Quick answer

If you have been scammed through an online shop, marketplace, messaging app, or social-media account in the Philippines, act immediately:

Contact your bank, card issuer, e-wallet, or payment provider through its official fraud channel. Ask it to flag the transaction, secure your account, trace the recipient account, and consider holding any remaining disputed funds.
Preserve the seller’s profile, listing, messages, payment details, receipts, delivery records, and other electronic evidence before the account or post disappears.
Report the transaction through the platform’s internal complaint or refund system.
File a consumer complaint with the Department of Trade and Industry (DTI) if the dispute concerns an online seller or marketplace.
Report suspected fraud to the Philippine National Police Anti-Cybercrime Group (PNP-ACG), the National Bureau of Investigation Cybercrime Division (NBI-CCD), or another appropriate law-enforcement office.

These steps serve different purposes. A platform or DTI complaint may help obtain a refund or other consumer remedy. A report to the bank may help protect or trace funds. A police or NBI complaint may lead to a criminal investigation. Filing with one does not necessarily replace the others.

No agency can guarantee recovery. Speed matters because scammers may transfer funds, delete accounts, or remove online evidence within minutes.

First, secure your money and accounts

Report the payment immediately

Call the fraud hotline shown in your bank, card issuer, or e-wallet’s official app or website. Do not use a number supplied by the seller or found in an unsolicited message.

Provide:

Your name and account details;
The date, time, amount, and transaction reference number;
The recipient’s account name, number, mobile number, or QR details;
The reason you believe the transaction was fraudulent;
Whether you personally authorized the payment;
Whether you disclosed an OTP, PIN, password, recovery code, or identification document; and
Any police, NBI, DTI, or platform reference number already issued.

Ask for a case or ticket number and written confirmation of the report. Also ask whether the institution can initiate fund tracing, coordinate with the receiving institution, temporarily hold disputed funds, or reverse a card transaction. The available remedy depends on the payment method, the facts, the institution’s rules, and whether the money is still traceable.

Under the Anti-Financial Account Scamming Act, Republic Act No. 12010, covered financial institutions may temporarily hold funds involved in a disputed transaction under Bangko Sentral ng Pilipinas rules. The statutory holding period cannot exceed 30 calendar days unless extended by a competent court. The law also requires coordinated verification of disputed transactions. This does not mean every reported transfer will automatically be frozen or refunded.

A transfer that you deliberately approved after being deceived is different from an unauthorized transaction made after an account takeover. Describe exactly what happened; do not label an authorized transfer “unauthorized” merely to improve the chance of reimbursement.

Secure affected accounts

If the scammer obtained account credentials or remotely accessed your device:

Change passwords using a clean, trusted device;
Sign out other sessions;
Enable multi-factor authentication;
Ask your bank or e-wallet to block compromised access and replace affected cards;
Contact your mobile network if your SIM stopped working unexpectedly;
Remove unfamiliar remote-access or screen-sharing applications;
Check whether recovery emails, phone numbers, or transaction limits were changed; and
Review recent transactions across connected accounts.

Never give an OTP, PIN, password, or screen-sharing access to someone claiming that these are needed to process a refund or “recover” stolen money.

Preserve evidence before reporting the account

Keep original electronic records whenever possible. Screenshots are useful, but they should not be your only evidence.

Preserve:

The complete URL of the shop, listing, profile, advertisement, or post;
The account username, profile name, user ID, and visible contact details;
Screenshots or screen recordings showing the profile and full conversation;
Original emails, text messages, chat exports, and attachments;
Product descriptions, prices, warranties, and promised delivery dates;
Order confirmations, invoices, receipts, and tracking information;
Bank, card, remittance, or e-wallet transaction records;
The recipient’s account name, account number, QR code, and mobile number;
Courier labels, packaging, and unboxing photographs or videos;
Photos of counterfeit, defective, substituted, or empty packages;
Telephone numbers, email addresses, and links used by the scammer;
Dates and times of every important event; and
Complaint acknowledgments and ticket numbers from the seller, platform, bank, DTI, police, or NBI.

Do not crop away usernames, dates, transaction references, URLs, or other identifying details. Keep an untouched copy of each file and back it up. Do not alter the device or delete the conversation merely because the scammer’s messages are upsetting.

If the seller’s account remains active, preserve the evidence before blocking or reporting it. Do not continue sending money to obtain a supposed refund, release a parcel, pay “tax,” or unlock earlier funds.

Report the seller or account to the platform

Use the marketplace or social-media platform’s official reporting and dispute tools. Select the category that most accurately describes the problem, such as fraud, non-delivery, counterfeit goods, impersonation, or unauthorized account access.

State briefly:

What was offered;
What you paid and how;
What the seller promised;
What actually occurred;
When you contacted the seller; and
What remedy you want.

If the purchase occurred through a marketplace, keep the dispute inside the platform whenever possible. Moving to private chat or paying outside the platform may affect buyer-protection coverage, but it does not prevent you from reporting possible fraud to authorities.

The Internet Transactions Act of 2023, Republic Act No. 11967, requires covered e-retailers and platforms to maintain redress mechanisms. An aggrieved party generally must first use the platform, marketplace, or e-retailer’s internal redress mechanism before filing a transaction-related complaint with a court or government agency or resorting to alternative dispute resolution. The mechanism is deemed exhausted if the complaint remains unresolved seven calendar days after filing.

That seven-day rule should not be treated as a reason to delay:

Notifying a bank or e-wallet about a suspicious transfer;
Securing a compromised account;
Preserving disappearing evidence;
Reporting an ongoing crime or immediate threat; or
Seeking urgent law-enforcement assistance.

Keep proof of when the internal complaint was filed and whether the platform responded.

File a consumer complaint with DTI

A complaint involving an online merchant, e-retailer, marketplace, misleading sales practice, non-delivery, defective goods, or refusal to honor an applicable consumer remedy may be filed through the official DTI Consumer Complaints Assistance and Resolution System.

Attach or be ready to provide:

Your identification and contact information;
The seller or business name and known contact details;
The platform and listing URL;
Proof of purchase and payment;
The correspondence and timeline;
Proof that you used the seller’s or platform’s internal redress mechanism;
The response received, or proof that seven calendar days passed without resolution; and
The specific remedy requested.

Depending on the facts and applicable law, an online consumer may pursue repair, replacement, refund, or another available remedy. The Internet Transactions Act generally makes the online merchant or e-retailer primarily liable for claims arising from the transaction. A marketplace or digital platform may have subsidiary or solidary liability only in the circumstances specified by law; it is not automatically liable for every seller’s misconduct.

The Act provides a two-year period, counted from when the cause of action arose, for a consumer to claim damages before a court or the DTI under its damages provision. Do not wait until the end of that period. Other claims or offenses may have different deadlines, and delay can seriously weaken the evidence or chance of recovery.

DTI may also refer matters falling under another agency’s authority. Regulated products and services may belong primarily to a sector regulator—for example, the Bangko Sentral ng Pilipinas for covered financial institutions, the Food and Drug Administration for regulated health products, or the Securities and Exchange Commission for certain investment-related matters.

Report suspected fraud to law enforcement

A consumer dispute is not automatically a crime. Late delivery, poor service, or a genuine contractual disagreement may be handled through consumer or civil remedies. Criminal fraud generally requires evidence of deception and the other elements of the applicable offense. Authorities must evaluate the actual facts.

Consider a prompt criminal report where there is evidence of:

A fictitious or impersonated seller;
Deliberiberate use of false identity or false payment instructions;
Payment followed by disappearance or blocking;
Repeated use of recipient accounts to collect scam proceeds;
Account takeover, phishing, or theft of credentials;
Fabricated receipts, tracking records, or proof of shipment;
Threats, extortion, or demands for additional money;
Multiple apparent victims; or
An organized or continuing scheme.

The NBI’s official procedure for computer-crime complaints directs complainants to proceed to the Cybercrime Division or a Cybercrime Regional Center. The process may include a preliminary interview, a sworn complaint sheet or affidavit, submission of supporting records, witness statements, and examination of a relevant device. The NBI states that this investigative-assistance service has no fee. Current NBI office locations can be checked through the NBI office locator.

You may also report to the PNP Anti-Cybercrime Group or the nearest police station. Use only contact information or reporting links published on an official government website. Bring both printed copies and accessible electronic copies of your evidence if filing in person.

Prepare a clear chronological statement containing:

Where and when you encountered the offer;
What representations caused you to transact;
How you communicated with the person;
When, where, and how payment was made;
The recipient’s financial-account information;
What happened after payment;
Why you believe the representations were false;
What losses you suffered; and
What reports or recovery attempts you have already made.

If asked to execute an affidavit, read it carefully and ensure that it is accurate before signing. Identify facts you personally know separately from assumptions or information supplied by someone else.

Online fraud may be prosecuted under the Revised Penal Code or a special law depending on the conduct. When a crime under the Revised Penal Code or another special law is committed through information and communications technology, Republic Act No. 10175, the Cybercrime Prevention Act, may also apply. The legal classification and charges are matters for investigators and prosecutors, not labels the complainant must conclusively establish.

If your personal data or identity was misused

If the incident involved stolen identification, exposure of sensitive personal information, or unauthorized processing of your data, preserve proof of the disclosure and notify the organization that handled the data.

A separate complaint may be appropriate before the National Privacy Commission when the facts involve a possible violation of the Data Privacy Act. A privacy complaint is distinct from a refund demand or criminal complaint and should describe the data involved, how it was collected or disclosed, the harm or risk created, and what action the organization took after notification.

Monitor financial accounts and official records for signs that your identity is being used elsewhere. Do not publicly upload uncensored IDs, bank statements, or complaint affidavits while warning other people about the scam.

What to expect after filing

A report does not itself establish guilt or compel an immediate refund. The recipient institution may need to verify the transaction, funds may already have been moved, and a platform may require documents before acting. Law enforcement may ask for an affidavit, the original device, or additional records.

Keep a simple case log containing:

The agency or company contacted;
Date and time of contact;
Name or identifier of the person who assisted;
Reference number;
Documents submitted;
Promised next step; and
Follow-up date.

When following up, use the existing reference number rather than repeatedly opening duplicate complaints unless instructed to do so.

Common mistakes to avoid

Waiting for the scammer’s promise to refund before contacting the payment provider;
Deleting chats, blocking the account, or resetting the device before preserving evidence;
Sending another payment for “verification,” “insurance,” “tax,” or “release”;
Communicating with supposed recovery agents who demand an advance fee;
Posting the recipient’s unredacted bank information or identification online;
Making exaggerated or knowingly false allegations;
Filing only a social-media report when money or identity theft is involved;
Describing an approved transfer as unauthorized;
Paying outside a marketplace despite warnings and assuming platform protection still applies;
Surrendering the only copy of a device or document without recording what was turned over; and
Assuming that a DTI complaint automatically starts a criminal case.

When help is urgent

Contact the payment provider and law enforcement without delay if:

The transaction has just occurred and the funds may still be traceable;
The scammer currently controls your bank, e-wallet, email, social-media, or mobile account;
You installed a remote-access application or shared an OTP, PIN, password, or recovery code;
The scammer is threatening physical harm, blackmail, or release of private material;
A child, senior citizen, or otherwise vulnerable person is being targeted;
Your identity documents are being used to open accounts or solicit money;
Several victims or large, continuing transfers appear to be involved; or
Evidence is being deleted in real time.

For an immediate threat to life or safety, call the national emergency number 911 or go to the nearest police station.

Consider consulting a Philippine lawyer if the loss is substantial, the identity of the respondent is disputed, several legal remedies may overlap, formal demands or affidavits are required, property must be urgently preserved, or a filing deadline may be approaching.

Frequently asked questions

Can I report a scam if I voluntarily sent the money?

Yes. A voluntary transfer may still have been induced by fraud. Tell the bank and investigators that you authorized the transfer but were deceived about its purpose or recipient. Recovery is not guaranteed.

Should I report to DTI or the police?

Often both, for different purposes. DTI handles consumer and e-commerce concerns within its jurisdiction. The police or NBI investigates suspected crimes. Your bank or e-wallet must also be contacted promptly when a financial account or payment is involved.

Must I wait seven days before doing anything?

No. The seven-calendar-day period concerns exhaustion of the seller’s or platform’s internal redress mechanism under the Internet Transactions Act. Immediately secure accounts, report the payment, preserve evidence, and seek urgent law-enforcement help where necessary.

Can the bank reverse a transfer?

Possibly, but not automatically. It depends on the payment channel, whether the funds remain available, the verification results, applicable rules, and the facts of the transaction. Report immediately and obtain a reference number.

What if I know only the scammer’s username or recipient account?

You may still report. Preserve every identifier you have. Under the Internet Transactions Act, a competent authority investigating a sworn complaint may subpoena specified information from a marketplace when the complainant cannot ascertain the perpetrator’s identity.

Can I publicly name the alleged scammer?

Exercise caution. Public accusations may expose personal data, compromise an investigation, misidentify an innocent account holder, or create separate legal issues. Give complete information to the platform, financial institution, DTI, and law enforcement. If warning others, stick to provable facts and redact sensitive information.

Does a police blotter guarantee an investigation or refund?

No. A blotter records a report but does not establish criminal liability, freeze funds, or order reimbursement. Ask what further complaint, affidavit, or evidence is required and retain the reference details.

Should I pay someone who promises to recover the money?

Be highly cautious. Recovery scams often target people who have already lost money. Verify lawyers through the Supreme Court’s official resources and verify government personnel through their agency. Do not pay anyone who promises guaranteed recovery, asks for another transfer to “unlock” funds, or requests your OTP or password.

Official references

This article provides general legal information, not legal advice, and cannot determine whether a particular transaction constitutes a crime or whether funds will be recovered. The applicable remedy depends on the evidence, payment method, parties, and current agency rules. Official sources and procedures were checked as of September 15, 2026.