Quick answer

If you paid an online seller or social-media account and believe you were scammed, act immediately:

Contact your bank, card issuer, e-wallet, or payment provider through its official fraud channel. Ask whether the transfer can be held, recalled, traced, or disputed. Obtain a reference number.
Report the seller and transaction through the shopping platform or social-media service. Request a refund, account preservation, and removal of the fraudulent listing.
Preserve all evidence before posts, messages, or accounts disappear.
For a business-to-consumer transaction, file a consumer complaint through the DTI Consumer Complaints Assistance and Resolution System.
If there was deliberate deception, identity theft, account takeover, threats, or loss of money, report the incident to the PNP Anti-Cybercrime Group or the NBI Cybercrime Division.

These remedies can serve different purposes. A platform or DTI complaint may help obtain consumer redress, while a police or NBI complaint may lead to a criminal investigation. Reporting does not guarantee recovery, but acting quickly gives financial institutions and investigators a better chance to trace the funds and preserve records.

What counts as an online shopping or social-media scam?

A failed or disappointing transaction is not automatically a crime. A scam generally involves intentional deception used to obtain money, property, credentials, or another benefit. Common examples include:

A seller takes payment while using a false identity and never intends to deliver.
A fake shop copies the name, logo, photos, or website of a legitimate business.
The buyer receives a worthless or entirely different item as part of a deliberate bait-and-switch scheme.
A supposed seller sends a false payment, refund, customs, or delivery link to steal login or card information.
A hacked social-media account asks friends or followers to send money.
A seller produces fabricated receipts, tracking details, permits, reviews, or proof of ownership.
A scammer asks for additional “release,” “insurance,” “verification,” or “processing” payments after receiving the original amount.

By contrast, late delivery, an ordinary product defect, or a genuine disagreement over quality may principally be a consumer or contractual dispute. Evidence of false representations made before or when payment was obtained can be important in distinguishing fraud from a mere breach of contract.

Depending on the facts, intentional online deception may constitute estafa under Article 315 of the Revised Penal Code. When a crime defined by the Revised Penal Code or a special law is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act may apply. The exact offense and responsible persons must be determined from the evidence by investigators and prosecutors—not merely from the label “scam.”

Do these steps first

1. Call the payment provider immediately

Use only the telephone number, app, website, or branch listed by the bank, card issuer, or e-wallet itself. Do not use contact details supplied by the suspected scammer.

Tell the provider:

The transaction was induced by suspected fraud.
The amount, date, time, transaction number, and recipient details.
Whether you disclosed an OTP, password, PIN, card number, or identification document.
Whether your device, email, social-media account, or banking account may have been compromised.
What action you want: a hold, recall, trace, charge dispute, account restriction, or other available fraud procedure.

Ask for a case or reference number and written confirmation. If the payment went to another bank or e-wallet, ask whether your provider can notify the receiving institution.

A transfer that you personally authorized may be harder to reverse than an unauthorized account transaction. Nevertheless, report it immediately. Recovery depends on the payment method, available balance, provider rules, timing, and evidence. Do not pay anyone who promises a guaranteed “fund recovery” in exchange for another fee.

If the financial institution does not resolve the complaint, escalate it through the BSP Consumer Assistance Mechanism. The BSP generally expects the consumer to complain first to the BSP-supervised institution and provide that institution’s reference number.

2. Secure your accounts

If you clicked a suspicious link, installed an application, shared credentials, or lost control of an account:

Change the affected password from a trusted device.
Change any other account using the same or a similar password.
Sign out other sessions and remove unknown devices.
Enable multi-factor authentication.
Contact your mobile provider if your SIM may have been taken over.
Check bank, e-wallet, email, and social-media activity for additional transactions or changes.
Block affected cards or payment credentials when advised by the provider.

Never share an OTP, PIN, password, recovery code, or screen-sharing access with someone claiming to investigate the scam.

3. Preserve the evidence before reporting the account

Save evidence first because blocking or reporting an account may make its contents inaccessible. Keep original electronic files where possible, not only edited screenshots.

Preserve:

The full seller profile, username, account URL, page ID, telephone number, email address, and displayed business details.
The listing, advertisement, livestream, product description, price, promises, warranties, and claimed delivery date.
The complete conversation, including dates, timestamps, voice messages, and call logs.
Order confirmations, invoices, electronic receipts, courier records, parcel labels, and unboxing photos or video.
Bank or e-wallet receipts, transaction numbers, recipient account names and numbers, QR codes, and payment instructions.
The web address of any fake payment or delivery page.
Messages showing demands for additional payment, refusals to refund, admissions, threats, or deletion of the listing.
Your communications with the seller, platform, courier, payment provider, and government agencies.
The physical item, packaging, and shipping label if anything was delivered.

Write a short chronological account while the details are fresh. Identify what the seller represented, why you relied on it, what you paid, what happened afterward, and the loss you suffered.

Do not publicly post unredacted IDs, bank details, home addresses, or other sensitive information. Give complete copies only through legitimate complaint or investigative channels.

Report the seller to the platform

Use the platform’s in-app order-dispute or fraud-reporting process. A general “report profile” button may remove the account but may not open a refund claim, so use the transaction-specific remedy when available.

Request:

Cancellation, refund, or buyer-protection review;
Preservation of account, listing, chat, login, and payment records;
Restriction or removal of the fraudulent account or content; and
A complaint reference number or downloadable record of the report.

Under the Internet Transactions Act of 2023, covered e-marketplaces and digital platforms must provide a responsive mechanism for reporting users or information that may violate the law. Online merchants and e-retailers are primarily liable for consumer claims arising from their transactions. Platform liability is not automatic; it depends on circumstances specified by law, including failures to exercise required diligence or respond as required after notice.

For transactions covered by that Act, an aggrieved party must ordinarily use the platform’s, marketplace’s, or e-retailer’s internal redress mechanism before filing with a court or appropriate government agency. The mechanism is deemed exhausted if the complaint remains unresolved seven calendar days after filing. Keep proof of the filing date and result.

Do not wait seven days, however, to secure compromised accounts or alert a payment provider about suspected fraud. If there are continuing unauthorized transfers, threats, danger, or rapidly disappearing evidence, seek immediate law-enforcement assistance.

File a DTI consumer complaint

DTI is generally the appropriate consumer-protection agency for online sales of non-financial goods or services by a business or merchant. File through DTI CAReS and attach:

Your name and reliable contact information;
The seller’s business, account, and contact details;
A concise timeline;
The amount paid and remedy requested;
Proof of payment and order;
The listing, conversation, receipt, and delivery evidence; and
Proof that you first used the seller’s or platform’s internal complaint process, when the Internet Transactions Act applies.

Possible consumer remedies may include repair, replacement, refund, or other relief available under the Consumer Act and applicable law. A refund or damages award is not automatic; it depends on the transaction, documents, responsible party, and available legal remedy.

The Internet Transactions Act covers qualifying business-to-business and business-to-consumer internet transactions connected with the Philippine market. It expressly excludes consumer-to-consumer transactions. Thus, a one-off purchase from a private individual may fall outside that Act even if it occurred through social media. Criminal, civil, platform, and payment-provider remedies may still be available.

The Act provides a two-year period, counted from when the cause of action arose, for a consumer to claim damages under its damages provision before a court or DTI. Other claims and offenses may have different prescriptive periods. File promptly rather than assuming that the longest possible period applies.

Report suspected criminal fraud

A DTI complaint is not a substitute for a criminal complaint when the evidence indicates deliberate fraud. You may approach either of these agencies:

PNP Anti-Cybercrime Group

The BSP’s official scam-reporting directory lists the following PNP Anti-Cybercrime Group contacts:

Email: acg@pnp.gov.ph
Telephone: (02) 3414-1560
Mobile: 0998-598-8116

Contact details can change, so verify them on the official BSP scam-reporting directory or through an official PNP channel before sending sensitive evidence.

NBI Cybercrime Division

The NBI accepts an online complaint. Its official citizen’s charter also states that victims may proceed to the Cybercrime Division to complete a complaint sheet, undergo an initial interview, execute sworn statements, and submit supporting documents or a relevant device for examination. See the NBI procedure for victims of computer crimes.

Bring or prepare:

A government-issued ID;
Your written chronology;
Printed and electronic copies of the evidence;
Transaction and recipient-account details;
The device involved, if investigators request it; and
A sworn statement or affidavit, if required.

Be precise. Separate what you personally observed from what another person told you. Do not alter messages or manufacture evidence. Investigators may need legal process to obtain subscriber, platform, telecommunications, or banking records that are not available to you.

You may also report at a police station for referral to the proper cybercrime unit. Jurisdiction, venue, and the appropriate prosecutor’s office can depend on where relevant acts occurred, where the victim received or acted on the deception, and other facts. Let investigators or counsel assess these questions.

If personal information was stolen

If the scam involved a fake form, phishing page, identity document, selfie, account takeover, or unauthorized disclosure of personal data:

Tell affected banks, e-wallets, email providers, and platforms.
Preserve the phishing link and evidence of how the information was obtained.
Monitor accounts for impersonation or unauthorized applications.
Consider reporting improper handling of personal data by an organization to the National Privacy Commission.

An NPC complaint concerns possible violations of data-protection law. It does not replace reports to the payment provider, DTI, police, or NBI.

What outcome can you request?

Depending on the forum and facts, you may request:

Cancellation or refund;
Repair or replacement for a defective or nonconforming product;
Reversal, recall, trace, or dispute review by the payment provider;
Removal or restriction of the seller’s account or listing;
Preservation and lawful disclosure of relevant records;
Administrative enforcement by DTI; or
Criminal investigation and restitution or civil liability where legally supported.

Be realistic about the limits of each channel. DTI handles consumer and trade concerns; BSP assists with unresolved complaints against BSP-supervised financial institutions; platforms apply their own dispute systems; and the PNP and NBI investigate possible crimes. None can promise that money will be recovered.

Common mistakes to avoid

Waiting for repeated excuses while the funds are being moved.
Continuing to send “verification,” “tax,” “delivery,” or “recovery” fees.
Deleting the conversation after blocking the scammer.
Saving only cropped screenshots that omit usernames, URLs, dates, or transaction numbers.
Reporting only to the social-media platform and assuming that this starts a police investigation.
Reporting only to the police and missing a short platform, card, or payment-provider dispute window.
Using unofficial telephone numbers found in messages or sponsored search results.
Giving investigators conclusions without supplying the underlying records.
Publicly accusing the wrong person based only on a recipient name, which may belong to a compromised or misused account.
Sending sensitive evidence to people who cannot verify their official identity.
Assuming that a social-media account, government ID image, registration certificate, or payment-account name proves who controlled the scam.

When help is urgent

Contact the payment provider and law enforcement immediately if:

Unauthorized transactions are still occurring.
Your email, SIM, social-media account, or banking account has been taken over.
The scammer has your password, OTP, card details, identification document, selfie, or biometric information.
You are being threatened, blackmailed, stalked, or pressured to meet in person.
A child, older person, or other vulnerable person is being targeted.
The loss is substantial or involves borrowed money, business funds, multiple victims, or several recipient accounts.
The scammer is impersonating a government office, bank, courier, police officer, lawyer, or someone you know.
The account or evidence is rapidly being deleted.

For immediate danger, call the appropriate emergency authorities. For a substantial loss, disputed identity, complicated evidence, or possible civil action, consult a Philippine lawyer promptly. Qualified indigent persons may inquire with the Public Attorney’s Office about eligibility for assistance.

Frequently asked questions

Can I report a scam even if I sent the money voluntarily?

Yes. A transfer may have been authorized but still induced by fraud. Tell the provider that you made the transfer because of suspected deception. Whether it can be reversed depends on the payment system, timing, available funds, and investigation.

Should I report to DTI or to the police?

You may need both. DTI addresses covered consumer and e-commerce violations. The police or NBI investigates possible crimes. Report to the payment provider and platform as well because those channels may offer the fastest opportunity to restrict an account or dispute a transaction.

Does the Internet Transactions Act cover a purchase from an individual Facebook seller?

Not necessarily. The Act excludes consumer-to-consumer transactions. If the person was regularly acting as an online merchant, the classification may be different and will depend on the evidence. Platform rules and ordinary civil or criminal laws may apply even when the Act does not.

Must I know the scammer’s real name before reporting?

No. Provide every identifier you have, including account URLs, usernames, telephone numbers, recipient-account details, transaction references, email addresses, and delivery information. Authorities may seek additional records through lawful process.

Is a seller’s refusal to refund automatically estafa?

No. Criminal fraud generally requires proof of the elements of the offense, including deceit and resulting damage where applicable. A genuine contractual disagreement may remain civil or administrative. The surrounding representations, timing, identity used, delivery conduct, and handling of the money matter.

Can the bank or e-wallet guarantee recovery?

No. Immediate reporting may improve the chance of tracing or restricting funds, but recovery is not guaranteed. Obtain a complaint reference number and escalate an unresolved complaint involving a BSP-supervised institution through the BSP Consumer Assistance Mechanism.

Is there one deadline for every complaint?

No. Platform and payment disputes may have their own shorter periods. The Internet Transactions Act sets a two-year period for damages under its damages provision, while civil claims and criminal offenses may follow different rules. Preserve evidence and report without delay.

Official legal and reporting sources

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Rights, jurisdiction, deadlines, and remedies depend on the transaction and evidence. Official sources and reporting channels were checked on September 12, 2026.