Quick answer

If you believe you were scammed through an online shop, marketplace, messaging app, or social-media account in the Philippines:

Contact the bank, card issuer, e-wallet, or payment provider immediately. Ask whether the transfer can be stopped, recalled, disputed, or traced. Freeze compromised cards or accounts and change affected passwords.
Preserve the evidence before blocking the seller or deleting anything. Save the listing, profile URL, messages, payment records, delivery information, phone numbers, account names, and transaction reference numbers.
Report the seller and transaction through the platform’s complaint or refund system. For covered e-commerce transactions, the platform’s internal redress process is generally the first consumer-remedy step.
Report suspected fraud to law enforcement. You may approach the PNP Anti-Cybercrime Group, the nearest police station, or the National Bureau of Investigation. Do this promptly if money was taken, an account was hijacked, identification documents were obtained, or the scammer is threatening you.
For a transaction with a business or online merchant, file a consumer complaint with the DTI through the official DTI Consumer CARe System. A purely private, one-off sale between two end-users is generally outside the Internet Transactions Act, although other civil or criminal remedies may still apply.

These reports serve different purposes. A bank or e-wallet may try to limit the financial loss; the platform may suspend the account or process a refund; DTI may address consumer-law violations; and police or the NBI may investigate a crime. Filing with one does not necessarily replace the others.

Act immediately if payment or account access is involved

Speed matters most during the first hours after discovering the scam.

Contact the financial provider

Use the provider’s official app, website, hotline, or a branch—not a contact number sent by the supposed seller. Give the provider:

The transaction date, time, and amount
The transaction or reference number
The recipient’s account or wallet name and number
A short explanation that the payment resulted from suspected fraud
Any police or complaint reference number already available

Ask specifically whether the provider can:

Hold, reverse, recall, or dispute the transaction
Flag the receiving account
Block a card or wallet
Disable online banking or unauthorized devices
Preserve transaction and access records
Issue a written acknowledgment or case number

A report does not guarantee recovery. Transfers authorized by the account holder can be difficult to reverse once credited or withdrawn. Nevertheless, an immediate report may improve the chance of stopping further movement of the funds.

If the provider does not resolve the complaint, follow its formal complaint procedure. Complaints involving banks, e-money issuers, and other BSP-supervised financial institutions may be escalated through the Bangko Sentral ng Pilipinas consumer-assistance channels, subject to the provider-first process and the applicable BSP rules.

Secure affected accounts

If you disclosed a password, one-time password, PIN, recovery code, card information, identification document, or access to your device:

Change the affected password and any reused passwords.
Sign out of other sessions and remove unknown devices.
Enable multi-factor authentication.
Block or replace compromised cards and SIMs when necessary.
Tell your mobile provider immediately if your SIM stopped working unexpectedly.
Check bank, wallet, email, shopping, and social-media accounts for unauthorized changes.
Warn contacts if the scammer gained control of your account.
Do not install another app or provide remote access to anyone offering to “recover” the money.

Never disclose an OTP, PIN, password, or recovery phrase to a person claiming to investigate or reverse the transaction.

Preserve evidence before the account disappears

Do not rely only on screenshots. Where possible, keep the original electronic records and information showing where they came from.

Save:

The seller’s profile name, username, account ID, profile URL, and QR code
The complete listing, including photographs, price, description, comments, and date
The full conversation, including voice messages and call logs
Order confirmations, invoices, receipts, tracking numbers, and delivery records
Payment confirmations, bank statements, wallet records, and reference numbers
The recipient’s bank or wallet, account name, account number, and phone number
Email addresses, mobile numbers, websites, and shortened links used
Photographs or video of the parcel, packaging, shipping label, and item received
The seller’s promises, refund terms, and later excuses or demands
Reports made to the platform, bank, DTI, police, or NBI, including ticket numbers
A chronological account of what happened while your memory is fresh

Capture the profile and listing URL as well as the visible name. Names and profile photographs can be changed. If possible, export the conversation or save it as a PDF in addition to taking screenshots.

Keep original files unedited. Make a separate copy if you need to highlight or annotate anything. Do not publicly post the scammer’s alleged address, identification document, banking information, or other personal data; give that material directly to the platform, financial institution, or authorities.

Report the account through the platform

Use the marketplace, shopping app, or social-media platform’s official reporting and dispute tools. Choose the most accurate category, such as fraud, item not received, counterfeit item, unauthorized transaction, impersonation, or account compromise.

Request, as appropriate:

Cancellation or refund
Preservation of the account and transaction records
Removal of the fraudulent listing
Suspension or investigation of the seller’s account
Written confirmation and a case or ticket number

Under the Internet Transactions Act of 2023, covered e-marketplaces and digital platforms must provide a responsive mechanism through which consumers can report users or unlawful information. The law also requires covered online merchants and platforms to provide specified identifying and contact information and creates potential liabilities that depend on their role and conduct.

For transactions covered by that Act, the aggrieved party generally must first use the platform’s or e-retailer’s internal redress mechanism before filing a consumer complaint with a court or government agency. The mechanism is considered exhausted if the complaint remains unresolved for seven calendar days after filing.

That requirement should not be treated as a reason to delay:

Notifying the payment provider
Securing a compromised account
Preserving evidence
Reporting an ongoing or urgent crime to law enforcement
Seeking emergency assistance when there are threats or safety risks

Keep proof of the date you submitted the platform complaint and the response, if any.

File a DTI consumer complaint when the transaction involves a business

For a complaint against an online merchant, e-retailer, or covered platform, submit the matter through the DTI Consumer CARe System. Include:

Your contact details
The merchant’s known name and contact information
The platform used
The order and payment details
A clear, dated account of events
Your communications with the merchant and platform
Receipts and other supporting documents
The remedy requested, such as repair, replacement, refund, or another lawful remedy

The Internet Transactions Act recognizes repair, replacement, refund, and other remedies available under the Consumer Act and related laws when goods are defective, lost without the consumer’s fault, or fail to meet contractual or warranty requirements. It also generally allows a consumer to claim damages before a court or the DTI within two years from the time the cause of action arose. The correct forum and remedy still depend on the transaction, evidence, parties, and nature of the loss.

Important exception for private sales

The Internet Transactions Act covers business-to-consumer and business-to-business internet transactions within its scope. It expressly excludes consumer-to-consumer transactions—such as a genuine one-time private sale between two end-users that is not made in the ordinary course of business.

That exclusion does not make fraud lawful. A victim may still report suspected estafa or another offense to law enforcement and may have civil remedies. The evidence may also show that a person presenting as a “private seller” was actually operating as an online merchant.

Report suspected fraud to police or the NBI

Report to the PNP Anti-Cybercrime Group, the nearest police station, or the NBI when the facts indicate deliberate deception rather than an ordinary delivery, warranty, or customer-service dispute.

Bring or prepare:

A valid identification document
A concise chronological narrative
Printed and electronic copies of the evidence
Proof of ownership of the affected account or payment instrument
Transaction records and recipient details
Platform and financial-provider complaint numbers
Information about other known victims, without coordinating false or exaggerated accounts

Ask what complaint affidavit, certification, or additional authentication the investigating office requires. Obtain the report, blotter, docket, or reference number and the investigator’s official contact details.

Fraud committed through an information and communications technology system may implicate the Cybercrime Prevention Act of 2012, together with offenses under the Revised Penal Code or special laws. Whether a particular incident legally constitutes estafa, identity theft, computer-related fraud, an access-device offense, or another crime depends on the actual representations, intent, payment method, account activity, and admissible evidence. A failed delivery or broken promise is not automatically criminal fraud.

Investigators, prosecutors, and courts—not the platform or complainant—ultimately determine the appropriate criminal charge.

If the scammer obtained personal data

If the incident involved misuse or unauthorized disclosure of personal information, first notify the organization responsible for the account or data. Preserve notices, access logs, emails, and evidence of impersonation.

A privacy complaint may be appropriate through the National Privacy Commission when the issue concerns a personal-information controller’s or processor’s handling of personal data. The NPC is not a substitute for reporting theft of money or criminal fraud to the financial provider and law-enforcement authorities.

What the law generally requires from online sellers and platforms

For covered transactions, the Internet Transactions Act requires online merchants or e-retailers to provide accurate transaction information, issue paper or electronic invoices or receipts, and deliver goods that correspond to their description, type, quantity, quality, condition, and advertised characteristics.

E-marketplaces must, among other duties, require specified merchant identification and contact information, maintain merchant information, and provide a consumer-redress mechanism. Social-media and other digital platforms that do not oversee completion of the sale have a different, more limited set of statutory duties.

The seller is generally the party primarily liable to compensate the consumer. A platform’s liability is not automatic. Depending on the provision invoked, it may arise from matters such as failure to exercise the required diligence, failure to act after proper notice, or failure to provide available merchant contact details in circumstances covered by the law.

Common mistakes that can weaken a report

Waiting several days before contacting the bank or e-wallet
Continuing to send “verification,” “release,” “tax,” or “recovery” payments
Deleting messages after becoming angry or embarrassed
Blocking the seller before recording the profile, URL, and conversation
Sending only cropped screenshots with no dates, account details, or context
Describing a transaction as “unauthorized” when you authorized it because of deception
Exaggerating the facts or naming an offense as certain without supporting evidence
Filing only a platform report when money, identity documents, or account access were stolen
Paying a supposed hacker, investigator, lawyer, or government employee who promises guaranteed recovery
Posting accusations and personal data publicly instead of submitting evidence to proper authorities

State exactly what happened. Distinguish between a transfer you never authorized and one you authorized because the scammer deceived you; that difference can affect the investigation and the financial provider’s process.

When help is urgent

Seek immediate assistance if:

Unauthorized transactions are still occurring.
Your phone number, email, bank account, or social-media account has been taken over.
The scammer has an image of your identification document, card, signature, or face-verification recording.
You are being threatened, extorted, stalked, or blackmailed.
The transaction involves a child or intimate images.
The scammer is impersonating you to solicit money from others.
A large amount, business account, payroll account, or multiple victims are involved.
You received a summons, demand, or notice requiring a response by a specific date.

For serious loss, conflicting ownership claims, or a possible civil or criminal case, consult a Philippine lawyer promptly. The Public Attorney’s Office may be an option for qualified persons, subject to its legal and financial eligibility rules.

Frequently asked questions

Should I report the scam even if the amount is small?

Yes. The amount does not determine whether deceptive conduct should be documented. Reports can help providers and authorities connect related accounts and victims. Practical recovery options, however, will depend on the evidence and circumstances.

Can the bank or e-wallet return my money?

Possibly, but not automatically. The outcome depends on factors such as how quickly the incident was reported, whether the payment was authorized, whether the funds remain available, the payment channel’s rules, and the investigation. Report immediately and request a written decision.

Is a seller’s failure to deliver automatically estafa?

No. Non-delivery may be a consumer or contractual breach, while estafa requires elements established by criminal law, including legally relevant deception or abuse and resulting damage. Repeated false identities, fabricated shipping records, blocking immediately after payment, or similar evidence may support an inference of fraud, but authorities must assess the complete facts.

Can I report a Facebook, Instagram, or messaging-app seller to DTI?

You may file with DTI if the respondent was acting as an online merchant or business and the transaction falls within DTI’s jurisdiction. A true private consumer-to-consumer sale is generally excluded from the Internet Transactions Act, but suspected fraud may still be reported to police or the NBI.

Must I wait seven days before going to the police?

No. The seven-calendar-day rule concerns exhaustion of the internal redress mechanism for covered consumer proceedings. It should not delay an urgent report of suspected crime, a request to stop payment, account-security measures, or preservation of evidence.

What if I do not know the scammer’s real name?

Report the information you do have: usernames, URLs, phone numbers, receiving accounts, wallet details, transaction references, delivery records, and device or login notices. Platforms and financial institutions may disclose protected records only through lawful processes, but these identifiers can help investigators identify the person involved.

Can I recover more than the purchase price?

Potential remedies may include damages, but entitlement and amount depend on the governing law, proof of actual loss, causation, the proper forum, and applicable procedural requirements. Keep receipts for expenses directly caused by the incident and obtain individualized legal advice before making a damages claim.

Official references

This article provides general legal information, not legal advice, and cannot determine whether a crime or civil cause of action exists in a particular case. Procedures and available remedies may depend on the platform, financial provider, evidence, and transaction documents. Official sources were checked on September 17, 2026.