Quick answer

If you paid an online seller or social media account and now suspect a scam, act immediately:

Contact your bank, card issuer, or e-wallet through its official channel. Ask it to block further transactions, secure the account, trace or recall the transfer if possible, and open a fraud or transaction dispute. Recovery is not guaranteed, but delay can reduce the chance of stopping the funds.
Report the seller, listing, conversation, and transaction to the shopping or social media platform. Request a refund, account restriction, and preservation of records. Keep the case number.
Save the evidence before posts, messages, or accounts disappear.
For a purchase from an online business, use the seller’s or platform’s internal complaint process first. Under the Internet Transactions Act, this remedy is considered exhausted if the complaint remains unresolved after seven calendar days.
File a consumer complaint with the Department of Trade and Industry (DTI) when the dispute involves an online merchant or business.
Report suspected criminal fraud to the CICC’s 1326 hotline, the Philippine National Police, or the National Bureau of Investigation. A refund complaint and a criminal report serve different purposes, so filing one does not necessarily replace the other.

If you disclosed an OTP, password, PIN, card details, identification document, or access to your device, treat the matter as an account-security emergency even if no money has left the account yet.

What counts as an online shopping or social media scam?

Common examples include:

A seller takes payment but never sends the item.
The parcel contains a different, counterfeit, damaged, or nearly worthless item.
A fake shop copies the name, photographs, or branding of a legitimate business.
A seller sends a payment link that steals login or card information.
An account impersonates a friend, relative, courier, brand, or customer-service representative.
A “seller” asks for repeated payments for insurance, customs charges, account activation, verification, or release of the parcel.
A supposed refund requires you to disclose an OTP, install a remote-access application, or send more money.
A hacked social media account is used to solicit payments from its contacts.

A late delivery, defective product, or disagreement over quality is not automatically criminal fraud. It may still support a consumer claim. Whether conduct amounts to estafa, computer-related fraud, identity theft, or another offense depends on the evidence and circumstances; investigators and prosecutors make that determination.

Do these steps first

1. Stop communicating through suspicious links

Do not send another payment merely because the seller promises to release the item or return the original amount. Do not click a “refund” or “verification” link supplied by the suspected scammer.

Use a different, trusted device if you believe your phone or computer may have been compromised.

2. Call the financial institution immediately

Use the telephone number in the bank or e-wallet’s official app, website, card, or account statement—not a number sent by the seller.

Ask the institution to:

block or secure the affected card, wallet, or account;
terminate suspicious sessions and connected devices;
stop, recall, or trace the transfer, if still possible;
identify the correct fraud or dispute procedure;
preserve transaction and recipient-account records;
provide a complaint or reference number; and
confirm any documents and deadlines required for a chargeback or transaction dispute.

Card, bank-transfer, and e-wallet remedies are not identical. Applicable filing periods can depend on the provider, payment network, transaction type, and account agreement. Do not wait for the seller or platform to respond before notifying the financial institution.

If your concern is not satisfactorily resolved, the Bangko Sentral ng Pilipinas requires consumers to complain first through the financial institution’s Financial Consumer Protection Assistance Mechanism. You may then escalate a matter involving a BSP-supervised institution through the BSP Online Buddy or submit the BSP complaint form to consumeraffairs@bsp.gov.ph with proof of your first-level complaint. (bsp.gov.ph)

BSP consumer assistance is a second-level complaint channel. It is not a substitute for immediately asking the bank or e-wallet to secure the account, and it does not itself guarantee reimbursement.

3. Secure affected accounts and devices

If you disclosed credentials or installed an application at the scammer’s direction:

change the password of the affected account and the associated email account;
use a unique password and enable multi-factor authentication;
sign out other devices or sessions;
remove unfamiliar forwarding rules, recovery details, linked accounts, and authorized applications;
contact your mobile provider if your SIM stopped working or you suspect a SIM takeover;
uninstall remote-access or unknown applications;
run security checks and update the device; and
warn contacts if your messaging or social media account was compromised.

Never disclose an OTP, PIN, password, recovery code, or full card security code to a person claiming to process a refund or investigation. BSP likewise warns against sharing sensitive credentials and identification documents in a consumer-assistance submission. (bsp.gov.ph)

Preserve evidence before reporting

Keep original files where possible. Screenshots are useful, but they should not be your only evidence.

Save the following:

the seller’s profile name, username, account ID, profile link, shop link, and listing URL;
screenshots or screen recordings showing the complete listing, account, comments, and conversation;
the date and time of each message, order, payment, promised delivery, and follow-up;
order confirmations, invoices, receipts, tracking numbers, and platform case numbers;
bank, card, e-wallet, or remittance records showing the amount, date, transaction reference, and recipient;
the recipient’s account name, account number, mobile number, QR code, and financial institution;
email headers, SMS messages, telephone numbers, and suspicious website addresses;
photographs and an uninterrupted unboxing video if an item arrived;
the parcel, waybill, packaging, and the item received;
recordings or notes of calls, including the number used and the substance of the conversation;
copies of the complaint sent to the seller, platform, bank, or e-wallet and every response; and
names and contact information of witnesses or other victims, if they voluntarily provide them.

Do not edit, crop, annotate, or re-save the only copy of a file. Keep a working copy and preserve the original with its metadata. Export the conversation if the platform allows it. Back up the evidence in a second secure location.

Do not publicly post the scammer’s alleged identification document, bank details, home address, or other personal information. Provide sensitive evidence directly to the platform, financial institution, or authorities.

Report the account and transaction to the platform

Use the shopping app’s or social network’s official reporting and dispute tools. Report both the specific listing or message and the seller’s account when the platform permits it.

Your report should state:

what was advertised;
what you paid and how;
what the seller represented;
what happened instead;
when you discovered the problem;
the remedy requested, such as refund or replacement; and
why the platform should preserve records or restrict the account.

Ask for written confirmation and a case number. Avoid moving the conversation outside the platform while a dispute is pending.

Republic Act No. 11967, the Internet Transactions Act of 2023, requires covered e-marketplaces and digital platforms to maintain a responsive mechanism for reporting unlawful users or content. It also requires marketplaces to maintain seller information and, in specified investigations based on a sworn complaint and lawful subpoena, provide information that may help identify an unknown perpetrator. (lawphil.net)

The seven-day internal-redress rule

For covered business-to-consumer internet transactions, an aggrieved party must ordinarily use the platform’s, marketplace’s, or e-retailer’s internal redress mechanism before filing with a court or government agency or using alternative dispute resolution. The mechanism is considered exhausted if the complaint remains unresolved seven calendar days after filing. Keep proof of the filing date. (lawphil.net)

This rule should not be read as a reason to delay:

notifying a bank or e-wallet about a fraudulent or unauthorized transaction;
securing a compromised account;
requesting emergency assistance;
preserving evidence; or
reporting an ongoing crime or immediate threat to law enforcement.

File a consumer complaint with DTI

DTI is the appropriate consumer regulator for many disputes involving online merchants, e-retailers, marketplaces, and social media businesses selling non-financial goods or services.

You may file through the DTI Consumer CARe portal or follow the DTI Fair Trade Enforcement Bureau’s complaint instructions. DTI’s published instructions also identify consumercare@dti.gov.ph as a complaint channel and provide options for regional or provincial filing. (consumercare.dti.gov.ph)

Prepare:

your complete name, address, email address, and contact number;
the respondent’s known name, address, email address, and contact details;
a chronological narration of the facts;
the specific remedy you want;
proof of the transaction and payment;
the listing, advertisements, and communications;
proof that you used the internal complaint process and its result, if any; and
a scanned government-issued ID, as required by DTI’s published instructions.

State facts precisely. If you do not know the seller’s legal name or address, say so and provide every identifier available.

What remedies may be available?

For goods that are defective, lost without the consumer’s fault, inconsistent with the description or warranty, or otherwise subject to the merchant’s contractual liability, the Internet Transactions Act recognizes remedies that may include repair, replacement, refund, or remedies under the Consumer Act and other applicable laws. When replacement or refund is chosen, return of the original goods must generally be at no cost to the consumer and within a reasonable period, unless the parties agree otherwise. (lawphil.net)

The online merchant or e-retailer is primarily liable in covered civil actions or administrative complaints. A platform’s liability is not automatic; the law sets specific circumstances for subsidiary or solidary liability, including certain failures to exercise ordinary diligence or promptly act after notice. (lawphil.net)

A damages claim under Section 28 of the Internet Transactions Act may be filed with DTI or a court within two years from the time the cause of action arose. Other claims or offenses can have different prescriptive periods, so do not assume this two-year period governs every possible case. (lawphil.net)

Important exception: private consumer-to-consumer sales

The Internet Transactions Act covers qualifying business-to-business and business-to-consumer internet transactions, including certain businesses reaching the Philippine market. It expressly excludes genuine consumer-to-consumer transactions—occasional private sales between end-users that are not made in the ordinary course of business. (lawphil.net)

A person repeatedly selling goods for profit may still be acting as an online merchant even if the account is informal or unregistered. The actual facts matter.

If the deal was a genuine private sale or simply a fictitious offer by a scammer, DTI may not be the principal route for recovery. Report the matter to the payment provider, platform, and law-enforcement or cybercrime authorities.

Report suspected fraud to cybercrime or law-enforcement authorities

CICC National Anti-Scam Hotline

Call 1326 to report an online scam to the Cybercrime Investigation and Coordinating Center’s national anti-scam response channel. DICT continues to identify 1326 as its scam-reporting hotline. (dict.gov.ph)

Have your evidence and transaction reference numbers ready. Record any report or ticket number given to you.

Philippine National Police

You may report to the nearest police station or appropriate PNP cybercrime office. Bring printed and electronic copies of the evidence, a government-issued ID, and a clear chronology. Ask what affidavit or sworn statement is required and obtain the desk or complaint reference.

If there is an immediate threat to life or safety, contact emergency services rather than relying only on an online report.

National Bureau of Investigation

The NBI Cybercrime Division and regional cybercrime offices accept complaints involving online scams and other computer-related offenses. The NBI’s published process may require a complaint form, supporting documents, a sworn statement or prepared affidavit, and examination of a relevant device. Its regional cybercrime cases follow the same complaint requirements described for the central Cybercrime Division. See the NBI procedure for victims of computer crimes and the NBI online complaint page. (National Bureau of Investigation)

Filing a report does not mean a crime has already been proven or that funds will automatically be recovered. Authorities may require further evidence before commencing or advancing an investigation.

Which law may apply?

The applicable law depends on how the scheme worked and what can be proved.

Republic Act No. 11967, Internet Transactions Act of 2023: regulates covered business-to-business and business-to-consumer internet transactions and establishes duties for online merchants, e-retailers, marketplaces, and digital platforms. It does not cover genuine consumer-to-consumer transactions.
Republic Act No. 7394, Consumer Act of the Philippines: provides consumer remedies and prohibits specified deceptive, unfair, or unconscionable sales practices.
Article 315 of the Revised Penal Code: may apply to estafa when deceit or another legally defined fraudulent means causes damage and all required elements are established.
Republic Act No. 10175, Cybercrime Prevention Act of 2012: may apply when an offense is committed through information and communications technologies or when conduct falls within a cybercrime specifically defined by the Act. Its application is fact-dependent. The official text is available through Lawphil. (lawphil.net)
Republic Act No. 12010, Anti-Financial Account Scamming Act: may apply to conduct involving money-mule accounts, social-engineering schemes, economic sabotage, or other prohibited misuse of financial accounts.

Do not select a criminal charge merely from the label used online. Give investigators the complete facts and records; they determine which offense, if any, the evidence supports.

A practical complaint format

Use a short chronological statement:

On [date and time], I saw [product or offer] on [platform and URL]. The account identified itself as [name and username]. The seller represented that [key promise]. On [date], I paid ₱[amount] through [payment method] to [recipient details], transaction reference [number]. The seller then [failed to deliver, blocked me, sent a different item, requested additional payments, or other conduct]. I contacted the seller and platform on [dates]. The result was [response or no response]. I request [refund, reversal, investigation, preservation of records, and/or account action]. Attached are the listing, messages, payment record, order documents, delivery evidence, and prior complaint records.

Separate what you personally observed from what you infer. Do not exaggerate the loss, alter screenshots, or identify a person as the offender solely because a bank or e-wallet account bears that person’s name; accounts and identities may themselves have been stolen or misused.

Common mistakes to avoid

Waiting for the seller’s promised refund before contacting the bank or e-wallet.
Sending “processing,” “verification,” “tax,” or “release” fees to recover the original payment.
Giving an OTP, PIN, password, recovery code, or remote access to a supposed investigator or support agent.
Deleting the conversation after blocking the account.
Keeping only cropped screenshots that omit usernames, URLs, dates, or transaction references.
Returning an item without documenting it or without using the platform’s official return procedure.
Closing the platform dispute because the seller promises to pay outside the platform.
Filing only with DTI when the transaction was a private C2C sale or an apparent criminal scheme.
Filing only a police report while missing a bank, card-network, e-wallet, or platform dispute deadline.
Paying a stranger who promises guaranteed recovery, tracing, or hacking of the scammer.
Publicly accusing or doxxing someone before their identity and involvement are established.
Using unofficial hotline numbers, email addresses, or links supplied by the suspected scammer.

When help is urgent

Seek immediate assistance when:

an unauthorized transaction is still pending;
you disclosed an OTP, PIN, password, card information, or identity documents;
the scammer has remote access to your device;
your SIM or email account suddenly stops working;
your account is being used to contact or defraud other people;
the scammer is threatening violence, extortion, or publication of private material;
a child or vulnerable person is involved;
the loss is substantial or involves several victims;
the platform may soon delete records; or
you received a subpoena, demand letter, prosecutor’s notice, or court document.

For a significant loss, disputed identity, cross-border transaction, or complex criminal complaint, consider consulting a Philippine lawyer promptly. The Public Attorney’s Office may assist qualified indigent applicants, subject to its requirements and conflict rules.

Frequently asked questions

Can the bank or e-wallet reverse my transfer?

Possibly, but not automatically. It depends on the transaction’s status, payment system, provider rules, available funds, and investigation. Report immediately and obtain a reference number. Do not describe a transaction you personally authorized as “unauthorized”; explain accurately that you were induced by fraud, if that is what occurred.

Should I report to DTI or the police?

Often both, but for different purposes. DTI handles covered consumer and trade disputes. Police, NBI, and cybercrime authorities investigate possible offenses. A platform or payment-provider dispute may also be necessary to pursue a refund or stop funds.

Must I wait seven days before doing anything?

No. The seven-calendar-day rule concerns exhaustion of the internal redress mechanism before an external consumer complaint, court action, or alternative dispute process under the Internet Transactions Act. Secure accounts, notify the payment provider, preserve evidence, and report an urgent or ongoing crime immediately.

Can I complain if I bought through Facebook, Instagram, or another social network?

Yes. Report the account and content through the platform. If the seller operates as a business, DTI consumer remedies may apply even though the transaction happened on social media. If it was a private C2C deal or fictitious offer, prioritize the payment provider and law-enforcement or cybercrime channels.

What if the seller deleted the account?

Report using the saved profile URL, username, account ID, telephone number, email address, recipient-account details, and transaction reference. Platforms and financial institutions may hold information that authorities can seek through lawful process. Deletion does not make your remaining evidence useless.

What if I received the wrong or counterfeit item?

Preserve the parcel, waybill, packaging, item, listing, and unboxing evidence. Use the platform’s return or refund process and complain to DTI if unresolved and within its jurisdiction. Counterfeit or regulated goods may also warrant referral to the proper enforcement agency.

Do I need the scammer’s real name?

Not necessarily to make an initial report. Provide every identifier you have and clearly state which details remain unknown. Do not guess. Identification and attribution may require records obtainable only through the platform, financial institution, telecommunications provider, or lawful investigative process.

Will reporting guarantee a refund or prosecution?

No. Recovery depends on factors such as timing, available funds, the payment method, platform protections, jurisdiction, and evidence. Criminal action likewise depends on investigation and proof of every required element. Prompt, accurate, well-documented reporting gives the proper institutions the best opportunity to act.

Official references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Rights, procedures, and available remedies depend on the evidence, transaction type, provider rules, and applicable law. Official sources and channels were checked on September 22, 2026.