Quick answer

If you have been scammed through an online shop, marketplace, messaging app, or social-media account, act immediately:

Contact your bank, e-wallet, card issuer, or payment provider through its official fraud channel. Ask whether the transfer can be stopped, recalled, disputed, or traced, and request a case number.
Report the seller and transaction inside the platform. Use the refund, dispute, buyer-protection, or “report account” function before any platform deadline expires.
Preserve the evidence before posts, messages, or accounts disappear.
Report the incident to law enforcement—the PNP Anti-Cybercrime Group, the NBI Cybercrime Division, or the Cybercrime Investigation and Coordinating Center.
File a consumer complaint with the DTI if the transaction involved a business or person regularly selling goods or services. A purely private, one-off consumer-to-consumer sale is generally outside the Internet Transactions Act, although fraud may still be reported to law enforcement.

Reporting does not guarantee that the money will be recovered. Speed matters because funds can be transferred again, accounts can be emptied, and online evidence can disappear.

First, secure your money and accounts

Do these steps as soon as you discover the scam:

Call the payment provider using the number in its official app, website, or the back of your card—not a number supplied by the seller.
State clearly that the transaction is connected to suspected fraud.
Give the amount, date and time, transaction or reference number, recipient name, account or wallet number, and the circumstances of the payment.
Ask whether the provider can place a hold, send a recall request, begin a chargeback or dispute, or alert the receiving institution.
Ask for a written acknowledgment and complaint reference number.
If your card, password, PIN, one-time password, recovery code, or login session may be compromised, block the card or account and change credentials from a trusted device.
Sign out other sessions, enable multi-factor authentication, and check for unauthorized transactions.
Tell your mobile network immediately if your SIM has stopped working unexpectedly or you suspect a SIM-swap attack.

A transfer that you personally authorized after being deceived may be handled differently from an unauthorized transaction made after an account takeover. Describe exactly what happened; do not label an authorized payment “unauthorized.”

If the provider does not resolve your complaint, you may escalate a complaint involving a BSP-supervised financial institution through the BSP Consumer Assistance Mechanism. The BSP expects consumers first to raise the concern with the bank, e-wallet issuer, or other supervised institution. Keep the institution’s response and your case number.

Preserve evidence before contacting the scammer again

Save complete, original records—not only cropped screenshots. Preserve:

The seller’s profile name, username, profile URL, page URL, account ID, phone number, email address, and stated address
The original listing, product description, advertised price, photos, livestream, and claimed warranties
The complete conversation, including dates, times, voice messages, deleted-message notices, and call logs
Order confirmations, invoices, receipts, shipping records, tracking details, and photos or an unboxing video
Bank, card, or e-wallet receipts showing the transaction reference, recipient, amount, date, and time
QR codes, payment links, account numbers, wallet numbers, and cryptocurrency addresses
The platform dispute, seller response, cancellation, refund refusal, and case number
Copies of any identification, permits, registration documents, or “proof” sent by the seller
Threats, demands for additional payment, phishing links, and messages asking for passwords or OTPs
A short chronological account written while events are fresh

Where possible, export the conversation or download your account data. Keep the original files and devices. Back up copies without altering filenames or metadata. Do not delete the chat simply because you have screenshots.

Do not publicly post your full receipt, address, ID, phone number, account number, QR code, or other sensitive information. Give unredacted copies only through verified official channels when necessary.

Report the account and transaction to the platform

Use the platform’s in-app reporting and buyer-protection process even if you also plan to go to the police. Platform action may preserve internal records, restrict the seller, or prevent further victims.

In your report:

Identify the exact order, listing, seller, and payment.
Explain briefly what was promised and what occurred.
State the remedy you want, such as cancellation, refund, replacement, or investigation.
Attach the strongest evidence in chronological order.
Ask the platform to preserve the seller’s account, transaction, login, and communication records for lawful investigation.
Keep screenshots of every submission and save the ticket number.

Follow the platform’s displayed dispute or return deadline. These contractual deadlines vary and may be much shorter than the period for pursuing a legal claim. Do not close a dispute merely because the seller promises to refund you outside the platform. Close it only after cleared funds are actually restored and you understand the consequence of closing the case.

Report the scam to law enforcement

A false listing, nonexistent item, impersonated seller, account takeover, phishing scheme, or deliberate collection of payment without an intention to deliver may support a criminal investigation. The precise offense—such as estafa, computer-related fraud, identity theft, or an offense involving financial-account scamming—depends on the evidence and how the scheme operated.

You may report through one or more of these official channels:

NBI Cybercrime Division: Use the NBI Online Complaint page or visit the Cybercrime Division or an NBI regional or district office. The NBI’s published procedure says a complainant may be interviewed and asked to execute a sworn statement and submit supporting documents. See the NBI service guide for computer-crime victims.
PNP Anti-Cybercrime Group: File through the official PNP-ACG website or go to the nearest Anti-Cybercrime Group office or police station for referral.
Cybercrime Investigation and Coordinating Center: Report through the CICC website or its published cybercrime-reporting channels. CICC may assess and refer matters to the appropriate investigative agency.
Department of Justice: The DOJ maintains official information on reporting cybercrime incidents.

An initial online report or hotline call may not complete a formal criminal complaint. Investigators may require personal appearance, identity verification, original evidence, device examination, and a complaint-affidavit or sworn statement.

Tell the investigator if:

The recipient account may still contain the funds
The scammer is communicating with you now
Other victims have been identified
The seller is threatening, blackmailing, or stalking you
Your identity documents or financial credentials were taken
A child, older person, or otherwise vulnerable person is at immediate risk
The account, post, or conversation is about to disappear

Do not attempt a personal confrontation, “entrapment,” hacking, doxxing, or recovery operation. Coordinate with law enforcement.

When to file a DTI consumer complaint

The Internet Transactions Act of 2023 applies generally to business-to-consumer and business-to-business internet transactions where a party is in the Philippines or the online business is availing itself of the Philippine market and has sufficient contacts here. It covers digital platforms, including social-media platforms used for selling.

For a complaint against an online merchant, e-retailer, or person selling in the ordinary course of business:

First demand a remedy from the seller and use the platform’s redress process.
If unresolved, file electronically through the DTI Consumer CARe System.
Attach proof of purchase, communications, payment records, the seller’s identifying details, and your prior demand.
State the specific remedy requested.
Retain the acknowledgment and attend scheduled mediation or other proceedings.

DTI proceedings address consumer-law compliance and remedies. They do not replace a criminal complaint when there was deliberate fraud, identity theft, account hacking, or another possible crime.

The private-seller exception

The Internet Transactions Act expressly excludes consumer-to-consumer transactions—generally, private transactions between end-users for personal, family, or household purposes and not made in the ordinary course of business.

That exclusion does not make fraud lawful. If a supposed private seller used deceit to obtain your money, report the incident to the platform, payment provider, and law enforcement. DTI coverage may also depend on the seller’s actual activity, not merely a claim that the seller is a “private individual.” Repeated listings, inventory, business branding, or regular sales may be relevant.

What Philippine law may apply

The legal classification is fact-specific:

Estafa or swindling: Deceit used to obtain money or property may fall under Article 315 of the Revised Penal Code, depending on the representations, reliance, loss, and surrounding facts.
Cybercrime offenses: The Cybercrime Prevention Act of 2012 covers offenses such as computer-related fraud, computer-related forgery, illegal access, and computer-related identity theft. An ordinary bad sale is not automatically computer-related fraud; the statutory elements must be proved.
Financial-account scamming: Schemes involving money-mule accounts, social engineering, or the misuse of financial accounts may be investigated under the Anti-Financial Account Scamming Act, depending on what participants did and knew.
Online consumer protection: The Internet Transactions Act imposes duties on covered merchants and platforms and supplements other consumer-protection laws.
Electronic evidence: Philippine rules recognize electronic documents and data, but authenticity and integrity remain important. This is why original messages, files, devices, and transaction records should be preserved.

A delayed shipment, product defect, misunderstanding, or broken promise is not necessarily criminal fraud. Investigators and prosecutors will look for evidence of deceit or fraudulent intent, while DTI may address the consumer dispute even when criminal intent cannot be established.

Is the marketplace or social-media platform liable?

Not automatically.

Under the Internet Transactions Act, the obligations and possible liability of a digital platform depend on its role, knowledge, participation, and compliance with statutory duties. An e-marketplace that controls important parts of the transaction may have different responsibilities from a social-media service that merely carried a post or message.

The Act provides circumstances in which an e-marketplace may be subsidiarily liable with an online merchant, including specified failures involving required merchant information or the platform’s handling of transactions. Liability cannot be determined from the fact that the scam occurred “on Facebook,” “on TikTok,” or on a marketplace alone. The platform’s records, terms, notices, and actual involvement matter.

Deadlines and timing

There is no single deadline covering every scam report. Different periods may apply to:

Platform buyer-protection and return requests
Card chargebacks and payment disputes
Consumer administrative complaints
Criminal offenses
Civil actions
Requests to preserve electronic records

Do not wait for one process to finish before starting another if delay may prejudice your rights. Platform records and service-provider data may be retained only for limited periods. Under the Cybercrime Prevention Act, specified traffic data and subscriber information are preserved for a minimum statutory period, while content data is subject to different preservation rules and lawful orders. Victims should still report promptly; the law’s preservation provisions are not a promise that every post or message remains available indefinitely.

If a substantial amount is involved, the scammer is identifiable, a platform deadline is near, or months have already passed, consult a Philippine lawyer promptly about the applicable prescriptive period and the correct forum.

What to include in a complaint-affidavit

If investigators ask for an affidavit, present facts in chronological order:

Your name and contact details
When and where you saw the listing or received the approach
The representations that caused you to transact
The seller’s account and identifying information
What you ordered and agreed to pay
How, when, and to whom payment was sent
What happened after payment
Your demands and the seller’s responses
The amount or property lost
The evidence attached and how you obtained it

Use exact dates, quotations only when supported by the original message, and clear labels for attachments. Do not exaggerate, speculate about identities, or describe facts you did not personally observe. If another person owns the paying account or conducted part of the conversation, tell the investigator; that person may also need to provide records or a statement.

Common mistakes to avoid

Waiting for repeated promises while dispute windows expire
Continuing to send “verification,” “release,” “tax,” “insurance,” or “recovery” payments
Trusting a supposed bank employee who contacts you after the scam
Giving an OTP, PIN, password, screen-sharing access, or remote-control access
Deleting the conversation or blocking the account before saving evidence
Editing screenshots so heavily that dates, URLs, and account identifiers disappear
Reporting only the display name, which the scammer can easily change
Sending evidence to unofficial social-media pages posing as government offices
Paying a stranger who claims to be a police officer, hacker, lawyer, or “fund recovery agent”
Publicly accusing an unverified individual or posting their personal data
Assuming a barangay report, platform report, DTI complaint, or bank complaint automatically starts a criminal case
Filing inconsistent versions of events with different institutions

When help is urgent

Seek immediate assistance if:

Money has just been transferred and may still be recoverable
Your bank, e-wallet, email, or social-media account has been taken over
Your SIM suddenly lost service after you disclosed personal information
The scammer has your ID, selfie, signature, card image, passwords, or OTP
You are being threatened or blackmailed
The scam involves a child, intimate material, trafficking, weapons, or physical danger
The loss is substantial or involves borrowed money, company funds, or multiple victims
You are being pressured to move funds or receive money for someone else

For immediate physical danger, contact local emergency services or the nearest police station. For compromised accounts, secure them first from a trusted device and notify the relevant provider without delay.

Frequently asked questions

Can I report a scam even if I sent the money voluntarily?

Yes. A payment may have been authorized but obtained through deception. Give the payment provider and investigators an accurate account of how you were induced to send it. Recovery rights may differ from those for a transaction made without your authorization.

Can I report an attempted scam even if I lost no money?

Yes. Report the account to the platform and preserve the messages, links, numbers, and payment instructions. Law-enforcement agencies can assess whether the conduct warrants investigation. Do not engage further merely to obtain more evidence.

Should I report to DTI or the police?

Often, both—but they serve different purposes. DTI handles covered consumer transactions and administrative remedies. The PNP and NBI investigate possible crimes. Report to the payment provider and platform as well.

What if the seller used a fake name?

Report every identifier you have: profile URL, username, account ID, phone number, payment account, transaction reference, QR code, email address, delivery details, and device or login information visible to you. Investigators can pursue subscriber or account records only through lawful procedures.

What if I bought from a private Facebook user?

A genuine one-off consumer-to-consumer sale is generally excluded from the Internet Transactions Act. You may still use Facebook’s reporting tools, dispute the payment where available, and file a criminal complaint if there was fraud. If the seller regularly conducts business, give DTI evidence of that activity.

Will a police report automatically return my money?

No. A report may support investigation, account tracing, preservation requests, or later proceedings, but recovery depends on where the funds went, available evidence, provider rules, and legal process.

Can I post the scammer’s identity online?

Be cautious. Accounts, IDs, and photos can be stolen or impersonated. Public accusations can expose an innocent person’s personal data and create legal risk. Give the evidence to the platform, financial institution, DTI, and law enforcement.

Do I need a lawyer?

Not always for an initial report or consumer complaint. Legal help becomes especially important when the amount is substantial, the facts are complex, the suspect is abroad, multiple victims or companies are involved, you are asked to execute technical affidavits, or a filing deadline may be approaching.

Official resources

This article provides general legal information, not advice for a particular case. Rights, deadlines, jurisdiction, and remedies depend on the transaction, documents, payment method, and alleged conduct. Official sources and procedures were checked as of September 15, 2026.