Quick answer

If you paid an online seller or social-media account and suspect a scam, act immediately:

Contact your bank, e-wallet, card issuer, or payment provider through its official fraud channel. Ask it to secure your account, record the transaction as disputed, trace the funds, and—when legally available—initiate a temporary hold or chargeback.
Report the seller or account through the platform’s internal complaint system. Save the case number and confirmation.
Report suspected fraud to the Philippine National Police or National Bureau of Investigation. The NBI accepts online complaints and handles requests for investigative assistance involving computer crimes.
File a consumer complaint with the Department of Trade and Industry when the transaction involved an online merchant or e-retailer. The main online channel is the DTI Consumer CARe System.
Preserve every record. Do not delete the conversation, block the account before capturing it, or edit screenshots.

Reporting does not guarantee recovery. Speed matters because money can be withdrawn or transferred through several accounts, while pages, messages, and transaction records can disappear.

First, decide what happened

Not every failed online purchase is necessarily a criminal scam.

A consumer dispute may involve delayed delivery, a defective or incorrect product, an unhonored warranty, misleading advertising, or a seller refusing a valid refund. The appropriate first steps are normally the merchant’s and platform’s complaint procedures, followed by DTI if unresolved.

A suspected scam or fraud may involve a fictitious seller, stolen identity, fake payment or delivery instructions, intentional non-delivery, a counterfeit storefront, an account that disappears after payment, or deception designed to obtain money or account credentials. Report these facts to the payment provider and law enforcement without delay.

The legal classification depends on the evidence. Depending on how the scheme operated, authorities may consider estafa under the Revised Penal Code, an offense under the Cybercrime Prevention Act, an Anti-Financial Account Scamming Act violation, or another offense. A victim does not need to identify the correct criminal charge before making a report; describe the facts accurately and let investigators and prosecutors evaluate them.

What to do immediately

1. Secure your accounts

If you disclosed a password, PIN, OTP, card details, recovery code, identification document, or other sensitive information:

Change the affected password using a trusted device.
Sign out other sessions and enable multi-factor authentication.
Call the bank, card issuer, or e-wallet using the number in its official app, website, or the back of the card.
Ask whether the account, card, or online access should be temporarily blocked.
Check for other unauthorized transactions.
Warn your mobile provider if your SIM may have been compromised.
Do not follow “recovery” instructions sent by the alleged seller or anyone claiming that another payment is needed to release a refund.

Never rely on a telephone number or link supplied by the suspected scammer.

2. Report the payment at once

Give the financial institution:

transaction reference number;
date and exact time;
amount;
source and recipient account or wallet details;
recipient name shown in the transaction;
reason you believe the transaction was fraudulent;
screenshots or receipts; and
any police, NBI, platform, or DTI reference number already available.

Ask for a written acknowledgment and case number. Clearly distinguish among:

an unauthorized transaction, which you did not approve;
a scam-induced transaction, which you approved because of deception; and
an erroneous transfer, such as mistyping an account number.

These categories may be handled differently.

Under Republic Act No. 12010 and BSP Circular No. 1215, participating BSP-supervised institutions may temporarily hold funds involved in qualifying disputed electronic fund transfers while conducting coordinated verification. The initial hold may last up to five calendar days and may be extended, subject to the rules, so that the total administrative holding period does not exceed 30 calendar days unless a court extends it. The rules do not cover every payment problem: they exclude ordinary erroneous transfers and generally exclude credit-card purchases, except where a credit card was used to make a covered electronic fund transfer. A hold is not automatic and does not itself establish guilt or guarantee reimbursement. See the BSP’s official AFASA law-and-rules booklet.

If the institution does not resolve your complaint satisfactorily, escalate it through the BSP Consumer Assistance Mechanism. BSP requires consumers to complain first through the financial institution’s own Financial Consumer Protection Assistance Mechanism or customer-service channel. BSP-CAM is a second-level remedy and does not replace a criminal complaint.

3. Preserve the evidence before reporting the account

Save original, unedited copies where possible:

the seller’s profile URL, username, page ID, store name, and contact details;
the complete product listing, including price, description, photographs, terms, and promised delivery date;
the entire conversation, not only selected messages;
order confirmations, invoices, receipts, and tracking information;
bank, card, remittance, or e-wallet transaction records;
recipient account numbers, QR codes, telephone numbers, and displayed account names;
emails, text messages, voice notes, call logs, and delivery documents;
platform complaint confirmations and case numbers;
proof of the seller’s promises, excuses, refund offers, threats, or admission;
the date and time each event occurred; and
identification documents or business information voluntarily supplied by the seller.

Capture the page address and surrounding context. Screen recordings can help establish how a profile, advertisement, or conversation appeared, but retain the individual files and original messages as well.

Do not impersonate another buyer, hack an account, threaten the seller, or arrange an entrapment without law-enforcement guidance.

Report through the platform

Use the marketplace or social-media platform’s official reporting and dispute procedure. Report both the transaction and the account or listing, if the system permits.

State the remedy you want—such as cancellation, refund, or release of payment held in escrow—and attach only the information necessary for the complaint. Keep a copy of everything submitted.

The Internet Transactions Act of 2023 requires covered platforms and online businesses to maintain redress mechanisms. As a general rule, an aggrieved party must first use the platform’s, marketplace’s, or e-retailer’s internal redress mechanism before filing an internet-transaction complaint with a court or appropriate government agency. That internal mechanism is considered exhausted if the complaint remains unresolved after seven calendar days.

Do not treat that seven-day period as a reason to postpone securing an account, notifying a bank or e-wallet, preserving evidence, or reporting an urgent suspected crime. Those time-sensitive actions serve different purposes.

The online merchant or e-retailer is generally the party primarily liable to indemnify the consumer in civil or administrative proceedings. A platform’s liability is not automatic; under the Act, it depends on circumstances such as its relationship with the merchant, its compliance with statutory duties, notice, and diligence.

File a DTI consumer complaint

DTI is the appropriate consumer-protection channel for many business-to-consumer disputes involving online merchants, including transactions conducted through marketplaces, websites, and social-media pages.

File through the DTI Consumer CARe System. DTI’s current official guidance also identifies consumercare@dti.gov.ph as an email channel for Metro Manila complainants and permits personal filing with the Fair Trade Enforcement Bureau. Check the DTI filing page before submitting because contact details and procedures can change.

Prepare:

your complete name and contact information;
the respondent’s known name, business name, address, email, telephone number, and account links;
a chronological statement of facts;
the amount paid and payment method;
the remedy requested;
proof that you used the merchant’s or platform’s redress mechanism;
the response received, or proof that seven calendar days passed without resolution; and
copies of supporting records.

DTI consumer proceedings and criminal investigations are different. A DTI complaint may pursue consumer redress, while the PNP or NBI investigates possible crimes. Depending on the facts, both tracks may be appropriate.

Report suspected criminal fraud

Republic Act No. 10175 designates the PNP and NBI as law-enforcement authorities for cybercrime. Its offenses include computer-related fraud and identity theft, while Section 6 covers crimes under the Revised Penal Code or special laws committed through information and communications technology. The Supreme Court’s decision in Disini v. Secretary of Justice upheld relevant investigative and preservation provisions while invalidating or limiting other parts of the original law.

You may:

approach the nearest police station and ask that the matter be referred to the appropriate cybercrime unit;
file through the NBI’s online complaint page; or
proceed to the NBI Cybercrime Division or an appropriate NBI regional or district office.

Bring a valid ID and organized copies of the evidence. Investigators may ask you to complete a complaint sheet, participate in an interview, execute a sworn statement or affidavit, identify witnesses, and make a relevant device available for examination. The NBI’s published computer-crime assistance procedure states that filing and the initial assistance are free.

Tell investigators immediately if:

the scammer is still communicating with you;
another payment or meeting has been proposed;
funds may still be traceable;
several victims are involved;
the scammer has your identity documents or account credentials;
there are threats, extortion, stalking, or risk of physical harm; or
a child, senior citizen, or otherwise vulnerable person is being targeted.

Do not announce the planned complaint to the suspect if doing so may cause evidence or funds to disappear.

If the seller is abroad or unidentified

Still report the incident. Provide every available identifier, including usernames, URLs, payment accounts, telephone numbers, email addresses, courier records, and transaction references.

A fake name or foreign location does not necessarily prevent an investigation, but identification, jurisdiction, evidence collection, and recovery may be more difficult. Platforms can be required to provide specified merchant information when the legal requirements for official process are met. Victims ordinarily cannot compel that disclosure themselves.

For consumer relief, a foreign seller’s lack of a Philippine legal presence may also affect whether a facilitating platform has subsidiary liability under the Internet Transactions Act. Liability remains fact-dependent and should not be assumed merely because the seller cannot be found.

Common mistakes to avoid

Waiting for the seller’s promised refund before contacting the payment provider.
Sending a “verification,” “tax,” “unlocking,” or “recovery” fee.
Deleting messages or blocking the account before preserving evidence.
Submitting cropped screenshots that omit usernames, dates, URLs, or context.
Calling numbers contained in a suspicious message instead of using official channels.
Posting the suspect’s personal data publicly. Public accusations can create privacy, safety, and defamation issues and may alert the suspect.
Paying someone who claims to be an investigator or recovery agent. Verify the person directly with the agency or institution concerned.
Assuming that a platform report is already a police complaint.
Assuming that a police report automatically produces a refund.
Making statements that are exaggerated or knowingly false. Report only what you know and identify uncertain details as such.

When legal help is urgent

Consult a Philippine lawyer promptly if:

the loss is substantial;
the transaction involved a business, investment, loan, cryptocurrency, or several victims;
the seller used your identity or confidential business information;
your bank rejected a significant unauthorized-transaction claim;
you received a subpoena, demand letter, or notice that your own account was used to receive suspicious funds;
you are being threatened or accused of participating in the scheme;
investigators propose an entrapment, device examination, or sworn statement that you do not understand; or
a filing or prescription period may be approaching.

There is no single deadline covering every online-shopping scam. Administrative, civil, and criminal remedies can have different time limits, and the correct period may depend on the offense, transaction documents, parties, and relief sought. Report promptly rather than relying on the longest possible period.

Frequently asked questions

Can I report a scam if the amount is small?

Yes. There is no minimum loss required merely to report suspected fraud. A small transaction may also be connected with other victims or accounts. Whether authorities pursue particular charges or remedies depends on the evidence and applicable law.

Should I report first to DTI or the police?

Use the platform’s internal remedy and notify the payment provider immediately. File with DTI for consumer redress and with the PNP or NBI when the facts indicate deliberate fraud or another crime. These channels perform different functions and may be used in parallel when appropriate.

Can the bank or e-wallet reverse my payment?

Possibly, but not automatically. The result depends on the payment method, the transaction’s authorization status, available funds, applicable network or institutional rules, and the evidence. Report immediately and ask for the precise dispute or fund-tracing procedure.

What if I voluntarily approved the transfer?

Approval does not necessarily mean that no scam occurred. Explain the deception fully. However, a transfer induced by fraud may be treated differently from a transaction performed without your authorization, and reimbursement is not guaranteed.

Is a police blotter enough?

A blotter entry documents a report but may not complete all requirements for an investigation, prosecution, bank dispute, or consumer complaint. Ask for the reference number and what additional affidavit, evidence, or follow-up is required.

Can I report an anonymous Facebook, Instagram, TikTok, or messaging-app seller?

Yes. Preserve the profile and content links, usernames, page identifiers, contact details, payment destination, and full conversation. The inability to identify the person immediately is a reason to preserve more evidence, not a reason to abandon the report.

Should I send my PIN, password, or OTP as evidence?

No. Banks, government agencies, and legitimate investigators should not need your password, PIN, or OTP to receive an initial complaint. Redact unnecessary sensitive information from general submissions, but preserve original records securely in case an authorized investigator later requests them through a proper process.

Official legal and reporting references

This article provides general legal information, not legal advice, and does not create an attorney-client relationship. The proper remedy depends on the transaction, evidence, payment method, parties, and procedural history. Official sources and procedures were checked as of 15 September 2026.