How to Report an Online Shopping or Social Media Scam

Quick answer

If you paid an online seller or social-media account and believe you were scammed, act immediately:

  1. Contact the bank, e-wallet, card issuer, or payment provider through its official app or hotline. Report the transaction as fraudulent, ask whether the transfer can be recalled or the recipient account restricted, and obtain a reference number.
  2. Preserve the seller’s profile, advertisement, messages, payment details, order records, delivery information, and platform URLs before anything is deleted.
  3. Report the account and transaction through the shopping platform or social-media service.
  4. File a cybercrime report with the Philippine National Police Anti-Cybercrime Group (PNP-ACG), the National Bureau of Investigation (NBI), or the Cybercrime Investigation and Coordinating Center (CICC).
  5. If the transaction involved a genuine online business or marketplace, pursue consumer redress through the Department of Trade and Industry (DTI). If your bank or e-wallet does not properly address your complaint, escalate it to the Bangko Sentral ng Pilipinas (BSP).

These routes serve different purposes. A platform report may remove the listing or release an in-platform refund. A DTI complaint seeks consumer redress and regulatory action. A report to the PNP, NBI, or CICC may lead to a criminal investigation. Reporting the payment to the financial institution gives the best—but never guaranteed—chance of stopping or tracing funds.

First, secure your money and accounts

Do not wait for the seller to provide another excuse if the circumstances already point to fraud. Minutes can matter when money has just been transferred.

Contact the payment provider

Use only the contact information inside the provider’s official app, on the back of your card, or on its verified website. Tell the provider:

  • The transaction date, time, amount, and reference number
  • The recipient’s account name, account number, mobile number, QR code, or merchant identifier
  • Why you believe the transaction was fraudulent
  • Whether you personally authorized the payment or someone accessed your account without permission
  • Whether you disclosed an OTP, PIN, password, card security code, or recovery code
  • Whether the scammer still appears to be communicating or moving funds

Ask the provider to:

  • Secure your account and terminate unauthorized sessions
  • Block affected cards or credentials
  • Attempt a transfer recall, chargeback, dispute, or other applicable recovery process
  • Flag the recipient account for investigation
  • Preserve transaction and access records
  • Give you a case or ticket number and written acknowledgment

A voluntary transfer induced by deception is not the same as a transaction made without your authorization. Available remedies, evidence requirements, and possible reimbursement can differ. Do not falsely describe an authorized transfer as unauthorized; explain exactly how the scam occurred.

A completed instant transfer may be difficult to reverse. No government agency, bank, or e-wallet can promise recovery simply because a report was filed.

Change compromised credentials

If you clicked a suspicious link, installed an app, shared credentials, or allowed screen-sharing or remote access:

  • Disconnect the affected device from the internet if it may still be controlled remotely.
  • Using a different trusted device, change the passwords for your email, banking, e-wallet, shopping, and social-media accounts.
  • Sign out other sessions and enable multi-factor authentication.
  • Remove unfamiliar devices, forwarding rules, recovery addresses, and linked accounts.
  • Contact your mobile provider if your SIM stopped working unexpectedly or you suspect a SIM-swap.
  • Have the device checked before using it again for financial transactions.

Never provide another OTP or send a supposed “release,” “verification,” “tax,” or “recovery” payment. Legitimate investigators and financial institutions do not need your password or PIN.

Preserve evidence before reporting the account

Capture evidence first whenever it is safe to do so. Blocking or reporting an account may make its content harder to access.

Keep original electronic files and make backup copies of:

  • Screenshots and screen recordings showing the full conversation
  • The profile name, username, account ID, profile URL, page URL, and listing URL
  • Advertisements, product descriptions, prices, claimed warranties, and promised delivery dates
  • Order confirmations, invoices, receipts, tracking numbers, and courier messages
  • Bank or e-wallet transaction receipts and complete reference numbers
  • Recipient account names, account numbers, mobile numbers, QR codes, and payment instructions
  • Email addresses, phone numbers, websites, and links used by the scammer
  • Voice messages, call logs, emails, photographs, and videos
  • The package, shipping label, waybill, unboxing video, and item received, if any
  • Your communications demanding delivery, correction, cancellation, or refund
  • The platform’s responses, refund decision, and report reference number
  • The bank or e-wallet complaint acknowledgment and case number

Retain the original phone, computer, messages, emails, and files. Do not crop every screenshot so tightly that the date, sender, URL, or surrounding conversation disappears. Export chats where the service permits it, but keep the original conversation in the account as well.

Prepare a short chronology stating:

  • When and where you saw the offer
  • What the seller represented
  • What you agreed to buy
  • How and when you paid
  • What happened afterward
  • What refund or delivery demands you made
  • The amount lost and any additional harm

Avoid editing, annotating, or repeatedly forwarding the only copy of an important file. Investigators may need the original or its metadata.

Report through the shopping or social-media platform

Use the platform’s official order-dispute, refund, or fraud-reporting process. Select the most accurate reason, such as:

  • Item not received
  • Counterfeit or materially different item
  • Unauthorized transaction
  • Seller impersonation
  • Account takeover
  • Phishing
  • Fraud or scam

If payment remained within a marketplace’s checkout system, do not confirm receipt unless the correct item has actually arrived and been inspected. Open the dispute within the period shown in the order or platform rules. Those periods vary, so check the transaction page immediately.

Ask the platform to preserve the account’s registration, login, transaction, listing, and communications records for lawful investigation. A platform may not disclose another user’s private information directly to you, but investigators can pursue appropriate legal process.

Reporting a profile is useful, but it is not a substitute for reporting the payment, filing a consumer complaint, or making a formal criminal complaint.

File a cybercrime report

Online selling fraud may fall under more than one law depending on the evidence. Possible offenses include estafa under Article 315 of the Revised Penal Code, computer-related fraud or computer-related identity theft under the Cybercrime Prevention Act of 2012, or offenses involving financial accounts, money mules, and social-engineering schemes under the Anti-Financial Account Scamming Act.

The exact charge is for investigators, prosecutors, and courts to determine. A late delivery, defective product, or contract dispute is not automatically a crime. Criminal fraud generally requires evidence of deceit and the resulting loss, not merely poor service or a broken promise.

You may approach any of these official channels:

  • PNP Anti-Cybercrime Group: Use the contact or complaint channel published on the official PNP-ACG website, approach a regional anti-cybercrime unit, or go to the nearest police station and request referral or coordination.
  • National Bureau of Investigation: Consult the NBI’s official investigation services and office information and approach the Cybercrime Division or an appropriate regional or district office.
  • Cybercrime Investigation and Coordinating Center: Submit an incident through the CICC reporting page or use the current contact details published on the CICC website.

An initial online report, email, or hotline call may not complete a criminal complaint. You may still be asked to appear, establish your identity, execute a sworn complaint-affidavit, identify or authenticate records, and provide the device or original files for examination.

Bring or prepare:

  • A government-issued ID
  • Your written chronology
  • Printed and electronic copies of the evidence
  • Proof that you owned or controlled the affected account
  • Proof of payment and the financial institution’s case number
  • The scammer’s identifiers and links
  • Your platform report and response
  • The names and contact details of witnesses, if any

Obtain an acknowledgment, blotter entry, complaint number, or receiving copy. Record the office, date, and officer who received the report.

Do not conduct your own entrapment, threaten the suspected scammer, publish unverified personal information, or attempt to access the person’s account. Those actions may endanger you, prejudice an investigation, or create separate legal problems.

File a DTI consumer complaint when the transaction involves a seller or marketplace

The Internet Transactions Act of 2023 applies to covered business-to-business and business-to-consumer internet transactions. It imposes duties on online merchants and, in defined circumstances, e-marketplaces and digital platforms. The Consumer Act of the Philippines also provides consumer-protection and complaint mechanisms.

A DTI complaint is especially appropriate when the issue concerns a business transaction, such as:

  • Non-delivery
  • Refusal to honor a valid refund or remedy
  • Misrepresentation of a product or seller
  • Counterfeit, defective, unsafe, or materially different goods
  • Undisclosed charges
  • Unfair or deceptive sales practices
  • A marketplace’s handling of a covered consumer complaint

Start with the merchant and platform’s internal redress process when one is available. Keep proof that you attempted to resolve the matter.

You may file through the DTI Consumer CARe System. DTI guidance requires identifying information for the complainant and respondent, a narration of facts, the remedy demanded, proof of the transaction, and a government-issued ID. DTI also publishes consumer complaint guidance and agency referrals.

State the remedy you want clearly—for example, delivery, repair, replacement, refund, or another remedy permitted by law. Do not assume that DTI can identify an anonymous scammer, freeze an account, or conduct a criminal prosecution. If there is evidence of deliberate fraud, use the cybercrime-reporting route as well.

Some products and services fall primarily under another regulator. Food, medicines, financial products, telecommunications, insurance, and securities concerns may be referred to the agency with the relevant jurisdiction.

Escalate unresolved bank or e-wallet complaints to the BSP

For a complaint involving a BSP-supervised bank, e-money issuer, or other supervised financial institution, first use that institution’s consumer-assistance mechanism. Keep its written response or proof that you filed the complaint.

If the concern remains unresolved, use the BSP’s Consumer Assistance Mechanism. The BSP accepts complaints through its BSP Online Buddy and, according to its current official guidance, through a completed complaint form sent to consumeraffairs@bsp.gov.ph.

Include:

  • A clear summary of the complaint
  • The remedy requested
  • Your contact details
  • The complaint submitted to the institution
  • The institution’s reply, if any
  • Supporting documents

The BSP escalation process addresses the conduct of supervised financial institutions. It does not replace a police or NBI complaint against the scammer.

If personal information or an identity was misused

If the incident involved an exposed ID, unauthorized disclosure of personal information, identity impersonation, or mishandling of your data, notify the organization that controls the data and ask it to secure the account and investigate.

A privacy complaint may also be appropriate before the National Privacy Commission. Not every scam is a privacy-law violation, however. The relevant question is whether a person or organization improperly processed, disclosed, secured, or used personal data within the Commission’s jurisdiction.

If your identity documents were sent to the scammer, preserve proof of what was sent and monitor accounts opened or transactions attempted in your name. Consider notifying institutions that may rely on the compromised document.

Which report should you file?

Situation Immediate route
Money was just transferred Payment provider first; request recall, restriction, and preservation
Card purchase or unauthorized card use Card issuer’s fraud and dispute channel
Marketplace order problem Platform dispute, then DTI when appropriate
Deliberate deception, fake account, or impersonation PNP-ACG, NBI, or CICC
Bank or e-wallet complaint remains unresolved BSP Consumer Assistance Mechanism
Personal data or identity was improperly used Account provider and, when applicable, National Privacy Commission
Threats, extortion, stalking, or immediate physical danger Nearest police station or emergency assistance immediately

You do not necessarily have to choose only one route. A single incident may require a payment dispute, a platform report, a DTI complaint, and a criminal report because each addresses a different part of the problem.

Reporting when the seller is anonymous or overseas

You may still report even if you know only a username, page, phone number, payment account, or parcel information. Provide every available identifier and let investigators determine whether lawful requests can be made to platforms, telecommunications providers, couriers, or financial institutions.

The Internet Transactions Act may apply to a person engaged in electronic commerce who purposefully reaches the Philippine market even without a legal presence here. Actual enforcement and recovery can nevertheless be harder when the operator, platform, assets, or evidence are abroad.

Do not pay a private “hacker,” tracing service, or recovery agent who promises guaranteed identification or recovery. This is a common second scam targeting people who have already lost money.

Important deadlines

There is no safe universal waiting period.

Platform refund windows, card-dispute periods, contractual deadlines, evidence-retention periods, and the legal prescription of claims can differ. The proper criminal classification—and therefore the applicable prescriptive period—may depend on the amount, method, dates, accused, and evidence.

For that reason:

  • Report the payment immediately.
  • Open the platform dispute as soon as the problem becomes apparent.
  • File consumer and criminal reports without unnecessary delay.
  • Seek legal advice promptly if a deadline may be near.

Do not wait for a seller’s repeated promises until the platform’s refund or dispute window closes.

Common mistakes that weaken a complaint

  • Continuing to send “release,” “insurance,” “customs,” or refund-processing fees
  • Deleting the conversation after blocking the account
  • Saving only cropped screenshots without dates, usernames, or URLs
  • Posting the scammer’s financial details publicly instead of giving them to investigators
  • Reporting only to the social-media platform
  • Failing to notify the bank or e-wallet immediately
  • Giving inconsistent descriptions of whether the payment was authorized
  • Editing receipts or chat files
  • Sending original evidence without keeping a copy
  • Filing under a false name or exaggerating facts
  • Assuming that a business-registration record proves that the person operating the account is genuine
  • Paying someone who claims to be an investigator or lawyer without independently verifying the person and office

When legal help is urgent

Consult a Philippine lawyer promptly when:

  • The loss is substantial or involves several victims
  • The scheme appears organized, repeated, or cross-border
  • Your identity, account, or device remains compromised
  • You are being threatened, blackmailed, stalked, or extorted
  • The scam involves intimate images or a child
  • You received a subpoena, prosecutor’s notice, court paper, or demand letter
  • An investigator asks you to surrender a device containing sensitive or privileged material
  • The payment provider denies a significant claim and the factual basis is disputed
  • You are considering civil action to recover money
  • A filing or prescription deadline may be approaching
  • You have been accused of serving as a money mule or allowing your account to receive or transfer suspicious funds

If there is immediate danger, contact the nearest police station or emergency services. Do not arrange an in-person confrontation.

Frequently asked questions

Can I report a scam even if I sent the money voluntarily?

Yes. A payment can be authorized but induced by deception. Explain the representations that caused you to pay and provide proof. Whether the facts establish estafa, computer-related fraud, another offense, or only a civil dispute depends on the evidence.

Will the bank or e-wallet automatically return my money?

No. Recovery depends on factors such as the payment method, timing, whether funds remain available, whether the transaction was authorized, provider rules, and the investigation’s findings. Immediate reporting improves the possibility of intervention but does not guarantee reimbursement.

Should I report to DTI or the police?

Use DTI for covered consumer redress and regulatory concerns. Use the PNP, NBI, or CICC for suspected criminal fraud. If an online purchase involved both a consumer violation and deliberate deception, filing through both routes may be appropriate.

What if I have only screenshots and a payment receipt?

Report anyway. Include every identifier available, such as account numbers, usernames, links, phone numbers, transaction references, courier details, and timestamps. Investigators will determine whether additional records can lawfully be obtained.

Can I post the scammer’s name and ID online?

Public posting creates risks, particularly if the identity is stolen, the wrong person is named, or private information is exposed. Preserve the material and give it to the platform, financial institution, regulator, or investigator. Avoid public accusations that you cannot prove.

Can I demand the recipient’s identity from the bank or platform?

You may ask the institution to preserve records and cooperate with authorities, but privacy and confidentiality rules may prevent direct disclosure to you. Investigators, prosecutors, and courts can use the appropriate legal processes.

Is a failed delivery always estafa?

No. Non-delivery can result from a genuine dispute, delay, negligence, or breach of contract. Evidence that the seller used deceit to obtain payment is important to a criminal fraud case.

Do I need a lawyer to make the first report?

Usually, you may report directly to the platform, payment provider, DTI, PNP, NBI, CICC, or BSP. A lawyer becomes particularly useful when the loss is substantial, the facts are complex, a sworn complaint must be prepared, civil recovery is being considered, or a legal deadline is in question.

This article provides general Philippine legal information, not legal advice for a particular case. Procedures and available remedies depend on the transaction, evidence, institutions involved, and current agency rules. Official sources and reporting channels were checked as of 14 September 2026.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.