Quick answer

If you have been scammed through an online shop, marketplace, messaging app, or social-media account in the Philippines, act immediately:

Contact the bank, e-wallet, card issuer, or payment provider through its official fraud channel. Ask it to mark the transaction as disputed, secure your account, trace the transfer, and consider holding remaining funds when legally permitted.
Preserve the evidence before blocking or reporting the account.
Report the seller and transaction through the platform’s internal complaint system.
Report suspected fraud to the PNP Anti-Cybercrime Group, the NBI cybercrime unit, or the nearest police station.
File a consumer complaint with the DTI if the dispute involves a business selling goods or services online.
If your financial institution does not resolve your complaint, escalate it to the Bangko Sentral ng Pilipinas (BSP).

These reports serve different purposes. A platform report may remove an account or release an in-platform refund; a DTI complaint may address consumer remedies; a bank or e-wallet report may help secure accounts or trace funds; and a law-enforcement complaint may lead to a criminal investigation. Filing with one does not necessarily replace the others.

First steps after discovering the scam

1. Stop further loss

Do not send an additional “verification,” “release,” “insurance,” “tax,” or “refund processing” payment. Scammers commonly demand another transfer after the victim asks for a refund.

If you disclosed a password, one-time PIN, card number, security code, recovery phrase, or identification document:

Change the affected password using the official app or website.
Change any other account that uses the same or a similar password.
Log out unknown devices and revoke unfamiliar sessions.
Freeze or block affected cards when appropriate.
Ask the financial institution whether the account, mobile number, or device must be secured or replaced.
Tell your mobile provider promptly if your SIM stopped working unexpectedly, which may indicate unauthorized SIM replacement.
Do not give anyone remote access to your phone or computer.

Contact institutions using the number printed on the card, the official app, or the institution’s verified website—not a number or link supplied by the suspected scammer.

2. Call the payment provider immediately

Report both the sending account and the recipient details. Give the exact amount, date and time, transaction reference number, recipient name, account or wallet number, and the reason you believe the transaction was fraudulent.

Ask for:

a fraud or dispute reference number;
immediate security measures for your account;
preservation of transaction and access records;
coordination with the receiving institution;
a chargeback or card dispute, if applicable; and
temporary holding or recovery of funds, where legally and operationally available.

Under the Anti-Financial Account Scamming Act, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction, subject to BSP rules and statutory limits. The Act allows a holding period prescribed by the BSP that cannot exceed 30 calendar days unless extended by a competent court. It also requires coordinated verification of disputed transactions. This does not guarantee that transferred money will be recovered, particularly if it has already been withdrawn or moved onward. Speed matters.

Do not wait for the seller, platform, DTI, or police to reply before notifying the financial institution.

3. Preserve the evidence

Save evidence in its original form when possible. Keep copies in another device or secure storage. Useful evidence includes:

the listing, advertisement, livestream, post, story, profile, page, group, and exact URL;
the seller’s username, profile ID, page name, phone number, email address, and stated address;
the complete conversation, including dates and times;
order confirmations, invoices, receipts, tracking records, and delivery information;
payment confirmations, transaction reference numbers, statements, QR codes, and recipient account details;
photographs and an unedited unboxing video, if an item arrived;
photographs of the parcel, waybill, packaging, serial number, and product;
the platform complaint, its case number, and every response;
recordings or call logs that you lawfully possess;
proof of the seller’s promises, requested remedy, refusal, disappearance, or blocking; and
a short chronological account written while events are fresh.

Take screenshots that show the account name, URL, date, and surrounding context. If content may disappear, also save the webpage as a PDF or make a screen recording showing how the page was reached. Do not crop away details that may establish authenticity.

Keep the original device and files. Forwarding, editing, annotating, or repeatedly converting a file can remove metadata or create questions about whether it was altered.

Report through the shopping or social-media platform

Use the platform’s official order-dispute, buyer-protection, refund, or “report account” feature. A simple report of a post may not open a payment dispute, so use both processes if both are available.

State:

what was offered;
what you paid and how;
what happened;
why the representation was false or misleading;
the remedy requested; and
the attached evidence.

If the transaction is covered by the Internet Transactions Act of 2023, an aggrieved party generally must first use the internal redress mechanism of the digital platform, e-marketplace, or e-retailer before filing with a court, government agency, or alternative-dispute-resolution process. That mechanism is considered exhausted if the complaint remains unresolved after seven calendar days.

This seven-day rule should not be treated as a reason to delay an urgent bank, account-security, or criminal report. Tell the receiving agency that the platform process is pending and provide the case number.

The Act generally covers business-to-consumer and business-to-business internet transactions within DTI’s mandate. It expressly excludes consumer-to-consumer transactions. A casual sale by another private individual may therefore fall outside that Act even though fraud, civil remedies, platform rules, or other laws may still apply.

File a consumer complaint with the DTI

A DTI complaint is appropriate when the problem concerns an online merchant or e-retailer—for example:

goods were never delivered;
the item was fake, materially different, defective, incomplete, or unsafe;
the seller refused an applicable repair, replacement, or refund;
the advertisement or sales practice was deceptive; or
the business concealed required identifying or contact information.

File through the official DTI Consumer CARe System. Attach the platform complaint and its result, or show that seven calendar days have passed without resolution when the Internet Transactions Act applies.

Request a specific remedy, such as delivery, repair, replacement, refund, or another legally available remedy. Under the Internet Transactions Act, an online consumer may pursue repair, replacement, refund, or other remedies available under the Consumer Act and other applicable laws when goods are defective, malfunctioning, lost without the consumer’s fault, inconsistent with the warranty, or otherwise subject to the merchant’s contractual liability.

The online merchant or e-retailer is generally the party primarily liable to indemnify the consumer. A platform’s possible subsidiary or solidary liability depends on the facts and the statutory conditions; it is not automatic merely because the transaction occurred on that platform.

A claim for damages under Section 28 of the Internet Transactions Act must be brought before the court or DTI within two years from the time the cause of action arose. Other claims or offenses may have different limitation or prescription periods. Do not assume that every online-scam case has the same deadline.

Report the suspected crime

Online deception may constitute estafa or another offense under the Revised Penal Code, depending on the representations, intent, reliance, and resulting damage. The Cybercrime Prevention Act of 2012 may also apply when a crime under the Revised Penal Code or a special law is committed through information and communications technology. The correct charge depends on the evidence; not every failed delivery or refund dispute is automatically a criminal scam.

Report to any of the following:

the PNP Anti-Cybercrime Group or an appropriate PNP cybercrime unit;
the NBI cybercrime unit; or
the nearest police station, which can receive the report or direct it to the proper unit.

The PNP and NBI are the law-enforcement authorities designated under the Cybercrime Prevention Act. Use contact details published on the official PNP Anti-Cybercrime Group and NBI websites, because office locations and reporting channels can change.

Bring or submit:

a government-issued ID;
your written chronology;
copies of the preserved evidence;
payment and recipient-account details;
the platform, DTI, bank, or e-wallet reference numbers;
the amount of loss and any continuing risk; and
information about other known victims, without exaggeration or speculation.

You may be asked to execute a sworn complaint-affidavit and authenticate electronic evidence. An initial report does not by itself establish guilt or assure recovery. Investigators and prosecutors must assess jurisdiction, identity, intent, admissible evidence, and the elements of the possible offense.

Prompt reporting is especially important because service providers ordinarily preserve certain traffic data and subscriber information for the periods set by law, and investigators may need formal preservation or disclosure orders. Victims should preserve their own copies but should not attempt to obtain private subscriber or bank records through impersonation, hacking, threats, or public doxxing.

Escalate unresolved bank or e-wallet complaints to the BSP

First file directly with the bank, e-wallet issuer, or other BSP-supervised financial institution and retain its complaint reference number and reply.

If the matter remains unresolved, use the BSP’s Consumer Assistance Mechanism. The BSP identifies its Online Buddy, or BOB, as a complaint channel. It also accepts a completed Complaints, Inquiries and Requests form at consumeraffairs@bsp.gov.ph.

Include:

a clear summary of the complaint;
the resolution you seek;
your daytime contact information;
the complaint previously filed with the financial institution;
the institution’s response, if any; and
supporting documents.

The BSP process concerns financial products or services and the conduct of supervised institutions. It is not a substitute for reporting the suspected scammer to law enforcement.

If personal information was stolen or exposed

If the scammer obtained or misused your identity documents or personal data, document how the information was collected, disclosed, or used. Notify the organization that holds the affected account and request appropriate security measures.

A privacy complaint may be appropriate where a personal-information controller or processor allegedly violated the Data Privacy Act. Consult the official National Privacy Commission complaint page for its current requirements and procedure. Identity theft or unauthorized account access should also be reported to law enforcement.

Common mistakes to avoid

Deleting the chat or blocking the account before saving evidence.
Waiting several days before notifying the bank or e-wallet.
Paying a supposed recovery agent. Scammers often return while pretending to be investigators, lawyers, bank employees, or hackers who can recover the money for a fee.
Using contact details sent by the scammer.
Posting full account numbers, IDs, addresses, or private conversations publicly. Give sensitive evidence directly to the proper institution or authority.
Sending threats or making categorical public accusations before the facts are established.
Assuming a DTI complaint automatically starts a criminal case.
Assuming a police report automatically produces a refund.
Submitting edited or incomplete screenshots without retaining the originals.
Filing knowingly false information. Malicious, bad-faith reporting that causes funds to be held can itself be punishable under the Anti-Financial Account Scamming Act.

When help is urgent

Seek immediate assistance when:

funds are still moving or the scammer has access to an account;
you disclosed an OTP, password, recovery phrase, card security code, or remote-access permission;
your SIM suddenly stopped working;
the scammer is impersonating you or contacting your family and friends;
threats, extortion, intimate images, stalking, or danger to a child are involved;
the loss is substantial or involves business, payroll, borrowed, or entrusted funds;
multiple victims or money-mule accounts appear to be involved; or
you receive a legal notice, subpoena, demand, or accusation connected with the transaction.

For immediate danger, contact emergency services or the nearest police station. For a substantial loss, complicated evidence, or possible civil and criminal proceedings, consult a Philippine lawyer promptly.

Frequently asked questions

Can I report a scam even if the amount is small?

Yes. The amount may affect available remedies, enforcement priorities, or the eventual penalty, but it does not prevent you from reporting suspected fraud. A report may also help authorities connect related transactions or victims.

Should I report the seller to DTI or the police?

Often both, but for different purposes. DTI handles matters within its consumer-protection and e-commerce jurisdiction. Police or NBI investigators handle suspected crimes. Also report the transaction to the platform and payment provider.

What if I bought from an individual seller on social media?

The Internet Transactions Act excludes true consumer-to-consumer transactions. However, calling an account an “individual seller” is not conclusive: a person who regularly sells in the ordinary course of business may be an online merchant. In any event, platform remedies, civil law, the Revised Penal Code, the Cybercrime Prevention Act, and payment-provider procedures may still apply.

Must I wait seven days before contacting anyone?

No. The seven-calendar-day period concerns exhaustion of the platform, marketplace, or e-retailer’s internal redress mechanism under the Internet Transactions Act. Do not postpone urgent notice to the bank, e-wallet, card issuer, or law enforcement.

Will the bank automatically refund an authorized transfer?

No. Recovery or restitution depends on the facts, the payment method, the movement of funds, applicable law, the institution’s controls and investigation, and any relevant BSP rules. Report immediately, even if you personally confirmed the transfer after being deceived.

Can the recipient account be frozen immediately?

A financial institution may temporarily hold funds in a disputed transaction when the statutory and regulatory requirements are met. Courts and competent authorities also have powers under applicable laws. A victim cannot personally order a freeze, and reporting does not guarantee that money remains in the account.

Is a screenshot enough evidence?

It can be useful, but a complete evidence set is stronger. Retain original messages and files, URLs, profile identifiers, payment records, device data, platform case records, and a clear chronology. Investigators may require authentication or additional records from service providers.

Can I recover money from the platform?

Possibly, but platform liability is not automatic. It depends on the platform’s role, its compliance with statutory duties, notice, diligence, the merchant’s legal presence, and the direct loss proved. In-platform buyer protection may provide a separate contractual remedy.

Where should I file if the scammer appears to be abroad?

Report locally to your payment provider and Philippine law enforcement, and preserve all information suggesting the foreign connection. Philippine law may apply to certain e-commerce activities directed at the Philippine market, but identification, jurisdiction, service of process, and recovery may be more difficult.

Official references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Procedures and remedies depend on the facts, documents, payment method, parties, and applicable agency rules. Official sources and channels were last checked on 19 September 2026.