Quick answer
If you paid an online seller or social-media account and suspect fraud, report it immediately in this order:
- Contact your bank, e-wallet, card issuer, or payment provider through its official 24/7 fraud channel. Ask it to secure your account, record the transaction as disputed, trace the transfer, and—when legally applicable—initiate the temporary holding and coordinated verification process for disputed funds.
- Open a dispute with the shopping platform or report the seller’s account to the social-media platform. Request a refund, preservation of account and transaction records, and restriction of the fraudulent account.
- Report the crime to the NBI Cybercrime Division, the PNP Anti-Cybercrime Group, or the nearest police station. An online report may begin the process, but investigators may require a personal appearance, sworn statement, device examination, or original records.
- File a consumer complaint with the Department of Trade and Industry (DTI) if the transaction was between you and a business or merchant.
- Escalate a complaint involving a BSP-supervised financial institution to the Bangko Sentral ng Pilipinas (BSP) after first complaining directly to the institution.
These reports serve different purposes. A bank may try to secure or trace funds, a platform may suspend an account or grant a contractual refund, DTI may address a consumer dispute, and law-enforcement agencies investigate possible crimes. Filing with one does not automatically replace the others, and no report guarantees recovery.
Act immediately if money was transferred
Time matters because scam proceeds can be withdrawn or passed through several accounts within minutes.
Call the financial institution using the number in its official app, website, card, or account statement—not a number supplied by the supposed seller. Give it:
- Your name and registered contact details
- The amount, date, and exact time of the transaction
- Transaction or reference number
- Source account and recipient account, mobile number, QR identifier, or wallet details
- The recipient’s displayed account name
- A short explanation of how the scam occurred
- Copies of the listing, messages, receipt, and other supporting records
- Any police, NBI, platform, or DTI reference number already issued
Ask for a case or ticket number and written confirmation. If the recipient account belongs to another institution, ask whether your provider will contact that receiving institution. Do not assume that contacting only the recipient’s bank is enough; your own institution is ordinarily the starting point for a disputed outgoing transfer.
Under the BSP’s rules implementing the Anti-Financial Account Scamming Act, BSP-supervised institutions must provide a 24/7 fraud-reporting channel. For covered electronic fund transfers, disputed funds may be held initially for up to five calendar days and, when the conditions for extension are met, for an additional period of up to 25 calendar days. The total administrative holding period cannot exceed 30 calendar days unless extended by a competent court. A hold is not automatic, is limited to funds that can still be located in covered accounts, and does not itself decide ownership or guarantee reimbursement. The rules exclude mere erroneous transfers and generally exclude ordinary credit-card purchases, except when a credit card is used to make an electronic fund transfer through an automated clearing house. See BSP Circular No. 1215 and the AFASA implementing materials.
If your password, PIN, one-time password, card details, SIM, email, or device may have been compromised, also:
- Freeze or lock affected cards and accounts
- Change passwords from a trusted device, beginning with your email
- Sign out other sessions
- Enable multi-factor authentication
- Lower transfer limits where available
- Notify your mobile provider if your SIM stopped working unexpectedly
- Check for unauthorized loans, transfers, payees, or changes to account details
- Remove any remote-access application the scammer instructed you to install
Do not pay a supposed “recovery fee,” “verification deposit,” “tax,” or “unlocking charge.” That is often a second scam.
Report the seller and transaction to the platform
Use the shopping app’s in-app dispute or refund process before its platform deadline expires. For a transaction arranged through Facebook, Instagram, TikTok, Messenger, or another social network, report both the account and the specific post, advertisement, message, or page.
In your report:
- Identify the order or transaction
- State exactly what was promised and what happened
- Request a refund where available
- Ask the platform to preserve the seller’s registration, access, listing, message, and transaction records for lawful investigation
- Ask for the report or case number
- Save the platform’s replies and dispute status
Do not delete your conversation merely because the platform has received screenshots. Platforms may remove listings, suspend accounts, or make messages inaccessible.
The Internet Transactions Act requires covered e-marketplaces and digital platforms to provide a responsive mechanism for reporting users or information that may violate the law. E-marketplaces must also collect specified identifying and contact information from online merchants and may be compelled by a competent authority, through a subpoena issued in an investigation based on a sworn complaint, to disclose information needed to identify an unknown perpetrator. See Republic Act No. 11967.
Platform liability is not automatic. It depends on the platform’s role, its knowledge or notice, whether the transaction remained within its system, and whether it complied with its legal duties. Paying outside the platform can also remove contractual protections that would otherwise have been available.
File a criminal complaint
A fake seller who obtains money through false representations may be investigated for estafa under the Revised Penal Code. When an existing offense is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act may apply and provides for a penalty one degree higher. The precise charge depends on proof of deceit, timing, intent, payment, resulting damage, identity, and the manner in which technology was used. See Republic Act No. 10175 and the Supreme Court’s explanation in Disini v. Secretary of Justice.
The use of bank accounts or e-wallets to receive or move criminal proceeds may also fall under the Anti-Financial Account Scamming Act, which penalizes specified money-mule activities and social-engineering schemes. The Act also permits restitution in appropriate circumstances when a covered institution failed to maintain adequate controls or failed to exercise the legally required degree of diligence; reimbursement is not automatic simply because a scam occurred. See Republic Act No. 12010.
You may approach:
- The NBI Cybercrime Division or an NBI regional or district office
- The PNP Anti-Cybercrime Group, one of its regional cybercrime units, or the nearest police station
- The appropriate prosecutor’s office, usually with the assistance of counsel or investigators when a complaint-affidavit and supporting affidavits are required
The NBI provides an online complaint page and publishes its procedure for investigative assistance to computer-crime victims. Its procedure contemplates an interview, a sworn complaint sheet or affidavit, supporting documents, witness statements, and—when relevant—examination of the device connected with the incident.
An initial incident report is not necessarily the same as a complete criminal complaint. Cooperate if investigators ask you to execute a sworn statement, identify the account, authenticate messages, submit records, or return for further proceedings.
File a DTI consumer complaint when the seller is a business
DTI is an appropriate route when the seller was acting as an online merchant or business and you seek consumer remedies such as repair, replacement, refund, or enforcement of fair-trade obligations. Start with the seller and platform’s redress process, keep proof of your demand, and then use the DTI Fair Trade complaint facility if the matter remains unresolved.
Under the Internet Transactions Act, an online consumer may pursue repair, replacement, refund, or other remedies when goods are defective, malfunctioning, lost without the consumer’s fault, inconsistent with the warranty, or otherwise give rise to merchant liability under the contract. When replacement or refund is selected, the merchant is generally entitled to the return of the original goods without cost to the consumer, subject to the law and the parties’ valid agreement.
DTI action and criminal proceedings are different. A refund dispute may be suitable for mediation or administrative adjudication, while a fabricated identity, nonexistent product, deliberate payment diversion, or repeated fraudulent operation may require law-enforcement investigation as well.
Important exception for person-to-person sales
The Internet Transactions Act does not cover consumer-to-consumer transactions—that is, a private sale between end-users that is not conducted in the ordinary course of business. A person who repeatedly sells goods for profit may still be a merchant despite describing the account as “personal”; the actual facts matter.
Even when DTI lacks jurisdiction over a purely private sale, fraud may still be reported to the bank or e-wallet, the platform, the NBI, or the PNP, and civil remedies may remain available.
Escalate financial-service complaints to the BSP
First complain directly to the bank, e-wallet issuer, or other BSP-supervised institution through its Financial Consumer Protection Assistance Mechanism. Keep the ticket number, written response, and all follow-ups.
If the institution does not resolve the complaint, use the BSP’s Consumer Assistance Mechanism and submit the institution’s name, your complaint reference, transaction details, supporting evidence, and the response received. BSP escalation is for concerns involving institutions under its supervision; it is not a substitute for reporting the scammer to law enforcement.
A transaction that you personally authorized after being deceived may be treated differently from a transaction made without your authorization. Do not describe an authorized transfer as “unauthorized.” Explain the facts accurately: what the scammer represented, what you believed, what action you took, and whether anyone obtained access to your account or credentials.
Evidence to preserve
Create a folder containing original files and a chronological summary. Preserve:
- The complete listing, advertisement, live-selling post, or product page
- Full URLs, usernames, page names, profile identifiers, phone numbers, and email addresses
- Screenshots showing the date, time, account name, and surrounding context
- Exported chat history, voice messages, emails, call logs, and text messages
- The seller’s claimed name, address, identification, business registration, and permits
- Order confirmations, invoices, receipts, warranties, and platform dispute records
- Bank statements, transfer confirmations, QR codes, recipient details, and reference numbers
- Courier details, waybills, packaging, parcel weight, and delivery records
- Continuous unboxing video and clear photographs if the parcel was empty, counterfeit, damaged, or different from the listing
- The item itself and its packaging
- Your refund demand and the seller’s response
- Reports made to the bank, platform, DTI, NBI, PNP, or other agencies
- Names and contact details of witnesses or other victims
Keep the original device and original electronic files. Avoid cropping the only copy of a screenshot or editing files in a way that removes metadata. Make backups, but do not publicly post complete account numbers, identification documents, addresses, one-time passwords, or other sensitive information.
If other victims contact you, ask them to preserve and submit their own records. Do not coordinate invented or exaggerated statements.
A simple incident summary investigators can follow
Arrange the facts by date and time:
- Where you saw the offer
- What the seller represented
- What identifying details the seller used
- What you ordered and the agreed price
- How and where payment was sent
- What happened after payment
- Why you believe the transaction was fraudulent
- What loss you suffered
- What reports and recovery requests you made
- What evidence is attached
Separate facts you personally observed from assumptions. If the recipient account name differs from the seller’s name, state both names without claiming they are the same person unless evidence establishes that connection.
General rule and important exceptions
A late delivery, poor-quality product, billing disagreement, or seller’s breach of contract is not automatically criminal fraud. Estafa ordinarily requires proof of the legally defined fraudulent means and resulting prejudice. Evidence that the seller never possessed the product, used a fabricated identity, supplied a fake tracking number, diverted payment, blocked the buyer immediately, or repeated the scheme may be relevant, but authorities must evaluate the complete facts.
Conversely, describing the matter as a “civil dispute” does not prevent criminal investigation when evidence supports deliberate deceit from the beginning.
Refund rights also depend on the transaction. Change-of-mind returns are different from remedies for defective, lost, misdescribed, counterfeit, or undelivered goods. Perishable goods, services, digital goods, regulated products, private sales, and transactions completed outside a platform may involve different rules.
Deadlines and timing
Report to the financial institution immediately, ideally as soon as the transfer or account compromise is discovered. The five-day and 30-day periods in the BSP rules concern how long covered funds may be temporarily held; they are not waiting periods and do not give victims that long to delay reporting.
Use the platform’s dispute process before the deadline shown in the order or buyer-protection terms. Do not let discussions with the seller cause that period to expire.
Legal filing periods vary according to the offense, remedy, amount, date, applicable law, and procedural history. A platform report or bank complaint does not necessarily stop a criminal or civil prescriptive period. If a significant amount is involved, the seller’s identity is known, a filing deadline may be near, or authorities have already identified suspects or frozen assets, obtain legal advice promptly.
Common mistakes to avoid
- Continuing to send money after the seller demands a “release,” “insurance,” or “refund-processing” payment
- Calling a fake support number found in a message or sponsored search result
- Waiting several days before notifying the payment provider
- Deleting chats, blocking the account, or surrendering the device before preserving evidence
- Reporting only to the platform and assuming it filed a criminal complaint
- Posting accusations, identification documents, or account numbers publicly
- Threatening or arranging an unsafe personal confrontation
- Giving investigators only selected screenshots without the full conversation
- Filing a knowingly false or exaggerated fraud report to force a payment reversal
- Paying a stranger who promises guaranteed recovery or claims to be an “ethical hacker”
- Sending one-time passwords, PINs, passwords, or screen-sharing access to anyone claiming to investigate the case
Knowingly making a malicious or completely unwarranted report that causes funds to be held may itself carry liability under the Anti-Financial Account Scamming Act.
When legal help is urgent
Consult a Philippine lawyer promptly when:
- The loss is substantial or represents essential household or business funds
- Several victims, accounts, jurisdictions, or corporate entities are involved
- The scammer is threatening, blackmailing, stalking, or using intimate material
- Your identity was used to open accounts, borrow money, or receive criminal proceeds
- Your own account has been frozen or identified as a beneficiary or money-mule account
- You unknowingly allowed another person to use your bank account, SIM, e-wallet, or identification
- The seller or platform denies responsibility and a civil claim is being considered
- You received a subpoena, demand letter, prosecutor’s notice, or court document
- You need a preservation order, subpoena, cybercrime warrant, attachment, injunction, or court-ordered extension of a fund hold
- A filing deadline or platform-protection deadline may be approaching
If there is an immediate threat to personal safety, call 911 or go to the nearest police station. Do not meet the suspected scammer alone.
Frequently asked questions
Can the bank or e-wallet reverse the payment immediately?
Not necessarily. Whether funds can be held, returned, or reimbursed depends on the payment method, whether funds remain traceable, the results of verification, the institution’s controls and contractual rules, and any law-enforcement or court action. Report immediately and ask for a written decision.
Should I report to both the bank and the police?
Yes. The bank or e-wallet handles the financial account and may trace or hold covered funds; law enforcement investigates the suspected crime. One process does not automatically commence the other.
Can I report a scam if I voluntarily pressed “send”?
Yes. Authorization of the payment does not prove that the transaction was legitimate. State honestly that you initiated the transfer because of the seller’s alleged deception. Do not label it an account takeover unless somebody actually accessed or controlled your account without authority.
Can DTI help if I bought through social media?
Potentially, if the seller was acting as a business or online merchant. A purely private, occasional person-to-person sale is outside the Internet Transactions Act’s coverage, although criminal and civil remedies may still apply.
What if I do not know the scammer’s real name or address?
Report the information you have: account name and number, wallet or mobile number, profile link, user ID, email address, transaction reference, delivery information, and complete communications. A competent authority may obtain platform or financial records through the lawful procedures available to it.
Is a screenshot enough?
A screenshot is useful but may not be sufficient by itself. Preserve original messages, URLs, transaction records, devices, receipts, parcel evidence, and any witness information that can authenticate and explain it.
May I post the scammer’s identity online?
Reporting through official channels is safer. Public accusations can expose personal information, compromise an investigation, identify an innocent account holder, or create separate legal issues. Share sensitive records only with the platform, financial institution, lawyer, or competent authority.
Will filing a complaint guarantee a refund or conviction?
No. Recovery depends on available funds, contractual protections, evidence, applicable law, and the findings of the institution or authorities. Criminal liability must be proved through the proper process and beyond reasonable doubt.
Official references
- Internet Transactions Act of 2023—Republic Act No. 11967
- Cybercrime Prevention Act of 2012—Republic Act No. 10175
- Anti-Financial Account Scamming Act—Republic Act No. 12010
- BSP AFASA rules, including Circular Nos. 1214 and 1215
- DTI Fair Trade complaint facility
- NBI online complaint facility
- NBI procedure for computer-crime complaints
This article provides general legal information, not advice for a particular case and not a guarantee of recovery or legal outcome. Procedures and available channels can change; confirm requirements with the relevant institution or agency. Primary legal and official government sources were checked as of September 14, 2026.