Quick answer

If you paid an online seller or social-media account and suspect fraud, act immediately:

Contact your bank, card issuer, e-wallet, or payment provider through its official fraud channel. Ask it to flag the transaction, secure your account, trace the transfer, and—where legally available—hold or recover the funds.
Report the seller, listing, and transaction through the shopping platform or social-media service. Request a refund, account restriction, and preservation of records.
Preserve all evidence before messages, listings, or accounts disappear.
Report suspected criminal fraud to the PNP Anti-Cybercrime Group or the NBI Cybercrime Division.
If the transaction was with a business or online merchant, pursue consumer redress through the Department of Trade and Industry (DTI).
If a BSP-supervised financial institution mishandles your complaint, escalate it to the Bangko Sentral ng Pilipinas (BSP).

These routes serve different purposes. A platform or DTI complaint may help obtain consumer relief. A bank or e-wallet report may help protect an account or intercept funds. A police or NBI complaint starts the law-enforcement process. Filing with only one does not necessarily accomplish the others.

Do these things first

Contact the payment provider immediately

Use only the telephone number, mobile application, website, or branch shown on the provider’s official channels. Do not call a number supplied by the suspected scammer.

Tell the provider:

that the transaction is disputed and may involve fraud;
the amount, date, time, and transaction or reference number;
the recipient’s name, account number, mobile number, QR code, or other identifier;
whether you personally authorized the transfer;
whether you disclosed an OTP, PIN, password, card data, or identity document;
whether your device or account may have been compromised; and
what action you want, such as an account freeze, card blocking, credential reset, transfer trace, chargeback review, or temporary hold of the recipient funds.

Ask for a case or reference number and written confirmation. Speed matters because transferred funds may be withdrawn or moved through several accounts.

Under the Anti-Financial Account Scamming Act, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction, subject to BSP rules. The statutory holding period cannot exceed 30 calendar days unless extended by a court. A hold is not automatic, and reporting does not guarantee recovery: the institution must assess the transaction, the money may already have left the financial system, and liability depends on the facts and applicable rules.

If you revealed credentials or installed an application at someone’s direction, also:

block affected cards and accounts;
change passwords from a clean device;
sign out other sessions;
enable multi-factor authentication;
contact your mobile provider if your SIM may have been taken over; and
check linked email, shopping, banking, and social-media accounts for unauthorized changes.

Do not delete or factory-reset the affected device until important evidence has been preserved and, in a serious case, law enforcement has advised whether it may need examination.

Use the platform’s complaint and refund process

Report the order, listing, merchant, and account inside the marketplace or social-media platform. Keep screenshots of the report, its submission date, ticket number, and every response.

For business-to-consumer transactions covered by the Internet Transactions Act of 2023, an aggrieved consumer must first use the platform’s, marketplace’s, or e-retailer’s internal redress mechanism before filing a complaint with a court or appropriate government agency. That mechanism is deemed exhausted if the complaint remains unresolved seven calendar days after filing.

Do not let that seven-day period prevent you from immediately securing a compromised financial account, preserving evidence, or alerting law enforcement to an active fraud, disappearing suspect, threat, or continuing loss.

The Act covers qualifying business-to-business and business-to-consumer internet transactions connected with the Philippine market. It does not cover a genuine consumer-to-consumer sale between private end-users. That exclusion does not legalize fraud or remove remedies that may exist under the Revised Penal Code, Civil Code, Cybercrime Prevention Act, or other laws.

Preserve the evidence

Save original, complete copies where possible—not only cropped screenshots. Preserve:

the product listing, price, description, photos, URL, shop name, profile name, and account ID;
the seller’s displayed address, contact details, registration information, and verification badge;
the complete chat, email, SMS, call logs, and voice messages;
order confirmations, invoices, receipts, delivery records, and tracking information;
bank statements, transfer confirmations, card slips, QR codes, and transaction reference numbers;
the recipient’s account name, number, e-wallet number, bank, and branch if known;
photos or an unedited video of the parcel, packaging, waybill, seal, and item received;
refund requests, dispute tickets, and replies from the seller, platform, courier, bank, or e-wallet;
the date and time you discovered the problem and a chronological account of what happened; and
copies of any police blotter, complaint-affidavit, acknowledgment, or case reference.

Export chats if the service permits it. Capture the page address and identifying details, not just the visible profile name. Keep the original files with their metadata and make a separate backup.

Do not publicly post full account numbers, identity documents, home addresses, OTPs, or other sensitive information. Give unredacted evidence only through verified official channels when legitimately required.

Where to report

PNP Anti-Cybercrime Group

The Philippine National Police and the National Bureau of Investigation are the law-enforcement authorities assigned by Section 10 of the Cybercrime Prevention Act of 2012 to investigate cybercrime.

Current government-published contact details for the PNP Anti-Cybercrime Group include:

Email: acg@pnp.gov.ph
Telephone: (02) 3414-1560
Mobile: 0998-598-8116
Address: PNP National Headquarters, Camp General Crame, Quezon City

Contact details can change. Verify them on an official government page before transmitting sensitive evidence. The BSP’s official Scam Verifier and reporting directory lists current reporting channels for the PNP, NBI, BSP, SEC, Insurance Commission, and NTC.

Ask what form of complaint they require and where it should be filed. A formal investigation may require a personally signed complaint-affidavit and supporting documents, not merely an email or social-media report.

NBI Cybercrime Division

Current government-published details include:

Cybercrime Division email: ccd@nbi.gov.ph
Cybercrime Division telephone: (02) 8523-8231 to 38, local 3455, or (02) 8252-6228
Anti-Fraud and Action Division email: afad@nbi.gov.ph
NBI address: NBI Building, Taft Avenue, Ermita, Manila

The appropriate office may depend on the facts, location, and nature of the scheme. Contact the NBI through its official website or verify the details through the BSP reporting directory before attending or sending documents.

Department of Trade and Industry

Use DTI for consumer redress involving an online merchant, e-retailer, marketplace, or other business within its jurisdiction—for example, non-delivery, a materially different item, a fake product, refusal to honor a lawful remedy, or a deceptive sales practice.

Complaints may be submitted free of charge through the DTI Consumer CARe System. DTI also publishes these channels:

Email: ConsumerCare@dti.gov.ph
One-DTI hotline: 1-384
DTI Fair Trade Enforcement Bureau or the appropriate DTI regional or provincial office

The Internet Transactions Act generally allows an online consumer to seek repair, replacement, refund, or other remedies available under consumer law when goods are defective, malfunctioning, lost without the consumer’s fault, inconsistent with a warranty, or otherwise subject to merchant liability. A replacement or refund generally entitles the merchant to the return of the original goods at no cost to the consumer within a reasonable period, unless the parties agree otherwise.

The Act also permits a claim for damages before a court or the DTI within two years from the time the cause of action arose. Do not assume that this two-year period governs every possible criminal, contractual, warranty, payment, or platform claim. Other causes of action and dispute systems may have different periods.

Bank, e-wallet, or other financial institution—and then BSP

First complain to the institution itself through its Financial Consumer Protection Assistance Mechanism or official customer-service channel. Keep its reference number and response.

If you are dissatisfied with the institution’s action, escalate the matter through the BSP Online Buddy, accessible from the BSP website, until you receive a BSP case reference number. If you cannot use the chatbot, the BSP permits submission of its complaint form and supporting documents to consumeraffairs@bsp.gov.ph. The BSP explains the process in its official consumer-assistance guidance.

BSP consumer assistance addresses the conduct, products, services, or complaint handling of a BSP-supervised institution. It does not replace a criminal complaint against the scammer.

Never send your PIN, password, OTP, full card credentials, or unnecessary identity documents to the BSP or anyone claiming to assist with the complaint.

National Privacy Commission

If the incident includes identity theft, unauthorized disclosure of personal information, account takeover, or suspected misuse of personal data by an organization, consider reporting the matter to the National Privacy Commission. A privacy complaint is distinct from a demand for a refund or a criminal fraud complaint.

What conduct may be illegal?

Calling something a “scam” does not by itself establish a crime. Investigators and prosecutors must determine what the evidence proves.

A transaction may involve estafa when deceit or another mode recognized by Article 315 of the Revised Penal Code caused the victim to part with money or property and suffer damage. For example, evidence that a seller used a false identity or fabricated an offer while never intending to deliver may point toward fraud. By contrast, a delayed shipment, defective item, or ordinary contractual dispute is not automatically criminal.

Section 6 of the Cybercrime Prevention Act covers crimes under the Revised Penal Code or special laws when committed through information and communications technology and provides for the higher penalty specified by that section. The same Act separately addresses conduct such as computer-related fraud, identity theft, illegal access, and data interference. The exact charge depends on what the person did; an online communication alone does not establish every cybercrime offense.

Where financial accounts are used to receive or move criminal proceeds, the Anti-Financial Account Scamming Act may also apply to money-muling activities. Its social-engineering offense is more specific: it concerns obtaining sensitive identifying information through deception or electronic communications, resulting in unauthorized access and control over another person’s financial account. A voluntarily authorized purchase payment that was induced by a dishonest seller does not necessarily fit that definition, although other offenses may apply.

How to prepare a useful complaint

Write a short, factual chronology:

Identify yourself and provide reliable contact details.
Identify the seller, account, shop, platform, and payment recipient as completely as possible.
State what was advertised or represented.
State when and how you ordered and paid.
Explain what happened afterward—such as non-delivery, blocking, substitution, unauthorized account access, or demands for more money.
State the exact loss and any continuing risk.
List the steps already taken with the platform and payment provider.
State the remedy requested.
Attach a numbered evidence index and readable copies.
Sign and swear to the complaint if the receiving authority requires an affidavit.

Separate facts you personally witnessed from assumptions. If you do not know whether the account holder is the scammer or merely a recipient or intermediary, say so. Do not alter screenshots, impersonate another buyer, threaten the suspect, or make accusations you cannot support.

Law enforcement may use formal preservation, disclosure, search, or examination procedures under the Cybercrime Prevention Act. Platforms and financial institutions normally cannot disclose another user’s protected information merely because a private complainant asks for it.

Can you recover the money?

Recovery is possible in some cases, but no report guarantees it. The result may depend on:

how quickly the transfer was reported;
whether funds remain in an identifiable account;
whether the payment was authorized or unauthorized;
the card network’s or provider’s dispute rules;
the platform’s buyer-protection terms;
proof of deceit, breach, loss, and identity;
whether the seller can be located and has assets; and
whether the financial institution complied with its legal duties.

For a qualifying money claim not exceeding ₱1,000,000, exclusive of interest and costs, the Rules on Expedited Procedures may allow a small-claims action in a first-level court. The Supreme Court provides the current small-claims rules and forms. Small claims are civil proceedings for payment or reimbursement; they do not investigate or prosecute a crime.

Before filing, verify the proper defendant, court, venue, filing fee, required attachments, any applicable barangay-conciliation requirement, and the effect of an existing criminal or administrative case. If the seller’s real name or address is unknown, obtaining enforceable civil relief may require assistance from law enforcement or counsel.

Common mistakes to avoid

Waiting for the seller’s repeated promise of a refund before contacting the payment provider.
Reporting only to the social-media platform and assuming a police case now exists.
Deleting chats, blocking the account before capturing it, or discarding packaging and waybills.
Sending more money for a supposed “release fee,” “verification fee,” “tax,” or refund processing charge.
Giving an OTP or password to someone claiming they can reverse the transaction.
Using unofficial recovery agents who demand an advance fee.
Exaggerating the facts or naming an account holder as the offender without evidence of that person’s role.
Posting unredacted personal or financial information publicly.
Missing the platform’s refund window, the payment provider’s dispute period, or a statutory filing period.
Treating every unsatisfactory purchase as criminal fraud instead of documenting what shows deceit from the beginning.
Assuming that a DTI complaint, BSP escalation, and criminal complaint are interchangeable.

When help is urgent

Contact the financial institution and law enforcement immediately if:

unauthorized transfers are still occurring;
the scammer has your OTP, password, card data, identity documents, or control of your SIM or device;
funds have just been transferred and may still be traceable;
the scheme is continuing to target other victims;
there are threats, extortion, stalking, intimate-image abuse, or danger to a child;
a large sum, business account, payroll account, or vulnerable person is involved;
the suspect is about to leave, destroy evidence, or close the account; or
a filing deadline or platform dispute period is near.

Consult a Philippine lawyer promptly where the loss is substantial, the parties or funds are overseas, the proper defendant is unclear, several victims are involved, the transaction may be partly legitimate, or you are considering civil action alongside a criminal complaint. The Public Attorney’s Office may be able to assist qualified indigent persons, subject to its requirements and conflict rules.

Frequently asked questions

Should I report to DTI or the police?

Often both, but for different reasons. Use DTI for consumer redress against a covered business or merchant. Use the PNP or NBI when facts indicate intentional fraud, identity theft, unauthorized access, or another crime. Contact the payment provider immediately in either case.

Must I wait seven days before reporting?

For a complaint under the Internet Transactions Act, the internal platform or e-retailer redress mechanism must generally be used first and is deemed exhausted if unresolved after seven calendar days. Do not delay emergency account-security measures, a payment-provider fraud report, evidence preservation, or urgent contact with law enforcement.

What if I bought from an individual Facebook or social-media account?

A genuine private consumer-to-consumer transaction is excluded from the Internet Transactions Act. Criminal, contractual, civil, payment-provider, platform, and other legal remedies may still be available. If the person regularly sells as a business, the legal classification may depend on evidence of that activity rather than the label used on the profile.

What if I authorized the bank or e-wallet transfer myself?

Report it anyway. Authorization can affect reimbursement and dispute rights, but it does not make deception lawful. Give the provider and investigators an accurate account of how the payment was induced.

Can the bank freeze the recipient’s money?

A BSP-supervised institution may temporarily hold funds in a disputed transaction under the Anti-Financial Account Scamming Act and implementing rules. The institution—not the complainant—determines whether the legal grounds and procedures are met. A report is not an automatic freeze order.

Is a police blotter enough?

A blotter records the report, but a formal investigation or prosecution may require a complaint-affidavit, supporting evidence, identification, and further participation. Ask the receiving unit what has been docketed and what must be submitted next.

Can I file even if I do not know the scammer’s real name?

Yes. Provide every available account, transaction, profile, URL, telephone, device, delivery, and payment detail. Do not invent an identity. Formal legal process may be required to obtain subscriber or account information.

Should I confront or publicly expose the seller?

Preserve evidence and use official reporting channels. Confrontation may cause evidence or funds to disappear, while unsupported public accusations may create separate legal risk. If you warn others, disclose no sensitive information and state only facts you can substantiate.

How long do I have?

Act immediately. Platform, card, e-wallet, warranty, administrative, civil, and criminal time limits are not identical. The Internet Transactions Act specifically gives two years from accrual for a damages claim under that Act, but another claim may follow a different period. Obtain legal advice instead of relying on the longest period that might apply.

Official references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Rights, procedures, and available remedies depend on the evidence, payment method, parties, and applicable rules. Official sources and reporting channels were checked as of September 15, 2026.