CyberCode.ph · Philippines

Job or Task Scam in the Philippines: How to Report It and Try to Get Your Money Back

Last updated October 4, 2026 · Practical privacy, cybersecurity and technology-law guidance
Man sitting at a table reading a message on his mobile phone

A job or task scam is one where you are recruited for “easy online work” — liking posts, watching videos, completing “tasks” — paid a little at first, then asked to deposit your own money to unlock bigger earnings. The deposits are the scam. Your fastest route to the money is your bank or e-wallet, not a police station: ask it to dispute and temporarily hold the transfer. Under RA 12010 a hold can last no more than 30 calendar days, and under BSP Circular No. 1215 your supporting documents are due within the initial hold of not more than 5 calendar days. Then report to the CICC hotline 1326, the PNP Anti-Cybercrime Group or the NBI.

Decision snapshot

Read this panel first. Each row answers one question a task-scam victim actually has, and the rest of the guide expands it.

Question Short answer Where it comes from
Rule Taking money by deception is estafa under Article 315 of the Revised Penal Code, and committing it through information and communications technologies raises the penalty by one degree under RA 10175. Art. 315 RPC as amended by RA 10951 Sec. 85; RA 10175 Sec. 6
Exception Not every job scam is illegal recruitment. A “like and earn” scheme with no real job placement is fraud. Illegal recruitment needs a recruitment activity: an offer or promise of employment, local or abroad, by someone without a licence or authority. Labor Code Art. 13(b), as quoted in People v. Valle, G.R. No. 126933 (2001); Omnibus Rules implementing RA 8042 as amended by RA 10022, Rule IV Sec. 1
Evidence The chat thread with the recruiter, the platform or app you were told to use, every deposit reference number, and the withdrawal attempt that failed. Export, do not just screenshot. Practical; preservation powers in RA 10175 Sec. 13
Timing A disputed transfer may be temporarily held for up to 5 calendar days initially, extendable by up to 25 more, and never beyond 30 calendar days without a court order. RA 12010 Sec. 7; BSP Circular No. 1215, s. 2025
Next step Today: file a disputed-transaction report with the bank or e-wallet you paid from, in writing, naming every reference number. Under the BSP’s complaint-handling standard it must acknowledge within 2 days of receipt. MORB Appendix 115; RA 11765 Sec. 8(f)

Key takeaways

  • The deposit is the product. In a task scam you are not being paid for work; you are being sold the belief that a larger deposit unlocks a larger withdrawal. The PNP Anti-Cybercrime Group has described exactly this cycle in a public warning, quoted in full below.
  • Your money moves on a payment rail, and that rail has a clock. RA 12010 lets a bank or e-wallet temporarily hold funds subject of a disputed transaction, and BSP Circular No. 1215 fixes the periods at not more than 5 calendar days initially and not more than 25 more, capped at 30. Nothing else in Philippine law moves faster.
  • “Illegal recruitment” is a narrower offence than people assume. It is defined around recruitment, hiring and placement for employment abroad. If no overseas job was promised, do not frame your complaint that way — it sends you to the wrong agency and wastes weeks.
  • If an overseas job was promised, the stakes change sharply. Illegal recruitment by three or more conspirators, or against three or more victims, is economic sabotage, and the implementing rules put that at life imprisonment and a fine of not less than ₱2,000,000.
  • The account you deposited into is very often a money-mule account. That is why RA 12010 Sec. 8 requires a coordinated verification process between the institutions and account owners involved once you complain — and it is why the receiving institution matters as much as yours.
  • If the “job” was abroad and turned into confinement or forced work, this is a trafficking case, not a consumer case. Report it to the IACAT 1343 Actionline, which the government describes as 24/7 and free of charge, with zero-rated calls from overseas.
  • No regulator will hand your money back on demand. The SEC, DOLE, DMW and the BSP each have a lane, and none of them is a refund counter. The honest sequence is payment provider first, regulator second, criminal complaint third — and often all three.

Jump to a section

How a task scam actually works, in the PNP’s own words

This matters because victims routinely blame themselves for “investing” when what actually happened was a designed sequence. The Philippine Information Agency published a PNP Anti-Cybercrime Group warning about a surge in task scams on 6 September 2023. Its description is worth reading as a description of a method, not a lecture:

  • Recruitment uses “enticing social media ads to lure victims with the promise of easy money,” with the scammers posing “as agents representing companies, in a bid to appear legitimate.”
  • The first stage is deliberately free: “individuals are expected to complete basic tasks that don’t require any initial investment such as liking particular posts, watching videos, or sharing content to earn income,” and “commissions are given right away.”
  • Then the ask begins: “As victims complete more tasks, the amount they are required to invest steadily increases.”
  • And the exit is closed: “When they try to withdraw their earnings, the scammers invent technical issues, blaming victims and demanding more money to fix them. Victims get trapped in this deceptive cycle with no refunds or withdrawals.”

The advice the agency gave was blunt: “There is no shortcut to financial stability, and it is imperative to verify the legitimacy of offers before making any financial commitments.” That is a government information-agency report of a police advisory, not a legal issuance — it carries no penalty and creates no duty. It is quoted here because it is the clearest official Philippine description of the modus, and because the early free payout is the part that makes victims trust the scheme.

One structural point follows from that sequence and it shapes everything below. The small early payouts come from the scammers; the large later payments go to them. Only the second group of transfers is recoverable in principle, and only through the payment rail they travelled on.

The three lanes: payment provider, regulator, law enforcement

Almost every bad outcome in these cases comes from treating one lane as a substitute for the others. They do different work, on different clocks, with different powers.

Lane What it can do What it cannot do How fast
Payment provider (your bank or e-wallet) Treat the transfer as a disputed transaction, temporarily hold the funds at the receiving end, and run coordinated verification with the receiving institution. Guarantee a refund. AFASA Sec. 6 makes a non-compliant institution liable for restitution; a compliant one is not liable for the loss. Acknowledge within 2 days of receipt; hold capped at 30 calendar days.
Financial regulator (BSP, or the SEC where securities are involved) Supervise and sanction the institution, and adjudicate a purely civil money claim up to ₱10,000,000 against a covered financial service provider. Order a refund from an unregistered scam operator that was never a licensee. RA 11765 Sec. 6(f) reaches providers the Act covers, not fraudsters. BSP escalation follows the institution’s own mechanism; the BSP’s published estimate for its assistance process is 55 to 65 days.
Law enforcement and prosecution (PNP-ACG, NBI, DOJ) Investigate, preserve computer data, apply for cybercrime warrants, and build an estafa or computer-related-fraud case for prosecution. Return your money as part of the criminal process. Restitution follows conviction, or a separate civil action. No universal timetable is published. Preservation of computer data under RA 10175 Sec. 13 runs six months.
Labour and migration regulators (DOLE, DMW) Act on recruitment and placement offences: licensing, certification, and endorsement of cases for preliminary investigation. Help at all if no employment recruitment element exists. A pure “deposit to unlock” app with no job placement is outside their remit. Not published as a single clock.
Anti-trafficking machinery (IACAT, DOJ as lead) Receive a report orally, in writing or by other means, and trigger rescue and law-enforcement response. Handle an ordinary financial loss. This lane is for coercion, confinement, forced labour or exploitation. 1343 Actionline is described by the government as 24/7.

If you remember one thing from this table: the payment lane is the only one with a short, hard deadline that can still reach your money, so it goes first even if you intend to file criminally the same week. Our online scam complaint procedure guide walks the full sequence, and the scam and hack triage tool will route you by what happened.

Which law your case falls under

A task or job scam is usually not one offence. It is a cluster, and which parts apply depends on four facts about your own case. Work down this table and tick the rows that match you — the ticked rows are your complaint.

If this is true of your case The law in play Who handles it
You were deceived into parting with money Estafa under Art. 315 of the Revised Penal Code, with the amount brackets set by RA 10951 Sec. 85 Prosecutor, on a complaint built with the NBI or PNP-ACG
The deception happened through a computer, app or messaging platform RA 10175 Sec. 6, which raises the penalty for a Penal Code crime committed through ICT by one degree; computer-related fraud under Sec. 4(b)(2) where computer data or a system was manipulated PNP Anti-Cybercrime Group or the NBI Cybercrime Division
A job abroad was promised, or placement, visa or deployment was offered Illegal recruitment, under RA 8042 as amended by RA 10022 and its Omnibus Rules, Rule IV Department of Migrant Workers, then the prosecutor
A local job was promised to you for a fee by someone with no recruitment licence Illegal recruitment under the Labor Code, whose definition of recruitment covers employment “locally or abroad” (Art. 13(b)) DOLE regional office, then the prosecutor
You paid into a stranger’s personal bank or wallet account Money muling and social engineering under RA 12010, the Anti-Financial Account Scamming Act Your payment provider first, then the BSP
You were told a deposit buys a share of profits, a return, or a “package” Sale of unregistered securities under RA 8799 Secs. 8.1 and 28, and fraud in connection with securities under Sec. 26 Securities and Exchange Commission
You travelled, or were asked to travel, and lost control of your documents or movement Trafficking in persons, RA 9208 as amended, most recently by RA 11862 IACAT 1343 Actionline; DOJ is the lead agency

Most domestic “like and earn” victims tick rows one, two and five. Victims of a fake overseas placement tick rows one, two, three and sometimes seven; victims of a fake local job offer tick rows one, two and four. Those are materially different complaints filed in different places, which is why the next two sections separate them carefully.

Is it illegal recruitment? The overseas test

This is the single most common mistake in this area, and it is worth being precise about. “Illegal recruitment” is a defined offence, and the definition is built around overseas employment. The Omnibus Rules and Regulations implementing RA 8042 as amended by RA 10022 put it in Rule IV, Section 1:

“illegal recruitment shall mean any act of canvassing, enlisting, contracting, transporting, utilizing, hiring, or procuring workers…when undertaken by a non-licensee or non-holder of authority”

Two features of that definition decide your case.

First, the licence question. The core offence is committed by someone with no licence or authority to recruit. But the same section goes further: it says the listed prohibited acts apply “whether committed by any person, whether a non-licensee, nonholder, licensee or holder of authority.” A licensed agency can therefore commit illegal recruitment too, by doing one of the enumerated acts. The Rules enumerate acts lettered (a) through (n), including charging fees beyond the allowable schedule, furnishing false notices or documents about recruitment or employment, misrepresentation to secure a licence, inducing an already-employed worker to quit, recruiting for jobs harmful to health or morality, substituting or altering employment contracts, withholding travel documents, failing to deploy a contracted worker, and failing to reimburse documentation expenses when deployment does not happen through no fault of the worker.

Second, and this is the part that changes where you file: the framework is about placement for work abroad. If a Facebook page offered you ₱1,500 a day to like TikTok videos from your bedroom in Quezon City, and then asked for a ₱5,000 “activation” deposit, there is no overseas placement and no deployment. That is fraud. Filing it as illegal recruitment with the DMW will not fail loudly — it will simply go nowhere, while the 30-day window on your money closes.

What about a local job scam? A fake local job offer can still be illegal recruitment. The Labor Code defines recruitment and placement as canvassing, enlisting, contracting, transporting, utilizing, hiring or procuring workers, including promising or advertising employment “locally or abroad, whether for profit or not,” and deems anyone who offers or promises employment for a fee to two or more persons to be engaged in recruitment (Art. 13(b), as quoted by the Supreme Court in People v. Valle, G.R. No. 126933, 23 February 2001). The difference from a task scam is that a real job, not “earnings” from tasks, is what was offered. Recruitment and placement for local employment is a licensed activity: the Department of Labor and Employment licenses Private Employment Agencies, and DOLE’s own regional pages state that a PEA must be licensed by the Department and provide a search facility to verify a licensed agency’s record. The DOLE National Capital Region site publishes such a search. Two honest limits apply here, and we state them rather than paper over them: the DOLE pages we could read do not publish the department order number, the Labor Code article, the rules on charging fees to applicants, or a complaint channel for an unlicensed agency, so no figure, fee rule or filing deadline for local recruitment is stated on this page. Check with the DOLE regional office with jurisdiction over the agency’s address, and treat the verification search as scoped to the region whose site hosts it.

If your case does involve an overseas offer, the RA 11862 guide and the trafficking section below matter more than the consumer sections.

When illegal recruitment becomes economic sabotage

Where the overseas element is present, the Omnibus Rules escalate sharply, and the escalation is worth knowing because it changes how seriously a prosecutor treats the file. Rule IV, Section 2 provides:

“Illegal recruitment is deemed committed by a syndicate if carried out by a group of three (3) or more persons conspiring or confederating with one another. It is deemed committed in large scale if committed against three (3) or more persons individually or as a group.”

Either route makes it economic sabotage. Rule IV, Section 5 sets the penalties.

Form of the offence Imprisonment Fine
Illegal recruitment, basic form Not less than 12 years and 1 day, not more than 20 years Not less than ₱1,000,000, not more than ₱2,000,000
Illegal recruitment as economic sabotage (syndicate or large scale) Life imprisonment Not less than ₱2,000,000, not more than ₱5,000,000

The practical consequence for you as a victim is simple: find the other victims. Three complainants against the same recruiter converts a routine case into large-scale illegal recruitment. If the recruitment ran through a group chat or a Facebook group, that group is also your co-complainant list. Where there are several of you, file together.

Estafa and computer-related fraud

For the far more common domestic task scam, the criminal frame is estafa plus the cybercrime uplift.

Estafa is in Article 315 of the Revised Penal Code. The relevant limb for a task scam is the second group of means: false pretenses or fraudulent representations “executed prior to or simultaneously with the commission of the fraud.” A recruiter who tells you that depositing ₱10,000 unlocks a ₱40,000 withdrawal, knowing no withdrawal will ever be allowed, is making exactly that kind of representation before the money moves.

The penalty depends on the amount, on the scale RA 10951 Sec. 85 substituted into Art. 315.

Amount defrauded Penalty under the general estafa scale
₱40,000 or less Arresto mayor in its medium and maximum periods
Over ₱40,000 up to ₱1,200,000 Arresto mayor maximum to prisión correccional minimum
Over ₱1,200,000 up to ₱2,400,000 Prisión correccional in its minimum and medium periods
Over ₱2,400,000 up to ₱4,400,000 Prisión correccional maximum to prisión mayor minimum
Above ₱4,400,000 Add one year for each additional ₱2,000,000, with the total not to exceed 20 years

Most individual task-scam losses land in the first two rows. That is a sobering fact and we state it plainly: a single ₱15,000 loss is, standing alone, a low-penalty offence, which is a further reason to consolidate with other victims so the prosecutor sees the scheme rather than one transaction.

The cybercrime uplift is what makes the difference. RA 10175 Sec. 4(b)(2) creates computer-related fraud — the unauthorised input, alteration or deletion of computer data, or interference with a computer system, causing damage with fraudulent intent — which fits best where the scammers manipulated data or a system. Where you authorised the transfer yourself, the more direct route is Sec. 6, which provides that all crimes defined and penalised by the Revised Penal Code and special laws, if committed by, through and with the use of information and communications technologies, carry a penalty one degree higher. A task scam is run end to end on ICT — the ad, the chat, the app, the deposit instruction. Say so expressly in your complaint-affidavit; it is not automatic and the prosecutor should not have to infer it. Our online estafa guide works through the elements in detail.

AFASA, mule accounts and the hold on your money

Republic Act No. 12010, the Anti-Financial Account Scamming Act, is the law that actually reaches the money, and it is the newest tool you have. Three of its provisions do the work.

Section 4(a) — money muling. The Act makes it an offence to obtain, receive, deposit, transfer or withdraw proceeds known to derive from crimes or from social engineering schemes. In a task scam the collection account almost never belongs to the operator; it belongs to a recruited or purchased account holder. That person is a money mule in the Act’s sense, and Section 16(a) puts money muling at 6 to 8 years, or a fine of ₱100,000 to ₱500,000, or both. Our money-mule liability guide covers the victim-versus-participant line, which matters if your account was used.

Section 7 — the temporary hold. Institutions may temporarily hold funds subject of a disputed transaction within the period the BSP prescribes, not exceeding thirty calendar days. BSP Circular No. 1215, Series of 2025, issued under Monetary Board Resolution No. 523 dated 22 May 2025, fixes the shape of it: an initial hold of not more than 5 calendar days, an extension of not more than 25 calendar days, and 30 calendar days maximum, extendable beyond that only by court order. The Circular lists the grounds for a hold, and one of them fits a task scam exactly: that the transfer was facilitated through social engineering.

Section 8 — coordinated verification. On a complaint, or on a fraud management system finding, the institutions and the account owners involved must start a coordinated verification process. This is the provision that makes your report do something at the receiving end rather than just sit in a ticket queue at yours.

There is an honest limit here, and it is important. AFASA’s “social engineering scheme” definition is about obtaining another person’s sensitive identifying information by deception or fraud, resulting in unauthorised access to and control over their financial account. In a classic task scam you were not hacked — you logged in yourself and authorised the transfer. Whether the deception that induced you to authorise it falls inside that definition is a genuine question, and we are not going to pretend it is settled. What is not in doubt is that the receiving account is very often a mule account under Sec. 4(a), which is an independent ground to complain about the transaction. Frame your dispute that way. The RA 12010 guide and the unauthorised e-wallet transaction guide both go deeper, and the second explains the unauthorised-versus-tricked-into-paying distinction in full.

What RA 12010 does not do is create an automatic refund. Section 6 splits liability: an institution that complied with its obligations is not liable for the loss, while a non-compliant one is liable for restitution to account owners, and conviction is not a prerequisite to that restitution. So the question in your case becomes whether your provider did what the rules require — which is exactly the question the BSP escalation route exists to answer. See our digital payment consumer rights guide for that route.

When a job offer is a trafficking case

A significant share of Philippine “job scams” are not about taking a deposit at all. They are recruitment into scam operations, often abroad, where the recruited worker becomes the one running task and romance scams on other victims, and cannot leave. If any part of your situation involves confinement, confiscated documents, debt bondage, threats or forced work, stop treating this as a financial dispute.

The governing statute is Republic Act No. 9208 as amended, most recently by Republic Act No. 11862, “An Act Strengthening the Policies on Anti-Trafficking in Persons, Providing Penalties for its Violations, and Appropriating Funds Therefor, Amending for the Purpose Republic Act No. 9208, as amended, otherwise known as the ‘Anti-Trafficking in Persons Act of 2003’, and Other Special Laws,” approved 23 June 2022. We have not reproduced its section text here because we could not read the enrolled text from a primary source this run, so no section number, element list or penalty figure from RA 11862 is stated on this page. Our RA 11862 guide covers the Act itself.

What we can state, from the Inter-Agency Council Against Trafficking’s own published material, is how to report:

  • “A report may be made to the IACAT Anti-Trafficking Task Force or through the IACAT 1343 Action Line.”
  • Reports may also go to “barangay authorities, the local social welfare and development office (LSWDO), the nearest police or other law enforcement agencies, the Local Council for the Protection of Children (LCPC), or any member of the Council or local anti-trafficking committee.”
  • The form does not matter: “Any person who has any knowledge or learns of facts or circumstances that give rise to a reasonable belief that a person will be, or suspected to be, or is in the process of being trafficked shall immediately report the incident, either orally, in writing or through other means.”
  • IACAT describes itself as the body mandated by law to coordinate and monitor implementation of RA 9208, with the Department of Justice as lead agency.

The Philippine Information Agency reported on 12 June 2026 that the 1343 Actionline Against Human Trafficking is available 24/7, free of charge, with zero-rated international calls for overseas Filipinos, and is also reachable through its Facebook page at fb.com/1343Actionline. The same report set out the Commission on Filipinos Overseas’s red flags for recruitment fraud, which map onto the job-scam pattern precisely: “not meeting a recruiter in person,” “being offered a job without a proper work visa,” “entering other countries through unofficial routes,” “job processes conducted exclusively online,” and “lack of verification documentation from legitimate government agencies.” The CFO also warned about schemes using “promises of fast-tracked employment or visa-free travel.” That is a government news report of an agency advisory, not an issuance.

Note what the IACAT page does not say, because a guide that pretends otherwise sends people into a wall: it does not publish the hours, capabilities or alternative contact methods of the 1343 line beyond the number, does not list an email address, and does not specify what details a reporter should include. Give the facts you have and let the responder ask.

When the “task platform” is really an unregistered investment

Many task-scam apps blur into investment schemes. The tell is the pitch: if the deposit is described as buying a “level,” a “package,” a share of profits, or a guaranteed return rather than as a fee for work, you are being sold something that looks like a security. Two provisions of the Securities Regulation Code give you a test you can apply yourself.

Provision of RA 8799 What it requires, verbatim What it means for your case
Sec. 8.1 Securities “shall not be sold or offered for sale or distribution within the Philippines, without a registration statement duly filed with and approved by the Commission.” Ask whether the scheme has an approved registration statement for what it is selling. A business permit or SEC company registration is not one.
Sec. 28 “No person shall engage in the business of buying or selling securities in the Philippines as a broker or dealer, or act as a salesman, or an associated person of any broker or dealer unless registered as such with the Commission.” Ask whether the “agent” recruiting you is a registered salesman. In a task scam the recruiter is a stranger on Telegram.
Sec. 26 “It shall be unlawful for any person, directly or indirectly, in connection with the purchase or sale of any securities to employ any device, scheme, or artifice to defraud.” This is the fraud provision the SEC’s enforcement arm works with where a securities element exists.

The distinction that scams exploit is between corporate registration and securities registration. A scheme can be a validly registered Philippine corporation and still be committing an offence under Sec. 8.1 by selling an unregistered investment. Being able to show someone a certificate of incorporation proves nothing about the product. Two honest limits carry over from our investment and crypto scam guide, which handles this lane in full: we state no RA 8799 penalty figure and no section number for the cease-and-desist power, because Secs. 53, 54 and 73 could not be read from a primary source; and no SEC complaint form, address or timetable for an unregistered investment solicitation is published here, because none was readable. The one SEC complaint procedure we could read is expressly scoped to registered lending and financing companies, which a task-scam app is not.

The SEC’s Enforcement and Investor Protection Department’s own stated functions are investigation, cease-and-desist orders and revocation proceedings. Those are real powers and they can shut a scheme down. None of them is a refund.

Every clock that applies to you

Victims lose money to confusion about which deadline is theirs. These are the periods we were able to verify, in the order they bite.

Clock Period Source
Acknowledgement of your complaint by the bank or wallet Within 2 days of receipt MORB Appendix 115
Simple complaint resolved, then outcome communicated Within 7 days, then 9 days, from receipt MORB Appendix 115
Complex complaint resolved, then outcome communicated Within 45 days, then 47 days, from receipt MORB Appendix 115
Initial temporary hold on the disputed funds Not more than 5 calendar days BSP Circular No. 1215, s. 2025
Your supporting documents for the disputed transfer Within the initial holding period, unless the industry protocol provides otherwise BSP Circular No. 1215, s. 2025
Extended hold, and the absolute ceiling Not more than 25 further calendar days; 30 calendar days maximum, beyond that only by court order RA 12010 Sec. 7; BSP Circular No. 1215
Coordinated verification where no funds are held Within 30 calendar days, extendable to 60 for meritorious reasons BSP Circular No. 1215
BSP consumer assistance process, once the provider’s own mechanism is exhausted Published estimate of 55 to 65 days from receipt of the complaint BSP FAQ on Circular No. 1169
Preservation of computer data once ordered Six months RA 10175 Sec. 13

The complaint-handling periods in MORB Appendix 115 run from receipt of the complaint; the appendix does not say whether they are banking or calendar days, so ask your provider which it applies. Two deliberate omissions. We state no prescriptive period for estafa or for illegal recruitment, because that is a different question under different law and we did not verify it this run; ask the prosecutor’s office or counsel rather than relying on a number from a blog. And no processing time is published for an illegal-recruitment complaint, a DOLE complaint, or an IACAT report, so treat any such figure you see elsewhere with suspicion.

What to preserve, and how

You will be asked for this twice — once by your payment provider, once by an investigator — and the two want it in different shapes. Gather once, properly.

What to keep Why it matters How to capture it
The recruitment ad or post Shows the false representation and is often deleted within days Full-page capture plus the URL and the account handle, with date and time visible
The full chat thread with the recruiter Carries the promise, the deposit instruction and the refusal to pay out Use the app’s own export function where it has one; screenshots of a scrolling thread lose context
Every deposit: amount, date, time, reference number, destination account name and number This is the only list that lets a provider dispute and hold the transfer Download the official transaction receipt or statement, not a screenshot of a notification
The failed withdrawal attempt Proves the scheme never intended to pay, which goes to intent Capture the error screen and any message demanding a further payment to “fix” it
The app or platform itself Identifies the operator and the hosting route Note the exact app name, developer name, download link and any web domain before it disappears
Other victims’ contact details, where you have them Three or more victims changes the legal character of an overseas-recruitment case entirely Keep the group chat membership list; do not post anyone’s details publicly
Any document you sent them Tells you what identity exposure you now have to manage List what was sent, to whom and when; then follow the identity-exposure steps

Do not delete the conversation, do not block the recruiter before you have exported it, and do not “test” the scheme with another payment to gather proof. Our online scam evidence checklist sets out the preservation sequence in full, and if you sent identity documents, the first-steps recovery guide covers the exposure side.

Where to report, and what each office can actually do

This table is deliberately honest about contact details. Where a government body does not publish a reachable channel, we say so instead of printing a number we could not verify.

Office What to bring or send Published contact position
Your bank or e-wallet, consumer assistance A written disputed-transaction report naming every reference number, amount, date and destination account Each financial service provider must maintain a single consumer assistance mechanism, free to the consumer, under RA 11765 Sec. 8(f). Use the channel in its own app or website.
Bangko Sentral ng Pilipinas, consumer assistance Your provider’s written reply, or proof it did not reply, plus the full transaction list Complaints must first go through the institution’s own mechanism before BSP escalation. The BSP’s published estimate for its process is 55 to 65 days.
NBI Cybercrime Division Your exported chats, transaction receipts and a sworn complaint sheet; witnesses should be ready to execute sworn statements The NBI’s own Citizen’s Charter entry for investigative assistance to computer-crime victims states no fee and a total processing time of 1 hour and 10 minutes. Regional Cybercrime Centers use the same process.
PNP Anti-Cybercrime Group The same evidence bundle; ask for the case reference No hotline, email address or office address is published on the ACG’s own site that we could read, so none is printed here. Go through a police station or the ACG’s own channels.
Prosecutor’s office, for preliminary investigation An Investigation Data Form (NPS INV Form No. 1), 2 copies; a Complaint-Affidavit, 5 copies plus the number of respondents; each witness’s affidavit on the same count; supporting documents on the same count From the Department of Justice’s own statement of filing requirements. Office hours are given as Monday to Friday, 8:00 a.m. to 4:30 p.m., no noon break.
Department of Migrant Workers The recruitment documents, receipts, the agency or recruiter’s name, and the job offer itself — only where an overseas job was involved The DMW’s 2026 Citizen’s Charter lists an illegal-recruitment certification service and an “Endorsement of Cases to DOJ/City Prosecution Office/Provincial Prosecution Office for the Conduct of Preliminary Investigation,” but publishes no standalone complaint-filing procedure and no illegal-recruitment hotline. Approach the DMW regional office with jurisdiction.
IACAT 1343 Actionline Whatever facts you have, orally or in writing — the report need not be in any particular form 1343, described by the government as 24/7 and free of charge, with zero-rated international calls for overseas Filipinos, and reachable at fb.com/1343Actionline.
Securities and Exchange Commission Screenshots of the “investment” pitch, the entity’s claimed name and registration, and your payment records — only where a profit, return or package was sold Use the Commission’s own live contact page. We publish no SEC email address or form for this type of complaint, because no SEC page carrying one was readable.

One number is worth naming with a caveat. Hotline 1326 is reported by the Philippine News Agency as a 24/7 hotline for reporting scams, including investment, phishing, text, email, caller-ID spoofing and romance scams, run by the CICC, DICT, NTC and NPC with the PNP and NBI. That is a government news report of a service, not an issuance, and the CICC’s own site was not readable this run, so treat it as a route rather than a guarantee. Our CICC guide explains what that office can and cannot do, and the PNP-ACG complaint process guide and reporting hub cover the law-enforcement route end to end. A deliberate omission: the archived POEA page we read carries hotline numbers and an email address, but POEA’s functions now sit with the Department of Migrant Workers, so those archived details are not reproduced here.

What to do next

Work down this table in order. The first row is today’s work, and it is the only row with a deadline that can still reach your money.

Step Do this Why now
1. Stop paying, today Make no further deposit, no matter what “fee,” “tax” or “system error” is cited. Do not pay a third party who offers to recover your money for a fee. Every further payment is a fresh loss and a fresh transaction to dispute. Recovery-for-a-fee offers are a known follow-up scam.
2. File a written disputed-transaction report with the provider you paid from List every transfer: amount, date, time, reference number, destination account name and number. Say the words “disputed transaction” and “the receiving account appears to be a money mule account.” Ask it to request a temporary hold. This is the concrete first action. The temporary hold under RA 12010 Sec. 7 is capped at 30 calendar days, your supporting documents are due within the initial hold of not more than 5 calendar days, and the provider must acknowledge within 2 days of receipt.
3. Export your evidence before anything disappears Chat thread, ad, app details, every receipt, the failed withdrawal screen. Keep originals; do not edit or annotate them. Scam pages and accounts are deleted within days. An exported thread survives; a screenshot of a scroll does not.
4. Decide which lane your case is in Local task scam with no job placement, overseas job offer, investment pitch, or recruitment into forced work. Use the “Which law” table above. It decides which office can help. Filing in the wrong lane costs weeks you do not have.
5. File the criminal complaint Go to the NBI Cybercrime Division or the PNP-ACG with your bundle. State expressly that the fraud was committed through ICT so RA 10175 Sec. 6 is on the record. You can also call the CICC’s 24/7 hotline 1326 to log the scam. The Sec. 6 one-degree uplift is not automatic. Put it in the affidavit.
6. Find the other victims Keep the group chat list. Three or more complainants against the same overseas recruiter makes the offence large-scale illegal recruitment. Under Rule IV Sec. 2 of the Omnibus Rules that is economic sabotage, carrying life imprisonment and a fine of ₱2,000,000 to ₱5,000,000.
7. Escalate if your provider says no Get its written reply, then escalate to the BSP, asking whether it met its AFASA Sec. 6 obligations. AFASA Sec. 6 makes a non-compliant institution liable for restitution, and conviction is not a prerequisite. That is the question worth putting to the regulator.

If identity documents were sent, add one more step: assume the exposure is permanent, and work through the help directory for banks, wallets, telcos and shopping apps to lock down the accounts those documents can open. The National Privacy Commission guide covers the data-privacy route if the exposure came from an organisation’s failure rather than your own disclosure.

Five worked scenarios

These are composites, written to show how the tables above resolve a real set of facts.

1. ₱22,000 lost to a “like and earn” app, all local. A Telegram recruiter paid ₱300 for the first three days, then required a ₱2,000 top-up to reach “Level 2,” then ₱20,000 for “VIP.” Withdrawal blocked. Lane: fraud, not illegal recruitment — no overseas placement, so the DMW is not involved. Action: disputed-transaction report with the e-wallet naming all three transfers; criminal complaint for estafa with the RA 10175 Sec. 6 uplift. Realistic outlook: at ₱22,000 the estafa penalty sits in the second bracket; recovery depends almost entirely on whether the receiving account still holds funds inside the 30-day window.

2. ₱85,000 paid for a “guaranteed” factory job in Eastern Europe. A Facebook page, an “agency” that would only meet by video call, a processing fee paid in three instalments, no visa ever produced. Lane: this is the illegal-recruitment lane. The recruiter is a non-licensee procuring workers for employment abroad, and the facts match the CFO’s red flags almost item for item. Action: DMW regional office plus a criminal complaint; and find the other applicants, because three victims makes it large scale.

3. A “task platform” that sold ₱50,000 “profit packages.” The pitch was explicitly a return on a deposit, with a daily percentage. Lane: both fraud and securities. The scheme’s SEC company registration proves nothing about whether the package was registered under RA 8799 Sec. 8.1, and the recruiter was not a registered salesman under Sec. 28. Action: payment dispute first, then the SEC on the securities side, then the criminal complaint. Read the investment and crypto scam guide for that lane in full.

4. Recruited to “customer service” abroad, then held in a compound. Passport taken, quota of scam messages to send, debt claimed for “training.” Lane: trafficking, not consumer protection. Action: 1343 Actionline immediately, or any of the other bodies IACAT names — barangay authorities, the LSWDO, the nearest law enforcement agency. The report can be oral. The financial loss is secondary to extraction and safety.

5. Your own account was the collection account. You were “hired” as a “payment processor” and told to receive transfers and forward them, keeping a cut. Lane: you are in the money-mule frame under RA 12010 Sec. 4(a), and the question is whether you knew the funds derived from a crime or social engineering. Action: stop immediately, preserve every instruction you received, and get advice before you give a statement. The money-mule liability guide works through the victim-versus-participant line, and the penalty under Sec. 16(a) is 6 to 8 years, or a fine of ₱100,000 to ₱500,000, or both.

Eight mistakes that cost victims money

  1. Paying one more time to “release” the earnings. There are no earnings. The balance on the screen is a number in the operator’s own database.
  2. Going to the police first and the bank second. The criminal case has no 30-day clock. The payment dispute does. Do both, but in that order.
  3. Filing a task scam as illegal recruitment. If no real job, local or abroad, was offered, there was no recruitment, and the file goes to a body with no remit over it. If an overseas job was offered, go to the DMW; if a local job was offered for a fee by an unlicensed recruiter, go to the DOLE regional office.
  4. Blocking the recruiter before exporting the chat. On several platforms blocking removes your access to the thread.
  5. Reporting only the big transfer. List every deposit. The small early ones establish the pattern and the induced reliance.
  6. Treating a screenshot as a receipt. Providers and investigators want the official transaction record with the reference number, not a photo of a push notification.
  7. Paying a “recovery agent”. Victim lists circulate, and the second approach is often from the same group.
  8. Not consolidating with the other victims. Three complainants transform an overseas-recruitment case; even locally, a prosecutor reads a scheme differently from a single transaction.

Frequently asked questions

Can I get my money back from a task scam?

Sometimes, and only through the payment rail. The realistic route is a disputed-transaction report to the bank or e-wallet you paid from, which can ask for a temporary hold on the funds at the receiving end under RA 12010 Sec. 7. That hold is capped at 30 calendar days. Whether money is actually returned depends on whether the funds are still there and, under AFASA Sec. 6, on whether your own provider met its obligations. No agency will simply refund you.

Is a task scam the same as illegal recruitment?

Usually not. Illegal recruitment as defined in the Omnibus Rules implementing RA 8042 as amended by RA 10022 is built around canvassing, enlisting, contracting, transporting, hiring or procuring workers for employment abroad by a non-licensee or non-holder of authority. A local “like and earn” app with no job placement is fraud under the Revised Penal Code and RA 10175 instead. If an overseas job, visa or deployment was promised, the overseas illegal-recruitment framework applies. If a real local job was promised for a fee by someone without a licence, the Labor Code’s definition of recruitment, which covers employment “locally or abroad” (Art. 13(b)), can apply too.

What is the penalty for illegal recruitment in the Philippines?

Under Rule IV Sec. 5 of the Omnibus Rules, the basic offence carries imprisonment of not less than 12 years and 1 day but not more than 20 years and a fine of not less than ₱1,000,000 nor more than ₱2,000,000. Where it is economic sabotage — committed by a syndicate of three or more conspirators, or in large scale against three or more persons — it carries life imprisonment and a fine of not less than ₱2,000,000 nor more than ₱5,000,000.

How much can I be jailed for if I was the one receiving the money?

If you received, deposited, transferred or withdrew proceeds you knew derived from crime or from a social engineering scheme, that is money muling under RA 12010 Sec. 4(a), and Sec. 16(a) sets the penalty at 6 to 8 years, or a fine of ₱100,000 to ₱500,000, or both. Knowledge is the pivot, which is why the victim-versus-participant distinction matters so much. Get advice before giving a statement.

Does reporting to the SEC get my money back?

No. The SEC’s Enforcement and Investor Protection Department’s stated functions are investigation, cease-and-desist orders and revocation proceedings. Its power under RA 11765 Sec. 6(f) to order payment or reimbursement up to ₱10,000,000 runs against a financial service provider the Act covers — not against an unregistered operator that was never a licensee. Report to the SEC to get the scheme stopped, not to recover.

Who do I call if someone I know was recruited abroad and cannot come home?

The IACAT 1343 Actionline. The government describes it as available 24/7, free of charge, with zero-rated international calls for overseas Filipinos, and it is also reachable through fb.com/1343Actionline. IACAT’s own guidance says a report may be made orally, in writing or through other means, and also names barangay authorities, the local social welfare and development office, the nearest police or other law enforcement agency, and the Local Council for the Protection of Children as places to report.

How do I check whether a recruitment agency is legitimate?

For overseas work, verification sits with the Department of Migrant Workers, whose mandate is “to protect the rights and promote the welfare of overseas Filipino workers (OFWs)” and “to facilitate the overseas employment and reintegration of Filipino workers.” For local placement, DOLE licenses Private Employment Agencies and its regional sites provide a record search. The Commission on Filipinos Overseas’s own red flags are a useful screen in both cases: no in-person meeting, no proper work visa, unofficial routes into other countries, a process conducted exclusively online, and no verification documentation from legitimate government agencies.

Should I file at the NBI or the PNP?

Either can take a cybercrime complaint. The NBI’s published Citizen’s Charter entry for investigative assistance to victims of computer crimes states no fee and a total processing time of 1 hour and 10 minutes, with Regional Cybercrime Centers following the same process, which makes it the better-documented intake. The PNP Anti-Cybercrime Group handles the same subject matter but publishes no contact details we could read. Either way, the prosecutor will later need the DOJ’s documentary set.

Is there a deadline to file the criminal case?

There is a prescriptive period, but we are not stating a figure for it. Prescription for estafa and for illegal recruitment turns on different statutes and on the penalty attaching to your particular amount, and we did not verify it from a primary source for this guide. Ask the prosecutor’s office or counsel. What is certain is that the practical deadline is much shorter: the 30-day cap on a temporary hold, and the fact that platform records and scam accounts vanish within days.

Verification log

Every load-bearing claim on this page, with where it came from and whether it was read this run or carried over from an earlier verified reading.

Claim Source Status
Definition of illegal recruitment; licensee and non-licensee coverage; enumerated acts (a) to (n) Omnibus Rules implementing RA 8042 as amended by RA 10022, Rule IV Sec. 1 Read this run from a DMW host
Syndicate = three or more conspirators; large scale = three or more victims Same Omnibus Rules, Rule IV Sec. 2 Read this run, quoted verbatim
Illegal recruitment penalties, both forms Same Omnibus Rules, Rule IV Sec. 5 Read this run, quoted verbatim
Illegal-recruitment report or complaint may be filed in writing and under oath; regional offices accept filings Same Omnibus Rules, Rule VI Sec. 3 Read this run
PNP-ACG task-scam modus: free first tasks, immediate commissions, escalating required deposits, invented withdrawal problems Philippine Information Agency report of a PNP Anti-Cybercrime Group warning, 6 September 2023 Read this run, quoted verbatim. A government news report, not an issuance
CFO recruitment-fraud red flags; 1343 Actionline is 24/7, free, with zero-rated international calls Philippine Information Agency, 12 June 2026 Read this run. A government news report, not an issuance
Where to report trafficking; report may be oral, written or by other means; DOJ is lead agency Inter-Agency Council Against Trafficking, published FAQs Read this run, quoted verbatim
RA 11862 full title and approval date of 23 June 2022 Senate Legislative Document Repository entry for the Act Read this run — metadata only; the enrolled text was not readable, so no section or penalty from it is stated
DMW mandate; existence of an illegal-recruitment certification service and endorsement of cases for preliminary investigation; absence of a published complaint procedure or hotline DMW Citizen’s Charter, 2026 1st Edition Read this run
A Private Employment Agency for local employment must be licensed by DOLE; a verification search exists DOLE National Capital Region, Private Employment Agency page Read this run. No department order number, Labor Code article, fee rule or complaint channel was published on the pages readable this run
RA 12010 Secs. 4(a), 6, 7, 8 and 16; the “financial account” and “social engineering scheme” definitions BSP booklet of RA 12010 with its implementing rules Re-read on 4 October 2026 from BSP’s own host; Sec. 16(a) penalty includes “or both”
Temporary hold periods: 5 then 25, 30 calendar days maximum, court order beyond; grounds including social engineering; 30-day and 60-day coordinated verification BSP Circular No. 1215, Series of 2025, issued under Monetary Board Resolution No. 523 dated 22 May 2025 Holding periods, grounds, verification periods and the document deadline re-read on 4 October 2026 from BSP’s host
Complaint clocks: 2, 7, 9, 45 and 47 days from receipt MORB Appendix 115 Re-read on 4 October 2026; the appendix does not specify banking or calendar days, so the earlier “banking days” wording was removed
RA 11765 Secs. 6(f) and 8(f); the ₱10,000,000 ceiling; the single consumer assistance mechanism RA 11765 as served by BSP Re-read on 4 October 2026
BSP consumer assistance: the institution’s own mechanism first; 55 to 65 days BSP FAQ on Circular No. 1169 Re-read on 4 October 2026
Estafa amount brackets and the one-year-per-₱2,000,000 rule above ₱4,400,000 Art. 315, Revised Penal Code, as amended by RA 10951 Sec. 85, verified on a Senate host Verified previously and reused
RA 10175 Sec. 4(b)(2) computer-related fraud (Sec. 4(b)(3) is identity theft, corrected 4 October 2026); Sec. 6 one-degree uplift; Sec. 13 six-month preservation RA 10175, verified on a Senate host Full text re-read on 4 October 2026
RA 8799 Secs. 8.1, 26 and 28, quoted verbatim RA 8799, Senate Legislative Document Repository Verified previously and reused. Secs. 53, 54 and 73 were not readable, so no RA 8799 penalty figure is stated
NBI intake: no fee, 1 hour 10 minutes, Regional Cybercrime Centers use the same process NBI Citizen’s Charter, investigative assistance for victims of computer crimes Verified previously and reused
DOJ documentary requirements for preliminary investigation, including five copies plus the number of respondents; office hours Department of Justice, filing of complaint for preliminary investigation Verified previously and reused
SEC EIPD functions; the only readable SEC complaint procedure is scoped to lending and financing companies SEC-hosted notice and the SEC lending-and-financing complaints page Verified previously and reused
Hotline 1326 as a 24/7 scam-reporting line under an inter-agency arrangement Philippine News Agency report Read on 4 October 2026. A government news report of a service, not an issuance
Labor Code Art. 13(b): recruitment covers employment “locally or abroad”; offering employment for a fee to two or more persons is recruitment People v. Valle, G.R. No. 126933, 23 February 2001 (Supreme Court), quoting Art. 13(b) Read on 4 October 2026

Stated plainly, so you know the limits of this page: no Philippine case law is cited anywhere on it, because Supreme Court material was not readable this run; no loss, recovery-rate or victim-count figure is given, because no official Philippine dataset on task or job scams was read; no RA 11862 section, element or penalty is stated; no prescriptive period is asserted; no RA 8799 penalty is stated; no PNP-ACG or SEC contact detail is published; no DOLE department order number or local-recruitment fee rule is stated; and the archived POEA hotline numbers and email address we read are deliberately not reproduced, because POEA’s functions now sit with the Department of Migrant Workers and a six-year-old archived channel would send victims nowhere.

Official sources

Republic Act No. 10175, Republic Act No. 10951 and Article 315 of the Revised Penal Code as amended were verified on the Senate’s own legislative repositories in earlier runs on this site; the verification log above records which provisions and marks them as reused rather than re-fetched.

About this guide

This guide was researched and written by the Cybercode.ph Editorial Team from Philippine primary sources: statutes and their implementing rules, regulator issuances, and the published material of the agencies a victim would actually approach. Where a provision could not be read from a primary source, the guide says so rather than filling the gap, and the verification log above records every such limit. Figures are stated only where they trace to a source identified in that log.

Legal disclaimer. This article is general legal information about Philippine law, not legal advice, and it does not create a lawyer-client relationship. Outcomes depend on facts this page cannot know, including the amounts involved, the accounts used, what you were told and when, and whether an overseas employment element exists. Cybercode.ph is not a law firm and is not the NPC, DICT, CICC, DOJ, NBI, PNP, SEC, BSP, DOLE, DMW or IACAT. For advice on your own situation, consult a Philippine lawyer or the Public Attorney’s Office, and for urgent safety or trafficking concerns contact the 1343 Actionline or the nearest law enforcement agency.

Sources rechecked as of: October 4, 2026

Sources rechecked as of: 2 October 2026

CyberCode updates

Get practical updates on Philippine technology law, data privacy, cybersecurity, and AI.

Email activity tracking

Unsubscribe any time. See our privacy policy below.