Quick answer

If you believe you were scammed, act immediately:

Contact your bank, card issuer, or e-wallet through its official fraud channel. Ask it to secure your account, trace the transfer, and treat the payment as a disputed transaction. Speed matters because funds may be moved quickly.
Preserve the evidence before blocking or reporting the account. Save the listing, profile URL, messages, payment records, delivery information, and any identification or account details supplied by the seller.
Report the seller and transaction to the shopping platform or social-media service. Request a refund, account preservation, and removal of the fraudulent listing.
Report suspected crime to the PNP Anti-Cybercrime Group or the NBI Cybercrime Division. A platform report or refund request does not replace a criminal complaint.
For a consumer dispute with an identifiable business, file a complaint with the Department of Trade and Industry.
If your bank or e-wallet does not resolve your complaint, escalate it to the Bangko Sentral ng Pilipinas.

These routes serve different purposes. A bank may try to contain or recover funds, a platform may suspend an account or process a refund, DTI may address a consumer transaction, and law enforcement may investigate a crime. Reporting to one does not automatically notify the others.

First, secure your money and accounts

Call the financial institution using the number in its app, official website, or the back of your card—not a number supplied by the suspected scammer.

Tell the institution:

the transaction date, time, amount, and reference number;
the recipient’s name, account number, mobile number, or wallet identifier;
why you believe the transaction was fraudulent;
whether you disclosed an OTP, PIN, password, card details, or identification document;
whether your phone, email, social-media account, or banking account may have been compromised; and
whether other unauthorized transactions are appearing.

Ask for a complaint or case-reference number. Also ask whether the institution can:

temporarily restrict the affected account or payment instrument;
initiate a transfer trace, recall, chargeback, or card dispute, if applicable;
notify the receiving financial institution;
temporarily hold identifiable disputed funds; and
preserve transaction and access records for investigators.

Under the Anti-Financial Account Scamming Act and current BSP regulations, BSP-supervised institutions may temporarily hold disputed funds when the required grounds and procedures are present. The initial holding may be for up to five calendar days and, after the prescribed verification process, the total holding period may reach—but generally may not exceed—30 calendar days unless extended by a competent court. This mechanism is not an automatic refund and cannot recover money that is no longer available. The BSP regulations also require the financial institution’s consumer-assistance mechanism to remain the first-level recourse. See the BSP’s AFASA law and implementing regulations.

Change compromised passwords from a device you trust. Use a different password for each account, enable multi-factor authentication, sign out other sessions, and contact your mobile provider if your SIM may have been taken over. Never give an alleged “recovery agent” an OTP, PIN, password, screen-sharing access, or advance fee.

Preserve evidence before it disappears

Do not rely on screenshots alone when the original data can also be preserved. Save:

the complete seller profile, username, profile URL, page name, and user or shop ID;
the product listing, advertised price, description, photos, and posting URL;
the full conversation, including dates, timestamps, voice messages, emails, and call logs;
the order page, invoice, receipt, tracking number, and delivery status;
payment confirmations, transaction reference numbers, bank statements, and recipient-account details;
the seller’s claimed name, address, phone number, email, business registration, and identification;
photographs or an unboxing video if an empty parcel, counterfeit item, or different product arrived;
refund demands, the seller’s replies, and any threats or requests for additional payment;
the platform’s report confirmation and case number; and
a short chronological account of what happened.

Capture the browser address bar or account URL where possible. Export chats or emails in their original format, keep the original device and files, and make a backup. Do not edit, annotate, crop, or repeatedly forward the only copy of important evidence.

A disappearing profile does not necessarily end the case. Under the Internet Transactions Act, covered platforms must maintain specified merchant information and may be compelled by competent authority, following the legal process, to provide information relevant to an investigation based on a sworn complaint. Access to private account or communications data is not automatic; investigators may need the appropriate subpoena, cybercrime warrant, or court order.

Report the account to the platform

Use the platform’s in-app fraud, scam, or purchase-dispute process as soon as possible. Select the description that most accurately fits the facts, such as non-delivery, counterfeit goods, unauthorized transaction, impersonation, phishing, or payment taken outside the platform.

In your report:

identify the exact order and account;
state the amount lost and the promised item or service;
explain the false representation or suspicious conduct;
attach the strongest supporting records;
request preservation of the seller’s account and transaction data;
request a refund or buyer-protection review where available; and
keep the platform’s acknowledgment and reference number.

Do not close a platform dispute merely because the seller promises to refund you later. Do not mark an order as received unless it was actually received and checked. Avoid moving the conversation or payment outside the platform, because doing so may weaken contractual buyer protection.

A platform’s decision on a refund is not a ruling on criminal liability. Conversely, filing a police report does not guarantee that the platform will refund the payment.

File a cybercrime or fraud report

Online shopping and social-media scams may constitute estafa under the Revised Penal Code, potentially in relation to Section 6 of the Cybercrime Prevention Act when information and communications technology was used. Other conduct—such as phishing, illegal access, computer-related identity theft, or misuse of financial accounts—may fall under separate provisions. The correct charge depends on the evidence and should be determined by investigators and prosecutors.

You may approach either of these national law-enforcement agencies:

PNP Anti-Cybercrime Group: use the official PNP-ACG e-Complaint portal or contact the nearest regional anti-cybercrime unit.
National Bureau of Investigation: use the NBI’s online complaint page or visit the NBI Cybercrime Division or an appropriate regional office. The NBI’s published procedure includes completing a complaint form, providing supporting records, and executing a sworn statement or submitting a prepared affidavit. See the NBI procedure for computer-crime victims.

You may also submit a report through the official Cybercrime Investigation and Coordinating Center reporting page. The CICC coordinates cybercrime response; a report there may still require referral to the appropriate investigative agency.

Bring or prepare:

a government-issued ID;
printed and electronic copies of your evidence;
the transaction and complaint-reference numbers;
the recipient’s financial-account details;
the platform account and URLs;
a clear timeline; and
information about other known victims, without coordinating false or embellished statements.

An initial online report may not be the final criminal complaint. You may be asked to appear, identify the evidence, allow lawful examination of a relevant device, or execute a sworn affidavit. Tell only what you personally know and clearly label information received from someone else.

There is no general rule that a loss must reach a particular peso amount before it can be reported. A smaller loss may still involve a crime or form part of a larger scheme.

File a DTI consumer complaint when the seller is a business

DTI is most useful when the dispute involves an identifiable online merchant, e-retailer, marketplace, or business selling to a consumer—for example, non-delivery, misleading representations, refusal to honor a lawful remedy, or a defective or different product.

File through the DTI Consumer CARe System. DTI also publishes its consumer-complaint filing guidance and contact details.

Attach:

proof of purchase and payment;
the advertisement or listing;
your messages with the merchant;
delivery and product evidence;
your written request for the remedy you want; and
the merchant’s name and usable contact details.

DTI consumer proceedings generally begin with mediation. If mediation fails, formal adjudication may be available subject to the applicable rules and documentary requirements. DTI states that adjudication may determine entitlement to repair, replacement, or refund and may impose appropriate administrative sanctions. A lawyer is not ordinarily mandatory for the administrative complaint.

The Internet Transactions Act covers business-to-business and business-to-consumer internet transactions within DTI’s mandate when the required Philippine connection exists. It expressly excludes consumer-to-consumer transactions. Therefore, a one-off sale by a genuinely private individual may fall outside that Act, while a person regularly selling as a business may be treated differently based on the facts. DTI’s jurisdiction is also ancillary to specialized regulators such as the BSP. See the official text of Republic Act No. 11967, the Internet Transactions Act of 2023.

A victim claiming damages under the Internet Transactions Act may file before the court or DTI within two years from the time the cause of action arose, subject to the law’s coverage and other applicable rules. Do not treat that period as permission to delay: evidence and recoverable funds may disappear much sooner.

Escalate an unresolved bank or e-wallet complaint to the BSP

First complain directly to the bank, e-wallet, card issuer, or other BSP-supervised institution through its Financial Consumer Protection Assistance Mechanism. Preserve its response—or proof that it did not respond—and the complaint-reference number.

If the matter remains unresolved or you are dissatisfied with the institution’s action, escalate it through the BSP Online Buddy available on the BSP Consumer Corner. If you cannot use the chatbot, the BSP’s current instructions allow submission of its Complaint/Inquiry/Reply form by email to consumeraffairs@bsp.gov.ph, together with proof that you first used the institution’s complaint mechanism. See the BSP’s official complaint instructions.

Do not email PINs, passwords, OTPs, complete card credentials, passbooks, passports, or unnecessary identification documents. The BSP warns that these are not required to process a complaint.

Which route fits the problem?

Situation	Priority route
Money has just been transferred	Bank or e-wallet immediately, then platform and law enforcement
Unauthorized card charge	Card issuer’s fraud and dispute process
Fake seller took payment and disappeared	PNP-ACG or NBI; also bank/e-wallet and platform
Identifiable business failed to deliver or misrepresented goods	Platform and DTI; law enforcement if deception indicates fraud
Private individual’s one-off social-media sale	Bank/e-wallet, platform, and law enforcement; DTI coverage may not apply
Account, email, or SIM was compromised	Secure the account and SIM, notify the provider, then report to law enforcement
Bank or e-wallet mishandled the complaint	Institution’s formal complaint process, followed by BSP escalation
Threats, extortion, stalking, or danger are continuing	Contact police immediately; call 911 if there is an immediate threat

Common mistakes to avoid

Waiting for the scammer’s promised refund before contacting the financial institution.
Paying a second “release,” “verification,” “tax,” “insurance,” or “recovery” fee.
Deleting the chat, blocking the account, or resetting the phone before preserving evidence.
Publishing the recipient’s full account number, ID, address, or other personal data on social media.
Threatening, impersonating, hacking, or attempting to entrap the suspected scammer yourself.
Sending original devices or documents to an unknown person claiming to be an investigator.
Assuming a business-registration certificate proves that the person using it is legitimate.
Filing exaggerated or knowingly false information. AFASA penalizes malicious reports made in bad faith that result in funds being improperly held.
Treating a barangay blotter, platform report, or bank complaint as a substitute for a cybercrime complaint.
Hiring an online “fund recovery” service without independently verifying its identity and authority.

When help is urgent

Seek immediate assistance when:

a transfer was made only minutes or hours ago;
unauthorized transactions are continuing;
the scammer has your OTP, password, card details, identity documents, or control of your SIM;
the incident involves threats, extortion, intimate images, a child, trafficking, or risk of physical harm;
large sums, business funds, borrowed money, or multiple victims are involved;
you received a subpoena, demand letter, or notice that your own account has been frozen or linked to disputed funds; or
a filing deadline may be approaching.

For substantial losses or complicated facts, consult a Philippine lawyer promptly. Counsel can assess possible criminal, civil, administrative, and provisional remedies and help prepare affidavits without overstating the evidence.

Frequently asked questions

Can I recover money sent voluntarily to the scammer?

Possibly, but recovery is not guaranteed. “Voluntary” authorization does not necessarily mean the transaction was legitimate if consent was induced by fraud. Report it immediately so the institution can determine whether funds remain traceable or may lawfully be held or returned.

Will the bank automatically reverse an InstaPay, PESONet, or e-wallet transfer?

No. Completed transfers are not automatically reversible merely because the sender later alleges fraud. The institutions must follow applicable rules, verify the dispute, and consider the rights of both account holders. Early reporting materially improves the chance of locating funds.

Do I need the scammer’s real name?

No. Report all identifiers you have: usernames, URLs, phone numbers, email addresses, account numbers, wallet names, transaction references, and delivery details. Identifying subscriber or account records may require lawful investigative process.

Should I report even if the amount is small?

Yes. There is no general minimum-loss threshold for reporting suspected cyber-enabled fraud. Your report may also help connect related transactions or victims.

Is an unfulfilled order always estafa?

No. Non-delivery or a broken promise can be a consumer or civil dispute rather than a crime. Estafa ordinarily requires legally significant deception or another mode defined by law, not merely failure to perform. Investigators and prosecutors must evaluate the facts, representations, intent, and documents.

Can I post the seller’s identity publicly?

Use caution. Public accusations can expose innocent persons, victims of identity theft, or account holders whose details were misused. Give complete identifying information to the platform, financial institution, and authorities instead of conducting a public campaign.

How long do I have to report?

Report immediately. Different criminal, civil, administrative, platform, card-dispute, and contractual deadlines may apply. The Internet Transactions Act provides a two-year period for a covered damages claim before DTI or a court, but other claims may follow different periods. Delay can also make digital evidence and funds harder to preserve.

What law may apply?

Depending on the facts, relevant laws may include the Revised Penal Code provisions on estafa, the Cybercrime Prevention Act of 2012, the Internet Transactions Act of 2023, the Consumer Act, the Anti-Financial Account Scamming Act, and other laws governing identity theft, access devices, electronic evidence, data privacy, or particular regulated products. Not every unsuccessful transaction violates every one of these laws.

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Procedures and available remedies depend on the evidence, payment method, parties, platform terms, and agency jurisdiction. Official sources and procedures were checked as of September 15, 2026.