Quick answer
If you paid an online seller or social-media account and suspect a scam, act immediately:
- Contact your bank, card issuer, or e-wallet through its official fraud channel. Ask it to flag the transaction, secure your account, trace the transfer, and—when legally available—coordinate a temporary hold of the recipient funds.
- Report the seller or account through the marketplace or social-media platform and request cancellation, buyer protection, or a refund.
- Preserve all evidence before messages, listings, profiles, or transaction records disappear.
- Report suspected crime to the Philippine National Police Anti-Cybercrime Group (PNP-ACG) or National Bureau of Investigation (NBI).
- For a consumer dispute involving an online merchant or platform, file a complaint with the Department of Trade and Industry (DTI).
- If a BSP-supervised bank or e-wallet does not properly address your complaint, escalate it through the Bangko Sentral ng Pilipinas Consumer Assistance Mechanism.
These routes serve different purposes. A platform or DTI complaint may help obtain consumer redress; the bank or e-wallet may try to stop or trace funds; and the PNP or NBI investigates possible crime. Filing with one does not necessarily replace the others.
First: protect your money and accounts
Contact the payment provider immediately
Use only the telephone number, app, website, or email shown on the financial institution’s official channels. Tell it that the transaction is disputed because of suspected fraud and provide:
- Your name and account details
- Transaction date, time, amount, and reference number
- Recipient’s name, account number, mobile number, or QR details
- A short explanation of how the scam happened
- Whether you disclosed a password, PIN, one-time password, card number, CVV, or other credentials
- The police or platform reference number, if already available
Ask for a case or ticket number and written confirmation. Request the immediate blocking of compromised cards, online-banking access, linked devices, or e-wallet access where appropriate.
Under the Anti-Financial Account Scamming Act, Republic Act No. 12010, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction, subject to BSP rules. The statutory holding period cannot exceed 30 calendar days unless a competent court extends it. A complaint does not guarantee that funds will still be available or returned, so speed matters.
The law also requires coordinated verification by the institutions and account owners involved. It permits restitution in specified circumstances involving inadequate risk controls or failure to exercise the legally required diligence, but reimbursement is not automatic. Liability depends on the facts, the institution’s controls, applicable BSP rules, and the customer’s conduct.
Secure every affected account
If you clicked a suspicious link, installed an application, shared credentials, or allowed remote access:
- Change passwords using a clean, trusted device.
- Start with your primary email, then banking, e-wallet, shopping, and social-media accounts.
- Sign out other devices and revoke unfamiliar sessions or connected applications.
- Enable multi-factor authentication.
- Remove remote-access or unknown applications.
- Contact your mobile provider if your SIM stopped working unexpectedly.
- Monitor statements and alerts for additional transactions.
- Consider replacing a compromised card or account credential.
Do not continue negotiating with the scammer. Never send a supposed “release fee,” “verification payment,” “tax,” or “recovery charge.”
Preserve evidence before reporting
Save the original electronic records whenever possible, not only cropped screenshots. Keep:
- The product listing, advertisement, livestream, or sponsored post
- The complete profile page, username, account URL, page ID, and displayed contact details
- Full chat and email history, including dates and times
- Order confirmation, invoice, tracking record, and promised delivery date
- Payment confirmation, transaction reference, recipient details, QR code, and account name
- Bank or e-wallet statements showing the debit
- Photographs or an unboxing video if an item arrived empty, counterfeit, damaged, or materially different
- The seller’s refund promises, threats, excuses, or requests for additional payment
- Platform, bank, courier, and government complaint numbers
- URLs and screen recordings showing how the page or transaction flow appeared
- The device, files, suspicious application, text message, or email involved in an account takeover
Prepare a simple chronology: what was advertised, what the seller represented, when you paid, what happened afterward, and what remedy you requested.
Do not edit the original files. Preserve metadata where possible and back everything up. Under the Cybercrime Prevention Act, Republic Act No. 10175, certain traffic data and subscriber information are preserved by service providers for statutory periods, and investigators may seek preservation, disclosure, or search warrants. Reporting promptly reduces the risk that relevant records will be deleted or become harder to obtain.
Report the account to the platform
Use the marketplace’s or social network’s in-app reporting process. Select the most accurate category, such as fraud, scam, impersonation, counterfeit goods, non-delivery, or hacked account.
For a marketplace order:
- Open the dispute within the platform’s stated buyer-protection period.
- Do not mark an undelivered or defective order as received.
- Do not move the conversation or payment outside the platform.
- Request cancellation, return, refund, or buyer-protection review as appropriate.
- Preserve the platform’s decision and all correspondence.
For a social-media transaction:
- Report the profile, page, advertisement, and individual messages.
- Save the profile URL and evidence before blocking the account.
- If the scammer impersonated a real business or person, notify the genuine account through a separately verified channel.
A platform report may remove content or support a refund, but it is not a criminal complaint.
Report suspected cybercrime
The PNP and NBI are the principal law-enforcement authorities responsible for enforcing the Cybercrime Prevention Act.
PNP Anti-Cybercrime Group
Submit a report through the PNP-ACG e-Complaint portal or approach the nearest PNP cybercrime unit or police station. Online channels and contact details can change, so confirm them through the official PNP-ACG website.
National Bureau of Investigation
You may report to the NBI Cybercrime Division or an appropriate NBI regional or district office. Verify office details through the official NBI website.
Bring or submit:
- A valid government-issued ID
- Your written chronology
- Proof of payment and loss
- Complete communications and account identifiers
- Platform, bank, and e-wallet complaint records
- The device or original electronic files if investigators request them
- An affidavit or other documents required by the receiving office
Ask for the complaint, blotter, or reference number. A report may lead to requests for further documents, an affidavit, technical examination, account verification, or referral to a prosecutor. Investigators—not the complainant—determine what charges the evidence may support.
An online selling scam may involve estafa under the Revised Penal Code, computer-related fraud or identity theft, or another offense, depending on what actually occurred. Section 6 of Republic Act No. 10175 covers crimes under the Revised Penal Code or special laws when committed through information and communications technology and generally imposes a penalty one degree higher. The precise offense cannot be determined from non-delivery alone; fraudulent intent and the complete transaction must be investigated.
If the scheme used stolen financial credentials, deceptive messages, or mule accounts, Republic Act No. 12010 may also apply. It penalizes specified social-engineering and money-muling conduct. Its application depends on the statutory elements, not simply on the fact that payment passed through a bank or e-wallet.
File a consumer complaint with DTI
For non-delivery, refusal to honor a legitimate refund, misleading representations, defective goods, or another online consumer issue within DTI’s authority, first send the seller or platform a clear written demand stating:
- The order and payment details
- The problem
- The remedy requested
- A reasonable date for response
If unresolved, file through the official DTI Consumer Care portal or contact the relevant DTI office. Attach proof of transaction, communications, your demand, and the seller’s response or failure to respond.
The Internet Transactions Act of 2023, Republic Act No. 11967, applies to covered business-to-business and business-to-consumer internet transactions within DTI’s mandate. It establishes duties for online merchants, e-retailers, e-marketplaces, and digital platforms, as well as consumer rights and enforcement mechanisms.
An online platform is not automatically liable for every dishonest seller. Liability may depend on matters such as the platform’s role, its knowledge of unlawful activity, its compliance with takedown or disclosure duties, representations it made, or whether the transaction occurred within its system. Name both the seller and the platform in your complaint when the facts support doing so, but explain each party’s conduct separately.
A purely private, one-off sale may raise different questions from a transaction with an online merchant acting in the course of business. DTI may refer a matter outside its jurisdiction to the proper agency.
Escalate problems involving a bank or e-wallet
First complete the bank’s, card issuer’s, or e-wallet provider’s own complaint process and retain its final response or proof that it failed to respond properly.
If the institution is supervised by the BSP and the matter remains unresolved, use the BSP Consumer Assistance Mechanism. Provide the institution’s complaint reference, its response, transaction documents, and a concise explanation of the resolution you seek.
BSP escalation concerns the conduct of the supervised institution. It is not a substitute for reporting the scammer to law enforcement.
What outcome can you realistically expect?
Possible outcomes include:
- Cancellation or refund under platform rules
- Reversal or chargeback, if available for the payment method and facts
- Temporary holding or recovery of funds still within the financial system
- Mediation or adjudication of a consumer complaint
- Removal or suspension of a fraudulent account
- Identification and investigation of the recipient or account user
- Filing of criminal charges when sufficient evidence exists
- Restitution or damages when legally established
No agency or institution can guarantee recovery. Transfers authorized by the victim may be more difficult to reverse than unauthorized transactions, but they should still be reported promptly. A victim’s mistake in trusting the scammer does not by itself make the scam lawful.
Common mistakes to avoid
- Waiting for the scammer’s repeated promise to refund
- Deleting chats, blocking the account, or resetting the device before preserving evidence
- Reporting only to the platform and not to the payment provider
- Sending more money to unlock a refund or recover the first payment
- Posting account numbers, IDs, addresses, or private conversations publicly
- Editing screenshots so heavily that context, URLs, dates, or times disappear
- Paying an unverified “hacker,” “agent,” or recovery service
- Allowing anyone to use your account to receive or forward money
- Filing exaggerated or knowingly false information
Republic Act No. 12010 specifically penalizes malicious, bad-faith reporting of completely unwarranted or false information when it results in the temporary holding of funds. Report accurately and distinguish what you personally know from what you suspect.
When help is urgent
Seek immediate assistance when:
- Money was transferred within the last few hours
- Your bank, e-wallet, email, or social-media account was taken over
- Your SIM suddenly stopped working
- The scammer has your password, PIN, OTP, card details, or identity documents
- More unauthorized transactions are appearing
- The scam involves threats, extortion, intimate images, a child, trafficking, or physical danger
- A large sum, business funds, borrowed money, or several victims are involved
- The scammer is asking you to receive or forward money through your own account
- A filing deadline, platform dispute period, or card chargeback period may expire
Call 911 for an immediate threat to life or safety. For a substantial loss, account takeover, complex evidence, or possible civil or criminal filing, consult a Philippine lawyer promptly.
Frequently asked questions
Should I report even if the amount is small?
Yes. A small transaction may be connected to many other victims. Reporting also creates a record that may help a bank, platform, or investigator identify a larger scheme.
Can I report if I voluntarily sent the payment?
Yes. A transfer may have been authorized but induced by deception. Tell the bank and investigators exactly how consent was obtained; do not describe it as technically unauthorized if you approved the transfer yourself.
Is non-delivery automatically estafa?
No. Non-delivery may be a consumer or contractual dispute, or it may be evidence of fraud. Criminal liability generally depends on proof of the offense’s elements, including the relevant deceit or fraudulent intent. Investigators and prosecutors assess the complete evidence.
Must I know the scammer’s real name?
No. Preserve the username, URLs, phone numbers, payment destination, reference numbers, and all communications. Authorities may use lawful processes to seek subscriber or account information.
Can the bank immediately return my money?
Not necessarily. Recovery depends on factors including the payment method, timing, whether funds remain available, the institutions involved, applicable rules, and investigation results. A temporary hold is not the same as a final refund.
Can I file with DTI and the police at the same time?
Yes, when the facts support both routes. DTI addresses matters within its consumer-protection mandate; law enforcement investigates possible crimes.
What if the seller is abroad?
Report to the platform, payment provider, and Philippine law enforcement. Republic Act No. 10175 contains jurisdiction and international-cooperation provisions, but overseas identification, evidence gathering, enforcement, and recovery may take longer.
Should I post the scammer’s identity online?
Give evidence to the platform, financial institution, and authorities. Public accusations can expose personal data, alert the suspect, compromise an investigation, or create legal risk if the identification is wrong.
Official references
- Republic Act No. 11967 — Internet Transactions Act of 2023
- Republic Act No. 12010 — Anti-Financial Account Scamming Act
- Republic Act No. 10175 — Cybercrime Prevention Act of 2012
- Republic Act No. 7394 — Consumer Act of the Philippines
- DTI Consumer Care
- PNP Anti-Cybercrime Group
- National Bureau of Investigation
- BSP Consumer Protection and Assistance
This article provides general legal information, not advice for a particular case. Rights, remedies, jurisdiction, and deadlines may depend on the transaction, payment method, platform rules, evidence, and applicable issuances. Official sources and procedures were checked on September 15, 2026.