Quick answer

If you paid an online seller or social-media account and believe you were scammed, act immediately:

Contact your bank, e-wallet, card issuer, remittance company, or payment provider through its official app, website, or hotline. Ask it to flag the transaction, attempt a recall or hold, secure your account, and preserve transaction records. Recovery is not guaranteed, especially if you authorized the transfer, but delay makes recovery harder.
Report the seller, listing, and transaction through the shopping platform or social-media service. Request a refund, freeze of the seller’s funds if available, and preservation of account and transaction data.
Save all evidence before accounts, messages, or listings disappear.
For a consumer remedy, file with the Department of Trade and Industry (DTI) when the transaction is covered by consumer and e-commerce laws.
For suspected fraud or identity theft, report to the Philippine National Police Anti-Cybercrime Group (PNP-ACG), the National Bureau of Investigation Cybercrime Division (NBI-CCD), or the nearest police station.

These routes serve different purposes. A platform or DTI complaint may help obtain a refund or other consumer remedy. A police or NBI complaint asks law enforcement to investigate possible criminal conduct. A complaint against a bank or e-wallet concerns the financial institution’s handling of the transaction—not necessarily the prosecution of the scammer.

First, determine whether this appears to be a scam

Common warning signs include:

The seller accepted payment and then blocked you, deleted the account, or became unreachable.
The seller used a false identity, stolen photos, a fake business registration, or fabricated reviews.
The item never existed, or the same nonexistent item was offered repeatedly to different buyers.
You received an empty parcel, a worthless substitute, or an item deliberately misrepresented as genuine.
The seller demanded payment outside the platform to avoid buyer-protection controls.
You were directed to send money to an unrelated person or to several changing accounts.
The seller sent a fake payment confirmation, refund link, courier notice, or customer-service message.
Someone posing as the platform, a bank, or a courier obtained your password, one-time PIN, card details, or account access.

Not every delayed delivery, defective product, incorrect item, or failed refund is automatically criminal fraud. Some cases are consumer or contract disputes. Estafa by false pretenses generally requires a fraudulent representation made before or at the time the victim parted with money, reliance on that representation, and resulting damage. The Supreme Court has repeatedly distinguished punishable deceit from a mere failure to perform a contractual obligation. The documents and the seller’s conduct before payment therefore matter. See, for example, the Supreme Court’s discussion in People v. Arriola, G.R. No. 199975.

You do not need to settle the legal classification yourself before reporting. Describe exactly what happened and let the proper institution or investigator assess it.

Do these things immediately

Contact the payment provider

Use only the telephone number, app, or website printed on your card or published by the financial institution. Do not call a number sent by the suspected scammer.

Tell the provider:

The transaction date, time, amount, reference number, and receiving account;
Whether you personally authorized the payment;
Whether your password, PIN, one-time PIN, device, SIM, card, or account may have been compromised;
When and how you discovered the scam; and
Why you believe the recipient obtained the money through deception.

Ask for:

A case or ticket number;
An attempted transfer recall, receiving-account hold, or fraud investigation;
Blocking or replacement of compromised cards, accounts, credentials, or devices;
Written confirmation of your report; and
Copies or preservation of transaction records.

Be completely accurate about whether you authorized the transfer. An authorized payment induced by deception is different from an unauthorized transaction caused by account takeover, although both should be reported promptly.

If the institution does not resolve the complaint, follow its formal consumer-assistance process. Complaints against banks, e-money issuers, and other entities supervised by the Bangko Sentral ng Pilipinas may be escalated through the BSP’s Consumer Assistance Mechanism after first complaining to the institution. The governing consumer-protection framework is in the Financial Products and Services Consumer Protection Act, Republic Act No. 11765. Current BSP contact information and consumer channels are available through the BSP website.

A BSP complaint does not replace a criminal complaint against the scammer.

Use the platform’s complaint and refund process

Report the order, seller, account, advertisement, and messages inside the platform. Do this even if the seller persuaded you to continue the conversation or payment elsewhere.

Request that the platform:

Suspend any release of funds;
Process the available refund or buyer-protection claim;
Remove or restrict the fraudulent listing or account;
Preserve registration, login, payment, and communications records; and
Give you a complaint reference number and written result.

Under the Internet Transactions Act, covered e-marketplaces and digital platforms must provide an effective and responsive mechanism for reporting users or information that may violate the law. E-marketplaces must also collect specified identifying and contact information from online merchants and may be compelled by competent authorities to disclose information during an investigation based on a sworn complaint. These duties do not mean that the platform must automatically refund every loss or disclose private account information directly to you. See Sections 21–27 of the Internet Transactions Act of 2023, Republic Act No. 11967.

For transactions covered by that Act, an aggrieved party generally must first use the platform’s, e-marketplace’s, or e-retailer’s internal redress mechanism before filing with a court or appropriate government agency. The mechanism is considered exhausted if the complaint remains unresolved seven calendar days after filing. This requirement should not be treated as a reason to delay urgently notifying your payment provider or law enforcement when money, accounts, personal data, or safety remain at risk.

Secure compromised accounts

If you disclosed credentials or clicked a suspicious link:

Change passwords using a clean device, beginning with your email and financial accounts.
Use a different, unique password for each account.
Sign out other sessions and review connected devices.
Enable multi-factor authentication.
Block or replace compromised cards.
Ask your mobile provider to protect or replace a compromised SIM.
Check for altered recovery email addresses, phone numbers, transfer limits, or beneficiaries.
Monitor accounts for additional transactions.
Warn contacts if the scammer may be using your account to solicit money.

Do not delete the suspicious message, application, or file until you have preserved evidence and, where appropriate, received instructions from an investigator.

Evidence to preserve

Create a folder containing the original files whenever possible, not only cropped screenshots. Keep:

The listing, advertisement, seller profile, username, profile URL, page URL, and account ID;
Screenshots or screen recordings showing the full page, date, time, and web address;
The complete conversation, including voice messages, emails, SMS, and call logs;
Order confirmations, invoices, electronic receipts, tracking data, and delivery records;
Proof of payment, transaction history, reference numbers, QR codes, and receiving-account details;
The recipient’s bank, e-wallet, telephone number, email address, and displayed account name;
Photos and an unedited unboxing video if something was delivered;
The parcel, waybill, packaging, and item received;
The seller’s representations about identity, authenticity, availability, condition, delivery, or refund;
Your reports to the seller, platform, payment provider, DTI, police, or NBI;
Every case number, acknowledgment, response, and denial;
A chronological account of events written while your memory is fresh; and
The original device when account takeover, malicious software, or digital forensic examination may be relevant.

Do not edit message exports or annotate the only copy of a screenshot. Keep an untouched copy and make a separate working copy. Back up the evidence in another secure location.

A bank account, e-wallet name, telephone number, or social-media profile may have been stolen, rented, or used as a money-mule account. Present it as an identifier connected to the transaction, not as conclusive proof of the account holder’s guilt.

Where to report

Department of Trade and Industry

Use DTI for consumer claims involving a covered online business, such as nondelivery, misrepresentation, defective or nonconforming goods, an unhonored warranty, or refusal of an available refund.

A complaint or complaint letter should ordinarily contain:

Your complete name, address, email address, and contact number;
The respondent’s available name and contact information;
A clear chronological narration;
The remedy you want; and
Proof of the transaction and a government-issued ID.

Metro Manila complainants may use the DTI Consumer Care portal, email consumercare@dti.gov.ph, or file with the DTI Fair Trade Enforcement Bureau. Consumers elsewhere may contact the appropriate DTI regional or provincial office. The DTI’s current filing guidance provides the official channels and address.

DTI mediation seeks an amicable settlement. If mediation fails, the consumer may be able to pursue formal adjudication, depending on DTI jurisdiction and the relief sought. A lawyer is not generally mandatory in DTI consumer proceedings.

The Internet Transactions Act applies to covered business-to-business and business-to-consumer internet transactions where a party is situated in the Philippines or the business avails itself of the Philippine market and has sufficient contacts here. It expressly excludes consumer-to-consumer transactions. A one-off private sale may therefore fall outside that Act, while a person regularly selling as a business may be an online merchant despite using a personal-looking social-media account. DTI may also refer matters to the proper agency under its no-wrong-door policy.

For damages claimed under Section 28 of the Internet Transactions Act, the law states a two-year period from the time the cause of action arose. Other claims and offenses may have different prescriptive periods, so do not assume that this two-year rule governs every remedy.

PNP Anti-Cybercrime Group or local police

Report suspected online fraud to the PNP-ACG, an appropriate Regional Anti-Cybercrime Unit, or the nearest police station. The PNP has identified its official ACG e-Complaint channel for cybercrime reports.

Go to the nearest police station or call emergency services immediately if there is a threat, extortion, stalking, an imminent in-person meeting, or danger to life or property.

An initial online report may not complete the criminal-complaint process. Investigators may require you to appear, present the device or original records, identify the evidence, and execute a sworn complaint-affidavit.

National Bureau of Investigation Cybercrime Division

You may submit an initial report through the NBI’s Online Complaint page or approach the NBI Cybercrime Division or an NBI regional or district office.

The NBI’s published procedure provides for an initial interview, a sworn complaint sheet or affidavit, supporting documents, witness statements where applicable, and examination of a device relevant to the investigation. The service itself lists no fee. See the NBI Citizen’s Charter entry for investigative assistance to victims of computer crimes.

Other agencies when the facts require them

The correct regulator depends on what was sold and how the scam worked. For example:

Contact the BSP for an unresolved complaint about a BSP-supervised financial institution’s handling of a transaction.
Contact the National Privacy Commission if personal data was unlawfully processed, exposed, or used and the matter falls within its jurisdiction.
Report securities or investment solicitations to the Securities and Exchange Commission.
Report suspicious text-message or telecommunications issues to the relevant telecommunications provider and, where appropriate, the National Telecommunications Commission.
Report regulated products or services to the agency that supervises them, such as the Food and Drug Administration for products within its mandate.

A report to one agency does not necessarily start proceedings before every other agency.

What Philippine law may apply

The applicable law depends on what the evidence proves.

Consumer and e-commerce remedies

The Consumer Act of the Philippines, Republic Act No. 7394 prohibits deceptive, unfair, and unconscionable sales practices and provides consumer remedies within the jurisdiction of the relevant implementing agency.

The Internet Transactions Act supplements those protections for covered online transactions. Among other things, it requires online merchants to describe and price offers properly, deliver goods that conform to the agreed description and condition, issue paper or electronic invoices or receipts, and observe applicable complaint-handling duties. Depending on the problem, an online consumer may pursue repair, replacement, refund, or another remedy available under existing law.

A seller’s “no return, no exchange” statement cannot eliminate statutory remedies for a defective or nonconforming product. It does not, however, create a right to return an item merely because the buyer changed their mind when the product is otherwise compliant and no contractual return right applies.

Estafa and cybercrime

Deliberately obtaining money through false pretenses may constitute estafa under Article 315 of the Revised Penal Code when all elements are proved. A dishonest online scheme could also implicate the Cybercrime Prevention Act of 2012, Republic Act No. 10175, including its provisions on computer-related fraud or crimes committed through information and communications technology.

Section 6 of the Cybercrime Prevention Act covers crimes under the Revised Penal Code and special laws when committed through information and communications technology and provides for a higher penalty. The Supreme Court upheld the provision’s application in Disini v. Secretary of Justice, G.R. No. 203335, subject to the Court’s rulings on the law’s other provisions.

The precise offense, responsible persons, venue, and penalties depend on the proven acts. A complainant should report facts rather than insist on a charge that the evidence may not support.

What to put in a complaint-affidavit

Use a chronological, factual account. Include:

Who you are and how investigators may contact you;
Where you saw the offer;
The exact representations that caused you to proceed;
When and how you communicated with the seller;
What you agreed to buy and for what price;
When, how, and to whom you paid;
What happened after payment;
Why you believe the representations were false when made;
Your attempts to obtain delivery, correction, or refund;
The loss and other harm you suffered;
Every identifier connected to the seller and payment; and
A numbered list of attached evidence.

Separate what you personally observed from what another person told you. Do not exaggerate, guess the offender’s identity, or claim that a document is genuine if you cannot verify it. False or careless statements can weaken the case.

Can you recover the money?

Possibly, but no reporting channel can promise recovery.

Recovery is more likely when:

The payment provider is notified before funds are withdrawn or transferred onward;
The platform still controls payment under an escrow or buyer-protection system;
A card transaction qualifies for a dispute under the issuer’s rules;
The seller or receiving account can be identified;
Records are complete and preserved; or
DTI mediation, adjudication, or a court action results in an enforceable refund or damages award.

A criminal investigation and a refund claim are related but distinct. Reporting a crime does not automatically return the money. Conversely, receiving a refund does not necessarily erase a possible public offense, although investigators and prosecutors will consider all relevant facts.

For a straightforward money claim not exceeding ₱1,000,000, exclusive of interest and costs, the Rules on Expedited Procedures may allow a small-claims action in the proper first-level court. Whether small claims is appropriate depends on the identity and address of the defendant, the nature of the obligation, venue, available evidence, and any required prior proceedings. The Supreme Court provides the current small-claims rules and forms.

Common mistakes to avoid

Waiting for repeated promises while refund or dispute windows expire;
Continuing to send “release,” “verification,” “insurance,” “tax,” or “recovery” payments;
Communicating only by disappearing or encrypted messages without saving copies;
Deleting the conversation after blocking the seller;
Posting the scammer’s alleged personal details publicly instead of giving them to investigators;
Threatening, hacking, impersonating, or trying to seize an account;
Paying a supposed investigator, bank employee, lawyer, or “recovery agent” without independently verifying identity and authority;
Sending one-time PINs, passwords, screen-sharing access, or remote-control access to anyone;
Filing an emotional but vague complaint without dates, identifiers, proof of payment, and a clear requested remedy;
Assuming a platform report automatically creates a police or DTI complaint;
Naming the registered account holder as the perpetrator without evidence that the person controlled the scheme; and
Ignoring a compromised email account, SIM, or device after reporting the payment.

When help is urgent

Contact the financial institution and law enforcement immediately when:

Money is still moving or additional transactions are appearing;
Your account, email, SIM, card, or device has been taken over;
The scammer is demanding more money or threatening you;
Identification documents, selfies, signatures, or financial credentials were obtained;
The scam involves a child, intimate images, extortion, trafficking, weapons, or threats of violence;
The amount is substantial or belongs to an employer, client, organization, or vulnerable person;
Multiple victims or coordinated mule accounts appear to be involved; or
A filing, platform-dispute, chargeback, or legal deadline is approaching.

For substantial losses, uncertain identity, cross-border transactions, or complicated evidence, consult a Philippine lawyer promptly. The Public Attorney’s Office may assist qualified indigent persons, subject to its eligibility and merits requirements.

Frequently asked questions

Should I report to DTI or the police?

Use DTI for consumer redress against a covered business. Use the police or NBI when the facts suggest intentional fraud, account takeover, identity theft, or another crime. You may need both.

Must I wait seven days before notifying law enforcement?

The Internet Transactions Act requires covered aggrieved parties to use the internal redress mechanism before filing with a court or appropriate government agency and treats it as exhausted after seven calendar days without resolution. However, do not postpone urgent fraud mitigation, account security, evidence preservation, or emergency reporting. Ask the receiving agency how the requirement applies to your facts.

Can DTI handle a purchase from an individual Facebook seller?

It depends on whether the seller was acting as an online merchant in the ordinary course of business. The Internet Transactions Act excludes genuine consumer-to-consumer transactions. A criminal complaint or civil remedy may still be available even when that Act does not cover the sale.

Is nondelivery automatically estafa?

No. Nondelivery is important evidence, but criminal estafa generally requires proof of deceit and damage, including a fraudulent representation that induced payment. A simple breach or later inability to perform may remain a civil or consumer matter.

Can the platform give me the seller’s real identity?

Not necessarily on request. The Internet Transactions Act requires covered platforms to maintain specified merchant information, but disclosure may require lawful process. A competent authority may demand relevant information during an investigation based on a sworn complaint when the statutory conditions are met.

What if I paid by bank transfer or e-wallet and approved it myself?

Report it immediately anyway. Explain that you authorized the transfer because of deception. The provider may attempt recovery or investigate the receiving account, but an authorized transfer is not automatically reversible.

What if the scammer returns part of the money?

Preserve proof of the partial return and disclose it in every complaint. It reduces the outstanding loss but does not by itself establish that no fraud occurred.

Should I confront or expose the seller online?

Prioritize evidence preservation and official reporting. Public accusations can alert the offender, endanger an investigation, expose innocent account holders, or create legal risk if the identification is wrong.

Is there a single deadline for reporting an online scam?

No. Platform claims, card disputes, administrative remedies, civil actions, and criminal offenses can have different periods. Section 28 of the Internet Transactions Act gives two years for a damages claim under that section, but it does not govern every possible claim. Report immediately and obtain advice about the deadline applicable to your documents and intended remedy.

Official references

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Rights, deadlines, jurisdiction, and remedies depend on the transaction, evidence, parties, and current agency or platform rules. Official sources and procedures were checked as of September 15, 2026.