How to Report an Online Shopping or Social Media Scam

Quick answer

If you paid an online seller or social-media account and believe you were scammed, act immediately:

  1. Contact your bank, card issuer, e-wallet, or payment provider through its official fraud channel. Ask it to flag the transaction, secure your account, trace the transfer, and initiate any available hold, dispute, reversal, or chargeback process.
  2. Report the seller and transaction through the shopping platform or social-media service. Ask for a refund and preservation of the account and transaction records.
  3. Preserve all evidence before posts, messages, or accounts disappear.
  4. For a consumer transaction, use the platform, marketplace, or e-retailer’s internal complaint process. Under the Internet Transactions Act, this process is deemed exhausted if the complaint remains unresolved after seven calendar days.
  5. Report suspected criminal fraud promptly to the PNP Anti-Cybercrime Group, the NBI Cybercrime Division, or the Cybercrime Investigation and Coordinating Center. Do not wait seven days where money is still moving, an account is compromised, threats are being made, or other victims remain at risk.
  6. If the seller or platform does not resolve the consumer complaint, file with the Department of Trade and Industry. If the problem involves how a BSP-supervised bank or e-wallet handled your report, escalate it to the Bangko Sentral ng Pilipinas after first complaining to the institution.

A report does not guarantee that money will be recovered. Recovery often depends on how quickly the payment provider is notified, whether the funds remain in a traceable account, the payment method, and the available evidence.

First, secure your money and accounts

Contact the bank, e-wallet, card issuer, or payment service using only the number in its official app, website, or on the back of the card. Do not call a number supplied by the suspected scammer or shown in an unsolicited message.

Tell the provider that the transaction is connected to suspected fraud. Give:

  • The transaction reference number;
  • Exact amount, date, and time;
  • Recipient’s name, account number, mobile number, or wallet identifier;
  • Your account details, without disclosing your password, PIN, CVV, or one-time password;
  • A short explanation of how the transaction occurred; and
  • Any police, CICC, platform, or complaint reference number already available.

Ask for a case or ticket number and written confirmation of the report. Ask whether the provider can initiate a disputed-transaction process, coordinate with the receiving institution, or temporarily hold identifiable funds under its applicable procedures.

The Anti-Financial Account Scamming Act and BSP Circular No. 1215 establish mechanisms for tracing disputed transactions, temporarily holding disputed funds in qualifying cases, and coordinating verification among BSP-supervised institutions. A hold is not automatic, permanent, or a final ruling that fraud occurred. The institutions must verify the transaction, follow safeguards, and protect against false or malicious reports.

If login credentials, an OTP, card information, or access to your phone was compromised:

  • Change the affected account password using a clean device;
  • Sign out other sessions and remove unfamiliar devices;
  • Replace reused passwords on other accounts;
  • Enable multi-factor authentication;
  • Lock or replace affected cards;
  • Ask the mobile network whether the SIM needs to be secured or replaced; and
  • Monitor accounts and credit facilities for unauthorized activity.

Never send another payment for a supposed “refund fee,” “verification deposit,” “account release,” “tax,” or “recovery charge.” This is often a second stage of the scam.

Preserve evidence before reporting the account

Do not rely only on screenshots of the seller’s profile. Preserve enough material to show the full transaction and identify the accounts involved.

Keep copies of:

  • The complete chat or message thread, including dates and timestamps;
  • The seller’s profile name, username, account URL, page URL, and account ID if visible;
  • The original product listing, advertisement, livestream, or social-media post;
  • Product description, price, promised condition, delivery date, warranty, and refund terms;
  • Order confirmation, invoice, electronic receipt, and tracking details;
  • Payment confirmation and the full transaction reference number;
  • Recipient bank or e-wallet name, account name, number, QR code, and mobile number;
  • Emails, text messages, call logs, and voice messages;
  • The parcel, shipping pouch, airway bill, packaging, and item actually received;
  • Clear photos or an unedited unboxing video, if available;
  • The platform complaint, seller’s response, and complaint reference number;
  • Any later demand for additional money; and
  • A chronological account written while events are fresh.

Where possible, export the original conversation or email instead of keeping screenshots alone. Preserve original files and metadata. Do not crop away dates, URLs, account names, or transaction references. Store a backup in a separate secure location.

Do not edit the conversation, impersonate another buyer, threaten the suspect, publish private account details, or arrange your own confrontation. Those actions can create safety, privacy, or evidentiary problems.

Report the seller to the platform or social-media service

Use the platform’s official reporting and dispute functions. Select the closest category, such as fraud, scam, non-delivery, counterfeit goods, misleading listing, or unauthorized transaction.

State clearly:

  • What was purchased;
  • What the seller represented;
  • How much and how you paid;
  • What went wrong;
  • The remedy you want, such as refund, replacement, or cancellation; and
  • That the platform should preserve the seller’s registration, login, listing, payment, and communication records for lawful investigation.

Save proof of the date and time the complaint was filed. Under Section 24 of the Internet Transactions Act of 2023, an aggrieved party must use the internal redress mechanism of the digital platform, e-marketplace, or e-retailer before pursuing the Act’s external complaint remedies. The internal process is deemed exhausted when the complaint remains unresolved after seven calendar days.

That seven-day rule is not a reason to delay urgent account-security measures, notification to a payment provider, evidence preservation, or contact with law enforcement when funds may still be intercepted or someone is in danger. Whether a particular filing is subject to the statutory prerequisite can depend on the nature of the proceeding, so follow the receiving agency’s instructions.

The seller or online merchant is ordinarily the party primarily liable to the consumer. A marketplace or digital platform is not automatically liable for every scam committed by a user. The Internet Transactions Act provides subsidiary or solidary liability only in specified circumstances, including particular failures of diligence, failure to provide information about a foreign merchant after notice, or failure to act on certain prohibited or dangerous listings.

File a consumer complaint with the DTI

The DTI route is appropriate when the dispute concerns an online merchant’s deceptive, unfair, or unconscionable sales practice, non-delivery, materially misdescribed goods, refusal to honor applicable remedies, or similar consumer issue.

After using the seller or platform’s internal complaint process, file through the DTI Consumer CARe System. The DTI also lists consumercare@dti.gov.ph as a complaint channel and provides its current filing information through the Fair Trade Enforcement Bureau.

Prepare:

  • Your complete name, address, email address, and contact number;
  • The respondent’s name and available address and contact details;
  • A concise chronological narration;
  • The specific remedy requested;
  • Proof of the transaction;
  • Proof that you used the internal redress process and the outcome or seven-day non-resolution;
  • A government-issued ID; and
  • Relevant messages, listings, receipts, payment records, and delivery evidence.

The DTI may mediate or adjudicate matters within its authority, but a DTI complaint is not the same as a criminal complaint. Its ability to provide consumer relief may also be limited where the respondent cannot be identified, the transaction was purely private rather than made in the course of trade or business, or the subject falls under another regulator.

The Internet Transactions Act allows an online consumer to pursue repair, replacement, refund, or other remedies recognized by the Consumer Act of the Philippines and other applicable laws. It also states that a damages claim under the Act may be filed before the court or DTI within two years from the time the cause of action arose. Do not treat that outside limit as permission to delay: platform, payment, evidence-preservation, and criminal processes may operate under different and much shorter practical or legal timelines.

Report suspected criminal fraud

An online-shopping or social-media deception may constitute estafa or another offense if the required elements can be proved. When an offense under the Revised Penal Code or a special law is committed through information and communications technology, the Cybercrime Prevention Act may also apply. The exact charge depends on the representations made, the offender’s intent, how the victim relied on them, the resulting loss, and the evidence—not simply on the failure to deliver an item.

You may report to:

Use the current contact details displayed on the agencies’ official websites. Online or telephone reporting may begin the process, but investigators may require personal appearance, identity verification, original records, a sworn complaint-affidavit, and supporting affidavits.

A useful complaint narrative should answer:

  1. Who contacted whom?
  2. What exactly did the seller represent?
  3. When and where was each representation made?
  4. Why did you believe it?
  5. What payment or property did you part with?
  6. Which account received it?
  7. What happened after payment?
  8. What attempts were made to obtain delivery or a refund?
  9. What identifying information is available?
  10. What loss resulted?

Report even if the displayed account name may belong to a money mule rather than the person who operated the social-media account. Give investigators the facts without claiming that an account holder is necessarily the mastermind.

Escalate payment-provider complaints to the BSP

The BSP Consumer Assistance Mechanism covers complaints involving financial products or services of BSP-supervised institutions. It is generally a second-level recourse, not the first place to report the scam itself.

First file with the bank, e-wallet, or other supervised institution through its Financial Consumer Protection Assistance Mechanism. Keep its complaint reference number and response. If the institution does not resolve the concern satisfactorily, escalate through the BSP Online Buddy on the BSP consumer-assistance page. If the chatbot is unavailable, the BSP’s official instructions allow submission of its complaint form and supporting records to consumeraffairs@bsp.gov.ph.

The BSP process examines the supervised institution’s handling of the financial-service complaint. It does not replace the platform complaint, DTI consumer case, or police or NBI investigation against the scammer.

Special situations

Credit or debit card payment

Immediately ask the card issuer whether the transaction qualifies for a card dispute or chargeback. The applicable reason, documents, and filing period depend on the card network, issuer rules, transaction type, and facts. Do not assume that every voluntary card payment can be reversed.

Bank transfer or e-wallet payment

Report to the sending institution immediately and provide the recipient details and transaction reference. Ask it to contact the receiving institution under its fraud and disputed-transaction procedures. Do not contact or pressure the recipient account holder yourself.

Cash on delivery

Photograph the unopened parcel and shipping label before opening it. Keep the packaging, item, receipt, and courier records. Report both to the platform and the courier, but distinguish a courier’s delivery role from the seller’s representations unless there is evidence that the courier participated in the fraud.

A social-media seller outside a marketplace

Report the profile, page, advertisement, and payment account separately. Save the exact profile and post URLs before the account is removed. A seller’s lack of a formal storefront does not prevent reporting, although identifying and obtaining relief from an anonymous or overseas seller may be harder.

Identity documents or personal data were sent

Secure the accounts that could be opened or accessed using the information. Notify affected institutions and watch for impersonation or unauthorized applications. If a business or organization improperly handled or exposed personal data, consult the National Privacy Commission complaint channels. The NPC process addresses data-privacy violations; it is not a substitute for reporting the underlying financial fraud.

The scammer is threatening or blackmailing you

Stop negotiating, preserve the threats, and contact law enforcement promptly. If there is an immediate threat to life or physical safety, call 911 or go to the nearest police station. Do not pay solely on a promise that stolen data, intimate material, or account access will be destroyed.

The seller appears to be overseas

Still report to the platform, payment provider, DTI where the transaction falls within its authority, and Philippine cybercrime authorities. Cross-border location can affect jurisdiction, evidence access, service of process, and recovery, so legal assistance may be needed.

Common mistakes to avoid

  • Waiting several days before notifying the payment provider;
  • Continuing to send money to “unlock” a refund;
  • Deleting messages out of embarrassment;
  • Reporting only the display name and not the account URL or payment details;
  • Sending investigators cropped or edited screenshots without originals;
  • Filing a vague complaint that does not state the representation, payment, loss, and requested remedy;
  • Assuming a platform report automatically becomes a police complaint;
  • Assuming a DTI complaint freezes a recipient’s bank account;
  • Publicly accusing an unverified person based only on the name attached to a payment account;
  • Paying a private “recovery agent” who guarantees retrieval of the funds;
  • Falsely describing an authorized purchase as an unauthorized transaction; or
  • Missing provider-specific dispute periods while waiting for the seller to respond.

When legal help is urgent

Consult a Philippine lawyer promptly when:

  • The loss is substantial or involves several victims;
  • The scheme appears organized, repeated, or cross-border;
  • A bank or platform has rejected a time-sensitive dispute;
  • You received a subpoena, demand letter, counter-complaint, or court document;
  • The suspect is known and you are considering a civil action;
  • Personal or intimate material is being used for extortion;
  • The scam involves investments, securities, lending, regulated products, or a specialized government regulator;
  • You are being asked to sign a settlement, waiver, quitclaim, or affidavit you do not fully understand; or
  • A filing deadline may be approaching.

A lawyer can assess the correct respondent, causes of action, jurisdiction, available provisional remedies, and whether the documents support a criminal, administrative, or civil case.

Frequently asked questions

Should I report to DTI or the police?

Often both, for different purposes. DTI handles consumer-law complaints within its authority. The PNP, NBI, and other cybercrime authorities investigate possible crimes. Reporting to one does not necessarily begin a case with the other.

Must I wait seven days before doing anything?

No. Notify the payment provider, secure accounts, and preserve evidence immediately. File the platform or seller complaint promptly; under the Internet Transactions Act, the internal redress mechanism is deemed exhausted after seven calendar days without resolution. Do not delay an urgent criminal or safety report.

Can the bank or e-wallet return my money?

Possibly, but not automatically. The answer depends on whether funds remain available, whether the transaction qualifies for a hold or dispute, the verification results, the payment method, and applicable rules. Report immediately and cooperate with requests for documents.

Is failure to deliver automatically estafa?

No. Non-delivery may be a consumer or contractual breach, but criminal fraud requires proof of the legal elements of the offense. Investigators and prosecutors assess the seller’s representations, intent, the victim’s reliance, and the resulting damage.

What if I authorized the transfer myself?

Still report it as suspected fraud and describe truthfully how you were induced to send the money. Do not call it an unauthorized transfer if you personally approved it. Social engineering can involve an authorized payment obtained through deception, but the available financial remedy will depend on the facts and governing rules.

What if I have only screenshots?

Submit them, but preserve stronger evidence if available: original messages, exported chats, emails, URLs, receipts, transaction records, parcel labels, and the device containing the conversation. Investigators may ask for the originals.

Can I post the scammer’s name and account online?

Use caution. An account name may belong to an identity-theft victim or money mule and may not identify the person who controlled the scam. Public accusations can also create privacy, harassment, or defamation issues. Give identifying information to the platform, financial institution, and authorities.

Can several victims file together?

Victims should each preserve their own proof and make an individual account of what happened. Tell investigators about the apparent pattern and other known victims. The proper consolidation or filing arrangement should be decided by the investigating authority or counsel.

Is a police blotter enough?

A blotter entry documents a report but may not, by itself, complete the requirements for investigation or prosecution. Ask what further documents, sworn statements, personal appearance, or follow-up are required, and keep the reference number.

Official references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Procedures and remedies depend on the transaction, documents, payment method, parties, and receiving agency. Official legal and procedural sources were checked as of September 14, 2026.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.