Quick answer
If you have paid an online seller or social-media account that appears fraudulent, act immediately:
- Contact the bank, e-wallet, card issuer, or payment service that sent the money. Ask it to freeze or recall the transfer if still possible, secure your account, and give you a complaint reference number. A report does not guarantee recovery, especially if you authorized the payment, but delay can reduce the chance of stopping the funds.
- Preserve the evidence before the account, listing, or messages disappear.
- Report the seller and transaction through the platform’s official complaint system.
- Report the scam to the government’s 24/7 Anti-Scam Hotline at
1326or through the eGovPH app. - File a criminal complaint with the PNP Anti-Cybercrime Group or NBI Cybercrime Division if money, an account, identity documents, or other property was obtained through deceit.
- Use DTI’s Consumer CARe system when the dispute involves an identifiable online merchant, defective or undelivered goods, misleading sales practices, or a refund or damages claim.
These channels serve different purposes. Reporting to Facebook, TikTok, Instagram, an online marketplace, DTI, or your bank does not automatically create a criminal case. For investigation and possible prosecution, law-enforcement officers may require a formal complaint-affidavit and supporting evidence.
First, protect your money and accounts
Call the financial institution using the number in its official app, website, card, or account statement—not a number supplied by the suspected scammer.
Ask the institution to:
- mark the transaction as fraudulent or disputed;
- attempt a transfer recall, fund hold, card chargeback, or other available recovery process;
- block compromised cards, accounts, or devices;
- terminate suspicious sessions and reset online-banking access;
- preserve transaction, beneficiary, device, and access records;
- provide the exact transaction reference and complaint case number; and
- explain any document or deadline required under its own dispute process.
If you disclosed a password, MPIN, one-time password, recovery code, card security code, or identity document, change affected credentials immediately. Start with the email account connected to your financial accounts, then change financial and social-media passwords. Use unique passwords and enable multi-factor authentication.
If your SIM suddenly lost service, contact your telecommunications provider at once. A SIM-swap or account-takeover incident can allow another person to receive security codes. Also check whether the scammer changed your recovery email, mobile number, delivery address, or trusted devices.
Do not pay a supposed “recovery agent,” “investigator,” “lawyer,” or “government officer” who promises to retrieve the money for an advance fee. Recovery scams commonly target people who have already been defrauded.
Preserve evidence before reporting
Keep the original files whenever possible. Screenshots are useful, but exported conversations, emails with headers, electronic receipts, and transaction records may contain more information.
Save:
- the full seller profile, page name, username, profile URL, account ID, and verification status;
- the listing URL, photographs, product description, price, terms, and promised delivery date;
- the complete conversation from first contact to the last message;
- order confirmations, invoices, waybills, tracking details, and parcel labels;
- bank or e-wallet receipts showing the date, time, amount, transaction reference, recipient name, account number, mobile number, or QR details;
- the scammer’s phone numbers, email addresses, websites, payment links, and social-media accounts;
- voice messages, call logs, emails, and any identity or business documents sent to you;
- the platform complaint, seller demand, bank report, and every reference number;
- photographs or an unedited opening video if a parcel arrived empty, counterfeit, damaged, or different from the listing; and
- a short timeline stating what was represented, what you relied on, how much you paid, what happened afterward, and when you discovered the suspected fraud.
Record URLs as well as screenshots. Do not crop away timestamps, usernames, transaction references, or the browser address bar. Keep copies in at least two secure locations.
Do not hack the seller’s account, impersonate another buyer, threaten the suspect, or publicly post unredacted identity and financial information. These acts can create new legal and privacy problems and may alert the suspect before records are preserved.
Report the account to the platform
Use the marketplace or social-media platform’s official reporting and dispute tools. Select the most accurate ground, such as fraud, non-delivery, counterfeit goods, impersonation, or unauthorized account access.
Under the Internet Transactions Act of 2023, covered digital platforms must provide a responsive mechanism for reporting unlawful users or content. Online merchants are primarily responsible for civil or administrative claims arising from their transactions. A platform’s liability is not automatic; it depends on facts such as its role in the transaction, compliance with statutory duties, notice, diligence, and the particular loss involved. (lawphil.net)
For a civil or administrative internet-transaction complaint, use the platform, marketplace, or e-retailer’s internal redress mechanism first. The law treats that mechanism as exhausted if the complaint remains unresolved for seven calendar days. Save proof showing the filing date and the platform’s response—or lack of one. This process should not keep you from immediately securing compromised accounts, contacting the payment provider, preserving evidence, or reporting an ongoing crime or urgent danger to law enforcement.
Do not close an in-platform dispute simply because the seller promises an off-platform refund. Close it only after confirmed, irreversible receipt of the correct refund or agreed remedy.
Report the scam to the Anti-Scam Hotline
Call 1326, the government’s 24/7 Anti-Scam Hotline operated through the Inter-Agency Response Center. Online shopping fraud, phishing, impersonation, fraudulent messages, and other cyber-enabled scams may also be reported through the eGovPH app. The center can route reports to agencies such as the CICC, PNP, or NBI; criminal enforcement remains with the appropriate law-enforcement authorities. (Philippine Information Agency)
Have your timeline, payment reference, suspect’s identifiers, amount lost, platform details, and existing complaint numbers ready.
A hotline report is valuable for rapid referral and intelligence, but ask whether you must also execute a complaint-affidavit or appear before an investigating office to pursue a criminal complaint.
File with the PNP Anti-Cybercrime Group or NBI
Possible criminal fraud should be reported to either of these agencies:
- PNP Anti-Cybercrime Group:
acg@pnp.gov.ph,(02) 3414-1560, or0998-598-8116 - NBI Cybercrime Division:
ccd@nbi.gov.ph,(02) 8523-8231 to 38 local 3455, or(02) 8252-6228 - NBI Anti-Fraud and Action Division:
afad@nbi.gov.ph,(02) 8523-8231 to 38 local 3529 or 3456
These contact details appear in the BSP’s official directory of scam-reporting channels. Confirm office hours and documentary requirements before traveling because intake arrangements can change. (bsp.gov.ph)
Bring valid identification and organized copies of your evidence. Investigators may ask for:
- a signed complaint-affidavit narrating facts within your personal knowledge;
- sworn statements from other witnesses;
- proof that you owned or controlled the affected account;
- certified or official transaction records from the financial institution;
- a demand for delivery or refund and proof it was received, if relevant;
- the device containing the original messages or files; and
- authority documents if filing for a company or another person.
Tell the investigator immediately if the suspect is still communicating, is asking for another payment, is threatening you, or appears to be victimizing other people. Do not alter or fabricate conversations to strengthen the complaint.
An online-shopping loss can amount to estafa when the evidence establishes the legally required deceit, reliance, and damage. A failed delivery, delay, poor-quality item, or broken promise is not automatically criminal fraud; the surrounding facts must show the required fraudulent representation or means. The Supreme Court has explained that, for estafa by false pretenses, the deception must precede or accompany the victim’s transfer of money or property and must have induced that transfer. (lawphil.net)
When an offense under the Revised Penal Code or a special law is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act may apply, subject to the facts and the prosecutor’s legal assessment. (lawphil.net)
File a consumer complaint with DTI
DTI is particularly relevant when you seek delivery, repair, replacement, refund, damages, or action against an identifiable merchant for deceptive, unfair, or unconscionable online selling practices.
File through the DTI Consumer CARe System. Metro Manila complainants may also send a completed complaint form or complaint letter to consumercare@dti.gov.ph or submit it to the DTI Fair Trade Enforcement Bureau. (Fair Trade Enforcement Bureau)
Attach:
- your name and contact details;
- the merchant’s known name, address, phone number, email, and platform account;
- a clear chronological statement;
- the product or service, amount paid, and transaction date;
- proof of payment and communications;
- proof that you used the merchant’s or platform’s internal complaint process;
- the remedy requested; and
- supporting photographs, receipts, advertisements, and delivery records.
DTI mediation generally precedes formal adjudication. If mediation fails, ask DTI about the requirements for a verified formal complaint. DTI may refer matters outside its jurisdiction to the proper agency under its no-wrong-door policy.
The Internet Transactions Act allows a consumer to claim damages in court or before DTI within two years from the time the cause of action arose. Other claims and offenses may have different prescriptive periods, and platform, card, bank, or e-wallet dispute deadlines may be much shorter. Report promptly rather than treating two years as a waiting period. (lawphil.net)
Escalate a financial-provider complaint to BSP
If the scam involved a BSP-supervised bank, e-money issuer, payment operator, remittance company, or another covered financial institution:
- Complain first to the institution and obtain its reference number.
- If the response is unresolved or unsatisfactory, escalate through BSP Online Buddy (BOB) at bsp.gov.ph or email
consumeraffairs@bsp.gov.ph.
BSP requires the complaint to be raised with the financial institution first. BSP escalation concerns the institution’s handling of the financial-service complaint; it is not a substitute for a criminal complaint against the scammer. (bsp.gov.ph)
Other agencies that may be relevant
Use an additional channel when the facts call for it:
- National Telecommunications Commission: Report scam or spoofed text messages and request appropriate telecommunications assistance. The NTC consumer contact listed by BSP is
consumer@ntc.gov.ph; telephone numbers include(02) 8920-4464,(02) 8926-7722, and(02) 8921-3251. (bsp.gov.ph) - National Privacy Commission: If personal information was unlawfully collected, disclosed, misused, or improperly disposed of, follow the NPC’s formal complaint procedure. A privacy complaint is separate from reporting the underlying fraud. (privacy.gov.ph)
- Securities and Exchange Commission: If the supposed shopping transaction was actually an investment, lending, task, commission, or money-growing scheme, use the SEC’s official reporting channels. The BSP scam directory lists
epd@sec.gov.phfor investment scams and the SEC i-Messagemo portal for relevant reports. (bsp.gov.ph)
Common mistakes to avoid
- Waiting for the scammer’s promised refund before notifying the bank or e-wallet.
- Deleting the conversation out of embarrassment or anger.
- Reporting only the display name without saving the account URL or identifier.
- Sending more money for “release,” “insurance,” “tax,” “verification,” or “refund processing.”
- Continuing through a new account after the original seller account disappears.
- Sharing OTPs, passwords, recovery codes, or remote-access permission with anyone claiming to investigate the scam.
- Assuming a platform report, barangay blotter, bank dispute, or DTI complaint automatically starts a criminal prosecution.
- Exaggerating facts or including matters not personally known in a sworn complaint.
- Posting the recipient’s full account number, identity card, address, or other personal data publicly.
- Missing a financial institution’s short dispute or chargeback deadline while waiting for a government case to progress.
When help is urgent
Seek immediate assistance from the financial institution, hotline 1326, and law enforcement when:
- the transfer has just been completed and may still be interceptable;
- the scammer controls your bank, e-wallet, email, social-media account, or SIM;
- you installed a remote-access application or suspicious file;
- identity documents, selfies, signatures, biometrics, or card details were disclosed;
- the scammer is blackmailing, threatening, stalking, or extorting you;
- a child, older person, person with disability, or other vulnerable individual is at risk;
- the fraud involves many victims, a large continuing operation, or imminent additional transfers; or
- you received threats of physical harm or there is an immediate safety emergency.
For immediate danger, contact the local police or emergency services. For substantial losses, complex account tracing, multiple jurisdictions, or preparation of affidavits and court filings, consult a Philippine lawyer promptly. The Public Attorney’s Office may be an option for qualified indigent persons, subject to its requirements.
Frequently asked questions
Can I report a scam even if the amount is small?
Yes. The amount may affect possible charges, penalties, investigative priorities, or the economics of litigation, but it does not prevent you from reporting suspected fraud. Your report may also help connect the account to other incidents.
Can I recover money sent through a bank or e-wallet?
Possibly, but recovery is never guaranteed. It depends on factors such as how quickly the incident was reported, whether funds remain in the recipient account, whether the transfer can be recalled, the provider’s rules, and what an investigation establishes. Report immediately and keep the case number.
Is non-delivery automatically estafa?
No. Non-delivery can be a consumer or civil dispute without being a crime. Estafa generally requires proof of the particular form of deceit or fraudulent conduct defined by law, the victim’s reliance, and resulting damage. A prosecutor or court must evaluate the evidence.
Should I report to DTI or the police?
Often both, but for different remedies. DTI handles consumer-protection and merchant disputes within its jurisdiction. The PNP or NBI investigates possible crimes. The platform and payment provider should also receive prompt reports.
What if the seller used a fake name?
Report every identifier you have. A competent authority may use lawful processes to seek subscriber, merchant, transaction, or account information. The Internet Transactions Act specifically requires covered platforms to provide certain merchant information when properly compelled during an investigation based on a sworn complaint. (lawphil.net)
What if I paid cash on delivery and received the wrong or worthless item?
Preserve the parcel, packaging, label, item, receipt, and an unedited opening video if available. Do not discard or alter them. Open a platform dispute, notify the merchant and courier, and file with DTI if unresolved. Report to law enforcement if the circumstances indicate deliberate fraud.
Do I need a lawyer to make the initial report?
Usually not. Victims may contact the bank, platform, hotline, DTI, PNP, or NBI directly. Legal advice becomes especially useful when the loss is substantial, the facts are disputed, several victims or jurisdictions are involved, or you need to prepare sworn submissions or pursue damages.
Official sources
- Republic Act No. 11967—Internet Transactions Act of 2023
- Republic Act No. 10175—Cybercrime Prevention Act of 2012
- DTI Consumer CARe System
- DTI guidance on filing a consumer complaint
- BSP scam-reporting directory and BSP Online Buddy guidance
- DOJ Office of Cybercrime
- National Privacy Commission complaint procedure
This article provides general legal information, not legal advice or a prediction of any case’s outcome. Rights, jurisdiction, evidence requirements, and available remedies depend on the particular transaction and documents. Official sources and reporting channels were checked as of September 22, 2026.