Quick answer

If you suspect fraud or estafa, act immediately: stop further payments, contact the bank, e-wallet, card issuer, remittance company, or platform used; secure all evidence; and report the incident to the police, the National Bureau of Investigation, or the appropriate prosecutor’s office. If computers, mobile phones, social media, email, online banking, or digital accounts were involved, report it as a possible cybercrime as well.

A report does not automatically recover the money or prove estafa. Recovery may come through a payment reversal, voluntary repayment or settlement, civil liability pursued with the criminal case, or a separate civil action. The correct route depends on how the money or property was obtained, what was promised, where the transaction occurred, the amount involved, and what evidence remains available.

Do not send a “release fee,” “tax,” “verification payment,” or other additional amount to someone claiming they can recover the funds. Recovery scams commonly target people who have already been defrauded.

What counts as estafa?

Estafa is not a general label for every unpaid debt, failed investment, broken promise, or bad business transaction. Article 315 of the Revised Penal Code requires fraud by one of the means specified by law, together with prejudice or damage.

Common forms include:

Estafa by false pretenses or fraudulent acts. The offender makes a material false representation—such as using a fictitious identity or falsely claiming authority, qualifications, property, credit, agency, a legitimate business, or an existing transaction—before or at the time the victim parts with money or property. The victim must have relied on the deception and suffered damage.
Estafa by misappropriation or conversion. Money, goods, or other personal property are received in trust, on commission, for administration, or under an obligation to deliver or return the same property, but are later misappropriated, converted, or falsely denied to have been received.
Other forms specifically listed in Article 315. These include taking advantage of a signature in blank, inducing another through deceit to sign a document, and particular forms of check-related fraud.

The precise elements matter. For estafa by false pretenses, the fraudulent representation ordinarily must precede or accompany the victim’s transfer of money or property. A lie made only after an ordinary debt has already arisen generally cannot retroactively turn the transaction into estafa.

For estafa by misappropriation, the agreement must involve receipt under an obligation to deliver or return the same money or property—not merely an ordinary obligation to pay an equivalent amount. Contracts, receipts, instructions, accounting records, and the parties’ actual dealings can determine which characterization applies.

The Supreme Court has repeatedly distinguished criminal misappropriation from a simple contractual breach. The existence of a contract does not prevent criminal liability, but nonperformance alone is not enough; the prosecution must prove every element of the charged offense. See, for example, the Supreme Court’s discussion in Cheng v. People.

A failed deal is not automatically fraud

Warning signs may support an investigation, but no single sign conclusively establishes estafa. Relevant circumstances can include:

A false identity, address, licence, registration, ownership claim, or proof of funds
Fabricated documents, receipts, screenshots, endorsements, account balances, or delivery records
A business, investment, property, product, or transaction that never existed
Promises of guaranteed or implausibly high returns
Requests to pay accounts held by unrelated persons
Immediate diversion or withdrawal of entrusted funds
Repeated excuses combined with concealment, blocking, disappearance, or inconsistent explanations
Multiple victims receiving substantially the same false representations

By contrast, delay, insolvency, poor performance, a business loss, or refusal to pay may remain a civil dispute when there is no provable deceit or misappropriation of property received in trust. The prosecutor and, ultimately, the court decide the legal characterization from the evidence—not from the label placed on the complaint.

What to do immediately

1. Stop the loss

Do not send more money, reveal another one-time password, install a remote-access application, or allow the suspected offender to “fix” the account.

If an account may be compromised:

Change passwords using a clean device.
Sign out other sessions.
Enable multi-factor authentication.
Notify the bank, e-wallet, email provider, mobile carrier, or platform.
Ask whether accounts, cards, SIMs, or credentials should be blocked or replaced.

If there are threats, coercion, stalking, an ongoing unauthorized transfer, or an offender who may flee or destroy evidence, contact law enforcement urgently.

2. Contact the payment provider at once

Report the transaction through the provider’s official fraud channel. Ask for:

A fraud or dispute reference number
A hold, freeze, recall, reversal, or chargeback, if available
Preservation of transaction and account records
Written confirmation of your report
The documents and deadlines for the provider’s dispute process

Use contact information from the provider’s official website or application—not a number supplied by the suspected scammer. A provider may be unable to reverse an authorized or completed transfer, but prompt reporting can improve the chance of tracing funds or stopping a pending transaction.

A bank or e-wallet complaint is separate from a criminal complaint. Follow both routes when appropriate.

3. Preserve evidence before accounts disappear

Keep original files and devices when possible. Preserve:

Contracts, proposals, invoices, acknowledgments, delivery records, and official receipts
Bank statements, deposit slips, transfer confirmations, card records, and e-wallet transaction IDs
Full chat and email histories, including dates, times, usernames, account links, email headers, and attachments
Advertisements, product listings, websites, social-media profiles, and platform order pages
Phone numbers, account numbers, wallet addresses, QR codes, names used, and claimed addresses
Audio, video, call logs, meeting details, and witness information
Demand letters and proof that they were delivered
Corporate, permit, licence, or registration claims made by the other party
A chronological account of what was represented, when you relied on it, what you transferred, and what happened afterward

Take screenshots, but also export or download the original conversation and files where the service permits. A cropped screenshot may omit information needed to authenticate it. Do not edit original files or impersonate another person to obtain evidence.

For online cases, speed is especially important. Under the Cybercrime Prevention Act, certain traffic data and subscriber information are preserved by service providers for a minimum statutory period, while content data may require a lawful preservation order. Investigators may need warrants or other legal process to obtain nonpublic information.

4. Prepare a clear incident chronology

A useful chronology states:

Who approached whom
What was represented or entrusted
Why the representation was false, or how the property was misappropriated
When and where each communication and transfer occurred
Which account received the money
What loss resulted
What demands or follow-ups were made
What documents or witnesses support each point

Separate facts you personally know from information supplied by another person. Identify unknown facts honestly.

Where to report

Philippine National Police or National Bureau of Investigation

You may initially approach the police station with territorial jurisdiction. For internet-enabled conduct, the PNP’s cybercrime units or the NBI’s cybercrime investigators may be appropriate. The Cybercrime Prevention Act designates the PNP and NBI as law-enforcement authorities for cybercrime investigations.

The National Bureau of Investigation publishes information on its regional and district offices and its fraud, financial-crime, and cybercrime services. Verify current addresses and intake requirements before travelling.

An incident report, blotter entry, or investigator’s referral can document the report and support case development, but it is not itself a court case or a guarantee that charges will be filed.

Office of the city or provincial prosecutor

A criminal complaint is generally supported by a complaint-affidavit, witness affidavits, and documentary or object evidence. File in the office with proper territorial jurisdiction; jurisdiction may depend on where essential acts occurred, where the false representation was made or received, where money or property was delivered, and the offense ultimately charged.

The 2024 DOJ–National Prosecution Service Rules on Preliminary Investigations and Inquest Proceedings govern proceedings before DOJ prosecutors. Prosecutors assess whether the evidence establishes a prima facie case with reasonable certainty of conviction. The Supreme Court has upheld the validity of that evidentiary standard. This makes complete, admissible evidence—not merely suspicion or an accusation—especially important.

The prosecutor may require further investigation or additional evidence, dismiss the complaint, or approve the filing of an information in court. A prosecutor’s resolution may be subject to the remedies and deadlines stated in the governing DOJ rules and in the resolution itself. Calendar the date of receipt immediately and obtain legal advice before the period expires.

Regulators and platforms

A parallel regulatory complaint may be useful when the suspected scheme involves a regulated provider or activity:

Report unresolved complaints involving a BSP-supervised financial institution through the institution’s own complaint mechanism first, then consult the Bangko Sentral ng Pilipinas for its current consumer-assistance process.
Report suspected unlawful securities solicitation, investment taking, or misuse of a corporate registration to the Securities and Exchange Commission.
For a consumer transaction, consult the Department of Trade and Industry or the regulator with authority over the particular product or service.
Report the account, advertisement, listing, or transaction to the relevant marketplace, social network, messaging service, or payment platform.

Regulatory complaints can help stop an account or business practice, but they do not necessarily replace a criminal complaint or civil claim.

How recovery may be pursued

Payment reversal or provider dispute

This is often the fastest possible route, particularly for unauthorized card use or a transfer that remains pending. Eligibility and deadlines depend on the provider, payment method, account terms, and whether the customer authorized the transaction. Report first and argue the legal allocation of loss later.

Civil liability in the criminal case

Under Rule 111 of the Rules of Criminal Procedure, the civil action to recover civil liability arising from the offense is ordinarily deemed instituted with the criminal action unless the offended party waives it, reserves the right to file it separately, or filed the civil action first.

Actual loss should be documented with reliable proof. Other damages are not automatic and require a legal and evidentiary basis. Tell the prosecutor and private counsel about all payments, returned amounts, recovered property, insurance proceeds, and settlements so that the claim is accurate and no double recovery is sought.

A separate civil case

Depending on the facts, recovery may also be based on contract, fraud, unjust enrichment, or another source of obligation. A separate case may be appropriate where criminal intent is difficult to prove but the obligation to return or pay can be shown by a preponderance of evidence.

Qualifying money claims of up to ₱1,000,000 may fall under the Rule on Small Claims, including certain claims arising from loans, services, leases, and sales of personal property. Coverage is not determined by the amount alone. The claim’s legal basis, parties, prior proceedings, and requested relief matter. The Supreme Court’s official overview is available in its Rules on Expedited Procedures announcement.

Small-claims proceedings generally do not allow lawyers to appear for a party at the hearing, although a person may consult a lawyer beforehand. Use the current court forms and confirm filing requirements with the proper first-level court.

Provisional remedies

If there is evidence that assets are being concealed, transferred, or disposed of, ask a lawyer promptly whether attachment, injunction, or another provisional remedy is legally available. These remedies require specific grounds, court approval, and often a bond. A complainant cannot privately freeze or seize another person’s property.

Settlement

A written settlement can provide a repayment schedule, security, admissions, default provisions, and enforcement terms. Verify the debtor’s identity, authority, assets, and payment source before agreeing.

Repayment or compromise may affect the civil claim and the practical handling of the case, but estafa is a public offense. Private settlement or full reimbursement does not automatically erase criminal liability. Do not sign an affidavit of desistance, quitclaim, waiver, or release without understanding its effect.

Penalties and amount thresholds

Republic Act No. 10951 adjusted the amount brackets and penalties under Article 315. For most Article 315 modes, the current brackets are:

Not more than ₱40,000
Over ₱40,000 up to ₱1,200,000
Over ₱1,200,000 up to ₱2,400,000
Over ₱2,400,000 up to ₱4,400,000, with a statutory escalation above that amount subject to a maximum term stated in the law

Check-related estafa under Article 315(2)(d) has a separate, more severe penalty schedule. The exact penalty also depends on the charged mode, amount proved, date of commission, modifying circumstances, and other applicable laws. The controlling text appears in Republic Act No. 10951.

Where estafa or another Revised Penal Code offense is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act may apply and provides for a penalty one degree higher. “Computer-related fraud” under the same Act is a distinct offense requiring unauthorized input, alteration, or deletion of computer data or interference with a computer system, fraudulent intent, and resulting damage. An online transaction is therefore not automatically computer-related fraud, although another crime committed through technology may still be covered.

Deadlines and prescription

Do not delay because several different periods may apply:

The criminal prescriptive period depends on the penalty prescribed for the specific offense and amount involved.
Under Articles 90 and 91 of the Revised Penal Code, prescription for covered crimes is generally classified by the prescribed penalty and ordinarily begins when the crime is discovered by the offended party, the authorities, or their agents. Filing the proper complaint or information may interrupt prescription, subject to the applicable law and procedural circumstances.
Civil claims have their own prescriptive periods, which vary according to whether the claim is based on a written contract, oral contract, injury to rights, fraud, or another legal basis.
Banks, card issuers, e-wallets, marketplaces, and insurers may impose much shorter contractual reporting or dispute deadlines.
Motions for reconsideration, appeals, and petitions for review have strict periods generally counted from receipt of the relevant decision or resolution.

The prescription provisions are available in Articles 90 and 91 of the Revised Penal Code. Calculating the deadline may require determining the correct offense, penalty, discovery date, interruptions, and law in force when the act occurred. Seek legal advice rather than assuming that a general ten-year period applies.

Barangay conciliation may sometimes be required

Katarungang Pambarangay conciliation can be a precondition to filing certain disputes when the parties are natural persons who actually reside in the same city or municipality. Important exceptions include disputes involving juridical entities, parties residing in different cities or municipalities subject to limited adjoining-barangay rules, offenses whose maximum statutory penalty exceeds one year of imprisonment or a ₱5,000 fine, cases requiring urgent legal action, and claims that may otherwise prescribe.

Because many estafa charges carry penalties beyond the barangay system’s authority, prior conciliation may not be required for the criminal complaint. A related civil claim may require a separate analysis. The Supreme Court’s official guidance appears in Administrative Circular No. 14-93.

Common mistakes to avoid

Continuing to pay because the offender promises that one final payment will unlock the money
Deleting chats, blocking the account, or resetting a device before preserving evidence
Submitting only screenshots without transaction records or original files
Giving investigators an exaggerated amount or a chronology inconsistent with the documents
Treating registration with the SEC, DTI, or another agency as proof that an investment or offer is authorized
Publicly accusing named individuals without sufficient basis, risking privacy, defamation, or evidence-preservation problems
Threatening unlawful exposure or violence to obtain repayment
Assuming that a police blotter automatically files a criminal case
Assuming that an affidavit of desistance automatically ends prosecution
Waiting for the offender’s promised repayment until provider, court, or prescription periods expire
Filing in the wrong locality without examining where the legally essential acts occurred
Paying an unverified “hacker,” fixer, government employee, or recovery agent

When legal help is urgent

Consult a Philippine lawyer promptly when:

A large amount, family home, business capital, or retirement savings is at risk
Funds are still moving or assets may be concealed
The suspected offender or recipient account is abroad
Several people, companies, nominees, or bank accounts are involved
The transaction may involve securities, cryptocurrency, syndicated activity, money laundering, or identity theft
You are being threatened, blackmailed, or pressured to sign a release
A prosecutor has dismissed the complaint or issued a resolution with a review deadline
You need attachment, injunction, asset tracing, or a separate civil action
Prescription may be near
You are also being investigated because your account received or transferred funds

People who cannot afford private counsel may inquire with the Public Attorney’s Office, the Integrated Bar of the Philippines legal-aid program, a law-school legal clinic, or a qualified legal-aid organization. Eligibility and case acceptance rules apply.

Frequently asked questions

Can I file estafa if the debtor simply stopped paying?

Not necessarily. Nonpayment alone usually proves only an unpaid obligation. Estafa requires proof of a mode of fraud specified by Article 315, such as qualifying deceit at the start of the transaction or misappropriation of property received under an obligation to deliver or return it.

Is a demand letter required?

It depends on the offense and the evidence. A demand may help establish misappropriation, refusal to account, notice, default, or the amount claimed, but it is not a universal element of every form of estafa. For dishonored checks, statutory notice and proof of receipt can have particular significance. Have the document and method of service reviewed before relying on them.

Does a bounced check automatically mean estafa?

No. Estafa involving a check requires the elements of Article 315(2)(d), including the relationship between the check and the inducement that caused the victim to part with property. A check issued only to pay a pre-existing obligation may not establish that form of estafa. Separate liability under Batas Pambansa Blg. 22 may require a different analysis, including proper notice of dishonor.

Can I report an anonymous online scammer?

Yes. Provide every available identifier, including usernames, profile links, phone numbers, email addresses, recipient accounts, wallet addresses, transaction IDs, IP-related records in your possession, and platform reports. Investigators may use lawful process to seek subscriber or transaction information.

Can the bank freeze the recipient’s account because I complained?

A financial institution may take action allowed by law, regulation, and its account terms, but a customer cannot compel a permanent freeze merely by making an accusation. Formal disclosure, preservation, restraint, forfeiture, or seizure may require legal process and action by the proper authority.

Will filing a criminal case guarantee repayment?

No. A conviction may include civil liability, but actual collection depends on the judgment, available assets, third-party rights, and enforcement. Pursue payment-provider remedies and obtain advice about civil recovery instead of relying solely on the criminal process.

What if the offender offers partial payment?

Document the payment and its purpose. Do not conceal it from investigators, the prosecutor, or the court. Partial repayment may reduce the outstanding civil claim but does not necessarily extinguish criminal liability. Review any proposed waiver or release before signing.

Can victims combine their complaints?

Victims may coordinate and provide evidence showing a common scheme, but each transaction and each complainant’s reliance and loss should be documented separately. The proper charging structure, venue, and possible application of special laws require prosecutorial assessment.

Should I post the suspect’s identity online?

Usually not while facts remain unverified or an investigation is active. Public posts may expose private data, alert suspects, lead to evidence deletion, prejudice an investigation, or create defamation and safety risks. Give the evidence to the provider, investigators, prosecutor, and counsel.

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. The correct remedy depends on the documents and facts. Laws, procedures, and official guidance were source-checked as of 12 September 2026.