Quick answer

If you believe you were scammed through an online shop, marketplace, messaging app, or social media account, act immediately:

Contact your bank, card issuer, e-wallet, remittance company, or payment platform and request that the transaction be traced, blocked, recalled, or disputed, if still possible.
Report the seller, listing, account, and transaction through the platform’s official complaint or dispute system.
Preserve the complete digital trail before the account or listing disappears.
Report suspected fraud to the Philippine National Police Anti-Cybercrime Group (PNP-ACG) or the National Bureau of Investigation (NBI).
For a business-to-consumer purchase, file a consumer complaint with the Department of Trade and Industry (DTI) if the seller or platform does not resolve it.
If the scam exposed personal data or compromised an account, secure your accounts and consider reporting the privacy issue to the National Privacy Commission (NPC).

A report does not guarantee that money will be recovered. Recovery often depends on how quickly the payment provider is notified, whether the funds remain traceable, the payment method used, and the available evidence.

First, identify what happened

Not every failed online transaction is automatically a criminal scam. The proper remedy depends on the facts.

A transaction may be primarily a consumer dispute when, for example:

an item was delivered late;
the product was defective or materially different from its description;
the seller refuses a valid refund, replacement, repair, or warranty claim; or
the seller remains identifiable and the disagreement concerns performance of the sale.

It may indicate fraud or estafa when there is evidence that the seller used deceit to obtain money, such as:

offering goods that apparently never existed;
using a false identity, fabricated reviews, or altered proof of shipment;
taking payment and immediately blocking the buyer;
impersonating a legitimate shop, brand, courier, bank, or government office;
sending a fake payment or refund link to steal login details or one-time passwords;
repeatedly collecting payments through different accounts without delivering; or
inducing the buyer to send additional “release,” “insurance,” “tax,” or “verification” fees based on false claims.

The distinction is fact-sensitive. Non-delivery alone does not conclusively prove criminal intent, but it can form part of the evidence.

What to do immediately

1. Call the payment provider

Use only the bank, card issuer, e-wallet, remittance company, or payment app’s verified website, app, hotline, or branch. Do not use a number or link supplied by the suspected scammer.

Give the provider:

the transaction date, time, amount, and reference number;
the recipient’s name, account number, mobile number, or wallet identifier;
a short explanation of how you were deceived;
any police, platform, or complaint reference number already available; and
a clear request to flag the recipient account and determine whether a hold, recall, reversal, chargeback, or other dispute process is available.

Different payment methods have different rules. A bank transfer, card payment, e-wallet transfer, cash-on-delivery transaction, and cryptocurrency transfer are not treated identically. Do not assume a payment can be reversed, and do not wait for the seller’s promised refund before notifying the provider.

If you disclosed a password, PIN, one-time password, card security code, recovery code, or identity document, say so expressly. Ask the provider to secure affected accounts and replace compromised credentials or cards.

If the financial institution does not adequately address your complaint, follow its formal consumer-assistance process. The Bangko Sentral ng Pilipinas generally acts as a second-level recourse for complaints involving BSP-supervised financial institutions, so complain to the institution first and keep its response or case number. See the BSP Consumer Assistance Mechanism and the protections in the Financial Products and Services Consumer Protection Act.

2. Secure your accounts and device

If you clicked a suspicious link or disclosed credentials:

change passwords using a trusted device;
use a different, unique password for each important account;
sign out of unfamiliar sessions;
enable multi-factor authentication;
remove unknown recovery emails, phone numbers, devices, and app permissions;
lock or replace affected cards;
check for unauthorized transactions;
notify contacts if the scammer may impersonate you; and
have the device checked if you installed an unknown app or remote-access program.

Never give an OTP or approve a login request to someone claiming that this is necessary to “reverse” the scam.

3. Preserve evidence before reporting the account

Save the evidence first. A platform may remove the listing or suspend the account after a report, making some information harder to retrieve.

Preserve:

screenshots and, where possible, screen recordings showing the full conversation;
the account’s exact username, profile name, profile link, user ID, shop name, and page URL;
the listing URL, description, price, photographs, claimed location, and seller ratings;
order confirmations, invoices, receipts, tracking details, and delivery records;
payment confirmations and transaction reference numbers;
recipient bank, wallet, mobile, remittance, or cryptocurrency details;
emails and message headers, if available;
phone numbers, email addresses, QR codes, and links used;
proof of promises, representations, refund demands, and the seller’s response;
photographs and an unboxing video if an empty, counterfeit, damaged, or different item arrived; and
the date and time of each event.

Keep original files. Do not crop away timestamps, URLs, usernames, transaction identifiers, or surrounding context. Make a backup in another secure location.

Do not publicly post unredacted IDs, account numbers, home addresses, signatures, or other sensitive information. Give complete copies directly to the proper institution or investigator.

Report through the platform

Use the marketplace or social media platform’s official reporting and dispute tools. Report both the specific listing or message and the seller’s account, where possible.

Ask for:

cancellation, refund, or buyer-protection review;
preservation of account and transaction records;
removal of the fraudulent listing;
restriction of the suspected account; and
a complaint or ticket number.

For transactions covered by the Internet Transactions Act, an aggrieved party generally must first use the platform, e-marketplace, or e-retailer’s internal redress mechanism before filing the consumer dispute with a court or appropriate government agency. The mechanism is deemed exhausted if the complaint remains unresolved after seven calendar days from filing.

That rule should not be read as a reason to delay an urgent payment-provider notice, account-security action, or report of suspected crime or immediate danger.

Under the Internet Transactions Act of 2023, covered platforms must provide an effective and responsive mechanism for reporting unlawful users or information. The law also requires covered online merchants and platforms to provide specified identifying or contact information and imposes duties concerning consumer redress and transaction records.

Report suspected crime to law enforcement

You may report the incident to the:

PNP Anti-Cybercrime Group e-Complaint service or the nearest police station or PNP-ACG office; or
National Bureau of Investigation, including its Cybercrime Division or an appropriate regional or district office.

The Department of Justice cybercrime-reporting page is another official reference for reporting cybercrime incidents.

Bring or submit:

a valid identification document;
a chronological account of what happened;
the amount lost and payment details;
the suspected person’s known identifiers;
copies of the preserved evidence;
platform and payment-provider complaint numbers; and
any other records requested by the investigator.

Be accurate. Separate what you personally saw from what you inferred. If you do not know the scammer’s legal name, provide the usernames, URLs, recipient accounts, phone numbers, and other identifiers you do know. Investigators may need lawful process to obtain subscriber, platform, or financial records.

Online deception may fall under estafa provisions of the Revised Penal Code, depending on the manner of deceit and resulting damage. When an offense under the Revised Penal Code or a special law is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act of 2012 may also apply. The prosecutor and courts—not the complainant or platform—determine the proper charge and whether the evidence establishes criminal liability.

File a DTI consumer complaint when applicable

For a purchase from a business or person acting as an online merchant, use the seller or platform’s internal complaint process first and retain proof of the filing date. If the matter remains unresolved after seven calendar days, you may file through the DTI Consumer Care system or seek assistance from the appropriate DTI office.

Include:

your contact details;
the merchant’s business name and available contact information;
the order and payment records;
the platform complaint and response;
a clear statement of the problem; and
the specific remedy requested, such as refund, replacement, or repair.

The Internet Transactions Act recognizes repair, replacement, refund, and other remedies available under the Consumer Act and other applicable laws when goods are defective, lost without the consumer’s fault, or fail to conform to the contract or warranty.

The Act generally covers business-to-business and business-to-consumer internet transactions connected with the Philippine market. It expressly excludes consumer-to-consumer transactions. A casual purchase from another private individual may therefore fall outside that Act even though criminal, civil, payment-dispute, and platform remedies may still be available.

For claims for damages under the Internet Transactions Act, the law states a two-year period from the time the cause of action arose. Other causes of action may have different limitation or prescription periods. Do not delay while trying to classify the claim yourself.

If personal data was misused

A scam may also involve a privacy violation—for example, unauthorized use of an identity document, takeover of an account, unlawful disclosure of personal information, or misuse of data collected during a transaction.

Preserve proof of the collection, disclosure, impersonation, or unauthorized access. Report the compromised account to the relevant platform and notify affected financial institutions.

Information about complaints and official forms is available from the National Privacy Commission. A privacy complaint is separate from a criminal complaint and does not replace an urgent report to the bank, platform, police, or NBI.

What remedies may be available?

Depending on the facts, possible remedies include:

a platform refund or buyer-protection remedy;
reversal, recall, chargeback, or other payment dispute, if permitted;
repair, replacement, or refund under consumer law;
damages through a DTI proceeding or court action where legally available;
a civil claim against an identifiable responsible party; and
criminal investigation and prosecution.

The online merchant or e-retailer is generally primarily liable for consumer claims arising from a covered internet transaction. A platform’s liability is not automatic. Under the Internet Transactions Act, subsidiary or solidary liability may arise only under specified circumstances—for example, particular failures to exercise ordinary diligence, provide required information, or act after notice concerning prohibited or dangerous goods.

Whether any defendant is liable depends on the transaction, the platform’s role, the notices it received, the documents, and the proof of loss.

Common mistakes to avoid

Waiting for repeated promises. A scammer may promise a refund to buy time while funds are withdrawn or records disappear.
Deleting or blocking too early. Preserve evidence first, then secure and report the account.
Sending more money. Do not pay a “release,” “recovery,” “verification,” “lawyer,” or “investigator” fee to an unverified person.
Trusting recovery agents. Someone who guarantees recovery or asks for an advance payment may be running a second scam.
Editing screenshots. Cropped, annotated, or re-saved images may omit useful identifiers. Retain originals.
Reporting only to the platform. Platform action may stop an account but does not necessarily notify the payment provider or law enforcement.
Reporting only to the bank. A financial complaint does not automatically begin a criminal investigation.
Exaggerating facts. Inconsistencies can weaken an otherwise valid complaint.
Posting sensitive evidence publicly. Public accusations may expose personal data, alert the suspect, or create separate legal problems.
Assuming a verified badge guarantees recovery. Verification measures may help identify an account, but they do not establish that every transaction is legitimate.

When help is urgent

Seek immediate assistance if:

unauthorized transactions are still occurring;
the scammer has access to your bank, e-wallet, email, or social media account;
you disclosed an OTP, PIN, password, recovery code, or card security code;
identity documents, facial images, or signatures may be used for impersonation;
the scammer is threatening violence, blackmail, or publication of intimate material;
a child, older person, or otherwise vulnerable person is being targeted;
several victims or a large coordinated scheme appear to be involved;
the platform or financial provider is about to close a dispute; or
a legal filing period, subpoena, hearing, or official deadline may apply.

For immediate threats to safety, contact emergency services or the nearest police station. For a substantial loss, complicated evidence, an overseas suspect, or uncertainty about civil and criminal remedies, consult a Philippine lawyer promptly.

FAQ

Can I report a scam if I do not know the seller’s real name?

Yes. Preserve and submit every available identifier, including usernames, profile and listing URLs, phone numbers, email addresses, recipient accounts, transaction references, and delivery information. Authorities may need legal process to identify the person behind an account.

Should I report to DTI or the police?

Often both, but for different purposes. DTI handles covered consumer and e-commerce disputes. The PNP or NBI investigates suspected crime. A complaint to one does not necessarily substitute for a complaint to the other.

Must I wait seven days before reporting to the police?

Do not delay urgent account-security measures, payment-provider notices, or reports of suspected crime or danger. The seven-calendar-day rule concerns exhaustion of the internal redress mechanism for covered disputes under the Internet Transactions Act.

Can the bank or e-wallet automatically return my money?

No. Availability of a recall, reversal, chargeback, or reimbursement depends on the payment method, provider rules, timing, authorization details, and investigation. Report immediately and ask for a written case reference.

What if I paid voluntarily because the seller deceived me?

A transfer being technically authorized does not by itself resolve whether fraud occurred. Explain exactly what false representation induced the payment. The payment provider, investigators, prosecutor, and courts will assess the evidence under the applicable rules.

What if the seller eventually delivers an item?

Late delivery may affect the available remedies and the assessment of criminal intent, but it does not necessarily resolve a complaint if the item is counterfeit, materially different, unsafe, defective, or incomplete. Preserve the packaging, item, delivery records, and unboxing evidence.

Can I report a social media account that merely advertised the transaction?

Yes. Report the post and account to the platform and include them in your complaint. Whether the platform or account owner has legal liability depends on its role, knowledge, conduct, and the applicable law.

Should I confront or publicly expose the suspected scammer?

Generally, preserve evidence and use official reporting channels. Confrontation can cause deletion of records, movement of funds, retaliation, or further deception. If you warn others, avoid publishing sensitive information or making claims that go beyond documented facts.

Official references

This article provides general legal information, not legal advice, and cannot determine the proper remedy for a particular transaction without reviewing its facts and documents. Official sources and public reporting channels were checked as of September 15, 2026; agency procedures and online channels may change.