I. Introduction

The rise of online shopping, social commerce, and app-based delivery services in the Philippines has made cash-on-delivery, or COD, one of the most common payment methods for consumers. COD is popular because it allows buyers to pay only when a parcel arrives. It is especially useful for consumers who do not use credit cards, e-wallets, or online banking.

However, the same convenience has also created opportunities for scams. A recurring scheme involves a courier delivering a parcel allegedly ordered by the recipient, a family member, or someone in the household. The package is paid for in cash upon delivery, but when opened, it contains a worthless, wrong, counterfeit, unsolicited, or low-value item. In some cases, no one in the household ordered anything at all. These incidents are commonly called COD courier scams.

A COD courier scam may involve several actors: the scam seller, a bogus online shop, a marketplace account, a courier or logistics platform, a payment collector, and sometimes a data source that supplied the victim’s name, address, and contact number. The legal issues therefore involve consumer protection, civil liability, criminal fraud, cybercrime, data privacy, and the duties of platforms and couriers.

This article discusses the nature of COD courier scams in the Philippines, the rights of affected consumers, the possible liabilities of sellers, platforms, couriers, and data handlers, and the remedies available under Philippine law.

II. What Is a COD Courier Scam?

A COD courier scam generally refers to a deceptive transaction where a consumer is made to pay for a delivered parcel under false or misleading circumstances. The most common forms are:

Unordered COD parcel scam — A package arrives in the name of the recipient or another household member, but no one ordered it. The household pays because it assumes someone placed the order.
Wrong item scam — The buyer ordered a specific item online, but receives a different, cheaper, defective, or useless item.
Empty package or junk item scam — The parcel contains paper, stones, cheap accessories, or other items of negligible value.
Counterfeit product scam — The buyer receives a fake version of a branded item.
Impersonated seller or platform scam — The scammer uses the name, logo, or style of a legitimate online platform or merchant.
Fake return/refund scheme — After the victim complains, the scammer asks for more money, bank details, OTPs, or identity documents supposedly to process a refund.
Data-driven COD scam — The victim’s personal information appears to have been used without consent to send unsolicited COD parcels.
Brushing-type scheme — A seller sends unsolicited packages to real addresses to create fake transactions, fake reviews, or artificial sales volume.

The scam may occur through social media shops, messaging apps, marketplace listings, online ads, or unknown sellers using logistics companies to collect payment.

III. Why COD Scams Are Legally Significant

A COD scam is not merely a private inconvenience. It can raise several legal issues:

First, it may be a consumer protection violation because the transaction involves deceptive, unfair, or unconscionable sales practices.

Second, it may amount to civil fraud or breach of contract if the seller induced the buyer to pay for goods that were not as represented.

Third, it may constitute a criminal offense, such as estafa, swindling, fraud, use of fictitious names, or cybercrime-related fraud when committed through information and communications technology.

Fourth, it may involve a data privacy breach if the victim’s personal information was collected, disclosed, sold, or used without proper authority.

Fifth, it raises questions about the accountability of online platforms, payment intermediaries, and couriers, especially when they repeatedly facilitate suspicious sellers or fail to provide complaint mechanisms.

IV. Applicable Philippine Laws

Several Philippine laws may apply to COD courier scams.

A. Consumer Act of the Philippines

Republic Act No. 7394, or the Consumer Act of the Philippines, protects consumers against deceptive, unfair, and unconscionable sales acts and practices. It covers consumer products and services and provides remedies involving complaints, administrative sanctions, and consumer redress.

A seller who misrepresents the nature, quality, quantity, brand, price, origin, or characteristics of goods may be liable for deceptive sales practices. In a COD scam, misrepresentation may occur when the seller advertises one product but delivers another, uses fake claims, hides material information, or tricks the consumer into paying for something not actually ordered.

B. E-Commerce Act

Republic Act No. 8792, or the Electronic Commerce Act, gives legal recognition to electronic documents, electronic messages, and online transactions. It is relevant because many COD transactions begin through online messages, marketplace listings, order confirmations, digital invoices, chat logs, or electronic payment and delivery records.

The E-Commerce Act also provides a legal framework for electronic evidence. Screenshots, chat records, order pages, tracking numbers, electronic receipts, and online advertisements may help prove the transaction.

C. Civil Code of the Philippines

The Civil Code may apply in several ways.

If there was a valid sale, the seller is bound to deliver the thing agreed upon. If the seller delivers a wrong, defective, or worthless item, the buyer may have civil remedies for breach of contract, rescission, damages, or warranty claims.

If the buyer was deceived into entering the transaction, there may be fraud or vitiated consent. If the buyer paid for an unordered parcel because of misrepresentation, mistake, or undue pressure, the payment may be recoverable depending on the facts.

The Civil Code also recognizes obligations arising from law, contracts, quasi-contracts, acts or omissions punished by law, and quasi-delicts. This means liability may arise even outside a traditional written contract.

D. Revised Penal Code

Certain COD scams may amount to criminal offenses under the Revised Penal Code, particularly estafa under Article 315. Estafa generally involves defrauding another by abuse of confidence, false pretenses, fraudulent acts, or deceit causing damage.

A seller who uses a fake identity, false representation, or fraudulent online listing to induce payment may be investigated for estafa. Depending on the scheme, other offenses may also be relevant, such as falsification, use of fictitious names, or other fraud-related crimes.

E. Cybercrime Prevention Act

Republic Act No. 10175, or the Cybercrime Prevention Act of 2012, may apply where the fraudulent act is committed through a computer system, the internet, social media, online marketplaces, messaging apps, or other ICT platforms.

If estafa or fraud is committed using information and communications technology, the offense may be treated as cyber-related. This is significant because many COD scams originate from online ads, fake accounts, marketplace listings, or chat-based orders.

F. Data Privacy Act

Republic Act No. 10173, or the Data Privacy Act of 2012, is relevant where a victim’s name, phone number, address, or other personal information was used to send unsolicited COD parcels.

A person or entity that collects, processes, shares, sells, or uses personal data without lawful basis may be liable under data privacy rules. If a courier, seller, platform, merchant, lead generator, or data broker mishandled personal information, the victim may have a complaint before the National Privacy Commission.

The Data Privacy Act is especially relevant when victims repeatedly receive parcels they did not order, suggesting that their personal information may have been obtained from leaked databases, prior transactions, fake forms, raffles, phishing links, or unauthorized data sharing.

G. DTI Rules and Consumer Protection Mechanisms

The Department of Trade and Industry has jurisdiction over many consumer complaints involving products, sellers, and unfair trade practices. Consumers may file complaints with the DTI for mediation, adjudication, or appropriate action depending on the nature of the complaint.

The DTI may be relevant where the seller is identifiable, the transaction involves consumer goods or services, or the issue concerns deceptive sales practices, defective products, refunds, warranties, or misleading advertisements.

H. Small Claims Procedure

If the consumer seeks to recover money, the Rules on Small Claims Cases may be available, subject to the jurisdictional amount and procedural requirements in force at the time of filing.

Small claims are designed to be simpler and faster than ordinary civil actions. Lawyers are generally not required in small claims hearings. A consumer may use this remedy to recover the amount paid, delivery charges, or other liquidated sums, where the claim is properly documented.

I. Platform and Marketplace Policies

Apart from law, online marketplaces and courier platforms usually have internal policies on refunds, returns, seller sanctions, fake listings, counterfeit goods, and suspicious COD transactions. These policies do not replace legal remedies, but they can provide faster practical relief.

Consumers should use official in-app complaint channels whenever possible because the platform may have access to seller records, order IDs, proof of delivery, payout status, and logistics data.

V. Who May Be Liable?

A. The Scam Seller

The primary liable party is usually the seller or person who caused the fraudulent shipment. The seller may be liable civilly, administratively, and criminally if the seller:

advertised a product falsely;
delivered a wrong, defective, counterfeit, or worthless item;
used a fake identity or bogus shop name;
sent an unsolicited COD parcel;
obtained payment through deceit;
refused to refund despite clear fraud;
used stolen or unlawfully obtained personal data; or
operated through fake accounts, mule accounts, or repeated fraudulent listings.

The challenge is often identifying the seller. Scam sellers may use fake names, prepaid SIMs, disposable social media accounts, or false return addresses. This makes evidence preservation crucial.

B. The Courier

The courier is often the visible actor in the transaction, but not always the legal wrongdoer. In many cases, the rider or delivery personnel merely delivers the parcel and collects payment according to the shipping instructions.

However, a courier company may face scrutiny if it:

failed to provide sender information or transaction records when lawfully requested;
ignored repeated complaints against the same shipper;
released collected COD payments despite timely fraud reports;
lacked reasonable complaint mechanisms;
mishandled personal data;
participated in the fraudulent scheme; or
knowingly accepted suspicious shipments.

The liability of the courier depends on its role. A courier that merely transports sealed parcels without knowledge of fraud may have limited liability. But a courier that acts as payment collector, logistics partner, data processor, or platform participant may have additional duties.

C. The Delivery Rider

The individual rider is usually not personally liable if acting in good faith as an employee, contractor, or agent of the courier and has no knowledge of the scam. Victims should avoid harassing or threatening riders, since they are often not the scammer.

However, if a rider knowingly participates in the scheme, fabricates delivery records, collects money outside official channels, refuses to issue proof of payment, or coordinates with scammers, personal liability may arise.

D. The Online Marketplace or Platform

If the transaction occurred through an online marketplace, the platform may have responsibilities under consumer protection principles, marketplace policies, and applicable regulations. A platform may be expected to provide mechanisms for:

seller identification;
complaint handling;
refund processing;
suspension of fraudulent sellers;
preservation of transaction records;
user protection against counterfeit or deceptive listings; and
cooperation with lawful investigations.

Platform liability depends on the facts, including whether it merely hosted the listing, processed the order, collected payment, arranged courier services, controlled seller payouts, or had notice of repeated fraud.

E. Payment Processors and Wallets

Where COD payments are later remitted through financial channels, e-wallets, banks, or payment processors may possess transaction trails. They may be relevant in tracing funds, freezing suspicious accounts where legally authorized, or supporting investigations.

Consumers should not expect immediate disclosure of account information without proper legal process, but complaint records may help authorities trace the scam.

F. Data Controllers and Data Processors

If the scam involved unauthorized use of personal data, any person or entity that collected, stored, shared, sold, or processed the data may be accountable under data privacy law. This may include merchants, platforms, couriers, marketing agencies, lead generators, or individuals operating databases.

VI. Rights of the Consumer

A consumer affected by a COD courier scam may assert several rights.

A. Right Not to Pay for Unordered Goods

A person should not be forced to pay for goods that were never ordered. If a parcel is addressed to the consumer but the consumer did not place the order, the safest practical response is to refuse delivery and avoid paying.

If a family member, helper, guard, or office receptionist receives parcels on behalf of the consumer, the household or office should adopt a rule: no COD parcel should be paid unless the intended recipient confirms the order.

B. Right to Accurate Information

Consumers have the right to truthful information about goods, prices, sellers, and transaction terms. Misleading product photos, fake reviews, false discounts, hidden seller identities, and deceptive claims may support a complaint.

C. Right to Refund or Replacement

If a consumer ordered one item and received another, the consumer may seek refund, replacement, or other appropriate relief. The exact remedy depends on the platform policy, seller terms, applicable warranty rules, and evidence of the transaction.

D. Right to Complain

Consumers may complain to the seller, platform, courier, DTI, law enforcement, the National Privacy Commission, or the courts depending on the issue.

E. Right to Data Privacy

Consumers have rights over their personal information, including rights relating to lawful processing, access, correction, objection, and complaint. If personal data was used to send unsolicited parcels, the consumer may demand information on how the data was obtained and used, subject to applicable procedures.

VII. Immediate Steps for Victims

A victim of a COD courier scam should act quickly.

A. Do Not Open the Parcel Before Documenting It

Before opening the parcel, take photos or videos of:

the waybill;
tracking number;
sender name;
return address;
courier name;
amount collected;
date and time of delivery;
packaging condition; and
delivery rider details, if available.

A continuous video showing the unopened package, the label, and the opening of the parcel can be useful evidence.

B. Keep All Evidence

Preserve:

the parcel packaging;
waybill and shipping label;
receipt or proof of payment;
screenshots of the order page;
chat conversations;
advertisement or listing;
seller profile;
tracking status;
complaint ticket numbers;
refund requests;
emails and SMS messages; and
photos or videos of the item received.

Do not throw away the packaging immediately, as it may contain identifying details.

C. Report Immediately to the Platform or Seller

If the order was made through a marketplace or app, report the incident through official channels. Avoid settling solely through private chat, especially if the seller asks for bank details, OTPs, passwords, or additional payments.

D. Contact the Courier Quickly

For COD scams, time matters because the courier may still be holding the collected cash or may not yet have remitted the payment to the shipper. Consumers should immediately contact the courier’s customer service and request that the COD remittance be held pending investigation.

The request should include the tracking number, delivery date, amount paid, and evidence of fraud.

E. File a Complaint with the DTI

If the matter involves deceptive sales practices, defective goods, refusal to refund, or consumer product issues, the consumer may file a complaint with the DTI. The complaint should include complete documentation.

F. Report to Law Enforcement

If the facts show fraud, identity misuse, repeated scamming, or organized activity, the victim may report to the Philippine National Police Anti-Cybercrime Group, the National Bureau of Investigation Cybercrime Division, or the local police station, depending on the circumstances.

G. Consider a Data Privacy Complaint

If the victim never ordered anything and suspects unauthorized use of personal data, a complaint or inquiry may be raised with the National Privacy Commission, especially if there are repeated deliveries or indications that personal information was leaked or sold.

H. Consider Small Claims

If the amount is recoverable and the responsible party is identifiable, small claims may be a practical remedy. This is especially useful where the consumer has proof of payment, proof of delivery, and proof that the seller refused to refund.

VIII. What to Do When an Unordered COD Parcel Arrives

The best remedy is prevention. When an unexpected COD parcel arrives:

Ask who ordered it.
Call or message the named recipient before paying.
Check the amount, sender, and platform.
Refuse delivery if no one confirms the order.
Do not be pressured by urgency.
Do not pay merely because the parcel has your name and address.
Do not accept “pay now, complain later” as a rule.
If the parcel is suspicious, photograph the label before refusing, if this can be done safely and without violating courier procedures.

Households, condominiums, offices, and subdivisions should instruct guards, receptionists, kasambahays, and relatives not to pay for COD packages unless expressly authorized.

IX. Sample Complaint Points Against a Seller

A consumer complaint against a seller may state:

The seller represented that the item was a particular product.
The buyer relied on the representation.
The buyer paid the COD amount upon delivery.
The delivered item was wrong, defective, counterfeit, empty, or materially different.
The seller refused to refund or became unreachable.
The act constitutes deceptive, unfair, or fraudulent conduct.
The consumer seeks refund, reimbursement of delivery fees, and appropriate sanctions.

X. Sample Complaint Points Against a Courier

A complaint against a courier may focus on operational and data issues, such as:

request to hold remittance of COD payment;
request for sender or shipper information through proper channels;
complaint that the courier accepted suspicious shipments;
complaint that repeated fraud reports against the same shipper were ignored;
request for proof of delivery and payment records;
request for investigation of the shipper account;
possible mishandling of personal data; and
request for assistance in refund or reversal.

The complaint should be factual and should not assume the rider is the scammer unless there is evidence.

XI. Criminal Aspect: When Does It Become Estafa?

A COD scam may amount to estafa when there is deceit and damage. For example, a seller who advertises a legitimate phone, accepts an order, ships a box containing a cheap accessory, and receives the COD payment may have committed fraud.

The important elements generally include:

a false representation or fraudulent act;
reliance by the victim;
payment or delivery of money;
damage to the victim; and
intent to defraud.

If the scheme was carried out online, through a fake marketplace account, social media page, messaging app, or electronic communication, cybercrime implications may arise.

However, not every failed delivery is automatically a crime. Some cases may involve logistics mistakes, warehouse errors, or ordinary civil disputes. The distinction depends on evidence of intent, pattern, false identity, refusal to correct, and other circumstances showing fraud.

XII. Data Privacy Issues in Unordered COD Parcels

One of the most troubling aspects of unordered COD scams is the use of accurate personal information. The scammer may know the victim’s full name, address, phone number, and sometimes purchasing habits.

Possible sources of the data include:

previous online purchases;
leaked customer databases;
phishing forms;
fake raffles or surveys;
compromised merchant records;
social media oversharing;
discarded waybills;
unauthorized resale of customer lists; or
insiders with access to logistics or merchant data.

Consumers should protect themselves by:

removing or destroying personal details on waybills before disposal;
limiting public posting of addresses and phone numbers;
avoiding suspicious online forms;
checking privacy settings;
using official platforms for purchases;
reporting repeated unsolicited parcels; and
asking companies how personal data was obtained and processed when appropriate.

XIII. The Role of Waybills and Evidence

The waybill is often the most important physical evidence. It may contain:

tracking number;
sender or shipper code;
return address;
recipient details;
COD amount;
courier branch;
delivery route;
barcode or QR code;
date of shipment; and
parcel reference number.

Victims should photograph the waybill clearly. If privacy is a concern when sharing evidence publicly, the victim should redact personal information before posting online. Full unredacted copies should be kept for official complaints.

XIV. Refunds: Practical Realities

Refunds in COD scams can be difficult because the payment may pass through several layers:

The recipient pays the rider.
The rider remits to the courier.
The courier consolidates COD collections.
The courier releases payment to the seller or shipper.
The seller withdraws or transfers the money.

This is why immediate reporting is important. Once funds are released to a scammer, recovery becomes harder.

Some platforms can reverse payments or withhold seller payouts if the complaint is filed quickly. Independent social media sellers are harder to pursue unless their identity and payment trail are known.

XV. Preventive Measures for Consumers

Consumers should adopt practical safeguards:

Do not pay for COD parcels that were not personally confirmed.
Use platforms with buyer protection.
Avoid sellers that transact only through private messages and refuse platform checkout.
Check seller history, reviews, and account age.
Be suspicious of prices that are too good to be true.
Avoid clicking suspicious ads or links.
Do not share OTPs or account passwords for refunds.
Keep order records.
Require household confirmation before paying COD.
Consider switching high-value purchases to secure platform-based payment and escrow-style protection where available.
Dispose of waybills securely.

XVI. Preventive Measures for Couriers and Platforms

Couriers and platforms can reduce COD scams by implementing stronger safeguards:

verifying seller identities;
monitoring repeated complaints against shipper accounts;
holding COD remittances when fraud is reported promptly;
blacklisting fraudulent sellers;
requiring accurate return addresses;
providing accessible complaint channels;
allowing recipients to verify order details;
improving transparency of sender information;
detecting suspicious shipment patterns;
protecting personal data;
training riders on scam reports; and
coordinating with regulators and law enforcement.

A stronger anti-fraud framework benefits legitimate sellers, couriers, and consumers alike.

XVII. Common Mistakes Victims Should Avoid

Victims should avoid:

throwing away the packaging and waybill;
confronting or harassing the rider without proof of participation;
paying for parcels simply because the label has their name;
sending IDs, bank details, OTPs, or passwords to supposed refund agents;
posting full unredacted waybills online;
delaying complaints until the COD funds are released;
relying only on phone calls without written records;
accepting replacement promises from anonymous sellers without documentation; and
assuming that a complaint is impossible just because the seller used a fake name.

XVIII. Remedies Available to the Consumer

Depending on the facts, the consumer may pursue one or more remedies.

A. Refund or Replacement

The first practical remedy is a refund or replacement through the seller, platform, or courier process.

B. Platform Complaint

If the transaction occurred through a marketplace, the consumer may invoke buyer protection policies, return/refund rules, counterfeit item policies, or seller misconduct reporting.

C. Courier Complaint

The consumer may ask the courier to investigate the shipper, hold COD remittance, provide transaction records through proper channels, and assist in refund processing.

D. DTI Complaint

The consumer may file a complaint for deceptive, unfair, or unconscionable sales acts, defective products, misleading advertisements, or refusal to honor consumer rights.

E. Criminal Complaint

If fraud is evident, the consumer may file a complaint for estafa or cybercrime-related offenses with appropriate law enforcement agencies or prosecutors.

F. Data Privacy Complaint

If personal data was used without consent or there is suspected unauthorized data processing, the consumer may seek assistance from the National Privacy Commission.

G. Small Claims Case

If the responsible party is known and the amount falls within the applicable small claims threshold, the consumer may file a small claims case to recover money.

H. Civil Action

For more serious losses, the consumer may consider an ordinary civil action for damages, rescission, breach of warranty, fraud, or other applicable causes of action.

XIX. How to Draft a Demand Letter

A demand letter should be concise, factual, and evidence-based. It should include:

the buyer’s name and contact details;
transaction date;
order number or tracking number;
amount paid;
item ordered;
item received;
evidence attached;
demand for refund or replacement;
deadline for response;
warning that the matter may be escalated to DTI, law enforcement, NPC, or court; and
request to preserve transaction records.

The tone should be firm but not threatening.

XX. Sample Demand Letter

Subject: Demand for Refund Due to Fraudulent or Defective COD Transaction

To whom it may concern:

I am writing to formally complain about a COD parcel delivered to me on [date] through [courier], with tracking number [tracking number], for which I paid the amount of ₱[amount].

The parcel was represented as [item ordered / transaction description]. However, upon opening the package, I discovered that it contained [wrong item / defective item / empty package / unordered item]. I did not receive the product that was represented or ordered.

I have preserved the waybill, packaging, proof of payment, photos, videos, screenshots, and other records relating to this transaction.

I demand a full refund of ₱[amount] within [number] days from receipt of this letter. I also request that you preserve all records relating to the seller, shipper account, COD remittance, delivery, and transaction history.

If this matter is not resolved, I reserve the right to file complaints with the Department of Trade and Industry, the appropriate law enforcement agencies, the National Privacy Commission if personal data misuse is involved, and the proper court.

Sincerely, [Name]

XXI. Frequently Asked Questions

1. Am I required to pay for a COD parcel addressed to me?

No. If you did not order it or cannot confirm that someone authorized it, you should refuse delivery.

2. Can I open the parcel before paying?

This depends on courier policy. Many couriers do not allow opening before payment for COD parcels. Because of this, consumers should verify the order before paying and should document the opening after payment if they decide to accept.

3. Is the rider liable?

Usually, the rider is not liable if the rider merely delivered the parcel in good faith. The seller or shipper is usually the primary wrongdoer. The rider may be liable only if there is evidence of knowing participation or misconduct.

4. Can I get my money back from the courier?

Possibly, especially if the complaint is made quickly before the COD amount is released to the seller. The result depends on courier policy, evidence, and the courier’s role in the transaction.

5. What if the seller cannot be found?

File complaints with the platform, courier, DTI, and law enforcement as appropriate. The courier or platform may have shipper records that can be accessed through proper procedures.

6. What if I never ordered anything but received a parcel with my complete details?

This may involve unauthorized use of personal data. Preserve the waybill and consider reporting the incident to the courier, platform if identifiable, and the National Privacy Commission.

7. Can this be cybercrime?

Yes, if fraud was committed through online platforms, social media, messaging apps, electronic communications, or computer systems.

8. Can I post the seller online?

Consumers should be careful. Posting a factual warning with evidence may be understandable, but defamatory statements, threats, doxxing, or posting private personal information may create legal risk. It is safer to file formal complaints and redact sensitive information in public posts.

9. Is a screenshot valid evidence?

Screenshots may be useful, especially when supported by other evidence such as receipts, waybills, tracking records, chat logs, photos, and videos. Electronic records are recognized under Philippine law, subject to rules on admissibility and authentication.

10. Is it worth filing a complaint for a small amount?

Yes, especially if the scam is repeated or organized. Even small complaints can help platforms, couriers, regulators, and law enforcement detect patterns.

XXII. Legal Strategy for Victims

The best strategy is layered escalation.

First, immediately document the parcel and transaction.

Second, report to the courier and request a hold on COD remittance.

Third, report through the platform or seller channel.

Fourth, file a DTI complaint if the issue involves consumer goods, deceptive practices, or refusal to refund.

Fifth, report to law enforcement if there is clear fraud, fake identity, repeated scams, or online deception.

Sixth, raise data privacy concerns if personal information was used without authority.

Seventh, consider small claims or civil action if the responsible party is identifiable and recovery is practical.

XXIII. Conclusion

COD courier scams exploit trust, convenience, and the speed of modern delivery systems. In the Philippines, victims are not without remedies. Depending on the facts, a COD scam may involve consumer protection violations, civil liability, estafa, cybercrime, and data privacy issues.

The most important consumer protection measure is not to pay for unverified COD parcels. Once payment is made, the victim should act quickly: preserve evidence, report to the courier, request a hold on COD remittance, file platform complaints, and escalate to DTI, law enforcement, the National Privacy Commission, or the courts as appropriate.

For couriers and platforms, the rise of COD scams highlights the need for stronger seller verification, better complaint handling, fraud monitoring, and data protection. For consumers, the rule is simple: verify before paying, document everything, and use formal remedies when fraud occurs.