Crypto scams in the Philippines: how they work and how to stop them

Reviewed by the Crypto Philippines Editorial TeamUpdated September 28, 2026 · 13 min read

Crypto scams in the Philippines mostly follow a handful of patterns: Telegram or Facebook “mentors” who steer you to a fake trading site, task-based “earn per click” jobs, look-alike exchange apps, requests to rent your verified GCash or crypto account, and “recovery agents” who target people who have already lost money. Every one of them asks you to move money to someone you cannot verify.

The good news is that these scams are repetitive. Once you know the script, you start seeing it everywhere, in your Messenger requests, in Viber groups, in the comments under a crypto video. This guide walks through each pattern as it actually shows up here, shows you how to check whether an app or exchange is legit, and ends with a practical plan for reporting and damage control. If you are still choosing where to buy, start with our list of the best crypto exchanges in the Philippines, which only ranks platforms we could verify.

How big is the problem?

Bigger than most people assume, and very organised. In June 2025 the US Department of Justice moved to seize about US$225 million in USDT tied to pig-butchering fraud linked to a scam compound in the Philippines. That is one case. Behind it are rooms full of workers reading from scripts, rotating through fake profiles and trading tips they know are false.

Philippine regulators have responded on several fronts. The SEC has issued advisories against more than 20 offshore crypto platforms since 2023 and keeps adding names; it also warns regularly about unregistered “investment” schemes that promise fixed daily returns. The BSP issued a public advisory against unauthorised virtual asset service providers in May 2026 and asked the NTC to block 50 unlicensed platforms in December 2025. And in July 2024 Congress passed RA 12010, the Anti-Financial Account Scamming Act (AFASA), which for the first time made money muling a specific crime. More on that below, because it affects ordinary people who think they are just doing someone a favour.

The crypto scams Filipinos actually run into

These are the patterns that appear again and again in Philippine reports, advisories and victim stories. Each card lists the tell that gives it away.

Pig butchering, step by step

The term comes from the idea of fattening a pig before slaughter. It usually starts with a “wrong number” text, a dating match or a friendly comment. The person is warm, patient and often claims to be an OFW, a business owner in Singapore or a trader in Dubai. After a week or two of daily chats, they mention how their uncle or mentor taught them to trade crypto. They never push. They just show you their results.

When you are curious, they walk you through buying USDT on a real app, often a legitimate local one, and then sending it to “their” platform. Say you send ₱5,000: within days the dashboard shows ₱7,000. You might even be allowed to withdraw ₱1,000 to prove it works. Then comes the big opportunity: a limited VIP pool, a new token, a festival bonus. You borrow, you add savings, maybe you ask family. The moment you try to withdraw the full amount, you learn you owe a “tax” on your profits, a “verification deposit” or an “anti-money-laundering fee” first. Paying it only produces a new fee.

The key detail is that the legitimate exchange where you bought the USDT did nothing wrong, and it cannot reverse a transfer you sent yourself. The loss happens the second the coins leave your wallet for an address the scammer controls.

P2P and face-to-face traps

Peer-to-peer trades have their own scam family. In triangle fraud, a scammer sells a real item to a victim, tells the victim to pay a P2P crypto seller directly, and collects the seller’s USDT. When the victim realises the item never arrives and files a dispute, it is the innocent seller’s GCash or bank account that gets frozen. In July 2026 a trader in Pasay handed over 60,000 USDT, roughly ₱3.7 million, to a “buyer” who then claimed the coins were “fake” and demanded ₱200,000 in “wallet fees”; the victim used on-chain evidence to help make an arrest. Our P2P crypto guide covers these risks in detail, and our cash-out guide shows safer ways to turn crypto into pesos.

Money mules and AFASA: the scam that makes you the suspect

This one catches students, jobseekers and people who need quick cash. The offer sounds harmless: “I just need a verified account to receive client payments”, or “help me cash out, you keep 10%”. Sometimes it is dressed up as a crypto “arbitrage” job where you receive GCash, buy USDT and forward it.

RA 12010, signed on 20 July 2024, is blunt about it. Using, borrowing or allowing the use of a financial account, buying or renting one, selling or lending one, or recruiting others to do any of that, in order to move money known to come from crimes or scams, is money muling. The penalty is six to eight years’ imprisonment or a fine of ₱100,000 to ₱500,000, or both, and the court can order the account closed. The law covers accounts at banks, e-wallets and other institutions supervised by the BSP.

The same law lets those institutions temporarily hold funds in a disputed transaction for up to 30 calendar days, longer if a court extends it. That is good news for victims, who can freeze stolen money quickly. It is bad news for anyone whose account sits in the middle of a scam flow, knowingly or not, because your balance can be locked while it is investigated. If you sell crypto P2P, never accept payment from a name that does not match the buyer’s verified name.

How to check if a crypto exchange or app is legit

People search “is [app] legit” every day. You can answer it yourself in about five minutes, and you should do it before sending a single peso.

Start with the BSP list. The Bangko Sentral publishes a list of licensed virtual asset service providers. As of 15 July 2026 it had nine names: Betur Inc. (Coins.ph), Maya Philippines, Moneybees Forex, PDAX, TopJuan Technologies (TopWallet), WIBS PHP (DOPAY), Direct Agent 5 (SurgePay), GoTyme Bank and UnionBank. GCash’s GCrypto is not on it by name because it runs on PDAX. The BSP has not issued new licences since September 2022, so a “new Philippine exchange” claiming a fresh BSP licence is a red flag in itself. Our licensed vs blocked exchanges page keeps this list current.

Then check the SEC. Search the name on the SEC website advisories. The SEC names both unregistered crypto exchanges and outright investment scams, and it states that its lists are not exhaustive, so absence is not a clean bill of health. Anything that promises fixed returns on a deposit is likely an investment contract that needs SEC registration, crypto or not.

Check how you are being asked to install it. Real apps come from the official App Store or Google Play, and the seller name should match the company. A link to download an APK from a chat, or a “web app” you add to your home screen, is a warning. So is a domain that is one letter off from a brand you know.

Test the exit, not the entrance. Scam platforms make deposits smooth and withdrawals impossible. If a platform will not let you withdraw a small amount back to your own verified account, or suddenly asks for a fee to “unlock” funds, you have your answer. For a wider view of the rules behind these checks, see our guide to crypto regulations in the Philippines.

What to do if you have been scammed

Speed matters more than anything else. Funds that are still inside the Philippine banking or e-wallet system can often be held; funds that have already moved through several crypto wallets usually cannot. Work through these steps in order, ideally within the first few hours.

1. Stop paying, stop talking

   Do not send any “fee”, “tax” or “unlock deposit”. Do not warn the scammer that you are reporting them. Take screenshots before they delete chats or profiles.

2. Call your bank, e-wallet and exchange

   Report the transaction as fraud and ask for it to be disputed. Under RA 12010, institutions can hold disputed funds for up to 30 days. Change your passwords and MPIN and turn on two-factor authentication.

3. Collect the evidence in one folder

   Chat logs, usernames, phone numbers, the platform’s URL, bank or GCash reference numbers, and every wallet address and transaction hash (TXID). On-chain records are powerful evidence.

4. Report to the authorities

   Call 1326, then file with the PNP Anti-Cybercrime Group or the NBI Cybercrime Division. Add the SEC if it was an investment scheme, and the BSP if a licensed institution mishandled your complaint.

5. Warn others and ignore “recovery” offers

   Tell family members who may be contacted next. Expect recovery scammers to find you within days; do not pay any of them.

Where to report a crypto scam in the Philippines

Each agency has a different role, so it is normal to report to more than one. Contact details below are the ones the agencies publish as of September 2026; always reach them through their official .gov.ph websites and never through a number someone sends you.

CICC Inter-Agency Response Center, hotline 1326. Run by the Cybercrime Investigation and Coordinating Center, it is free, open 24/7 including holidays, and relays cases to the PNP, NBI, NTC and other agencies. It is the best first call when you are not sure where your case belongs.

PNP Anti-Cybercrime Group (PNP-ACG). For a police report and investigation, use the e-complaint option on the PNP-ACG website, email acg@pnp.gov.ph, or visit the ACG office at Camp Crame or a regional cybercrime unit.

NBI Cybercrime Division. The National Bureau of Investigation handles complex and large-value online fraud; its main hotline is (02) 8523-8231, and you can file a complaint in person.

SEC Enforcement and Investor Protection Department (EIPD). Report unregistered investment schemes, fake “crypto investment” companies and unregistered platforms by email to epd@sec.gov.ph. Complaints about unauthorised investment solicitations carry no filing fee.

BSP Consumer Assistance. If your complaint is against a BSP-supervised bank, e-wallet or licensed crypto app, and it did not act on your dispute, use the BSP Online Buddy (BOB) chatbot on the BSP website or Facebook page, or email consumeraffairs@bsp.gov.ph. The BSP does not handle complaints against scammers themselves.

Recovery scams: the second hit

Victims often lose money twice. After you post about your loss in a Facebook group, or even after you file a report, messages start to arrive. Some claim to be “blockchain forensic” firms or hackers who can trace and reverse transactions. Others pose as SEC or NBI officers, or as lawyers, and say your funds have been “recovered” and will be released once you pay a processing fee, a tax clearance or a wallet activation charge.

Here is the reality. A confirmed crypto transaction cannot be reversed by anyone. Stolen funds are only returned when authorities freeze them at an exchange or bank and a legal process releases them, and government agencies do not charge victims fees to do that. Filing a complaint with the PNP, NBI or SEC costs nothing. Anyone who asks you to pay first, in crypto or GCash, is running the same scam again.

The safest long-term habit is boring but effective, and our step-by-step guide to buying Bitcoin shows it in practice: buy and sell only through platforms you can verify, keep the account in your own name, and never let a stranger control where your money goes. If you use GCash for crypto, read our GCash crypto guide so you know exactly what the real feature looks like.