Quick answer

If you paid an online seller and the item never arrived, was materially different from what was promised, or the seller disappeared after receiving payment, act immediately:

Contact your bank, e-wallet, card issuer, or payment provider. Ask it to flag the transaction as fraud, attempt a hold or recall, secure your account, and explain its dispute process. Recovery is not guaranteed, but delay can make tracing or stopping the funds harder.
Report the seller and transaction through the platform’s official dispute or redress system. Do this even if the conversation later moved outside the app.
Preserve the evidence before accounts, posts, and messages disappear.
Report the incident to the CICC and a cybercrime law-enforcement office if deception or theft appears involved.
File a consumer complaint with the DTI when the transaction involved an online merchant or business and you want a refund, replacement, or other consumer remedy.

These routes serve different purposes. A platform or payment dispute may help stop or recover money; a DTI complaint addresses consumer remedies and regulatory violations; and a report to the police, NBI, or CICC may lead to criminal investigation. Filing through one channel does not necessarily replace the others.

First, secure your money and accounts

Contact the financial institution through the number in its official app, website, or on the back of your card—not through a link or telephone number sent by the suspected scammer.

Give the institution:

the transaction date, time, amount, and reference number;
the recipient’s account name, number, mobile number, or wallet identifier;
why you believe the payment was fraudulent;
whether you disclosed an OTP, PIN, password, card number, or identity document; and
any police, CICC, platform, or complaint reference number already available.

Ask specifically whether it can:

freeze or place a hold on the recipient account;
recall or trace the transfer;
open a fraud or unauthorized-transaction investigation;
start a card chargeback or other applicable dispute;
block or replace your card; and
secure your mobile-banking or e-wallet account.

A transfer that you personally approved may be treated differently from a genuinely unauthorized transaction. Tell the institution exactly what happened. Do not describe a payment as “unauthorized” if you sent it yourself after being deceived.

If you revealed credentials, change affected passwords from a trusted device, sign out other sessions, enable multifactor authentication, and notify your mobile provider if your SIM may have been compromised. Never send another payment for a supposed “release fee,” “refund verification,” “account unfreezing,” or “police processing fee.”

If the institution’s response remains unresolved, escalate a complaint involving a BSP-supervised institution through the BSP Consumer Assistance Mechanism. The BSP instructs consumers to raise the concern with the institution first. Its current alternatives include the BSP Online Buddy and a completed complaint form sent to consumeraffairs@bsp.gov.ph.

Preserve evidence before reporting the account

Save the original electronic records where possible. Screenshots are useful, but they should not be your only copies.

Preserve:

the complete product listing, including its URL, price, description, photos, seller name, and posting date;
the seller’s profile URL, username, account ID, contact details, and displayed business information;
the full conversation, not only selected messages;
order confirmations, invoices, electronic receipts, tracking details, and delivery records;
bank, card, or e-wallet transaction confirmations and reference numbers;
the recipient’s account name and number;
emails, text messages, call logs, voice messages, and courier communications;
the platform complaint and its acknowledgment or case number;
any demand for a refund and the seller’s reply;
the item, packaging, shipping label, and unboxing video if something was delivered; and
a short chronology stating what was promised, what you paid, what happened, and when.

Export chats or download account data if the platform allows it. Keep original files and record the date and time you captured each page. Avoid cropping away usernames, URLs, timestamps, payment references, or other context.

Do not delete the conversation after blocking the account. Do not edit screenshots or impersonate another buyer to obtain more information. Law-enforcement authorities can use lawful procedures to request subscriber or transaction data from service providers.

Under Section 13 of the Cybercrime Prevention Act of 2012, specified traffic data and subscriber information must generally be preserved by a service provider for at least six months from the transaction. Content data is subject to a different rule and is preserved after a law-enforcement preservation order. This is one reason to report promptly; it does not mean that every platform will keep every visible post or message available to you for six months.

Report through the shopping or social-media platform

Use the platform’s official order-dispute, buyer-protection, fraud-reporting, or account-reporting feature. State the remedy you want—such as non-release of funds, cancellation, refund, replacement, or removal of the fraudulent listing.

Keep the complaint acknowledgment and note the filing date. If the transaction is covered by the Internet Transactions Act of 2023, an aggrieved party generally must first use the platform, marketplace, or e-retailer’s internal redress mechanism before going to a court, government agency, or alternative dispute resolution. That mechanism is deemed exhausted when the complaint remains unresolved for seven calendar days after filing.

Do not wait seven days, however, before contacting your financial institution or taking urgent account-security measures. If there is an immediate risk that funds will be moved, evidence destroyed, identities misused, or other people victimized, report the suspected crime to the appropriate authorities promptly while the platform complaint is pending.

The Act requires covered e-marketplaces and digital platforms to provide an effective and responsive mechanism for reporting users or information that may violate the law. Depending on the facts, a platform may also incur subsidiary or solidary liability, but platform liability is not automatic. It depends on matters such as the platform’s role in the transaction, notice, diligence, the merchant’s legal presence, and the type of goods or services involved.

Report the suspected crime

Cybercrime Investigation and Coordinating Center

Report online scams to the Cybercrime Investigation and Coordinating Center through its official reporting facilities or Hotline 1326. The CICC can receive and coordinate cybercrime reports, but a report does not itself guarantee recovery, arrest, or prosecution.

Philippine National Police

You may report to the PNP Anti-Cybercrime Group or the nearest police station or cybercrime unit. Bring printed and electronic copies of your evidence, a valid ID, and a clear chronology. Ask for the complaint or reference number and the investigator’s official contact details.

National Bureau of Investigation

You may also approach the National Bureau of Investigation, particularly its cybercrime investigators or the nearest NBI office. Confirm current submission requirements and office details through the official NBI website before visiting.

Be prepared to execute a sworn complaint-affidavit. It should identify you and, as far as known, the seller; describe the representation that induced payment; specify the resulting loss; and attach properly labeled supporting records. If the suspect’s real identity is unknown, provide every available username, URL, telephone number, payment destination, delivery detail, and transaction reference.

Report facts rather than legal conclusions. Do not publicly post the suspect’s unverified identity, home address, identity documents, or financial details. Public accusations can create privacy, safety, and defamation issues and may alert the suspect before records are secured.

File a consumer complaint with the DTI

For a business-to-consumer transaction involving an online merchant, e-retailer, marketplace, or covered digital platform, file through the DTI Consumer CARe System. Metro Manila complainants may also use the complaint channels published by the DTI Fair Trade Enforcement Bureau, including consumercare@dti.gov.ph.

Include:

your name and reliable contact details;
the merchant’s known name, address, platform account, and contact details;
a concise statement of facts in date order;
the amount paid and payment method;
the platform complaint and proof that the internal redress process was used;
the remedy requested;
proof of purchase and payment; and
relevant advertisements, messages, receipts, delivery records, photos, or videos.

Under the Internet Transactions Act, consumers may pursue repair, replacement, refund, or other remedies available under the Consumer Act of the Philippines and other applicable laws when goods are defective, lost without the consumer’s fault, or fail to conform to the warranty or contract. If a refund or replacement is granted, the merchant is generally entitled to the return of the original goods without cost to the consumer, subject to the Act’s conditions.

A claim for damages under the Internet Transactions Act must be brought before the court or DTI within two years from the time the cause of action arose. Other claims or offenses may follow different limitation rules. Do not assume that this two-year period applies to every possible civil, administrative, or criminal case.

Important exception for private sellers

The Internet Transactions Act expressly excludes consumer-to-consumer transactions—transactions between end-users for personal, family, or household purposes that are not made in the ordinary course of business.

A seller’s label is not necessarily decisive. Someone repeatedly selling goods for profit may in substance be acting as an online merchant even if the account is presented as “personal.” DTI jurisdiction will depend on the evidence. If the transaction was genuinely between two private individuals, the platform’s rules, civil remedies, and criminal-reporting channels may still apply even though the Internet Transactions Act does not.

When a bad transaction may be a crime

Not every delayed delivery, defective product, or broken promise is automatically criminal. A genuine merchant may breach a contract without having intended to defraud the buyer. Consumer, civil, and platform remedies may be the appropriate routes in that situation.

A transaction may amount to estafa under Article 315 of the Revised Penal Code when the required elements—including legally punishable deceit or abuse of confidence and resulting damage—are proved. Whether those elements existed generally depends on the seller’s representations and intent at the relevant time, not merely on a later failure to refund.

The Cybercrime Prevention Act also penalizes computer-related fraud, but its statutory definition concerns unauthorized input, alteration, or deletion of computer data or programs, or interference with a computer system, causing damage with fraudulent intent. An ordinary scam conducted through chat does not automatically satisfy that specific definition.

Separately, Section 6 of the Cybercrime Prevention Act applies to felonies under the Revised Penal Code and special laws when committed by, through, and with the use of information and communications technologies, with the penalty rule stated in that section. Investigators and prosecutors—not the complainant or platform—determine what offense the evidence supports.

What the Internet Transactions Act changes for online buyers

For covered business-to-consumer transactions, the law generally requires:

online merchants to disclose specified product information;
e-retailers to publish identifying and contact information;
merchants and e-retailers to issue paper or electronic invoices or receipts;
platforms to maintain redress mechanisms;
marketplaces to collect and maintain specified merchant-identification information;
merchants and e-retailers to protect consumers’ personal data; and
the merchant or e-retailer to bear primary liability in civil actions or administrative complaints arising from the transaction.

A marketplace can be required to provide merchant information when a competent authority issues a subpoena in an investigation based on a sworn complaint that meets the statutory conditions. A consumer normally cannot compel disclosure merely by messaging customer support.

The law’s remedies and administrative penalties do not eliminate possible civil or criminal liability under other laws. Conversely, the existence of an online transaction does not guarantee that DTI, a platform, or a financial institution will order reimbursement; each body must assess its jurisdiction, rules, and evidence.

Common mistakes that weaken a report

Waiting for repeated promises. “Tomorrow na lang” or “pay one more fee” may be used to move funds and erase traces.
Reporting only to the platform. Platform enforcement is not the same as a criminal investigation or financial dispute.
Reporting only to the bank. A bank fraud ticket may not place the incident before law enforcement.
Sending incomplete screenshots. Preserve URLs, account identifiers, dates, and the full conversation.
Deleting or returning evidence too soon. Photograph and document any item and packaging before following return instructions.
Moving the transaction off-platform. This can reduce contractual buyer protection, although it does not erase legal rights.
Paying a “recovery agent.” Scammers often target victims again by promising guaranteed recovery.
Exaggerating the facts. Inconsistencies can damage credibility. Clearly separate what you personally know from what you suspect.
Publishing personal data online. Send sensitive evidence only through verified official channels.
Assuming a business registration proves legitimacy. Registration alone does not guarantee that an account is controlled by the registered business or that the transaction is safe.

When legal help is urgent

Consult a Philippine lawyer promptly when:

the loss is substantial or involves several victims;
the seller used your identity documents or accessed your accounts;
the financial institution denies a disputed transaction involving possible account takeover;
the platform or merchant is abroad;
you are asked to sign an affidavit, settlement, quitclaim, or waiver you do not understand;
investigators identify a suspect and a prosecutor’s complaint must be prepared;
you need a court order, subpoena, injunction, or civil recovery action;
you receive a demand letter, countercharge, or threat after reporting; or
a filing deadline may be approaching.

Call 911 or contact local police immediately if there are threats, extortion, stalking, an imminent meeting with the suspect, or danger to any person.

Practical reporting checklist

Before submitting a report, confirm that you have:

secured the affected payment and communication accounts;
notified the payment provider;
filed a platform dispute;
saved the platform case number;
preserved original records and complete screenshots;
written a date-by-date chronology;
identified the exact amount lost;
stated the remedy requested;
reported suspected criminal conduct to the appropriate cybercrime authority; and
saved every acknowledgment, reference number, and follow-up deadline.

Frequently asked questions

Can I report a scam even if I lost only a small amount?

Yes. There is no general minimum-loss threshold for reporting suspected fraud to law enforcement or using a platform’s reporting mechanism. The amount may affect enforcement priorities, available procedures, or the practicality of civil recovery, but it does not make deception lawful.

Should I report to DTI or the police?

Often both, because their functions differ. Use DTI for covered consumer and e-commerce remedies. Report to the police, NBI, or CICC when the facts indicate intentional deception, theft, identity misuse, account intrusion, or another possible crime.

Must I wait seven days before going to DTI?

For transactions covered by the Internet Transactions Act, the general rule is to use the platform, marketplace, or e-retailer’s internal redress mechanism first. It is deemed exhausted if unresolved after seven calendar days. Preserve proof of when you filed it. Do not postpone urgent financial, security, or law-enforcement action while waiting.

Can the bank reverse my transfer?

Possibly, but reversal is not automatic. It depends on the payment method, timing, available funds, applicable rules, and the institutions’ investigation. Contact the sending institution immediately and provide complete transaction details.

What if the account name belongs to a “mule,” not the seller?

Report both the visible seller identity and the payment-account details. Do not assume that the named recipient personally operated the seller account. Investigators must establish the roles of the people involved.

What if I received a counterfeit, empty parcel, or different item?

Preserve the item, packaging, shipping label, listing, and unboxing evidence. File a platform dispute and a DTI complaint if it was a covered merchant transaction. Report to law enforcement when the circumstances reasonably indicate deliberate deception.

Can I recover money through a civil case?

Potentially. Contract, damages, restitution, or other civil remedies may be available, and some money claims may qualify for simplified court procedures depending on the amount and legal basis. Recovery still depends on proof, proper parties, jurisdiction, service of process, and the defendant’s ability to satisfy a judgment. Obtain current procedural guidance from the Supreme Court of the Philippines or a lawyer before filing.

Is a social-media account automatically covered by the Internet Transactions Act?

No. Coverage depends on whether the transaction is business-to-consumer or another covered internet transaction. A genuine one-off sale between private end-users is excluded, while regular commercial selling may be treated differently based on the facts.

Will filing a report guarantee a refund or arrest?

No. A report creates a record and allows the appropriate body to assess the evidence. Refunds, account restrictions, criminal charges, and arrests each require separate legal or contractual grounds and procedures.

Official sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Applicable remedies and procedures depend on the transaction, evidence, parties, platform terms, payment method, and investigating authority. Official sources and public reporting channels were checked as of 14 September 2026.