Quick answer

If you paid an online seller or social-media account and believe you were scammed, act immediately:

Contact your bank, card issuer, or e-wallet through its official fraud channel. Ask it to flag the recipient account, trace or recall the transfer if still possible, secure your account, and open a formal dispute. Obtain a case or reference number.
Report the seller and transaction inside the shopping or social-media platform. Request a refund, preserve the complaint record, and ask the platform to retain the account and transaction data.
Report the cyber-fraud incident to the Cybercrime Investigation and Coordinating Center (CICC) by calling 1326, especially when money has just been transferred. You may also approach the PNP Anti-Cybercrime Group, the NBI Cybercrime Division, or your local police station.
For a consumer dispute with a business seller, file through the DTI Consumer CARe System after using the platform’s or seller’s internal complaint process.
Preserve all evidence. Do not delete chats, block the account prematurely, or publicly post sensitive banking information.

Reporting quickly improves the chance that funds or records can still be located, but no agency, bank, or platform can guarantee recovery.

First determine what happened

Not every failed online purchase is legally the same.

A consumer dispute may involve late delivery, a defective or incorrect product, misleading advertising, or a seller refusing a valid refund. A possible scam or criminal fraud generally involves deliberate deception—for example, a fake store, fabricated tracking details, a seller who disappears immediately after payment, an impersonated business account, or instructions designed to obtain your password, one-time PIN, or account access.

The distinction affects where you should report:

Use the seller’s or platform’s redress process and the DTI for consumer remedies such as repair, replacement, refund, or enforcement against a business seller.
Contact the financial institution and law-enforcement authorities immediately when money was obtained through suspected fraud, an account was compromised, or the seller used a false identity.
You may pursue both tracks when the facts support both. A DTI complaint does not replace a criminal report, and a police report does not automatically produce a consumer refund.

What to do immediately

1. Stop further loss

Do not send an additional “release fee,” “verification payment,” “insurance charge,” “tax,” or “refund-processing fee.” Requests for more money after an unsuccessful transaction are a common continuation of the same scheme.

If you disclosed a password, PIN, one-time password, card security code, recovery code, or identification document:

Call the bank or e-wallet using the number in its official app, website, or the back of the card.
Lock or suspend affected cards and accounts.
Change the compromised password and any reused passwords.
Sign out other sessions and enable multi-factor authentication.
Ask whether the account number, mobile number, or device must be replaced.
Watch for unauthorized loans, account changes, or follow-up impersonation attempts.

Never rely on a telephone number or link supplied by the suspected scammer.

2. Notify the payment provider

Report the transaction to the institution from which the money was sent. Give it:

The amount, date, time, and transaction reference number;
The recipient’s name, account or wallet number, bank, and mobile number;
A short explanation of the deception;
Copies of the listing, conversation, receipt, and payment confirmation; and
The police, CICC, platform, or DTI reference number if already available.

Ask specifically whether the provider can:

Place a fraud alert or temporary restriction;
Coordinate with the receiving institution;
Recall, reverse, or dispute the transaction;
Preserve transaction and access logs; and
Issue a written acknowledgment or case number.

A card chargeback, transfer recall, or wallet adjustment depends on the payment method, network rules, available funds, timing, and investigation. A voluntary transfer induced by deception is not automatically reversible.

Under the Anti-Financial Account Scamming Act, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction under applicable BSP rules and must participate in coordinated verification. The law also addresses money-mule accounts and social-engineering schemes. It does not promise an automatic refund in every scam case; liability and restitution depend on the facts, the institution’s controls and diligence, and the governing rules.

If the institution does not resolve your complaint, escalate it through the BSP Consumer Assistance Mechanism. The BSP instructs consumers to raise the concern first with the bank, e-wallet, or other BSP-supervised financial institution. Complaints may then be submitted through the BSP Online Buddy or, using the prescribed form, to consumeraffairs@bsp.gov.ph.

3. Use the platform’s reporting and refund process

Report the listing, seller profile, page, advertisement, and conversation through the platform’s official system. Select the most accurate reason, such as non-delivery, counterfeit goods, account impersonation, payment fraud, or unauthorized account access.

Request:

Cancellation or refund;
Restriction of the seller’s account;
Preservation of registration, login, transaction, and communication records; and
A complaint or ticket number.

Do this before blocking the seller. First capture the account’s exact username, profile URL, account ID if visible, listing URL, and all messages.

For covered business-to-consumer transactions, the Internet Transactions Act of 2023 requires e-marketplaces and covered digital platforms to provide a responsive reporting mechanism. It also generally requires an aggrieved party to use the platform’s, marketplace’s, or e-retailer’s internal redress mechanism before filing a consumer complaint with a court or government agency. That mechanism is considered exhausted if the complaint remains unresolved for seven calendar days.

That seven-day rule concerns the internal consumer-redress process. It is not a sensible reason to postpone an urgent fraud alert to your bank, the CICC, or law enforcement while transferred money or electronic evidence may still be traceable.

Where to report the scam

CICC cybercrime hotline

Call 1326 to report cyber fraud to the CICC’s inter-agency response service. This is particularly important immediately after a transfer. Be ready to provide your contact details, a concise timeline, the recipient-account information, and the amount lost.

Reports about scam messages or numbers may also be made through the eReport feature of the official eGovPH app. A report submitted there is useful intelligence, but a victim seeking investigation or recovery should still contact the payment provider and obtain a formal incident or complaint record.

PNP or NBI

For a possible criminal case, report to:

The PNP Anti-Cybercrime Group, an appropriate regional cybercrime unit, or the nearest police station; or
The NBI Cybercrime Division.

Bring original identification and organized copies of your evidence. Investigators may ask you to execute a complaint-affidavit stating facts that you personally know. Identify assumptions or information supplied by other people instead of presenting them as firsthand facts.

A useful incident narrative answers:

When and where did you see the offer?
What exactly did the seller represent?
Why did you rely on that representation?
How and when did you pay?
Who received the payment?
What happened after payment?
What amount or property was lost?
What efforts did you make to contact the seller, platform, and payment provider?

Whether the conduct constitutes estafa, a cybercrime, an offense under the Anti-Financial Account Scamming Act, or another offense depends on the evidence. The Cybercrime Prevention Act of 2012 applies when listed crimes, including fraud-related offenses under the Revised Penal Code or special laws, are committed through information and communications technology. The precise charge and penalty should be determined by investigators and prosecutors, not assumed from the fact that a transaction occurred online.

DTI consumer complaint

Use the DTI Consumer CARe System when the dispute involves an identifiable business seller, e-retailer, or online merchant and you seek a consumer remedy.

Attach:

Proof that you first complained to the seller or platform;
The seller’s business or account details;
The order confirmation, invoice, or receipt;
Proof of payment;
The listing or advertisement;
The relevant conversation;
Delivery or tracking records; and
A clear statement of the remedy requested.

Under the Internet Transactions Act, an online consumer may pursue repair, replacement, refund, or other remedies when goods are defective, malfunctioning, lost without the consumer’s fault, inconsistent with the warranty, or otherwise subject to seller liability. The merchant or e-retailer is primarily liable in covered civil or administrative claims. Platform liability is not automatic and depends on statutory circumstances, including failures to exercise the required diligence or to act after proper notice.

The Act covers qualifying business-to-business and business-to-consumer internet transactions connected with the Philippine market. It expressly excludes consumer-to-consumer transactions. Thus, a one-off purchase from another private individual may fall outside that Act even though fraud, contract, civil-law, platform, or other legal remedies may remain available.

Other regulators when relevant

The proper regulator can depend on what was sold:

Report concerns involving a BSP-supervised bank, e-wallet, remittance company, or payment provider through the BSP process after first complaining to that institution.
Report misuse or unauthorized processing of personal information to the National Privacy Commission when the facts amount to a data-privacy concern. A privacy complaint is separate from the fraud and consumer-remedy processes.
Products or services regulated by another agency—such as securities, investments, medicines, lending, telecommunications, or professional services—may also require a report to that specialized regulator.

Do not describe an ordinary shopping payment as an “investment” unless that is what was actually offered. Investment and lending schemes raise different legal and regulatory issues.

Evidence to preserve

Preserve the evidence in its original form whenever possible:

Full-page screenshots of the listing and seller profile;
The exact profile, page, shop, and listing URLs;
Username, display name, account ID, mobile number, email address, and advertised address;
Complete chats, emails, text messages, and call logs;
Voice messages, photos, videos, and documents sent by the seller;
Order details, electronic receipts, invoices, and delivery records;
Bank or e-wallet confirmations and transaction reference numbers;
Recipient name, account number, QR code, wallet number, and financial institution;
Platform complaint, bank dispute, CICC, DTI, and police reference numbers;
Dates and times, including the time zone when relevant; and
Any proof that a legitimate business or person was being impersonated.

Take screenshots that show surrounding context, not only isolated statements. Export the conversation if the service permits it. Keep the original phone and files; make backup copies without editing or annotating the originals.

Electronic evidence may be used in Philippine proceedings, but authenticity, integrity, relevance, and the method by which it was obtained can matter. The Supreme Court’s Rules on Electronic Evidence govern matters such as electronic documents, authentication, and electronic communications.

Do not access the suspected scammer’s account, deceive a service provider into releasing private records, or attempt to “hack back.” Investigators can seek records through lawful processes, including applicable cybercrime warrants.

What information may not be immediately available

A displayed account name, social-media profile, SIM registration, or recipient name does not necessarily identify the person who planned the scam. Fraudsters may use hacked profiles, fabricated identities, payment intermediaries, or money-mule accounts.

Platforms generally should not disclose another user’s private registration or access records merely because a buyer asks. Under the Internet Transactions Act, covered platforms may be compelled to provide specified merchant information when a competent authority issues a subpoena in an investigation based on a sworn complaint. Other electronic records may require the legal process provided by the Cybercrime Prevention Act and the Supreme Court’s rules on cybercrime warrants.

Give investigators every identifier you possess, but avoid publicly accusing an unverified person. The named account holder may be a participant, an identity-theft victim, or an intermediary; the evidence must establish the person’s actual role.

Consumer remedies and criminal accountability are different

A consumer complaint primarily seeks remedies connected with the transaction. A criminal complaint asks the State to investigate and prosecute an offense. A civil action may seek recovery of money or damages.

Under the Internet Transactions Act, a claim for damages under that Act must be brought before the court or DTI within two years from the time the cause of action arose. That deadline should not be assumed to govern every possible civil, administrative, or criminal claim; other causes of action and offenses have their own rules and prescriptive periods.

If direct recovery remains necessary, a lawyer can assess whether a civil or small-claims case is appropriate, which person or business should be named, where the case should be filed, and whether prior barangay conciliation applies. Those questions depend on the parties, addresses, amount, documents, and nature of the claim.

Common mistakes that weaken a report

Waiting for weeks while continuing to negotiate with a disappearing seller;
Sending more money in the hope of releasing the first payment;
Deleting the conversation after becoming angry or embarrassed;
Blocking the account before recording its identifiers and messages;
Submitting cropped screenshots with no date, URL, or context;
Reporting only to the social-media platform and not to the payment provider;
Reporting only to the bank and not obtaining a law-enforcement record for suspected fraud;
Treating a platform ticket as equivalent to a police complaint;
Posting account numbers, IDs, addresses, or one-time passwords publicly;
Making exaggerated claims or naming people whose involvement has not been verified;
Paying a supposed “recovery agent” who promises guaranteed tracing or reimbursement; and
Allowing another person to use your account to receive or forward money.

Knowingly lending, selling, renting, buying, or allowing the use of a financial account for criminal proceeds can create liability under the Anti-Financial Account Scamming Act. If you were recruited to receive and transfer funds, stop moving the money, preserve the instructions, notify the institution, and obtain legal advice.

When help is urgent

Contact the financial institution and CICC immediately if:

Money was transferred within the last few hours;
The transaction is still pending;
Your banking or e-wallet account was taken over;
You disclosed a one-time password, PIN, password, card code, or recovery key;
A SIM swap or unauthorized device enrollment may have occurred;
The scammer is demanding another payment;
Several victims or recipient accounts appear to be involved; or
The victim is a senior citizen or otherwise vulnerable.

Call emergency services or go to the nearest police station if there are threats, extortion, stalking, danger to a child, or an immediate risk of physical harm.

Consult a Philippine lawyer promptly when the loss is substantial, the seller’s identity or location is disputed, a demand letter or court action is being considered, authorities ask for a sworn statement you do not understand, or you may have received or transferred suspicious funds through your own account.

Frequently asked questions

Can I recover money sent through a bank transfer or e-wallet?

Possibly, but recovery is not guaranteed. It depends heavily on how quickly the incident is reported, whether the money remains in the recipient account or financial system, the provider’s investigation, and the applicable legal and payment-network rules. Report immediately and request coordinated tracing or temporary holding of the disputed funds.

Should I wait seven days before reporting to the police or my bank?

No. Report suspected fraud and secure financial accounts immediately. For a covered consumer claim under the Internet Transactions Act, use the platform’s or seller’s internal redress mechanism; it is deemed exhausted if unresolved after seven calendar days.

Can I complain to DTI about a Facebook or Instagram seller?

Yes, if the seller was acting as an online merchant or business and the dispute is within DTI’s jurisdiction. The Internet Transactions Act, however, excludes genuine consumer-to-consumer transactions. A private-sale scam can still be reported to the platform, payment provider, CICC, PNP, or NBI.

Is a screenshot enough to prove the scam?

A screenshot can help, but it is stronger when supported by the original messages, URLs, account identifiers, payment records, device or file metadata, and testimony explaining how it was created and preserved. Keep the original electronic evidence.

Will filing a police report automatically freeze the recipient account?

No. Account restrictions and temporary holds must follow the applicable law and financial-institution procedures. Send the bank or e-wallet the police or CICC reference number as soon as it is available.

What if the seller used a fake or hacked profile?

Report both the fraud and the impersonated or compromised account. Preserve the profile URL, username, account ID, prior name changes if visible, payment details, and conversations. Do not assume that the person shown in the profile photo committed the offense.

Can I post the scammer’s name and account details online?

Public warnings can expose personal and financial information, prejudice an investigation, or wrongly identify an innocent account holder. Give complete information to the platform, financial institution, and authorities. If you warn others publicly, avoid sensitive data and state only facts you can substantiate.

Does reporting guarantee prosecution or a refund?

No. Authorities must evaluate jurisdiction, identity, intent, admissible evidence, and the elements of an offense. Refunds likewise depend on the transaction, available funds, provider rules, contractual rights, and applicable law.

Official references

This article provides general legal information, not advice for a particular case. Rights, deadlines, jurisdiction, and the correct remedy depend on the transaction and available evidence. Official sources and procedures were checked as of September 11, 2026.