Quick answer

A scam can trigger several separate legal consequences in the Philippines. Depending on the evidence, the people involved may be investigated or prosecuted for estafa, offenses under the Anti-Financial Account Scamming Act (AFASA), cybercrime, identity-related offenses, or violations of special laws. Anyone who knowingly receives, transfers, converts, conceals, or helps move criminal proceeds may also face a money-laundering case.

These consequences are not automatic. Investigators and prosecutors must establish the elements of each offense, including fraud, knowledge, participation, and the connection between the money and an unlawful activity. A recipient account is not necessarily owned by the main scammer, and an account holder is not automatically guilty merely because suspicious funds passed through the account.

The immediate priority for a victim is to contact the sending bank or e-wallet through its official fraud channel. Under current BSP rules, disputed funds may initially be held for up to five calendar days and, when the legal requirements are met, for an additional period of up to 25 calendar days. The total administrative holding period cannot exceed 30 calendar days unless a court extends it. A hold preserves funds that remain traceable; it does not guarantee reimbursement.

Scam, estafa, and money laundering are different offenses

“Scam” is an everyday term, not a single criminal charge. The proper charge depends on what the offender did.

Estafa or swindling

Many scams fall under Article 315 of the Revised Penal Code. Estafa may involve false pretenses, fraudulent representations, deceit, or the misappropriation of money received in trust or under an obligation to deliver or return it.

For a false-representation case, the prosecution generally must prove that:

the accused made a false representation or used a fraudulent act;
the representation concerned a material fact and was made before or at the time the victim parted with money or property;
the victim relied on the deception; and
the victim suffered measurable damage.

A failed investment, unpaid debt, broken promise, or unsuccessful business transaction is not automatically estafa. Evidence of deceit at the relevant time is crucial. A genuinely civil dispute does not become criminal simply because money was not returned.

Online or technology-assisted offenses

When an offense defined by the Revised Penal Code or a special law is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act of 2012 may apply. It generally prescribes a penalty one degree higher than the ordinary penalty, subject to the exact charge and the facts proved.

Separate cybercrime charges may also arise from conduct such as illegal access, computer-related identity theft, computer-related forgery, or computer-related fraud. Prosecutors should not treat every online transaction as the same offense; the digital conduct and evidence must satisfy the elements of the charge actually filed.

Financial-account scamming

The Anti-Financial Account Scamming Act, Republic Act No. 12010, specifically addresses misuse of bank, credit-card, investment, payment, and e-wallet accounts.

AFASA covers two important categories:

Money-mule activities: knowingly using, lending, selling, renting, buying, or allowing the use of a financial account to obtain, receive, deposit, transfer, or withdraw proceeds known to come from crimes, offenses, or social-engineering schemes. Recruiting other people to do these acts is also covered.
Social-engineering schemes: obtaining another person’s sensitive identifying information through deception or fraud, resulting in unauthorized access to and control over that person’s financial account.

Under AFASA, money-mule activities carry imprisonment of six to eight years, a fine of ₱100,000 to ₱500,000, or both, at the court’s discretion. Social-engineering offenses carry imprisonment of 10 to 12 years, a fine of ₱500,000 to ₱1 million, or both. A higher range applies when the social-engineering victim was a senior citizen.

The offense becomes economic sabotage when the prohibited act is committed by three or more conspirators, against three or more victims, using a mass mailer, or through human trafficking. AFASA prescribes life imprisonment, a fine of ₱1 million to ₱5 million, or both, for economic sabotage.

These penalties apply only after conviction. The precise penalty may be affected by the charge, proven circumstances, applicable sentencing rules, and other laws.

When does a scam become a money-laundering case?

Money laundering is a distinct offense under the Anti-Money Laundering Act, Republic Act No. 9160, as amended, including by Republic Act No. 10365 and Republic Act No. 11521.

In simplified terms, money laundering may occur when a person, knowing that money or property represents or relates to proceeds of an unlawful activity:

transacts or attempts to transact it;
converts, transfers, disposes of, moves, acquires, possesses, or uses it;
conceals or disguises its true nature, source, location, ownership, movement, or disposition;
attempts or conspires to commit money laundering;
aids, abets, assists, or facilitates it; or
fails to perform a duty under the AMLA and thereby facilitates laundering.

Fraud-related crimes recognized as unlawful activities under the AMLA can supply the criminal proceeds. But the government must still prove the required relationship between the property and the underlying unlawful activity, together with the accused’s legally required knowledge or participation.

Money laundering may be prosecuted separately from the scam that generated the proceeds. The scammer, a recruiter, a payment processor, or a money-mule account holder may face different charges based on each person’s acts and knowledge.

Is the owner of a receiving account automatically guilty?

No. Receipt of suspicious money is important evidence, but it is not by itself conclusive proof of guilt.

Investigators may examine:

who opened and controlled the account;
who possessed the SIM, device, credentials, ATM card, or identification documents;
whether the owner knowingly lent, sold, or rented the account;
how quickly the money was withdrawn or transferred;
whether the owner received a commission;
communications with recruiters, scammers, or other account holders;
whether the transaction was consistent with the owner’s usual activity; and
what the owner did after learning that the funds might be criminal proceeds.

A person deceived into giving account details may be a witness or victim. Conversely, claims such as “I only lent my account” or “I was told to forward the money” do not automatically provide a defense if the surrounding evidence shows knowledge or deliberate participation.

Anyone whose account has been frozen, restricted, or linked to a scam should preserve all records and obtain legal advice before giving an incomplete or speculative statement.

What happens after a victim reports the transfer?

1. The financial institution traces and may temporarily hold funds

Under AFASA and BSP Circular No. 1215, Series of 2025, a BSP-supervised institution may treat a transaction as disputed when there are reasonable grounds to believe it is unusual, lacks a clear economic purpose, comes from an unknown or illegal source or unlawful activity, or was facilitated through social engineering.

A complaint through the sending institution’s 24/7 fraud-reporting channel can trigger tracing, an initial hold, and coordinated verification among involved institutions. The institution will normally verify details such as:

the transaction reference number;
source and beneficiary accounts;
amount;
transfer method;
date and time; and
the institutions through which the funds passed.

The initial hold may last no more than five calendar days. To support an extension, the source-account owner may be required to submit a sworn complaint, affidavit, police report, or another supporting document within that initial period, subject to the applicable industry protocol. If justified, the hold may be extended by up to 25 additional calendar days.

Only funds still present or traceable can effectively be held. If the money has already been withdrawn, spent, converted to another asset, or moved outside reachable institutions, recovery becomes more difficult.

2. The institution conducts coordinated verification

The sending and receiving institutions examine the transaction and the affected accounts. Account owners must cooperate and timely provide requested documents.

A temporary hold is a protective measure, not a ruling that the receiving account owner committed a crime. Funds may be released if verification establishes legitimacy or the legal basis for the hold ends. Continued restraint beyond 30 calendar days requires an appropriate court order.

3. Law enforcement investigates

The victim may report the matter to the PNP, NBI, or CICC. BSP’s official complaint guidance confirms that these agencies can investigate criminal scam complaints.

Investigators may interview witnesses, obtain affidavits, trace accounts, preserve computer data, seek financial-account information through lawful channels, and apply for cybercrime warrants or other court orders. Account secrecy and data-privacy rules do not prevent disclosures properly authorized under AFASA, the AMLA, the Cybercrime Prevention Act, or applicable court rules.

4. A prosecutor evaluates the criminal complaint

A complaint-affidavit and supporting evidence may be submitted for prosecutorial evaluation. Where preliminary investigation is legally required, the respondent is ordinarily given an opportunity to answer. The prosecutor determines whether the evidence establishes probable cause to file an Information in court.

Probable cause is not the same as guilt beyond reasonable doubt. A prosecutor may dismiss a complaint that lacks an essential element, relies only on unsupported accusations, or presents what is actually a civil dispute.

5. The criminal case proceeds in court

If an Information is filed, the court addresses jurisdiction, custody or bail where applicable, arraignment, pretrial, trial, and judgment. The prosecution must prove guilt beyond reasonable doubt. The accused may challenge identity, attribution of electronic records, knowledge, intent, the handling of evidence, and the alleged connection between the account and criminal proceeds.

A conviction may include imprisonment, a fine, closure of accounts where authorized, forfeiture of property, and civil liability to the victim. Recovery still depends on what assets can be identified, preserved, and lawfully applied to the judgment.

How AMLC action differs from an AFASA hold

An AFASA hold by a financial institution and an AMLA freeze order are different measures.

Under the AMLA, the Anti-Money Laundering Council may file a verified, ex parte petition with the Court of Appeals. If the court finds probable cause that identified money or property is related to an unlawful activity, it may issue a freeze order effective immediately for 20 days.

Within that period, the Court of Appeals conducts a summary hearing with notice to the parties and may modify, lift, or extend the freeze. The total Court of Appeals freeze period cannot exceed six months. The order must be limited to the amount or value probably connected to the unlawful proceeds, rather than unrelated excess funds in the same account. The account holder may move to lift the freeze.

The Supreme Court has emphasized that freeze orders and bank-inquiry orders are extraordinary remedies requiring probable cause and a demonstrated connection to an unlawful activity. See AMLC v. Philippine Veterans Bank, G.R. No. 207078, June 20, 2022.

A Regional Trial Court handling an anti-money-laundering or civil-forfeiture case may separately issue an asset-preservation order under applicable law and rules.

Can money be recovered without a criminal conviction?

Possibly, but never automatically.

Potential recovery routes include:

release or return following the financial institutions’ verification process;
restitution based on a BSP-supervised institution’s failure to employ adequate controls or exercise the legally required degree of diligence;
civil liability adjudged with the criminal case;
an independent civil action where legally available; and
civil forfeiture or other asset-recovery proceedings involving criminal proceeds.

AFASA states that conviction is not a prerequisite to restitution when an institution failed to employ adequate risk-management systems and controls or failed to exercise the highest degree of diligence required by law. This does not mean every scam loss must be refunded. The institution’s controls, the account owner’s conduct, transaction authentication, causation, and compliance with BSP rules remain material.

The bank or e-wallet’s internal complaint process is the first-level recourse. A dissatisfied consumer may escalate an eligible complaint through the BSP Consumer Assistance Mechanism. A BSP consumer complaint is not a substitute for reporting the crime to law enforcement.

What evidence should a victim preserve?

Keep original records whenever possible. Preserve:

transaction receipts and complete reference numbers;
account statements showing the debit;
beneficiary names, account numbers, mobile numbers, and wallet identifiers;
the scammer’s usernames, profile links, email addresses, phone numbers, and advertised business details;
complete chat threads, emails, SMS messages, voice messages, and call logs;
screenshots that show the date, time, account name, and surrounding conversation;
contracts, invoices, order forms, advertisements, and investment presentations;
website addresses and copies of webpages;
delivery records and proof that promised goods or services did not exist or were not supplied;
communications with the bank, e-wallet, platform, courier, or marketplace;
complaint reference numbers and written responses; and
a chronological account of what happened while memory is fresh.

Do not edit screenshots, crop away identifying details, delete chats after exporting them, or reset the affected device before evidence is secured. Electronic evidence must still be authenticated and shown to be accurate and reliable under the Rules on Electronic Evidence and the amended Rules on Evidence.

Practical steps after discovering a scam

Contact the sending institution immediately. Use only the number, app, website, or branch listed through an official channel. Ask for the fraud desk, request tracing and an AFASA disputed-transaction hold, and obtain a reference number.
Secure the affected accounts. Change passwords from a trusted device, revoke unknown sessions and devices, lock cards, replace a compromised SIM when necessary, and enable multi-factor authentication. Never disclose a new OTP to someone claiming to process a refund.
Submit supporting documents within the institution’s deadline. The initial holding window can be only five calendar days. Ask in writing what affidavit, police report, identification, or transaction documents are required.
Report the crime. Bring a clear chronology and organized copies of the evidence to the appropriate PNP or NBI cybercrime unit, or use an official CICC reporting facility.
Notify the relevant platform. Report fraudulent marketplace listings, social-media profiles, domains, phone numbers, or advertisements, but preserve them first.
Escalate the financial complaint when appropriate. If the institution’s response is unsatisfactory, use the BSP Consumer Assistance Mechanism. Complaints about regulated financing or lending companies may instead fall within the SEC’s jurisdiction.
Consult counsel promptly when the amount is substantial or assets are moving. Counsel can assess criminal, civil, provisional, and asset-preservation remedies without assuming that every remedy fits every case.

Common mistakes that weaken a case

Waiting for the scammer’s promised refund before informing the financial institution.
Continuing to send “tax,” “unlocking,” “verification,” or recovery fees.
Reporting only to a social-media platform and not to the institution or law enforcement.
Giving investigators isolated screenshots without the full conversation or transaction trail.
Publicly accusing an unverified account owner who may also be a victim or whose identity may have been stolen.
Filing a knowingly false report to pressure another person in a genuine commercial dispute. AFASA penalizes malicious, bad-faith reporting that causes a completely unwarranted hold.
Assuming that an AMLC suspicious-transaction report will automatically return the money. Such reports support financial intelligence and enforcement; they are not private refund claims.
Paying an alleged “hacker,” “AMLC agent,” or recovery service that promises to unfreeze or retrieve funds for an advance fee.

When legal help is urgent

Seek immediate assistance if:

a large transfer has just occurred and the funds may still be traceable;
the institution requests a sworn complaint within the five-day initial holding period;
your identity, SIM, email, or financial account has been taken over;
your account has been frozen or identified as a receiving or money-mule account;
investigators have invited you to give a statement or surrender a device;
you received a subpoena, prosecutor’s complaint, warrant, or court order;
the scheme involves several victims, multiple accounts, cryptocurrency, overseas transfers, or shell entities;
you knowingly lent or sold an account and criminal proceeds passed through it; or
there are threats, coercion, trafficking, or danger to a victim or witness.

Frequently asked questions

Is every online scam automatically money laundering?

No. The underlying scam and the later handling of its proceeds are legally distinct. Money laundering requires proof of the statutory acts, the criminal character of the property, and the required knowledge or participation.

Can the bank reverse an InstaPay or other real-time transfer?

A completed transfer is not automatically reversible. The institution may trace and temporarily hold disputed funds that remain available, then conduct verification. Recovery depends on timing, the transaction trail, available funds, and the legal findings.

What if I voluntarily entered the OTP?

That fact is relevant but does not automatically end the case. Investigators and the institution must examine how the OTP was obtained, whether deception or impersonation occurred, whether the resulting access was authorized, and whether the institution complied with its legal duties.

Can a money-mule account owner say they did not know?

Lack of knowledge may be a material defense where knowledge is an element. Courts assess credibility against objective evidence such as commissions, repeated transfers, communications, account-control records, withdrawals, and efforts to conceal the trail.

Does an account freeze mean the owner is guilty?

No. A temporary hold or freeze preserves property while facts are investigated or litigated. Criminal guilt requires conviction based on proof beyond reasonable doubt.

Can the victim file both criminal and civil claims?

Potentially. Civil liability may accompany the criminal case, and other civil or regulatory remedies may be available. The correct route depends on the transaction, defendants, documents, assets, and any prior waiver, reservation, or pending proceeding.

Is there a minimum amount before a suspicious transaction can be reported?

No fixed minimum protects a suspicious transaction from reporting. AMLA suspiciousness is based on statutory indicators and circumstances, not simply the amount. Covered-transaction thresholds used by regulated entities are different from the question of whether conduct is suspicious or criminal.

Should a victim report directly to AMLC?

AMLC is primarily a financial-intelligence and enforcement body, not the ordinary first-stop refund desk for scam victims. Start with the financial institution and report the crime to the appropriate law-enforcement agency. Those institutions and authorities can make the legally required reports or requests to AMLC and BSP.

Official legal references

This article provides general legal information, not advice for a particular case. Outcomes depend on the evidence, transaction records, applicable version of the law, and procedural posture. Primary legal and official procedural sources were last checked on July 24, 2026.