Quick answer

If you paid an online seller and believe you were scammed, act immediately:

Contact your bank, card issuer, or e-wallet through its official fraud channel. Ask whether the transfer can be recalled, disputed, traced, or temporarily held. Lock compromised accounts and cards.
Report the seller, listing, and transaction to the shopping or social media platform. Request a refund, preserve the account and transaction records, and obtain a case number.
File a criminal complaint with the PNP Anti-Cybercrime Group, the NBI Cybercrime Division, or your nearest police station or NBI office.
For a business-to-consumer sale, file a consumer complaint through the DTI Consumer CARe System.
Preserve all evidence before accounts, posts, messages, or payment records disappear.

These reports serve different purposes. A platform or payment-provider report may help stop or recover funds; a DTI complaint may seek consumer redress; and a police or NBI complaint may lead to a criminal investigation. Filing with only one does not necessarily accomplish the others.

Do not pay anyone who promises to “recover” your money for an advance fee. Recovery is never guaranteed, and victims are often targeted a second time.

First, determine whether this is likely a scam

A delayed delivery, wrong item, defective product, or refund dispute is not automatically criminal fraud. A scam generally involves deliberate deception intended to make the buyer part with money or property. Warning signs include:

The seller used a false identity, stolen photos, or a fake business page.
The item apparently never existed, or the same tracking number was sent to several buyers.
The seller blocked you or deleted the account immediately after payment.
You were instructed to pay outside the platform to a personal bank or e-wallet account.
The seller demanded repeated “release,” “insurance,” “customs,” or “verification” fees.
The package contained a worthless substitute clearly inconsistent with the listing.
The seller falsely claimed affiliation with a known brand, courier, bank, or government office.
The supposed seller took over another person’s social media account.

The distinction matters. An ordinary fulfillment or warranty dispute may principally require the platform’s process and DTI consumer remedies. Evidence of intentional deception should also be reported to law enforcement. Let the authorities determine the exact offense; you do not need to identify the correct criminal charge before reporting.

Take these steps immediately

1. Stop communicating through links supplied by the scammer

Do not send another payment, disclose an OTP, install a remote-access application, or provide additional identification. Do not click a “refund” or “verification” link sent by the seller.

If you disclosed a password, change it using a clean device and enable multi-factor authentication. Change any other account that reused the same password. If an account or SIM may have been taken over, contact the provider immediately.

2. Contact the payment provider

Use only the telephone number, website, or in-app support function shown on the provider’s official app, card, or statement.

Give the provider:

the transaction reference number;
the amount, date, and time;
the recipient’s account name, number, mobile number, or wallet identifier;
a short explanation that the payment resulted from suspected fraud;
copies of the order, messages, and payment confirmation; and
any police, NBI, platform, or DTI reference number already available.

Ask specifically whether the provider can:

freeze or secure your account;
dispute an unauthorized card or account transaction;
initiate a card chargeback, if applicable;
request a recall or coordinated verification of the transfer;
flag the recipient account; and
preserve transaction, access, and account-identification records for investigators.

A transfer that you personally authorized is not automatically refundable merely because the recipient was a scammer. The applicable remedy depends on the payment method, the provider’s rules, the facts, and whether the money remains traceable. Reporting within minutes or hours may improve the practical chance of intervention, but it does not guarantee recovery.

If a BSP-supervised bank, e-money issuer, or other financial institution does not resolve your complaint, first obtain its complaint reference number and final response, if any. You may then escalate through the BSP Consumer Assistance Mechanism. BSP guidance treats the institution’s own Financial Consumer Protection Assistance Mechanism as the first-level recourse.

3. Use the platform’s dispute and reporting tools

Report the order, seller account, page, advertisement, listing, and messages. If the transaction took place in an e-marketplace, open the refund or buyer-protection request before confirming that the order was received and before any platform deadline expires.

Request in writing that the platform:

stop payout if still possible;
preserve seller registration, account, login, transaction, and communication records;
remove or disable the fraudulent listing or account;
identify the correct process for a refund or appeal; and
give you a ticket or reference number.

Under the Internet Transactions Act of 2023, covered digital platforms and e-marketplaces must provide a responsive redress mechanism. For covered internet transactions, that internal mechanism is deemed exhausted when the complaint remains unresolved after seven calendar days from filing. Keep proof of the filing date and every response.

This rule does not mean that every complaint must result in a refund after seven days. It means the platform-level redress mechanism is treated as exhausted, allowing the consumer to pursue appropriate further remedies.

4. Report the suspected crime

You may approach:

the PNP Anti-Cybercrime Group;
the NBI Cybercrime Division or an appropriate NBI regional or district office; or
the nearest police station, which can receive the report and coordinate with the proper unit.

Use contact information published on the agency’s official website. Scam pages sometimes publish fake “cybercrime help desks” to obtain more money or personal information.

Prepare a clear chronological account:

Where and when you saw the offer.
What the seller represented.
What persuaded you to pay.
How much you paid and through which service.
The recipient’s account details.
What happened after payment.
Why you believe the representation was false.
What steps you took with the platform and payment provider.
Whether other victims or related accounts are known.

Bring a government-issued ID and both printed and electronic copies of your evidence if possible. An investigator may require a sworn complaint or affidavit and may request original devices or additional records. Ask for the report, blotter, complaint, or reference number and the investigator’s official contact details.

Online deception may constitute estafa under the Revised Penal Code, potentially in relation to Section 6 of the Cybercrime Prevention Act of 2012, or another offense depending on how the scheme operated. Computer-related fraud under the Cybercrime Prevention Act has specific technical elements and does not automatically cover every dishonest online sale. The prosecutor and investigators determine the legally supportable charge from the evidence.

5. File the appropriate consumer complaint

For a purchase from an online merchant or business, submit a complaint through the DTI Consumer CARe System. Attach:

proof of purchase and payment;
the advertisement or listing;
the seller’s disclosed business and contact information;
messages showing your demand for delivery, replacement, or refund;
the platform complaint and result;
photographs or an unboxing video, when the item received was wrong or worthless; and
the remedy you want.

The Consumer Act of the Philippines authorizes consumer complaints and administrative mediation, conciliation, and adjudication within the responsible agency’s jurisdiction.

The Internet Transactions Act generally covers business-to-consumer and business-to-business internet transactions within DTI’s mandate. It expressly excludes consumer-to-consumer transactions—for example, a genuine one-off sale of a personal item by another end-user outside the ordinary course of business. However, a person regularly selling through a personal-looking social media account may still be acting as an online merchant. The actual conduct, not merely the account label, matters.

A C2C exclusion from the Internet Transactions Act does not legalize fraud. You may still report suspected criminal conduct and consider applicable civil remedies.

Evidence to preserve

Preserve the original material before reporting the account, because a platform or seller may remove it.

Save:

the complete listing, advertisement, product description, price, and URL;
the seller’s profile, username, account URL, page transparency details, and displayed contact information;
the full conversation, including dates, times, voice messages, and attachments;
order confirmations, invoices, electronic receipts, and tracking information;
bank, card, remittance, or e-wallet confirmations and reference numbers;
the recipient’s account name, account number, QR code, phone number, and institution;
courier labels, packaging, the item received, and unboxing photos or video;
emails and SMS messages, including sender details;
platform, bank, e-wallet, DTI, police, and NBI ticket numbers;
call logs and notes identifying when and how you contacted each organization; and
proof that you demanded delivery, correction, or refund.

Take screenshots, but also preserve original messages, emails, files, and devices. Screenshots can omit URLs, timestamps, headers, and other technical information. Export conversations where the service permits it. Do not crop or edit the only copy.

Make at least one secure backup. Keep a simple timeline matching each event to its supporting document. Give authorities copies unless they specifically require an original, and obtain a receipt for any device or original document surrendered.

Do not impersonate another buyer, hack the suspect’s account, publish private personal data, or arrange your own entrapment. These actions may create safety, privacy, or evidentiary problems. Coordinate with investigators.

What the law generally provides

The Internet Transactions Act requires covered e-marketplaces and digital platforms to take measures concerning merchant identification, transaction transparency, consumer redress, and unlawful listings. The online merchant or e-retailer is generally primarily responsible for indemnifying the consumer in civil actions or administrative complaints arising from the transaction.

Platform liability is not automatic. Under the Act, an e-marketplace or digital platform may have subsidiary liability in specified circumstances, such as failure to exercise ordinary diligence in its statutory obligations when that failure causes the consumer’s loss. Solidary liability may arise in the particular situation described by the law involving failure, after notice, to act expeditiously against goods or services that are prohibited, imminently injurious, unsafe, or dangerous.

For damages under Section 28 of the Internet Transactions Act, the consumer may file in court or with DTI within two years from the time the cause of action arose. Other claims or criminal offenses may have different limitation periods. Do not treat the two-year period as permission to wait: platform deadlines can be much shorter, digital evidence can disappear, and transferred funds can move rapidly.

A successful report does not itself guarantee reimbursement, prosecution, or conviction. Those outcomes depend on jurisdiction, available records, the identity and location of the offender, the movement of funds, and proof of each legal element.

Common mistakes to avoid

Waiting for the seller’s repeated promises. Report promptly while records and funds may still be traceable.
Sending more money to release a refund. Legitimate providers do not need your OTP or PIN to return money.
Reporting only to the social media platform. A platform report is not a criminal complaint or necessarily a payment dispute.
Deleting messages out of embarrassment. Preserve them, including messages showing how the deception worked.
Posting the recipient’s personal data publicly. Give it to the provider and authorities instead.
Calling a number found in a comment or sponsored search result. Verify contact details independently.
Exaggerating or changing the story. State what you personally know and label assumptions clearly.
Withdrawing a complaint immediately after a repayment promise. Confirm cleared funds and seek guidance before signing a waiver, affidavit of desistance, or settlement.
Assuming a registered SIM, verified badge, ID photo, receipt, or business certificate proves legitimacy. These may be stolen, fabricated, or used by another person.
Paying a recovery agent upfront. Recovery scams commonly target recent victims.

When help is urgent

Seek immediate assistance when:

money has just been transferred and may still be stoppable;
your bank, e-wallet, email, social media, or mobile account was compromised;
you disclosed an OTP, PIN, password, recovery code, card security code, or identity document;
the scammer is threatening violence, blackmail, or publication of private material;
a child, older person, or person under coercion is involved;
the offender is continuing to solicit payments from you or other victims;
the loss is substantial or involves business funds, loans, or several financial accounts; or
you received a subpoena, demand letter, settlement document, or request to withdraw a complaint.

For immediate danger, contact emergency services or the nearest police station. For a substantial loss, cross-border scheme, identity theft, or complicated evidence trail, consult a Philippine lawyer promptly. The Public Attorney’s Office may be an option for qualified indigent persons, subject to its requirements.

Frequently asked questions

Can I recover money sent through a bank or e-wallet?

Possibly, but not automatically. Recovery depends on factors such as how quickly the transaction was reported, whether funds remain in the recipient account, the payment network’s rules, and whether the transaction was unauthorized or induced by deception. Report immediately and obtain a reference number.

Should I report to DTI or to the police?

Often both. DTI handles covered consumer issues and administrative redress. The police or NBI investigates suspected crimes. Also report to the platform and payment provider because they control different records and remedies.

What if I bought from an individual on Facebook or another social network?

Report the account and preserve the evidence. If the person was genuinely making a private, one-off C2C sale, the Internet Transactions Act’s consumer provisions may not apply. Suspected estafa or other unlawful conduct may still be reported to law enforcement. If the person sells regularly or acts in the ordinary course of business, DTI coverage may be possible.

What if no money was lost?

Report the account or listing to the platform. If the conduct involved attempted fraud, account takeover, identity misuse, threats, or a broader active scheme, law enforcement may still need the information. Clearly state that no payment was completed.

Is an affidavit required?

A platform, bank, or initial consumer report may not require one. A formal criminal complaint commonly requires a sworn narrative and supporting evidence. Follow the instructions of the investigating office and do not sign an affidavit containing facts you did not personally verify.

Can I name the scammer publicly?

Public accusations can create privacy, safety, defamation, and mistaken-identity risks, especially when the payment account or profile may belong to a hacked account or money mule. Submit identifying information and evidence to the platform, financial institution, and authorities.

Does a DTI complaint cover investment or lending scams?

Not necessarily. Financial products and services may fall under another regulator, such as the BSP or Securities and Exchange Commission. DTI’s authority under the Internet Transactions Act is ancillary to the authority of specialized regulators. Report first to the institution involved and use the regulator’s official complaint channel.

What if the seller is abroad?

Report locally and provide every available identifier. The Internet Transactions Act can apply to a person availing of the Philippine market when the statutory requirements are met, but investigation, service, enforcement, and recovery may be more difficult across borders.

Official references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Procedures and available remedies depend on the transaction, evidence, payment method, platform, and agencies with jurisdiction. Official sources and procedures were checked as of 18 September 2026.