How to Report an Online Shopping or Social Media Scam

Quick answer

If you have been scammed through an online shop, marketplace, messaging app, or social-media account in the Philippines, act immediately:

  1. Contact the bank, card issuer, e-wallet, or payment provider and report the transaction as fraudulent. Ask whether the transfer can be stopped, traced, recalled, or placed on hold. Recovery is not guaranteed, so speed matters.
  2. Secure your accounts if you disclosed a password, one-time PIN, card number, authentication code, or identity document.
  3. Save all evidence before the seller deletes or changes it.
  4. Report the seller and transaction through the platform’s complaint or refund system.
  5. File a consumer complaint with the Department of Trade and Industry (DTI) if the transaction involved an online business or merchant.
  6. Report suspected criminal fraud to the NBI Cybercrime Division or the police.

These remedies serve different purposes. A platform or DTI complaint may help obtain a refund or other consumer remedy. A report to the NBI or police may lead to a criminal investigation. Reporting only to Facebook, Instagram, TikTok, or an online marketplace is not the same as filing a government complaint.

Do these things first

Call the payment provider immediately

Use the official number in the banking or e-wallet app, on the provider’s website, or on the back of your card. Do not call a number supplied by the supposed seller.

Tell the provider:

  • The transaction date, time, amount, and reference number
  • The recipient’s account name, number, mobile number, or wallet identifier
  • Why you believe the transaction was fraudulent
  • Whether you authorized the payment because of deception or did not authorize it at all
  • Whether you disclosed an OTP, PIN, password, card security code, or login credentials
  • Whether further transactions are still occurring

Request a case or ticket number. Ask the provider to preserve the recipient-account and transaction records and to coordinate with the receiving institution where possible.

The Bangko Sentral ng Pilipinas directs consumers to complain first through the financial institution’s Financial Consumer Protection Assistance Mechanism. If the institution’s response is unsatisfactory or it does not act, the complaint may be escalated to the BSP through the BSP Online Buddy or by submitting the prescribed form to the BSP’s consumer-assistance channel.

A report does not automatically reverse a transfer. Whether money can be recovered depends on factors such as the payment method, how quickly the report was made, whether the funds remain available, and the results of the provider’s investigation.

Secure any compromised account

If the scammer obtained access credentials or personal information:

  • Change the affected password using a trusted device.
  • Change reused passwords on other accounts.
  • Sign out unknown devices and sessions.
  • Enable multi-factor authentication.
  • Block or replace a compromised card.
  • Ask your mobile provider for help if your SIM stopped working unexpectedly.
  • Check banking, e-wallet, email, shopping, and social-media accounts for unauthorized changes.
  • Warn contacts if the scammer may be impersonating you.

Never give an OTP, PIN, password, recovery code, or remote access to anyone claiming that it is needed to process a refund. Legitimate investigators and customer-service staff should not ask for your password or OTP.

Preserve the evidence

Capture evidence before blocking the account or losing access to the conversation. Keep original electronic files where possible—not only cropped screenshots.

Preserve:

  • The complete chat or message history, with dates and times
  • The seller’s username, profile URL, page name, account ID, mobile number, and email address
  • Screenshots and URLs of the listing, advertisement, livestream, or social-media post
  • Order confirmations, invoices, receipts, tracking details, and delivery records
  • Proof of payment and the complete transaction reference
  • The destination bank or e-wallet account details
  • Photos and an unboxing video if the item was counterfeit, defective, substituted, or materially different
  • Platform complaint numbers and responses
  • Emails, text messages, voice messages, and call logs
  • The seller’s representations about authenticity, delivery, condition, price, refund, or warranty
  • A short chronology identifying what happened and when

Do not edit the originals. Back them up in at least one other secure location. Record the exact URL and date of access because profiles and listings can disappear.

If you must send identification documents to an agency, use only its official channel. Avoid posting your address, ID number, account details, or unredacted proof of payment publicly.

Report through the platform

Use the marketplace or social-media platform’s official dispute, refund, and account-reporting tools. State the remedy you want—for example, cancellation, refund, replacement, or removal of a fraudulent listing.

Under the Internet Transactions Act of 2023, Republic Act No. 11967, covered e-marketplaces and digital platforms must provide an effective and responsive mechanism for reporting users or information that may violate the law.

For transactions covered by that Act, an aggrieved party generally must first use the platform’s, marketplace’s, or e-retailer’s internal redress mechanism before filing a complaint with a court or government agency or resorting to alternative dispute resolution. The internal mechanism is considered exhausted if the complaint remains unresolved seven calendar days after filing.

That seven-day rule should not be treated as a reason to delay:

  • Notifying the bank or e-wallet
  • Securing a compromised account
  • Preserving evidence
  • Seeking police help where money is moving, threats are being made, or continuing harm is likely

Keep proof showing when you filed the platform complaint and when the seven-calendar-day period ended.

File a consumer complaint with DTI

A DTI complaint is appropriate when the problem concerns a business, e-retailer, or online merchant—for example:

  • Goods were paid for but never delivered
  • The item was materially different from what was advertised
  • The seller refused a legally available refund, repair, or replacement
  • The transaction involved a deceptive, unfair, or unconscionable sales practice
  • The merchant concealed required identity or contact information
  • The platform failed to provide an effective complaint mechanism

The Internet Transactions Act recognizes remedies such as repair, replacement, refund, and other remedies available under the Consumer Act of the Philippines, Republic Act No. 7394 and other applicable laws. The particular remedy depends on the defect, nonconformity, contract, warranties, and evidence.

DTI’s Consumer Complaints Assistance and Resolution System, or CAReS, is its online portal for filing and tracking consumer complaints, as confirmed by the DTI Fair Trade Enforcement Bureau. A complainant may also verify current filing channels through the DTI website or the nearest DTI regional or provincial office.

Prepare:

  • Your complete name and contact details
  • The merchant’s known name, address, profile, and contact details
  • A clear chronological narration
  • The specific remedy requested
  • Proof of payment and purchase
  • The advertisement, correspondence, and platform complaint
  • Proof that the internal redress process was exhausted, where applicable
  • Any other document requested through the official complaint channel

The Internet Transactions Act states that a consumer may claim damages by filing in court or with DTI within two years from the time the cause of action arose. Other claims or offenses may be governed by different limitation periods. Do not wait for the two-year deadline if evidence, accounts, or funds may disappear.

Important exception for private person-to-person sales

The Internet Transactions Act does not cover a genuine consumer-to-consumer transaction—that is, a personal sale between end-users that is not made in the ordinary course of business. A person who repeatedly sells goods or otherwise acts as a merchant may not necessarily be a private casual seller merely because the sale occurred through a personal social-media profile.

Even where the Act does not apply, fraud, contractual remedies, and other laws may still apply. The classification depends on the actual facts, not simply the platform used.

Report possible criminal fraud

A failed transaction is not automatically a crime. A criminal fraud case ordinarily requires proof of the elements of the particular offense, including fraudulent conduct and resulting damage. Mere delay, poor service, a genuine delivery problem, or a good-faith contractual dispute may call for consumer or civil remedies without necessarily establishing criminal liability.

Where a person used false pretenses or fraudulent acts to obtain money, the facts may constitute estafa under Article 315 of the Revised Penal Code. When an offense defined by the Revised Penal Code or a special law is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act of 2012, Republic Act No. 10175 may also become relevant. The correct charge depends on the evidence and should be determined by investigators and prosecutors.

You may report the incident through the NBI online complaint page, approach the NBI Cybercrime Division, or visit an NBI regional or district office. You may also report to the Philippine National Police, particularly a cybercrime unit or the police station able to receive and refer the complaint.

Bring printed and electronic copies of your evidence, a valid ID, and a concise chronology. Ask what additional documents or sworn statements are required and retain the report, complaint, or reference number.

A police blotter records that an incident was reported, but it may not by itself complete every step needed for investigation or prosecution. Ask the receiving office what further complaint-affidavit, supporting affidavits, device examination, or document authentication is necessary.

Which report should you make?

Situation Immediate route
Money was sent by bank or e-wallet Report first to the payment provider; escalate an unresolved provider complaint to BSP
Card details or account credentials were stolen Block or secure the account immediately, then report unauthorized transactions
Purchase was made from a business or regular online merchant Use the platform’s internal redress process, then complain to DTI if unresolved
Purchase was a private, one-off person-to-person sale Platform report and law-enforcement report may be more appropriate; DTI jurisdiction may depend on whether the seller was actually acting as a merchant
Fraud, identity theft, account takeover, threats, or organized scam activity is suspected Report promptly to the NBI or police
Item is unsafe, prohibited, or poses an immediate danger Stop using it, preserve it safely, notify the platform and proper regulator, and seek urgent assistance
Personal data was unlawfully exposed or misused Secure accounts and consider a complaint to the National Privacy Commission

You may need more than one route. A payment dispute, consumer complaint, and criminal report are not interchangeable.

Common mistakes to avoid

  • Continuing to send “release fees,” “verification payments,” taxes, or deposits to recover the first payment
  • Allowing a supposed refund agent to control your phone or computer
  • Deleting conversations after becoming angry or embarrassed
  • Posting accusations, identity documents, or account details publicly
  • Sending evidence only as disappearing messages
  • Waiting for the seller’s repeated promises while dispute windows expire
  • Assuming a blue check, business registration number, delivery receipt, or photo of an ID proves that the person controlling the account is genuine
  • Paying a self-described “hacker,” “recovery agent,” or government insider who guarantees recovery
  • Reporting only to the platform when a bank account, e-wallet, or criminal investigation is also involved
  • Exaggerating facts in a complaint instead of separating what you personally know from what you suspect

When help is urgent

Contact the payment provider and law enforcement without delay if:

  • Unauthorized withdrawals or transfers are continuing
  • The scammer controls your email, phone number, bank, or e-wallet account
  • You disclosed an OTP, PIN, password, recovery phrase, or full card details
  • The scammer threatens violence, blackmail, or release of intimate material
  • A child or vulnerable person is involved
  • Several victims or large transfers appear connected
  • The scammer asks you to receive or forward money, cryptocurrency, SIM cards, or parcels
  • You fear that evidence or funds will disappear imminently

For an immediate threat to life or physical safety, call the national emergency hotline or go to the nearest police station.

Frequently asked questions

Can I recover money sent voluntarily to a scammer?

Possibly, but not automatically. A transfer induced by deception can still be reported as a scam even if you personally authorized the payment. Recovery depends on the payment system, timing, available funds, account records, and investigation. Report it immediately and describe accurately how authorization was obtained.

Should I wait seven calendar days before reporting the crime?

No. The seven-calendar-day period concerns exhaustion of the internal redress mechanism for covered internet transactions. It should not delay urgent account protection, notification to a payment provider, evidence preservation, or reporting suspected crime and ongoing harm.

Can I complain if the seller blocked me or used a fake name?

Yes. Supply every identifier you have, including account URLs, usernames, telephone numbers, transaction references, recipient-account details, courier records, and screenshots. Investigators may use lawful processes to seek additional records, but identification and recovery are not guaranteed.

Is a screenshot enough?

It can be useful, but a complete evidence package is stronger. Preserve original messages, URLs, receipts, transaction records, files, and devices. Avoid relying solely on cropped screenshots that omit dates, usernames, or context.

Should I send the item back immediately?

Follow the platform’s documented return process and preserve photos, video, packaging, labels, and condition records first. Do not send an item to an unverified address or outside the official dispute process. If the item is dangerous, counterfeit, or potentially illegal, ask the platform or proper authority how it should be handled.

Can I file both a DTI complaint and a criminal complaint?

Yes, when the facts support both routes. The proceedings address different issues. DTI may handle consumer protection and redress, while law enforcement investigates possible crime. Filing a complaint does not assure a refund, arrest, prosecution, or conviction.

Do I need a lawyer?

Not necessarily to make an initial report or consumer complaint. Legal help becomes especially useful when the loss is substantial, the seller disputes important documents, several victims are involved, a complaint-affidavit must be prepared, the case crosses jurisdictions, or court action is being considered. Qualified individuals may inquire with the Public Attorney’s Office about available legal assistance.

Official references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Procedures and available remedies depend on the transaction, platform rules, evidence, and agencies involved. Official sources and filing information were checked as of September 15, 2026.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.