Quick answer

If you believe an online seller or social media account scammed you, act immediately:

Contact your bank, card issuer, or e-wallet provider through its official fraud channel. Ask whether the payment can be stopped, recalled, disputed, or traced. Request a reference number.
Report the transaction inside the shopping app or social media platform. Ask for a refund, account preservation, and suspension of the seller’s account.
Report the scam to the government’s 24/7 National Anti-Scam Hotline at 1326 or through the eGov PH app.
File a criminal complaint with the PNP Anti-Cybercrime Group, the nearest police station, or the NBI Cybercrime Division.
For a business-to-consumer purchase, file a consumer complaint with the Department of Trade and Industry (DTI) if the seller or platform does not resolve it.

Reporting does not guarantee recovery. Speed matters because transferred funds may be withdrawn quickly, online accounts may disappear, and digital records may be deleted.

First, secure your money and accounts

Notify the payment provider immediately

Use only the telephone number, app, website, or email address published by your bank, card issuer, or e-wallet provider. Do not call a number supplied by the suspected scammer.

Tell the provider:

The transaction was induced by an online shopping or social media scam.
Whether you authorized the payment yourself or the transaction was unauthorized.
The amount, date, time, transaction reference, and recipient account.
When and how you discovered the scam.
Whether you disclosed an OTP, PIN, password, card number, identification document, or account credentials.

Ask the provider to:

Block compromised cards or accounts.
Attempt a hold, recall, reversal, or dispute, if available.
Flag the recipient account.
Preserve transaction and access records.
Give you a case or ticket number and written confirmation.

A payment you personally approved because of deception is different from an unauthorized account transaction. The available remedy will depend on the payment method, provider rules, evidence, and applicable law. Do not assume that labeling a transaction “fraud” automatically requires a refund.

Under the Anti-Financial Account Scamming Act, financial institutions have powers and duties relating to disputed funds and financial-account scams, subject to Bangko Sentral ng Pilipinas rules. Malicious or bad-faith reports are also punishable, so report accurately and preserve the basis for your claim. See Republic Act No. 12010 and the BSP’s AFASA rules.

Change compromised credentials

If you clicked a suspicious link, installed an unknown app, shared credentials, or allowed remote access:

Change your email, shopping, social media, banking, and e-wallet passwords from a trusted device.
Use different passwords for different accounts.
Sign out other sessions and remove unfamiliar devices.
Enable multi-factor authentication.
Reset recovery email addresses, phone numbers, and security questions if altered.
Contact your mobile provider if your SIM suddenly loses service or you suspect SIM takeover.
Have the device checked before using it again for financial transactions.

Never give anyone an OTP, PIN, password, CVV, recovery code, or screen-sharing access to “process a refund.” Legitimate investigators and financial institutions do not need your password or OTP.

Preserve evidence before the account disappears

Save the evidence in its original form whenever possible. Do not rely only on cropped screenshots.

Preserve:

The seller’s profile name, username, profile URL, account ID, phone number, and email address.
The complete product listing, advertisement, livestream, or social media post.
Messages, comments, voice notes, emails, and call logs.
Order details, invoices, delivery records, waybills, and photographs or unboxing video.
Bank, card, or e-wallet receipts and transaction reference numbers.
The recipient’s account name, number, QR code, wallet identifier, or payment link.
The date and time of every payment and communication.
The platform’s complaint confirmation and case number.
Promises about price, authenticity, condition, delivery, refund, or warranty.
URLs, webpage source information, email headers, and original electronic files when available.
Copies of identification or documents the scammer sent, clearly marked as unverified.
A chronological written account while events are fresh.

Export conversations if the platform permits it. Take screen recordings showing the account, URL, listing, and message thread. Keep original files and create a separate working copy. Do not alter timestamps, rename every file beyond recognition, or publicly post sensitive account details.

Report the seller to the platform

Use the shopping app’s or social media platform’s internal reporting and dispute process. Select the most accurate category, such as fraud, non-delivery, counterfeit goods, impersonation, or unauthorized transaction.

State clearly what remedy you want—for example:

Cancellation and refund;
Release of funds being held by the platform;
Preservation of the account and transaction records;
Removal of the fraudulent listing; or
Suspension of the seller’s account.

For transactions covered by the Internet Transactions Act, an aggrieved party generally must use the platform, e-marketplace, or e-retailer’s internal redress mechanism before filing the related complaint with a court, government agency, or alternative-dispute body. The mechanism is deemed exhausted if the dispute remains unresolved seven calendar days after filing. The merchant remains primarily liable, while a platform’s liability depends on statutory conditions and the facts. See sections 24–27 of Republic Act No. 11967.

Do not treat the seven-day period as a reason to delay an urgent fraud alert to your bank or a prompt crime report. These steps serve different purposes, and delay may make preservation or recovery harder.

Report the scam to government authorities

National Anti-Scam Hotline

Call 1326, the government’s 24/7 National Anti-Scam Hotline operated through the Cybercrime Investigation and Coordinating Center. Scam reports may also be made through the eGov PH app. The Department of Information and Communications Technology identifies 1326 as an official reporting channel: DICT anti-scam information.

A hotline report can help route or document the incident, but it may not replace the sworn complaint and supporting documents required for a criminal investigation or prosecution. Record the reference number and follow the instructions given.

PNP or NBI

The Cybercrime Prevention Act assigns cybercrime law-enforcement responsibility to the Philippine National Police and National Bureau of Investigation. You may approach:

The PNP Anti-Cybercrime Group or its regional cybercrime unit;
Your nearest police station; or
The NBI Cybercrime Division or an NBI regional or district office.

The NBI provides an online complaint page and publishes its Cybercrime Division and office directory. Its Citizens’ Charter explains that complainants seeking investigative assistance may be required to complete a complaint form and submit supporting documents: NBI investigative assistance for computer-crime victims.

Bring or prepare:

A valid government-issued ID;
A clear chronological narrative;
Printed and electronic copies of the evidence;
Proof of payment and account ownership;
The seller’s known identifiers;
Platform and financial-provider reference numbers; and
A sworn complaint-affidavit if requested.

Authorities may ask for additional affidavits, device access, certified records, or originals. Ask for the investigator’s name, office, contact details, and complaint or blotter reference.

DTI consumer complaint

For a sale by an online merchant or business, the DTI may handle violations involving deceptive, unfair, or unconscionable sales practices and related consumer remedies.

First use the seller’s or platform’s internal complaint process and retain proof of the filing date. If unresolved, prepare:

Your complete name, address, email address, and contact number;
The respondent’s known name, address, email, and contact details;
A concise narration of facts;
The specific remedy or demand;
Proof of the transaction; and
A copy of a government-issued ID.

The DTI states that complaints may be submitted through consumercare@dti.gov.ph or through the appropriate DTI office. Check its current instructions and form at DTI Consumer Complaints Handling.

A claim for damages under the Internet Transactions Act may be filed in court or with the DTI within two years from the time the cause of action arose. Claims under the Consumer Act generally prescribe within two years from consummation of the transaction or commission of the deceptive, unfair, or unconscionable practice; for hidden defects, the period runs from discovery. Different civil or criminal claims may follow different rules, so do not wait for the deadline if evidence or funds are at risk.

BSP escalation for a bank or e-wallet complaint

The BSP Consumer Assistance Mechanism covers disputes involving BSP-supervised institutions; it is not a substitute for a criminal complaint against the scammer.

You must generally complain first through the institution’s Financial Consumer Protection Assistance Mechanism or customer-service channel. If its response is unsatisfactory or it fails to act, escalate through the BSP Online Buddy (BOB). If BOB is inaccessible, the BSP says a completed Complaint/Inquiry/Reply form may be emailed to consumeraffairs@bsp.gov.ph, together with proof that you first complained to the institution.

See the BSP’s current complaint instructions and consumer-assistance channels.

Which laws may apply?

The legal classification depends on what the seller represented, when fraudulent intent arose, how the account or payment system was used, and what the evidence proves.

Possible laws include:

Estafa by false pretenses or fraudulent acts. Article 315 of the Revised Penal Code may apply when deceit causes another person to part with money or property and results in damage. Non-delivery alone does not automatically prove criminal fraud; investigators must distinguish deliberate deception from a genuine contractual or delivery dispute.
Cybercrime Prevention Act. Crimes under the Revised Penal Code or special laws committed through information and communications technology may fall under section 6 of Republic Act No. 10175. The Act also covers specified offenses such as computer-related fraud and identity theft, but their technical elements must be proved.
Internet Transactions Act. Republic Act No. 11967 regulates covered business-to-business and business-to-consumer internet transactions and imposes duties on online merchants, e-retailers, e-marketplaces, and certain digital platforms.
Consumer Act. Republic Act No. 7394 protects consumers against deceptive, unfair, and unconscionable sales acts and provides administrative remedies.
Anti-Financial Account Scamming Act. Republic Act No. 12010 addresses money-mule activity, social engineering schemes, and other prohibited conduct involving financial accounts.

A sale between two private end-users that is not made in the ordinary course of business is generally a consumer-to-consumer transaction and is excluded from the Internet Transactions Act. That exclusion does not legalize fraud or prevent possible criminal, civil, platform, or financial-provider remedies.

Common mistakes that can weaken a report

Waiting for the scammer’s repeated promise to refund before contacting the payment provider.
Sending an additional “release,” “verification,” “tax,” or “processing” payment.
Deleting the conversation out of embarrassment or anger.
Reporting only the display name without saving the account URL and payment details.
Posting the recipient’s personal data publicly instead of giving it to investigators.
Editing screenshots in a way that removes timestamps, URLs, or context.
Sending passwords, OTPs, or full card details to someone claiming to be an investigator.
Filing inconsistent narratives with the platform, bank, police, and DTI.
Describing a contractual disagreement as a scam without identifying the alleged false representation.
Assuming that a DTI complaint, hotline report, police blotter, and criminal complaint are interchangeable.

Be factual. Separate what you personally saw from what you inferred. If you do not know the seller’s true identity, say so and provide the identifiers you have.

When legal or technical help is urgent

Seek immediate assistance if:

A large amount or several linked accounts are involved;
Transfers are still pending;
The scammer has your OTP, PIN, password, identification documents, biometrics, or card details;
Your email, phone number, SIM, banking account, or social media account was taken over;
You installed remote-access software or a suspicious mobile application;
The scam involves threats, extortion, intimate images, stalking, or risk of physical harm;
Multiple victims, corporate accounts, foreign transfers, cryptocurrency, or money-mule accounts are involved;
A government agency, court, prosecutor, bank, or platform gives you a deadline; or
You need to determine the proper offense, respondent, venue, or claim before evidence disappears.

For immediate danger, contact emergency services or the nearest police station. For a substantial loss or factually complicated case, consult a Philippine lawyer promptly.

Frequently asked questions

Can I recover money sent through a bank or e-wallet?

Possibly, but recovery is not automatic. It depends on how quickly the transaction is reported, whether funds remain available, the payment system, the institution’s investigation, and the legal basis for reversal or holding the funds.

Should I report even if the amount is small?

Yes. A small transaction may be connected to other victims or accounts. Preserve proof and report through the platform, payment provider, and an appropriate government channel.

Is failure to deliver always estafa?

No. Delayed or failed delivery may be a consumer or contractual dispute. Estafa generally requires proof of deceit and resulting damage, not merely a broken promise. The surrounding representations, timing, conduct, and documents matter.

Can I report a seller whose real name is unknown?

Yes. Provide the username, profile and listing URLs, phone number, email, payment-account details, transaction reference, delivery information, and all communications. Investigators may seek subscriber or transaction records through lawful processes.

Must I wait seven days before doing anything?

No. File the platform’s internal complaint promptly, but immediately alert your bank or e-wallet and report urgent criminal or account-security concerns. The seven-calendar-day rule concerns exhaustion of the internal redress mechanism for covered Internet Transactions Act disputes; it should not be used to postpone measures needed to protect funds, accounts, or evidence.

Can DTI handle a purchase from an occasional private seller?

The Internet Transactions Act excludes genuine consumer-to-consumer transactions. DTI jurisdiction and the available consumer remedy therefore depend on whether the seller was actually acting as a business or online merchant and on the law allegedly violated. Criminal or civil remedies may still be available.

Should I confront or publicly identify the suspected scammer?

Avoid threats, entrapment, unauthorized access, and public disclosure of sensitive personal data. Preserve the evidence and let the platform, financial institution, and authorities investigate. Public accusations can create separate legal and safety risks.

Does filing a police blotter start a criminal case?

Not necessarily. A blotter entry documents a report. Investigation or prosecution may require a formal sworn complaint, supporting affidavits, authentication of records, and other evidence. Ask the receiving office what further filing is required.

This article provides general Philippine legal information, not legal advice or a prediction of any case outcome. Rights, jurisdiction, and remedies depend on the transaction, evidence, payment method, parties, and current agency rules. Official sources and procedures were last checked on 15 September 2026.