Quick answer

If you paid an online seller or social-media account and believe you were scammed, act immediately:

Contact your bank, card issuer, e-wallet, or payment provider through its official fraud channel. Ask it to secure your account, record the transaction as disputed, trace the transfer, and determine whether the remaining funds can be temporarily held.
Preserve the evidence before the account or listing disappears.
File a complaint through the marketplace, social-media platform, or seller’s internal redress system.
Report suspected fraud to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or Cybercrime Investigation and Coordinating Center.
For a business-to-consumer dispute, file with the DTI after the platform’s internal process is exhausted—generally when the complaint remains unresolved for seven calendar days.

Reporting does not guarantee recovery. Speed matters because money may be transferred or withdrawn within minutes.

First, determine what happened

Not every failed online purchase is automatically a criminal scam.

A transaction may involve suspected fraud when, for example, the seller used a false identity or fake listing, accepted payment while never intending to deliver, sent a deliberately worthless substitute, impersonated a legitimate business, or disappeared immediately after payment.

By contrast, delayed delivery, a defective item, a warranty disagreement, or poor service may primarily be a consumer dispute unless the evidence also shows deceit. You may pursue both consumer remedies and a criminal report when the facts support both.

The Internet Transactions Act of 2023, Republic Act No. 11967 generally covers business-to-business and business-to-consumer internet transactions connected with the Philippine market. It does not cover purely consumer-to-consumer transactions, such as an isolated sale between private individuals. That exclusion does not make private-person fraud lawful: the Revised Penal Code and cybercrime laws may still apply.

What to do immediately

1. Contact the payment provider

Use only the telephone number, app, website, or email shown in your bank or e-wallet’s official channels. Do not call a number supplied by the suspected scammer.

Tell the provider:

The transaction date, time, amount, reference number, and receiving account
Whether you personally authorized the transfer or your account was accessed without permission
How the scam occurred
Whether you disclosed an OTP, PIN, password, card information, or identification document
That you want the transaction formally recorded as disputed
That you are requesting tracing, temporary holding where legally available, and account-security measures

Ask for a case or ticket number and written confirmation. Do not describe a transaction you knowingly authorized as “unauthorized”; explain accurately that you were deceived into authorizing it.

Under BSP Circular No. 1215, BSP-supervised institutions must have procedures for temporarily holding funds involved in qualifying disputed electronic fund transfers and for coordinated verification. An initial hold may last up to five calendar days and may be extended by up to 25 additional calendar days under the applicable conditions. The framework does not cover ordinary encoding mistakes and generally does not cover credit-card purchases unless the card was used to make an electronic fund transfer through an automated clearing house.

A hold is not an automatic refund. It may be impossible if the money has already left the financial system, and the provider must still investigate ownership and legitimacy.

If your credentials may be compromised, also:

Freeze or lock affected accounts and cards
Change passwords using a clean, trusted device
Sign out other sessions
Enable multi-factor authentication and transaction alerts
Lower transfer limits if available
Inform your mobile provider if your SIM stopped working or may have been taken over
Check other accounts that used the same password

2. Preserve evidence before blocking or reporting the account

Save original files where possible, not merely cropped screenshots. Keep:

The seller’s profile name, username, page URL, account ID, phone number, email, and displayed address
The complete listing, advertisement, product description, price, and promised delivery date
Messages, emails, comments, voice notes, and call logs
Order confirmations, invoices, receipts, tracking details, and parcel labels
Payment confirmations and transaction reference numbers
The beneficiary’s account or wallet number and displayed name
Photos and an unedited unboxing video if an item arrived
The platform complaint and all responses
A clear timeline written while events are fresh
Any identification, permit, registration number, or business name the seller supplied

Export chats when the platform allows it. Record the URL and date of every screenshot. Do not alter files or add annotations to the only copy.

Avoid publicly posting full account numbers, identification documents, home addresses, or other sensitive information. Give complete evidence directly to the proper institution or investigating authority.

3. Use the seller’s or platform’s complaint process

File through the platform’s official dispute, refund, or report function. State the remedy you want—such as delivery, repair, replacement, cancellation, or refund—and attach concise proof.

Republic Act No. 11967 requires an aggrieved party to use the digital platform’s, e-marketplace’s, or e-retailer’s internal redress mechanism before filing a complaint with a court or appropriate government agency. That mechanism is considered exhausted if the matter remains unresolved seven calendar days after filing.

Do not let this consumer-dispute step delay urgent action to secure a bank account, report a compromised account, or seek police assistance where funds or personal safety remain at risk.

For defects, loss not caused by the buyer, failure to honor a warranty, or failure to comply with the contract, the Act recognizes repair, replacement, refund, and other remedies available under the Consumer Act of the Philippines and other laws. If replacement or refund requires returning the original goods, the return should be without cost to the online consumer within a reasonable period, unless the parties validly agree otherwise.

Where to report the scam

Different reports serve different purposes. Filing with one office does not necessarily replace the others.

PNP Anti-Cybercrime Group

Report suspected online fraud to the Philippine National Police Anti-Cybercrime Group:

Email: acg@pnp.gov.ph
Address: PNP National Headquarters, Camp General Crame, EDSA, Quezon City
Telephone numbers listed in the BSP’s current official guide: (0998) 598-8116 and (02) 8414-1560

You may also approach the appropriate local police cybercrime unit. Bring identification and printed or electronic copies of your evidence. Ask what affidavit or additional documentation is required for a formal criminal complaint.

NBI Cybercrime Division

You may report to the National Bureau of Investigation:

Email: ccd@nbi.gov.ph
Address: NBI Building, Taft Avenue, Ermita, Manila
Telephone: (02) 8523-8231 to 38, local 3454 or 3455

The NBI may require personal appearance, identification, an affidavit, and original or authenticated supporting records depending on the case.

Cybercrime Investigation and Coordinating Center

The CICC receives cybercrime reports and can assist with coordination:

Email: report@cicc.gov.ph
Hotline: 1326
Mobile numbers: (0991) 481-4225, (0947) 714-7105, and (0966) 976-5971
Address: 49 Don A. Roces Avenue, Barangay Paligsahan, Diliman, Quezon City

These law-enforcement and CICC contact details are also published in the BSP’s official complaint guide. Verify contact details on the agencies’ official pages before submitting sensitive documents.

Department of Trade and Industry

For a dispute with an online merchant or e-retailer, file through the DTI Consumer CARe System after documenting use or exhaustion of the platform’s internal redress process.

Include:

Your contact details
The merchant’s known name and contact information
A chronological statement of facts
The amount paid
The specific remedy requested
Proof of purchase and payment
The platform complaint, filing date, and response or proof that seven calendar days passed unresolved

DTI handles consumer and trade-law issues; it is not a substitute for a criminal investigation. Republic Act No. 11967 allows DTI’s E-Commerce Bureau to receive and refer internet-transaction complaints to the appropriate agency.

The law makes the online merchant or e-retailer primarily liable in civil actions or administrative complaints arising from the transaction. A platform’s liability depends on statutory conditions—for example, failure to exercise the required diligence, failure to act after notice in specified situations, or failure to provide a foreign merchant’s contact details. A platform is not automatically liable for every scam committed by a user.

Bangko Sentral ng Pilipinas

For complaints involving a BSP-supervised bank, e-money issuer, or other covered financial institution:

Complain first through the institution’s Financial Consumer Protection Assistance Mechanism or official customer-service channel.
If the response is unsatisfactory, escalate through the BSP Online Buddy on the BSP consumer-assistance page.
If you cannot use the chatbot, complete the BSP Complaint/Inquiry/Reply form and email it, with proof that you first complained to the institution, to consumeraffairs@bsp.gov.ph.

BSP’s process is a second-level consumer-assistance mechanism. Criminal investigation remains with law enforcement. Do not email your PIN, password, OTP, complete card number, or other credentials.

National Privacy Commission

If the scam involved identity theft, misuse or unauthorized disclosure of personal data, or a business’s failure to protect your information, consider a separate complaint through the National Privacy Commission’s official complaint page.

A privacy complaint addresses personal-data violations; it does not replace payment disputes, consumer complaints, or criminal reports.

What laws may apply

The legal characterization depends on the evidence.

A deceptive online sale may constitute estafa under Article 315 of the Revised Penal Code if its elements are proven, including deceit and resulting damage. When a crime defined by the Revised Penal Code or another special law is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act of 2012 may apply and provides for a penalty one degree higher than the ordinary penalty.

The Anti-Financial Account Scamming Act, Republic Act No. 12010, separately addresses prohibited acts involving financial accounts, money-mule activity, and social-engineering schemes. Its application depends on what the participants did; merely being the named recipient of a disputed transfer does not by itself establish guilt.

For legitimate online businesses, Republic Act No. 11967 imposes disclosure, invoicing, product-conformity, complaint-handling, and other duties. It also excludes purely private consumer-to-consumer sales from its coverage. Whether a social-media seller is operating as a business is a factual issue, not something determined solely by the label placed on the account.

Deadlines and why you should not wait

There is no safe waiting period for reporting a payment scam. Notify the payment provider immediately because funds may be moved quickly.

For an online consumer complaint under Republic Act No. 11967:

Start with the platform’s or seller’s internal redress mechanism.
It is deemed exhausted after seven calendar days if unresolved.
A claim for damages under the Act may be filed before the court or DTI within two years from the time the cause of action arose.

Other criminal, civil, administrative, payment-network, platform, and contractual deadlines may be different. A two-year period under the Internet Transactions Act is not permission to delay a chargeback, fraud report, or preservation request.

Common mistakes to avoid

Waiting for repeated promises that a refund is “being processed”
Sending another payment for “verification,” “release,” “insurance,” or “recovery”
Deleting chats after blocking the account
Reporting only to the social-media platform
Giving investigators edited screenshots with missing dates or usernames
Misstating an authorized-but-induced transfer as an unauthorized transaction
Threatening or harassing the suspected scammer
Publicly accusing a person without adequate proof
Paying a supposed recovery agent who guarantees the return of funds
Sending passwords, PINs, OTPs, or full card credentials with a complaint
Assuming that filing a police report automatically reverses the payment
Assuming that a DTI complaint automatically begins a criminal case

When legal help is urgent

Consult a Philippine lawyer promptly when:

The loss is substantial or involves several victims
The recipient, platform, or payment provider disputes your evidence
Your identity or financial account is being used for further transactions
You unknowingly allowed your account to receive or forward suspicious funds
You received a subpoena, demand letter, or notice that your account was frozen
The scam involves threats, blackmail, intimate images, stalking, or danger to a child
The seller is abroad or the money passed through several institutions
You need to seek damages, an injunction, or preservation and disclosure orders
A filing deadline may be approaching

If there is an immediate threat to life or safety, contact emergency services or the nearest police station rather than waiting for an online response.

Frequently asked questions

Can I still report if I voluntarily sent the money?

Yes. A payment may have been authorized but induced by deception. State exactly what happened. Authorization affects the investigation and possible reimbursement, but it does not necessarily mean no scam occurred.

Will the bank automatically return my money?

No. The bank or e-wallet must assess the transaction and available funds. A temporary hold preserves qualifying disputed funds while verification proceeds; it is not a judgment that the complainant owns the money.

Should I report to DTI or the police?

Often both, but for different purposes. DTI addresses consumer and online-business obligations. The PNP, NBI, and other law-enforcement bodies investigate possible crimes.

What if the seller was just a private person on social media?

A genuine one-off consumer-to-consumer transaction is excluded from Republic Act No. 11967. You may still use the platform’s reporting tools, dispute the payment where appropriate, and report evidence of fraud to law enforcement.

What if no money was lost?

Report the account to the platform and preserve the attempted-scam evidence. Contact the relevant bank or e-wallet if credentials or account information were exposed. An attempted offense, identity misuse, or unlawful access may still warrant reporting.

Can I post the scammer’s identity online?

Use caution. A displayed name may belong to an impersonated person, hacked account, or money mule. Public accusations can expose personal data, compromise an investigation, or create legal risk. Give unredacted information to the platform, financial institution, or authorities instead.

Is a police blotter enough?

A blotter entry documents that a report was made, but the investigating office may require a sworn complaint, affidavit, identification, and supporting evidence before a formal case can proceed. Ask the receiving office what further steps are required.

Can DTI order a social-media platform to reveal the seller?

Platforms may be required to provide specified information when a competent authority issues the appropriate subpoena based on a sworn complaint satisfying the statutory conditions. A private complainant generally cannot compel disclosure merely by sending a message to the platform.

Official references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Rights, procedures, jurisdiction, and available remedies depend on the transaction and supporting documents. Official sources and reporting information were checked as of 19 September 2026.