If an online scammer already has your money, the most important thing is speed. Do not spend hours arguing with the scammer or waiting for another promise. Your immediate goals are to preserve evidence, report the transaction to the bank or e-wallet, ask for a hold or dispute review, and file the right complaint with Philippine authorities. Recovery is not guaranteed, especially if the funds were quickly withdrawn or passed through mule accounts, but fast reporting gives you the best chance of stopping the money trail.

First, Identify What Kind of Scam Happened

Online scams in the Philippines usually fall into one of these categories:

Situation	Common examples	Main action
You willingly sent money because of deception	Fake seller, fake investment, romance scam, job scam, “processing fee” scam	Report to bank/e-wallet, then file criminal complaint for estafa/cybercrime
Money left your account without your consent	Account takeover, phishing link, stolen OTP, SIM swap, hacked e-wallet	Treat as an unauthorized transaction; immediately dispute with bank/e-wallet
You invested in a fake platform or Ponzi-style scheme	Crypto “trading,” guaranteed returns, tasking scam, “double your money” scheme	Report to SEC, NBI/PNP, bank/e-wallet
You bought goods or services that were never delivered	Facebook Marketplace, Instagram seller, online store, marketplace seller	Report to platform and DTI; consider criminal complaint if fraud is clear
The scammer used a bank or e-wallet account as a receiving account	GCash, Maya, bank transfer, InstaPay, PESONet	Ask the financial institution to flag, verify, and temporarily hold funds if still available

This distinction matters because a payment-system error is different from a scam where you authorized the transfer. A bank or e-wallet is not automatically required to refund every scam payment. But under newer Philippine financial fraud rules, institutions may have duties to investigate, coordinate, and temporarily hold funds in certain disputed transactions.

Immediate Steps Within the First Few Hours

1. Stop sending money immediately

Scammers often ask for more money after the first payment. They may call it:

“tax”
“withdrawal fee”
“verification fee”
“anti-money laundering clearance”
“customs fee”
“lawyer’s fee”
“account unlocking fee”
“refund processing charge”

Do not pay more. A legitimate refund does not require you to keep sending money to the same scammer.

2. Take screenshots, but do not rely on screenshots alone

Save everything while the account, chat, or page is still visible:

full chat thread from beginning to end
profile page of the scammer
username, display name, phone number, email address, and links
account number, e-wallet number, QR code, or bank details used
transaction receipts and reference numbers
product listing, investment advertisement, or job post
group chat names and member lists if relevant
call logs and SMS messages
proof that you demanded a refund

For stronger evidence, also keep the original device where the messages were received. Do not delete the chat. Under the Philippine Rules on Electronic Evidence, electronic documents must be authenticated. In practical terms, investigators and courts may later ask who captured the screenshots, whether they accurately reflect the conversation, and whether the source device or account is still available.

3. Report the transaction to your bank or e-wallet immediately

Use only official channels: the app help center, fraud hotline, official website, branch, or verified email address. Give a concise report:

“I am reporting a scam/fraud transaction.”
“Please flag and investigate this transaction.”
“Please coordinate with the receiving financial institution.”
“Please check if the funds can be temporarily held under AFASA/BSP rules.”
“Please give me a ticket number or written acknowledgment.”

Prepare these details:

Detail	Why it matters
Date and exact time of transfer	Helps trace the transaction quickly
Amount	Needed for bank/e-wallet dispute
Reference number	Main identifier for InstaPay, PESONet, card, or e-wallet reports
Sender account	Confirms you are the victim
Receiver name/account number/e-wallet number	Helps identify the receiving institution
Screenshots of scam conversation	Shows fraud, not just buyer’s remorse
Police/NBI report, if already available	Helps support account freeze or further investigation

Under the Anti-Financial Account Scamming Act, RA 12010, banks, non-bank financial institutions, e-wallets, and payment service providers are covered “institutions.” The law recognizes money muling, social engineering schemes, disputed transactions, temporary holding of funds, coordinated verification, and BSP inquiry into accounts involved in financial account scamming.

4. Change passwords and secure your accounts

If you clicked a link, gave an OTP, installed an app, or shared personal details:

change your email password first
change online banking and e-wallet passwords
remove unknown devices from your accounts
enable multi-factor authentication
lock or replace compromised cards
ask your telco about suspicious SIM activity
scan your phone for remote access apps

If your phone number was used in the scam, report suspicious calls or texts to your telco. Under the SIM Registration Act, RA 11934, telcos maintain SIM registration data, but they generally cannot simply disclose subscriber identity to a private person. Disclosure usually requires legal process, such as a subpoena or court order.

What Philippine Laws May Apply?

Estafa under the Revised Penal Code

Many online scams are prosecuted as estafa, or swindling, under Article 315 of the Revised Penal Code. Estafa usually involves:

deceit or false pretenses;
reliance by the victim;
delivery of money or property because of the deceit; and
damage or prejudice to the victim.

Examples:

A fake seller accepts payment for a phone but never intended to deliver it.
A person pretends to be an agent of a legitimate company to collect a “reservation fee.”
A romance scammer invents an emergency to obtain money.
A fake investor promises guaranteed returns and disappears after receiving funds.

Penalties for estafa were adjusted by RA 10951, so the amount involved affects the possible penalty and, in turn, procedure and court jurisdiction.

Cybercrime under RA 10175

The Cybercrime Prevention Act of 2012, RA 10175, may apply when information and communications technology is used. Even if the core fraud is estafa under the Revised Penal Code, the cybercrime law may become relevant if the offense was committed through online messaging, fake websites, phishing pages, hacked accounts, or digital platforms.

Possible cybercrime-related issues include:

computer-related fraud
illegal access
identity theft
misuse of electronic data
cybercrime warrants for subscriber data, traffic data, or preserved computer data

Anti-Financial Account Scamming Act, RA 12010

RA 12010 is especially important when money moved through bank accounts, e-wallets, or payment systems. It penalizes:

money muling, such as selling, lending, renting, or allowing the use of financial accounts for criminal proceeds;
social engineering schemes, such as obtaining sensitive account information through deception;
economic sabotage when certain aggravating circumstances are present.

The law also allows institutions to temporarily hold funds subject of a disputed transaction within the period prescribed by BSP rules, not exceeding 30 calendar days unless extended by a competent court. It also states that conviction is not a prerequisite to restitution when an institution is liable for failing to employ adequate risk management systems or exercise the required diligence.

Financial Consumer Protection Rules

For bank, e-wallet, and electronic fund transfer concerns, the BSP’s consumer protection framework matters. The BSP Consumer Assistance Channels and BSP Online Buddy explain that consumers should generally report first to the bank or BSP-supervised financial institution’s own consumer assistance mechanism. If unresolved or mishandled, the complaint may be escalated to BSP through BOB or other BSP consumer assistance channels.

BSP rules on electronic fund transfers also distinguish between payment-system problems and disputes about the underlying product or service. For example, if a transfer failed, timed out, or was wrongly debited, that is different from a seller receiving payment but refusing to deliver the item.

Civil recovery under the Civil Code

Even when a criminal case is filed, the victim may also seek civil recovery. Relevant Civil Code provisions include:

Article 19, requiring every person to act with justice, give everyone his due, and observe honesty and good faith;
Article 20, making a person liable for damages if they willfully or negligently cause damage contrary to law;
Article 21, covering willful acts contrary to morals, good customs, or public policy;
Article 22, on unjust enrichment;
Article 1170, on liability for fraud, negligence, delay, or breach of obligation.

In a criminal case, civil liability may be included unless reserved or separately filed. In practical terms, however, collecting money is still difficult if the scammer is unknown, insolvent, abroad, or using mule accounts.

Where to Report an Online Scam in the Philippines

Office or platform	Best for	Practical notes
Bank or e-wallet provider	Immediate freezing, dispute, fraud ticket, account investigation	Report first and get a reference number
Receiving bank/e-wallet, if known	Flagging the recipient account	Some institutions require the sender’s bank to coordinate
BSP Consumer Assistance	Unresolved bank/e-wallet complaints	Usually after reporting to the institution first
PNP Anti-Cybercrime Group	Online fraud, phishing, fake accounts, cyber-enabled estafa	Regional anti-cybercrime units may receive complaints
NBI Cybercrime Division	Cybercrime investigation and digital evidence concerns	Bring printed and digital evidence
DOJ Office of Cybercrime	Cybercrime coordination, preservation, international matters	Useful for cross-border or platform-related cybercrime issues
DTI Consumer CARe	Online seller, non-delivery, defective product, consumer transaction	Best when there is a seller-consumer relationship
SEC iMessage	Investment scams, fake trading platforms, unauthorized solicitation	SEC registration is not the same as authority to solicit investments
Marketplace or social media platform	Account takedown, seller report, internal refund process	Save evidence before the page disappears

Step-by-Step: How to Build a Strong Complaint

Step 1: Create a clear timeline

Write the story in chronological order. Avoid emotional conclusions alone. Focus on facts.

A good complaint narrative answers:

Who contacted you?
What name, number, account, website, app, or page was used?
What was promised?
When did you send money?
How much did you send?
Where did you send it?
What happened after payment?
What refund demands did you make?
What evidence supports each statement?

Example:

On 12 March 2026, I saw a Facebook Marketplace listing for an iPhone 15 Pro. The seller used the name “Ana Reyes” and Messenger account URL ____. The seller promised same-day delivery after full payment. At 2:14 p.m., I transferred ₱38,000 from my BPI account to GCash number ____ under the name ____. After payment, the seller blocked me and deleted the listing. Attached are screenshots of the listing, conversation, payment receipt, and failed follow-up messages.

Step 2: Organize evidence by category

Do not submit random screenshots without explanation. Label them.

Folder or label	Contents
A - Identity Used by Scammer	Profile screenshots, phone number, email, page URL
B - Representations	Promises, ads, product photos, investment pitch
C - Payment Proof	Receipts, bank statements, reference numbers
D - After Payment	Blocking, excuses, refusal to refund, deleted page
E - Reports Made	Bank ticket, platform report, police/NBI acknowledgment
F - Other Victims	Group chats, similar complaints, affidavits if available

Step 3: File with the bank or e-wallet first

Ask for a written response or ticket number. If the institution refuses to act, delays unreasonably, or gives only generic replies, escalate to BSP with:

copy of your first complaint to the institution;
ticket number;
institution’s reply, if any;
transaction details;
requested resolution.

Step 4: File a cybercrime or estafa complaint

For PNP-ACG or NBI, bring:

valid government ID or passport
printed complaint narrative
screenshots and digital copies
proof of payment
bank/e-wallet ticket number
scammer’s details
device used, if available
notarized complaint-affidavit if already prepared

The NBI Cybercrime Division’s citizen charter lists investigative assistance for victims of computer crimes as available to the general public, with complaint-sheet assistance at the filing stage. In practice, the stronger your documentary evidence, the easier it is for investigators to assess the case.

Step 5: Prepare for prosecutor-level requirements

A criminal complaint usually needs a complaint-affidavit, which is a sworn written statement. It should attach evidence and explain why the respondent committed estafa, cybercrime, or another offense.

If the scammer’s real identity is unknown, the complaint may start with available identifiers, such as usernames, phone numbers, account names, and receiving accounts. Law enforcement may later seek subscriber data or account information through proper legal process.

Step 6: Consider civil recovery if the person is known

If you know the scammer’s real name and address, civil recovery may be possible.

For money claims not exceeding ₱1,000,000, the Supreme Court’s Rules on Expedited Procedures in First Level Courts may allow a small claims case, depending on the facts. Small claims are for payment or reimbursement of money. They are usually faster than ordinary civil cases, but you still need a defendant who can be served with summons. A username alone is usually not enough.

Can the Bank or E-Wallet Freeze the Scammer’s Account?

Possibly, but timing is everything.

If the money is still in the recipient account, a temporary hold may be possible under AFASA and BSP rules. If the scammer already withdrew it, converted it to crypto, transferred it to multiple mule accounts, or cashed out, recovery becomes much harder.

Important realities:

Banks and e-wallets usually will not disclose the recipient’s full personal details directly to you because of bank secrecy, data privacy, and internal policies.
They may coordinate with each other, BSP, law enforcement, or courts.
A temporary hold is not the same as automatic refund.
False or malicious reporting can create liability under AFASA.
A receiving account name may belong to a mule, not the mastermind.

Special Situations

If you are an OFW or Filipino abroad

You can still report the scam, especially if the money was sent to a Philippine bank or e-wallet. However, sworn documents executed abroad may need proper formalities.

Common options include:

signing before a Philippine Embassy or Consulate;
local notarization plus apostille if the country is part of the Apostille Convention;
consular authentication if apostille is not available or not accepted for the intended use;
sending scanned copies first, then originals if required.

Expect agencies or prosecutors to ask for a valid ID, contact details, and a clear way to reach you.

If you are a foreigner scammed by someone in the Philippines

A foreign victim may file a complaint in the Philippines. Prepare:

passport copy
proof of remittance or transfer
chat logs and platform records
Philippine bank/e-wallet recipient details
sworn statement, apostilled or consularized if executed abroad
English translation if documents are in another language

If the suspect is in the Philippines, local investigation may proceed through Philippine authorities. If the suspect is abroad or the platform data is overseas, expect additional delays because international cooperation is slower.

If the scam involved an investment scheme

Report to the SEC if the scheme involved:

guaranteed profits
pooled investments
referral commissions
fake trading dashboards
crypto or forex “managed accounts”
“tasking” platforms requiring deposits
solicitation from the public without proper authority

Under the Securities Regulation Code, investment contracts and securities generally require registration or authority. A company may be registered as a corporation but still have no authority to solicit investments from the public.

Large public investment scams may also be investigated as syndicated estafa under Presidential Decree No. 1689 when the legal elements are present.

If the scam was a fake online seller

Report to:

the platform or marketplace;
your payment provider;
DTI, if it is a consumer transaction;
PNP-ACG or NBI if there is clear fraud.

A simple delivery delay is not always estafa. But if the seller used a fake identity, reused stolen photos, accepted payments from many victims, blocked buyers after payment, or never had the item, those facts support fraud.

Common Mistakes That Hurt Scam Complaints

Deleting messages

Do not delete chats, emails, SMS, or app notifications. Screenshots help, but the original conversation is stronger.

Posting the alleged scammer’s private information online

Publicly posting names, IDs, addresses, or accusations can expose you to defamation, cyberlibel, harassment, or data privacy complaints, especially if the account holder is a mule or identity theft victim. Submit evidence to authorities instead.

Paying “recovery agents”

Many “fund recovery” pages are also scams. Be careful with anyone claiming they can hack, trace, reverse, or recover funds for an upfront fee.

Filing only a barangay complaint when the scammer is unknown

Barangay conciliation may help if the dispute is local and the person is known. But for anonymous online scams, different cities, corporate parties, or serious criminal offenses, barangay proceedings are usually not the main remedy.

Assuming SIM registration will instantly identify the scammer

SIM registration helps law enforcement, but criminals still use stolen IDs, mule SIMs, borrowed phones, fake documents, or compromised accounts. Telcos generally need legal process before disclosing subscriber information.

Waiting too long

Digital evidence disappears quickly. Scam pages are deleted, accounts change names, funds move through multiple wallets, and platforms may retain data only for limited periods. Report as soon as possible.

Practical Timelines and Costs

Action	Typical timeline	Usual cost
Bank/e-wallet fraud report	Same day acknowledgment; investigation varies	No filing fee
Temporary fund hold	Only if funds are still traceable and conditions are met	No direct filing fee
BSP escalation	BOB gives a reference number; response depends on case handling	No filing fee
NBI/PNP complaint filing	Same day intake possible; investigation may take weeks or months	No official complaint fee
Complaint-affidavit notarization	Same day	Notarial fee varies
Prosecutor preliminary investigation	Often months, depending on docket and complexity	No prosecutor filing fee for criminal complaint
DTI/SEC online complaint	Filing can be done online; processing varies	Usually no basic filing fee
Small claims case	Faster than ordinary civil case, but depends on service of summons and court calendar	Court docket and legal fees apply

Frequently Asked Questions

Can I still get my money back if I voluntarily sent it?

Possibly, but it is harder than an unauthorized transaction. If you knowingly approved the transfer but were deceived, the bank may not automatically refund you. Your best chance is fast reporting so the receiving account can be flagged or temporarily held if funds remain. You may also pursue criminal and civil remedies against the scammer.

Should I report to NBI or PNP Anti-Cybercrime Group?

Either may receive cybercrime-related complaints. PNP-ACG has regional anti-cybercrime units, while the NBI Cybercrime Division also handles computer crime investigations. If the case is urgent, report to your bank/e-wallet first, then file with the nearest appropriate cybercrime office.

Can GCash, Maya, or a bank reveal the scammer’s identity to me?

Usually not directly. Financial institutions are restricted by data privacy, bank secrecy, and internal rules. However, they may disclose information through proper legal process, regulatory inquiry, court order, subpoena, or coordination with law enforcement.

Is an online scam considered estafa in the Philippines?

Often, yes. If the scammer used deceit or false pretenses to make you send money, and you suffered damage, the facts may support estafa under Article 315 of the Revised Penal Code. If the internet, digital platforms, phishing pages, or electronic communications were used, cybercrime laws may also be relevant.

What if the scammer used someone else’s bank account?

That is common. The account holder may be a money mule, identity theft victim, recruited “cash-out” person, or part of the syndicate. Under RA 12010, money muling and buying, selling, lending, or renting financial accounts for criminal proceeds can be punished.

Are screenshots enough to file a complaint?

Screenshots are helpful, but stronger evidence includes the original device, complete chat thread, URLs, transaction receipts, bank statements, account details, and a sworn explanation of how the screenshots were taken. Courts may require authentication under the Rules on Electronic Evidence.

Can I file a case if I only know the scammer’s username?

You can start a report using the username, phone number, account link, receiving account, and other identifiers. But a court case against a person generally needs identity and service of legal notices. Law enforcement may help identify the person through lawful requests, subpoenas, warrants, and coordination with platforms or financial institutions.

How long does an online scam case take in the Philippines?

Simple reports may be received in a day, but investigation and prosecution can take months or longer. Delays are common when the scammer used fake identities, foreign platforms, mule accounts, cryptocurrency, or victims from different locations.

Should I confront the scammer?

Do not threaten, harass, or send more money. You may send one clear refund demand if safe, then preserve evidence. Arguing with the scammer often gives them time to delete accounts and move funds.

Key Takeaways

Report to your bank or e-wallet immediately; speed is critical.
Ask for the transaction to be flagged, investigated, and coordinated with the receiving institution.
Preserve the original chats, receipts, account details, URLs, and device evidence.
Online scams may involve estafa, cybercrime, money muling, social engineering, consumer law, or securities law.
RA 12010 allows temporary holding of certain disputed funds, but this is not an automatic refund.
File with PNP-ACG or NBI for cybercrime investigation; use DTI for consumer seller disputes and SEC for investment scams.
Do not rely on screenshots alone; organize evidence into a clear timeline.
Avoid recovery-agent scams, public shaming, and malicious reports.
If the scammer is unknown, start with investigation; if the scammer is known and reachable, civil recovery or small claims may also be considered.