Quick answer

If you have been scammed through an online shop, marketplace, messaging app, or social-media account in the Philippines, act immediately:

Call the bank, e-wallet, card issuer, or payment provider that sent the money. Report the transaction as fraudulent or unauthorized, ask it to trace and temporarily hold any remaining funds, secure the account, and give you a case or reference number.
Report the seller, listing, and conversation to the platform. Request cancellation, refund, preservation of account records, and removal of the fraudulent listing.
Preserve all evidence before accounts or messages disappear.
Report the crime to the PNP Anti-Cybercrime Group, the NBI Cybercrime Division, or the CICC.
For a consumer transaction with a business seller, use the seller’s or platform’s internal complaint process and, if unresolved, complain to the DTI.

These steps serve different purposes. A bank report may help stop or trace funds; a platform or DTI complaint may obtain consumer redress; and a police or NBI complaint may lead to a criminal investigation. Filing one does not automatically replace the others, and reporting does not guarantee recovery.

First priority: try to stop the money

Contact the financial institution through the number in its official app, website, or the back of your card—not through a number supplied by the seller.

Tell it:

the transaction was connected with a suspected scam;
whether you authorized the transfer, were deceived into making it, or lost control of your account;
the amount, date, time, transaction reference, and recipient account;
whether the recipient may still hold the funds;
whether your password, PIN, OTP, card details, identification documents, or device may have been compromised; and
that you want the transaction treated as disputed and urgently traced.

Ask the institution to:

block or secure affected cards, accounts, and digital-banking access;
start its fraud and dispute process;
coordinate with the receiving institution;
consider a temporary hold under the Anti-Financial Account Scamming Act and BSP rules;
preserve transaction, access, device, and communications records; and
issue written acknowledgment and a case number.

Republic Act No. 12010, the Anti-Financial Account Scamming Act (AFASA), allows BSP-supervised institutions to hold funds connected with a disputed transaction while institutions and account owners conduct coordinated verification. Under BSP Circular No. 1215, Series of 2025, the initial holding period is up to five calendar days and may be extended by up to 25 additional calendar days when the required grounds exist. A hold beyond the statutory 30-calendar-day period generally requires a court order.

The mechanism applies to covered electronic fund transfers between financial accounts. It does not automatically guarantee a freeze, refund, or recovery. Among other limitations, the BSP rules treat incorrectly encoded transfers as erroneous transactions and generally exclude ordinary credit-card transactions except when a credit card is used to perform a covered electronic fund transfer.

Send the institution any requested affidavit, police report, or supporting records without delay. Scammers frequently move or withdraw money quickly, and the five-day initial holding period is short.

If the institution does not resolve the complaint, escalate it through the BSP Consumer Assistance Mechanism. The BSP generally expects you to use the institution’s own consumer-assistance mechanism first. Complaints may be submitted through BSP Online Buddy or, if that is unavailable, by sending the BSP complaint form and proof of your prior complaint to consumeraffairs@bsp.gov.ph.

Secure your accounts and identity

If you clicked a link, installed an application, shared credentials, or gave remote access to your device:

disconnect the compromised device from the internet if someone still has remote access;
call the financial institution from a different, trusted device;
change the affected password and every reused password;
sign out other sessions and remove unfamiliar devices;
enable multi-factor authentication;
block or replace compromised cards;
ask your mobile provider to secure the SIM if a SIM swap is suspected;
scan the device and remove unknown remote-access or sideloaded applications; and
monitor statements and alerts for further transactions.

Never give an OTP, PIN, password, recovery code, or screen-sharing access to someone claiming that these are needed to reverse the scam. Legitimate investigators and financial institutions do not need your password or OTP to receive a complaint.

Preserve evidence before reporting the account

Do not rely on the platform to retain everything visible to you. Save the evidence in its original form where possible and make a backup.

Preserve:

the seller’s profile name, username, profile URL, account ID, phone number, and email address;
the listing URL, product description, price, photographs, claimed location, and date posted;
complete chats, emails, SMS messages, call logs, and voice messages;
order confirmations, electronic receipts, invoices, delivery records, and tracking details;
bank or e-wallet receipts showing the transaction reference, recipient name, account number, amount, date, and time;
the payment request, QR code, checkout page, or payment link;
promises about delivery, authenticity, refunds, warranties, or investment returns;
photographs or an unedited video of the parcel, label, opening, contents, and defects;
the platform complaint, acknowledgment, case number, and response;
the bank or e-wallet complaint and response;
links to copied listings or other apparent victims; and
a short chronological account written while events are fresh.

Capture the browser address bar or account URL, not just the displayed name. Usernames and profile photographs can be changed. Keep original files and avoid editing screenshots. If you must annotate a copy, preserve the untouched original.

Do not delete the conversation after blocking the account. Do not publicly post unredacted identification documents, account numbers, home addresses, or other victims’ personal information.

Report the seller or account to the platform

Use the marketplace or social-media platform’s official reporting and dispute tools. Select the most accurate category—such as fraud, non-delivery, counterfeit goods, impersonation, account takeover, or unauthorized payment—and request:

cancellation or refund;
suspension of the seller or fraudulent account;
removal of the listing;
preservation of registration, transaction, access, and communications records; and
a written decision or reference number.

For covered business-to-consumer internet transactions, the Internet Transactions Act of 2023 requires e-marketplaces and certain digital platforms to provide a responsive reporting and redress mechanism. An aggrieved party must ordinarily use that internal mechanism before filing a consumer complaint with a government agency or court. It is deemed exhausted if the matter remains unresolved after seven calendar days.

That rule should not be read as a reason to delay an urgent bank or criminal report. If money is moving, an account is compromised, evidence may disappear, or someone is in danger, notify the financial institution and law-enforcement authorities immediately while the platform process continues.

The Act generally covers business-to-business and business-to-consumer internet transactions connected with the Philippine market. It expressly excludes ordinary consumer-to-consumer transactions—for example, a genuine one-off sale by a private individual outside the ordinary course of business. A seller presenting as an individual may still be an online merchant if the facts show that the person regularly sells as a business.

File a consumer complaint with the DTI

A DTI complaint is appropriate when the dispute concerns a business seller or online merchant—for example:

paid goods were not delivered;
the goods were materially different from the listing;
an item was defective, unsafe, counterfeit, or misrepresented;
the seller refuses a lawful repair, replacement, or refund;
required seller information or a receipt was withheld; or
the platform or seller failed to provide its required complaint mechanism.

First file through the platform or e-retailer’s internal redress process and retain proof of the filing. If unresolved after seven calendar days, submit the complaint and supporting evidence to the DTI. The DTI’s official e-commerce guidance identifies the Fair Trade Enforcement Bureau at fteb@dti.gov.ph as a complaint channel for online sellers; current channels and instructions should be checked through the DTI E-Commerce website.

State clearly what relief you want, such as delivery, repair, replacement, refund, or reimbursement. Under the Internet Transactions Act, an online consumer may pursue repair, replacement, refund, or other remedies for covered defects, malfunction, loss without the consumer’s fault, warranty failures, or contractual liability. The online merchant or e-retailer is primarily liable, although a platform may have subsidiary or solidary liability in the specific circumstances stated in the Act.

The Act gives a consumer two years from the time the cause of action arose to claim damages before the DTI or a court. Do not treat that period as permission to wait: evidence, accounts, and recoverable funds may disappear much earlier.

DTI consumer proceedings and criminal investigations are separate. DTI may address consumer relief or regulatory violations, but the PNP, NBI, prosecutors, and courts handle criminal liability.

Report the crime

You may report to one or more of the following:

PNP Anti-Cybercrime Group

Use the PNP Anti-Cybercrime Group’s official e-Complaint portal or contact an appropriate PNP cybercrime office. If an online channel is unavailable, visit the nearest police station and ask that the matter be referred to the cybercrime unit when necessary.

National Bureau of Investigation

Submit an online report through the NBI’s Online Complaint service or visit the NBI Cybercrime Division or the nearest NBI regional or district office.

Cybercrime Investigation and Coordinating Center

Report the incident to the CICC through hotline 1326 or report@cicc.gov.ph. Give only the information necessary for the complaint and verify that you are communicating with the official agency.

Under the Cybercrime Prevention Act of 2012, the PNP and NBI are the principal law-enforcement authorities for cybercrime cases. The Act also establishes procedures for preservation and court-authorized disclosure of computer data. Service providers must preserve traffic data and subscriber information for at least six months from the transaction, while preserved content data is generally tied to a law-enforcement preservation order. Prompt reporting therefore matters.

Bring or attach:

a valid government-issued ID;
your signed narrative or complaint-affidavit, if required;
a chronological list of events;
transaction records and proof of loss;
seller, recipient, and account details;
complete conversations and listing information;
platform and financial-institution case numbers;
copies of demand or refund requests; and
the device containing original evidence, if investigators request it.

Ask for the complaint, blotter, or docket number and the investigator’s contact details. Keep copies of everything submitted.

What laws may apply?

The precise charge depends on what was represented, how payment was obtained, whether an account was accessed, and what the evidence proves.

Possible laws include:

Estafa under Article 315 of the Revised Penal Code, when deceit or another legally defined fraudulent means caused the victim to part with money or property.
Republic Act No. 10175, when a Revised Penal Code offense is committed through information and communications technology, or when the conduct independently constitutes computer-related fraud, identity theft, illegal access, or another cybercrime.
Republic Act No. 12010, for covered money-muling activities, social-engineering schemes, fictitious or borrowed financial accounts, and related conduct.
Republic Act No. 11967 and the Consumer Act of the Philippines, for covered deceptive, unfair, or unlawful online commercial practices.
Other special laws where the transaction involves securities, lending, regulated products, counterfeit goods, personal data, or another regulated activity.

A failed delivery or broken promise is not automatically criminal fraud. Investigators must distinguish intentional deception from a genuine contractual dispute, mistake, or later business failure. Conversely, a seller cannot necessarily avoid criminal liability merely by labeling the transaction a “civil matter.” The surrounding representations, timing, use of false identities, movement of funds, and conduct after payment may be important.

Should you send a demand first?

A written demand can help establish what you requested and how the seller responded. Send it through a verifiable channel and state:

the transaction and amount;
the specific problem;
the remedy requested;
a reasonable response deadline; and
that you will pursue available platform, regulatory, civil, and criminal remedies if the issue remains unresolved.

Do not threaten violence, public humiliation, or an unlawful disclosure of personal information. A demand is not always a legal prerequisite to report suspected crime, and it should not delay an urgent bank notification or evidence-preservation request.

Common mistakes to avoid

Waiting for the seller’s repeated promises before notifying the bank.
Reporting only to the social-media platform and assuming it will contact the police.
Deleting chats or blocking the scammer before preserving the full conversation and profile URL.
Sending more money for a supposed release fee, verification payment, tax, refund charge, or account-unfreezing fee.
Trusting a “recovery agent” who guarantees the return of funds for an advance payment.
Giving an investigator’s alleged representative your password, PIN, OTP, or remote access.
Posting accusations, account numbers, IDs, or addresses publicly instead of submitting them to the proper institution.
Naming the wrong person solely because an account received the funds. Recipient accounts may be stolen, rented, or used by money mules, and identity must be established through evidence.
Filing an exaggerated or knowingly false report. AFASA penalizes malicious, bad-faith reporting that causes an unwarranted temporary hold.
Assuming that a police report itself automatically reverses a transfer or wins a refund.

When legal help is urgent

Consult a Philippine lawyer promptly when:

the loss is substantial or involves business funds;
multiple victims, accounts, or jurisdictions are involved;
the suspect is known but denies responsibility;
the bank rejects the dispute despite evidence of account compromise or possible control failures;
you need a sworn complaint, prosecutor filing, civil action, injunction, or court-ordered preservation;
the two-year Internet Transactions Act damages period may be approaching;
the scam involves an investment, loan, property, employment, romance, cryptocurrency, or cross-border scheme;
your identity documents or financial accounts are being used by others;
you unknowingly received or transferred suspected scam proceeds; or
investigators, a bank, or another account holder accuses you of acting as a money mule.

If there is an immediate threat, extortion, stalking, or danger to a person, contact emergency services or the nearest police station at once.

Frequently asked questions

Can the bank reverse a transfer that I personally authorized?

Possibly, but not automatically. Even when you initiated the transfer, it may qualify as a disputed transaction if deception or another covered circumstance is shown. Recovery depends heavily on whether funds remain traceable, the financial institutions’ findings, applicable payment rules, and the evidence. Report it immediately.

Is a screenshot enough?

Usually not by itself. Preserve the full conversation, profile and listing links, transaction reference, payment records, delivery evidence, platform complaint, and bank response. Investigators may need original electronic records or information held by service providers.

Should I report a fake social-media shop to the DTI or the police?

Often both, but for different purposes. Use the DTI route for consumer redress against a business seller. Use the PNP, NBI, or CICC when there is suspected deceit, identity theft, account misuse, or another crime. Also report immediately to the financial institution and platform.

What if the seller is just another private individual?

The Internet Transactions Act generally excludes genuine consumer-to-consumer transactions. You may still use the platform’s dispute process and report suspected estafa or cybercrime. If the person regularly sells goods, the facts may show that the seller is actually acting as an online merchant.

Can I report an overseas seller?

Yes. The Internet Transactions Act can apply when a seller or platform avails itself of the Philippine market and has sufficient contacts here. Practical enforcement and recovery may be harder when the people, evidence, and assets are abroad, so preserve all international payment and account information.

Does filing a report guarantee a refund?

No. A temporary hold preserves available funds while verification proceeds; it is not a final finding that the complainant owns the money. Refund or restitution depends on the remaining funds, evidence, applicable rules, institutional findings, settlement, or an administrative or judicial order.

How quickly should I act?

Immediately—preferably as soon as the suspicious transaction or non-delivery becomes apparent. The initial AFASA holding period under current BSP rules is only five calendar days, and scammers may move funds within minutes. Other legal filing periods may be much longer, but they do not protect money or evidence from disappearing.

Official references

This article provides general legal information, not legal advice for a particular case. Procedures and available remedies depend on the evidence, payment method, parties, and governing rules. Official legal and agency sources were checked as of September 16, 2026.