Quick answer

If you paid an online seller or social-media account and suspect a scam, act immediately:

Contact your bank, card issuer, or e-wallet through its official fraud channel. Ask it to secure your account, flag the transfer as disputed or fraudulent, and determine whether the funds can still be held, traced, recalled, or charged back. Get a reference number.
Report the seller and transaction inside the shopping or social-media platform. Request cancellation, refund, account preservation, and removal of the fraudulent listing. Save the report number.
Preserve all evidence before the account, listing, or messages disappear.
Report the suspected crime to the CICC, PNP Anti-Cybercrime Group, NBI Cybercrime Division, or a police station.
For a business-to-consumer dispute, use the seller’s or platform’s internal complaint process, then file with the DTI if it remains unresolved.

These reports serve different purposes. A bank or e-wallet may help protect the payment trail; the platform may suspend the account or process a refund; the DTI handles covered consumer complaints; and law-enforcement agencies investigate possible crimes. Reporting to only one does not necessarily notify the others.

First, secure your money and accounts

Call or message the bank, card issuer, remittance company, or e-wallet using contact details shown in its official app, website, or the back of your card—not a number supplied by the seller.

Provide:

The amount, date, and exact time of payment
The transaction or reference number
The recipient’s account name, account number, mobile number, or wallet identifier
A short explanation of how the deception occurred
Whether you disclosed an OTP, password, PIN, card details, identification document, or account credentials
Whether the transaction was unauthorized or was authorized because of the scammer’s false representations

Ask the institution to:

Block or secure the affected account, card, or wallet
Record the transaction as disputed or fraud-related
Coordinate with the receiving financial institution
Preserve transaction, device, login, and recipient-account records
Explain any recall, dispute, or chargeback process and its deadline
Give you a written acknowledgment and case number

Do this even if the transfer already appears successful. Recovery is not guaranteed, but delay may allow the funds to be withdrawn or transferred again.

Under the Anti-Financial Account Scamming Act and its implementing rules, BSP-supervised institutions have mechanisms for handling disputed funds, including temporary holding and coordinated verification in qualifying cases. An initial hold may last up to five calendar days and may be extended under the rules, but a victim does not automatically receive a refund merely because a report was filed. The institution must assess the transaction and follow the applicable process. (bsp.gov.ph)

If the institution’s response is unsatisfactory, the Bangko Sentral ng Pilipinas treats its Consumer Assistance Mechanism as a second-level recourse. You must generally report first through the institution’s Financial Consumer Protection Assistance Mechanism or customer-service channel. You may then escalate through the BSP Online Buddy on the BSP website or, if BOB is unavailable, submit the BSP complaint form and proof of your first-level complaint to consumeraffairs@bsp.gov.ph. Do not send passwords, PINs, complete card numbers, or unnecessary identification documents to the BSP. (bsp.gov.ph)

Report the account and transaction to the platform

Use the platform’s official order-dispute, fraud-report, or buyer-protection feature. Report both:

The individual account, page, shop, or profile
The listing, advertisement, livestream, message, or order involved

State clearly that you are reporting suspected fraud—not merely leaving a poor review. Ask the platform to preserve account-registration data, login records, messages, listing history, and transaction details for lawful investigation.

For covered business-to-consumer internet transactions, the Internet Transactions Act generally requires an aggrieved party to use the platform’s, marketplace’s, or e-retailer’s internal redress mechanism before filing a consumer complaint with a court or appropriate agency. The mechanism is considered exhausted if the complaint remains unresolved seven calendar days after filing. Preserve proof of the filing date and the platform’s response. (lawphil.net)

Do not let this seven-day consumer-redress period delay an urgent fraud alert to your financial institution or a prompt report of suspected criminal activity to law enforcement.

Preserve evidence before blocking the scammer

Save original files when possible, not only cropped screenshots. Keep:

The seller’s profile name, username, account ID, page URL, shop URL, phone number, email address, and stated physical address
The complete listing, advertisement, product description, price, promised delivery date, and claimed warranty
The full conversation, including timestamps, voice messages, emails, and call logs
Order confirmations, invoices, receipts, tracking numbers, and delivery records
Bank, card, remittance, or e-wallet transaction receipts and reference numbers
The recipient’s account name and number or wallet identifier
Photos and an unedited unboxing video if an item arrived
Images of the parcel, shipping label, packaging, serial number, and the actual item received
Your reports to the seller, platform, financial institution, and government agencies
Any threats, demands for additional payment, or claims that you must pay a “release,” “verification,” “tax,” or “recovery” fee

Export chats or download account data if the platform permits it. Also record the URL and date captured because usernames and display names can change.

Keep the evidence in at least two secure locations. Do not edit the originals. When submitting documents, redact unrelated account balances, full card numbers, passwords, PINs, OTPs, and identification numbers unless an authorized investigator specifically requires them through a secure channel.

Where to report a suspected crime

CICC hotline

Call the government’s 1326 hotline, which accepts reports involving online scams and related cybercrime concerns. Government guidance describes it as a 24/7 reporting channel. You may also use the DICT-reported email address 1326@dict.gov.ph. (pia.gov.ph)

A hotline report can support rapid coordination, but ask whether you must also execute a sworn statement or submit documents to a law-enforcement office for a formal investigation.

National Bureau of Investigation

The NBI maintains an online complaint page and accepts requests for investigative assistance through its Cybercrime Division and regional offices. Its published procedure may require a complaint sheet, preliminary interview, sworn statement or affidavit, and examination of a relevant device. The service itself lists no filing fee. (National Bureau of Investigation)

The NBI’s current main-office information is available on its official contact page. Confirm the office and requirements before traveling.

Philippine National Police

You may report to the PNP Anti-Cybercrime Group, its regional cybercrime units, or the nearest police station. Use the official PNP-ACG website or official PNP channels to confirm current contact details.

Bring a government-issued ID, a concise written chronology, copies of your evidence, and your financial-institution and platform reference numbers. Be prepared to identify which statements are based on your personal knowledge and which came from the seller or another person.

Report immediately if the scammer is still communicating, another payment is being demanded, an account takeover is continuing, or an entrapment or preservation request may be possible. Do not arrange a confrontation or entrapment yourself.

When to file a DTI consumer complaint

The DTI route is most relevant when the transaction is between a consumer and a person or entity selling in the ordinary course of business—for example, an online shop, e-retailer, or commercial social-media seller.

After using the seller’s or platform’s complaint mechanism, you may file through the DTI Consumer CARe System. For Metro Manila complainants, DTI also identifies submission by complaint form or letter to consumercare@dti.gov.ph, or filing in person with the Fair Trade Enforcement Bureau. Consumers outside Metro Manila should use Consumer CARe or coordinate with the appropriate DTI regional or provincial office. (consumercare.dti.gov.ph)

Include:

Your complete contact details
The respondent’s known name and contact information
A clear chronological statement of facts
The amount paid and remedy requested
Proof of payment
The listing, order record, receipt, and relevant communications
Proof that you used the seller’s or platform’s redress process
The result, or proof that seven calendar days passed without resolution
Any bank, e-wallet, platform, police, CICC, or NBI reference numbers

Possible consumer remedies depend on the facts. For a defect, malfunction, loss not caused by the consumer, failure to comply with a warranty, or other contractual liability, the Internet Transactions Act recognizes repair, replacement, refund, and remedies available under the Consumer Act and other laws. A merchant may generally require the original goods to be returned without cost to the consumer when replacement or refund is chosen. (lawphil.net)

A covered consumer claim for damages under the Internet Transactions Act must be filed with the DTI or a court within two years from the time the cause of action arose. Other civil, administrative, criminal, contractual, card-dispute, and platform deadlines may differ, so do not treat two years as permission to wait. (lawphil.net)

Important exception for person-to-person sales

The Internet Transactions Act covers qualifying business-to-business and business-to-consumer transactions, but expressly excludes consumer-to-consumer transactions. A one-off purchase from another private individual may therefore fall outside that Act even when arranged through social media or a marketplace. (lawphil.net)

That exclusion does not make fraud lawful. Depending on the evidence, the conduct may still support:

A criminal complaint for estafa or another offense
Application of the Cybercrime Prevention Act when an information and communications technology system was used
A civil claim under the Civil Code
A financial-account fraud investigation
Enforcement of the platform’s own buyer-protection rules

Whether a case is genuinely consumer-to-consumer or an undisclosed commercial sale depends on the seller’s actual activity—not merely the label placed on the account.

What law may apply

A fake online sale may amount to estafa by false pretenses if the prosecution can prove the required elements, including fraudulent representation made before or at the time of the transaction, reliance, and resulting damage. Mere non-delivery, delay, poor service, or breach of contract does not automatically prove criminal fraud; intent and the surrounding evidence matter.

Section 6 of the Cybercrime Prevention Act applies crimes defined by the Revised Penal Code or special laws when committed by, through, or with the use of information and communications technologies, subject to the statute’s rules. (lawphil.net)

The Internet Transactions Act also imposes duties on online merchants, e-retailers, marketplaces, and digital platforms. The merchant is generally primarily liable in civil or administrative claims arising from the transaction. Platform liability is not automatic: subsidiary or solidary liability arises only under the specific statutory conditions, such as certain failures of diligence or failure to act after legally relevant notice. (lawphil.net)

If your identity or account was compromised

If you disclosed credentials or installed an app at the scammer’s instruction:

Disconnect the affected device from the internet if remote access may still be active.
Contact the financial institution from a different, trusted device.
Change the password of your primary email account first, then financial, shopping, and social-media accounts.
End unknown login sessions and enable multi-factor authentication.
Ask your mobile provider to protect your SIM if you suspect SIM replacement or loss of service.
Check whether recovery emails, phone numbers, or forwarding rules were changed.
Preserve suspicious apps, messages, and logs before deleting anything, unless leaving the device connected would create further loss.
Warn contacts if the compromised account has been used to solicit money.

If intimate images, threats, stalking, child exploitation, or immediate danger are involved, contact law enforcement urgently. Call 911 for an ongoing emergency.

Common mistakes that can weaken a report

Waiting for the seller’s repeated promises before notifying the payment provider
Deleting the conversation after blocking the account
Sending more money for a supposed refund, account release, customs charge, or recovery service
Posting the recipient’s full account details or identification documents publicly
Editing screenshots so heavily that dates, URLs, or account identifiers disappear
Treating a platform report as a police or NBI complaint
Filing only with law enforcement and missing a short card, bank, or platform dispute window
Exaggerating facts or naming an unverified person as the scammer
Giving an OTP, PIN, password, or remote access to someone claiming to be an investigator
Assuming that a business registration, verified badge, Trustmark, or familiar profile proves every transaction is legitimate

State facts precisely. Distinguish what you personally observed from what the seller claimed. A receiving account holder may be the principal offender, a participant, a money mule, or another victim whose account was taken over; investigators must establish the person’s role.

When legal help is urgent

Consider consulting a Philippine lawyer promptly when:

The loss is substantial or involves several victims
The seller or recipient is identifiable and assets may need to be preserved
The transaction involves a corporation, foreign seller, investment, cryptocurrency, or multiple financial institutions
You received a subpoena, demand letter, counter-complaint, or settlement document
The platform, merchant, or financial institution denies responsibility based on disputed facts
Sensitive personal data, identity theft, blackmail, or threats are involved
You are being asked to sign a waiver or quitclaim
A filing, platform, insurance, or financial-dispute deadline is approaching

A lawyer can assess the correct respondents, causes of action, venue, evidence, and whether civil, administrative, and criminal remedies should proceed together.

Frequently asked questions

Can the bank or e-wallet reverse the payment?

Possibly, but not automatically. The answer depends on the payment method, whether the funds remain traceable or available, the applicable dispute rules, and the facts of the authorization. Report immediately and obtain a case number.

Should I wait seven days before going to the police?

No. The seven-calendar-day rule concerns exhaustion of the internal redress mechanism for covered Internet Transactions Act complaints. It should not be treated as a waiting period before reporting suspected crime or attempting to protect funds.

Can I report a Facebook, Instagram, TikTok, or messaging-app seller to the DTI?

Yes, if the facts show a covered business-to-consumer transaction within DTI jurisdiction. If it was genuinely a private consumer-to-consumer sale, the Internet Transactions Act excludes it, although criminal and civil remedies may still be available.

Is non-delivery always estafa?

No. Non-delivery may be a consumer or contractual violation, but criminal estafa requires proof of its legal elements. False identity, fabricated inventory, repeated deceptive representations, immediate disappearance, and similar evidence may be relevant, but no single fact automatically decides the case.

Do I need the scammer’s real name?

No. Report the information you have, including usernames, URLs, account numbers, wallet identifiers, phone numbers, delivery details, and transaction references. Banks, platforms, and investigators may possess identifying records that are not available to you.

Will filing a report guarantee a refund or arrest?

No. Refunds, account holds, prosecution, and arrests depend on available evidence, applicable procedures, the movement of funds, jurisdiction, and the findings of the responsible institution or agency.

Official sources

This article provides general legal information, not advice for a particular case. Rights, remedies, evidence requirements, and deadlines can change according to the facts, payment method, platform rules, and governing law. Official sources and reporting procedures were checked as of September 22, 2026.