Quick answer

If you paid an online seller or social-media account and suspect a scam, act immediately:

Contact your bank, e-wallet, card issuer, or payment service through its official fraud channel. Ask it to flag the transaction, secure your account, trace the transfer, and—when legally available—temporarily hold disputed funds.
Preserve the evidence before the seller deletes the account or messages.
Report the seller and transaction to the marketplace or social-media platform.
File a consumer complaint with the Department of Trade and Industry (DTI) if the dispute involves an online business or merchant.
Report the suspected crime to the PNP Anti-Cybercrime Group or the National Bureau of Investigation. The government’s Inter-Agency Response Center also receives cyber-scam reports through hotline 1326.
If your password, OTP, card details, government ID, or account access was exposed, secure every affected account immediately.

These routes serve different purposes. A platform complaint may remove a listing; a DTI complaint may pursue consumer redress; a bank report may help contain the transfer; and a police or NBI complaint may lead to a criminal investigation. Filing with one does not necessarily replace the others.

First, stop further loss

Do these before arguing with the seller:

Do not send another payment for “insurance,” “verification,” “release,” “tax,” “customs,” “refund processing,” or “account unlocking.”
Call the financial institution using the number in its official app, website, or the back of your card—not a number supplied by the seller.
Ask for a case or reference number and write down the time of your report.
If a card was exposed, request that it be blocked or replaced.
If an e-wallet, banking, email, or social-media account may be compromised, change the password from a trusted device, sign out other sessions, and enable multi-factor authentication.
Tell your mobile provider immediately if your SIM suddenly loses service or you suspect a SIM-swap attempt.
Do not delete the conversation, payment receipt, suspicious application, or compromised account until relevant evidence has been preserved.

Under the Anti-Financial Account Scamming Act, Republic Act No. 12010, covered financial institutions may temporarily hold funds involved in a disputed transaction while verification is conducted. The statutory holding period cannot exceed 30 calendar days, although a court may extend it. This does not guarantee recovery: money may already have been withdrawn, divided among accounts, converted, or transferred outside the institution’s reach.

Preserve a complete evidence package

Take screenshots, but do not rely on screenshots alone. When possible, save or export the original records.

Preserve:

the seller’s profile name, username, account ID, profile URL, shop URL, and telephone number;
the product listing, advertisement, live-selling video, price, promised specifications, and delivery terms;
the full conversation, including dates and timestamps;
order confirmations, invoices, receipts, tracking details, and parcel labels;
the recipient’s bank or e-wallet name, account name, account number, QR code, and transaction reference;
your bank or wallet statement showing the payment;
photographs and an unedited unboxing video if an empty, counterfeit, damaged, or different item arrived;
the seller’s refund promises, excuses, threats, requests for more money, or admission;
your reports to the bank, platform, DTI, PNP, NBI, or CICC and every reference number received;
the original email, SMS, or message where feasible, including headers or message details;
a short timeline stating what was offered, when you paid, what happened afterward, and how much you lost.

Capture the account and listing promptly. Under the Cybercrime Prevention Act of 2012, service providers must ordinarily preserve traffic data and subscriber information for at least six months from the transaction. Content is subject to a different preservation rule after a law-enforcement order. Victims should therefore report early so investigators can assess whether a preservation request or cybercrime warrant is needed.

Do not publicly post your complete ID, address, card number, bank statement, QR code, or unredacted complaint. Give sensitive evidence only through verified official channels.

Report the payment immediately

Contact both the institution from which the money was sent and, if identifiable, the institution that received it. Provide:

transaction date and time;
amount;
reference number;
source and destination account details;
reason you believe the transaction is fraudulent;
police, NBI, CICC, or platform reference number, if already available.

Ask specifically whether the institution can:

mark the transaction as disputed or fraudulent;
secure or restrict your account;
initiate card chargeback or payment-dispute procedures, if applicable;
coordinate verification with the receiving institution;
preserve transaction and account records; and
tell you what affidavit, identification, or police document it requires.

A transfer you personally authorized because a scammer deceived you may be treated differently from an unauthorized transaction made after account takeover. Describe exactly what happened; do not call a payment “unauthorized” if you knowingly initiated it.

If the institution does not resolve the matter, first use its formal consumer-assistance mechanism. Complaints concerning BSP-supervised institutions may then be escalated through the Bangko Sentral ng Pilipinas consumer complaint process. Keep the institution’s final response or proof that you first complained to it.

Report the account to the marketplace or social-media platform

Use the platform’s built-in reporting and dispute tools. Select the most accurate reason, such as fraud, non-delivery, counterfeit goods, impersonation, account takeover, or prohibited products.

Also:

open a refund or buyer-protection claim before the platform’s displayed deadline;
keep the parcel and packaging until the dispute is finished;
upload clear evidence;
request preservation of the seller’s account and transaction records;
ask for a report or ticket number; and
take a screenshot of the complaint and its status.

Platform refund periods are contractual and vary. They may be much shorter than the period for bringing a legal action. Do not let discussions with the seller cause you to miss the platform’s deadline.

Under the Internet Transactions Act of 2023, Republic Act No. 11967, an online merchant is generally the party primarily liable to the consumer. An e-marketplace or digital platform may also incur liability in circumstances specified by the law, including failures connected with required seller information, notices, or the exercise of ordinary diligence. Platform liability is fact-dependent; hosting a seller does not automatically make the platform liable for every loss.

File a DTI consumer complaint

For a transaction with an online merchant or business, file through the official DTI Consumer Complaints Assistance and Resolution System. DTI’s e-commerce guidance also identifies the Fair Trade Enforcement Bureau as a complaint channel for online sellers, including sellers operating outside major marketplaces: DTI e-commerce consumer FAQs.

Prepare:

your full contact details;
the merchant’s known name, address, telephone number, email, and account links;
proof of purchase and payment;
the advertisement and conversation;
a concise chronology;
your prior written demand or attempt to resolve the problem; and
the remedy requested, such as delivery, repair, replacement, refund, or reimbursement.

The Internet Transactions Act preserves online consumers’ access to remedies under the Consumer Act and other laws. If replacement or refund is granted, the merchant is ordinarily entitled to the return of the original goods within a reasonable period, without cost to the consumer.

DTI consumer proceedings are most suitable where an identifiable merchant supplied no goods, defective goods, counterfeit goods, or goods materially different from what was represented. A purely private, one-off transaction between two consumers may fall outside parts of the Internet Transactions Act and DTI’s business-to-consumer process. It may still support a platform dispute, civil claim, or criminal complaint.

Report the suspected crime

CICC and hotline 1326

The Cybercrime Investigation and Coordinating Center coordinates government responses to cybercrime. Online-shopping and social-media scams may be reported through the government’s Inter-Agency Response Center hotline 1326, which official government guidance describes as a 24/7 reporting channel. See the CICC and this Philippine Information Agency guidance on reporting online-shopping scams.

A CICC report can facilitate referral and coordination, but it is not necessarily the same as personally executing a criminal complaint or affidavit before an investigating agency or prosecutor.

PNP Anti-Cybercrime Group

Report to the Philippine National Police Anti-Cybercrime Group or an appropriate police cybercrime office. Bring printed and electronic copies of your evidence, valid identification, and a chronological statement.

Ask what is required to make the complaint formally docketed. Depending on the facts, investigators may require a sworn complaint-affidavit and supporting affidavits from other witnesses.

National Bureau of Investigation

The NBI handles cybercrime, fraud, and financial-crime complaints. Its official service information and office directory are available at NBI.gov.ph. A complainant may be asked to accomplish forms, present identification, submit documentary evidence, and give a sworn statement.

DOJ Office of Cybercrime

Cybercrime incidents may also be brought to the Department of Justice Office of Cybercrime, particularly where technical preservation, international coordination, or referral issues arise.

There is no general minimum peso loss that must be reached before a suspected scam can be reported. Even a small transaction may be connected with many victims. The amount, however, can affect the applicable offense, penalty, court, and practical recovery route.

What law may apply?

The exact offense depends on evidence—not merely on the fact that a purchase went badly.

A deliberate scheme to obtain payment through false pretenses may constitute estafa under Article 315 of the Revised Penal Code. Where information and communications technology was used to commit an offense under the Revised Penal Code or another special law, Section 6 of the Cybercrime Prevention Act may apply and can affect the penalty.

The Cybercrime Prevention Act separately covers conduct such as computer-related fraud and computer-related identity theft. Computer-related fraud has specific technical elements involving unauthorized data input, alteration, deletion, or interference; it should not be assumed to cover every deception conducted through chat or social media.

The Anti-Financial Account Scamming Act addresses prohibited conduct involving financial accounts, including money-mule activity and social-engineering schemes as defined by that law. It also supplies mechanisms for coordinated verification and temporary holding of disputed funds.

A failed delivery, delayed refund, warranty disagreement, or poor-quality product is not automatically a crime. Criminal fraud generally requires proof of dishonest or fraudulent intent and the other elements of the applicable offense. A dispute may instead be contractual or consumer-related, particularly where the merchant remains identifiable and is genuinely attempting to perform or correct the transaction.

Conversely, repeated fake listings, fabricated tracking records, use of another person’s identity, immediate blocking after payment, demands for successive fees, or routing payments through multiple unrelated accounts may support an inference of a planned fraudulent scheme. Investigators and prosecutors must still assess the evidence.

Send a clear written demand when safe

A written demand can help define the dispute and prove that the merchant was notified. State:

the transaction and amount;
what was promised;
what was not delivered or was misrepresented;
the remedy you require;
a reasonable response deadline; and
that you will use available platform, consumer, civil, and criminal remedies.

Send it through a channel that creates a record. Remain factual. Do not threaten violence, publish private information, impersonate an officer, or demand money beyond a legitimate claim.

Do not delay an urgent bank or law-enforcement report merely to send a demand. If the seller is threatening you, knows your location, or has taken over an account, stop direct contact and seek help immediately.

If you need to recover money through court

Administrative or criminal reporting does not always produce reimbursement. Depending on the documents and parties involved, a victim may consider a civil action or a small-claims case.

Small claims can cover qualifying money claims within the monetary ceiling and subject matter set by the Supreme Court’s current rules. It is designed for first-level courts and generally does not allow lawyers to appear at the hearing, although legal advice before filing may be useful. Confirm the current forms, venue, coverage, and limit through the Supreme Court’s Office of the Court Administrator or the appropriate first-level court before filing.

A criminal complaint and a civil claim involve different requirements. The proper respondent, venue, cause of action, and prescriptive period can depend on the seller’s identity, the transaction documents, the amount, and the offense or remedy invoked. Do not wait for a platform or mediation process to finish if a legal deadline may be approaching.

Common mistakes to avoid

Waiting several days before alerting the bank or e-wallet.
Sending more money because the seller promises to release the item or refund.
Reporting only to Facebook, Instagram, TikTok, or the marketplace.
Deleting messages after taking a few screenshots.
Cropping screenshots so tightly that the account name, URL, date, or context disappears.
Editing, annotating, or compressing the only copy of an important file.
Giving investigators only a narrative without payment records and account identifiers.
Sending an OTP, MPIN, password, recovery code, or remote-access approval to someone claiming to process a refund.
Paying an online “recovery agent” who guarantees that funds will be returned.
Publicly accusing the wrong person because a name or profile photo matches.
Posting the recipient’s account details and your own personal data instead of reporting them through official channels.
Assuming that a police report automatically starts a DTI refund case—or that a DTI complaint automatically starts a criminal prosecution.
Missing a marketplace, card-dispute, warranty, or court deadline while waiting for the seller to respond.

When help is urgent

Contact the financial institution and law enforcement immediately if:

money is still moving or several transfers were made;
the scammer obtained an OTP, password, card security code, recovery code, or remote access to your device;
your bank, e-wallet, email, or social-media account has been taken over;
your SIM stopped working unexpectedly;
your government ID, selfie, signature, or biometric information was collected;
the scammer is impersonating you or soliciting money from your contacts;
you received threats, extortion demands, or attempts to locate you;
multiple victims or mule accounts are involved;
the seller is deleting accounts, messages, or listings; or
a child, older person, or otherwise vulnerable person is being targeted.

If there is an immediate threat to personal safety, contact emergency services or the nearest police station.

Frequently asked questions

Can I report a scam if the amount is small?

Yes. There is no general minimum-loss threshold for making a report. Provide the exact amount and complete evidence.

Should I report to DTI or the police?

Often both. DTI addresses consumer complaints involving businesses and merchants. The PNP and NBI investigate possible crimes. Your bank and the platform should also be notified promptly.

Can the bank reverse the transfer?

Possibly, but not automatically. The result depends on the payment method, timing, available funds, applicable dispute rules, and verification by the institutions involved. Report immediately and obtain a reference number.

What if I voluntarily sent the money?

You may still have been defrauded. Explain that you initiated the payment because of particular false representations. Do not misstate it as an account-takeover transaction if you personally approved the transfer.

What if the seller used a fake name?

Report every available identifier: usernames, profile URLs, telephone numbers, recipient accounts, QR codes, email addresses, device or login alerts, courier details, and transaction references. Investigators—not private complainants—can pursue legally authorized requests for subscriber and account information.

What if the seller is abroad?

You may still report if you were in the Philippines, suffered harm here, or Philippine accounts, platforms, or computer systems were involved. Cross-border investigation and recovery may be more difficult, so early preservation of evidence is especially important.

Can I post the scammer’s identity online?

Use caution. An account name, photograph, or bank-account label may belong to an impersonated person or money mule rather than the organizer. Public accusations can expose personal data and create legal risk. Give unredacted information to the platform, financial institution, and authorities.

How long should I keep the evidence?

Keep it until all disputes, investigations, claims, and possible court proceedings have ended. Statutory provider-retention periods are not a substitute for preserving your own copies.

Official sources

This article provides general Philippine legal information, not legal advice for a specific case. Procedures and legal conclusions may change according to the payment method, documents, parties, location, and facts. Official sources and current procedures were checked on September 12, 2026.