Quick answer

If you paid an online seller and believe you were scammed, act immediately:

Contact your bank, e-wallet, card issuer, or payment provider through its official fraud channel. Ask it to flag the transaction, secure your account, trace the transfer, and determine whether the recipient institution can hold or recover the funds.
Report the seller and transaction inside the shopping or social-media platform. Request cancellation, refund, preservation of account records, and restriction of the seller’s account.
Report suspected criminal fraud to the PNP, NBI, or Cybercrime Investigation and Coordinating Center (CICC).
For a consumer dispute with a business seller, use the platform’s internal complaint process and, if unresolved, file through the DTI Consumer CARe System.

These reports serve different purposes. A platform or DTI complaint may help obtain consumer relief, while a bank report may help preserve disputed funds. A criminal complaint allows law enforcement to investigate the people and accounts behind the scam. Filing with only one office may not accomplish all three.

What to do in the first few minutes

1. Call the payment provider

Use only the telephone number in the provider’s official app, website, card, or account statement. Do not call a number sent by the supposed seller.

Tell the provider:

the transaction was connected to suspected fraud;
the exact amount, date, time, reference number, and receiving account;
whether you personally authorized the payment;
whether you disclosed an OTP, password, PIN, card details, or identification document;
whether the scammer still has access to your device or account; and
what remedy you are requesting, such as blocking the card, securing the account, tracing the transfer, initiating a chargeback where available, or coordinating with the receiving institution.

Ask for a case or ticket number and written confirmation. If money was sent through a bank or e-wallet, speed matters because the recipient may transfer or withdraw it.

Under the Anti-Financial Account Scamming Act or Republic Act No. 12010, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction, subject to BSP rules. The statutory maximum is 30 calendar days unless a court extends it. The law does not guarantee that money will still be present, that every report will result in a hold, or that the victim will automatically receive a refund.

If the provider does not satisfactorily resolve the complaint, the BSP’s Consumer Assistance Mechanism is a second-level recourse for customers of BSP-supervised institutions. The BSP instructs consumers to complain first through the institution’s Financial Consumer Protection Assistance Mechanism or customer-service channel. An unresolved complaint may then be escalated through the BSP Online Buddy (BOB) on the BSP website. If BOB is inaccessible, the BSP’s official guide permits submission of its Complaint/Inquiry/Reply form to consumeraffairs@bsp.gov.ph, together with proof of the prior complaint to the institution. See the BSP’s complaint guide.

A complaint to the BSP is not a substitute for a criminal report.

2. Secure your accounts and device

If you disclosed credentials or installed an app at the scammer’s direction:

stop communicating with the scammer;
disconnect a compromised device from the internet if remote access may still be active;
contact the affected financial institution before changing anything that could interfere with its security instructions;
change passwords using a different, trusted device;
sign out other sessions and enable multi-factor authentication;
block or replace affected cards;
change the PIN or security code where the provider allows it;
notify your mobile network if your SIM stopped working unexpectedly;
check recent transactions, linked devices, forwarding rules, and recovery details; and
preserve the suspicious app, link, file name, telephone number, and messages before deleting them.

Never give an OTP, PIN, password, or remote access to a person claiming that these are needed to process a refund. Government agencies and legitimate financial institutions do not need your password or PIN to receive a complaint.

3. Open a dispute on the platform

Use the platform’s official order-dispute or report function. Select the most accurate ground—for example, item not received, counterfeit item, materially different product, unauthorized transaction, or fraudulent seller.

Request:

cancellation or refund;
suspension of payment release, if still possible;
preservation of the seller’s registration, login, payment, message, and transaction records;
removal or restriction of the fraudulent listing or account; and
a case number and written result.

Do not mark an order “received” merely because the seller promises an off-platform refund. Do not close an active dispute until the promised refund has actually cleared.

For business-to-consumer transactions covered by the Internet Transactions Act of 2023, Republic Act No. 11967, an aggrieved party must first use the internal redress mechanism of the digital platform, e-marketplace, or e-retailer. The mechanism is deemed exhausted if the complaint remains unresolved seven calendar days after filing.

That seven-day provision concerns the Act’s consumer-redress process. It should not be treated as a reason to delay securing an account, notifying a payment provider, preserving evidence, or seeking urgent law-enforcement assistance.

Where to report the scam

Philippine National Police

A victim may report to the PNP, including its cybercrime unit, or seek assistance at a police station. The BSP’s current official complaint guide lists the PNP Anti-Cybercrime Group contact email as acg@pnp.gov.ph.

Bring identification and both printed and electronic copies of the evidence. Ask whether the office will record the incident, take a sworn complaint or affidavit, or refer the matter to the proper cybercrime unit or prosecutor. Keep the blotter entry, referral, or complaint reference number.

A police report documents the incident; it does not by itself mean that a criminal case has already been filed in court.

National Bureau of Investigation

The NBI lists cybercrime, fraud and financial crimes, and complaints assessment among its services. Its regional and district offices are also listed on the official site. The BSP’s official guide lists the NBI Cybercrime Division email as ccd@nbi.gov.ph.

Ask the receiving office about its current documentary requirements before traveling. Depending on the facts, investigators may request a written narrative, affidavit, identification, transaction records, screenshots, and the device used.

Cybercrime Investigation and Coordinating Center

The BSP’s official guide lists the CICC reporting email as report@cicc.gov.ph. Government guidance also identifies 1326 as the hotline for cyber-fraud victims.

CICC may assist with coordination and referral. A report to CICC should not replace an immediate fraud report to the bank, e-wallet, or card issuer.

Department of Trade and Industry

For a transaction with an online merchant or e-retailer, file through the DTI Consumer CARe System after using the seller’s or platform’s internal redress mechanism.

State the remedy you want, such as repair, replacement, refund, or another remedy allowed by law. Attach proof that the internal complaint was filed and either denied or left unresolved for seven calendar days.

The Internet Transactions Act generally covers business-to-business and business-to-consumer internet transactions where a party is in the Philippines or the online business is availing of the Philippine market and has sufficient contacts here. It expressly excludes consumer-to-consumer transactions. A one-time sale by another private individual may therefore fall outside that Act, although deception may still support criminal or civil remedies under other laws.

The Act makes the online merchant or e-retailer primarily liable to indemnify the consumer in civil actions or administrative complaints arising from the transaction. Platform liability is fact-dependent; an e-marketplace is not automatically liable for every dishonest seller.

For covered defects, malfunctions, losses not caused by the consumer, warranty failures, or other contractual liability, the Act recognizes repair, replacement, refund, and remedies available under the Consumer Act and other laws. A refund is not automatic merely because a buyer changed their mind.

A claim for damages under the Internet Transactions Act must be filed in court or with the DTI within two years from the time the cause of action arose. Do not wait for that deadline: platform, payment-provider, evidentiary, and criminal time limits may be shorter or depend on the particular facts.

Evidence to preserve

Save the original evidence before the seller deletes the account or changes the listing:

the complete listing, including price, description, photos, seller name, profile URL, account handle, and publication date;
the order page, invoice, electronic receipt, delivery record, and platform case number;
the complete conversation, not only selected messages;
emails with full headers where available;
payment confirmation, bank or e-wallet reference number, recipient name, account number, QR code, and transaction history;
the seller’s telephone numbers, email addresses, websites, social-media accounts, and payment instructions;
photographs or an uninterrupted unboxing video showing the parcel label, packaging, contents, and condition;
courier tracking and communications;
recordings that were lawfully obtained;
the web address of each page and the date and time it was accessed;
all reports, acknowledgments, ticket numbers, and responses; and
a chronological account written while events are fresh.

Keep original files. Avoid cropping the only copy of a screenshot or editing images in a way that removes timestamps, URLs, or other context. Export chats if the platform allows it, and keep backups in at least two secure locations.

Do not publicly post your full account number, address, identification documents, or unredacted transaction records. Give sensitive evidence only through verified official channels.

Preparing a clear complaint

A useful complaint is factual and chronological. Include:

Your full name and reliable contact details.
The seller’s known name, profile, telephone number, email address, and payment account.
What was advertised and what the seller represented.
The date, amount, and method of payment.
What happened after payment.
Why you believe the conduct was fraudulent rather than an ordinary delivery or service dispute.
The steps already taken with the seller, platform, courier, and payment provider.
The remedy requested.
A numbered list of attachments.
A declaration that the information is true based on your personal knowledge and records.

Describe unknown facts as unknown. Do not identify a person as the perpetrator merely because their name appears on the receiving account; accounts can be stolen, rented, sold, or used by money mules. Investigators must determine who controlled the account and participated in the scheme.

If an agency requires an affidavit, sign or swear to it only in the manner instructed by that agency, prosecutor, or authorized administering officer.

What law may apply?

The legal classification depends on the evidence.

A fake sale intended from the beginning to induce payment may constitute estafa by false pretenses under Article 315 of the Revised Penal Code. When information and communications technology is used to commit an offense under the Revised Penal Code or a special law, Section 6 of the Cybercrime Prevention Act of 2012 may apply. The precise charge and penalty depend on the alleged acts, amount, applicable amendments, and evidence.

The Anti-Financial Account Scamming Act separately addresses conduct including money-mule activities and specified social-engineering schemes involving financial accounts. Not every undelivered online order falls within that law.

For legitimate business sellers, the Internet Transactions Act, its official implementing rules, the Consumer Act, warranties, and ordinary contract law may provide administrative or civil remedies.

A late shipment, poor-quality product, billing mistake, or disagreement over specifications is not automatically a crime. Fraud generally requires proof of deception and the other elements of the particular offense. Consumer remedies may still be available even when the evidence does not establish criminal liability.

Common mistakes to avoid

Waiting for the scammer’s repeated promise of a refund before contacting the bank.
Sending an additional “release,” “verification,” “insurance,” or “recovery” fee.
Paying a person who claims they can recover the money through insider access.
Moving the conversation outside the platform unnecessarily.
Deleting chats, blocking the account, or factory-resetting the device before preserving evidence.
Posting accusations or personal information publicly instead of reporting through official channels.
Assuming that a platform report automatically becomes a police complaint.
Assuming that a police blotter automatically starts a prosecution.
Giving investigators only screenshots without transaction references or a clear timeline.
Filing a BSP complaint before first reporting the concern to the BSP-supervised institution.
Letting the seller persuade you to close a platform dispute before the refund clears.
Making exaggerated or knowingly false claims. Republic Act No. 12010 penalizes malicious, bad-faith reporting that causes an unwarranted hold of funds.

When help is urgent

Seek immediate assistance if:

the scammer is currently moving money or still controls controls your account;
your SIM, email, social-media, bank, or e-wallet account has been taken over;
you installed remote-access software or shared an OTP, PIN, or password;
the scammer threatens violence, blackmail, doxxing, or distribution of intimate material;
a child’s safety or information is involved;
identity documents, facial scans, signatures, or biometrics were obtained;
several victims or large coordinated transfers appear to be involved;
the platform or provider warns that a dispute or chargeback deadline is near; or
you receive legal papers, a subpoena, or a demand connected with money that passed through your account.

For immediate danger, contact the national emergency hotline or the nearest police station. For substantial losses, identity theft, disputed authorization, multiple recipient accounts, or complex cross-border facts, consult a Philippine lawyer promptly.

Frequently asked questions

Can I recover money sent by bank transfer or e-wallet?

Possibly, but recovery is not guaranteed. Report immediately so the institutions can trace the transfer and consider measures allowed by law and BSP rules. Recovery becomes harder once funds are withdrawn or moved through several accounts.

Should I report to the DTI or the police?

Often both, because they perform different functions. DTI handles consumer redress and regulatory concerns involving covered businesses. Police, NBI, and other law-enforcement bodies investigate suspected crimes. A purely private consumer-to-consumer transaction is excluded from the Internet Transactions Act but may still be reported as suspected fraud.

Must I wait seven days before reporting?

For a covered Internet Transactions Act claim, the platform’s internal redress mechanism is deemed exhausted if the complaint remains unresolved after seven calendar days. Do not delay an urgent report to your payment provider, account-security action, evidence preservation, or emergency law-enforcement assistance.

Is a seller automatically a scammer if an order never arrived?

No. Non-delivery may result from fraud, a courier problem, stock failure, or breach of contract. Preserve the seller’s representations, payment records, subsequent conduct, and attempts to resolve the problem. Authorities will determine which remedies or offenses the evidence supports.

Can I report a Facebook, Instagram, or messaging-app seller?

Yes. Report the account through the service’s official reporting tools and preserve the profile URL, messages, listing, and payment information. If the person was acting as a business seller, DTI consumer remedies may apply. If it was a private one-off sale, the Internet Transactions Act’s business-to-consumer protections may not apply, but suspected criminal deception can still be reported.

Will reporting the receiving account prove who committed the scam?

No. It is an important investigative lead, but the named account owner may be the offender, an accomplice, a money mule, an identity-theft victim, or another intermediary. Avoid public accusations while the facts are being investigated.

Do I need a lawyer to make the initial reports?

Usually not. A victim may notify the provider, platform, DTI, PNP, NBI, or CICC directly. Legal advice is valuable when the loss is substantial, the facts are disputed, the complaint involves several jurisdictions, or civil or criminal proceedings are being considered.

Official resources

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Procedures and available remedies depend on the transaction, payment method, platform rules, evidence, and instructions of the receiving agency. Official sources and procedures were checked on September 12, 2026.