Quick answer

If you have been scammed through an online shop, marketplace, Facebook, Instagram, TikTok, Messenger, or another social-media account in the Philippines, act immediately:

Contact your bank, card issuer, e-wallet, or payment provider through its official fraud channel. Ask it to flag the transaction, secure your account, and determine whether a hold, reversal, recall, or chargeback is possible.
Report the seller, listing, conversation, and transaction through the platform’s internal complaint or dispute system.
Preserve all evidence before the account, messages, or listing disappears.
If this was a business-to-consumer sale, file a consumer complaint with the Department of Trade and Industry through the DTI Consumer Care system.
Report suspected fraud to the Philippine National Police Anti-Cybercrime Group, the National Bureau of Investigation, or your nearest police station.

These reports serve different purposes. A platform dispute may lead to a refund or account restriction. A DTI complaint may address consumer remedies and regulatory violations. A police or NBI complaint begins the law-enforcement process. Filing with one does not necessarily replace filing with the others.

A report does not guarantee recovery. Speed matters because transferred funds can be moved or withdrawn quickly, while accounts, posts, and electronic records may later become difficult to trace.

What to do immediately

Contact the payment provider first

Use only the number, website, app, or email shown on the provider’s official website or on the back of your card. Do not call a number supplied by the suspected scammer or posted in an unverified comment.

Tell the provider:

The transaction date, time, amount, and reference number
The receiving account, mobile number, merchant, or wallet details
Why you believe the transaction was fraudulent
Whether you authorized the payment, were deceived into making it, or lost control of your account
Whether you disclosed an OTP, password, PIN, card security code, recovery code, or identity document

Ask for a case or reference number and written confirmation of your report. If the payment went from one provider to another, ask your provider to coordinate with the receiving institution.

Under the Anti-Financial Account Scamming Act or Republic Act No. 12010, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction under the conditions prescribed by the BSP. The statutory maximum is 30 calendar days unless a competent court extends the period. The law also provides for coordinated verification among the institutions and account owners involved.

This does not mean that every victim automatically receives a 30-day freeze or refund. The institution must assess the report under the law and BSP rules, and recovery may depend on whether the funds remain traceable or available.

For card payments, ask whether a dispute or chargeback is available. Deadlines and grounds vary by issuer, card network, and transaction type, so do not wait for the seller or platform to finish investigating before notifying the issuer.

Secure compromised accounts

If the scammer obtained financial or identifying information:

Change the affected account’s password using a trusted device.
Change any other account that used the same or a similar password.
Sign out unknown devices and revoke unfamiliar sessions.
Enable multi-factor authentication.
Block or replace compromised cards, SIMs, or account credentials.
Tell your mobile provider immediately if your SIM stopped working unexpectedly or may have been taken over.
Review recent transactions and saved beneficiaries.
Monitor email, financial accounts, and mobile numbers for password-reset attempts.
Never give an OTP or remote access to someone claiming that it is needed to process a refund.

Do not pay a “recovery agent,” “law-enforcement fixer,” or person claiming that another transfer is required to release or return the money. Recovery scams commonly target people who have already lost funds.

Preserve evidence before reporting the account

Save the evidence in its original form where possible. Do not rely only on links, because posts and accounts can be edited, renamed, restricted, or deleted.

Keep:

Screenshots and screen recordings showing the complete conversation
The seller’s profile name, username, profile URL, page URL, and account ID if visible
The original listing, advertisement, livestream, product description, price, and claimed terms
Order confirmation, invoice, receipt, tracking information, and delivery records
Proof of payment and the complete transaction reference number
The recipient’s account name, account number, e-wallet number, QR code, and financial institution
Telephone numbers, email addresses, websites, and delivery addresses used
Photos or an unedited unboxing video if the item was counterfeit, empty, damaged, or materially different
Messages in which the seller promised delivery, admitted receipt of payment, refused a refund, or demanded additional money
Platform dispute records, automated acknowledgments, and case numbers
A short chronology stating what happened and when

Export chats if the platform permits it. Keep original files and backups; avoid cropping away timestamps, usernames, URLs, or transaction details. Do not alter messages or create a reenactment and present it as the original exchange.

Share sensitive evidence only with the platform, financial institution, lawyer, or proper authority. Publicly posting another person’s identity document, account details, or private information can create separate privacy or legal problems.

Report the seller or account to the platform

Use the marketplace or social-media platform’s official report, return, refund, or buyer-protection process. Report both the specific listing and the seller’s account.

State the remedy you want—such as cancellation, refund, replacement, or release of money held in escrow—and attach the strongest evidence. If the transaction stayed within the platform, do not mark an undelivered order as received and do not close the dispute merely because the seller promises an off-platform refund.

For business-to-consumer internet transactions covered by the Internet Transactions Act of 2023 or Republic Act No. 11967, an aggrieved party generally must first use the platform’s, e-marketplace’s, or e-retailer’s internal redress mechanism before filing with a court, government agency, or alternative-dispute-resolution body. The internal mechanism is deemed exhausted if the complaint remains unresolved seven calendar days after filing.

Keep proof of the date you filed. If the platform closes the complaint early or gives an inadequate response, preserve that response as well.

The seven-day rule does not require you to postpone urgent fraud reporting to your bank or law enforcement. It concerns the statutory internal-redress step for covered internet-transaction complaints.

File the appropriate government complaint

DTI: consumer remedies and online-business violations

File with the DTI when the transaction involved an online merchant or business selling goods or services to a consumer. Submit the complaint through the DTI Consumer Care system and include:

Your name and contact information
The merchant’s known name and contact details
A clear chronology
The amount paid
The remedy requested
Proof of payment
The advertisement, order, receipt, and communications
Proof that you used the platform’s or seller’s internal redress process, where applicable

The Internet Transactions Act covers business-to-consumer and business-to-business internet transactions with the required Philippine connection. It does not cover a genuine consumer-to-consumer transaction—for example, a one-off sale by another private individual who is not acting in the ordinary course of business. A C2C scam may still result in criminal or civil liability, but the remedies under that Act may not apply.

Covered online consumers may pursue repair, replacement, refund, or other remedies when goods are defective, lost without the consumer’s fault, inconsistent with the contract, or not covered as promised by the warranty. The online merchant or e-retailer is primarily liable in civil actions and administrative complaints. Platform liability is not automatic; it depends on the statutory circumstances, including failures to exercise ordinary diligence or respond properly after notice.

The Act allows a consumer to claim damages in court or before the DTI within two years from the time the cause of action arose. Other claims and offenses may have different prescriptive periods. Do not treat the two-year period as permission to delay reporting.

PNP or NBI: suspected criminal fraud

Report a suspected crime to:

The PNP Anti-Cybercrime Group
The National Bureau of Investigation, particularly its cybercrime personnel
Your nearest police station, which can receive the complaint and coordinate with the appropriate cybercrime unit

Bring valid identification and copies of your evidence. Investigators may ask for a written narrative, sworn complaint-affidavit, transaction records, and electronic evidence. Ask for the official report, blotter, or complaint reference number and the investigator’s contact details.

The proper charge depends on the evidence. An online selling scheme may involve estafa under Article 315 of the Revised Penal Code, an offense under the Cybercrime Prevention Act of 2012, the Anti-Financial Account Scamming Act, or another law. Not every failed delivery or broken promise is automatically criminal fraud: investigators and prosecutors must determine whether deceit, fraudulent intent, damage, and the elements of a particular offense can be proved.

The Cybercrime Prevention Act designates the NBI and PNP as law-enforcement authorities for cybercrime. It also provides mechanisms for preserving and obtaining computer data through the proper legal process. This is another reason to report promptly rather than waiting for an account to disappear.

BSP: unresolved complaints involving a regulated financial institution

If your complaint concerns how a BSP-supervised bank, e-wallet, or other financial institution handled the transaction, first use that institution’s Financial Consumer Protection Assistance Mechanism.

If the matter remains unresolved, escalate it through the BSP’s Consumer Assistance Mechanism. The BSP permits complaints through its BOB chatbot or by submitting the prescribed Complaint, Inquiry and Reply form with proof that you first contacted the institution. Current instructions are available on the BSP consumer-assistance page.

BSP escalation is a complaint about a supervised institution’s conduct or response. It is not a substitute for immediately reporting the transaction to the institution or for filing a criminal complaint against the scammer.

What the law generally protects

The Internet Transactions Act requires covered online merchants to provide accurate identifying and contact information, issue paper or electronic invoices or receipts, describe goods and services properly, and maintain an accessible complaint mechanism. E-marketplaces and other covered platforms also have disclosure, recordkeeping, consumer-redress, and ordinary-diligence duties.

For qualifying problems, an online consumer may seek repair, replacement, refund, or another remedy available under the Consumer Act of the Philippines and other applicable laws.

The Anti-Financial Account Scamming Act separately addresses conduct such as:

Using, lending, selling, buying, or recruiting financial accounts for money-muling activities under the statutory conditions
Obtaining sensitive financial-account information through deceptive social-engineering schemes
Opening accounts using fictitious names or another person’s identity documents
Aiding, abetting, or attempting specified offenses

A recipient account is not conclusive proof that its registered owner personally devised the scam. The account may have been compromised, opened using stolen information, or used as a money-mule account. Give the evidence to investigators and avoid publicly declaring a person guilty before the facts are established.

Refunds, civil recovery, and small claims

A consumer or criminal report does not itself create an automatic refund. Possible routes include:

A voluntary refund from the seller
A platform refund or buyer-protection decision
A bank transfer recall, card dispute, or chargeback
Restitution or other relief under applicable financial-consumer laws
DTI-mediated or adjudicated consumer relief
A civil action for the amount lost and provable damages
Restitution ordered in a criminal case, where legally available

A small-claims action may be considered for a qualifying money claim within the current jurisdictional limit of the first-level courts. However, it is useful only if the defendant can be identified, served, and held legally liable. Review the current Supreme Court small-claims forms and guidance before filing. Barangay conciliation may first be required in some disputes between individuals who actually reside in the same city or municipality, subject to statutory exceptions.

Consult a lawyer before choosing a civil remedy when the seller’s identity is uncertain, several parties may be responsible, the loss is substantial, or the transaction involves a foreign merchant.

Common mistakes that weaken a complaint

Waiting for repeated promises while refund, platform, or chargeback windows expire
Deleting the conversation after blocking the scammer
Saving only cropped screenshots with no username, URL, date, or time
Sending more money for “verification,” “insurance,” “tax,” or “account unlocking”
Continuing to use a compromised password or financial account
Closing a platform dispute before the refund has actually cleared
Communicating only by voice call and keeping no written record
Filing a vague complaint without a chronology, requested remedy, or proof of payment
Assuming a DTI complaint automatically opens a criminal case
Publicly posting unverified accusations or another person’s private information
Paying unofficial investigators or recovery agents

When help is urgent

Contact the payment provider and law enforcement immediately if:

The transfer was made recently and the funds may still be in the receiving account
The scammer has access to your bank, e-wallet, email, social-media account, or SIM
Unauthorized transactions are continuing
You installed a remote-access application or malicious file
The scammer has your OTP, password, card security code, recovery phrase, or identity documents
You are being blackmailed, threatened, stalked, or pressured to meet in person
A child’s account, identity, image, or safety is involved
Several victims, large losses, organized money-mule accounts, or cross-border transfers appear to be involved

For an immediate threat to life or physical safety, contact emergency services or the nearest police station.

Frequently asked questions

Can I report a scam even if I sent the money voluntarily?

Yes. Explain exactly how you were deceived. A payment you technically authorized may still have resulted from fraudulent representations. Whether it qualifies for reversal, restitution, or a criminal charge depends on the facts and the applicable rules.

Should I report to DTI or the police?

Often both. Use DTI for a covered consumer dispute or violation by an online business. Use the PNP or NBI for suspected fraud or another crime. For a genuine private C2C sale, criminal and civil remedies may remain available even though the Internet Transactions Act excludes C2C transactions.

Can the bank or e-wallet freeze the recipient’s money?

A BSP-supervised institution may temporarily hold funds from a disputed transaction when the legal and regulatory conditions are met. The statutory period may not exceed 30 calendar days unless extended by a competent court. Report immediately, but do not assume a hold will be imposed or that the money remains available.

Do I need to know the scammer’s real name?

No. Report all identifiers you have, including usernames, URLs, phone numbers, recipient-account details, transaction references, email addresses, and delivery information. Identifying the person behind an account may require lawful requests, subpoenas, warrants, and coordination among platforms, financial institutions, and investigators.

What if the social-media account has already disappeared?

Report anyway. Preserve any screenshots, browser history, notifications, payment records, profile links, cached messages, and emails you still have. Financial institutions and service providers may hold relevant records, but access to those records generally requires the proper legal process.

Is a non-delivery always estafa?

No. A delayed or failed delivery may be a consumer or contractual dispute. Criminal fraud generally requires proof of the elements of the charged offense, including deceit or fraudulent conduct—not merely a later inability to perform. Submit the complete facts and avoid exaggeration.

Can I recover legal fees or other losses?

Possibly, but damages and expenses must have a legal basis and adequate proof. The available recovery depends on the claim, the parties responsible, causation, and the forum’s authority. Keep receipts for replacement costs, bank charges, delivery expenses, and other losses directly connected to the incident.

Official references

This article provides general legal information, not legal advice for a particular case. Rights, procedures, platform rules, and available remedies depend on the facts and supporting documents. Official sources and reporting information were checked on 12 September 2026.