LabanPH
LABAN Answers · Know your rights. Fight back.
16 answers

Scams & Online Fraud

What to do after an online scam — the first-hour playbook, where to report (PNP Anti-Cybercrime Group, NBI, DOJ Office of Cybercrime), how to spot and report investment/Ponzi scams to the SEC, phishing and OTP theft, online-shopping fraud (undelivered, fake, or misrepresented goods), romance and job scams, and the legal basis under estafa (Revised Penal Code Art. 315), RA 8484, RA 10175, RA 8792, RA 7394, and RA 8799.

I was just scammed online — what do I do in the first hour?

Act fast, because recovery odds fall the longer money sits with the scammer. First, stop sending anything more and cut off contact. Second, if you paid through a bank, GCash, Maya, or a card, call that provider's fraud/dispute hotline immediately and ask them to flag or freeze the transaction — early reports have the best chance of catching funds before they are withdrawn. Third, preserve all evidence: screenshots of the chat, the seller/profile, the reference and account numbers, receipts, and the amount and time. Fourth, report to the PNP Anti-Cybercrime Group or the NBI Cybercrime Division. No one can guarantee your money back, but speed, a paper trail, and a formal report are what give you the best chance and the legal basis to pursue it. Online deceit for money is generally estafa under Article 315 of the Revised Penal Code, with a penalty one degree higher when done through ICT under RA 10175.

Read the full answer, sources & FAQ →

How and where do I report an online scam in the Philippines?

Report to the PNP Anti-Cybercrime Group (ACG) or the NBI Cybercrime Division — both accept cybercrime complaints, and you can also lodge one through the DOJ Office of Cybercrime. Bring a written narrative of what happened plus your evidence (screenshots, account/reference numbers, receipts, the scammer's contact details), and be ready to submit a sworn affidavit-complaint. If money moved through a bank or e-wallet, report to that provider's fraud unit as well, and for a financial-product dispute you can escalate to the BSP Consumer Assistance Mechanism. Report as early as possible — digital evidence and funds can disappear quickly.

Read the full answer, sources & FAQ →

How do I spot and report an investment or Ponzi scam?

Treat any offer of guaranteed high returns with little or no risk as a red flag — that is the classic Ponzi pattern, where early 'investors' are paid with money from newer ones until it collapses. In the Philippines, anyone soliciting investments from the public must be registered with the SEC and, for offering securities, hold the proper license; selling unregistered securities violates the Securities Regulation Code (RA 8799). Before investing, verify the entity on the SEC's Check with SEC portal and search the SEC's public advisories for its name. To report a scam, file with the SEC Enforcement and Investor Protection Department (EIPD); if you have already lost money, also report the estafa to the PNP Anti-Cybercrime Group or NBI.

Read the full answer, sources & FAQ →

How do I check if an investment or company is SEC-registered?

Use the SEC's Check with SEC portal (checkwithsec.sec.gov.ph) to confirm whether a company or partnership is registered — and, crucially, whether it holds the secondary license needed to take investments, lend, or offer securities. Registration as a company alone does NOT mean it is allowed to solicit investments; that requires a separate SEC license under the Securities Regulation Code (RA 8799). Also search the SEC's public advisories, where the Enforcement and Investor Protection Department names entities caught soliciting without authority. If it is not on the portal, has no secondary license, or appears in an advisory, do not invest.

Read the full answer, sources & FAQ →

Someone phished my OTP or bank details — am I liable, and what do I do now?

Move first: call your bank or e-wallet's fraud hotline immediately to report the compromise, dispute unauthorized transactions, and lock or reset the account, then change your passwords. On liability, the fact that you were tricked into revealing an OTP does not automatically make every loss your fault — under RA 11765 (Financial Products and Services Consumer Protection Act, 2022) providers owe you fair treatment and a real dispute process, and they carry duties to prevent and detect fraud. The realistic picture is that outcomes turn on the facts of each case, so report fast, file a written dispute, and if the provider won't resolve it, escalate to the BSP. Phishing is also a cybercrime you can report to the PNP Anti-Cybercrime Group or NBI. For the e-wallet-specific liability rules, see the linked answer.

Read the full answer, sources & FAQ →

An online seller took my money and never delivered — what are my rights?

You paid for goods you never received, so you have both a consumer remedy and, potentially, a criminal one. The Consumer Act (RA 7394) protects buyers against deceptive and unfair sales practices, and electronic transactions and contracts are legally recognized under the E-Commerce Act (RA 8792), so an online sale is enforceable like any other. Taking payment with no intent to deliver is generally estafa under Art. 315 of the Revised Penal Code — one degree higher when done online (RA 10175). Practically: if you bought through Shopee or Lazada, file a dispute/return-refund claim within the platform's buyer-protection window first, as that is usually the fastest way to recover; you can also complain to the DTI and, for a clear scam, report to the PNP Anti-Cybercrime Group or NBI.

Read the full answer, sources & FAQ →

I received fake, defective, or the wrong item from Shopee or Lazada — what can I do?

You are entitled to what you actually paid for. The Consumer Act (RA 7394) protects buyers against misrepresented, defective, and deceptively sold goods, and an online sale is a valid, enforceable contract under the E-Commerce Act (RA 8792). Your fastest remedy is usually the platform's own return-refund process: open a dispute inside Shopee or Lazada within the return window, upload photos/video of the item as received, and request a refund or replacement. If the platform will not resolve it, or the item is counterfeit, escalate a consumer complaint to the DTI. Selling fakes can also involve intellectual-property and deceptive-sales violations.

Read the full answer, sources & FAQ →

Can I get my money back after being scammed?

Honestly: sometimes, but there is no guarantee, and speed is everything. The best odds come when money is still sitting with the payment provider — so reporting to your bank, e-wallet, or card issuer within minutes to hours gives them the chance to flag, hold, or reverse a transfer or process a chargeback. Once a scammer has cashed out, recovery becomes much harder and usually depends on catching them and pursuing restitution through a criminal (estafa) or civil case. Do not trust anyone promising 'guaranteed recovery' for a fee — that is a common second scam. Your realistic playbook is: act fast, report to the provider, dispute in writing, report the crime to PNP-ACG/NBI, and preserve evidence for any case.

Read the full answer, sources & FAQ →

I fell for a romance or 'love' scam — what can I do?

First, know it is not your fault — romance scams are engineered to build trust before asking for money, and victims include careful, intelligent people. Stop sending money and cut contact immediately; a scammer who has been paid will keep inventing emergencies. If you sent money by bank, GCash, Maya, or card, report to that provider's fraud unit right away and dispute the transfers. Deceiving someone into handing over money through a fake relationship is generally estafa under Art. 315 of the Revised Penal Code, one degree higher when done online (RA 10175), so report it to the PNP Anti-Cybercrime Group or NBI. Preserve every chat, profile, and payment record — that evidence is what a case is built on. Recovery is not guaranteed, so speed and reporting are your leverage.

Read the full answer, sources & FAQ →

I was scammed by a fake job or recruitment offer — what do I do?

A genuine employer does not ask you to pay to be hired. Demands for a 'processing,' 'training,' or 'placement' fee, or for you to buy something before you can start, are hallmark job-scam tactics — and taking money on a false promise of work is generally estafa under Art. 315 of the Revised Penal Code, one degree higher when arranged online (RA 10175). Stop paying and cut contact. Report to the PNP Anti-Cybercrime Group or NBI, and if you paid by bank or e-wallet, report to that provider's fraud unit at once. Note a separate danger: some 'jobs' are fronts for human trafficking or fraud hubs — if an overseas offer feels coercive, treat it as urgent and seek help from authorities immediately.

Read the full answer, sources & FAQ →

I got a scam text (smishing) or a 'you won a prize' message — what do I do?

Do not click the link, do not reply, and never share an OTP, PIN, or card number — that is exactly what the message is designed to steal. A text claiming you won a prize, have a package to pay for, or must 'verify' your account with a link is smishing (SMS phishing); legitimate banks and agencies do not ask for credentials or fees by text link. Delete and block it. If you did click or enter details, treat it as a phishing compromise: contact your bank/e-wallet fraud unit immediately. You can report scam messages to your telco and to the PNP Anti-Cybercrime Group or NBI. Since the SIM Registration Act (RA 11934), SIMs are registered, which supports tracing and blocking scam senders.

Read the full answer, sources & FAQ →

Is the platform or the bank liable when I get scammed?

It depends on what went wrong. If you willingly sent money to a scammer through a normal, authorized transaction, the bank or e-wallet is usually not automatically liable for your loss — but it must still handle your dispute fairly and meet its fraud-prevention and redress duties under RA 11765 (2022). If the transaction was unauthorized (your account was hacked, your card used without you, or the provider's own security failed), the provider's responsibility is much stronger and you should dispute it as unauthorized. For marketplaces, platform buyer-protection programs (like Shopee's and Lazada's) are a practical remedy for undelivered or misrepresented goods, though those are program terms rather than a blanket legal guarantee. Report fast, dispute in writing, and escalate to the BSP (financial) or DTI (consumer) if unresolved.

Read the full answer, sources & FAQ →

What is estafa, and do online scams count as a crime?

Estafa (swindling) under Article 315 of the Revised Penal Code is the crime of defrauding someone through deceit, abuse of confidence, or false pretenses so that they part with money or property — the legal umbrella most scams fall under. Its penalties are graduated by the amount defrauded, updated by RA 10951 (2017). When the fraud is committed through information and communications technology — an online seller, a fake investment page, a phishing site — RA 10175 (Cybercrime Prevention Act) §6 makes the penalty one degree higher than ordinary estafa. So yes, online scams are real crimes you can file a complaint over. Related fraud may also fall under RA 8484 (access-device/card fraud) or securities law (RA 8799) for investment scams.

Read the full answer, sources & FAQ →

I was scammed into sending GCash — how do I freeze and report it?

Act within minutes: report the scam to GCash (or Maya) through its in-app 'Report a Scam'/dispute channel or hotline right away, so it can attempt to flag or hold the funds before the scammer cashes out — early reports have the best chance. Give the reference number, the recipient's number/name, the amount, and time. There is no guaranteed reversal, but speed is your leverage. Then report the estafa to the PNP Anti-Cybercrime Group or NBI, and preserve all evidence. For the detailed e-wallet dispute mechanics and the specific rules on whether a scammed transfer can be reversed or whether you're liable after sharing an OTP, use the linked e-wallet answers.

Read the full answer, sources & FAQ →

I paid a scammer with my credit or debit card — can I charge it back?

Possibly. If a charge was unauthorized (your card was used without you) or you paid for goods or services you never received, you can dispute it with your card issuer and request a chargeback — the process by which a disputed card transaction is reversed through the card network. Report it to your issuer as fast as possible, in writing, with your evidence, because chargebacks run on strict network time limits. RA 11765 (2022) backs your right to a fair dispute process, and unauthorized card use is also an offense under RA 8484 (Access Devices Regulation Act). Chargeback outcomes are not guaranteed and depend on the card scheme's rules and your evidence. For the full chargeback mechanics, see the linked unauthorized-charges answer.

Read the full answer, sources & FAQ →

What evidence should I preserve after a scam?

Save everything, and do it before you block anyone or delete a thread — evidence is what turns a report into a case and what a provider needs to process a dispute. Capture: full-screen screenshots of the entire conversation (with dates, times, and the profile/username visible); the scammer's account details (phone number, GCash/Maya number, bank account name and number, email, social profile links); every payment record and reference/transaction number; receipts, the listing or ad, and any contract or promise; and a written timeline of what happened in order. Keep the originals, not just crops. This is the same evidence the PNP Anti-Cybercrime Group, NBI, your bank/e-wallet, and the SEC (for investment scams) will ask for.

Read the full answer, sources & FAQ →

Facing this yourself?

We pre-fill the BSP, SEC, DTI, and small-claims letters for you — and route you to the right regulator.

More answer topics

Editorial policy: Educational content, not legal advice. Every answer cites primary sources only. Rules and rates change; verify against the cited source before you act.
💬