Quick answer
If someone promised you a loan but demanded payment before releasing it, stop sending money, immediately report the payment to your bank or e-wallet provider, preserve the evidence, and report the suspected fraud to the PNP Anti-Cybercrime Group or NBI Cybercrime Division.
A separate regulatory complaint may also be appropriate: the Securities and Exchange Commission (SEC) handles lending and financing companies, while the Bangko Sentral ng Pilipinas (BSP) handles complaints about institutions under its supervision. A regulatory complaint does not replace reporting the suspected crime. bsp.gov.ph
Act promptly even if the amount is small or you do not know the scammer’s real name. Reporting can help investigators follow the transaction trail, but it does not guarantee that the money will be recovered.
Recognize an advance-fee loan scam
An advance-fee loan scam involves a false promise of credit used to obtain money from the applicant. The supposed lender may call the payment a processing fee, security deposit, insurance payment, advance installment, account-verification charge, or fee to correct your bank details.
Warning signs include:
Repeated demands for another payment before the “approved” loan can be released.
Instructions to pay an individual’s account or a succession of unrelated accounts.
Pressure to pay immediately or lose the loan.
Requests for your banking password, PIN, one-time password (OTP), or access to your phone.
A supposed lender communicating only through a social-media account or messaging app.
Registration certificates, government logos, or employee IDs that cannot be independently verified.
The SEC’s advisory for online lending borrowers specifically warns against advance payments before loan release. sec.gov.ph
However, the existence of a loan charge alone does not establish criminal fraud. Philippine law recognizes finance charges, including fees and service charges, and requires applicable disclosures before the credit transaction is completed. Whether a particular charge is lawful depends on the lender, transaction, disclosures, and applicable rules. A disclosed charge in a genuine lending arrangement is different from a fabricated payment demanded to release a nonexistent loan. See the Truth in Lending Act, Republic Act No. 3765. Supreme Court E-Library
1. Contact your bank, e-wallet, or payment provider immediately
Use the provider’s official app, website, or verified customer-service number. Do not use a “support” link supplied by the suspected scammer.
Tell the provider:
The date, time, amount, and reference number of each payment.
The receiving account or wallet details shown on your transaction record.
What loan was promised and why you believe the payment was obtained through deception.
Whether you personally authorized the transfer or someone accessed your account without permission.
Whether your password, OTP, identification documents, or device may be compromised.
Ask the provider to record a fraud complaint, assess whether the payment can be stopped or recovered, coordinate with the receiving institution where appropriate, and give you a case reference number and written instructions for supporting documents.
Describe the transaction accurately. If you sent the money because you were deceived, say so; do not describe it as an unauthorized transfer unless that is what happened.
If you paid through a remittance outlet or by card, contact that provider immediately and ask about its applicable cancellation or dispute process. Different payment methods have different remedies.
Understand the temporary-hold deadlines
BSP Circular No. 1215, series of 2025, provides a framework for holding disputed funds and coordinating verification of qualifying electronic transfers between financial accounts.
StageApplicable periodInitial holdingUp to five calendar daysExtended holding, when justifiedUp to 25 additional calendar daysTotal holding without a court extensionNo more than 30 calendar days
Supporting documents—such as an affidavit, sworn complaint, police report, or other evidence—must generally be submitted within the initial holding period, subject to the industry protocol. Ask your provider for the exact deadline.
These are holding periods, not a 30-day deadline for first reporting the scam. Extension and recovery are not automatic.
The circular excludes mistaken transfers caused by incorrect encoding and generally excludes credit-card transactions, except qualifying electronic fund transfers through an Automated Clearing House. Its electronic-transfer definition also excludes domestic remittances covered by separate BSP rules.
Held funds may be returned when the regulatory requirements are satisfied; a complaint alone does not establish entitlement to a refund. bsp.gov.ph
2. Preserve the evidence before accounts or messages disappear
Create a folder containing:
The offer: advertisements, loan terms, purported approval notices, contracts, and promised release dates.
The deception: messages explaining why you had to pay, assurances that payment would release the loan, and subsequent demands.
The payment trail: receipts, transaction confirmations, statements, reference numbers, QR codes, and recipient details.
The identifiers: profile URLs, usernames, telephone numbers, email addresses, website addresses, app names, and claimed company details.
The aftermath: refund requests, refusals, threats, blocked-account notices, and attempts to contact the real company.
Your reports: bank ticket numbers, acknowledgments, police records, and agency correspondence.
Keep complete conversations with dates and account identifiers visible. Export chats and retain original emails and attachments where possible. Preserve unedited originals separately from copies marked for explanation.
Write a chronological account while events are fresh. For every payment, explain what representation caused you to send it. Distinguish what you personally observed from what you suspect.
Do not delay the initial bank report while assembling a perfect evidence file. Submit what you have and follow the provider’s instructions for additional documents.
3. Report the suspected crime to law enforcement
For an online loan scam, approach the PNP Anti-Cybercrime Group (PNP-ACG) or NBI Cybercrime Division. If you cannot readily reach a cybercrime office, seek assistance from the nearest police station.
The BSP’s official reporting guidance lists:
PNP-ACG:
acg@pnp.gov.phNBI Cybercrime Division:
ccd@nbi.gov.ph
Use the agencies’ official websites to verify office arrangements before traveling: PNP-ACG and NBI. bsp.gov.ph
Bring identification, your chronological account, transaction records, and the device containing relevant messages if available. Explain any missing evidence rather than assuming you cannot report.
The NBI’s procedure for investigative assistance for computer-crime victims includes a complaint sheet, an interview, sworn statements or affidavits, and collection of supporting material. Its listed investigative-assistance steps carry no agency fee. National Bureau of Investigation
Ask for the complaint reference number, receiving office, assigned investigator when available, and next required step. An email, hotline report, or blotter entry should not be assumed to mean that a criminal case has already been filed in court. Follow through on requests for sworn statements and supporting evidence.
If you have already reported elsewhere, disclose that and provide the reference number so the offices can coordinate.
If the suspect’s real identity is unknown
Report the identifiers you have. Explain that a name is only the name displayed on an account or receipt, if that is all you know.
Do not assume that the person named on the receiving account is necessarily the person who contacted you. Identifying the participants and their respective roles requires investigation. Do not attempt to obtain private banking or subscriber records through unofficial contacts.
4. Choose the correct regulatory complaint route
SEC: lending and financing companies
Under the SEC’s current complaint instructions, complaints against registered lending or financing companies and their online lending platforms must be filed through the SEC iMessage portal.
The SEC distinguishes these from reports about persons or companies conducting lending activities without a Certificate of Authority, which it directs to its Enforcement and Investor Protection Department at epd@sec.gov.ph.
For a complaint against a registered company, prepare a completed complaint form, supporting evidence, government-issued identification, and proof that you first sought resolution from the company. Submit one complaint form per respondent company. Securities and Exchange Commission
Where someone impersonated a legitimate lender, clearly describe the impersonation. Contact the genuine company through independently verified channels; do not present the impersonator’s conduct as an established act of that company.
A certificate of incorporation alone is insufficient to show authority to operate a lending company. Check the required authority and verify the particular website, app, or representative you dealt with. See the Lending Company Regulation Act, Republic Act No. 9474. Supreme Court E-Library
BSP: complaints about a bank or other BSP-supervised provider
First complain directly to the institution. If its handling or response is unsatisfactory, escalate through BSP Online Buddy (BOB) on the BSP website.
If BOB is unavailable to you, the BSP’s instructions allow submission of its Complaint/Inquiry/Reply form to consumeraffairs@bsp.gov.ph, with proof of your earlier complaint to the institution.
Follow the BSP’s data-minimization instructions: its consumer-assistance process does not require your passwords, PINs, complete account or card numbers, or copies of identification documents. Requirements for your bank or investigating agency may differ. bsp.gov.ph
5. Address identity theft, privacy violations, and account access
If you disclosed banking credentials or installed an app at the scammer’s request:
Contact the affected financial institution immediately.
Change compromised passwords using a trusted device.
Secure the email account and mobile number linked to your financial accounts.
Ask the provider about locking affected access and removing unfamiliar devices.
Preserve relevant evidence before deleting messages or resetting a device.
If your IDs, photographs, contact list, or other personal data were unlawfully used or disclosed, consider a separate complaint to the National Privacy Commission (NPC).
The NPC ordinarily requires written notice to the responsible entity and evidence that it failed to act appropriately, or did not respond within 15 calendar days. The NPC may waive this requirement for justified circumstances, including serious harm or the absence of an adequate remedy. Do not treat this rule as a reason to postpone urgent bank or police reporting.
Use the NPC’s formal-complaint instructions and form. Follow its verification, evidence, and applicable filing-fee requirements; exemptions or waiver may be available under its rules. privacy.gov.ph
What Philippine laws may apply?
Estafa through false pretenses
An advance-fee loan scam may constitute estafa under Article 315(2)(a) of the Revised Penal Code, depending on the evidence.
The prosecution must establish the relevant false representation, that it preceded or accompanied the fraud, that the victim relied on it and parted with money or property, and that damage resulted. The Supreme Court explains these requirements in Osorio v. People, G.R. No. 207711. Supreme Court E-Library
This is why the messages before each payment matter. Non-release of a loan or failure to refund money does not, by itself, establish every element of estafa.
Fraud committed using information and communications technology
Where the offense was committed through information and communications technology, Section 6 of Republic Act No. 10175, the Cybercrime Prevention Act, may apply. The underlying offense and the use of technology must be properly established; the online setting does not dispense with proof of fraud. Supreme Court E-Library
Financial-account scamming
The Anti-Financial Account Scamming Act, Republic Act No. 12010, addresses specified money-muling activities and social-engineering schemes.
Its social-engineering offense concerns obtaining sensitive identifying information through deception resulting in unauthorized access and control over a financial account. Not every payment voluntarily sent after a false loan promise automatically satisfies that particular offense. Investigators must assess the actual conduct, including any account takeover or knowing involvement in moving criminal proceeds. Supreme Court E-Library
You do not need to select the final criminal charge before seeking investigative assistance. Give a complete, accurate account and let investigators and prosecutors assess the applicable law.
Common mistakes that weaken a report or increase losses
Paying to recover earlier payments. Do not send another “release,” “refund,” or “verification” fee merely because you have already paid.
Deleting the conversation after blocking the account. Preserve the evidence first where safely possible.
Reporting only the advertisement. Include the representations, payments, and resulting loss.
Treating registration as proof that the person contacting you is genuine. Verify the representative and payment instructions independently.
Posting unredacted evidence publicly. IDs, account details, and contact information can create further exposure.
Ignoring requests for documents or follow-up interviews. Monitor the contact details you supplied and keep copies of your responses.
Paying a stranger who guarantees recovery. Verify any claimed investigator, lawyer, or recovery service independently.
When help is urgent
Seek immediate assistance if money is still leaving your account, the scammer controls your device or credentials, you receive threats, or someone asks you to receive and forward money for a commission.
Consult a lawyer promptly if a fund hold is nearing expiry, substantial losses are involved, you receive a subpoena or court document, or you are being asked to sign a settlement, waiver, or affidavit of desistance.
Ask specifically about recovery options and applicable filing deadlines. Do not assume that a bank complaint or social-media report preserves every criminal or civil remedy. Deadlines and the steps that affect them depend on the claim and procedural circumstances.
Frequently asked questions
Can I report if I sent the money myself?
Yes. Explain that you authorized the transfer because of a false loan representation. Voluntary payment induced by deception can be relevant to estafa; it is different from alleging that someone accessed your account without authorization.
Can I report a small payment or an unsuccessful attempt?
Yes. Provide the offer, messages, and available identifiers. If you lost no money, say so clearly. Investigators will determine what offense, if any, the evidence supports.
Will the bank automatically refund me?
No. Reporting starts an assessment; it does not guarantee reversal or reimbursement. Recovery depends on the payment method, available funds, evidence, applicable rules, and any established liability.
Must I wait for the SEC before going to the police?
No. You can report suspected criminal fraud while pursuing the appropriate regulatory complaint. Explain any other reports you have filed and comply with each office’s requirements.
Does reporting cancel a loan I actually received?
Do not assume so. A disputed fee, fraud allegation, or regulatory complaint does not automatically extinguish a genuine loan obligation. Obtain advice on the actual documents and transactions before stopping payment.
What if I already deleted some messages?
Report anyway. Preserve what remains, including payment records, emails, notifications, backups, and messages held by witnesses. Tell the investigator what was deleted and when; do not recreate missing messages as though they were originals.
This article provides general Philippine legal information, not advice on a particular case. The appropriate complaint, recovery options, and deadlines depend on the evidence and circumstances. Official sources checked on 17 October 2026.
Double-click to edit...