Quick answer
Most scams in the Philippines share three signs: urgency, a link or request for your OTP/MPIN, and money that's too good to be true. Banks and e-wallets never ask for your OTP or password by text, call or chat. If you've been scammed, call your bank or e-wallet immediately to block the account and dispute the transaction, then report to the CICC hotline 1326, the PNP Anti-Cybercrime Group or the NBI. Under the Anti-Financial Account Scamming Act (RA 12010), banks can temporarily hold funds linked to scams.
Key takeaways
- Never share your OTP, MPIN or password, and don't click links in texts claiming to be from your bank, e-wallet, courier or a government agency.
- 'Guaranteed' high returns, paid likes-and-follows tasks and recruitment bonuses are signs of an investment or task scam.
- Act fast: report to your bank or e-wallet within minutes or hours, because funds can be held before they're withdrawn.
- RA 12010 (AFASA) penalizes money muling and social engineering, including renting out or selling your account.
- Report to CICC hotline 1326, the PNP Anti-Cybercrime Group or the NBI, and to the SEC for investment scams.
On this page
Scams in the Philippines have moved almost entirely online: fake texts that look like they're from your bank, "task" jobs that pay you to like videos until you're asked to deposit, investment groups promising 30% a month. They work because they're designed to make you act before you think. This guide shows you the patterns and exactly what to do if it happens to you.
The three warning signs
Almost every scam has at least one:
- Urgency or fear: "Your account will be locked in 24 hours," "Your parcel is on hold," "Claim your reward today."
- A request for credentials or a link: a link to "verify," or a request for your OTP, MPIN, password or card CVV.
- Money that's too good to be true: guaranteed high returns, easy work-from-home pay, a prize you never entered for.
Golden rule: your bank, e-wallet, the BIR, SSS and couriers will never ask for your OTP or MPIN. Anyone who asks is a scammer.
Common scams in the Philippines
| Scam | How it works | Red flag |
|---|---|---|
| Phishing texts and emails | A fake message from a bank, e-wallet, courier or agency links to a lookalike site that steals your login | A link in an unsolicited text; a URL that's slightly misspelled |
| Fake customer service | Scammers pose as bank or e-wallet agents on Facebook or by phone and "help" you recover an account | Asks for OTP or remote access to your phone |
| Task or like-and-follow scams | You're paid small amounts for simple tasks, then asked to "deposit" to unlock bigger tasks or withdraw earnings | Paying money to earn money |
| Investment scams | Groups promise fixed high returns, often in crypto, forex or "trading bots" | Guaranteed returns; recruitment bonuses; no SEC secondary license |
| Wrong send / overpayment | Someone "accidentally" sends you money, then pressures you to send it back to a different account | Pressure to refund to a different account instead of reversing through the bank |
| Online seller scams | Fake sellers take payment and disappear, or send fake proof of payment as buyers | Prices far below market; refusing cash on delivery or platform checkout |
| Fake job offers | Recruiters ask for "processing fees," training fees or your bank login | Any fee to get hired. See legit work-from-home jobs |
| Love and friendship scams | An online partner builds trust, then needs money for an emergency or an "investment" | Never meets on video; always a crisis |
The law: Anti-Financial Account Scamming Act (RA 12010)
Signed in July 2024, AFASA makes these crimes:
- Money muling: using, lending, renting or selling bank or e-wallet accounts to receive or move scam proceeds, or opening accounts under fake identities. Penalty: 6 to 8 years imprisonment and fines of ₱100,000 to ₱500,000.
- Social engineering: tricking people into giving up passwords, OTPs or other credentials, for example by phishing. Penalty: 10 to 12 years and fines of ₱500,000 to ₱1,000,000.
- Economic sabotage: large-scale or syndicated scams, punishable by life imprisonment.
AFASA also requires banks and e-wallets to strengthen fraud detection and lets them temporarily hold funds involved in suspicious transactions while they investigate.
Never let anyone use your account, even a friend or a "part-time job" that pays you to receive transfers. That can make you liable as a money mule.
What to do if you've been scammed
Speed matters most in the first hours.
- Call your bank or e-wallet's official hotline immediately. Report the fraudulent transaction, ask them to block your account or card and to hold the recipient's funds. Get a reference number.
- Secure your accounts: change passwords and MPINs, log out of other devices, and remove unknown devices or apps with remote access.
- Collect evidence: screenshots of chats, texts, profiles, links, transaction receipts and reference numbers.
- Report to the authorities: - CICC (Cybercrime Investigation and Coordinating Center) hotline 1326 - PNP Anti-Cybercrime Group or NBI Cybercrime Division - SEC for investment scams - BSP Consumer Assistance Mechanism if your bank doesn't act on your complaint
- Warn others without posting your personal details or account numbers.
Protect yourself: a quick checklist
- Turn on transaction alerts for every bank and e-wallet.
- Set transfer limits in your banking apps.
- Use unique passwords and a phone screen lock.
- Download apps only from the official app store, and check the developer.
- Type website addresses yourself instead of clicking links in texts.
- Verify any "investment" with the SEC and walk away from guaranteed returns.
- Talk to older family members about scams. Many target parents and grandparents with fake emergencies.
If you're rebuilding after a loss, start with a fresh budget and an emergency fund, and learn how to recognize real investments so the next offer is easier to judge.
Frequently asked questions
What should I do immediately after sending money to a scammer?
Call your bank or e-wallet's official hotline right away and report the transaction as fraud so they can try to hold the recipient's funds. Change your passwords and MPIN, take screenshots of all conversations and receipts, then report to CICC hotline 1326 or the PNP Anti-Cybercrime Group.
Can I get my money back from a GCash or bank scam?
Sometimes, if you report quickly and the funds haven't been withdrawn. Under RA 12010, financial institutions can temporarily hold funds involved in suspected scams while they investigate. Recovery isn't guaranteed, so speed matters.
Is it illegal to let someone use my bank or e-wallet account?
Yes. Under the Anti-Financial Account Scamming Act, lending, renting or selling your account for others to receive money, or opening accounts for them, can be prosecuted as money muling, with penalties of 6 to 8 years in prison and fines.
How do I report a scam text message?
Report the sender and message through your mobile network's official channels or the government's eGov app reporting feature, and to CICC hotline 1326. Don't reply or click the link.
How can I check if an investment company is legitimate?
Check the SEC website. Being registered as a corporation is not enough: a company selling investments to the public needs a secondary license from the SEC. Also check the SEC's list of advisories against unauthorized investment schemes.
Sources
Figures checked against these official and primary sources on October 4, 2026. Government rates and promos change, so confirm on the agency's site before you act.
- Republic Act No. 12010, Anti-Financial Account Scamming Act
- Philippine Star: Report scams to hotline 1326 (CICC)
- Securities and Exchange Commission: Investor protection advisories
- Bangko Sentral ng Pilipinas: Consumer assistance
General information, not personal financial, tax or legal advice. See our editorial standards and disclaimer. Found an outdated figure? Email support@success.ph.