07/04/2026
AFASA EXPLAINED: SALIENT FEATURES OF REPUBLIC ACT NO. 12010
Republic Act No. 12010, or the Anti-Financial Account Scamming Act (AFASA), is a Philippine statute intended to combat financial account scams, especially those committed through digital platforms, e-wallets, and electronic communications.
The law recognizes the need to protect account owners, regulate the use of financial accounts, and prevent cybercriminals and syndicates from exploiting the banking and payments system.
One of the most important features of AFASA is its express prohibition of money muling activities. A person may be treated as a money mule if he or she uses, lends, borrows, buys, rents, sells, or opens a financial account under a fictitious name or another personโs identity for the purpose of receiving, transferring, depositing, or withdrawing proceeds of crime or social engineering schemes. The law also punishes those who recruit or induce others to do the same.
AFASA also penalizes social engineering schemes, meaning deceptive acts used to obtain another personโs sensitive identifying information and gain unauthorized access to that personโs financial account. This includes falsely pretending to represent an institution or using electronic communications such as calls, SMS, email, or messaging platforms to solicit account credentials or other confidential information.
The law becomes even stricter when the scam reaches a larger or more organized scale. AFASA classifies the prohibited acts as economic sabotage when committed by three or more conspirators, against three or more victims, through a mass mailer, or by means of human trafficking. In such cases, the penalty may reach life imprisonment.
Another major feature of the law is that it imposes affirmative duties on institutions. Covered institutions must protect client access to financial accounts through adequate controls such as MFA and FMS, together with proper enrollment and verification processes. Institutions that fail to employ adequate safeguards or the highest degree of diligence may be held liable for restitution of funds, and conviction is not required before restitution may be ordered.
AFASA also authorizes the temporary holding of disputed funds. Institutions may hold funds involved in suspicious or disputed transactions for a period prescribed by the BSP, not exceeding thirty calendar days unless extended by a competent court. This mechanism is intended to preserve funds that may otherwise be quickly dissipated during scam operations.
The law further grants broad enforcement powers to the BSP or Bangko Sentral ng Pilipinas. The BSP may investigate and inquire into financial accounts involved in violations of the Act, and the ordinary restrictions under bank secrecy, foreign currency deposit laws, and data privacy rules do not apply during the coordinated verification and BSP inquiry authorized by the statute. The BSP may also apply for cybercrime warrants and coordinate with the NBI and the PNP in the investigation and enforcement of violations.
As to penalties, AFASA provides a graduated structure. Money muling is punishable by imprisonment of six to eight years or a fine of P100,000 to P500,000, while social engineering is punishable by imprisonment of ten to twelve years or a fine of P500,000 to P1,000,000. If the victim is a senior citizen, the penalty becomes even heavier, and economic sabotage shall be punished by life imprisonment or a fine of up to P5,000,000, or both
For easier reference, here are the common acronyms used in AFASA:
AFASA โ Anti-Financial Account Scamming Act
BSP โ Bangko Sentral ng Pilipinas
FMS โ Fraud Management Systems
MFA โ Multi-Factor Authentication
SMS โ Short Message Service
NBI โ National Bureau of Investigation
PNP โ Philippine National Police
DOJ โ Department of Justice
DICT โ Department of Information and Communications Technology
CICC โ Cybercrime Investigation and Coordination Center
AMLC โ Anti-Money Laundering Council
RPC โ Revised Penal Code
RTC โ Regional Trial Court
IRR โ Implementing Rules and Regulations, which the law directs the BSP and partner agencies to promulgate for effective implementation
In doctrinal terms, AFASA is significant because it is not merely a penal statute. It is also a preventive regulatory measure that combines criminalization, institutional compliance duties, restitution, coordinated verification, investigatory authority, and inter-agency enforcement into one legislative framework against cyber-enabled financial fraud.
