Philippines Internet Transactions Act for Online Sellers: Disclosures, Platform Liability and Takedowns

Who the Act Reaches: The Transition Period Is Over, and Cross-Border Shops Are in Scope

If you sell online to buyers in the Philippines, the Internet Transactions Act applies to you, whether your business is registered in the Philippines or abroad. Republic Act No. 11967 was signed on 5 December 2023 and took effect later that month. Its implementing rules were issued on 24 May 2024 as Joint Administrative Order No. 24-03, led by the Department of Trade and Industry (DTI) and co-signed by the departments of Information and Communications Technology, Agriculture and Health, the Bangko Sentral ng Pilipinas and the National Privacy Commission. The law allowed an 18-month transition period; the DTI announced that it ended on 20 June 2025 and that the Act is now fully enforced.

Coverage turns on two tests. Either one party to the transaction is in the Philippines, or the platform, e-retailer or online merchant is availing itself of the Philippine market and has minimum contacts there. The rules read "availing of the Philippine market" broadly: advertising aimed at the Philippines; soliciting or accepting orders, payments and deliveries there; contracting third parties to fulfil orders; or providing technical or customer support to Philippine customers. Minimum contact exists once users in the Philippines can access a platform and exchange goods or services through it. The Act also contains an extraterritorial clause: lack of legal presence in the Philippines is no escape from liability.

What about individuals selling second-hand items? Consumer-to-consumer transactions for personal, family or household purposes are excluded, but the rules list situations presumed to be B2C: trading under a business name other than your own, holding a barangay or local government permit, issuing BIR-registered receipts or using a logo; selling as a continuous activity to generate income; "doing business" as defined in the Foreign Investments Act; or transacting for purposes other than personal or household use. The value, frequency and volume of sales are also considered. An account that lists new stock continuously under a shop name will struggle to argue it is simply clearing out personal belongings.

Four roles, four sets of duties. An online merchant sells through an e-marketplace or third-party digital platform. An e-retailer sells directly through its own website, webpage or app, and becomes an online merchant as well when it also lists on third-party platforms. The other two roles are e-marketplaces and other digital platforms that do not oversee the transaction, such as social media. This article covers the first two. Two general principles also apply. Online and offline trade receive equal treatment, so the consumer protection, price tag, labelling and product standard rules that apply in physical stores apply online too — see Philippine product labelling rules. And the rules treat live selling as advertising, so claims made on stream must be substantiated — see live selling rules in the Philippines. The DTI's E-Commerce Bureau implements the Act: it builds the Online Business Database, receives and refers complaints, pushes platforms and merchants to register with the Bureau, and investigates violations on its own initiative.

Local and Cross-Border Shops: What You Hand the Platform and What You Must Display

Before you list, the platform must collect five categories of information from you, and every listing must show four items. Section 32 of the rules requires e-marketplaces, as far as practicable, to obtain the following from every online merchant, Filipino or foreign, before listing:

1. the merchant's name, with primary (and where applicable secondary) business registration documents for entities, or at least one photo-bearing government ID validly recognised by the BSP, DFA, GSIS or Pag-IBIG Fund for individuals;
2. the geographic address where the merchant is located;
3. contact details including a mobile or landline number and a valid email address;
4. membership details of any professional body, where the service involves a regulated profession; and
5. the merchant's Certificate of Registration with the BIR.

What is made public. Apart from the ID or registration documents and the contact details, this information must be posted prominently on the platform, unless the platform provides a channel for buyers to reach merchants or links to the Online Business Database. Platforms must also keep a list of all merchants, accessible through a prominent homepage link and verified on a continuing basis. The four listing items — name and brand, price inclusive of taxes and other charges, description, and condition — apply whatever you sell; on social media and other platforms that do not oversee transactions, the place of production and your contact details are added. Regulated goods cannot be listed without the necessary permits and licence information, including an Import Commodity Clearance where applicable — see ICC import commodity clearance.

Local shops. A DTI business name for individuals or SEC documents for companies, plus the BIR certificate, cover all five items. The friction is consistency: the name and address must match across every document, and a single expired or mismatched record can stall onboarding. The rules also require online merchants to issue paper or electronic invoices for every sale.

Cross-border shops. The Act still applies, but a seller with no Philippine entity often cannot supply a BIR certificate. The rules say "as far as practicable", and how platforms handle this depends on their own policies and the regulators' current position, subject to the latest official announcements. What is certain is that platforms will insist on reachable, verifiable identity and contact details for cross-border sellers, because the law makes a platform subsidiarily liable to consumers if a merchant has no legal presence in the Philippines and the platform cannot produce the merchant's contact details after notice. Channel-specific onboarding is covered in Shopee seller requirements, Lazada seller setup and opening a TikTok Shop, and is not repeated here.

Your own website or app. Publish on the homepage your corporate and trade name, the address of your physical shop or place of business, a mobile or landline number and email, and professional membership details where relevant, and submit the same to the E-Commerce Bureau together with at least one government ID or registration document. You also need an accessible, efficient complaints-handling mechanism, and you must follow the Data Privacy Act and minimum information security standards.

Why Platforms Are Tightening Seller Checks: Subsidiary Liability, Solidary Liability and the Good-Faith Defence

Platforms are tightening checks because the law can make them answer for a seller's violations. They are subsidiarily liable to consumers in three situations and solidarily liable with sellers in one, and their way out of liability is proof of reasonable verification. Stricter onboarding is a direct consequence of that structure.

The seller always comes first. The online merchant or e-retailer is primarily liable to indemnify the consumer in civil actions or administrative complaints arising from an internet transaction. If the platform and the merchant are found to be the same entity, their liability is treated as one.

Subsidiary liability arises when the platform failed to exercise ordinary diligence in meeting its obligations and the consumer suffered loss; when the platform, after notice, failed to act expeditiously to remove or disable access to goods that infringe intellectual property rights or are subject to a government takedown order; or when the merchant has no legal presence in the Philippines and the platform failed to provide the merchant's contact details despite notice. It is limited to the damages the consumer suffered as a direct result of the transaction.

Solidary liability arises when the platform, after notice, fails to act expeditiously to remove or disable access to goods that are prohibited by law, imminently injurious, unsafe or dangerous. The DTI singled out the prospect of platforms being held solidarily liable with sellers when it announced full enforcement.

The platform's defence is good-faith reliance. A platform is not liable for relying on a merchant's representations, warranties or registration documents even if they later prove false — provided it can show good faith and reasonable effort to verify the accuracy and authenticity of what was submitted. Add the fact that failing to exercise ordinary diligence is itself penalised, and a platform's rational response is to front-load verification and keep records of it. The DTI reported more than 13,000 online transaction complaints between January and August 2025, so the regulatory pressure is real.

What this means for sellers (inferred from the liability structure; each platform's own rules govern the details):

• more detailed onboarding documents and periodic re-verification, with expired registrations or unreported address changes able to trigger suspension;
• on an intellectual property complaint or regulator notice, a tendency to delist first and hear explanations afterwards, because delay puts the risk on the platform;
• cross-border sellers asked for a reachable contact person and a working channel for notices;
• permit numbers required before regulated items go live, not after;
• escalation from item-level removal to shop-level action for repeat violations.

Seen this way, stricter checks are not harassment: every document you submit is evidence the platform may later rely on to show it made reasonable efforts. Platform-side compliance risks more broadly are covered in common e-commerce compliance risks.

How It Fits With DTI, SEC and BIR Registration: No New Licence, but Old Registrations Become Listing Gates

The Act creates no new business licence; it requires the registrations you already hold to be genuine, consistent, verifiable and visible to buyers. Those registrations are a DTI business name or SEC incorporation, BIR registration, and permits for regulated goods.

Business registration. Individuals usually register a business name with the DTI, though foreigners face limits on doing so in their own name — see DTI sole proprietorship. Companies register with the SEC; entity forms, business purpose wording and foreign ownership thresholds for e-commerce companies are covered in registering an e-commerce company. These are the "business registration documents" platforms collect. Operating a shop under someone else's name becomes riskier under this structure: when the displayed name, address and BIR registration do not match the real operator, primary liability on a complaint lands on the registered name, and the platform can act on the basis of inaccurate information.

Tax registration. The BIR certificate is one of the five items platforms collect and a precondition for invoicing, and the rules require online merchants to invoice every sale. Platform withholding and filing schedules are covered in e-commerce tax compliance, and the electronic invoicing rollout in the BIR e-invoicing system. In November 2024 the BIR said publicly that it would closely monitor e-marketplaces and online sellers and that online businesses could be suspended much like physical stores; in March 2026 it closed an online seller that had not registered properly or issued receipts — see the BIR's Oplan Kandado closures.

Registration with the E-Commerce Bureau and the Online Business Database. The Act directs the Bureau to build a database of online businesses and to enforce registration of platforms and merchants with it. The rules say that once the database is established, platforms and merchants serving the Philippine market must submit the required information, and entering false information can be prosecuted under the Cybercrime Prevention Act. How and when submissions are made follows the DTI's latest announcements.

The E-Commerce Philippine Trustmark. The DTI opened online Trustmark applications in July 2025. In September 2025, Department Administrative Order No. 25-12 required online merchants, e-retailers and platforms to register; the deadline was then pushed to year-end, and in October 2025 the DTI deferred the mandatory requirement. Under its December 2025 announcement, Trustmark registration remains voluntary until 31 December 2026, after which the DTI will review whether to make it mandatory. Applications require DTI, SEC or Cooperative Development Authority registration, the BIR Certificate of Registration (Form 2303), the applicant's valid Philippine government ID and any other licences or permits; fees are tiered by business size with relief for smaller firms, as set out in DTI announcements. The DTI has stressed that the voluntary phase does not pause enforcement of existing e-commerce laws.

One more question for cross-border sellers: should you set up a Philippine entity? That depends on your platform channel, product category and whether you hold stock locally; the routes are compared in cross-border e-commerce entry routes. If you also buy off-platform advertising or SaaS tools from offshore providers and pay as a Philippine business, the reverse charge under the VAT on digital services applies — see Philippines VAT on digital services.

Handling Complaints and Takedowns: Platform Action or DTI Order?

First identify who sent the notice: platform action goes through the platform's appeal process, while a DTI order is an administrative procedure. The two often arrive together, but their hearing windows and removal routes differ.

The complaint route. An aggrieved party must first use the internal redress mechanism of the platform or e-retailer before going to court or a government agency; the mechanism is deemed exhausted if the complaint remains unresolved seven calendar days after filing. Consumers then have two years from the cause of action to claim damages in court or seek administrative penalties from the DTI through the E-Commerce Bureau. For sellers, those seven days are the window to resolve the matter inside the platform: respond quickly, offer something concrete and keep communication on-platform. Refund rules themselves are buyer-side material and are not covered here; see returns and refunds on Shopee and Lazada (written for buyers).

The DTI's four tools.

• Subpoena: compels alleged violators or witnesses to appear and produce documents; non-compliance can lead to contempt proceedings.
• Compliance order: requires conformity with the Act, the Consumer Act or other DTI trade and consumer protection issuances.
• Takedown order: may be issued ex parte after investigation or verification where goods are prohibited or regulated and this is apparent from the photo or description, are subject to a cease and desist order, were previously taken down and then reposted, or threaten environmental sustainability, public or personal safety, or financial or personal information. The affected party is given an opportunity to be heard within 48 hours of issuance. The order is directed at both the merchant and the platform operator, may be served on internet service providers and payment gateways, and lasts up to 30 days unless extended or made permanent by a court.
• Blacklist order: websites, pages, apps and social media accounts that ignore a compliance order, or are subject to a takedown or cease and desist order, can be placed on a public list shared with digital platforms and financial regulators; once they comply, the DTI removes the entry on its own initiative or on request, without a hearing.

Administrative fines escalate for first, second and third or subsequent offences, covering deceptive or unfair sales practices, refusal to comply with takedown orders, and breaches of price disclosure, information and redress obligations. Amounts follow the rules and current DTI issuances, and permanent removal of listings can be added where applicable.

If you are taken down: read the notice and confirm whether it is platform action or a DTI order, and on what ground; within the 48-hour window, submit a written explanation with evidence such as permits, ICC or FDA registrations, brand authorisations, purchase records, invoices and listing screenshots; fix the listing, keeping prices on the page rather than only in private messages, which the DTI has said breaches price tag rules; apply for removal from the blacklist once you have complied; do not relist the same item under a new link, since reposting is itself a ground for a takedown order; and where the root cause is another agency's cease and desist order, resolve it with that agency. For a specific case, consult a licensed attorney; this article is not legal advice.

Pre-Listing Checklist: Twelve Questions to Answer Before You Sell

Answer these twelve questions and keep the documents behind each answer, and most onboarding blocks are cleared in advance. Each item maps to a legal duty or a common sticking point described above:

1. Does your entity match your channel? Individual, DTI business name, SEC company or foreign company — is that consistent with the local or cross-border seller route you are applying for?
2. Are your registrations complete and current? Local shops: DTI or SEC documents, BIR certificate and local business permit. Cross-border shops: home-country incorporation documents and any authorisations.
3. Is the displayed information consistent? Do the shop name, physical address, phone number and email match your registration documents exactly?
4. Is someone watching the contact channels? Platform notices, DTI papers and buyer complaints need a monitored email and phone to meet the 48-hour and seven-day windows.
5. Does every listing carry the four items? Name and brand, price inclusive of taxes and charges, description and condition — plus place of production and contact details when selling on social media.
6. Is the price on the page? Not only in private messages.
7. Do you hold permits for regulated categories? Food, cosmetics, medical devices, electrical and electronic products and similar goods need permit numbers or an ICC ready and displayed before listing.
8. Are labels and manuals compliant? Packaging information, accessories and instructions as described, in Filipino and/or English.
9. Do you invoice every sale? Paper or electronic, and reconcilable with platform data.
10. How is buyer data handled? Collection, storage and cross-border transfer of orders, addresses and phone numbers must meet the Data Privacy Act — see Data Privacy Act basics.
11. Do you have a complaints process? Who responds, how fast and how issues escalate should be spelled out, especially on your own website.
12. Can your live selling and claims be backed up? Live streams count as advertising, so efficacy claims, price comparisons and limited-time offers need support.

Two more items not to overlook. The Trustmark is voluntary until the end of 2026, so consider whether to apply early and get your document chain in order along the way. On tax, platform withholding, filing and BIR enforcement are covered in the articles linked above. Yixing can help plan the selling entity and its setup — see company setup services. Yixing is a privately owned, SEC-registered consultancy with no affiliation to the DTI or BIR and makes no determinations on behalf of any government agency. Information is current as of September 2026; follow the latest official announcements.