Republic Act No. 12010: The Anti-Financial Account Scamming Act (AFASA) Explained

Introduction

Republic Act No. 12010, also known as the “Anti-Financial Account Scamming Act (AFASA),” is a landmark piece of legislation in the Philippines, specifically designed to combat the growing menace of cybercrime and financial account scams. The law was passed on July 20, 2024. It demonstrates the proactive approach of the Philippine government in safeguarding the financial system and protecting individuals from the increasingly sophisticated tactics employed by cybercriminals.

The Genesis of AFASA

The emergence of AFASA can be traced to the escalating prevalence of financial account scams in the Philippines. The rapid adoption of digital technologies, particularly in financial services, has opened avenues for cybercriminals to exploit vulnerabilities and target individuals and institutions alike. This trend resulted in significant financial losses, eroded public trust in digital financial systems, and created a need for robust legal frameworks to combat these criminal activities.

Understanding the Scope and Intent of the AFASA

AFASA is a comprehensive piece encompasses various aspects of financial account security, from defining prohibited acts and penalties to establishing enforcement mechanisms and fostering international cooperation. This law strives to achieve multi-faceted objectives:

• Protect the Financial System: The law aims to safeguard the integrity and stability of the Philippine financial system by deterring and preventing the use of financial accounts for illicit activities. This protection extends to banks, non-bank financial institutions, payment service providers, and the general banking public, ensuring a secure and reliable environment for financial transactions.
• Safeguard Individuals: AFASA prioritizes the protection of individuals from financial account scams, recognizing the devastating impact these schemes can have on personal finances and well-being. The Act seeks to empower individuals by providing them with tools and resources to recognize and prevent scams, while also holding perpetrators accountable for their actions.
• Enhance Digital Financial Security: Recognizing the increasing reliance on electronic commerce and digital financial services, the Act emphasizes the importance of securing these platforms and ensuring responsible digital financial practices. By implementing comprehensive risk management measures and promoting awareness about online security, AFASA seeks to foster a secure and trustworthy digital financial ecosystem.

Key Definitions

Being a penal law itself, the AFASA lies in its carefully defined terminology, essential for understanding its scope and intended application:

• Account Owner: This term refers to the individual who holds ownership of a Financial Account or under whose name the account was established. This definition establishes clear ownership responsibilities and aids in identifying potential victims of financial scams.
• Electronic Communications: AFASA broadly defines electronic communications to encompass a wide range of digital communication methods, including phone calls, SMS messages, social media platforms, emails, instant messaging, and other electronic transmissions. This comprehensive definition ensures that the Act covers all potential avenues for communication used in financial scams.
• Electronic Wallet (e-wallet): An e-wallet is defined as an electronic device that stores digital value. This definition acknowledges the growing popularity of digital payment systems and emphasizes their inclusion within the Act’s purview.
• Financial Account: This term encompasses various types of accounts used to access financial products or services, including interest-bearing and non-interest-bearing deposits, trust accounts, investment accounts, credit card accounts, e-wallets, and other accounts regulated by the Bangko Sentral ng Pilipinas (BSP). This inclusive definition ensures that the Act covers all potential financial accounts vulnerable to scams.
• Fraud Management Systems (FMS): FMS are automated and real-time monitoring systems designed to identify and block suspicious transactions. These systems play a crucial role in safeguarding financial accounts by flagging potentially fraudulent activities.
• Institutions: This term designates financial institutions subject to the BSP’s jurisdiction, including banks, non-banks, other financial institutions, and payment and financial service providers. This definition clearly outlines the entities responsible for complying with the Act’s provisions.
• Mass Mailer: A mass mailer is a service or software used to send electronic communications to a large number of recipients (50 or more). This definition targets mass spamming and phishing campaigns commonly used in financial scams.
• Multi-Factor Authentication (MFA): MFA refers to an authentication method that requires two or more verification factors to access a resource. This security measure enhances account protection by adding multiple layers of verification, making it harder for unauthorized individuals to access sensitive information.
• Sensitive Identifying Information: This term encompasses any information that can be used to access an individual’s Financial Account, including usernames, passwords, bank account details, credit card information, and e-wallet information. The Act recognizes the importance of protecting this information from unauthorized access and exploitation.

Prohibited Acts: Defining the Criminal Landscape

AFASA specifically defines prohibited acts that constitute financial account scamming, establishing a clear framework for identifying and prosecuting offenders:

• Money Muling Activities: This prohibited act involves using, borrowing, or allowing the use of a Financial Account to obtain, receive, deposit, transfer, or withdraw proceeds known to be derived from crimes, offenses, or social engineering schemes. Money mules are individuals who unknowingly or intentionally facilitate the movement of illicit funds through their accounts, often acting as intermediaries in financial scams.

AFASA outlines five specific acts that constitute money muling activities:

1. Using, borrowing, or allowing the use of a Financial Account: This clause prohibits individuals from knowingly allowing their accounts to be used for illicit transactions, even if they are not directly involved in the criminal activities.
2. Opening a Financial Account under a fictitious name or using the identity or identification documents of another: This clause targets individuals who create fraudulent accounts using false identities or stolen information, enabling them to engage in scams and launder proceeds.
3. Buying or renting a Financial Account: This clause addresses the practice of purchasing or renting existing accounts for illicit purposes, allowing individuals to avoid detection and operate under someone else’s identity.
4. Selling or lending a Financial Account: This clause prohibits the sale or lending of accounts, preventing the transfer of control to individuals intending to use them for criminal activities.
5. Recruiting, enlisting, contracting, hiring, utilizing, or inducing any person to perform the acts mentioned in items 1 to 4: This clause targets individuals who actively recruit and exploit others to act as money mules, further expanding the Act’s reach.

• Social Engineering Schemes: Social engineering schemes are committed by individuals who obtain sensitive identifying information of another person through deception or fraud, resulting in unauthorized access and control over the person’s Financial Account. These schemes often involve exploiting human trust and vulnerabilities to gain access to personal information.

The Act outlines two specific acts that constitute social engineering schemes:

1. Misrepresenting oneself as acting on behalf of an Institution, or making false representations to solicit another person’s sensitive identifying information: This clause targets individuals who impersonate representatives of financial institutions to trick individuals into revealing sensitive information, often through phishing emails, fake websites, or phone calls.
2. Using electronic communications to obtain another person’s sensitive identifying information: This clause prohibits the use of electronic communications to deceive and manipulate individuals into revealing sensitive information, targeting activities like phishing attacks and social media scams.

• Economic Sabotage: The prohibited acts under Sections 4(a) and 4(b) (money muling and social engineering schemes) are considered economic sabotage when committed under specific circumstances:

1. By a group of three (3) or more persons conspiring or confederating with one another: This clause targets organized criminal groups actively engaging in financial account scams, indicating a higher level of sophistication and intent to inflict significant financial damage.
2. Against three (3) or more persons individually or as a group: This clause focuses on scams targeting multiple victims, highlighting the widespread impact of these criminal activities.
3. Using a mass mailer: This clause specifically targets mass spamming and phishing campaigns that utilize mass mailers to reach a large number of potential victims simultaneously, demonstrating an intent to inflict widespread damage.
4. Through human trafficking: This clause recognizes the exploitation of trafficked individuals in financial account scams, highlighting the connection between human trafficking and financial crime.

Expanding the Scope of Criminal Liability

AFASA extends the scope of criminal liability beyond the direct perpetrators of financial account scams, encompassing individuals who contribute to these activities through various means:

• Willfully aiding or abetting in the commission of any of the offenses enumerated under Section 4: This clause targets individuals who assist in facilitating financial account scams, even if they are not directly involved in the criminal act. This includes individuals who provide logistical support, financial assistance, or information enabling the scam to occur.
• Willfully attempting to commit any of the offenses enumerated under Section 4: This clause targets individuals who take steps towards committing a financial account scam but fail to complete the act. This includes individuals who initiate the process of obtaining sensitive information, create fraudulent accounts, or attempt to transfer illicit funds but are intercepted before completing the transaction.
• Opening a Financial Account under a fictitious name or using the identity or identification documents of another: This clause reiterates the act of creating fraudulent accounts, expanding its applicability to include individuals who open accounts for illicit purposes, even if they are not directly involved in a specific scam.
• Buying or selling a Financial Account: This clause targets individuals who engage in the illicit trade of financial accounts, further expanding the Act’s reach to disrupt the flow of financial accounts used in scams.

Penalties: Deterrence and Justice

AFASA prescribes a range of penalties for those found guilty of violating its provisions, aiming to deter criminal activity and ensure appropriate punishment for offenders:

• Money Muling Activities: A person found guilty of money muling activities under Section 4(a) faces imprisonment of 6 to 8 years, a fine of P100,000 to P500,000, or both. The court may also order the closure of the Financial Account involved in the transaction and forfeiture of assets in accordance with Article 45 of the Revised Penal Code, without prejudice to Section 17 of this Act.
• Social Engineering Schemes: A person found guilty of any of the prohibited acts enumerated under Section 4(b) faces imprisonment of 10 to 12 years, a fine of P500,000 to P1,000,000, or both. The penalty increases to 12 to 14 years of imprisonment and a fine of P1,000,000 to P2,000,000 if the target or victim is a senior citizen.
• Economic Sabotage: A person found guilty of any of the prohibited acts involving economic sabotage enumerated under Section 4(c) faces life imprisonment, a fine of P1,000,000 to P5,000,000, or both. This significant penalty reflects the severity of economic sabotage and its potential to inflict widespread damage.
• Other Offenses: A person found guilty of other offenses enumerated in Section 5 faces imprisonment of 4 to 6 years, a fine of P100,000 to P200,000, or both. The court may also order the closure of the Financial Account involved in the transaction.
• Malicious Reporting: A person found guilty of reporting or filing completely unwarranted or false information that resulted in the temporary holding of funds under Section 11 faces imprisonment of 1 to 5 years, a fine of P50,000 to P200,000, or both. This provision aims to deter individuals from making false accusations and disrupting legitimate financial transactions.
• Obstructing BSP’s Inquiry: A person found guilty of knowingly or willfully obstructing, impeding, frustrating, or delaying the inquiry and investigation of the BSP as provided under Section 12 faces imprisonment of 1 to 5 years, a fine of P50,000 to P200,000, or both. This provision protects the BSP’s investigative process and ensures that investigations proceed without undue interference.
• Disclosure of Information: An official, employee, or agent of an Institution, the government, or any person who obtained information on the Financial Account subject of BSP’s inquiry or investigation who commits the prohibited act under Section 15 faces imprisonment of 1 to 5 years, a fine of P50,000 to P200,000, or both. This provision protects the confidentiality of Financial Account information during BSP investigations.
• Juridical Person: When an offender is a juridical person, the fine to be imposed shall be double the amount of the corresponding penalty but shall not exceed P10,000,000. The liability imposed on the juridical person shall be without prejudice to the criminal liability of the responsible officer who committed the prohibited acts or other offenses under this Act. This provision targets corporate entities that engage in financial account scams, ensuring that both the corporation and the responsible individuals are held accountable.
• Government Official or Employee: A government official or employee found guilty of the acts or offenses under Sections 4 and 5 faces perpetual absolute disqualification from holding any appointive or elective position in the government. This provision underscores the seriousness of financial account scams and the need for public officials to uphold the highest ethical standards.

Civil Liability: Rectification and Compensation

AFASA establishes mechanisms for civil liability to address the financial and emotional damage caused by financial account scams:

• Conviction: A conviction for violating AFASA carries with it civil liability, including restitution for the damage done and any unwarranted benefit derived from the violation. This provision aims to compensate victims for their financial losses and ensure that perpetrators are held accountable for their actions.
• Civil Forfeiture: All properties, tools, instruments, and/or other non-liquid assets used for committing the prohibited acts in Sections 4 and 5 of this Act are subject to civil forfeiture upon a finding of probable cause. This provision aims to prevent perpetrators from profiting from their crimes and to recoup funds for victims. In cases of economic sabotage, a summary procedure for releasing a portion of these assets to the Department of Justice (DOJ) is established for operational support and victim protection, including victims of human trafficking.

Enforcement Mechanisms: Collaboration and Oversight

AFASA outlines comprehensive enforcement mechanisms to ensure the effective implementation and enforcement of its provisions:

• BSP’s Role: The Bangko Sentral ng Pilipinas (BSP) plays a central role in enforcing AFASA, possessing the authority to investigate and inquire into Financial Accounts suspected of involvement in prohibited acts or offenses. They can also issue rules on information-sharing with law enforcement agencies.
• Temporary Holding of Funds: Institutions have the authority to temporarily hold funds subject to a disputed transaction for a period not exceeding 30 days, subject to BSP rules and regulations. This allows institutions to freeze potentially fraudulent transactions while investigations are conducted.
• Coordinated Verification Process: Institutions and Account Owners are required to initiate a coordinated verification process to validate disputed transactions, regardless of whether the funds remain in the banking system. This collaborative approach helps to resolve disputes and identify potential scams quickly and efficiently.
• Cybercrime Warrants and Orders: The BSP has the authority to apply for cybercrime warrants and issue orders under Republic Act No. 10175 (Cybercrime Prevention Act of 2012) with respect to the electronic communications used in any violation of AFASA. This allows the BSP to obtain evidence and investigate electronic communications related to financial account scams.
• Sharing of Information: The BSP has the authority to issue rules on information-sharing and disclosure with law enforcement and other competent authorities in connection with its inquiry and investigation of Financial Accounts under AFASA. This facilitates collaboration between the BSP, law enforcement agencies, and other relevant entities.
• Prohibition on Disclosure of Information: Individuals who obtained information on a Financial Account subject to BSP’s inquiry or investigation are prohibited from disclosing that information for purposes other than those mentioned in Sections 12 and 14 of the Act. This provision protects the confidentiality of Financial Account information and prevents its misuse.
• Jurisdiction: The Regional Trial Court has jurisdiction over any violation of AFASA, regardless of where the offense occurred if any of the elements were committed within the Philippines, involving a device or infrastructure in the country, or causing damage to a person in the Philippines or whose Financial Account is maintained with an institution operating in the Philippines. This ensures that the Act is effectively enforced across different jurisdictions.

International Cooperation: A Global Response

Recognizing the transnational nature of cybercrime, AFASA encourages international cooperation in criminal matters related to computer systems and data:

• General Principles: To the widest extent possible, all relevant instruments on international cooperation in criminal matters and arrangements agreed on the basis of reciprocal legislation and domestic laws shall be given full force and effect for investigations or proceedings concerning criminal offenses related to computer systems and data or for the collection of evidence in electronic form. This provision enables the Philippines to collaborate with other countries in investigating and prosecuting cybercrime offenses, sharing information and resources to combat these crimes more effectively.

Implementing Rules and Regulations: Refining the Framework

AFASA empowers the BSP, in coordination with relevant government agencies and stakeholders, to promulgate rules and regulations for effectively implementing its provisions:

• BSP’s Authority: Within one (1) year from the effectivity of AFASA, the BSP, in coordination with the DOJ, the Department of Information and Communications Technology (DICT), the NBI, the PNP, the Cybercrime Investigation and Coordination Center (CICC), and the Anti-Money Laundering Council (AMLC), shall promulgate rules and regulations to effectively implement the provisions of AFASA. This allows the BSP to adapt the Act’s provisions to the evolving nature of cybercrime and financial scams, ensuring that the Act remains relevant and effective in the long term.
• Cooperative Mechanism: A cooperative mechanism shall be established among institutions, the BSP, concerned government agencies, and the private sector to ensure the effective enforcement of the provisions and the prosecution of cases under AFASA. This collaborative approach fosters communication, coordination, and knowledge-sharing among key stakeholders, enhancing the effectiveness of AFASA’s implementation.

Effectivity: Bringing AFASA into Action

The Act outlines its effectivity clause, ensuring its timely implementation:

• Effectivity: AFASA shall take effect fifteen (15) days following its publication in the Official Gazette or in a national newspaper of general circulation. This clause provides a clear timeline for the Act’s implementation, ensuring that its provisions are enforced promptly.

Conclusion: A Legacy of Financial Security

Republic Act No. 12010, the Anti-Financial Account Scamming Act (AFASA), represents a significant step forward in the Philippines’ efforts to combat cybercrime and protect the integrity of its financial system. Through its comprehensive definitions, clear identification of prohibited acts, stringent penalties, collaborative enforcement mechanisms, and commitment to international cooperation, AFASA establishes a robust framework for safeguarding individuals and institutions from the threat of financial account scams. This Act, enacted in a rapidly evolving digital landscape, sets a precedent for safeguarding financial security in the 21st century, ensuring a more secure and trustworthy environment for digital transactions and financial activities in the Philippines. More importantly, this will help protect Filipinos from falling preys to scams and digital fraud. With a penalty as high as life imprisonment, this law can hopefully deter those who wish to engage in these illegal practices.

About Nicolas and De Vega Law Offices

If you need assistance in cybercrime, civil or other criminal law-related issues,  we can help you. Nicolas and de Vega Law Offices is a full-service law firm in the Philippines.  You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines.  You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com.