Quick answer

If you paid an online seller and believe you were scammed, act immediately:

Contact the bank, e-wallet, card issuer, or payment provider through its official 24/7 fraud-reporting channel. Ask it to mark the transfer as disputed, trace the funds, notify the receiving institution, and consider a temporary hold under the Anti-Financial Account Scamming Act.
Secure your accounts and preserve all evidence before messages, listings, or profiles disappear.
Report the seller and transaction through the shopping platform or social-media service.
If this was a business-to-consumer sale, use the platform’s internal complaint process. Under the Internet Transactions Act, that process is generally considered exhausted if the complaint remains unresolved after seven calendar days.
File the appropriate consumer complaint with the Department of Trade and Industry (DTI) and report suspected fraud to law enforcement. Do not wait seven days where money is still moving, an account has been compromised, there are threats, or evidence may disappear.

Reporting quickly does not guarantee recovery. It can, however, improve the chance that remaining funds are traced or held and that electronic evidence is preserved.

First determine what happened

Not every failed online transaction is automatically a criminal scam. The facts may point to one or more different remedies:

Possible fraud or estafa: The seller allegedly used deceit to obtain payment—for example, by offering goods that never existed, using a false identity, sending fabricated proof, or disappearing after payment.
Consumer dispute: A legitimate business delivered the wrong, defective, incomplete, or misrepresented item, refused a lawful remedy, or failed to deliver as promised.
Unauthorized financial transaction: Someone accessed your bank, card, or e-wallet account or induced you to disclose an OTP, password, PIN, or other security credential.
Account impersonation or takeover: A criminal used your identity, a friend’s account, or a business page to solicit payment.
Consumer-to-consumer transaction: You bought from another end-user who was not selling in the ordinary course of business. This distinction matters because the Internet Transactions Act excludes consumer-to-consumer transactions, although criminal and civil remedies may still be available.

A single incident can fall into several categories. For example, you may need to report the transfer to your bank immediately, open a platform dispute, and file a criminal complaint.

Step 1: Contact the payment provider immediately

Use only the fraud hotline, in-app help function, branch, or website shown in the financial institution’s official app, card, statement, or verified website. Do not call a number supplied by the suspected scammer.

Tell the institution:

the transaction date, time, amount, and reference number;
the source and recipient account or wallet details;
whether you personally authorized the transfer;
how the seller or impersonator induced the payment;
whether you disclosed an OTP, password, PIN, card data, or identification document;
whether further transactions are occurring; and
that you want the transaction formally recorded as disputed and urgently traced.

Ask for a case or reference number and written confirmation of the report. Request appropriate account-security measures, such as blocking a card, freezing access, changing credentials, or reviewing recent transactions.

Temporary holding of disputed funds

Republic Act No. 12010, the Anti-Financial Account Scamming Act (AFASA), and the Bangko Sentral ng Pilipinas (BSP) implementing rules allow BSP-supervised institutions to temporarily hold funds involved in qualifying disputed electronic account-to-account transfers while they conduct coordinated verification.

Under the current BSP rules:

a complaint must be made through the originating institution’s 24/7 fraud-reporting channel;
the initial hold may last up to five calendar days;
an extension of up to 25 additional calendar days may be warranted, for a total hold of no more than 30 calendar days, unless a competent court extends it; and
the customer may need to submit a sworn complaint, affidavit, police report, or other supporting document within the initial holding period, subject to applicable industry procedures and exceptions.

A hold is not automatic, is not a finding that the recipient is guilty, and does not itself guarantee a refund. It is most useful while funds remain in the financial system. Ask the institution exactly what documents and deadlines apply to your case.

AFASA also penalizes malicious or bad-faith reporting of completely unwarranted or false information that results in funds being held. Report accurately and do not exaggerate.

If the institution does not resolve the complaint satisfactorily, escalate it to the BSP only after first using the institution’s Financial Consumer Protection Assistance Mechanism. The BSP Consumer Assistance page explains how to use the BSP Online Buddy or, when appropriate, the official complaint form and email channel.

Step 2: Secure your accounts and devices

If you disclosed credentials, clicked a suspicious link, installed an app, or allowed screen sharing or remote access:

stop communicating with the scammer;
disconnect the affected device from the internet if unauthorized activity is continuing;
contact the financial institution before changing anything that could interfere with its response;
change compromised passwords using a clean device, beginning with your email and financial accounts;
use a different password for each account;
sign out unknown sessions and remove unfamiliar devices;
enable multi-factor authentication;
block or replace affected cards or SIMs when advised by the provider;
uninstall unauthorized remote-access or sideloaded apps;
check email forwarding rules and account-recovery details;
notify your mobile provider if your SIM stopped working unexpectedly; and
review all accounts for related transactions.

Never provide an OTP, password, PIN, recovery code, or screen-sharing access to someone claiming that it is needed to reverse the transfer. Legitimate investigators and consumer agencies do not need your password.

Step 3: Preserve evidence before reporting the profile

Save the evidence first because reporting a listing or account may cause it to disappear.

Preserve:

the complete product listing, price, description, photos, and seller claims;
the seller’s profile name, username, profile URL, user ID if visible, phone number, email, and stated address;
the exact web address of the listing or post;
the full conversation, including dates and times;
order confirmations, invoices, receipts, delivery records, and tracking details;
transfer receipts and unique transaction reference numbers;
the recipient’s account name, account number, wallet number, QR code, bank, or e-wallet;
advertisements, livestream recordings, voice messages, emails, and call logs;
photos or an unboxing video showing what arrived;
the package, airway bill, pouch, labels, and item itself;
your reports to the seller, platform, bank, and government agencies;
every acknowledgment, ticket number, and response; and
a chronological account written while events are fresh.

Take screenshots that include the URL, username, date, and time where possible. Also export or download the original conversation and files if the platform permits it. Keep originals unchanged and make backup copies. Do not crop the only copy of a screenshot or edit metadata.

For high-value or contested cases, ask law enforcement or a lawyer whether an affidavit, forensic extraction, or other formal method of preserving electronic evidence is appropriate.

Step 4: Report the seller to the platform

Use the platform’s official order-dispute, refund, buyer-protection, or fraud-reporting process. A public comment or direct message to customer service may not open a formal case.

Your report should identify:

the order and seller;
what was promised;
what actually happened;
the amount paid;
the remedy requested, such as cancellation, delivery, replacement, or refund; and
the supporting evidence.

Keep the report factual. Ask the platform to preserve the seller’s registration, account, login, listing, transaction, and communications records for lawful investigation. The platform may not be able to disclose those records directly to you, but law enforcement or a court may use the proper legal process.

The seven-day internal-redress rule

For transactions covered by Republic Act No. 11967, the Internet Transactions Act of 2023, an aggrieved party must generally use the digital platform’s, e-marketplace’s, or e-retailer’s internal redress mechanism before filing a complaint with an appropriate government agency, court, or alternative-dispute-resolution body. The mechanism is deemed exhausted if the complaint remains unresolved after seven calendar days from filing.

This rule does not mean you should delay:

notifying a bank or e-wallet about a disputed transfer;
securing a compromised account;
preserving evidence;
reporting an ongoing crime, threat, or emergency to law enforcement; or
seeking urgent legal relief.

It also does not govern consumer-to-consumer transactions excluded from the Act. Because coverage depends on whether the seller was acting as a business and how the transaction occurred, preserve proof of the seller’s commercial activity, such as repeated listings, business representations, receipts, or store details.

Step 5: File a consumer complaint with the DTI

The DTI route is most relevant when the respondent is an online merchant, e-retailer, or other business and the problem concerns non-delivery, misrepresentation, defective goods, an unfair sales practice, or refusal of an appropriate consumer remedy.

After using the applicable internal redress mechanism, file through the DTI Consumer CARe System or an official DTI consumer channel.

Prepare:

your full name, address, email address, and contact number;
the respondent’s name and available contact or business details;
a clear chronological narration;
the exact remedy you request;
proof of the transaction;
proof that you used the internal complaint process and its outcome or seven-day non-resolution; and
a copy of a government-issued ID if required by the filing channel.

DTI’s E-Commerce Bureau follows a no-wrong-door policy for receiving and referring internet-transaction complaints within the government. DTI proceedings and law-enforcement investigations serve different purposes: a consumer case may address a refund or unfair trade practice, while a criminal complaint addresses alleged fraud.

Under the Internet Transactions Act, an online merchant or e-retailer is primarily liable for indemnifying an online consumer in covered civil actions or administrative complaints. Platform liability is not automatic. It depends on statutory conditions, such as the platform’s failure to exercise required diligence, failure to comply with a lawful takedown process, or other facts specified by law.

The Act states that a consumer may claim damages before a court or the DTI within two years from the time the cause of action arose. Other claims or offenses may have different prescriptive periods. Do not treat the two-year period as a reason to delay.

Step 6: Report suspected criminal fraud

For deliberate deception, account takeover, identity misuse, falsified records, multiple victims, threats, or an organized scheme, report promptly to a cybercrime unit of the:

Philippine National Police Anti-Cybercrime Group (PNP-ACG);
National Bureau of Investigation Cybercrime Division (NBI-CCD); or
Cybercrime Investigation and Coordinating Center (CICC).

Use contact details published on the agency’s current official government website or verified official page. Online contact information can change. If online access is unavailable, go to the nearest police station or NBI office and ask where the complaint and electronic evidence should be submitted.

Bring or prepare:

a valid ID;
your written chronology;
printed and electronic copies of the evidence;
bank or e-wallet reports and reference numbers;
the platform complaint and response;
the amount of loss;
available identifying details of the suspect and recipient account; and
information about other known victims, without exposing their private data publicly.

An investigator may require an affidavit or additional authentication of records. Cooperate promptly with requests from your financial institution and investigators, especially while an initial fund hold is running.

Depending on the proven facts, the conduct may be investigated under the Revised Penal Code provisions on estafa, Republic Act No. 10175 or the Cybercrime Prevention Act, AFASA, or other laws. The correct offense and liable persons are determined by investigators, prosecutors, and courts—not by the victim’s label alone.

If the purchase was made by credit or debit card

Contact the card issuer and ask whether the transaction qualifies for a dispute or chargeback under the applicable card-network and issuer rules. State whether the charge was unauthorized or whether the problem was non-delivery, misrepresentation, duplication, or another merchant dispute.

Card-dispute deadlines are governed by the issuer’s rules and may be much shorter than the period for filing a legal action. Submit the required documents immediately. A chargeback is not guaranteed and is separate from a police or DTI complaint.

If you paid cash on delivery

Do not discard the package, wrapping, shipping label, receipt, or item. Photograph all sides of the unopened package and record a continuous unboxing video if possible. Report the order through the platform and notify the courier if its records, personnel, or collection process may be relevant.

A courier’s involvement in delivery does not, by itself, prove participation in the scam.

If your identity or account was used

If the scammer used your name, photos, ID, phone number, financial account, or social-media account:

report the impersonating profile and preserve its URL;
warn likely contacts privately;
notify the bank, e-wallet, email provider, mobile provider, and platform involved;
change credentials and recovery information;
request records or account restrictions through official channels; and
report unauthorized processing or a qualifying personal-data breach to the National Privacy Commission when appropriate.

Do not post full IDs, bank statements, phone numbers, addresses, or account numbers while warning others. Redact sensitive information.

What outcome can you request?

Depending on the facts and forum, you may request:

cancellation of the transaction;
delivery of the agreed item;
repair or replacement;
refund of the purchase price;
correction of an unauthorized transaction;
preservation or temporary holding of disputed funds;
removal of an unlawful listing or impersonating account;
damages supported by law and evidence; or
criminal investigation and prosecution.

No agency can promise recovery merely because a report was filed. The result may depend on whether funds remain traceable, whether the seller can be identified, the platform’s records, the evidence of deceit, and the respondent’s ability to satisfy a judgment or settlement.

Common mistakes to avoid

Waiting for the scammer’s promised refund. Report to the payment provider while funds may still be traceable.
Reporting the profile before saving evidence. The listing, conversation, and account may disappear.
Using unofficial recovery services. People who promise to “hack back” or recover funds for an advance fee may be running a second scam.
Sending more money. Do not pay a supposed tax, verification fee, release charge, or refundable deposit to recover the first payment.
Deleting embarrassing messages. Complete context may be important evidence.
Submitting different versions of events. Use one accurate chronology and correct genuine mistakes promptly.
Assuming a transfer receipt proves the recipient’s guilt. Mule accounts, stolen identities, and compromised accounts are possible.
Naming someone publicly as a criminal without sufficient basis. Report facts to the proper channels; public accusations can create privacy, harassment, or defamation risks.
Treating a DTI complaint as a substitute for a fraud report. Consumer redress, financial tracing, and criminal investigation are separate processes.
Giving investigators or “support agents” passwords or OTPs. Provide documents through verified channels, never security credentials.

When help is urgent

Contact the financial institution and law enforcement immediately if:

unauthorized transfers are continuing;
you gave remote access to your device;
your SIM, email, social-media, or financial account was taken over;
the scammer has copies of your ID or biometric information;
there are threats, blackmail, stalking, or a risk of physical harm;
a child or vulnerable adult is involved;
a large amount or business account is affected;
the scam appears to involve many victims or money mules; or
a deadline for a card dispute, fund-hold document, court filing, or agency response is approaching.

Call 911 for an immediate threat to life or safety.

Frequently asked questions

Can the bank reverse an InstaPay, PESONet, or e-wallet transfer?

Not automatically. Report the transfer through the originating institution’s official 24/7 fraud channel immediately. The institutions may trace and temporarily hold qualifying disputed funds under AFASA and BSP rules, but recovery depends on the facts and whether funds remain available. A completed transfer is not guaranteed to be reversible.

Should I report to DTI or the police?

Potentially both. DTI handles covered consumer and fair-trade disputes involving businesses. Police and NBI cybercrime units investigate suspected crimes. Also report immediately to the payment provider and platform.

Must I wait seven days before going to the police?

Do not delay an emergency report, account-security action, fund-tracing request, or preservation of evidence. The seven-day rule concerns exhaustion of the internal redress mechanism for internet transactions covered by the Internet Transactions Act. Its application can depend on whether the seller was a business and the nature of the proceeding.

What if the seller was only a person on Facebook Marketplace?

If the seller was another end-user and was not acting in the ordinary course of business, the transaction may be consumer-to-consumer and outside the Internet Transactions Act. Fraud, contract, and other legal remedies may still apply. Evidence showing whether the seller regularly conducts business is important.

Can I recover money even if I willingly made the transfer?

Possibly. Authorizing a transfer does not necessarily mean you consented to being deceived. However, the remedy depends on what was represented, why you paid, the payment rules, the available funds, and the evidence. Report truthfully that you initiated the transfer if that is what happened.

Is a screenshot enough?

It may help, but preserve more than screenshots whenever possible: original messages, profile and listing URLs, exported chats, receipts, transaction references, package labels, recordings, and the original device or files. The weight and admissibility of electronic evidence depend on authenticity and context.

Can I post the scammer’s name and account number online?

That can create privacy, harassment, mistaken-identity, or defamation risks and may alert the suspect. Give complete information to the platform, financial institution, DTI, and law enforcement. If warning others publicly, stick to verifiable facts and redact sensitive personal and financial information.

Do I need a lawyer?

A lawyer is not always required to make an initial bank, platform, DTI, or police report. Consider prompt legal advice where the loss is substantial, several parties or jurisdictions are involved, the platform or institution rejects the claim, you need urgent court relief, you received a demand or subpoena, or filing deadlines are uncertain.

Official legal and reporting resources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Procedures and remedies depend on the transaction, evidence, institution, and applicable rules. Official sources were checked as of September 15, 2026.