Quick answer

If you paid an online seller or social-media account and believe you were scammed, act immediately:

Contact your bank, card issuer, or e-wallet through its official app, hotline, or branch. Report the transaction as fraudulent or disputed, ask whether the transfer can be recalled or the receiving funds temporarily held, and obtain a reference number.
Secure any compromised account by changing passwords, signing out other sessions, enabling multi-factor authentication, and blocking affected cards or wallets.
Save the advertisement, seller profile, messages, payment records, delivery information, and other digital evidence before the account or post disappears.
Report the seller and transaction through the shopping platform or social-media service.
Report suspected crime to the Philippine National Police Anti-Cybercrime Group (PNP-ACG), the National Bureau of Investigation (NBI), or the government’s 1326 cybercrime hotline.
For a business-to-consumer transaction, file a consumer complaint with the Department of Trade and Industry (DTI). For an unresolved complaint against a BSP-supervised bank or e-wallet provider, escalate it to the Bangko Sentral ng Pilipinas (BSP).

These reports serve different purposes. A platform report may remove or restrict the account; a bank report may help preserve or recover funds; a DTI complaint addresses consumer remedies; and a PNP or NBI complaint may lead to a criminal investigation. Filing one does not automatically replace the others.

Recovery is not guaranteed. It usually becomes harder once money has been withdrawn, converted, transferred through several accounts, or sent outside the regulated financial system.

First, decide whether this is fraud or a consumer dispute

Not every failed online purchase is necessarily a criminal scam.

Possible indicators of fraud include:

the seller used a false identity, fake documents, or an impersonated business page;
payment was collected for an item the seller apparently never intended to deliver;
the seller disappeared or blocked you immediately after payment;
tracking details, receipts, reviews, or proof of ownership were fabricated;
the same item was supposedly sold to several buyers;
you were tricked into revealing an OTP, password, PIN, recovery code, or card details;
an unauthorized transaction followed a phishing link, malicious application, or account takeover; or
payment was routed through accounts belonging to unrelated persons.

A delayed delivery, defective item, wrong product, warranty dispute, or disagreement over a refund may instead be primarily a consumer or contractual dispute. It can still involve deceptive trade practices, but criminal liability depends on evidence of deceit and the applicable law—not simply on the seller’s failure to satisfy the buyer.

When the facts are unclear, describe exactly what happened and let the bank, platform, DTI, or investigators classify the complaint. Avoid exaggerating or labeling a person a criminal in public posts.

What to do during the first few hours

1. Call the payment provider immediately

Use only the contact details in the provider’s official app, website, card, or account documents. Do not call a number supplied by the suspected scammer.

Tell the provider:

the date, time, amount, and transaction reference;
whether you authorized the payment;
how you were deceived;
the recipient’s account name, number, mobile number, or wallet ID;
whether you disclosed an OTP, password, PIN, card data, or identification document;
whether other transactions may be affected; and
what action you want, such as blocking the account, disputing the charge, tracing or recalling the transfer, or preserving available funds.

Ask for a written acknowledgment or case reference number. Follow any documentary requirements and deadlines stated by the provider. A report to the police or DTI does not substitute for the provider’s own fraud or charge-dispute process.

Under the Anti-Financial Account Scamming Act, Republic Act No. 12010, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction, subject to BSP rules. The statutory holding period cannot exceed 30 calendar days unless extended by a competent court. Institutions and account owners must also conduct coordinated verification of a disputed transaction.

That law does not mean every reported transfer will automatically be frozen or refunded. Whether funds can be held depends on the facts, the location and availability of the money, verification, and applicable BSP rules. Report promptly and give complete, accurate information: malicious or bad-faith reporting that results in a hold is itself punishable.

For a credit-card purchase, ask the issuer whether a chargeback or billing-dispute remedy is available. The issuer’s rules, card-network rules, transaction type, and deadlines may affect eligibility.

2. Secure your accounts and device

If you clicked a suspicious link, installed an application, shared credentials, or lost access to an account:

disconnect a suspected infected device from the internet;
use a trusted device to change the password of your email first, then banking, shopping, and social-media accounts;
use a different, unique password for every important account;
enable multi-factor authentication;
sign out unknown devices and revoke unfamiliar sessions or connected applications;
block affected cards and request replacement where appropriate;
contact your mobile provider if your SIM stopped working unexpectedly;
review recent transactions and account-profile changes; and
warn close contacts if the scammer may be impersonating you.

Do not erase or factory-reset the device before preserving relevant evidence or obtaining technical or investigative advice. Resetting it may destroy useful logs, messages, or malicious files.

3. Preserve evidence before reporting the account

Save evidence first because a seller can edit or delete posts, withdraw messages, change usernames, or deactivate an account.

Keep:

the full URL of the listing, shop, page, profile, or website;
usernames, display names, account IDs, phone numbers, email addresses, and profile links;
screenshots showing the device date and time where possible;
the complete conversation, including voice messages and call logs;
the original advertisement, product description, price, promises, and refund terms;
order confirmations, invoices, electronic receipts, and transaction references;
bank statements or wallet transaction records;
the recipient’s account name and account, card, mobile, QR, or wallet number;
courier receipts, tracking pages, waybills, parcel labels, and delivery photographs;
photographs or video of the parcel and its contents;
the seller’s identification or business-registration documents, if supplied;
phishing emails in their original form, including full headers where available;
suspicious links, QR codes, applications, and downloaded files without reopening them;
your written demands for delivery or refund and the seller’s responses; and
every report acknowledgment and reference number.

Export chats or download account data when the service permits it. Keep the original files as well as screenshots. Do not crop away usernames, URLs, dates, transaction references, or surrounding context. Back up the evidence in a second secure location and prepare a simple chronological list of events.

Do not pay a supposed “recovery agent,” “investigator,” or “bank employee” who promises to retrieve the money for an advance fee. Victims are often targeted again.

Report the account to the platform

Use the platform’s reporting and buyer-protection tools. Select the most accurate category—such as fraud, non-delivery, counterfeit goods, impersonation, phishing, or unauthorized transaction—and request preservation of relevant account and transaction records.

If the purchase was made through an e-marketplace, keep communications and refund requests inside the platform whenever possible. Moving the conversation or payment outside the platform can affect buyer protection and make the transaction harder to trace.

The Internet Transactions Act of 2023, Republic Act No. 11967, requires covered e-marketplaces and digital platforms to provide a responsive mechanism for reporting unlawful users or information. For covered internet transactions, an aggrieved party generally must first use the platform, e-marketplace, or e-retailer’s internal redress mechanism. It is considered exhausted if the complaint remains unresolved for seven calendar days.

Do not interpret that seven-day period as a reason to delay an urgent bank fraud report, account-security action, or request for police assistance. Funds and electronic evidence can disappear quickly.

The Act principally covers business-to-business and business-to-consumer transactions involving the Philippine market. It expressly excludes consumer-to-consumer transactions. A one-off purchase from another private individual may therefore fall outside its consumer-redress provisions, although criminal, civil, platform, and payment-provider remedies may still be available.

File a DTI consumer complaint

DTI is the appropriate consumer agency for many complaints involving online merchants, e-retailers, deceptive sales practices, non-delivery, defective products, and refusal to provide legally available remedies.

For covered online purchases, consumers may pursue repair, replacement, refund, or other remedies provided by the Consumer Act and related laws. The correct remedy depends on the defect, nonconformity, contract, available evidence, and circumstances. A change of mind does not automatically create a right to a refund.

Before filing:

Make a clear written demand to the seller or business.
Use the platform or retailer’s internal complaint system.
Allow the applicable internal-redress process to operate, while preserving proof of when you filed it.
Organize your evidence and state the specific remedy requested.

A complaint may be filed through the DTI Consumer Complaints Assistance and Resolution System. DTI also identifies consumercare@dti.gov.ph as a filing channel for Metro Manila complainants, together with personal filing at the DTI Fair Trade Enforcement Bureau. Check the DTI’s current complaint instructions before submission, especially if you are outside Metro Manila or the product is regulated by another agency.

Include:

your full name and reliable contact details;
the seller or business name and every known address or contact detail;
a concise chronological account;
the item or service, purchase price, and payment method;
copies of the advertisement, order, receipt, messages, and prior complaint;
the platform’s response or proof that seven calendar days passed without resolution, where applicable; and
the exact remedy sought.

DTI mediation is intended to help the parties reach a settlement. If mediation fails, formal adjudication may be available under DTI procedure. Formal adjudication requires a Certificate to File Action and a verified complaint with the prescribed supporting documents. DTI states that mediation is a condition precedent to its formal consumer adjudication process.

Section 28 of the Internet Transactions Act provides a two-year period, counted from when the cause of action arose, for a consumer to claim damages by filing in court or with DTI under that section. Other claims may have different prescriptive periods. Do not wait until the deadline is near.

DTI’s authority may also be secondary to that of a specialized regulator. Complaints involving banking, investments, insurance, telecommunications, medicines, food, transportation, or other regulated services may be referred to the agency with primary jurisdiction.

Report suspected crime

Government cybercrime hotline

The government’s 1326 hotline accepts reports of online scams and other cyber incidents. Official government guidance describes it as a 24/7 central reporting number. It can help route a report, but it is wise to confirm whether a formal complaint must also be submitted directly to an investigative agency.

PNP Anti-Cybercrime Group

The PNP is a law-enforcement authority under the Cybercrime Prevention Act of 2012. You may approach the PNP Anti-Cybercrime Group or an appropriate PNP cybercrime office.

Bring printed and electronic copies of your evidence, a government-issued ID, and a prepared timeline. Ask what sworn statement, affidavit, device examination, or additional documentation is required. Obtain the complaint or blotter reference and the investigator’s official contact information.

National Bureau of Investigation

You may also report to the National Bureau of Investigation, including its cybercrime investigators. Confirm the current receiving office, appointment procedure, and requirements through the NBI’s official channels before visiting.

The NBI and PNP can seek court-authorized disclosure, search, seizure, or examination of computer data when legal requirements are met. A victim ordinarily cannot compel a platform, telecom company, bank, or wallet provider to disclose another user’s protected subscriber or account information merely by making a private request.

The Supreme Court’s Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC, governs warrants and related orders for computer data. This is one reason complete URLs, account identifiers, transaction references, and accurate timestamps are valuable to investigators.

What offense may apply?

Depending on the evidence, an online scam may involve estafa under the Revised Penal Code, a crime committed through information and communications technology under Section 6 of the Cybercrime Prevention Act, computer-related fraud, computer-related identity theft, or an offense under the Anti-Financial Account Scamming Act.

The legal classification is fact-specific. For example, voluntarily sending payment after a false sales representation is not necessarily the same offense as an unauthorized transfer caused by interference with computer data. State the facts rather than insisting on a particular charge.

Escalate an unresolved bank or e-wallet complaint to BSP

BSP’s Consumer Assistance Mechanism generally expects you to raise the issue first with the bank, e-wallet issuer, or other BSP-supervised financial institution.

If the institution’s internal process does not resolve the matter, use the BSP Consumer Assistance Channels. BSP identifies the BSP Online Buddy, or BOB, as its most convenient complaint channel. A completed Complaints, Inquiries and Requests form may alternatively be emailed to consumeraffairs@bsp.gov.ph.

Attach:

the complaint filed with the institution;
its final response, status, or proof that it has not responded;
relevant transaction records and supporting documents;
a summary of the issue;
the resolution requested; and
your daytime contact details.

BSP assistance concerns the conduct of institutions under its supervision. It does not replace a criminal complaint against the scammer, and BSP does not automatically reimburse every scam loss. Responsibility may depend on whether the transaction was authorized, how access was obtained, the institution’s security and fraud controls, and whether the institution exercised the legally required degree of diligence.

If personal data or identity documents were misused

If the scam involved unauthorized collection, disclosure, or use of your personal data, or if the organization controlling the data failed to respond appropriately to a privacy complaint, review the National Privacy Commission’s complaint process.

First preserve proof of what data was taken, how it was obtained, where it was posted or used, and what you asked the organization to do. A privacy complaint is distinct from a criminal fraud report.

If you sent a photograph of your ID, monitor for attempts to open accounts, register SIMs, impersonate you, or solicit money from your contacts. Notify the issuing agency and affected financial institutions when appropriate.

Prepare a useful complaint narrative

A clear report is more valuable than a long but disorganized one. Use this structure:

Who: Your identity and all known details of the seller, account, recipient, and platform.
What: What was advertised, promised, paid, delivered, or accessed.
When: Dates and exact times, including the time zone if relevant.
Where: Platform, profile URL, website, bank, wallet, courier, and delivery location.
How: The representations made, the payment instructions, and why you believe they were false.
Loss: The exact amount and any affected accounts or property.
Action taken: Reports already made and their reference numbers.
Requested action: Investigation, preservation of records, account restriction, fund recall, refund, or another specific remedy.

Separate facts you personally observed from assumptions. If someone else provided information, identify the source. Correct any error promptly.

Common mistakes to avoid

Waiting for the scammer’s repeated promises while the money is being moved.
Deleting the conversation after blocking the account.
Saving only cropped screenshots without URLs, timestamps, or account identifiers.
Continuing to send “verification,” “tax,” “release,” or “refund processing” payments.
Sharing OTPs, passwords, PINs, or recovery codes with a supposed investigator.
Communicating through unofficial support pages or telephone numbers found in comments.
Publicly posting unredacted IDs, bank statements, account numbers, or private messages.
Threatening, hacking, doxxing, or attempting to entrap the suspected scammer.
Making knowingly false or embellished reports to force an account freeze.
Assuming a DTI complaint, platform report, or police report automatically starts every other remedy.
Surrendering the only copy of a device or original document without obtaining an inventory or acknowledgment.
Paying private “fixers” who claim they can freeze an account or guarantee recovery.

When help is urgent

Contact the bank or wallet and law enforcement without delay if:

unauthorized transfers are still occurring;
the scammer has remote access to your phone or computer;
your SIM, email, or financial account has been taken over;
the scammer has your OTP, PIN, password, card security code, or recovery phrase;
you sent a large amount or funds belonging to another person or business;
several victims or mule accounts appear to be involved;
the scheme targets a senior citizen or another vulnerable person;
there are threats, extortion, stalking, intimate images, or risk of physical harm;
identity documents are being used to open accounts; or
a platform, bank, or service provider may soon delete relevant records.

Call 911 for an immediate threat to life or physical safety. For a substantial loss, complex fund transfers, a disputed accusation, or possible civil action, consult a Philippine lawyer promptly. A lawyer can assess the documents, applicable causes of action, proper venue, prescription, and the relief that can realistically be pursued.

Frequently asked questions

Can I report a scam if I sent the payment voluntarily?

Yes. A payment may have been authorized as a transaction but still induced by fraud. Tell the provider and investigators that you initiated the transfer and explain the false representations. Do not incorrectly describe it as an unauthorized transfer.

Can the bank or e-wallet immediately return my money?

Not necessarily. A provider may investigate, attempt a recall, coordinate with another institution, or temporarily hold identifiable funds when legally justified. Recovery depends on the transaction, available funds, evidence, and applicable rules.

Should I wait seven days before going to the police?

No. The Internet Transactions Act’s seven-calendar-day rule concerns exhaustion of the covered platform or retailer’s internal redress mechanism. It should not be treated as a reason to delay urgent financial-security measures or a report of suspected crime.

Can I file with DTI against a seller on social media?

Possibly, if the seller is acting as an online merchant or business in a covered business-to-consumer transaction. A purely private consumer-to-consumer sale is excluded from the Internet Transactions Act, although other laws and remedies may apply.

Do I need to know the scammer’s real name?

No. Report every identifier you have. A sworn complaint stating that a covered platform was used for a fraudulent or unlawful act may support lawful efforts by competent authorities to obtain identifying information. Disclosure remains subject to legal process.

Is a screenshot enough?

It can be helpful, but it is stronger when supported by original messages, URLs, account identifiers, transaction records, timestamps, receipts, and device or platform exports. Preserve the surrounding context.

Should I confront the seller?

A written demand can help document a consumer dispute, but do not threaten the person, reveal an investigation, arrange an unsafe meeting, or send more money. Follow law-enforcement advice where safety or evidence preservation is involved.

Can I post the seller’s identity online?

Public accusations can expose you to privacy, harassment, or defamation disputes, particularly if the identity is wrong or the facts remain contested. Give the evidence to the platform, payment provider, regulator, or investigators and redact sensitive information from any public warning.

Does a police report guarantee prosecution?

No. Investigators and prosecutors must evaluate jurisdiction, admissible evidence, the elements of an offense, and the identity and participation of responsible persons. A report is important, but it does not guarantee arrest, prosecution, conviction, or recovery.

Official sources

This article provides general Philippine legal information, not legal advice or a prediction of any case outcome. Procedures and remedies depend on the transaction, evidence, institutions involved, and current agency rules. Official sources and reporting channels were checked on 14 September 2026.