Quick answer

If you paid an online seller and the item never arrived, the seller disappeared, or the transaction involved deliberate deception, act immediately:

Contact your bank, e-wallet, card issuer, or payment provider and report the transaction as fraudulent. Ask whether the transfer can be recalled, the recipient account can be flagged, or the funds can be temporarily held.
Preserve the seller’s profile, listing, messages, payment records, account details, delivery information, and every complaint reference number.
Report the seller through the shopping platform or social-media site’s internal complaint system.
For a business-to-consumer transaction, file a consumer complaint with the Department of Trade and Industry (DTI).
If there was intentional deceit, identity theft, account takeover, or another apparent crime, report it to the Philippine National Police Anti-Cybercrime Group (PNP-ACG), the National Bureau of Investigation Cybercrime Division, or the nearest appropriate police or NBI office.

These routes serve different purposes. A platform or DTI complaint may help obtain a refund or other consumer remedy. A police or NBI complaint seeks criminal investigation. Reporting to one does not automatically accomplish the other.

Do not wait for the scammer to respond before alerting your payment provider. Recovery becomes harder once funds have been withdrawn or transferred through several accounts.

First decide: consumer dispute or possible scam?

A delayed parcel, poor-quality product, or seller who initially refuses a refund is not automatically a crime. It may be a contractual or consumer dispute.

Possible fraud is more likely when the available evidence shows that the seller used deceit to obtain payment—for example:

the store, product, tracking number, receipt, or identity was fabricated;
the seller took payment and immediately blocked the buyer;
the seller repeatedly demanded new “release,” “insurance,” “tax,” or “verification” payments;
the seller impersonated a legitimate shop, platform, courier, or payment provider;
the product advertised never existed;
the same account appears to have taken money from several buyers without intending to deliver;
the seller used another person’s identity or a mule account; or
the buyer’s account was accessed and used without authority.

This distinction matters. DTI generally handles consumer-protection issues involving businesses and online merchants, while the PNP and NBI investigate crimes. A victim may need both routes.

The Internet Transactions Act of 2023 applies to covered business-to-business and business-to-consumer internet transactions where a party is in the Philippines or an online business avails itself of the Philippine market. It expressly excludes ordinary consumer-to-consumer transactions. However, that exclusion does not prevent a victim from reporting apparent fraud to law enforcement or pursuing remedies under other laws.

Step 1: contact the payment provider immediately

Call the official fraud or customer-service channel of the bank, e-wallet, card issuer, remittance company, or payment platform used. Obtain the number only from its official app, website, card, or verified statement—not from a link or telephone number sent by the suspected scammer.

Provide:

the amount, date, time, and transaction reference number;
the recipient’s account name, number, mobile number, or wallet identifier;
a short explanation of how the scam occurred;
copies of relevant messages and payment confirmations; and
the police, NBI, platform, or DTI reference number if already available.

Ask the provider to:

mark the transaction as disputed or fraudulent;
secure your account if login details, an OTP, PIN, password, card number, or device access may have been compromised;
coordinate with the receiving institution;
preserve transaction and account records;
determine whether the funds remain available for a hold or recall; and
give you a written acknowledgment and case number.

Under the Anti-Financial Account Scamming Act, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction under the applicable BSP rules. The statutory holding period may not exceed 30 calendar days unless extended by a competent court. The Act does not guarantee reimbursement: whether money can be held or recovered depends on matters such as the nature of the transaction, the available records, the institution’s legal duties, and whether the funds remain traceable.

If the institution does not satisfactorily address your complaint, follow its formal escalation process. Complaints involving a BSP-supervised institution may then be raised through the BSP’s consumer-assistance channels. BSP generally expects the consumer to have first complained to the financial institution concerned.

If your account or credentials were compromised

In addition to disputing the payment:

change the affected password and any reused passwords;
sign out other devices and revoke unfamiliar sessions;
enable multi-factor authentication;
lock or replace exposed cards;
ask your mobile provider to secure your SIM if SIM takeover is suspected;
review recent transactions and beneficiaries;
preserve security alerts, login notices, and OTP messages; and
warn contacts if the scammer gained control of your messaging or social-media account.

Never give an OTP, PIN, password, card security code, recovery code, or remote access to someone claiming that it is needed to “reverse” the transaction. A second person offering paid recovery services may be another scammer.

Step 2: preserve evidence before accounts disappear

Capture evidence before reporting or confronting the seller, because profiles, listings, messages, and transaction histories may be deleted.

Preserve the following where available:

the complete product listing, including its URL;
the seller’s profile URL, username, user ID, page name, and profile history;
advertised price, product description, photos, promises, warranties, and delivery terms;
the full conversation, not only selected messages;
timestamps and the names of the applications used;
order confirmation, invoice, receipt, and order number;
bank, card, remittance, or e-wallet records;
recipient account names, account numbers, QR codes, mobile numbers, and transaction references;
courier bookings, tracking numbers, delivery labels, and messages;
emails, SMS messages, voice notes, and call logs;
the seller’s telephone numbers, email addresses, websites, and other accounts;
photographs or an unboxing video if an empty parcel, counterfeit item, or different product arrived;
the platform’s response and every complaint or ticket number; and
names and contact details of other victims or witnesses, if they voluntarily agree to be identified.

Take screenshots that show the entire screen, account name, date, and URL where possible. Also download or export original records. Keep the files in their original format and make a backup. Do not edit the originals; use a separate copy if something must be highlighted.

Prepare a simple chronology listing each event, date, amount, representation made by the seller, payment, promised delivery date, follow-up, and response. This makes a complaint much easier to assess.

Electronic documents and data may be used as evidence, but authenticity and proper presentation still matter. The applicable framework includes the Supreme Court’s Rules on Electronic Evidence.

Step 3: use the platform’s internal complaint process

Report the listing, seller, and transaction through the official dispute or redress system of the marketplace or social-media platform. Request a refund, cancellation, account investigation, or other remedy available under the platform’s rules.

For transactions covered by the Internet Transactions Act, an aggrieved party must generally use the platform, e-marketplace, or e-retailer’s internal redress mechanism before filing a complaint with a court, government agency, or alternative dispute-resolution body. The mechanism is considered exhausted if the complaint remains unresolved for seven calendar days after filing.

That requirement should not be treated as a reason to delay urgent action. Immediately contact the payment provider where money may still be traceable, secure any compromised account, and seek police assistance where there is an ongoing threat, identity theft, extortion, or imminent loss. Preserve proof that you used the platform process and note when the seven-day period expires.

A marketplace may have legal obligations beyond merely providing a “report” button. The Internet Transactions Act requires covered marketplaces and platforms to maintain redress mechanisms and, in specified circumstances, provide seller information when a competent authority issues a subpoena in an investigation based on a sworn complaint. Victims should ask investigators—not attempt to impersonate authorities—to obtain protected subscriber information.

Step 4: file the appropriate DTI consumer complaint

Use the DTI route when the transaction was with an online merchant or business and the issue concerns non-delivery, misrepresentation, a defective or different product, warranty failure, an unfair sales practice, or refusal of an available consumer remedy.

Complaints may be initiated through the DTI Consumer Care system or the appropriate DTI office. Check the portal for its current form, attachment, and identity-verification requirements.

A useful complaint should identify:

the complainant and reliable contact details;
the business, merchant, platform, and known address or contact details;
the order and transaction details;
a chronological statement of what happened;
the representations that were false or not fulfilled;
steps already taken with the seller and platform;
the exact remedy requested, such as refund, replacement, repair, or delivery; and
supporting documents.

Under the Internet Transactions Act, an online consumer may pursue repair, replacement, refund, or other remedies allowed by the Consumer Act and relevant laws when goods are defective, malfunctioning, lost without the consumer’s fault, or do not conform to the contract or warranty. The online merchant or e-retailer is generally primarily liable to indemnify the consumer in civil or administrative claims. Platform liability depends on the statutory facts; a platform is not automatically liable for every dishonest seller.

The Act provides a two-year period, counted from when the cause of action arose, for a consumer to claim damages by filing before the court or DTI under that law. Do not wait until the end of that period. Other claims or offenses may have different limitation rules, and evidence may disappear much sooner.

DTI proceedings do not replace a criminal complaint when the evidence indicates intentional fraud.

Step 5: report apparent criminal conduct

The Cybercrime Prevention Act assigns cybercrime enforcement responsibilities to the PNP and NBI. You may approach:

the PNP Anti-Cybercrime Group or its regional cybercrime unit;
the nearest police station, which can direct or refer the matter to the appropriate cybercrime unit;
the NBI, including its Cybercrime Division or an appropriate regional or district office; or
an official government cybercrime reporting channel identified by the Cybercrime Investigation and Coordinating Center.

Check the agency’s official website for its current address, appointment system, telephone number, email address, or online form. Fraudsters sometimes create fake “government help desks,” so confirm that the domain is an official government site.

Bring or prepare:

a valid government-issued ID;
a complaint-affidavit or written narrative, if requested;
the evidence checklist and chronology;
payment records and recipient-account details;
printed copies and securely stored electronic copies;
the platform and financial-provider complaint references; and
information showing where you were located, where payment was made, and where relevant events occurred.

Tell the investigator if:

the scammer is still communicating with you;
additional victims are known;
the recipient account may still contain funds;
threats, extortion, stalking, or identity theft are involved;
a child or vulnerable person is at risk; or
the platform, provider, or account may soon delete relevant data.

The precise offense depends on the evidence. A deceptive sale may potentially constitute estafa under Article 315 of the Revised Penal Code when its required elements are established. If an offense under the Revised Penal Code or another special law is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act may apply. Computer-related fraud, identity theft, money-mule activity, and social-engineering schemes have their own statutory requirements. It is the job of investigators and prosecutors to determine the legally supportable charge.

Do not label a person publicly as a criminal merely because a parcel was delayed or a dispute remains unresolved. Give the facts and records to the proper platform, regulator, and authorities.

What reporting can—and cannot—do

A complaint can help authorities identify an account holder, preserve records, connect related reports, investigate criminal conduct, mediate a consumer dispute, or pursue administrative action. It does not guarantee:

immediate identification or arrest of the person behind an account;
a refund;
reversal of a completed transfer;
that the named recipient was the principal scammer rather than a mule or identity-theft victim; or
that every failed transaction will be treated as a crime.

The name displayed on a payment receipt may identify an account holder, but it does not by itself prove who operated the seller’s profile or planned the fraud. Avoid harassing that person or publishing their private information. Give the details to the financial institution and investigators.

If the seller is an individual or is overseas

A casual sale between two end-users is generally a consumer-to-consumer transaction and falls outside the Internet Transactions Act. DTI may therefore not be the correct forum for that dispute. Criminal, civil, platform, and payment-provider remedies may still be available.

A foreign seller is not automatically beyond Philippine law. The Internet Transactions Act can apply when the online business avails itself of the Philippine market and has the required minimum contacts. In practice, enforcement and recovery may be more difficult when the person, platform, assets, and records are abroad. Report promptly so authorities can assess preservation requests or international cooperation.

Possible civil recovery

If the defendant can be identified and the claim is supported by documents, civil recovery may be possible independently of, or alongside, a criminal complaint. Depending on the amount and nature of the claim, the Rules on Small Claims Cases or ordinary civil procedure may apply.

Venue, jurisdiction, barangay conciliation, required parties, filing fees, and the correct cause of action depend on the facts. Obtain current forms and instructions from the Office of the Court Administrator’s small-claims resources or the proper first-level court. A police report does not automatically recover money, and a civil case does not automatically establish criminal liability.

Common mistakes to avoid

Waiting for repeated promises. Report the payment promptly even if the seller says a refund is “processing.”
Sending another payment. Legitimate recovery normally does not require a new “unlocking,” “clearance,” or “verification” fee.
Deleting or blocking too early. Preserve the conversation and identifiers first. Do not continue engaging if doing so is unsafe.
Keeping only cropped screenshots. Save complete records, original files, URLs, timestamps, and transaction references.
Reporting only to the social-media platform. Also contact the payment provider and, where appropriate, DTI and law enforcement.
Treating a DTI complaint as a criminal complaint. Consumer mediation and criminal investigation are different processes.
Assuming every failed sale is estafa. Criminal fraud requires proof of the elements of the applicable offense, not merely non-performance.
Posting accusations and personal data publicly. This can expose innocent account holders or interfere with an investigation.
Paying a “hacker,” fixer, or recovery agent. No private person can guarantee recovery, freezing, arrest, or prosecution.
Giving investigators only a phone full of screenshots. Prepare organized copies and keep the originals and backups.
Filing false or exaggerated information. State what you personally know, distinguish assumptions from facts, and disclose later refunds or developments.

When help is urgent

Seek immediate assistance from the payment provider and law enforcement when:

an unauthorized transfer is still in progress;
the scammer has your password, OTP, PIN, card data, ID images, or remote access to your device;
the recipient is demanding additional payment while threatening harm or disclosure of private material;
your identity or account is being used to deceive other people;
the transaction involves a child, sexual exploitation, weapons, dangerous goods, or an immediate safety risk;
a large amount or essential household funds are at stake;
other victims are actively sending money; or
relevant accounts, messages, or funds are likely to disappear.

For an immediate threat to life or physical safety, contact the national emergency service or the nearest police station.

FAQ

Can I report the scam even if the amount is small?

Yes. There is no general minimum-loss requirement for reporting suspected fraud to the police or NBI. Small reports may also help connect multiple transactions involving the same accounts. Whether a case proceeds, and what offense or remedy applies, depends on the evidence.

Should I report to DTI or the police?

Use DTI for a covered consumer dispute with a business or online merchant. Use the police or NBI for apparent criminal deception, account takeover, identity theft, or related cybercrime. If both aspects exist, you may use both routes.

Must I wait seven days before contacting anyone?

The seven-calendar-day rule concerns exhaustion of the covered platform, marketplace, or e-retailer’s internal redress mechanism before a formal complaint under the Internet Transactions Act. It should not delay an urgent fraud report to your payment provider, account-security measures, or emergency and law-enforcement assistance.

Can the bank or e-wallet reverse the transfer?

Possibly, but not automatically. It depends on the payment method, the provider’s rules and legal duties, whether the transaction was authorized or induced by fraud, how quickly it was reported, and whether the money remains available. Request action immediately and keep the case number.

What if I voluntarily sent the payment?

Report it. A transaction can still have been induced by deceit even if you personally pressed “send.” However, voluntary authorization, negligence, provider controls, and the precise representations made can affect reimbursement and legal liability.

Is a seller’s failure to deliver automatically estafa?

No. Non-delivery may be a contractual breach, consumer violation, or fraud depending on the seller’s intent and the evidence of deceit. Investigators and prosecutors must assess the elements of the offense.

Can I find the scammer’s identity from the recipient account?

Not by yourself through unofficial means. Give the account details to the financial institution and investigators. Subscriber and financial information is protected, but competent authorities may obtain it through lawful investigation, subpoenas, warrants, or statutory information-sharing procedures.

Should I delete the conversation after reporting it?

No. Keep the original messages, attachments, exports, and backups until all complaints, investigations, and possible proceedings are concluded.

Can I recover money through small claims?

Potentially, if the responsible defendant can be identified and the claim falls within the current jurisdictional and procedural rules. Small claims are a civil remedy; they do not replace a criminal report and cannot guarantee collection from a defendant who has no reachable assets.

Official sources

This article provides general Philippine legal information, not legal advice for a specific case. Procedures and legal conclusions may depend on the transaction, documents, payment method, parties, location, and later official issuances. Official sources and reporting information were checked as of 17 September 2026.