Quick answer

If you paid an online seller or social-media account and believe you were scammed, act immediately:

Contact your bank, card issuer, e-wallet, or remittance provider through its official fraud channel. Ask it to secure your account, flag the recipient account, trace or recall the transfer if still possible, and give you a case or reference number.
Save the seller’s profile, advertisement, messages, order details, receipts, payment records, delivery information, phone numbers, URLs, and account details.
Report the seller and transaction through the platform’s internal complaint system.
Report the suspected crime to the Philippine National Police Anti-Cybercrime Group (PNP ACG), the nearest police station, the National Bureau of Investigation (NBI), or the Cybercrime Investigation and Coordinating Center (CICC).
If the transaction involved a business seller, file a consumer complaint with the Department of Trade and Industry (DTI).

Do not wait for the seller to stop replying before contacting the payment provider. Speed can matter when funds are still being processed, although no bank, e-wallet, platform, or government agency can guarantee recovery.

First, determine what happened

A disappointing purchase is not automatically a scam. The correct reporting route depends on the facts.

A transaction may indicate fraud when the seller used a false identity or representation to obtain payment—for example, advertising goods the seller never possessed, sending fabricated proof of shipment, impersonating a legitimate shop, or disappearing immediately after receiving money.

A transaction may instead be an ordinary consumer dispute when a genuine business delivered the wrong, defective, incomplete, or delayed item. Such conduct can still violate consumer law, but it does not necessarily prove criminal intent.

Some cases involve both. A buyer may pursue a refund or other consumer remedy while also reporting facts that reasonably suggest fraud. Describe what happened accurately; let the authorities determine the proper offense.

What to do immediately

1. Stop further loss

Do not send an additional “verification,” “release,” “insurance,” “tax,” or “refund processing” payment. Scammers often demand another transfer by claiming that it is necessary to return the first payment.

If you disclosed a password, one-time password, PIN, card security code, recovery phrase, or remote-access permission:

Call the affected financial institution using the number in its official app, website, or the back of the card.
Lock or freeze affected accounts and cards.
Change compromised passwords from a clean device.
Sign out other sessions and enable multifactor authentication.
Tell your mobile network if your SIM stopped working unexpectedly or you suspect a SIM-swap.
Check for unauthorized transactions and unfamiliar beneficiaries.

Never give an OTP, PIN, password, card security code, or cryptocurrency recovery phrase to someone claiming to investigate or reverse the scam.

2. Contact the payment provider

Report the transaction directly to the bank, e-wallet, card issuer, payment gateway, or remittance company. Provide:

The amount, date, and exact time of payment
The transaction or reference number
The recipient’s name, account number, mobile number, or wallet identifier
A short explanation of the deception
Screenshots and receipts
Any police or cybercrime report number already available

Ask the provider to:

Secure your account
Mark the transfer as suspected fraud
Check whether the transaction is pending or reversible
Preserve transaction and account records
Coordinate with the receiving institution when permitted
Explain its dispute or chargeback process
Issue a written acknowledgment or case number

Card chargeback, bank-transfer recall, e-wallet dispute, and marketplace refund rules differ. Follow the provider’s deadline and documentary requirements immediately; there is no single universal recovery period for every payment method.

If the provider does not resolve a complaint properly, use its formal consumer-assistance process first and then escalate an eligible complaint through the Bangko Sentral ng Pilipinas consumer-assistance channels. BSP escalation concerns the conduct of a BSP-supervised financial institution; it does not replace a criminal complaint against the scammer.

3. Preserve evidence before reporting the account

A platform may remove the post or suspend the account after receiving a report. Capture the evidence first, without continuing risky contact.

Preserve:

Full screenshots of the advertisement, product page, seller profile, username, page name, and URL
The account’s profile link, not only its displayed name
Complete chats, emails, SMS messages, voice messages, and call logs
Original image, video, and document files
Order numbers, invoices, receipts, shipping labels, and tracking records
Bank, card, e-wallet, or remittance confirmations
The recipient’s account name, number, QR code, wallet ID, and phone number
Promises about price, condition, delivery, refund, or authenticity
The dates and times of each event
The platform complaint and its response
Names and contact details of witnesses or other victims
Any demand letter or refund request

Keep original files when possible. Do not crop away usernames, timestamps, URLs, transaction references, or other context. Export chats if the service allows it, and keep backups in more than one secure location.

Do not publicly post your identification documents, bank statements, home address, or full account numbers. Give sensitive evidence only through verified official channels.

Report the account to the platform

Use the platform’s fraud, impersonation, prohibited-commerce, or transaction-dispute mechanism. For a marketplace order, open the dispute inside the order page before pressing any “order received” or similar confirmation.

Ask the platform to preserve:

Registration and verification information
Login and IP records
Messages and transaction records
Linked seller accounts
Payment and delivery information

The Internet Transactions Act of 2023 requires covered e-marketplaces and digital platforms to provide a responsive reporting mechanism. For covered business-to-consumer transactions, an aggrieved party must generally use the platform’s or e-retailer’s internal redress mechanism before filing a complaint with a court or appropriate government agency. The mechanism is deemed exhausted if the complaint remains unresolved after seven calendar days.

That rule should not be treated as a reason to delay urgent fraud-control measures, such as contacting the payment provider, securing a compromised account, or notifying law enforcement when funds, identities, or people remain at risk. It also does not apply in exactly the same way to every private person-to-person sale because consumer-to-consumer transactions are excluded from the Act’s coverage.

A suspended account is not the same as a criminal case, and a police report does not automatically produce a refund. Use the appropriate channels in parallel.

Report the suspected crime

You may report to one or more of the following:

The PNP Anti-Cybercrime Group or the nearest police station
The National Bureau of Investigation, including its cybercrime investigators
The Cybercrime Investigation and Coordinating Center, using the current reporting channel shown on its official website

Use only contact details published on an official government website. Beware of accounts claiming to be investigators who demand payment, an OTP, or remote access to your device.

Bring or attach:

A chronological statement of what happened
Your identification and contact details
The suspect’s profile links and known identifiers
Complete communications
Proof of payment
Platform and financial-institution case numbers
The remedy or assistance requested
Original electronic files, if requested

Ask for an acknowledgment, complaint number, police blotter entry, or other reference showing when and where you reported. Keep the name and office of the receiving officer.

A scam conducted through the internet may involve estafa under Article 315 of the Revised Penal Code, depending on proof of deceit, reliance, loss, and the other required elements. When a crime defined by the Revised Penal Code or a special law is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act of 2012 may apply. Other offenses may be relevant if the incident involved unauthorized account access, identity misuse, forged documents, threats, or unlawful handling of personal data. The proper charge and penalties depend on the evidence and cannot be determined merely from the fact that the transaction occurred online.

File a consumer complaint with DTI

DTI is appropriate when the complaint concerns an online merchant, e-retailer, marketplace, or other business selling non-financial goods or services. Use the current complaint channel identified on the DTI website or its official Consumer Complaints Assistance and Resolution System.

Before escalating a covered online transaction, file a written complaint through the merchant’s or platform’s internal redress system. Record the filing date. Under the Internet Transactions Act, that mechanism is deemed exhausted if the matter remains unresolved after seven calendar days.

Your DTI complaint should identify:

The buyer and business
The transaction date and amount
The goods or services promised
What was delivered—or not delivered
The seller’s response
Your platform complaint and its result
The remedy sought, such as repair, replacement, refund, or another lawful remedy
Supporting documents

The Internet Transactions Act recognizes repair, replacement, refund, and other remedies available under the Consumer Act of the Philippines when goods are defective, lost without the consumer’s fault, fail to conform to warranty, or otherwise create seller liability.

The Act generally makes the online merchant or e-retailer primarily responsible for indemnifying the consumer. A platform may have subsidiary or solidary liability only in circumstances specified by law; it is not automatically liable for every dishonest seller.

A claim for damages under Section 28 of the Internet Transactions Act must be filed in court or with DTI within two years from the time the cause of action arose. Other claims or offenses may have different limitation periods, so do not assume that this two-year period governs every remedy.

Special situations

The sale was between two private individuals

A casual consumer-to-consumer transaction is outside the coverage of the Internet Transactions Act. You may still:

Report the account to the platform
Notify the payment provider
Report suspected estafa or another offense to law enforcement
Consider a civil claim if the seller can be identified

Whether an account is genuinely private or is regularly conducting business is a factual question. Preserve evidence showing repeated listings, store branding, transaction volume, or representations that the seller operated a business.

The seller is overseas

The Internet Transactions Act can apply to a person availing of the Philippine market and having sufficient minimum contacts here, even without a Philippine office. Practical enforcement and recovery may nevertheless be harder when the suspect, assets, platform, or records are abroad.

Report locally and give investigators all foreign account, payment, telephone, shipping, and domain information. Do not pay a supposed foreign “recovery agent” without independently verifying the person and terms.

The scam used a stolen identity or impersonated a real shop

Notify both the platform and the person or business being impersonated through independently verified contact details. Make clear that your complaint is against the impersonating account unless evidence connects the real business to the transaction.

If your own identity or personal data were misused, secure affected accounts, obtain relevant records, and consider a complaint to the National Privacy Commission when the facts involve a possible violation of the Data Privacy Act.

The offer involved an investment, lending scheme, or regulated financial product

A promise of profit, trading returns, lending, insurance, securities, or virtual-asset services may fall outside an ordinary DTI retail complaint. In addition to notifying the payment provider and law enforcement, report the matter to the regulator responsible for the product, such as the Securities and Exchange Commission or BSP.

The parcel contained a different or worthless item

Keep the packaging, waybill, item, and unboxing evidence. Do not discard or alter them. Ask the courier how to preserve shipment records, but direct the refund claim through the seller or marketplace unless the courier itself caused the loss or substitution.

An unboxing video is useful but is not the only possible proof. Receipts, package weight, shipping records, photographs, messages, and witness testimony may also matter.

Common mistakes to avoid

Waiting several days before contacting the bank or e-wallet
Deleting the conversation out of embarrassment
Saving only the seller’s display name instead of the profile URL
Reporting the account before preserving its contents
Sending another payment to unlock a refund
Continuing to negotiate after threats or account compromise
Giving an alleged investigator an OTP or remote access
Editing screenshots so heavily that context is lost
Posting accusations, personal data, or account numbers publicly
Treating a platform report as a substitute for a financial or criminal complaint
Paying a “hacker,” “insider,” or recovery service that guarantees retrieval of the money
Claiming facts that cannot be supported by records

Stick to verifiable facts. A concise timeline with complete attachments is usually more useful than an emotional but undocumented accusation.

When legal help is urgent

Consult a Philippine lawyer promptly when:

The loss is substantial or involves several victims
The suspect’s identity or assets are known and immediate preservation may be necessary
A bank or platform denied access to important records
You received a subpoena, counter-complaint, threat, or settlement document
The scam involved identity theft, intimate material, blackmail, stalking, or threats of violence
A child, older person, or otherwise vulnerable person is being targeted
The transaction involves investments, cryptocurrency, property, a business acquisition, or cross-border parties
A filing or contractual deadline may be close
You are considering a civil action to recover money

For an immediate threat to life or safety, contact emergency services or the nearest police station at once.

Practical reporting checklist

Before submitting a complaint, confirm that you have:

Secured affected financial and online accounts
Reported the payment to the provider
Obtained provider and platform case numbers
Preserved original messages and files
Saved the account’s direct URL and identifiers
Written a dated timeline
Identified the exact amount lost
Recorded what remedy you requested
Filed the platform’s internal complaint where applicable
Reported suspected criminal conduct to an appropriate law-enforcement or cybercrime office
Filed a DTI complaint if the seller was acting as a business
Kept copies of everything submitted

Frequently asked questions

Can the bank or e-wallet reverse the payment?

Possibly, but not automatically. The result depends on the payment method, timing, recipient status, provider rules, and available funds. Report immediately and request a trace, recall, freeze, dispute, or chargeback as applicable.

Must I wait seven days before going to the police?

The seven-calendar-day rule concerns exhaustion of the internal redress mechanism for covered internet-transaction complaints. It should not be used to delay urgent account protection or the reporting of suspected crime. For a DTI consumer claim, document when you used the internal mechanism and whether seven days passed without resolution.

Can I report if I lost only a small amount?

Yes. The amount does not determine whether the information may help identify a repeat offender. Preserve the same quality of evidence and ask for a report reference.

Can I report a seller whose real name I do not know?

Yes. Provide the profile URL, usernames, phone numbers, email addresses, payment destination, QR code, transaction reference, delivery information, and any other identifiers. A platform may be compelled by competent authority to provide specified information under the conditions established by law.

Is a social-media account automatically liable because it accepted payment?

No. Liability depends on evidence of the person behind the account, the representations made, intent, payment, loss, and applicable law. Accounts may also be hacked or impersonated.

Will a police report guarantee that I get my money back?

No. Criminal investigation and financial recovery are different processes. A report may support investigation and requests for records, but recovery depends on factors such as traceability, remaining funds, responsible parties, and available legal remedies.

Should I confront or expose the suspected scammer publicly?

Usually, formal reporting is safer. Public confrontation may cause evidence to disappear, expose you to retaliation, disclose personal data, or create legal risk if statements are inaccurate. Preserve the evidence and submit it through verified channels.

What official laws should I read?

The principal sources include the Internet Transactions Act of 2023, the Consumer Act of the Philippines, the Cybercrime Prevention Act of 2012, and the Revised Penal Code provisions on estafa. Which provisions apply depends on the transaction, the parties, and the available evidence.

Disclaimer

This article provides general Philippine legal information, not legal advice or a prediction of the outcome of any complaint. Procedures, platform rules, and financial-provider deadlines can change, and the correct remedy depends on the evidence. Official sources and reporting channels were last checked on 19 September 2026.