Quick answer
If you paid an online seller or social-media account and suspect fraud, act immediately:
- Contact your bank, e-wallet, card issuer, or payment provider through its official fraud channel. Ask it to secure your account, trace the transfer, and consider a hold, recall, chargeback, or dispute if available.
- Preserve the seller’s profile, advertisement, messages, payment details, receipts, delivery records, and every reference number.
- Report the account and transaction to the marketplace or social-media platform.
- File a cybercrime report with the Philippine National Police or National Bureau of Investigation. You may also call the Cybercrime Investigation and Coordinating Center’s hotline at 1326 for assistance.
- If the transaction was with a business or online merchant, pursue consumer redress through the Department of Trade and Industry.
- If your bank or BSP-supervised e-wallet does not resolve your complaint, escalate it to the Bangko Sentral ng Pilipinas.
Reporting does not guarantee that the money will be recovered. Speed still matters because funds can be transferred through several accounts, and platforms or service providers may retain some electronic records only for limited periods.
First, determine what happened
An unfavorable transaction is not automatically a scam. The appropriate report depends on the facts.
Possible fraud or estafa
Warning signs include:
- the seller used a false identity, fake business, stolen photographs, or fabricated proof of shipment;
- payment was obtained through a deliberate false representation;
- the seller blocked you or disappeared immediately after payment;
- the tracking number, receipt, or payment instructions were falsified;
- you received a worthless, counterfeit, or completely different item as part of an apparent deceptive scheme;
- the recipient account belongs to a supposed “agent,” “relative,” “cashier,” or other third party with no clear connection to the sale; or
- the same account appears to have collected money from several victims.
Fraud may amount to estafa under the Revised Penal Code when deceit causes another person to part with money or property and suffer damage. If the offense was committed through information and communications technology, Section 6 of the Cybercrime Prevention Act of 2012 may apply.
The exact charge depends on the evidence. Non-delivery alone does not conclusively establish criminal deceit; investigators and prosecutors must examine what the seller represented, when the dishonest intent arose, and how the loss occurred.
A consumer dispute rather than provable fraud
A delayed parcel, defective product, warranty disagreement, mistaken shipment, or failed refund may initially be a consumer dispute. Use the marketplace’s dispute process and, for a business-to-consumer transaction, consider a DTI complaint.
A consumer complaint and a criminal complaint serve different purposes:
- A consumer complaint generally seeks repair, replacement, refund, or another appropriate remedy.
- A criminal complaint asks law enforcement and prosecutors to investigate an offense.
- A payment dispute asks a bank, e-wallet, or card issuer to take action allowed by law, network rules, and the provider’s terms.
Depending on the facts, these routes may be pursued at the same time.
What to do immediately
1. Stop further losses
Do not send another payment for “verification,” “release,” “insurance,” “tax,” “refund processing,” or “account unlocking.” A demand for an additional fee is a common way to deepen the loss.
If you disclosed a password, one-time password, PIN, card security code, recovery code, or remote-access permission:
- call the financial provider immediately using the number in its official app, website, or on the back of the card;
- lock or suspend affected cards and accounts;
- change the compromised password from a trusted device;
- sign out other sessions;
- enable multi-factor authentication;
- remove unfamiliar devices or linked accounts; and
- check for unauthorized transfers, loans, or changes to your contact details.
Never rely on a hotline, link, or account supplied by the suspected scammer.
2. Notify the payment provider
Report the transaction to both the sending institution and, if identifiable, the receiving institution. Provide:
- the amount, date, and exact time;
- transaction and trace/reference numbers;
- sender and recipient names and account identifiers;
- the reason you believe the transaction was fraudulent;
- screenshots and supporting records; and
- the police, NBI, or CICC reference number once available.
Ask specifically whether the provider can:
- mark the transaction and receiving account as disputed;
- contact the receiving institution;
- preserve transaction and account records;
- attempt a recall or recovery;
- open an unauthorized-transaction claim; or
- process a card chargeback, if applicable.
The Anti-Financial Account Scamming Act, or Republic Act No. 12010, establishes measures involving disputed funds and penalizes conduct such as money-mule activity and certain social-engineering schemes. It does not give every victim an automatic refund. Any hold, investigation, reimbursement, or release of funds depends on the law, applicable BSP rules, the transaction type, and the available evidence.
Follow the provider’s filing instructions and contractual deadlines. There is no single deadline covering every bank transfer, e-wallet payment, and card purchase, so report the loss as soon as possible.
3. Preserve evidence before accounts disappear
Save evidence in its original form where possible. Keep copies in at least two secure locations.
Preserve:
- the complete conversation, not only selected screenshots;
- the seller’s profile name, username, user ID, page link, and profile URL;
- the advertisement, livestream, product listing, price, and representations made;
- order confirmation, invoice, receipt, and checkout page;
- payment confirmation and complete transaction history;
- bank, e-wallet, card, or cryptocurrency destination details;
- mobile numbers, email addresses, QR codes, and website domains;
- delivery address, courier messages, tracking records, and package label;
- photographs and an unedited unboxing video if an item arrived;
- voice notes, call logs, text messages, and emails;
- demands for additional payment;
- the date and time of each event;
- reports made to the platform or financial provider; and
- names and contact details of other known victims, without publicly exposing their private information.
Capture the full browser address and the device clock where practical. Export or download chats if the platform permits it. Do not crop away usernames, timestamps, transaction numbers, or surrounding context.
Keep the original device and files. Avoid editing, annotating, recompressing, or repeatedly forwarding the only copy. Investigators may need the original electronic record or metadata.
4. Report the seller to the platform
Use the marketplace or social network’s in-app reporting and dispute tools. Report both the account and the specific listing, post, conversation, or order.
Request:
- cancellation, refund, or buyer protection where available;
- preservation of account, listing, transaction, and access records;
- restriction of the suspected account; and
- a written ticket or case number.
Do not let a platform dispute replace a law-enforcement report when there is apparent fraud. Conversely, filing a police report does not automatically preserve your marketplace refund or chargeback rights.
Where to file a cybercrime report
PNP or NBI
Republic Act No. 10175 designates the PNP and NBI as cybercrime law-enforcement authorities. You may approach:
- the PNP Anti-Cybercrime Group or an appropriate local police unit;
- the NBI Cybercrime Division;
- an NBI regional or district office; or
- the NBI’s online complaint page, when available.
The NBI’s published citizen-service guidance indicates that a complainant may be asked to complete a complaint form, present relevant documents and evidence, and give a sworn statement. Requirements can vary with the facts and the office handling the case.
Bring or prepare:
- one valid government-issued ID;
- a chronological written account;
- printed and electronic copies of the evidence;
- proof that the account or money belongs to you;
- the amount of your loss;
- the suspected person’s known identifiers;
- platform and financial-provider case numbers; and
- an affidavit or sworn statement if requested.
Ask for the complaint, blotter, or investigation reference number and the investigator’s official contact information.
CICC hotline
Victims of cyber fraud may call the Cybercrime Investigation and Coordinating Center at 1326. The CICC can assist with reporting and inter-agency coordination, but a hotline report should not be assumed to replace documents or sworn statements required by the investigating agency or prosecutor.
DOJ cybercrime reporting
The Department of Justice maintains an official page for reporting cybercrime incidents. The DOJ Office of Cybercrime coordinates matters within its statutory role, while investigation is ordinarily handled by the appropriate law-enforcement unit.
When to complain to DTI
For a sale by an online business or merchant, first make a clear written demand to the merchant and use the platform’s internal redress process. State:
- what was ordered;
- what went wrong;
- the remedy requested;
- the amount involved; and
- a reasonable date for a response.
If the matter remains unresolved, file through the DTI’s online dispute-resolution portal or contact the nearest DTI office using the official DTI website.
Attach the advertisement or listing, proof of payment, order records, communications, delivery evidence, your written demand, and the seller’s response.
The Internet Transactions Act of 2023 regulates covered business-to-business and business-to-consumer internet transactions. It imposes duties on online merchants, e-retailers, e-marketplaces, and certain digital platforms, and recognizes online consumers’ rights and remedies.
A significant exception is that the Act does not cover a genuine consumer-to-consumer transaction—such as an isolated personal sale between two end-users outside the ordinary course of business. That exclusion does not legalize fraud and does not prevent a criminal complaint. It may simply affect which consumer-law provisions and DTI remedies apply. A person repeatedly selling goods for profit may be functioning as an online merchant despite calling the account “personal”; the actual activity and evidence matter.
Escalating a bank or e-wallet complaint to BSP
For a complaint against a BSP-supervised financial institution, first use that institution’s official consumer-assistance mechanism. Keep your complaint and its reply.
If the matter remains unresolved, escalate it through the BSP Consumer Assistance Mechanism. BSP identifies the following channels:
- BSP Online Buddy or BOB;
- email to consumeraffairs@bsp.gov.ph using the prescribed Complaints, Inquiries and Requests form;
- telephone at (02) 5306-2584;
- postal mail; or
- the BSP Consumer Assistance Desk or an appropriate BSP regional office or branch.
Include a summary of the complaint, the resolution requested, your contact details, the complaint previously sent to the financial institution, its reply if any, and supporting documents.
BSP escalation is for concerns involving supervised financial institutions. It is not a criminal prosecution and does not replace reporting to the PNP or NBI.
What the law may cover
Depending on the evidence, an online shopping or social-media scam may implicate one or more of the following:
- Estafa under the Revised Penal Code when deceit or another legally specified fraudulent means causes damage.
- Section 6 of Republic Act No. 10175 when an offense under the Revised Penal Code or a special law is committed through information and communications technology.
- Computer-related fraud or identity theft under Republic Act No. 10175 when their specific statutory elements are present.
- Republic Act No. 12010 where financial accounts, money-mule arrangements, social engineering, or other defined financial-account scamming conduct is involved.
- Republic Act No. 11967 and consumer-protection laws for covered online business transactions.
- Other laws where the scheme involves forged documents, unauthorized access, threats, personal-data misuse, counterfeit goods, investment solicitation, or impersonation.
The correct offense and responsible persons cannot be determined from a screenshot alone. Investigators and prosecutors must assess the entire transaction, the accused person’s participation and intent, the flow of funds, and the admissible evidence.
If the scammer or recipient is unknown
You may still report the incident. Provide every identifier available, including recipient account numbers, verified e-wallet names, telephone numbers, URLs, usernames, transaction references, IP-related notices, courier details, and connected accounts.
Do not attempt to obtain confidential subscriber information by deception or publish the account holder’s personal data. Law-enforcement authorities can seek preservation and disclosure of relevant data using the procedures and court processes required by law.
Section 13 of Republic Act No. 10175 requires service providers to preserve certain traffic data and subscriber information for at least six months from the transaction. Content data is subject to a different preservation framework. This is another reason to report promptly; the provision does not mean that every platform necessarily retains every message or account record for the same period.
Common mistakes to avoid
- Waiting for the scammer’s repeated promises before reporting.
- Sending more money to recover the first payment.
- Deleting or blocking the account before preserving the conversation.
- Saving only cropped screenshots without URLs, usernames, or timestamps.
- Reporting solely through a public comment or social-media post.
- Treating a Facebook page, badge, ID photograph, business permit image, or bank-account name as conclusive proof of identity.
- Assuming that a verified payment-account name identifies the person who devised the scam; it may belong to a money mule or identity-theft victim.
- Paying a supposed hacker, fixer, government employee, or “recovery agent.”
- Sharing OTPs or allowing remote access to a phone during a supposed refund.
- Making public accusations that go beyond verifiable facts.
- Missing the platform, card-network, bank, or e-wallet dispute deadline while waiting for a criminal investigation.
- Filing inconsistent accounts with the platform, bank, and police. Correct honest mistakes, but keep the chronology accurate.
When legal help is urgent
Consult a Philippine lawyer promptly when:
- the amount is substantial or several victims are involved;
- the provider denies an unauthorized-transaction claim;
- the disputed funds were frozen or your own account was restricted;
- you are being treated as an account holder or money mule rather than a victim;
- the transaction involved cryptocurrency, overseas recipients, investments, securities, or several intermediary accounts;
- the scammer threatens violence, extortion, exposure of intimate material, or misuse of personal data;
- you need to prepare an affidavit, prosecutor’s complaint, civil action, or demand letter;
- you received a subpoena, preservation request, demand, or court document; or
- a filing or contractual deadline may expire.
Call 911 or contact the nearest police station if there is an immediate threat to life or physical safety.
Practical reporting checklist
Before submitting a complaint, confirm that you have:
- secured compromised financial and online accounts;
- notified the payment provider;
- requested a transaction dispute, recall, or chargeback where available;
- preserved the full conversation and seller profile;
- saved the listing, URLs, receipts, and delivery records;
- prepared a dated chronology;
- reported the account to the platform;
- filed with the PNP, NBI, or CICC when fraud is suspected;
- pursued DTI redress for a covered merchant transaction;
- escalated an unresolved financial-provider complaint to BSP where appropriate; and
- recorded every complaint and reference number.
Frequently asked questions
Can the bank or e-wallet reverse my transfer?
Possibly, but not automatically. Recovery depends on factors such as whether the funds remain available, whether a lawful hold can be placed, the payment method, the provider’s rules, and the investigation’s findings. Report immediately and ask for a written case number.
Should I report even if the amount is small?
Yes. The same account may be used against multiple victims, and your evidence may help establish a pattern. The amount may affect how the case proceeds, but it does not make deliberate fraud acceptable.
Can I file if I voluntarily sent the payment?
Yes. A voluntary transfer can still result from deceit. However, the bank may classify it differently from a transaction made without your authorization, which may affect reimbursement or dispute procedures.
Is a barangay complaint enough?
Ordinarily, no. A barangay record may document the incident or assist where the parties are known and barangay conciliation legally applies, but it does not replace prompt notice to the financial provider or a cybercrime report. Whether barangay conciliation is a precondition to a later case depends on the parties, addresses, offense, penalties, and applicable exceptions.
Can I report an overseas seller?
Yes. Philippine law may apply in some cross-border situations, including where statutory jurisdictional requirements are met or a covered merchant avails itself of the Philippine market. Enforcement and recovery may be more difficult and can require international cooperation.
Should I confront or arrange to meet the scammer?
Do not conduct your own entrapment or confrontation. Preserve communications and coordinate with trained law-enforcement officers. An unsupervised meeting can endanger you and compromise an investigation.
Can I post the scammer’s name and account online?
Report factual information through official channels first. Publicly identifying someone carries risks if the identity is mistaken, the account was hijacked, or the named account holder was used as a money mule. Avoid threats, doxxing, and unsupported accusations.
Will filing a complaint guarantee prosecution or repayment?
No. Agencies must evaluate jurisdiction, the elements of an offense, the identity and participation of suspects, and the sufficiency and admissibility of evidence. Criminal investigation, consumer redress, and recovery of funds are separate processes.
Official sources
- Cybercrime Prevention Act of 2012 — Republic Act No. 10175
- Internet Transactions Act of 2023 — Republic Act No. 11967
- Anti-Financial Account Scamming Act — Republic Act No. 12010
- Department of Justice cybercrime reporting page
- National Bureau of Investigation
- NBI Cybercrime Division and official division contacts
- Bangko Sentral ng Pilipinas consumer-assistance channels
- Department of Trade and Industry
This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Procedures and available remedies depend on the transaction, evidence, provider, and responsible agency. Official sources and reporting information were checked as of September 14, 2026.