Quick answer

If you sent money or disclosed account credentials, contact your bank, card issuer, or e-wallet immediately through its official fraud channel. Ask it to secure your account, trace the transaction, and consider temporarily holding any disputed funds that remain within the financial system. Then report the seller or account to the shopping or social-media platform, preserve all evidence, and file a criminal report with the Philippine National Police or National Bureau of Investigation.

For a consumer dispute with an online business, use the platform’s or seller’s internal complaint process first. Under the Internet Transactions Act, that remedy is considered exhausted if the complaint remains unresolved after seven calendar days. You may then bring an appropriate consumer complaint to the Department of Trade and Industry. This seven-day process should not stop you from immediately notifying your payment provider or reporting suspected crime to law enforcement. (lawphil.net)

Reporting promptly improves the chance of preserving records or funds, but it does not guarantee recovery.

What to do immediately

1. Stop further losses

Do not send another payment for “verification,” “insurance,” “customs,” “tax,” “release,” or a promised refund. Do not continue negotiating through links or numbers supplied by the suspected scammer.

If you disclosed a password, PIN, one-time password, card security code, recovery code, or access to your phone:

Call the bank or e-wallet using the number in its official app, website, or on the back of the card.
Ask it to block or restrict the affected account or card.
Change the compromised password from a trusted device.
Sign out other sessions and enable multi-factor authentication.
Tell the provider if the scammer remotely accessed your device.
Contact your mobile network immediately if your SIM stopped working unexpectedly or may have been taken over.

Never give an alleged investigator, refund agent, or bank representative another OTP or PIN.

2. Report the transfer to the payment provider

Give the sending institution:

transaction reference number;
exact amount, date, and time;
recipient’s account name, number, mobile number, or wallet identifier;
a short explanation of the deception;
screenshots and payment confirmation; and
any police, NBI, platform, or complaint reference number already available.

Ask for a case or ticket number and written confirmation of your report. If possible, request coordination with the receiving institution and ask whether the transaction can be recalled, disputed, or placed under a temporary hold.

The Anti-Financial Account Scamming Act allows BSP-supervised institutions to hold funds involved in a disputed transaction under BSP rules. The statutory ceiling is 30 calendar days, unless a competent court extends the hold. A hold is not automatic: the institution must have legally sufficient grounds, and the money may already have been withdrawn or transferred. Deliberately filing a malicious or completely unwarranted report can itself be penalized. (lawphil.net)

3. Preserve evidence before blocking the account

Save the evidence in its original form when possible. Do not edit screenshots except to make separate redacted copies for public sharing.

Preserve:

the full profile, shop, page, group, listing, advertisement, and product URL;
usernames, profile identifiers, page transparency details, phone numbers, email addresses, and website domains;
the complete conversation, including dates, times, voice messages, and call logs;
order confirmations, invoices, receipts, tracking information, and delivery records;
bank, card, or e-wallet confirmations and transaction reference numbers;
the destination account details shown before and after payment;
photographs or an uncut unboxing video if an item arrived;
refund demands, threats, excuses, and additional-payment requests;
the platform complaint and its acknowledgment or reference number; and
a clear timeline written while events are fresh.

Export or download chats if the service permits it. Screenshots alone may omit account identifiers, links, timestamps, or surrounding context, so retain the original device and electronic records.

Do not publish unredacted IDs, addresses, account numbers, or other victims’ information. Give complete copies only through legitimate reporting channels.

Report the seller or account to the platform

Use the marketplace’s order-dispute or buyer-protection process when the transaction occurred inside a shopping platform. For a social-media transaction, report the profile, page, advertisement, listing, and messages through the platform’s fraud or commerce-reporting tools.

Your report should state:

what was advertised or promised;
what you paid and how;
what actually happened;
the remedy requested—such as cancellation, refund, or release of held payment; and
the evidence attached.

Keep the complaint number and record the filing date. Under Republic Act No. 11967, covered platforms and e-retailers must provide redress mechanisms, and an aggrieved party generally must use that internal mechanism before filing a related court, government-agency, or alternative-dispute-resolution complaint. The mechanism is deemed exhausted if the matter remains unresolved after seven calendar days. (lawphil.net)

Avoid closing a platform dispute merely because the seller promises to refund you outside the platform. Close it only after cleared funds have actually returned and you understand the effect of closure.

File a criminal report

An online complaint to a platform or DTI is not a substitute for a criminal report when money was obtained through deliberate deception, an account was taken over, credentials were stolen, or threats were made.

You may report to:

the nearest police station or appropriate PNP cybercrime unit; or
the NBI Cybercrime Division, an NBI regional or district office, or the official NBI Online Complaint page.

The NBI’s published procedure for computer-crime complaints includes an initial complaint sheet and interview. The complainant and witnesses may be asked to execute sworn statements, submit supporting documents, and present a relevant device for examination. The published investigative-assistance service has no fee, although a complete investigation takes longer than the initial intake steps. (National Bureau of Investigation)

Bring or prepare:

a valid government-issued ID;
a chronological written statement;
printed and electronic copies of the evidence;
the recipient’s account details and transaction references;
the URLs and identifiers of the seller and listings;
platform, bank, or e-wallet case numbers; and
the names and contact details of witnesses, if any.

Tell the investigator if the scammer is still communicating, is demanding more money, has threatened anyone, or appears to be targeting other victims. Do not arrange an entrapment, confrontation, or in-person meeting without law-enforcement direction.

Online deception may fall under estafa or another offense depending on the proven facts. The Cybercrime Prevention Act also applies listed crimes under the Revised Penal Code and special laws when committed through information and communications technology. The correct charge depends on the evidence; a failed or disappointing sale is not automatically criminal fraud. (lawphil.net)

When to complain to DTI

A DTI complaint is appropriate when the dispute concerns a covered online business selling goods or services to a consumer—for example:

non-delivery;
an item materially different from its description;
refusal to honor an applicable warranty or lawful remedy;
deceptive or unfair sales practices;
failure to issue an invoice or receipt; or
failure to provide an accessible complaint mechanism.

File through the official DTI Consumer CARe System. Metro Manila complainants may also send a completed complaint form or complaint letter to consumercare@dti.gov.ph or file in person with the DTI Fair Trade Enforcement Bureau. (consumercare.dti.gov.ph)

Include proof that you first used the platform’s, marketplace’s, or e-retailer’s internal redress mechanism and either received an unsatisfactory result or waited seven calendar days without resolution.

The Internet Transactions Act covers business-to-consumer and business-to-business internet transactions within DTI’s mandate when the required Philippine connection exists. It expressly excludes consumer-to-consumer transactions. A one-off purchase from another private individual may therefore fall outside this particular law even though criminal, civil, platform, or payment-provider remedies may remain available. (lawphil.net)

For covered transactions, the online merchant or e-retailer is ordinarily primarily liable to the consumer. A platform’s liability is more limited and depends on statutory facts—for example, whether it failed to exercise required diligence or failed to provide a foreign merchant’s contact details after notice. Platform involvement alone does not automatically make it liable for the seller’s conduct. (lawphil.net)

A claim for damages under the Internet Transactions Act must be brought before the court or DTI within two years from the time the cause of action arose. Other claims or offenses may have different prescriptive periods, so do not treat two years as a universal deadline. (lawphil.net)

If the bank or e-wallet does not resolve the complaint

First use the institution’s own Financial Consumer Protection Assistance Mechanism or official customer-service process. This is the required first-level channel for complaints about a BSP-supervised institution.

If its response is unsatisfactory, escalate the matter through the BSP Online Buddy (BOB) on the official BSP website or BSP Facebook page. If BOB is inaccessible, submit the BSP Complaint/Inquiry/Reply form, proof of your complaint to the institution, and supporting documents to consumeraffairs@bsp.gov.ph.

BSP’s Consumer Assistance Mechanism facilitates the financial complaint; it does not replace a criminal investigation by the PNP or NBI. Do not send PINs, passwords, full card credentials, passbooks, passports, or unnecessary identification documents to BSP. (bsp.gov.ph)

Know the difference between a scam and an ordinary dispute

Warning signs of deliberate fraud can include:

a fabricated identity or business;
fake payment or delivery records;
deliberate use of another person’s account;
disappearance immediately after payment;
repeated use of the same scheme against different buyers;
impersonation of a platform, bank, courier, or government office; or
obtaining credentials through deceptive messages or calls.

By contrast, late delivery, poor quality, a warranty disagreement, or failure to agree on a refund may initially be a consumer or contractual dispute. Report the facts accurately and let the platform, regulator, or investigator determine the proper treatment. Avoid asserting guilt as an established fact when the evidence is incomplete.

Common mistakes that can weaken a report

Waiting for days while the scammer promises a refund.
Deleting chats after becoming embarrassed or angry.
Sending only cropped screenshots without links, timestamps, or profile identifiers.
Reporting only to the platform and not to the payment provider.
Treating a platform report as a police or NBI complaint.
Posting the recipient’s personal data publicly instead of preserving it for investigators.
Exaggerating facts or including assumptions as if personally observed.
Paying a supposed “recovery agent” who promises guaranteed reimbursement.
Reusing a compromised password on other accounts.
Resetting or disposing of the relevant device before evidence is preserved.
Missing the platform’s dispute window or prematurely marking an order as received.

When help is urgent

Contact the payment provider and law enforcement without delay if:

an unauthorized transfer is still pending or has just occurred;
the scammer has access to your bank, e-wallet, email, or mobile account;
your SIM suddenly becomes inactive;
identity documents or biometric information were disclosed;
the scammer is threatening violence, blackmail, or publication of intimate material;
a child or vulnerable person is involved;
you are being told to receive or forward money for someone else; or
you are asked to surrender your account, SIM, ATM card, or credentials for payment.

Do not allow another person to use, rent, buy, or borrow your financial account. The Anti-Financial Account Scamming Act criminalizes specified money-muling activities and certain acts involving accounts opened under false identities or bought and sold for unlawful purposes. (lawphil.net)

Frequently asked questions

Can I recover money sent by bank transfer or e-wallet?

Possibly, but recovery is not guaranteed. It depends on factors such as how quickly the report was made, whether funds remain traceable within participating institutions, the provider’s investigation, and the evidence. Report immediately and request a transaction trace or temporary hold rather than waiting for the scammer.

Must I wait seven days before reporting to the police or my bank?

No. The seven-calendar-day rule concerns exhaustion of the internal redress mechanism for a covered internet-transaction complaint. It should not delay urgent account security, a disputed-transaction report to the financial institution, or a criminal report.

Can DTI handle a purchase from an individual Facebook seller?

It depends on whether the seller was acting as a business or merely as another end-user. Republic Act No. 11967 excludes consumer-to-consumer transactions. DTI may assess jurisdiction, while platform, civil, payment-provider, and criminal remedies may still be available.

Is a police blotter enough?

A blotter entry records a report but may not by itself complete the complaint, sworn statement, or evidence submission needed for investigation or prosecution. Ask the receiving office what additional steps and documents are required, and retain the reference or entry number.

Should I contact the recipient’s bank directly?

Report first to your own institution and ask it to coordinate through official channels. You may also notify the receiving institution through its verified fraud channel, but privacy and banking rules may prevent it from disclosing account information or the outcome to you.

What if the seller blocks me or deletes the account?

Preserve all existing screenshots, URLs, identifiers, payment records, emails, and notifications. Report the deleted or inaccessible account to the platform and include the evidence in your law-enforcement complaint. Platforms may possess records that investigators can seek through lawful process.

Should I publicly name the suspected scammer?

Public posting can expose personal data, misidentify an innocent account holder, interfere with an investigation, or create separate legal problems. Preserve the information and submit it to the platform, financial institution, regulator, or law-enforcement agency instead.

Do I need a lawyer?

Not necessarily for an initial platform, bank, DTI, police, or NBI report. Consider prompt legal advice when the loss is substantial, several jurisdictions or victims are involved, the transaction concerns a business or investment, evidence may disappear, you received a subpoena or demand, or you need to pursue civil recovery before a deadline.

Official sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Rights, jurisdiction, and available remedies depend on the transaction, parties, evidence, platform terms, and payment method. Official sources and procedures were checked on 22 September 2026.