What to Do If an Online Gambling Site Scams You

Losing money on an online gambling site is alarming, especially when the site suddenly blocks withdrawals, demands another “verification deposit,” or disappears altogether. The most important thing is to act quickly without sending more money. Your immediate priorities are to stop further losses, ask your bank or e-wallet to trace and hold the funds, preserve evidence, verify whether the site is licensed by the Philippine Amusement and Gaming Corporation (PAGCOR), and report the incident to the proper authorities.

First, Identify What Kind of Online Gambling Scam Happened

Not every gambling loss is legally considered a scam. You may have a stronger fraud complaint when the operator obtained your money through deception, manipulated your account, or never intended to honor withdrawals.

Common online gambling scams include:

  • A fake casino or betting site accepts deposits but does not allow withdrawals.
  • The site demands an additional “tax,” “anti-money laundering fee,” “clearance fee,” or “unlocking deposit” before releasing winnings.
  • The operator claims your account violated an undisclosed rule only after you request a withdrawal.
  • A fake customer-service representative asks for your password, one-time password, card details, or screen-sharing access.
  • Your balance, betting history, or withdrawal request is altered without explanation.
  • A scammer impersonates a legitimate PAGCOR-licensed brand using a similar website address.
  • The platform uses a personal bank or e-wallet account rather than an identifiable business payment channel.
  • Someone uses your identity, bank account, or e-wallet to receive and transfer gambling-related funds.

A legitimate dispute may also arise with a licensed operator—for example, over bonus conditions, account verification, or allegedly prohibited betting activity. The difference matters because licensed operators are subject to PAGCOR supervision and should have a formal complaint mechanism. An illegal or cloned site may have no real Philippine office, responsible company, or recoverable assets.

Check Whether the Gambling Site Is Licensed in the Philippines

Do not rely on a PAGCOR logo, a screenshot of a certificate, an influencer’s endorsement, or a statement that the platform is “internationally licensed.” Fraudsters regularly copy official logos and fabricate license documents.

Check the exact website address, including its spelling, domain ending, subdomain, and redirects, against PAGCOR’s official list of accredited gaming system administrators and registered brands and domain names. As of June 30, 2026, PAGCOR’s list identifies the specific registered URLs associated with accredited operators. A familiar brand name appearing on a different domain may be a clone.

PAGCOR has specifically warned that fake online gaming sites misuse its logo and falsify accreditation certificates. Under Philippine law, gambling is not automatically illegal in every situation; the crucial question is whether the activity and operator are authorized by the regulator empowered to license them. (PAGCOR)

What the result means

What you find Practical consequence
The exact domain is on PAGCOR’s current list Use the operator’s complaint process and escalate unresolved issues to PAGCOR.
The brand is listed, but the exact domain is not Treat the site as a possible clone until PAGCOR confirms otherwise.
Neither the brand nor domain is listed The site may be unauthorized, offshore, or fraudulent. Report it to law enforcement and PAGCOR.
The site claims only a foreign license A foreign license does not by itself establish authority to offer regulated gambling services in the Philippines.
The URL keeps changing or redirects to mirror sites Preserve each URL and redirect. This is a significant warning sign.

What to Do Immediately After an Online Gambling Scam

1. Stop sending money

Do not pay another amount to “release” your balance. Requests for additional taxes, deposits, account upgrades, insurance, or AML clearance are common continuation scams.

A legitimate Philippine tax obligation is not normally settled by transferring money to a customer-service representative’s personal account. Likewise, a real financial institution will not ask for your password or one-time password to investigate a disputed transaction.

Stop communicating through screen-sharing applications. Remove any remote-access software the scammer instructed you to install, but first photograph or record the relevant conversations and application details.

2. Contact your bank, card issuer, or e-wallet immediately

Use the institution’s official 24-hour fraud channel—not a phone number supplied by the gambling site.

Provide:

  • The transaction date and exact time
  • Amount
  • Reference or trace number
  • Recipient account name and number
  • Merchant name or identifier
  • QR code, if used
  • Screenshots showing how you were deceived
  • The website address and your account username
  • Any related transactions

Ask the institution to:

  1. Mark the transaction and recipient account as connected to suspected fraud.
  2. Trace the destination of the funds.
  3. Contact the receiving institution.
  4. Consider a temporary hold on disputed funds under the Anti-Financial Account Scamming Act, Republic Act No. 12010.
  5. Preserve transaction, device, login, and beneficiary records for law-enforcement requests.
  6. Give you a complaint reference number and written acknowledgment.

Under RA 12010 and its implementing rules, banks, e-wallet providers, and other BSP-supervised institutions may temporarily hold disputed funds when there are reasonable grounds to suspect that the transaction involves unlawful activity, social engineering, money muling, or no clear economic purpose. A complaint-initiated hold may begin for up to five calendar days and may be extended, subject to the rules, to a total of up to 30 calendar days. Supporting documents such as a sworn complaint, affidavit, or police report may be requested during the initial period. (Bureau of the Treasury)

A hold does not guarantee reimbursement. Recovery depends on whether funds remain in the receiving account, whether they can be traced, and what the institutions’ verification establishes. Funds that have already been withdrawn, converted to cryptocurrency, or transferred through several mule accounts are much harder to recover.

If you used a credit or debit card, also ask whether you may file a merchant dispute or chargeback. Card-network and issuer deadlines can be strict, so do not wait for the gambling site to “finish reviewing” your withdrawal.

3. Secure your accounts and identity

Immediately change passwords for:

  • The gambling account
  • Your email account
  • Online banking and e-wallets
  • Social-media accounts used to sign in
  • Any account using the same or a similar password

Enable multi-factor authentication. Tell your mobile provider if you suspect a SIM-swap attempt.

If you uploaded a passport, driver’s license, national ID, selfie, signature specimen, bank statement, or proof of address, assume the documents may be reused for identity theft. Notify the issuing institution when appropriate and monitor for unfamiliar accounts, loans, SIM registrations, or financial transactions.

4. Preserve evidence before the site disappears

Do not rely only on cropped screenshots. Preserve the original context.

Save the following:

  • The complete URL, including the browser address bar
  • A screen recording from login through the withdrawal page or error message
  • Your account number, username, registered phone number, and email
  • Deposit and withdrawal history
  • Betting history and account balance
  • Terms and conditions, bonus rules, and withdrawal policies
  • Emails, text messages, and chat conversations
  • Telegram, Viber, WhatsApp, Facebook, or other profile links
  • Customer-service names and identification numbers
  • Bank and e-wallet receipts
  • Recipient account names, numbers, QR codes, and merchant IDs
  • Advertisements, referral links, and influencer posts
  • Copies of PAGCOR certificates or licenses displayed by the site
  • Dates and times of every attempted withdrawal
  • Messages demanding additional payment

Export entire conversations where the application allows it. Keep original, unedited files and make at least one backup. Cropped or annotated copies may be useful for explaining the incident, but they should not replace the originals.

Write a chronological account while events are fresh. A clear timeline often helps more than dozens of disorganized screenshots.

5. Send a written refund or withdrawal demand

A brief written demand can establish that you requested payment and gave the operator an opportunity to respond.

State:

  • Your account information
  • The amount deposited or withheld
  • The transaction and withdrawal dates
  • Why you believe the site’s action is fraudulent or contrary to its published rules
  • The specific amount you demand
  • A reasonable deadline
  • That you are preserving the communication for regulatory and law-enforcement purposes

Do not threaten violence, publish personal information, or make accusations against individuals whose identities you cannot verify. Keep the message factual.

Where to Report an Online Gambling Scam in the Philippines

Depending on how the scam occurred, you may report it to several offices. Their functions are different.

Office or channel When to use it Important practical details
Bank or e-wallet fraud channel Money was sent through a bank, card, QR payment, or e-wallet Report immediately and obtain a case number. Ask about AFASA fund holding, tracing, account restriction, and card dispute procedures.
BSP Consumer Assistance Mechanism Your bank or e-wallet does not respond properly after you use its internal complaint mechanism Escalate through the BSP Consumer Assistance channels or email the required form and supporting records to consumeraffairs@bsp.gov.ph.
PAGCOR The site claims to be PAGCOR-licensed, uses a licensed brand, or may be a clone Use the PAGCOR regulatory contact page, email eGaming_Policy@pagcor.ph, or contact PAGCOR through its official support channels.
NBI Cybercrime Division The scam involved a website, online account, digital payment, identity theft, or computer-related fraud File through the NBI Online Complaint system or approach the NBI Cybercrime Division with your evidence and identification.
PNP Anti-Cybercrime Group You need a police cybercrime complaint or investigative assistance Official channels listed by BSP include acg@pnp.gov.ph, (0998) 598-8116, and (+632) 414-1560.
Cybercrime Investigation and Coordinating Center You need centralized anti-scam reporting or referral Report through the national 1326 anti-scam hotline, the eGovPH reporting facility, or the official CICC/DICT channels.
National Privacy Commission The site unlawfully collected, disclosed, or misused your identification documents or personal data Follow the NPC’s formal complaint procedure. A formal complaint generally requires the prescribed form and notarization.

BSP generally expects consumers to first complain through the financial institution’s Financial Consumer Protection Assistance Mechanism. If the institution’s response is missing or unsatisfactory, the consumer may escalate to BSP and submit proof of the earlier complaint. Do not include passwords, PINs, complete card numbers, or one-time passwords in the BSP submission.

The NBI’s published procedure for computer-crime victims requires a complaint sheet and supporting information. Initial assistance may be quick, but evidence evaluation, identification of account holders, bank requests, digital forensics, and case build-up commonly take much longer. (National Bureau of Investigation)

The government’s 1326 anti-scam system is intended to receive scam reports and coordinate referrals. Official DICT materials also identify digital reporting options such as the eGovPH application. (Dictionary of the Filipino Language)

What Laws May Apply to an Online Gambling Scam?

Estafa under the Revised Penal Code

Article 315(2)(a) of the Revised Penal Code punishes estafa by false pretenses. This may apply when a person makes a false representation about authority, identity, business, qualifications, or a supposed transaction; the victim relies on it; and the victim suffers financial damage.

Possible examples include:

  • Falsely claiming that a website is PAGCOR-licensed
  • Accepting deposits through a platform designed never to permit withdrawals
  • Pretending that another payment is required to release nonexistent winnings
  • Using a fake customer-service identity to obtain money
  • Presenting fabricated account balances or transaction records

The prosecution must prove the legally required elements, including deception, reliance, and damage. A mere gambling loss or ordinary disagreement over account rules does not automatically establish estafa. (Lawphil)

Computer-related fraud and identity theft under RA 10175

Republic Act No. 10175, the Cybercrime Prevention Act of 2012, covers computer-related fraud and computer-related identity theft. It may apply when electronic data, online systems, accounts, or digital identities are dishonestly manipulated to obtain money or cause damage.

Section 6 of RA 10175 also covers offenses under the Revised Penal Code and special laws when committed through information and communications technology. The Supreme Court upheld the validity of this provision in Disini v. Secretary of Justice. (Lawphil)

Anti-Financial Account Scamming Act

RA 12010 targets financial-account scamming, including the use of money mule accounts—accounts used to receive, transfer, or withdraw proceeds of fraud—and social-engineering schemes.

The law also imposes duties on covered financial institutions. In certain circumstances, an institution may face restitution liability when it failed to employ adequate risk controls or the legally required degree of diligence. However, this is fact-specific and does not mean every scam victim automatically receives a refund. (Bureau of the Treasury)

Never knowingly submit a false fraud report. The AFASA rules also penalize malicious or fabricated reporting.

Access Devices Regulation Act

Republic Act No. 8484 may apply when the scam involves unauthorized or fraudulent use of credit cards, debit cards, account numbers, access credentials, or other access devices. (Lawphil)

Civil Code rules on gambling losses and deceit

Articles 2014 and 2015 of the Civil Code contain special rules on losses in games of chance. Article 2014 addresses recovery of certain gambling losses, while Article 2015 provides additional remedies when cheating or deceit was committed by the winner. (Lawphil)

These provisions require careful distinction between:

  • Money voluntarily lost in an actual game
  • Money taken by a fake platform
  • Legitimate winnings unlawfully withheld
  • Deposits obtained through false licensing claims
  • Losses caused by manipulation, identity theft, or unauthorized transactions

The Supreme Court has explained that Article 2014 concerns illegal gambling in its proper legal context. It should not be treated as a simple guarantee that every person who loses money gambling can recover it. (Lawphil)

Documents to Prepare for a Formal Complaint

Prepare a digital folder and, when required, a printed set containing:

  1. A government-issued ID
  2. A chronological written statement
  3. A complaint-affidavit describing the deception and loss
  4. The exact website and application details
  5. Account profile and user identification
  6. Screenshots and screen recordings
  7. Full chat and email records
  8. Deposit and withdrawal records
  9. Bank or e-wallet statements
  10. Transaction and trace numbers
  11. Recipient account details
  12. The site’s terms and withdrawal rules
  13. Copies of supposed licenses or certificates
  14. Your written refund demand and the response
  15. Bank, BSP, PAGCOR, or police complaint reference numbers

A complaint-affidavit is a sworn written account of the incident. It should explain events in chronological order and identify the supporting evidence by attachment or exhibit number. Law-enforcement personnel may assist with the required format, but the facts must remain accurate and based on your personal knowledge.

Notarization is commonly required for a formal affidavit. Bring the original valid identification used for notarization.

Can You Recover the Money?

Recovery is possible, but it depends heavily on speed, payment method, evidence, and whether the recipient can be identified.

Recovery through a bank or e-wallet

This is often the fastest possible route when the money is still in a Philippine financial account. Under the AFASA framework, institutions may hold and investigate disputed funds and, when verification supports it, return the equivalent amount through the originating institution. (Bureau of the Treasury)

The main bottleneck is movement of funds. Scam proceeds are commonly transferred through multiple accounts, withdrawn in cash, used to buy cryptocurrency, or sent abroad shortly after receipt.

Card dispute or chargeback

A card issuer may consider a dispute when the merchant did not provide the promised service, misrepresented the transaction, processed an unauthorized charge, or otherwise violated applicable card rules.

Approval depends on the evidence, the transaction type, the card scheme’s rules, and whether the cardholder authorized the payment. An authorized payment induced by fraud is not always handled in the same way as a genuinely unauthorized transaction.

PAGCOR-supervised complaint resolution

A licensed operator should have a complaint or grievance mechanism. Submit the complaint to the operator in writing, then escalate it to PAGCOR with:

  • The exact licensed domain
  • Your player account
  • Transaction records
  • Withdrawal request
  • Operator’s final response
  • Relevant terms and conditions

PAGCOR has stated that licensed online gaming platforms provide mechanisms for handling player complaints and grievances. (PAGCOR)

Restitution in a criminal case

A victim may seek the return of money or damages connected with the criminal offense. Actual recovery still depends on identifying the responsible persons and locating assets that can be returned, attached, or subjected to judgment.

Civil action or small claims

A civil case is practical only when you can identify a legally responsible defendant and an address where court documents can be served.

Under the Rules on Expedited Procedures in the First Level Courts, qualifying money claims of up to ₱1,000,000, excluding interest and costs, may fall under the small-claims process. Small claims are designed for simplified and expedited resolution, but the claim must be within the rule’s coverage and directed against an identifiable defendant. (Supreme Court of the Philippines)

A fake offshore site with no known corporation, Philippine address, or identifiable operator may be impossible to sue effectively even when the evidence clearly shows fraud.

Barangay conciliation is generally relevant only when the actual parties fall within the territorial and personal requirements of the Katarungang Pambarangay system. It is usually not a workable route against an anonymous website, offshore company, or defendant residing elsewhere.

How Long Does the Process Usually Take?

Process Realistic timing
Bank or e-wallet fraud acknowledgment Often within hours or days, depending on the channel
Initial AFASA complaint-related hold The rules provide an initial period of up to five calendar days
Extended disputed-fund hold May reach a total of up to 30 calendar days under the applicable conditions
PAGCOR or operator review Varies with the operator, documents, and technical issues
Initial NBI or PNP complaint filing Often completed during the filing visit or online submission
Cybercrime investigation Commonly several weeks to months; cross-border cases may take longer
Prosecutor’s preliminary investigation Commonly several months, depending on submissions, subpoenas, and docket congestion
Court proceedings May take months or years, particularly when defendants are difficult to locate
Small-claims hearing and decision Designed to proceed rapidly once the defendant has been properly served

Delays commonly arise because of incomplete transaction information, inconsistent statements, slow responses to record requests, multiple layers of mule accounts, foreign hosting providers, cryptocurrency transfers, and difficulties establishing the real identity behind the site.

Special Considerations for Foreigners and Victims Abroad

A foreigner may report a Philippine-facing gambling scam to PAGCOR, the relevant Philippine financial institution, BSP, CICC, NBI, or PNP, depending on the facts.

When the victim is abroad:

  • Report first to the bank, card issuer, or payment provider in the country where the account is maintained.
  • File a local cybercrime or police report where possible.
  • Preserve proof that the site targeted Philippine users or used Philippine financial accounts.
  • Ask the Philippine agency whether an emailed complaint is sufficient for initial evaluation.
  • Be prepared to execute a sworn complaint-affidavit.

A document signed abroad may eventually need notarization and an apostille for use in the Philippines when it originates from a country covered by the Apostille Convention. Where the apostille process is unavailable, consular authentication or another accepted method may be required. An agency may accept scanned records for initial reporting but later require authenticated originals.

Cross-border investigations usually take longer because Philippine investigators may need assistance from foreign banks, hosting providers, platforms, or authorities.

Common Mistakes That Can Harm Your Case

Paying a “recovery agent”

Scammers often contact victims again while pretending to be lawyers, hackers, government agents, crypto investigators, or fund-recovery companies. They may already know details of the first scam.

Warning signs include:

  • Guaranteed recovery
  • An advance “court,” “wallet activation,” or “blockchain tracing” fee
  • Payment to a personal or cryptocurrency account
  • Requests for remote access
  • Requests for your seed phrase, private key, password, or one-time password
  • Claims that the money has already been recovered but requires one final payment

Describing an authorized transfer as unauthorized

Be precise. If you personally approved the payment because you were deceived, say that it was an authorized transfer induced by fraud or social engineering. Do not falsely claim that your account was hacked.

Accuracy helps the bank, prosecutor, and investigator apply the proper procedure.

Continuing to gamble to meet a withdrawal condition

Some sites claim that you must place more bets or achieve a turnover target before withdrawing. Review the terms that existed when you deposited, but do not continue depositing or gambling merely because customer service promises that one more transaction will unlock the account.

Deleting the application or conversations too soon

Removing the application may destroy useful local data, notifications, account identifiers, or cached pages. Preserve the evidence before uninstalling anything.

Filing only a vague screenshot

A screenshot showing a balance is rarely enough by itself. Authorities need to connect the balance to your account, the website, deposits, recipient accounts, withdrawal requests, and misleading representations.

Publicly accusing unverified people

The name on a receiving account may belong to a mule, identity-theft victim, employee, or unrelated person. Give the evidence to the bank and investigators rather than publishing personal information or unsupported accusations online.

Frequently Asked Questions

Can I report an online gambling site even if it is illegal or unlicensed?

Yes. Fraud, identity theft, and financial-account scamming can still be reported. Be truthful about your participation and provide complete records. The operator’s lack of authority may itself be relevant to the investigation.

Will I get in trouble for using an illegal gambling site?

Participation in unauthorized gambling can create legal issues depending on the activity, your role, and the applicable law. A bettor who reports being defrauded is not automatically treated the same as an operator, recruiter, agent, payment collector, or promoter. Do not conceal or alter facts in your complaint.

Can PAGCOR refund my money?

PAGCOR is a regulator, not a general deposit insurer. It may verify licensing, require a supervised operator to address a complaint, investigate regulatory violations, or refer illegal activity. Actual reimbursement depends on the facts, available funds, and the legally responsible parties.

What if the site shows a PAGCOR certificate?

Check the exact domain against PAGCOR’s official list and ask PAGCOR to verify the certificate. Logos, certificate numbers, and screenshots can be copied or fabricated.

Should I pay a tax before withdrawing online casino winnings?

Do not transfer a supposed tax to a personal bank or e-wallet account merely because customer service demands it. Ask for the legal basis, official assessment, taxpayer details, and authorized payment channel. A sudden tax demand coupled with refusal to release any funds is a common scam indicator.

Can my bank reverse a transfer that I personally authorized?

Possibly, but not automatically. Tell the bank that the transfer was induced by fraud or social engineering and ask it to apply its AFASA and fraud-response procedures. Recovery is more likely when the funds remain traceable and available.

What if I paid using cryptocurrency?

Immediately save the wallet addresses, transaction hashes, exchange records, chats, and timestamps. Notify the cryptocurrency exchange if one was used. Blockchain transfers usually cannot be reversed directly, but exchanges and investigators may sometimes identify or restrict accounts when funds pass through regulated services.

Do I need a lawyer to report the scam?

You may report directly to your bank, PAGCOR, BSP, CICC, NBI, PNP, or NPC. More complex cases may require careful preparation when the amount is substantial, several victims are involved, the operator is abroad, or a civil or criminal case is being pursued.

Can I file a small-claims case against the site?

Only when the claim falls within the small-claims rules and you can identify a proper defendant who can be served with court documents. A brand name, Telegram username, or website address alone may not identify a suable person or company.

What should I do if the site has my ID and selfie?

Change affected passwords, monitor financial accounts, preserve proof of what you submitted, and watch for unauthorized loans, SIM registrations, or accounts. Report suspected misuse to the relevant institution and, when personal-data violations are involved, to the National Privacy Commission.

Key Takeaways

  • Stop paying as soon as a gambling site blocks withdrawals and demands more money.
  • Verify the exact domain, not merely the brand or PAGCOR logo.
  • Contact your bank, card issuer, or e-wallet immediately and ask about AFASA fund tracing and holding procedures.
  • Preserve complete evidence, including URLs, chats, transaction references, account records, and withdrawal attempts.
  • Report licensed-operator disputes to PAGCOR and suspected online fraud to NBI, PNP Anti-Cybercrime Group, or CICC.
  • Escalate an unresolved bank or e-wallet complaint through BSP’s Consumer Assistance Mechanism.
  • A gambling loss is not automatically fraud, but fake licensing, fabricated balances, withdrawal extortion, and deceptive collection of deposits may support criminal and civil remedies.
  • Recovery becomes harder once money is withdrawn, transferred through mule accounts, converted to cryptocurrency, or sent abroad.
  • Never pay a stranger who guarantees recovery or asks for passwords, one-time passwords, private keys, or another advance fee.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.