Quick answer

If you were scammed through an online shop, marketplace, messaging app, or social-media account, act immediately:

Contact your bank, e-wallet, card issuer, or payment provider. Report the transaction as fraudulent and request an urgent hold, recall, reversal, account freeze, or card blocking, whichever applies. Recovery is not guaranteed, but delay can reduce the chance of stopping the funds.
Secure your accounts. Change compromised passwords, sign out other sessions, enable multi-factor authentication, and block affected cards or SIMs.
Preserve the evidence before the seller or account disappears.
Report the seller and transaction through the platform’s official dispute or reporting system.
Report suspected criminal fraud to the PNP Anti-Cybercrime Group, the nearest police station, or the NBI Cybercrime Division.
For a business-to-consumer purchase, pursue refund or other consumer remedies through the seller, platform, and Department of Trade and Industry (DTI).
If the payment provider does not properly address your complaint, escalate it to the appropriate financial regulator, such as the Bangko Sentral ng Pilipinas (BSP).

These routes serve different purposes. A platform complaint may remove the account or release an escrow refund; a DTI complaint may address consumer remedies; a bank complaint may help contain the payment; and a police, NBI, or prosecutor’s complaint may lead to a criminal investigation. Filing with one does not necessarily replace the others.

First determine whether this is fraud or an ordinary transaction dispute

A missing parcel, delayed refund, defective item, or seller’s failure to answer is not automatically a criminal scam. Criminal fraud generally requires evidence of deliberate deception, fraudulent representation, or another unlawful scheme—not merely poor service or breach of contract.

Warning signs that may support a fraud report include:

The seller used a false identity, stolen photos, fake receipts, or fabricated tracking information.
The seller accepted payment for goods that apparently never existed.
Several victims were directed to the same account and then blocked.
The seller repeatedly changed account names, numbers, or payment instructions.
The item delivered was deliberately substituted with something worthless.
The seller impersonated a legitimate business, courier, platform, or government office.
You were tricked into disclosing an OTP, password, PIN, recovery code, or remote access to your device.
Funds were moved through multiple “mule” accounts or you were instructed to mislabel the payment.

By contrast, disputes over product quality, warranties, cancellations, delivery, or refunds may primarily be consumer or civil matters—although the same facts can also indicate a crime when intentional deception is present.

What to do immediately after discovering the scam

1. Call the payment provider using an official channel

Use the number printed on the card, shown inside the official app, or published on the provider’s verified website. Do not use a number supplied by the suspected scammer.

Provide:

The amount, date, and exact time of the transaction
The transaction or reference number
The receiving account, mobile number, QR code, card descriptor, or merchant name
An explanation that the payment resulted from suspected fraud
Whether you disclosed an OTP, PIN, password, card details, or remote-device access
Any police or complaint reference number already available

Ask specifically whether the provider can:

Place an urgent hold on the recipient account
Send a recall or recovery request to the receiving institution
Block the card, wallet, or compromised account
Dispute an unauthorized card transaction
Preserve transaction, device, login, and recipient-identification records
Issue a written acknowledgment or case number

A transfer that you personally approved after being deceived may be treated differently from a transaction made without your authorization. Describe exactly what happened; do not state that a payment was “unauthorized” if you actually initiated it.

If the provider is supervised by the BSP, use its internal complaint mechanism first. If the concern remains unresolved, it may be escalated through the BSP Consumer Assistance Mechanism, including the BSP Online Buddy or the official complaint form and channels listed there.

2. Secure every affected account

If the scammer obtained credentials or controlled your device:

Change passwords from a clean, trusted device.
Start with your primary email account, then banking, e-wallet, social-media, and shopping accounts.
Use unique passwords and enable multi-factor authentication.
Sign out unknown devices and revoke suspicious app access.
Remove unfamiliar recovery email addresses or phone numbers.
Ask your mobile network to secure or replace a compromised SIM.
Check for new beneficiaries, forwarding rules, linked devices, loans, or transactions.
Remove remote-access applications you were induced to install.
Run a security scan and preserve relevant logs before resetting the device.

Never give an OTP, PIN, password, or screen-sharing access to someone claiming that these are required to “reverse” the scam.

3. Preserve evidence before reporting or blocking the account

Save original digital records whenever possible, not only cropped screenshots. Preserve:

The seller’s profile name, username, account ID, profile URL, and visible contact details
The complete listing, advertisement, livestream, or product page
Messages, emails, SMS records, and call logs
The order page, invoice, receipt, and platform order number
Bank or e-wallet confirmations and transaction reference numbers
The receiving account name and number
QR codes, payment links, wallet addresses, and deposit slips
Courier records, parcel labels, tracking history, and unboxing photos or video
Promises about price, delivery, authenticity, refund, warranty, or return
Records showing that the account blocked you, disappeared, or changed names
The exact dates and times of every important event
Names and contact details of witnesses or other known victims

For emails, retain the original message and full headers if available. For web pages, record the complete URL and take screenshots that include the date, time, account name, and surrounding context. Export chats where the app permits it.

Keep an untouched copy in secure storage. Do not edit the originals, annotate them destructively, or rely solely on a social-media post that can be deleted. Electronic documents and messages can be used as evidence, subject to authentication and the applicable rules, under the Electronic Commerce Act and the Rules on Electronic Evidence.

Report the account to the platform

Use the marketplace or social-media platform’s official order-dispute, fraud, impersonation, or seller-reporting function. Include the order and payment references, but redact information that the platform does not need, such as passwords and full card credentials.

If payment remains in the platform’s escrow system:

Do not press “order received” unless you actually received and accepted the item.
Open a dispute before the platform’s displayed deadline.
Upload the strongest evidence in chronological order.
Keep the dispute number and copies of every submission.
Do not cancel the dispute merely because the seller promises an off-platform refund.

The Internet Transactions Act requires covered e-marketplaces and digital platforms to maintain mechanisms through which users can report unlawful content or users. It also imposes identification, transparency, and other duties that differ according to the platform’s role.

For consumer or administrative relief under that law, an aggrieved party generally must first use the platform’s, marketplace’s, or e-retailer’s internal redress mechanism. It is deemed exhausted if the complaint remains unresolved after seven calendar days. This requirement should not be treated as a reason to delay an urgent bank alert, account-security action, preservation request, or criminal report.

File a consumer complaint when a business sold the product

The Internet Transactions Act of 2023 covers business-to-business and business-to-consumer internet transactions within the DTI’s mandate when the required Philippine connection exists. It generally does not cover a purely consumer-to-consumer transaction between private end-users.

Covered online consumers may pursue repair, replacement, refund, or other applicable remedies when goods are defective, lost without the consumer’s fault, do not conform to the warranty, or otherwise breach the seller’s obligations. Online merchants and e-retailers are primarily responsible for their internet transactions. A platform’s possible liability depends on its role, notice, diligence, and the circumstances stated in the law.

Before approaching the DTI:

Send the business a clear written complaint.
Use the platform’s internal redress process.
State the remedy requested—such as delivery, replacement, refund, or reimbursement.
Retain proof of filing and the response, if any.
If unresolved after seven calendar days, submit the complaint through the DTI’s current official complaint or dispute-resolution channel, or seek assistance from a DTI office.

A useful complaint package contains:

Your full name and contact information
The business or seller’s known name, address, account, and contact details
A short chronological statement of facts
The amount paid and payment method
The exact remedy requested
The order, invoice, payment proof, communications, and platform-dispute record
A valid identification document if required by the filing channel

The law generally allows a consumer to claim damages before a court or the DTI within two years from the time the cause of action arose. Do not assume that every related claim has the same deadline; other laws and procedural rules may prescribe different periods.

The older Consumer Act of the Philippines may also apply to deceptive, unfair, or unconscionable sales practices and to product or warranty concerns.

File a criminal report with the PNP or NBI

For deliberate deception, account takeover, identity theft, phishing, fake sellers, payment diversion, or organized scam activity, report promptly to any of the following:

The PNP Anti-Cybercrime Group
The nearest police station, which can record the incident and refer it to the appropriate cybercrime unit
The National Bureau of Investigation, particularly its cybercrime investigators or the nearest NBI office
The appropriate prosecutor’s office when you are ready to file a formal criminal complaint, preferably with legal assistance if the facts or venue are complicated

Bring printed and electronic copies of your evidence, a government-issued ID, and a written timeline. Investigators may ask you to execute a sworn complaint-affidavit and authenticate the records.

A police blotter records that an incident was reported. It does not necessarily begin a full criminal case by itself. Ask:

What additional complaint, affidavit, or documents are required?
Which investigating unit will handle the matter?
What is the report, docket, or reference number?
Should the bank, platform, courier, or telecom provider receive a preservation request?
Where should follow-up evidence be submitted?

Under the Cybercrime Prevention Act of 2012, conduct may constitute computer-related fraud, computer-related identity theft, or another cybercrime offense depending on the evidence. Traditional crimes such as estafa may also be implicated when committed through information and communications technology. The final charge is determined by investigators and prosecutors, not merely by the label used in the victim’s report.

What to put in a complaint-affidavit

Tell the story in chronological order and use facts you personally know. A practical structure is:

Your identity and contact details
How and when you found the seller or advertisement
The representations that persuaded you to transact
The product, service, price, and agreed terms
The payment method, recipient, amount, and reference number
What happened after payment
Why you believe the representation was false or fraudulent
Your efforts to contact the seller, platform, bank, or courier
The loss or harm suffered
A numbered list of supporting attachments

Quote only material statements and reproduce them accurately. Do not exaggerate, speculate about a person’s identity, or accuse an account holder of being the mastermind when the account may have been stolen or used as a money mule. State what the records show and allow investigators to determine responsibility.

If the scam involved a bank or e-wallet account

The Anti-Financial Account Scamming Act addresses activities involving financial accounts used for scams, including prohibited account-muling conduct and social-engineering schemes. Its application depends on the acts, knowledge, intent, and evidence in each case.

For the best chance of tracing or containing the funds:

Report to both the sending and receiving financial institutions, if known.
Supply the exact transaction reference, not merely a screenshot of the amount.
Ask for a formal fraud-case number.
Request preservation of account-opening, transaction, device, and access records.
Give the same accurate timeline to the bank and law-enforcement investigator.
Escalate unresolved complaints about BSP-supervised institutions through the BSP’s official consumer-assistance process.

The recipient name displayed during a transfer does not by itself prove who controlled the account or ultimately received the money.

Can you recover the money?

Possible recovery routes include:

A platform escrow refund or buyer-protection process
A voluntary seller refund
A card dispute, if the card rules and facts permit it
A timely bank or e-wallet hold, recall, or recovery request
DTI mediation or adjudicative relief within its authority
A civil claim for the amount and provable damages
Restitution or civil liability connected with a criminal case

None guarantees recovery. Funds may already have been withdrawn or transferred, a platform’s buyer-protection rules may not cover off-platform payments, and a bank generally cannot simply remove money from another customer’s account without a lawful basis and applicable process.

For qualifying money claims within the current jurisdictional limit, the judiciary’s small-claims procedure may offer a simpler civil route. Whether it is suitable depends on the defendant’s identity and address, the nature and amount of the claim, venue, prior barangay proceedings where legally required, and the documents available.

Common mistakes that weaken a report

Waiting several days before notifying the payment provider
Deleting conversations out of embarrassment or anger
Blocking the account before preserving its profile, URL, and messages
Sending more money for a supposed “refund fee,” “tax,” or “account verification”
Paying a stranger who claims to be a hacker, recovery agent, police officer, or bank employee
Posting unredacted IDs, account statements, addresses, or children’s information publicly
Filing only a platform report when the facts indicate a crime
Treating a police blotter as the entire criminal-complaint process
Omitting an OTP disclosure or falsely describing a personally initiated transfer as unauthorized
Editing screenshots so heavily that their source and context cannot be established
Naming people publicly without reliable evidence
Continuing negotiations while missing the platform’s dispute deadline
Assuming that a DTI complaint covers a purely private consumer-to-consumer sale

When legal or investigative help is urgent

Seek immediate assistance if:

The scammer still has access to your bank, e-wallet, email, phone, or social-media account.
Your SIM suddenly stopped working or you suspect SIM swapping.
Unauthorized loans, cards, accounts, or identity documents were created in your name.
A child, older person, person with disability, or other vulnerable victim is being targeted.
The scam involves threats, sextortion, intimate images, stalking, or demands for continuing payment.
A large amount, business account, payroll, or several victims are involved.
The suspected offender is abroad or the transaction crossed several jurisdictions.
You are being asked to sign an affidavit, settlement, waiver, or quitclaim you do not understand.
Evidence may soon be deleted or transaction records require formal preservation.
You need to identify an unknown defendant or determine the proper venue and legal remedy.

For an immediate threat to life or safety, contact emergency services or the nearest police station at once.

Frequently asked questions

Should I report even if the amount is small?

Yes. The amount may affect the practical remedy or possible penalty, but a small transaction can be part of a larger pattern involving many victims. Preserve the records and obtain a reference number.

Can I report a scammer whose real name I do not know?

Yes. Provide every available identifier: usernames, profile and listing URLs, phone numbers, email addresses, receiving accounts, QR codes, transaction references, courier details, and device or login notices. Authorities may seek subscriber or account information through lawful process.

Do I need a lawyer to make an initial report?

Usually not. You can notify the bank, platform, DTI, police, or NBI yourself. A lawyer becomes particularly useful when the amount is substantial, the facts are contested, several legal remedies overlap, the suspect is abroad, or a formal prosecutor’s complaint or civil action is contemplated.

Should I confront the suspected scammer?

Not if doing so could endanger you, trigger evidence deletion, or lead to further payment demands. Preserve the evidence first. Keep any necessary communication factual and avoid threats.

Is a social-media post enough to report the scam?

No. A public post is not a substitute for a platform dispute, financial-institution fraud report, consumer complaint, or sworn criminal complaint. Public accusations can also expose personal data or create legal risk if they identify the wrong person.

Can the platform disclose the seller’s identity to me?

Not automatically. Platforms have privacy and confidentiality obligations. The Internet Transactions Act requires covered platforms to retain certain seller information and, in specified circumstances, provide information pursuant to a subpoena from a competent authority based on a sworn complaint. Investigators can advise on the necessary legal process.

Does the seven-day internal-redress period mean I must wait before contacting police?

No. The seven-day rule concerns exhaustion of the internal redress mechanism before pursuing the consumer or administrative route described by the Internet Transactions Act. Do not delay urgent financial, security, evidence-preservation, or criminal-reporting measures.

Is an online seller automatically liable because its name appears on the receiving account?

No. The account information is important evidence, but investigators must determine who opened, controlled, supplied, or benefited from the account. Some accounts are stolen, rented, sold, or used by money mules.

Official legal and reporting resources

This article provides general legal information, not legal advice or a prediction of any complaint’s outcome. Procedures and legal remedies depend on the transaction, evidence, platform, payment method, parties, and jurisdiction. Official sources and reporting information were checked as of September 19, 2026.