If you were scammed online in the Philippines, act fast but methodically. The first few hours matter because banks, e-wallets, platforms, and investigators may still be able to trace the transaction, hold suspicious funds, preserve account data, or stop the scammer from victimizing others. This guide explains what counts as an online scam under Philippine law, where to report it, what documents to prepare, how the criminal process usually works, and what practical steps improve your chances of recovery.

First Things to Do Immediately After an Online Scam

Before focusing on punishment, focus on containment and evidence. Many victims lose valuable proof because they delete chats, block the scammer too early, or rely only on screenshots without saving transaction details.

1. Stop further loss

Do these right away:

Do not send more money, even if the scammer says the payment is “for verification,” “tax,” “unlocking,” “processing,” or “refund release.”
Do not pay “recovery agents.” Many are second-layer scammers who target victims after the first scam.
Change passwords for your email, banking apps, e-wallets, social media accounts, and shopping accounts.
Enable multi-factor authentication on email and financial accounts.
Log out other devices from Facebook, Gmail, Apple ID, Google, online banking, and e-wallet accounts.
If your SIM, phone, or email was compromised, contact your telco, bank, or e-wallet provider through official channels.

2. Report the transaction to your bank or e-wallet immediately

If money was sent through GCash, Maya, online banking, credit card, debit card, QR payment, InstaPay, PESONet, or another payment service, report it first to the financial institution involved.

Ask for:

A case or ticket number
A temporary hold, freeze, or trace request
A written acknowledgment of your report
Instructions for filing a formal dispute or fraud complaint

Under Republic Act No. 12010 (2024), the Anti-Financial Account Scamming Act or AFASA, banks, non-bank financial institutions, e-wallet providers, and payment service providers under the Bangko Sentral ng Pilipinas (BSP) are required to maintain fraud management systems and account protection measures. AFASA also allows institutions to temporarily hold funds subject of a disputed transaction for a period prescribed by BSP rules, not exceeding 30 calendar days, unless extended by a court. You can read the full text of RA 12010 on Lawphil.

This does not mean every victim will automatically get money back. It means speed matters: the sooner the transaction is flagged, the better the chance that funds have not yet been withdrawn, transferred, or layered through multiple accounts.

3. Preserve evidence before confronting or blocking the scammer

Save everything in a clear, chronological folder:

Screenshots of chats, posts, ads, profiles, comments, invoices, receipts, and payment instructions
Full names, usernames, page names, phone numbers, email addresses, bank or e-wallet account names, QR codes, and account numbers
Transaction receipts with reference numbers, dates, times, amounts, and recipient details
Links to Facebook pages, Marketplace listings, TikTok shops, websites, Telegram groups, Viber accounts, or Shopee/Lazada stores
Delivery tracking numbers, fake IDs, fake business permits, or fake SEC/DTI certificates sent by the scammer
Call logs and SMS messages
Screen recordings showing the profile, URL, and conversation flow
Your written timeline of events

Do not rely on one screenshot. Online evidence is stronger when it shows the identity used, misrepresentation made, payment instruction, actual payment, and failure or refusal to deliver, refund, or perform.

Is an Online Scam a Crime in the Philippines?

Usually, yes. The exact case depends on how the scam was committed.

The most common legal bases are:

Situation	Possible legal basis
Fake seller, bogus booking, fake rental, fake job placement, love scam, or investment deception	Estafa under Article 315 of the Revised Penal Code
Scam committed through social media, email, websites, messaging apps, fake links, or digital platforms	Cybercrime Prevention Act of 2012, RA 10175
Phishing, OTP theft, fake bank/e-wallet representative, account takeover, money mule account	Anti-Financial Account Scamming Act, RA 12010
Unauthorized use of another person’s identity or personal data	Data Privacy Act of 2012, RA 10173, and possibly RA 10175
Fake online store or consumer transaction with an identifiable seller/platform	Internet Transactions Act of 2023, RA 11967, Consumer Act, and DTI procedures
Ponzi scheme, fake crypto investment, fake trading platform, unauthorized solicitation of investments	Securities Regulation Code, SEC rules, and possible estafa
Unauthorized credit card, debit card, or access device use	Access Devices Regulation Act of 1998, RA 8484

Estafa under Article 315 of the Revised Penal Code

Many online scams are prosecuted as estafa, also called swindling. In simple terms, estafa happens when a person defrauds another through deceit, false pretenses, abuse of confidence, or fraudulent acts that cause damage.

Common examples:

A seller accepts payment for a phone, gadget, bag, ticket, or appliance but never intended to deliver.
A person pretends to be a recruiter and collects “processing fees.”
A fake landlord collects reservation fees for a condo or apartment they do not control.
A scammer pretends to be a bank, e-wallet, courier, government agency, or relative to obtain money or account access.
A person solicits investments with false promises of guaranteed returns.

Article 315 is available in the Revised Penal Code on Lawphil.

Cybercrime Prevention Act: When the scam is done online

Under RA 10175, the Cybercrime Prevention Act of 2012, computer-related fraud, computer-related identity theft, and other offenses committed through information and communications technology may be punished as cybercrimes. Section 6 of RA 10175 also provides that crimes under the Revised Penal Code or special laws, if committed through ICT, are covered by the Act and may carry a penalty one degree higher.

The Supreme Court discussed this rule in Disini v. Secretary of Justice, G.R. No. 203335 (February 11, 2014), explaining that Section 6 treats the use of ICT as a qualifying circumstance for existing crimes committed through the internet. The decision is available through the Supreme Court E-Library.

The full text of RA 10175 is also available through the Supreme Court E-Library.

AFASA: Phishing, money mules, and account takeover

AFASA is especially important for modern scams involving bank accounts and e-wallets.

It penalizes, among others:

Money muling — using, lending, selling, buying, renting, or allowing the use of a financial account to receive or move scam proceeds
Opening accounts under fictitious names or using another person’s identity documents
Social engineering schemes — obtaining sensitive identifying information through deception, such as fake bank calls, phishing links, OTP scams, or fake customer service messages
Buying or selling financial accounts
Economic sabotage when the prohibited acts involve groups, multiple victims, mass mailers, or human trafficking

AFASA also provides that conviction is not always required before restitution from an institution may be considered, particularly where the institution failed to employ adequate risk management systems or failed to exercise the required diligence under the law and BSP rules. In practice, however, reimbursement depends heavily on the facts, the speed of reporting, the institution’s investigation, and whether the victim also complied with account security responsibilities.

Where to Report an Online Scam in the Philippines

There is no single office for all online scams. File with the agency that matches the problem.

Type of online scam	Where to report
Cybercrime, fake profile, phishing, hacked account, online seller scam, sextortion, identity theft	PNP Anti-Cybercrime Group (PNP-ACG) or NBI Cybercrime Division
Bank, e-wallet, credit card, online transfer, unauthorized transaction	Your bank/e-wallet first, then BSP Consumer Assistance Mechanism if unresolved
Fake investment, Ponzi, crypto trading scam, unauthorized solicitation	Securities and Exchange Commission (SEC)
Online purchase from an identifiable seller or marketplace	Platform complaint system and DTI Consumer Care
Personal data misuse, identity theft, leaked IDs, privacy violation	National Privacy Commission (NPC)
Large-scale organized scam or cross-border cybercrime	PNP-ACG, NBI, and possibly DOJ Office of Cybercrime coordination

PNP Anti-Cybercrime Group

The PNP-ACG investigates cybercrime complaints and has regional anti-cybercrime units. For many ordinary victims, this is the most accessible first law enforcement option.

A typical PNP-ACG report includes:

Valid government ID
Complaint-affidavit or written complaint
Screenshots and transaction receipts
Links, usernames, account numbers, phone numbers, and email addresses used by the scammer
Device used, if relevant
Your contact details

You may use the official PNP-ACG eComplaint portal or check the official PNP-ACG website directly.

NBI Cybercrime Division

The NBI Cybercrime Division also handles computer-related crimes. Its Citizen’s Charter for “Investigative Assistance for Victims of Computer Crimes” states that complainants proceed to the Cybercrime Division, undergo preliminary interview and initial investigation, execute sworn statements or submit prepared affidavits, and provide supporting documents. The NBI indicates no filing fee for that listed service and an initial processing time of about 1 hour and 10 minutes, although the full investigation naturally takes longer. See the NBI page on Investigative Assistance for Victims of Computer Crimes.

The NBI also maintains an online complaint page.

BSP Consumer Assistance for bank or e-wallet complaints

If your complaint involves a BSP-supervised financial institution, file first with the bank, e-wallet, or financial service provider. If unresolved, you may escalate to BSP.

BSP’s consumer assistance page explains that unresolved concerns may be filed through the BSP Online Buddy or through alternative channels such as email using a Complaints, Inquiries and Requests form. BSP also lists the details to include: summary of the complaint, requested resolution, contact information, copy of the complaint filed with the financial institution, the institution’s reply if any, and supporting documents. See the official BSP Consumer Assistance Channels.

SEC for investment scams

If the scam involved “guaranteed returns,” crypto trading pools, forex trading, co-ownership schemes, tasking investments, online lending investments, or solicitation of funds from the public, report it to the SEC.

Use the SEC’s official iMessage SEC-Wide Ticketing System. SEC registration as a corporation is not the same as authority to solicit investments from the public. Many scams show a real SEC certificate of incorporation to look legitimate, but that certificate only proves the entity exists as a corporation; it does not automatically authorize investment-taking.

DTI for online consumer transactions

For online purchases involving sellers, merchants, or platforms, file through the DTI Consumer CARe System. This is useful for defective goods, non-delivery, refusal to refund, misleading online ads, and merchant-related complaints.

The Internet Transactions Act of 2023, RA 11967, strengthens consumer protection in internet transactions and created the legal framework for the DTI E-Commerce Bureau. DTI’s e-commerce page links to the Internet Transactions Act and its IRR.

DTI complaints work best when the seller is identifiable and still operating. If the seller is a fake identity or organized scammer, law enforcement reporting is still necessary.

NPC for identity theft or misuse of personal data

If the scam involved misuse of your ID, face, phone number, address, screenshots of private documents, unauthorized disclosure of personal data, or a privacy breach, you may file with the National Privacy Commission.

NPC requires a specific complaint format. Its official filing guide states that a formal complaint should be printed, filled out, notarized, and submitted in person, by courier, or by scanned email, depending on the allowed mode. See the NPC page on filing formal complaints and the NPC mechanics for complaints.

Step-by-Step Guide to Filing a Strong Online Scam Complaint

Step 1: Write a clear timeline

Create a simple timeline with dates and times:

How you found the seller, recruiter, investment promoter, or scammer
What they promised
What name, account, page, or platform they used
What payment instructions they gave
When and how you paid
What happened after payment
Attempts to demand delivery, refund, or explanation
Any threats, blocking, deletion, or account changes after payment

Investigators and prosecutors appreciate a chronological story. It saves them from guessing what happened from scattered screenshots.

Step 2: Prepare a complaint-affidavit

A complaint-affidavit is a sworn written statement of facts. It is usually notarized or sworn before an authorized officer.

It should include:

Your full name, address, contact details, nationality, and ID details
The scammer’s known or used identity
Platform used
Amount lost
Transaction details
Step-by-step narration
List of attached evidence
Statement that the facts are based on your personal knowledge and authentic records

Avoid emotional conclusions like “they are obviously criminals.” Instead, state facts: what was represented, what you relied on, how much you paid, and what happened afterward.

Step 3: Attach organized evidence

Label your files clearly:

Annex A — Screenshot of seller profile
Annex B — Screenshot of product listing
Annex C — Chat where seller promised delivery
Annex D — Payment instruction
Annex E — GCash/Maya/bank receipt
Annex F — Demand for refund
Annex G — Seller blocked complainant or deleted page

For digital evidence, include both screenshots and, where possible, URLs, timestamps, original files, email headers, and transaction reference numbers.

Step 4: File with PNP-ACG or NBI

Bring or upload:

Complaint-affidavit
Valid ID
Evidence folder
Proof of payment
Bank/e-wallet ticket number
Any platform report number
Device used, if investigators ask for examination

You may report to either PNP-ACG or NBI. For urgent fund tracing, also report to the financial institution immediately; law enforcement investigation and financial institution investigation can move in parallel.

Step 5: Follow up with the prosecutor process

After investigation, the case may be referred to the Office of the City Prosecutor or Provincial Prosecutor for preliminary investigation. This is the stage where the prosecutor determines whether there is probable cause to charge the respondent in court.

A typical preliminary investigation may involve:

Filing of complaint and supporting affidavits
Issuance of subpoena to the respondent, if identifiable
Submission of counter-affidavit
Possible reply-affidavit
Prosecutor’s resolution
Filing of Information in court if probable cause exists

Timelines vary widely. Simple complaints may move in a few months. Cases involving anonymous accounts, foreign platforms, cryptocurrency, multiple banks, fake IDs, or uncooperative service providers often take longer.

Can You Get Your Money Back?

Sometimes, but recovery is not automatic.

There are several possible routes:

Route	What it can do	Practical limitation
Bank/e-wallet dispute	May trace, hold, reverse, or investigate funds	Works best if reported immediately before withdrawal or transfer
AFASA disputed transaction process	May allow temporary hold and coordinated verification	Subject to BSP rules, facts, and institution action
Criminal case	May lead to restitution, civil liability, plea arrangements, or conviction	Slow; scammer must be identified and assets located
Civil case or small claims	Direct recovery of money from identifiable defendant	Hard if identity/address is fake or defendant has no assets
Platform refund process	May refund under marketplace rules	Depends on platform policy and transaction coverage
SEC/DTI administrative action	May stop operations, issue warnings, mediate consumer disputes	Not always a direct recovery mechanism

For purely monetary claims against an identifiable person, a small claims case may be possible if the principal claim does not exceed ₱1,000,000, exclusive of interest and costs, under the Rules on Expedited Procedures in the First Level Courts. The Supreme Court announced this threshold in its notice on expedited procedures in first-level courts.

Small claims are useful for failed online transactions where the seller is known, reachable, and located in the Philippines. They are less useful against fake identities, mule accounts, or foreign scam operations.

Common Mistakes That Hurt Online Scam Complaints

Deleting conversations

Do not delete chats out of anger or embarrassment. Even embarrassing messages may be necessary to prove deception.

Sending scattered screenshots

Random screenshots are hard to evaluate. Arrange evidence by date and label each file.

Reporting only to Facebook or the platform

Platform reporting may remove the page, but it does not automatically create a criminal case. If money was lost, report to your bank/e-wallet and law enforcement too.

Waiting too long

Funds can move through several accounts within minutes. Report the transaction immediately even if you are still preparing the full affidavit.

Falling for “refund processing” scams

A real bank, e-wallet, government office, PNP, NBI, BSP, SEC, or court will not ask you to send more money to recover stolen funds.

Thinking a barangay blotter is enough

A barangay blotter may help document an incident, but online scam cases generally require bank/e-wallet reporting and filing with PNP-ACG, NBI, or the prosecutor. Barangay conciliation may apply only to certain civil disputes between parties covered by the Katarungang Pambarangay system, not to serious cybercrime or estafa cases.

Special Situations

If you are an OFW or living abroad

You can still prepare a complaint. Practical options include:

Filing through online portals or email channels where available
Executing a complaint-affidavit before the Philippine Embassy or Consulate
Having foreign notarized documents apostilled if executed in an Apostille Convention country
Executing a Special Power of Attorney so a trusted representative in the Philippines can coordinate filings and follow-ups
Keeping Philippine contact details active for investigators and prosecutors

If the scammer, bank account, or e-wallet is in the Philippines, Philippine authorities may still have jurisdiction over relevant local acts and accounts.

If you are a foreigner scammed by someone in the Philippines

Foreigners may file complaints in the Philippines. Bring or prepare:

Passport or government ID
Proof of transaction
Proof of communication
Your local contact details or authorized Philippine representative
Notarized or authenticated affidavit if filing through a representative

If your documents are executed abroad, Philippine agencies may require consular acknowledgment or apostille, depending on the document and country.

If the scam involved cryptocurrency

Crypto scams are harder because funds may move through wallets, exchanges, mixers, and foreign platforms. Still preserve:

Wallet addresses
Exchange account details
Transaction hashes
Screenshots of trading dashboards
Telegram, Discord, WhatsApp, or Facebook group messages
Deposit instructions
Promised returns or withdrawal conditions

Report to PNP-ACG or NBI and, if it involved investment solicitation, to the SEC.

If the scammer used your identity

If your ID, selfie, phone number, or social media profile is being used to scam others:

Save proof of impersonation.
Report the fake account to the platform.
File with PNP-ACG or NBI.
If personal data was misused or exposed, consider filing with NPC.
Inform your contacts publicly but carefully, without naming unverified suspects.

Documents Checklist

Document or evidence	Why it matters
Valid ID	Confirms complainant identity
Complaint-affidavit	Main sworn narration of facts
Transaction receipts	Proves payment, amount, date, and recipient details
Chat screenshots	Shows misrepresentation, payment instruction, and promises
Profile/page screenshots	Shows identity used by scammer
Links and usernames	Helps investigators preserve or trace online data
Bank/e-wallet ticket number	Shows prompt financial report
Demand for refund or delivery	Shows non-performance and possible deceit
Witness affidavits	Useful if another person saw the transaction or was also victimized
Platform report acknowledgment	Shows reporting to marketplace/social media platform
Notarized SPA, if representative files	Authorizes someone to act for you

Frequently Asked Questions

What should I do first if I was scammed online in the Philippines?

Report the transaction immediately to your bank or e-wallet, request a hold or trace, save the ticket number, then preserve all evidence. After that, prepare your complaint-affidavit and file with PNP-ACG or NBI.

Can I report an online scam even if the amount is small?

Yes. Small losses can still be part of a larger pattern. Even if your individual loss is modest, your report may help connect accounts, phone numbers, pages, and mule accounts used against other victims.

Is a fake online seller guilty of estafa?

A fake online seller may be liable for estafa if there was deceit or false representation that caused you to part with money and suffer damage. The facts must show more than mere delay; evidence should indicate fraudulent intent, such as fake identity, repeated excuses, blocking, deletion of the page, or multiple victims.

Should I file with PNP-ACG or NBI?

You may file with either. PNP-ACG is often accessible through regional units and online reporting, while the NBI Cybercrime Division also handles computer-related offenses and more complex investigations. For urgent financial tracing, report to your bank or e-wallet first or at the same time.

Can GCash, Maya, or my bank reverse the payment?

Possible, but not guaranteed. Reversal depends on timing, available funds, transaction type, fraud findings, and internal rules. Report immediately because funds may be withdrawn or transferred quickly.

What if the scammer used a real person’s bank account?

That account may belong to the scammer, an accomplice, a victim of identity theft, or a money mule. Under AFASA, money muling and buying, selling, renting, lending, or allowing use of financial accounts for scam proceeds can be punished.

Do I need a lawyer to file a cybercrime complaint?

Not always. Many victims file directly with PNP-ACG, NBI, banks, BSP, DTI, SEC, or NPC. A lawyer can help when the amount is large, the evidence is complex, the respondent is identifiable and you want civil recovery, or you are abroad and need properly prepared affidavits and authority documents.

Can I file a case if the scammer is abroad?

Yes, but investigation becomes more difficult. Philippine authorities may still investigate Philippine bank accounts, e-wallets, SIMs, platforms, victims, or accomplices connected to the scam. Cross-border evidence and enforcement usually take longer.

Is posting the scammer online a good idea?

Be careful. Posting warnings may help others, but naming people without verified facts can expose you to defamation, privacy, or harassment issues. A safer approach is to report to the platform and authorities, preserve proof, and avoid accusations beyond what your evidence clearly supports.

How long does an online scam case take in the Philippines?

Initial reporting may be done quickly, but investigation, subpoenas, financial tracing, prosecutor review, and court proceedings can take months or longer. Cases with fake identities, mule accounts, foreign platforms, or multiple victims usually take more time.

Key Takeaways

Report the transaction to your bank or e-wallet immediately and request a trace, hold, or dispute review.
Preserve chats, receipts, links, usernames, account numbers, and screenshots before blocking or deleting anything.
Online scams may involve estafa under Article 315 of the Revised Penal Code, cybercrime under RA 10175, and financial account scamming under RA 12010.
File cybercrime reports with PNP-ACG or NBI, financial complaints with BSP after first reporting to the institution, investment scam complaints with SEC, consumer complaints with DTI, and privacy complaints with NPC.
A strong complaint is chronological, factual, sworn, and supported by organized evidence.
Recovery is more likely when the report is made quickly, the recipient account is identified, and funds have not yet been withdrawn or moved.
Foreigners and Filipinos abroad can file complaints, but affidavits, special powers of attorney, consular notarization, or apostille may be needed.
Avoid recovery scams, fake government pages, and anyone asking for more money to “release” your refund.