Quick answer

If you paid an online seller or social-media account and believe you were scammed, act immediately:

Contact your bank, card issuer, e-wallet, or payment provider through its official fraud channel. Ask it to flag the transaction, attempt recovery, preserve records, and restrict your account if credentials were exposed.
Report the seller, listing, and conversation through the shopping platform or social-media app. Save everything before the content disappears.
Report the incident to the government’s National Anti-Scam Hotline by calling 1326.
File a criminal complaint or request for investigation with the NBI Cybercrime Division, the PNP Anti-Cybercrime Group, or the nearest police station.
If the seller was acting as a business, pursue your consumer remedy through the seller or platform first, then file with the Department of Trade and Industry (DTI) if the matter remains unresolved.

These routes serve different purposes. A platform report may remove an account; a bank report may help stop or trace funds; a DTI complaint may seek a refund or other consumer remedy; and a complaint to law enforcement may lead to a criminal investigation. Filing through one channel does not necessarily replace the others.

Do these things immediately

Contact the payment provider first

Use only the customer-service or fraud details shown in the provider’s official app, website, card, or account statement. Do not call a number supplied by the suspected scammer or by an unsolicited message.

Tell the provider:

The transaction was induced by suspected fraud.
The exact amount, date, time, reference number, and recipient account are available.
Whether you personally authorized the transfer or whether someone accessed your account.
Whether you disclosed a password, PIN, one-time password, card verification code, recovery code, or identity document.
Whether there are other unfamiliar transactions.
That you want an incident or dispute reference number.

Ask whether the provider can:

Temporarily secure your account or payment instrument;
Flag the recipient account and coordinate with the receiving institution;
Attempt a transfer recall, card dispute, or chargeback;
Preserve account, device, login, and transaction records; and
Explain its documentary requirements and applicable deadline.

Recovery is not automatic. A completed transfer may already have been withdrawn or moved, and chargeback rights depend on the payment method, the transaction facts, and the provider’s rules. Still, reporting within minutes or hours can matter.

Under the Anti-Financial Account Scamming Act, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction and must conduct coordinated verification in the circumstances provided by law and BSP rules. The Act does not guarantee that every reported payment will be frozen or returned. See Republic Act No. 12010.

If you are dissatisfied with the institution’s handling of your complaint, you may escalate it to the Bangko Sentral ng Pilipinas—but first report it to the institution’s own Financial Consumer Protection Assistance Mechanism or customer-service channel. The current BSP routes include the BSP Online Buddy (BOB) and, when BOB is unavailable, the prescribed form sent to consumeraffairs@bsp.gov.ph. Follow the BSP complaint instructions.

Secure compromised accounts

If the scammer obtained credentials or controlled your device:

Change the affected password using a clean, trusted device.
Change any reused passwords on other accounts.
Sign out other sessions and enable multi-factor authentication.
Contact your mobile network if your SIM stopped working or you suspect a SIM-swap.
Lock or replace affected cards.
Check whether the scammer changed recovery emails, phone numbers, or device permissions.
Remove unfamiliar remote-access, screen-sharing, or sideloaded apps.
Do not delete the scam messages or reset the device until important evidence has been preserved.

If the scammer is still communicating, do not send another payment for a supposed refund, tax, clearance fee, verification deposit, account release, or police processing fee.

Preserve evidence before reporting the account

Save evidence before blocking the seller or asking the platform to remove the listing. Accounts, posts, usernames, and messages can be changed or deleted.

Preserve:

Screenshots and, where useful, a screen recording showing the entire conversation;
The seller’s profile name, username, profile URL, user ID if visible, phone number, email address, and claimed address;
The original listing, advertisement, livestream, product photos, price, promises, return terms, and delivery commitment;
Order confirmation, invoice, receipt, tracking number, and platform case number;
Bank, card, e-wallet, remittance, or cryptocurrency transaction records;
Recipient account name, account number, mobile number, wallet address, bank, and transaction reference;
Text messages, emails, call logs, voicemail, and email headers;
Photos or an unedited opening video if the parcel contained the wrong item, a counterfeit, or nothing of value;
The parcel, packaging, shipping label, waybill, and item received;
Any identification, permit, registration certificate, or proof of business sent by the seller;
A short chronology stating what happened, in order, with dates and times; and
Names and contact details of witnesses or other known victims.

Keep original files. Avoid cropping, annotating, recompressing, or repeatedly forwarding the only copy. Back up the evidence and note where each item came from. Do not publicly post full account numbers, identification documents, home addresses, or other sensitive personal data.

Prompt reporting matters because the Cybercrime Prevention Act generally requires service providers to preserve relevant traffic data and subscriber information for at least six months from the transaction. Content data is preserved for six months from a lawful preservation order, subject to the statutory extension and case-related rules. Investigators—not private complainants—use the legal processes required to compel disclosure. See Republic Act No. 10175, Sections 13–14.

Report through the seller or platform

Use the seller’s or platform’s official dispute mechanism and ask for the remedy you want: cancellation, delivery, repair, replacement, or refund. Keep the case number and every response.

For business-to-consumer internet transactions covered by the Internet Transactions Act, an aggrieved party generally must use the platform, marketplace, or e-retailer’s internal redress mechanism before filing an administrative complaint, court case, or alternative-dispute-resolution proceeding. That mechanism is considered exhausted if the complaint remains unresolved after seven calendar days.

Do not interpret this seven-day rule as a reason to delay notifying your bank or reporting an active fraud, account takeover, identity theft, continuing threat, or disappearing evidence to law enforcement. Also, the Internet Transactions Act excludes purely consumer-to-consumer transactions, such as an isolated private sale between end-users. Coverage can depend on whether the seller was actually operating as a merchant. See Republic Act No. 11967, Sections 3 and 24.

When reporting to the platform:

Select the most accurate category, such as fraud, item not received, counterfeit, impersonation, or unauthorized transaction.
Identify every related seller and payment account.
Upload evidence in chronological order.
Ask the platform to preserve account, listing, communication, login, and transaction records for law enforcement.
Request written confirmation of the report and its outcome.
Do not close or withdraw the case merely because the seller promises a refund outside the platform.

File a DTI consumer complaint

DTI is the appropriate consumer route for many complaints against online merchants selling non-financial goods or services. It can facilitate resolution and handle matters within its consumer-protection jurisdiction. The Internet Transactions Act also directs the DTI’s E-Commerce Bureau to receive and refer internet-transaction complaints under a “no wrong door” policy.

After using the seller’s or platform’s internal complaint process, prepare:

Your complete name, address, email address, and contact number;
The seller’s or business’s known name and contact details;
A clear narration of the facts;
The specific remedy you seek;
Proof of payment and other transaction records;
The platform complaint and response, or proof that seven calendar days passed without resolution; and
A copy of a valid government-issued ID.

You may file through the DTI Consumer Complaints Assistance and Resolution System or follow the DTI Fair Trade Enforcement Bureau’s current filing instructions.

The Internet Transactions Act recognizes repair, replacement, refund, and other remedies available under the Consumer Act and related laws. The merchant or e-retailer is generally primarily liable for consumer claims. Platform liability is not automatic; it depends on statutory conditions such as the platform’s failure to exercise required diligence or respond as the law requires.

A claim for damages under the Internet Transactions Act must be filed before the court or DTI within two years from the time the cause of action arose. Other claims or offenses may be governed by different prescriptive periods. Do not wait for the two-year deadline if evidence or funds may disappear.

Report the scam for criminal investigation

National Anti-Scam Hotline

Call 1326, the government’s National Anti-Scam Hotline operated through the Cybercrime Investigation and Coordinating Center’s inter-agency response mechanism. It accepts reports involving online-selling scams and other cyber-enabled fraud. DICT identifies the CICC and its official contact information on its attached-agencies page.

Give the responder:

Your name and reliable contact details;
The amount and time of payment;
The payment provider and recipient account;
The seller’s usernames, URLs, phone numbers, and email addresses;
A concise description of the deception; and
Any reference number already issued by the bank, platform, or police.

Record the hotline report or reference number. A hotline report may help coordinate a response, but comply with any instruction to execute a sworn complaint or submit additional evidence.

NBI Cybercrime Division

The NBI accepts requests for investigation from the public. Its published process may include a complaint sheet, preliminary interview, sworn statement or affidavit, supporting records, and examination of a relevant device. Filing itself is listed as free of charge.

You may start through the NBI Online Complaint page or proceed to the NBI Cybercrime Division or an appropriate regional or district office. Review the NBI’s official process for computer-crime complaints before visiting.

PNP and local police

You may also report to the PNP Anti-Cybercrime Group, an appropriate regional cybercrime unit, or the nearest police station. Bring printed and electronic copies of your evidence, government-issued identification, and your written chronology.

Ask for:

The complaint, incident, or blotter reference number;
The investigator’s name and unit;
Instructions for executing an affidavit;
A list of any missing records; and
The approved method for submitting additional digital evidence.

Do not pay anyone who promises an arrest, account freeze, or guaranteed recovery in exchange for an unofficial fee.

Is every failed online sale a criminal scam?

No. Late delivery, poor service, a defective item, or failure to honor a warranty may be a consumer or contractual dispute without necessarily proving a crime.

An online-shopping transaction may support an estafa complaint when the evidence shows the elements required by Article 315 of the Revised Penal Code—commonly, a material false representation made before or at the time the victim parted with money, reliance on that representation, and resulting damage. The prosecution must prove the applicable offense beyond reasonable doubt.

Likewise, “computer-related fraud” under the Cybercrime Prevention Act has specific elements involving unauthorized input, alteration, or deletion of computer data or interference with a computer system. It is not a catch-all label for every fraud arranged through chat.

Section 6 of the Cybercrime Prevention Act can apply to offenses under the Revised Penal Code or special laws when committed by, through, and with the use of information and communications technologies, with the statutory penalty consequence. The Supreme Court sustained that provision in Disini v. Secretary of Justice. The correct charge still depends on the evidence and the prosecutor’s legal assessment.

Special situations

The seller was a private individual

A one-off sale between private end-users may be a consumer-to-consumer transaction excluded from the Internet Transactions Act. You can still use the platform’s dispute system, notify the payment provider, and report suspected fraud to law enforcement. DTI may refer a matter outside its jurisdiction, but it cannot turn every private dispute into a consumer case.

The seller is abroad

Philippine law may still apply to an online business that targets the Philippine market and has sufficient contacts here. Practical enforcement and recovery can nevertheless be harder. Report promptly so the platform, payment provider, and investigators can preserve identifying and transaction data.

You paid cash on delivery

Preserve the package, waybill, item, opening video, receipt, and courier details. Report through the marketplace and seller first. Notify the courier if its service or personnel may hold relevant collection and remittance records, but do not assume the courier is legally responsible for the seller’s fraud.

Your identity or account was used

State clearly that the problem is not only a bad purchase. Report unauthorized access to the affected institution immediately and ask it to secure the account. Preserve login alerts, device notices, password-reset messages, and unfamiliar transaction records. Computer-related identity theft, unlawful access, or a social-engineering offense may be relevant, depending on the facts.

The scam involved an investment, loan, insurance product, or regulated item

A different regulator may have primary jurisdiction. For example:

Investment or lending concerns may fall under the Securities and Exchange Commission.
Banking and e-wallet service complaints may be escalated to the BSP after first-level recourse with the institution.
Insurance complaints may fall under the Insurance Commission.
Food, drugs, cosmetics, or medical-device issues may involve the Food and Drug Administration.

DTI’s role is ancillary where another agency has specific statutory jurisdiction.

Common mistakes that can weaken a report

Waiting for repeated promises while the recipient moves the money;
Deleting the conversation after blocking the account;
Saving only a profile name instead of the exact URL and username;
Sending more money to “unlock” a refund;
Communicating only by telephone and keeping no written record;
Filing a vague complaint without transaction references or a chronology;
Editing the original screenshots or discarding the parcel;
Reporting only to the social-media platform and assuming a criminal case was filed;
Publicly accusing or doxxing an unverified person whose identity may have been stolen;
Giving passwords, PINs, one-time passwords, or recovery codes to someone claiming to investigate the case; and
Paying a “recovery agent” who guarantees the return of funds.

When legal help is urgent

Consult a Philippine lawyer promptly when:

The loss is substantial or involves several victims;
The scammer knows your home, workplace, or family details;
There are threats, extortion, stalking, intimate images, or danger to a child;
Your identity, SIM, email, bank account, or business name was taken over;
You received a subpoena, demand letter, prosecutor’s notice, or court document;
The payment provider denies an unauthorized transaction involving disputed authentication;
The seller or platform is abroad and significant assets are involved;
You need to seek damages or preserve a claim before a deadline; or
You are considering publishing names, account details, or allegations that may expose you to privacy or defamation issues.

If anyone faces immediate physical danger, call 911.

Frequently asked questions

Can I recover my money?

Possibly, but no reporting channel can guarantee recovery. The likelihood depends on how quickly the transaction is reported, whether the funds remain traceable, the payment method, the available contractual remedies, and what the evidence proves.

Should I contact the seller before reporting?

For a covered business-to-consumer transaction, use the seller’s or platform’s internal redress mechanism and retain proof. But contact your payment provider immediately, and do not delay an urgent fraud or safety report merely to continue negotiating.

Must I wait seven days before going to the police?

The seven-calendar-day exhaustion rule concerns the internal redress mechanism under the Internet Transactions Act. It should not be treated as permission to let an active fraud continue or evidence disappear. Report urgent criminal, account-security, and fund-transfer concerns immediately. Whether the Act’s exhaustion requirement applies at all may also depend on whether this was a covered merchant transaction rather than a private C2C sale.

Is a screenshot enough?

It may be useful, but a stronger report includes original messages, URLs, account identifiers, proof of payment, timestamps, transaction references, platform records, and a coherent chronology. Investigators may ask to examine the relevant device or obtain a sworn statement.

Can the bank reveal the recipient’s identity to me?

Not necessarily. Privacy, bank-secrecy, and procedural rules may prevent direct disclosure to a private complainant. Investigators, courts, and authorized regulators can use the lawful processes available to them. Give the bank and investigators the exact recipient-account and transaction details.

Can DTI order a social-media post removed?

The Internet Transactions Act authorizes the DTI Secretary, after the required investigation or verification, to issue takedown orders in specified circumstances. A consumer report does not automatically produce a takedown order, and the remedy depends on jurisdiction and facts.

Should I post the scammer’s name to warn others?

Report through official channels first. A profile may use a stolen identity, and public disclosure of personal data or unproven accusations can create additional legal problems. Share only what is necessary with the platform, payment provider, regulator, lawyer, or investigator.

Official references

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Rights, jurisdiction, criminal charges, and remedies depend on the transaction, evidence, payment method, and applicable agency rules. Official sources and reporting channels were checked as of 14 September 2026.