Quick answer

If you paid an online seller or social-media account and suspect a scam, act immediately:

Contact your bank, e-wallet, card issuer, or payment provider through its official fraud channel. Ask it to secure your account, flag the recipient account, attempt a hold or recall, and give you a case number.
Preserve the listing, seller profile, messages, payment record, delivery details, and other electronic evidence before anything disappears.
Report the seller, listing, and transaction through the platform’s internal complaint or refund system.
Report the incident to the Cybercrime Investigation and Coordinating Center or Hotline 1326, and file a formal complaint with the Philippine National Police Anti-Cybercrime Group, the National Bureau of Investigation’s cybercrime unit, or the nearest police station.
If the seller was acting as a business, submit a consumer complaint through the DTI Consumer Care portal after using the platform’s internal redress mechanism.
If a BSP-supervised bank or e-wallet does not properly address your complaint, escalate it through the Bangko Sentral ng Pilipinas consumer-assistance channels.

Reporting quickly may improve the chance of tracing or temporarily holding funds, but it does not guarantee recovery. A platform report, consumer complaint, financial dispute, and criminal complaint serve different purposes; depending on the facts, you may need to pursue more than one.

First: stop any further loss

Do not send another payment for “verification,” “insurance,” “customs,” “tax,” “release,” “refund processing,” or “account unlocking.” Scammers commonly demand an additional amount after the first transfer.

If you disclosed a password, PIN, one-time password, recovery code, card number, CVV, or identity document:

Call the financial institution using the number in its official app, website, or the back of the card.
Block or freeze affected cards and accounts.
Change compromised passwords from a trusted device. Use a different password for every account.
Sign out other devices and enable multi-factor authentication.
Check whether the scammer changed your registered phone number, email address, or recovery settings.
Tell your mobile provider immediately if your SIM suddenly loses service or you suspect a SIM-swap.
Review recent transactions and report every unauthorized charge separately.
Warn contacts if your social-media or messaging account was taken over.

Do not rely on a phone number or link sent by the supposed seller, courier, bank employee, or “investigator.” Find the institution’s official contact details independently.

Contact the payment provider immediately

Time matters most when money has just been transferred. Contact the institution from which the money was sent and, if identifiable, the institution that received it.

Provide:

The date, time, amount, and transaction or reference number
The recipient’s account name, account number, mobile number, or wallet identifier
A short explanation that the transfer is disputed because of suspected fraud
Whether you personally approved the transfer or it occurred without your authorization
Whether you disclosed an OTP, password, PIN, or other credentials
Your police, CICC, or platform reference number, if already available

Ask the institution to:

Secure the affected account
Flag the recipient account
Attempt a transfer recall, chargeback, reversal, or other available recovery process
Consider a temporary hold under applicable law and BSP rules
Preserve transaction, device, access, and account records
Confirm the complaint in writing and provide a reference number
State any documents and deadlines required for its dispute process

Under the Anti-Financial Account Scamming Act, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction for the period prescribed by the BSP, which cannot exceed 30 calendar days unless extended by a competent court. This is not an automatic freeze or refund. The result depends on factors such as whether funds remain in the recipient account, the institution’s investigation, applicable BSP rules, and any court or law-enforcement process.

The same law provides for possible restitution when an institution failed to employ adequate risk-management systems and controls or failed to exercise the legally required degree of diligence. It does not make every institution automatically responsible whenever a customer was deceived into sending money.

If you used a credit or debit card, ask specifically about the issuer’s dispute or chargeback process. Card-network and issuer deadlines may be much shorter than the period for filing a legal case.

Preserve evidence before reporting the account

Save evidence first if doing so will not expose you to further harm. A seller may delete messages, change usernames, remove listings, or block you after being reported.

Preserve the following:

Full screenshots and, when possible, screen recordings of the listing, advertisement, seller profile, account details, comments, and reviews
The exact profile, post, product, group, and website URLs
Usernames, page names, display names, account IDs, phone numbers, email addresses, and QR codes
The complete conversation, including earlier messages that show how the offer was made
Order confirmations, invoices, receipts, tracking numbers, and delivery records
Bank or e-wallet transaction confirmations and account statements
The recipient’s account name and number as displayed before or after payment
Photos or an unedited unboxing video if the parcel was empty, counterfeit, damaged, or different from what was advertised
The parcel, packaging, shipping label, airway bill, and item received
Any voice messages, call logs, emails, and files sent by the scammer
The date and time of every relevant event
Copies of complaints and all case or ticket numbers

Keep the original files. Do not crop, annotate, filter, rename, or repeatedly forward the only copy. Make a separate working copy if you need to mark important details. Export chats when the service permits it and back everything up in a secure location.

Electronic records can be used as evidence, but their admissibility and weight depend on authenticity, integrity, relevance, and the circumstances in which they were obtained. A screenshot alone may not establish who controlled an account. Investigators may need subscriber, transaction, device, or platform records obtained through lawful process.

Under the Cybercrime Prevention Act, service providers generally preserve traffic data and subscriber information for at least six months from the transaction. Law enforcement may issue a preservation order and, with the required warrant, obtain relevant data. This is an important reason to report promptly rather than waiting for the account or records to disappear.

Use the platform’s internal complaint process

Report the order and the seller through the marketplace, social-media service, or shopping application. Select the most accurate category, such as non-delivery, counterfeit item, item not as described, impersonation, account takeover, or fraudulent payment request.

Ask for:

Cancellation, refund, replacement, or buyer-protection review
Preservation of the seller’s registration, access, message, and transaction records
Removal of the fraudulent listing
Restriction of the account to prevent further victims
A written decision and complaint reference number

Keep communications inside the platform where possible. Scammers often move buyers to private messaging or direct payment precisely to avoid platform records and buyer-protection controls.

For covered business-to-consumer transactions, the Internet Transactions Act of 2023 requires e-marketplaces and covered digital platforms to provide a responsive redress mechanism. An aggrieved party generally must use that internal mechanism before filing an Internet Transactions Act complaint with a court, government agency, or alternative-dispute-resolution body. The internal process is deemed exhausted if the complaint remains unresolved after seven calendar days.

That requirement should not be read as a reason to delay an urgent bank, CICC, or law-enforcement report where funds, accounts, personal data, or other evidence are at immediate risk.

File the appropriate government reports

CICC: rapid cybercrime reporting and coordination

Report the incident through the CICC reporting page or call 1326. Explain whether money was just transferred, an account was compromised, or sensitive credentials were disclosed.

CICC can receive and coordinate cybercrime reports, but reporting there does not necessarily replace the sworn complaint and supporting documents that an investigating agency or prosecutor may require for a criminal case.

Because hotline and online-service availability can change, verify any alternative contact number on the official CICC website or verified government page before using it.

PNP or NBI: criminal investigation

For a formal criminal complaint, approach:

The PNP Anti-Cybercrime Group or the appropriate regional or local cybercrime unit
The National Bureau of Investigation cybercrime office
The nearest police station, which can record the complaint and make the appropriate referral

Bring a valid ID, your evidence, a printed or digital chronology, payment records, and the available identifying details of the suspected scammer. You may be asked to execute a complaint-affidavit or sworn statement. Describe only what you personally know, identify the source of other information, and do not exaggerate or guess.

A fake listing, dishonest promise, or non-delivery may potentially involve estafa or another offense under the Revised Penal Code. Depending on the precise acts, an incident may also involve computer-related fraud, computer-related forgery, identity theft, illegal access, or an offense committed through information and communications technology under the Cybercrime Prevention Act. Financial-account schemes may fall under the Anti-Financial Account Scamming Act.

Not every failed delivery or broken promise is automatically a crime. Criminal fraud ordinarily requires proof of the legally defined deception and intent; a genuine contractual dispute, delay, or later inability to perform may instead result mainly in consumer or civil remedies. Investigators and prosecutors determine the proper offense based on the evidence.

DTI: business-to-consumer complaints

If the seller regularly sells goods or services as a business, file through the DTI Consumer Care portal. Attach the order record, advertisement, communications, proof of payment, requested remedy, and evidence that you first used the platform or e-retailer’s internal redress process.

Possible consumer remedies include repair, replacement, refund, and other relief allowed by the Consumer Act and related laws. The Internet Transactions Act makes the online merchant or e-retailer primarily liable in covered civil actions and administrative complaints. A platform may have subsidiary or solidary liability only in the circumstances specified by law; it is not automatically liable for every dishonest seller.

The Internet Transactions Act covers relevant business-to-business and business-to-consumer internet transactions connected with the Philippine market. It expressly excludes consumer-to-consumer transactions. A one-off purchase from another private individual may therefore fall outside that Act, although civil obligations, criminal laws, platform rules, and other statutes may still apply.

For claims for damages under the Internet Transactions Act, the law states a two-year period from the time the cause of action arose. Other claims or offenses may have different prescriptive periods. Do not treat the two-year period as permission to delay reporting.

BSP: unresolved bank or e-wallet complaints

A consumer should generally complain first through the financial institution’s own consumer-assistance mechanism. If the matter remains unresolved or the response is inadequate, escalate it through the BSP consumer-assistance channels.

Submit the institution’s complaint number, its response, the disputed transaction details, and your supporting records. BSP escalation is for complaints involving institutions under BSP supervision; it is not a substitute for a criminal complaint and does not guarantee reimbursement.

Other regulators when the offer was not ordinary shopping

Use the regulator responsible for the product or service involved:

Report supposed investments, securities, lending schemes, or unlicensed investment solicitations to the Securities and Exchange Commission.
Report unauthorized use or mishandling of personal data to the National Privacy Commission.
Report suspicious medicines, health products, cosmetics, or medical devices to the Food and Drug Administration.
Report telecommunications or SIM-related issues to the National Telecommunications Commission.

An “investment” disguised as an online-selling, reseller, task, commission, or product package may require SEC and criminal reporting rather than an ordinary DTI refund complaint.

Prepare a clear incident summary

A one-page chronology makes complaints easier to understand. Use a factual format:

Date and time: When you saw the offer, communicated, paid, expected delivery, and discovered the problem
Offer: What product or service was promised and at what price
Identity used: Seller name, account name, username, page, phone number, email, and stated address
Payment: Method, amount, recipient, reference number, and account used
What happened: Non-delivery, fake tracking, wrong item, impersonation, unauthorized transaction, or other conduct
Steps already taken: Platform, payment-provider, CICC, police, NBI, DTI, or BSP reports
Requested action: Account security, fund recall, refund, investigation, record preservation, or prosecution

Separate facts from conclusions. For example, write “the account stopped replying and deleted the listing after receiving payment” instead of stating as fact who operated the account unless you can prove that identity.

Common mistakes that weaken a report

Waiting several days before contacting the bank or e-wallet
Deleting the conversation out of embarrassment
Reporting the account before saving its URLs, identifiers, and messages
Sending another payment in the hope of recovering the first
Communicating only by telephone and keeping no written record
Posting the recipient’s personal information publicly instead of giving it to authorities
Editing screenshots or submitting only cropped images without context
Giving an OTP or remote access to someone claiming to process a refund
Paying a supposed “recovery agent,” hacker, police officer, or lawyer who promises guaranteed retrieval
Assuming that a barangay blotter, platform report, or CICC call automatically starts every required legal proceeding
Filing knowingly false or exaggerated reports to force an account freeze

Public accusations can create separate legal and privacy risks, particularly if the named person was impersonated or merely owns an account used without consent. Report through proper channels and stick to verifiable facts.

When legal help is urgent

Consult a Philippine lawyer promptly when:

The loss is substantial or involves several victims
The platform, seller, or financial institution disputes your evidence
A subpoena, warrant, affidavit, or prosecutor’s proceeding is involved
You are considering a civil action or need to identify an anonymous account holder
The scammer used your identity, intimate images, or confidential business information
There are threats, extortion, stalking, or risks to physical safety
A child, older person, person with disability, or otherwise vulnerable person is being targeted
The transaction crosses borders or involves cryptocurrency
You received money and are being asked to forward it, withdraw it, or let someone use your account

If there is an immediate threat to life or physical safety, contact emergency services or the nearest police station at once.

Frequently asked questions

Can the bank or e-wallet reverse the transfer?

Sometimes, but not automatically. Recovery may depend on how quickly the report was made, whether the funds remain available, whether the transaction was authorized, the payment method, the institution’s rules, and lawful hold or disclosure procedures. Ask for a written decision rather than accepting an informal statement that nothing can be done.

Does entering the OTP mean I have no remedy?

Not necessarily. Disclosing or entering an OTP is important evidence and may affect the institution’s assessment, but liability cannot be decided from that fact alone. The complete circumstances, the institution’s security controls, the method of deception, and applicable laws and BSP rules must be examined.

Can I report a scam if I lost no money?

Yes. Report a phishing page, impersonation account, attempted credential theft, or fraudulent listing to the platform and CICC. Preserve the attempted transaction or message. Some offenses and regulatory violations do not require a completed financial loss, although the applicable charge depends on the facts.

What if the seller blocked me or deleted the account?

Report anyway. Provide the account URL, old username, screenshots, phone number, email address, payment recipient, transaction reference, and any delivery information. Platforms, financial institutions, and telecommunications providers may retain records, but authorities generally need to use the proper legal process to obtain them.

What if the name on the receiving account belongs to someone else?

Give authorities the exact account details, but do not assume that the named account owner was the person communicating with you. The account may have been borrowed, sold, compromised, opened through identity theft, or used as a money-mule account. Those possibilities must be investigated.

Should I report to DTI or the police?

Use DTI for covered consumer remedies against a business seller, and law enforcement for suspected criminal conduct. Many cases justify both. A pure consumer-to-consumer sale is excluded from the Internet Transactions Act, but it may still support a police or civil complaint.

Do I need the scammer’s real name before filing?

No. File using the identifiers and evidence available to you. State clearly that the person’s true identity is unknown. Investigators may seek subscriber, platform, telecommunications, or financial records through lawful procedures.

Will filing a complaint guarantee a refund or conviction?

No. Refunds depend on the governing consumer, contract, payment, and financial rules. Criminal liability must be proven through admissible evidence under the applicable offense. Early reporting and complete records improve the ability of institutions and authorities to investigate but do not predetermine the outcome.

Official legal and reporting references

This article provides general Philippine legal information, not legal advice or a prediction of any complaint’s outcome. Procedures and rights may depend on the transaction, payment method, evidence, and documents involved. Official sources and reporting information were checked on 15 September 2026.