When an online gaming site says you must make another deposit before you can withdraw your winnings, treat it as a serious red flag. Sometimes a licensed platform may require identity verification or may enforce clear bonus-wagering rules, but a demand for a “tax,” “unlocking fee,” “VIP upgrade,” “anti-money laundering deposit,” or “verification deposit” before releasing money is a common online casino scam pattern. In the Philippines, your next steps depend on one key question: is the site actually authorized by PAGCOR, or is it an illegal/fake gambling site using gaming as bait?

First, understand what the site is really asking you to do

A legitimate withdrawal process usually involves:

confirming your identity;
checking if you are at least 21 years old;
verifying the payment account used for deposit and withdrawal;
applying clearly disclosed bonus or turnover requirements; and
reviewing suspicious transactions.

A suspicious withdrawal demand usually looks like this:

What the site says	Why it is suspicious
“Deposit ₱5,000 more to activate withdrawal.”	Real withdrawal verification should not normally require another gambling deposit.
“Pay tax first before release.”	Philippine taxes are not usually collected by random customer-service agents through GCash, crypto wallets, or personal bank accounts.
“Upgrade to VIP to withdraw.”	This is a pressure tactic if it was not part of the rules when you deposited.
“Your withdrawal is frozen due to AML. Deposit more to prove you are real.”	Anti-money laundering checks usually require documents, not more deposits to a betting wallet.
“Send money to this agent’s personal e-wallet.”	Licensed operators should not route player funds through random personal accounts.

PAGCOR regulates local electronic gaming operations such as e-casino, sports betting, specialty games, online poker, bingo, and numeric games, including online operations of PAGCOR-licensed gaming platforms. PAGCOR also maintains official lists of accredited gaming system administrators, registered brands, and registered domain names/URLs, which is important because many scam sites copy logos and names from legitimate operators. (pagcor.ph)

Stop depositing immediately

Do not send another peso “just to test” if the withdrawal will work. In many cases, each new payment creates a new excuse:

First deposit: “minimum withdrawal balance.”
Second deposit: “tax clearance.”
Third deposit: “account verification.”
Fourth deposit: “risk-control review.”
Fifth deposit: “last step before release.”

This is how many victims lose far more than the original blocked withdrawal. Your priority is no longer to “complete the requirement”; it is to preserve evidence, identify the operator or payment recipient, and report quickly enough that a bank, e-wallet, or investigator may still trace the funds.

Check whether the gaming site is PAGCOR-authorized

Before deciding where to complain, verify the site carefully.

How to check

Look at the exact domain name in your browser, not just the logo in the app or website.
Compare it against PAGCOR’s official list of registered brands and domain names/URLs.
Check whether the payment recipient is the licensed operator or a random individual.
Search whether PAGCOR has issued warnings about fake sites using the same name, logo, or “license certificate.”
Be cautious with mirror links, Telegram links, shortened URLs, APK files, and domains that change every few days.

PAGCOR has publicly warned that fake online gaming sites may use the PAGCOR logo and fabricated license documents, and that dubious websites may put users’ personal and financial information at risk. PAGCOR has also said investigation results on dubious sites may be endorsed to the PNP, DICT, and NBI for proper action. (pagcor.ph)

Special warning about “offshore” gaming claims

If the site says it is a Philippine Offshore Gaming Operator, POGO, IGL, or “PAGCOR offshore licensed” site, be very careful. Republic Act No. 12312, the Anti-POGO Act of 2025, bans and declares unlawful offshore gaming operations in the Philippines, repealing the previous law that taxed offshore gaming operations. PAGCOR has also warned that any entity claiming to operate under a PAGCOR license for offshore gaming is violating the law and should be reported. (Lawphil)

Legal basis in the Philippines

1. Illegal gambling laws may apply

Unlicensed gambling is not simply a private disagreement between you and the website. Presidential Decree No. 1602 strengthened penalties on illegal gambling and modified earlier gambling provisions under Articles 195 to 199 of the Revised Penal Code. Executive Order No. 13, series of 2017, also addressed illegal gambling and clarified the government’s approach to regulating gambling operations. (Lawphil)

A practical consequence is this: if the site is illegal, your case is often treated less like a normal “customer refund” issue and more like a fraud, cybercrime, or illegal gambling report.

2. Estafa may apply when the site deceived you into depositing

Under Article 315 of the Revised Penal Code, estafa is a form of swindling. In simple terms, it can apply when a person uses deceit or false pretenses to make another person part with money or property. The Supreme Court has described estafa by deceit as involving false representation made before or at the same time as the fraud, reliance by the victim, and resulting damage. (Supreme Court E-Library)

For online gaming scams, the possible deceit may include:

pretending to be PAGCOR-licensed;
promising withdrawals after a required deposit;
inventing “tax” or “clearance” fees;
using fake customer-service agents;
showing fake balances or fake winnings; or
using false account-verification excuses to induce more deposits.

3. Cybercrime law may apply

Republic Act No. 10175, the Cybercrime Prevention Act of 2012, covers cybercrime offenses and cyber-enabled crimes. The DOJ’s implementing rules refer to computer-related fraud, and online scams may be investigated through cybercrime channels when the fraud was committed through websites, apps, social media, e-wallets, messaging platforms, or other computer systems. (Lawphil)

4. Civil recovery depends on whether the gambling activity was lawful

The Civil Code treatment of gambling matters is important. Philippine courts generally will not enforce illegal gambling winnings. In Yun Kwan Byung v. PAGCOR, the Supreme Court discussed Article 2014 of the Civil Code and explained that no action can be maintained by a winner to collect what was won in a game of chance when the gambling arrangement is illegal. (Supreme Court E-Library)

This does not mean a scammer can freely keep your money. It means your claim must be framed carefully. If the site is illegal, the stronger route is often a criminal complaint for fraud, cybercrime, or illegal gambling, plus recovery of money as civil liability arising from the offense, rather than a simple lawsuit to enforce “casino winnings.”

What to do step by step

1. Stop communicating except to preserve evidence

Do not argue endlessly with customer support. Do not threaten them in a way that alerts them to delete records. Do not click new links they send.

Instead:

screenshot the full conversation;
record the exact website URL;
save your username, player ID, and account number;
download transaction receipts;
keep SMS and email OTP notices;
save bank or e-wallet reference numbers;
preserve the fake “license,” “certificate,” or “tax notice” if shown; and
take screenshots showing the demand for additional deposit before withdrawal.

Use full-screen screenshots where the date, time, username, URL, and chat identity are visible. Cropped screenshots are useful for quick reporting, but investigators usually prefer complete context.

2. Report immediately to your bank, e-wallet, or payment provider

If you paid through a bank, e-wallet, credit card, crypto exchange, remittance center, or payment gateway, report the transaction as possible fraud as soon as possible.

Ask for:

account freezing or temporary hold, if still possible;
tracing of the receiving account;
chargeback or dispute review, if available;
investigation reference number;
written confirmation of your complaint; and
preservation of transaction records.

If your provider is a BSP-supervised financial institution, BSP’s consumer assistance system may become relevant if the provider does not properly address your complaint. BSP says unresolved complaints may be filed through BSP Online Buddy or through a Complaints, Inquiries and Requests form, and that BOB can generate a case reference number. BSP’s framework under RA 11765 also provides consumer redress mechanisms for financial consumers involving BSP-supervised institutions. (Bureau of Small and Medium Enterprises)

3. Verify and report the gaming operator to PAGCOR

If the site appears to be a PAGCOR-authorized local gaming site, prepare a concise complaint to PAGCOR with:

your full name and contact details;
exact domain or app name;
operator/brand name;
player account ID;
deposit and withdrawal history;
screenshots of the withdrawal refusal;
proof of additional-deposit demand;
copy of your communication with the platform; and
the result you are requesting, such as release of withdrawal or investigation of unfair practice.

PAGCOR’s official contact page lists its corporate office and support email for inquiries and concerns. Use only contact details from the official PAGCOR website because scammers sometimes create fake “PAGCOR complaint desks.” (support.pagcor.ph)

If the site is not on PAGCOR’s list, or if it claims to be “offshore licensed,” report it as an illegal or suspicious site rather than assuming PAGCOR can mediate your withdrawal.

4. File a cybercrime report

For online gaming scams, the usual government channels are:

Office or agency	Use this when	Practical notes
PNP Anti-Cybercrime Group	Online scam, fake site, fake agent, e-wallet mule account, threats, identity misuse	FOI guidance has referred cybercrime concerns to PNP ACG’s eComplaint channel and email. (www.foi.gov.ph)
NBI Cybercrime Division	Larger losses, syndicated activity, foreign links, complex digital evidence	NBI’s Citizens Charter for computer-crime victims states that complainants may proceed to the Cybercrime Division to file a complaint or request investigation, with no fee listed for the complaint-sheet step. (National Bureau of Investigation)
DOJ Office of Cybercrime	Cybercrime policy, coordination, and reporting guidance	DOJ maintains a page for reporting cybercrime incidents. (Department of Justice Philippines)
CICC / I-ARC Hotline 1326	Initial reporting of online scam or cyber fraud	Scam Watch Pilipinas identifies Hotline 1326 as part of the Inter-Agency Response Center for online scam reporting. (ScamWatch Pilipinas)

For a stronger complaint, prepare a complaint-affidavit. This is a sworn written statement explaining what happened, who was involved, how much you lost, what evidence supports your claim, and what laws may have been violated. The investigator or prosecutor will usually need more than screenshots; they need a coherent timeline and proof linking each payment to the deception.

5. Prepare your evidence folder

Create one folder with subfolders like this:

Folder	What to include
01 Identity	Government ID, contact details, proof you own the payment account
02 Platform details	Website URL, app name, APK file name if any, account ID, profile page
03 Transactions	Deposit receipts, bank/e-wallet statements, reference numbers, crypto transaction hashes
04 Withdrawal attempts	Withdrawal request screenshots, pending/failed status, rejection messages
05 Demands for more deposits	Chat messages, emails, pop-ups, “tax” or “VIP” notices
06 License claims	PAGCOR logo, fake certificate, claimed license number, footer statements
07 Reports made	Bank ticket, e-wallet ticket, PAGCOR email, PNP/NBI report, BSP reference number

Keep original files. Do not only save compressed screenshots sent through Messenger or Viber. If possible, keep the phone, email account, and app installed until investigators have reviewed the evidence.

If the site is licensed vs. unlicensed: what changes?

Situation	What it usually means	Best first move
PAGCOR-registered domain and brand	A regulatory complaint may be realistic if withdrawal rules were unfairly applied	File with the platform, then PAGCOR if unresolved
Similar brand name but different domain	Possible clone or phishing site	Report to payment provider and cybercrime authorities
“PAGCOR offshore license” claim	Likely unlawful after the Anti-POGO Act of 2025	Report as illegal offshore gaming/fraud
Random Telegram agent or Facebook promoter	Often a scam using personal payment accounts	Report the agent, payment account, and platform link
Crypto-only deposits	Recovery is harder unless exchange accounts are identifiable	Preserve wallet addresses and transaction hashes immediately

Can you get your money back?

Possibly, but recovery is never guaranteed.

Your chances are better when:

you report within hours, not weeks;
the receiving account is a Philippine bank or e-wallet account;
the funds have not yet been withdrawn or moved;
the operator is actually licensed and identifiable;
you have complete transaction records; and
other victims have reported the same site or account.

Your chances are worse when:

you paid in cryptocurrency to a private wallet;
the domain is foreign or changes often;
the payment recipient used a mule account;
the site is illegal and anonymous;
you kept depositing after repeated excuses; or
you deleted chats, receipts, or account records.

If a criminal case is filed, the claim for money may be pursued as civil liability arising from the offense. If the recipient is an identifiable person or company in the Philippines, a separate civil action may also be considered, but this is usually practical only if the defendant can be located and served.

Can small claims court help?

Small claims can help in some money-recovery cases, but it is not always the right tool for online gaming scams.

The Supreme Court’s Rules on Expedited Procedures in First Level Courts include small claims cases where the claim does not exceed ₱1,000,000, exclusive of interest and costs. The rules were designed to make certain money claims simpler and faster in first-level courts. (Supreme Court of the Philippines)

Small claims may be useful if:

you know the real name and address of the payment recipient;
the case is simply for reimbursement of money;
the amount is within the limit; and
you are not asking the court to enforce illegal gambling winnings.

Small claims may not be practical if:

the operator is fake or foreign;
you only have a Telegram username;
the amount is part of illegal gambling winnings;
you need cybercrime subpoenas or digital forensics; or
the main issue is criminal fraud.

What if the site says the extra deposit is for tax?

Be very skeptical.

A legitimate tax obligation is not usually paid to a gambling site’s customer-service agent through personal GCash, Maya, bank, or crypto wallets. If a platform claims “BIR requires you to deposit more before withdrawal,” ask for:

the specific legal basis;
official invoice or tax document;
registered corporate name;
TIN;
official receipt;
whether the amount is withheld from winnings rather than separately deposited; and
written confirmation from the licensed operator’s official email domain.

If the answer is evasive, inconsistent, or routed through a personal account, treat it as a scam indicator.

What if the site says it is an AML requirement?

Anti-money laundering controls are real in financial and gaming environments, but scammers misuse the phrase “AML” to sound official.

A legitimate review may ask for:

valid ID;
proof of address;
source-of-funds documents;
selfie or liveness verification;
bank account verification; or
explanation of unusual transactions.

A suspicious “AML” demand asks for:

another deposit to unlock funds;
payment to a personal account;
crypto transfer to “verify wallet ownership”;
repeated fees after each payment; or
secrecy from your bank or family.

If the platform is licensed, ask for the written rule and escalate to the operator’s compliance or complaints unit. If the platform is not licensed or uses fake documents, report it as suspected fraud.

Common mistakes victims make

Paying the “last” deposit

Scammers often promise that the next payment is the final step. It rarely is. Once you pay, they invent another reason.

Deleting chats out of embarrassment

Many people feel ashamed because the transaction involved gambling. Do not delete anything. The evidence matters more than the embarrassment.

Reporting only to social media

Reporting a Facebook page, Telegram account, or website helps, but it is not enough. You need to report to your payment provider and appropriate Philippine authorities.

Filing with the wrong agency only

PAGCOR can be relevant for licensed gaming operators, but it is not a substitute for a bank fraud report or cybercrime complaint when the site is fake. BSP can help with complaints against financial institutions, but it does not regulate gambling sites themselves. NPC can handle data privacy violations, but it does not recover gambling winnings.

Believing screenshots of “PAGCOR certificates”

A screenshot of a license is not proof. Check the official PAGCOR website and registered domain lists. Fake sites often display convincing but fabricated certificates.

What if your personal data was collected?

Many fake gaming sites ask for IDs, selfies, phone numbers, addresses, bank details, or e-wallet screenshots. That creates a separate risk: identity theft.

If your personal information is misused, the Data Privacy Act of 2012, Republic Act No. 10173, may be relevant. The National Privacy Commission accepts formal complaints in a specific format, and its rules identify data subjects affected by privacy violations or personal data breaches as persons who may file complaints. (National Privacy Commission)

Practical steps:

Change passwords connected to the gaming account.
Enable two-factor authentication on email, e-wallets, and bank apps.
Report SIM or account takeover attempts immediately.
Watch for loan-app, crypto, or shopping accounts opened in your name.
Keep copies of IDs submitted and the date they were sent.
File a privacy complaint if your data is leaked, misused, or processed without lawful basis.

For OFWs and foreigners outside the Philippines

If you are abroad, you can still preserve evidence, report to your bank or e-wallet, and make initial reports online or by email. The practical difficulty is that Philippine investigators or prosecutors may later require a sworn complaint-affidavit, clarification, or testimony.

For documents signed abroad and intended for use in the Philippines, Philippine embassies and consulates may notarize affidavits and similar documents, usually requiring personal appearance. Some Philippine consular posts state that documents to be used in the Philippines may be notarized before a consular officer, and that the document will carry a notarial certificate or jurat. (Philippine Embassy)

If you use a foreign notarized document instead, apostille or authentication rules may apply depending on where the document was executed and where it will be used. DFA’s apostille resources explain that apostille concerns relate to public documents and authentication processes, while foreign documents generally follow the issuing country’s authentication or apostille process before use in the Philippines. (Apostille Government of the Philippines)

For foreigners, also consider whether your home country’s bank, card issuer, gambling regulator, or cybercrime authority can assist, especially if the operator or payment processor is outside the Philippines.

Frequently Asked Questions

Is it normal for an online casino to ask for another deposit before withdrawal?

No, it is not normal when the deposit is described as an unlocking fee, tax, AML clearance, VIP upgrade, or verification payment. A legitimate platform may require identity documents or may apply clearly disclosed wagering rules, but repeated demands for more deposits before withdrawal are a major scam warning sign.

What should I do first if I already deposited more money?

Stop depositing. Save all evidence. Report immediately to your bank, e-wallet, card issuer, or crypto exchange. Then verify whether the site is on PAGCOR’s official list and file a cybercrime report if the site appears fake, illegal, or deceptive.

Can PAGCOR force an online gaming site to pay my winnings?

PAGCOR may act on complaints involving licensed or authorized operators under its regulatory supervision. If the website is fake, cloned, offshore, or unlicensed, PAGCOR may not be able to mediate the payout like a normal player dispute, but the information can still support action against illegal gaming or fraudulent sites.

Is a PAGCOR logo on the website enough proof that it is legit?

No. PAGCOR has warned about fake online gaming sites using its logo and fabricated license certificates. Always check the exact domain name against official PAGCOR sources and be suspicious of mirror links, shortened URLs, and payment instructions to personal accounts. (pagcor.ph)

Can I file estafa for an online casino scam?

Yes, if the facts show deceit: for example, the site or agent falsely claimed to be licensed, promised withdrawal after deposits, invented fake fees, and caused you to part with money. Estafa requires proof of false pretenses, reliance, and damage, so your timeline and transaction records are very important. (Supreme Court E-Library)

Can I recover illegal gambling winnings in court?

Usually, courts will not enforce illegal gambling winnings. If the website is unlicensed or illegal, the better approach is often to report fraud, cybercrime, and illegal gambling, and to seek recovery as part of the civil liability arising from the offense where appropriate.

Should I report to PNP ACG or NBI Cybercrime Division?

Either may be appropriate. PNP ACG is commonly used for online scam and cybercrime complaints, while NBI Cybercrime Division is often approached for more complex or higher-value cases. What matters is that you bring complete evidence, a clear timeline, IDs, and transaction records.

Can BSP help me get money back from GCash, Maya, or a bank transfer?

BSP can receive unresolved complaints involving BSP-supervised financial institutions. You should first report to the financial institution’s own complaint channel. If unresolved, BSP’s Consumer Assistance Mechanism may help facilitate action, mediation, or other remedies within its authority. (Bureau of Small and Medium Enterprises)

What if I sent my ID and selfie to the gaming site?

Assume your data may be misused. Change passwords, monitor your accounts, watch for unauthorized loans or registrations, and preserve proof of what you submitted. If your personal data is leaked or misused, consider filing with the National Privacy Commission under the Data Privacy Act process.

What if the scammer is outside the Philippines?

You can still report if there is a Philippine connection, such as a Philippine victim, Philippine payment account, Philippine promoter, Philippine phone number, or false claim of PAGCOR licensing. Recovery may be harder, but reports can support account freezing, website blocking, payment tracing, and cross-border investigation.

Key Takeaways

Do not deposit more money to unlock an online gaming withdrawal.
Verify the exact domain against PAGCOR’s official lists, not against screenshots or logos.
A demand for “tax,” “AML clearance,” “VIP upgrade,” or “verification deposit” is a major scam indicator.
Report quickly to your bank, e-wallet, or payment provider because fund tracing is time-sensitive.
If the site is fake, cloned, offshore, or unlicensed, treat the matter as possible fraud, cybercrime, and illegal gambling.
Prepare a complete evidence folder with screenshots, URLs, account IDs, receipts, and reference numbers.
PAGCOR is relevant for licensed gaming operators; PNP ACG, NBI, DOJ, CICC, BSP, and NPC may be relevant depending on the facts.
Illegal gambling winnings are difficult to enforce as ordinary civil claims, but fraud-based recovery may still be pursued through criminal and related civil remedies.