Quick answer

If you paid an online seller and believe you were deceived, act immediately:

Contact the bank, e-wallet, card issuer, or payment provider. Report the transaction as fraudulent, ask whether the transfer can be recalled or the recipient account and remaining funds can be temporarily held, and obtain a case or reference number.
Report the seller and transaction through the shopping platform or social media service. Request a refund, preservation of account and transaction records, and removal or restriction of the fraudulent account.
Report the incident to cybercrime authorities. You may approach the PNP Anti-Cybercrime Group, the NBI’s cybercrime investigation service, or the Cybercrime Investigation and Coordinating Center. The government’s anti-scam hotline is 1326.
If the seller was acting as a business, file a consumer complaint with the DTI. Use the seller or platform’s internal complaint process first. Under the Internet Transactions Act, that process is considered exhausted if the complaint remains unresolved for seven calendar days.

Do not wait for the seller to stop replying before notifying the payment provider. Speed matters because money may be withdrawn or moved through several accounts.

A report does not guarantee recovery. Whether money can be returned depends on matters such as the payment method, how quickly the transaction was reported, whether funds remain in the financial system, and what the investigation establishes.

First, secure your money and accounts

Call the payment provider immediately

Use only the telephone number, app, website, or branch listed by your bank or e-wallet—not contact details supplied by the seller.

Tell the provider:

the exact transaction date, time, amount, and reference number;
the recipient’s account name, account number, mobile number, or wallet identifier;
why you believe the transaction was fraudulent;
whether you authorized the payment yourself or someone gained access to your account;
whether you disclosed an OTP, password, PIN, card number, identification document, or other sensitive information; and
whether other transactions are still pending.

Ask the provider to:

mark the transaction as disputed or fraudulent;
secure or restrict your account if credentials were compromised;
attempt a transfer recall, chargeback, or other available recovery process;
coordinate with the receiving institution;
preserve transaction, device, login, and account records; and
give you a complaint reference number and written instructions for submitting evidence.

Under the Anti-Financial Account Scamming Act, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction and must participate in coordinated verification. A hold is not automatic, and the law does not mean every authorized payment must be refunded. The provider must evaluate the transaction under the law and applicable BSP rules.

If the provider does not properly address your complaint, follow its formal escalation process. Complaints involving a BSP-supervised institution may then be elevated through the BSP Online Buddy or the BSP’s other official consumer-assistance channels. The BSP process is for complaints against regulated financial institutions; it does not replace a criminal complaint against the scammer.

Secure compromised accounts

If you clicked a suspicious link, installed an application, shared credentials, or lost control of your phone or SIM:

change the affected password from a clean, trusted device;
change reused passwords on other accounts;
sign out unknown devices and sessions;
enable multi-factor authentication;
block or replace compromised cards;
notify your mobile provider if SIM takeover is possible;
review linked accounts and recent transactions; and
warn contacts if the scammer may be using your account to solicit money.

Never give an OTP, PIN, password, recovery code, or remote access to a person claiming that these are needed to process a refund.

Preserve evidence before accounts or posts disappear

Save the evidence before blocking the seller or closing the conversation. Keep original electronic files whenever possible.

Preserve:

screenshots and, where useful, screen recordings of the listing, profile, page, username, account URL, and account ID;
the seller’s name, claimed address, telephone numbers, email addresses, and other identifiers;
the complete conversation, including voice messages, emails, deleted-message notices, and timestamps;
the advertisement and every representation about price, authenticity, condition, delivery, warranty, or refund;
the order confirmation, invoice, electronic receipt, shipping record, and tracking number;
proof of payment and the full transaction reference;
the receiving bank or e-wallet, account name, account number, QR code, and mobile number;
photographs or an unboxing video if the item received was fake, damaged, incomplete, or different from the listing;
your reports to the seller, platform, payment provider, DTI, or law-enforcement agency; and
all complaint numbers, acknowledgment emails, and written responses.

Do not crop away the sender, date, time, URL, or transaction reference. Export the conversation or transaction history if the service permits it. Keep copies in a second secure location, but do not publicly post sensitive account numbers, identification documents, home addresses, or other victims’ personal information.

Electronic records may be used as evidence, but their authenticity and integrity can become important. Avoid editing original files or creating a reconstructed conversation when the original can be retained.

Report the seller to the platform

Use the platform’s official order-dispute, buyer-protection, or account-reporting function. Clearly state the remedy requested—for example, cancellation, refund, replacement, or investigation of a fraudulent account.

Ask the platform to preserve:

the merchant’s registration and verification information;
account login and device records;
listing history;
order and payment records;
correspondence within the platform; and
records of previous complaints.

For covered business-to-consumer transactions, the Internet Transactions Act of 2023 requires marketplaces and relevant digital platforms to maintain a responsive reporting mechanism. It also generally requires an aggrieved party to use the platform’s or e-retailer’s internal redress mechanism before filing a complaint with a court or government agency. The mechanism is deemed exhausted if the matter remains unresolved seven calendar days after filing.

That seven-day rule should not be treated as a reason to delay:

notifying a bank or e-wallet about a disputed payment;
securing a compromised account;
asking authorities to preserve evidence;
reporting an ongoing cyberattack, threat, or risk to other victims; or
seeking emergency law-enforcement assistance.

A platform is not automatically responsible for every scam committed by a seller. Under the Act, the merchant or e-retailer is primarily liable for the transaction. Platform liability depends on statutory conditions, such as a failure to exercise ordinary diligence, a failure to respond as required after notice, or certain dealings with merchants lacking a legal presence in the Philippines.

File a consumer complaint with the DTI

A DTI complaint is appropriate when the transaction was between a consumer and a person or entity selling in the ordinary course of business. This can include a business operating through a social media page, even if it has no physical store.

You may use the DTI’s official consumer channels or the contact information provided in the DTI E-Commerce FAQs. Attach:

your name and contact information;
the seller’s known identity and contact details;
the platform and listing URL;
a short chronological account of what happened;
the order and payment details;
proof that you first used the seller’s or platform’s internal redress process;
the response received, or proof that seven calendar days passed without resolution;
supporting documents; and
the specific remedy requested.

Under the Internet Transactions Act, an online consumer may pursue repair, replacement, refund, or other remedies when goods are defective, lost without the consumer’s fault, inconsistent with the warranty, or otherwise fail to conform to the merchant’s contractual obligations. If replacement or refund is chosen, return of the original goods generally must be arranged without cost to the consumer, subject to the law’s conditions.

The Act allows a consumer to claim damages before a court or the DTI within two years from the time the cause of action arose. Do not assume that this two-year period governs every possible criminal, civil, contractual, card-dispute, or platform claim; other laws and provider rules may have different periods.

When the DTI route may not apply

The Internet Transactions Act excludes genuine consumer-to-consumer transactions—for example, a one-time sale of a personal item by a private individual who is not acting as a business. That exclusion does not legalize fraud. Criminal, civil, payment-provider, and platform remedies may still be available.

The DTI also does not replace the specialized regulator for products or services regulated by another agency. Financial-service complaints, for example, ordinarily fall under BSP jurisdiction, while other regulated goods may fall under the FDA, DA, SEC, Insurance Commission, or another competent agency. The DTI’s E-Commerce Bureau may refer complaints to the proper authority under its no-wrong-door function.

Make a cybercrime or criminal report

For deliberate deception, impersonation, account takeover, fake payment requests, or organized scam activity, report the matter to:

the PNP Anti-Cybercrime Group or its nearest regional cybercrime unit;
the National Bureau of Investigation; or
the CICC reporting channel or hotline 1326.

Bring a government-issued ID and printed or electronic copies of your evidence. Prepare a simple chronology covering:

where and when you saw the offer;
what the seller represented;
why you relied on those representations;
when and how you paid;
what happened after payment;
the loss suffered; and
every step already taken with the seller, platform, and payment provider.

Authorities may ask you to execute a sworn complaint-affidavit and provide additional records. A hotline call, online report, police blotter entry, or platform report can document the incident, but it is not necessarily the same as filing the sworn complaint and supporting evidence needed for a criminal case. Follow the investigating officer’s instructions and keep the receiving copy or reference number.

Do not pay anyone who claims they can “release,” “trace,” or “recover” your funds in exchange for another transfer. Recovery scams commonly target people who have already lost money.

What law may apply?

The correct legal characterization depends on the evidence. Common possibilities include:

Estafa or swindling under Article 315 of the Revised Penal Code. A prosecution based on false pretenses generally requires proof of of deceit made before or at the time the victim parted with money or property, reliance on that deceit, and resulting damage.
The Cybercrime Prevention Act. When an offense under the Revised Penal Code or a special law is committed through information and communications technology, Section 6 of Republic Act No. 10175 may apply, with the penalty prescribed by that section.
The Anti-Financial Account Scamming Act. This may cover money-mule arrangements and social-engineering schemes involving financial accounts. Its precise application depends on how the account and deception were used.
The Internet Transactions Act and Consumer Act. These may support administrative or civil remedies against a business seller for deceptive practices, nonconforming goods, failure to honor warranties, or other violations.
Identity, access-device, data-privacy, or other offenses. Additional laws may apply when the scam involves stolen identities, unauthorized account access, card information, personal-data misuse, forged documents, or related conduct.

Non-delivery or a failed transaction is not automatically estafa. A genuine shipping problem, later inability to perform, product dispute, or breach of contract may be civil or administrative rather than criminal. Investigators must determine whether fraudulent intent and legally required elements can be proved from the circumstances.

A practical complaint checklist

Before submitting a complaint, make sure it answers these questions:

Who received the money?
What exactly was promised?
Which statement or conduct was false?
When was the false representation made?
How did it cause you to pay or release property?
How much did you lose?
What did you receive, if anything?
What refund or other remedy did you request?
How did the seller or platform respond?
What account, page, URL, telephone number, and payment details can authorities trace?

Use factual language. Separate what you personally observed from what another person told you. If several victims are involved, each should preserve their own records and be prepared to describe their own transaction.

Common mistakes to avoid

Waiting several days before contacting the bank or e-wallet.
Continuing to send “verification,” “tax,” “unlocking,” “insurance,” or “refund-processing” payments.
Deleting the conversation after becoming angry or embarrassed.
Saving only cropped screenshots that omit the account identity or timestamp.
Reporting only the display name, which the scammer can change, instead of saving the profile URL and account details.
Posting the scammer’s alleged identity publicly before it is verified.
Threatening, hacking, doxxing, or impersonating the suspect.
Sending original devices, IDs, or documents to an unverified person.
Assuming that a SIM-registration name, bank-account name, or social-media profile conclusively identifies the person who committed the scam.
Treating a platform refund request as a substitute for notifying law enforcement about deliberate fraud.
Filing exaggerated or knowingly false information. Reports should be accurate and made in good faith.

When help is urgent

Seek immediate assistance if:

unauthorized transfers are still occurring;
the scammer controls your email, banking, e-wallet, or social media account;
you disclosed an OTP, password, PIN, recovery phrase, card security code, or identity document;
the scammer is threatening violence, blackmail, or release of intimate material;
a child, senior citizen, or other vulnerable person is being targeted;
your identity or account is being used to solicit or receive money;
you are being told to move funds through your account for another person;
the loss is substantial or involves several victims; or
evidence is disappearing or the scam is ongoing.

For a substantial loss, a complex cross-border transaction, disputed account liability, or a case requiring a complaint-affidavit, consider consulting a Philippine lawyer promptly. Qualified indigent persons may ask the Public Attorney’s Office about available legal assistance.

Frequently asked questions

Can I report a scam even if the amount is small?

Yes. There is no sensible reason to ignore deliberate fraud merely because the amount is small. Your report may also help authorities connect transactions involving multiple victims. The available procedure and proportional response will depend on the facts.

Can I report an anonymous or fake account?

Yes. Provide every available identifier. A platform or financial institution may hold information that is not visible to you, but disclosure normally requires lawful process or an authorized investigation. Do not try to obtain the information through hacking or deception.

Can the bank reverse a transfer I authorized?

Sometimes, but not automatically. A provider may attempt a recall, hold remaining funds, conduct coordinated verification, or use another process allowed by law and its rules. Recovery becomes more difficult after funds are withdrawn or transferred onward.

Should I report to both the DTI and the police?

They serve different purposes. The DTI route focuses mainly on consumer and e-commerce compliance and remedies. The police or NBI investigates possible crimes. Depending on the facts, using both routes may be appropriate.

What if I bought through Facebook, Instagram, TikTok, or another social platform?

Report the account and preserve the profile URL, listing, messages, and payment details. If the seller regularly conducts business, consumer and e-commerce rules may apply. If it was a genuine private, consumer-to-consumer sale, the Internet Transactions Act’s consumer remedies may not apply, but fraud and other general laws still may.

What if an item arrived but it was fake or different from the listing?

Document the parcel, label, packaging, and item before returning anything. Use the platform’s dispute process and request the applicable refund, replacement, or other remedy. Counterfeit or regulated products may also need to be reported to the relevant enforcement or regulatory agency.

Should I confront or meet the seller?

Do not arrange a private confrontation or sting operation. Give the information to law enforcement and follow official instructions. Personal confrontation may create safety risks and compromise an investigation.

Does filing a report guarantee that the seller will be arrested or that I will get my money back?

No. Arrest, prosecution, platform action, account restriction, and reimbursement have different legal requirements. Outcomes depend on the evidence, traceability of the suspect and funds, applicable law, and findings of the responsible authorities.

Official legal and reporting sources

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Procedures and available remedies can depend on the transaction, evidence, payment provider, platform, and responsible agency. Official sources were checked on September 15, 2026.