Quick answer

If you suspect fraud or estafa, act immediately on two tracks:

Try to stop and trace the money. Contact your bank, e-wallet, card issuer, remittance company, or other financial institution through its official fraud channel. Ask it to mark the transaction as disputed, secure your account, coordinate with the receiving institution, and preserve transaction records.
Prepare a documented complaint. Report the incident to the police, the National Bureau of Investigation (NBI), or—where electronic communications or accounts were used—the PNP Anti-Cybercrime Group or another cybercrime unit. A criminal complaint is ordinarily supported by a sworn complaint-affidavit, witness affidavits, and documentary or electronic evidence.

Reporting does not guarantee that the money will be returned. Recovery depends heavily on how quickly the transfer is reported, whether funds remain traceable, the evidence of fraud, the recipient’s identity and assets, and the legal remedy pursued. A failed deal, unpaid debt, or broken promise is not automatically estafa: the prosecution must prove the particular form of fraud defined by law.

First steps after discovering the fraud

1. Contact the financial institution immediately

Use only the institution’s official app, website, hotline, or branch. Do not call a number supplied by the suspected scammer.

Ask the institution to:

block or secure affected cards, online banking, e-wallets, and linked accounts;
record a formal fraud or disputed-transaction report;
attempt recall, reversal, or coordinated verification with the receiving institution;
preserve account, device, authentication, IP, transaction, and communication records;
give you a reference or case number and written acknowledgment; and
explain its documentary requirements and dispute deadlines.

Under the Anti-Financial Account Scamming Act, Republic Act No. 12010, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction, subject to the Act and BSP rules. The statute allows a hold for the BSP-prescribed period, which may not exceed 30 calendar days unless extended by a competent court. It also requires coordinated verification even when the money may already have left the banking system.

This is not an automatic 30-day freeze whenever a customer alleges fraud. The institution must apply the governing law and BSP rules to the facts. Prompt reporting matters because scammers often transfer or withdraw funds quickly.

If passwords, one-time PINs, identity documents, or device access may have been compromised, also:

change passwords from a clean device;
sign out other sessions;
enable multi-factor authentication;
replace affected SIMs or cards through official channels;
tell the institution if the scammer remotely controlled your phone or computer; and
check other accounts for unauthorized access.

Do not delete or reset the affected device until important evidence has been preserved, unless continued access creates an immediate security risk.

2. Preserve the evidence before accounts or messages disappear

Keep original files where possible. Save:

complete chat, SMS, and email threads, including dates, usernames, numbers, and profile links;
advertisements, listings, websites, social-media pages, and account profiles;
payment confirmations, reference numbers, QR codes, receipts, deposit slips, and bank statements;
the receiving account’s displayed name, account number, e-wallet number, and institution;
contracts, invoices, order forms, acknowledgments, promissory notes, and demand letters;
audio recordings or call logs lawfully obtained or retained;
proof of what was promised and what was actually delivered;
documents or messages showing that a representation was false;
names and contact details of witnesses or other victims;
police, bank, platform, courier, and merchant case numbers; and
proof of consequential expenses or other claimed losses.

Export chats when the platform allows it. Take screenshots showing the full screen and identifying details, but retain the underlying device and original messages. Do not crop the only copy. Record the relevant URL and the date and time you accessed it.

Prepare a simple chronology stating:

who contacted whom;
each material representation;
why you relied on it;
each payment or delivery of property;
when you discovered the suspected fraud;
what happened to the money or property; and
every report, demand, or response afterward.

3. Do not send “recovery fees”

A common second scam targets people who have already lost money. Be suspicious of anyone who claims to be a police officer, bank employee, hacker, lawyer, regulator, or foreign recovery agent and demands an advance “release,” “tax,” “tracking,” or “court” fee.

Government investigators and legitimate financial institutions should be contacted through independently verified official channels.

When conduct may amount to estafa

Article 315 of the Revised Penal Code covers several distinct forms of estafa. The applicable form depends on the facts.

Estafa through false pretenses or fraudulent representations

This commonly involves a false representation about identity, authority, qualifications, ownership, credit, agency, business, property, or another material fact. In general, the deceit must have induced the victim to part with money, property, or a right, causing damage.

The timing matters. For this form of estafa, the fraudulent representation ordinarily must precede or accompany the victim’s transfer. A false excuse invented only after a legitimate obligation arose may support a civil claim but does not necessarily prove that the accused obtained the money through prior deceit.

Examples that may warrant investigation include:

selling property the seller did not own or have authority to sell;
impersonating a bank, government office, employer, relative, or legitimate merchant;
soliciting an investment through fabricated licenses, returns, assets, or transactions;
taking payment for goods while using a false identity and evidence suggesting there was never an intent or ability to deliver; or
inducing a transfer with forged documents or fabricated account statements.

Whether these acts constitute estafa still depends on admissible evidence of every legal element.

Estafa through misappropriation or conversion

This may arise when money, goods, or other personal property is received in trust, on commission, for administration, or under an obligation to deliver or return the same, and the recipient later misappropriates, converts, or denies receiving it, causing prejudice.

The exact agreement is critical. Money received under a relationship that transfers ownership—such as an ordinary loan—may produce a debtor-creditor obligation rather than this form of estafa. Labels such as “investment,” “cash advance,” or “trust” do not control; investigators and courts examine the parties’ actual arrangement and documents.

A demand to account for or return the property can help show conversion and discovery of the loss, but demand is not a substitute for proof of the offense and is not uniformly an element in every form of estafa.

Fraudulent means involving checks or other conduct

Article 315 also addresses particular fraudulent acts, including some transactions involving checks. A dishonored check does not by itself establish estafa. The evidence must show the statutory circumstances, including the relationship between the check, the alleged deceit, and the transfer of money or property.

The same incident may raise issues under Batas Pambansa Blg. 22, but that is a separate offense with its own elements, notice requirements, defenses, and civil-action rules. Have counsel assess check cases promptly.

Not every unpaid obligation is a crime

The Constitution prohibits imprisonment for debt. A person’s inability or refusal to pay, without proof of the fraud or conversion required by law, is generally a civil matter.

Warning signs may support an investigation, but none alone establishes guilt:

repeated excuses or missed deadlines;
blocking the creditor after payment;
issuing a receipt or postdated check;
business failure;
inability to refund immediately; or
breach of a contract.

The key question is not simply whether you lost money. It is whether the evidence proves a legally recognized fraudulent act, the required intent, reliance or receipt, and damage.

Online scams and financial-account offenses

When estafa is committed by, through, or with information and communications technology, Section 6 of the Cybercrime Prevention Act of 2012 may apply and can raise the prescribed penalty by one degree. The Act also separately defines computer-related fraud, forgery, and identity theft. The correct charge depends on what technology did in the offense; merely discussing an otherwise offline transaction through a phone does not answer every legal question.

Republic Act No. 12010 separately penalizes conduct such as:

knowingly using, lending, selling, renting, or recruiting the use of financial accounts to move criminal or social-engineering proceeds;
obtaining sensitive financial-account information through specified deceptive electronic communications; and
related attempts, assistance, and account-trading offenses.

The law also provides potential institutional liability and restitution where a BSP-supervised institution fails to employ adequate risk controls or the legally required degree of diligence. It expressly states that a criminal conviction is not a prerequisite to restitution under that provision. This does not mean every scam loss must automatically be reimbursed; responsibility depends on the institution’s conduct, the governing BSP rules, and the evidence.

Where to report

Financial institution first

Report to every institution in the payment chain: your institution, the receiving institution if identifiable, the card network or payment provider, and any remittance or virtual-asset service involved. Keep all ticket numbers and written responses.

If your complaint against a BSP-supervised institution is not resolved through its own consumer-assistance process, consult the Bangko Sentral ng Pilipinas for its current consumer-assistance and escalation channels.

Police, NBI, or cybercrime authorities

You may approach:

the police station with territorial jurisdiction;
the PNP Anti-Cybercrime Group for online or technology-assisted incidents;
the National Bureau of Investigation, including the appropriate cybercrime or fraud unit; or
the Cybercrime Investigation and Coordinating Center for its current reporting and referral channels.

An incident report or online submission may begin the process, but investigators may still require personal appearance, verification, a sworn complaint, device examination, or additional documents.

Securities and investment schemes

For suspected unauthorized investment solicitation, securities fraud, or an entity falsely claiming SEC registration or authority, report to the Securities and Exchange Commission. Company registration alone does not necessarily authorize an entity to solicit investments or sell securities.

Consumer transactions

A deceptive sale may also fall within the jurisdiction of the Department of Trade and Industry or another sector regulator. An administrative consumer complaint can address regulatory or commercial issues, but it does not automatically replace a criminal complaint or civil action.

Preparing the criminal complaint

A useful complaint-affidavit should state facts, not conclusions alone. Identify:

the complainant and respondent as accurately as possible;
when and where each relevant act occurred;
the exact representations or agreement;
why the representations were false or how the entrusted property was converted;
how the representations induced the transfer;
the amounts, dates, accounts, and transaction references;
the resulting loss;
later admissions, demands, repayments, or concealment; and
each supporting exhibit and witness.

Avoid exaggeration. Distinguish what you personally observed from what another person told you. Do not alter screenshots or submit a reconstructed conversation as though it were the original.

The proper filing office and procedure depend on the offense, prescribed penalty, place of commission, and current prosecution rules. Territorial jurisdiction can be fact-sensitive in online cases because an action is generally brought where the offense or an essential ingredient occurred. Ask the receiving office to confirm jurisdiction rather than filing identical complaints indiscriminately in several places.

A report to a bank, platform, barangay, or police desk is not necessarily the same as instituting the criminal action for prescription purposes. Under Rule 110, criminal actions are instituted in the manner prescribed by the Rules of Court, generally through the proper prosecutor or court depending on the offense and locality. Do not assume that an informal report stopped a legal deadline.

Options for recovering the loss

Recovery through the criminal case

Under Rule 111 of the Rules of Criminal Procedure, the civil action to recover civil liability arising from the charged offense is generally deemed instituted with the criminal action unless the offended party:

waives it;
properly reserves the right to file it separately; or
filed the civil action before the criminal action.

A reservation must be made at the stage and under the conditions required by the rule. Discuss this choice with counsel early. Filing overlapping actions incorrectly can cause suspension, duplication, added expense, or procedural problems.

A criminal conviction may include restitution or damages, but a favorable judgment is not the same as actual collection. Enforcement still depends on locating property or income that the law permits to be reached.

A separate civil action

Depending on the evidence and legal relationship, possible civil claims may arise from contract, fraud, unjust enrichment, or other sources of obligation. Civil liability may exist even when the evidence does not establish criminal guilt beyond reasonable doubt.

For qualifying money claims within the current small-claims limit, the simplified small-claims procedure may be available. The proper court, claim limit, barangay-conciliation requirement, filing fees, venue, and available cause of action must be checked against the rules in force when filing.

Fraud is also among the matters for which Article 33 of the Civil Code recognizes an independent civil action. Rule 111 allows specified independent civil actions to proceed separately, subject to the prohibition against double recovery. Whether Article 33 or another independent cause of action fits a particular case requires legal assessment.

Attachment and preservation of assets

Rule 127 permits attachment in specified circumstances in connection with the civil action properly instituted in a criminal case—for example, certain fiduciary conversions, concealment or disposal of assets, risk of absconding, or residence outside the Philippines. Attachment is a court remedy with substantive and procedural requirements; a complainant cannot freeze or seize property merely by alleging fraud.

Seek urgent legal advice if there is reliable evidence that the suspected offender is selling, transferring, hiding, or removing assets.

Settlement

Repayment or settlement can be practical, but protect yourself:

put the complete terms in writing;
identify the parties, amount, due dates, payment method, and effect of default;
verify the identity and authority of anyone signing for a company;
issue acknowledgments only for money actually received;
do not surrender original evidence prematurely; and
obtain advice before signing a waiver, quitclaim, affidavit of desistance, or confidentiality clause.

Because a crime is prosecuted in the name of the People of the Philippines, private settlement or an affidavit of desistance does not automatically require authorities or a court to dismiss a criminal case. Its effect depends on the offense, evidence, and procedural stage.

Deadlines and delay

There is no single deadline for every fraud-related remedy.

Criminal prescription depends on the offense charged, its penalty, when the offense was committed or discovered under the applicable law, and what legally interrupted prescription. Civil claims have separate prescriptive periods based on their legal foundation. Bank, card, e-wallet, platform, insurance, and administrative dispute processes may impose much shorter contractual or regulatory deadlines.

Do not wait for negotiations, promises of repayment, or a platform investigation to finish before obtaining advice about prescription. Partial payments or written acknowledgments may affect some civil issues but should not be assumed to preserve every criminal or civil remedy.

Common mistakes to avoid

Waiting because the scammer promises a refund.
Paying another fee to “unlock” or recover the money.
Deleting chats, resetting devices, or losing access to the original account.
Submitting only cropped screenshots without transaction records or context.
Treating every unpaid debt as estafa.
Publicly naming someone as a criminal before charges and evidence are properly assessed.
Threatening violence, unlawful exposure of personal data, or harassment.
Secretly accessing another person’s account or device to obtain evidence.
Filing contradictory affidavits with different agencies.
Assuming a barangay blotter, bank ticket, or social-media report is already a prosecutor’s complaint.
Signing a quitclaim or accepting an installment plan without understanding its effect.
Expecting investigators to obtain records indefinitely after a platform’s retention period expires.

When legal help is urgent

Consult a Philippine lawyer promptly when:

the loss is substantial or involves many victims;
funds may still be frozen, traced, or recalled;
the suspect is disposing of assets or leaving the country;
the transaction involves real property, securities, cryptocurrency, corporate funds, or multiple jurisdictions;
you entrusted money or property under a complicated agency, investment, or business arrangement;
a check, promissory note, settlement, waiver, or affidavit of desistance is involved;
a prosecutor, investigator, bank, or court has issued a deadline;
you need attachment, an injunction, or another provisional remedy;
the suspected offender has threatened or doxxed you; or
you are unsure whether to include, reserve, or separately file the civil claim.

People who cannot afford private counsel may ask the Public Attorney’s Office about current eligibility and assistance.

FAQ

Can I file estafa even if I do not know the scammer’s real name?

You may report the incident and give every available identifier, such as account numbers, phone numbers, usernames, URLs, delivery information, and transaction references. A formal complaint must identify or describe the respondent sufficiently under the applicable rules, and investigators may seek lawful disclosure or preservation of records. An unidentified account holder is not automatically the principal scammer; accounts may be stolen, fictitious, or used by money mules.

Is a demand letter required before filing?

Not in every form of estafa. A demand may be important evidence in conversion or accounting disputes and may be required for other legal purposes, but it does not create criminal fraud where the elements are absent. Do not let demand-letter exchanges consume a filing deadline.

Can the bank reverse a transfer that I personally authorized?

Possibly, but not automatically. Authorization does not end the inquiry where consent was obtained through deception or social engineering. Recovery depends on the payment method, speed of reporting, location of the funds, applicable dispute rules, and the conduct of the institutions and account owner.

Does giving an OTP prevent recovery?

Not necessarily. It can be important evidence concerning authorization, security, and diligence, but it does not by itself resolve every case. Explain exactly how the OTP was obtained or used and preserve the messages and call records.

Can I recover if the criminal complaint is dismissed?

Potentially. A dismissal for insufficient evidence of criminal liability does not invariably extinguish claims based on contract, independent civil liability, or other sources of obligation. The reason for dismissal and any final factual findings matter. Obtain advice before filing a separate case.

Can several victims file together?

Victims should tell investigators about one another because common representations, accounts, and recipients may be important. Whether complaints can be jointly investigated, consolidated, or charged together depends on the transactions, respondents, venue, and procedural rules. Each victim should preserve individual proof of reliance, payment, and loss.

Should I post the scammer’s identity online?

Usually, reporting through official channels is safer. Public accusations can compromise an investigation, expose personal information, alert suspects, or create defamation and privacy risks. Share evidence with investigators, counsel, regulators, and institutions that have a legitimate need for it.

Will filing a complaint guarantee repayment?

No. Criminal prosecution determines liability; collection requires identifiable funds or assets and an enforceable civil award or other lawful recovery mechanism. Fast reporting and well-preserved evidence improve the practical chances but cannot guarantee recovery.

Official legal references

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Procedures and remedies depend on the documents and facts. Official sources were checked as of September 19, 2026.