Quick answer

If you have been scammed through an online shop, marketplace, or social-media account in the Philippines, act immediately:

Contact your bank, e-wallet, card issuer, or payment provider and report the transaction as fraudulent or disputed. Ask whether the transfer can be recalled, the recipient account can be flagged, or the remaining funds can be temporarily held.
Report the seller and transaction through the platform’s official dispute or fraud channel. Request a refund, preserve the case number, and ask the platform not to delete relevant account and transaction records.
Report the suspected crime to law enforcement, such as the PNP Anti-Cybercrime Group, the NBI Cybercrime Division, or your nearest police station. The Cybercrime Investigation and Coordinating Center also accepts cybercrime reports through its official channels.
File a consumer complaint with the DTI when the transaction involved an online business or merchant and remains unresolved through the platform or seller’s complaint process.
Secure your accounts and preserve all evidence. Do not delete messages, block the scammer before saving the conversation, or continue sending money to “unlock” a refund.

These reports serve different purposes. A bank or e-wallet may try to preserve funds; the platform may suspend the account or process a refund; DTI may address consumer-law violations; and law enforcement investigates possible crimes. Filing with one does not necessarily replace the others.

First, stop any further loss

Contact the financial institution immediately

Use only the bank’s, card issuer’s, or e-wallet provider’s official app, website, hotline, or branch. State clearly:

that the transaction is disputed and connected with suspected fraud;
the amount, date, time, and transaction reference number;
the recipient’s account name, account number, mobile number, or wallet identifier;
whether you personally authorized the transfer;
how the scammer obtained your payment or account credentials; and
whether other transactions may follow.

Ask for a complaint or incident reference number and written confirmation of the report. If you transferred funds from one institution to another, report the incident to the sending institution first and, if possible, also notify the receiving institution.

Under the Anti-Financial Account Scamming Act, Republic Act No. 12010, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction under the conditions and procedures prescribed by the BSP. The statutory maximum is 30 calendar days unless a court extends the hold. The law also provides for coordinated verification among the institutions and account owners involved.

A report does not guarantee that money will be returned. Recovery may depend on whether the funds are still in the financial system, whether the transaction can be reversed under the provider’s rules, and what the investigation establishes. Speed matters.

If the institution does not resolve your complaint, escalate it through the BSP Consumer Assistance channels. BSP generally expects the customer to complain to the BSP-supervised financial institution first. Supporting documents should include that complaint, the institution’s response if any, and the records supporting your claim.

Secure compromised accounts

If you disclosed a password, one-time PIN, card number, CVV, recovery code, identification document, or other sensitive information:

change the affected password using a clean, trusted device;
change any reused passwords on other accounts;
sign out unknown devices and sessions;
enable multi-factor authentication;
lock or replace affected cards;
ask your mobile provider about securing or replacing a compromised SIM;
review recovery email addresses, mobile numbers, and linked devices; and
monitor your bank, wallet, email, shopping, and social-media accounts for unauthorized activity.

Never give an OTP, PIN, password, or remote access to a caller claiming that these are required to reverse the scam. Legitimate investigators and consumer agencies do not need your password or OTP.

Preserve evidence before accounts or posts disappear

Save the evidence in its original form where possible. Screenshots are helpful, but they should be supplemented by downloaded records, transaction documents, and links.

Preserve:

the seller’s profile name, username, account URL, shop URL, and user or merchant ID;
the original listing, advertisement, livestream, product description, price, and claimed terms;
the complete conversation, including dates and times;
order confirmations, invoices, electronic receipts, delivery records, and tracking information;
bank, card, or e-wallet receipts and transaction reference numbers;
the recipient’s account name, account number, wallet number, QR code, or payment link;
phone numbers, email addresses, websites, and social-media links used by the scammer;
photos or an unedited unboxing video if an incorrect, counterfeit, empty, damaged, or unsafe item arrived;
warranty, refund, return, and cancellation representations;
your complaint to the seller or platform and every response;
any threats, demands for additional payment, or supposed “refund fees”; and
identification documents or business details the seller displayed publicly.

Take full-page or full-screen captures showing the URL, username, date, and surrounding context. Do not crop away information that may help authenticate the evidence. Keep an untouched copy and back it up. Prepare a short timeline linking each payment or event to its supporting document.

Do not publicly post your full account number, government ID, home address, OTP, or other sensitive information. Give unredacted copies only through verified official channels when legitimately required.

Report the account to the platform

Use the marketplace or social-media platform’s built-in complaint process. Choose the most accurate category, such as fraud, non-delivery, counterfeit goods, impersonation, unauthorized transaction, or account compromise.

Your report should identify:

the order or transaction;
what was promised;
what actually happened;
the amount lost;
the remedy requested, such as cancellation, refund, replacement, or release of an escrow hold; and
the attached evidence.

If payment is still held by the platform, do not press “order received,” “complete,” or any equivalent confirmation merely because the seller requests it. Follow the platform’s stated dispute deadline.

Ask the platform to preserve the seller’s registration, access, transaction, and communication records for lawful investigation. A victim normally cannot compel disclosure of another user’s private data, but competent authorities may obtain information through the proper legal process.

For business-to-consumer transactions covered by the Internet Transactions Act of 2023, Republic Act No. 11967, an aggrieved party must first use the platform’s, marketplace’s, or e-retailer’s internal redress mechanism before bringing the consumer dispute to a court, government agency, or alternative dispute-resolution process. The internal remedy is deemed exhausted if the complaint remains unresolved seven calendar days after filing.

That seven-day rule should not be treated as a reason to delay an urgent fraud alert to a bank, preserve evidence, secure an account, or seek immediate police assistance where funds, safety, or evidence remain at risk.

File a consumer complaint with the DTI

Use the DTI Consumer CARe System for a complaint involving an online merchant or business under DTI’s consumer-protection jurisdiction. Attach the seller or platform complaint, proof that it was filed, the response or proof that seven calendar days passed without resolution, and the relevant transaction records.

State the remedy you want—for example:

delivery of the item as represented;
repair or replacement;
cancellation and refund;
correction of a deceptive representation; or
another remedy allowed by law.

The Internet Transactions Act generally covers business-to-consumer and business-to-business internet transactions within DTI’s mandate when a party is situated in the Philippines or the online business is availing itself of the Philippine market and has sufficient contacts here. It expressly excludes ordinary consumer-to-consumer transactions. Thus, a one-off purchase from another private individual may fall outside the Act even though deception may still support a criminal or civil complaint.

For covered purchases, online consumers may pursue repair, replacement, refund, or other remedies when goods are defective, lost without the consumer’s fault, do not meet the warranty, or do not conform to the contract. The merchant or e-retailer is primarily liable in civil actions or administrative complaints. Platform liability is not automatic; it depends on the circumstances and the statutory grounds.

A claim for damages under the Internet Transactions Act must be filed with the court or DTI within two years from the time the cause of action arose. Do not assume that this period governs every other possible criminal, civil, contractual, or regulatory claim, which may have different deadlines.

DTI proceedings principally address consumer and trade-law issues. If the seller used a fictitious identity, deliberately induced payment without intending to deliver, took over an account, or moved money through mule accounts, also report the matter to law enforcement.

Report the suspected crime

You may report to:

the PNP Anti-Cybercrime Group or your nearest police station;
the National Bureau of Investigation, including its cybercrime investigators; or
the Cybercrime Investigation and Coordinating Center through its current official reporting channels, including the national cybercrime hotline 1326 where available.

Verify current contact details on the agency’s official website before sending evidence. Be cautious of social-media pages or people who claim to be investigators and ask for a “processing,” “tracing,” or “recovery” fee.

Bring or submit:

a government-issued ID and your contact information;
a clear chronological statement of what happened;
the amount and method of payment;
transaction receipts and account identifiers;
URLs, usernames, phone numbers, and email addresses;
complete communications and platform records;
delivery or unboxing evidence, if relevant; and
copies of reports already made to the platform and financial institution.

Ask what form of sworn complaint, affidavit, certification, or original document the investigating office requires. Keep the receiving officer’s name, office, date of submission, and complaint or reference number.

Depending on the proven facts, an online scam may involve estafa or another offense under the Revised Penal Code, an offense involving computer data or identity under the Cybercrime Prevention Act of 2012, Republic Act No. 10175, financial-account scamming under Republic Act No. 12010, or another special law. The correct charge is determined by investigators and prosecutors from the evidence; not every failed delivery or broken promise is automatically a crime.

A genuine business dispute may involve nonperformance without criminal intent. Criminal fraud generally requires proof of the legally required deceptive conduct and intent, not merely proof that a seller was late, unresponsive, or unable to perform.

If the scam involved identity theft or personal data

If the scammer used your name, photograph, identification document, or account to impersonate you, report the fake or compromised account to the platform and inform people who may receive messages from it.

Where a personal-information controller’s handling of your data may have violated the Data Privacy Act, or a data incident remains inadequately addressed, consider the complaint procedures of the National Privacy Commission. The NPC handles privacy and personal-data issues; it is not a substitute for reporting theft or fraud to the bank and law enforcement.

If your identity documents were exposed, preserve evidence of when and to whom they were sent. Monitor accounts opened or applications made in your name. Avoid sending additional selfies or IDs to anyone offering to “verify” or “recover” your account unless you have independently confirmed the official channel.

If an item arrived but was fake, unsafe, or materially different

Document the condition immediately. Photograph the sealed parcel, shipping label, opening process, contents, serial numbers, and packaging. Do not use an item that may be dangerous.

The Consumer Act of the Philippines, Republic Act No. 7394 and the Internet Transactions Act prohibit various deceptive or unfair sales practices and support consumer remedies in appropriate cases. Specialized regulators may have jurisdiction over particular goods—for example, the Food and Drug Administration for regulated health products.

Counterfeit, unsafe, or prohibited goods can raise issues beyond an ordinary refund. Report the listing to the platform and identify the product accurately in any government complaint. Do not destroy the item unless an authority directs you to do so; it may be evidence.

Common mistakes that weaken a report

Waiting for repeated promises. A scammer may use supposed processing delays to move or withdraw funds.
Sending more money. Taxes, clearance fees, verification deposits, release fees, and recovery charges are common ways to extend the loss.
Deleting or unsending messages. Save the complete record first.
Reporting only the profile name. Include the exact URL, username, account ID, payment details, and transaction reference.
Marking an order complete too early. This may release platform-held funds or shorten available remedies.
Exaggerating or guessing. Separate what you personally observed from what you suspect.
Assuming a DTI complaint is a criminal case. Consumer redress and criminal investigation are separate processes.
Paying a private “hacker” or recovery agent. Claims that someone can trace, freeze, or retrieve funds for an advance fee are often another scam.
Posting sensitive evidence publicly. Public accusations can expose private data and create separate legal risks. Send complete evidence through verified official channels.
Filing a knowingly false report. Republic Act No. 12010 penalizes malicious or bad-faith reports that cause funds to be held.

When help is urgent

Seek immediate assistance if:

unauthorized transfers are still occurring;
the scammer has control of your email, SIM, bank, wallet, or social-media account;
you disclosed an OTP, PIN, password, recovery code, or remote-access permission;
the scammer is threatening violence, extortion, or publication of intimate material;
a child, older person, or other vulnerable person is being targeted;
your identity is being used to solicit money from others;
a large sum, business account, payroll account, or multiple victims are involved; or
the scammer knows your home, workplace, or family’s location.

For an immediate threat to safety, contact emergency services or the nearest police station. For substantial loss, multiple victims, disputed liability, or possible court action, consult a Philippine lawyer promptly. A lawyer can assess the documents, identify the proper respondents and venue, and prevent a civil or criminal deadline from being missed.

A practical complaint outline

A concise report can follow this structure:

Who: Your name and contact details; the seller’s displayed identity and account identifiers.
Where: Platform, page, marketplace, website, or messaging service used.
What was promised: Item, service, condition, delivery date, price, and refund terms.
What happened: A dated, factual sequence of communications and events.
Payment: Amount, date, method, recipient account, and reference number.
Loss or risk: Money lost, unauthorized account access, identity exposure, or unsafe product.
Steps already taken: Reports to the seller, platform, financial institution, DTI, or police.
Requested action: Fund recall or hold, refund, account preservation, investigation, or another specific remedy.
Attachments: A numbered evidence list matching the facts in the report.

Keep the original records even after submitting copies.

Frequently asked questions

Should I report a small loss?

Yes. The amount may affect the practical route and potential charge, but a small payment can still be part of a larger pattern involving many victims. Preserve the evidence and report it accurately.

Can the bank reverse a transfer that I personally authorized?

Possibly, but not automatically. Authorization does not necessarily resolve whether deception occurred, and the institution may investigate the transaction under applicable law and its procedures. Recovery is less likely after funds have been withdrawn or transferred onward, so report immediately.

Must I wait seven days before going to the police?

The seven-calendar-day internal-redress rule in the Internet Transactions Act concerns covered consumer disputes. Do not postpone an urgent fraud alert, account-security action, or request for police assistance where money, evidence, or personal safety is at risk.

Is a marketplace automatically responsible for the scam?

No. The seller or online merchant is generally the primary party responsible. A platform may have subsidiary or solidary liability only when the statutory conditions are established—for example, specified failures of diligence, failure to supply contact details in the circumstances required by law, or failure after notice to remove prohibited, imminently injurious, unsafe, or dangerous goods.

What if I bought from an individual through Facebook or another social-media group?

A genuine consumer-to-consumer transaction is excluded from the Internet Transactions Act. You may still use the platform’s reporting system, dispute the payment, pursue an appropriate civil remedy, and report suspected fraud to law enforcement.

Can I report an anonymous or deleted account?

Yes. Provide every identifier you retained, including URLs, usernames, payment accounts, messages, timestamps, email addresses, phone numbers, and transaction references. A deleted public profile does not necessarily mean that all provider or financial records have disappeared.

Will reporting guarantee a refund or an arrest?

No. A refund depends on the payment trail, platform rules, available funds, contractual facts, and legal findings. An arrest or prosecution requires lawful investigation and sufficient evidence. A prompt, well-documented report improves the chance that records and remaining funds can be preserved.

Should I confront the scammer?

Usually, preserve the evidence and use official channels. Do not threaten, attempt to hack the account, arrange a dangerous personal meeting, or send more money. If investigators want further communication, follow their instructions.

Official references

This article provides general Philippine legal information, not legal advice for a particular case. Procedures and legal conclusions can depend on the transaction, evidence, payment method, identity of the parties, and applicable agency jurisdiction. Official sources and public reporting channels were checked on 19 September 2026.