How to Report an Online Shopping or Social Media Scam

Quick answer

If you paid an online seller or social-media account and believe you were scammed, act immediately:

  1. Contact your bank, card issuer, or e-wallet through its official fraud channel. Ask it to flag the transaction, secure your account, and determine whether the transfer can be stopped, disputed, traced, or temporarily held.
  2. Open a dispute with the shopping platform or social-media service. Report both the transaction and the seller’s account or listing. Keep the case number.
  3. Preserve all evidence before posts, messages, or accounts disappear.
  4. Report the incident to the PNP Anti-Cybercrime Group or the NBI. A criminal complaint may require a personal appearance, identification, an affidavit, and original or authenticated supporting records.
  5. For a business-to-consumer transaction, use the seller’s or platform’s internal complaint system first. If the complaint remains unresolved after seven calendar days, you may bring the consumer complaint to the Department of Trade and Industry through the DTI Consumer CARe System.
  6. If your complaint against a bank or BSP-supervised e-wallet remains unresolved, escalate it to the Bangko Sentral ng Pilipinas.

These routes serve different purposes. A platform dispute may produce a refund or remove a listing. DTI handles consumer redress and regulatory violations within its jurisdiction. The bank or e-wallet handles the payment and account-security problem. The PNP and NBI investigate possible crimes. Filing with one does not necessarily replace the others.

First: protect the money and your accounts

Time matters because transferred funds may be withdrawn or moved through several accounts.

Call the financial institution immediately

Use only the telephone number in the institution’s official app, website, card, or account statement. Do not call a number sent by the suspected scammer or found in an unverified social-media comment.

Tell the institution:

  • that the transaction is disputed and may involve fraud;
  • the exact amount, date, time, reference number, and recipient account;
  • whether you personally authorized the payment;
  • whether you disclosed an OTP, password, PIN, card details, identification document, or other credentials;
  • whether your phone, email, social-media account, or banking account may have been compromised; and
  • what immediate remedy you are requesting, such as an account freeze, card blocking, credential reset, payment dispute, fund recall, or coordination with the recipient institution.

Ask for a reference number and written confirmation. Record the date, time, channel used, and name or identifier of the representative.

Under the Anti-Financial Account Scamming Act, Republic Act No. 12010, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction under applicable BSP rules. The statutory holding period cannot exceed 30 calendar days unless extended by a competent court. This does not guarantee that funds will still be available or that the victim will automatically receive a refund.

The same law may apply to money-mule activity and certain social-engineering schemes involving deceptive acquisition of sensitive identifying information followed by unauthorized access to a financial account. An ordinary seller dispute or non-delivery case does not automatically fall within those provisions.

Secure anything the scammer may have accessed

If you shared credentials or clicked a suspicious link:

  • change the affected password using a clean, trusted device;
  • change any reused passwords;
  • sign out other sessions;
  • enable multi-factor authentication;
  • block the card or account if advised by the provider;
  • review recent transactions and linked devices;
  • remove unknown recovery emails, phone numbers, or authorized applications;
  • contact your mobile provider if your SIM suddenly lost service; and
  • monitor other accounts for unauthorized activity.

Never give an OTP, PIN, password, card CVV, or screen-sharing access to anyone claiming that these are needed to process a refund or reverse the scam.

Preserve evidence before reporting the account

Capture the evidence before blocking the seller or asking the platform to remove the content. A screenshot is useful, but retaining the original message, email, receipt, file, device, and account history is better.

Preserve:

  • the seller’s profile name, username, profile URL, user ID if visible, and phone numbers;
  • the full listing, advertisement, livestream, or product page;
  • the price, product description, claimed condition, delivery promise, and refund terms;
  • your complete conversation, including dates and timestamps;
  • order confirmations, invoices, receipts, waybills, and tracking information;
  • payment confirmations and transaction reference numbers;
  • the recipient’s account name, account number, e-wallet number, QR code, bank, or payment link;
  • emails, SMS messages, caller numbers, and voicemail;
  • links and screenshots showing the browser address bar;
  • proof of attempts to obtain delivery, replacement, or refund;
  • the platform, bank, or e-wallet complaint numbers and responses;
  • the package, label, and an unedited opening video if an empty, counterfeit, or different item arrived; and
  • the suspected scammer’s other accounts or listings, without engaging further.

Export chats where the application permits it. Keep unedited copies and make backups. Do not crop away timestamps, usernames, URLs, transaction references, or other context. Prepare a short chronology stating what happened, when it happened, what was represented, why you relied on it, how much you paid, and what occurred afterward.

Do not publicly post the scammer’s alleged home address, identification documents, bank records, or unrelated personal data. Give sensitive evidence directly to the platform, financial institution, lawyer, or authorities.

Report the seller to the platform

Use the platform’s internal order-dispute or buyer-protection process if the purchase occurred through an e-marketplace. Separately report the seller’s account, listing, or advertisement for fraud, impersonation, prohibited goods, or another applicable violation.

Request the specific remedy supported by the facts:

  • cancellation before release of payment;
  • refund;
  • replacement;
  • return at no cost to you where legally applicable;
  • preservation of account and transaction records;
  • removal of the fraudulent listing; or
  • restriction of the seller’s account.

Do not close the dispute merely because the seller promises an off-platform refund. Do not mark an undelivered order as received. Avoid moving the conversation or payment outside the platform because doing so may affect buyer-protection remedies.

For covered business-to-consumer transactions, the Internet Transactions Act of 2023, Republic Act No. 11967 requires digital platforms, e-marketplaces, e-retailers, and online merchants to maintain applicable redress mechanisms. An aggrieved party must ordinarily use that internal mechanism before filing a complaint with a court or appropriate government agency. It is deemed exhausted if the matter remains unresolved seven calendar days after filing.

That seven-day rule concerns exhaustion of the internal redress process. It is not a reason to delay an urgent fraud report to the bank or law-enforcement authorities.

File a consumer complaint with DTI

DTI is an appropriate route when the transaction is between a consumer and a person acting as an online business, merchant, or retailer and the issue falls within DTI’s jurisdiction—for example:

  • paid goods were not delivered;
  • the item materially differs from its description;
  • the seller refuses a legally available repair, replacement, or refund;
  • the advertisement or sales practice was deceptive, unfair, or unconscionable; or
  • the online merchant or platform failed to comply with applicable e-commerce duties.

File electronically through the DTI Consumer CARe System. DTI’s official e-commerce guidance also identifies its consumer-complaint channels.

Include:

  • your full name and contact details;
  • the seller’s business name, online name, address, and contact details, if known;
  • the platform and listing URL;
  • a clear chronological statement;
  • the amount paid and payment method;
  • the remedy requested;
  • proof of purchase and payment;
  • relevant chats, advertisements, photographs, and delivery records; and
  • proof that you used the seller’s or platform’s internal redress mechanism, together with its response or evidence that seven calendar days passed without resolution.

The Internet Transactions Act recognizes repair, replacement, refund, and other remedies where goods are defective, malfunctioning, lost without the consumer’s fault, or fail to conform to a warranty or contractual obligation. The correct remedy still depends on the transaction and evidence; dissatisfaction or change of mind alone does not necessarily create a refund right.

A damages claim under the Internet Transactions Act may be filed before a court or DTI within two years from the time the cause of action arose. Other claims or offenses may have different prescriptive periods. Report promptly rather than relying on the longest possible period.

Important exception for private sellers

The Internet Transactions Act does not cover a genuine consumer-to-consumer transaction—such as a private individual making an occasional personal sale outside the ordinary course of business. DTI jurisdiction may therefore depend on whether the seller was actually acting as a business.

A private-sale scam may still be reported to the platform, payment provider, PNP, or NBI and may create civil or criminal liability under other laws.

Escalate an unresolved bank or e-wallet complaint to BSP

Raise the issue with the financial institution first. If it remains unresolved, use the BSP Consumer Assistance Mechanism.

You may use the BSP Online Buddy or submit the BSP Complaints, Inquiries and Requests Form to consumeraffairs@bsp.gov.ph. Attach:

  • a concise summary of the complaint;
  • the resolution you want;
  • your daytime contact details;
  • your complaint to the financial institution;
  • the institution’s response, if any; and
  • relevant supporting documents.

BSP consumer assistance addresses complaints involving BSP-supervised financial institutions. It is not a substitute for immediately notifying the institution’s fraud team, and it does not itself replace a criminal complaint.

Report the possible crime to the PNP or NBI

Republic Act No. 10175 assigns cybercrime law enforcement to the PNP and NBI. You may approach the PNP Anti-Cybercrime Group, a regional or local cybercrime unit, or the NBI Cybercrime Division or an NBI regional or district office. The NBI also maintains an official Report to NBI portal.

Bring or prepare:

  • at least one valid government-issued ID;
  • your chronology of events;
  • printed and electronic copies of the evidence;
  • proof of payment and recipient-account details;
  • the device containing the original messages, if requested;
  • platform and financial-institution case numbers; and
  • an affidavit or complaint-affidavit, if required.

State facts within your personal knowledge. Identify which statements are based on records or information from others. Do not guess the offender’s identity merely because a name appeared on a bank or social-media account; the account may have been stolen, fabricated, or used as a money mule.

A complaint may involve estafa or another offense under the Revised Penal Code, a cybercrime-related offense under Republic Act No. 10175, an offense under the Anti-Financial Account Scamming Act, identity theft, illegal access, forgery, or another law. The proper charge depends on the evidence and the precise conduct. Non-delivery by itself does not conclusively establish criminal fraud; investigators must distinguish deception existing at the time of payment from a later contractual failure or legitimate delivery dispute.

Law-enforcement authorities may use formal legal processes to obtain subscriber, traffic, financial, or account information. A victim usually cannot compel a platform or bank to disclose another person’s protected records directly.

When a report is urgent

Contact the bank or e-wallet and law enforcement without delay when:

  • money was transferred recently and may still be traceable;
  • unauthorized transactions are continuing;
  • the scammer obtained an OTP, password, PIN, card details, ID image, selfie, or biometric information;
  • your email, social-media, mobile, or financial account was taken over;
  • your SIM suddenly stopped working;
  • the scam involves threats, extortion, intimate images, a child, trafficking, or immediate physical danger;
  • the scammer is impersonating you and soliciting money from your contacts;
  • several victims or mule accounts appear to be involved; or
  • the seller is deleting accounts, messages, or listings.

For immediate danger, contact emergency services or the nearest police station. If an account has been compromised, warn affected contacts through a separate trusted channel.

Common mistakes that weaken a complaint

Waiting for the scammer’s repeated promises

A promise to refund “tomorrow” may simply give the recipient time to move the funds. Report the payment while continuing lawful efforts to resolve the matter.

Deleting or editing the conversation

Blocking the account before preserving the full record can remove important identifiers. Keep original, unedited evidence.

Sending more money

Do not pay a supposed release fee, verification charge, tax, insurance payment, anti-money-laundering fee, or refund-processing fee without independently confirming its legitimacy.

Treating every dispute as identical

A wrong item, unauthorized card transaction, hacked account, business-to-consumer violation, and deliberate private-sale scam may require different remedies and agencies.

Reporting only to social media

A platform report may remove an account but will not necessarily recover funds or begin a criminal investigation.

Publishing accusations and personal data

Publicly naming someone without reliable proof can expose the victim to privacy, harassment, or defamation issues and may alert the offender. Submit evidence through official channels.

Paying a “recovery agent”

Be cautious of anyone who guarantees recovery, claims insider access, or demands cryptocurrency or advance fees. Verify lawyers through the Supreme Court’s official lawyer records and verify public officers through their agency’s official contact details.

What outcomes are realistically possible?

Depending on timing, evidence, jurisdiction, and the location of the funds or offender, authorities or providers may:

  • stop or temporarily hold a disputed transfer;
  • reverse or refund an eligible payment;
  • require repair, replacement, refund, or another consumer remedy;
  • remove a listing or restrict an account;
  • preserve and lawfully disclose account records;
  • investigate and identify suspects;
  • refer the matter to another agency or prosecutor; or
  • pursue administrative, civil, or criminal proceedings.

No report guarantees recovery, arrest, prosecution, or conviction. Fast reporting, complete transaction details, and preserved original evidence materially improve the ability of institutions and investigators to act.

Frequently asked questions

Should I report even if the amount is small?

Yes. There is no minimum loss required simply to report suspected fraud to the platform, financial institution, PNP, or NBI. A small transaction may be connected to many other victims. Whether a case proceeds, and under what procedure or offense, depends on the evidence and applicable law.

Can I report a scammer whose real name I do not know?

Yes. Provide the usernames, URLs, phone numbers, payment details, transaction references, and other identifiers you have. Platforms and financial institutions may disclose protected records only through lawful processes.

Can the bank or e-wallet automatically return my money?

No. Recovery depends on factors such as whether the funds remain available, the payment method, whether the transaction was authorized, the institution’s investigation, applicable rules, and the facts of the fraud. Report immediately and request a written decision.

Must I wait seven days before going to the police?

No. The seven-calendar-day period under the Internet Transactions Act concerns exhaustion of a covered platform’s or seller’s internal redress mechanism before a consumer complaint, court action, or alternative dispute resolution. It should not be treated as a waiting period for urgent fraud containment or criminal reporting.

What if I voluntarily sent the payment?

A voluntary transfer does not automatically mean there was no scam. The question may be whether fraud or deceit induced the payment. Tell investigators exactly what was represented before you paid and provide the supporting messages or advertisement.

What if the transaction happened through Facebook Marketplace or another social network?

Report the account and listing to the social network, notify the payment provider, and consider a PNP or NBI complaint. DTI coverage depends in part on whether the seller was acting as an online merchant or business rather than as a private consumer making an occasional sale.

What if the seller is abroad?

Report through the same channels. The Internet Transactions Act can apply to certain foreign businesses availing themselves of the Philippine market, while cybercrime laws contain jurisdictional and international-cooperation provisions. Practical enforcement and recovery may nevertheless be more difficult.

Do I need a lawyer?

Not necessarily for an initial platform, bank, DTI, PNP, or NBI report. Legal help is advisable when the loss is substantial, multiple accounts or victims are involved, the facts may expose you to liability, a complaint is rejected on jurisdictional grounds, you need court relief, or you are preparing a sworn complaint you do not fully understand.

Official references

This article provides general legal information, not legal advice, and does not create an attorney-client relationship. Procedures and the appropriate remedy depend on the transaction, available documents, payment method, and conduct involved. Official sources and reporting channels were checked as of 15 September 2026.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.