If you were scammed through Facebook Marketplace, Shopee, Lazada, TikTok Shop, Telegram, Viber, WhatsApp, Instagram, a fake investment app, a job-task platform, or an e-wallet transfer, the most important thing is to act quickly and file in the right place. In the Philippines, an “online platform scam” may be a consumer complaint, a cybercrime, an estafa case, a financial-account scam, an investment scam, or all of these at the same time. This guide explains where to complain, what laws may apply, what evidence to prepare, and how the process usually works in real life.

What Counts as an Online Platform Scam in the Philippines?

An online platform scam usually involves deception through a website, marketplace, app, social media page, messaging app, payment platform, or other internet-based service.

Common examples include:

Paying for an item that was never delivered
Receiving a fake, empty, damaged, or different item
Fake seller pages using stolen product photos
“Task scams” where victims are asked to pay deposits to unlock commissions
Fake job, visa, loan, crypto, or investment offers
Sellers or agents who disappear after receiving GCash, Maya, bank, or remittance payment
Phishing links that steal OTPs, passwords, MPINs, or e-wallet access
Fake customer-service accounts pretending to be banks, platforms, telcos, or delivery companies
“Money mule” schemes where a person is asked to lend, rent, or sell a bank or e-wallet account
Romance scams, impersonation scams, and hacked-account solicitations

The legal label depends on the facts. A simple non-delivery dispute with an identifiable seller may start as a DTI consumer complaint. A fake identity, forged page, hacked account, phishing link, or coordinated fraud may require the PNP Anti-Cybercrime Group or NBI Cybercrime Division. If the scam involved unauthorized bank or e-wallet transfers, the bank or e-money issuer must be contacted immediately, and unresolved financial-consumer complaints may be escalated to the BSP.

Where Should You File the Complaint?

Use this as a practical starting point:

Situation	Where to file first	Why
Paid an online seller but no delivery, defective item, wrong item, refund refusal	Platform dispute center, then DTI	DTI handles consumer complaints against online sellers and e-commerce transactions
Fake account, phishing link, hacked account, fake marketplace page, cyber fraud	NBI Cybercrime Division or PNP Anti-Cybercrime Group	These agencies investigate cybercrimes and can request preservation/disclosure of digital evidence
Money sent through bank, GCash, Maya, online banking, QR transfer, InstaPay, PESONet	Bank/e-wallet fraud channel immediately; BSP if unresolved	Fast reporting may help trigger tracing, blocking, temporary hold, or coordinated verification
Fake investment, crypto “trading,” guaranteed returns, Ponzi, unregistered solicitation	SEC and law enforcement	Investment-taking and securities-related fraud fall under SEC enforcement and may also be estafa/cybercrime
Personal data misuse, leaked IDs, unauthorized processing of personal information	National Privacy Commission	Data privacy complaints are handled by the NPC
You want to recover a specific amount from an identifiable person or seller	DTI, barangay if applicable, or Small Claims Court	Civil recovery may be separate from criminal prosecution

In practice, many victims file in more than one place. For example, a Shopee or Facebook seller scam paid through GCash may involve: (1) platform report, (2) bank/e-wallet fraud report, (3) DTI complaint if it is a consumer transaction, and (4) NBI or PNP cybercrime complaint if there is fraud, identity deception, or a fake account.

Philippine Laws That May Apply to Online Platform Scams

Estafa under the Revised Penal Code

Many online scam complaints are framed as estafa, or swindling, under Article 315 of the Revised Penal Code. In simple terms, estafa usually involves deceit or abuse of confidence that causes damage to another person.

For example, estafa may apply when a scammer:

Pretends to be a legitimate seller
Uses fake proof of identity or fake business documents
Promises delivery or investment returns with no intention of complying
Induces the victim to send money through false representations
Disappears after receiving payment

The Supreme Court has repeatedly described fraud or deceit causing damage as the core of estafa; in one formulation, the “gravamen” of estafa is the use of fraud or deceit to the prejudice of another person. (Lawphil)

Cybercrime Prevention Act of 2012 — RA 10175

Republic Act No. 10175, the Cybercrime Prevention Act of 2012, is central when the scam uses computers, mobile phones, messaging apps, websites, or online accounts.

RA 10175 expressly covers computer-related forgery, computer-related fraud, and computer-related identity theft. It also provides that crimes under the Revised Penal Code and special laws, when committed through information and communications technologies, are covered by the Cybercrime Prevention Act and may carry a penalty one degree higher. (Supreme Court E-Library)

This is why an online estafa complaint is often described as estafa in relation to RA 10175.

RA 10175 also matters because it gives cybercrime investigators tools for digital evidence. The NBI and PNP are the law-enforcement authorities responsible for handling violations of the Cybercrime Prevention Act, and the law requires cybercrime units or centers to handle these cases. (Supreme Court E-Library)

Anti-Financial Account Scamming Act — RA 12010

Republic Act No. 12010, the Anti-Financial Account Scamming Act, or AFASA, is especially important for scams involving bank accounts, e-wallets, OTPs, phishing, account takeovers, or money mules.

AFASA punishes money muling activities, including using, borrowing, lending, selling, renting, or recruiting others to use financial accounts for proceeds of crimes or social engineering schemes. It also punishes social engineering schemes, such as pretending to act for a bank or financial institution, or using electronic communications to obtain sensitive account information. (Lawphil)

AFASA allows financial institutions to temporarily hold funds subject of a disputed transaction for a period prescribed by the BSP, not exceeding 30 calendar days unless extended by a court. A transaction may be considered disputed if it appears unusual, lacks clear economic purpose, comes from an unknown or illegal source, or was facilitated through social engineering. (Lawphil)

This is why victims should report to their bank or e-wallet provider immediately, not days later. The longer the delay, the greater the chance that the funds have already moved through several accounts.

Internet Transactions Act of 2023 — RA 11967

Republic Act No. 11967, the Internet Transactions Act of 2023, protects online consumers and merchants engaged in internet transactions and created the Electronic Commerce Bureau under the DTI. (Supreme Court E-Library)

For ordinary consumers, the practical point is this: online selling platforms, e-marketplaces, e-retailers, and online merchants have legal obligations. RA 11967 also strengthens the government’s ability to receive and refer business and consumer complaints involving internet transactions under the DTI’s “no-wrong door” approach. (Lawphil)

This does not mean every online scam is only a DTI matter. If the seller is a real business and the issue is refund, delivery, warranty, or defective goods, DTI is usually appropriate. If the seller is fake, anonymous, hacked, or part of a fraud network, law enforcement is usually necessary.

Access Devices Regulation Act — RA 8484

Republic Act No. 8484, the Access Devices Regulation Act of 1998, may apply when the scam involves credit cards, account numbers, access codes, PINs, or other means of account access. The law defines “access device” broadly to include cards, account numbers, PINs, telecommunications identifiers, and other means of obtaining money, goods, services, or transferring funds. (Lawphil)

RA 8484 punishes acts such as using unauthorized access devices, trafficking in access devices, using access devices with intent to defraud, and obtaining money or value through an access device with fraudulent intent. (Lawphil)

What to Do in the First 24 Hours After an Online Scam

1. Stop communicating in a way that helps the scammer

Do not send more money to “unlock” a refund, commission, verification, tax clearance, delivery fee, or account release. Many victims lose more because the scammer keeps inventing new charges.

Do not delete the chat. Do not block the scammer immediately if doing so will erase the message thread from your device. First, preserve evidence.

2. Secure your accounts

If you clicked a link, gave an OTP, shared an MPIN, installed an app, or logged into a suspicious page:

Change passwords for your email, bank, e-wallet, and social media accounts
Log out all sessions where possible
Enable two-factor authentication
Remove unknown devices from account settings
Uninstall suspicious apps
Call your bank or e-wallet provider through official channels only
Ask whether your account can be temporarily restricted, frozen, or monitored

3. Report the transaction to the bank or e-wallet immediately

For bank or e-wallet transfers, time matters. Ask for:

A fraud report or dispute ticket number
Temporary hold or freeze of the receiving account, if legally and operationally possible
Coordinated verification under AFASA, if applicable
Written acknowledgment of your report
Escalation to the provider’s fraud or financial consumer protection unit

If the provider does not act or the response is unsatisfactory, you may escalate unresolved complaints involving BSP-supervised financial institutions through the BSP Online Buddy or by sending the required complaint details and documents to BSP’s consumer assistance channels. BSP states that consumers may file through BOB, email the CIR form to consumeraffairs@bsp.gov.ph, or use BSP’s other assistance channels after raising the matter with the financial institution. (Bureau of Small Enterprises)

4. Preserve digital evidence properly

Prepare both soft copies and printed copies. For each screenshot, try to show:

The account name, username, profile URL, phone number, email, or shop link
Full conversation, not only selected messages
Dates and timestamps
Product listing, price, promise, guarantee, or investment pitch
Payment instructions
Proof of payment
Delivery tracking, if any
Refund demands and the scammer’s response
Any page showing the seller later blocked you, changed name, deleted listings, or disappeared

If possible, screen-record the profile or listing while navigating from the platform search result to the profile, listing, chat, and payment details. This helps show that the screenshots are connected to the same account.

How to File a Criminal Complaint with the NBI or PNP Cybercrime Unit

A criminal complaint is appropriate when there is deception, impersonation, phishing, hacking, identity theft, fake documents, coordinated fraud, or an anonymous scammer who must be traced.

Step 1: Prepare a clear timeline

Write a simple chronology:

When and where you saw the post, ad, message, website, or offer
Who contacted whom first
What the scammer promised
What made you rely on the scammer
How much you paid and through what channel
What happened after payment
When the scammer stopped replying, blocked you, or changed details
What steps you already took with the platform, bank, e-wallet, or DTI

Keep it factual. Investigators and prosecutors need dates, amounts, account details, and links more than emotional descriptions.

Step 2: Gather your complaint packet

Bring or prepare:

Valid government ID
Your contact details
Complaint-affidavit or written narrative, if already prepared
Screenshots and screen recordings
Chat exports, emails, SMS, call logs
URLs of profiles, listings, groups, websites, or ads
Scammer’s username, phone number, email, bank/e-wallet name, account number, QR code, or wallet number
Proof of payment, transfer confirmation, reference number, deposit slip, remittance receipt
Platform dispute report, if any
Bank/e-wallet fraud ticket number, if any
Names and contact details of witnesses, if any
Device used in the transaction, if investigators need to inspect it

For overseas Filipinos or foreigners abroad, prepare scanned copies and keep originals. If an affidavit must be executed abroad for Philippine proceedings, it may need consular notarization or apostille depending on where it is signed and how it will be used.

Step 3: File with the NBI Cybercrime Division or a Regional Cybercrime Center

The NBI Citizen’s Charter for Investigative Assistance for Victims of Computer Crimes states that the general public may proceed to the Cybercrime Division to file a complaint or request for investigation. The listed process includes assistance in filling out the complaint sheet, preliminary interview and initial investigation, sworn statements or affidavits, submission of supporting documents, and possible examination of relevant devices. The Citizen’s Charter indicates no fees and a front-end processing time of about 1 hour and 10 minutes, excluding the actual investigation work that follows. (National Bureau of Investigation)

In real life, the intake may be quick, but tracing, preservation requests, subpoenas, warrants, coordination with platforms, and referral to prosecutors can take weeks or months depending on complexity, cooperation of platforms, volume of cases, and whether the suspect can be identified.

Step 4: File with the PNP Anti-Cybercrime Group if more accessible

You may also report to the PNP Anti-Cybercrime Group or a local cybercrime unit. RA 10175 identifies both the NBI and PNP as law-enforcement authorities for cybercrime cases. (Supreme Court E-Library)

If you are outside Metro Manila, ask the nearest police station where the regional or provincial cybercrime desk is located. A local blotter can help document the incident, but for digital tracing, cybercrime-trained investigators are usually needed.

Step 5: Ask about preservation of digital evidence

Digital evidence disappears quickly. Scammers delete accounts, platforms purge logs, and phone numbers are abandoned.

Under RA 10175, traffic data and subscriber information relating to communication services must be preserved for at least six months from the date of the transaction, while content data may be preserved for six months from receipt of a law-enforcement preservation order. The law also allows a one-time extension for another six months, and disclosure of subscriber, traffic, or relevant data generally requires a court warrant in relation to a valid complaint officially docketed and assigned for investigation. (Supreme Court E-Library)

When you file, specifically ask the investigator whether a preservation request can be sent promptly to the platform, telco, email provider, bank, e-wallet, or web host.

How to File a DTI Complaint Against an Online Seller or Platform

DTI is usually the right route when the problem is a consumer transaction, such as non-delivery, wrong item, defective product, refund refusal, misleading advertisement, fake “no refund” policy, or an online seller that appears to be a business.

Step 1: Use the platform’s dispute system first

For Shopee, Lazada, TikTok Shop, Facebook Marketplace, Instagram, or other platforms, document that you tried to resolve the issue through:

Return/refund request
Seller chat
Platform help center
Report seller or report listing feature
Dispute or mediation process

Save the ticket numbers and screenshots. DTI will usually want proof that you attempted to resolve the consumer issue.

Step 2: Prepare your consumer complaint

Your complaint should include:

Your name, address, mobile number, and email
Seller’s name, shop name, username, business name, address, if known
Platform used
Date of order
Product or service purchased
Amount paid
Payment method
What was promised
What was delivered or not delivered
Refund, replacement, repair, or other remedy requested
Screenshots, receipts, tracking records, and chat history

Step 3: Submit to DTI

DTI’s e-commerce FAQ states that a consumer complaint against an online seller may be sent to the DTI Fair Trade Enforcement Bureau at fteb@dti.gov.ph, with eco@dti.gov.ph copied. It also states that DTI-FTEB accommodates complaints for online and offline businesses, even if the merchant is not on a major e-commerce platform. (DTI ECommerce)

For Metro Manila complainants, the DTI Fair Trade Enforcement Bureau states that complaints may be submitted through the online portal consumercare.dti.gov.ph, by sending a complaint form or complaint letter to consumercare@dti.gov.ph, or in person at the DTI-FTEB office in Makati. (Fair Trade Enforcement Bureau)

Step 4: Attend mediation if scheduled

DTI consumer complaints often go through mediation first. Mediation is a meeting, usually facilitated by a DTI officer, where the parties try to settle the complaint.

Possible outcomes include:

Refund
Replacement
Repair
Delivery of the correct item
Cancellation of transaction
Written settlement
Escalation if the seller refuses to cooperate

DTI is helpful when the seller can be identified and contacted. If the seller used a fake identity, vanished, or used a mule account, DTI may not be enough; a cybercrime complaint may be needed.

If the Scam Involves GCash, Maya, Online Banking, or Bank Transfers

When money moves through a financial account, your first report should be to the financial institution, not only to the platform or police.

What to tell the bank or e-wallet provider

Use precise wording:

“I am reporting a suspected scam/fraud transaction.”
“Please record this as a disputed transaction.”
“Please check if the receiving account can be temporarily held, frozen, or flagged under applicable fraud rules and AFASA.”
“Please provide a ticket number and written acknowledgment.”
“Please preserve all logs and transaction details for law-enforcement investigation.”

Provide:

Transaction date and time
Amount
Reference number
Sender and recipient account details
Screenshots of the scam conversation
Police/NBI report number, if already available

When to escalate to BSP

Escalate to BSP if:

The bank or e-wallet does not respond
The response is generic or unreasonable
The institution refuses to give a ticket number
Your account was compromised and the provider did not properly assist
There is an unresolved unauthorized or fraudulent transaction

BSP’s consumer assistance page explains that after raising the concern with the BSP-supervised financial institution, a consumer may file through BOB, email the CIR form and supporting documents, call BSP’s consumer protection office, or visit BSP’s consumer assistance desk or regional offices. (Bureau of Small Enterprises)

If the Scam Is an Investment, Crypto, or “Guaranteed Profit” Platform

Be careful with any platform promising:

Guaranteed daily, weekly, or monthly returns
“No risk” crypto trading
Commissions for recruiting others
Locked funds unless you pay tax, verification, or withdrawal fees
Celebrity-endorsed investment ads
SEC registration screenshots that do not match the investment product
“AI trading,” “copy trading,” or “tasking” with unrealistic returns

File with the SEC if the scheme involves investment solicitation, securities, crypto-style investment contracts, or pooled funds. The SEC iMessage portal allows the public to submit complaints and open tickets directly with the Securities and Exchange Commission. (Securities and Exchange Commission)

Also file with the NBI or PNP if money was lost through fraud, because SEC action against an entity does not automatically recover funds from individual scammers.

Should You Also File a Small Claims Case?

A small claims case may help when:

You know the real name and address of the seller or debtor
The claim is for a sum of money
You have proof of payment and demand
The amount does not exceed the current small claims threshold
You want a civil judgment for recovery of money

The Supreme Court has stated that the Rules on Expedited Procedures increased the small claims threshold to ₱1,000,000 and cover claims for money owed under contracts such as sale of personal property, services, lease, and loans, subject to the rules. (Supreme Court of the Philippines)

Small claims is not a substitute for cybercrime investigation. It is useful only if the defendant can be identified and served. If the scammer used a fake name, fake address, mule account, or foreign-hosted platform, law-enforcement tracing may be needed first.

Special Issues for OFWs, Foreigners, and Victims Abroad

OFWs and Filipinos abroad

If you are abroad but the scammer, platform transaction, bank, e-wallet, or victim account is in the Philippines, Philippine authorities may still be relevant.

Practical steps:

Report immediately to the bank/e-wallet through official online or hotline channels
Ask a trusted relative in the Philippines to help print, organize, and submit documents if needed
Execute a Special Power of Attorney if someone will file or follow up for you
If executing documents abroad, check whether notarization, consular acknowledgment, or apostille is required
Keep your Philippine mobile number active if linked to banking or wallet accounts

Foreigners dealing with Philippine online scams

Foreigners may file complaints in the Philippines if they were victimized by a scam involving a Philippine-based person, account, platform, bank, e-wallet, or transaction. Bring passport identification, proof of transaction, and a clear written narrative.

If documents are executed abroad, Philippine authorities may ask for authentication or apostille depending on the country and document type. If the suspect is outside the Philippines or the platform is foreign-based, investigation may require international cooperation, which is slower and usually handled through law-enforcement and DOJ channels. RA 10175 designates the DOJ Office of Cybercrime as the central authority for international mutual assistance and extradition matters related to cybercrime. (Supreme Court E-Library)

Common Mistakes That Weaken an Online Scam Complaint

Deleting conversations too early

Victims often delete chats out of anger or embarrassment. This can remove timestamps, profile links, message IDs, and other details investigators need.

Sending only cropped screenshots

Cropped screenshots may be useful for quick reporting, but formal complaints need full context. Include the profile, URL, timestamps, and transaction details.

Waiting too long to report to the bank or e-wallet

Funds can move through multiple accounts within minutes. Report immediately and ask for a fraud ticket.

Filing only with the platform

A platform report may suspend an account, but it does not always trigger criminal investigation, bank tracing, or preservation of telecom and subscriber data.

Assuming DTI can trace anonymous scammers

DTI is effective for consumer disputes with identifiable sellers or businesses. Anonymous fake accounts, hacked profiles, and phishing syndicates usually require NBI or PNP cybercrime investigation.

Paying more money to recover the first payment

A common second-stage scam is: “Pay clearance fee,” “Pay tax,” “Pay unlock fee,” “Pay anti-money laundering verification,” or “Pay attorney fee to release your refund.” Treat these as red flags.

Publicly posting accusations without evidence

Posting the alleged scammer’s name, face, ID, or address online may create separate risks, especially if the identity was stolen or the account was hacked. Preserve evidence and file properly.

Documents Checklist

Document or evidence	Why it matters
Valid ID	Establishes complainant identity
Written timeline	Helps investigators understand the sequence quickly
Screenshots of profile/listing/page	Shows the online identity used
Full chat history	Shows promises, deceit, payment instructions, and demands
Payment proof	Connects the victim’s loss to the recipient account
Bank/e-wallet reference number	Needed for tracing and verification
Platform ticket or dispute report	Shows prior reporting and platform response
URLs and usernames	Needed for preservation and disclosure requests
Device used	May be examined if phishing, hacking, malware, or account takeover is involved
Witness statements	Useful if another person saw the transaction or communicated with the scammer
Demand letter or refund request	Helpful for consumer complaints and civil recovery

Typical Timelines and Bottlenecks

Stage	Usual practical timeline	Common bottlenecks
Bank/e-wallet fraud report	Same day to several days for initial response	Funds already withdrawn or transferred
Platform report	Same day to several weeks	Automated replies, seller deletion, account already abandoned
NBI/PNP complaint intake	Same day if documents are complete	Long queues, incomplete evidence, wrong office
Digital preservation and tracing	Days to months	Need for proper requests, warrants, platform cooperation
Prosecutor preliminary investigation	Several months or longer	Difficulty identifying respondent, service of subpoena, case backlog
DTI mediation	Weeks to a few months	Seller cannot be contacted, seller refuses to participate
Small claims	Often faster than ordinary civil cases	Defendant must be properly identified and served

The biggest practical bottleneck is not usually the legal theory. It is identifying the real person behind the account and connecting that person to the payment account, device, phone number, IP logs, or platform records.

Frequently Asked Questions

Can I file a complaint if I only know the scammer’s Facebook name or GCash number?

Yes. You can still report the incident. The purpose of a cybercrime investigation is often to identify the person behind the account, number, wallet, or device. Provide every available detail: profile URL, screenshots, transaction reference number, mobile number, QR code, account name, and chat history.

Should I file with NBI or PNP?

Either may be appropriate for cybercrime. RA 10175 identifies both the NBI and PNP as law-enforcement authorities for cybercrime cases. Choose the office that is accessible and has a cybercrime unit that can receive your complaint. If one office tells you the case is better handled elsewhere, ask for a referral or written guidance.

Is an online seller’s failure to deliver automatically estafa?

Not always. A delayed delivery or refund dispute may be civil or consumer-related. Estafa usually requires deceit or fraudulent intent, such as pretending to be a legitimate seller, using fake identity, taking payment with no intention to deliver, or repeatedly victimizing buyers. The facts matter.

Can DTI force an online seller to refund me?

DTI can handle consumer complaints, facilitate mediation, and process appropriate administrative remedies within its jurisdiction. It is often effective when the seller is identifiable and reachable. If the seller is fake or cannot be found, DTI may not be enough, and a cybercrime complaint may be necessary.

Can I get my money back from GCash, Maya, or the bank?

Recovery depends on how fast you report, whether the funds remain in the system, whether the transaction qualifies for temporary holding or coordinated verification, and whether the financial institution complied with applicable duties. AFASA strengthens remedies for disputed financial-account transactions, but it does not guarantee recovery in every case.

What if the scammer used a mule account?

Report the recipient account anyway. Under AFASA, money muling activities are punishable, including using, borrowing, lending, selling, renting, or recruiting others to use financial accounts for proceeds of crimes or social engineering schemes. (Lawphil)

Do I need a lawyer to file a cybercrime complaint?

You can file an initial complaint yourself, especially if your evidence is organized. However, legal assistance may be useful for drafting a complaint-affidavit, coordinating with investigators, pursuing civil recovery, or handling large losses, foreign elements, or multiple victims.

Can I file if I am outside the Philippines?

Yes, if the scam has a Philippine connection, such as a Philippine bank/e-wallet account, Philippine-based scammer, Philippine platform transaction, or Philippine victim account. You may need properly executed affidavits or authority for a representative in the Philippines.

What if many people were scammed by the same platform?

Victims should preserve individual proof of payment and communications, then consider coordinated reporting. Multiple victims can help show a pattern, but each complainant should still document their own transaction, amount lost, and reliance on the scammer’s representations.

Is posting the scammer online a good idea?

Public warnings may help others, but they can also create risks if the identity was stolen or if the post includes private data, accusations, or threats. For legal purposes, it is safer to preserve evidence, report to the platform, and file with the proper agency.

Key Takeaways

Online platform scams in the Philippines may involve DTI consumer remedies, cybercrime investigation, estafa, AFASA financial-account remedies, SEC action, or civil recovery.
Report bank and e-wallet scams immediately; speed can affect whether funds can be traced, held, or recovered.
File with NBI or PNP cybercrime units when there is fake identity, phishing, hacking, account takeover, or anonymous online fraud.
File with DTI when the issue involves an online seller, e-commerce platform, refund, non-delivery, defective item, or misleading online transaction.
Preserve full evidence: chats, URLs, timestamps, payment references, platform reports, and account details.
RA 10175 allows preservation and disclosure mechanisms for digital evidence, while RA 12010 addresses financial-account scams, social engineering, and money mule activity.
The strongest complaints are factual, chronological, evidence-backed, and filed quickly with the correct office.