Quick answer

If you paid an online seller or social-media account and believe you were scammed, act immediately:

Contact the bank, e-wallet, card issuer, or payment provider through its official fraud channel. Report the transaction, ask it to secure your account, trace or recall the transfer, and preserve transaction records.
Save the evidence before the seller deletes or changes anything.
Report the seller and transaction inside the shopping or social-media platform. Ask for a refund, preservation of account data, and removal of the fraudulent listing.
Report the incident to the PNP Anti-Cybercrime Group, the NBI Cybercrime Division, or another police station or investigative office that can properly receive the complaint.
**For a business-to-consumer

Quick answer

If you have just paid a scammer, contact the bank, e-wallet, card issuer, or payment service immediately through its official fraud channel. Ask it to block further transactions, secure your account, trace or recall the payment, and preserve transaction records. Speed matters, but reporting does not guarantee recovery.

Then:

Save the listing, seller profile, messages, payment records, delivery information, and all other evidence.
Report the seller and transaction through the shopping or social-media platform.
For a business-to-consumer purchase, use the seller’s or platform’s internal complaint process. If unresolved after seven calendar days, you may escalate to the Department of Trade and Industry.
Report suspected fraud to the Philippine National Police Anti-Cybercrime Group, the National Bureau of Investigation, or another police unit. A police report and a consumer complaint serve different purposes, so one does not necessarily replace the other.
Change affected passwords and protect your identity if you disclosed an OTP, password, card details, ID image, selfie, or other personal information.

Do not send a supposed “recovery fee,” “verification payment,” or “tax” to anyone promising to retrieve your money. Recovery scams commonly target people who have already been victimized.

Act immediately if money was sent

Call the financial institution using the number in its official app, website, card, or account statement—not a number supplied by the seller. Provide:

The amount, date, and exact time of payment
Transaction or reference number
Your account and the recipient’s account, mobile number, wallet, or merchant details
The name of the shopping or social-media platform
A short explanation that the transaction is connected to suspected fraud
Any indication that your account credentials were compromised

Ask the institution to:

Flag the transaction as fraudulent or disputed
Attempt a recall, reversal, chargeback, or fund trace, whichever applies
Coordinate with the recipient institution
Restrict your account or replace your card if credentials may be exposed
Preserve relevant account and transaction records
Give you a case or reference number and written instructions for supporting documents

Different payment methods have different reversal rules. A card chargeback, an unauthorized account takeover, and a transfer you personally authorized after being deceived are not treated identically. Describe exactly what happened; do not label an authorized transfer “unauthorized.”

BSP-supervised institutions must maintain complaint-assistance mechanisms, including active 24/7 reporting channels for unauthorized or fraudulent transactions. If the institution does not resolve the matter, the complaint may be elevated through the BSP Consumer Assistance Mechanism. The BSP instructs consumers to complain to the financial institution first and retain its response, if any.

The Anti-Financial Account Scamming Act authorizes measures involving accounts and funds linked to disputed transactions. Whether funds can actually be held or recovered depends on factors such as how quickly the report was made, whether the money remains traceable, and what the institutions’ investigations establish.

Secure your accounts and identity

If the scam involved a suspicious link, remote-access application, fake payment page, OTP, or compromised account:

Disconnect a possibly infected device from the internet.
Using a trusted device, change the password of your email first, followed by banking, e-wallet, shopping, and social-media accounts.
Sign out other sessions and remove unknown devices.
Enable multi-factor authentication.
Call your bank or e-wallet and request appropriate account restrictions.
Lock or replace an exposed card.
Contact your mobile provider if your SIM stopped working unexpectedly or you suspect SIM takeover.
Check account statements, recovery-email settings, forwarding rules, and linked applications.
Preserve evidence before deleting suspicious messages or applications.

Never give an OTP, password, PIN, card verification code, or screen-sharing access to someone claiming to investigate the scam. Legitimate investigators may request records, but they should not need credentials that let them control your account.

Preserve evidence before profiles or messages disappear

Keep original electronic copies whenever possible. Useful evidence includes:

Screenshots and screen recordings showing the full seller profile, username, account URL, listing, price, and date
The original chat or email thread, including headers where available
Order confirmation, invoice, receipt, tracking number, and platform order ID
Bank, card, e-wallet, remittance, or cryptocurrency transaction records
The recipient’s account name, number, QR code, mobile number, wallet address, or exchange details
Telephone numbers, email addresses, website addresses, and shortened links
Photos or an unedited unboxing video if the item was fake, incomplete, damaged, or different from the listing
Shipping labels, packaging, waybills, and the item itself
The platform complaint, seller response, and all case-reference numbers
A chronological account of what happened, written while events are fresh
Names and contact details of witnesses, if any

Do not crop away usernames, timestamps, URLs, transaction references, or surrounding context. Export chats when the service allows it. Keep backup copies, but do not publicly post your complete IDs, bank details, home address, or other sensitive evidence.

A screenshot can be helpful, but its reliability may be challenged if its source and context cannot be established. Keep the original device and files when a substantial loss or criminal case is involved.

Report the account to the platform

Use the platform’s order-dispute or fraud-reporting function. Request:

Cancellation, refund, or buyer protection, if still available
Restriction of the seller’s account or listing
Preservation of registration, login, payment, and transaction records
A written case number and the platform’s decision

For covered business-to-consumer transactions, the Internet Transactions Act requires e-marketplaces and certain digital platforms to maintain mechanisms through which users may report unlawful accounts or information. It also requires an aggrieved party to use the platform’s or e-retailer’s internal redress mechanism before filing a complaint with a court or appropriate agency. That mechanism is considered exhausted if the dispute remains unresolved seven calendar days after filing. See sections 21, 22, and 24 of the Internet Transactions Act of 2023.

This seven-day rule concerns the ordinary consumer-redress sequence. It should not be treated as a reason to delay an urgent report to a bank or law-enforcement authority, especially while money is moving, an account is compromised, evidence may disappear, or other people remain at risk.

File a consumer complaint with the DTI

A DTI complaint is appropriate when the dispute concerns an online merchant, e-retailer, e-marketplace, or digital platform within the DTI’s consumer-protection jurisdiction. Examples include non-delivery, misrepresentation, a counterfeit or materially different item, refusal to honor a lawful remedy, or an ineffective redress mechanism.

Before escalating, ordinarily submit a written complaint through the seller’s or platform’s internal process and retain proof of the filing date. If it remains unresolved for seven calendar days, prepare:

Your name and contact details
The respondent’s known name and contact information
A clear chronology
The order and payment records
The advertisement and relevant messages
Proof of the internal complaint and its result, or proof that seven days passed without resolution
The remedy requested, such as refund, replacement, or other lawful relief

Complaints may be lodged through the DTI Consumer CARe System. The DTI’s E-Commerce Bureau may receive and refer internet-transaction complaints under the Act’s “no-wrong-door” policy.

The Internet Transactions Act generally covers business-to-business and business-to-consumer internet transactions connected to the Philippine market. It expressly excludes consumer-to-consumer transactions. A truly private, occasional sale between end-users may therefore fall outside that Act, although fraud, contractual, civil, and other laws can still apply.

The Act recognizes repair, replacement, refund, and other remedies in appropriate cases. It also states that a consumer may claim damages before a court or the DTI within two years from the time the cause of action arose. Do not wait until the deadline: platform remedies, payment disputes, evidence, and other legal claims may have different or shorter time limits.

Report suspected fraud to law enforcement

Deliberate deception used to obtain payment may amount to estafa or another offense, depending on the evidence. When committed through information and communications technology, the Cybercrime Prevention Act may also apply. The exact offense and responsible persons must be determined from the facts; non-delivery alone does not automatically prove criminal intent.

You may report to:

The PNP Anti-Cybercrime Group or an appropriate police station
The NBI Cybercrime Division through the National Bureau of Investigation
The Department of Justice Office of Cybercrime, following its published cybercrime-reporting guidance

Bring printed and electronic copies of your evidence, a valid ID, and a concise chronology. Be prepared to execute a sworn complaint-affidavit describing facts within your personal knowledge and identifying supporting attachments. If several people were victimized, each person should preserve their own evidence and transaction trail.

A platform report, police blotter entry, incident report, or tip does not necessarily begin a criminal prosecution. Investigators may require a formal sworn complaint and additional evidence; a criminal complaint may ultimately be evaluated by the appropriate prosecutor. Obtain the receiving officer’s name, office, date, and reference number, and ask what the next procedural step is.

The governing provisions may include the Revised Penal Code on estafa and section 6 of the Cybercrime Prevention Act of 2012. Liability cannot be determined solely from screenshots or from the fact that a seller stopped replying.

If the payment provider does not resolve the complaint

For a bank, e-money issuer, or other BSP-supervised financial institution:

File first with the institution’s consumer-assistance unit.
Keep the complaint number, your submission, and the institution’s written response.
If unresolved, use the BSP Online Buddy or submit the required complaint materials through the BSP Consumer Assistance Mechanism.

BSP escalation addresses the conduct and complaint handling of the supervised institution. It is not a substitute for reporting the suspected offender to law enforcement, and it does not guarantee reimbursement.

If the provider is regulated by another financial regulator—such as the Securities and Exchange Commission, Insurance Commission, or Cooperative Development Authority—the proper escalation channel may differ. The Financial Products and Services Consumer Protection Act assigns jurisdiction according to the type of provider and financial product.

What the law generally requires from online businesses

Under the Internet Transactions Act:

Online merchants and e-retailers are primarily liable to consumers in civil actions or administrative complaints arising from their transactions.
E-marketplaces must, as far as practicable, collect identifying and contact information from merchants and maintain an updated list.
Platforms must provide an effective and responsive reporting mechanism.
An e-marketplace or platform can incur subsidiary or solidary liability only in the specific circumstances defined by law; liability is not automatic merely because a scammer used the service.
A competent authority may compel certain seller information during an investigation based on a sworn complaint when the complainant cannot identify the perpetrator.
DTI may issue compliance or takedown orders in circumstances specified by the Act.

These rules do not mean that a consumer can demand a scammer’s private registration or login records directly from a platform. Such records may require lawful process, including a subpoena or other appropriate order.

Common mistakes that can weaken a report

Waiting for repeated promises that a refund is “being processed”
Continuing to send money for release fees, insurance, taxes, or verification
Deleting the chat after reporting the seller
Blocking the scammer before saving the full profile and messages
Sending only cropped screenshots with no dates, URLs, or transaction numbers
Filing against the display name without recording the account URL or payment recipient
Describing an authorized transfer as an account takeover
Posting the recipient’s personal data publicly instead of giving it to the proper institution
Assuming a verified badge, business registration, receipt, or Trustmark proves that every transaction is genuine
Treating a platform report as a criminal complaint—or a police blotter as a request for refund
Paying a private “hacker,” “asset recovery agent,” or supposed government employee who promises guaranteed recovery

Report truthfully and separate what you personally observed from what you inferred. False accusations or the unnecessary public disclosure of another person’s private information can create separate legal problems.

When legal help is urgent

Consult a Philippine lawyer promptly when:

The loss is substantial or involves business funds
Several victims or multiple recipient accounts are involved
The scammer used your identity, account, or business name
Intimate images, threats, blackmail, or extortion are involved
You received a subpoena, prosecutor’s notice, court document, or demand letter
A financial institution says you may be liable for loans or transactions you did not make
Cryptocurrency, an overseas seller, or a foreign platform complicates tracing
The respondent’s identity must be obtained through compulsory legal process
A filing deadline may be approaching
You are considering a civil action, provisional remedy, or application to preserve or restrain assets

If there is an immediate threat to safety, ongoing extortion, or risk of physical harm, contact emergency services or the nearest police station at once. Do not arrange an in-person confrontation with the seller.

FAQ

Can I get my money back?

Possibly, but not automatically. Recovery depends on the payment method, how quickly the transaction was reported, whether the funds remain traceable, platform rules, and the evidence. File reports promptly even if the institution initially says the transfer was completed.

Should I report to DTI or the police?

Often both. DTI handles covered consumer and e-commerce issues, including redress against businesses and regulated platforms. Police or the NBI investigate possible crimes. Your bank or e-wallet must also be contacted separately when money or account security is involved.

Must I wait seven days before going to the police?

The Internet Transactions Act’s seven-day exhaustion rule applies to the internal consumer-redress process before an ordinary complaint is filed with a court or appropriate government agency. It should not postpone urgent fraud containment, account security, evidence preservation, or law-enforcement contact where delay may cause further harm.

What if I bought from an individual social-media account?

If the seller was acting as an online merchant in the ordinary course of business, consumer laws may apply even if the account looked informal. A genuinely private consumer-to-consumer sale is excluded from the Internet Transactions Act, but contractual remedies and criminal laws may still apply. The seller’s actual course of conduct matters.

Is failure to deliver automatically estafa?

No. Criminal fraud ordinarily requires proof of the elements of the offense, including deceit and its connection to the loss. A delayed shipment, breached contract, or refund dispute may be civil or administrative rather than criminal. Investigators and prosecutors determine the proper characterization from the evidence.

Can the platform reveal the seller’s identity to me?

Not necessarily. Platforms have privacy and data-protection duties. The Internet Transactions Act provides for disclosure of specified information to competent authorities under lawful process in an investigation based on a sworn complaint.

What if the seller is abroad?

Report to the platform, payment provider, and Philippine authorities anyway. The Internet Transactions Act can apply to an overseas online business that avails itself of the Philippine market and has the required minimum contacts, but investigation, service of process, enforcement, and recovery may be more difficult.

Do I need a lawyer to make the first report?

Usually not. You can immediately notify the platform, financial institution, DTI, police, or NBI yourself. Legal assistance becomes especially useful for substantial losses, complex evidence, disputed account liability, compulsory disclosure, or court and prosecutor proceedings.

How long should I keep the evidence?

Keep it until all disputes, investigations, appeals, and possible proceedings are conclusively finished. Retain original files and secure backups rather than relying only on platform access.

Official references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Procedures and available remedies depend on the facts, documents, payment method, and agency jurisdiction. Official sources were checked as of September 11, 2026.