Quick answer

If you paid an online seller or social-media account and believe you were scammed, act immediately:

Contact your bank, e-wallet, card issuer, or payment provider. Report the transaction as fraudulent or disputed and ask whether the recipient funds can be held, traced, recalled, or preserved.
Report the seller, listing, and conversation through the platform’s complaint system. For a business-to-consumer transaction, the Internet Transactions Act generally requires you to use this internal redress process before filing with a government agency; it is considered exhausted if the complaint remains unresolved after seven calendar days.
Preserve all evidence before the account, listing, messages, or transaction records disappear.
File a criminal complaint with the nearest police station, the Philippine National Police Anti-Cybercrime Group, or the National Bureau of Investigation if there was deliberate deception, account takeover, identity misuse, or theft.
For a purchase from an online business, file a consumer complaint through the Department of Trade and Industry’s Consumer CARe System if the seller or platform does not resolve it.

Do not wait for the platform’s seven-day process before notifying your payment provider or law enforcement. Rapid reporting may improve the chance of preserving account records or stopping funds, but no agency, bank, or platform can guarantee recovery.

First, identify what happened

Not every failed online transaction is automatically a criminal scam.

A delayed shipment, defective product, wrong item, disputed warranty, or unprocessed refund may primarily be a consumer or contractual dispute. A transaction may indicate fraud when, for example:

the seller used a false identity or fabricated proof of legitimacy;
payment was obtained for an item the seller never intended to deliver;
the account disappeared or blocked you immediately after payment;
a counterfeit receipt, tracking number, escrow page, or payment confirmation was used;
the seller induced you to disclose an OTP, password, PIN, card details, or other account credentials;
your financial account was accessed or used without authority; or
the payment account appears to be a “mule” account used to receive or transfer criminal proceeds.

The legal classification depends on the representations made, the seller’s intent, the movement of funds, and the available evidence. A broken promise by itself does not conclusively establish criminal fraud.

What to do immediately

1. Secure your money and accounts

Contact the financial institution through the number or channel shown in its official app, website, or on the back of your card—not through a number supplied by the suspected scammer.

Give the institution:

the date, time, amount, and transaction reference;
the recipient’s name, account number, mobile number, or wallet identifier;
an explanation of how the transaction was induced;
whether you authorized the payment yourself because of deception, or whether it was entirely unauthorized;
any police, platform, or complaint reference number already obtained; and
screenshots or records requested by the institution.

Ask the institution to:

register a formal fraud or disputed-transaction report;
provide a case or ticket number;
notify the receiving institution;
examine whether funds remain available for a temporary hold, recall, or other protective action; and
preserve transaction, login, device, and authentication records.

Under the Anti-Financial Account Scamming Act, covered institutions may temporarily hold funds involved in a disputed transaction under BSP rules. The statutory ceiling is 30 calendar days unless a competent court extends the hold. The law also requires coordinated verification among the institutions and account owners involved. This does not mean that every report will result in a hold or refund; the institution must assess whether the legal and regulatory grounds are present.

If credentials may have been exposed:

change the affected password and any reused passwords;
sign out of other sessions;
lock the card or account where available;
enable multi-factor authentication;
remove unfamiliar devices or linked accounts; and
tell your mobile provider immediately if your SIM stopped working unexpectedly.

Never give an OTP, PIN, password, recovery code, or screen-sharing access to someone claiming they can recover your money.

2. Preserve the evidence before reporting the account

Save original records where possible. Screenshots are useful, but exported conversations, emails, receipts, and electronic statements may contain additional identifying information.

Preserve:

the seller’s profile name, username, user ID, profile link, and profile photo;
the exact URL of the listing, post, advertisement, website, or checkout page;
complete chats, emails, text messages, call logs, and voice messages;
the product description, price, promised delivery date, warranty, and refund terms;
order confirmations, invoices, receipts, tracking information, and courier records;
deposit slips, transaction confirmations, account statements, and reference numbers;
the recipient’s bank or e-wallet details;
photographs or an unedited unboxing video if an item arrived;
reports made to the platform, seller, bank, or wallet, including ticket numbers and responses;
the date and time of each important event; and
the device, email address, or mobile number used in the transaction.

Keep an untouched copy. Do not crop away usernames, URLs, timestamps, or transaction references. Do not alter conversations or impersonate another buyer to obtain more information.

3. Report the seller and transaction to the platform

Use the platform’s official report, dispute, refund, or buyer-protection process. If the purchase was completed through a marketplace, keep communications and refund requests inside the platform whenever possible.

State clearly:

what was advertised;
what you paid and how;
what was delivered, if anything;
why you believe the transaction was fraudulent or legally noncompliant; and
the remedy requested, such as cancellation, refund, replacement, or removal of the account or listing.

The Internet Transactions Act of 2023 requires e-marketplaces and covered digital platforms to maintain a mechanism for reporting unlawful users or content. It also requires an aggrieved party to use the platform, marketplace, or e-retailer’s internal redress mechanism before filing a consumer complaint with a court or government agency. That mechanism is deemed exhausted when the matter remains unresolved seven calendar days after filing.

This exhaustion rule should not be treated as a reason to delay an urgent bank fraud report, evidence-preservation request, or criminal complaint.

Where to file a report

For a consumer complaint against an online business

Use the DTI Consumer CARe System after completing or exhausting the seller’s or platform’s internal process. Attach proof of the transaction, your written complaint to the seller or platform, and the response or proof that seven calendar days passed without resolution.

The Internet Transactions Act covers qualifying business-to-business and business-to-consumer internet transactions when a party is situated in the Philippines or the online business avails itself of the Philippine market and has sufficient contacts here. It does not cover consumer-to-consumer transactions between private end-users who are not selling in the ordinary course of business.

This distinction matters:

A purchase from a merchant, professional reseller, e-retailer, or business account may fall within DTI’s consumer jurisdiction.
A one-off purchase from another private individual may be outside the Act’s consumer remedies, although ordinary civil and criminal laws may still apply.
DTI may refer complaints involving other laws to the proper authority, but a DTI complaint is not a substitute for a criminal complaint.

Covered consumers may seek repair, replacement, refund, or other remedies when goods are defective, lost without the consumer’s fault, inconsistent with the description or warranty, or otherwise nonconforming. The merchant or e-retailer is primarily liable for qualifying consumer claims. Platform liability is subject to the specific conditions in the law and is not automatic.

A claim for damages under the Internet Transactions Act must be filed with the court or DTI within two years from the time the cause of action arose. Other claims or offenses may be governed by different periods, so do not assume that this two-year period applies to every remedy.

For suspected criminal fraud

File with:

the nearest PNP station;
the PNP Anti-Cybercrime Group; or
the National Bureau of Investigation, including its cybercrime investigators.

Bring a government-issued ID and organized copies of your evidence. Prepare a short chronological statement identifying:

who contacted whom;
the false representations allegedly made;
why you relied on them;
the amount and payment method;
the recipient account;
what happened after payment; and
the loss or damage suffered.

Investigators or prosecutors may require a sworn complaint-affidavit and supporting affidavits. The receiving office determines what additional documents are needed and whether the facts support referral for prosecution.

Depending on the evidence, deliberate online deception may be investigated as estafa under Article 315 of the Revised Penal Code, an offense under the Cybercrime Prevention Act, financial-account scamming under AFASA, an access-device offense, or another crime. The fact that Facebook, Messenger, an online marketplace, email, or another computer system was used does not by itself prove every element of a particular offense.

For a dispute involving a bank, e-wallet, card issuer, or other BSP-supervised institution

First submit a formal complaint to the institution and keep its acknowledgment and final response. If the institution does not resolve the consumer-service issue, use the BSP’s official consumer-assistance channels listed on the Bangko Sentral ng Pilipinas website.

The Financial Products and Services Consumer Protection Act gives financial consumers rights that include fair treatment, protection of assets against fraud and misuse, data privacy, disclosure, and timely complaint handling. It does not make a financial institution automatically liable for every scam-induced transfer. Authorization, security controls, notice, negligence, and the institution’s compliance with applicable standards may all affect the result.

What to ask for in your complaint

Use a specific, realistic request. Depending on the facts, ask for one or more of the following:

cancellation of an undelivered order;
a full or proportionate refund;
replacement or repair;
reversal or chargeback review, if the payment method permits it;
preservation or temporary holding of disputed funds;
removal of a fraudulent listing or account;
disclosure or preservation of seller information for lawful investigation;
a written explanation of the decision; or
investigation and prosecution.

A platform normally cannot disclose private account information merely because a buyer asks for it. Under the Internet Transactions Act, covered platforms may be compelled to provide identifying information through a subpoena issued by a competent authority in an investigation based on a sworn complaint.

Common mistakes that can weaken a report

Waiting several days before contacting the bank or e-wallet.
Deleting chats after being blocked.
Reporting only a display name without saving the profile URL or account ID.
Sending more money for supposed “release,” “verification,” “tax,” “insurance,” or “recovery” fees.
Moving negotiations outside the marketplace and losing platform protections.
Posting the recipient’s full account details, identification documents, address, or private messages publicly.
Threatening, harassing, or falsely accusing an uninvolved account owner.
Editing screenshots or submitting incomplete conversation excerpts that remove context.
Treating a platform report, DTI complaint, and police complaint as interchangeable.
Paying a person who claims to have inside access to police, banks, or recovery systems.
Filing knowingly false information to freeze another person’s funds. AFASA separately penalizes malicious reports that cause an unwarranted temporary hold.

A receiving account may belong to a mule, an identity-theft victim, or another intermediary rather than the person who planned the scam. Give the information to investigators instead of making unsupported public allegations.

When help is urgent

Contact the financial institution and law enforcement without delay when:

money has just been transferred and may still be in the recipient account;
an OTP, password, PIN, recovery code, card number, or identification document was disclosed;
the victim’s SIM, email, social-media account, or financial account has been taken over;
additional unauthorized transactions are occurring;
the scammer is threatening violence, blackmail, or release of intimate material;
a child, senior citizen, person with disability, or other vulnerable person is being targeted;
the scheme involves multiple victims or coordinated mule accounts; or
the loss is substantial or the evidence may soon disappear.

For immediate physical danger, contact emergency services or the nearest police station. For a high-value or factually complex case, cross-border transaction, identity theft, or threatened civil action, consult a Philippine lawyer promptly.

Frequently asked questions

Can I still report if I voluntarily pressed “send”?

Yes. A transfer can be authorized in the mechanical sense yet induced by deception. Tell the institution and investigators exactly what happened. Do not describe it as an account takeover if you personally approved the transfer; accurate facts help them apply the correct process.

Will the bank or e-wallet automatically refund me?

No. Reporting may trigger tracing, coordinated verification, or a temporary hold, but recovery depends on factors such as whether funds remain, the type of transaction, the evidence, applicable payment rules, and whether the institution complied with its legal duties.

Must I wait seven days before going to the police?

No. The seven-calendar-day rule concerns exhaustion of the internal redress mechanism for covered consumer disputes under the Internet Transactions Act. It does not require victims to postpone urgent financial-security measures or criminal reporting.

Can DTI handle a scam by a private Facebook seller?

It depends on whether the seller was acting as an online merchant or business. The Internet Transactions Act excludes genuine consumer-to-consumer transactions. A private-sale scam can still be reported to the platform, payment provider, PNP, or NBI, and civil remedies may remain available.

What if the seller is outside the Philippines?

Philippine e-commerce law may apply when the seller or platform avails itself of the Philippine market and has the required minimum contacts. Actual investigation, service of process, enforcement, and recovery may nevertheless be more difficult. Preserve evidence and report promptly.

Is an affidavit required?

A bank or platform may initially accept an online report, but police investigators, prosecutors, DTI, or another agency may require a signed or sworn complaint and supporting documents. Follow the instructions of the office handling the matter.

Should I publicly post the scammer’s identity?

Public warnings can create privacy, harassment, defamation, and mistaken-identity risks. Report identifying information to the platform, financial institution, and authorities. If warning others, stick to verifiable facts and redact account numbers, IDs, addresses, and other sensitive data.

Can I recover through a civil case even without a criminal conviction?

Potentially. Consumer, contractual, or damages claims may exist independently of a criminal prosecution, depending on the documents and facts. Court action involves jurisdictional, procedural, and limitation issues, so obtain legal advice where the amount or consequences justify it.

Official references

This article provides general legal information, not legal advice or a prediction of any complaint’s outcome. Procedures and available remedies can depend on the platform, payment provider, evidence, transaction type, and later regulations or court rulings. Official sources were checked as of 19 September 2026.