What to Do After a Suspicious Online Payment Request

An unexpected payment request can create pressure to act before the details are clear. A message may claim that a transfer is overdue, a balance must be unlocked, or an account will be suspended unless money is sent immediately. The safest response is to stop the transaction, secure access, and verify the claim through a channel that was not supplied by the sender.

Do not scan a QR code or follow a payment link while under pressure. Do not reveal your PIN, one-time password, recovery phrase, or notification approval. If you have already entered credentials into a suspicious page, use the payment provider’s official application or contact route to secure the account. Change compromised passwords from a trusted device, revoke unfamiliar sessions if that option exists, and contact the provider promptly. Do not install remote-control software at the request of the person who sent the message.

Preserve evidence before deleting the conversation. Keep the message, sender information, date and time, exact URL, recipient name, amount, and transaction reference if a transfer occurred. Store screenshots privately. Avoid posting them publicly because they may reveal phone numbers, account names, or identifiers. If sharing evidence with a provider, use its official support channel and redact unrelated information where appropriate.

If money has already been sent, contact the wallet provider quickly and ask what steps are available for the specific transaction. A reference number can help the provider investigate, but it does not guarantee reversal. Do not pay an additional “recovery fee” to a stranger who promises to retrieve funds. Be wary of anyone asking for an OTP or PIN as part of a refund process.

When a message uses a CasinoPlus name, verify the domain independently. The PAGCOR licensed-casino list is dated 29 October 2026 and contains particular operator and domain entries. A message that uses the same brand word is not thereby connected to the listed entity. A known logo, a forwarded screenshot, or a secure connection cannot identify the person receiving a wallet transfer.

Report impersonation through the platform where it appeared and, where relevant, through the payment provider’s official route. Keep the report factual: what was requested, what was sent, and what happened. Avoid confronting the suspected sender or sharing personal information with people who approach you after a public post.

If the incident relates to gambling spending, take a break from deposits and review recent transactions. Do not chase the loss with a further wager. Gambling is not a reliable way to recover money or meet financial obligations. If stopping feels difficult, ask a trusted person for support and use verified blocking or self-exclusion resources where available.

After the immediate issue is handled, review how the request arrived and what warning sign was missed. The goal is not to blame yourself; pressure tactics are designed to short-circuit careful judgment. A pause, independent verification, and limited sharing of evidence can reduce further harm.

Sources: PAGCOR October 29, 2026 brand/domain list and Responsible Gaming Code v6.0 (2021).

Official source links: PAGCOR licensing index and dated brand/domain lists; PAGCOR Responsible Gaming Code v6.0.