Company Checkbook, Banking Token or Pre-Signed Checks Lost or Stolen in the Philippines: What to Do First

The first hour: stop the money, then work out what is missing

The only goal for the first hour is to make sure nobody can use what was lost to take money out of the company's accounts. Everything else can wait until that is done.

Work in this order:

• Call the bank. Use the hotline or branch number published on the bank's official website or your statements. Say it is a corporate account and ask for an immediate stop payment on the missing check numbers, temporary limits on outgoing payments if needed, and suspension of online banking where appropriate. Ask what written documents must follow. Note the time, the name of the officer and any reference number.
• If a hardware or mobile token is lost, ask the bank to deactivate it and suspend that user's online banking rights, then change the passwords of every online banking user. If the token and password may both be compromised, treat it as an account breach, not a lost device.
• Check recent activity. Log in or ask the bank to review recent transactions and pending transfers for anything you do not recognise.
• Inventory exactly what is missing. A whole checkbook or a few leaves? Which number range? Were any blank checks already signed? Which user is the token tied to, and what approval rights does that user have?

If the company banks with several institutions, or other checkbooks were kept in the same safe, check those too. Do not hold off calling the bank because the items might just be misplaced. A stop payment can be lifted if they turn up; a late call cannot be undone.

If money has already left the account, the response looks more like a fraud incident, and the speed of the request to the bank becomes critical. The steps in what to do after a business email compromise on asking the bank to intercept funds apply here as well.

Put it in writing: stop payment instruction, affidavit of loss and police report

A phone call buys time, but banks usually require written instructions soon after. Only once the paperwork is in place is the stop payment fully effective, and only then do you have a record if anything is disputed later.

Documents commonly needed, subject to your bank's requirements:

• A written stop payment or loss notice stating the account name and number, the missing check numbers or range, and any token serial number, signed by an authorised signatory.
• Proof of authority if the person signing is not on the bank's signature card, such as a board resolution or secretary's certificate.
• An affidavit of loss describing when, where and how the items were lost or stolen and listing them, notarised before submission. For how to prepare and notarise one, see how to make an affidavit in the Philippines.
• A police report if the items were stolen or an insider is suspected. Some banks ask for or recommend one even for a simple loss.

Stop payment orders are not always permanent. Many banks set a validity period after which the order must be renewed, or you may decide to close the checking account and open a new one once things are clear. Ask the bank how it works and put the renewal date in your calendar.

Keep copies of everything, the bank's acknowledgements and reference numbers in a single incident file, with the time and the person responsible for each step. You will need that file when reconciling disputed items with the bank, claiming under insurance or helping the police.

One practical tip: send the written instruction through a channel that leaves a trace, such as a branch-stamped receiving copy or an email to the relationship manager, rather than relying only on a hotline call. If a dispute arises over when the bank was told, that stamped copy or email timestamp is usually what settles it.

Checks already issued: tell payees before legitimate payments bounce

Stop payments are usually applied to a range of numbers. If legitimate checks to suppliers or landlords sit inside that range, they will be dishonoured too, so you must tell those payees and pay them another way.

What to do:

• Reconstruct issued checks from stubs or your check register: which numbers in the missing range were issued, to whom, for how much and dated when, paying special attention to post-dated checks.
• Notify each payee in writing that the company has stopped payment on that range because of a loss, that the original check will be dishonoured, and how it will be replaced, whether by a new check or bank transfer. Keep their acknowledgement.
• Ask the bank about exceptions. Some banks can let specific listed numbers through while the rest of the range is stopped, or make another arrangement. Whether that is possible depends on the bank.
• Take extra care with post-dated checks. Rent and instalment payments often use a year's worth of PDCs. If the stubs went missing with the checkbook, rebuild the list from bank statements and contracts first, then notify.

Someone presenting a lost check may later approach the company claiming to be a legitimate holder after it is dishonoured. Rely on your written stop payment record and police report, avoid admitting or denying any debt on the phone, and let a lawyer respond if needed. If instead it is a customer's check to you that bounced, see when a customer's check to you bounces.

Finally, tell your own accounting team which numbers were stopped, so that the replacement payments are booked against the right invoices and the dishonoured originals are not recorded twice. Small bookkeeping errors here tend to surface months later as unexplained balances with suppliers.

If you suspect an insider: secure first, investigate second, follow due process

When the safe was not forced and a token kept in a fixed place has vanished, suspicion naturally falls on staff. That is exactly when you need to follow procedure: stop the loss and preserve evidence first, then investigate, so you neither accuse the wrong person nor give the right one time to cover tracks.

A sensible sequence:

• Finish the bank-side containment, and immediately revoke or change all relevant online banking rights, safe combinations and keys.
• Preserve evidence. Copy safe access logs, CCTV footage, door access records, the check register and online banking audit logs before anyone who could be involved handles them.
• Have an uninvolved manager lead the review. Establish who had access, when the items were last seen, and whether there were unusual transactions or absences.
• Follow due process for any employee action. In the Philippines, disciplinary action generally requires written notice and an opportunity to explain. Suspicion alone does not justify dismissal or salary deductions. For the procedure and recovery options, see when an employee embezzles company funds.

Whether and when to file a police report depends on the evidence and your lawyer's view. If funds have already moved, prompt reporting helps both the investigation and your position with the bank.

What not to do: do not search employees' bags or phones privately, do not hold anyone in a room to question them, and do not name suspects in group chats. Those actions may themselves be unlawful and make any later claim harder to pursue.

Keep the circle small while the review is under way. Brief only the people who need to know, ask them to keep the matter confidential, and record who was told and when. This protects the reputation of staff who turn out to be uninvolved and keeps the investigation credible.

Use the incident to fix controls: checks, tokens and signing authority

Most check and token incidents are not bad luck. They happen because custody, signing and reconciliation were never separated. Once the immediate issue is handled, put these rules in place.

At a minimum:

• No pre-signed blank checks. This is the single most important rule. Owners who sign a few blanks before travelling are the most common source of check losses. If remote approval is needed, use the bank's online approval or limit features instead.
• Separate custody and signing. The person holding the checkbook is not a signatory, and whoever prepares checks does not reconcile the account.
• Keep a check register. Log every number, date, payee, amount, purpose and preparer. Keep cancelled or spoiled checks on file rather than throwing them away.
• Dual approval for online banking. One user encodes, another approves, with per-transaction and daily limits. One token per user, never shared or lent.
• Frequent reconciliation. Someone who does not handle payments reviews the bank statement daily or weekly, so unusual debits are caught the same day.
• Update access immediately when staff change. When a signatory or banking user leaves or moves role, recover the token and rights that day and update the bank's signature records.

Write these rules into the company's finance policy and have the relevant staff sign that they have read them. If something goes wrong again, you can show the company exercised reasonable care, which strengthens your position with the bank and insurers.

Review the rules once a year, or whenever the business changes in a way that affects payments, such as opening a new branch, hiring a new finance lead or adding a bank. Controls that made sense for a five-person office often stop working as the team grows, and gaps tend to appear exactly where nobody has looked for a while.

Afterwards: reconciliation, insurance, and how Yixing can help

Stopping payment and filing reports does not close the matter. Over the following weeks there are three tasks: checking for any transactions that slipped through, pursuing insurance, and deciding whether to replace the account.

In practice:

• Watch the next few statement cycles closely for attempts to encash checks in the missing range, unusual logins, or new payees added in online banking. Report anything in writing to the bank and keep its written reply.
• Review insurance cover. If the company has a commercial policy covering cash, employee dishonesty or cyber fraud, check the notice deadlines and document requirements and report early. Insurers typically want the incident file you have already built.
• Consider a new account. If a lot was lost, the extent of exposure is unclear, or stop payments keep needing renewal, discuss closing the old checking account and opening a new one with the bank, then notify customers and suppliers of the new details. Prepare the board resolution and other documents the bank will ask for in advance.

Yixing helps on the process side: building the incident timeline and the bank's document checklist, coordinating board resolutions or secretary's certificates, following up written communications with the bank, and afterwards reviewing your check and online banking controls. Questions of legal liability and recovery are handled by the practising lawyers we work with.

Just lost a checkbook or banking token and unsure what paperwork the bank still needs? Bring the account details and the list of missing items and we will help you sort out the bank side → company compliance and banking coordination

Yixing International Travel Agency is a Chinese-language consultancy registered in Makati, Philippines, holding SEC registration CS202009551, BI Accreditation No. CA-202624381-1 (valid to 2027-06-30), DOLE accreditation and PRA accreditation. We are not affiliated with any government agency, we only help prepare documents, coordinate with banks and practising lawyers, and follow up on process, and we do not promise any outcome. This article is process guidance, not legal or tax advice; consult a licensed attorney and a certified public accountant on your case.