In 2024 the Cybercrime Investigation and Coordinating Center (CICC) logged 10,004 online scam complaints, up from 3,317 the year before, with reported losses of nearly ₱198 million, the Inquirer reported. It was the first time the agency released loss figures.
Not all of those cases involve gambling. But scams aimed at would-be players use the same playbook: a convincing app, a friendly “agent” on chat, a payout that never lands unless you send one more fee. Here’s what those schemes look like, why one can turn a victim into a suspect, and where to report.
First, the ground rules. Only PAGCOR-licensed online gaming is legal for players in the Philippines. You must be 21 or older. Government employees, AFP and PNP personnel, students and NDRP-listed people are barred from playing at all. Our licensing guide has the details.
How to tell a licensed site from a copy
A PAGCOR logo on a website proves nothing. Neither does a licence certificate on the homepage. Both are easy to fake.
In September 2023 PAGCOR said websites were using its logo without permission to look like licensed operators, in a press release. In May 2025 it flagged agreements that promised people ₱50,000 after an upfront ₱3,000 deposit, backed by an offshore licence that PAGCOR said was fake.
Polished video ads aren’t proof either. AI tools can now imitate a familiar news anchor.
The only check that counts is the regulator’s own records. Type pagcor.ph into your browser yourself instead of tapping a link someone sent you, and look the platform up there. We walk through the process step by step in how to check if a site is licensed.
Also rule out anything offshore. Executive Order 74 ordered offshore gaming operators to shut down by 31 December 2024, and Republic Act 12312, the Anti-POGO Act, made the ban law in October 2025, Philstar reported. PAGCOR says any site claiming an offshore or internet gaming licence from it is “fraudulent and unauthorized“.
Five scam patterns to know
These are descriptions, not instructions. Already caught in one? Skip to what to do first.
1. Apps sent through a link or chat
Someone in a group chat drops a download link for a “casino app” that isn’t in an official app store. Installing it means running software nobody has checked, from someone you can’t trace. It may be a clone of a real brand, built to collect your logins and one-time PINs. It isn’t a licensed route, and we don’t explain how to install these. Our guide to playing on your phone covers the browser-versus-app question.
2. “Agents” and “loaders” on Facebook, Telegram, Viber or TikTok
The pitch is simple. Send money to the agent’s personal GCash or bank account, and they’ll “load” credits for you. Picture a made-up but typical scene: the message arrives on the 30th, just after sweldo, with ₱1,000 sitting in your GCash and an offer of “bonus credits” if you load now.
The hard line: this is not a legal way to play. A licensed operator doesn’t need a middleman taking deposits into a personal account. Once the money leaves, there’s no licence holder to complain to, and the “agent” can vanish in the time it takes to ride the MRT from North Avenue to Taft. For background on e-wallets and gaming, read what changed after the BSP order.
3. “Pay first before you withdraw”
Your balance looks healthy and you ask to cash out. Then a message arrives: you need to pay a “tax”, a “clearance” fee or a “VIP upgrade” before the payout can be released. You pay. Another fee appears. The withdrawal never comes. The PNP Anti-Cybercrime Group described the same move in task scams: when victims try to withdraw, scammers claim a technical problem and demand more money, Philstar reported.
Treat any demand to send fresh money before you can receive your own as a warning sign, and stop paying. Genuine withdrawals can be slow for ordinary reasons, like identity checks or bank cut-offs, and our withdrawals guide explains those. A delay is one thing. A fee that keeps changing names is another.
4. Part-time “tasks” that turn into top-ups
It starts as a job offer: get paid small amounts to like posts, watch videos or rate products. The early tasks pay out, so it feels real. Then you’re asked to put in your own money to get bigger tasks, and when you try to cash out, there’s a “problem” that only more money can fix. The PNP Anti-Cybercrime Group warned about this pattern in September 2023, citing a 25-year-old woman in Baguio City who lost ₱400,000 after starting with ₱300, according to Philstar. In June 2025 Interaksyon reported that such offers were still circulating on Viber, Telegram and WhatsApp.
A June 2025 GMA News explainer on task scams put it plainly: no legitimate employer will ask an applicant for money in exchange for a job.
5. People who offer to get your money back
After a loss, a second wave often follows. A page, a “hacker” or someone claiming to be from a government office offers to recover your funds for a fee. Don’t pay a stranger to “handle” a complaint for you. Use only official channels, and reach them yourself rather than replying to whoever messaged you first.
Why renting out your GCash or bank account is a crime
Some agents don’t ask for your money. They ask for your account. “Pahiram lang ng GCash, may commission ka.”
Under the Anti-Financial Account Scamming Act (Republic Act 12010), approved on 20 July 2024, that can make you a money mule. Section 4 covers people who use, borrow, lend, rent or sell a financial account, open one under a false name, or recruit others to do any of these, so that it can receive money known to come from a crime or a social engineering scheme. Under Section 16, money muling carries six to eight years in prison, a fine of ₱100,000 to ₱500,000, or both. Running a social engineering scheme carries 10 to 12 years, a fine of ₱500,000 to ₱1 million, or both, and the penalty rises when the victim is a senior citizen.
A few hundred pesos of “commission” is not worth a criminal record. Say no, and never hand over your MPIN or one-time PIN.
If you already sent money: what to do first
- Stop paying. No more “fees”, “taxes” or top-ups, no matter what the chat says.
- Save everything. Screenshot the chats, the profile, the app or site address, and every transaction with its reference number, before the scammer deletes the account.
- Report to your e-wallet or bank right away. Use the official GCash or Maya app or help centre, or your bank’s official hotline. Get contact details from gcash.com, maya.ph or your bank’s site, not from a search ad or comment section.
- Change your passwords and MPIN if you shared login details or installed an app from a link.
- Block and don’t engage. Arguing rarely gets money back.
- File a government report through the channels below.
One caution: only report what really happened. Under Section 11 of RA 12010, filing false information in bad faith that leads to a hold on someone else’s account is itself an offence.
Where to report
| Channel | Best for | What to bring |
|---|---|---|
| Your e-wallet or bank (official app or help centre) | Flagging the transaction fast, while funds may still be traceable | Reference numbers, amounts, dates, recipient account |
| CICC hotline 1326 | Any online scam, 24/7 including holidays, through the Inter-Agency Response Center (Inquirer) | Screenshots, links, account names and numbers used by the scammer |
| PNP Anti-Cybercrime Group or your nearest police station | Filing a formal complaint | Valid ID, printed screenshots, transaction records |
| NBI Cybercrime Division | Filing a formal complaint, especially for larger losses | Same as above |
| PAGCOR (via pagcor.ph) | Sites or ads falsely claiming a PAGCOR licence or using its logo | Site address, screenshots of the fake logo or certificate |
Contact details for these offices change, so confirm them on each agency’s official website, not third-party lists. Be wary of any page claiming to be one of them that asks you for payment.
Report even if the site was unlicensed and you feel embarrassed. Reports help investigators link accounts and stop the next victim.
What reporting can and can’t do
Be realistic. Reporting doesn’t guarantee your money comes back.
RA 12010 lets banks and e-wallets temporarily hold funds involved in a disputed transaction for up to 30 calendar days unless a court extends it, under Section 7. That buys investigators time. It isn’t a refund promise, and it doesn’t mean money you knowingly sent to an illegal site or a personal “agent” account will come back. Ask GCash, Maya or your bank directly whether their own protection program covers your case.
The surest protection comes before the loss: check the licence on pagcor.ph, never pay a personal account, never pay to withdraw, never lend your e-wallet.
Gambling should only ever be entertainment with money you can afford to lose. If it’s affecting your budget, your work or your family, stop, talk to someone you trust, and look into self-exclusion through PAGCOR. Our licensing guide explains how it works.
Last checked: October 2026.
