Scams to Avoid: Fake Agents on Telegram and Facebook

Where fake agents find people

• Comment sections under an operator's posts, replying within minutes to anyone who mentions a delay.
• Facebook groups named after games or 'winners', where they post edited payout screenshots.
• Telegram channels that copy an operator's name with one extra character or the word 'official'.
• Direct messages after you join a group, often opening with a bonus offer.
• Paid adverts that lead to a chat instead of a website.

The common thread is that they come to you, or position themselves where you will look for help. Genuine support waits inside the operator's own site.

The four scripts they use

Nearly every conversation follows one of four paths.

Variations add urgency: a promo ending in ten minutes, an account about to be frozen. Hurry is there to stop you checking.

How to tell an imitation account

1. Open the operator's website by typing it and look for the social links published there. An account not linked from the site is not official.
2. Check the handle character by character, not the display name. Display names can be anything.
3. Look at the account's age and history. A page created last month with thousands of followers was bought or renamed.
4. Notice the direction of contact. Official accounts rarely open a private conversation first.
5. Ask it to continue through the on-site live chat. A fake will find a reason not to.

Other scams in the same spaces

• Release fees: a payment demanded before a withdrawal is 'unlocked'. Licensed operators deduct charges from the balance rather than asking for new money.
• Predictor and signal channels: paid groups claiming to forecast crash, colour or slot outcomes. Results are random and generated on the operator's server; nothing outside can see them ahead of time.
• Account buying and 'rent your GCash' offers: you are paid to lend a verified wallet, which is then used to move stolen funds under your name.
• Cloned sites: an address one letter off from the real one, promoted by the same fake agents.

What a real KYC check never requests

A licensed operator verifies identity through upload forms within your account. Expect a government-issued ID, a selfie, and sometimes evidence that the payout wallet is yours. Treat any of the following as proof you are not talking to the operator:

• A request for your OTP, MPIN, password or card security code.
• A request to send ID photos through a chat app.
• A 'verification payment' of any amount.
• A request to install a screen-sharing or remote-support app.
• A video call in which you are told to open your wallet app on camera.

Reporting and escalation

1. Operator support, from inside its website. Tell them an account is impersonating them and ask whether your own account shows any change.
2. Your e-wallet's help centre inside the app if you sent money or shared a code. Use the app's own help menu; never a phone number passed to you in chat or shown in a post.
3. PAGCOR's published complaint channel, reached from the regulator's own website, for disputes with a licensed operator.
4. The PNP Anti-Cybercrime Group or the NBI Cybercrime Division for fraud and identity misuse. Bring screenshots showing handles, links, reference numbers and dates.

Also report the profile to the platform itself using the in-app report function on Telegram or Facebook. It takes a minute and helps the next person.

If you shared something

Shame keeps people quiet, and silence is what lets the same account carry on. Reporting quickly is the most useful thing you can do.