An illegal online casino can disappear, change domains, or move deposited money within hours, so reporting quickly—and sending the complaint to the right offices—matters. In the Philippines, the practical process is to verify the casino’s exact website or app, preserve the digital evidence, alert the bank or e-wallet when money is involved, and report the operation to PAGCOR and the appropriate cybercrime agency.
First, Check Whether the Online Casino Is Actually Illegal
Not every online casino operating in the Philippines is automatically illegal. PAGCOR continues to regulate licensed domestic electronic gaming platforms, including electronic casino games, online poker, sports betting, bingo, and similar products.
However, the website, app, operator, and particular gaming activity must be authorized. A legitimate brand name does not make every website using that name legitimate.
Check the exact website address
Compare the casino’s complete domain name with PAGCOR’s current list of accredited gaming system administrators, registered brands, and approved domain names.
PAGCOR’s list dated June 30, 2026 identifies not only operators and brands but also their approved main domains, subdomains, and additional URLs. A website may copy the name, logo, colors, and layout of a licensed operator while using an unauthorized domain that differs by only one letter or symbol.
For example, check carefully for:
- Misspelled domains
- Added hyphens, numbers, or unusual extensions
- Links shortened through URL-shortening services
- A website that redirects to a different domain
- An app downloaded through a private link instead of the operator’s registered website
- A “mirror site” that is not included in PAGCOR’s official list
The safest comparison is the exact domain, not merely the casino’s displayed brand name.
Understand the POGO ban
Executive Order No. 74, issued on November 5, 2024, banned Philippine Offshore Gaming Operators, Internet Gaming Licensees, and other offshore gaming operations. Existing offshore operators and related service providers were required to cease operations by December 31, 2024.
This ban covers operations serving offshore customers and their gaming agents, content providers, support providers, and ancillary services. In practical terms, it did not abolish PAGCOR-licensed domestic electronic gaming offered within the Philippines under the present regulatory system. (Lawphil)
A website that still claims to possess a valid Philippine “POGO license” or “IGL license” should therefore be treated with serious suspicion. Read the full Executive Order No. 74.
Warning signs of an illegal or fraudulent casino
None of these signs proves illegality by itself, but several together justify immediate verification and reporting:
- The exact website is absent from PAGCOR’s approved-domain list.
- It displays a PAGCOR logo but no verifiable operator or license information.
- It presents an old POGO or IGL certificate as a current license.
- Deposits are sent to changing personal GCash, Maya, or bank accounts.
- Withdrawals require an additional “tax,” “clearance fee,” or “account activation fee.”
- Customer service operates only through Telegram, Facebook Messenger, WhatsApp, or Viber.
- The operator asks users to install an APK file from an unknown link.
- It allows gambling without meaningful identity or age verification.
- Agents recruit people to receive deposits in their personal accounts.
- The website repeatedly changes domains after being blocked.
- The operator threatens users who demand withdrawals.
- The casino uses the name of a legitimate Philippine operator but redirects users to a different site.
A delayed withdrawal does not always mean that a licensed casino is illegal. Legitimate operators may conduct identity verification, anti-money laundering checks, or account reviews. The crucial questions are whether the operator and exact domain are authorized and whether the conduct involves fraud or other unlawful activity.
Philippine Laws That May Apply
PAGCOR’s licensing authority
Presidential Decree No. 1869, as amended by Republic Act No. 9487 of 2007, grants PAGCOR authority to operate and license casinos, gaming clubs, gaming pools, and similar activities within Philippine territory, subject to statutory exceptions for activities regulated under other franchises, special laws, or authorized local-government powers. (Lawphil)
An online casino cannot become legal merely by registering a corporation, obtaining a mayor’s permit, or presenting a Securities and Exchange Commission registration. Corporate registration and local business permits do not replace the gaming authorization required from the proper regulator.
Illegal gambling under Presidential Decree No. 1602
Presidential Decree No. 1602 of 1978 penalizes unauthorized gambling activities, including participation, operation, maintenance of gambling places, possession of gambling paraphernalia under prohibited circumstances, and knowingly allowing premises to be used for illegal gambling.
Executive Order No. 13 of 2017 further describes illegal gambling as a game or scheme involving wagers that is not authorized by the government agency empowered to license it, is conducted contrary to licensing conditions, or operates outside the territorial jurisdiction of the licensing authority. It also directs the PNP, NBI, DOJ, DILG, and DICT to coordinate against illegal gambling. (Lawphil)
Read Presidential Decree No. 1602 and Executive Order No. 13.
Cybercrime-related liability
When an underlying offense is committed through computers, mobile devices, websites, electronic communications, or similar technologies, Section 6 of Republic Act No. 10175, the Cybercrime Prevention Act of 2012, may apply. It generally provides for a penalty one degree higher when a crime under the Revised Penal Code or a special law is committed through information and communications technology, subject to the particular charges and facts determined by prosecutors and courts. (Lawphil)
Other possible offenses may include:
- Estafa or fraud under the Revised Penal Code
- Identity theft and computer-related fraud under RA 10175
- Unauthorized use of payment cards under RA 8484
- Money-mule and social-engineering offenses under RA 12010
- Money laundering under RA 9160, as amended
- Falsification or use of false licenses and certificates
- Human trafficking under RA 9208, as amended, when workers are recruited, confined, threatened, or forced to participate
- Data Privacy Act violations under RA 10173 when personal information is unlawfully collected, disclosed, or misused
Anti-Financial Account Scamming Act
Republic Act No. 12010 of 2024, the Anti-Financial Account Scamming Act or AFASA, penalizes money-mule activities, social-engineering schemes, and the buying, selling, lending, or misuse of financial accounts for fraudulent transactions.
AFASA and the Bangko Sentral ng Pilipinas rules allow financial institutions to temporarily hold funds involved in a disputed transaction. The statutory maximum is generally 30 calendar days unless extended by a competent court. A complaint from an aggrieved party may provide a basis for coordinated verification, so reporting immediately to the bank or e-wallet can be as important as reporting to the police. (Bangko Sentral ng Pilipinas)
Where to Report an Illegal Online Casino
| Situation | Report first to | Also report to |
|---|---|---|
| Unlicensed website, app, or casino brand | PAGCOR | PNP Anti-Cybercrime Group or NBI Cybercrime Division |
| Money was transferred or stolen | Bank or e-wallet immediately | CICC Hotline 1326 and PNP/NBI |
| Unauthorized card transaction | Card issuer immediately | PNP/NBI and CICC |
| Physical office, POGO-style compound, or betting hub | Local police or 911 if urgent | NBI, PNP Anti-Cybercrime Group, and PAGCOR |
| Threats, confinement, weapons, or immediate danger | 911 | Nearest police station or NBI |
| Fake advertisements or social-media recruitment | PAGCOR and the platform | CICC, PNP, or NBI |
| Misuse of IDs or personal information | PNP/NBI | National Privacy Commission when appropriate |
PAGCOR
For suspected unlicensed domestic online gaming, send the exact website, app, brand, operator details, and evidence to PAGCOR’s Electronic Gaming Licensing Department.
PAGCOR’s regulatory contact page lists:
- Electronic Gaming Licensing Department: eGaming_Policy@pagcor.ph
- PAGCOR trunklines: +63 2 8521-1542 and +63 2 8522-0299
- General concerns: info@pagcor.ph
PAGCOR can verify whether an operator, brand, gaming product, or domain is licensed. It can also coordinate regulatory enforcement and referrals to law-enforcement agencies. PAGCOR itself is not a substitute for a criminal complaint when fraud, theft, threats, or identity misuse occurred. (PAGCOR)
Cybercrime Investigation and Coordinating Center
For scams and cyber-enabled fraud, contact the government’s 24-hour Hotline 1326. Reports may also be submitted through the eReport feature of the eGovPH app or by email at report@cicc.gov.ph.
CICC serves as a coordinating and response channel. It may help route information to the PNP, NBI, telecommunications companies, financial institutions, or other agencies, but a formal prosecution may still require a sworn complaint and personal participation from the victim or witness. (Philippine Information Agency)
PNP Anti-Cybercrime Group
Report online casino operations involving fraudulent websites, social-media accounts, electronic payments, hacking, threats, identity theft, or organized cybercrime to the PNP Anti-Cybercrime Group or the nearest Regional Anti-Cybercrime Unit.
An initial report may be sent to acg@pnp.gov.ph. For urgent threats or an active physical operation, contact 911 or the nearest police station rather than waiting for an email response. (CyberSecurity.PH)
National Bureau of Investigation
The NBI Cybercrime Division handles computer-related offenses, while its Anti-Fraud Division may handle financial deception and fraudulent transactions. An initial report may be submitted through the NBI online complaint page, but complainants should be prepared for an interview, sworn complaint, submission of supporting documents, and possible examination of the relevant device.
The NBI Citizen’s Charter states that Cybercrime Division intake has no official fee. Its listed initial intake and authority-to-investigate processing time totals about one hour and ten minutes. This is only the intake stage—not the complete investigation, identification of suspects, warrant application, or filing of criminal charges. (National Bureau of Investigation)
How to Report an Illegal Online Casino Step by Step
1. Stop sending money and secure your accounts
Do not pay another withdrawal fee, tax, insurance charge, verification deposit, or account-unlocking fee.
Immediately:
- Change passwords for affected email, bank, and e-wallet accounts.
- Enable multi-factor authentication.
- Lock or replace compromised payment cards.
- Log out unknown devices and sessions.
- Tell the bank or e-wallet that the transfer is linked to suspected fraud.
- Ask for a complaint or case-reference number.
Do not wait for PAGCOR or the police before contacting the financial institution. Fraudulent funds may pass through several accounts within minutes.
2. Preserve the evidence before the website disappears
Save the evidence in its original form whenever possible. Republic Act No. 8792 and the Rules on Electronic Evidence recognize electronic documents, but the person relying on them may have to show that they are authentic and have not been improperly altered. (Lawphil)
Collect:
- Full website URLs, including redirect links
- Screenshots showing the phone or computer’s date and time
- Screen recordings showing how the site opens and operates
- The app’s download link, file name, package name, and app-store listing
- Advertisements, referral codes, QR codes, and affiliate links
- Casino account username and registered mobile number
- Chat messages, emails, voice messages, and support tickets
- Deposit and withdrawal history
- Bank or e-wallet transaction receipts
- Recipient account numbers, account names, and reference numbers
- Copies of the claimed PAGCOR license or certificate
- Phone numbers and social-media profiles of agents
- Names, addresses, office locations, vehicle details, or company information
- Written demands for additional payment
- Evidence of threats or harassment
Keep the original files. Do not rely only on cropped screenshots pasted into a document. Export complete conversations when the messaging platform allows it, and retain the device used for the transaction.
3. Verify the operator and exact domain
Search PAGCOR’s current list for:
- The operator’s corporate name
- The displayed brand
- The exact main domain
- Any approved subdomain or additional URL
- The type of gaming product offered
If the brand appears but the exact URL does not, report the URL as a possible clone or unauthorized mirror. Do not assume that a similar-looking domain is covered by the legitimate operator’s license.
4. Prepare a clear incident summary
A useful report answers these questions:
- What happened?
- When did it begin?
- Which website, app, or social-media page was involved?
- How did you discover it?
- Why do you believe it is illegal or fraudulent?
- How much money was sent?
- Which accounts received the money?
- What did the operator promise?
- What happened when you tried to withdraw?
- Are other victims involved?
- Is there a physical office or compound?
- Are threats, minors, foreign workers, or possible trafficking involved?
A simple chronological account is more useful than a long emotional narrative. Avoid conclusions that you cannot support. Describe what you personally saw, received, paid, or experienced.
5. File reports with both PAGCOR and law enforcement
Send PAGCOR the licensing and domain information. Send the PNP or NBI the criminal and financial evidence.
Using more than one proper channel is not improper duplication because the agencies perform different functions:
- PAGCOR verifies licensing and regulatory status.
- CICC coordinates cyber-incident response and referrals.
- PNP and NBI investigate possible crimes.
- Banks and e-wallets trace or temporarily hold disputed funds.
- Prosecutors determine whether criminal charges should be filed.
State in each report which other agencies have already received the complaint and include their reference numbers.
6. Execute a sworn complaint when requested
An email tip can trigger verification, but a criminal case commonly requires a complainant or witness to execute a sworn complaint or affidavit.
Bring:
- A valid government-issued ID
- Printed incident chronology
- Original phone, laptop, or other relevant device
- Copies of transaction records
- Screenshots and exported conversations
- Bank or e-wallet complaint reference
- PAGCOR or CICC acknowledgment
- Names and contact details of witnesses
The NBI’s Cybercrime Division may assist in preparing the sworn complaint sheet. Its published process does not impose an official intake fee, although privately obtained notarization, printing, travel, and document-authentication services may have separate costs. (National Bureau of Investigation)
7. Keep the reference numbers and follow up in writing
Maintain a case folder containing:
- Date submitted
- Agency or office
- Receiving officer
- Reference or docket number
- Documents submitted
- Follow-up dates
- Additional evidence supplied
Do not repeatedly send separate reports with inconsistent details. Use the same chronology and explain any correction clearly.
What Happens After You Report?
Depending on the evidence, authorities may:
- Verify the operator and domain with PAGCOR.
- Request preservation of subscriber, account, or transaction records.
- Coordinate with banks, e-wallets, telecommunications companies, hosting providers, and online platforms.
- Identify account holders, domain registrants, agents, or physical locations.
- Apply for cybercrime warrants, search warrants, or related court orders.
- Conduct surveillance or an entrapment operation when legally appropriate.
- Block or seek removal of unlawful websites, numbers, advertisements, or accounts.
- Refer the case for inquest or preliminary investigation before a prosecutor.
- Coordinate immigration, trafficking, labor, or organized-crime investigations when foreign workers or physical compounds are involved.
There is no universal investigation deadline. A licensing check may be relatively quick, while tracing foreign-hosted domains, layered e-wallet transfers, cryptocurrency, fake identities, or offshore operators may take weeks or months.
Reporting does not guarantee recovery of gambling deposits or stolen funds. Recovery is more likely when the financial institution is notified before the recipient withdraws or transfers the money.
Common Mistakes That Weaken a Report
Reporting only the brand name
Illegal operators frequently copy legitimate brands. Always include the full URL, app link, and screenshots of the address bar.
Deleting the app or conversation too early
Removing the app, clearing the browser, or deleting messages may destroy useful evidence. Secure the account first, then preserve the device and data.
Paying another fee to release winnings
A demand for repeated “tax,” “verification,” “anti-money laundering,” or “unlocking” payments is a common fraud pattern. Philippine taxes are not normally collected by sending money to a changing personal e-wallet account.
Confronting a suspected physical operation
Do not enter a compound, follow workers, trespass, or publicly accuse named individuals. Record lawful observations from a safe place and give the information to police or the NBI.
Posting personal information publicly
Publicly posting account numbers, IDs, phone numbers, or unverified accusations may expose victims, compromise the investigation, or create separate privacy and defamation issues. Give unredacted evidence directly to the authorities.
Assuming a PAGCOR logo proves legitimacy
Logos and certificates can be copied or fabricated. Verification must be based on PAGCOR’s official records and the exact approved domain.
Waiting for the casino to “fix” the problem
Waiting several days may allow funds, domains, advertisements, and accounts to disappear. Preserve the evidence and report while communication remains active.
Reporting From Abroad or as a Foreigner
A complainant does not need to be a Filipino citizen to report an illegal online casino affecting the Philippines.
Foreigners and overseas Filipinos should provide:
- Passport or other government-issued identification
- Current overseas address and contact details
- Philippine contact details, when available
- Complete transaction records
- Time zone and dates used in the chronology
- English translations of important foreign-language documents
- Details showing the connection to the Philippines, such as a Philippine website, operator, bank account, e-wallet, phone number, employee, or physical location
An affidavit signed abroad may need to be notarized at a Philippine embassy or consulate, or notarized locally and apostilled when the country participates in the Apostille Convention. Requirements vary according to the receiving agency and the country where the affidavit is executed, so confirm the required form before paying for authentication. DFA guidance recognizes consular notarization and, in participating countries, apostilled foreign documents for use in the Philippines. (Philippine Embassy in New Delhi)
Frequently Asked Questions
Can I report an illegal online casino anonymously?
You may provide an anonymous intelligence tip, particularly about a website or physical location. However, authorities will usually need an identified complainant and sworn statement when seeking fund recovery, proving fraud, or filing criminal charges.
Is it illegal merely to play on an unlicensed online casino?
PD 1602 can penalize participation in unauthorized gambling, not only operation. A person who unknowingly encountered a fraudulent website should report the facts truthfully. Someone who knowingly operated, promoted, collected bets, recruited players, or supplied financial accounts may face greater legal exposure.
Can PAGCOR recover my money?
PAGCOR can verify licensing status, take regulatory action, and refer suspected criminal conduct. It does not function as a bank chargeback service or guarantee repayment. Notify the bank, card issuer, or e-wallet immediately and file a fraud complaint with law enforcement.
What should I do if I sent money through GCash, Maya, or online banking?
Report the transaction through the provider’s official fraud channel immediately. Give the amount, date, recipient account, reference number, and explanation that the transfer is disputed and linked to suspected online casino fraud. Then report to CICC, PNP, or NBI.
What if the casino brand is on PAGCOR’s list but the URL is different?
Treat the different URL as unverified. A licensed brand may be impersonated through clone websites. Send the exact domain to PAGCOR and ask whether it is an approved main domain, subdomain, or additional URL.
Can I report the casino at the barangay?
A barangay blotter may document a local disturbance, suspicious premises, or threats occurring within the barangay. However, the barangay cannot verify national gaming licenses, trace electronic transactions, conduct cyber-forensics, or replace a report to PAGCOR, PNP, or NBI.
How long will the investigation take?
Initial complaint intake may occur on the same day, but the complete investigation has no fixed universal period. Cases involving local, identifiable account holders may progress faster than cases using foreign domains, cryptocurrency, fake identities, or multiple money-mule accounts.
Can a foreigner file the complaint personally in the Philippines?
Yes. A foreign complainant may ordinarily use a passport as identification and submit the same digital and financial evidence as a Filipino complainant. Immigration status does not prevent a person from reporting a crime or unlawful gaming operation.
Is a screenshot of a PAGCOR certificate enough evidence?
It is useful evidence of what the operator represented, but it does not prove that the certificate is genuine. Include the certificate together with the URL, communications, operator name, and transaction records so PAGCOR can verify it.
Should I also report the Facebook, Telegram, or TikTok account?
Yes. Report the account through the platform’s reporting system and include the profile URL, username, advertisements, referral links, and screenshots in the government complaint. Do not rely solely on the platform report because account removal does not begin a Philippine criminal investigation.
Key Takeaways
- Verify the exact website or app domain, not only the displayed casino brand.
- PAGCOR-licensed domestic e-gaming remains possible, but offshore POGO and IGL operations were required to cease by December 31, 2024.
- Preserve URLs, screenshots, chats, transaction references, account details, and original digital files.
- Notify the bank, card issuer, or e-wallet immediately when money is involved.
- Report licensing concerns to PAGCOR and criminal conduct to CICC, the PNP Anti-Cybercrime Group, or the NBI.
- Hotline 1326 is the national 24-hour channel for reporting online scams and cyber-enabled fraud.
- A formal investigation may require identification, an interview, and a sworn complaint.
- Do not pay additional withdrawal fees, confront suspected operators, or publicly post sensitive evidence.