Quick answer

If you paid an online seller or social-media account and believe you were scammed, act immediately:

Contact the bank, e-wallet, card issuer, or payment provider using its official fraud channel. Ask it to mark the transaction as disputed, secure your account, trace the transfer, and determine whether the recipient funds can still be held or recovered.
Report the seller, listing, conversation, and transaction to the shopping or social-media platform. Request preservation of account and transaction records.
Report the incident to law enforcement—the PNP Anti-Cybercrime Group, the NBI Cybercrime Division, or your nearest police station or NBI office. You may also call the government’s 1326 cybercrime hotline for assistance.
For a purchase from a business or regular online seller, use the platform’s internal complaint process first. If unresolved after seven calendar days, file a consumer complaint through the DTI Consumer CARe System.
Preserve all evidence before blocking the account or deleting anything.

These reports serve different purposes. A platform complaint may remove the listing or suspend the account; a financial complaint may help secure or trace funds; a DTI complaint may seek consumer redress; and a police or NBI complaint may lead to criminal investigation. Filing one does not necessarily replace the others.

First, secure your money and accounts

Speed matters most when money has just been transferred.

Contact the payment provider immediately

Use only the telephone number, app, website, or email published by your bank, e-wallet, card issuer, or payment provider. Do not use contact details supplied by the suspected scammer.

Tell the provider:

the transaction date, time, amount, and reference number;
the recipient’s name, account number, mobile number, QR details, or other identifier;
why you believe the transaction was fraudulent;
whether you disclosed an OTP, password, PIN, card number, or identification document;
whether the transaction was authorized by you or occurred without your knowledge; and
the police, NBI, CICC, platform, or DTI reference number, if already available.

Ask for a case or ticket number and written confirmation that the fraud report was received. If the recipient account is with another institution, ask your provider to coordinate with it.

Under the Anti-Financial Account Scamming Act, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction, subject to BSP rules. The statutory holding period cannot exceed 30 calendar days unless extended by a court. A hold is not automatic, and reporting does not guarantee recovery—particularly if the money has already been withdrawn or moved.

Protect compromised accounts

If the scammer obtained login or identity information:

change passwords from a trusted device;
log out other sessions;
enable multi-factor authentication;
temporarily lock affected cards or accounts;
tell your mobile provider if your SIM may have been compromised;
check for unfamiliar transfers, beneficiaries, devices, or account changes; and
continue monitoring your statements.

Never give an OTP, PIN, password, recovery code, or screen-sharing access to someone claiming that these are needed to process a refund.

Preserve evidence before it disappears

Save the original material where possible, not just a written summary. Keep:

screenshots and screen recordings showing the full conversation;
the seller’s profile name, username, profile URL, account ID, phone number, and email address;
the original listing, advertisement, live-selling post, or product page;
order numbers, invoices, electronic receipts, checkout records, and delivery information;
payment confirmations and complete transaction reference numbers;
the recipient’s bank or e-wallet details;
promises about delivery, authenticity, condition, warranty, refund, or returns;
courier messages, tracking history, parcel labels, and unboxing videos;
emails, text messages, call logs, and voice messages;
the dates and times of each event;
copies of reports submitted to the platform and financial institution; and
the names, ticket numbers, and responses of every office contacted.

Capture the page address and identifying details, not merely a cropped image of the seller’s name. Scammers can rename, deactivate, or delete accounts. Keep unedited copies of files and back them up. Do not alter chats or fabricate missing messages; investigators may need to assess authenticity and context.

If a parcel arrived, keep the item, packaging, airway bill, seals, and payment receipt. Avoid returning evidence directly to a suspected scammer unless the platform, DTI, law enforcement, or your lawyer advises how to document the return safely.

Report the account to the platform

Use the platform’s in-app reporting and dispute process. Report both the seller or user account and the specific listing, advertisement, message, or order.

In your report:

state what was offered;
explain what you paid and what happened afterward;
identify any false name, counterfeit item, non-delivery, account takeover, or request to pay outside the platform;
attach relevant records; and
request preservation of registration, login, transaction, messaging, and payout information for lawful investigation.

For transactions covered by the Internet Transactions Act of 2023, an aggrieved party must generally use the platform, e-marketplace, or e-retailer’s internal redress mechanism before filing a complaint with a court or appropriate government agency. That mechanism is deemed exhausted if the complaint remains unresolved seven calendar days after filing.

Do not wait seven days before notifying your payment provider or seeking urgent police assistance. The seven-day rule concerns exhaustion of the business platform’s internal redress process; it should not be treated as a reason to let funds or electronic evidence disappear.

File a DTI consumer complaint when the transaction is covered

The DTI route is generally appropriate when the complaint concerns a business, e-retailer, or person selling in the ordinary course of business—for example:

paid goods were not delivered;
the item was materially different from its description or sample;
the seller supplied a defective, counterfeit, unsafe, or prohibited product;
the seller refused a legally available repair, replacement, or refund;
the seller concealed required business or product information; or
an e-marketplace failed to provide an effective complaint mechanism.

After using the platform’s internal process, submit the complaint through the DTI Consumer CARe System. Include the seller and platform details, a clear timeline, the remedy requested, proof of payment, and proof that you first used the internal redress mechanism.

The Internet Transactions Act allows online consumers to pursue repair, replacement, refund, or other remedies available under the Consumer Act and other laws when goods are defective, lost without the consumer’s fault, fail to conform to a warranty, or otherwise breach the transaction. For claims for damages under that Act, a case must be filed with the court or DTI within two years from the time the cause of action arose.

Important exception for private sales

The Internet Transactions Act does not cover consumer-to-consumer transactions—private transactions between end-users that are not made in the ordinary course of business. A one-off purchase from an individual through a social-media marketplace may fall within this exception.

That does not make fraud lawful. A victim may still report possible estafa or another offense to the PNP or NBI and may have civil remedies. Whether an account is genuinely private or is being used by a regular online merchant depends on the facts, including the frequency and commercial nature of its sales.

Report possible crime to the PNP, NBI, or CICC

Deliberate deception may be more than a consumer dispute. Examples include a seller who never possessed the advertised item, uses a false identity or fake proof of shipment, impersonates a legitimate shop, takes payment and immediately disappears, or repeatedly uses accounts to collect money from victims.

The Cybercrime Prevention Act makes the NBI and PNP responsible for enforcing cybercrime laws. It also provides that crimes under the Revised Penal Code or special laws committed through information and communications technology are covered by the Act. See the Cybercrime Prevention Act of 2012.

You may:

contact or visit the PNP Anti-Cybercrime Group or the appropriate regional anti-cybercrime unit;
contact or visit the NBI Cybercrime Division or the nearest NBI office;
use the DOJ’s cybercrime-reporting guidance;
call 1326, the government cybercrime and anti-scam response hotline; or
go to the nearest police station if specialized offices are not readily accessible.

Bring a government-issued ID and organized copies of your evidence. Investigators may ask for a written complaint-affidavit, additional authentication, or a personal appearance. A report or blotter entry is not automatically the same as a formally filed criminal complaint; ask what further document or appearance is required and keep the reference number.

The exact offense and filing deadline depend on the acts committed, the amount involved, the applicable law, and when the offense was discovered or completed. Report promptly instead of relying on a presumed prescription period.

Escalate payment-provider complaints to the BSP

For complaints involving a BSP-supervised bank, e-wallet, payment service provider, remittance company, or similar institution, first report the issue through that institution’s Financial Consumer Protection Assistance Mechanism.

If the institution does not act or its response is unsatisfactory, escalate the complaint through the BSP Consumer Assistance Mechanism. The BSP accepts consumer-assistance complaints through its official website’s BSP Online Buddy, email, telephone, mail, walk-in desk, and regional offices. Current channels and requirements appear in the BSP’s official guide on filing a complaint.

Attach:

the complaint sent to the financial institution;
its response, if any;
the institution’s case number;
the transaction record; and
a concise statement of the action you want the institution to take.

BSP escalation concerns the conduct or handling of the BSP-supervised institution. It is not a substitute for reporting the scammer to law enforcement. The Financial Products and Services Consumer Protection Act protects financial consumers’ rights to fair treatment, protection of assets against fraud and misuse, data privacy, and timely complaint handling.

If personal data or identity documents were misused

If the scam involved unauthorized use or disclosure of your personal information, notify the organization that collected or exposed the data and ask for its data-protection or privacy officer.

You may also consider filing a complaint with the National Privacy Commission where the facts indicate a violation of the Data Privacy Act of 2012. A privacy complaint is separate from a request to reverse a payment or investigate estafa.

If you sent a selfie, ID image, signature specimen, card image, or account credentials, warn the relevant issuer or institution and watch for identity theft, unauthorized loans, SIM-related activity, and newly opened accounts.

Consumer dispute or scam?

Not every failed online purchase is automatically criminal fraud.

A delayed delivery, defective item, misunderstanding over specifications, or disputed refund may begin as a consumer or contractual issue. Criminal fraud generally requires proof of dishonest conduct and the elements of the applicable offense; non-performance alone does not conclusively establish criminal intent.

Report the facts accurately. Avoid declaring publicly that a named person is a criminal before authorities or a court have made that determination. You may describe your documented experience and report suspected wrongdoing, but public accusations can create separate legal risks.

Common mistakes to avoid

Waiting for the scammer’s repeated promise to “refund tomorrow.”
Sending another payment for a supposed release fee, verification fee, tax, or refund charge.
Reporting only to the social-media platform when money was transferred through a bank or e-wallet.
Deleting or blocking the account before saving the conversation and profile details.
Posting the recipient’s personal data publicly instead of giving it to proper authorities.
Editing screenshots or omitting messages that appear unfavorable.
Sending original evidence without keeping copies.
Paying a stranger who claims to be an investigator, hacker, bank employee, or “recovery agent.”
Assuming that a police report automatically reverses a payment.
Treating the bank, platform, DTI, and criminal complaint processes as interchangeable.

When help is urgent

Seek immediate assistance if:

the transfer was made only minutes or hours ago;
unauthorized transactions are still occurring;
your phone, SIM, email, or financial account has been taken over;
the scammer has your OTP, password, card security code, ID, selfie, or signature;
threats, blackmail, stalking, or sexual images are involved;
a child, senior citizen, or other vulnerable person is being targeted;
the seller is demanding an in-person meeting or threatening violence; or
the loss is substantial, several victims are involved, or the scheme crosses jurisdictions.

Call 911 for an immediate threat to life or safety. For recent financial transfers, contact the financial institution first or at the same time as the cybercrime authorities.

Frequently asked questions

Can the bank or e-wallet reverse a transfer?

Possibly, but not automatically. Recovery depends on factors such as the payment method, how quickly the report was made, whether funds remain in the recipient account, the institutions’ verification, and the evidence. Ask for a fraud case number and written outcome.

Should I report even if the amount is small?

Yes. The report may support recovery, account action, intelligence linking multiple victims, or a later investigation. There is no general minimum loss required merely to report suspected fraud.

Can I report an anonymous or fake account?

Yes. Preserve the profile URL, username, messages, payment destination, and transaction details. Platforms and financial institutions may hold identifying records that authorities can seek through lawful process.

Do I need a lawyer?

Not necessarily for an initial report, a DTI consumer complaint, or the BSP Consumer Assistance Mechanism. Legal help becomes especially useful when the loss is substantial, the facts are complex, authorities require a formal complaint-affidavit, multiple parties or jurisdictions are involved, or court action is being considered.

Can I file with both DTI and the police?

Yes, when the facts support both routes. DTI addresses covered consumer and trade issues; the PNP or NBI investigates possible crimes. You may also have separate platform and financial-provider complaints.

What if I paid outside the shopping platform?

Report to the platform anyway, but platform protection may be limited by its terms. Immediately notify the payment provider and law enforcement. Preserve proof that the seller directed you to pay outside the platform.

What if the seller is abroad?

Report through the same channels. Philippine law may apply to covered e-commerce businesses that avail themselves of the Philippine market and have sufficient contacts here, even without a local legal presence. Actual enforcement and recovery may nevertheless be more difficult and will depend on the evidence, platform records, payment trail, and international cooperation.

Does reporting guarantee an arrest, refund, or conviction?

No. Agencies must assess jurisdiction, evidence, legal elements, account ownership, and the available funds. Prompt, complete, and truthful reporting gives authorities and institutions the best practical chance to preserve evidence and take appropriate action.

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Procedures and remedies depend on the transaction, evidence, institutions involved, and applicable rules. Official legal and reporting sources were checked as of September 12, 2026.