Quick answer

If you have been scammed through an online shop, marketplace, Facebook, Instagram, TikTok, Messenger, or another social-media channel, act immediately:

Contact your bank, e-wallet, card issuer, or payment provider through its official fraud channel. Report the transaction as fraudulent and ask whether the transfer can be recalled, traced, or temporarily held.
Save all evidence before the seller deletes the account, listing, or conversation.
Report the seller and transaction through the platform’s dispute or buyer-protection system.
For a consumer transaction with an online business, use the DTI Consumer CARe System.
For suspected fraud or another cybercrime, report to the PNP Anti-Cybercrime Group, the NBI, or the Cybercrime Investigation and Coordinating Center.
If your financial institution does not resolve your complaint, escalate it through the Bangko Sentral ng Pilipinas Consumer Assistance Mechanism.

Reporting does not guarantee recovery. The chance of stopping or tracing the money generally decreases as funds are transferred, withdrawn, converted, or sent through additional accounts.

First, identify what happened

Not every failed online purchase is automatically a criminal scam.

A delayed delivery, defective item, wrong product, disputed warranty, or seller’s refusal to honor an agreed return may primarily be a consumer dispute. A seller who used a false identity, advertised goods that never existed, took payment while intending not to deliver, sent a deliberately worthless substitute, hijacked an account, or obtained financial credentials through deception may have committed fraud or another crime.

The distinction affects where you should report:

Use the seller’s and platform’s redress systems, followed by DTI, for refund, replacement, warranty, misleading-sales, and other consumer issues.
Notify your bank or e-wallet immediately when money or account access is involved.
Report to cybercrime law enforcement when the facts indicate deliberate deception, identity theft, account takeover, falsified proof, or organized fraudulent activity.

You may use more than one route. A platform dispute, bank complaint, DTI complaint, and criminal report serve different purposes and do not necessarily replace one another.

What to do immediately

1. Stop further loss

Do not send an “unlocking fee,” “refund fee,” “tax,” “verification payment,” or additional deposit. Scammers commonly demand a second payment after the victim asks for a refund.

If you disclosed a password, one-time password, PIN, card number, CVV, recovery code, or identity document:

Contact the affected financial institution using the number in its official app, website, or on the back of the card.
Ask it to secure or restrict the account and replace compromised credentials or cards.
Change the affected password and any reused passwords.
Enable multi-factor authentication.
Sign out unknown devices and review recent transactions.
Notify your mobile provider promptly if your SIM suddenly loses service or you suspect an unauthorized SIM replacement.

Do not communicate through a hotline or link supplied by the suspected scammer.

2. Alert the payment provider

Give the bank, e-wallet, card issuer, payment gateway, or remittance service:

The amount, date, and exact time of payment
Transaction or reference number
Recipient’s name, account number, mobile number, or wallet identifier
The reason you believe the transaction was fraudulent
Screenshots and any police or platform reference number already available

Ask for a complaint or case-reference number. If applicable, request a card dispute or chargeback, transfer recall, account trace, or temporary hold. The available remedy and deadline depend on the payment method, the provider’s rules, and whether the payment was authorized, unauthorized, or induced by deception.

The Anti-Financial Account Scamming Act allows BSP-supervised institutions to temporarily hold funds involved in qualifying disputed transactions, subject to BSP rules, for up to 30 calendar days unless a court extends the period. This is not an automatic freeze or refund in every case. The receiving institution must still determine whether the legal and regulatory conditions are met.

3. Preserve evidence before reporting the account

Save original files where possible, not just cropped screenshots. Keep:

The product listing, advertisement, profile, page, group, username, and account URL
The seller’s displayed name, phone numbers, email addresses, and claimed business address
Complete chats, emails, SMS messages, voice notes, and call logs
Order confirmation, invoice, receipt, tracking information, and delivery records
Payment confirmation, bank or wallet statement, transaction reference, and recipient details
Photos and an unedited unboxing video if the parcel was empty, counterfeit, damaged, or different from the listing
The seller’s promises, refund terms, and later excuses or demands
Platform dispute records and reference numbers
Dates and times, including when the listing or account disappeared
Copies of any identification or registration documents sent by the seller, clearly marked as unverified
Names and reports of other victims, if they independently agree to cooperate

Record the full web address and username because display names and profile photographs can be changed. Avoid editing original files. Keep a backup in a separate device or secure cloud location.

Under the Cybercrime Prevention Act of 2012, service providers ordinarily preserve traffic data and subscriber information for at least six months from the transaction. Content data is subject to a different preservation process. Prompt reporting matters because lawful disclosure of protected data normally requires official process, and some useful records may otherwise become unavailable.

Report through the selling platform

Use the platform’s in-app dispute, refund, buyer-protection, and “report account” features as soon as possible. Platform deadlines can be much shorter than legal limitation periods.

When filing:

Select the most accurate reason, such as non-delivery, counterfeit item, unauthorized transaction, or item not as described.
Upload relevant evidence.
Ask the platform to preserve the seller’s registration, account, listing, login, payment, and transaction records for lawful investigation.
Keep the ticket number and copies of every response.
Do not close or cancel the dispute merely because the seller promises an off-platform refund.

The Internet Transactions Act of 2023 requires covered e-marketplaces and digital platforms to provide a redress mechanism. It also imposes identification, transparency, and due-diligence duties that vary according to the platform’s role.

For covered internet transactions, the buyer generally must first use the platform’s, marketplace’s, or e-retailer’s internal redress mechanism before filing a complaint with a court or appropriate government agency. That mechanism is considered exhausted if the complaint remains unresolved seven calendar days after filing.

That seven-day rule should not be treated as a reason to delay urgent notification to a bank, preservation of evidence, securing a compromised account, or reporting an apparent crime to law enforcement.

File a consumer complaint with DTI

Use the DTI Consumer CARe System when the dispute involves a business selling goods or services online and you seek remedies such as refund, replacement, repair, or compliance with consumer law.

Include:

Your contact details
The seller’s or business’s known details
A clear, chronological account of what happened
The amount paid and payment method
The remedy requested
Proof that you used the seller’s or platform’s internal complaint process
Supporting receipts, messages, photos, and platform decisions

The Internet Transactions Act generally covers business-to-consumer and business-to-business internet transactions when a party is situated in the Philippines or the seller or platform avails itself of the Philippine market and has sufficient contacts here. It expressly excludes consumer-to-consumer transactions—such as a genuinely private, one-off sale between end-users—from its coverage. That exclusion does not legalize fraud or prevent a police or NBI complaint.

For defects, malfunction, loss not caused by the consumer, breach of warranty, or nonconformity with the contract, covered online consumers may pursue repair, replacement, refund, or other remedies available under the Internet Transactions Act, the Consumer Act, and other applicable laws. A refund is not automatically available simply because the buyer changed their mind.

A claim for damages under Section 28 of the Internet Transactions Act must be filed before the DTI or a court within two years from the time the cause of action arose. Do not confuse that period with a platform’s shorter dispute deadline or with the potentially different periods governing other civil or criminal actions.

Report suspected cybercrime

The Cybercrime Prevention Act designates the PNP and NBI as law-enforcement authorities for cybercrime cases. You may approach:

The PNP Anti-Cybercrime Group or an appropriate PNP cybercrime office
The National Bureau of Investigation, including its cybercrime investigators
The Cybercrime Investigation and Coordinating Center through its official reporting channels, including hotline 1326

Ask what form of complaint, affidavit, identification, and document certification the receiving office requires. Bring originals when attending in person, but submit copies unless an authorized officer lawfully receives an original and provides an acknowledgment.

An ordinary online selling scam may involve estafa under the Revised Penal Code, a cybercrime-qualified offense under Section 6 of the Cybercrime Prevention Act, computer-related fraud, computer-related identity theft, or an offense under another law. The correct charge depends on how the scheme operated and what the evidence proves; the victim does not need to select the final criminal charge before asking investigators for assistance.

A blotter entry or initial incident report may document the event, but investigators or prosecutors may still require a formal complaint-affidavit and supporting evidence before a criminal case can proceed.

If a bank or e-wallet complaint remains unresolved

First complain directly to the financial institution and retain its reference number and written response. If the issue remains unresolved, escalate it to the BSP Online Buddy and Consumer Assistance Mechanism.

The BSP also accepts its prescribed Complaints, Inquiries and Requests form through consumeraffairs@bsp.gov.ph. Include your complaint to the institution, its response if any, the result you are requesting, your daytime contact details, and supporting records.

BSP escalation is for concerns involving BSP-supervised financial institutions. It is not a substitute for a criminal complaint against the scammer and does not guarantee reimbursement.

Under the Anti-Financial Account Scamming Act, an institution may be liable for restitution when the statutory conditions are met, including failure to employ adequate risk-management controls or exercise the legally required degree of diligence. Conversely, the law also provides protection from liability for institutions determined by the BSP to have compliant controls in covered circumstances. Whether reimbursement is due is therefore fact- and evidence-dependent.

What not to do

Avoid these common mistakes:

Waiting for repeated promises while platform or card-dispute periods expire
Deleting the conversation after blocking the seller
Reporting only the display name without saving the profile URL and payment account
Posting unredacted IDs, bank statements, account numbers, or private conversations publicly
Threatening, hacking, impersonating, or trying to entrap the suspected scammer
Paying a person who claims they can recover the money for an advance fee
Sending an OTP, PIN, password, or remote-access code to someone claiming to investigate
Filing knowingly false or exaggerated information to force a fund hold
Assuming a DTI business-name registration proves that the person using the name is legitimate
Assuming that reporting automatically freezes the recipient’s account

State facts accurately. The Anti-Financial Account Scamming Act penalizes malicious or bad-faith reporting that causes a completely unwarranted temporary hold.

When help is urgent

Contact the financial institution and law enforcement without delay when:

The transfer was made only minutes or hours ago
Your account, email, social-media profile, or SIM has been taken over
Unauthorized transactions are continuing
The scammer has your password, OTP, card security code, recovery key, or identity documents
The transaction involves a large amount or several victims
A child, senior citizen, or otherwise vulnerable person is being targeted
The scammer is threatening violence, blackmail, publication of intimate material, or identity misuse
The funds were sent abroad, converted to virtual assets, or moved through multiple accounts
You received a supposed court, police, bank, or government demand for immediate payment

For substantial loss, complex evidence, or an identified suspect, consult a Philippine lawyer promptly. The Public Attorney’s Office may be able to assist qualified indigent persons, subject to its requirements and applicable conflict rules.

Frequently asked questions

Can I report a scam if I sent the money voluntarily?

Yes. A transfer may have been authorized in the technical sense but induced by fraudulent representations. Tell the bank and investigators exactly what you approved, what the seller represented, and why those representations were false. Do not describe the transaction as “unauthorized” if you personally confirmed it.

Should I report to DTI or the police?

Use DTI for covered consumer remedies and the PNP or NBI for suspected crime. If both aspects are present, you may pursue both routes. Notify the payment provider separately.

Can I report a Facebook or social-media seller with no registered business?

Yes. Report the account to the platform and the suspected crime to the PNP, NBI, or CICC. DTI can receive internet-transaction complaints under its no-wrong-door and referral functions, but its consumer jurisdiction and available remedies depend on whether the transaction is a covered business transaction.

Can the platform be required to reveal the seller’s identity to me?

Not automatically. Covered platforms must maintain specified merchant information, but disclosure of protected subscriber or transaction information may require a subpoena, warrant, or other lawful process. Give investigators the exact account URL and ask that relevant records be preserved.

Will the recipient’s account be frozen as soon as I report?

Not necessarily. AFASA permits temporary holding and coordinated verification of qualifying disputed transactions under BSP rules, but the institution must have a legal and factual basis. A prompt, detailed report improves the possibility of action but does not guarantee a hold or recovery.

Can I get a refund for an empty parcel or item different from the listing?

Potentially. Preserve the parcel, label, packaging, photographs, and any unedited unboxing video. File within the platform’s deadline and request the appropriate remedy. Your rights depend on the evidence, contractual terms, and applicable consumer laws.

Is a screenshot enough?

It can help, but a complete evidence package is stronger. Preserve the full conversation, URLs, account identifiers, transaction records, original media, device records, and complaint-reference numbers. Investigators may require an affidavit and authenticated or lawfully obtained records.

Should I warn other people online?

You may share truthful, supportable information, but protect personal and financial data and avoid declaring someone guilty before lawful determination. A report to the platform and authorities is safer than publishing sensitive evidence or making unsupported accusations.

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Procedures and available remedies depend on the transaction, payment channel, evidence, platform terms, and agencies involved. Official legal and agency sources were checked as of 11 September 2026.