Quick answer

Act immediately. Contact the bank, e-wallet, card issuer, or payment service from which the money came and report the transfer through its 24/7 fraud-reporting channel. Ask it to secure your account, trace the transaction, coordinate with receiving institutions, and temporarily hold any remaining disputed funds. Get a case or reference number.

Then preserve the evidence and report the scheme to:

The Securities and Exchange Commission (SEC) if money was solicited as an investment or participants were promised profits mainly from the platform’s or promoters’ efforts;
The PNP Anti-Cybercrime Group or NBI Cybercrime Division for investigation;
Your payment provider—and, if its response is unsatisfactory, the Bangko Sentral ng Pilipinas (BSP)—for a bank or e-wallet complaint; and
The appropriate prosecutor or court, with legal assistance where necessary, for criminal or civil remedies.

Reporting quickly does not guarantee recovery. Funds may already have been withdrawn, converted, or moved through several accounts. Nevertheless, prompt action materially improves the chance that money and electronic evidence can still be traced or preserved.

First, stop any further loss

Do not send another payment, even if the platform says it is needed to:

unlock your account or withdrawal;
pay “tax,” “insurance,” “verification,” “gas,” “AML,” or “clearance” fees;
complete one last dropshipping order;
restore a negative balance;
qualify for a refund;
upgrade your membership; or
hire a supposed recovery agent.

A demand for more money before releasing your own funds is a serious warning sign. So is a person claiming to be from the SEC, BSP, NBI, PNP, a bank, or a law firm who asks for an advance “recovery fee” or your one-time password.

Immediately change passwords for affected email, banking, e-wallet, shopping, and social-media accounts. Use unique passwords, enable multi-factor authentication, sign out other devices, remove unfamiliar linked accounts, and ask your mobile provider for help if your SIM may have been taken over. Never give anyone an OTP, PIN, password, recovery code, or screen-sharing access.

Report the payment immediately

Contact the institution that sent the money—the originating bank, e-wallet, card issuer, remittance company, or other payment provider. Use only the hotline, app, website, or branch identified on the institution’s official channels.

Provide:

the transaction date and exact time;
amount and currency;
transaction or reference number;
source account;
recipient name, account number, mobile number, wallet, or merchant identifier;
a short explanation of how the deception occurred;
the platform’s name, website, app, social-media account, and recruiter;
screenshots and communications; and
any police report, affidavit, or sworn complaint already available.

Ask the institution to:

mark the transaction as disputed or fraud-related;
protect or restrict the compromised source account;
trace the payment chain;
send an initial holding request to each receiving institution;
begin coordinated verification under the Anti-Financial Account Scamming Act; and
give you a written acknowledgment and case reference number.

Under BSP Circular No. 1215, a complaint through the originating financial institution’s 24/7 fraud channel can trigger an initial hold of identifiable disputed funds for up to five calendar days. If justified and properly supported, the hold may be extended by up to 25 additional calendar days. The combined administrative holding period cannot exceed 30 calendar days unless a competent court extends it. Submit any requested sworn complaint, affidavit, police report, or supporting document within the initial period because it may be needed for an extension. A hold applies only to funds that can still be located; it is not an automatic refund. See BSP Circular No. 1215.

Report honestly. The Anti-Financial Account Scamming Act penalizes malicious or bad-faith reporting of completely unwarranted or false information that causes funds to be held.

If you paid by card or through an online marketplace

Separately dispute the charge with the card issuer, payment processor, or marketplace. Ask for the applicable chargeback, purchase-protection, or merchant-dispute procedure and deadline. These deadlines come from the provider’s rules and may be much shorter than the period for filing a legal case.

Do not describe a payment you personally authorized as “unauthorized.” Explain accurately that you authorized it because of alleged misrepresentations. Whether the provider’s protection applies depends on its terms, the payment method, and the evidence.

If the bank or e-wallet does not resolve your complaint

First use the institution’s Financial Consumer Protection Assistance Mechanism. If its response is unsatisfactory, escalate the matter through the BSP Consumer Assistance Mechanism. Include the institution’s complaint reference number, its response, transaction records, and your supporting evidence.

The BSP complaint process concerns BSP-supervised institutions. It does not replace a police report, SEC complaint, criminal case, or civil action against the scammer.

Preserve evidence before accounts disappear

Do not delete chats, block participants, factory-reset devices, or close accounts until you have preserved the evidence. Save original electronic files where possible—not only cropped screenshots.

Create a dated folder containing:

the platform’s full website address and app-store listing;
screenshots or screen recordings of the dashboard, balances, orders, promised returns, and failed withdrawals;
advertisements, livestreams, webinars, presentations, and testimonial videos;
contracts, terms and conditions, disclosure documents, receipts, invoices, and supposed certificates;
complete chats, emails, SMS messages, voice notes, and call logs;
names, aliases, profile links, phone numbers, email addresses, and recruiter or “mentor” details;
bank statements, wallet histories, deposit slips, QR codes, card records, and transaction references;
recipient-account names and numbers;
crypto wallet addresses, transaction hashes, exchange names, and blockchain records;
demands for additional payments;
SEC registration claims, licenses, permits, or screenshots of verification results;
the names and contact details of witnesses or other victims; and
a chronological account of what was promised, what you relied on, each payment, and what happened afterward.

Export chats and emails when the service allows it. Keep unedited copies and back them up. Record the date and time each item was obtained. Avoid logging back into a suspicious app from a device that contains banking credentials.

Electronic records can disappear quickly. Under Section 13 of the Cybercrime Prevention Act, service providers must preserve traffic data and subscriber information for at least six months from the transaction, while content data is preserved for six months after a proper law-enforcement preservation order. That is one reason to report promptly to investigators who can pursue the necessary legal process. See Republic Act No. 10175.

Determine whether it was an investment, a sale, or both

The label “dropshipping” does not decide the legal issue. Investigators and courts will examine how the arrangement actually operated.

It may be an investment scheme

An arrangement may involve a security or investment contract when people contribute money to a common enterprise expecting profits primarily from the efforts of promoters or other persons. Common indicators include:

guaranteed or unusually high returns;
passive daily earnings;
the platform choosing products, suppliers, customers, and fulfillment;
earnings shown on a dashboard without verifiable sales;
recruitment commissions;
pooled funds;
“recharging” an account to process orders;
profits dependent on the promoter rather than genuine retail activity; or
withdrawals blocked unless more money is deposited.

Under Section 8 of the Securities Regulation Code, securities generally cannot be offered or sold in the Philippines without an SEC-approved registration statement, unless a statutory exemption applies. A company’s SEC corporate registration alone does not authorize it to solicit investments. Section 26 separately prohibits fraudulent schemes and material misrepresentations connected with the purchase or sale of securities. See the Securities Regulation Code.

It may instead be a failed or fraudulent commercial transaction

A genuine dropshipping business usually involves actual goods, identifiable suppliers and buyers, real orders, disclosed fees, and an operator who bears meaningful business risk. A dispute about undelivered goods, withheld proceeds, or breached contractual duties may support civil or consumer remedies.

But failure to deliver or repay does not automatically prove a crime. Estafa by false pretenses generally requires proof that:

a false pretense or fraudulent representation was made before or at the time money was obtained;
the victim relied on it;
that reliance caused the victim to part with money or property; and
the victim suffered damage.

A business can fail without the founders having committed estafa. Conversely, a written contract or a few early payouts do not defeat a fraud complaint if the evidence shows that material representations were false from the beginning. The outcome depends on the documents, communications, flow of money, and conduct of the persons involved.

Report an apparent investment scheme to the SEC

Check the entity and offering through the SEC’s official verification services. Confirm separately:

whether the company or partnership is registered;
whether its securities or investment offering is registered or exempt;
whether it has the required secondary license or authority;
whether the persons selling investments are properly registered where required; and
whether the SEC has issued an advisory, cease-and-desist order, revocation, or other action.

Submit the complaint or tip through the SEC’s official iMessage ticketing system. Select the service concerning enforcement or investor protection, attach the evidence, and retain the electronic ticket number.

State facts rather than conclusions. Identify who solicited you, the promises made, how returns supposedly arose, each payment, the recipient accounts, withdrawal problems, and any referral program. If there are other victims, each should preserve and submit their own first-hand evidence. A coordinated report can show the wider pattern, but no one should exaggerate amounts or repeat facts they cannot personally verify.

An SEC complaint can support investigation, administrative action, and investor protection. It does not itself guarantee reimbursement or substitute for a criminal complaint or civil claim.

File a criminal complaint

You may report to the PNP Anti-Cybercrime Group, the NBI Cybercrime Division, or an appropriate local law-enforcement office. The NBI also maintains an online complaint page and publishes its Cybercrime Division contact information.

Bring government identification and organized copies of:

your chronology;
proof of payment;
communications and advertisements;
recipient-account information;
contracts and platform records;
the platform’s URLs and account identifiers;
your bank or e-wallet complaint acknowledgment;
SEC verification results or advisories; and
information about other victims, clearly separated from your personal knowledge.

Ask for the complaint’s docket, reference, or blotter number and the investigator’s contact details. Cooperate with requests for an affidavit, device examination, or additional documents. Do not edit evidence or impersonate another person to obtain more information.

Depending on the proven facts, authorities may consider estafa under the Revised Penal Code, securities-law violations, offenses committed through information and communications technology under Republic Act No. 10175, or prohibited acts involving financial accounts under the Anti-Financial Account Scamming Act. Charging decisions belong to investigators and prosecutors; victims do not need to identify the perfect offense before reporting.

Consider civil recovery

A criminal or regulatory complaint does not always produce full or prompt repayment. A lawyer can assess whether to pursue rescission, collection, damages, restitution, provisional remedies, or another civil action against identifiable persons and entities.

Civil recovery may be difficult where:

the operator used fake identities;
recipient accounts belong to money mules;
assets have been transferred or concealed;
the platform is abroad;
contractual terms select foreign law or arbitration;
the company is insolvent; or
the evidence does not connect particular defendants to the loss.

For a straightforward money claim within the current jurisdictional limit and covered by the Rules on Expedited Procedures, small claims may be considered. It is not appropriate for every investment-fraud dispute, especially where rescission, complex evidence, multiple defendants, securities issues, or provisional asset-preservation measures are involved. Current forms and guidance are available on the judiciary’s Small Claims page.

Do not delay while negotiating informally. Different criminal, civil, regulatory, contractual, and payment-dispute deadlines may apply. Their calculation can depend on the claim, when the fraud was discovered, the defendant’s location, and events that may interrupt prescription.

If cryptocurrency was used

Contact the exchange or virtual-asset service immediately through its official compliance or fraud channel. Provide wallet addresses, transaction hashes, timestamps, amounts, and your police or NBI reference number. Ask it to preserve account and transaction records and to flag any identifiable destination account.

A blockchain transfer normally cannot be reversed merely because it was fraudulent. An exchange may be able to restrict assets only if the assets remain within its control and the applicable legal and compliance requirements are met.

Never pay a “blockchain investigator,” hacker, or recovery service that promises guaranteed retrieval. Verify the person’s identity, professional standing, written terms, and fees. Government agencies do not need your wallet seed phrase or private key.

Protect your identity and other accounts

If you sent selfies, identification cards, signatures, bank statements, or proof of address:

notify the issuing institution if replacement or monitoring is appropriate;
warn your bank and e-wallet providers of possible identity misuse;
review account activity and credit obligations;
preserve evidence of any unauthorized accounts or transactions;
tighten privacy settings; and
report impersonating profiles to the relevant platform.

If the scammers are threatening, blackmailing, doxxing, or demanding sexual material, preserve the threat and contact law enforcement immediately. Do not meet them or confront them alone.

Common mistakes to avoid

Waiting for the platform’s promised withdrawal date before calling the bank.
Sending more money to “complete” the withdrawal.
Assuming SEC company registration means the investment is approved.
Reporting only to the platform or social-media site.
Deleting chats out of embarrassment.
Posting recipient-account details publicly before preserving and reporting them.
Editing screenshots or combining facts from several victims without attribution.
Paying an unverified recovery agent.
Allowing another person to use your account to receive or forward funds.
Signing a settlement, quitclaim, or confidentiality agreement without understanding its effect.
Treating a regulator’s advisory as proof that every element of your individual case is established.
Missing a bank, card, marketplace, contract, or court deadline while waiting for a criminal investigation.

When legal help is urgent

Consult a Philippine lawyer promptly if:

the amount is substantial;
funds or property may still be frozen, attached, or preserved;
there are several promoters, companies, or jurisdictions;
the platform is overseas;
you recruited others or received commissions;
your account received or forwarded other victims’ money;
investigators identify you as a respondent rather than only a complainant;
you signed a settlement, waiver, arbitration clause, or complex investment agreement;
your identity documents or financial accounts are being misused;
the platform threatens legal action or retaliation; or
a filing, prescription, chargeback, or contractual deadline may be near.

If you referred friends or relatives, tell them the truth promptly and preserve the communications showing what you knew at the time. Do not coordinate false stories or delete recruitment messages.

Frequently asked questions

Can the bank reverse a transfer I voluntarily approved?

Sometimes, but not automatically. Explain that deception caused the transfer and request tracing and temporary holding immediately. Recovery depends on whether funds remain, the institutions involved, the evidence, and the result of coordinated verification or legal proceedings.

Is every online investment loss estafa?

No. Loss alone does not prove fraud. Evidence must establish the elements of the applicable offense. Market loss, business failure, breach of contract, unregistered securities, and deliberate deception are legally distinct, although more than one may exist in the same case.

Does an SEC-registered company have authority to accept investments?

Not necessarily. Corporate registration creates or records the entity; it does not by itself approve an investment offering or authorize public solicitation. Verify the offering and required secondary authority separately with the SEC.

What if early withdrawals were successful?

Early payments do not prove legitimacy. They may reflect genuine operations, introductory incentives, or money from later participants. Preserve the complete transaction history and let investigators trace the source and use of funds.

Can I report if the scammer is abroad?

Yes. Report to your payment provider and Philippine authorities. Provide all foreign phone numbers, domains, exchanges, accounts, and wallet addresses. Cross-border recovery may require cooperation with foreign institutions and authorities and can take longer.

Should I join a group of victims?

Sharing verified information can help identify patterns, but protect personal data and preserve your own independent evidence. Do not surrender original records or pay an organizer without written terms. Each victim should accurately document their own transactions and representations.

Should I warn others publicly?

A factual warning can prevent further harm, but avoid publishing unverified accusations, private information, or material that may compromise an investigation. Preserve and report the evidence first. If identities or facts are uncertain, seek legal advice before naming individuals publicly.

Will filing with the SEC, NBI, or PNP guarantee a refund?

No. These reports can support investigation, enforcement, and prosecution, but recovery depends on locating assets, proving entitlement, and using the appropriate financial, criminal, or civil process.

Official resources

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Procedures and remedies depend on the evidence, payment method, parties, and applicable documents. Official sources were checked as of July 27, 2026.