Quick answer

If you paid an online seller or social-media account and now believe it was a scam, act immediately:

Contact your bank, card issuer, or e-wallet through its official app, hotline, or website. Report the transaction as fraudulent or disputed, ask whether the transfer can be held, traced, recalled, or reversed, and obtain a reference number.
Secure your accounts. Change compromised passwords, sign out other sessions, enable multi-factor authentication, and ask your financial institution to block affected cards or accounts.
Preserve the evidence before the seller deletes or changes anything.
Report the account and transaction to the shopping or social-media platform.
File a criminal complaint with the PNP Anti-Cybercrime Group, the NBI Cybercrime Division, or the police station with jurisdiction.
For a consumer dispute involving an online merchant, file a complaint with the Department of Trade and Industry.
If the financial institution mishandles your complaint, escalate it through the Bangko Sentral ng Pilipinas’s consumer-assistance channels.

These reports serve different purposes. A bank or e-wallet report may help protect or trace funds; a platform report may preserve records or restrict the account; a DTI complaint may pursue consumer remedies; and a police or NBI complaint may begin a criminal investigation. Filing with only one does not necessarily accomplish the others.

No agency can guarantee recovery. The chance of preserving funds and electronic records is generally better when the incident is reported promptly.

First, stop further loss

Do not send another payment for “verification,” “insurance,” “customs,” “release,” “refund processing,” or “account unlocking.” A request for more money after a failed delivery or supposed refund is a common continuation of the fraud.

If you disclosed an OTP, PIN, password, recovery code, card security code, or identification document:

Call the financial institution using the number in its official app, website, or the back of the card—not a number supplied by the suspected scammer.
Ask it to block or secure the affected account, card, or payment channel.
Change the password of the affected account and any other account using the same or a similar password.
Secure the email address and mobile number connected to your financial accounts.
Tell your mobile provider immediately if your SIM suddenly loses service or you suspect a SIM-swap.
Check transaction history for other unauthorized activity.
Warn contacts if the scammer took control of your social-media or messaging account.

Do not install “refund,” remote-access, screen-sharing, or loan applications sent by the other party. Do not delete the conversation merely because it is upsetting; it may be evidence.

Report the payment immediately

Contact both the institution from which the money was sent and, if identifiable, the institution that received it. Give them:

the amount, date, and exact time of payment;
the transaction or reference number;
the recipient’s account name, number, mobile number, QR details, or wallet identifier;
a short explanation of how the fraud occurred;
copies of the receipt and relevant messages; and
any police, NBI, CICC, platform, or DTI reference number already available.

Ask specifically whether the institution can:

flag the transaction as fraud-related;
notify the receiving institution;
place a lawful hold on disputed funds;
trace or attempt to recall the transfer;
block further transactions;
preserve relevant account and transaction records; and
provide written confirmation and a complaint reference number.

Under the Anti-Financial Account Scamming Act, Republic Act No. 12010, covered institutions may hold funds that are the subject of a disputed transaction under the conditions and period prescribed by law and implementing regulations. A hold is not automatic, does not establish ownership, and does not guarantee reimbursement. The institution must follow the applicable legal and regulatory process.

A transfer personally authorized because of deception is not necessarily treated the same way as a transaction made without the account holder’s authorization. Liability and reimbursement can depend on the payment method, the institution’s controls, the customer’s actions, the account terms, and the evidence. Report either situation promptly and describe it accurately.

For a credit or debit card purchase, ask the issuer whether a chargeback or other dispute process applies. Card-network and issuer deadlines can differ, so do not wait for the seller’s repeated promises before asking.

Preserve evidence properly

Save the evidence in its original form whenever possible. Screenshots are useful, but they should not be the only copies if a full message export, email file, transaction record, or original photo is available.

Preserve:

the seller’s profile name, username, profile URL, user ID, and profile photographs;
the listing URL, item description, advertised price, photographs, and claimed terms;
the complete conversation, including dates and timestamps;
voice messages, call logs, emails, SMS messages, and delivery updates;
order confirmations, invoices, receipts, tracking numbers, and proof of payment;
the recipient’s bank, e-wallet, or payment-account details;
QR codes and the page or message from which they came;
the names and numbers used by couriers or supposed customer-service agents;
promises of delivery, replacement, or refund;
blocked-account notices and deleted or edited-post indicators;
the platform’s acknowledgment and case number;
your bank or e-wallet complaint and reference number; and
a brief timeline written while events are still fresh.

Capture the full screen where practical, including the account name, URL, date, and time. Avoid cropping away information that helps authenticate the record. Keep an untouched copy and a backup. Do not alter files, manufacture conversations, or impersonate another buyer to obtain more information.

Authorities may later request access to the original device. Do not reset or dispose of it if the case is serious or if account takeover, malware, threats, or a substantial loss is involved.

Report the seller to the platform

Use the platform’s in-app reporting and buyer-protection tools. Select the most accurate reason, such as fraud, non-delivery, counterfeit goods, impersonation, account takeover, or unauthorized transaction.

Include the order number, payment reference, seller profile, listing URL, and a concise timeline. Ask the platform to preserve relevant account, login, listing, and communication records for lawful investigation.

Keep the acknowledgment or ticket number. A platform refund request or account report is not a substitute for reporting a crime or contacting the payment provider.

Under the Internet Transactions Act of 2023, Republic Act No. 11967, online merchants and covered digital platforms have statutory duties intended to protect parties to internet transactions. The Act also gives the DTI regulatory and enforcement functions. Whether a particular platform must refund a buyer or bears liability depends on its role, its knowledge and actions, the statutory conditions, and the evidence; it should not be assumed merely because the transaction occurred on the platform.

File a criminal report

Online selling fraud may, depending on the evidence, involve estafa, computer-related fraud, identity theft, use of another person’s financial account, or other offenses. A failed or delayed transaction is not automatically a crime: investigators must distinguish deliberate deception from a genuine contractual or delivery dispute.

You may report to:

the PNP Anti-Cybercrime Group;
the National Bureau of Investigation, including its cybercrime investigators; or
the nearest police station, which can record the complaint and direct or refer it as appropriate.

The Cybercrime Investigation and Coordinating Center also operates government cybercrime-reporting and assistance channels, including the national 1326 hotline. Check the CICC’s official website or verified government pages before using an email address or online form, because contact channels can change.

For an in-person complaint, bring:

a government-issued ID;
printed and digital copies of the evidence;
the original device if requested, while keeping a backup;
a chronological narrative identifying who said what, when, and through which account;
payment and account details;
the known or suspected identity and address of the seller;
platform, bank, e-wallet, courier, DTI, or CICC reference numbers; and
proof of any demand for delivery or refund.

Tell the receiving officer if other victims, linked accounts, threats, identity theft, or ongoing attempts to withdraw funds are involved. Ask for the complaint, blotter, or reference number and the investigator’s official contact details.

The use of the internet does not make every dishonest transaction a separate cybercrime. The possible charges depend on the acts proved. Relevant laws may include the Revised Penal Code provisions on estafa, the Cybercrime Prevention Act of 2012, and the Anti-Financial Account Scamming Act. Prosecutors and courts—not complainants or platforms—ultimately determine the proper offense.

File a DTI consumer complaint

A complaint against an online merchant may also be brought to the Department of Trade and Industry, particularly when the issue concerns non-delivery, misrepresentation, defective goods, failure to honor a refund or warranty, or another consumer transaction within DTI’s jurisdiction.

Start with the DTI’s official Consumer Care complaint portal or the current consumer-assistance channel published on the DTI website.

Prepare:

your name and contact details;
the merchant’s known name, address, contact information, and online account;
proof of purchase and payment;
the listing or advertisement;
correspondence with the merchant;
proof that you first requested delivery, correction, replacement, or refund, when practicable; and
the exact remedy you are requesting.

DTI proceedings generally address consumer-law compliance and dispute resolution. They are not the same as a criminal investigation. If the “seller” appears fictitious, used a mule account, disappeared immediately, or operated solely to obtain money through deception, also report the matter to law enforcement and the payment provider.

Some products and services belong primarily to another regulator. Complaints involving securities or investment solicitations may require referral to the Securities and Exchange Commission; banking and e-wallet services to the BSP; insurance to the Insurance Commission; telecommunications to the National Telecommunications Commission; and food, medicine, medical devices, or cosmetics to the Food and Drug Administration. DTI may direct a complaint to the appropriate agency when the subject is outside its authority.

Escalate a bank or e-wallet complaint when necessary

First use the financial institution’s formal complaint process and retain its case number and final response. If the institution is supervised by the BSP and the matter remains unresolved, use the BSP Consumer Assistance Mechanism.

Submit the institution’s name, your complaint reference, the disputed transaction, the steps already taken, and the response received. The BSP channel addresses the conduct of supervised financial institutions; it does not prosecute the scammer and does not automatically order reimbursement in every disputed transaction.

Never give an OTP, PIN, password, or remote access to someone claiming to be from the BSP, DTI, CICC, police, or a bank. Legitimate complaint handling does not require you to transfer money to a “safe account.”

What the law generally protects

The legal route depends on what actually happened:

The seller never intended to deliver. Deliberate false representations used to obtain payment may support an estafa or fraud complaint.
An account or identity was stolen. Account takeover, misuse of identifying information, and unauthorized electronic transactions may involve cybercrime and financial-account offenses.
The item was delivered but is defective, counterfeit, unsafe, or materially different. Consumer remedies and platform procedures may be central, although criminal liability may still arise from intentional deception.
Delivery was merely delayed or the parties disagree about terms. The dispute may be contractual or administrative rather than criminal unless fraudulent intent and the other legal elements can be proved.
A bank or e-wallet account served as a mule account. The Anti-Financial Account Scamming Act penalizes prohibited acts involving financial accounts. Whether the named account holder is criminally liable depends on knowledge, participation, and the statutory elements; the name on the receiving account alone does not prove who operated the scam.
The merchant or platform is abroad. Philippine authorities can still receive the report, but jurisdiction, identification, evidence requests, and recovery may be more difficult. Preserve the foreign website, account, payment, and shipping details.

Consumer, civil, administrative, and criminal remedies can sometimes proceed separately. The appropriate combination depends on the amount, the parties’ identities, the available documents, and whether the evidence points to fraud or only non-performance.

Deadlines and timing

Do not wait for a general legal deadline before reporting. The most urgent time limits are often the much shorter operational deadlines imposed by banks, e-wallets, card issuers, platforms, and buyer-protection programs. Evidence can disappear and transferred funds can be moved within minutes.

Criminal prescription periods and civil filing periods vary according to the offense, remedy, amount, governing law, and procedural events. The correct period should be calculated from the actual documents and facts. Obtain legal advice promptly rather than assuming that an online post, demand letter, platform ticket, or agency complaint automatically stops a prescriptive period.

Common mistakes to avoid

Waiting for repeated promises of shipment or refund while dispute windows expire.
Reporting only to the social-media platform.
Reporting only to the bank and assuming a criminal case has been filed.
Deleting the conversation after blocking the scammer.
Saving cropped screenshots without usernames, URLs, dates, or transaction details.
Publicly accusing the wrong person because a bank account, telephone number, or photograph may have been stolen or misused.
Threatening, hacking, doxxing, or attempting to entrap the suspected scammer.
Paying an “investigator,” “hacker,” or “recovery agent” who guarantees the return of funds.
Giving an OTP or installing a remote-access application during a supposed refund.
Exaggerating the facts in an affidavit or omitting that the payment was personally authorized.
Sending identity documents to unofficial email addresses or social-media accounts claiming to represent an agency.

State the facts accurately. Distinguish what you personally observed from what you suspect.

When help is urgent

Seek immediate assistance from the financial institution and law enforcement when:

the transfer was made moments ago and the funds may still be traceable;
the scammer has access to your bank, e-wallet, email, SIM, or social-media account;
unauthorized transactions are continuing;
your identity documents, selfie, signature, or biometric information were obtained;
the scammer is threatening violence, blackmail, or publication of intimate material;
a child or vulnerable adult is involved;
you installed software that allows remote control of your device;
the loss is substantial or involves borrowed, business, or entrusted funds;
the same recipient appears to be collecting money from multiple victims; or
an investigator, platform, or institution asks you to sign a waiver, settlement, affidavit, or quitclaim that you do not understand.

For advice tailored to the evidence, consult a Philippine lawyer. Those unable to afford private counsel may inquire with the Public Attorney’s Office about eligibility and available assistance.

Frequently asked questions

Can I report a scam even if the amount is small?

Yes. The amount does not make deceptive conduct lawful, and reports involving small amounts may help identify a pattern affecting many victims. The available procedure and practical response may vary, but preserve the evidence and report it.

Should I report to DTI or the police?

Potentially both. Use DTI for a consumer complaint against a merchant and the police or NBI when the facts indicate intentional fraud or another crime. Also report the payment to the bank or e-wallet and the account to the platform.

Can the bank immediately return my money?

Not necessarily. The institution may investigate, coordinate with another institution, or hold disputed funds when legally permitted, but recovery depends on whether funds remain available, the nature of the transaction, applicable rules, and the evidence. A report is not a guarantee of reimbursement.

What if I authorized the transfer myself?

Report it anyway and explain that authorization was obtained through deception. Do not falsely call it an unauthorized transaction. The distinction may affect the institution’s process and potential liability, but it does not prevent a criminal investigation into the scam.

Is non-delivery automatically estafa?

No. Non-delivery may result from breach of contract, logistics problems, or fraud. Estafa generally requires proof of the applicable statutory elements, including deception or fraudulent conduct—not merely an unpaid refund or missed delivery date.

What if the seller blocked me or deleted the account?

Report promptly using the evidence already saved. Give investigators and the platform the exact username, profile URL, payment account, telephone number, and transaction details. Platforms and financial institutions may hold records not visible to you, but their disclosure must follow lawful procedures.

Should I post the recipient’s name and account number publicly?

Usually not. Public posting can expose personal information, alert the perpetrators, interfere with an investigation, or wrongly identify an innocent person whose account or identity was misused. Give complete information to the platform, financial institution, regulator, and investigators instead.

Can I file where I live?

You may approach the nearest police station, PNP Anti-Cybercrime Group office, or NBI office for initial assistance. The complaint may later be referred based on where relevant acts occurred, where evidence or suspects are located, or which office has proper jurisdiction.

Do I need a lawyer to make the first report?

Usually not. You may notify the bank, platform, DTI, police, CICC, or NBI yourself. Legal assistance becomes especially useful when the amount is substantial, the facts cross jurisdictions, the authorities require a formal affidavit, or you are considering a civil case or settlement.

Official sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Procedures and agency channels can change, and the correct remedy depends on the evidence and transaction documents. Sources and official channels were checked as of September 21, 2026.