Quick answer

If you paid an online seller or social-media account and believe you were scammed, act immediately:

Contact the bank, e-wallet, card issuer, or payment provider. Report the transaction as fraudulent or disputed, ask whether the transfer can be stopped or traced, secure your account, and obtain a reference number.
Report the seller through the shopping platform or social-media app. Request a refund, preservation of account and transaction records, and restriction of the seller’s account.
Preserve all evidence before anything is deleted.
Use the platform’s formal complaint or redress process. Under the Internet Transactions Act, this generally must be attempted before filing with a government agency or court; it is deemed exhausted if the complaint remains unresolved after seven calendar days.
File a consumer complaint with the Department of Trade and Industry (DTI) if the transaction involved an online merchant or retailer.
Report apparent fraud to the Philippine National Police (PNP) or National Bureau of Investigation (NBI). A DTI complaint seeks consumer redress; it does not replace a criminal complaint.

Reporting quickly improves the chance that remaining funds and electronic records can be preserved, but no agency, platform, or financial institution can guarantee recovery.

First, decide what happened

Not every failed online purchase is automatically a criminal scam.

A matter may begin as a consumer dispute when, for example, an identified merchant delivers the wrong or defective item, misses a delivery date, or refuses a contractually available refund. The appropriate first steps are usually the merchant’s and platform’s complaint systems, followed by DTI if unresolved.

Possible fraud is more likely when there was deception from the start, such as:

a fake shop, impersonated brand, or hijacked social-media account;
payment followed by blocking, disappearance, or deletion of the page;
a nonexistent item or fabricated tracking information;
a parcel containing an intentionally worthless or materially different object;
use of another person’s identity or payment account;
a false “refund,” “verification,” or delivery link used to steal credentials;
a demand for an OTP, MPIN, password, card security code, or remote access; or
repeated demands for supposed release, customs, insurance, or verification fees.

The legal classification depends on the evidence. Possible laws may include the Revised Penal Code provisions on estafa, the Cybercrime Prevention Act of 2012, and—where financial accounts, money mules, or credential-stealing schemes are involved—the Anti-Financial Account Scamming Act. Victims do not need to identify the exact offense before making a truthful report.

What to do immediately

1. Call the payment provider first

Use only the official number in the banking or e-wallet app, on the back of the card, or on the institution’s official website. Do not call a number supplied by the suspected scammer.

Tell the provider:

when and how the transaction happened;
the exact amount;
whether you personally authorized the payment but were deceived, or the transaction was entirely unauthorized;
the recipient’s account name, account number, mobile number, QR details, or transaction identifier;
whether you disclosed an OTP, password, MPIN, card details, identification document, or installed an app; and
whether more transactions may still occur.

Ask the provider to:

mark the transaction as disputed or fraud-related;
contact the receiving institution;
determine whether funds can be held, recalled, or traced;
block or secure affected cards and accounts;
terminate unknown sessions or devices;
preserve transaction and access records; and
give you a case or reference number and written acknowledgment.

The Anti-Financial Account Scamming Act permits covered institutions to place a temporary hold on funds involved in a disputed transaction under BSP rules. A hold is not automatic, and money may already have been withdrawn or transferred. This is why reporting within minutes—not days—matters.

If you exposed login credentials, immediately change the affected password from a trusted device. Change any other account using the same password, enable multi-factor authentication, remove unfamiliar devices, and contact your mobile provider if your SIM may have been taken over.

2. Open a formal case with the platform

Use the marketplace’s in-app order-dispute, return, refund, or buyer-protection process. For a social-media transaction, use the platform’s fraud, impersonation, or commerce-reporting function as well as any formal seller complaint channel.

State a specific demand, such as:

cancellation and full refund;
replacement with the item actually ordered;
return at the merchant’s expense;
release of funds still held in escrow; or
preservation of the seller’s registration, access, listing, and communication records.

Save the ticket number, submission date, automated acknowledgment, and every response. Do not close or withdraw the case merely because the seller promises an off-platform refund.

Under Section 24 of the Internet Transactions Act of 2023, an aggrieved party generally must use the platform’s, marketplace’s, or e-retailer’s internal redress mechanism before going to a court, government agency, or alternative dispute resolution. The mechanism is deemed exhausted when the complaint remains unresolved for seven calendar days.

That requirement should not be treated as a reason to delay an urgent fraud report, a bank notification, or action needed to prevent further loss. Run those steps in parallel.

3. Stop communicating unsafely

Do not send another payment to “unlock” a refund or recover the first payment. Do not provide additional identification, OTPs, passwords, or screen-sharing access.

You may send one clear written demand if safe to do so, but avoid threats, harassment, or public accusations that reveal personal data. Do not attempt to hack, trace, entrap, or physically confront the suspected scammer.

Evidence to preserve

Electronic evidence can disappear quickly. Preserve original files where possible, not only cropped screenshots.

Keep:

the complete product listing and its URL;
the seller’s profile URL, username, page ID, phone number, email address, and displayed business details;
the date and time each page was accessed;
the entire conversation, including voice messages and call logs;
order confirmation, invoice, receipt, and delivery information;
payment confirmation, transaction reference, recipient details, and account statement;
photographs and an uninterrupted unboxing video, if available;
the parcel, waybill, packaging, labels, and item received;
refund requests, dispute tickets, and platform responses;
emails in their original form, including attachments;
suspicious links, without reopening them;
account-security alerts and records of unauthorized access; and
a chronological summary of what happened.

Export chats or download account data if the service permits. Save copies in at least two secure locations. Do not edit original images, rename every file beyond recognition, or delete the conversation after taking screenshots.

If you surrendered a physical item to a courier or merchant, record when, where, and to whom it was given. Obtain a receipt or tracking record.

How to file a DTI consumer complaint

DTI handles consumer complaints involving online merchants and retailers, including sellers operating through websites, marketplaces, and social-media services.

Before filing, collect proof that you used the merchant’s or platform’s internal redress mechanism and note whether seven calendar days have passed without resolution.

A complaint letter should contain:

your complete name, address, email address, and contact number;
the respondent’s name and available contact information;
a clear chronological narration;
the remedy you want; and
copies of proof of transaction, supporting evidence, and your government-issued ID.

You may file through the DTI Consumer CARe System. DTI also lists consumercare@dti.gov.ph for complaint submissions and provides its current channels and office details through the Fair Trade Enforcement Bureau. Consumers outside Metro Manila may use the appropriate DTI regional or provincial office.

DTI mediation and adjudication address consumer-law remedies; they are not criminal prosecution. Depending on the facts, an online consumer may pursue repair, replacement, refund, or other remedies under the Internet Transactions Act, the Consumer Act, and related laws.

The Internet Transactions Act makes the online merchant or e-retailer primarily liable for indemnifying the consumer in covered civil actions or administrative complaints. A platform’s liability is different and depends on statutory conditions, such as failure to exercise required diligence, failure to provide certain merchant contact details, or failure to act after proper notice in specified cases. A platform is therefore not automatically liable for every dishonest seller.

For a claim for damages under Section 28 of the Internet Transactions Act, the statute states a period of two years from the time the cause of action arose. Other remedies or offenses may have different filing periods. Do not wait for that outer limit when evidence or funds may disappear.

How to make a criminal report

For apparent fraud, identity theft, account takeover, or organized scamming, report to either:

the PNP, including its cybercrime investigators or your nearest police station; or
the NBI, which lists cybercrime, fraud and financial crimes, and complaints assessment among its services. Use the official NBI website and office directory to locate the appropriate office.

Bring printed copies and secure electronic copies of your evidence. Be prepared to present valid identification and give a detailed, truthful statement. Investigators may ask for a complaint-affidavit or supporting affidavits depending on the case.

Your report should identify, as far as known:

the account, page, or merchant involved;
the false representation made;
why you relied on it;
the payment or property lost;
the date, time, and place from which you transacted;
the receiving account and financial institution;
all steps already taken with the platform, bank, e-wallet, courier, and DTI; and
any other victims or related accounts you can identify without speculation.

Ask for the report, docket, or reference number and the investigator’s official contact details. Follow instructions concerning original devices and files. Do not surrender your only copy of evidence without documenting what was turned over.

A police or NBI report does not itself prove guilt or ensure reimbursement. Criminal liability, probable cause, and recovery depend on the admissible evidence and the circumstances of the transaction.

If a bank or e-wallet does not resolve the complaint

For a bank, e-wallet, or other BSP-supervised institution, first use that institution’s Financial Consumer Protection Assistance Mechanism or official customer-service channel.

If you are dissatisfied with its response, you may escalate the matter through the Bangko Sentral ng Pilipinas Consumer Assistance Mechanism. BSP describes this as a second-level recourse for complaints involving BSP-supervised institutions.

Current official options include:

the BSP Online Buddy (BOB) available through the BSP website; or
a completed BSP complaint/inquiry form sent to consumeraffairs@bsp.gov.ph, together with proof that you first complained to the institution.

Keep the institution’s reference number and response. BSP warns complainants not to send PINs, passwords, complete card details, passbooks, passports, or identification cards merely to process a BSP complaint.

BSP escalation concerns the conduct of the supervised financial institution. It is separate from a complaint against the seller and from a criminal report against the suspected scammer.

Special situations

You paid by credit or debit card

Notify the issuer immediately and ask about its dispute or chargeback process. The applicable grounds, evidence, and deadlines depend on the card network and issuer, so request the specific deadline in writing. Blocking the card does not automatically dispute an earlier transaction.

You used cash on delivery

Preserve the parcel, waybill, contents, photographs, and unboxing video. Report the order through the marketplace and notify the courier if its service was misused. A courier’s role in delivery does not, by itself, establish that it participated in the fraud.

Your account was hacked

Secure the associated email account first, because it may control password resets. Change passwords, revoke unknown sessions, enable multi-factor authentication, and report the compromise to the platform. If financial credentials or identity documents were exposed, notify the relevant institution and monitor for misuse.

The seller is abroad or cannot be identified

Still report the matter. Preserve the platform profile, payment destination, URLs, and communications. Cross-border location or anonymity can make enforcement and recovery harder, but platforms and payment institutions may hold identifying or transaction records that lawful authorities can request.

The transaction was person-to-person

DTI consumer remedies are clearest when the respondent was acting as an online merchant or retailer in the ordinary course of business. A one-off sale between private individuals may fall outside some consumer-law processes, but deception may still support civil or criminal remedies. Report apparent fraud to the payment provider and law enforcement.

Common mistakes that weaken a report

Waiting for the scammer’s promised refund before notifying the bank.
Sending more money for “processing,” “tax,” “insurance,” or “account verification.”
Deleting chats, blocking the account before recording its identifiers, or discarding the parcel.
Filing only a generic platform report with no transaction details.
Treating a social-media post as a substitute for an official complaint.
Publishing the recipient’s full account number, address, ID, or other personal data.
Exaggerating facts, naming unverified accomplices, or submitting altered screenshots.
Giving an OTP or password to someone claiming they can recover the money.
Paying a supposed recovery agent who promises guaranteed results.
Assuming that DTI, BSP, the platform, and law enforcement perform the same function.

When help is urgent

Seek immediate assistance when:

unauthorized transactions are still occurring;
the scammer controls your email, SIM, device, bank account, or e-wallet;
you installed remote-access software or malware;
identity documents, biometrics, card details, or passwords were exposed;
the scammer is threatening violence, extortion, or disclosure of intimate material;
a child, older person, or otherwise vulnerable person is being targeted;
you are being instructed to receive or forward funds for someone else; or
the loss is substantial or business-critical.

For an immediate threat to life or physical safety, contact emergency services or the nearest police station. For significant loss, complex evidence, or uncertainty about affidavits and court remedies, consult a Philippine lawyer promptly.

Frequently asked questions

Can I report a scam even if I sent the money voluntarily?

Yes. An authorized transfer may still have been induced by deception. Tell the financial institution precisely that you made the transfer but were tricked. Do not incorrectly describe it as an unauthorized transaction.

Must I wait seven days before contacting the police or my bank?

No. The seven-calendar-day rule concerns exhaustion of the online platform’s or merchant’s internal redress mechanism under the Internet Transactions Act. It should not delay immediate fraud notification, account protection, preservation of funds, or a criminal report.

Can the bank reverse the transfer?

Possibly, but not automatically. The result depends on the payment method, how quickly the report was made, whether the funds remain available, the institutions’ verification, and applicable rules. Obtain a reference number and follow up in writing.

Is a screenshot enough?

It helps, but a stronger report includes original messages or exported chats, profile and listing URLs, transaction records, account identifiers, timestamps, parcel evidence, and the platform’s responses. Preserve the source files and device where practical.

Can I file with both DTI and the police or NBI?

Yes, when the facts support both consumer redress and suspected criminal fraud. These processes serve different purposes and may proceed separately.

What if the seller blocks me or deletes the account?

Preserve what remains, including URLs, usernames, payment information, notifications, and cached emails. Report the deleted or blocked account to the platform, payment provider, and law enforcement. Do not create a fake identity to pursue the person yourself.

Does reporting guarantee a refund or arrest?

No. Refunds depend on the contract, payment mechanism, available funds, platform rules, and legal findings. Investigation or arrest requires sufficient evidence and lawful process.

Should I post the scammer’s identity publicly?

Prioritize official reports. Public accusations can expose victims or unrelated account holders, compromise an investigation, and create privacy or defamation risks. Give complete identifying information to the platform, financial institution, DTI, and investigators instead.

Official references

This article provides general legal information, not legal advice, and cannot determine the outcome of a particular complaint. Procedures and legal remedies depend on the documents and facts of each case. Official sources and procedures were checked as of September 16, 2026.