Quick answer

Act immediately. Contact the bank, e-wallet, card issuer, remittance company, or payment platform through its official fraud channel and report the transaction as disputed. Ask it to secure your account, trace the transfer, and initiate the temporary holding and coordinated verification process under the Anti-Financial Account Scamming Act when applicable. Then preserve the evidence, secure every affected account, and report the incident to the police or National Bureau of Investigation.

A report does not guarantee that the money will be recovered. Recovery depends on factors such as how quickly the incident was reported, whether funds remain in identifiable recipient accounts, how the transaction was authenticated, and what the investigation establishes. Even if you personally authorized the transfer because of deception, report it immediately; a scam-induced transfer may still be investigated as a disputed transaction.

What to do immediately

1. Call the financial institution now

Use only the hotline, application, website, or branch details shown on the institution’s official website or on the back of your card. Do not call a number supplied by the suspected scammer.

Tell the institution:

You are reporting a suspected scam or unauthorized transaction.
The exact amount, date, time, transaction reference, and recipient account or wallet.
Whether you disclosed a password, PIN, one-time password, card details, identification document, or remote access to your device.
Whether you approved the transaction because of a false representation.
Whether more transactions may still be pending.

Request appropriate action, including:

Blocking or restricting the affected account, card, or wallet;
Stopping pending transactions, if still possible;
Tracing the transfer and contacting receiving institutions;
Initiating a disputed-transaction report and the temporary-holding process under Republic Act No. 12010 and BSP rules, when applicable;
Preserving transaction, authentication, device, IP-address, call, and account-access records;
Replacing compromised cards, credentials, or account numbers; and
Giving you a complaint or case reference number in writing.

Keep a record of the time you called, the representative’s name or identifier, and every instruction or response.

Under Republic Act No. 12010, the Anti-Financial Account Scamming Act, BSP-supervised institutions may temporarily hold funds involved in disputed transactions while they conduct coordinated verification. The current BSP AFASA rules and implementing circulars provide for an initial hold of up to five calendar days and, when the regulatory conditions are met, an extension of up to 25 more calendar days. A hold beyond the maximum 30-day administrative period requires an order from a court with jurisdiction.

The institution will normally need supporting documents—such as a sworn complaint, affidavit, police report, or other evidence—during the initial holding period if an extended hold is sought. Submit requested documents promptly. The rules do not promise reimbursement and do not mean that every reported transfer will automatically be frozen.

2. Secure your accounts and devices

From a device you reasonably believe is safe:

Change the password of the affected financial account.
Change the password of the connected email account first if it may have been compromised.
Sign out other sessions and remove unknown devices.
Replace reused passwords on other important accounts.
Enable multi-factor authentication using the institution’s supported method.
Lock cards and request replacement if card information was exposed.
Remove unknown beneficiaries, forwarding rules, recovery addresses, or linked devices.
Contact your mobile network immediately if your SIM lost service unexpectedly or may have been taken over.
Uninstall remote-access applications that the scammer asked you to install, but first record their names and preserve relevant screenshots.
Have the device examined if the scammer remotely controlled it or installed suspicious software.

Never give anyone an OTP, PIN, CVV, password, authentication code, or screen-sharing access—even if the person claims to be helping recover the money.

3. Preserve evidence before deleting or blocking anything

Save the evidence in its original form where possible. Make a backup on another device or storage location.

Preserve:

Complete chat, SMS, email, and social-media conversations;
The sender’s phone number, email address, username, profile link, and account ID;
Full website addresses and screenshots showing the browser’s address bar;
Advertisements, product listings, job posts, investment presentations, invoices, contracts, and receipts;
Bank statements, wallet histories, deposit slips, QR codes, transaction confirmations, and reference numbers;
Recipient names, account numbers, wallet numbers, bank names, and branch information;
Call logs, voicemail, and lawful recordings already in your possession;
Delivery records, identification documents sent to you, and photographs of goods;
Dates, times, amounts, and a chronological account of what happened;
Your complaints to the platform and financial institution and their replies; and
Names and contact details of witnesses or other victims.

Do not crop the only copy of a screenshot. Keep the original and make a separate annotated copy if needed. Do not alter chat exports or fabricate missing details. A screenshot alone may not show the complete source, date, account identity, or context, so preserve the underlying message, device, and link whenever possible.

Do not continue paying merely because the scammer promises a refund, “account release,” tax clearance, police certificate, or recovery service. Recovery scams frequently target people who have already lost money.

Where to report the scam

Different reports serve different purposes. A complaint to a bank seeks account protection and possible tracing or recovery. A law-enforcement report supports investigation and possible prosecution. A regulator handles matters within its particular jurisdiction. One report does not necessarily replace the others.

Philippine National Police or NBI

For an online or technology-assisted scam, report to the PNP unit handling cybercrime or to the NBI Cybercrime Division or an appropriate regional office. You may also approach the local police, particularly where there are threats, an identifiable local suspect, or an urgent risk to safety.

The NBI maintains an official online complaint page and accepts requests for cybercrime investigative assistance. Its published procedure states that complainants may be interviewed, execute sworn statements, submit supporting documents, and allow examination of a relevant device when necessary. See the NBI’s Cybercrime Division citizen-service guidance.

Bring or prepare:

A government-issued ID;
A clear timeline;
The total loss and an itemized transaction list;
Printed and electronic copies of the evidence;
The financial institution’s complaint reference;
The suspect’s known identifying and account information; and
A sworn statement or affidavit, if requested.

Be accurate about what you personally saw, heard, sent, or received. Clearly identify any detail that came from another person or that you have not independently verified.

Bangko Sentral ng Pilipinas

If the complaint concerns a BSP-supervised bank, e-wallet issuer, remittance company, payment service provider, or other supervised institution, first use that institution’s Financial Consumer Protection Assistance Mechanism.

If the institution does not act or its response remains unsatisfactory, escalate the matter through the BSP Consumer Assistance Mechanism. The BSP currently directs consumers to use the BSP Online Buddy on its official website or Facebook page. A consumer without access to the chatbot may submit the prescribed form and supporting documents to consumeraffairs@bsp.gov.ph.

Attach proof that you first raised the matter with the institution, its response if any, your requested resolution, and the relevant transaction evidence. BSP consumer assistance is regulatory recourse; it is not a substitute for a criminal complaint.

Securities and Exchange Commission

Report investment solicitations, unregistered securities, Ponzi-type schemes, or suspicious lending and financing activity to the SEC. Its official iMessage ticketing system includes channels for complaints and investment-scam reports.

Corporate or business registration alone does not establish that an entity is authorized to solicit investments. Preserve the investment offer, promised returns, payment instructions, recruiter communications, and evidence showing how the public was invited to invest.

Department of Trade and Industry

For a consumer transaction involving an identifiable seller or service provider—such as non-delivery, deceptive sales practices, or refusal to honor an applicable consumer remedy—you may file through the DTI Consumer CARe System.

DTI consumer mediation or administrative relief may be useful when there is a genuine seller-consumer dispute. It may not be sufficient where the supposed seller used a false identity and disappeared, so law-enforcement and financial-institution reports may still be necessary.

National Privacy Commission

If your personal information was misused, maliciously disclosed, or unlawfully processed—for example, to open accounts or impersonate you—you may consider a complaint with the National Privacy Commission. The NPC explains the required form, verification, supporting evidence, and submission methods on its formal complaint page.

A privacy complaint addresses possible violations of data-protection law. It does not replace reports concerning stolen funds or criminal fraud.

The platform where the scam occurred

Report the profile, advertisement, listing, page, website, email address, or merchant account to the relevant platform. Ask the platform to preserve account and transaction records for law enforcement. Save the evidence first because reporting may cause the content or account to disappear.

What law may apply?

“Scam” is a general description, not a single criminal charge. The proper offense depends on the conduct and evidence.

Fraud involving false pretenses may constitute estafa under Article 315 of the Revised Penal Code. In estafa by deceit, the prosecution generally must establish a false pretense or fraudulent act made before or at the time of the fraud, reliance that caused the victim to part with money or property, and resulting damage. The Supreme Court has applied these elements in cases such as People v. Balasa. A broken promise, unpaid debt, poor service, or failed business venture is not automatically estafa; the evidence must show the legally required deceit or other mode of swindling.

If the offense was committed through an information and communications technology system, the Cybercrime Prevention Act of 2012 may also be relevant. Other laws may apply to unauthorized account access, identity misuse, access devices, electronic evidence, investments, consumer transactions, threats, or money laundering.

AFASA separately prohibits specified financial-account scamming conduct, including certain social-engineering schemes and knowing money-mule activities. Do not lend, sell, rent, or allow another person to use your bank or e-wallet account to receive or move suspicious proceeds. If you were recruited as an “agent,” “cash processor,” or “account renter,” stop moving the funds and obtain legal advice before making further transactions.

The final legal classification belongs to investigators, prosecutors, and courts. Give authorities the facts and evidence instead of trying to force the incident into a particular offense.

Will the bank or e-wallet refund the money?

Not automatically.

The result may depend on:

Whether the transaction was truly unauthorized or was approved because of deception;
Whether the institution’s security, authentication, and fraud controls worked as required;
Whether the consumer disclosed credentials or ignored a specific security warning;
How quickly the incident was reported;
Whether funds remain in the recipient account;
Whether the recipient has already transferred or withdrawn the funds;
The institution’s investigation and applicable consumer-protection rules; and
Evidence of system failure, negligence, fraud, or consumer fault.

Do not accept a verbal denial as the end of the matter. Ask for the institution’s written findings, the contractual or regulatory basis for its decision, and information on further review. If unresolved, use the BSP escalation process where the institution is BSP-supervised. Substantial losses or disputed findings may justify advice from a Philippine lawyer.

Can you demand the money back from the scammer?

You may send a written demand when the recipient is identifiable and doing so is safe. A demand should accurately state the transaction, amount, reason for repayment, payment instructions, and reasonable deadline. Keep proof of delivery.

A demand is not always required for every fraud complaint, and it should not delay urgent bank or law-enforcement reporting. Do not meet a suspected scammer alone, threaten unlawful retaliation, or publish unverified personal information online.

Criminal proceedings may include civil liability arising from the offense, subject to procedural rules and the facts of the case. A separate civil action may also be possible, but the proper claim, court, filing fees, venue, and prescriptive period depend on whether the action is based on a contract, fraud, injury to rights, quasi-delict, or another legal basis.

There is no single filing deadline for every scam. Criminal prescription depends on the offense and applicable penalty, while civil periods vary according to the cause of action and relevant documents. Do not assume that a social-media or bank report stops a legal prescriptive period. Seek legal advice promptly if the incident is old, the amount is substantial, the suspect is known, or you are considering court action.

Common mistakes to avoid

Waiting for the scammer to “process” a refund before notifying the bank;
Sending another payment to unlock, insure, verify, or recover the first payment;
Reporting only to the social-media platform;
Deleting chats, resetting the phone, or discarding the SIM before preserving evidence;
Using contact details supplied by the suspected scammer;
Giving an alleged investigator or recovery agent an OTP or remote access;
Posting accusations, identification documents, or account numbers publicly;
Assuming that an account holder’s displayed name proves the person’s true identity;
Treating a police report as a guarantee of reimbursement;
Filing inconsistent accounts of what happened;
Paying a private “hacker” who promises to recover cryptocurrency or trace an account; and
Allowing your own account to receive, split, or forward suspicious funds.

When legal help is urgent

Consult a Philippine lawyer promptly when:

The loss is substantial or involves several victims;
The institution denies liability despite evidence of unauthorized access or control failure;
You signed an investment, loan, settlement, waiver, or quitclaim;
The scammer used your identity to open accounts or incur debt;
You unknowingly received or transferred suspected scam proceeds;
Police, a bank, or another institution identifies you as a possible account mule;
The suspect threatens violence, sexual exploitation, blackmail, or publication of private material;
Assets, land, corporate shares, cryptocurrency, or cross-border transfers are involved;
You need an injunction, attachment, subpoena, cybercrime warrant, or other court process;
A filing deadline may be approaching; or
You are asked to execute an affidavit whose contents you do not fully understand.

If there is an immediate threat to life or physical safety, contact emergency services or the nearest police station at once. Do not arrange an in-person confrontation.

Frequently asked questions

I entered the OTP myself. Should I still report the transaction?

Yes. Explain exactly why you entered it and what the scammer represented. Do not describe the transaction as wholly unauthorized if you personally approved it; instead, state that authorization was obtained through deception. The distinction may affect the investigation and reimbursement decision, but it does not make reporting pointless.

I sent money voluntarily. Can it still be estafa?

Possibly. Many fraud cases involve a victim voluntarily transferring money because of a prior or simultaneous false representation. Whether it is estafa depends on proof of the required deceit, reliance, and damage—not merely on whether you clicked “send.”

Can the recipient account be frozen immediately?

A BSP-supervised institution may temporarily hold identifiable disputed funds under AFASA and BSP rules when the required grounds and procedures exist. The initial administrative hold is limited to five calendar days; a qualified extension may bring the total to no more than 30 calendar days. A longer hold requires a court order. Funds already withdrawn or moved may not be available to hold.

Do I need a police report before contacting the bank?

No. Report to the institution immediately through its 24/7 fraud channel. Supporting documents such as a sworn complaint, affidavit, or police report may then be requested, particularly during the initial holding period.

Should I block the scammer immediately?

Preserve the complete conversation, account details, links, and payment evidence first. You may then block the account if continued contact creates risk. Do not keep engaging merely to conduct your own investigation.

Can I post the scammer’s name and photo online?

Public accusations can create privacy, defamation, safety, and mistaken-identity risks. Account names, photographs, and IDs may themselves be stolen. Give the evidence to the institution, platform, regulator, or law-enforcement agency instead.

What if the scammer is abroad?

Report locally and to every institution or platform involved. Cross-border recovery may be more difficult, but transaction records, recipient accounts, local intermediaries, or platform data may still support an investigation. Significant cross-border losses warrant prompt legal advice.

Is a barangay complaint enough?

Usually not for an online financial scam. Barangay proceedings may have a role in certain disputes between identifiable parties who fall within the Katarungang Pambarangay system, but they do not replace immediate financial-institution reporting or a report to the appropriate cybercrime or investigative authority.

How long should I keep the evidence?

Keep it until all financial, regulatory, criminal, and civil matters have been finally resolved and any applicable review or filing periods have passed. Retain original files and readable backups; do not rely solely on content stored in an account that may later be deleted or suspended.

Official resources

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Procedures and remedies depend on the facts, evidence, institution, and applicable law. Official sources were checked as of July 27, 2026.