I. Introduction

Online buying has become ordinary in the Philippines, but so have scams involving sellers who accept payment and fail to deliver the item. These incidents commonly happen through Facebook Marketplace, Instagram shops, TikTok sellers, messaging apps, classified ads, online marketplaces, fake websites, buy-and-sell groups, and even through impersonated pages of legitimate businesses.

When a seller fails to deliver an item after receiving payment, the legal issue may be a simple delay, breach of contract, consumer complaint, civil obligation, or criminal scam depending on the facts. Not every failed delivery is automatically a criminal offense. However, where the seller never intended to deliver, used a fake identity, blocked the buyer after payment, reused tracking numbers, sent fake proof of shipment, or induced payment through false promises, the matter may amount to fraud or cyber-related criminal conduct.

In the Philippine context, a buyer may report the scam to the platform, payment provider, bank or e-wallet, police cybercrime unit, National Bureau of Investigation Cybercrime Division, Department of Trade and Industry, barangay, prosecutor’s office, or court, depending on the circumstances.

The best response is prompt, evidence-based, and organized. Delay can make it harder to trace accounts, freeze funds, preserve platform records, or identify the seller.

II. Distinguishing Delay, Breach of Contract, and Online Scam

The first step is to determine the nature of the seller’s conduct.

A. Mere Delay

A seller may be delayed because of courier problems, supplier delay, holidays, weather, address issues, payment verification, inventory mistakes, or administrative error. Delay alone is not necessarily fraud.

However, the seller should communicate, provide truthful updates, and deliver within a reasonable time or refund the buyer.

B. Breach of Contract

A breach of contract occurs when there was a valid sale but the seller failed to perform the obligation to deliver. The buyer may demand delivery, refund, damages, or cancellation of the sale.

A breach may be civil, not criminal, especially if the seller initially intended to sell but later failed to deliver because of negligence, mismanagement, or inability to source the item.

C. Fraud or Scam

A scam is more likely where the seller obtained payment through deceit. Indicators include fake identity, fake business page, fake reviews, stolen photos, false stock claims, fake shipping receipt, refusal to give tracking number, blocking the buyer after payment, repeated complaints from other victims, or use of mule accounts.

Fraudulent intent is often inferred from conduct before, during, and after payment.

III. Legal Theories Applicable to an Online Scam Seller

Several legal theories may apply.

A. Estafa

The most common criminal concept is estafa. Estafa generally involves defrauding another by abuse of confidence, deceit, false pretenses, fraudulent acts, or misappropriation.

In online selling scams, estafa may arise where the seller falsely represents that an item exists, that the seller has authority to sell it, that the seller will deliver it, or that payment is needed to reserve or ship the item, when in truth the seller has no intention or capacity to deliver.

The buyer must show deceit and damage. The payment made is the damage. The online messages, listing, payment receipts, and post-payment conduct help prove deceit.

B. Cybercrime-Related Estafa

If the fraudulent transaction was committed through information and communications technology, such as social media, messaging apps, email, websites, online marketplaces, or electronic payment channels, the offense may have a cybercrime aspect.

The use of the internet or digital systems may affect jurisdiction, evidence handling, and investigative route. It may also justify filing with cybercrime units.

C. Consumer Protection Violation

If the seller is engaged in business or trade, the buyer may have consumer protection remedies. False advertising, deceptive sales acts, unfair practices, refusal to honor obligations, and failure to provide promised goods may be the subject of complaints.

A consumer complaint is especially appropriate when the seller is identifiable, operates as a business, uses a store name, sells repeatedly to the public, or maintains an online shop.

D. Civil Action for Collection, Refund, or Damages

The buyer may file a civil claim to recover the amount paid, demand damages, or enforce the sale. For smaller amounts, small claims procedure may be available. Small claims is designed for money claims and does not require a lawyer.

A civil case may be more practical where the seller is known, the amount is recoverable, and the dispute is primarily about non-delivery or refund.

E. Data Privacy, Identity Theft, and Impersonation

Some scams involve fake accounts using another person’s name, ID, business registration, or photos. If identity theft or misuse of personal data is involved, additional complaints may be possible.

A buyer should be careful not to publicly accuse the wrong person without verification, especially if the scammer used a stolen identity.

IV. Elements That Make a Failed Delivery More Likely to Be a Scam

A failed delivery is more suspicious when the seller:

requires full payment before shipment;

uses a newly created account;

offers a price far below market value;

refuses cash on delivery or meet-up without valid reason;

uses stolen product photos;

uses fake reviews or copied testimonials;

cannot provide actual photos or videos of the item;

pressures the buyer to pay immediately;

asks for payment to a personal e-wallet under a different name;

uses multiple payment accounts;

sends fake courier receipts;

gives invalid tracking numbers;

stops replying after payment;

blocks the buyer;

changes account name after payment;

deletes the listing;

is reported by other victims;

uses the same script repeatedly;

claims emergencies to avoid refund;

asks for additional payment for customs, insurance, tax, delivery, or release fees;

pretends to be a legitimate store or public figure.

The more deceptive facts are present, the stronger the case for criminal reporting.

V. Immediate Steps After Discovering the Scam

The buyer should act quickly and systematically.

A. Preserve Evidence

Do not delete conversations. Take screenshots and screen recordings immediately. Save the seller’s profile, listing, product photos, messages, payment instructions, receipts, and all attempts to follow up.

Screenshots should show dates, times, usernames, account names, URLs, phone numbers, payment details, and the full conversation flow.

B. Do Not Send More Money

Scammers often ask for additional fees after the first payment, such as “insurance,” “customs,” “tax,” “courier release,” “priority shipping,” or “refund processing fee.” These are common follow-up scams.

C. Contact the Seller Once in Writing

Send a clear written demand for delivery or refund. Avoid threats or defamatory language. Give a short deadline. This creates a record that the seller was asked to perform.

D. Report to the Platform

Report the seller’s account, page, listing, group post, marketplace profile, or website. Ask the platform to preserve records.

E. Contact the Payment Provider

Immediately contact the bank, e-wallet, payment gateway, remittance center, or card issuer. Report the transaction as scam-related and ask whether reversal, hold, freeze, chargeback, or investigation is available.

F. Prepare a Complaint Packet

Organize all evidence before going to the police, NBI, DTI, barangay, or court. A clean complaint packet improves the chance of action.

VI. Evidence to Collect

A strong complaint should include:

the seller’s name, username, profile link, page link, phone number, email, address if known;

screenshots of the product listing;

screenshots of the full conversation;

proof of price and item description;

proof of seller’s promise to deliver;

proof of payment instructions;

payment receipt or transaction confirmation;

e-wallet or bank account number used;

name of account recipient;

date and time of payment;

tracking number, if any;

fake courier receipt, if any;

proof that the item was not delivered;

screenshots showing that the seller blocked the buyer or deleted the account;

other victim reports, if available;

seller’s advertisements, posts, and comments;

delivery address provided by the buyer;

attempts to demand refund or delivery;

any admission by the seller;

URLs and account IDs;

screen recording showing account profile and conversation.

Where possible, save files in original form, not only screenshots. Download receipts, email confirmations, PDFs, and transaction records.

VII. Importance of URLs, Account IDs, and Transaction References

A common mistake is saving only cropped screenshots. Investigators need identifiers.

For social media, save the profile URL, page URL, username, display name, group name, listing URL, and any visible account ID.

For payment, save the transaction reference number, account number, e-wallet number, recipient name, bank branch if available, and date and time.

For delivery, save courier tracking number, shipment label, sender details, and delivery status.

For websites, save the full URL, domain name, checkout page, email confirmations, and payment page.

These details help trace the scammer and support requests to platforms and financial institutions.

VIII. Reporting to the Online Platform

If the transaction happened on a marketplace or social media platform, the buyer should report the seller through the platform’s fraud or scam reporting tools.

The report should state:

the item purchased;

amount paid;

date of payment;

seller account;

payment channel;

failure to deliver;

seller’s refusal to refund;

evidence attached.

The buyer should ask the platform to preserve account data, messages, login records, listing history, and linked accounts. Platforms may not disclose private data directly to the buyer, but they may preserve it for law enforcement or respond to lawful requests.

Reporting to the platform can also prevent further victims.

IX. Reporting to Banks, E-Wallets, and Payment Providers

The buyer should immediately report the transaction to the payment channel used.

A. E-Wallets

For e-wallet payments, the buyer should file a scam report through customer support, app help center, hotline, or email. Provide transaction reference, recipient number, amount, date, and screenshots.

The e-wallet may investigate, restrict the recipient account, request additional documents, or advise filing a police report.

B. Banks

If payment was made by bank transfer, the buyer should contact the sending bank and, if known, the receiving bank. Ask for the transaction to be flagged as fraud-related.

Banks may be limited in reversing completed transfers without consent or legal process, but fast reporting may help if funds remain in the account.

C. Credit or Debit Cards

If payment was made by card, the buyer may ask about chargeback. Card chargeback rules differ from ordinary bank transfers. Deadlines matter.

D. Remittance Centers

If payment was sent through remittance, report the transaction immediately. If the recipient has not yet claimed the funds, cancellation may be possible. If already claimed, transaction details may support law enforcement investigation.

E. Payment Gateways

If payment passed through a payment gateway, the buyer should report the merchant or seller and request dispute handling.

X. Reporting to the Philippine National Police

A buyer may report the scam to the Philippine National Police, especially through cybercrime units when the transaction occurred online.

The complaint should be organized. Bring valid ID, printed screenshots, digital copies, payment receipts, and a written narrative.

The narrative should include:

how the buyer found the seller;

what item was offered;

what representations were made;

how much was paid;

where payment was sent;

what happened after payment;

why the buyer believes it was a scam;

what evidence is attached.

The police may record the complaint, assist with cybercrime referral, advise on affidavit preparation, or coordinate with investigators.

XI. Reporting to the NBI Cybercrime Division

The National Bureau of Investigation Cybercrime Division may investigate online scams, especially where the scam involves social media, fake websites, identity theft, multiple victims, larger amounts, or organized fraud.

A complainant should prepare:

valid ID;

printed complaint affidavit or narrative;

screenshots of messages and listing;

payment receipts;

seller profile links;

transaction references;

device used, if relevant;

emails or phone numbers used by seller;

other victim evidence, if available.

The NBI may evaluate whether the facts support cybercrime investigation and may require an affidavit.

XII. Reporting to the Department of Trade and Industry

The Department of Trade and Industry is relevant when the seller is engaged in trade or business and the issue involves consumer protection, deceptive sales acts, unfair trade practices, non-delivery, defective goods, or refusal to refund.

A DTI complaint may be appropriate when:

the seller is an online shop or business;

the seller has a store name;

the transaction is a consumer purchase;

the buyer wants mediation, refund, replacement, or compliance;

the seller is identifiable and reachable.

DTI may facilitate mediation or complaint resolution. However, if the seller is a fake account, anonymous scammer, or criminal fraud ring, law enforcement may be more appropriate.

XIII. Barangay Proceedings

Barangay conciliation may be relevant if the buyer and seller are natural persons residing in the same city or municipality, or otherwise within the coverage of barangay conciliation rules.

However, online scams often involve unknown identities, different localities, corporate sellers, or criminal elements. In those cases, barangay proceedings may not be suitable or may not be required.

If the seller is known and local, barangay proceedings can sometimes pressure the seller to refund or settle. But barangay proceedings cannot replace criminal cybercrime investigation where fraud is involved.

XIV. Filing a Criminal Complaint Before the Prosecutor

If there is enough evidence of estafa or cyber-related fraud, the buyer may file a criminal complaint before the prosecutor’s office.

The complaint usually includes:

complaint-affidavit;

supporting affidavits, if any;

copies of screenshots and messages;

payment receipts;

seller profile evidence;

demand letter or proof of demand;

proof of non-delivery;

valid IDs;

certification or records from bank, e-wallet, courier, or platform if available.

The prosecutor will determine whether there is probable cause. If probable cause exists, an information may be filed in court.

Criminal proceedings aim to punish the offender, but the complainant may also seek restitution or civil liability within the criminal case, depending on procedure.

XV. Civil Remedies and Small Claims

If the buyer knows the seller’s identity and address, and the main objective is to recover money, a civil action may be considered.

Small claims procedure may be appropriate for claims involving payment of money where the amount falls within the applicable threshold. It is designed to be faster and lawyer-free.

The buyer may seek:

refund of the purchase price;

delivery value;

damages where allowed;

costs.

Small claims is not a criminal proceeding. It will not punish the seller for fraud, but it may help recover money if the seller can be located and served.

XVI. Demand Letter Before Filing

A demand letter is often useful. It shows that the buyer gave the seller an opportunity to deliver or refund. It may also help prove refusal or bad faith.

The demand letter should state:

buyer’s name;

seller’s name or account;

item purchased;

amount paid;

date of payment;

payment channel;

seller’s obligation;

failure to deliver;

demand for refund or delivery;

deadline;

warning that legal remedies may be pursued.

The tone should be firm but factual. Avoid insults, public shaming, threats of violence, or statements that could be defamatory.

XVII. Is Demand Required Before Reporting?

A demand is useful but not always strictly required to report a scam. If the seller disappeared, blocked the buyer, used a fake identity, or the transaction clearly appears fraudulent, the buyer may report immediately.

However, proof of demand strengthens the record. It helps show that the seller was given a chance to perform and failed or refused.

XVIII. Public Posting About the Seller

Victims often want to post warnings online. Public warnings can help others, but they carry legal risks if inaccurate, excessive, or defamatory.

A safer public warning should be factual and evidence-based:

state the transaction date;

item;

amount;

account used;

fact of non-delivery;

fact of non-refund;

avoid conclusions like “criminal” unless supported by official findings;

avoid posting sensitive personal information beyond what is necessary;

avoid threatening or harassing language;

avoid accusing an innocent identity-theft victim.

When in doubt, report to platforms and authorities instead of relying only on public shaming.

XIX. Risks of Dealing With Fake Identities

Many scammers use borrowed, stolen, or fabricated identities. The name on an e-wallet or bank account may belong to a money mule, identity theft victim, or person recruited to receive funds.

A buyer should avoid assuming that the person in a stolen photo is the scammer. Instead, preserve all evidence and let investigators trace the account.

Posting IDs, selfies, or personal information online may create privacy and defamation risks if the documents were stolen.

XX. Money Mules and Receiving Accounts

Scam funds often pass through money mule accounts. A money mule is a person whose bank or e-wallet account is used to receive and transfer illicit funds.

The recipient account is important evidence, but it may not be the mastermind. Still, the account holder may face investigation if they knowingly allowed their account to be used.

Buyers should provide payment details to law enforcement and financial institutions quickly so funds can be traced.

XXI. Courier-Related Issues

Some scams involve fake shipping. Others involve real shipment of a wrong item, empty parcel, or low-value substitute.

Evidence should include:

tracking number;

courier name;

proof of shipment;

parcel photos;

unboxing video;

waybill;

sender details;

delivery status;

weight discrepancy;

photos of item received;

complaint to courier.

If the seller claims the courier lost the item, the buyer should ask for the actual waybill and proof of handover to the courier. A fake waybill or invalid tracking number is strong evidence of fraud.

XXII. “Wrong Item” and “Empty Box” Scams

A seller may send an empty box, damaged item, counterfeit product, or unrelated item to create the appearance of delivery.

In such cases, the buyer should:

record unboxing if possible;

keep packaging and waybill;

take photos of all sides of the parcel;

save weight details;

report to the platform;

report to the courier;

preserve seller messages;

file a refund dispute promptly.

This may be treated as non-delivery, defective product, fraud, or deceptive sales practice depending on the facts.

XXIII. Marketplace Escrow and Buyer Protection

Some online marketplaces provide buyer protection, escrow, return/refund systems, or dispute resolution. Buyers should use these built-in systems instead of paying outside the platform.

A common scam involves persuading the buyer to transact outside the platform to avoid fees or get a discount. Once payment is sent directly by bank or e-wallet, platform protection may no longer apply.

If the transaction occurred inside a platform, file the dispute within the deadline. Do not click “order received” unless the item was actually received and inspected.

XXIV. Social Media Marketplace Scams

Scams through Facebook, Instagram, TikTok, and messaging apps are common because account creation is easy and fake pages can look legitimate.

Victims should save:

profile URL;

page transparency information, if available;

username;

display name;

posted photos;

comments and reviews;

conversation thread;

payment instructions;

mutual groups;

admin or moderator information;

group post URL;

date the account was created, if visible.

Report both the seller account and the listing. If the scam occurred in a group, notify group admins as well.

XXV. Website and Fake Store Scams

Fake online stores may imitate legitimate brands or offer unrealistic discounts.

Evidence should include:

domain name;

website URL;

checkout page;

order confirmation;

email headers, if possible;

payment page;

merchant name;

terms and conditions;

contact page;

screenshots of product listing;

proof that the website later disappeared.

If the website uses a payment processor, report the merchant to the processor. If it imitates a brand, report the impersonation to the real brand and platform.

XXVI. Cross-Border Online Seller Scams

If the seller appears to be abroad, enforcement becomes harder. The buyer may still report locally if the victim is in the Philippines and the transaction occurred through online means.

However, recovery may depend on payment channel remedies, platform cooperation, international law enforcement coordination, or the seller’s jurisdiction.

Scammers often falsely claim to be abroad and demand customs, insurance, or release fees. These claims should be treated with caution.

XXVII. When the Seller Says “No Refund Policy”

A “no refund” statement does not automatically defeat the buyer’s rights. A seller cannot use a no-refund policy to keep money after failing to deliver the item.

No-refund policies may be relevant for valid completed sales, but not for fraud, non-delivery, defective goods, misrepresentation, or unlawful business practice.

If the item was never delivered, the buyer may demand delivery or refund.

XXVIII. When the Seller Claims the Item Was Shipped

The seller should provide a valid tracking number and proof of shipment. The buyer should verify directly with the courier.

If the tracking number belongs to another person, another address, an earlier shipment, or a different item, this may indicate fraud.

If the courier confirms no such shipment exists, preserve the confirmation.

XXIX. When the Seller Blocks the Buyer

Blocking after payment is strong circumstantial evidence but not conclusive by itself. It should be documented immediately.

Take screenshots showing:

messages sent;

unread or blocked status;

profile unavailable;

deleted listing;

changed username;

account deactivation.

Blocking supports the inference of bad faith, especially when combined with failure to deliver and refusal to refund.

XXX. Filing an Affidavit of Complaint

An affidavit of complaint should be clear, chronological, and evidence-based.

It should contain:

identity of complainant;

how the seller was found;

description of the item;

representations made by seller;

agreed price;

payment details;

seller’s promise to deliver;

failure to deliver;

follow-up messages;

seller’s excuses or blocking;

damage suffered;

request for investigation or prosecution;

list of attached evidence.

The affidavit should be signed before a person authorized to administer oaths.

XXXI. What Not to Do

A victim should avoid:

sending more money;

threatening the seller;

hacking the seller’s account;

posting unverified personal data;

fabricating evidence;

editing screenshots in a misleading way;

harassing relatives of the alleged seller;

using vigilante tactics;

impersonating law enforcement;

agreeing to suspicious “recovery agents” who demand fees;

deleting conversations;

waiting too long before reporting payment fraud.

The goal is to build a credible legal record.

XXXII. Recovery Scams After the Original Scam

Victims are often targeted again by “recovery agents” claiming they can retrieve funds for a fee. These may be additional scams.

Warning signs include:

guaranteed recovery;

upfront fees;

requests for passwords or OTPs;

claims of insider bank access;

fake law enforcement IDs;

pressure to act immediately;

requests for remote access to phone or computer.

Do not provide passwords, OTPs, banking credentials, seed phrases, or remote access.

XXXIII. Criminal Liability of the Seller

A scam seller may face criminal liability if the evidence shows fraudulent intent, deceit, and damage. If committed online, cybercrime-related provisions may apply.

Potential consequences may include imprisonment, fines, restitution, civil liability, and other penalties.

Where several victims exist, complaints may be consolidated or may show a pattern of fraudulent activity.

XXXIV. Liability of Platforms

An online platform is not automatically liable for every scam committed by a user. However, platforms may have responsibilities under their own terms, consumer protection rules, and regulatory expectations.

A platform may be expected to provide reporting tools, remove fraudulent listings, suspend abusive accounts, preserve records, and cooperate with lawful requests.

The buyer’s chance of recovery depends on the platform’s buyer protection system and whether the transaction stayed within the platform.

XXXV. Liability of Payment Providers

Banks and e-wallets are generally not guarantors of every transfer made by a customer. However, they may have fraud reporting, account restriction, anti-money laundering, and investigation duties.

Fast reporting is important. Once funds are withdrawn or transferred, recovery becomes harder.

The buyer should request a case number from the payment provider and follow up in writing.

XXXVI. Time Sensitivity

Online scam reporting is time-sensitive because:

scammers delete accounts;

funds are withdrawn quickly;

platform logs may be harder to retrieve later;

courier records may expire;

memories fade;

screenshots may be lost;

payment dispute deadlines may pass;

chargeback periods may expire.

Victims should report as soon as they reasonably believe the transaction is fraudulent.

XXXVII. Multiple Victims and Group Complaints

If several buyers were scammed by the same seller, a coordinated complaint may be stronger. Multiple victims can show pattern, scheme, and fraudulent intent.

However, each victim should still preserve individual evidence:

their own conversation;

their own payment receipt;

their own non-delivery proof;

their own demand for refund.

Group complaints should be organized and not based only on hearsay.

XXXVIII. Practical Complaint Packet

A practical complaint packet should include:

One-page summary of facts.
Chronological timeline.
Copy of valid ID.
Seller profile screenshots.
Product listing screenshots.
Full conversation screenshots.
Payment receipt.
Transaction reference.
Bank or e-wallet report.
Courier record, if any.
Demand message or demand letter.
Proof of blocking or deletion.
Other victim evidence, if relevant.
Printed copies and digital copies.

A well-organized complaint is easier for authorities to evaluate.

XXXIX. Sample Timeline Format

A timeline may look like this:

Date and time seller posted item.

Date and time buyer inquired.

Date and time seller confirmed availability.

Date and time seller gave payment details.

Date and time buyer paid.

Date and time seller promised shipment.

Date and time seller sent tracking number or excuse.

Date and time buyer followed up.

Date and time seller stopped replying or blocked buyer.

Date and time buyer reported to platform and payment provider.

This simple timeline helps establish the sequence of deceit and damage.

XL. Reporting Path Based on Situation

If the seller is a registered online business and still reachable, report to the platform, DTI, and payment provider, and consider civil remedies.

If the seller used a fake social media account and disappeared, report to the platform, payment provider, PNP cybercrime unit, or NBI cybercrime unit.

If the amount is small but the seller is known and local, consider demand, barangay proceedings if applicable, or small claims.

If the amount is large, involves many victims, or uses fake identities, prioritize law enforcement and financial institution reporting.

If payment was made by card, immediately ask the card issuer about chargeback.

If payment was made through e-wallet or bank transfer, report fraud immediately and request account restriction or investigation.

XLI. Prevention Lessons for Future Transactions

Buyers can reduce risk by:

using platforms with escrow or buyer protection;

avoiding off-platform payment;

checking seller history;

verifying business registration where relevant;

asking for live photos or video of the item;

using cash on delivery where available;

avoiding unrealistic prices;

checking reviews outside the seller’s page;

avoiding rushed payments;

using traceable payment methods;

matching seller name with payment account name;

being cautious with newly created accounts;

not sharing OTPs or banking credentials;

keeping all communication inside the platform.

Prevention is important because recovery after online transfer can be difficult.

XLII. Conclusion

When an online seller in the Philippines accepts payment and fails to deliver the item, the buyer should first determine whether the matter is a delay, breach of contract, consumer dispute, or scam. If deceit is present, the case may involve estafa or cyber-related fraud.

The buyer’s strongest protection is evidence. Screenshots, payment receipts, seller profile links, transaction references, courier records, and written demands should be preserved immediately. Reports should be made promptly to the platform, payment provider, bank or e-wallet, and, where appropriate, the PNP cybercrime unit, NBI Cybercrime Division, DTI, barangay, prosecutor’s office, or court.

A seller cannot lawfully keep a buyer’s money while refusing to deliver the item or issue a refund without valid basis. But practical recovery depends on speed, documentation, identification of the seller, payment traceability, and the availability of platform or legal remedies.

In the Philippine context, a well-prepared complaint packet, prompt fraud reporting, and clear distinction between civil and criminal remedies give the victim the best chance of stopping the scammer, preserving evidence, and recovering the amount paid.