Quick answer

If you believe an online seller or social-media account scammed you, act immediately:

Contact your bank, card issuer, e-wallet, or payment provider through its official app, hotline, or website. Report the transaction as fraudulent, request a hold, recall, chargeback, or account restriction if available, and obtain a reference number. Recovery is not guaranteed, but delay can make it harder.
Preserve the evidence before blocking the account. Save the listing, seller profile, messages, payment record, account numbers, delivery details, and platform complaint history.
Report the seller and transaction to the platform. Request cancellation, refund, preservation of account records, and removal of the listing.
For a business-to-consumer transaction, use the platform or seller’s internal complaint process first. Under the Internet Transactions Act, that process is considered exhausted if the complaint remains unresolved after seven calendar days.
File a consumer complaint with the Department of Trade and Industry (DTI) through the DTI Consumer CARe System.
Report suspected fraud to law enforcement. The Philippine National Police and National Bureau of Investigation are the principal cybercrime law-enforcement authorities. You may start with the PNP Anti-Cybercrime Group e-Complaint portal or approach the nearest PNP cybercrime office or NBI office.
For urgent cybercrime assistance, contact the Cybercrime Investigation and Coordinating Center (CICC) through its current official channels. Hotline 1326 has been used for scam reports, but service availability can change; confirm the active channel on the CICC website.
If someone is in immediate physical danger, being threatened, or being coerced to send more money, call 911.

A platform report, DTI complaint, payment dispute, and criminal complaint serve different purposes. You may need more than one.

First, determine what happened

Not every unsuccessful online purchase is automatically a crime. The proper route depends on the facts.

Possible consumer dispute

It may primarily be a consumer dispute if a genuine seller delivered the wrong, damaged, defective, incomplete, or substantially misdescribed item, or failed to honor a warranty or refund obligation.

An online consumer may pursue repair, replacement, refund, or another remedy allowed by law when goods are defective, malfunctioning, lost without the consumer’s fault, or fail to conform to the warranty or contract. The seller is generally entitled to the return of the original goods without cost to the consumer when replacement or refund is chosen.

Possible scam or criminal fraud

Indicators of possible fraud include:

the account was created or impersonated solely to obtain payment;
the seller used a false identity, address, receipt, tracking number, or proof of shipment;
the seller disappeared or blocked you immediately after payment;
the same item was supposedly sold to several victims;
you were induced to transfer money through deliberate false representations;
the seller requested repeated “release,” “insurance,” “customs,” “verification,” or “refund processing” payments;
your account or payment credentials were taken or used without authority; or
the seller never intended to supply the promised item or service.

Depending on the evidence, fraudulent conduct may fall under estafa, computer-related fraud, computer-related identity theft, or another offense. The precise charge is determined by investigators and prosecutors—not by the label placed in a platform report.

The Cybercrime Prevention Act of 2012 also covers crimes under the Revised Penal Code or special laws when committed through information and communications technology. It expressly assigns cybercrime enforcement responsibilities to the PNP and NBI.

What to do in the first hour

1. Contact the payment provider

Use only contact details inside the provider’s official app, on the back of your card, or on its verified website. Do not call a number supplied by the suspected scammer or found in an unverified social-media comment.

Give the provider:

the amount, date, and exact time of the transaction;
transaction or reference number;
recipient’s account name, number, mobile number, or wallet identifier;
a short explanation of how the payment was induced or made without authority;
whether you disclosed an OTP, PIN, password, card number, or identity document; and
the police, CICC, or platform report number, if already available.

Ask specifically whether the provider can:

place a temporary hold or restriction on the recipient account;
initiate a fund-recall request;
open a fraud investigation;
block or replace your card;
secure your account and terminate active sessions; or
begin the applicable chargeback or dispute process.

A transfer that you personally authorized after being deceived may be treated differently from an unauthorized account takeover. Report the facts accurately. Do not claim that a payment was “unauthorized” if you made it yourself.

If the provider does not resolve the complaint, escalate it to the Bangko Sentral ng Pilipinas consumer-assistance channels. BSP generally expects the consumer to complain to the BSP-supervised financial institution first and to retain its response or complaint reference number.

2. Secure compromised accounts

If you disclosed credentials or opened a suspicious link:

change the affected password from a clean device;
change any other account using the same password;
enable multi-factor authentication;
sign out other devices and sessions;
contact your mobile provider if your SIM may have been taken over;
remove unfamiliar recovery addresses, devices, or payment methods;
scan the device for malicious applications; and
warn trusted contacts if the scammer may impersonate you.

Never give an OTP, PIN, password, recovery code, or screen-sharing access to a supposed investigator, bank employee, refund agent, or platform representative.

3. Preserve evidence before content disappears

Do not rely on screenshots alone when original records can also be downloaded.

Preserve:

the full URL of the listing and seller profile;
usernames, display names, page names, user IDs, and profile links;
the original advertisement, product description, price, and photographs;
complete chat threads showing dates and times;
emails with full headers when available;
order confirmation, invoice, receipt, and delivery record;
transaction receipts and account statements;
recipient account names, account numbers, wallet numbers, QR codes, and mobile numbers;
tracking numbers, waybills, parcel labels, and unboxing video;
recordings of calls you lawfully possess;
the seller’s claimed name, address, business registration, and identification;
notices that messages were deleted, the account was renamed, or you were blocked;
reports from other victims that you personally received; and
every complaint number and response from the seller, platform, bank, DTI, CICC, PNP, or NBI.

Keep the original files. Avoid cropping screenshots in a way that removes usernames, URLs, dates, or surrounding context. Make a backup and prepare a chronological list of events.

Philippine rules recognize electronic evidence, but its authenticity and integrity may still have to be established. Investigators can also seek lawful preservation and disclosure orders. Under Section 13 of the Cybercrime Prevention Act, service providers must ordinarily preserve traffic data and subscriber information for at least six months from the transaction; content data is preserved for six months from receipt of a law-enforcement preservation order. This is another reason to report promptly.

Report the transaction to the platform

Use the marketplace or social-media platform’s official reporting and dispute tools. Report both the transaction and the account.

Your report should state:

what was promised;
what you paid and how;
what was delivered, if anything;
the false statement or suspicious conduct;
when you contacted the seller;
the remedy you want; and
why the platform should preserve the seller’s records.

Ask for a written acknowledgment and reference number. If an order was made through a marketplace, keep all communication inside the platform when possible. Moving the transaction to private messaging or direct payment may reduce the platform protections available under its terms.

For covered business-to-consumer transactions, the Internet Transactions Act of 2023 requires e-marketplaces and covered digital platforms to provide an effective and responsive mechanism for reporting users or unlawful information. It also requires covered sellers and platforms to maintain specified seller information and, when legally compelled in a qualifying investigation, provide information that may help identify an unknown perpetrator.

The seven-day internal-redress rule

Section 24 of the Internet Transactions Act generally requires an aggrieved party to use the digital platform, e-marketplace, or e-retailer’s internal redress mechanism before filing a complaint with a court, government agency, or alternative-dispute-resolution body. The mechanism is deemed exhausted if the complaint remains unresolved after seven calendar days from filing.

Do not interpret this rule as a reason to delay:

notifying your bank or e-wallet;
securing compromised accounts;
preserving evidence;
reporting an ongoing crime or immediate danger; or
requesting urgent law-enforcement assistance.

Record the exact date and time you filed the internal complaint.

File a DTI consumer complaint

For a covered online purchase from a business or merchant, file through the DTI Consumer CARe System. Attach readable copies of your evidence and identify the exact relief requested, such as refund, replacement, repair, delivery, or compliance with a warranty.

A useful complaint narrative follows this order:

On a stated date, you saw a particular listing or offer.
The seller represented specific facts about the product or service.
You ordered and paid a stated amount through a specified channel.
The seller failed to deliver, delivered something materially different, or refused the proper remedy.
You complained through the seller or platform’s internal process on a stated date.
The complaint was rejected or remained unresolved for seven calendar days.
You now request a specific remedy and attach identified documents.

When the Internet Transactions Act applies

The Act generally covers business-to-business and business-to-consumer internet transactions when a party is situated in the Philippines or the seller or platform targets the Philippine market and has sufficient contacts here.

It does not cover a genuine consumer-to-consumer transaction—that is, a private sale between end-users not made in the ordinary course of business. However, exclusion from this particular statute does not legalize fraud or eliminate remedies under the Revised Penal Code, Civil Code, cybercrime laws, platform rules, or other applicable laws.

The online merchant or e-retailer is primarily liable in civil actions or administrative complaints arising from the transaction. Platform liability is not automatic. Under Sections 26 and 27, an e-marketplace or digital platform may incur subsidiary or solidary liability only in the circumstances specified by law, including certain failures to exercise ordinary diligence, provide required seller information, or act after notice concerning prohibited or dangerous goods.

A consumer claiming damages under Section 28 of the Internet Transactions Act must file before the court or DTI within two years from the time the cause of action arose. Other claims or offenses may have different prescriptive periods, so do not wait for that two-year period to approach.

Make a cybercrime or police report

Report suspected criminal fraud to the PNP Anti-Cybercrime Group, the nearest PNP cybercrime unit, or the NBI. You may also contact the CICC for assistance and inter-agency referral.

Prepare:

a valid identification document;
a concise incident chronology;
the total loss;
copies of the preserved evidence;
the suspect’s known identifiers;
financial transaction details;
platform and payment-provider reference numbers; and
a list of possible witnesses or other victims known personally to you.

Ask what is required for a formal complaint-affidavit. A report or online tip may help authorities assess the incident, but prosecution ordinarily requires admissible evidence and the complainant’s participation. Be prepared to sign a sworn statement, identify the records, answer follow-up questions, and provide the original device or files when lawfully requested.

Do not pay anyone who claims they can “activate” a police report, guarantee recovery, or obtain a court order privately. Verify investigators through the agency’s official directory.

What each reporting channel can—and cannot—do

Channel	Main purpose	Important limitation
Bank, card issuer, or e-wallet	Attempt to restrict accounts, investigate the payment, recall funds, or process an available dispute	A report does not guarantee reversal or recovery
Marketplace or social-media platform	Resolve an order dispute, preserve records, restrict an account, or remove content	Platform action is not a criminal conviction
DTI	Consumer redress, mediation or adjudicative processes, compliance action, and referral	DTI is not a substitute for a criminal investigation
BSP	Assists with unresolved complaints against BSP-supervised financial institutions	Complain to the institution first and keep its reference number
CICC	Cybercrime assistance, coordination, and referral	A report may still need to be formalized with an investigating agency
PNP or NBI	Criminal investigation and evidence gathering	Filing does not guarantee prosecution or recovery
Prosecutor or court	Determines criminal or civil liability through the applicable process	Formal requirements, evidence, jurisdiction, and deadlines apply

If you want your money back

Use every applicable lawful route, but avoid double recovery.

Possible options include:

the platform’s refund or buyer-protection process;
a card chargeback or payment dispute;
DTI consumer redress;
a civil claim for refund or damages; and
restitution or civil liability connected with a criminal case, when legally available.

A small-claims case may be an option for a qualifying money claim within the current jurisdictional ceiling and procedural rules. Before filing, review the latest forms and guidance on the Supreme Court small-claims page or ask the proper first-level court, because the correct defendant, address, amount, venue, and supporting documents matter. Identifying only a username may be insufficient to sue the responsible person.

Common mistakes to avoid

Waiting for the seller’s next excuse. Report the payment promptly while intervention may still be possible.
Deleting or unsending messages. Preserve the full exchange first.
Posting all evidence publicly. Public accusations can expose personal data, alert the suspect, invite fake recovery agents, and create separate legal risks.
Editing screenshots. Keep originals and full context.
Sending more money to unlock a refund. Genuine refunds do not ordinarily require payment to an unrelated personal account.
Using unofficial recovery services. “Hackers,” “agents,” or commenters promising guaranteed recovery are often follow-up scammers.
Falsely describing an authorized transfer as unauthorized. State exactly how the scam worked.
Filing only with the platform. A platform complaint may not reach the payment provider, DTI, or law enforcement.
Assuming a police report automatically freezes funds. Ask the payment provider and investigators what lawful action is actually being taken.
Naming an innocent account holder as the mastermind without evidence. Recipient accounts may be stolen, rented, or used as mule accounts.
Sending your evidence only as disappearing messages. Keep local and backed-up copies.
Missing the seven-day internal-redress record or the two-year damages period under the Internet Transactions Act.

When legal help is urgent

Consult a Philippine lawyer promptly if:

the loss is substantial or involves business funds;
several transfers, accounts, jurisdictions, or victims are involved;
the suspect is abroad or the platform refuses to provide information;
you received a subpoena, demand letter, counter-complaint, or threat;
your identity documents, intimate material, or confidential business information were taken;
the incident involves account takeover, extortion, threats, stalking, or danger to a child;
you are considering a civil case, criminal complaint-affidavit, or application requiring sworn evidence;
the seller claims you breached a contract or committed fraud; or
a filing deadline may be near.

If you cannot afford private counsel, ask the Public Attorney’s Office whether you meet its eligibility and merit requirements. PAO assistance is not automatic.

Frequently asked questions

Should I report even if the amount is small?

Yes. The amount may affect the available procedure or penalty, but a small loss can still be evidence of a repeated scheme. Preserve the records and report through the appropriate channels.

Can I report a Facebook, Instagram, TikTok, or messaging-app seller to DTI?

Potentially, yes, if the person was acting as an online merchant or business and the transaction falls within DTI’s jurisdiction. A genuine one-off private consumer-to-consumer sale is excluded from the Internet Transactions Act, although fraud and other laws may still apply.

Must I wait seven days before contacting the police?

No. The seven-calendar-day rule concerns exhaustion of the covered seller or platform’s internal redress mechanism. It should not prevent prompt reporting of suspected crime, ongoing harm, compromised accounts, or endangered funds.

Can the bank automatically return the money?

No. The result depends on the payment method, timing, available balance, provider rules, evidence, and whether the transaction was authorized. Report immediately and request the specific remedies available.

Is a screenshot enough?

It may help, but stronger evidence includes the original electronic files, complete conversation, URLs, transaction records, statements, receipts, device records, and testimony explaining how the records were created and preserved.

What if the seller deleted or renamed the account?

Save the old profile link, user ID if visible, prior usernames, messages, payment identifiers, emails, phone numbers, and platform notifications. Give these to the platform and investigators. A competent authority may seek subscriber or transaction information through lawful process.

Can I publicly post the scammer’s name and identification?

Exercise caution. Verify the identity first, redact unrelated personal data, and avoid unsupported accusations. Public posting is not a substitute for filing with the proper institution and may create privacy, defamation, or safety issues.

Where should I report an unauthorized bank or e-wallet transaction?

Report first to the provider’s official fraud or consumer-assistance channel. If unresolved, escalate through the BSP consumer-assistance system. Also report suspected criminal activity to the PNP, NBI, or CICC.

Does filing guarantee that the scammer will be arrested or that my money will be recovered?

No. Arrest, prosecution, liability, account restriction, and recovery each require their own legal and factual basis. Prompt reporting and complete evidence improve the authorities’ ability to trace the transaction but cannot guarantee an outcome.

Official references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Rights, jurisdiction, evidence requirements, and remedies depend on the transaction and available documents. Official sources and reporting channels were checked on September 11, 2026.