How to Report an Online Shopping or Social Media Scam

Quick answer

If you paid an online seller or social-media account and believe you were scammed, act immediately:

  1. Contact your bank, card issuer, or e-wallet through its official fraud channel. Report the transaction as disputed, ask whether funds can be held or traced, and obtain a reference number.
  2. Secure any compromised account. Change passwords, sign out other sessions, enable multi-factor authentication, and block affected cards or wallets.
  3. Preserve all evidence before the seller deletes or changes anything.
  4. Report the seller and transaction through the shopping platform or social network.
  5. Report the incident to law enforcement or the national anti-scam channel, especially if money was taken through deception, an account was hacked, or the seller used a false identity.
  6. File a DTI consumer complaint when the dispute involves a business or person regularly selling goods or services online.

These channels serve different purposes. A platform report may remove an account; a bank report may help preserve funds; DTI may address a consumer dispute; and the police or NBI may investigate a crime. Filing a report does not by itself guarantee a refund or conviction.

First, stop any further loss

Notify the payment provider immediately

Use only the verified hotline, app, website, or branch of the bank, card issuer, remittance company, or e-wallet involved. Do not call a number supplied by the suspected scammer.

Give the provider:

  • The transaction date, time, amount, and reference number
  • The source and recipient account or wallet details shown in your records
  • A short explanation of how the deception occurred
  • Copies of relevant chats, receipts, and payment confirmations
  • Any related unauthorized transactions
  • Your requested action, such as blocking the account, disputing the charge, tracing the transfer, or preserving remaining funds

Ask for a case or ticket number and written acknowledgment. Follow any affidavit, identification, or documentation requirements promptly.

Under the Anti-Financial Account Scamming Act, covered financial institutions may temporarily hold funds involved in a disputed transaction and must conduct coordinated verification in situations governed by the law and BSP rules. A hold is not automatic, and it does not mean that the money will necessarily be returned. Whether funds remain available, whether the transaction qualifies, and who is legally entitled to them depend on the evidence and verification process.

If the provider does not satisfactorily resolve the matter, use the BSP Consumer Assistance Mechanism. The financial institution’s own consumer-assistance mechanism is ordinarily the first-level recourse. The BSP accepts escalations through its BOB chatbot or, when BOB is unavailable, through its prescribed complaint form and consumeraffairs@bsp.gov.ph.

Secure your accounts and identity

If you clicked a link, installed an application, disclosed an OTP, shared card or login details, or allowed remote access:

  • Disconnect the affected device from the internet if someone still has remote access.
  • Remove unfamiliar applications only after recording their names and permissions.
  • Change the password of the affected account from a clean device.
  • Change any other account using the same or a similar password.
  • Sign out all active sessions and remove unknown devices.
  • Enable multi-factor authentication.
  • Block or replace compromised cards and SIMs when appropriate.
  • Check email-forwarding rules, linked accounts, recovery addresses, and recent logins.
  • Monitor statements and notifications for further transactions.
  • Tell your mobile provider promptly if your SIM suddenly loses service or you suspect a SIM swap.

Never pay a supposed “recovery agent” who demands an advance fee or asks for another OTP. Scammers sometimes target victims a second time by claiming that they can retrieve lost funds.

Preserve evidence before reporting

Keep the original electronic records whenever possible. Screenshots are useful, but they should supplement—not replace—downloaded statements, exported conversations, emails, receipts, and platform records.

Preserve:

  • The seller’s profile name, username, user ID, page URL, shop URL, and profile link
  • Screenshots or screen recordings of the profile, listing, advertisement, comments, and reviews
  • The complete conversation, including dates and timestamps
  • The promised item, condition, price, delivery date, warranty, and refund terms
  • Order numbers, invoices, electronic receipts, and shipping records
  • Payment confirmations and official bank or wallet statements
  • Recipient names, account or wallet numbers, QR codes, phone numbers, and email addresses
  • The parcel, waybill, packaging, and item received
  • An uninterrupted unboxing video, if one exists
  • Voice messages, call logs, email headers, and links sent by the seller
  • The seller’s refusal to deliver, replace, refund, or communicate
  • Your complaint to the platform and every reference number or response
  • The names of witnesses and a clear chronological account of events

Do not edit original files. Keep backup copies in a separate device or cloud account. Record the date and time when each webpage was captured because online content can disappear quickly.

Do not publicly post the scammer’s alleged address, identification document, financial-account details, or other personal information. Give sensitive evidence to the platform, financial institution, or authorities through official channels.

Report through the platform first

Use the shopping site’s or social network’s internal complaint or redress mechanism. Select the most accurate reason—such as non-delivery, counterfeit goods, impersonation, account takeover, fraudulent payment request, or item not as described—and request the specific remedy you want.

For covered business-to-consumer internet transactions, Section 24 of the Internet Transactions Act of 2023 generally requires an aggrieved party to use the platform’s, e-marketplace’s, or e-retailer’s internal redress mechanism before filing a complaint with a court or appropriate government agency or resorting to alternative dispute resolution. That mechanism is considered exhausted if the complaint remains unresolved after seven calendar days from filing.

Keep proof of the date you filed. If the platform resolves the matter earlier or issues a final denial, preserve that response.

Do not treat the seven-day period as a reason to delay:

  • Reporting a suspicious transfer to your bank or e-wallet
  • Securing a hacked or compromised account
  • Seeking emergency police assistance
  • Preserving evidence
  • Reporting continuing threats, extortion, identity theft, or ongoing unauthorized transactions

The Internet Transactions Act covers business-to-business and business-to-consumer transactions within its scope. It expressly excludes purely consumer-to-consumer transactions, such as a genuine one-off sale between private individuals. A person who regularly sells for profit may still be acting as an online merchant despite describing the account as “personal”; the actual facts and evidence matter.

Where to report the scam

Cybercrime Investigation and Coordinating Center

The DICT operates the 1326 National Anti-Scam Hotline. Reports or supporting information may also be sent to 1326@dict.gov.ph, as listed on the official DICT website. This is a useful national reporting and referral channel, but it does not replace an urgent report to the payment provider or a formal criminal complaint when one is needed.

Philippine National Police

Report to the nearest police station or PNP anti-cybercrime office if the incident appears criminal. Bring identification, a written timeline, printed copies of key evidence, and accessible electronic originals.

Seek immediate police assistance when:

  • The scammer is still withdrawing or transferring funds
  • Your financial or social-media account has been taken over
  • The scam includes threats, extortion, stalking, or doxxing
  • The offender is demanding more money
  • A victim’s safety is at risk
  • The seller is using stolen identities or appears to be victimizing multiple people

Ask what further documents are required for a formal complaint and obtain the report or reference number.

National Bureau of Investigation

Online fraud and account intrusions may also be reported to the NBI Cybercrime Division or an appropriate NBI regional office. The NBI’s official site provides an online complaint page, a reporting page, and information on investigative assistance for victims of computer crimes.

An online submission may begin the reporting process, but investigators may still require a personal appearance, original records, identification, and a sworn statement.

Department of Trade and Industry

Use the DTI Consumer CARe System when the complaint concerns an online business transaction, such as:

  • Non-delivery by an identifiable online merchant
  • Goods materially different from the description or sample
  • Defective products
  • Failure to honor a warranty
  • Refusal to provide a lawful refund, replacement, or repair
  • Deceptive or unfair sales practices
  • A platform’s failure to provide its required redress mechanism

Include proof that you first used the merchant’s or platform’s internal complaint process and state whether seven calendar days passed without resolution.

The Internet Transactions Act gives online consumers remedies including repair, replacement, refund, and other remedies available under the Consumer Act of the Philippines and other applicable laws. The proper remedy depends on whether the problem is a defect, nonconformity, non-delivery, deception, or another breach.

The online merchant or e-retailer is generally the party primarily liable for consumer claims arising from the transaction. A platform’s liability is not automatic; the Act specifies circumstances in which an e-marketplace or digital platform may incur subsidiary or solidary liability.

A claim for damages under Section 28 of the Internet Transactions Act must be filed with the court or DTI within two years from the time the cause of action arose. Other causes of action or offenses may be governed by different limitation periods. Do not wait for the two-year period to approach before seeking advice.

Is an online shopping scam a crime?

It can be. A failed or disappointing purchase is not automatically a criminal scam. Criminal liability generally requires proof of the elements of a particular offense, including the required intent.

A seller who used false pretenses or fraudulent acts to induce payment may potentially be investigated for estafa under Article 315 of the Revised Penal Code. When an offense defined by the Revised Penal Code or a special law is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act of 2012 may apply and provides for a penalty one degree higher than that imposed by the underlying law.

Depending on the conduct and evidence, other laws may also become relevant—for example, the Anti-Financial Account Scamming Act for social-engineering schemes and misuse of financial accounts, or laws concerning identity theft, unauthorized access, falsified documents, or access devices.

Authorities—not the complainant, platform, or bank—determine what charges the evidence supports. Describe what actually happened rather than insisting on a particular criminal label.

Consumer dispute or deliberate scam?

The distinction affects where the case should be directed.

A consumer dispute may involve a real merchant that delivered late, supplied a defective item, sent the wrong product, or disagrees about a refund. Start with the merchant and platform, then use DTI or the appropriate sector regulator if unresolved.

A suspected deliberate scam may involve:

  • A fictitious or stolen seller identity
  • A listing for goods that never existed
  • Payment routed outside the platform to avoid buyer protection
  • Immediate blocking after payment
  • Repeated demands for “release,” “insurance,” “tax,” or “verification” fees
  • A fake payment or courier webpage
  • A compromised social-media account posing as someone you know
  • Multiple victims using the same recipient account
  • Unauthorized access to your account or wallet

In these situations, notify the payment provider and report to law enforcement promptly, while also reporting the account to the platform.

Common mistakes that can weaken a complaint

  • Waiting several days before notifying the bank or e-wallet
  • Deleting chats, blocking the seller before saving evidence, or losing access to the account
  • Keeping only cropped screenshots that omit the URL, username, date, or transaction reference
  • Continuing to send money to “unlock” the refund or delivery
  • Moving the conversation or payment outside the platform without preserving the original order
  • Sending evidence to unofficial social-media pages claiming to represent an agency
  • Posting accusations and sensitive account details publicly instead of submitting them to authorities
  • Filing inconsistent timelines with the bank, platform, DTI, and police
  • Assuming a DTI complaint automatically starts a criminal case
  • Assuming a police report automatically reverses a bank transfer
  • Making a knowingly false dispute report; malicious reporting that causes funds to be held can itself carry liability under the Anti-Financial Account Scamming Act

A practical complaint outline

A clear complaint can follow this structure:

  1. Your full name and reliable contact details
  2. The seller’s displayed name, usernames, profile links, and known contact details
  3. What was advertised or promised
  4. When and how you ordered
  5. How much you paid and through which provider
  6. The destination account or wallet shown in your records
  7. What happened after payment
  8. Why you believe the transaction was fraudulent or violated the agreement
  9. What you did to resolve it
  10. The remedy requested
  11. A numbered list of attachments
  12. A declaration that the account is accurate, followed by your signature if required

Use exact dates, amounts, and quotations from preserved records. Separate what you personally observed from what another person told you.

When legal help is urgent

Consult a Philippine lawyer or the Public Attorney’s Office, if eligible, without delay when:

  • The loss is substantial
  • Several victims or layered financial accounts are involved
  • You know the suspected offender’s identity or location
  • Authorities require a complaint-affidavit or supporting affidavits
  • The platform or financial institution refuses to preserve or release essential records
  • You received a subpoena, demand letter, or counter-complaint
  • The incident involves threats, intimate material, a child, identity theft, or continuing harassment
  • A filing deadline may be approaching
  • You are considering a civil action to recover money or damages

A lawyer can assess the documents, identify the correct respondent and remedy, and avoid inconsistent allegations across consumer, civil, and criminal proceedings.

Frequently asked questions

Can the bank or e-wallet reverse the transfer?

Possibly, but not automatically. Recovery depends on the payment method, how quickly the incident was reported, whether funds remain available, the provider’s verification, and the applicable rules. Report immediately and request a written case number.

Should I report to DTI or the police?

Often both, but for different purposes. DTI is appropriate for covered consumer transactions and merchant obligations. Police or NBI reporting is appropriate when deception, identity misuse, hacking, unauthorized transactions, or another crime is suspected.

Must I wait seven days before reporting?

For a covered Internet Transactions Act consumer complaint, the platform’s or e-retailer’s internal redress mechanism is generally exhausted after seven calendar days without resolution. Do not wait to alert the payment provider, secure accounts, preserve evidence, or seek emergency police help.

What if the purchase was made through Facebook, Instagram, or another social network?

Report the seller’s account, advertisement, messages, and payment request through the network’s reporting tools. Whether DTI’s consumer process applies depends on whether the seller was acting as a business or online merchant. A genuine private consumer-to-consumer transaction is outside the Internet Transactions Act, but fraud may still be reported to the payment provider and law enforcement.

What if the seller deleted the account?

Report using the profile URL, username, user ID, screenshots, messages, payment records, and any email or phone number you preserved. Platforms and financial institutions may hold records not visible to the public, but investigators may need lawful process to obtain them.

Can I name the alleged scammer on social media?

Public accusations can create privacy, safety, evidentiary, or defamation risks—especially when the identity is uncertain or an innocent person’s account was stolen. Submit the evidence to the platform, financial institution, and authorities instead.

Does filing a complaint guarantee that I will recover my money?

No. A report may help preserve funds, identify connected accounts, remove fraudulent listings, support an investigation, or establish a consumer claim, but the result depends on available evidence, jurisdiction, remaining funds, and the legal process.

What if my personal information was also misused?

Secure the affected accounts and report unauthorized financial activity immediately. If the incident involves improper processing, disclosure, or misuse of personal data by an organization subject to the Data Privacy Act, consider seeking guidance or filing an appropriate complaint with the National Privacy Commission. Identity misuse connected to a crime should also be included in the police or NBI report.

Official sources

This article provides general legal information, not legal advice or a prediction of any complaint’s outcome. Procedures and the correct remedy depend on the transaction, evidence, payment method, parties, and applicable regulations. Official sources and reporting channels were checked on 15 September 2026.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.