Quick answer

If you paid an online seller or social-media account and believe you were scammed, act immediately:

Contact your bank, card issuer, e-wallet, or payment provider through its official fraud channel. Ask whether the transfer can be held, recalled, disputed, or traced.
Preserve the advertisement, seller profile, messages, order details, payment records, delivery information, and account identifiers.
Report the transaction to the marketplace or social-media platform.
Report the suspected crime to the PNP Anti-Cybercrime Group (PNP-ACG) or the NBI, especially if money was taken through deception, the seller disappeared, or the account appears to be part of a wider scheme.
If the dispute involves an online merchant, defective or undelivered goods, misleading sales practices, or a marketplace’s consumer obligations, file a consumer complaint with the Department of Trade and Industry (DTI).
If a BSP-supervised bank, e-wallet issuer, or other financial institution does not properly address your complaint, escalate it to the Bangko Sentral ng Pilipinas (BSP) after first using the institution’s own complaint process.

These reports serve different purposes. A refund request, a DTI consumer complaint, and a criminal complaint are not interchangeable, so a victim may need to pursue more than one remedy.

First, determine whether this is probably a scam or a consumer dispute

A failed online purchase is not automatically a crime.

It may be a consumer dispute if an identifiable, apparently legitimate merchant delivered late, sent the wrong product, supplied defective goods, or disputes the refund terms. Start with the seller and platform, then consider DTI mediation or adjudication.

It may indicate fraud or estafa when there was deception from the beginning—for example, a fake seller used stolen photographs, claimed to possess nonexistent goods, collected payment, and then blocked the buyer. Other warning signs include fabricated receipts, false identities, repeated use of different payment accounts, fake escrow instructions, or demands for additional “release,” “insurance,” or “verification” fees.

Intent matters. Non-delivery alone does not conclusively prove criminal fraud, while a seller’s later refund promise does not necessarily erase an earlier deception. Investigators and prosecutors will examine the complete communications, representations, payment trail, and conduct of the parties.

What to do immediately

1. Stop further losses

Do not send another payment to “unlock” a refund, release a parcel, pay tax, verify an account, or help an supposed investigator recover the money.

If you disclosed a password, PIN, one-time password, card number, recovery phrase, or identification document:

Change the affected passwords immediately.
Sign out unknown devices and enable stronger authentication.
Lock or temporarily block affected cards and accounts.
Contact the financial institution using the number in its official app, website, or the back of the card.
Review recent transactions and report every unauthorized entry.
Warn trusted contacts if the scammer may be impersonating you.
Consider replacing credentials or identification documents when the issuing authority advises it.

Never give an OTP, PIN, password, CVV, or recovery phrase to someone claiming to process a refund or investigation. Legitimate authorities do not need those secrets to receive a complaint.

2. Contact the payment provider at once

Speed matters because transferred funds may be moved through several accounts within minutes.

Tell the bank, e-wallet, card issuer, remittance company, or payment gateway that the transaction involves suspected fraud. Provide:

the amount, date, and exact time;
transaction or reference number;
recipient’s name, account number, mobile number, or wallet identifier;
a short explanation of how the deception occurred; and
supporting screenshots or receipts.

Ask for a case or ticket number and written confirmation. If applicable, ask about a transfer recall, account restriction, card dispute, chargeback, or unauthorized-transaction investigation. Availability and deadlines depend on the payment method, provider rules, card-network rules, and whether you personally authorized the payment. Reporting a scam does not guarantee reversal.

If you voluntarily transferred money because of deception, describe the facts accurately. Do not label the transaction “unauthorized” if you actually approved it; instead explain that your authorization was induced by fraud.

3. Preserve evidence before reporting or blocking the account

Save evidence in its original form where possible. Useful records include:

the full seller-profile URL, username, display name, account ID, and profile photographs;
the original advertisement, listing URL, product description, price, and claimed terms;
complete chat or email history, including dates and timestamps;
voice messages, call logs, text messages, and telephone numbers;
order confirmations, invoices, waybills, tracking information, and parcel photographs;
bank, card, e-wallet, cryptocurrency, or remittance receipts;
recipient account details and transaction-reference numbers;
promises about delivery, authenticity, refunds, or investment returns;
photographs or videos of the item received and the unboxing, if relevant;
platform complaint numbers and correspondence;
the seller’s name, address, registration details, and identification documents, if supplied; and
a chronological account written while events are still fresh.

Capture the entire screen, including the URL, username, date, and surrounding conversation—not only isolated statements. Export chats where the service permits it. Keep original files and make a backup. Do not edit screenshots or add markings to the only copy.

Avoid publicly posting the scammer’s alleged identification documents, bank details, or private information. They may belong to another victim or a money mule, and public accusations can create privacy, safety, or defamation issues.

Where to report

Report to the marketplace or social-media platform

Use the platform’s official reporting and buyer-protection process. Report the listing, seller account, conversation, and payment, where applicable.

Request:

preservation of relevant account and transaction records;
cancellation or refund under the platform’s rules;
suspension of the fraudulent listing or account; and
a complaint-reference number.

Do not rely on a platform report alone. A platform can enforce its terms, but it does not replace a complaint to law enforcement or a government regulator.

Report suspected cybercrime to the PNP-ACG

The PNP Anti-Cybercrime Group investigates crimes committed through computers, online accounts, and electronic communications. Use the current contact or e-complaint channel published on the official PNP-ACG website, or approach the appropriate cybercrime unit or police office.

An online report may be only the beginning. For a formal investigation or criminal complaint, you may be asked to appear personally, establish your identity, execute a sworn complaint-affidavit, identify the evidence, and submit devices or original records for examination.

Report to the NBI

You may also seek assistance from the National Bureau of Investigation, including its cybercrime or fraud investigators. Check the official NBI website for its current investigation services, contact details, and regional or district offices.

You ordinarily do not need to report the same incident repeatedly to every police unit. However, investigators may refer or coordinate the matter based on jurisdiction, technical capability, related complaints, or the location of the parties and evidence.

Use the government cybercrime-reporting channel

The Department of Justice maintains official information on reporting cybercrime incidents. The Cybercrime Investigation and Coordinating Center also publishes its current incident-reporting channels on the official CICC website.

A report or tip can alert authorities, but prosecution generally requires admissible evidence and the participation of the complainant.

File a DTI consumer complaint

For an online sales dispute within DTI’s consumer-protection jurisdiction, use the complaint channel identified on the DTI Consumer Care portal or contact the appropriate DTI office.

Before filing, make a written demand to the merchant and retain proof that it was sent. Include the order details, requested remedy, payment proof, communications, and merchant information.

DTI proceedings commonly focus on consumer remedies and regulatory compliance. They are not a substitute for reporting a suspected crime to the police or NBI. Likewise, DTI cannot always act against an unidentifiable account, a purely private one-off seller, or a transaction outside its statutory jurisdiction.

The Internet Transactions Act, Republic Act No. 11967, applies to covered business-to-business and business-to-consumer internet transactions within DTI’s mandate. It imposes duties on online merchants and, in defined circumstances, e-marketplaces and digital platforms. Whether a platform is liable depends on its role, knowledge, compliance, and the specific statutory conditions; merely hosting a seller does not automatically make the platform responsible for every loss.

For claims under the Consumer Act, administrative complaints are generally subject to the Act’s two-year period from the consumer transaction or the completion of the act complained of, subject to the law’s scope and any applicable exceptions. Do not treat that period as permission to wait: platform, payment-dispute, evidentiary, civil, and criminal deadlines may be different.

Escalate financial-service complaints to the BSP

If the payment involved a BSP-supervised financial institution, first file a complaint through that institution’s consumer-assistance mechanism. Keep its reference number and response.

If the issue remains unresolved, follow the procedure on the BSP’s official page on how to file a consumer complaint. Submit proof that you first complained to the institution, together with the transaction records and relevant correspondence.

BSP escalation concerns the conduct and complaint handling of regulated institutions. It does not by itself prosecute the scammer or guarantee reimbursement.

Report investment solicitations to the SEC

A supposed product purchase may actually be an investment scam if the promoter promises profits, commissions, passive income, or returns from recruiting or placing money. Verify the entity and use the current reporting channels on the Securities and Exchange Commission’s official website.

Company registration alone does not mean that an entity is authorized to solicit investments. Authority to offer securities or perform regulated financial activities may require separate approval.

What law may apply

The exact offense depends on how the scheme was carried out.

Estafa

Article 315 of the Revised Penal Code may apply when money or property was obtained through false pretenses, fraudulent acts, or other forms of deceit recognized by law. Investigators must establish the elements of the particular form charged, including the relevant deception, reliance, and damage.

Computer-related fraud

Section 4(b)(2) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, covers computer-related fraud involving unauthorized input, alteration, or deletion of computer data or programs, or interference with a computer system, resulting in damage and accompanied by fraudulent intent.

Not every scam conducted through Facebook, messaging apps, or an online marketplace automatically satisfies that definition. Merely using the internet to communicate an ordinary deception may instead support a prosecution under another law, potentially with the consequences provided by Section 6 of the Cybercrime Prevention Act when all statutory requirements are met. Charging decisions belong to investigators and prosecutors based on the evidence.

Other laws may apply if the incident involved unauthorized access, identity theft, unlawful use of an access device, data-privacy violations, falsified documents, threats, or an illegal investment solicitation.

Preparing a complaint-affidavit

If authorities ask for a complaint-affidavit, present the story chronologically and stick to facts you personally know.

State:

how and when you encountered the offer;
the exact representations that persuaded you;
why you believed those representations;
when, how, and to whom you paid;
what happened after payment;
the amount and other loss suffered;
the account, number, profile, or address used by the respondent;
steps taken to demand delivery or a refund; and
the documents attached to support each important fact.

Identify attachments consistently—for example, payment receipt, full chat export, seller profile, listing, demand message, and provider complaint. Explain how you obtained each item. If a fact is an inference rather than personal knowledge, say so.

The name shown on a receiving account is a lead, not automatic proof that the account holder designed the scam. Accounts and identities can be borrowed, sold, stolen, or controlled by others.

Refunds, criminal cases, and civil recovery

Reporting a crime does not automatically return the money. These processes can run separately:

A platform or payment dispute may produce a contractual refund.
A DTI complaint may address consumer remedies or violations within its jurisdiction.
A criminal complaint asks the State to investigate and prosecute an offense.
A civil action may seek recovery of money or damages when legally available.

The correct parties, venue, procedure, and prescriptive period depend on the transaction, identity and location of the respondent, applicable contract, amount claimed, and offense involved. Seek individual legal advice promptly when the loss is substantial or a deadline may be approaching.

Common mistakes to avoid

Continuing to pay after being promised that one final fee will release the item or refund.
Deleting the conversation after reporting or blocking the account.
Saving only cropped screenshots without URLs, timestamps, or surrounding context.
Communicating solely by disappearing messages.
Sending original evidence without retaining a copy and receipt.
Misstating an authorized transfer as an account takeover.
Paying a private “hacker,” “fund recovery agent,” or supposed government employee.
Trusting contact details supplied by the person accused of scamming you.
Warning the suspect before the bank or investigators can act.
Posting unverified accusations or personal data publicly.
Assuming a barangay blotter, platform report, or bank ticket automatically starts a criminal prosecution.
Waiting for the seller’s repeated promises until complaint or dispute periods expire.

When help is urgent

Contact the financial institution and law enforcement immediately if:

the transaction has just occurred and funds may still be traceable;
your bank, e-wallet, email, or social-media account was taken over;
the scammer obtained passwords, OTPs, card credentials, recovery phrases, or identity documents;
unauthorized transactions are continuing;
the scam involves many victims or large sums;
you are being threatened, blackmailed, or coerced;
intimate images, a child, trafficking, or immediate physical danger is involved; or
someone claiming to be an investigator demands money or confidential account credentials.

For immediate danger, contact emergency services or the nearest police station.

Frequently asked questions

Can I report a scam even if the amount is small?

Yes. The amount may affect the applicable offense, penalty, procedure, or practical handling, but a small loss does not make deception lawful. A report may also connect your case to other victims using the same accounts.

Should I report the seller to DTI or the police?

Use DTI for a covered consumer dispute or online-merchant violation. Use the PNP-ACG or NBI for suspected criminal deception. If the facts support both, you may pursue both processes.

Can the bank or e-wallet reveal the recipient’s identity to me?

Not necessarily. Financial institutions are subject to privacy, confidentiality, and regulatory duties. They may preserve records and disclose information through lawful investigative, prosecutorial, or court processes even when they cannot give it directly to you.

Can authorities trace a deleted or fake account?

Sometimes, but recovery of records depends on what data still exists, who controls it, lawful process, provider cooperation, and how quickly preservation is requested. A fake display name does not make your evidence useless.

Is a screenshot enough?

Screenshots are useful, but stronger evidence includes full conversations, original files, URLs, transaction records, account identifiers, device information, and testimony explaining how the records were created or obtained. Courts assess electronic evidence under applicable evidentiary rules.

Do I need the scammer’s real name before reporting?

No. Provide every available identifier. Investigators may use account, subscriber, transaction, delivery, device, or platform records to develop leads through lawful procedures.

Will filing a complaint guarantee a refund or conviction?

No. Recovery depends on factors such as how quickly the payment was reported and whether funds remain available. Criminal liability depends on proof of every element of the offense beyond reasonable doubt and admissible evidence linking the accused to the scheme.

Is there one deadline for all online-scam complaints?

No. Bank and platform dispute periods, DTI administrative periods, civil prescription, and criminal prescription are governed by different rules. The Consumer Act’s two-year administrative period does not control every other remedy. Report immediately and obtain legal advice if significant time has passed.

Official references

This article provides general legal information, not advice for a particular case. The proper remedy may change based on the evidence, payment method, parties, platform terms, and offense involved. Official sources and reporting information were checked as of 14 September 2026.