Quick answer

If you have been scammed through an online shop, marketplace, Facebook, Instagram, TikTok, Messenger, or another digital channel, act immediately:

Contact your bank, card issuer, e-wallet, or payment provider through its official fraud channel. Ask it to block further transactions, secure the account, trace or recall the transfer if possible, and open a formal fraud dispute.
Preserve the evidence before anything is deleted. Save the listing, seller profile, messages, receipts, payment details, delivery records, URLs, and account numbers.
Report the seller and transaction to the platform. Request preservation of the seller’s account and transaction records, not merely removal of the page.
File a consumer complaint with the Department of Trade and Industry (DTI) if the dispute arose from a business-to-consumer transaction.
Report suspected fraud to law enforcement, particularly the Philippine National Police (PNP) or National Bureau of Investigation (NBI). A platform report or DTI complaint does not replace a criminal complaint.
Secure any compromised email, social-media, banking, or e-wallet account.

Do not wait for the seller to “refund tomorrow” before contacting the payment provider. Recovery becomes harder once funds are withdrawn, transferred through several accounts, or converted into cash or virtual assets.

First, determine what happened

Not every failed online purchase is automatically a criminal scam.

A delayed parcel, damaged product, incorrect item, or refund disagreement may be a consumer or contractual dispute. Fraud is more likely when the seller used deception from the beginning—for example, by offering a nonexistent product, impersonating a legitimate store, sending a fake payment link, using stolen account details, or disappearing immediately after payment.

The distinction matters:

Consumer complaints focus on repair, replacement, refund, performance of the transaction, or other lawful relief.
Payment disputes focus on stopping transactions, recovering funds where possible, and securing financial accounts.
Criminal complaints ask investigators and prosecutors to determine whether an offense was committed and who should be charged.

These remedies may be pursued at the same time. Filing with one office does not necessarily notify the others.

What to do in the first few hours

1. Call the financial institution immediately

Use only the telephone number in the provider’s official app, website, card, or account statement. Do not call a number supplied by the suspected scammer or displayed in an unverified search advertisement.

Tell the provider:

the transaction was induced by fraud or was unauthorized, whichever is accurate;
the exact amount, date, time, and transaction reference;
the recipient’s name, account number, mobile number, wallet, or merchant identifier;
whether you disclosed an OTP, PIN, password, card verification code, recovery code, or remote access;
whether your phone, SIM, email, or financial account may be compromised; and
what action you want, such as blocking the account, freezing a card, tracing or recalling funds, or opening a dispute.

Ask for a case or reference number and written confirmation. Record the date, time, channel, and name or identifier of the representative.

Be truthful about whether you personally authorized the transfer. A payment that you approved after being deceived is different from a transaction made without your authority, although both should be reported promptly.

Banks and e-money issuers cannot guarantee recovery. A recall, reversal, temporary hold, card dispute, or other remedy depends on the payment method, the facts, applicable rules, and whether the funds remain available.

Under the Anti-Financial Account Scamming Act, financial institutions may employ measures involving funds reasonably linked to prohibited acts, subject to the law and its implementing rules. This does not create an automatic right to reimbursement in every scam case.

2. Secure your accounts and device

If you clicked a suspicious link, installed an application, shared credentials, or allowed screen or device access:

disconnect the affected device from the internet if someone still has remote access;
uninstall unauthorized remote-access or screen-sharing applications;
change the password of your email account first, using a clean device;
change banking, e-wallet, marketplace, and social-media passwords;
sign out unknown devices and sessions;
enable multi-factor authentication;
replace reused passwords on other services;
ask your mobile provider to secure or replace a compromised SIM;
review recovery email addresses, mobile numbers, forwarding rules, linked accounts, and newly added payees; and
monitor accounts for small “test” transactions as well as large withdrawals.

Never give an OTP, PIN, password, recovery code, or card security code to a person claiming to process a refund or investigate the scam.

3. Preserve evidence before blocking the scammer

Capture and save:

the complete listing or advertisement;
the seller’s profile, username, page name, account ID, and profile URL;
the exact URL of the listing, page, website, or group;
the entire conversation, including dates and timestamps;
order confirmations, invoices, receipts, and tracking details;
bank, card, e-wallet, remittance, or cryptocurrency records;
the recipient’s name, account number, wallet address, QR code, and mobile number;
emails and their full headers, if available;
SMS messages and originating numbers;
photographs or an unboxing video of the parcel and shipping label;
call logs and recordings lawfully in your possession;
promises of refund, demands for additional payment, and threats;
the platform’s acknowledgment and report reference; and
your communications with the bank, courier, merchant, and government offices.

Keep the original files. Screenshots are useful, but exported chat histories, original emails, electronic receipts, and unedited recordings may contain more identifying information. Back everything up in at least two secure locations.

Do not edit screenshots in a way that removes usernames, dates, transaction references, or surrounding context. Make a separate redacted copy if you need to post a public warning.

Report the account to the platform

Use the marketplace or social network’s in-app reporting and buyer-protection process. Select the most accurate ground, such as fraud, impersonation, counterfeit goods, prohibited products, or non-delivery.

Your report should identify:

the order or transaction number;
the seller, page, or account;
the amount and payment method;
a short timeline;
the promised product or service;
what was actually delivered, if anything;
the relief requested; and
the supporting records.

Expressly request that the platform preserve account, login, listing, payment, and communication records because a complaint may be filed with law enforcement. A platform may remove or suspend an account without giving those records directly to you; investigators may need to obtain them through lawful process.

Do not assume the marketplace or social-media company must reimburse every victim. Under the Internet Transactions Act of 2023, the online merchant or e-retailer is generally the party primarily liable for claims arising from the transaction. An e-marketplace or digital platform may incur liability only under the circumstances and conditions established by that law and its implementing rules. The result therefore depends on such matters as the platform’s role, knowledge, representations, observance of statutory duties, and whether the transaction was completed through or taken outside its system.

File a DTI consumer complaint

For an online purchase from a person acting as a business, file through the DTI Consumer Complaints Assistance and Resolution system. DTI’s online dispute-resolution process covers business-to-consumer transactions. DTI also identifies consumercare@dti.gov.ph and the One-DTI hotline, 1-384, as consumer-assistance channels.

Prepare:

your complete name, address, email address, and contact number;
the respondent’s known name, business name, address, email, telephone number, and online account;
a chronological statement of facts;
the specific remedy requested;
proof of payment and transaction;
the advertisement, listing, messages, and delivery records; and
a copy of a government-issued ID, if required by the filing channel.

Possible consumer relief depends on the law, the transaction, and available evidence. State a clear demand—for example, delivery, repair, replacement, cancellation, or refund—rather than simply saying that the seller should be “punished.”

DTI handles consumer and fair-trade issues; it is not a substitute for a police investigation. If the supposed seller appears fictitious, used a mule account, stole another store’s identity, or deliberately obtained money through deception, report the matter to law enforcement as well.

The Consumer Act of the Philippines and the Internet Transactions Act provide relevant consumer protections, but the precise remedy and responsible party depend on the facts and documents.

Report suspected fraud to law enforcement

You may report to:

the Philippine National Police, including its Anti-Cybercrime Group or the appropriate local police office; or
the National Bureau of Investigation, including its cybercrime investigators.

A preliminary online, telephone, or email report may alert authorities, but investigators may still require personal appearance, identity verification, an affidavit, original or authenticated records, and follow-up interviews before a formal criminal complaint can proceed.

Bring or prepare:

a valid government-issued ID;
a concise incident chronology;
the total loss and itemized transactions;
the suspect’s known names and online identifiers;
recipient-account and payment details;
platform, bank, and DTI reference numbers;
printed copies and an electronic copy of the evidence; and
information about other known victims, without coordinating false or rehearsed statements.

Ask for the official complaint, incident, or reference number and the investigating office’s contact details.

Depending on the proven facts, an online shopping scam may involve estafa or another offense under the Revised Penal Code, potentially in relation to the Cybercrime Prevention Act of 2012. Other laws may apply to unauthorized access, computer-related identity theft, misuse of financial accounts, falsified electronic records, or related conduct. The proper charge is determined by investigators and prosecutors—not by the label used in a platform report.

If a bank or e-wallet does not resolve the complaint

First lodge a formal complaint directly with the bank, card issuer, e-money issuer, or other BSP-supervised financial institution. Keep its reply and your case number.

If the concern remains unresolved, escalate it through the Bangko Sentral ng Pilipinas Consumer Assistance Mechanism. BSP provides its Online Buddy or “BOB” and other channels, including the Consumer Assistance email identified on its official page.

Include:

the complaint previously sent to the institution;
the institution’s reply, if any;
your account and transaction details;
the resolution you are requesting; and
supporting documents.

BSP’s mechanism addresses the conduct and complaint handling of BSP-supervised institutions. It does not prosecute the scammer, guarantee reimbursement, or replace a criminal complaint.

If your identity or personal data was misused

If the scam involved a stolen ID, unauthorized disclosure of personal data, account takeover, or misuse of information held by an organization:

notify the organization’s data-protection officer;
request immediate account restriction and preservation of access logs;
identify the specific personal data exposed;
replace compromised credentials or identification where appropriate;
monitor for accounts or loans opened in your name; and
consider seeking guidance or filing a complaint through the National Privacy Commission.

A privacy complaint should identify the organization or person responsible for processing the data and explain the suspected violation. The mere fact that a scammer learned your name or mobile number does not, by itself, establish that a particular company violated the Data Privacy Act.

What if the seller is abroad or anonymous?

Still report the incident. Provide every identifier available, including foreign telephone numbers, website domains, email addresses, cryptocurrency wallet addresses, payment processors, courier records, and account names.

Cross-border or anonymous cases are usually harder to investigate and recover from. A Philippine agency’s jurisdiction, the availability of records, international cooperation, and the suspect’s true location may affect the case. Do not pay a “recovery agent,” “hacker,” or supposed government officer who promises to retrieve the money for an advance fee. Recovery scams often target people who have already lost funds.

Should you send a demand letter?

A written demand may be useful when the seller is identifiable and the dispute concerns non-delivery, a defective item, or refusal to refund. State:

the transaction and amount;
the breach or misrepresentation;
the remedy demanded;
a reasonable response deadline; and
where the response should be sent.

Send it through a channel that creates proof of delivery. Keep the language factual. Do not threaten violence, public shaming, or criminal charges solely to obtain money.

A demand letter may help establish notice or support a civil claim, but it is not always necessary before reporting an active scam. Do not delay urgent bank or law-enforcement reports while waiting for a reply.

Can you file a civil case?

An identifiable seller may also be civilly liable for refund, damages, or other relief, depending on the contract and evidence. Certain money claims may qualify for the Supreme Court’s small-claims procedure, subject to the current monetary limit, venue rules, exclusions, filing requirements, and payment of court fees.

Before filing, confirm:

the defendant’s correct legal name and service address;
the amount and legal basis of the claim;
whether the case belongs in small claims or another proceeding;
whether DTI or another agency has already issued a relevant order; and
whether the cost and prospects of enforcement justify the case.

A court judgment is not the same as actual collection. If the seller’s identity or address is unknown, investigation may be needed before a civil claim is practical.

Common mistakes that can weaken a report

Waiting several days before notifying the bank or e-wallet.
Deleting the conversation after blocking the seller.
Saving only cropped screenshots without dates, URLs, or account identifiers.
Paying additional “release,” “verification,” “insurance,” “tax,” or “refund-processing” fees.
Moving the transaction outside the marketplace and losing platform protections.
Reporting only to the platform and assuming it filed a police complaint.
Describing an authorized-but-deceptive payment as unauthorized.
Posting the suspect’s bank details, identification, or home address publicly.
Editing or fabricating evidence.
Accessing the suspect’s account, threatening the suspect, or arranging an entrapment without law-enforcement guidance.
Paying private “fund recovery” services that demand money upfront.
Using unofficial numbers or links supplied by someone claiming to be from a bank or government agency.

Public accusations may create privacy, harassment, or defamation risks, especially if the account holder is a victim of identity theft or merely a money mule. Give the unredacted evidence to the proper institution or investigator instead.

When help is urgent

Contact the financial provider and law enforcement immediately if:

money is still being transferred;
someone has remote access to your phone or computer;
your SIM, email, bank, or e-wallet account has been taken over;
the scammer has copies of your ID, selfie, signature, or financial credentials;
threats, blackmail, stalking, or intimate images are involved;
a child or vulnerable person is at risk;
the scam involves a large amount, multiple victims, or an organized operation;
you are being instructed to lie to a bank, courier, police officer, or family member; or
the scammer is arranging an in-person meeting.

For an immediate threat to life or safety, contact emergency services or the nearest police station.

A practical complaint format

Use a clear chronology rather than a long emotional narrative:

On [date and time], I saw [product or offer] at [exact URL/platform]. The account identified itself as [name and username]. It represented that [specific promise]. Relying on that representation, I paid PHP [amount] through [payment method] to [recipient details], transaction reference [number]. After payment, [what happened]. I contacted the respondent on [dates] and requested [remedy], but [response or no response]. I am attaching the listing, complete conversation, proof of payment, account details, delivery records, and prior reports. I request [specific relief] and investigation of the transaction.

Separate what you personally observed from what you suspect. If you do not know whether the recipient’s account belongs to the scammer, call it the recipient account, not necessarily the scammer’s own account.

Frequently asked questions

Can I report a scam even if the amount is small?

Yes. The amount does not determine whether the conduct should be reported. Several small reports may help authorities or platforms identify a repeated scheme.

Can I report if I willingly sent the money?

Yes. Explain accurately that you authorized the payment because of an alleged misrepresentation. Do not describe it as an unauthorized transaction unless someone made it without your consent.

Will the bank automatically return my money?

No. Recovery depends on the payment channel, timing, available funds, account records, and applicable dispute rules. Immediate reporting improves the chance of protective action but does not guarantee reimbursement.

Is a Facebook or marketplace report enough?

No. It may help suspend the account or start buyer protection, but it does not replace reporting to the payment provider, DTI, or law enforcement.

Do I need the scammer’s real name?

No. File with the identifiers you have. Usernames, URLs, telephone numbers, recipient accounts, transaction references, email addresses, device information, and courier records may assist investigators.

What if the name on the receiving account belongs to someone else?

Report the account exactly as shown, but do not assume that the named holder planned the scam. The account may be controlled by an accomplice, a money mule, an identity thief, or another victim. Investigators must determine the holder’s role.

Should I keep talking to the scammer?

Preserve existing messages, but do not send more money or disclose more information. Do not attempt your own hacking, tracing, or entrapment. Follow an investigator’s instructions if continued contact could serve a lawful operation.

Is there one filing deadline for every online scam?

No. Platform disputes, card claims, civil actions, administrative complaints, and criminal offenses can have different deadlines or prescriptive periods. Some provider deadlines may be short. Report immediately and obtain advice about any case-specific deadline rather than assuming that a pending refund promise stops the clock.

Can DTI order an arrest?

No. DTI addresses matters within its consumer-protection and fair-trade authority. Criminal investigation, prosecution, and arrest involve law-enforcement agencies, prosecutors, and courts under applicable procedure.

Can I post the scammer’s details online?

It is safer to provide complete records to the platform, financial institution, DTI, and law enforcement. Publicly posting unverified identities, bank details, IDs, or addresses can harm innocent persons and may create legal problems.

Official resources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Procedures and remedies depend on the evidence, payment channel, parties, and applicable rules. Official sources and reporting channels were checked on 18 September 2026.