If you lost money to an online scammer in the Philippines, act quickly but do not panic. The first goal is to stop further loss, preserve evidence, and give your bank, e-wallet provider, police, or cybercrime investigators enough information to trace the transaction before records disappear or funds are moved again. This guide explains what to do immediately, which Philippine laws may apply, where to report the scam, what documents to prepare, and what realistic recovery options you may have.

What Counts as an Online Scam in the Philippines?

An online scam usually involves someone using the internet, mobile apps, social media, text messages, email, fake websites, or digital payment channels to deceive a victim into sending money or giving access to an account.

Common examples include:

Fake online sellers on Facebook Marketplace, Instagram, TikTok, Shopee, Lazada, Carousell, or Telegram
“Task” or “part-time job” scams requiring deposits before withdrawal
Fake GCash, Maya, bank, or courier links used to steal OTPs or passwords
Romance scams where the scammer builds trust before asking for money
Fake investment, crypto, forex, casino, or “guaranteed return” schemes
Impersonation of banks, government agencies, delivery riders, police, lawyers, or relatives
Account takeover where your e-wallet, bank, or card is used without consent
“Recovery scams” where someone claims they can retrieve your lost money for another fee

The legal response depends on what happened. A fake seller who never intended to deliver goods may be different from a hacker who accessed your account, or from a phishing group that used your OTP to transfer funds. But in practice, victims often need to take the same first steps: secure accounts, report the transaction, preserve evidence, and file the correct complaint.

First 24 Hours: What to Do Immediately After Being Scammed

1. Secure your accounts first

Before preparing a complaint, stop the scammer from taking more.

Do these immediately:

Change passwords for your email, banking apps, e-wallets, Facebook, Instagram, and any account used in the transaction.
Turn on multi-factor authentication if available.
Log out all devices from your email and social media accounts.
Lock your card or temporarily freeze your bank/e-wallet account through the official app or hotline.
Remove saved cards from shopping apps, browsers, and digital wallets.
If your SIM or phone was compromised, contact your telco and request assistance.

Do not click links sent by the scammer after the incident. Many scammers send fake “refund,” “verification,” or “case update” links to steal more information.

2. Contact your bank, e-wallet, or card issuer immediately

Report the transaction through the official hotline, app help center, branch, or verified email of your bank or e-wallet provider.

Ask for these specific actions:

Block or freeze your account, card, or wallet if still at risk
File a fraud or disputed transaction report
Trace the transaction reference number
Request a temporary hold on the recipient account if the funds are still within the system
Issue a complaint reference number or ticket number
Provide a written acknowledgment of your report

Under the Anti-Financial Account Scamming Act, Republic Act No. 12010, covered financial institutions may temporarily hold funds subject of a disputed transaction for a period prescribed by the BSP, not exceeding 30 calendar days unless extended by a court. This matters because the faster you report, the higher the chance that funds have not yet been withdrawn or transferred again.

3. Preserve evidence before the scammer deletes it

Screenshots help, but they are not enough by themselves. Preserve the full trail.

Save the following:

Chat history, including usernames, profile links, phone numbers, and timestamps
Payment receipts and transaction reference numbers
Bank account names, e-wallet numbers, QR codes, or card details used by the scammer
URLs of fake websites or social media pages
Screenshots of the seller’s profile, posts, ads, product listing, comments, reviews, and group page
Emails with full headers if phishing was done by email
SMS messages showing the sender name or phone number
Delivery tracking, order confirmation, invoices, or fake IDs sent by the scammer
Voice notes, call logs, and video call screenshots if available
Your bank or e-wallet complaint ticket number

Do not edit screenshots. If possible, take screen recordings showing the profile URL, conversation, and transaction details. Keep the original device, because investigators may ask to inspect it.

4. Stop communicating unless advised by investigators

Do not threaten the scammer, post their alleged identity without verification, or send more money “to unlock” a refund. Scammers often use pressure tactics such as:

“Pay a tax to withdraw your funds”
“Your account will be frozen unless you settle”
“We can recover your money if you pay a processing fee”
“Do not report or you will be charged”
“Send your OTP so we can reverse the transfer”

Once money has been lost, further conversation usually gives the scammer more chances to manipulate you. Preserve what exists and report through official channels.

Philippine Laws That May Apply

Several Philippine laws can apply to online scams. The exact charge is determined by investigators and prosecutors based on the evidence.

Situation	Possible legal basis	What it covers
You paid because of false promises, fake identity, or fake product	Article 315 of the Revised Penal Code on estafa	Fraud or swindling through deceit, false pretenses, abuse of confidence, or similar acts
Fraud was committed using a computer, app, fake website, or online system	Cybercrime Prevention Act of 2012, RA 10175	Computer-related fraud, identity theft, and crimes committed through ICT
Your card, account number, PIN, OTP, access code, or payment credentials were misused	Access Devices Regulation Act of 1998, RA 8484	Fraud involving cards, account access devices, codes, and similar payment access tools
A bank account or e-wallet was used as a mule account	Anti-Financial Account Scamming Act, RA 12010	Money muling, social engineering schemes, buying/selling accounts, and coordinated verification of disputed transactions
A financial institution mishandled a fraud complaint	Financial Products and Services Consumer Protection Act, RA 11765	Consumer protection duties of BSP-supervised institutions
The dispute is against an online seller with an identifiable business	Consumer protection rules and DTI procedures	Non-delivery, defective goods, deceptive sales, or unfair business practice
Personal data, IDs, or sensitive information were misused	Data Privacy Act of 2012, RA 10173	Improper collection, use, disclosure, or handling of personal information

For estafa by deceit under Article 315(2)(a), the key issue is usually whether the false representation happened before or at the same time you parted with your money. In ordinary terms: did you send money because the scammer lied about something important, such as identity, authority, product availability, investment returns, shipment, or account verification?

A mere unpaid debt is not automatically estafa. But a transaction that was designed from the start to deceive may support a criminal complaint.

Where to Report an Online Scam in the Philippines

Bank, e-wallet, or payment provider

Report here first when money moved through:

GCash
Maya
Bank transfer
InstaPay or PESONet
Credit card or debit card
Online banking
QR Ph
Remittance or money service business
Crypto exchange connected to a Philippine account

For unresolved complaints against BSP-supervised financial institutions, you may escalate through the BSP Consumer Assistance Channels and BSP Online Buddy. BSP usually expects you to first report to the financial institution’s own consumer assistance channel and keep proof of that report.

PNP Anti-Cybercrime Group or NBI Cybercrime Division

For criminal investigation, report to the cybercrime units of the police or NBI.

The Cybercrime Prevention Act designates the National Bureau of Investigation (NBI) and the Philippine National Police (PNP) as law enforcement authorities for cybercrime cases. The NBI also lists cybercrime complaint assistance under its CyberCrime Division Citizen’s Charter.

In practice, bring printed and digital copies of your evidence. Walk-in complaints are often more effective for serious losses, multiple victims, known bank accounts, or cases where investigators may need to request preservation or disclosure of computer data.

CICC Inter-Agency Response Center

For immediate cybercrime guidance, victims commonly report to the Cybercrime Investigation and Coordinating Center’s anti-scam channels, including Hotline 1326. This is useful for urgent reporting and referral, but it does not replace a complete complaint-affidavit if you want a criminal case to move forward.

DTI for online seller complaints

If the scam involves an identifiable online seller or business, especially non-delivery or deceptive selling, the Department of Trade and Industry may be relevant. The DTI E-Commerce site states that complaints against online sellers may be sent to the DTI Fair Trade Enforcement Bureau, with online-related concerns copied to the E-Commerce Bureau, as explained in the DTI E-Commerce FAQs.

If the seller is a fake individual using a dummy account and there is no real business to summon, DTI may refer the matter to cybercrime authorities.

SEC for investment scams

If the scheme involved investments, crypto trading pools, forex, “double your money,” guaranteed profits, referral bonuses, or solicitation of the public to invest, report to the Securities and Exchange Commission. Registration as a corporation is not the same as authority to solicit investments from the public.

A useful first step is to check SEC advisories and preserve all promotional materials, group chats, deposit instructions, and promised returns.

NTC for scam texts and mobile numbers

If the scam started through SMS, phone call, spoofed sender name, or mobile number, report the number to the National Telecommunications Commission or your telco. The SIM Registration Act, RA 11934, requires SIM registration, but registration alone does not guarantee that a scammer will be easily identified. Scammers may use stolen IDs, mule SIMs, or foreign messaging services.

Step-by-Step Guide to Filing a Strong Complaint

Step 1: Create a timeline

Write a simple chronological narrative:

When and where you first saw the offer or message
Who contacted whom first
What the scammer promised
What name, number, username, or account they used
When you sent money
How much you sent and through what channel
What happened after payment
What steps you took to report the incident

Avoid exaggeration. Investigators and prosecutors appreciate a clear timeline more than emotional accusations.

Step 2: Prepare your evidence folder

Organize your files like this:

Folder	What to include
Identity of complainant	Valid ID, contact details, proof you own the sending account
Transaction proof	Receipts, reference numbers, bank/e-wallet statements
Scam communication	Chat screenshots, SMS, email, call logs, links
Scammer details	Account names, usernames, phone numbers, QR codes, bank/e-wallet accounts
Platform evidence	Listing, group page, profile URL, ads, reviews, fake website
Reports already made	Bank ticket, e-wallet ticket, platform report, telco report
Loss summary	Total amount lost, dates, and payment channels

Print the most important documents. Also bring a USB drive or cloud folder containing digital copies.

Step 3: Execute a complaint-affidavit

A complaint-affidavit is a sworn written statement explaining what happened and attaching evidence. It should usually contain:

Your full name, address, nationality, contact number, and email
The names or identifiers of the complained persons, if known
A chronological narration of facts
The amount lost
The payment method and transaction references
A list of attachments
A request for investigation and prosecution
Your signature before a prosecutor, investigator, notary public, or authorized officer, depending on where it will be filed

If you are abroad, you may need to sign before a Philippine Embassy or Consulate, or use a properly notarized and apostilled document depending on the country and the receiving office’s requirements. Philippine consulates commonly notarize affidavits and Special Powers of Attorney for use in the Philippines, with personal appearance required, as shown in consular notarial guidance such as the Philippine Consulate General in Los Angeles notarial services page.

Step 4: File with the appropriate office

For most online scams, the practical filing options are:

PNP Anti-Cybercrime Group or Regional Anti-Cybercrime Unit
NBI Cybercrime Division or regional NBI office
Office of the City or Provincial Prosecutor
BSP, DTI, SEC, NTC, or NPC depending on the specific issue

If the cybercrime office accepts your complaint, investigators may prepare a referral to the prosecutor after evaluation. In other cases, you may be told to file directly with the prosecutor’s office.

Step 5: Cooperate with follow-up investigation

Expect requests for:

Clarification of your timeline
Original screenshots or device inspection
Additional transaction records
Certification from the bank or e-wallet
Appearance for sworn statement
Contact with other victims, if there are many

Cybercrime investigations can be slow because investigators often need information from banks, e-wallets, telcos, platforms, or foreign-based service providers. Some data requires court warrants or formal legal processes.

Under RA 10175, service providers are required to preserve certain traffic data and subscriber information for at least six months, and content data may be preserved upon lawful order. This is why early reporting is important.

Can You Get Your Money Back?

Recovery depends on where the money is and how fast you acted.

If the funds are still in the receiving account

There may be a chance of temporary hold, reversal, coordinated verification, or later restitution. This is most realistic when you report within hours and the funds have not yet been withdrawn.

If the scammer already withdrew or transferred the money

Recovery becomes harder. Investigators may still trace the account owner, but many scams use mule accounts, stolen identities, or people paid to lend their accounts. The account holder may be investigated for money muling or related offenses, but that does not always mean immediate refund.

If your account was hacked or there was an unauthorized transaction

Your claim against the bank or e-wallet may be stronger if the loss resulted from unauthorized access, system weakness, failure to apply required safeguards, or poor handling of a timely fraud report. RA 12010 provides that institutions may be liable for restitution where they fail to employ adequate risk management systems and controls or fail to exercise the required diligence.

If you voluntarily sent the money because you were deceived

This is still reportable as estafa or online fraud, but banks and e-wallets often treat it differently from account hacking. They may say you authorized the transfer. That does not end the matter, but it means your strongest route may be criminal investigation, tracing, and possible civil recovery.

If the amount is small

Even small losses should be reported because patterns matter. Scam accounts often victimize many people. A ₱2,000 fake seller complaint may connect to dozens of other complaints using the same account.

Criminal Case, Civil Case, or Small Claims?

Many victims ask whether they should file a criminal complaint or a civil case. These are different remedies.

Option	Main purpose	Best for	Practical note
Criminal complaint	Punish the offender and support restitution/civil liability arising from crime	Estafa, cybercrime, phishing, identity theft, money mule schemes	Requires proof of crime and identification of offender
BSP/DTI/SEC/NTC/NPC complaint	Regulatory action or consumer assistance	Bank/e-wallet mishandling, online seller disputes, investment solicitation, text scams, data misuse	May help with investigation or mediation but may not replace criminal prosecution
Small claims case	Recover money through a simplified civil process	Identified person who owes money or breached a transaction	Useful only if you know whom to sue and can serve summons

The Supreme Court’s Rules on Expedited Procedures in the First Level Courts increased the small claims threshold to ₱1,000,000. Small claims can help when the wrongdoer is identifiable, located, and capable of being served. It is less useful when the scammer is anonymous, using a fake profile, or outside the Philippines.

A criminal case may include civil liability, but recovery can still take time. A conviction or settlement is not immediate. In real life, the fastest possible recovery usually comes from early bank/e-wallet action before funds leave the system.

Common Pitfalls That Hurt Online Scam Complaints

Waiting too long before reporting

Funds can move through several accounts within minutes. Report immediately even if you still feel embarrassed or unsure.

Only submitting screenshots without transaction details

A screenshot saying “sent” is weaker than a full receipt showing:

Sender account
Recipient name or number
Amount
Date and time
Reference number
Payment channel

Deleting chats after taking screenshots

Do not delete the conversation. Investigators may need the original chat context, metadata, profile link, or device record.

Posting accusations online before filing

Public posts may warn others, but they can also create problems if you name the wrong person, compromise an investigation, or expose your own private data. Report first and preserve evidence.

Paying a “recovery agent”

Many people who lost money are targeted again by fake hackers, fake lawyers, fake police contacts, or fake bank insiders. No legitimate investigator should ask you to pay a private “unlocking,” “tracing,” or “withdrawal tax” fee through a personal wallet.

Assuming SIM registration means instant identification

SIM registration helps accountability, but it does not automatically reveal the real scammer. The number may be registered under a mule, fake document, stolen identity, or abandoned SIM.

Reporting to only one office

A bank report is not the same as a criminal complaint. A Facebook report is not the same as a police report. For serious losses, use multiple appropriate channels: financial institution, cybercrime office, and regulator if applicable.

Special Notes for OFWs, Foreigners, and Victims Abroad

You can still report an online scam connected to the Philippines even if you are outside the country, especially if:

The scammer used a Philippine bank or e-wallet account
The victim is in the Philippines
The platform, transaction, or damage is connected to the Philippines
The offender appears to be in the Philippines

Practical requirements may include:

Passport or foreign government ID
Philippine address or contact person, if available
Complaint-affidavit notarized or consularized abroad
Special Power of Attorney authorizing a Philippine representative
English translation of foreign-language documents
Apostille or consular authentication depending on where the document was executed and where it will be used

If your representative will file, follow up, receive documents, or attend proceedings for you, the authority should be specific. A vague authorization may be rejected.

Documents Checklist

Document	Needed for	Notes
Valid ID or passport	All complaints	Foreigners should include passport bio page and contact details
Complaint-affidavit	Police, NBI, prosecutor	Must be clear, chronological, and supported by attachments
Transaction receipts	Bank/e-wallet, police, prosecutor	Include reference numbers and exact amounts
Bank/e-wallet statement	Fraud tracing	Redact unrelated transactions only if allowed by the receiving office
Screenshots and screen recordings	Evidence of deceit	Show usernames, URLs, timestamps, and full context
Chat export or email headers	Cybercrime investigation	Better than cropped screenshots
Scam account details	Tracing	Include QR codes, numbers, account names, profile links
Prior reports	BSP/DTI/SEC escalation	Keep ticket numbers and written replies
SPA or authorization	Representative filing	Often needed if victim is abroad or unavailable
Apostille/consular notarization	Documents executed abroad	Requirements vary by country and receiving office

Frequently Asked Questions

Can I still report an online scam if I voluntarily sent the money?

Yes. Voluntarily sending money does not prevent a complaint if you were deceived. Many estafa and online fraud cases involve victims who willingly transferred money because of false representations.

Should I report first to the bank or to the police?

Report to the bank or e-wallet immediately to try to stop or trace the funds. Then report to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or prosecutor for criminal investigation. For urgent cases, do both as soon as possible.

Will GCash, Maya, or my bank automatically refund me?

Not automatically. Refund depends on the facts, timing, whether the transaction was unauthorized, whether funds remain available, and whether the institution complied with its duties. Always ask for a written result of the fraud investigation.

What if I only know the scammer’s mobile number or e-wallet number?

You can still report. Provide the number, transaction receipt, screenshots, and all related accounts. Investigators may need lawful processes to request subscriber or account information.

Can I file a case if the scammer used a fake name?

Yes. Complaints can initially identify respondents by usernames, phone numbers, account numbers, or “John/Jane Doe” descriptions. The purpose of investigation is to identify the real persons behind them.

How long does an online scam investigation take in the Philippines?

Simple consumer complaints may move in weeks. Cybercrime and estafa complaints can take months or longer, especially if records must be requested from banks, telcos, platforms, or foreign service providers. Delays are common when evidence is incomplete or the scammer used mule accounts.

Is barangay mediation required before filing an online scam complaint?

Usually not for serious criminal fraud or cybercrime complaints. Barangay conciliation may matter for some civil disputes between individuals in the same city or municipality, but online scams involving estafa, cybercrime, unknown offenders, or offenses beyond barangay jurisdiction should be reported to law enforcement or prosecutors.

Can I sue through small claims instead of filing a criminal complaint?

Small claims may work if you know the real identity and address of the person who owes you money and your claim fits the rules. It is not very useful against anonymous scammers. For fake profiles, phishing, or mule accounts, criminal and cybercrime reporting is usually more appropriate.

What if the scammer is abroad?

Still preserve evidence and report. Cross-border cases are harder and slower, but Philippine authorities may coordinate through cybercrime channels, especially if Philippine accounts, victims, or systems were used.

What should I do if my ID was used to open scam accounts?

Report to the financial institution, NBI or PNP cybercrime unit, and the National Privacy Commission if personal data misuse is involved. Keep proof that your ID was misused and request account closure or investigation. The NPC explains formal complaint filing through its official complaint page.

Key Takeaways

Report the scam to your bank, e-wallet, or card issuer immediately; speed matters most when funds may still be held.
Preserve complete evidence: receipts, reference numbers, chats, profile links, URLs, QR codes, phone numbers, and complaint tickets.
Online scams in the Philippines may involve estafa, cybercrime, access device fraud, money muling, consumer protection violations, or data privacy issues.
File with the correct office: PNP or NBI for cybercrime, BSP for unresolved bank/e-wallet complaints, DTI for online sellers, SEC for investment scams, NTC for scam texts, and NPC for personal data misuse.
Recovery is possible in some cases, but it is never guaranteed; the best chance is early reporting before funds are withdrawn or layered through mule accounts.
Do not pay “recovery agents,” send more money, delete chats, or rely only on screenshots without transaction details.