After filing a consumer fraud or cybercrime complaint in the Philippines, the most important thing is to stay organized, preserve your evidence, and understand which track your case is now following. A DTI consumer complaint usually moves through mediation and, if settlement fails, adjudication. A cybercrime complaint filed with the PNP, NBI, or prosecutor usually moves through investigation and possible preliminary investigation. The next steps are not always fast, but knowing what to expect helps you avoid missed deadlines, weak evidence, and duplicate filings that slow the case down.
First, Know What Kind of Complaint You Filed
Many online scams in the Philippines involve both a consumer issue and a criminal issue.
For example:
- You bought an item online and the seller delivered a fake, defective, or different product.
- You paid through GCash, Maya, bank transfer, or crypto and the seller disappeared.
- Someone used a fake Facebook page, marketplace account, phishing link, or spoofed mobile number.
- A merchant refused a refund even if the product was not as advertised.
- Your bank or e-wallet account was drained after a phishing or social engineering scam.
These facts may fall under different laws and offices.
| Situation | Possible office or remedy | Usual purpose |
|---|---|---|
| Defective product, misleading advertisement, refund dispute, non-delivery by a business | DTI consumer complaint | Mediation, refund, repair, replacement, administrative sanctions |
| Online scam, phishing, identity theft, hacking, fake account, unauthorized access | PNP Anti-Cybercrime Group, NBI Cybercrime Division, prosecutor | Criminal investigation and possible prosecution |
| Unauthorized bank or e-wallet transfer | Your bank/e-wallet first, then BSP if unresolved | Account tracing, dispute handling, possible hold of funds |
| Text scam or spam number | NTC, CICC/I-ARC, telco, law enforcement | Reporting, blocking, possible investigation |
| Loss below small-claims threshold where you know the defendant | Small claims court | Civil recovery of money |
The same incident can have more than one track. Filing with DTI does not automatically mean a criminal case has been filed. Filing with the NBI or PNP does not automatically recover your money. Filing with your bank does not automatically punish the scammer.
Legal Basis: Your Rights After Filing
Consumer fraud and online transactions
The Consumer Act of the Philippines, Republic Act No. 7394 (1992) declares the State policy to protect consumer interests, promote consumer welfare, and set standards of conduct for business and industry. It is the general law behind many DTI consumer complaints involving deceptive, unfair, or unconscionable sales practices. (Lawphil)
For online transactions, the Internet Transactions Act of 2023, Republic Act No. 11967, now specifically covers business-to-business and business-to-consumer internet transactions within DTI’s mandate. Its implementing rules recognize that sellers, e-marketplaces, digital platforms, and online merchants that purposely avail of the Philippine market may be subject to Philippine laws even if they do not have a local physical office, as long as they have minimum contacts with the Philippine market. (Lawphil)
Under the same framework, DTI is developing an Online Dispute Resolution System (ODRS) as a main entry point for online consumer redress, and complaints should be trackable within the system.
Cybercrime and online fraud
The main cybercrime law is the Cybercrime Prevention Act of 2012, Republic Act No. 10175, which covers offenses such as computer-related fraud, computer-related forgery, identity misuse, illegal access, data interference, and cyber-related offenses connected with crimes under the Revised Penal Code. (Lawphil)
For scams involving bank accounts, e-wallets, mule accounts, social engineering, or fraudulent financial accounts, the Anti-Financial Account Scamming Act, Republic Act No. 12010 (2024) is also important. It penalizes financial account scamming and gives enforcement mechanisms connected with suspicious or disputed financial transactions. (Lawphil)
If the scam involved electronic evidence, the E-Commerce Act, Republic Act No. 8792 (2000) matters because electronic documents and data messages cannot be denied legal effect merely because they are electronic, and electronic evidence may be admitted if properly authenticated and reliable. (Lawphil)
Civil recovery and damages
Even when the government investigates a scam, you may still need to think about civil recovery. The Civil Code of the Philippines provides several useful bases:
- Article 19: every person must act with justice, give everyone their due, and observe honesty and good faith.
- Article 20: a person who willfully or negligently causes damage contrary to law must indemnify the injured person.
- Article 21: a person who willfully causes loss or injury in a manner contrary to morals, good customs, or public policy must compensate the injured person.
- Article 22: a person who unjustly receives something at another’s expense must return it.
- Article 2176: a person who causes damage by fault or negligence may be liable for quasi-delict. (Lawphil)
These Civil Code provisions are useful when deciding whether to pursue a separate civil action, small claims case, or claim for civil liability in a criminal case.
What Happens After Filing a DTI Consumer Complaint?
If your complaint is against a seller, merchant, online platform, service provider, or business, the DTI route usually begins with intake and mediation.
DTI’s Fair Trade Enforcement Bureau states that Metro Manila complainants may file through the DTI Consumer CARe online portal, by email, or in person through the DTI-FTEB in Makati. (Fair Trade Enforcement Bureau)
After filing, expect these practical steps:
Acknowledgment or docketing
You should receive a reference number, email acknowledgment, or confirmation that your complaint was received. Save this immediately.
Evaluation of jurisdiction
DTI may check whether the complaint is within its authority. Some matters are referred to another regulator, such as BSP for banks and e-wallets, NTC for telco issues, CAB for air travel, or another agency depending on the product or service.
Mediation
Mediation is a settlement process. A DTI mediator may invite both sides to discuss refund, replacement, repair, completion of delivery, or another settlement.
Settlement agreement, if successful
If the merchant agrees to refund or replace, ask that the agreement be written clearly:
- exact amount or item;
- deadline for payment or delivery;
- payment method;
- consequence if the seller does not comply.
Adjudication, if mediation fails
DTI explains that adjudication begins after mediation fails and the complainant opts to pursue the complaint by filing a formal complaint with the Adjudication Division. Once requirements are complete, the case is assigned to an adjudication officer, who may require position papers within ten working days from receipt of notice or order. (Fair Trade Enforcement Bureau)
Decision or order
The adjudication officer may determine whether you are entitled to repair, replacement, or refund, and may impose administrative penalties or sanctions when allowed by law. (Fair Trade Enforcement Bureau)
Practical tip for DTI cases
Many complainants lose momentum after the first mediation invitation. Do not assume DTI will “automatically” chase the seller every day. Keep your file updated, attend scheduled conferences, submit missing documents quickly, and ask politely for the next procedural step if the seller ignores mediation.
What Happens After Filing a Cybercrime Complaint?
If you filed with the NBI Cybercrime Division, the NBI Citizen’s Charter describes a process where the complainant proceeds to the Cybercrime Division, is assisted in filling out a complaint sheet, undergoes preliminary interview and initial investigation, and may execute sworn statements or submit prepared affidavits and devices relevant to the probe. The NBI page also notes that the complaint sheet or authority to investigate is forwarded for approval. (National Bureau of Investigation)
In real life, the process commonly looks like this:
Initial interview and complaint sheet
The investigator asks what happened, when it happened, how much was lost, who you dealt with, and what platforms or accounts were used.
Submission of screenshots and digital evidence
You may be asked for:
- screenshots of chats, posts, listings, emails, or SMS;
- profile links or URLs;
- transaction receipts;
- bank or e-wallet reference numbers;
- tracking numbers;
- IDs or names used by the scammer;
- phone numbers, usernames, email addresses, IP-related information if available;
- device used, if hacking or account takeover is involved.
Sworn statement or affidavit
A sworn statement is your written narrative under oath. It must be accurate. Avoid guessing. If you are unsure, say what you personally know and identify what came from another source.
Case evaluation
The investigator evaluates whether there is enough basis to proceed. Some cases need more documents before law enforcement can request preservation, subscriber information, or other technical data.
Requests to platforms, telcos, banks, or service providers
Under RA 10175 and its rules, service providers may be required to preserve certain computer data. The Cybercrime Prevention Act requires preservation of traffic data and subscriber information for at least six months, and content data may also be preserved for six months from receipt of a preservation order. (Lawphil)
Referral to prosecutor
If investigators believe there is enough evidence, the matter may be referred for preliminary investigation before the prosecutor.
Preliminary investigation
Preliminary investigation is not yet trial. It is the prosecutor’s process to determine whether there is probable cause to charge the respondent in court. Under Rule 112 of the Rules of Criminal Procedure, a complaint for preliminary investigation should be supported by affidavits and documents, and the investigating officer generally acts on the complaint by dismissing it or issuing a subpoena to the respondent within ten days; the respondent then has ten days from receipt of subpoena to submit counter-affidavits. (Lawphil)
Prosecutor’s resolution
The prosecutor may dismiss the complaint or recommend filing an Information in court. An Information is the formal criminal charge filed by the prosecutor.
Court case
Once filed in court, the case proceeds separately from the investigation stage. You may be called as a witness. If you are abroad, coordination becomes more important because affidavits, video testimony, or travel may be needed depending on the court’s directions.
What to Do Immediately After Filing
1. Create a complaint folder
Make one digital folder and one printed folder if possible. Use clear filenames.
Example:
01_Complaint_Acknowledgment_DTI.pdf02_Sworn_Statement_NBI.pdf03_GCash_Receipt_2026-06-12.png04_Facebook_Profile_URL_and_Screenshots.pdf05_Bank_Dispute_Email.pdf06_Timeline_of_Events.docx
This seems basic, but it prevents confusion when an investigator, mediator, prosecutor, or bank asks for the same document weeks later.
2. Write a clean timeline
Prepare a one- to two-page timeline:
| Date and time | What happened | Evidence |
|---|---|---|
| June 3, 2026, 8:15 PM | Saw sponsored listing for phone on Facebook Marketplace | Screenshot A |
| June 3, 2026, 8:32 PM | Seller sent GCash number and promised same-day shipping | Messenger Screenshot B |
| June 3, 2026, 8:45 PM | Sent ₱18,000 to GCash number ending 1234 | GCash receipt |
| June 4, 2026 | Seller stopped replying | Messenger Screenshot C |
| June 5, 2026 | Filed complaint with PNP/NBI/DTI | Complaint acknowledgment |
A clear timeline helps officials see the fraud pattern quickly.
3. Preserve original digital evidence
Screenshots are useful, but they are not always enough. Preserve:
- original chat threads;
- message links;
- email headers if available;
- transaction IDs;
- original device;
- app notifications;
- delivery tracking pages;
- profile URLs;
- archived web pages if possible;
- names of witnesses who saw the transaction.
Do not delete the chat even if it is stressful. Do not block the account until you have saved the profile link and messages, unless continued contact puts you at risk.
4. Follow up without flooding the office
A good follow-up is short and specific:
- mention your reference number;
- state the date you filed;
- ask what document or action is still needed;
- attach only relevant additional evidence;
- avoid sending ten separate emails with the same facts.
For DTI mediation, ask about the next mediation date or whether the case can proceed to adjudication if the seller refuses to participate.
For cybercrime complaints, ask whether your sworn statement is complete, whether additional evidence is needed, and whether the complaint has been referred for further investigation or prosecutor action.
5. Notify your bank, e-wallet, or payment provider immediately
If money moved through a bank, GCash, Maya, credit card, remittance center, or other financial institution, file a dispute with that institution right away.
BSP guidance tells consumers to report concerns first to the financial institution’s own Financial Consumer Protection Assistance Mechanism before escalating to BSP. (Bureau of the Treasury)
For unauthorized fund transfers, BSP materials state that concerns or disputes should be filed with the Originating Financial Institution, which is primarily responsible for providing assistance and redress to its client. (Bureau of the Treasury)
This matters because money can move fast. The police report may support your bank dispute, but it usually does not replace the bank’s own reporting process.
6. Ask for written proof of every report
Keep copies of:
- police blotter or complaint sheet;
- NBI complaint sheet;
- DTI complaint acknowledgment;
- bank ticket number;
- e-wallet ticket number;
- BSP complaint reference, if any;
- telco or NTC report number;
- email acknowledgments.
These references help prove that you acted promptly.
Documents You Should Prepare
| Document | Why it matters |
|---|---|
| Valid government ID or passport | Identifies the complainant |
| Complaint affidavit or sworn statement | Main narrative under oath |
| Screenshots of messages, listings, posts, and profiles | Shows representations made by the seller or scammer |
| Payment receipts and transaction confirmations | Proves amount, date, account, and reference number |
| Bank or e-wallet dispute records | Shows prompt reporting and financial trail |
| Demand letter, if sent | Shows attempt to resolve or demand refund |
| DTI/NBI/PNP/prosecutor reference numbers | Lets agencies track your case |
| URLs, usernames, phone numbers, email addresses | Helps identify digital accounts |
| Witness affidavits, if any | Supports your version |
| Device used in hacking or account takeover | May be needed for forensic examination |
If you are abroad, your affidavit, special power of attorney, or supporting documents may need notarization, consular acknowledgment, or apostille depending on where the document was executed and where it will be used. DFA’s apostille system allows document owners or authorized representatives to book appointments, and authorized representatives generally need a signed authorization letter. (DFA Appointment System)
Common Bottlenecks After Filing
The scammer used a fake name
This is very common. Investigators usually look beyond the display name and focus on payment accounts, phone numbers, device traces, platform records, delivery addresses, and linked accounts.
Your job is to preserve every clue. A fake Facebook name may be useless by itself, but a payment reference number or delivery address can be more valuable.
The seller is outside your city or province
For DTI, the office may coordinate depending on the merchant’s address or the transaction details. For criminal complaints, investigators may need coordination with another regional office. This can add time.
The platform refuses to release information to you
Platforms, banks, and telcos usually will not give private subscriber information directly to a private complainant. Law enforcement or a court order may be needed. This is why the complaint must be properly docketed and supported by evidence.
The amount is small
A small amount does not mean the complaint is fake or unimportant. But practically, law enforcement offices prioritize based on evidence, urgency, number of victims, organized activity, and traceability.
For lower-value claims where you know the defendant’s real identity and address, small claims court may be more practical for recovering money. The Rules on Expedited Procedures in the First Level Courts cover small claims where the claim does not exceed ₱1,000,000, exclusive of interest and costs. (Supreme Court of the Philippines)
The seller offers partial refund if you withdraw the complaint
Be careful. If settlement is acceptable, put it in writing and make sure payment clears first. In DTI cases, settlement can be recorded. In criminal cases, some offenses may continue depending on the law, evidence, and prosecutor’s action. Do not sign anything saying the incident never happened if that is false.
You filed in the wrong office
This happens often. A defective appliance case may belong with DTI, but a hacked bank account may need the bank, BSP, and cybercrime authorities. A text scam may involve NTC, CICC/I-ARC, telcos, and law enforcement.
If an office says it lacks jurisdiction, ask where the matter should be endorsed or refiled, and request written acknowledgment if possible.
Special Notes for OFWs and Foreigners
Foreigners and Filipinos abroad can file complaints involving Philippine transactions, but practical issues arise.
If you are outside the Philippines
You may need to:
- execute an affidavit before a Philippine Embassy or Consulate, local notary, or other authorized officer;
- have documents apostilled if required;
- appoint a trusted representative through a Special Power of Attorney;
- provide a Philippine address for notices if needed;
- be available for video calls, prosecutor hearings, mediation, or court testimony when required.
If the seller or scammer is in the Philippines
Philippine authorities may act if the transaction, damage, offender, account, platform activity, or victim connection falls within Philippine jurisdiction. RA 11967’s implementing rules also recognize that e-commerce actors purposely availing of the Philippine market may be subject to Philippine law despite lack of local legal presence, subject to the required legal tests.
If evidence is in another country
Foreign records, foreign bank documents, or platform records held abroad may take longer. For serious cybercrime cases, international cooperation may be needed through proper government channels. Expect delays when evidence must come from foreign service providers.
Should You Send a Demand Letter After Filing?
A demand letter can still help, especially in consumer fraud and civil recovery cases. It may show that you gave the seller a final chance to refund, replace, or perform.
A useful demand letter should include:
- your name and contact details;
- transaction date;
- item or service purchased;
- amount paid;
- problem encountered;
- specific demand, such as refund of ₱25,000;
- deadline;
- payment details;
- list of attached evidence.
Do not threaten illegal action, public shaming, or harassment. Stick to facts.
For cybercrime cases, avoid messaging the scammer if investigators have told you not to. In some cases, continued contact can alert the suspect or affect an operation.
How Long Does It Usually Take?
There is no single timeline, but these are realistic ranges:
| Process | Practical timeline |
|---|---|
| DTI acknowledgment or initial action | A few days to several weeks, depending on office volume and completeness |
| DTI mediation | Often weeks; may be longer if seller is hard to contact |
| DTI adjudication after failed mediation | Several weeks to months |
| NBI/PNP initial intake | Same day to several days if documents are complete |
| Cybercrime technical investigation | Weeks to months, especially if platform, telco, or bank records are needed |
| Prosecutor preliminary investigation | Several weeks to months |
| Court case after filing of Information | Months to years, depending on docket, evidence, and hearings |
| Bank or e-wallet dispute | Varies by institution and transaction type; report immediately |
The biggest delays usually come from incomplete evidence, wrong respondent details, platform response time, volume of pending complaints, and difficulty tracing mule accounts.
What Not to Do After Filing
Avoid these common mistakes:
- Do not delete messages or screenshots.
- Do not rely only on screenshots without saving URLs and transaction IDs.
- Do not post private personal data of the suspected scammer online.
- Do not invent facts in your affidavit.
- Do not file multiple inconsistent narratives with different agencies.
- Do not ignore mediation or prosecutor notices.
- Do not miss deadlines to submit affidavits, position papers, or additional evidence.
- Do not assume a police report automatically freezes money.
- Do not pay a “recovery agent” who promises instant tracing or refund.
Frequently Asked Questions
What should I do first after filing a cybercrime complaint in the Philippines?
Save your complaint reference number, organize your evidence, write a clear timeline, and ask the investigator what additional documents are needed. If money was transferred, report separately to your bank, e-wallet, or payment provider immediately.
Can I still file with DTI after filing with the NBI or PNP?
Yes, if the facts also involve a consumer transaction, such as non-delivery, defective goods, misleading advertising, or refusal to refund by a business. The DTI complaint is usually for consumer redress, while NBI or PNP handles possible criminal investigation.
Does filing a cybercrime complaint automatically get my money back?
No. A cybercrime complaint may lead to investigation and prosecution, but refund or recovery depends on whether funds can be traced, held, returned by the financial institution, settled by the respondent, or awarded as civil liability.
How do I follow up on my DTI complaint?
Use your complaint reference number, send a concise email, and ask for the next step: mediation schedule, missing documents, status of notice to the respondent, or whether the case may proceed to adjudication if mediation failed.
What if the scammer used GCash, Maya, or a bank account?
Report immediately to the e-wallet or bank and ask for a ticket number. Also include the transaction receipt in your cybercrime complaint. For unresolved financial consumer complaints, escalation to BSP may be available after first using the financial institution’s complaint mechanism. (Bureau of the Treasury)
Can screenshots be used as evidence in the Philippines?
Yes, electronic documents and data messages can have legal effect and may be admissible, but authenticity and reliability matter. Preserve the original messages, links, transaction records, and device data whenever possible. (Lawphil)
What if the seller is a foreigner or the platform is based abroad?
The case may be more complex, but it is not automatically hopeless. If the transaction targeted Philippine consumers, used Philippine payment channels, or caused damage in the Philippines, Philippine law may still be relevant. Cross-border evidence and enforcement usually take longer.
Should I attend DTI mediation if I already filed a criminal complaint?
Yes, if you want consumer redress and DTI has scheduled mediation. But be careful with settlement language. Do not sign anything false or overly broad. Keep copies of any settlement agreement.
Can I file small claims after a scam?
Small claims may be useful if you know the defendant’s real identity and address and your goal is to recover money. It is usually not useful if the scammer is unidentified, used fake accounts, or cannot be served with court papers.
What if the police or agency stops responding?
Follow up politely in writing with your reference number and ask what action is pending. If there is unreasonable delay, ask for the proper complaints or feedback mechanism of the office. For some government service delays, ARTA-related remedies may also be relevant, but use them carefully and with complete documentation.
Key Takeaways
- A consumer fraud complaint and a cybercrime complaint may follow different tracks.
- DTI usually handles mediation, refund, replacement, repair, and consumer-related administrative remedies.
- NBI, PNP, and prosecutors handle investigation and possible criminal prosecution.
- Report financial fraud to your bank or e-wallet immediately; a police report alone may not freeze funds.
- Preserve original digital evidence, not just screenshots.
- Use one consistent timeline across all agencies.
- Attend mediation, submit affidavits on time, and keep all reference numbers.
- Foreigners and OFWs may need notarized, consularized, or apostilled documents when acting from abroad.
- Small claims may help recover money when the defendant is known and can be served.
- The strongest complaints are organized, evidence-based, and filed promptly.