Quick answer
If you paid an online seller or social-media account and suspect a scam, act immediately:
- Contact your bank, e-wallet, card issuer, or payment provider. Ask it to flag the transaction as fraudulent, secure your account, trace or recall the payment if possible, and temporarily hold disputed funds when legally available.
- Use the marketplace or social-media platform’s official complaint system. Save the complaint number and response.
- Preserve the listing, profile, messages, payment records, delivery information, and other digital evidence before the account or post disappears.
- Report the suspected crime to the Philippine National Police Anti-Cybercrime Group (PNP-ACG), the nearest police station, or the National Bureau of Investigation Cybercrime Division (NBI-CCD).
- For a consumer dispute with a business seller, file with the Department of Trade and Industry (DTI) if the platform’s internal process does not resolve the complaint within seven calendar days.
- If your bank or e-wallet does not satisfactorily address your complaint, escalate it to the Bangko Sentral ng Pilipinas (BSP).
These reports serve different purposes. A platform complaint may remove an account or produce a refund; a financial complaint may help stop or trace funds; a DTI complaint addresses consumer remedies; and a police or NBI complaint can begin a criminal investigation. Filing with one does not necessarily replace the others.
First: secure your money and accounts
Contact the payment provider immediately
Use only the provider’s official app, website, hotline, or a number printed on your card. Tell it that the payment is connected to a suspected scam and provide:
- The transaction reference number
- Date, time, amount, and payment method
- Recipient’s name, account number, mobile number, QR code, or merchant details
- A short explanation of how the transaction occurred
- Screenshots or documents showing the false representation
- Any police, platform, or complaint reference number already available
Ask specifically whether the provider can:
- Mark the transaction as disputed or fraudulent
- Trace or recall the transfer
- Temporarily hold funds still within the financial system
- Block or monitor the recipient account
- Replace a compromised card or account
- Disable unauthorized devices or sessions
- Preserve records for investigators
Recovery is not guaranteed, especially if the recipient has already withdrawn or moved the money. Fast reporting nevertheless improves the chance that remaining funds and transaction records can be located.
The Anti-Financial Account Scamming Act allows BSP-supervised institutions, under applicable BSP rules, to temporarily hold funds involved in a disputed transaction. The statutory holding period may not exceed 30 calendar days unless extended by a court. The law also requires coordinated verification among the institutions and account owners involved. A temporary hold is not an automatic refund or a finding that a crime occurred.
If you disclosed passwords, OTPs, or identification documents
Immediately:
- Change the passwords of the affected account and the connected email account.
- Sign out other devices and turn on multi-factor authentication.
- Call the bank or e-wallet to freeze or restrict the account.
- Lock or replace affected cards.
- Change reused passwords on other services.
- Tell your mobile provider if your SIM may have been compromised.
- Monitor statements, credit activity, password-reset notices, and new-account alerts.
- Report impersonation or misuse of personal data to the relevant platform and institution.
Never give an OTP, PIN, password, card verification value, recovery code, or remote access to anyone claiming that these are needed to process a refund. A “recovery agent” who demands another payment may be conducting a second scam.
Preserve evidence before reporting the account
Do not rely on screenshots alone if other records are available. Preserve the original electronic material as far as possible.
Keep copies of:
- The complete seller profile, username, page name, profile URL, user ID, and account link
- The product listing, advertisement, livestream, price, description, and claimed terms
- The full conversation—not only selected messages
- Email headers, SMS messages, phone numbers, and call logs
- Order confirmations, invoices, receipts, tracking numbers, and delivery records
- Bank, card, e-wallet, remittance, or cryptocurrency transaction records
- Recipient names, account numbers, wallet addresses, QR codes, and reference numbers
- Photos or an unedited unboxing video if an item arrived
- The seller’s business name, address, registration details, and permits, if displayed
- The date and time you discovered the problem
- Every complaint number and response from the seller, platform, courier, bank, or government office
Also save the webpage as a PDF or web archive where possible. Screen-record the process of opening the profile, listing, and conversation so the relationship among them is visible. Keep original files on the device and make a backup without editing, cropping, annotating, or renaming the originals.
Prepare a short timeline stating:
- What was represented
- What you agreed to buy
- When and how you paid
- What the seller did or failed to do
- When the seller stopped responding or blocked you
- What loss or unauthorized activity occurred
- What remedy you requested
Do not delete the conversation, threaten the suspected scammer, attempt to hack the account, or publicly post unredacted account numbers and identification documents.
Report the seller to the platform
Use the marketplace or social-media service’s built-in reporting and dispute system. Select the most accurate category, such as fraud, counterfeit goods, non-delivery, impersonation, unauthorized transaction, or account compromise.
For transactions covered by the Internet Transactions Act of 2023, an aggrieved party must first use the platform, e-marketplace, or e-retailer’s internal redress mechanism before filing an administrative consumer complaint or pursuing alternative dispute resolution. That mechanism is deemed exhausted when the complaint remains unresolved for seven calendar days from filing.
Accordingly:
- File the internal complaint promptly.
- State the remedy sought—refund, replacement, account removal, or another appropriate remedy.
- Save the submission date and complaint number.
- Preserve any rejection, closure notice, or proposed settlement.
- Do not allow the seven-day consumer process to delay urgent efforts to secure a compromised financial account, report continuing criminal activity, or protect someone from immediate harm.
The law requires covered e-marketplaces and digital platforms to maintain a responsive mechanism for reporting unlawful users or content. It also allows authorities, in qualifying investigations based on a sworn complaint, to compel certain identifying information through a subpoena. A victim generally should not expect a platform to disclose another user’s private subscriber data directly without lawful process.
File a criminal complaint
Where to report
A suspected online scam may be reported to:
- The PNP Anti-Cybercrime Group or the nearest PNP station
- The National Bureau of Investigation, particularly its cybercrime investigators
- The appropriate prosecutor’s office, usually with supporting affidavits and evidence
- The Cybercrime Investigation and Coordinating Center through its currently published official reporting channel, for coordination or referral
Confirm current addresses, appointment rules, and electronic channels on the agency’s official website before sending sensitive documents. Scam pages sometimes impersonate government offices.
Under the Cybercrime Prevention Act of 2012, the PNP and NBI are the principal law-enforcement authorities for cybercrime cases. Depending on the facts, an online shopping scheme may involve estafa under the Revised Penal Code, computer-related fraud, computer-related identity theft, financial-account scamming, or another offense. The correct charge depends on the evidence; non-delivery or a broken promise does not automatically prove criminal fraud.
What to bring
Investigators may ask for:
- A valid government-issued ID
- A written narrative or complaint-affidavit
- A chronological list of events
- Printed and electronic copies of the evidence
- Proof of payment and account ownership
- Platform and financial-provider complaint records
- The suspected offender’s available identifying and payment details
- The device containing the original messages, if examination is necessary
Ask the receiving office what affidavit format, number of copies, certification, or personal appearance it requires. Obtain and keep the desk, incident, case, or referral number.
Report promptly. The Cybercrime Prevention Act generally requires service providers to preserve traffic data and subscriber information for at least six months from the transaction, while content data is preserved for six months after a lawful preservation order. Investigators—not private complainants—use the required legal process to preserve, disclose, search, or seize protected computer data.
File a DTI consumer complaint
DTI is generally appropriate when the dispute concerns a business seller, online merchant, e-retailer, marketplace, or platform within its consumer-protection jurisdiction. Examples include:
- Paid goods that were not delivered
- A product materially different from its description
- Counterfeit, defective, unsafe, or misrepresented goods
- Refusal to honor an applicable warranty
- Unfair, deceptive, or unconscionable sales practices
- An unjustified refusal to provide an available repair, replacement, or refund
File through the official DTI Consumer CARe System or ask DTI’s official customer contact center for the current alternative channel if the system is unavailable. Attach the transaction records, evidence, platform complaint, proof that seven calendar days have passed without resolution when applicable, and a clear statement of the remedy requested.
The Internet Transactions Act generally covers business-to-consumer and business-to-business internet transactions within DTI’s mandate. It does not cover a genuine consumer-to-consumer sale—that is, an isolated transaction between private end-users outside the ordinary course of business. A person repeatedly selling through a social-media page may still be acting as an online merchant even if the account is informal; the actual facts matter.
For covered transactions, consumers may pursue repair, replacement, refund, or other remedies allowed by the Consumer Act and applicable law when goods are defective, lost without the consumer’s fault, fail to match the description, or breach a warranty or contractual obligation.
The Internet Transactions Act provides a two-year period for a consumer to claim damages before the court or DTI, counted from the time the cause of action arose. Do not treat that outside limit as a reason to wait: evidence, accounts, and recoverable funds can disappear quickly.
Escalate unresolved bank or e-wallet complaints to BSP
The BSP Consumer Assistance Mechanism is a second-level remedy for complaints involving a BSP-supervised institution.
First, report the matter through the institution’s own Financial Consumer Protection Assistance Mechanism or official customer-service channel. Keep proof of submission and its response.
If the institution’s action is unsatisfactory, escalate through:
- The BSP Online Buddy or “BOB” on the official BSP website; or
- If BOB is inaccessible, the method and form stated in BSP’s current complaint instructions
BSP’s published instructions allow a completed Complaint/Inquiry/Reply form to be sent to consumeraffairs@bsp.gov.ph with proof that the complaint was first submitted to the financial institution. BSP-CAM facilitates communication and regulatory handling; it is not a substitute for an urgent fraud report to the institution or a criminal complaint.
Which route fits the problem?
| Situation | Immediate report |
|---|---|
| Money was transferred to a scam account | Bank, e-wallet, card issuer, or payment provider; then PNP-ACG or NBI |
| Card or account was used without permission | Financial institution immediately; replace or freeze credentials; then law enforcement |
| Seller accepted payment and disappeared | Platform, payment provider, and law enforcement |
| Business seller delivered defective or misrepresented goods | Platform or seller’s internal mechanism; then DTI if unresolved |
| Private individual made a one-off sale | Platform and law enforcement; DTI coverage may not apply |
| Fake page impersonates a real business or person | Platform, impersonated party, and law enforcement |
| Personal data or identification documents were stolen | Affected institutions and platform; consider the National Privacy Commission if personal-data rights or a covered data-security failure is involved |
| Scam is still targeting other people | Platform and law enforcement promptly, even if no payment was made |
| Threats, blackmail, stalking, or danger accompany the scam | PNP immediately; call 911 for an active emergency |
Common mistakes to avoid
- Waiting for the seller’s repeated promises while funds are being moved
- Reporting only to the social-media platform
- Sending more money for “verification,” “tax,” “release,” “insurance,” or “refund processing”
- Communicating with a supposed government agent through an unverified personal account
- Deleting messages after taking a few screenshots
- Editing original screenshots or videos
- Posting the recipient’s full financial details or ID publicly
- Assuming a bank transfer can always be reversed
- Exaggerating facts or submitting a knowingly false report
- Describing every poor transaction as a crime without evidence of deception
- Accepting an off-platform settlement without documenting its terms and actual payment
- Withdrawing all complaints before promised reimbursement has cleared
A knowingly malicious or completely unwarranted false report that causes funds to be held may itself be punishable under the Anti-Financial Account Scamming Act.
When legal help is urgent
Consult a Philippine lawyer promptly when:
- The loss is substantial or involves several victims
- The suspect is known but denies responsibility
- Investigators or a prosecutor require a complaint-affidavit
- The case involves several bank, e-wallet, or cryptocurrency accounts
- The platform or financial institution has records that may soon be unavailable
- You received a subpoena, demand letter, counter-complaint, or settlement agreement
- The transaction involved an investment, lending product, regulated profession, real property, securities, insurance, or another specially regulated activity
- Your identity is being used to open accounts or solicit money
- You are being threatened, blackmailed, or blamed as a money mule
- You allowed another person to use your account and now suspect it received criminal proceeds
Do not move or withdraw suspected proceeds for another person. Allowing an account to receive, transfer, or withdraw criminal proceeds can create serious exposure under the Anti-Financial Account Scamming Act, particularly when the account owner knows the source of the funds.
Frequently asked questions
Can I report a scam if I did not send money?
Yes. Report the profile, listing, message, or impersonation to the platform. If the conduct involves attempted fraud, identity theft, account compromise, threats, or an ongoing scheme, provide the evidence to the PNP-ACG or NBI. Whether an attempted offense can be charged depends on the facts and applicable law.
Should I contact the scammer after reporting?
Limit contact. Do not threaten, entrap, or pay the person. If communication remains open, preserve it and follow investigators’ instructions. Do not reveal planned law-enforcement action.
Will a police report automatically refund my money?
No. A police report documents and supports an investigation, but it does not automatically reverse a transfer or order a refund. Financial recovery may come through a payment dispute, voluntary reimbursement, DTI or regulatory proceedings, restitution connected with a criminal case, or a civil action.
Can the bank disclose the recipient’s identity to me?
Usually not merely upon request. Financial, privacy, and procedural rules restrict disclosure. Investigators, regulators, prosecutors, and courts may obtain information through the legal processes available to them.
Is a failed delivery always estafa?
No. Criminal fraud ordinarily requires more than breach of contract or delay. The timing and nature of the false representation, intent, payment, reliance, and resulting damage matter. Consumer or civil remedies may apply even when the evidence is insufficient for a criminal charge.
Can I complain if the seller blocked me?
Yes. Blocking may make preservation more urgent, but it does not prevent a report. Submit the account URL, usernames, prior messages, payment details, and any cached or archived material.
What if the scammer is abroad?
Report locally. Philippine law may apply when legally relevant acts, systems, accounts, or damage connect the offense to the Philippines. Cross-border identification and recovery can be slower and may require international cooperation.
Do I need a lawyer to make the initial report?
Usually not. Victims may report directly to the platform, financial institution, DTI, PNP, NBI, or BSP. A lawyer becomes especially useful for affidavits, large or complicated losses, unclear legal classification, civil recovery, settlement documents, or prosecutorial proceedings.
Official sources
- Republic Act No. 11967 — Internet Transactions Act of 2023
- Republic Act No. 10175 — Cybercrime Prevention Act of 2012
- Republic Act No. 12010 — Anti-Financial Account Scamming Act
- DTI Consumer CARe System
- Bangko Sentral ng Pilipinas Consumer Assistance Mechanism
- PNP Anti-Cybercrime Group
- National Bureau of Investigation
- Cybercrime Investigation and Coordinating Center
- National Privacy Commission
This article provides general legal information, not advice for a particular case. Rights, jurisdiction, available remedies, and the correct complaint route depend on the transaction, parties, evidence, and governing regulations. Official sources and procedures were checked as of 19 September 2026.