Quick answer

If you paid an online seller and now believe you were scammed, act immediately:

Contact your bank, card issuer, or e-wallet through its official fraud channel. Report the transaction as fraudulent or disputed, ask whether the transfer can be recalled or the receiving funds temporarily held, and obtain a case number.
Report the seller and transaction inside the shopping or social-media platform. Ask it to preserve the account, listing, messages, login records, and transaction data.
Save the evidence before accounts or posts disappear.
File a cybercrime complaint with the PNP Anti-Cybercrime Group, the NBI cybercrime unit, or a police station.
For a purchase from a business seller, use the seller’s or platform’s complaint process and, if unresolved, file a consumer complaint with the DTI.
If your bank or e-wallet does not resolve your complaint, escalate it to the Bangko Sentral ng Pilipinas (BSP).

Reporting quickly improves the chance that institutions can trace or preserve funds and digital records. It does not, however, guarantee a refund, account freeze, arrest, or successful prosecution.

First, determine what happened

Not every failed online purchase is automatically a criminal scam.

A transaction may be primarily a consumer dispute when an identifiable business delivered the wrong, defective, incomplete, or delayed item and is still communicating. Possible remedies include repair, replacement, refund, or other relief under the Internet Transactions Act of 2023 and the Consumer Act of the Philippines.

Possible fraud is more likely when, for example:

the seller used false identities, documents, endorsements, or delivery receipts;
the seller never intended to deliver the item;
the account disappeared or blocked you immediately after payment;
the seller demanded repeated “release,” “insurance,” “tax,” or “verification” payments;
the payment account belongs to an apparently unrelated person;
a fake customer-service agent obtained your password, PIN, OTP, card details, or account access; or
the same listing or payment account appears in reports from other victims.

The facts and available records determine whether conduct amounts to estafa, a cybercrime, a consumer-law violation, an offense under the Anti-Financial Account Scamming Act, or merely a contractual dispute. Describe what happened accurately rather than trying to select the final criminal charge yourself.

What to do immediately

1. Stop all further payments and contact the financial institution

Use only the telephone number, in-app help center, website, or branch listed by your bank, card issuer, or e-wallet. Do not use contact details supplied by the suspected scammer.

Tell the institution:

the date, time, amount, and transaction reference;
the sending and receiving account details shown on your receipt;
whether you personally authorized the payment;
whether deception induced you to authorize it;
whether you disclosed an OTP, PIN, password, card number, or identification document; and
why you believe the transaction is fraudulent.

Ask it to:

flag the transaction and receiving account;
initiate its fraud or disputed-transaction procedure;
coordinate with the receiving institution;
consider a transfer recall, chargeback, or temporary hold where legally and operationally available;
secure your account if credentials were exposed; and
give you a written acknowledgment and case-reference number.

Under the Anti-Financial Account Scamming Act, Republic Act No. 12010, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction, subject to BSP rules, for a period that cannot exceed 30 calendar days unless a competent court extends it. The law also provides for coordinated verification by the institutions and account owners involved.

This is not an automatic 30-day freeze or automatic refund. Whether funds remain available, whether the transaction qualifies, and what action may lawfully be taken depend on the evidence, timing, applicable BSP rules, and the institutions’ verification.

If the transaction was unauthorized, say so clearly. If you authorized the transfer because the seller deceived you, state that instead. Do not falsely call an authorized payment “unauthorized”; inaccurate reporting can damage your claim and malicious reporting that causes funds to be held may itself carry liability.

2. Secure any compromised account

If you disclosed credentials, clicked a suspicious link, installed an unknown application, or allowed remote access:

change your passwords using a clean, trusted device;
sign out other active sessions;
change your PIN and recovery information where appropriate;
block or replace exposed cards;
enable multi-factor authentication;
remove unfamiliar devices and applications;
contact your mobile provider if your SIM stopped working unexpectedly; and
review recent transactions and account-profile changes.

Never give an OTP, PIN, password, card verification code, or screen-sharing access to a person claiming that these are needed to process a refund.

3. Preserve the evidence before reporting the account

Save the material first because a seller may delete messages, rename an account, edit a listing, or block you after receiving a report.

Keep:

the complete listing, including price, photos, description, URL, seller name, and account handle;
the seller’s profile or shop page and visible account identifiers;
the full conversation, not only selected messages;
order confirmations, invoices, receipts, and tracking information;
payment receipts and bank or e-wallet transaction records;
the beneficiary’s displayed name, account number, mobile number, QR code, and institution;
emails, text messages, call logs, and phone numbers;
fake IDs, permits, warranties, endorsements, or delivery documents sent to you;
photos or an unedited unboxing video if an item arrived;
the parcel, packaging, shipping label, and item received; and
every complaint acknowledgment and reference number.

Where possible, export chats or preserve the original files as well as screenshots. Record the date and time you captured each page. Do not crop out usernames, URLs, timestamps, transaction references, or surrounding context.

Create a short chronology showing:

when you saw the offer;
what the seller represented;
when and how you paid;
what was promised;
what was delivered, if anything;
when communication stopped; and
when you reported the incident to each institution.

Do not publicly post your own ID, address, full account number, OTP, or other sensitive information.

Report through the platform

Use the shopping app’s or social-media service’s built-in report and dispute tools. Report both the seller account and the specific listing or transaction.

Request:

cancellation, refund, or buyer-protection review, if still available;
preservation of the seller’s registration and transaction records;
removal or restriction of fraudulent listings; and
a complaint or ticket number.

The Internet Transactions Act requires covered e-marketplaces and digital platforms to provide a redress mechanism. For covered transactions, an aggrieved party must generally use the platform’s, marketplace’s, or e-retailer’s internal redress mechanism before going to an appropriate government agency, court, or alternative dispute-resolution process. That remedy is considered exhausted if the complaint remains unresolved for seven calendar days.

Do not wait seven days before alerting your bank or securing compromised accounts. Those steps are urgent. You may also promptly report apparent crime to law enforcement, especially when funds or electronic evidence may disappear.

File a cybercrime or police complaint

The Cybercrime Prevention Act of 2012 designates the PNP and NBI as cybercrime law-enforcement authorities. A conventional offense such as estafa may also fall under the Act when committed through information and communications technology. Other facts—such as account takeover, misuse of identifying information, or money-mule activity—may engage different provisions.

You may report through the PNP Anti-Cybercrime Group e-Complaint portal or approach the appropriate PNP anti-cybercrime unit, NBI cybercrime office, or police station. An online submission may begin the reporting process, but investigators may require personal appearance, identification, original devices or records, a sworn statement, or additional documents.

Bring or prepare:

a valid government-issued ID;
your written chronology;
screenshots and exported conversations;
transaction receipts and account statements;
the seller’s account, contact, and payment details;
the product listing and URL;
complaint numbers from the platform and financial institutions; and
the device containing the original messages, if requested.

Ask for proof of submission, the investigating office’s contact details, and the report or reference number. If your bank or e-wallet requires a police report or sworn complaint, ask the investigator what document can properly be issued at that stage.

A complaint does not itself establish guilt. Investigators and prosecutors must assess identity, intent, jurisdiction, admissible evidence, and the elements of the possible offense.

When to file with the DTI

A DTI complaint is most appropriate when the transaction was between a consumer and a seller acting in the course of business—for example, an online merchant, e-retailer, or marketplace seller—and the complaint concerns non-delivery, misrepresentation, defective goods, refusal of a valid remedy, or another unfair or deceptive sales practice.

Start with the merchant’s or platform’s internal complaint channel. If unresolved after seven calendar days, submit the complaint through the official DTI Consumer Care portal. Include the relief you want, such as a refund, replacement, repair, or compliance with the advertised terms.

The Internet Transactions Act generally covers business-to-consumer and business-to-business internet transactions within DTI’s mandate. It expressly excludes consumer-to-consumer transactions—such as a genuine one-off sale between private individuals—from its coverage. If a purported private seller was actually selling regularly as a business, document facts showing that activity, including multiple listings, shop branding, repeated sales, or business representations.

For a purely private-to-private transaction, platform remedies, the payment-provider process, and law-enforcement reporting may be more directly relevant than a DTI consumer case. DTI’s E-Commerce Bureau may nevertheless receive and refer complaints to the proper agency under its no-wrong-door function.

For covered online purchases, the law recognizes remedies such as repair, replacement, refund, and other relief when goods are defective, lost without the consumer’s fault, inconsistent with the warranty, or otherwise nonconforming. A claim for damages under the Internet Transactions Act must be filed before the court or DTI within two years from the time the cause of action arose. Other claims or offenses may follow different prescriptive periods, so do not treat that two-year period as a universal deadline.

Escalate an unresolved bank or e-wallet complaint to the BSP

Complain first to the bank, e-wallet, card issuer, or other BSP-supervised financial institution and keep its acknowledgment and response.

If the matter remains unresolved, use the BSP Consumer Assistance channels. The BSP currently accepts escalated complaints through the BSP Online Buddy and, as an alternative, through its Complaints, Inquiries and Requests form sent to consumeraffairs@bsp.gov.ph.

Include:

a concise account of the dispute;
the result you are requesting;
your contact details;
a copy of your complaint to the financial institution;
the institution’s response, if any; and
supporting transaction and communication records.

The BSP process concerns the conduct or response of a BSP-supervised institution. It does not replace a criminal complaint against the scammer or a consumer claim against the seller.

What reporting can—and cannot—do

Different reports serve different purposes:

Report	Main purpose
Bank, card issuer, or e-wallet	Protect the account, investigate the transaction, coordinate with the receiving institution, and consider available recovery measures
Shopping or social-media platform	Preserve and review account activity, apply buyer protection, and restrict fraudulent accounts or listings
PNP or NBI	Investigate possible crime, identify suspects, preserve or obtain evidence through lawful process, and refer cases for prosecution
DTI	Address covered consumer and e-commerce violations and facilitate appropriate consumer remedies
BSP	Review an unresolved complaint concerning a BSP-supervised financial institution

Filing with one office does not necessarily file the complaint with all others. Keep separate reference numbers and provide consistent facts in every submission.

Funds may already have been withdrawn or transferred through several accounts by the time a report is made. Banks, platforms, and government agencies may also be unable to disclose private account information directly to you without legal authority. A refusal to reveal the account holder’s personal details does not necessarily mean no investigation is taking place.

Common mistakes to avoid

Waiting for the seller’s promised refund. Report promptly while funds and digital records may still be traceable.
Sending another payment to release the first one. Genuine refunds do not require payment of a “clearance,” “insurance,” or “verification” charge to a personal account.
Deleting or blocking the account before saving evidence.
Submitting only cropped screenshots. Preserve full conversations, URLs, timestamps, and transaction references.
Relying on a public warning post as the formal complaint. Report through official channels.
Paying a “recovery agent.” Scammers often return pretending to be investigators, lawyers, hackers, or bank personnel who can recover funds for an advance fee.
Harassing or threatening the suspected account holder. The displayed recipient may be a money mule, identity-theft victim, or another intermediary. Give the evidence to investigators.
Making unsupported accusations against identifiable people online. Stick to documented facts and official reporting channels.
Assuming DTI handles every social-media sale. Genuine private consumer-to-consumer sales are outside the Internet Transactions Act.
Assuming a bank must automatically reimburse every scam payment. Liability and recovery depend on authorization, deception, security controls, timing, available funds, and the evidence in the particular case.

When help is urgent

Seek immediate assistance when:

the transaction is still pending or was made only minutes or hours ago;
the scammer has access to your bank, e-wallet, email, or social-media account;
your SIM suddenly became inactive;
unauthorized transactions are continuing;
the scammer has your government ID, selfie, signature, card details, or credentials;
threats, blackmail, stalking, or intimate images are involved;
a child, senior citizen, or other vulnerable person is being targeted;
you were induced to receive or forward money through your own account; or
the amount or consequences are substantial enough to require individualized legal advice.

If you allowed your account to receive or transfer suspicious funds, stop moving the money and obtain legal advice promptly. The Anti-Financial Account Scamming Act penalizes knowing money-mule activities, including lending, selling, renting, or allowing the use of a financial account for criminal proceeds.

Frequently asked questions

Can I recover money sent through an instant bank or e-wallet transfer?

Possibly, but recovery is not guaranteed. Report immediately so the institutions can verify the transaction and determine whether a recall, temporary hold, or other measure is available. Recovery becomes harder once the money has been withdrawn or transferred onward.

Should I report to DTI or the police?

Use DTI for covered consumer and online-business disputes. Use the PNP or NBI when the facts indicate deliberate fraud or another crime. The same incident may justify both reports because consumer relief and criminal investigation serve different purposes.

Must I know the scammer’s real identity before filing?

No. Provide every available identifier and explain that the true identity is unknown. Platforms and financial institutions may be compelled to disclose relevant records to competent authorities through lawful process.

What if the seller used another person’s bank or e-wallet account?

Include both the seller’s online identity and the recipient account information. Do not assume that the named recipient and the person operating the seller account are the same. Investigators must establish each person’s role.

What if I received a fake, damaged, or wrong item?

Preserve the packaging, shipping label, item, listing, and an unedited unboxing recording if available. Use the platform’s return or refund process. If the merchant does not resolve the issue within the applicable internal process, consider a DTI complaint. Report to law enforcement when the evidence indicates intentional fraud rather than an ordinary fulfillment error.

Can the platform give me the seller’s ID or address?

It may be restricted by privacy and disclosure rules. Under the Internet Transactions Act, covered platforms must maintain specified merchant information and may be required to provide it when a competent authority issues a subpoena in an investigation based on a sworn complaint. Ask the platform to preserve the records for lawful disclosure.

Is a Facebook Marketplace sale covered by the Internet Transactions Act?

It depends on who was selling. A merchant using social media to sell in the ordinary course of business may be covered. A genuine one-off transaction between private end-users is generally a consumer-to-consumer transaction and is expressly excluded. Fraud and other generally applicable laws may still apply.

Should I confront the scammer?

Usually, preserve the evidence and report first. Confrontation may prompt deletion of accounts, destruction of records, movement of funds, or further threats. Follow an investigator’s directions if contact is necessary.

Do I need a lawyer?

A lawyer is not always necessary to make an initial report. Consider legal assistance when the amount is substantial, several victims or jurisdictions are involved, investigators require a sworn legal filing, the institution rejects a significant claim, or you need to pursue civil or criminal proceedings.

Official references

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Procedures and available remedies may depend on the transaction, evidence, institution, platform rules, and later legal issuances. Official sources were checked on 18 September 2026.