Scams to Avoid: Fake Agents on Telegram and Facebook

The one habit

Support only counts if you reached it: by typing the operator's domain yourself, logging in, and using the help option inside your own account. Anyone who arrives the other way around, however plausible, is unverified.

That is the whole defence, and it works without you having to judge anything. You do not need to spot a fake logo, read a bad translation or notice a wrong phone number. You only need to notice the direction the conversation started from.

Why the chat platforms, specifically

• A display name and a profile picture are free, so a convincing identity costs nothing.
• A group with thousands of members looks like a community and is usually mostly accounts the operator does not control.
• Group chat normalises account talk: people post screenshots of balances and reference numbers, so being asked for yours feels routine.
• Messages can be deleted on both sides, so the evidence disappears when the money does.
• Channels and groups are rebuilt in minutes after a takedown, so a removed scam is not a fixed one.
• There is no connection to your account at all, which is the part people forget: nobody in a chat app can see your cashier.

That last line is worth sitting with. A fake agent has no access to your balance, your verification status or your payout queue. Everything they tell you about your account is guessed from what you told them, which is why the conversation always starts with questions.

How a fake agent conversation runs

1. You post a problem in a group, or you search for support and find a group, or a message simply arrives.
2. An 'agent' replies privately, usually within minutes, and asks for your username to 'check the system'.
3. They confirm your problem back to you in confident language, which feels like access and is actually repetition.
4. They ask for your password, to 'open the account from our side'.
5. They trigger a real login. A real one-time code arrives on your phone, and they ask for it to 'complete the sync'.
6. If the account has no balance worth taking, the pitch becomes a release fee, an activation fee or a verification deposit instead.
7. Afterwards the registered e-mail and phone number are changed so you cannot recover the account.

Step five is where it is lost, and it is lost because the code is genuine. The code arrived from the operator because someone was logging in as you at that second. A real code never validates the person asking for it.

Tells, in rough order of usefulness

What a genuine KYC request never asks

• Your password. It is reset, never read, so no legitimate party asks.
• A one-time code, authenticator number or e-wallet MPIN, through any channel, for any reason.
• A payment to verify, release, unlock or speed up anything.
• Documents sent to a chat account rather than uploaded inside your logged-in account.
• Remote access to your screen, or installing a so-called support tool.
• A conversation in a chat app at all. Verification is an upload and a wait.

Four related scams

If you already engaged

1. Change your casino password immediately from a device you trust, then your e-mail password, then anywhere either was reused.
2. Check whether the account's registered e-mail or phone number has been altered; that is the lock-out step.
3. Remove any app or 'support tool' you were persuaded to install, then restart the phone.
4. Open your e-wallet and bank apps yourself and review recent transfers.
5. Screenshot the whole conversation before it is deleted, including the profile, the handle and the group name.
6. Escalate in the order below, keeping every ticket number in writing.

Take those screenshots first if you can. Chat messages can be removed on both sides, and the evidence tends to vanish at exactly the moment you need it.

The escalation route

1. The operator's own support, opened from inside your logged-in account, carrying the amounts, references and timestamps, plus a request for the ticket reference in writing.
2. The wallet's own in-app help centre, opened by you inside GCash, Maya or your bank app. Not a number from a message, and not with a stranger coaching you.
3. PAGCOR's published complaint channel, reached from the regulator's own website through the complaint or contact route published there, with your details, the operator's name, dates and evidence.
4. The PNP Anti-Cybercrime Group or the NBI Cybercrime Division where money was taken or your identity was used. Both publish current contact details and office addresses on their own official sites.

Reporting the profile or group on the platform itself is worth doing as well, but treat it as a courtesy to the next person rather than a route to recovery. Channels are rebuilt quickly.

We publish no hotline numbers here deliberately. Numbers change, and a stale number in a guide is precisely how a reader ends up talking to another scammer. Take each number from the organisation's own site on the day you need it.

What INPLAY888 can and cannot do

We can explain the pattern and the escalation order. We cannot recover funds, reverse a transfer, release a payout, restore an account or see a balance, because we are an independent guide and not a party to your account. We hold no money and run no games, and we operate no chat group of any kind.

Some links here may be partner links, which never changes what a page says. If a loss is pushing you towards a larger bet to recover it, read our responsible gaming page first: that impulse is what fake agents sell against. 21+ only.