If you sent money to a scammer through a Philippine bank transfer, InstaPay, PESONet, QR payment, or e-wallet, the first few hours matter. Your goal is not only to “report the scam” but to create a paper trail fast enough for the bank, e-wallet provider, cybercrime authorities, and regulators to trace the funds, preserve evidence, and possibly place a temporary hold on the receiving account. This guide explains what to do immediately, what Philippine laws apply, where to report, what documents to prepare, and what to realistically expect.

First: Act Fast, But Do Not Panic

Online scams involving bank transfers usually move quickly. The scammer may withdraw the money, transfer it to another account, convert it to crypto, or pass it through a “mule account” within minutes.

Do these immediately:

Call or message your bank or e-wallet provider through official channels.
- Use the hotline inside the official app or website.
- Avoid numbers sent by the scammer.
- Say clearly: “I am reporting a fraudulent/disputed transaction and requesting urgent tracing and temporary holding of funds if still available.”
Get a case number or ticket number.
- Write down the date, time, agent name, and exact instructions given.
- Screenshot the report confirmation.
Do not delete chats, posts, emails, call logs, receipts, or screenshots.
- Even embarrassing messages can be evidence.
- Keep the scammer’s profile URL, phone number, email address, bank account name, account number, and transaction reference number.
Change passwords and secure your accounts.
- Change online banking, e-wallet, email, and social media passwords.
- Log out other devices.
- Enable multi-factor authentication.
- Report lost SIMs or compromised numbers to your telco.
Do not pay “recovery agents.”
- Many victims are scammed a second time by people claiming they can “hack back” or “retrieve the money” for a fee.

Is an Online Bank Transfer Scam a Crime in the Philippines?

Yes, depending on the facts, an online bank transfer scam may involve several Philippine laws.

The most common legal basis is estafa, or swindling, under Article 315 of the Revised Penal Code. The Supreme Court has repeatedly described estafa as fraud or deceit that causes damage capable of monetary valuation. In simple terms, if someone deceived you into sending money and you suffered financial loss, estafa may be involved. (Supreme Court E-Library)

If the scam used the internet, fake online accounts, phishing links, unauthorized access, or stolen identity information, Republic Act No. 10175, the Cybercrime Prevention Act of 2012, may also apply. Computer-related fraud and computer-related identity theft are specifically recognized under the law and its implementing rules. (Supreme Court E-Library)

If bank accounts, e-wallets, or other financial accounts were used to receive, move, or hide scam proceeds, Republic Act No. 12010, the Anti-Financial Account Scamming Act or AFASA, is especially important. AFASA covers financial accounts such as deposit accounts, transaction accounts, and e-wallets, and penalizes money muling, social engineering schemes, and related financial account offenses. (Supreme Court E-Library)

Other laws may also apply:

Situation	Possible legal basis
You were tricked into sending money for a fake product, investment, job, romance, loan, or emergency	Estafa under Article 315, Revised Penal Code
The scam used fake log-in pages, hacked accounts, phishing, or identity theft	RA 10175, Cybercrime Prevention Act
A bank account or e-wallet was sold, rented, borrowed, or used as a mule account	RA 12010, Anti-Financial Account Scamming Act
Your card number, PIN, OTP, account number, or access credential was misused	RA 8484, Access Devices Regulation Act, as amended
The scam involved public solicitation of investments, Ponzi returns, trading bots, crypto “guaranteed profits,” or unregistered securities	RA 11765 and RA 8799, usually under SEC jurisdiction
A bank or e-wallet failed to handle your complaint properly	RA 11765, Financial Products and Services Consumer Protection Act
You suffered civil damages from fraud, bad faith, or negligent acts	Civil Code Articles 19, 20, and 21

Civil Code Articles 19, 20, and 21 are useful because they recognize liability for acts done in bad faith, contrary to law, or contrary to morals, good customs, or public policy. These provisions can support a civil claim for damages alongside, or sometimes separate from, a criminal complaint. (Lawphil)

What the Bank or E-Wallet Can Do Under AFASA

Many victims say, “The bank told me they cannot reverse it.” That may be true in some cases, especially if the money has already been withdrawn. But that does not mean the report is useless.

Under AFASA, financial institutions may temporarily hold funds subject to a disputed transaction within the period prescribed by the Bangko Sentral ng Pilipinas (BSP), not exceeding 30 calendar days, unless extended by a court. A transaction may be treated as disputed if there is reasonable ground to believe it is unusual, has no clear economic purpose, comes from an illegal source, or was facilitated through social engineering. (Supreme Court E-Library)

The BSP’s AFASA regulations also discuss an initial holding period of not more than five calendar days and a coordinated verification process among involved financial institutions. If funds were successfully held, the coordinated verification should generally be completed within the 30-calendar-day holding period unless a court extends it; if no funds were held, verification should generally be completed within 30 calendar days, extendable up to 60 calendar days for meritorious reasons. (Bureau of the Treasury) (Bureau of the Treasury)

This is why wording matters when you report. Use clear phrases such as:

“fraudulent/disputed transaction”
“possible social engineering scam”
“request for urgent tracing”
“request for temporary holding of disputed funds if still available”
“request for coordinated verification with the receiving financial institution”

AFASA does not guarantee recovery. If the money has already been withdrawn or transferred onward, the bank may not be able to return it immediately. But your timely complaint can help establish whether the bank acted with the required level of diligence. AFASA also provides that institutions may be liable for restitution if they fail to employ adequate risk management systems or fail to exercise the highest degree of diligence, and conviction is not a prerequisite for restitution under the law. (Supreme Court E-Library)

Step-by-Step Guide After an Online Scam Involving Bank Transfers

1. Report to Your Own Bank or E-Wallet Immediately

Start with the account you used to send the money.

Prepare these details before calling:

Your full name and account number or registered mobile number
Transaction date and exact time
Amount sent
Reference number or transaction ID
Name of receiving bank or e-wallet
Receiver’s account name, account number, mobile number, or QR details
Screenshots of the transfer receipt
Brief description of how you were deceived

Ask for:

A fraud or dispute ticket number
Confirmation that the transaction was reported as fraudulent or disputed
Whether they can coordinate with the receiving financial institution
Whether additional documents are required
Whether a police report or complaint-affidavit is needed

Do not rely only on a social media comment or app chat without a reference number.

2. Report to the Receiving Bank or E-Wallet Too

If you know the receiving bank, account name, account number, or e-wallet number, report there as well.

Some institutions will only accept complaints from their own customers. Still, give them the transaction reference number and request that they flag the account for fraud review. If they refuse to give details due to bank secrecy or privacy rules, do not argue endlessly at the branch. Instead, focus on creating a written record and filing with the proper law enforcement or regulatory office.

Under AFASA, secrecy of bank deposits and data privacy restrictions do not prevent the BSP’s authorized investigation of financial accounts involved in prohibited acts, and coordinated verification can occur among financial institutions and competent authorities. (Supreme Court E-Library)

3. Preserve Digital Evidence Properly

Screenshots help, but they are stronger when complete and organized.

Save:

Full chat history, not just selected messages
Profile links, usernames, account IDs, and URLs
Phone numbers, email addresses, Telegram handles, Viber numbers, WhatsApp numbers, Facebook URLs, marketplace listings, and website links
Proof of payment and transaction receipts
Bank or e-wallet statements showing the debit
Delivery tracking numbers, fake invoices, or bogus contracts
Voice notes, call logs, and SMS messages
Any ID, business permit, DTI certificate, SEC registration, or screenshot the scammer sent

For screenshots, include the date, time, username, and platform when possible. Export chats if the app allows it. Keep original files. Do not edit images except to make separate copies for printing.

4. File a Cybercrime or Fraud Complaint

For online scams, the usual agencies are:

Office	When to use it	Practical notes
PNP Anti-Cybercrime Group (PNP-ACG)	Online scams, phishing, hacked accounts, fake profiles, mule accounts	A PNP FOI response points complainants to the PNP-ACG eComplaint portal and ACG email for cybercrime reports. (www.foi.gov.ph)
NBI Cybercrime Division / NBI	Online fraud, identity theft, organized scams, cross-platform schemes	The NBI maintains a “Report to NBI” page and regional/district office information. (National Bureau of Investigation)
CICC / I-ARC Hotline 1326	Fast reporting of online scams, cyber fraud, phishing, romance scams, impersonation, investment fraud	DICT has described Hotline 1326 as the government’s 24/7 central number for reporting online scams, with enforcement handled by PNP-ACG and NBI Cybercrime Division. (Philippine Information Agency)
DOJ Office of Cybercrime	Cybercrime policy, coordination, preservation or international cybercrime concerns	RA 10175 created the DOJ Office of Cybercrime as a central authority for cybercrime matters. (Department of Justice)

A police blotter can help show that you reported the incident, but it is usually not enough by itself. For a serious complaint, prepare a complaint-affidavit narrating what happened, attach your evidence, and submit it to PNP-ACG, NBI, or the prosecutor’s office as appropriate.

5. Escalate to BSP if the Bank or E-Wallet Mishandles the Complaint

If your complaint against a bank, e-money issuer, or other BSP-supervised financial institution remains unresolved, you may elevate the matter to the BSP Consumer Assistance Mechanism. BSP states that unresolved concerns may be filed through BSP Online Buddy or by submitting a Complaints, Inquiries and Requests form to its consumer affairs email. (Bureau of the Treasury)

Escalate to BSP when:

The bank refuses to give you a case number.
The bank does not act on a timely fraud report.
The bank gives inconsistent instructions.
You suspect the bank failed to coordinate or investigate.
Your complaint involves unauthorized access, failed security controls, or mishandling of disputed funds.

BSP will not act as your private prosecutor, but it can require explanations from supervised institutions and may address consumer protection or regulatory violations.

6. Report to SEC or DTI if the Scam Fits Their Jurisdiction

Not every scam is handled by the same agency.

If the scam involved “investments,” “trading,” “crypto packages,” “guaranteed daily income,” “staking,” “AI trading bots,” “franchise income,” or recruitment of investors, file with the Securities and Exchange Commission. SEC’s iMessage portal allows users to open tickets and submit complaints. (Securities and Exchange Commission)

If the scam involved an online seller or merchant, report to the platform first and consider filing with DTI. DTI’s e-commerce FAQ says complaints against online sellers may be sent to the DTI Fair-Trade Enforcement Bureau, with a copy to its e-commerce office; DTI also notes practical online shopping precautions such as using secure payment options and avoiding the sharing of confidential information. (DTI ECommerce)

If the “seller” is not a real merchant but a fake identity using a mule account, PNP-ACG or NBI will usually be more relevant than ordinary consumer mediation.

Required Documents Checklist

Document	Why it matters
Valid government ID or passport	Proves your identity as complainant
Proof that you own or control the sending account	Shows you are the victim/source account owner
Transfer receipt or transaction confirmation	Proves amount, time, and reference number
Bank or e-wallet statement	Confirms debit from your account
Screenshots of scam messages and posts	Shows deceit, representations, and inducement
Profile links, phone numbers, emails, URLs	Helps identify accounts and preserve digital evidence
Complaint ticket numbers from bank/e-wallet	Shows timely reporting
Police report or complaint-affidavit	Often requested by banks and useful for investigation
Proof of delivery failure, fake tracking, or broken promise	Useful in online seller scams
Authorization letter or SPA	Needed if someone else files or follows up for you

For sworn documents, a complaint-affidavit is usually signed under oath before a prosecutor, investigating officer, notary public, or consular officer if executed abroad. Foreign public documents intended for use in the Philippines may need apostille or consular authentication depending on where they were issued and the type of document. DFA’s apostille materials explain that apostille applies to public documents previously subject to authentication. (Apostille Services)

Typical Timeline and What to Expect

Time from discovery	What to do	Why it matters
First 10–30 minutes	Call your bank/e-wallet and report a fraudulent/disputed transaction	This is the best chance of tracing or holding remaining funds
Same day	Report to receiving bank/e-wallet, if known	The receiving account may be flagged faster
Same day to 48 hours	File with PNP-ACG, NBI, or Hotline 1326	Digital evidence and account movement can disappear quickly
Within a few days	Prepare complaint-affidavit and evidence folder	Needed for formal investigation or prosecutor review
Within bank deadline	Submit any additional bank forms, IDs, or police report	Avoids closure of the bank dispute for incomplete documents
During AFASA verification	Cooperate with bank requests for documents and clarification	Coordinated verification depends on timely information
If unresolved	Escalate to BSP, SEC, DTI, or DOJ depending on issue	Regulator or agency pressure may help move the case

Recovery is hardest when the money has already left the receiving account. But a fast and complete report can still help identify mule accounts, support criminal prosecution, strengthen a claim against negligent institutions, and prevent the same account from victimizing others.

Temporary Hold vs. Freeze Order: Know the Difference

A temporary hold under AFASA is an action by a financial institution on disputed funds, subject to BSP rules and timelines.

A freeze order in money laundering cases is different. It is generally connected with proceedings under the Anti-Money Laundering Act and is handled through the Anti-Money Laundering Council and the Court of Appeals. The Supreme Court has described freeze order petitions as being filed by the AMLC before the Court of Appeals for monetary instruments or properties related to unlawful activity. (Supreme Court of the Philippines)

This means an ordinary victim usually does not walk into court and personally obtain an immediate freeze order over the scammer’s bank account. In practice, the victim builds the record through bank reports, law enforcement complaints, and supporting evidence so the proper institutions can act within their authority.

Common Mistakes That Hurt Scam Victims

Waiting Too Long Before Reporting

Some victims wait because they feel embarrassed or hope the scammer will refund them. Delay gives the scammer time to empty accounts and delete evidence.

Only Posting on Social Media

Public posts may warn others, but they do not replace a bank complaint, cybercrime report, or complaint-affidavit. Be careful not to post unverified accusations against innocent people whose IDs or accounts may have been misused.

Sending More Money to “Unlock” a Refund

Scammers often ask for taxes, clearance fees, processing fees, courier fees, or “anti-money laundering clearance” to release your supposed refund. This is usually part of the scam.

Deleting the Chat Out of Anger or Shame

Deleted evidence may be hard to recover. Preserve first, then block later.

Assuming the Account Name Is the Scammer’s Real Name

Many receiving accounts are mule accounts. The account holder may be a recruited person, a fake identity, a trafficked person, or someone who sold or lent an account. AFASA specifically targets money mule activities such as using, borrowing, selling, lending, buying, renting, or recruiting others to use financial accounts for proceeds of crimes or social engineering schemes. (Supreme Court E-Library)

Believing Barangay Mediation Can Freeze Money

Barangay conciliation can help in some disputes between known individuals in the same locality, but it is usually not the right first move for cyber scams involving unknown persons, bank transfers, mule accounts, or cross-border digital evidence. Barangay officials cannot order a bank or e-wallet to freeze funds.

Special Notes for OFWs, Filipinos Abroad, and Foreign Victims

You do not have to be physically in the Philippines to begin preserving evidence and reporting the scam.

If you are abroad:

Report immediately to your sending bank, e-wallet, remittance provider, or card issuer.
Report to the Philippine receiving bank or e-wallet if identifiable.
Use official online channels of PNP-ACG, NBI, CICC, BSP, SEC, or DTI depending on the scam type.
Prepare a detailed sworn statement.
If someone in the Philippines will file or follow up for you, execute a Special Power of Attorney or authorization.
If documents are executed abroad, check whether they need consular notarization, apostille, or local authentication.

Foreigners can also file complaints in the Philippines when the scam involved Philippine financial accounts, Philippine-based perpetrators, or damage connected to the Philippines. Under AFASA, jurisdiction may exist when elements were committed in the Philippines, when Philippine computer systems or financial institutions were used, or when damage was caused to a person in the Philippines or whose financial account is maintained with an institution operating in the Philippines. (Supreme Court E-Library)

Frequently Asked Questions

Can I still recover money sent to a scammer’s bank account?

Possibly, but it depends on speed and whether the funds are still in the banking or e-wallet system. Report immediately and request tracing and temporary holding of disputed funds. If the money has already been withdrawn, recovery becomes harder, but your report can still support investigation, restitution, civil claims, and regulatory action.

Can my bank reverse an InstaPay or PESONet transfer?

Not automatically. Bank transfers are generally processed based on your instruction. However, if the transfer was fraudulent, induced by social engineering, or connected to a disputed transaction, the bank may coordinate with the receiving institution under AFASA and BSP rules. A reversal is more realistic if the funds are still available and the verification process supports your claim.

Is a police blotter enough for a bank scam report?

Usually no. A blotter is only an incident record. Banks, e-wallets, PNP-ACG, NBI, or prosecutors may require a complaint-affidavit, transaction proof, screenshots, IDs, and other evidence. Still, a blotter can help show that you reported the matter promptly.

Should I report to PNP or NBI?

For online scams, either PNP-ACG or NBI Cybercrime may be appropriate. PNP-ACG is often used for cybercrime complaints and regional police coordination. NBI may be useful for more complex or organized schemes, identity theft, and cases requiring national investigative resources. The important point is to file with a competent agency and keep proof of filing.

What if the scammer used GCash, Maya, or another e-wallet?

Report to your own provider and to the receiving e-wallet provider if known. E-wallets are financial accounts for purposes of AFASA when used to avail of financial products or services. Prepare the mobile number, wallet name, reference number, amount, and screenshots. Also file a cybercrime complaint if deception, phishing, fake identity, or mule accounts were involved.

What if I voluntarily sent the money?

You can still report it. Many scams are “authorized push payment” scams, meaning the victim personally sent the money because of deceit. The issue is not only whether you clicked send, but whether you were deceived, manipulated, impersonated, or socially engineered into doing so.

Can the bank tell me the scammer’s full address or account details?

Usually not directly. Banks may cite bank secrecy, data privacy, and internal policies. Under AFASA, however, financial account information can be investigated and shared through proper BSP, law enforcement, and competent authority channels. Victims should focus on filing complete reports rather than forcing branch staff to disclose restricted information.

What if the receiving account belongs to an innocent person?

This is common in mule account cases. The account holder may have been recruited, paid, deceived, or even trafficked. Provide accurate evidence and avoid public accusations beyond what you can prove. False or malicious reports that cause improper holding of funds can also create liability under AFASA.

Do I need a lawyer to file a scam complaint?

Not always. Many victims file initial bank reports and cybercrime complaints themselves. A lawyer may be useful if the amount is large, the bank denies responsibility, multiple victims are involved, the case requires a formal complaint-affidavit, or you plan to pursue civil recovery or regulatory escalation.

What should I do if the bank closes my complaint?

Ask for the written reason for closure, the investigation result, and the documents they relied on. If you believe the handling was inadequate, escalate through the bank’s consumer assistance channel first, then to BSP if the institution is BSP-supervised. Attach your ticket numbers, evidence, timeline, and proof that you reported promptly.

Key Takeaways

Report the scam to your bank or e-wallet immediately and ask for tracing, temporary holding, and coordinated verification.
Get a case number and keep a written timeline of every report and follow-up.
Preserve complete digital evidence: chats, receipts, account details, URLs, phone numbers, and screenshots.
File with PNP-ACG, NBI, or Hotline 1326 for online scam and cybercrime reporting.
Escalate to BSP for unresolved bank or e-wallet handling issues, SEC for investment scams, and DTI for online seller complaints.
AFASA allows temporary holding of disputed funds, but it does not guarantee recovery if the money has already been withdrawn or moved.
A police blotter is helpful but usually not enough; prepare a complaint-affidavit and organized evidence.
Avoid recovery scams, public accusations without proof, and any further payments to the scammer.