Scams to Avoid: Fake Telegram and Facebook Agents
The most expensive person in Philippine online gambling is the one who messages you first. They have the right logo, a believable display name and an answer for everything, and none of it costs anything to fake. 10JILI is an independent guide with no cashier, no lobby and no games — we have no balance to release and no VIP tier to offer — so this page can say plainly what a commercial agent cannot. 21+.
How a fake agent operates
The approach is usually inbound and friendly. A Telegram account or Facebook profile carrying the brand's logo comments on a post, joins a group, or messages you directly after you complained publicly about a stuck withdrawal. The offer varies — VIP access, a bonus top-up, a "direct line" to the cashier, help escalating your payout — but the mechanics never do: they want you off the operator's own channels and into a private chat where nothing is logged.
Once there, the conversation reaches money by one of three routes. A deposit sent to their personal e-wallet instead of the cashier. A fee to unlock a withdrawal. Or your login and one-time code, handed over so they can "check the account". All three end the same way, and the account is blocked before you finish typing the follow-up.
The structural point is simple enough to memorise. Operators conduct cashier business inside your logged-in account, through channels you reach yourself. No legitimate operator runs payments through a social-media profile, and a correct logo is the cheapest element in the whole operation.
Why groups are the hunting ground
Public complaint threads are a list of people who are already frustrated, already owed money and already looking for someone who sounds official. That combination is why a fake agent appears within hours of a public post about a delayed payout, and why the friendliest reply in the thread is the one to distrust.
The same groups produce the other half of the trade: forwarded installer files, "VIP builds", prediction tools and mirror links. A file with no origin, re-signed by whoever touched it last, is not safer because a group has 40,000 members.
Four that travel with it
- The release fee. A clearance charge, tax or unlock payment demanded before a withdrawal moves. Operators deduct from a balance; none need money sent in to send money out.
- OTP and password phishing. "Just read me the code." That code authorises a transaction — theirs.
- Clone domains. A near-identical address harvests your login, then shows you a balance that was never real.
- Predictor and hack apps, pitched as a way to win back what you are waiting on. Outcomes are generated server-side; the app's real product is the permissions it requests.
Claim, reality, response
| The claim | Why it is false | What to do |
|---|---|---|
| "I am the official agent, message me privately" | Cashier business happens inside your account, not in a DM | Leave the chat; contact support from an address you typed yourself |
| "Send your deposit to this number and I will credit it" | Deposits go to the cashier, never to a person's wallet | Refuse, and report the profile to the platform |
| "Pay the release fee and your withdrawal clears" | No cashier requires an inbound payment to release an outbound one | Pay nothing, open a written ticket with the operator |
| "Send the OTP so I can verify you" | One-time codes exist so that nobody else can act for you | Never share it; if you already did, use your e-wallet's in-app help now |
| "Install this build for faster withdrawals" | Any APK can be altered and re-signed without changing how it looks | Do not install it; use the mobile site |
| "We moved to a new domain, log in here" | Look-alike addresses exist to collect logins | Type the address yourself and read every character |
What a real KYC request never asks
Verification is legitimate and expected, normally before a first withdrawal. It asks for documents. It does not ask for secrets, and it does not happen in a private chat.
- Never a one-time password, PIN, MPIN or account password
- Never a transfer from you to "test" or "activate" anything
- Never remote access or a screen-sharing session
- Never ID photographs sent to a personal messaging account instead of the site's own upload form
- Never a full card number and CVV typed into a chat window
Direction is the tell. You begin verification inside your logged-in account on a site you navigated to yourself. Anything arriving the other way — a DM, a call, an SMS link — started at the wrong end regardless of the name attached.
Escalation route
- The operator's own support, in writing, with amounts, dates and references. Keep every reply; the later steps run on that record.
- Your e-wallet or bank, through its own app. Open GCash, Maya or your banking app and use the in-app help you navigated to. Never a number someone sent you — fake helplines are their own scam.
- PAGCOR's published players' concerns channel, reached from pagcor.ph typed into the address bar, with your ticket reference ready.
- The PNP Anti-Cybercrime Group or the NBI Cybercrime Division for impersonation, phishing and theft; both publish current reporting channels on their official government sites.
- The platform itself. Reporting the Telegram or Facebook account is slow but it is the step that reduces the next person's exposure.
We do not print hotline numbers. They change, and a stale number in a guide is precisely the gap a fake helpline fills. The channels above are stable; take the current details from the official source.
Two habits
- Never conduct money business in a channel you did not initiate. If they contacted you, that is the answer.
- Decide once, in advance, that secrets never leave your phone — so the decision is already made when someone is pressuring you.
This site is an independent guide for adults aged 21 and over. It takes no deposits, runs no games and cannot release anyone's balance. If chasing a loss is what brought you here, the responsible-gaming page covers limits, time-outs and self-exclusion.
Frequently Asked Questions
Do real casinos have Telegram agents?
Some operators run social channels for announcements, but cashier business — deposits, withdrawals, verification — happens inside your logged-in account. Anyone handling your money through a DM is not doing the operator's job, whatever logo the profile uses.
I sent a deposit to an agent's GCash. What now?
Report it in your e-wallet's own in-app help immediately, open a written ticket with the operator stating that you were told to pay a third party, and report the profile to the platform. Recovery is unlikely, which is why the rule is to deposit only through the cashier.
The agent knew my account details. Does that prove they are real?
No. Details leak from clone-domain logins, from public complaint posts and from earlier phishing. Knowing your username or the amount you are owed is a sales technique, not credentials.
How do I reach genuine support?
Type the operator's address yourself, log in, and use the support channel inside the account. That way you know who you are talking to, and the exchange leaves a written record you can escalate with.
Can you contact the casino or release my balance?
No. We have no cashier, no account access and no relationship with anyone's funds. The operator holding the money is the only party that can move it; PAGCOR's complaint channel is the route when it stops replying.
Why no hotline numbers here?
Because an outdated number is worse than none — that is the exact gap fake helplines exploit. We name the channels and you look up the current details on the official site.