Quick answer
If an online seller took your payment through deception—such as using a fake identity, advertising goods that never existed, or accepting payment while never intending to deliver—act immediately:
- Contact your bank, e-wallet, card issuer, or payment provider and request a fraud hold, transfer recall, or dispute.
- Report the transaction through the marketplace or social-media platform.
- Preserve all electronic evidence before the account, listing, or messages disappear.
- File a consumer complaint with the Department of Trade and Industry (DTI) if the seller was acting as a business.
- Report the suspected crime to the Philippine National Police (PNP) or National Bureau of Investigation (NBI).
- If pursuing criminal charges, prepare a sworn complaint and supporting evidence for investigation and possible filing with the proper prosecutor’s office.
These routes serve different purposes. A platform or payment dispute may help recover funds; DTI handles covered consumer disputes and regulatory violations; law enforcement and prosecutors handle possible crimes. Filing with one does not automatically start the others.
First, determine whether this is fraud or an ordinary seller dispute
A delayed parcel, defective product, wrong item, or refund disagreement is not automatically a scam. It may be a consumer or contractual dispute unless the evidence shows deceit.
Online seller fraud may amount to estafa by false pretenses or fraudulent acts under Article 315(2)(a) of the Revised Penal Code. Generally, the evidence must show that:
- the seller made a false representation or used a similar deceit before or at the time you paid;
- you relied on that representation;
- the deceit caused you to part with money or property; and
- you suffered damage.
A broken promise by itself does not necessarily prove estafa. The surrounding facts must support the conclusion that the seller used deceit to obtain your payment. The prosecutor—and ultimately the court—determines whether the evidence establishes a crime.
When fraud is committed through an information and communications technology system, Section 6 of the Cybercrime Prevention Act of 2012 may also become relevant. The precise charge and applicable penalty depend on the proven conduct, the amount involved, and the laws in force when the offense occurred. Do not select or insist on a particular charge without legal advice; describe the facts completely and let investigators and prosecutors make the legal assessment.
What to do immediately
1. Contact the payment provider
Call the official fraud hotline or use the in-app help function of your bank, card issuer, remittance company, or e-wallet. Do not use a telephone number or link supplied by the seller.
Provide:
- the transaction date, time, amount, and reference number;
- the receiving account or wallet details;
- the reason you believe the transaction was fraudulent;
- copies of the listing, conversation, receipt, and seller information; and
- the police or complaint reference number, if already available.
Ask whether the provider can freeze the recipient account, recall the transfer, open a fraud investigation, or initiate a card dispute or chargeback. Get a case number and written acknowledgment.
A report does not guarantee recovery. A transfer may already have been withdrawn or moved, and payment providers must follow applicable laws and their own investigation procedures. Speed matters because funds and account data can disappear quickly.
If you disclosed a password, one-time PIN, card security code, recovery phrase, or identification document, change affected passwords, secure your email and mobile number, and ask the provider to block or replace compromised credentials.
2. Report the seller through the platform
Use the marketplace’s formal refund, return, dispute, or report function. If payment was held in escrow, do not press “order received” unless the correct item was actually received and checked.
Include the transaction number and request that the platform:
- preserve the seller’s registration, transaction, and communication records;
- restrict the account if warranted;
- process any available refund or buyer-protection claim; and
- provide a report or ticket number.
Observe the platform’s displayed dispute deadline. These contractual deadlines can be much shorter than the period for bringing a legal action. Do not let the seller persuade you to close a dispute in exchange for an unverifiable promise of refund.
A social-media report alone is not a criminal complaint.
3. Preserve evidence before confronting or blocking the seller
Save the evidence in its original electronic form where possible. Keep at least two backups.
Preserve:
- the complete product listing, including price, description, photographs, seller name, ratings, and URL;
- the seller’s profile URL, username, user ID, telephone number, email address, and stated business address;
- the complete, unedited conversation showing dates and times;
- order confirmations, invoices, receipts, waybills, and delivery records;
- payment confirmations and account or wallet details;
- the seller’s promises, excuses, refund commitments, and admissions;
- photographs or an uninterrupted unboxing video if an empty parcel, counterfeit item, or different product arrived;
- your messages demanding delivery or refund and the seller’s response;
- notices from the platform and payment provider; and
- names and contact details of other witnesses or victims, if they voluntarily provided them.
Screenshots are useful, but also export chats, download files, retain the original device, and record the exact URL when possible. Do not crop away usernames, dates, timestamps, or transaction identifiers. Prepare a chronological account while events are fresh.
Electronic documents may be used as evidence when relevant, admissible, and properly authenticated under the Supreme Court’s Rules on Electronic Evidence.
Do not hack the seller’s account, impersonate another person, threaten anyone, or publish unverified personal information. Give sensitive evidence to the proper platform, financial institution, investigator, prosecutor, or lawyer.
Where to file
DTI consumer complaint
For a transaction with an online merchant, e-retailer, or other seller acting in the ordinary course of business, first use the seller’s or platform’s redress mechanism. If the matter remains unresolved, file through the DTI Consumer CARe portal.
DTI’s current guidance also permits Metro Manila complainants to submit a completed complaint form or complaint letter through consumercare@dti.gov.ph or personally to the DTI Fair Trade Enforcement Bureau. Check the DTI filing guidance before submission because contact details and procedures can change.
Your complaint should clearly state:
- your full contact information;
- the seller’s known name and contact details;
- the platform and store or account name;
- what was advertised and agreed;
- what you paid and how;
- what went wrong;
- the steps already taken with the seller and platform;
- the remedy requested, such as delivery, replacement, or refund; and
- a numbered list of attachments.
The Internet Transactions Act of 2023 protects covered online consumers and recognizes remedies such as repair, replacement, refund, and other remedies available under existing law.
However, that Act expressly excludes consumer-to-consumer transactions—for example, a genuinely occasional sale between private end-users that is not conducted in the ordinary course of business. A person cannot necessarily avoid business obligations merely by calling an account “personal”; the actual pattern and nature of selling matter. DTI should determine whether the transaction falls within its mandate.
DTI proceedings are not a substitute for a criminal complaint. If the seller appears fictitious, has disappeared, used another person’s account, or targeted several victims, report the matter to law enforcement as well.
NBI or PNP cybercrime investigators
The Cybercrime Prevention Act designates the NBI and PNP as the principal law-enforcement authorities for offenses under that law.
You may:
- use the NBI’s online complaint page;
- approach the NBI Cybercrime Division or a regional or district office; or
- go to the PNP Anti-Cybercrime Group, its regional cybercrime unit, or the nearest police station for referral.
The NBI’s official directory lists its Cybercrime Division and other investigative units. Verify office addresses and contact details on official government pages before visiting.
Bring a valid government-issued ID and organized copies of your evidence. Be prepared to execute a sworn statement or complaint-affidavit. Investigators may request additional records or coordinate with the platform, telecommunications provider, financial institution, or prosecutor.
Under the Cybercrime Prevention Act, traffic data and subscriber information are subject to statutory preservation periods, while access to protected data generally requires the proper legal process. Victims should report promptly so investigators can consider preservation and disclosure measures before relevant records are deleted. A victim cannot personally compel a platform or bank to disclose another user’s protected information merely by demanding it.
Prosecutor’s office
A criminal case commonly begins with a complaint for preliminary investigation, whether filed directly with the appropriate prosecution office or referred after law-enforcement investigation.
The Department of Justice’s published checklist for a complaint for preliminary investigation calls for documents that include:
- a completed and sworn Investigation Data Form;
- a complaint-affidavit or sworn statement;
- affidavits of witnesses, when applicable; and
- documentary and other supporting evidence.
Consult the DOJ’s current preliminary-investigation filing checklist and the relevant city or provincial prosecutor’s office before filing. Requirements, number of copies, fees, and accepted submission methods may vary.
Your complaint-affidavit should tell the story in chronological order and identify which statements induced you to pay. State only facts you personally know, distinguish assumptions from confirmed facts, attach legible exhibits, and explain what each exhibit proves.
The correct place of filing can depend on where material acts or elements occurred, where the parties are located, and whether a cybercrime charge is involved. Obtain legal advice if the seller, payment account, platform, and buyer are in different cities or countries.
Can you recover the money through a civil case?
Possibly. A refund or damages claim may be pursued separately or as civil liability arising from a criminal case, depending on the circumstances and procedural choices made.
For a qualifying money claim of ₱1 million or less, exclusive of interest and costs, the Supreme Court’s small-claims procedure may be available in the proper first-level court. Official information and forms are available on the judiciary’s Small Claims page.
Small claims can be practical when the seller’s true legal identity and address are known and the obligation can be proved. It may be ineffective if the named defendant is fictitious, cannot be located or served, or has no identifiable assets. Filing rules, venue, prior barangay conciliation when applicable, and the relationship between civil and criminal remedies should be checked for the particular case.
Do not file multiple proceedings seeking duplicate recovery without understanding how they interact. A lawyer can help determine whether to pursue a DTI remedy, small claims, an ordinary civil action, criminal charges, or a coordinated combination.
Special situations
The transaction was person-to-person
The Internet Transactions Act’s consumer remedies do not cover a true consumer-to-consumer transaction. Nevertheless, fraud may still be reported to law enforcement, and contractual or civil remedies may remain available.
The seller sent a wrong, cheap, counterfeit, or empty item
Preserve the packaging, waybill, seals, item, and an unedited unboxing video if available. Report the issue immediately through the platform. The facts may support a refund claim, a regulatory complaint, or a criminal investigation, but an incorrect delivery alone does not conclusively establish criminal intent.
The receiving bank or wallet account belongs to someone else
Report every known account detail. The account owner may be the seller, an identity-theft victim, or a “money mule.” Do not publicly accuse the account holder without evidence. The Anti-Financial Account Scamming Act penalizes specified money-muling and social-engineering conduct, but its application depends on proof of the statutory elements.
The scammer obtained access to your financial account
This is more urgent than a simple payment dispute. Immediately block account access, notify the institution through its official channel, change credentials from a secure device, preserve security alerts, and report unauthorized transactions. Tell investigators exactly what information or codes were disclosed and whether remote-access software was installed.
The seller is abroad
You may still report the matter when there is a Philippine connection, but identification, evidence gathering, jurisdiction, and recovery can be more difficult. Preserve the foreign account, website, shipping, and payment details and obtain legal advice for a substantial loss.
Common mistakes to avoid
- Waiting for repeated “refund tomorrow” promises while evidence or platform remedies expire.
- Deleting the conversation after blocking the seller.
- Saving only cropped screenshots without URLs, timestamps, or account identifiers.
- Treating a DTI complaint, bank dispute, and police report as interchangeable.
- Sending more money for supposed insurance, release, tax, verification, or refund fees.
- Accepting an off-platform arrangement that removes marketplace protection.
- Exaggerating facts or identifying a person solely because their name appears on a receiving account.
- Posting identity documents, account numbers, or private communications publicly.
- Paying a “recovery agent” who guarantees that stolen funds will be returned.
- Signing an affidavit without reading it or attaching documents that contradict its account.
When legal help is urgent
Consult a Philippine lawyer promptly when:
- the loss is substantial or involves several victims;
- the seller’s identity or location is uncertain;
- the transaction crosses national borders;
- the scam involved identity theft, account takeover, threats, extortion, or personal-data exposure;
- you are asked to sign a settlement, waiver, affidavit of desistance, or release;
- law enforcement, a prosecutor, or a court issues a subpoena or requires a formal submission;
- you are considering both criminal and civil proceedings; or
- a filing or platform deadline is approaching.
Immediate police assistance is appropriate if there are credible threats to life or safety. For affordable legal assistance, eligible persons may inquire with the Public Attorney’s Office or a recognized legal-aid office, subject to its requirements and case assessment.
Frequently asked questions
Can I file even if I lost only a small amount?
Yes. A small loss does not make deliberate fraud lawful. Keep expectations realistic, organize the evidence, and use the platform and payment-provider processes promptly.
Do I need the seller’s real name before reporting?
No. Submit every identifier you have, including usernames, profile URLs, telephone numbers, email addresses, receiving accounts, transaction references, and delivery details. Investigators may seek additional information through lawful process. Identifying and locating the respondent may still affect whether a case can proceed.
Will a police blotter automatically recover my money?
No. A blotter or incident report records the report; it does not by itself reverse a payment, prove guilt, or order restitution. Pursue the applicable payment, platform, DTI, investigative, prosecutorial, and civil remedies.
Can DTI send the scammer to jail?
DTI may handle covered consumer and regulatory matters and refer appropriate cases, but criminal guilt and imprisonment require the criminal-justice process. Report suspected criminal fraud to law enforcement or the proper prosecutor.
Is non-delivery automatically estafa?
No. Non-delivery is important evidence, but criminal estafa generally requires proof of qualifying deceit that caused the payment and resulting damage. A genuine fulfillment failure or later breach may instead be a consumer or civil dispute.
Is there a single filing deadline for every online seller scam?
No. Platform disputes, payment-provider claims, administrative complaints, civil actions, and criminal offenses follow different rules. Criminal prescription can depend on the offense charged, the amount, when the offense was discovered, and legally significant interruptions. Do not assume that a long legal prescriptive period makes delay safe; report promptly to protect evidence and possible recovery.
Should I confront the seller first?
A calm written demand may help document the refusal to deliver or refund, especially in a consumer dispute. Do not send additional money, disclose more personal information, threaten the seller, or delay urgent reports. If confrontation may lead to evidence deletion or threats, preserve the evidence and contact the platform, payment provider, or authorities first.
Official references
- Internet Transactions Act of 2023 — Republic Act No. 11967
- Cybercrime Prevention Act of 2012 — Republic Act No. 10175
- Anti-Financial Account Scamming Act — Republic Act No. 12010
- DTI Consumer CARe
- DTI consumer-complaint guidance
- NBI online complaint
- DOJ preliminary-investigation filing requirements
- Supreme Court Small Claims information
- Rules on Electronic Evidence
This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Procedures and legal conclusions may change or depend on evidence, dates, locations, and documents. Official sources were checked as of July 27, 2026.