Quick answer

If you suspect fraud or estafa, act immediately:

Contact the bank, e-wallet, card issuer, or payment platform through its official fraud channel. Ask it to flag the transaction, secure your account, trace the transfer, and preserve records. If the funds remain within the Philippine financial system, prompt reporting may allow a temporary hold or coordinated verification—but recovery is not automatic.
Preserve the complete evidence before messages, accounts, websites, or transaction histories disappear.
Report the incident to the Philippine National Police, the PNP Anti-Cybercrime Group, or the National Bureau of Investigation when investigation or urgent digital-evidence preservation is needed.
Prepare a sworn complaint and supporting affidavits for the Office of the City or Provincial Prosecutor with territorial jurisdiction.
Have a lawyer assess the best recovery route: civil liability within the criminal case, a separate civil action, provisional attachment, or another remedy suited to the transaction.

A failed investment, unpaid loan, broken promise, or unfulfilled contract is not automatically estafa. Criminal liability generally requires evidence of the particular fraudulent means defined by law, causation, and actual prejudice. The documents and the accused’s intent at the relevant time matter.

What counts as estafa?

Article 315 of the Revised Penal Code covers several forms of swindling. Common forms include:

False pretenses or fraudulent representations. The accused made a material false representation before or at the time the victim parted with money or property; the victim relied on it; and the victim suffered damage.
Misappropriation or conversion. Money or personal property was received in trust, on commission, for administration, or under an obligation to deliver or return it, but was later misappropriated, converted, or denied.
Fraud involving checks. Article 315 contains specific rules for certain checks issued without sufficient funds. A dishonored check may also raise a separate issue under Batas Pambansa Blg. 22, but dishonor alone does not answer every element of either offense.
Other specified fraudulent acts, such as inducing someone through deceit to sign a document.

The precise statutory forms appear in Article 315, as amended by Republic Act No. 10951.

For estafa by false pretenses, the Supreme Court has emphasized four points: there must be a false pretense or fraudulent act; it must precede or accompany the fraud; the victim must have relied on it in parting with money or property; and damage must have resulted. A suspicious act occurring only afterward ordinarily cannot supply the missing prior deceit. See RCL Feeders Pte., Ltd. v. Secretary of Justice.

Fraud versus an ordinary unpaid obligation

Nonpayment does not by itself prove a crime. A dispute may be civil rather than criminal when the evidence shows only that:

a borrower later became unable to pay;
a business or investment genuinely failed;
a seller breached a contract without having used prior deceit;
the parties disagree over performance, quality, accounting, or ownership; or
money was received as ownership or payment, rather than under a duty to return the same money or property.

Conversely, a case may support estafa when documents and communications show that a person invented a transaction, concealed a material fact while soliciting payment, pretended to possess authority or property, used false credentials, or obtained entrusted property and then converted it.

Labels are not controlling. Calling a transfer an “investment,” “loan,” “reservation,” or “commission” does not determine the result; investigators and courts examine the actual agreement, representations, movement of funds, and conduct of the parties.

Immediate action after discovering the fraud

1. Stop further loss

Do not send an additional “release fee,” “tax,” “verification payment,” or “recovery charge.” Scammers often demand more money after the victim asks for a withdrawal or refund.

Change compromised passwords from a trusted device. Revoke unknown sessions, enable multi-factor authentication, block affected cards, and tell the financial institution if an OTP, PIN, password, identification document, or device was exposed.

Do not negotiate through links or telephone numbers supplied by the suspected scammer. Use contact details independently obtained from the institution’s official website or application.

2. Notify every institution in the transfer chain

Contact both the sending institution and, if identifiable, the receiving bank, e-wallet, exchange, remittance company, or payment platform. Provide:

transaction date and time;
exact amount and currency;
reference or trace number;
sender and recipient account details;
a short description of the deception;
the time you discovered it; and
any police, NBI, PNP, or prosecutor reference number already available.

Ask for a written acknowledgment and case number. Request preservation of account, authentication, device, IP, transaction, and communications records. Do not assume that a customer-service complaint automatically becomes a criminal complaint.

Under the Anti-Financial Account Scamming Act, Republic Act No. 12010, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction and conduct coordinated verification. The statutory ceiling for a temporary hold is 30 calendar days unless a competent court extends it. Whether a particular transaction is held, released, or recoverable depends on the law, BSP rules, available information, and whether the money remains traceable.

The Act also addresses money-mule activity and social-engineering schemes. It does not guarantee reimbursement merely because a complaint was made. Institutional liability or restitution depends on the applicable facts, including compliance with required risk controls and standards of diligence.

A consumer may escalate an unresolved complaint through the Bangko Sentral ng Pilipinas after first raising it with the supervised financial institution. Keep the institution’s complaint number and final response.

3. Preserve evidence in its original form

Create a chronological evidence folder containing:

contracts, proposals, invoices, receipts, acknowledgments, and demand letters;
bank statements, deposit slips, transfer confirmations, QR codes, and transaction references;
complete chat and email threads—not only selected screenshots;
usernames, profile links, account IDs, telephone numbers, email addresses, wallet addresses, and website URLs;
advertisements, investment presentations, permits, IDs, photographs, voice messages, and call logs;
the date, time, device, and platform used for each material communication;
names and contact details of witnesses and other victims;
proof of what was promised, what you relied upon, and what you lost; and
the institution’s acknowledgments, case numbers, and responses.

Export messages where the platform permits. Retain the original phone or computer and avoid factory resets. Preserve electronic files with their metadata; do not edit, crop, annotate, or repeatedly forward the only copy. A screenshot is useful, but an original message export, statement, or provider record may carry more context.

Document how each item was obtained. Never access another person’s account, secretly impersonate a suspect, or acquire records through hacking.

4. Make a law-enforcement report

For an online or technology-assisted scheme, report to the PNP Anti-Cybercrime Group or the NBI cybercrime unit. A local police station may also record the incident and route it to the appropriate unit.

Bring valid identification, a concise chronology, transaction records, printed copies of essential communications, and accessible electronic copies. Identify urgent preservation needs, active recipient accounts, continuing threats, or other victims.

A police blotter or investigative report can support the case, but it is not necessarily the sworn prosecutorial complaint that institutes the criminal action. Confirm what was filed, with which office, and obtain the reference number.

Filing the criminal complaint

Criminal actions are generally filed where the offense occurred or where an essential element occurred. Online transactions may raise questions about where the misrepresentation was sent or received, where payment was made, and where the damage occurred. Venue should be checked before filing.

A complaint is a sworn written statement charging a person with an offense. For a preliminary investigation, the complainant ordinarily submits:

a complaint-affidavit containing facts personally known to the complainant;
witness affidavits;
the respondent’s address, if known;
supporting documents establishing probable cause; and
the required number of copies.

The governing framework appears in Rules 110 and 112 of the Rules of Criminal Procedure. Filing requirements and intake procedures should be confirmed directly with the relevant prosecutor’s office because administrative requirements can change.

The affidavit should explain, in chronological order:

who made each representation;
exactly what was represented or concealed;
when and through what channel it was communicated;
why it was false;
what the speaker knew or intended at the time;
how the representation caused the payment or delivery;
where and how the money or property moved;
the resulting loss;
any duty to return or deliver property; and
what happened after demand, if demand is legally or evidentially relevant.

Avoid unsupported conclusions such as “they are obviously scammers.” Identify the acts and attach the records that support them. If several people or a corporation were involved, specify each person’s participation; corporate title alone does not automatically establish personal criminal liability.

A preliminary investigation does not determine guilt. It decides whether sufficient grounds exist to hold the respondent for trial. If an information is filed, guilt must still be proved in court beyond reasonable doubt.

Online fraud and related offenses

When estafa is committed by, through, or with information and communications technology, Section 6 of the Cybercrime Prevention Act of 2012 may apply and may raise the penalty by one degree. The same conduct may also implicate computer-related fraud, identity theft, unlawful access, the Anti-Financial Account Scamming Act, securities laws, or other special laws.

The exact charge should be left to the investigating authorities and prosecutor. Multiple statutes do not necessarily permit multiple punishments for the same legally identical offense.

For a suspected investment solicitation, verify registration and authority to solicit investments through the Securities and Exchange Commission and report unregistered or fraudulent solicitations to the SEC. Company registration by itself does not mean that an entity is authorized to sell securities or solicit investments from the public.

Penalties and amount thresholds

For the principal forms of estafa under Article 315, Republic Act No. 10951 uses these amount bands:

not more than ₱40,000;
more than ₱40,000 but not more than ₱1,200,000;
more than ₱1,200,000 but not more than ₱2,400,000;
more than ₱2,400,000 but not more than ₱4,400,000; and
amounts above ₱4,400,000, for which an incremental rule may apply, subject to the statutory maximum.

Different statutory penalties apply to the special check provision in Article 315(2)(d). Cybercrime treatment, special laws, the date of the offense, and other sentencing rules can also alter the result. Amount alone does not establish estafa, and a victim should not calculate the charge or prescriptive period from the amount without legal advice.

Seeking repayment or compensation

Civil liability in the criminal case

As a general rule, when a criminal action is instituted, the civil action to recover civil liability arising from the offense is deemed included unless the offended party:

waives it;
reserves the right to file it separately; or
filed the civil action before the criminal action.

A reservation must be made before the prosecution begins presenting evidence and under circumstances giving the offended party a reasonable opportunity to reserve. The detailed rules, including special treatment of BP 22 cases, appear in Rule 111.

The victim should clearly document actual loss and identify the recovery being requested. A conviction does not itself ensure collection if the offender has no reachable assets.

Separate civil action

A separate case may be appropriate when recovery rests on a contract, restitution, damages, or another source of obligation. But filing sequence matters: a civil action arising from the offense may be suspended after the criminal action begins, subject to the exceptions and consolidation rules in Rule 111.

Before reserving or filing separately, obtain advice about:

limitation periods;
court jurisdiction and venue;
filing fees;
barangay conciliation, if applicable;
the identity of the proper defendants;
possible corporate or individual liability;
enforceable assets; and
the risk of inconsistent pleadings or double recovery.

Attachment and preservation of assets

Rule 127 permits provisional remedies in appropriate criminal cases. Attachment may be available in specified situations, including certain fiduciary misappropriation claims, concealment or disposal of property, threatened flight, or a defendant residing abroad.

Attachment is not automatic. It requires a proper application, evidence, and compliance with procedural and bond requirements. Seek urgent legal advice if the suspect is transferring property, closing a business, leaving the country, or dissipating traceable proceeds.

Settlement

Repayment can be useful, but do not sign a quitclaim, affidavit of desistance, novation, confidentiality undertaking, or settlement without understanding its effect. Estafa is a public offense prosecuted in the name of the People of the Philippines; private settlement does not necessarily compel dismissal.

Put any settlement in writing. State the amount, schedule, security, consequences of default, treatment of pending cases, and whether rights are waived only after cleared payment. Do not surrender original evidence merely in exchange for a promise to pay.

Deadlines: do not delay

Criminal and civil claims are subject to prescription. For Revised Penal Code offenses, the criminal period depends principally on the penalty prescribed by law; the amount, mode of estafa, cybercrime treatment, and date of commission may affect the calculation. Questions about when prescription begins—commission, discovery, concealment, or a continuing series of acts—can be fact-sensitive.

Under Rule 110, institution of the criminal action generally interrupts criminal prescription unless a special law provides otherwise. A bank complaint, demand letter, barangay report, social-media post, or police blotter should not be assumed to have the same effect.

Because records disappear and funds move quickly, treat the matter as urgent even if the apparent prescriptive period seems long.

Common mistakes that weaken a case

Waiting for repeated promises of repayment while records and assets disappear.
Reporting only to the payment provider and assuming a criminal case has been filed.
Submitting isolated screenshots without the complete conversation or transaction trail.
Describing a breach of contract as fraud without proving deceit at the relevant time.
Accusing every company officer or account holder without evidence of personal participation or knowledge.
Editing files, deleting the original messages, or losing access to the device used.
Posting personal data or unproven accusations publicly, creating privacy, defamation, or safety risks.
Paying an unofficial “fixer” who promises arrest, account freezing, or guaranteed recovery.
Filing in the wrong venue or naming the wrong legal person.
Signing a quitclaim after receiving only partial payment.
Assuming that an arrest, complaint, or conviction guarantees reimbursement.

When legal help is urgent

Consult a Philippine lawyer promptly when:

the amount is substantial or represents essential household or business funds;
the suspect or money is outside the Philippines;
cryptocurrency, layered transfers, nominees, or multiple mule accounts were used;
the suspect is disposing of assets or preparing to leave;
several victims or coordinated actors are involved;
a prosecutor has issued a deadline, subpoena, or adverse resolution;
a civil case, arbitration, insolvency, or corporate dispute already exists;
the transaction involves securities, real property, estate funds, public money, or fiduciary property;
you are considering attachment or another urgent court remedy; or
prescription may be approaching.

Those unable to afford private counsel may ask the Public Attorney’s Office about eligibility and available assistance.

Frequently asked questions

Can I file even if I know only an alias?

Potentially. Preserve the alias, account identifiers, telephone numbers, email addresses, URLs, payment details, and every fact that may identify the person. Rule 110 permits an accused whose true name is unknown to be described by an identifying fictitious name, subject to later correction. The prosecutor must still find sufficient evidence linking the respondent to the offense.

Is a demand letter required?

Not in every form of estafa. Demand may be important evidence—particularly in alleged misappropriation or conversion—but it is not a universal substitute for proving the statutory elements. A lawyer should assess whether, when, and how to send one.

Does a bank or e-wallet have to refund me?

Not automatically. Republic Act No. 12010 permits restitution in specified circumstances involving inadequate risk controls or failure to exercise the required diligence, and it states that conviction is not a prerequisite to that restitution. Liability still depends on the facts, governing BSP rules, and evidence. Report immediately and complete the institution’s dispute process.

Can the recipient account be frozen immediately?

A financial institution may temporarily hold disputed funds under Republic Act No. 12010 and applicable BSP rules. A longer restraint, freeze order, attachment, or seizure ordinarily requires the legal authority and procedure applicable to the case. A complaint alone does not guarantee that money remains available.

What if I voluntarily authorized the transfer?

Authorization does not necessarily defeat a fraud complaint if deception induced the transfer. It may, however, affect the bank dispute, applicable statutory theory, and allocation of responsibility. Preserve the false representations and the sequence leading to authorization.

Can I recover from a money mule?

A person who knowingly lends, sells, rents, or uses a financial account to move criminal or social-engineering proceeds may face liability under Republic Act No. 12010. Recovery from a particular account owner still depends on proof, available assets, defenses, and the orders ultimately issued.

Does repayment erase estafa?

No automatic rule says that it does. Repayment may affect the loss, civil claim, settlement, or evaluation of the evidence, but a public criminal case is not controlled solely by the complainant.

Can I file both criminal and civil cases?

Sometimes, but the filing sequence, reservation requirement, suspension rules, and prohibition against double recovery matter. Review Rule 111 with counsel before pursuing parallel remedies.

Where should I start if the scam is still happening?

Secure your accounts and contact the financial institutions first, then report immediately to law enforcement. Preserve all communications and do not warn the suspects if doing so may cause them to erase evidence or move funds.

Official legal references

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Charges, venue, prescription, recovery options, and institutional liability depend on the evidence and governing rules. Sources and procedures were checked as of September 18, 2026.