How to Report an Online Shopping or Social Media Scam

Quick answer

If you paid an online seller and the item never arrived, was fake or materially different, or the seller disappeared, act immediately:

  1. Contact your bank, card issuer, or e-wallet through its official fraud channel. Ask it to flag the transaction, secure your account, trace the transfer, and consider holding any recoverable funds. Get a reference number.
  2. Preserve the seller’s profile, listing, messages, payment details, receipts, delivery records, and URLs before anything is deleted.
  3. Report the seller and transaction through the shopping platform or social-media app. Request a refund, account preservation, and removal of the fraudulent listing.
  4. Report suspected crime to the Philippine National Police Anti-Cybercrime Group (PNP-ACG), the National Bureau of Investigation (NBI), or the Cybercrime Investigation and Coordinating Center (CICC).
  5. For a purchase from a business or regular online merchant, file a consumer complaint through the DTI Consumer Complaints Assistance and Resolution System if the platform or seller does not resolve it.
  6. If a BSP-supervised bank or e-wallet mishandles your complaint, raise it first through that institution’s consumer-assistance channel, then escalate it to the Bangko Sentral ng Pilipinas.

Reporting does not guarantee recovery. The sooner the payment provider receives a complete report, however, the better the chance that remaining funds and transaction records can be preserved.

First, secure your money and accounts

Call the bank, card issuer, or e-wallet using the number in its official app, website, or the back of your card—not a number sent by the seller.

State clearly that you are reporting suspected fraud. Provide:

  • The amount, date, time, and transaction or reference number
  • The receiving account name, account number, mobile number, or wallet identifier
  • The seller’s username, profile URL, telephone number, and email address
  • A short explanation of how you were deceived
  • Whether you disclosed a password, PIN, one-time password, card security code, ID image, or other sensitive information

Ask the institution to:

  • Secure or temporarily restrict your affected account
  • Block or replace compromised cards
  • Investigate and trace the transaction
  • Coordinate with the receiving institution
  • Determine whether the funds can be held, recalled, reversed, or disputed
  • Preserve transaction and account records
  • Give you a complaint or case reference number

Under the Anti-Financial Account Scamming Act, Republic Act No. 12010, covered financial institutions may temporarily hold funds involved in a disputed transaction, subject to BSP rules. The statute permits a hold for the period prescribed by the BSP, which cannot exceed 30 calendar days unless a court extends it. It also requires coordinated verification among the institutions and account owners involved. This does not mean every victim automatically receives a refund or that every reported transfer will still be available to hold.

If you shared login credentials or an OTP, change your passwords from a trusted device, sign out other sessions, enable multifactor authentication, and check connected email and mobile accounts. Tell your mobile provider immediately if your SIM stopped working unexpectedly or you suspect a SIM-swap attack.

Preserve evidence before blocking the seller

Do not rely only on screenshots stored inside the same account that may have been compromised. Save copies in a separate device, drive, or email account.

Preserve:

  • The complete listing, including photographs, price, description, warranties, and delivery promises
  • The seller’s profile name, username, profile URL, account ID if visible, and creation or activity details
  • The full conversation, including voice messages and deleted-message notices
  • The exact URL of the post, shop, website, advertisement, or group
  • Order confirmations, invoices, electronic receipts, and tracking information
  • Bank, card, or e-wallet transaction confirmations
  • The recipient’s account name, number, QR code, mobile number, and institution
  • Courier waybills, parcel labels, packaging, and unboxing photographs or video
  • Photographs of a counterfeit, damaged, empty, or incorrect parcel
  • Emails, text messages, call logs, telephone numbers, and caller names
  • The platform’s complaint acknowledgment and case number
  • Your communications with the payment provider
  • A simple timeline showing what happened and when

Keep original electronic files when possible. Forwarded or repeatedly edited images may lose useful metadata. Do not alter the chat, fabricate an “unboxing” recording, or publicly post sensitive banking information.

Report through the platform or social-media service

Use the platform’s formal reporting and dispute process—not merely a public comment on the seller’s page.

For a marketplace transaction, select the closest category, such as item not received, counterfeit item, wrong item, unauthorized transaction, or fraudulent seller. If the platform holds payment in escrow, do not press “order received” until you have inspected the goods.

In your report, request:

  • Cancellation, refund, or return under the platform’s rules
  • Preservation of the seller’s registration, login, transaction, and communications records
  • Suspension or review of the account and related listings
  • Confirmation of the report and its reference number

The Internet Transactions Act of 2023, Republic Act No. 11967, requires covered e-marketplaces and digital platforms to provide a responsive way to report unlawful users or content. It also requires covered marketplaces, as far as practicable, to collect specified identifying and contact information from online merchants.

For disputes covered by that Act, the aggrieved party must first use the platform’s, marketplace’s, or e-retailer’s internal redress mechanism. The mechanism is considered exhausted if the complaint remains unresolved after seven calendar days. Keep proof showing when you filed it.

That seven-day internal process should not be treated as a reason to delay an urgent fraud report to your payment provider or law enforcement, especially while money, accounts, or evidence remain at risk.

File a criminal report

A failed purchase is not automatically a crime. A genuine merchant may have a delivery, inventory, or refund dispute. Fraud is more likely where the evidence shows deception from the beginning—for example, a fabricated identity, false proof of shipment, repeated use of mule accounts, an empty parcel, or disappearance immediately after payment.

Depending on the proven facts, an online shopping scheme may involve estafa under the Revised Penal Code, an offense under the Cybercrime Prevention Act, identity theft, or an offense involving financial accounts. “Computer-related fraud” under Section 4(b)(2) of Republic Act No. 10175 has specific technical elements; the mere fact that conversations occurred online does not by itself establish every element of that offense. Investigators and prosecutors determine the proper charge from the evidence.

You may report through any of these official channels:

  • PNP Anti-Cybercrime Group: Email acg@pnp.gov.ph, or go to the PNP-ACG headquarters at Camp General Crame, Quezon City or the appropriate regional anti-cybercrime unit.
  • National Bureau of Investigation: Use the NBI Online Complaint page, or approach the NBI Cybercrime Division or a regional or district office. The Cybercrime Division email listed in current BSP guidance is ccd@nbi.gov.ph.
  • Cybercrime Investigation and Coordinating Center: Email report@cicc.gov.ph or use the government’s cybercrime reporting assistance channels.
  • Department of Justice: The DOJ also maintains an official cybercrime incident reporting page.

For a formal complaint, you may be asked to appear personally, execute a complaint-affidavit, identify and authenticate your records, and submit copies of your identification and evidence. An online tip or email may begin the process but may not replace these requirements.

Tell investigators promptly if:

  • The scammer is still communicating with you
  • The recipient account remains active
  • Other victims have contacted you
  • You have the parcel, device, original message files, or physical documents
  • The scammer is threatening you, using your identity, or demanding another payment
  • A child, older person, or other vulnerable person is in immediate danger

Do not conduct your own entrapment, threaten the suspected scammer, attempt to access another person’s account, or send more money to “trace” the recipient. Coordinate any further communication with investigators.

File a consumer complaint with DTI

DTI is generally the appropriate consumer agency for complaints against businesses selling ordinary goods or services online. File through the DTI Consumer CARe System and attach your proof of purchase, communications, payment record, platform complaint, and the remedy you requested.

Ask for a specific, lawful remedy—for example:

  • Delivery of the paid item
  • Repair or replacement
  • Cancellation and refund
  • Return of an item at no cost where the law places return costs on the merchant
  • Other relief supported by the transaction and applicable consumer law

Republic Act No. 11967 gives an online consumer remedies such as repair, replacement, or refund for defects, malfunction, loss not caused by the consumer, failure to conform to warranty, or other merchant liability arising from the contract. It also makes the online merchant or e-retailer primarily liable in covered civil actions and administrative complaints.

The Act’s coverage has important limits:

  • It generally applies to business-to-business and business-to-consumer internet transactions connected to the Philippine market.
  • It expressly excludes consumer-to-consumer transactions. A truly occasional sale by another private end-user may therefore fall outside this Act, although civil and criminal laws may still apply.
  • DTI’s authority is ancillary where another regulator—such as the BSP, Securities and Exchange Commission, Insurance Commission, Food and Drug Administration, or National Privacy Commission—has primary jurisdiction over the product or service.

A person claiming damages under Section 28 of the Internet Transactions Act may file in court or with DTI within two years from the time the cause of action arose. Other claims or offenses can have different limitation periods, so do not assume this two-year period governs every possible case.

If a bank or e-wallet does not resolve the complaint

The BSP Consumer Assistance Mechanism is a second-level remedy for complaints involving a BSP-supervised institution.

First, complain through the institution’s Financial Consumer Protection Assistance Mechanism or official customer-service channel. Preserve its response and reference number. If you are dissatisfied with the result, escalate through:

  • The BSP Online Buddy chatbot on the BSP website
  • The Message function on the BSP’s official Facebook page
  • If you cannot access the chatbot, the BSP Complaint/Inquiry/Reply form sent to consumeraffairs@bsp.gov.ph, together with proof that you first complained to the institution

The BSP explains the current process in its official guide, How to File a Complaint Against a BSP-Supervised Institution.

Do not send the BSP your PIN, password, OTP, full card number, passbook, passport, or unrelated identification documents. Redact sensitive information unless an authorized agency specifically requires it through a secure channel.

A BSP complaint addresses the conduct of the supervised institution. Criminal investigation and apprehension remain matters for law-enforcement agencies.

When another agency may be appropriate

The subject of the scam can determine the correct regulator:

  • Investment, lending-company, or online-lending issue: Report to the Securities and Exchange Commission through its official I-Message Mo portal, as applicable.
  • Unauthorized processing or exposure of personal data: Consider a complaint to the National Privacy Commission, particularly after securing affected accounts.
  • Regulated medicines, health products, cosmetics, or medical devices: Report the product or seller to the Food and Drug Administration.
  • Insurance product or agent: Contact the Insurance Commission.
  • Threats, extortion, stalking, intimate-image abuse, or immediate physical danger: Contact the nearest police station or emergency services without waiting for a consumer-refund process.

You may need more than one report. A platform dispute seeks a transaction remedy; DTI handles appropriate consumer violations; a financial institution traces or disputes payment; and law enforcement investigates possible crime.

What to put in a clear complaint

A useful complaint is factual, chronological, and supported by attachments. Include:

  1. Your full name and reliable contact details.
  2. The seller’s known names, usernames, contact details, URLs, and payment accounts.
  3. What was advertised and what the seller represented.
  4. When and how you agreed to purchase.
  5. The amount and method of payment.
  6. What happened after payment.
  7. The steps you already took with the seller, platform, courier, and financial institution.
  8. The loss or harm you suffered.
  9. The action you are requesting.
  10. A numbered list of attached evidence.

Separate what you personally observed from what another victim told you. If a fact is uncertain, say so. Do not exaggerate the amount lost or identify an account holder as the mastermind merely because money was sent to that account; the account may have been stolen, misused, or supplied by a money mule.

Common mistakes that weaken a report

  • Waiting several days before contacting the payment provider
  • Deleting the conversation after blocking the seller
  • Saving only cropped screenshots that omit dates, usernames, or URLs
  • Continuing to pay “release,” “insurance,” “tax,” “verification,” or “refund processing” fees
  • Trusting a person who claims they can recover the money for an advance fee
  • Reporting only to the platform when criminal investigation is needed
  • Reporting only to the police when a platform refund window is about to close
  • Sending complaints to unofficial social-media accounts
  • Publishing the recipient’s full account number or private information online
  • Missing platform deadlines while waiting for a government response
  • Sending original evidence without keeping copies
  • Making a knowingly false report to force an account freeze

Republic Act No. 12010 penalizes malicious or bad-faith reporting of completely unwarranted or false information that results in funds being held. Report honestly and correct material errors promptly.

When legal help is urgent

Consult a Philippine lawyer promptly if:

  • The loss is substantial or involves many victims
  • The scammer used your identity, documents, business name, or financial account
  • You received a subpoena, demand letter, counter-complaint, or court notice
  • The transaction crossed national borders
  • The platform or financial institution refuses to preserve important records
  • You need provisional court relief or must identify an anonymous account holder
  • A government complaint has been dismissed and a deadline may be running
  • The facts involve cryptocurrency, investments, lending, regulated goods, or several payment accounts
  • You are considering a civil action for recovery or damages

A lawyer can assess the correct respondent, cause of action, venue, evidence requirements, prescription period, and whether a complaint-affidavit is ready for filing.

Frequently asked questions

Can I report a scam even if I lost only a small amount?

Yes. The amount may affect available remedies, enforcement priorities, or penalties, but it does not prevent you from reporting suspected fraud. Your report may also help connect transactions involving other victims.

Can the bank or e-wallet reverse an authorized transfer?

Sometimes, but not automatically. A transfer you personally approved may be difficult to reverse, especially after the recipient withdraws or moves the funds. Report it immediately and ask for tracing, coordinated verification, and any hold or recall available under law and the institution’s rules.

Should I wait seven days before reporting to the police?

No. The seven-calendar-day rule concerns exhaustion of the covered platform’s or e-retailer’s internal redress mechanism under the Internet Transactions Act. It should not delay an urgent report of suspected crime, a compromised account, or moving funds.

What if the sale happened through Facebook, Instagram, TikTok, or a messaging app?

Preserve the seller’s profile URL, listing, advertisement, messages, and payment details; use the platform’s reporting function; contact the payment provider; and report suspected crime. Whether DTI’s Internet Transactions Act remedies apply depends partly on whether the seller was acting as a business or merely as another private consumer.

Is a “no return, no exchange” statement valid?

It cannot erase remedies granted by law for defective, nonconforming, misrepresented, or undelivered goods. It does not necessarily entitle a buyer to return a sound item simply because the buyer changed their mind. The transaction terms, product condition, applicable law, and platform policy matter.

Can I report an anonymous or fake-name seller?

Yes. Give investigators every identifier you have. Under Republic Act No. 11967, covered platforms may be required to provide specified merchant information when a competent authority issues a subpoena based on a sworn complaint meeting the statutory conditions.

Will filing with DTI put the scammer in jail?

No. DTI consumer proceedings and criminal proceedings serve different purposes. Report suspected criminal conduct to the PNP, NBI, or other competent law-enforcement authority.

What if the scammer offers a refund after I report?

Do not withdraw or sign anything until the refund is cleared and you understand the document’s effect. Notify the agencies handling the matter and provide an accurate update. Acceptance of a refund does not automatically answer every civil, administrative, or criminal issue.

Where can I verify the main legal rules?

Official primary and government sources include the Internet Transactions Act of 2023, the Cybercrime Prevention Act of 2012, the Anti-Financial Account Scamming Act, the DTI Consumer CARe System, the NBI Online Complaint page, and the BSP consumer-assistance guidance.

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Procedures and available remedies depend on the evidence, transaction, platform, payment method, and agency jurisdiction. Official sources and reporting channels were checked on September 15, 2026.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.