Quick answer

If you have been scammed while shopping online or through social media, act immediately:

Contact your bank, e-wallet, card issuer, or payment provider and report the transaction as fraudulent or disputed. Ask whether the transfer can be stopped, traced, recalled, or temporarily held.
Report the seller, account, listing, and transaction to the marketplace or social media platform. Request a refund and preservation of the account and transaction records.
Preserve all evidence before posts, messages, or accounts disappear.
File a criminal complaint with the PNP Anti-Cybercrime Group, another PNP unit, or the NBI if deception was used to obtain your money, account credentials, or personal information.
File a consumer complaint with the Department of Trade and Industry (DTI) when the transaction involved a business seller, online merchant, e-retailer, or marketplace within DTI jurisdiction.

These reports serve different purposes. A platform complaint may lead to a refund or account suspension; a bank report may help preserve remaining funds; a DTI complaint addresses consumer rights; and a police or NBI complaint can begin a criminal investigation. Filing with one does not automatically accomplish the others.

Recovery is not guaranteed. Speed matters because scam proceeds can be transferred or withdrawn quickly and digital evidence can disappear.

What to do immediately

1. Stop further contact and payments

Do not send an additional “verification fee,” “release fee,” “insurance,” “tax,” or “refund processing fee.” Do not install an app, share your screen, click another link, or provide an OTP, PIN, password, recovery code, card security code, or selfie with your ID.

If the scammer is threatening you, preserve the threats but avoid provoking or arranging an in-person confrontation.

2. Secure affected accounts

If you disclosed credentials or clicked a suspicious link:

Change the affected password using a trusted device.
Change any other account that used the same or a similar password.
Sign out unknown devices and active sessions.
Enable multi-factor authentication.
Call the official fraud hotline shown in your bank or e-wallet app, on the back of your card, or on the provider’s verified website.
Block or replace compromised cards and credentials.
Check recent transactions, linked devices, beneficiaries, forwarding rules, and recovery details.
Inform your mobile provider if your SIM stopped working unexpectedly or you suspect a SIM-swap attack.

Do not rely on a phone number or link supplied by the person who contacted you.

3. Report the payment immediately

Give the financial institution:

transaction date and exact time;
amount and transaction reference number;
source and recipient account numbers or wallet identifiers;
recipient name displayed during the transaction;
payment channel used;
a short explanation of how the scam occurred; and
copies of receipts, messages, and other supporting evidence.

Ask for a case or reference number. Request written confirmation that the transaction has been reported as disputed or fraudulent.

Under the Anti-Financial Account Scamming Act, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction under applicable BSP rules. The statutory holding period may not exceed 30 calendar days unless extended by a competent court. Whether funds can actually be held or returned depends on the facts, how quickly the report was made, where the money went, and the institution’s investigation.

The law does not create an automatic refund for every scam. It provides for potential institutional liability and restitution in specified circumstances, including failure to employ adequate risk-management controls or exercise the legally required diligence. A finding will depend on the transaction records and applicable BSP rules.

If the institution’s own complaint process does not resolve the matter, escalate it through the BSP consumer-assistance channels. BSP generally expects consumers to raise the concern first with the financial institution’s consumer-assistance mechanism.

4. Report the account and listing to the platform

Use the platform’s official reporting and dispute tools. Report all relevant items separately if the system allows it:

seller or merchant account;
social media profile or page;
advertisement;
product listing;
chat account;
payment request; and
impersonated business or person.

State clearly that money was obtained through suspected fraud. Request:

cancellation or refund under buyer-protection rules;
suspension or investigation of the account;
preservation of seller-registration, login, message, listing, and transaction records; and
written confirmation or a report reference number.

Do this before blocking the scammer. Blocking first can sometimes make messages, profile details, or reporting options harder to retrieve.

For transactions covered by the Internet Transactions Act of 2023, marketplaces and covered digital platforms must provide a responsive mechanism through which consumers can report users or unlawful information. The Act also requires covered platforms to maintain certain merchant information and, when legally compelled in an investigation based on a sworn complaint, provide information that may help identify an unknown perpetrator.

A platform is not automatically liable merely because a scammer used it. Liability depends on the platform’s role, notice, conduct, compliance with its statutory obligations, and the circumstances specified in the Act.

Preserve evidence properly

Save evidence before accounts, chats, and listings are deleted. Keep original electronic files whenever possible, not only printed copies.

Preserve:

screenshots and screen recordings showing the entire conversation;
exported chat history, emails, SMS messages, and voice messages;
full profile, page, group, marketplace, and product-listing URLs;
usernames, display names, account IDs, phone numbers, and email addresses;
advertisements and claims made about the product;
order confirmation, invoice, electronic receipt, and delivery record;
bank, card, remittance, cryptocurrency, or e-wallet records;
transaction reference numbers and timestamps;
recipient account names and numbers;
courier waybills, packaging, unboxing video, and the item received;
your refund demand and the seller’s reply or failure to reply;
platform and financial-institution case numbers;
names, dates, and summaries of calls with customer-service personnel; and
copies of any identification, permits, receipts, or business documents sent by the seller.

Where practicable, capture the address bar, account identifier, date, and time in the same image. Avoid cropping away details that help establish context. Keep an untouched copy of every original file and a separate working copy.

Prepare a chronological summary. A clear timeline is often more useful than hundreds of unlabelled screenshots.

Do not publicly post unredacted IDs, account numbers, addresses, phone numbers, or other personal information. Give complete copies only to the platform, financial institution, lawyer, or proper government authority through an official channel.

Where to report

PNP Anti-Cybercrime Group or another police unit

Report suspected online fraud to the PNP Anti-Cybercrime Group or go to the nearest police station or cybercrime unit. Bring your identification, evidence, transaction records, and a written chronology.

Ask what documents are required for a formal complaint. Investigators may require a sworn complaint-affidavit and supporting affidavits from witnesses. A report or blotter entry can document the incident, but additional steps may be necessary before a criminal complaint is investigated or referred for prosecution.

National Bureau of Investigation

The NBI accepts complaints involving cybercrime, fraud, and financial crimes through its appropriate division and regional or district offices. Check the NBI’s official office directory before visiting.

Bring both printed and electronic copies of your evidence. Keep the receiving stamp, acknowledgment, or complaint reference.

Department of Trade and Industry

For a dispute involving a business seller, online merchant, e-retailer, or covered marketplace, file through the DTI Consumer CARe System. Identify the seller and platform as completely as possible, explain what happened, attach proof of purchase and communications, and state the remedy you want—for example, refund, replacement, repair, or delivery.

The Internet Transactions Act generally covers business-to-consumer and business-to-business internet transactions within DTI’s mandate when the required Philippine connection exists. It expressly excludes purely consumer-to-consumer transactions from its coverage. A one-off purchase from another private individual may therefore fall outside that Act even though fraud, contract, civil, or other criminal laws may still apply.

For covered transactions involving defective, lost, nonconforming, or unwarranted goods without the consumer’s fault, the Act recognizes remedies that may include repair, replacement, refund, or remedies available under the Consumer Act of the Philippines and other laws.

A claim for damages under Section 28 of the Internet Transactions Act must be filed with the court or DTI within two years from the time the cause of action arose. Other claims or offenses may have different prescriptive periods, so do not treat that two-year period as a universal deadline.

Bangko Sentral ng Pilipinas

Escalate to the BSP if your complaint concerns a BSP-supervised bank, e-money issuer, payment provider, remittance company, or other covered financial institution and you have first used that institution’s complaint process.

Submit the institution’s final response, if any, along with your complaint reference, transaction details, evidence, and the specific action you are requesting. BSP consumer assistance is not a substitute for promptly reporting the transaction to the institution or filing a criminal complaint.

The relevant social media or e-commerce platform

Use only the official in-app or website dispute channel. Be cautious if someone claiming to be “platform support” contacts you privately and requests payment, an OTP, remote access, or login credentials.

A platform report may protect other users and preserve records even if buyer protection does not apply—for example, because payment was made outside the platform.

Is an online shopping scam automatically estafa?

No. Non-delivery, a defective product, delayed shipment, or breach of contract is not automatically a crime.

Depending on the evidence, a scam may amount to estafa under Article 315 of the Revised Penal Code when money or property was obtained through legally sufficient deceit that caused damage. Online conduct may also implicate the Cybercrime Prevention Act of 2012, the Anti-Financial Account Scamming Act, access-device laws, identity-related offenses, or other statutes.

The distinction usually turns on evidence of fraudulent intent and deception—not simply the seller’s later failure to perform. Examples that may support an inference of fraud include a fabricated identity, nonexistent inventory, falsified documents, repeated use of multiple payment accounts, immediate disappearance after payment, or the same fictitious offer made to several victims. These facts still require investigation; they do not by themselves establish guilt.

Describe what happened accurately. Do not exaggerate, alter screenshots, or label a person guilty as a settled fact. The Anti-Financial Account Scamming Act separately penalizes malicious or bad-faith reporting of completely unwarranted or false information that results in a temporary hold on funds.

Consumer remedies and criminal reporting are separate

A consumer case generally seeks practical relief such as refund, replacement, repair, or compliance. A criminal complaint asks the State to investigate and, if the evidence supports it, prosecute an offense.

You may need both routes. However:

a police report does not itself reverse a transfer;
a DTI complaint does not automatically identify an anonymous scammer;
a platform suspension does not establish criminal guilt;
a bank investigation is not the same as a criminal investigation; and
repayment does not necessarily erase possible criminal liability, although it may affect the dispute and should be disclosed to the authorities.

If you accept a settlement, read any quitclaim, waiver, confidentiality clause, or release carefully. Do not sign a statement saying the original report was false if it was truthful. Consider legal advice before withdrawing a formal complaint or waiving substantial claims.

What to put in a complaint

A useful complaint is factual, chronological, and specific. Include:

Your complete name and reliable contact information.
The seller’s or account holder’s known names, usernames, URLs, phone numbers, email addresses, and payment details.
What was offered and where you saw it.
The representations that induced you to pay.
The date, time, amount, payment method, and reference number.
What happened after payment.
Your attempts to contact the seller and obtain a refund.
Any later unauthorized transactions or account takeover.
The harm you suffered.
The action you want the recipient to take.
A numbered list of attached evidence.

Separate confirmed facts from assumptions. For example, write “the e-wallet displayed the recipient name as…” instead of claiming that the displayed person necessarily controlled the scam.

A simple demand to the seller

Before pursuing a consumer remedy, send a concise written demand through a traceable channel if doing so is safe:

On [date], I paid ₱[amount] for [item or service], transaction reference [number]. The item was not delivered/did not match the agreed description because [brief facts]. I am requesting [refund, replacement, repair, or delivery] by [reasonable date]. If the matter is not resolved, I will submit the transaction records to the platform and the appropriate government authorities.

A prior demand can clarify the dispute and document the seller’s response. Do not delay urgent reports to the bank, platform, or law-enforcement authorities while waiting for the deadline in your demand.

Common mistakes to avoid

Waiting several days before notifying the bank or e-wallet.
Continuing to pay because the scammer promises to release the item or refund.
Deleting or blocking the account before preserving evidence.
Sending only cropped screenshots with no username, URL, date, or transaction reference.
Reporting only to the platform and assuming it has filed a police complaint.
Moving the transaction outside the marketplace and losing platform buyer protection.
Treating a private individual as a registered business without checking the facts.
Posting accusations and personal data publicly instead of reporting through official channels.
Paying an unverified “recovery agent,” hacker, police fixer, or lawyer promising guaranteed recovery.
Giving an OTP or remote access to someone claiming they can reverse the transfer.
Filing a complaint with inconsistent dates, amounts, or versions of events.
Assuming that a government report guarantees reimbursement or conviction.

When legal or emergency help is urgent

Seek immediate police assistance or call emergency services if there is a threat of violence, extortion, stalking, blackmail, sexual exploitation, or risk to a child.

Promptly consult a Philippine lawyer if:

the loss is substantial;
several victims or multiple recipient accounts are involved;
the scammer used your identity or opened accounts in your name;
confidential business or customer data was exposed;
cryptocurrency or overseas parties are involved;
the financial institution denies the claim despite signs of unauthorized access or control failure;
you are asked to sign a waiver or settlement;
authorities require assistance preparing affidavits or identifying the proper charges;
you are considering a civil case or small-claims action; or
a filing or prescriptive period may be approaching.

The Public Attorney’s Office may be able to assist qualified indigent persons, subject to its eligibility and merit requirements.

Frequently asked questions

Can the bank or e-wallet reverse a transfer that I personally authorized?

Possibly, but not automatically. An institution may attempt a recall, coordinated verification, or temporary hold when legally and operationally available. Recovery depends on factors such as timing, whether funds remain traceable within participating institutions, the payment system used, and the investigation’s findings.

Report the transaction immediately even if you entered the details or OTP yourself. Explain exactly how you were deceived rather than describing an authorized transfer as technically unauthorized.

Should I report a small loss?

Yes. The amount may affect the remedy or how a case proceeds, but a small transaction can still be evidence of a broader scheme. Prompt reporting may also help a platform or financial institution identify linked accounts and protect other users.

What if I know only the scammer’s username or recipient account?

File the report with everything you have. Under lawful process, investigators may seek subscriber, transaction, or account information from service providers. Private individuals generally cannot compel a platform, bank, or telecommunications company to disclose another user’s protected information.

What if the social media account has disappeared?

Preserve its URL, username, screenshots, messages, notification emails, payment records, and any cached or shared copies. Include the disappearance in your timeline. Report the account even if the profile no longer loads.

Can DTI handle a purchase from an ordinary person on social media?

The Internet Transactions Act does not cover a purely consumer-to-consumer transaction. DTI may assess or refer a complaint under its no-wrong-door approach, but the appropriate route may instead be a platform dispute, civil claim, or criminal complaint. A person who regularly sells in the ordinary course of business may be an online merchant despite using a personal-looking account; that classification depends on the evidence.

Can I demand a refund for an item that is merely defective or different from the listing?

For a covered business-to-consumer transaction, available remedies may include repair, replacement, refund, or other relief under the Internet Transactions Act, Consumer Act, Civil Code, warranty terms, and platform rules. The proper remedy depends on the defect, representations, warranty, use of the item, and whether it can be returned.

Can I file a small-claims case?

A qualifying money claim may be brought under the current Rules on Expedited Procedures in the First Level Courts if it falls within the rule’s subject matter and monetary limit. Venue, supporting documents, prior demand, filing fees, and the identity or address of the defendant can be important. Verify the current forms and requirements through the Supreme Court of the Philippines or the proper first-level court before filing.

Will reporting guarantee that the scammer is arrested?

No. Authorities must identify the responsible person, collect admissible evidence, establish jurisdiction, and determine whether the legal elements of an offense are supported. Recipient-account information is important but does not necessarily prove who planned or carried out the scam; an account may belong to a money mule, identity-theft victim, or other intermediary.

Should I report a scam even if the money was returned?

You may still report the incident, particularly if accounts or personal data were compromised or other victims may be involved. Tell every authority and institution that repayment occurred. Do not conceal a refund or attempt to recover the same loss twice.

Official sources

This article provides general Philippine legal information, not legal advice for a particular case. Procedures and legal conclusions may depend on the documents, payment method, parties, platform, and surrounding facts. Official sources and publicly available procedures were last checked on September 12, 2026.