Quick answer

If you paid an online seller or social-media account and now suspect a scam, act immediately:

Contact your bank, card issuer, or e-wallet through its official app, website, or hotline. Report the transaction as fraudulent, ask whether the transfer can be stopped or traced, and request that the receiving account and remaining funds be preserved or temporarily held.
Save the evidence before the account, listing, or messages disappear.
Report the seller and transaction through the platform’s complaint system.
File a criminal complaint with the Philippine National Police Anti-Cybercrime Group (PNP-ACG), the National Bureau of Investigation (NBI), or the nearest police station.
Use the proper consumer or financial regulator: the Department of Trade and Industry (DTI) for covered online purchases from businesses, and the Bangko Sentral ng Pilipinas (BSP) for an unresolved complaint against a BSP-supervised bank or e-money issuer.

Reporting does not guarantee that money will be recovered. Recovery is more likely when the bank or e-wallet receives a complete report before the funds are withdrawn or transferred again.

First decide: scam or ordinary consumer dispute?

The correct route depends on what happened.

A likely scam involves deception from the start—for example:

the seller took payment and disappeared;
the account or store impersonated another person or business;
the seller used false documents, identities, tracking details, or payment confirmations;
you received an empty parcel, a deliberately unrelated item, or no item at all;
the seller demanded repeated “release,” “insurance,” “tax,” or “verification” payments;
your account or payment credentials were taken through phishing or social engineering; or
money was transferred without your authorization.

An ordinary consumer dispute may involve a real merchant but a defective, incomplete, delayed, or incorrectly described product. It can still justify a refund or regulatory complaint, but it is not automatically a crime. Criminal liability generally depends on evidence of fraudulent intent, not merely poor service, delay, or breach of contract.

When the facts are unclear, report them accurately without labeling anyone conclusively as a criminal. Let the bank, platform, regulator, and investigators assess the evidence.

Act immediately if money or account access is at risk

Contact the payment provider

Use only contact details found in the bank’s or e-wallet’s official app, card, or website. Do not call a number sent by the suspected scammer or posted in an unverified comment.

Tell the provider:

the date, time, amount, and transaction reference;
the sending and receiving account details shown in your record;
why you believe the transaction was fraudulent;
whether you personally authorized it and, if so, how you were deceived;
whether your password, PIN, one-time password, card details, or device may have been compromised; and
that you are requesting an urgent trace, recall, restriction, or hold, if legally and operationally available.

Ask for a case or ticket number and written confirmation of the report. A transfer that you personally approved after being deceived is different from an unauthorized transfer, so describe exactly what occurred.

Under the Anti-Financial Account Scamming Act, Republic Act No. 12010, covered financial institutions may temporarily hold funds involved in a disputed transaction, subject to BSP rules and verification. The law does not create an automatic refund for every scam report, and a false or malicious report can carry liability.

Secure compromised accounts

If login details, an OTP, identification document, SIM, or device may have been exposed:

change passwords using a clean, trusted device;
sign out other sessions;
enable multi-factor authentication;
block affected cards or payment credentials;
notify the mobile network if your SIM was lost, duplicated, or taken over;
review recent account activity; and
warn contacts if the scammer has gained access to your social-media or messaging account.

Do not delete the compromised account, reset the device, or wipe messages until important evidence has been preserved. If investigators may need the device, ask them before altering it further.

Preserve evidence properly

Save both the content and the context. Useful evidence includes:

the listing, advertisement, product page, and seller profile;
the profile URL, username, user ID, page name, and account history visible to you;
complete chat threads, emails, text messages, and call logs;
payment receipts, transaction references, QR codes, account names, account numbers, and statements;
order confirmations, invoices, delivery records, tracking numbers, and platform case numbers;
photographs or an unedited unboxing video of the parcel, label, contents, and packaging;
copies of false IDs, permits, receipts, or business documents sent by the other party;
the platform’s and payment provider’s responses;
names and contact information of witnesses; and
a chronological account of what happened, written while events are fresh.

Whenever possible:

export or download chats instead of relying only on cropped screenshots;
capture the URL, date, time, and surrounding conversation;
keep original files and make backup copies;
avoid adding marks or edits to the only copy;
preserve the phone or computer on which the communications were received; and
do not forward sensitive evidence publicly.

Electronic records are not rejected merely because they are digital, but their authenticity and reliability may need to be established. The Rules on Electronic Evidence place importance on accurate preservation and authentication.

Report through the shopping or social-media platform

Use the platform’s official report, refund, buyer-protection, or dispute process. Report both the transaction and the seller’s account or listing. Submit the evidence requested and save the complaint reference.

Do not move the conversation or payment outside the platform if the dispute is still developing. Off-platform payments and disappearing-message features can make both buyer-protection claims and evidence preservation harder.

For business-to-consumer transactions covered by the Internet Transactions Act of 2023, Republic Act No. 11967, an aggrieved party generally must first use the digital platform’s, e-marketplace’s, or e-retailer’s internal redress mechanism. That remedy is deemed exhausted if the complaint remains unresolved after seven calendar days.

This seven-day rule should not be treated as a reason to delay urgent efforts to secure an account, stop a payment, preserve evidence, or obtain police assistance where safety or an active fraud is involved.

The Act does not cover a genuinely private consumer-to-consumer transaction merely because it occurred on social media. A person who repeatedly sells goods in the ordinary course of business may still be an online merchant despite using a personal-looking account; that classification depends on the facts.

File a criminal complaint

Online shopping and social-media scams may involve estafa or another offense under the Revised Penal Code, computer-related fraud or identity theft, or an offense committed through information and communications technology. The applicable charge depends on how the deception occurred and what the evidence establishes.

The Cybercrime Prevention Act of 2012, Republic Act No. 10175 designates the PNP and NBI as cybercrime law-enforcement authorities.

You may report to:

the PNP Anti-Cybercrime Group;
the National Bureau of Investigation, including its cybercrime investigators; or
the nearest police station, which can record the incident and direct or refer the case appropriately.

The Cybercrime Investigation and Coordinating Center also operates the government’s 1326 anti-scam helpline for assistance and referral. A helpline report or platform report may help with coordination, but it may not replace the sworn complaint and supporting documents required for a criminal investigation or prosecution.

Bring or prepare:

a valid ID;
a clear incident narrative;
the suspect’s known identifiers;
proof of payment and loss;
complete communications;
platform, bank, and e-wallet case numbers; and
original devices or files if investigators request them.

Ask where and how to execute the required complaint-affidavit. State only facts you personally know, identify information received from others, and attach legible copies. Obtain the complaint, blotter, or docket reference and the investigator’s official contact details.

A scammer’s use of a foreign account, foreign platform, or unknown location does not necessarily prevent a Philippine investigation. Republic Act No. 10175 recognizes jurisdiction in specified cases involving Philippine computer systems, Filipino offenders, or damage to a person who was in the Philippines, but actual jurisdiction and enforceability remain fact-dependent.

File the appropriate regulatory complaint

DTI: covered online purchases from businesses

For a purchase from an online merchant, e-retailer, or covered marketplace, first use the merchant’s or platform’s internal redress process. If it remains unresolved after seven calendar days, submit a consumer complaint through the DTI’s official Online Dispute Resolution System or ask the nearest DTI office for the current filing channel.

The Internet Transactions Act recognizes remedies such as repair, replacement, or refund for covered defects, nonconformity, malfunction, or loss not caused by the consumer. The appropriate remedy depends on the transaction and the condition of the goods.

Attach:

proof of purchase and payment;
the listing or product description;
communications with the seller;
evidence of the defect, non-delivery, or misrepresentation;
the internal complaint and the date it was filed; and
the remedy requested.

DTI dispute resolution addresses consumer and regulatory issues. It does not replace a criminal complaint when the evidence points to deliberate fraud.

BSP: unresolved complaint involving a bank or e-wallet

First complain directly to the bank, card issuer, or e-money issuer and keep its case number and response. If the complaint remains unresolved, escalate it through the BSP Consumer Assistance Mechanism.

The BSP accepts complaints through its BSP Online Buddy and other official consumer-assistance channels. Its published alternatives include a completed complaint form sent to consumeraffairs@bsp.gov.ph, by mail, or through the BSP Consumer Assistance Desk.

Include:

the complaint previously filed with the institution;
the institution’s reply, if any;
transaction and account records;
your requested resolution; and
reliable daytime contact details.

A BSP complaint concerns the conduct or handling of a BSP-supervised institution. It is not, by itself, a criminal complaint against the scammer.

Other agencies for related harm

The correct additional agency depends on the scheme:

Report misuse or unauthorized disclosure of personal data to the National Privacy Commission.
Report a fraudulent investment solicitation or an entity falsely claiming SEC registration to the Securities and Exchange Commission.
Report threats, extortion, identity theft, account takeover, or continuing cyberattacks promptly to the PNP or NBI.

What not to do

Avoid these common mistakes:

waiting for the scammer’s promised refund before notifying the payment provider;
paying a “recovery agent,” “hacker,” or supposed government officer who asks for an advance fee;
sending more money to unlock, verify, insure, or release the first payment;
deleting chats, blocking the account, or resetting the device before preserving evidence;
posting unredacted IDs, account numbers, addresses, or private conversations publicly;
altering screenshots or presenting guesses as established facts;
submitting different versions of events to the bank, platform, and police;
assuming a DTI or platform complaint automatically starts a criminal case; or
making a knowingly false report to force an account freeze or refund.

Publicly naming a suspected scammer can expose the victim to privacy, harassment, or defamation disputes and may warn the suspect to destroy evidence. Give the information to the platform, payment provider, and authorities first.

When help is urgent

Seek immediate assistance when:

money has just been transferred and may still be in the recipient account;
an account, SIM, email address, or device has been taken over;
the scammer has copies of your ID, selfies, signatures, card details, or credentials;
there are threats, extortion, stalking, or a risk of physical harm;
a child or vulnerable person is involved;
the scheme is still collecting money from multiple victims;
the loss is substantial or involves business, trust, or client funds; or
investigators, prosecutors, or a court have given you a deadline.

For immediate danger, contact 911 or the nearest police station. For a substantial loss, multiple victims, complex account trails, or questions about affidavits and civil recovery, consult a Philippine lawyer promptly.

Frequently asked questions

Can the bank or e-wallet reverse the transfer?

Possibly, but not automatically. It depends on the payment rail, whether funds remain available, the institution’s rules, and the results of verification. Report immediately and ask for a written case number. Do not promise investigators or other victims that a freeze or refund is guaranteed.

I authorized the transfer. Can I still report it?

Yes. Explain that you authorized the payment because of alleged deception, if that is what occurred. Do not inaccurately describe it as an unauthorized transaction. The distinction can affect the provider’s investigation and your legal remedies.

Must I know the scammer’s real name?

No. Provide every identifier you have: usernames, profile links, phone numbers, email addresses, account details, QR codes, delivery information, and transaction references. Authorities can seek additional information through lawful investigative processes, but identification and recovery may still be difficult.

Should I wait seven days before going to the police?

Not where there is an active scam, immediate financial risk, compromised credentials, threats, or a need to preserve disappearing evidence. The seven-calendar-day internal-redress provision applies to covered internet-transaction disputes under Republic Act No. 11967; it should not be used to postpone urgent protective action. For a routine covered consumer dispute, document the internal complaint and its unresolved status before escalating to DTI.

Can I complain if the purchase was made through a personal social-media account?

Yes, but the proper route depends on the seller’s role. A genuine one-time consumer-to-consumer sale is outside the Internet Transactions Act, while a person selling in the ordinary course of business may qualify as an online merchant. Fraud may still be reported to law enforcement regardless of that consumer-law classification.

Do screenshots count as evidence?

They can, but complete, original, and properly authenticated records are stronger than isolated or cropped images. Preserve chat exports, URLs, timestamps, transaction records, original files, and the device whenever possible.

Is a police blotter enough?

A blotter records the report but may not, by itself, complete the complaint needed for investigation or prosecution. Ask whether you must submit a complaint-affidavit, supporting documents, or the original device, and obtain the official case reference.

Is there a guaranteed deadline for reporting a scam?

No single deadline applies to every bank, platform, civil remedy, or criminal offense. Contractual dispute windows can be short, while legal prescription periods depend on the possible offense and facts. Report immediately rather than relying on the longest possible period.

Official legal sources

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Procedures and remedies may depend on the transaction, platform rules, financial institution, evidence, and applicable law. Official sources and reporting information were checked on 19 September 2026.