Quick answer

If you paid an online seller and believe you were scammed, act immediately:

Contact the bank, e-wallet, card issuer, or payment provider. Report the transaction as fraudulent or disputed, ask whether the receiving account or remaining funds can be held, and secure your account. A report does not guarantee recovery, but delay can reduce the chance of preserving funds.
Report the seller, listing, and transaction through the platform’s official complaint system. Ask for a refund, cancellation, account preservation, and removal of the fraudulent listing.
Report the crime to the Philippine National Police Anti-Cybercrime Group (PNP-ACG), the National Bureau of Investigation (NBI), or a police station. Bring your identification, transaction records, communications, and a clear chronology.
For a business-to-consumer purchase, file a consumer complaint with the Department of Trade and Industry (DTI) if the seller or platform does not resolve the complaint through its internal process.
Secure any compromised accounts and preserve the evidence. Do not delete messages, reset the affected device, or publicly disclose passwords, one-time PINs, complete card numbers, or other sensitive information.

These reports serve different purposes. A platform complaint may lead to a refund or account restriction; a payment-provider report may help preserve funds; a DTI complaint addresses consumer remedies and regulatory violations; and a police or NBI complaint begins the criminal-investigation process. Filing with one does not necessarily replace the others.

First, determine what happened

Not every failed online purchase is automatically a criminal scam. The appropriate report depends on the facts.

Possible fraud or estafa

Warning signs include:

The seller used a false identity, fake business, stolen photos, or fabricated reviews.
The seller accepted payment for goods that apparently never existed.
The seller blocked you, deleted the account, or disappeared immediately after payment.
The tracking number, receipt, escrow page, or proof of shipment was fabricated.
You received a worthless substitute as part of an apparent plan to obtain your money.
The same account appears to have deceived several buyers.
Someone impersonated a known shop, courier, platform, bank, or friend.
Your account was accessed and used without authority after you disclosed credentials through deception.

Where deceit was used before or at the time money or property was obtained and the victim suffered damage because of it, the conduct may constitute estafa under the Revised Penal Code. If information and communications technology was used, the Cybercrime Prevention Act may also affect the offense and penalty. The precise charge depends on the evidence and is determined by investigators, prosecutors, and ultimately the courts—not by the label placed on the complaint.

Financial-account scams may also fall under the Anti-Financial Account Scamming Act, particularly where financial accounts are used as money-mule accounts or sensitive account information is obtained through a social-engineering scheme.

Consumer dispute or breach of contract

A delayed delivery, defective item, incorrect product, unhonored warranty, or disputed refund may initially be a consumer or contractual dispute rather than proof of criminal intent. You may still report the matter to the seller, platform, and DTI. Evidence that the seller never intended to perform may later support a criminal complaint.

Private person-to-person sale

The Internet Transactions Act generally covers business-to-business and business-to-consumer internet transactions. It expressly excludes consumer-to-consumer transactions, such as a genuine one-off sale between private individuals not acting in the ordinary course of business.

That exclusion does not legalize fraud. A victim of a person-to-person scam may still report the conduct to the payment provider and law-enforcement authorities and pursue remedies available under the Revised Penal Code, Civil Code, Cybercrime Prevention Act, and other applicable laws.

Step 1: Call the payment provider immediately

Use only the telephone number, in-app help feature, or website published by your bank, e-wallet, card issuer, or payment provider. Do not call a number supplied by the suspected scammer or found in an unverified social-media comment.

Tell the provider:

The transaction date, time, amount, reference number, and payment method
The sender and recipient account details shown in your record
Why you believe the transaction is fraudulent
Whether you authorized the payment but were deceived, or the transaction was entirely unauthorized
Whether you disclosed a password, PIN, one-time password, card security code, recovery code, or identification document
Whether additional transactions are pending

Ask the provider to:

Register a formal fraud or disputed-transaction report
Give you a case or reference number
Check whether the receiving account or remaining funds can be restricted or temporarily held
Coordinate with the receiving institution
Block or replace affected cards and secure compromised accounts
Explain its investigation process and any document deadline
Confirm its decision in writing

Under the Anti-Financial Account Scamming Act, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction, subject to BSP rules and statutory limits, and must participate in coordinated verification. This is not an automatic refund. Whether funds can be preserved or returned depends on such matters as the timing of the report, the location of the money, account activity, the institution’s investigation, and the applicable law.

If the provider does not resolve the complaint, escalate it through the Bangko Sentral ng Pilipinas Consumer Assistance Mechanism. BSP instructs consumers to complain first to the BSP-supervised financial institution and submit that complaint, its response if any, and supporting documents when escalating the matter.

Step 2: Secure your accounts and devices

If you clicked a suspicious link, installed an application, shared credentials, or lost control of an account:

Disconnect a potentially compromised device from the internet if unauthorized activity is continuing.
From a trusted device, change the password of your primary email account first, then your banking, e-wallet, shopping, and social-media accounts.
Use different, strong passwords and enable multi-factor authentication.
Sign out other sessions and remove unfamiliar devices, forwarding rules, recovery addresses, and linked applications.
Block or replace affected cards and SIMs through their official providers.
Contact your mobile provider if your SIM unexpectedly lost service, which can indicate unauthorized SIM replacement.
Monitor accounts and credit facilities for further activity.
Do not give anyone a one-time password or remote access to your phone—even if the person claims to be helping recover the money.

Preserve evidence before uninstalling a suspicious application or wiping a device. If you are unsure how to do that safely, seek technical or law-enforcement assistance.

Step 3: Preserve evidence before accounts or messages disappear

Save evidence in its original form whenever possible. Screenshots are useful, but they should be backed by downloads, receipts, message exports, emails, device records, or other original data.

Preserve:

The full profile name, username, account ID, profile link, shop link, and listing URL
Screenshots or screen recordings showing the profile, listing, price, representations, and date
The complete conversation, including voice messages and call logs
Order confirmations, invoices, electronic receipts, and tracking records
Bank or e-wallet transaction records and reference numbers
The recipient’s account name, account number or masked number, QR code, mobile number, bank, or e-wallet
Courier labels, parcels, packaging, and the item actually received
Photos or an unedited video of opening the parcel, if available
Emails in their original format, including headers where possible
Platform complaint numbers and responses
Payment-provider report numbers and written findings
Names and contact details of other witnesses or victims
A chronological account of what was promised, what induced payment, and what happened afterward

Keep at least two secure copies. Retain the original device and files without editing metadata. Do not annotate the only copy of a screenshot or crop out the date, URL, username, or transaction reference.

Do not access the suspected scammer’s account, impersonate another person, publish private financial information, or threaten the suspect. Those actions can create legal and safety problems and may compromise the investigation.

Step 4: Report the seller and listing to the platform

Use the marketplace or social-media platform’s internal redress or reporting mechanism. Select the category closest to “fraud,” “scam,” “item not received,” “counterfeit,” or “seller misrepresentation.”

Request:

Cancellation or refund
Preservation of the seller’s account and transaction records
Removal of the listing
Restriction of the seller’s account where warranted
Confirmation and a complaint reference number

State the facts briefly and in date order. Attach the most probative records rather than an unsorted mass of screenshots.

For covered internet transactions, the Internet Transactions Act requires e-marketplaces and other digital platforms to provide an effective and responsive reporting mechanism. It also requires an aggrieved party to use the platform’s, marketplace’s, or e-retailer’s internal redress mechanism before filing a complaint with a court or appropriate government agency. The internal mechanism is deemed exhausted if the complaint remains unresolved after seven calendar days.

Do not interpret that seven-day rule as a reason to delay securing an account, disputing a payment, preserving evidence, or seeking urgent police assistance. Those actions may be time-sensitive.

The seller or e-retailer is generally the party primarily liable to compensate the online consumer. A platform is not automatically liable merely because the transaction occurred there. Under the Internet Transactions Act, a platform may incur subsidiary or solidary liability only in specified circumstances—for example, particular failures to exercise ordinary diligence, disclose a foreign merchant’s contact information after notice, or expeditiously remove prohibited or imminently dangerous goods after notice. Platform liability therefore depends on the platform’s role, notice, conduct, and the evidence.

Step 5: File a consumer complaint with DTI

A consumer may use the DTI Consumer Care portal for a covered complaint against an online merchant, e-retailer, marketplace, or platform. The DTI’s E-Commerce Bureau is also authorized to receive and refer complaints involving internet transactions under a “no-wrong-door” policy.

Before filing, ordinarily complete the seller’s or platform’s internal complaint process and retain proof that:

The complaint was rejected;
The offered solution was not acceptable; or
Seven calendar days passed without resolution.

Prepare:

Your name and contact details
The respondent’s business, shop, account, and available contact details
A concise chronology
The amount paid
The product or service promised
The problem and the remedy requested
Proof of purchase and payment
Relevant communications
Proof of the internal complaint and its result

For defects, malfunction, loss not attributable to the consumer, failure to honor a warranty, or other liability arising from the contract, an online consumer may seek repair, replacement, refund, or another remedy available under the Consumer Act and related laws. When replacement or refund is granted, the merchant is generally entitled to the return of the original goods without cost to the consumer and within a reasonable period, unless the parties agree otherwise.

The Internet Transactions Act provides a two-year period from the accrual of the cause of action for a consumer to claim damages by filing a case before the court or DTI. Do not wait until the end of that period: another law, procedural rule, warranty, payment-dispute process, or evidentiary concern may impose a different or much shorter practical deadline.

A DTI complaint is not the same as a criminal complaint. If the facts suggest deliberate fraud, file with law enforcement as well.

Step 6: Report the crime to the PNP or NBI

You may approach:

The PNP Anti-Cybercrime Group;
The nearest police station, which can receive the report and coordinate referral where appropriate; or
The National Bureau of Investigation, including its complaints, fraud, and cybercrime services.

Bring the originals and copies of:

A government-issued ID
Your written chronology
Proof of payment
Complete communications
Seller and recipient-account information
Platform and payment-provider complaint records
The item and packaging, if relevant
Any affidavit or additional document requested by the receiving office

Explain exactly which representation caused you to pay. Distinguish what you personally saw or heard from what another person told you. Do not guess the suspect’s real identity merely because an account or SIM is registered under a particular name; investigators must determine who actually controlled or used it.

Ask for the report, complaint, or reference number and the office or investigator handling the matter. Keep a record of every submission and follow-up.

A report does not guarantee arrest, prosecution, or recovery. Investigators may need account records, subscriber information, platform data, warrants, witness statements, or evidence linking a real person to the online identity. Cross-border transactions and rapidly transferred funds can make recovery more difficult.

Your available remedies

Depending on the facts, a victim may pursue several tracks at the same time:

Refund or contractual relief

The seller or platform may provide cancellation, replacement, repair, or refund under the contract, warranty, platform rules, Consumer Act, or Internet Transactions Act.

DTI administrative relief

DTI may mediate or adjudicate covered consumer disputes and may investigate regulatory violations. Administrative fines, compliance measures, or takedown action are imposed by the proper authority after the required process; they are not automatically awarded to the complainant as compensation.

Criminal complaint

Deliberate online deception may support estafa or another offense. Use of a computer system can bring the conduct within the Cybercrime Prevention Act. Account takeover, money-mule activity, social engineering, identity misuse, falsified documents, threats, or unauthorized access may implicate additional laws. The prosecutor determines whether the evidence establishes probable cause for a particular charge.

Civil claim

A victim may seek recovery or damages where supported by contract, tort, consumer law, or another legal basis. A civil claim can sometimes be included with a criminal case or pursued separately, but the correct procedure depends on the claim, amount, parties, and status of any criminal proceeding.

For a straightforward claim to recover money, the judiciary’s small-claims procedure may be relevant if the claim falls within its subject matter and monetary limit. Confirm the current requirements and forms through the Supreme Court’s official judiciary website or obtain legal advice before filing.

Common mistakes that can hurt a report

Waiting several days before contacting the payment provider
Continuing to send “release,” “verification,” “tax,” or “recovery” fees
Trusting someone who promises fund recovery for an advance payment
Deleting chats after blocking the seller
Submitting cropped screenshots that omit usernames, dates, URLs, or reference numbers
Reporting only to the platform when criminal fraud is apparent
Reporting only to police while missing a short card, bank, e-wallet, or platform dispute window
Describing a dispute as fraud without identifying the specific deception
Publicly posting full account numbers, identification documents, addresses, or other sensitive data
Assuming a registered account holder is necessarily the person who operated the scam
Accepting an off-platform settlement without documenting its terms and verifying cleared funds
Signing an affidavit containing guesses, exaggerations, or facts supplied by others
Filing a knowingly false report; malicious false reporting that causes funds to be held can itself result in liability under the Anti-Financial Account Scamming Act

When help is urgent

Contact the payment provider and law enforcement without delay when:

Unauthorized transfers are still occurring;
The recipient may still hold the transferred funds;
Your bank, e-wallet, email, social-media, or mobile account has been taken over;
You disclosed a password, one-time password, recovery code, card security code, or identity document;
The scammer is threatening violence, blackmail, or publication of intimate material;
A child, senior citizen, or otherwise vulnerable person is being targeted;
The transaction involves a large amount, several victims, multiple recipient accounts, or an organized operation;
You received a dangerous, prohibited, or harmful product; or
A deadline from a bank, card issuer, platform, prosecutor, court, or government agency is approaching.

For immediate physical danger, contact the local police or emergency services. For a significant loss, complicated evidence, cross-border suspect, threatened civil action, or uncertainty about affidavits and filing deadlines, consult a Philippine lawyer promptly. The Public Attorney’s Office may be able to assist qualified indigent persons, subject to its mandate and eligibility rules.

Frequently asked questions

Can I recover money sent voluntarily through an e-wallet or bank transfer?

Possibly, but not automatically. A payment can still be fraudulent even if you personally authorized it because of deception. Recovery depends on how quickly the report was made, whether funds remain traceable or available, the institutions’ findings, and the legal basis for restitution. Report immediately and obtain a case number.

Should I wait seven days before going to the police?

No. The seven-calendar-day rule concerns exhaustion of the internal redress mechanism under the Internet Transactions Act. It should not be used to postpone urgent account security, payment reporting, evidence preservation, or police assistance where a crime or continuing loss is suspected.

Can I complain if the seller blocked me and I do not know the real name?

Yes. Preserve the username, URLs, account IDs, payment destination, mobile numbers, messages, and transaction references. Platforms and financial institutions generally cannot disclose protected account information merely on a private request, but competent authorities may obtain information through lawful investigative processes.

Is a social-media seller covered by the Internet Transactions Act?

A person who regularly sells goods or services as a business through social media may be an online merchant, and the social-media service may have statutory platform obligations. A genuine private, consumer-to-consumer sale is excluded from that Act, although fraud and other laws may still apply.

Is “no video, no refund” always valid?

Not necessarily. An unboxing video can be valuable evidence, but a seller’s or platform’s evidentiary policy does not automatically remove rights granted by law. The outcome still depends on the available evidence, the nature of the defect or non-delivery, the contract, and applicable consumer law.

Can I demand that the platform reveal the seller’s identity?

You may ask the platform to preserve the records and cooperate with authorities. Direct disclosure to a private complainant may be restricted by privacy and other laws. The Internet Transactions Act requires covered platforms to provide specified information when a competent authority issues a subpoena in an investigation based on a sworn complaint meeting the statutory conditions.

Will reporting the account automatically cause it to be frozen?

No. The bank or e-wallet must act under the Anti-Financial Account Scamming Act, BSP rules, its fraud-management procedures, and any lawful order. A temporary hold, account restriction, or release of information is not automatic merely because a report was submitted.

Can I file both a DTI complaint and a criminal complaint?

Yes, when the facts support both. The DTI process addresses covered consumer and regulatory issues; police, NBI, prosecutors, and courts handle criminal liability. Coordinate the records you submit and disclose related proceedings when asked.

Official legal and reporting sources

This article provides general legal information, not advice for a particular case and not a prediction of recovery, prosecution, or liability. Procedures and results depend on the transaction, documents, parties, and evidence. Official sources and current rules were checked on September 11, 2026.