Quick answer
If you paid an online seller or social media account and believe you were scammed, act immediately:
- Contact the sending bank, e-wallet, card issuer, or payment provider through its official fraud channel. Ask it to flag the transaction, secure your account, trace the transfer, and coordinate with the receiving institution. A report does not guarantee recovery, but delay may allow the funds to be withdrawn or moved again.
- Report the seller and transaction inside the shopping app or social media platform. Request cancellation, refund, preservation of account and transaction records, and disabling of the fraudulent listing or account.
- Report the incident to the PNP Anti-Cybercrime Group or the NBI cybercrime unit. This is the appropriate route for criminal investigation, especially when the seller disappeared, used a false identity, took payment without intending to deliver, sent a counterfeit or worthless item as part of a deceptive scheme, or accessed your account without permission.
- File a DTI consumer complaint if the transaction was with a business or online merchant. Use the DTI Consumer Complaints Assistance and Resolution System or the other official DTI channels described below.
- Preserve the evidence before messages, listings, profiles, or transaction records disappear.
Use only official contact details taken from the institution’s website or mobile app. Scammers sometimes impersonate bank personnel, police officers, investigators, or “recovery agents” after the first fraud.
Do these things immediately
Call the payment provider first
Report the transaction to the bank, e-wallet, card issuer, remittance company, or other provider that processed the payment. Use the fraud hotline in its official app, website, card, or account statement—not a number sent by the seller.
Provide:
- The transaction reference number, amount, date, and time
- Your account and the recipient’s account number, mobile number, or wallet identifier
- The recipient’s displayed name
- The seller’s profile, shop, page, phone number, email address, and URL
- A short explanation of how the deception occurred
- Copies of the payment confirmation and relevant messages
Ask for a case or ticket number and written acknowledgment. Specifically request:
- Immediate protection of your account
- Blocking or replacement of compromised cards or credentials
- A trace or recall, if available
- Coordination with the receiving institution
- Preservation of transaction and account-access records
- Information on the provider’s dispute or chargeback process
Under the Anti-Financial Account Scamming Act, Republic Act No. 12010, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction when the legal and regulatory conditions are met. The law contemplates coordinated verification among the institutions and account owners involved. It does not mean every victim automatically receives a refund or that funds will still be available when the report is made.
If you paid by credit or debit card, ask whether the transaction qualifies for a card-network dispute or chargeback. Follow the issuer’s documentary requirements and deadline; these vary by transaction and provider.
Secure any compromised accounts
If you disclosed a password, one-time PIN, card number, CVV, recovery code, identity document, or other sensitive information:
- Change the affected password immediately.
- Change any other account that uses the same or a similar password.
- Sign out unknown devices and sessions.
- Enable multi-factor authentication.
- Lock or replace the affected card, where appropriate.
- Tell your mobile provider if your SIM may have been compromised.
- Check account statements and notifications for other unauthorized transactions.
- Do not delete the scam messages after securing the account.
Never give an OTP, PIN, password, CVV, or remote access to anyone claiming that these are needed to reverse the transaction. A legitimate investigator or bank representative should not need your password or OTP.
Report the account and order to the platform
Use the platform’s in-app order dispute, buyer-protection, refund, and user-reporting tools. Report both the seller’s account and the specific listing, post, advertisement, or conversation.
Ask the platform to preserve:
- Registration and verification information
- Login and access records
- Listing and advertisement records
- Messages and order history
- Payment and withdrawal information within its control
- Delivery or logistics records
The Internet Transactions Act of 2023, Republic Act No. 11967, requires covered e-marketplaces and digital platforms to provide a responsive mechanism for reporting users or information that may violate the law. Covered platforms may also be required to provide specific seller information when a competent authority issues a subpoena in an investigation based on a sworn complaint.
Do not rely solely on the platform report. A platform may suspend an account without identifying or prosecuting the person behind it.
Where to report the scam
Different reports serve different purposes. It is often appropriate to report the same incident to the payment provider, platform, law enforcement, and—if it was a business-to-consumer transaction—the DTI.
PNP or NBI: criminal investigation
Republic Act No. 10175 designates the Philippine National Police and National Bureau of Investigation as law-enforcement authorities for cybercrime. Report to the:
- PNP Anti-Cybercrime Group, a regional or local cybercrime unit, or the nearest police station; or
- NBI cybercrime unit or the nearest NBI office.
The governing law is the Cybercrime Prevention Act of 2012, Republic Act No. 10175.
Bring or submit an organized evidence file. Be ready to execute a complaint-affidavit or sworn statement describing:
- Who contacted whom
- What product or service was offered
- The representations that caused you to pay
- When, where, and how payment was made
- What happened after payment
- Why you believe the conduct was fraudulent
- The amount and other losses involved
- Every identifier known for the seller and recipient account
An ordinary non-delivery dispute is not automatically a crime. Criminal liability depends on the evidence, including whether deception or fraudulent intent existed and whether the conduct satisfies the elements of a specific offense. Investigators or prosecutors may consider estafa, computer-related offenses, identity theft, financial-account scamming, or other laws depending on the facts.
Report promptly even if the amount is small or the offender’s real name is unknown. Investigators may need legal process to obtain subscriber, platform, and financial-account information. Republic Act No. 10175 contains preservation rules for computer data, but you should not assume that every service provider still has every record.
DTI: consumer redress against a business or online merchant
For a transaction with an online merchant, e-retailer, or business, file through the DTI Consumer CARe System. DTI also identifies consumercare@dti.gov.ph as a complaint channel. Current procedures and forms are available through the DTI Fair Trade Enforcement Bureau.
Include:
- Your complete name, address, email address, and contact number
- The respondent’s known name, address, and contact details
- A chronological narration of the facts
- The remedy you want
- Proof of payment and order records
- Messages, advertisements, receipts, delivery records, and photographs
- A copy of a government-issued ID, as required by DTI’s filing guidance
DTI’s mediation process is generally the first administrative step. If mediation fails, DTI may issue a Certificate to File Action, after which a formal adjudication complaint may be pursued. DTI states that no filing fee is charged for its consumer adjudication complaint when the requirements are complete.
For covered internet transactions, Section 24 of Republic Act No. 11967 generally requires the aggrieved party to use the platform’s or e-retailer’s internal redress mechanism before filing with a court, government agency, or alternative-dispute-resolution body. That mechanism is deemed exhausted if the complaint remains unresolved after seven calendar days.
Do not interpret that rule as requiring you to wait seven days before urgently notifying your bank, protecting an account, preserving evidence, or reporting an apparent crime to law enforcement.
BSP: unresolved complaint against a bank, e-wallet, or other supervised institution
First complain directly to the bank, e-wallet, or other BSP-supervised financial institution. If the institution does not resolve the concern, escalate it through the BSP Consumer Assistance Mechanism.
The BSP accepts escalations through its BSP Online Buddy and, as an alternative, through a completed Complaints, Inquiries and Requests form sent to consumeraffairs@bsp.gov.ph. Include:
- A clear summary of the complaint
- The resolution requested
- Your daytime contact information
- A copy of the complaint previously sent to the institution
- The institution’s reply, if any
- Supporting records
The BSP mechanism addresses the conduct of the supervised financial institution. It is not a substitute for a criminal report against the scammer.
When the DTI route may not apply
The Internet Transactions Act covers business-to-business and business-to-consumer internet transactions within the DTI’s mandate. It expressly excludes consumer-to-consumer transactions—for example, a genuinely private, one-off sale between two individuals that is not made in the ordinary course of business.
That exclusion does not legalize fraud. A buyer in a person-to-person social media transaction may still:
- Dispute the payment with the provider
- Report the account to the platform
- Report suspected criminal conduct to the PNP or NBI
- Pursue an appropriate civil remedy
A seller calling an account “personal” does not necessarily make every transaction consumer-to-consumer. Repeated selling, business representations, order-taking practices, or other evidence may show that the person was acting as a merchant. DTI or a court must assess the actual facts.
Your rights in a legitimate online sale
For covered online purchases, Republic Act No. 11967 preserves consumer remedies such as repair, replacement, refund, and other relief available under the Consumer Act and related laws when goods are defective, lost without the consumer’s fault, inconsistent with the warranty, or different from what was contracted for.
The law also requires covered online merchants and e-retailers to provide goods consistent with their description, type, quantity, quality, sample, picture, or model, subject to the statute’s terms. They must issue a paper or electronic invoice or receipt for sales.
The online merchant or e-retailer is generally primarily liable in a civil action or administrative complaint arising from the internet transaction. Platform liability is different and depends on the statutory conditions—such as failure to exercise the required diligence, failure to act after notice in specified circumstances, or failure to provide required contact details for a foreign merchant. A platform is not automatically liable for every scam committed through it.
A claim for damages under Section 28 of Republic Act No. 11967 must be filed before the court or DTI within two years from the time the cause of action arose. Other claims or offenses may be governed by different limitation or prescription rules, so do not use that two-year period as a reason to delay.
Evidence to preserve
Create one folder and save original-quality copies where possible. Preserve:
- The full URL and username of the seller’s profile, shop, page, listing, and advertisement
- Screenshots and screen recordings showing the profile, listing, price, description, comments, and date
- The complete conversation, including earlier messages and voice notes
- Order confirmations, invoices, electronic receipts, and tracking records
- Payment confirmations and transaction reference numbers
- Bank or e-wallet statements showing the debit
- Recipient account names, account numbers, wallet numbers, QR codes, and phone numbers
- Email addresses, website domains, and delivery addresses
- Photographs or video of the parcel, shipping label, packaging, and item received
- An unboxing video, if one exists
- Platform dispute records and case numbers
- Bank, e-wallet, DTI, police, or NBI acknowledgment numbers
- Any threat, request for additional payment, or offer to return money in exchange for withdrawing the complaint
Keep the original files. Editing, cropping, forwarding, or repeatedly compressing a file may remove useful metadata or context. Make a backup in a separate secure location.
Prepare a timeline listing each event with its date, time, amount, account, and supporting file. If several victims are involved, each person should preserve their own records and accurately describe only what they personally know.
What not to do
- Do not send an additional “release,” “verification,” “tax,” “insurance,” or “refund processing” payment.
- Do not pay a stranger who promises guaranteed recovery or claims to have inside access to a bank or police database.
- Do not post your full account number, address, ID, or transaction documents publicly.
- Do not threaten, hack, impersonate, or entrap the suspected scammer.
- Do not knowingly make a false or exaggerated report.
- Do not delete your account or conversation before preserving the evidence.
- Do not accept a private settlement without documenting its terms and confirming that cleared funds were actually received.
- Do not withdraw a complaint merely because the scammer sends a screenshot of a supposed refund.
Republic Act No. 12010 penalizes malicious or bad-faith reporting of completely unwarranted or false information when it results in a temporary hold on funds. Report honestly, separate what you personally observed from what you suspect, and correct any material error promptly.
When legal help is urgent
Consult a Philippine lawyer promptly when:
- The loss is substantial or involves several victims
- Your identity, SIM, email, bank account, or e-wallet was taken over
- Unauthorized transactions are continuing
- You received a subpoena, demand letter, or accusation that your own account was used as a money mule
- The scam involved an investment, lending scheme, cryptocurrency, real estate, insurance, or another regulated activity
- The seller or recipient is abroad
- The platform or financial institution refuses to preserve important records
- A filing deadline may be approaching
- You are being threatened, blackmailed, or pressured to withdraw a report
- You need to seek a court order, damages, or recovery from an identifiable respondent
Do not allow another person to use, rent, buy, or borrow your bank or e-wallet account to receive or transfer money. Under Republic Act No. 12010, knowingly using or allowing financial accounts to handle criminal proceeds, as well as buying, selling, lending, or recruiting accounts in prohibited circumstances, can result in serious criminal liability.
A practical complaint template
Use a factual subject line such as: Urgent fraud report—online purchase—PHP [amount]—transaction [reference number]
Then state:
On [date and time], I agreed to purchase [item or service] from [account or shop name] through [platform]. The seller represented that [key representation]. Relying on that representation, I sent PHP [amount] through [payment provider] to [recipient name and account identifier], transaction reference [number].
After payment, [briefly explain the non-delivery, blocking, substitution, false tracking, account takeover, or other conduct]. I attempted to resolve the matter on [dates], but [result].
I request that you flag and investigate the transaction, preserve all relevant records, coordinate with the receiving institution or platform where applicable, and advise me of the next formal steps. Attached are the payment record, complete conversation, listing, seller identifiers, and my timeline.
Adapt the request to the recipient. Ask the platform for refund and account preservation; ask the financial institution for tracing and account protection; ask law enforcement for investigation.
Frequently asked questions
Can I report a scam if I voluntarily sent the payment?
Yes. Voluntarily initiating a transfer does not prevent you from reporting deception. However, whether the provider must reimburse you, whether the funds can be held or recovered, and whether a crime can be proved depend on the facts, applicable rules, and available evidence.
Will the bank or e-wallet automatically refund me?
No. A complaint can trigger investigation, tracing, coordinated verification, or a temporary hold when legally justified, but recovery is not automatic. The outcome may depend on whether funds remain available, how the transaction was authenticated, what security controls were used, and what the investigation establishes.
Should I wait for the seller to respond?
You may send one clear written demand through the platform, but do not postpone reporting to the payment provider when funds or account security are at risk. For a covered online merchant dispute, preserve proof that you used the platform’s internal redress process and the date it was filed.
What if I know only the scammer’s username and account number?
Report anyway. Give investigators and providers every identifier you have. Platforms and financial institutions may possess information unavailable to you, although disclosure normally requires the proper legal or regulatory process.
What if the seller sent the wrong, fake, or nearly worthless item?
Use the platform dispute process immediately and preserve the parcel, label, packaging, listing, and unboxing evidence. File a DTI complaint if the seller was acting as a business or merchant. Report to law enforcement if the facts indicate deliberate deception rather than an ordinary mistake or quality dispute.
Can I report a social media marketplace transaction to DTI?
Yes, if the respondent was acting as an online merchant or business and the transaction falls within DTI’s jurisdiction. A genuine one-off consumer-to-consumer sale is excluded from the Internet Transactions Act, but suspected fraud may still be reported to the payment provider, platform, PNP, or NBI.
Should I name the alleged scammer publicly?
Public accusations can create privacy, harassment, evidentiary, or defamation risks, particularly if the account holder’s identity is uncertain or the account was compromised. Give the evidence to the platform, financial institution, DTI, and law enforcement. If you publish a warning, stick to provable facts and avoid disclosing unnecessary personal or financial information.
Is a police or NBI report enough to recover the money?
Not necessarily. A criminal report supports investigation and possible prosecution, but recovery may also require a payment dispute, platform refund process, DTI proceeding, civil claim, restitution order, or another remedy. Pursue the appropriate channels in parallel and keep all case numbers.
Official sources
- Internet Transactions Act of 2023—Republic Act No. 11967
- Anti-Financial Account Scamming Act—Republic Act No. 12010
- Cybercrime Prevention Act of 2012—Republic Act No. 10175
- DTI Consumer Complaints Assistance and Resolution System
- DTI guidance on filing a consumer complaint
- BSP Consumer Assistance Mechanism
This article provides general legal information, not legal advice or a prediction of the outcome of any complaint. Procedures and rights may depend on the payment method, platform terms, seller’s status, evidence, and other facts. Official sources and procedures were checked as of September 19, 2026.