If you have been scammed in the Philippines, act fast. Your first goal is to stop the money from moving, preserve evidence before it disappears, and report to the right office depending on the kind of scam: your bank or e-wallet, the CICC/PNP/NBI for cybercrime, the BSP for bank or e-wallet complaints, the DTI for online sellers, or the SEC for investment and lending-related scams. Philippine law now gives scam victims more specific tools, especially under the 2024 Anti-Financial Account Scamming Act, but recovery still depends heavily on how quickly you report and how well you document what happened.

First Things to Do Immediately After Being Scammed

The first few hours matter. Many scams move money through several accounts within minutes, especially when GCash, Maya, bank transfers, InstaPay, PESONet, crypto, or fake “merchant” accounts are involved.

Stop communicating with the scammer except to preserve evidence. Do not threaten, insult, or negotiate impulsively. Take screenshots first.
Call or message your bank, e-wallet, credit card issuer, or payment provider immediately. Ask for:
- blocking or freezing of your account if your login or OTP was compromised;
- tagging of the transfer as fraudulent;
- investigation of the recipient account;
- temporary holding of funds if still possible;
- a written ticket number or complaint reference number.
Call the government cybercrime hotline if the scam happened online. The BSP’s own complaint guide directs scam and fraud victims to law enforcement agencies such as the PNP, NBI, and CICC, and lists CICC’s 1326 hotline, report@cicc.gov.ph, PNP-ACG’s acg@pnp.gov.ph, and NBI Cybercrime Division’s ccd@nbi.gov.ph among the relevant channels.
Preserve all evidence before the scammer deletes or blocks you. Save screenshots, screen recordings, URLs, mobile numbers, profile links, emails, receipts, bank transfer confirmations, courier details, and all transaction reference numbers.
Change passwords and secure your accounts. Change passwords for your email, bank, e-wallet, social media, marketplace, and messaging apps. Turn on multi-factor authentication. If your SIM, email, or phone was compromised, report that separately.
File the correct complaint, not just a social media post. Posting online may warn others, but it does not replace a formal complaint. A police blotter or online report also does not automatically become a criminal case unless it is properly investigated and referred for prosecution.

What Counts as a Scam Under Philippine Law?

A “scam” is not one single crime under Philippine law. Depending on the facts, it may fall under estafa, cybercrime, access device fraud, investment fraud, consumer protection violations, data privacy violations, or the Anti-Financial Account Scamming Act.

Estafa under the Revised Penal Code

The most common criminal charge for scams is estafa, also called swindling, under Article 315 of the Revised Penal Code. Estafa generally involves fraud or deceit that causes another person to part with money, property, or rights.

Article 315 punishes a person who defrauds another through methods such as abuse of confidence, misappropriation, false pretenses, use of a fictitious name, pretending to have authority or business, imaginary transactions, or other similar deceits. (Lawphil)

In practical terms, estafa may apply when someone:

pretends to sell a product but never intends to deliver it;
collects money for a fake job, visa, investment, loan, or business opportunity;
uses a false identity or fake company;
receives money in trust and refuses to return or deliver what was promised;
induces you to send money through lies made before or at the time you paid.

A simple unpaid debt is not always estafa. The key issue is usually whether there was deceit from the beginning or misappropriation of money or property received for a specific purpose.

Online Scams and Cybercrime

If the scam used the internet, social media, SMS, email, online banking, e-wallets, fake websites, phishing links, or hacked accounts, the Cybercrime Prevention Act of 2012, Republic Act No. 10175, may apply. RA 10175 covers computer-related fraud and identity theft, and it also allows certain traditional crimes to be treated as cybercrimes when committed through information and communications technology. (Lawphil)

This matters because online evidence can disappear quickly. Law enforcement may need to request preservation, disclosure, or examination of computer data through proper legal processes.

Financial Account Scamming, Money Mules, and Phishing

Republic Act No. 12010, the Anti-Financial Account Scamming Act (AFASA), became law in 2024. It specifically targets scams involving bank accounts, e-wallets, and other financial accounts.

AFASA penalizes money muling, such as allowing another person to use, borrow, buy, rent, sell, or lend a financial account to receive or transfer proceeds of crimes or social engineering schemes. (Bank Secrecy Policy)

It also covers social engineering schemes, where a person obtains sensitive identifying information through deception or fraud, such as pretending to be from a bank or e-wallet provider, using electronic communications, and gaining unauthorized access or control over a financial account. (Bank Secrecy Policy)

A major practical feature of AFASA is that banks, e-wallet providers, and covered financial institutions may temporarily hold funds subject of a disputed transaction for a BSP-prescribed period not exceeding 30 calendar days, unless extended by a court. (Bank Secrecy Policy) The law also says that a covered institution may be liable for restitution if it fails to use adequate risk controls or fails to exercise the highest degree of diligence, and conviction is not required before restitution may be ordered under that provision. (Bank Secrecy Policy)

This is why you should report to your bank or e-wallet provider immediately and ask for a written fraud ticket.

Which Office Should You Report To?

Different scams go to different offices. Reporting to the wrong office wastes time, so identify the nature of the scam first.

Type of scam	Where to report first	Why
Unauthorized bank/e-wallet transfer, phishing, OTP scam, hacked account	Bank/e-wallet provider, then CICC/PNP-ACG/NBI, then BSP if provider response is inadequate	Funds may still be held or traced; AFASA and BSP rules may apply
Fake online seller, undelivered item, deceptive online shop	DTI, platform complaint system, and law enforcement if fraud is clear	DTI handles consumer complaints against online and offline businesses
Investment scam, Ponzi scheme, fake trading platform, unauthorized solicitation	SEC and law enforcement	Securities and investment solicitation are regulated by the SEC
Fake loan app, abusive lending or financing company, unauthorized lending	SEC; BSP if a BSP-supervised institution is involved	SEC regulates lending and financing companies
Romance scam, job scam, visa scam, crypto scam, impersonation	CICC, PNP-ACG, NBI Cybercrime Division	These are usually cyber-enabled fraud or estafa
Identity theft or misuse of personal data	NPC, CICC/PNP/NBI, and the affected institution	Data privacy and cybercrime issues may overlap
Small unpaid amount where scammer is identifiable and you mainly want money back	Small claims court, if within the limit and purely civil	Faster civil recovery route, but it does not punish the scammer criminally

Step-by-Step Guide to Reporting a Scam in the Philippines

1. Report to the bank, e-wallet, or payment provider

For bank or e-wallet scams, do this first. Give complete details:

your full name and account number or wallet number;
date and exact time of transaction;
amount sent or stolen;
transaction reference number;
recipient name, account number, wallet number, or QR code if available;
screenshots of the scam conversation, link, or fake page;
whether you gave an OTP, password, PIN, card number, CVV, or clicked a link;
police, CICC, PNP, or NBI report number if already available.

Ask specifically whether the provider can:

block your account;
block the recipient account;
initiate a fraud investigation;
coordinate with the receiving institution;
temporarily hold disputed funds under AFASA and BSP rules, if applicable.

The BSP says its Consumer Assistance Mechanism is generally a second-level recourse: you first report to the BSP-supervised institution’s own consumer assistance mechanism, then escalate to BSP-CAM if you are not satisfied with the action or response.

2. Report to CICC, PNP-ACG, or NBI Cybercrime Division

For online scams, report to the cybercrime channels as soon as possible.

The NBI Cybercrime Division citizen’s charter describes its service as investigative assistance for victims of computer crimes, where complainants may proceed to file a complaint or request for investigation, undergo preliminary interview, and execute sworn statements or submit affidavits and supporting documents. (National Bureau of Investigation)

In practice, you should prepare:

valid government ID;
printed screenshots and digital copies;
transaction receipts;
phone numbers, email addresses, usernames, URLs, and profile links;
device used, if relevant;
your sworn statement or complaint-affidavit.

For urgent online scams, the CICC/I-ARC hotline 1326 is useful because it can help route reports and coordinate with relevant agencies.

3. File a complaint-affidavit for criminal prosecution

A criminal case usually begins with a complaint-affidavit. This is a sworn written statement explaining:

who you are;
who scammed you, if known;
what was promised or represented;
why the representation was false;
when and how you paid;
how much you lost;
what evidence supports your complaint;
what law may have been violated, such as estafa, cybercrime, AFASA, or access device fraud.

Attach supporting documents as annexes. The complaint-affidavit is usually notarized or sworn before an authorized officer. If the case is investigated by PNP or NBI, the investigator may help prepare referral documents to the prosecutor.

4. Follow through with the prosecutor

The prosecutor determines whether there is probable cause, meaning enough basis to charge the respondent in court. You may be required to submit additional evidence, attend clarificatory hearings, or respond to the respondent’s counter-affidavit.

Common bottlenecks include:

incomplete identity of the scammer;
fake or borrowed account names;
screenshots without URLs, timestamps, or transaction numbers;
refusal of platforms or banks to release information without proper legal process;
complainants failing to appear or submit additional affidavits;
treating the case as purely civil when the evidence of deceit is weak.

5. Consider a civil case or small claims case if recovery is your main goal

A criminal case may lead to restitution, but it can take time. If the scammer is identifiable and the claim is mainly for payment of money, a civil action may be more direct.

For smaller money claims, the Rules on Expedited Procedures in First Level Courts allow small claims cases where the claim does not exceed ₱1,000,000, exclusive of interest and costs. (Supreme Court of the Philippines) A small claims action is started by filing a Statement of Claim with supporting affidavits and documents; the Rules state that no formal pleading other than the Statement of Claim is necessary. (Supreme Court of the Philippines) Lawyers are generally not allowed to appear for parties at the small claims hearing, unless the lawyer is the plaintiff or defendant. (Supreme Court of the Philippines)

Small claims may be useful for:

unpaid refunds;
undelivered products where the seller is known;
money sent under a written promise;
barangay settlement amounts not paid;
simple money claims with clear proof.

It is less useful when the scammer’s identity is unknown, the account was fake, or the main goal is criminal punishment.

Evidence You Should Gather

Strong evidence is often the difference between a useful report and a dead-end complaint.

Evidence	Why it matters
Screenshots of chats, ads, posts, profiles, emails, and SMS	Shows the false promise, identity used, and timeline
URLs and profile links	Helps investigators trace pages, accounts, and domains
Bank/e-wallet receipts and reference numbers	Proves payment and identifies the receiving account
Account names, numbers, QR codes, mobile numbers	Helps trace money mules or recipient accounts
Delivery records or tracking details	Useful for online seller scams
Voice recordings, call logs, or voicemails	May support impersonation or threats, if lawfully obtained
Demand letter or refund request	Shows you tried to resolve and the other side refused
Notarized complaint-affidavit	Required for many formal legal processes
Valid ID and proof of address	Needed by agencies and financial institutions
Platform complaint reports	Shows you promptly reported to Lazada, Shopee, Facebook, TikTok, bank, e-wallet, or other platform

For screenshots, include the whole screen when possible: date, time, account name, URL, and message thread. Do not crop too aggressively. Save files in more than one place.

Special Rules for Common Scam Situations

If your bank or e-wallet account was hacked

Report immediately and ask the provider to disable access, reset credentials, and investigate unauthorized transactions. Under AFASA, financial institutions must maintain risk management systems and controls such as multi-factor authentication, fraud management systems, and verification processes. (Bank Secrecy Policy)

Do not delete suspicious messages or phishing links. Investigators may need them.

If you sent money to a “money mule” account

The person named on the receiving account may claim they were only paid to receive money or that their account was borrowed. That does not automatically excuse them. AFASA specifically penalizes buying, selling, renting, lending, or allowing use of financial accounts for proceeds of crimes or social engineering schemes. (Bank Secrecy Policy)

If the scam involved an online seller

For online sellers, the DTI E-Commerce FAQ says consumer complaints against online sellers may be sent to the DTI Fair Trade Enforcement Bureau at fteb@dti.gov.ph, with eco@dti.gov.ph copied, and that DTI accommodates complaints for online and offline businesses. (DTI ECommerce)

However, DTI mediation is different from a criminal complaint. If the seller used a fake identity, fake proof of shipment, multiple victims, or had no intention to deliver from the start, also consider reporting to law enforcement.

If the scam was an investment scheme

Be careful with “guaranteed returns,” “double your money,” crypto trading pools, forex bots, rent-a-slot schemes, tasking scams, and fake cooperatives.

The Securities Regulation Code, Republic Act No. 8799, generally requires securities to be registered before they are sold or offered for sale or distribution in the Philippines. (Lawphil) Reports involving investment solicitation, lending companies, financing companies, and online lending platforms often belong with the SEC, especially if the entity is collecting investments from the public.

If your personal data was used

If the scam involved misuse of your ID, selfie, SIM, account details, or personal information, consider a complaint with the National Privacy Commission. The NPC says formal complaints must be filed in a specific format, using its form, printed and filled out, notarized, and submitted in person, by courier, or by scanned email. (National Privacy Commission)

Also report to law enforcement if the personal data was used for fraud, identity theft, or unauthorized financial transactions.

If you are a foreigner or you are outside the Philippines

You can still report a scam connected to the Philippines. AFASA jurisdiction may apply if an element was committed in the Philippines, a device or computer system in the Philippines was used, damage was caused to a person in the Philippines, or the financial account is maintained with an institution operating in the Philippines. (Bank Secrecy Policy)

If you are abroad, prepare:

passport copy and contact details;
notarized affidavit or sworn statement;
apostilled or consularized documents when required;
Special Power of Attorney if someone in the Philippines will file or follow up for you;
proof of remittance, bank transfer, Wise/PayPal/crypto transaction, or card payment;
screenshots showing Philippine phone numbers, accounts, addresses, or entities.

For property-related scams, foreigners should be extra cautious because the Philippine Constitution generally restricts foreign ownership of land. Some structures, such as condominium units within nationality limits or long-term leases, may be lawful, but promises that a foreigner can freely own private land in the Philippines should be checked carefully before paying.

Common Mistakes That Hurt Scam Complaints

Waiting too long before reporting

The biggest mistake is hoping the scammer will voluntarily refund you. Report first, negotiate later if appropriate. Delays can allow the money to be withdrawn, transferred, or converted to crypto.

Deleting chats or blocking too early

Blocking may protect you emotionally, but deleting chats can destroy evidence. Export or screenshot the conversation first.

Relying only on a barangay blotter

A barangay blotter may help record an incident, but serious estafa and cybercrime complaints usually require law enforcement investigation and prosecutor action. Barangay conciliation is often not the right route for online scammers, unknown persons, or offenses punishable beyond barangay jurisdiction.

Thinking the bank will automatically refund everything

Banks and e-wallets investigate based on rules, evidence, timing, and whether security controls were bypassed. AFASA improves victim protection, but it does not mean every scam loss is automatically reimbursed.

Paying “recovery agents”

After a scam, many victims are targeted again by people claiming they can recover funds, hack accounts, or “trace crypto” for an advance fee. Treat these as high-risk. Real law enforcement and regulators do not ask for crypto recovery fees through private wallets.

Posting accusations without care

Warning others is understandable, but public posts naming someone as a scammer can create separate risks if facts are incomplete or the wrong person is identified. Focus first on formal reports and evidence preservation.

Frequently Asked Questions

Can I still recover money after being scammed in the Philippines?

Possibly, but recovery is never guaranteed. Your chances are better if you report immediately to the bank, e-wallet, or payment provider and provide complete transaction details. If funds are still in the financial system, they may be held or traced. If withdrawn in cash or converted to crypto, recovery becomes harder.

Is filing a police blotter enough?

No. A blotter records an incident, but it is not the same as a criminal case. For prosecution, you usually need a complaint-affidavit, supporting evidence, investigation, and prosecutor action.

Should I report to PNP or NBI?

For online scams, either the PNP Anti-Cybercrime Group or the NBI Cybercrime Division may assist. The CICC hotline can also help route cybercrime reports. Choose the office that is accessible and able to act quickly, then keep copies of all report numbers and documents.

Can I file estafa if the scammer promised to pay me back?

Yes, if the evidence shows deceit, fraud, or misappropriation that fits Article 315 of the Revised Penal Code. But if it is only a failed loan or unpaid debt with no proof of fraud from the beginning, it may be treated as a civil case instead of estafa.

What if I only know the scammer’s GCash, Maya, or bank account name?

Report anyway. The account name, number, wallet number, transaction reference, and timestamp are important leads. The receiving account may belong to a money mule, and AFASA specifically addresses misuse of financial accounts.

Can I file a case if the scammer used a fake Facebook account?

Yes. Save the profile link, screenshots, messages, payment details, and any phone numbers or email addresses used. Investigators may need platform data, but that usually requires proper legal process.

Can DTI help with online shopping scams?

Yes, especially for consumer complaints against online sellers. DTI may help with mediation, refund, replacement, or enforcement involving sellers and merchants. If the seller used fraud, fake identity, or victimized many people, also report to cybercrime authorities.

Can I sue in small claims court?

Yes, if your claim is purely civil, the amount is within the small claims limit, and you can identify the defendant. Small claims is designed to be faster and simpler, but it is mainly for money recovery, not criminal punishment.

What if I am an OFW or foreigner outside the Philippines?

You may still report through online channels, your bank or payment provider, CICC, and Philippine law enforcement. If a representative will act for you in the Philippines, prepare a properly notarized, consularized, or apostilled Special Power of Attorney when required.

Key Takeaways

Report bank, e-wallet, and card scams immediately to the financial institution and ask for a fraud ticket and possible temporary holding of funds.
Online scams should be reported to cybercrime channels such as CICC, PNP-ACG, or NBI Cybercrime Division.
Estafa under Article 315 of the Revised Penal Code is the usual criminal charge for many scams, but cybercrime, AFASA, securities, consumer, access device, and data privacy laws may also apply.
Preserve screenshots, URLs, transaction receipts, account numbers, and timestamps before the scammer deletes evidence.
BSP complaints usually come after first reporting to the bank or e-wallet provider.
DTI handles many online seller complaints; SEC handles investment, lending, financing, and securities-related scams.
Small claims court may help recover money when the defendant is known and the claim is purely civil.
The faster and more completely you document and report, the better your chances of tracing funds, supporting prosecution, and pursuing recovery.