Losing money to an online scam is stressful, embarrassing, and urgent. The first goal is not to “build a case” right away—it is to stop further loss, preserve evidence, and give your bank or e-wallet the best chance to trace or temporarily hold the funds. This guide explains what to do in the first minutes, where to report an online scam in the Philippines, what laws may apply, what documents to prepare, and what realistic recovery options exist.

What Counts as an Online Scam in the Philippines?

An online scam is usually a fraud committed through the internet, mobile apps, social media, text messages, email, online marketplaces, fake investment platforms, crypto wallets, or e-wallet transfers.

Common examples include:

Fake online sellers who accept payment but never deliver.
“Tasking,” “part-time job,” or “like-and-earn” scams.
Fake bank, GCash, Maya, PayPal, Lazada, Shopee, courier, or government links.
Romance scams and “emergency money” requests.
Fake investment, forex, crypto, casino, or lending schemes.
Account takeover after you share an OTP, password, PIN, or verification code.
“Money recovery” scams where another scammer asks for a fee to recover your first loss.

Under Philippine law, the exact charge depends on the facts. Many online scams may involve estafa under Article 315 of the Revised Penal Code, especially where the scammer used deceit or false pretenses to make the victim part with money. Article 315 punishes swindling or estafa, including fraud through false pretenses, fictitious names, imaginary transactions, and similar deceit. (Lawphil)

Online scams may also fall under Republic Act No. 10175, the Cybercrime Prevention Act of 2012, especially if a computer system, online platform, electronic communication, or digital account was used. The law defines and penalizes cybercrime and includes computer-related fraud and identity-related offenses. (Supreme Court E-Library)

For scams involving banks, e-wallets, or payment accounts, Republic Act No. 12010, the Anti-Financial Account Scamming Act or AFASA, is especially important. AFASA covers financial accounts such as bank accounts, transaction accounts, credit card accounts, e-wallets, and other accounts used for financial products or services. (Lawphil)

The Most Important Thing: Act Fast

The faster you report, the better your chance that funds may still be traced, held, or flagged. Scam money often moves through several accounts within minutes or hours. Waiting until the next day can make recovery much harder.

In the First 30 Minutes

Stop communicating with the scammer. Do not send more money for “tax,” “unlocking,” “verification,” “attorney fees,” or “refund processing.”
Call or message your bank or e-wallet immediately. Use the official hotline inside the app, on the back of your card, or on the official website. Do not use numbers sent by the suspected scammer.
Ask for a fraud report or ticket number. Clearly say: “I am reporting a fraudulent transaction. Please flag the transaction and check if funds can be held, reversed, or traced.”
Change passwords and revoke access. Change your email, online banking, e-wallet, and social media passwords. Log out of all devices. Turn on multi-factor authentication.
Do not delete messages. Even embarrassing chats, payment screenshots, and call logs may become evidence.

The Bangko Sentral ng Pilipinas advises consumers to report unauthorized or suspicious transactions to their bank or financial institution immediately, and to report phishing, vishing, spoofing, identity theft, skimming, and similar incidents to the bank or financial institution.

Legal Basis: Your Rights and Possible Cases

Estafa Under Article 315 of the Revised Penal Code

Estafa is the usual criminal concept people think of when they say “na-scam ako.” In simple terms, estafa involves:

Deceit or abuse of confidence;
The victim giving money, property, or something of value because of that deceit; and
Damage or prejudice to the victim.

The Supreme Court has repeatedly described the core of estafa as the use of fraud or deceit to cause damage or prejudice to another person. (Supreme Court E-Library)

For example, estafa may apply if someone pretended to be a legitimate online seller, investment agent, recruiter, bank employee, courier representative, or buyer, and you sent money because of that false representation.

Cybercrime Under Republic Act No. 10175

RA 10175 matters because online scams often use:

Facebook, Messenger, Instagram, TikTok, Telegram, Viber, WhatsApp, or email;
Fake websites or phishing links;
Online banking or e-wallet apps;
Hacked accounts;
Digital identities and screenshots;
Computer systems or electronic data.

The Cybercrime Prevention Act provides the legal framework for investigating and prosecuting cyber-related offenses. The Department of Justice Office of Cybercrime was created under RA 10175 and is designated as the central authority for cybercrime-related matters. (Department of Justice)

AFASA: Anti-Financial Account Scamming Act

AFASA is particularly useful in scams involving e-wallets, bank transfers, mule accounts, phishing, and social engineering.

The law penalizes money muling, which includes using, borrowing, lending, selling, buying, or renting a financial account to move proceeds from crimes or social engineering schemes. It also covers social engineering schemes, such as using deception or electronic communications to obtain sensitive financial information. (Lawphil)

AFASA also gives financial institutions authority to temporarily hold funds subject to a disputed transaction for a period prescribed by BSP rules, not exceeding 30 calendar days unless extended by a court. A transaction may be considered disputed if it appears unusual, has no clear economic purpose, comes from an unlawful source, or was facilitated through social engineering. (Lawphil)

This does not mean every victim automatically gets a refund. But it gives banks and e-wallet providers a stronger legal basis to act quickly when suspicious funds are still in the financial system.

Financial Consumer Protection Under RA 11765

If your complaint involves a BSP-supervised financial institution, such as a bank, e-money issuer, remittance company, or other covered provider, Republic Act No. 11765, the Financial Products and Services Consumer Protection Act, may apply. The law recognizes financial consumer rights, including protection of consumer assets against fraud and misuse, data privacy, and timely handling and redress of complaints. (Supreme Court E-Library)

Step-by-Step Guide After Losing Money to an Online Scam

Step 1: Report to Your Bank, E-Wallet, or Payment Provider

Do this first, even before going to the police.

Prepare these details:

Information	Why It Matters
Date and time of transaction	Helps trace the transfer quickly
Amount sent	Needed for fraud report and complaint
Reference number	Critical for bank/e-wallet investigation
Sender account	Your account or wallet used
Receiver account, mobile number, or wallet name	Helps identify where the money went
Screenshots of chats or posts	Shows deceit or false promises
Scam link, page, or profile URL	Helps preserve digital evidence

Ask the institution to:

Flag the transaction as fraudulent.
Check if funds can be temporarily held.
Coordinate with the receiving institution.
Give you a written acknowledgment or ticket number.
Tell you the expected timeline and required documents.

Under AFASA, institutions involved in disputed transactions must initiate coordinated verification upon receipt of a complaint, information from another institution, or fraud-management detection, regardless of whether the funds remain in the banking system. (Lawphil)

Step 2: Preserve Digital Evidence Properly

Do not rely on one screenshot. Make a folder and organize everything.

Save:

Screenshots of the scammer’s profile, page, marketplace listing, or website.
Full chat history, including dates and usernames.
Payment receipts and transaction confirmations.
Bank or e-wallet reference numbers.
Phone numbers, email addresses, usernames, account names, and links.
Call logs and SMS messages.
Delivery tracking numbers, if any.
Proof that the item, service, job, or investment was fake.
Your fraud report ticket numbers.

If possible, use screen recording to capture the profile, chat thread, URL, and account details in one continuous video. Also export chats when the app allows it.

The Philippine Rules on Electronic Evidence allow electronic documents or electronic data messages to be offered as evidence, and the Supreme Court has also recognized the admissibility of photos and Messenger messages obtained by private individuals when properly presented. (Lawphil)

Step 3: Report to Law Enforcement

For online scams, the usual law enforcement options are:

Office	Best For	Practical Notes
PNP Anti-Cybercrime Group (PNP-ACG)	Online scams, hacked accounts, phishing, social media fraud	PNP-ACG has an e-Complaint Desk and official complaint channels. (www.foi.gov.ph)
NBI Cybercrime Division	Serious cybercrime complaints, organized scams, identity-related fraud	NBI’s Citizen’s Charter provides for walk-in filing, preliminary interview, sworn statements, and evidence review. (National Bureau of Investigation)
CICC / Inter-Agency Response Center	Quick reporting of cyber fraud or online harm	CICC-related public advisories direct the public to report cyber fraud through Hotline 1326. (Facebook)
Local police station	Initial blotter, urgent local assistance, identified local suspect	Useful, but a blotter alone is not the same as a cybercrime investigation.

At the NBI Cybercrime Division, the Citizen’s Charter describes the intake process as including filing of the complaint or request for investigation, preliminary interview, sworn statements or affidavits, and submission or examination of relevant devices or supporting documents. It lists no fees for that investigative assistance service and indicates an initial processing time for the listed intake steps. (National Bureau of Investigation)

What to Bring When Filing

Bring originals and photocopies if filing in person:

Valid government ID or passport.
Printed complaint narrative.
Screenshots and printed evidence.
USB drive containing digital evidence.
Transaction receipts and reference numbers.
Bank or e-wallet fraud ticket number.
Sworn statement or affidavit, if already prepared.
Device used in the transaction, if investigators need to inspect it.

A simple complaint narrative should answer:

Who contacted you?
What did they promise or represent?
Why did you believe them?
How much did you send?
When and how did you send it?
What happened after payment?
What evidence do you have?
What bank, e-wallet, account, number, or profile was used?

Step 4: Escalate Financial Institution Complaints to BSP if Needed

For banks and BSP-supervised financial institutions, BSP’s Consumer Assistance Mechanism is generally a second-level recourse. This means you should first report to the financial institution’s own Financial Consumer Protection Assistance Mechanism or customer service channel. If you are not satisfied with the institution’s response, you may escalate to BSP through the BSP Online Buddy or other BSP consumer assistance channels.

BSP states that complaints filed by email or postal mail are evaluated by a Consumer Specialist and, if necessary, acted on or referred to the financial institution within seven banking days from receipt. (Bureau of the Treasury)

When escalating to BSP, include:

Your complaint summary.
Your requested resolution.
Your contact details.
Copy of your complaint to the bank or e-wallet.
The bank or e-wallet’s reply, if any.
Supporting documents and screenshots.

Do not send your PIN, password, full card details, OTP, passport, or unnecessary sensitive IDs unless the official complaint form specifically requires a safe redacted copy. BSP itself warns consumers not to share PINs, passwords, account numbers, credit card or ATM card numbers, passbooks, passports, or other identification cards unnecessarily in BSP-CAM submissions.

Step 5: Report Online Seller Issues to DTI When Appropriate

If the scam involved an online seller, store, or merchant, you may also consider a complaint with the Department of Trade and Industry.

DTI’s e-commerce FAQ states that consumer complaints against online sellers may be sent to the DTI Fair-Trade Enforcement Bureau, and that complaints may still be filed even if the seller is not on a major e-commerce platform. (DTI ECommerce)

DTI is more useful when there is a real seller, registered business, platform merchant, refund dispute, warranty issue, or non-delivery problem. If the “seller” is a fake identity with no real business registration, DTI may refer the matter to cybercrime authorities. (Philippine Information Agency)

Step 6: If It Was an Investment Scam, Check SEC Issues

If the scam involved “guaranteed profits,” pooled funds, crypto trading, forex, casino betting, tasking investments, or recruitment of investors, it may involve securities or investment fraud issues.

RA 11765 treats investment fraud as deceptive solicitation of investments from the public, including Ponzi-like schemes and investment schemes offered without the required license or permit. (Alburo Law Offices)

In practical terms, victims of investment scams often need to preserve:

The investment pitch or presentation.
Promised returns.
Group chat announcements.
Proof of deposits.
Names of recruiters or uplines.
SEC registration claims, certificates, or permits shown by the scammer.
Withdrawal denial messages.

A company’s SEC registration alone does not automatically mean it is licensed to solicit investments from the public.

Step 7: Consider Civil Recovery if the Scammer Is Identified

A criminal complaint may punish the offender, but actual recovery can still be difficult if the money is gone or the scammer used a mule account.

If the person is identified and the amount is within the small claims threshold, a civil small claims case may sometimes be an option for recovery of money. The Supreme Court has increased the small claims threshold to ₱1,000,000, regardless of whether the case is filed inside or outside Metro Manila. Small claims are for money owed under covered transactions such as services, sale of personal property, loans, lease, and similar money claims. (Supreme Court of the Philippines)

However, many online scam cases are not simple civil collection cases because the identity of the scammer is unknown, the account holder may be a mule, or the case involves criminal fraud. In those situations, law enforcement and financial institution reporting are usually the priority.

Common Mistakes That Hurt Online Scam Victims

Waiting Too Long Before Reporting

Many victims wait because they feel ashamed or hope the scammer will refund them. Delay gives the scammer time to drain accounts, delete profiles, change names, and move funds through more wallets.

Deleting Chats or Blocking Too Early

Blocking may be emotionally satisfying, but first preserve evidence. If you block immediately without saving the profile, username, transaction details, and chat history, you may lose important information.

Posting Accusations Without Evidence

Public warning posts can help others, but be careful with names, faces, and accusations if the identity is uncertain. You do not want a defamation or privacy issue distracting from your complaint. A safer approach is to report to the platform and authorities, preserve evidence, and avoid adding unverified claims.

Sending More Money to “Recover” the First Loss

Real banks, police, courts, and government agencies do not require you to pay a random “unlocking fee” to recover scam funds. Be especially careful of people who message victims saying they are hackers, lawyers, agents, or insiders who can recover funds for an advance fee.

Assuming the Account Name Is the Real Scammer

The receiving bank or e-wallet name may belong to a mule, a stolen identity, or someone whose account was rented, bought, borrowed, or compromised. AFASA specifically targets money mule activities involving the use, lending, selling, buying, renting, or recruitment of financial accounts for scam proceeds. (Lawphil)

Special Notes for OFWs and Foreigners

If you are outside the Philippines, you can still preserve evidence, report to your bank or e-wallet, and file online reports where available. If a Philippine affidavit, sworn statement, or Special Power of Attorney is needed, execution abroad may require consular notarization at a Philippine Embassy or Consulate, or local notarization followed by apostille depending on the country and document type. Philippine Embassy guidance explains that private documents such as affidavits, SPAs, sworn statements, and similar documents may be consularized when executed before consular officials, while other documents may follow apostille procedures where applicable. (philembassy.org.au)

Foreigners dealing with Philippine banks, e-wallets, sellers, or suspects should keep passport pages, visa or entry details if relevant, proof of Philippine transaction, and evidence showing why Philippine authorities or Philippine financial institutions are involved.

Required Documents Checklist

Purpose	Documents to Prepare
Bank/e-wallet fraud report	Transaction receipt, reference number, screenshots, account details, ID
PNP/NBI cybercrime complaint	Valid ID, complaint narrative, screenshots, links, phone numbers, emails, receipts, device if needed
BSP escalation	Proof you first complained to the financial institution, ticket number, institution reply, supporting documents
DTI complaint	Seller name, store link, order details, proof of payment, delivery status, refund requests
NPC privacy complaint	Evidence of misuse of personal data, identity theft, unauthorized disclosure, notarized complaint form if required
Small claims case	Identified defendant, address, proof of debt or payment, demand letter, receipts, affidavits

Realistic Timelines

Action	Typical Practical Timeline
Bank/e-wallet fraud report	Same day; urgent reports should be made immediately
Possible fund hold under AFASA	Up to 30 calendar days unless extended by court, depending on facts and BSP rules
NBI/PNP intake	May be same day, but investigation can take weeks or months
BSP email/mail evaluation	BSP states evaluation or referral may occur within seven banking days from receipt
Platform takedown requests	Often days to weeks; faster if many users report
Criminal case build-up	Often months, especially if records, warrants, telco data, or bank coordination are needed
Small claims case	Faster than ordinary civil cases, but still depends on service of summons and court calendar

Frequently Asked Questions

Can I still recover money sent to a scammer in the Philippines?

Sometimes, but it depends on speed and whether the funds are still traceable or still in the banking or e-wallet system. Report immediately to your bank or e-wallet and ask if the receiving account can be flagged or the transaction can be placed under dispute. AFASA allows temporary holding of disputed funds under conditions set by law and BSP rules. (Lawphil)

Should I go to the barangay after an online scam?

A barangay blotter may help document what happened, especially if the suspect is known locally. But for online scams, it is usually not enough. Report to your bank or e-wallet first, then to PNP-ACG, NBI Cybercrime Division, or other proper cybercrime channels.

Is an online scam estafa or cybercrime?

It can be both, depending on the facts. Estafa focuses on deceit and damage. Cybercrime applies when the fraud is committed through computer systems, online platforms, electronic communications, or digital accounts.

What if I voluntarily sent the money?

You can still be a victim of fraud. Many scam cases involve victims voluntarily sending money because they were deceived. The key issue is whether the scammer used false pretenses, fraudulent acts, impersonation, or social engineering before or during the transaction.

What if I gave my OTP or password?

Report immediately. The bank or e-wallet will investigate whether there was unauthorized access, social engineering, or customer negligence. BSP warns that consumers should not provide personal information, account details, or passwords to random senders, and that banks or financial institutions will not ask for such information through email.

Can I ask the bank for the scammer’s full identity?

Usually, the bank or e-wallet will not disclose another customer’s personal information directly to you because of privacy and banking rules. Law enforcement, BSP processes, court orders, cybercrime warrants, or authorized investigations may be needed.

Can screenshots be used as evidence?

Yes, screenshots and digital messages may be useful, but they must be properly preserved and authenticated. Keep the original device, URLs, timestamps, account names, and full conversation whenever possible. The Supreme Court has recognized the admissibility of Messenger photos and messages obtained by private individuals, subject to evidentiary rules. (Supreme Court of the Philippines)

Should I file with PNP or NBI?

Either may be appropriate. PNP-ACG is commonly used for cybercrime complaints and online scam reports. NBI Cybercrime Division also handles investigative assistance for computer crime victims. Choose the office that is accessible and responsive, but do not delay your bank or e-wallet report while deciding.

What if the scammer used a registered SIM?

A registered SIM does not guarantee easy identification. The SIM may be fraudulently registered, stolen, sold, or used by someone else. RA 11934, the SIM Registration Act, penalizes false or fictitious information in SIM registration, caller ID manipulation with intent to defraud, and sale or transfer of registered SIMs without compliance with registration requirements. (Supreme Court E-Library)

Can a foreigner file a complaint for an online scam in the Philippines?

Yes, if the transaction, suspect, account, platform activity, or financial institution has a Philippine connection. Foreign complainants should prepare identification, proof of transaction, screenshots, and properly notarized or apostilled documents if Philippine authorities require formal sworn submissions from abroad.

Key Takeaways

Report the scam to your bank or e-wallet immediately; speed matters.
Preserve screenshots, links, receipts, chat history, usernames, numbers, and transaction references.
Online scams may involve estafa, cybercrime, AFASA violations, consumer protection issues, data privacy issues, or investment fraud.
PNP-ACG, NBI Cybercrime Division, CICC, BSP, DTI, SEC, and NPC may each be relevant depending on the type of scam.
AFASA gives financial institutions a legal basis to temporarily hold disputed funds in proper cases, but recovery is never automatic.
A barangay blotter is not a substitute for bank reporting or cybercrime reporting.
Do not pay “recovery fees” to strangers claiming they can get your money back.
The best evidence is organized, complete, timestamped, and preserved before accounts or messages disappear.