Quick answer

If you have been scammed through an online store, marketplace, or social-media account in the Philippines, act immediately:

Contact your bank, card issuer, or e-wallet through its official fraud channel. Report the transaction as fraudulent or disputed, ask whether the funds can be held or traced, and secure your account.
Report the seller and transaction inside the shopping or social-media platform. Request a refund, cancellation, account restriction, and preservation of the seller’s records.
Report the scam to the government through the 24/7 Inter-Agency Response Center Hotline 1326 or the eGovPH app. Criminal investigation is handled by the cybercrime units of the Philippine National Police (PNP) and National Bureau of Investigation (NBI).
For a consumer transaction with a business seller, file a complaint with the Department of Trade and Industry (DTI) through its Consumer Care portal.
Preserve every piece of evidence. Do not delete the conversation, listing, payment receipt, original messages, or account details.

Reporting does not guarantee recovery. The chance of stopping or tracing money generally becomes smaller as time passes, so contact the financial institution first—even while you are gathering the remaining documents.

First, secure your money and accounts

Call the bank or e-wallet using the number in its official app, website, card, or account statement. Do not use a “customer-service” number supplied by the seller or found in an unverified post.

Tell the institution:

that you are reporting a suspected online-shopping or social-media scam;
the amount, date, time, and transaction reference number;
the recipient’s account name, account number, mobile number, or wallet identifier;
whether you authorized the payment yourself or someone accessed your account without permission;
whether you disclosed an OTP, PIN, password, card details, identification document, or other sensitive information; and
whether the recipient is still communicating with you.

Ask the institution to:

mark the transaction as disputed;
investigate and coordinate with the receiving institution;
consider holding any funds that remain available;
block or replace affected cards and credentials;
secure or temporarily restrict the compromised account; and
give you a case or reference number and written instructions.

Under the Anti-Financial Account Scamming Act, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction, subject to BSP rules, for no more than 30 calendar days unless a court extends the hold. The law also provides for coordinated verification among the institutions and account owners involved. A hold is not automatic, and it does not mean that the money will necessarily be returned.

If the institution’s response is unsatisfactory, first complete its Financial Consumer Protection Assistance Mechanism, then escalate the complaint to the Bangko Sentral ng Pilipinas. The BSP’s current instructions direct consumers to use the BSP Online Buddy (BOB) on the BSP website or its official Facebook page until a BSP complaint reference number is generated. If BOB is inaccessible, the BSP permits submission of its complaint form and supporting documents to consumeraffairs@bsp.gov.ph. See the BSP’s official complaint-filing guide.

A voluntary transfer to a scammer is different from an unauthorized account takeover. Do not describe an authorized payment as unauthorized. Give an accurate account of what happened; the legal and reimbursement consequences depend on the facts, the institution’s controls, and the applicable rules.

Report the account and transaction to the platform

Use the platform’s in-app reporting and dispute tools. Report both:

the seller’s store, profile, page, or account; and
the particular listing, advertisement, conversation, order, or payment request.

Request a refund or cancellation when available. Also ask the platform to preserve the account’s registration, login, transaction, and communications records for possible disclosure to law enforcement under lawful process.

For business-to-consumer transactions, the Internet Transactions Act of 2023 requires covered marketplaces and digital platforms to provide a responsive reporting or redress mechanism. It also requires marketplaces to maintain seller information and, following a competent authority’s subpoena based on a sworn complaint, provide specified information when the complainant cannot identify the suspected offender.

Save the platform’s ticket number, confirmation email, decision, and appeal result. Take screenshots before the listing or account disappears, but keep the original messages and files as well.

The seven-day internal-redress rule

For claims covered by the Internet Transactions Act, an aggrieved party must generally use the platform’s, marketplace’s, or e-retailer’s internal redress mechanism before filing a civil or administrative complaint. The mechanism is deemed exhausted if the matter remains unresolved seven calendar days after filing.

That rule should not be treated as a reason to leave an account unsecured or delay an urgent report intended to stop or trace fraudulent funds. Contact the financial institution and report an active cybercrime promptly while also completing the platform process. If there is uncertainty about how the rule affects a particular court or agency filing, obtain legal advice.

Report the scam for criminal investigation

Online selling fraud may constitute estafa under the Revised Penal Code, an offense under the Cybercrime Prevention Act, or another crime depending on how it was carried out. The correct charge cannot be determined from the fact that a product was late, defective, or undelivered alone; investigators and prosecutors must assess the representations, intent, payment trail, identity evidence, and surrounding circumstances.

Central government reporting channel

Call 1326, the 24/7 Inter-Agency Response Center hotline, or use the scam-reporting feature in the eGovPH app. The government describes this channel as a central reporting point that can connect victims with the CICC, PNP, NBI, and other relevant agencies. See the government’s official guidance on Hotline 1326 and eGovPH reporting.

A hotline or app report is useful for immediate intake and referral, but authorities may still require a personal appearance, identification, an affidavit, original records, or additional evidence before a formal criminal investigation or complaint can proceed.

PNP or NBI cybercrime unit

You may also bring the matter to the nearest appropriate:

PNP Anti-Cybercrime Group or PNP cybercrime unit; or
NBI Cybercrime Division or NBI office.

The Cybercrime Prevention Act expressly assigns cybercrime law enforcement to the PNP and NBI. Those agencies can pursue lawful preservation and disclosure processes for subscriber, traffic, and other computer data. Victims should not attempt to obtain confidential subscriber information by impersonation, hacking, threats, or public doxxing.

When filing, bring printed and electronic copies of your evidence. Ask for the complaint, blotter, or docket reference number and the investigator’s official contact details.

File a DTI consumer complaint when the seller is a business

A DTI complaint is appropriate when the dispute concerns a business seller’s deceptive, unfair, or unconscionable practice, non-delivery, misrepresentation, defective goods, refusal to honor an applicable remedy, or another consumer-protection violation within DTI jurisdiction.

Use the DTI Consumer Care portal and provide:

your complete contact details;
the seller’s or business’s known name and contact information;
the marketplace, webpage, or social-media account involved;
an orderly account of what happened;
the amount paid and payment method;
proof that you used the seller’s or platform’s internal complaint mechanism;
supporting documents; and
the specific remedy sought, such as refund, replacement, repair, or delivery.

The Internet Transactions Act recognizes repair, replacement, refund, and other remedies available under the Consumer Act of the Philippines and other applicable laws. The appropriate remedy depends on the defect, nonconformity, contract terms, evidence, and relevant exceptions.

The Act also states that a consumer may claim damages before a court or the DTI within two years from the time the cause of action arose. Do not assume that this is the only deadline that may affect the case; other claims, remedies, appeals, platform disputes, and payment channels can have different and often much shorter periods.

Important exception for private sales

The Internet Transactions Act does not cover a genuine consumer-to-consumer transaction—for example, an isolated sale of a personal item by a private individual outside the ordinary course of business. A person who regularly sells goods or operates commercially through social media may still qualify as an online merchant despite using a personal-looking account.

Exclusion from the Internet Transactions Act does not legalize fraud. A private seller who obtains money through deceit may still face criminal or civil liability under other laws.

Evidence to preserve

Create a folder and keep the following in their original form whenever possible:

the full webpage address or profile URL;
the seller’s account name, username, page ID, store name, and profile details;
screenshots and screen recordings of the listing, advertisement, comments, and profile;
the complete conversation, including dates and times—not only selected messages;
original emails, text messages, attachments, voice notes, and delivery notices;
order confirmations, invoices, receipts, tracking numbers, and product descriptions;
bank, card, or e-wallet receipts and transaction reference numbers;
the receiving account’s displayed name, number, QR code, and institution;
proof of promised delivery dates, refund commitments, or false representations;
photographs or an unedited unboxing video if an incorrect, counterfeit, empty, or damaged parcel arrived;
the parcel, packaging, waybill, seals, and item received;
complaint tickets and replies from the seller, platform, courier, bank, and agencies; and
a chronological account written while events are fresh.

Export conversations if the platform allows it. Preserve the original device and do not crop, annotate, or alter the only copy of a screenshot. Make backups, but do not publish sensitive account numbers, IDs, addresses, or private communications on social media.

A useful incident statement

Your report should be factual and chronological. Include:

when and where you saw the offer;
what the seller represented;
why you relied on the representation;
what you agreed to buy;
how, when, and to whom you paid;
what happened after payment;
what product, if any, was delivered;
what refund or corrective action you requested;
how the seller and platform responded; and
the exact loss or remedy you are claiming.

Separate facts you personally observed from assumptions. If you do not know the seller’s real identity, say so and supply the account, phone, payment, and platform details you do have.

Common mistakes that can weaken a report

Waiting for repeated excuses. A promised refund should not prevent a timely report to the bank or platform.
Deleting or blocking too soon. Secure your account, but first preserve the conversation and profile information when safe to do so.
Sending more money. Do not pay a “release fee,” “verification charge,” “tax,” or “recovery fee” demanded after the first loss.
Trusting a recovery agent. Someone promising guaranteed recovery in exchange for an advance payment may be running a second scam.
Reporting only the seller’s display name. Include URLs, usernames, phone numbers, transaction references, and recipient-account details.
Posting accusations and personal data publicly. Public naming may expose you to privacy, harassment, or defamation issues and can alert the suspect to destroy evidence.
Filing inconsistent accounts. Explain honestly whether you approved the payment, shared credentials, received any item, or dealt outside the platform.
Assuming a DTI complaint replaces a criminal report. Consumer redress and criminal investigation serve different purposes and may proceed separately.
Handing over the only copy of evidence. Retain copies and obtain a written acknowledgment for anything submitted.

When help is urgent

Seek immediate assistance if:

your bank, e-wallet, email, or social-media account has been taken over;
your SIM suddenly loses service after you disclosed personal information;
unauthorized transactions are still occurring;
the scammer has your OTP, PIN, password, card security code, recovery code, or identity document;
the transaction is large, recent, or appears to involve several receiving accounts;
the scammer threatens violence, extortion, publication of intimate material, or harm to a child;
a courier package may contain a dangerous or illegal item;
law-enforcement or bank impersonators demand secrecy or further payment; or
you are being pressured to receive, transfer, or withdraw money for someone else.

For immediate danger, contact the police or emergency services. If credentials were exposed, change passwords from a trusted device, enable multi-factor authentication, terminate unfamiliar sessions, and secure the linked email and mobile number. Do not continue communicating if doing so creates a safety risk.

What the law generally covers

The legal route depends on the evidence:

Deceptive business conduct: The Consumer Act prohibits sellers or suppliers from inducing consumer transactions through concealment, false representation, or fraudulent manipulation.
Online-consumer remedies: The Internet Transactions Act regulates covered business-to-consumer and business-to-business internet transactions, imposes duties on online merchants and platforms, and preserves repair, replacement, refund, and other lawful remedies.
Cybercrime: The Cybercrime Prevention Act covers specified computer offenses and crimes under the Revised Penal Code or special laws committed through information and communications technology.
Financial-account scams: The Anti-Financial Account Scamming Act addresses money-mule activities, certain social-engineering schemes, disputed transactions, coordinated verification, and institutional duties.
Civil recovery: Contract, sales, damages, and other Civil Code rules may apply. A civil claim or administrative consumer complaint does not automatically establish criminal guilt.

A failed transaction is not automatically a scam. Delay, poor service, insolvency, breach of contract, and intentional fraud can require different evidence and remedies.

Frequently asked questions

Can I report the seller if I voluntarily sent the payment?

Yes. Voluntarily initiating a transfer does not prevent you from reporting deception. It may, however, affect how the financial institution classifies the transaction and whether reversal or reimbursement is legally available. Describe the transaction accurately.

Should I report the scam to DTI or the police?

Often both, but for different purposes. DTI handles consumer-protection matters within its jurisdiction. The PNP and NBI investigate possible crimes. Report the transaction to the bank or e-wallet and platform as well.

Do I have to know the scammer’s real name?

No. Submit every identifier you have. Law-enforcement authorities may seek subscriber or account information through proper legal processes. A detailed payment trail, profile URL, username, phone number, and transaction reference can be more useful than an unverified name.

Can a social-media platform be made to refund me?

Not automatically. Platform liability depends on the type of platform, its role in the transaction, notice, compliance with statutory duties, and the proven cause of the loss. The online merchant is generally primarily liable under the Internet Transactions Act; platform subsidiary or solidary liability applies only in the circumstances stated by law.

What if the seller blocks me or deletes the account?

Report the former URL, username, payment account, phone number, and saved evidence. Notify the platform and law enforcement promptly so they can consider lawful preservation measures.

Can I report an attempted scam even if I did not lose money?

Yes. Report the account, message, link, or listing to the platform and through the government scam-reporting channel. If credentials were exposed, secure the affected accounts immediately. Whether a formal criminal case can proceed will depend on the conduct and available evidence.

Will filing a complaint guarantee a refund?

No. Recovery depends on whether funds remain traceable or available, the payment method, the bank’s investigation, platform rules, the seller’s identity and assets, and the legal findings. Prompt reporting improves the practical opportunity to preserve funds and evidence but does not guarantee an outcome.

Should I meet the seller or confront the recipient-account owner?

Not on your own. Recipient accounts can belong to money mules, identity-theft victims, or other intermediaries. Give the information to the financial institution and investigators rather than risking your safety or compromising the investigation.

Official sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Procedures and remedies can depend on the transaction, evidence, platform, payment method, and agency jurisdiction. Official sources and reporting information were checked as of September 19, 2026.