Quick answer

If you have been scammed through an online shop, marketplace, messaging app, or social media account, act immediately:

Contact the bank, card issuer, or e-wallet through its official channel. Report the transaction as fraudulent or disputed, ask whether the transfer can be stopped or the recipient funds temporarily held, secure the account, and obtain a reference number.
Report the seller, listing, and conversation to the platform. Request cancellation, refund, preservation of account records, and removal of the fraudulent listing.
Report the incident to the Cybercrime Investigation and Coordinating Center (CICC), PNP Anti-Cybercrime Group, or NBI Cybercrime Division.
For a consumer dispute with an identifiable business, use the platform’s internal complaint process and, if unresolved, file with the Department of Trade and Industry (DTI).
Preserve the evidence before accounts, posts, messages, or transaction histories disappear.

Reporting does not guarantee that money will be recovered. Speed matters because transferred funds can be withdrawn or moved through several accounts, while platforms and service providers may not retain all data indefinitely.

Do these things immediately

1. Call the bank or e-wallet first

Use only the telephone number, in-app help feature, or website published by the financial institution. Do not call a number supplied by the seller or by someone claiming that they can recover your money.

Tell the institution:

that the transaction resulted from a suspected scam;
whether you personally authorized the transfer, were tricked into authorizing it, or did not authorize it at all;
the amount, date, time, and transaction reference number;
the recipient’s account name, account number, mobile number, or wallet identifier;
whether your password, PIN, one-time password, card details, identification document, or device may have been compromised; and
that you want the transaction formally recorded as disputed and urgently reviewed.

Ask for a case or complaint reference number. Also ask whether the institution can:

stop, recall, or trace the transfer;
temporarily hold funds that remain in the receiving account;
coordinate with the receiving institution;
block or replace a compromised card;
freeze or secure your account;
revoke active sessions and registered devices; and
preserve transaction and access records for investigators.

Under the Anti-Financial Account Scamming Act, Republic Act No. 12010, BSP-supervised institutions may temporarily hold funds subject to a disputed transaction. The statutory holding period cannot exceed 30 calendar days unless extended by a court. Whether a hold is available in a particular case depends on the facts, whether funds remain in the financial system, and the applicable BSP rules. It is not an automatic refund.

If you disclosed credentials or clicked a suspicious link, change the affected password from a clean device, then change any reused passwords. Enable multi-factor authentication, sign out other sessions, remove unfamiliar devices, and monitor the account for further transactions. Never share a PIN, password, one-time password, or card verification code with a supposed investigator, bank employee, or “recovery agent.”

2. Use the platform’s complaint and refund process

Report the account, listing, advertisement, live-selling page, and transaction through the platform’s official help or dispute function. Request:

cancellation or refund;
preservation of the seller’s registration, login, transaction, and communications records;
restriction of the seller’s account;
removal of the listing; and
a complaint reference number or written response.

Do not delete the chat or block the account until you have preserved the evidence. If blocking is necessary for safety, take screenshots and export the conversation first.

For internet transactions covered by the Internet Transactions Act of 2023, Republic Act No. 11967, an aggrieved party must generally use the internal redress mechanism of the digital platform, e-marketplace, or e-retailer before bringing the consumer dispute to a government agency, court, or alternative-dispute-resolution process. The mechanism is deemed exhausted if the complaint remains unresolved for seven calendar days.

That consumer-redress rule should not be treated as a reason to delay an urgent report to your bank or a report of suspected crime to law enforcement.

The Act allows online consumers to pursue repair, replacement, refund, or other remedies when goods are defective, lost without the consumer’s fault, do not conform to the warranty, or otherwise breach the contract. The online merchant or e-retailer is primarily liable for the transaction. Platform liability depends on statutory conditions; a platform is not automatically liable merely because a scammer used it.

3. Report the suspected crime

You may report to one or more of the following official channels:

CICC: call 1326, email report@cicc.gov.ph, or use the reporting options identified on the CICC website.
PNP Anti-Cybercrime Group: email acg@pnp.gov.ph, call 0998-598-8116 or (02) 8414-1560, or visit the PNP Anti-Cybercrime Group at Camp Crame, Quezon City. Confirm current details through the PNP ACG website before travelling.
NBI Cybercrime Division: email ccd@nbi.gov.ph, contact the NBI through the numbers on its official website, or visit the NBI office on Taft Avenue, Manila. See the NBI website for current office information.

These agencies perform related but different functions. A CICC report can help route and coordinate the incident, while the PNP or NBI may receive a formal criminal complaint and investigate. An online report, platform report, or bank complaint is not necessarily a substitute for a sworn complaint required for criminal proceedings.

When reporting, give a short chronological narrative:

when and where you saw the offer;
what the seller represented;
why you relied on it;
what you ordered and agreed to pay;
how, when, and where payment was sent;
what happened afterward;
why you believe the representation was fraudulent; and
what loss or other harm resulted.

Be accurate. Separate what you personally know from what you suspect. Do not alter screenshots or claim that an account holder is necessarily the scammer; recipient accounts may belong to money mules, identity-theft victims, or other intermediaries.

Online deception may constitute estafa under the Revised Penal Code, potentially in relation to Section 6 of the Cybercrime Prevention Act of 2012, Republic Act No. 10175. Other offenses may apply where there was unauthorized account access, computer-related fraud, identity theft, social engineering, or use of mule accounts. The proper charge depends on the evidence and should be determined by investigators and prosecutors.

When to complain to the DTI

A DTI complaint is most useful when the dispute concerns an identifiable online merchant or e-retailer—for example:

the item was not delivered;
the item was materially different from its description;
the seller refuses a legally available refund, replacement, or warranty remedy;
the business used a deceptive or unfair sales practice; or
the marketplace or merchant failed to provide its required redress mechanism.

After using the platform’s internal process, complaints may be filed through the DTI’s Consumer Complaints Assistance and Resolution System or the current online dispute-resolution channel published by the DTI Fair Trade Enforcement Bureau. You may also email consumercare@dti.gov.ph.

Include:

your complete contact details;
the seller’s name and available address or contact details;
the platform and account name;
a clear statement of facts;
proof of payment and purchase;
your correspondence with the seller and platform;
the platform’s response or proof that seven calendar days passed without resolution; and
the specific remedy requested.

If the alleged seller is anonymous, fictitious, unreachable, or has no known business address, DTI may not be able to conduct ordinary consumer mediation effectively. DTI guidance directs consumers in that situation to the PNP or NBI. You may still report the listing to the platform and CICC.

Under Republic Act No. 11967, a claim for damages under that Act may be filed before a court or the DTI within two years from the time the cause of action arose. Other civil, administrative, or criminal claims may have different prescriptive periods. Do not wait for that deadline if records or recoverable funds may disappear.

If the bank or e-wallet does not resolve the complaint

A complaint involving a BSP-supervised bank, e-money issuer, payment service provider, or other supervised financial institution must first be raised through that institution’s Financial Consumer Protection Assistance Mechanism.

If its response is unsatisfactory, escalate the matter through the BSP Consumer Assistance Mechanism:

use the BSP Online Buddy or “BOB” through the BSP website or BSP’s official Facebook page; or
if you cannot use BOB, complete the BSP complaint form and email it to consumeraffairs@bsp.gov.ph.

Attach the complaint filed with the institution, its response if any, your transaction records, and the remedy requested. Keep the BSP case reference number. The BSP process addresses the conduct of the supervised institution; it does not replace a criminal complaint against the scammer.

Do not send the BSP your PIN, password, complete card credentials, passport, or original identification document. Redact unrelated account information where appropriate.

Evidence to preserve

Keep the original electronic files whenever possible, not only cropped screenshots. Preserve:

the complete advertisement, product listing, profile, page, group, and account URLs;
the username, display name, profile ID, telephone number, and email address used;
screenshots showing the date, time, URL, and surrounding conversation;
exported chat histories, emails, SMS messages, voice messages, and call logs;
order confirmations, invoices, receipts, waybills, parcel labels, and unboxing videos;
bank or e-wallet receipts and transaction reference numbers;
the receiving institution, account name, account number, QR code, or wallet number;
proof of the promised product, price, delivery date, refund, or warranty;
your complaints to the seller, platform, bank, CICC, PNP, NBI, or DTI;
all acknowledgment emails and case reference numbers;
suspicious links, shortened URLs, and email headers, without opening the links again;
details of witnesses; and
a written timeline prepared while events are still fresh.

Store copies in at least two secure places. Do not annotate or overwrite the originals. If you surrender a device or original document, ask for an inventory or acknowledgment.

Avoid publicly posting unredacted receipts, IDs, account numbers, QR codes, addresses, or private conversations. Public accusations can also create legal and safety risks, especially if the identity of the person behind an account has not been established.

If a parcel arrived

If you received an empty parcel, counterfeit item, or a product different from what was advertised:

Photograph the sealed package, shipping label, and visible condition.
Record one continuous unboxing video if the parcel has not yet been opened.
Keep the item, packaging, seals, waybill, and receipt.
Do not return the item outside the platform’s official return process unless you have reliable written instructions.
File the platform dispute before its displayed return or buyer-protection deadline.
If the product may be unsafe, stop using it and report it to the platform and the relevant regulator.

The applicable regulator may depend on the product—for example, the Food and Drug Administration for regulated health products or the DTI for many ordinary consumer goods.

If your identity or account was compromised

Take additional steps if you sent an ID, selfie, card image, password, PIN, one-time password, or other sensitive information:

notify the affected bank, e-wallet, card issuer, or government agency;
change credentials and security questions;
replace or block exposed cards where advised;
check for unauthorized loans, wallets, SIMs, or accounts;
preserve alerts showing unfamiliar logins or password changes;
ask your mobile provider to secure the SIM if you suspect SIM takeover; and
consider filing a complaint with the National Privacy Commission if personal data was unlawfully collected, disclosed, or misused.

Do not pay anyone who promises to “unlock,” “verify,” or recover the account in exchange for another transfer. Treat unexpected recovery messages as a possible second scam.

Common mistakes to avoid

Waiting for the seller’s next promise. Repeated assurances can consume the period when a transfer might still be traced or held.
Reporting only to the social media platform. Platform moderation is not a bank dispute or criminal complaint.
Reporting only to the bank. A financial complaint does not automatically begin a criminal investigation.
Deleting or editing messages. This can remove identifiers, timestamps, and context.
Sending more money. Taxes, insurance, verification deposits, release fees, and “refund processing” payments are common follow-up tactics.
Using unofficial contact numbers. Scammers sometimes impersonate banks, police officers, lawyers, and government agencies.
Assuming the recipient’s account name identifies the mastermind. The account may be rented, sold, stolen, or controlled by another person.
Exaggerating the report. Inaccurate allegations can weaken the complaint. Republic Act No. 12010 also penalizes malicious, completely unwarranted, or false reporting that results in funds being held.
Expecting an instant refund. Investigation, temporary holding, tracing, liability, and restitution are separate issues.

When help is urgent

Contact the bank or e-wallet and law enforcement without delay if:

money has just been transferred;
the scammer still appears active or is asking for another payment;
your account, email, phone, or SIM has been taken over;
you disclosed an OTP, password, PIN, card details, or identity documents;
unauthorized transactions are continuing;
multiple victims or a large organized operation appear to be involved;
the scam involves threats, extortion, intimate images, stalking, or a child;
someone is in immediate physical danger; or
investigators or a platform tell you that records may soon be deleted.

For immediate danger, call 911. For substantial losses, complicated transfers, cross-border transactions, or questions about filing a civil or criminal case, consult a Philippine lawyer promptly. The Public Attorney’s Office may assist qualified indigent persons, subject to its requirements.

Frequently asked questions

Can I recover money sent voluntarily to the scammer?

Possibly, but not automatically. A transfer can still be fraudulent even if you pressed “send” because of deception. Recovery depends on factors such as how quickly the transaction was reported, whether funds remain in reachable accounts, the institutions involved, and the available evidence.

Can the bank immediately reveal the recipient’s identity?

Usually not directly to a private complainant merely upon request. Financial and subscriber information may require lawful disclosure procedures. Under applicable laws, the BSP, law-enforcement agencies, prosecutors, and courts have mechanisms for obtaining relevant records during an investigation.

Should I report a small loss?

Yes. The report may help connect your case with other victims or accounts. Keep expectations realistic: investigative priorities and available remedies may vary, but a small individual transaction may form part of a larger scheme.

Is a social media seller covered by consumer law?

It depends on whether the person is acting as an online merchant in the ordinary course of business and on the nature of the transaction. A private, one-time consumer-to-consumer sale is not necessarily treated the same way as a business-to-consumer transaction. Fraud may still be reported to law enforcement regardless.

Do I need the scammer’s real name or address?

No, not to make an initial report. Supply every identifier you have. However, identifying and locating the responsible person may be necessary for prosecution or civil recovery. Platforms and financial institutions may disclose records only through lawful processes.

Is a screenshot enough?

It is useful but may not be sufficient by itself. Preserve the full conversation, URLs, original files, payment records, account identifiers, dates, and device records. Investigators determine what evidence is needed and whether authentication or forensic examination is necessary.

Must I wait seven days before reporting?

The seven-calendar-day period under the Internet Transactions Act concerns exhaustion of a platform’s internal redress mechanism for a consumer dispute. Do not wait seven days to notify your bank, secure a compromised account, preserve evidence, or report suspected crime.

Can I file with DTI and law enforcement at the same time?

They address different issues. DTI may handle consumer redress and regulatory violations involving an identifiable business, while the PNP, NBI, or other authorities investigate possible crimes. Depending on the facts, both routes may be appropriate.

Should I hire someone online to recover the money?

Be extremely cautious. Recovery scammers target recent victims and may impersonate lawyers, hackers, police officers, banks, or government personnel. Verify a lawyer through the Supreme Court’s official resources and communicate with agencies only through independently confirmed channels.

Official references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Rights, procedures, and the proper agency depend on the transaction, parties, evidence, and institutions involved. Official sources and reporting channels were checked as of 22 September 2026; confirm current contact details and filing requirements before submitting sensitive information.