Being scammed can leave you feeling embarrassed, angry, and unsure what to do next. The most important thing is to act quickly. Contact the bank, e-wallet, card issuer, or cryptocurrency exchange involved; secure your accounts; preserve every piece of evidence; and report the incident through the appropriate Philippine authorities. Fast action does not guarantee recovery, but it can improve the chance of stopping funds before they are withdrawn or transferred through multiple accounts.

What to Do Immediately After You Discover the Scam

1. Stop sending money and end further access

Do not send another payment, even if the scammer claims it is needed to:

Release your refund
Pay “taxes,” “verification fees,” or “withdrawal charges”
Unlock an investment account
Cancel a supposed arrest warrant
Recover the money already lost
Hire an alleged hacker or recovery agent

A common second-stage scam targets victims who are already desperate to recover their money. The supposed investigator, lawyer, government employee, bank officer, or recovery specialist may simply be another member of the same group.

If the scammer gained remote access to your phone or computer, disconnect the device from the internet and remove remote-access applications such as AnyDesk, TeamViewer, RustDesk, or similar software. Use a different, trusted device when changing passwords.

2. Call the bank, e-wallet, or payment provider immediately

Use the institution’s official hotline or in-app fraud-reporting channel—not a number sent by the scammer.

Tell the institution:

The transaction was connected to suspected fraud
The exact amount, date, and time
The destination account, mobile number, merchant, or wallet
Whether you authorized the transfer yourself
Whether your account was taken over or accessed without permission
Whether your password, one-time password, PIN, card details, or identity documents were exposed

Ask the institution to:

Place a fraud alert on your account
Block further transactions or compromised cards
Log the transaction as disputed
Contact the receiving institution
Trace the destination account
Preserve transaction and access records
Apply a temporary hold to disputed funds when legally available
Give you a case or reference number

Use the phrase “suspected fraudulent transaction” rather than describing the payment merely as an accidental or erroneous transfer. Under current Bangko Sentral ng Pilipinas rules, erroneous transfers are treated differently from transactions involving financial-account fraud.

3. Submit supporting documents within the first five days

Under the implementing rules of the Anti-Financial Account Scamming Act, a bank or e-wallet may place an initial temporary hold on disputed funds for up to five calendar days in covered cases. To support an extended hold, the source-account owner may need to submit a sworn complaint, affidavit, police report, or other supporting documents during that initial period. The extended hold may last up to an additional 25 calendar days, for a maximum of 30 calendar days unless a court orders otherwise. (Lawphil)

Do not wait for a complete police investigation before submitting what you already have. Send the bank:

Your written incident narrative
Transaction receipts
Screenshots or exports of conversations
The scammer’s account details
Your identification document
A police or cybercrime report, if already available
A notarized complaint-affidavit, if requested
Your earlier complaint reference numbers

Keep proof of when and how you submitted each document.

A temporary hold is not automatic in every scam. It may also be ineffective if the money has already been withdrawn, converted to cash or cryptocurrency, or transferred through several accounts.

4. Secure your phone, email, and financial accounts

Change passwords immediately, beginning with the email account connected to your banking and social-media accounts.

Take these steps:

Use unique passwords for email, banking, e-wallets, and social media.
Sign out of all active sessions.
Enable multi-factor authentication.
Replace compromised cards.
Reset banking PINs and security questions.
Check whether new beneficiaries, devices, or recovery emails were added.
Review recent transactions for smaller “test” charges.
Contact your mobile provider if your SIM suddenly lost service.
Warn contacts if your social-media or messaging account was taken over.

If you disclosed a government ID, selfie, signature, tax number, passport, or proof of address, monitor for identity theft. The information may later be used to open accounts, borrow money, register SIM cards, or impersonate you.

Is an Online Scam Considered Estafa in the Philippines?

Many scams may amount to estafa, or swindling, under Article 315 of the Revised Penal Code. However, not every failed transaction, unpaid debt, delayed delivery, or broken promise is automatically a criminal offense.

For estafa through false pretenses, prosecutors generally look for the following:

The offender made a false representation or used deceit
The deceit existed before or at the time the victim parted with money or property
The victim relied on that representation
The victim suffered financial or property damage

The Supreme Court has repeatedly explained that fraud or deceit causing damage is central to estafa. A promise that was genuine when made but was later broken may create a civil dispute rather than criminal estafa unless evidence shows that the dishonest plan existed from the beginning. (Supreme Court E-Library)

When the Cybercrime Prevention Act may apply

If estafa or another offense is committed through a computer system, social-media platform, messaging application, email, or other information and communications technology, Section 6 of Republic Act No. 10175, the Cybercrime Prevention Act of 2012, may apply. Depending on the facts, investigators may also examine computer-related fraud, computer-related identity theft, illegal access, or other cybercrime offenses. (Lawphil)

The exact criminal charge depends on how the scam was carried out. For example:

A fake online seller may face estafa based on false representations.
A person who took over your banking account may face illegal-access and fraud-related charges.
A recruiter collecting fees for nonexistent overseas jobs may violate both estafa laws and recruitment laws.
An investment operator may face securities violations in addition to estafa.
A person renting out a property they do not own may face estafa and civil liability.

The Anti-Financial Account Scamming Act

Republic Act No. 12010, enacted in 2024, specifically addresses financial-account scamming. It penalizes activities such as:

Money muling, including receiving, transferring, or withdrawing proceeds of unlawful activity through another person’s financial account
Buying, selling, renting, or lending financial accounts for fraudulent use
Social-engineering schemes that obtain sensitive identifying information through deception
Organizing or directing groups involved in these activities

The law also requires BSP-supervised financial institutions to maintain appropriate fraud-management systems. In certain circumstances, an institution’s failure to employ adequate controls and the required degree of diligence may become relevant to restitution or liability. A criminal conviction is not always a prerequisite for examining institutional responsibility under the law. (Lawphil)

The BSP rules use a relatively specific definition of social engineering for the temporary-hold mechanism. A victim who personally authorized a bank transfer to a fake seller may therefore face a different assessment from a victim whose credentials were stolen and used to take control of an account. Report either situation immediately, but do not assume that every authorized scam payment automatically qualifies for the same holding process.

Step-by-Step Guide to Reporting a Scam in the Philippines

1. Make a written complaint to the financial institution

After the first hotline call, send a written complaint through the bank or e-wallet’s official email, website, application, or branch.

Your complaint should state:

Your full name and contact information
Your account or wallet number
The disputed transaction details
How the scam began
What the scammer represented
Why you believed the representation
When you discovered the fraud
What information or account access was compromised
The relief you are requesting

Request written confirmation that the institution received the complaint. Save all case numbers, emails, chat transcripts, and recordings legally available to you.

If the institution does not resolve the complaint, you may escalate it to the BSP Consumer Assistance Mechanism. The BSP generally requires consumers to complain first through the institution’s own Financial Consumer Protection Assistance Mechanism. Escalation may then be made through the BSP Online Buddy chatbot or the BSP Consumer Information and Redress form, with proof of the prior complaint.

2. Report the scam to a cybercrime or law-enforcement office

For an online or technology-assisted scam, you may report through one or more of the following:

Office or channel	When it is most useful
CICC Inter-Agency Response Center – Hotline 1326	Rapid reporting and coordination for online scams and cybercrime incidents
NBI Cybercrime Division	Investigation involving online identities, digital accounts, devices, financial records, or organized groups
PNP Anti-Cybercrime Group or the nearest police station	Police documentation, initial investigation, referral, and preservation requests
City or provincial prosecutor’s office	Formal criminal complaint once sufficient facts, evidence, and respondent information are available

The Cybercrime Investigation and Coordinating Center operates the 1326 National Anti-Scam Hotline and related reporting channels. The NBI also provides an online complaint facility and investigative assistance for victims of computer crimes. (Dictionary)

When reporting, bring or submit:

One government-issued ID
A chronological written account
Transaction records
Full conversation history
Account names, numbers, usernames, URLs, phone numbers, and email addresses
Screenshots of advertisements and profiles
Delivery receipts, contracts, invoices, or supposed certificates
Bank and e-wallet complaint references
The device containing the original messages, when requested

A police blotter is useful documentation, but it is not the same as a complete investigation or a complaint filed with the prosecutor.

3. Preserve electronic evidence properly

Screenshots are helpful, but they should not be your only evidence.

Preserve:

The complete conversation, not only selected messages
The account profile and exact username
The full URL of the page, advertisement, or listing
Original emails, including headers where possible
Transaction confirmations and official statements
Call logs, voice messages, photographs, and videos
Wallet addresses and blockchain transaction hashes
Courier records and package labels
The original device on which the communications appeared
Downloaded or exported copies of chats
Dates and times in chronological order

Do not edit, crop, annotate, or repeatedly resave the only copy of important evidence. Make a working copy and retain the original.

Under the Rules on Electronic Evidence, the party relying on an electronic document may need to show that it is authentic. Philippine law recognizes electronic documents, but their source, integrity, and connection to the parties may still need to be established. The Supreme Court has also confirmed that private messages may be admissible when lawfully obtained and properly presented. (Lawphil)

4. Prepare a complaint-affidavit

A complaint-affidavit is a sworn written statement explaining the offense and attaching the supporting evidence. It is commonly used during preliminary investigation before the prosecutor.

A useful complaint-affidavit should explain:

How you encountered the scammer.
What identity the scammer used.
The exact statements or promises made.
Why those statements were false.
How you relied on them.
Each payment or transfer you made.
What happened after payment.
How much you lost.
What steps you took to verify the transaction.
What the bank, platform, or authorities did after your report.

Label attachments clearly, such as:

Annex “A” – Advertisement
Annex “B” – Conversation
Annex “C” – Transfer receipt
Annex “D” – Bank statement
Annex “E” – Demand for refund
Annex “F” – Bank fraud complaint
Annex “G” – Police or cybercrime report

The affidavit normally needs to be signed under oath before a prosecutor, notary public, or other authorized officer. Do not sign it until instructed to do so in the presence of the administering officer.

5. Participate in the preliminary investigation

When a respondent has been identified and a formal complaint is filed, the prosecutor conducts a preliminary investigation to determine whether there is probable cause to bring the case to court.

The respondent may be directed to submit a counter-affidavit. The prosecutor may ask for clarificatory evidence before issuing a resolution.

Actual processing time varies widely. A straightforward case with an identified respondent and complete records may move faster than a case involving:

A fake or stolen identity
Multiple bank accounts
Several victims
Foreign platforms or servers
Cryptocurrency transfers
Delayed responses from service providers
A respondent who cannot be located
Requests for records requiring court authority

Expect the process to take weeks or months rather than days, and potentially longer for cross-border or organized scams.

Which Government Agency Should Handle the Complaint?

A criminal report is often only one part of the response. The correct regulator depends on the kind of transaction.

Fake online seller or deceptive business

File a consumer complaint with the DTI Consumer Care portal when the seller is an identifiable business and the dispute concerns non-delivery, defective goods, misleading advertising, refusal to refund, or another consumer transaction.

DTI mediation may help resolve a legitimate commercial dispute. It is not a substitute for a criminal report when the supposed seller used a false identity, never intended to deliver anything, or operated solely to steal payments. (DTI Consumer Care)

Investment, trading, or lending scam

Report suspicious investment solicitation to the Securities and Exchange Commission through the SEC iMessage system.

Warning signs include:

Guaranteed or unusually high returns
Recruitment commissions
Pressure to reinvest instead of withdrawing
Claims that registration alone authorizes investment-taking
Payments to personal accounts
A dashboard showing profits that cannot actually be withdrawn

A company’s SEC registration does not automatically mean it has authority to solicit investments from the public. Separate registration, licensing, or an approved securities offering may be required. The SEC’s system includes a channel for investment-scam complaints. (Securities and Exchange Commission)

Misuse of personal information or identity theft

A complaint may also be filed with the National Privacy Commission when an organization or person unlawfully collected, disclosed, retained, or misused personal data.

The NPC ordinarily requires a verified or notarized complaint form and supporting evidence. Its process concerns data-privacy violations; it does not by itself reverse a bank transaction or replace a criminal complaint. (National Privacy Commission)

Bank or e-wallet refuses to act

First complete the institution’s internal complaint process. Then escalate the matter to the BSP with:

Your written complaint
The institution’s response, if any
Reference numbers
Transaction documents
A concise explanation of the unresolved issue
The specific action you are requesting

Republic Act No. 11765, the Financial Products and Services Consumer Protection Act of 2022, requires supervised financial-service providers to maintain consumer-redress mechanisms and gives financial regulators enforcement and adjudicatory powers within their jurisdiction. (Supreme Court E-Library)

Can You Recover the Money Through a Civil Case?

A criminal case seeks to prosecute and punish the offender. Recovery of the victim’s loss may also be pursued as civil liability arising from the crime.

Under Articles 100 and 104 of the Revised Penal Code, a person criminally liable for a felony is also civilly liable. Civil liability may include:

Restitution
Reparation of the damage caused
Indemnification for consequential damages

The civil claim arising from the alleged crime is generally treated as included in the criminal action unless it is waived, reserved, or previously filed separately under the procedural rules. (Lawphil)

Recovery remains difficult when the offender:

Used a fake identity
Has no reachable assets
Moved the funds through mule accounts
Is outside the Philippines
Has many competing victims
Converted the money into cash or cryptocurrency

A favorable judgment does not automatically produce payment. Assets must still be located and lawfully reached through enforcement procedures.

When small claims may help

The Supreme Court’s small-claims procedure may be useful for a covered money claim not exceeding ₱1 million, such as a demand for a refund arising from a contract of sale or service.

Small claims is more practical when:

You know the defendant’s real identity and address
There is a clear agreement or transaction
The amount is documented
The dispute is essentially a demand for payment or refund

It is generally not an effective tool for tracing an anonymous scammer, obtaining confidential platform records, or investigating a criminal organization. (Supreme Court of the Philippines)

Evidence and Documents Checklist

Category	Documents to preserve
Identity	Your ID; scammer’s profile, ID copies, photographs, signatures, business information
Communications	Full chats, emails, SMS, call logs, voice messages, video-call details
Money trail	Receipts, bank statements, account numbers, wallet addresses, reference numbers
Advertisement	Listing, sponsored post, website, URL, product images, promised terms
Agreement	Contract, invoice, order form, investment certificate, rental agreement
Complaints	Bank case number, police report, CICC report, NBI complaint, regulator filings
Verification efforts	Searches, calls, demand messages, requests for delivery or refund
Technical details	Email headers, IP information supplied by platforms, device alerts, login records

Create at least two backups. Keep one copy in secure cloud storage and another on a separate device or drive.

Common Mistakes That Can Hurt a Scam Complaint

Waiting because the scammer promised a refund

Scammers often delay victims with excuses until the money has moved beyond the first recipient account. Report first. You can inform the institution later if a genuine refund arrives.

Deleting the conversation after blocking the scammer

Save and export the complete exchange before blocking the account. Preserve evidence showing both the dishonest promise and what happened after payment.

Reporting only to Facebook, TikTok, Telegram, or the marketplace

A platform report may remove the account, but it may not trigger a Philippine criminal investigation or a financial hold. Report separately to the payment provider and the authorities.

Paying a “recovery specialist”

Be suspicious of anyone who guarantees recovery, claims to have secret access to bank systems, or demands cryptocurrency before tracing the funds.

Posting the suspect’s personal information publicly

Public accusations can create separate legal and privacy problems, especially if the identity is uncertain or belongs to another victim whose account was taken over. Give unredacted information to the bank and investigators. Redact account numbers, addresses, IDs, and sensitive details in public posts.

Assuming the recipient account holder is the mastermind

The receiving account may belong to a money mule, an identity-theft victim, or someone who rented or sold an account. Preserve the account details, but allow investigators to determine each person’s role.

Accepting a settlement without written terms

If the respondent offers repayment, document:

The full amount acknowledged
Payment dates and installments
The method of payment
The consequences of default
Whether the settlement affects criminal or civil claims

Do not surrender original evidence merely because partial payment was made.

Special Situations

You personally authorized the transfer

An authorized transfer can still result from fraud. The bank may say that the payment passed authentication, but that does not necessarily determine whether the recipient committed estafa.

The practical difficulty is that an authenticated payment may not be reversed through the same process as an account-takeover transaction. Recovery may depend on whether funds remain in the recipient institution, whether the transaction fits the BSP holding rules, the bank’s fraud controls, and the evidence of deception.

The payment was made by credit card

Immediately dispute the charge with the card issuer and ask about chargeback procedures. Provide proof that the goods or services were not supplied, were misrepresented, or were charged without authority.

The specific AFASA temporary-hold process for account-to-account electronic fund transfers generally does not apply to ordinary credit-card purchases, although a card-funded account transfer may require a different analysis.

The scam involved cryptocurrency

Save:

The wallet address
Transaction hash
Cryptocurrency amount
Date and time
Exchange account information
Screenshots of the investment or trading dashboard
Communications concerning the transfer

Contact the exchange immediately. Blockchain transactions are ordinarily not reversed merely because they were fraudulent, but an exchange may be able to flag an account, preserve identification records, or respond to lawful requests from investigators.

You are an OFW or foreign victim outside the Philippines

A victim does not have to be a Filipino citizen for Philippine authorities to examine conduct connected to the Philippines. Republic Act No. 12010 includes circumstances involving Philippine financial accounts, persons in the Philippines, or damage occurring in the country. (Lawphil)

Ask the receiving investigator or prosecutor whether remote submission is accepted and whether personal appearance will eventually be required.

An affidavit executed abroad may need to be:

Notarized according to the law of the country where it is signed; and
Apostilled if that country is a party to the Apostille Convention.

For a country outside the Apostille Convention, authentication through the appropriate Philippine foreign-service post may be required. Requirements can vary according to the document and the office receiving it, so confirm the required format before paying for notarization, apostille, translation, or courier service. (Apostille Services)

Typical Timelines and Practical Expectations

Action	Practical timing
Contacting the bank or e-wallet	Immediately—preferably within minutes or hours
Initial temporary hold in a covered AFASA case	Up to five calendar days
Submission supporting an extended hold	During the initial hold period
Maximum administrative hold under the BSP rules	Up to 30 calendar days unless extended by a court
Cybercrime or police reporting	As soon as basic evidence is secured
Record gathering and suspect identification	Days to months, depending on institutions and platforms
Prosecutor’s preliminary investigation	Commonly weeks to months; complex cases may take longer
Court proceedings and enforcement	Potentially months or years

No government office, lawyer, investigator, or recovery service can honestly guarantee that stolen funds will be returned. The strongest early cases usually have a clear money trail, preserved original communications, rapid reporting, an identifiable respondent, and funds that have not yet disappeared from the regulated financial system.

Frequently Asked Questions

How fast should I report an online scam?

Report it immediately. Call the bank or e-wallet before spending time preparing a perfect affidavit. You can send additional documents afterward. The first few hours may be critical when funds are still in the recipient account.

Can the bank reverse a transfer that I authorized?

Possibly, but not automatically. The bank may attempt to trace, hold, or request the return of funds. Success depends on the circumstances, the applicable fraud rules, cooperation between institutions, and whether money remains available.

What if the bank says the transaction was successful and final?

Ask for a formal fraud investigation rather than only a transaction-status check. Request a written decision, the basis for it, and the institution’s complaint-escalation procedure. If unresolved, elevate the complaint to the BSP after completing the institution’s internal process.

Do I need a police report before contacting the bank?

No. Contact the financial institution immediately. A police report or sworn complaint may later be requested as supporting evidence, particularly when seeking an extended temporary hold.

Can I file a complaint when I do not know the scammer’s real name?

Yes. Report the usernames, account numbers, telephone numbers, URLs, wallet addresses, and other identifiers you have. Investigators may use lawful procedures to seek subscriber or financial records. Identification may take time and is not guaranteed.

Is a police blotter enough to file an estafa case?

A blotter records the incident, but a formal case normally requires more. Investigators or prosecutors may require a sworn complaint-affidavit, transaction records, electronic evidence, and information identifying or linking the respondent to the deception.

Is every unpaid debt or undelivered order estafa?

No. There must generally be evidence of deceit that existed before or when the victim gave the money or property. A genuine business failure or later inability to pay may be civil rather than criminal. Fake identities, nonexistent goods, fabricated documents, and repeated excuses given to multiple victims may help show fraudulent intent.

Can I file a small-claims case against an online seller?

You may be able to do so when the seller’s real identity and address are known and the claim is a covered money demand within the ₱1 million limit. Small claims cannot ordinarily identify an anonymous account holder or compel a platform to investigate a criminal scheme.

Should I confront the scammer after reporting?

Avoid threats or statements that may alert the scammer to destroy evidence or move funds. Preserve communications and follow investigators’ instructions. A neutral written demand for a refund may be useful, but personal confrontation can create safety and evidentiary risks.

Can a foreigner or OFW file a Philippine scam complaint from abroad?

Yes, particularly when the transaction, offender, financial account, or damage has a Philippine connection. Remote reporting may be possible, but affidavits signed abroad may require notarization and apostille or consular authentication, and authorities may later request personal participation.

Key Takeaways

Report the scam to the bank, e-wallet, card issuer, or exchange immediately.
Ask for a fraud case number, transaction tracing, record preservation, and a temporary hold when available.
Submit supporting documents quickly; covered AFASA cases may begin with a five-day hold period.
Preserve complete original conversations, transaction records, URLs, profiles, and devices.
Report online scams through CICC Hotline 1326, the NBI, the PNP, or the appropriate prosecutor.
Use DTI, SEC, NPC, or BSP channels when the scam also involves consumer, investment, privacy, or financial-service violations.
Do not assume that every failed transaction is estafa; evidence must usually show deceit existing when the victim parted with money.
Avoid recovery-fee scams, public doxxing, and deleting electronic evidence.
Civil recovery is possible in appropriate cases, but a judgment is useful only if the offender and reachable assets can be found.
Fast, organized reporting gives institutions and investigators the best available opportunity to preserve evidence and stop remaining funds.