Quick answer

If you believe you were scammed through an online shop, marketplace, messaging app, or social-media account, act immediately:

Contact your bank, card issuer, or e-wallet provider. Report the transaction as fraudulent or disputed, ask whether the transfer can be stopped or traced, and request that the recipient account be flagged. Do not wait for the seller to reply.
Secure your accounts. Change affected passwords, sign out other sessions, enable multi-factor authentication, and block compromised cards or mobile numbers.
Preserve the evidence before anything disappears. Save the listing, seller profile, messages, payment records, account numbers, delivery information, and URLs.
Report the seller and transaction through the platform’s official dispute or redress system. Ask for a refund, cancellation, account restriction, or preservation of records, as appropriate.
Report suspected fraud to law enforcement. You may approach the Philippine National Police Anti-Cybercrime Group, the National Bureau of Investigation’s cybercrime unit, or the nearest police station or NBI office.
For a business-to-consumer dispute, file a consumer complaint with the Department of Trade and Industry. Use the official DTI Consumer CARe System.
If the dispute involves how a bank or BSP-supervised e-wallet handled the transaction, first complain to the institution, then escalate an unresolved complaint through the BSP Online Buddy.

These reports serve different purposes. A platform dispute may produce a refund; a bank report may help preserve or trace funds; DTI handles covered consumer issues; and the police or NBI investigate possible crimes. Filing with one does not necessarily replace the others.

First priority: try to stop the money

Call the bank, card issuer, or e-wallet provider using the number in its official app, website, or the back of the card. Do not use a telephone number supplied by the suspected scammer.

Give the institution:

The amount, date, and exact time of payment
The transaction or reference number
The recipient’s name, account number, mobile number, QR details, or merchant identifier
The reason you believe the transaction was fraudulent
Whether you personally authorized the transfer
Whether you disclosed an OTP, password, PIN, card details, or other credentials
The police, NBI, platform, or DTI reference number, if already available

Ask for a written case number and confirmation of what was requested. Depending on the payment method and the facts, the institution may be able to block a card, secure an account, initiate a chargeback or dispute process, coordinate with the receiving institution, or temporarily hold disputed funds. Recovery is not guaranteed, especially when funds have already been withdrawn or transferred onward.

The Anti-Financial Account Scamming Act, Republic Act No. 12010, allows BSP-supervised institutions to temporarily hold funds involved in a disputed transaction under applicable BSP rules. The statutory holding period may not exceed 30 calendar days unless extended by a competent court. This is why prompt, accurate reporting matters. Knowingly filing a malicious or completely unwarranted report can itself carry liability.

If a scammer gained access to your account, also ask the institution to:

Freeze or restrict the affected account if necessary
Revoke active devices and online-banking sessions
Replace compromised cards or credentials
Review recent transactions and beneficiary additions
Preserve logs relevant to the incident
Explain its formal complaint and appeal process

A victim-authorized transfer is not automatically refundable merely because it was induced by deception. Liability may depend on the facts, the institution’s security controls, the victim’s actions, the payment rules, and the results of the investigation.

Secure your identity and accounts

If you clicked a suspicious link, installed an app, shared credentials, or allowed remote access:

Disconnect the affected device from the internet if someone may still control it.
Uninstall unknown remote-access or screen-sharing applications.
Change passwords using a different, trusted device.
Start with your email account because it can be used to reset other passwords.
Use a unique password for every financial, shopping, and social-media account.
Enable multi-factor authentication, preferably through an authenticator app where available.
Tell your mobile provider immediately if your SIM suddenly stopped working or you suspect a SIM-swap.
Review recovery email addresses, mobile numbers, forwarding rules, linked devices, and recent logins.
Monitor bank, e-wallet, credit-card, and shopping accounts for additional transactions.

Never give an OTP, PIN, password, recovery code, or remote access to a person claiming that these are needed to process a refund. Legitimate institutions may verify your identity, but they should not ask you to surrender credentials that authorize access or payment.

Preserve evidence before reporting the account

Do not rely only on screenshots. Preserve the original information wherever possible.

Save:

The full seller or account name, username, profile ID, and profile URL
The product listing, advertisement, livestream, or social-media post
Product descriptions, prices, promises, warranties, and delivery terms
The complete conversation, including dates and timestamps
Order confirmations, invoices, receipts, and tracking information
Bank, card, remittance, or e-wallet transaction records
Recipient account names, account numbers, mobile numbers, QR codes, and reference numbers
Email addresses, telephone numbers, websites, and shortened links
Photos or an unedited video of the parcel, label, packaging, and item received
The platform dispute, refund, and account-report reference numbers
Copies of demands sent to the seller and any response
A short chronological account of what happened

Export chats or download account data when the service permits it. Capture the address bar or full URL, not merely the visible page. Keep the original files and make a backup. Avoid cropping out dates, names, transaction references, or surrounding context.

Do not delete the conversation immediately after blocking the scammer. Do not publicly post your government ID, full account number, home address, or unredacted payment record.

Report the seller through the platform

Use the marketplace or social-media platform’s official reporting and dispute tools. Select the most accurate ground, such as fraud, item not received, counterfeit goods, misrepresentation, hacked account, or unauthorized transaction.

In your report:

State the facts in chronological order.
Identify the order and seller precisely.
State the amount lost.
Explain the promised product or service and what actually happened.
Attach the strongest evidence.
Specify the remedy requested: cancellation, refund, replacement, seller-account restriction, or preservation of records.
Ask the platform not to release money to the seller if payment is still being held.
Save the complaint number and the platform’s response.

Do not close a platform dispute merely because the seller promises an off-platform refund. Confirm that the money has actually returned to your account. Do not mark an order “received” unless you have inspected it.

For internet transactions covered by the Internet Transactions Act of 2023, Republic Act No. 11967, an aggrieved party generally must first use the platform, e-marketplace, or e-retailer’s internal redress mechanism before filing a complaint with a court or appropriate government agency. The mechanism is deemed exhausted if the complaint remains unresolved seven calendar days after filing.

That rule should not be treated as a reason to delay an urgent bank alert or the reporting of suspected crime. Report rapidly disappearing funds, continuing account access, identity theft, threats, or other immediate risks at once.

File a consumer complaint with DTI

A buyer may use the DTI Consumer CARe System for a covered consumer dispute involving an online business, such as:

Non-delivery
A defective, wrong, incomplete, or materially misrepresented item
Refusal to honor an applicable warranty
Deceptive, unfair, or unconscionable sales conduct
Refusal to provide an available repair, replacement, or refund remedy
Failure to issue an invoice or receipt
Failure to provide a functioning complaint mechanism

Prepare your identification, proof of transaction, evidence, platform complaint, seller information, and the specific remedy you seek.

Republic Act No. 11967 generally covers business-to-consumer and business-to-business internet transactions within DTI’s mandate when the required Philippine connection exists. It expressly excludes consumer-to-consumer transactions. Accordingly, a one-time sale by a private individual may fall outside the Act even if arranged through social media. A person who repeatedly sells as a business cannot necessarily avoid regulation merely by calling the account “personal”; the actual facts matter.

The law recognizes repair, replacement, refund, and other remedies for defects, malfunction, loss without the consumer’s fault, breach of warranty, or failure to conform to the contract. The online merchant or e-retailer is generally primarily liable. A platform’s liability is separate and depends on statutory conditions, including its own acts, omissions, and compliance duties.

A consumer claiming damages under Republic Act No. 11967 must file with the court or DTI within two years from the time the cause of action arose. Other claims or offenses may have different prescriptive periods. Do not assume that every deadline is two years.

Report possible crime to the PNP or NBI

Report suspected criminal fraud to:

The PNP Anti-Cybercrime Group or the nearest police station
The National Bureau of Investigation, including its cybercrime investigators or the nearest NBI office

Use only contact details published on an agency’s official website or verified government page. Online contact details can change, so confirm the current filing channel before sending sensitive documents.

Bring or submit:

A valid government-issued ID
A detailed chronology
Proof of payment
The seller’s account and contact details
The listing or advertisement
Complete messages and emails
Bank or e-wallet records
Platform and financial-institution case numbers
The device or original electronic files if investigators request them
A sworn complaint or affidavit, if required

Ask what additional documents, certifications, or affidavits are needed. Get the investigator’s name, office, and reference number.

An online shopping scheme may potentially involve estafa under the Revised Penal Code, computer-related fraud under the Cybercrime Prevention Act of 2012, Republic Act No. 10175, financial-account scamming under Republic Act No. 12010, or another offense. The applicable charge depends on evidence of deception, intent, use of a computer system, movement of funds, and the participants’ conduct. A failed delivery or contractual disagreement is not automatically a crime.

If the platform was only social media

A social-media company and an e-marketplace do not always perform the same role. Some platforms merely host posts or messages and do not control checkout, payment, or delivery.

Still, Republic Act No. 11967 imposes certain duties on covered digital platforms, including providing a way to report unlawful content or users. A competent authority may also require identifying information through proper legal process when a platform was allegedly used to commit a crime and the complainant cannot identify the perpetrator.

Report the profile, page, group, advertisement, and individual messages. In the report, include the precise URLs and request preservation of relevant account records. Do not expect the platform to disclose another user’s private information directly to you; investigators may need lawful process to obtain it.

If the account was impersonating a real person or business, inform the impersonated person or company through independently verified contact details.

If the payment involved a bank or e-wallet

First complete the bank or e-wallet provider’s formal complaint process. Ask for its final written response and retain the case number.

If the institution is supervised by the Bangko Sentral ng Pilipinas and the complaint remains unresolved, use the BSP Online Buddy or the consumer-assistance channels listed on the BSP website. BSP escalation concerns the regulated institution’s handling of the financial service; it is not a substitute for a criminal complaint against the scammer.

The outcome may turn on questions such as:

Was the payment authorized by the account owner?
Were credentials or an OTP voluntarily disclosed?
Did the institution use adequate security and fraud-management controls?
How soon was the transaction reported?
Were funds still within the regulated financial system?
Did the institution follow applicable dispute and verification procedures?

Republic Act No. 12010 provides for possible restitution when an institution fails to employ adequate risk-management controls or fails to exercise the legally required degree of diligence. It does not create an automatic refund for every scam loss.

Choosing the right route

Situation	Immediate route
Card, bank, or e-wallet payment just occurred	Contact the financial institution immediately
Transaction happened inside a marketplace	Open a platform dispute and report the seller
Buyer wants a consumer remedy from an online business	Use internal redress, then file with DTI if unresolved
Seller appears to have intentionally deceived the buyer	Report to the PNP or NBI
Bank or BSP-supervised e-wallet mishandled the complaint	Complete its complaint process, then escalate to BSP
Identity documents or credentials were stolen	Secure accounts and report to the institution and law enforcement
Counterfeit, unsafe, prohibited, or regulated goods are involved	Report to the platform, DTI, and the agency regulating the product
Private person-to-person sale	Platform and law-enforcement routes may be more appropriate; DTI coverage may be limited

You may pursue several routes at the same time when they address different issues.

What to write in a complaint

Keep the complaint factual and specific. A useful structure is:

On [date and time], I ordered [item or service] from [seller name, username, and URL] through [platform]. The advertised price and terms were [terms]. I paid PHP [amount] through [payment method] to [recipient details], transaction reference [number]. The seller then [state what happened]. I contacted the seller/platform on [dates], but the matter remains unresolved. I request [refund, reversal, replacement, investigation, account preservation, or another specific remedy]. Attached are the listing, messages, receipt, transaction record, and prior complaint references.

Distinguish what you personally observed from what you merely suspect. Do not alter screenshots, exaggerate losses, or identify an account holder as the scammer unless the evidence establishes that role. Recipient accounts may belong to money mules, identity-theft victims, or intermediaries.

Common mistakes that weaken a report

Waiting several days before notifying the financial institution
Continuing to send “release,” “verification,” “tax,” or “refund processing” payments
Giving the scammer another OTP or screen-sharing access
Deleting the chat or blocking the account before preserving evidence
Reporting only a display name instead of the profile URL and account identifiers
Submitting cropped screenshots with no timestamp or transaction reference
Closing a platform dispute based on an unfulfilled promise
Sending original identity documents through unofficial email addresses or chat accounts
Paying a supposed recovery agent who guarantees retrieval of the money
Treating a legitimate delivery delay as proven criminal fraud without supporting facts
Posting accusations and private data publicly instead of using formal reporting channels
Assuming that a police report alone automatically reverses a payment

Beware of “recovery scams.” Government agencies and legitimate investigators do not require payment to an unknown personal account or demand an OTP to release recovered funds.

When help is urgent

Seek immediate assistance if:

The scammer still has access to your bank, email, mobile number, or device.
An unauthorized transaction is pending or has just occurred.
Your SIM suddenly loses service after you shared personal information.
You supplied a selfie, government ID, signature, or biometric information.
The scammer is threatening violence, blackmail, or publication of intimate material.
A child, senior citizen, or person with diminished capacity is being targeted.
The scheme continues to collect money from other victims.
The amount is substantial or involves business funds.
You received a subpoena, demand letter, or notice that your identity or account was used in another fraud.
The case involves several recipient accounts, overseas transfers, cryptocurrency, or rapidly moving funds.

Call 911 for an immediate threat to life or physical safety. For substantial losses, identity misuse, or complex evidence, consider consulting a Philippine lawyer promptly.

Frequently asked questions

Can I report a scam even if I paid voluntarily?

Yes. A payment can still have been induced by deception. Tell the institution and investigators honestly that you authorized the transfer and explain the false representation that caused you to do so. The legal and refund consequences differ from an entirely unauthorized transaction.

Should I wait seven days before contacting the police or my bank?

No. Report endangered funds, compromised accounts, identity theft, and suspected crime immediately. The seven-calendar-day rule in Republic Act No. 11967 concerns exhaustion of the covered platform, marketplace, or e-retailer’s internal redress mechanism before pursuing the administrative, civil, or alternative-dispute routes addressed by that law. It should not be used to postpone urgent protective action.

Will filing a police or NBI report guarantee a refund?

No. Investigation and recovery are separate matters. Recovery depends on whether funds remain traceable or available, the payment method, the evidence, platform rules, financial-institution procedures, and any eventual legal order or judgment.

Can DTI order action against every social-media seller?

Not necessarily. DTI’s jurisdiction depends on the transaction, product or service, seller’s business activity, and governing law. Republic Act No. 11967 does not cover true consumer-to-consumer transactions. DTI may refer a matter to the proper agency under its no-wrong-door approach.

What if the seller is outside the Philippines?

Republic Act No. 11967 may apply when a foreign online business avails itself of the Philippine market and has the legally required minimum contacts. Practical enforcement and recovery can nevertheless be more difficult. Report the matter to the platform, payment provider, DTI, and law enforcement without delay.

What if an item arrived but was fake, defective, or different from the listing?

Use the platform’s return or dispute system, preserve an unboxing video and photographs, and demand the applicable repair, replacement, or refund. Escalate a covered unresolved consumer dispute to DTI. Counterfeit, unsafe, or specially regulated goods may also need to be reported to the relevant regulator.

Can I publicly post the scammer’s name and account details?

Use caution. Public accusations may expose personal data, prejudice an investigation, misidentify an innocent account holder, or create separate legal issues. Give complete information to the platform, financial institution, DTI, police, NBI, or your lawyer; redact sensitive data from anything shared publicly.

Do I need a lawyer to make a report?

Usually not for an initial platform, bank, DTI, police, NBI, or BSP complaint. Legal help becomes especially useful when the loss is large, the facts are disputed, the seller cannot be identified, several laws may apply, or court action is being considered.

Official references

This article provides general legal information, not legal advice for a particular case. Procedures and outcomes depend on the transaction, evidence, platform, payment method, and agencies with jurisdiction. Official sources and current requirements were checked on 19 September 2026.