Quick answer

If you have been scammed through an online shop, marketplace, Facebook, Instagram, TikTok, Messenger, or another digital platform in the Philippines, act immediately:

Call the bank, e-wallet, card issuer, or payment provider and report the transaction as fraudulent. Ask whether the transfer can be stopped, traced, disputed, or temporarily held.
Report the seller or account through the platform’s complaint system. Request a refund, account preservation, and removal of the fraudulent listing.
Report the incident to law enforcement through the government’s 24/7 Hotline 1326, the Philippine National Police, or the National Bureau of Investigation.
File a consumer complaint with the Department of Trade and Industry (DTI) if the case involves an online merchant, marketplace, defective or undelivered goods, deceptive selling, or refusal to refund.
Preserve all evidence before accounts, listings, or messages disappear.

These remedies serve different purposes. A bank report may help protect or trace funds; a platform complaint may secure a refund or disable an account; a DTI complaint seeks consumer redress; and a police or NBI complaint may lead to a criminal investigation. Filing through only one channel does not necessarily start action in the others.

Do these things immediately

1. Contact the payment provider

Use the official hotline, app, website, or branch of the bank, e-wallet, card issuer, remittance company, or payment service involved.

Tell the provider that:

the transaction resulted from an online scam or was unauthorized;
you dispute the transaction;
you want the recipient account identified and the funds traced or held, if legally and operationally possible;
you want access to your account secured; and
you need a complaint or reference number and written confirmation.

Provide the transaction date, amount, reference number, recipient name and account details, and a short explanation of what happened.

Under the Anti-Financial Account Scamming Act, covered financial institutions may temporarily hold funds involved in a disputed transaction while verification is conducted. BSP Circular No. 1215 implements rules on temporary holding and coordinated verification for covered electronic fund transfers. A report does not guarantee that money will be frozen or returned: the result depends on how quickly the report is made, whether funds remain traceable, and the evidence and verification findings.

If you disclosed a password, PIN, one-time password, card security code, recovery code, or identification document:

change the affected password immediately;
sign out other devices or sessions;
lock or replace compromised cards;
activate stronger authentication;
check for newly added payees, devices, loans, or transfers; and
change any other account that used the same password.

Do not send sensitive credentials to someone claiming to be an investigator. The Bangko Sentral ng Pilipinas states that its consumer-assistance process does not require a consumer’s PIN, password, full card or ATM details, passbook, passport, or identification cards.

2. Report through the shopping or social-media platform

Use the platform’s official dispute, refund, or report function. Do this even if the scammer has blocked you or deleted the listing.

Ask the platform to:

preserve the seller’s registration and transaction records;
stop payment release, if it still controls the funds;
suspend the fraudulent account or listing;
process a refund under its buyer-protection rules; and
provide a complaint reference number.

Under the Internet Transactions Act of 2023, an aggrieved party generally must first use the platform’s, marketplace’s, or e-retailer’s internal redress mechanism before filing a complaint with a court or appropriate government agency. That internal remedy is deemed exhausted when the complaint remains unresolved for seven calendar days after filing.

This exhaustion rule should not be treated as a reason to delay an urgent bank or criminal report. If funds are still moving, an account has been taken over, evidence is disappearing, or someone faces immediate danger, contact the payment provider and law enforcement at once.

3. Call Hotline 1326 or approach law enforcement

The Cybercrime Investigation and Coordinating Center’s Hotline 1326 is a government reporting channel for scams and other online harms. Government guidance describes it as operating 24 hours a day.

You may also report to:

the PNP, including its Anti-Cybercrime Group or the nearest police station; or
the NBI Cybercrime Division or an appropriate NBI regional or district office.

The NBI’s published procedure provides for an initial interview, a sworn complaint sheet or affidavit, submission of supporting documents and witness statements, and examination of a relevant device when necessary. The NBI also maintains an online complaint page and an official office directory.

Ask for a report, complaint, or reference number. Record the name and office of the receiving officer and the date of submission.

A law-enforcement report is especially important when:

money was sent to a fraudulent account;
the seller used a false identity or impersonated another person or business;
several victims appear to be involved;
the scammer is threatening, blackmailing, or extorting someone;
an account was hacked or taken over;
identification documents or financial credentials were stolen; or
the platform or payment provider says it needs an official request, subpoena, or police report.

What evidence should you preserve?

Save evidence before asking the scammer questions or warning the account that you intend to report it.

Preserve:

the complete listing, advertisement, product description, price, and seller profile;
the account username, profile URL, page ID, phone number, email address, and displayed business details;
the full conversation, including dates and times;
payment receipts, deposit slips, transaction confirmations, reference numbers, and recipient-account details;
order records, invoices, tracking information, delivery records, and unboxing videos;
the seller’s promises, refund policy, warranties, and representations;
emails in their original form, including headers when available;
links to cloned websites or payment pages;
recordings or call logs, if lawfully obtained;
the names and contact details of witnesses;
your reports to the platform and financial institution and their responses; and
a chronological account of what happened.

Take screenshots, but also retain original messages, emails, files, devices, and app records. Screenshots can be useful, but their authenticity may still need to be established under the Rules on Electronic Evidence. Avoid cropping away usernames, dates, URLs, transaction numbers, or other identifying context.

Do not alter files, fabricate conversations, access the suspect’s account, or publish sensitive account details online. Give unredacted evidence only through legitimate complaint channels; use redacted copies for public warnings.

File a DTI consumer complaint

A DTI complaint is appropriate when the matter involves an online merchant or e-retailer and concerns issues such as:

goods that were not delivered;
an item materially different from the listing;
defective, unsafe, counterfeit, or misrepresented goods;
deceptive or unfair sales practices;
refusal to honor a lawful repair, replacement, refund, or warranty remedy; or
failure of a marketplace or merchant to address a properly filed complaint.

File through the DTI Consumer CARe System. DTI guidance also identifies consumercare@dti.gov.ph and in-person filing as available channels.

A complaint should contain:

your complete name and contact information;
the respondent’s known name, address, email, phone number, account, and platform;
a clear chronological narration;
the specific remedy requested, such as refund, replacement, repair, or payment of damages;
proof of the transaction;
proof that you used the platform’s internal redress process; and
a government-issued ID when required by the filing procedure.

The Internet Transactions Act generally makes the online merchant or e-retailer primarily liable for consumer claims arising from the transaction. A marketplace or digital platform may also incur subsidiary or solidary liability in the specific circumstances stated in the law—for example, certain failures to exercise the required diligence, provide merchant contact details, or act on legally prohibited or dangerous listings. Platform liability is not automatic and depends on the facts and statutory conditions.

For defects, malfunction, loss without the consumer’s fault, breach of warranty, or failure to conform to the contract, available remedies may include repair, replacement, refund, or other remedies under the Consumer Act and related laws.

A claim for damages under Section 28 of the Internet Transactions Act may be filed before the court or DTI within two years from the time the cause of action arose. Other criminal, civil, administrative, contractual, or platform deadlines may differ. Do not wait for the two-year period to approach before acting.

Is an online shopping scam a crime?

It can be, but not every failed delivery or refund dispute is automatically criminal.

A deliberate scheme in which a person makes a false representation before or at the time of payment, induces the buyer to rely on it, obtains money or property, and causes damage may constitute estafa under Article 315 of the Revised Penal Code. The Supreme Court has identified reliance on a prior or simultaneous fraudulent representation and resulting damage as essential considerations in estafa by false pretenses.

When an offense under the Revised Penal Code or a special law is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act of 2012 may apply. The exact charge depends on the acts, evidence, identity and participation of the accused, and applicable law; the word “scam” by itself does not determine the offense.

The Anti-Financial Account Scamming Act also prohibits conduct involving money-mule accounts, social engineering schemes, and other misuse of financial accounts. Account holders who knowingly sell, lend, or allow their accounts to be used for fraudulent transfers may face liability even if they did not personally communicate with the victim.

A genuine business dispute—such as delay, poor service, or inability to perform—may instead require consumer, contractual, or civil remedies unless fraudulent intent and the elements of an offense can be established.

If the payment involved a bank, e-wallet, or card

The first complaint must go to the financial institution’s own Financial Consumer Protection Assistance Mechanism or official customer-service channel.

If the institution is supervised by the BSP and its response is unsatisfactory, escalate the matter through the BSP Consumer Assistance Mechanism. The BSP describes this as a second-level recourse, not a substitute for first reporting to the institution.

You may may use:

the BSP Online Buddy available through the BSP consumer-assistance page; or
the official Complaint/Inquiry/Reply form sent to consumeraffairs@bsp.gov.ph, with proof of the prior complaint to the institution.

BSP consumer assistance facilitates resolution with the regulated institution. It does not conduct the criminal investigation or guarantee reimbursement. Criminal activity should also be reported to the PNP, NBI, or CICC.

Card chargeback, e-wallet adjustment, transfer recall, and platform buyer-protection periods are governed by the relevant provider’s rules and transaction type. These periods may be much shorter than legal prescriptive periods, so request the applicable deadline immediately and submit the dispute in writing.

If personal data or identification documents were misused

If the scam involved unauthorized collection, disclosure, or use of your personal information, notify the organization responsible in writing and ask it to:

stop further processing or disclosure;
secure the affected account;
identify what information was compromised;
correct or delete unlawfully processed information when legally available; and
explain its remedial action.

A qualifying privacy complaint may be filed with the National Privacy Commission. Under the NPC’s published complaint procedure, the complainant generally must first notify the respondent in writing and give it an opportunity to act. Proof of this step must accompany the complaint, and the remedy is ordinarily considered exhausted if the respondent fails to take timely or appropriate action or does not respond within 15 calendar days of receiving the written notice.

The NPC process is for privacy violations or personal-data breaches. It is not a replacement for reporting theft of funds or criminal fraud.

If copies of your ID were taken, monitor financial accounts and services that could be opened in your name. Promptly report unfamiliar accounts, loans, SIM registrations, password-reset messages, or credit inquiries to the institution concerned and to law enforcement.

Common mistakes to avoid

Waiting for the scammer’s promised refund. Delay may allow funds to be withdrawn and evidence to disappear.
Reporting only to the social-media platform. A platform report does not automatically notify the bank, DTI, PNP, NBI, or CICC.
Deleting chats after taking screenshots. Keep the original conversation and device whenever possible.
Sending more money to “unlock” a refund. Recovery fees, taxes, verification deposits, and account-release payments are common follow-up scams.
Trusting unofficial recovery agents. No private person can guarantee recovery, freezing of funds, or an arrest.
Posting full account numbers or IDs publicly. This may expose victims or innocent account holders and create further privacy or security risks.
Making threats or arranging an uncoordinated confrontation. Give the information to investigators, particularly when an entrapment operation may be considered.
Assuming a small loss cannot be reported. The amount may affect the applicable charge or penalty, but it does not make the incident irrelevant; related reports can help identify a larger scheme.
Describing guesses as facts. Separate what you personally observed from what you infer about the account holder or seller.

When legal help is urgent

Consider consulting a Philippine lawyer promptly when:

the amount or business loss is substantial;
several victims, companies, or jurisdictions are involved;
the suspect is known and a demand, civil action, or provisional remedy may be appropriate;
the platform or financial institution refuses to preserve or disclose records;
you are being accused of participating as an account holder or money mule;
identification documents, confidential business data, or intimate material were taken;
the scam includes threats, extortion, stalking, or risk of physical harm;
a complaint was dismissed or a prosecutor, regulator, or court has issued a deadline; or
you need to determine the correct criminal, civil, administrative, or privacy remedy.

For threats of violence, an ongoing account takeover, or another immediate emergency, contact the authorities without waiting for a platform’s seven-day internal period.

Frequently asked questions

Can the bank or e-wallet return my money?

Possibly, but reimbursement is not automatic. It depends on the transaction type, applicable consumer-protection rules, how the transaction was authorized, the provider’s investigation, how quickly it was reported, and whether funds can still be held or traced.

Should I report an “authorized” transfer that I made because of deception?

Yes. Explain that you initiated the transfer because of fraudulent representations. Do not inaccurately describe it as an unauthorized transaction if you personally approved it; the distinction can affect how the institution investigates the case.

Can I report an anonymous or deleted social-media account?

Yes. Preserve the profile URL, username, page ID, messages, recipient-account information, and transaction record. Under the Internet Transactions Act, a marketplace may be required to provide specified merchant information when a competent authority issues a subpoena based on a sworn complaint meeting the law’s requirements.

Must I know the scammer’s real name before reporting?

No. Report every identifier you have. Law-enforcement authorities may seek subscriber, platform, or financial records through the lawful processes applicable to the case.

Is a barangay blotter enough?

A barangay record may document that you reported an incident, but it ordinarily does not replace a report to the payment provider, platform, DTI, PNP, NBI, CICC, or another agency with jurisdiction over the particular remedy.

Can DTI arrest the scammer?

DTI handles consumer-protection and administrative matters. Criminal investigation and prosecution involve law-enforcement agencies, prosecutors, and the courts. The same incident may justify both a DTI complaint and a criminal report.

Should I continue talking to the scammer?

Preserve existing communications first. Do not send more money, reveal investigation plans, impersonate another person, or conduct your own entrapment. Follow the instructions of the bank, platform, or assigned investigator.

Is there a single deadline for reporting?

No. The platform’s internal-remedy period, DTI or court deadlines, criminal prescription, bank dispute rules, chargeback periods, and privacy procedures are different. The Internet Transactions Act provides a two-year period for its damages claim, but waiting can seriously reduce the chance of preserving evidence or recovering funds.

Official references and reporting links

This article provides general legal information, not legal advice or a prediction of any complaint’s outcome. Applicable remedies depend on the documents, payment method, conduct of the parties, and other facts. Official legal and procedural sources were checked as of September 21, 2026.