Quick answer

If you paid an online seller or social-media account and believe you were scammed, act immediately:

Contact your bank, e-wallet, card issuer, or payment provider. Report the transaction as fraudulent or disputed, ask whether the receiving funds can be held or traced, secure your account, and obtain a case reference number.
Preserve the evidence before anything disappears. Save the listing, account URL, messages, payment records, delivery information, names, phone numbers, and screenshots showing dates and times.
Report the seller and transaction through the platform’s official complaint system. Request a refund, cancellation, account restriction, and preservation of account and transaction records.
Report suspected fraud to the PNP Anti-Cybercrime Group or NBI Cybercrime Division. A DTI complaint may also be appropriate when the dispute involves a business seller, online merchant, e-retailer, or marketplace.
Change passwords and contact your mobile provider if you disclosed an OTP, password, card details, identification document, or other sensitive information.

Do not wait for the seller’s next promise before contacting the payment provider. Speed matters because transferred funds may be moved through several accounts or withdrawn.

First determine what happened

Not every failed online purchase is automatically a criminal scam. The correct reporting route depends on the facts.

Possible fraud or estafa

Warning signs include:

the seller used a false identity or impersonated a legitimate shop;
the item apparently never existed;
the seller blocked you immediately after payment;
several buyers were directed to different bank or e-wallet accounts;
the seller supplied fabricated receipts, tracking details, permits, or identification;
a different, worthless, or empty package was sent as part of an apparent plan to obtain payment;
the account disappeared and reappeared under another name; or
the seller demanded repeated “release,” “insurance,” “customs,” or “verification” payments.

These circumstances may justify a criminal report. Depending on the evidence, the conduct may involve estafa under the Revised Penal Code, an offense committed through information and communications technology under the Cybercrime Prevention Act, computer-related fraud or identity theft, or offenses involving financial accounts.

Possible consumer dispute

A delayed parcel, defective item, incorrect product, denied warranty, or refund disagreement may primarily be a consumer complaint—especially if the seller is an identifiable and operating business. It can still become evidence of fraud if the surrounding facts show deception from the beginning.

Private seller versus business seller

The distinction matters. The Internet Transactions Act of 2023 generally covers business-to-business and business-to-consumer internet transactions within the DTI’s mandate. It expressly excludes consumer-to-consumer transactions, such as an occasional private sale not made in the ordinary course of business.

A transaction with a private seller may therefore fall outside that Act’s consumer-remedy framework. Fraud, estafa, identity theft, and other criminal laws may still apply.

What to do in the first few hours

1. Call the payment provider

Use only the bank’s or e-wallet provider’s official app, website, card, or published hotline. Tell the provider:

the transaction date, time, amount, and reference number;
the recipient’s account name, number, or mobile number;
why you believe the transaction is fraudulent;
whether you authorized the payment yourself or your account was accessed without permission;
whether you disclosed an OTP, PIN, password, card verification code, or recovery code; and
whether more unauthorized transactions may follow.

Ask the provider to:

mark the transfer as disputed or fraud-related;
coordinate with the receiving institution;
consider holding any remaining funds under applicable law and BSP rules;
block or replace compromised cards or credentials;
preserve transaction, device, access, and account records; and
give you a written acknowledgment and reference number.

The Anti-Financial Account Scamming Act allows covered financial institutions to temporarily hold funds involved in a disputed transaction under the conditions and period prescribed by the BSP. The statutory ceiling is 30 calendar days unless a competent court extends it. A report does not guarantee that money will still be available or that reimbursement will be approved.

If the institution does not satisfactorily address your complaint, escalate it through the BSP Consumer Assistance Mechanism. BSP generally requires you to complain to the financial institution first and provide its reference number.

2. Secure affected accounts

If you clicked a suspicious link or disclosed sensitive information:

change the affected password from a clean, trusted device;
change any other account using the same or a similar password;
sign out of other sessions;
enable multi-factor authentication;
remove unfamiliar devices, recovery addresses, and linked applications;
contact your mobile provider if your SIM stopped working unexpectedly;
scan the device for malicious software; and
monitor bank, e-wallet, email, and social-media activity.

Never give an OTP or remote access to someone claiming that it is needed to “reverse” the scam. Legitimate investigators and consumer agencies do not need your password or OTP.

3. Preserve the original evidence

Capture evidence before reporting the account to the platform, because suspension or deletion may make it harder for you to retrieve.

Keep:

the exact profile, page, shop, listing, and product URLs;
the username, display name, account ID, phone number, email address, and stated physical address;
screenshots and, when useful, screen recordings showing the full conversation;
the original chat export, emails, SMS messages, voice messages, and attachments;
the advertisement, product description, price, warranty, and promised delivery date;
the order confirmation, invoice, electronic receipt, and tracking information;
bank statements, transfer confirmations, QR codes, and transaction reference numbers;
the recipient’s account name and number;
photographs and an unedited unboxing video if something was delivered;
packaging, waybill, return label, and the item itself;
your platform, bank, courier, and seller complaint reference numbers; and
a short chronology written while events are fresh.

Where possible, retain original files rather than screenshots alone. Do not crop out dates, usernames, URLs, or transaction identifiers. Back up the evidence in a second secure location, but do not publicly post your full account numbers, identification documents, home address, or other sensitive data.

Where to report

Different reports serve different purposes. Filing with one office does not necessarily replace the others.

The selling platform or social-media service

Use the platform’s official order-dispute or fraud-reporting feature. State the remedy you want—such as cancellation, refund, replacement, or release of funds being withheld by the platform.

For a covered business-to-consumer transaction, the Internet Transactions Act generally requires an aggrieved party to use the platform’s, marketplace’s, or e-retailer’s internal redress mechanism before bringing the consumer dispute to a court or appropriate government agency. The mechanism is deemed exhausted if the complaint remains unresolved after seven calendar days.

That seven-day process should not be treated as a reason to delay an urgent report to your bank or law-enforcement authorities when funds, accounts, or evidence are at risk.

The Act also requires covered marketplaces and platforms to provide a responsive mechanism for reporting unlawful users or information. Authorities may obtain identifying information through the proper legal process; a platform ordinarily should not disclose another user’s private records merely because a buyer asks.

DTI for a business-to-consumer complaint

Use the DTI Consumer Complaints Assistance and Resolution System when the complaint concerns an online merchant, e-retailer, marketplace, or other covered business and you seek a consumer remedy such as repair, replacement, or refund.

Submit:

your contact information;
the merchant’s name and available contact details;
the order and payment records;
the listing and correspondence;
proof that you used the seller’s or platform’s internal redress process; and
the precise remedy requested.

Under the Internet Transactions Act, an online consumer may pursue repair, replacement, refund, or other remedies when goods are defective, lost without the consumer’s fault, fail to conform to the contract or warranty, or otherwise create merchant liability. The merchant is primarily liable for the transaction. Platform liability depends on statutory conditions and cannot be assumed in every case.

A claim for damages under Section 28 of that Act must be filed with the court or DTI within two years from the time the cause of action arose. Other claims or crimes may have different prescriptive periods.

PNP Anti-Cybercrime Group

The PNP is one of the law-enforcement authorities responsible for cybercrime cases under the Cybercrime Prevention Act of 2012. You may approach the PNP Anti-Cybercrime Group or the appropriate regional cybercrime unit.

Current PNP-ACG contact details are also listed on the official BSP scam-reporting page. Confirm details on an official .gov.ph source before sending sensitive documents.

Bring or submit:

a valid government-issued ID;
a written chronology;
the amount and method of payment;
the suspect’s account and contact details;
the original or best available electronic evidence;
payment and delivery records; and
copies of reports made to the bank and platform.

Ask for the complaint, blotter, or reference number and the investigator’s official contact details. A preliminary online report may still be followed by an interview, sworn statement, or personal appearance.

NBI Cybercrime Division

You may instead report to the NBI Cybercrime Division or another appropriate NBI investigative division. The NBI and PNP both have statutory cybercrime-enforcement authority. Choose the accessible agency, explain if you have already reported elsewhere, and give the existing reference number to reduce duplication.

The BSP’s official directory of scam-reporting channels lists current NBI contact information. Verify the address or appointment procedure before visiting.

CICC reporting channel

The Cybercrime Investigation and Coordinating Center provides a government channel for reporting cybercrime incidents. Use the CICC official reporting page and follow its current instructions. A CICC report may assist referral and coordination, but comply with any later request to file a formal complaint or sworn statement with the investigating law-enforcement agency.

BSP for an unresolved financial-service complaint

BSP handles complaints involving BSP-supervised financial institutions; it does not replace a criminal complaint against the scammer. Before escalating, first file with the bank, e-wallet issuer, remittance company, or other covered provider and retain its reference number.

Use the official BSP Consumer Assistance channels, including BSP Online Buddy where available. Do not submit an OTP, PIN, password, or full card security code.

NTC for scam texts or mobile numbers

If the scam involved SMS or a mobile number, block it and report it through your telecommunications provider’s official spam-reporting channel. The BSP Verifier and reporting directory also identifies the National Telecommunications Commission’s consumer channels.

An NTC or telco report does not by itself seek recovery of your money or begin a criminal prosecution.

National Privacy Commission when personal data are misused

Consider the National Privacy Commission when an organization improperly exposed, used, or failed to protect your personal data. Identity theft or fraudulent use of information should also be reported to law enforcement and affected financial institutions. A privacy complaint and a criminal complaint address different responsibilities.

What Philippine law may apply

The precise charge depends on the evidence, not simply on the label “online scam.”

Estafa committed through ICT

Taking payment through deceit may constitute estafa under Article 315 of the Revised Penal Code when its legal elements are established. If a Revised Penal Code or special-law offense is committed by, through, or with information and communications technology, Section 6 of the Cybercrime Prevention Act may apply.

Non-delivery alone does not automatically prove criminal intent. Investigators must examine what the seller represented, when the representation was made, whether it was false, whether the buyer relied on it, and whether damage resulted.

Computer-related fraud or identity theft

The Cybercrime Prevention Act separately penalizes specified forms of computer-related fraud and computer-related identity theft. These provisions may be relevant when computer data or systems were manipulated, or another person’s identifying information was intentionally acquired or used without right.

Financial-account scamming

The Anti-Financial Account Scamming Act covers defined money-muling activities and social-engineering schemes involving financial accounts. It also establishes mechanisms for coordinated verification of disputed transactions. Its application is fact-specific; the fact that payment went to an e-wallet or bank account does not by itself establish every element of an AFASA offense.

Consumer rights in online transactions

The Internet Transactions Act requires covered online merchants to provide accurate transaction information, issue paper or electronic invoices or receipts, and deliver goods that conform to their description, quantity, quality, condition, and agreed purpose. It also provides consumer remedies and allocates potential liability among merchants and platforms.

Common mistakes that weaken a report

Avoid:

continuing to send money to “unlock” a refund or parcel;
deleting the conversation out of embarrassment or anger;
reporting only a profile name without preserving its URL or account ID;
sending edited screenshots without retaining the originals;
waiting for the seller’s repeated extensions before notifying the bank;
confusing a platform refund request with a police complaint;
publicly accusing the wrong person based only on the name of a receiving account;
threatening, hacking, doxxing, or arranging your own entrapment;
submitting false or exaggerated information; or
paying someone who promises guaranteed recovery through an unofficial “hacker,” “agent,” or government contact.

A bank-account holder may be a participant, a money mule, an identity-theft victim, or another intermediary. Give investigators the evidence and avoid stating as established fact what has not yet been verified.

When legal help is urgent

Consult a Philippine lawyer promptly when:

the loss is substantial or involves several victims;
the scammer’s identity or location is known and immediate court action may be useful;
a bank rejects a significant unauthorized-transaction claim;
your identity documents or financial accounts were taken over;
you have received a subpoena, demand, counter-complaint, or threat;
the seller or platform is outside the Philippines;
the incident involves cryptocurrency, multiple financial institutions, or rapidly moving funds;
you need to pursue damages or a small-claims or regular civil case; or
a filing deadline may be approaching.

Call emergency services or go to the nearest police station immediately if there are threats of violence, extortion, stalking, sexual exploitation, danger to a child, or an ongoing attempt to access your home or accounts.

Frequently asked questions

Can the bank reverse an online transfer?

Not automatically. The result depends on the payment method, whether the transaction was authorized, whether funds remain available, applicable network and provider rules, and the investigation. Report immediately and request coordination with the receiving institution.

Should I report to DTI or the police?

Use DTI for a covered consumer dispute with a business seller and the PNP or NBI for suspected crime. In an apparent scam, you may need both. Also notify the payment provider and platform.

Must I wait seven days before reporting the scam?

For a covered consumer claim, the Internet Transactions Act requires use of the internal redress mechanism and deems it exhausted after seven calendar days without resolution. Do not delay an urgent bank, account-security, or law-enforcement report while waiting.

Can I report even if the amount is small?

Yes. A small loss may be connected to many other complaints. Preserve your evidence and obtain reference numbers. Practical procedures may vary with the facts and the investigating office.

What if the seller is abroad?

Report to the platform, payment provider, PNP or NBI, and DTI if the transaction is otherwise within its consumer jurisdiction. The Internet Transactions Act can apply where a party is in the Philippines or a covered seller or platform avails itself of the Philippine market and has the required minimum contacts. Actual enforcement and recovery abroad may be more difficult.

What if I paid cash on delivery?

Keep the parcel, waybill, packaging, item, receipt, and unboxing evidence. Report through the marketplace and courier. If there is evidence of deliberate deception, also report to law enforcement.

Will reporting guarantee a refund or arrest?

No. Refunds, account holds, prosecutions, and arrests depend on available funds, contractual rules, admissible evidence, identification of responsible persons, and the findings of the competent institution or authority.

Official references

This article provides general legal information, not legal advice or a prediction of any complaint’s outcome. Procedures and the proper remedy depend on the transaction, evidence, payment method, parties, and applicable agency rules. Official sources and reporting information were checked as of September 18, 2026.