted IDs, account numbers, private conversations, or allegations online. Public accusations can create privacy, defamation, and investigative problems.

If a device may contain important evidence, avoid factory-resetting, deleting apps, or running “cleaner” software until an investigator or qualified forensic professional advises you.

Improving the chance of recovery

Make one accurate, consistent report and update it as new facts emerge. In communications with the institution:

  • distinguish unauthorized transactions from transactions you personally approved because of deception;
  • identify every receiving institution and transaction hop you know;
  • ask whether any amount was successfully held;
  • ask for the receiving and subsequent institution details that may be disclosed under the rules;
  • answer verification requests promptly;
  • request the written investigation result and reasons; and
  • challenge factual errors immediately with documents.

If the scammer offers repayment, do not withdraw a complaint, sign a release, or pay a “processing fee” without verifying cleared funds and understanding the document’s effect. A settlement may affect criminal and civil remedies differently.

Common mistakes

  • Waiting for the scammer’s promised refund before notifying the financial institution.
  • Reporting only to a social-media platform.
  • Calling a telephone number from the suspicious message.
  • Giving an OTP, PIN, password, screen-sharing access, or remote-control access to someone claiming to recover the money.
  • Describing a transaction as unauthorized when it was personally initiated after deception.
  • Failing to submit an affidavit, police report, or other requested support during the initial holding period.
  • Deleting chats, resetting the device, or losing the original transaction records.
  • Paying an unverified “recovery company” that guarantees reimbursement.
  • Assuming a regulator’s acknowledgment means that a criminal case or refund has already been approved.
  • Filing knowingly false or completely unwarranted information. AFASA penalizes malicious reporting made with malice or bad faith when it results in a temporary hold.

When legal help is urgent

Consult a Philippine lawyer promptly when:

  • a substantial sum, business account, payroll, trust fund, or several victims are involved;
  • the 30-day holding period is approaching and a court order may be needed;
  • an institution denies the claim or attributes the loss to your authorization or negligence;
  • the recipient, platform, or financial institution is overseas;
  • you need to preserve digital evidence, identify unknown defendants, or seek provisional relief;
  • you are asked to execute a waiver, quitclaim, settlement, desistance, or reservation of civil action;
  • you are accused of receiving, transferring, or withdrawing scam proceeds;
  • your identity or account was used as a money mule; or
  • threats, extortion, intimate images, trafficking, or danger to a child are involved.

Frequently asked questions

Can the bank or e-wallet simply reverse the transfer?

Not automatically. It must trace the disputed transaction, determine whether money remains available, coordinate with receiving institutions, and observe the rights of affected account owners. A return may follow a waiver, verified findings under the BSP rules, or an appropriate court order.

What if I personally pressed “send” because the scammer deceived me?

Report that fact accurately. AFASA and Circular No. 1215 cover specified disputed transactions associated with fraud and social-engineering schemes; coverage is not confined to account takeovers. However, reimbursement still depends on the evidence, available funds, institutional duties, and applicable rules.

Is there a minimum amount before I can report?

The cited AFASA reporting and temporary-hold provisions do not establish a victim-side minimum amount. Report even a small loss, especially if credentials or identity information were compromised.

What if I transferred money to the wrong account by mistake?

That is generally an erroneous transaction, not a disputed transaction covered by Circular No. 1215’s temporary-hold process. Contact the sending institution immediately and follow its erroneous-transfer procedure. Do not falsely characterize a mistake as fraud.

Will filing with the NBI or PNP guarantee reimbursement?

No. A criminal investigation may help identify offenders, preserve evidence, trace assets, and support prosecution, but recovery depends on the facts, remaining assets, available legal processes, and eventual findings or orders.

Should I communicate with the suspected scammer?

Preserve existing communications, but do not send more money, reveal investigative steps, threaten illegal action, or follow links supplied for a “refund.” If investigators want further contact, follow their instructions.

Can someone file the BSP complaint for me?

The complaint must be made by the real party in interest. A representative generally needs written authority. Juridical entities may need a board or partnership resolution and a secretary’s certificate or equivalent authorization.

How long does BSP-CAM take?

BSP’s published primer states that the full CAM process may take approximately 55 to 65 days from receipt to termination. That is separate from the urgent five-day initial hold and the AFASA coordinated-verification timelines, so the financial institution must be contacted first and immediately.

Official references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Procedures and remedies depend on the transaction, documents, institutions, location, and other facts. Official sources were checked as of 14 September 2026.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.