If you were scammed in the Philippines, the most important thing is to move quickly, preserve evidence, and report in the right order. Many victims lose time arguing with the scammer, deleting embarrassing chats, or posting public warnings before securing their accounts. A better approach is: stop the loss, document everything, report to the bank or e-wallet immediately, then file with the proper cybercrime, consumer, or securities authority depending on the type of scam.
What counts as a scam under Philippine law?
A “scam” is not one single offense under Philippine law. It may fall under several laws depending on how the fraud was done.
The most common criminal charge is estafa, or swindling, under Article 315 of the Revised Penal Code. In simple terms, estafa usually involves deceit or abuse of confidence that causes another person to part with money or property. The Supreme Court has explained that estafa by false pretenses requires a fraudulent representation made before or at the time of the fraud, reliance by the victim, and damage as a result. (Supreme Court E-Library)
Online scams may also fall under the Cybercrime Prevention Act of 2012, Republic Act No. 10175, especially where fraud, identity theft, hacking, phishing, fake accounts, or computer systems are involved. RA 10175 specifically covers computer-related fraud, and crimes under the Revised Penal Code may carry a higher penalty when committed through information and communications technology. (Lawphil)
For scams involving bank accounts, e-wallets, OTPs, phishing links, or money mule accounts, the newer and very important law is Republic Act No. 12010, the Anti-Financial Account Scamming Act of 2024 or AFASA. It covers money muling, social engineering schemes, buying or selling financial accounts, and using electronic communications to obtain another person’s sensitive financial information. (Lawphil)
A scam may also involve:
| Type of scam | Possible legal basis | Usual agency involved |
|---|---|---|
| Fake seller, undelivered item, fake online store | Consumer Act, RA 7394; Internet Transactions Act, RA 11967; estafa if fraudulent | DTI, platform, PNP/NBI |
| Bank or e-wallet phishing, OTP scam, unauthorized transfer | AFASA, RA 11765, RA 10175 | Bank/e-wallet, BSP, CICC, PNP/NBI |
| Fake investment, Ponzi, “guaranteed profit,” crypto pooling | Securities Regulation Code, RA 8799; estafa; cybercrime | SEC, PNP/NBI, prosecutor |
| Identity theft or hacked account | RA 10175; Data Privacy Act, RA 10173 | PNP/NBI, NPC |
| Fake job, visa, work abroad, romance scam | Estafa; cybercrime; possible illegal recruitment if employment-related | PNP/NBI, DMW/POEA-related channels, prosecutor |
First 24 hours: what to do immediately
1. Stop further loss
Do not send more money, even if the scammer says it is for “verification,” “unlocking,” “tax,” “refund processing,” “anti-money laundering clearance,” or “final fee.” Many scams are designed to extract several rounds of payments after the first loss.
Immediately do the following:
- Change passwords for email, banking apps, e-wallets, social media, and shopping accounts.
- Turn on multi-factor authentication.
- Call or message your bank, e-wallet, or credit card issuer through official channels only.
- Ask for a ticket number or reference number.
- Request blocking, reversal, chargeback, dispute processing, or temporary holding of funds where applicable.
- If your SIM or phone was compromised, contact your telco and secure your number.
Under AFASA, financial institutions may temporarily hold funds involved in a disputed transaction for the period prescribed by BSP rules, not exceeding 30 calendar days unless extended by a court. AFASA also requires coordinated verification of disputed transactions among institutions, regardless of whether the funds are still in the financial system. (Lawphil)
This is why reporting to the bank or e-wallet quickly matters. Once money leaves the first recipient account and moves through several mule accounts, recovery becomes much harder.
2. Preserve evidence before the scammer disappears
Take screenshots and screen recordings before the account is deleted or renamed. Keep the original messages if possible.
Save:
- Full name, username, mobile number, email address, profile link, page URL, website, Telegram/Viber/WhatsApp handle, or marketplace profile
- Screenshots of the offer, advertisement, product listing, investment pitch, job offer, or fake payment page
- Full chat history, including dates and timestamps
- Bank deposit slips, Instapay/PESONet receipts, GCash/Maya transaction receipts, QR codes, reference numbers, and account names
- Tracking numbers, invoices, order confirmations, emails, and SMS messages
- Links to fake websites or phishing pages
- IDs or documents sent by the scammer, even if you suspect they are fake
- Your own proof of payment and proof that the promised product, service, investment return, refund, or job did not materialize
Do not edit screenshots except to make backup copies. If you need to redact personal information for public posting, keep an unredacted copy for investigators.
3. Report first to the bank, e-wallet, card issuer, or platform
For money transfers, report to both sides if known:
- Your bank or e-wallet
- The receiving bank or e-wallet, if identified
- The shopping platform or social media marketplace
- The courier or payment gateway, if relevant
Ask for the exact status of the transaction. Was it completed, pending, reversed, withdrawn, transferred again, or cashed out? Ask whether they can issue a certificate, transaction record, or dispute report.
For BSP-supervised institutions, the Bangko Sentral ng Pilipinas Consumer Assistance Mechanism is a second-level recourse. This means you generally report first to the bank, e-wallet, or financial institution’s customer assistance channel, then escalate to BSP if unresolved or mishandled. BSP’s official guidance says complaints may be filed through BSP Online Buddy, or by email with the appropriate form if BOB is inaccessible. (Bank Secrecy Policy)
4. Report the scam to cybercrime channels
For online fraud, the practical reporting routes are:
- CICC / National Anti-Scam Hotline 1326 for online scams and cyber fraud reports. Philippine government reports have directed online fraud victims to dial 1326 and use eGovPH reporting features for suspicious links and screenshots. (Philippine News Agency)
- PNP Anti-Cybercrime Group (PNP-ACG) for cybercrime complaints. A PNP response on the official FOI portal directed cyber concerns to the PNP-ACG eComplaint portal and ACG email. (www.foi.gov.ph)
- NBI Cybercrime Division for investigative assistance. The NBI Citizen’s Charter states that the general public may avail of investigative assistance for computer crimes, with complaint filing, preliminary interview, sworn statements, and collection of supporting documents forming part of the process. (National Bureau of Investigation)
A blotter or hotline report is helpful, but it is usually not the same as a complete criminal complaint. For prosecution, you will normally need a complaint-affidavit and supporting evidence.
5. Do not publicly accuse people without care
It is understandable to want to warn others. But avoid posting statements that go beyond what you can prove, especially if you name a person, upload IDs, or accuse someone of a crime before filing. Public posts can create risks of cyberlibel, harassment, or data privacy complaints. A safer public warning focuses on the scam method, fake page, transaction details already publicly visible, and advice to avoid sending money.
Where to report depending on the scam
Bank, e-wallet, credit card, or OTP scam
Report immediately to the bank, e-wallet, or card issuer. Ask for:
- Account blocking
- Transaction dispute
- Chargeback, if card-based
- Trace or retrieval request
- Temporary holding of funds under AFASA, if applicable
- Written confirmation or ticket number
Then escalate to BSP only if the institution fails to act, gives an unclear response, or closes the case without proper explanation. RA 11765, the Financial Products and Services Consumer Protection Act of 2022, applies to financial products and services and strengthens consumer protection against abusive, unfair, fraudulent, or harmful practices. (Supreme Court E-Library)
Online seller or marketplace scam
Report first inside the platform, especially if payment passed through the platform’s escrow or wallet system. If the seller is a business or online merchant, file a complaint with DTI.
The DTI Consumer CARe system is an online dispute resolution platform for consumer complaints. (DTI Consumer Care System) For online seller complaints, DTI’s e-commerce FAQ also directs consumers to email the Fair Trade Enforcement Bureau and copy the DTI e-commerce office. (DTI ECommerce)
If the seller used a fake identity, fake page, mule account, or disappeared after payment, treat it also as a possible estafa or cybercrime case, not just a consumer complaint.
RA 11967, the Internet Transactions Act of 2023, was enacted to protect online consumers and merchants engaged in internet transactions and to create the Electronic Commerce Bureau. (Supreme Court E-Library)
Investment scam, Ponzi, “double your money,” crypto pool, or fake trading group
Report to the Securities and Exchange Commission if money was solicited from the public with a promise of profit, passive income, pooled funds, trading returns, staking rewards, or referral commissions.
Under the Securities Regulation Code, RA 8799, securities and investment contracts are regulated by the SEC, and securities generally cannot be offered or sold to the public without proper registration and authority. (Lawphil)
The SEC has an iMessage complaint portal for submitting complaints or reports. (Securities and Exchange Commission) In practice, also check whether the entity is merely registered as a corporation. SEC company registration is not the same as authority to solicit investments from the public.
Identity theft, hacked account, leaked ID, or misuse of personal data
If your personal information, ID, selfie, bank details, or private messages were misused, report the cybercrime aspect to PNP-ACG or NBI Cybercrime. If the issue involves misuse, malicious disclosure, improper disposal, or violation of data privacy rights, the National Privacy Commission recognizes the right to file a complaint. (National Privacy Commission)
NPC’s complaint process generally requires a specific complaint format, evidence, and supporting documents. (National Privacy Commission)
How to prepare a strong complaint-affidavit
A complaint-affidavit is your sworn written statement explaining what happened. It should be factual, chronological, and supported by attachments.
A good complaint-affidavit usually includes:
- Your full name, address, contact details, and valid ID.
- How you first encountered the scammer.
- What the scammer represented or promised.
- Why you believed the representation at the time.
- The exact amounts paid, dates, channels, and reference numbers.
- What happened after payment.
- Attempts to demand delivery, refund, or explanation.
- The scammer’s responses, excuses, disappearance, blocking, or deletion of accounts.
- The specific damage suffered.
- A list of attached evidence.
For estafa by false pretenses, the timeline matters because deceit must generally exist before or at the time you parted with your money. If the person honestly intended to perform at first but later failed, the case may look more civil than criminal. But if the seller used a fake identity, fake stock photos, fake receipts, fake authority, fake investment licenses, or immediately disappeared after payment, those facts help show fraudulent intent.
For estafa by misappropriation, demand is often important. The Supreme Court has identified demand as one of the elements of estafa through misappropriation under Article 315(1)(b). (Supreme Court E-Library) A simple written demand through chat, email, or formal demand letter may become relevant evidence, depending on the facts.
What documents should you prepare?
| Document | Why it matters |
|---|---|
| Valid government ID | Confirms your identity as complainant |
| Complaint-affidavit | Main sworn statement for investigation and prosecution |
| Screenshots of chats and posts | Shows representations, promises, and admissions |
| Proof of payment | Connects your loss to the recipient account |
| Bank/e-wallet transaction history | Helps trace movement of funds |
| Platform complaint ticket | Shows you reported promptly |
| Bank/e-wallet dispute ticket | Important for BSP or AFASA-related issues |
| Demand message or demand letter | Useful in misappropriation or refund cases |
| Witness affidavits | Helpful if others saw the transaction or were also victimized |
| Police blotter or incident report | Useful supporting record, but usually not enough by itself |
For NBI cybercrime complaints, the Citizen’s Charter states there is no fee for the listed complaint filing and initial investigation steps, but complainants and witnesses may be asked to execute sworn statements and submit supporting documents. (National Bureau of Investigation)
What happens after you file a criminal complaint?
The process usually looks like this:
- Intake and initial assessment. The police, PNP-ACG, NBI, or cybercrime unit reviews your facts and documents.
- Sworn statement or complaint-affidavit. You sign your statement under oath.
- Investigation. Investigators may request information from platforms, telcos, banks, payment providers, or other agencies, subject to legal procedures.
- Referral to the prosecutor. If there is enough basis, the complaint is filed for preliminary investigation.
- Preliminary investigation. The prosecutor determines whether there is probable cause.
- Filing in court. If probable cause is found, an Information is filed in court.
- Trial and civil liability. If the accused is convicted, the court may impose penalties and civil liability.
The prosecutor controls criminal prosecution once the case is formally filed. Under the Revised Rules of Criminal Procedure, criminal actions are prosecuted under the direction and control of the prosecutor. (Supreme Court E-Library)
Timelines vary widely. Simple complaints may be assessed quickly, but subpoenas, bank tracing, platform records, foreign-based accounts, and multiple victims can stretch the process for months. The biggest bottlenecks are often incomplete evidence, anonymous accounts, uncooperative platforms, and money moving through several mule accounts.
Can you recover the money?
Sometimes, but not always. Recovery depends on speed, traceability, and whether funds remain in the financial system.
The best chance is usually within the first hours or days, through:
- Bank or e-wallet dispute channels
- Temporary holding of funds under AFASA
- Chargeback for eligible card transactions
- Marketplace refund or buyer protection
- Coordinated verification among financial institutions
AFASA is important because it allows disputed funds to be temporarily held and, in certain situations, recognizes restitution even without waiting for a criminal conviction where the institution failed to use adequate risk controls or the highest degree of diligence. (Lawphil)
If the scammer is identified, you may also pursue civil recovery. Civil Code Articles 19, 20, and 21 require people to act with justice, honesty, and good faith and to compensate others for damage caused contrary to law, morals, good customs, or public policy. (Lawphil) Article 1170 also supports damages where a person is guilty of fraud, negligence, delay, or breach of an obligation. (Lawphil)
For smaller, clearly documented money claims against an identifiable person, small claims court may be an option if the case fits the rule. The Supreme Court has increased the small claims threshold to ₱1,000,000, covering certain money claims such as loans, services, leases, sale of personal property, and enforcement of barangay settlements or arbitration awards. (Supreme Court of the Philippines) But small claims is not useful if the scammer is unknown, outside reach, using fake identities, or if the main goal is criminal prosecution.
Do you need to go to the barangay first?
Usually, serious scam and cybercrime cases do not need barangay conciliation before reporting to law enforcement, especially when the penalty exceeds one year of imprisonment or the fine exceeds ₱5,000. The Katarungang Pambarangay rules exclude offenses with penalties above those limits. (Lawphil)
Barangay proceedings may still be useful for minor disputes between people in the same city or municipality where the real issue is a refund or debt, not a criminal cyber scam. But for phishing, fake investment schemes, identity theft, online seller fraud using fake accounts, or e-wallet mule transfers, go directly to the proper agency.
Special notes for Filipinos abroad and foreigners
If you are outside the Philippines, you can still prepare a complaint. Practical options include:
- Execute an affidavit before a Philippine Embassy or Consulate.
- Use a local notary abroad, then have the document apostilled if the country is part of the Apostille Convention.
- Authorize a trusted representative in the Philippines through a Special Power of Attorney.
- Keep originals or certified copies of payment records, bank statements, and platform records.
DFA’s Apostille system accepts applications by the document owner or an authorized representative, and DFA guidance notes that foreign documents may need proper attestation or certification depending on use. (DFA Appointment System)
Foreigners can report scams in the Philippines, especially if the transaction, scammer, platform activity, bank account, or victim impact has a Philippine connection. In practice, the challenge is not nationality but evidence, jurisdiction, and whether investigators can identify and reach the offender.
Common mistakes that hurt scam complaints
Waiting too long before reporting to the bank
In digital fraud, speed is crucial. Report immediately even if you are still gathering evidence. You can supplement documents later.
Deleting chats out of shame or anger
Many victims delete conversations because they feel embarrassed. Do not do this. Shame is one of the scammer’s tools. Evidence is more important.
Reporting only on social media
Public posts may warn others, but they do not replace a bank dispute, BSP escalation, PNP/NBI complaint, SEC report, DTI complaint, or prosecutor filing.
Thinking a police blotter is already a criminal case
A blotter is only a record of an incident. A criminal case usually requires a complaint-affidavit, evidence, investigation, prosecutor action, and court filing.
Sending more money to “recover” the first payment
Recovery scams are common. Anyone asking for a “release fee,” “unlocking fee,” “tax clearance,” or “processing fee” to retrieve your lost money should be treated with extreme caution.
Filing false or exaggerated reports
Be accurate. AFASA penalizes malicious reporting made with malice or bad faith that results in the temporary holding of funds. (Lawphil) Stick to facts you can prove.
Frequently Asked Questions
Can I still report a scam if the amount is small?
Yes. Even small amounts can be reported, especially if the scammer is victimizing many people. For very small online seller disputes, platform and DTI channels may be more practical at first. If there is clear fraud, fake identity, or repeated victimization, report to cybercrime authorities.
Should I report to the NBI or PNP?
Either may be appropriate for cybercrime. NBI Cybercrime and PNP-ACG both handle cyber-related complaints. If one office is inaccessible or the matter is urgent, use the available channel first and keep proof of your report. For immediate online scam reporting, the 1326 anti-scam hotline may also help with triage and referral.
Can I get my money back from GCash, Maya, or my bank?
Possibly, but it depends on the facts. Report immediately and request a dispute, trace, hold, or reversal. Recovery is more likely if the funds have not yet been withdrawn or transferred onward. If the institution failed to apply required safeguards, AFASA and financial consumer protection rules may become relevant.
What if I voluntarily sent the money?
You can still report the scam. Many estafa cases involve victims voluntarily sending money because they were deceived. The key question is whether fraudulent representations induced you to pay.
What if I gave my OTP or clicked a phishing link?
Report immediately. The institution may investigate whether the transaction was authorized, whether there was gross negligence, and whether security controls were adequate. Do not assume you have no remedy simply because you clicked a link or gave information under deception.
Is an online seller scam a civil case or criminal case?
It can be either. A delayed delivery or ordinary refund dispute may be civil or consumer-related. A fake seller who used false identity, fake proof, fake listings, or disappeared after payment may be criminal estafa and possibly cybercrime.
What if the scammer used someone else’s bank account?
That account may be a mule account. AFASA specifically covers money muling activities such as using, lending, selling, buying, renting, or allowing use of financial accounts for proceeds of crimes or social engineering schemes. (Lawphil) Give investigators the account name, number, bank or e-wallet, and transaction reference.
Can I file a case if I only know the phone number or e-wallet name?
Yes, but identification may be difficult. Provide every available detail: number, account name, QR code, screenshots, profile links, reference numbers, and timestamps. Investigators may need legal processes to obtain subscriber, account, or platform information.
Can a foreigner file a scam complaint in the Philippines?
Yes, if there is a Philippine connection, such as a Philippine bank account, Philippine-based scammer, Philippine transaction, or fraud targeting someone in the Philippines. If abroad, prepare notarized or apostilled documents, or use a Philippine consulate or authorized representative.
How long does a scam case take?
There is no fixed timeline. Bank disputes may move faster than criminal cases. Cybercrime investigations and prosecutor proceedings may take months, especially if records must be obtained from banks, telcos, platforms, or foreign entities.
Key Takeaways
- Report to your bank, e-wallet, card issuer, or platform immediately before the money moves further.
- Preserve screenshots, receipts, URLs, account names, reference numbers, and full chat history.
- Online scams may involve estafa, cybercrime, AFASA violations, consumer law, securities law, or data privacy law.
- PNP-ACG, NBI Cybercrime, CICC 1326, BSP, DTI, SEC, and NPC have different roles depending on the scam.
- A blotter is useful, but a strong complaint-affidavit with evidence is what usually moves a case forward.
- Recovery is possible in some cases, especially when reported quickly, but no agency can guarantee that money already withdrawn or moved through mule accounts will be returned.
- Do not delete evidence, send more “recovery fees,” or publicly accuse people beyond what you can prove.