Quick answer

If you suspect fraud or estafa, act immediately: stop further payments, contact the bank or e-wallet through its official fraud channel, secure your accounts, preserve the evidence, and report the incident to law enforcement. To pursue criminal charges, you will generally need a sworn complaint-affidavit and supporting documents filed with the prosecutor’s office or, depending on the offense and locality, the proper first-level court.

Recovery is possible but never guaranteed. Speed matters because transferred funds may be withdrawn or moved through several accounts. A criminal complaint may include a claim for civil liability arising from the offense, while a separate civil case may be appropriate when the evidence establishes a contractual debt or another civil obligation but not criminal fraud.

When suspected fraud may constitute estafa

Article 315 of the Revised Penal Code punishes estafa—fraud causing measurable damage—when committed through one of the means specified by law. Common forms include:

Misappropriation or conversion: A person receives money or property in trust, on commission, for administration, or under an obligation to deliver or return it, then uses or disposes of it as their own, denies receiving it, or fails to account for it to another’s prejudice.
False pretenses or fraudulent representations: Before or at the time the victim parts with money or property, the offender makes a false claim about such matters as identity, authority, qualifications, property, credit, agency, business, or an imaginary transaction. The victim relies on that representation and suffers damage.
Fraudulent acts involving checks: Certain conduct involving a postdated or dishonored check may fall under Article 315. Issuing a worthless check may also raise a separate issue under Batas Pambansa Blg. 22, whose elements, notice requirements, defenses, and civil-action rules differ from estafa.

The precise theory matters. For estafa by deceit, the false representation generally must exist before or simultaneously with the victim’s payment or transfer. A promise that was honestly made but later broken does not automatically become criminal fraud.

For estafa by misappropriation, mere receipt of money is insufficient. The transaction must create the legally required duty to deliver or return the money or property. If ownership of the money passed to the recipient—such as an ordinary payment under a sale—the failure of the deal may create civil liability without establishing this form of estafa.

The Supreme Court has repeatedly emphasized that bad faith, deceit, or fraudulent conversion must be proved; criminal liability cannot rest solely on nonpayment or failure to perform a contract. See the Court’s discussion in Manzano v. Perez and its explanation of juridical possession in Velayo v. People.

Not every unpaid obligation is estafa

An unpaid loan, failed investment, delayed refund, broken promise, or uncompleted project is not automatically estafa. A criminal case ordinarily requires evidence of the particular fraudulent act specified by Article 315—not merely proof that money is still unpaid.

Warning signs that may support further investigation include:

A false identity, forged authority, fictitious office, nonexistent property, or imaginary transaction;
Documents or screenshots deliberately altered to induce payment;
False claims of ownership, accreditation, licensing, inventory, income, or investment returns;
Money entrusted for a defined purpose being diverted or denied;
Multiple victims receiving substantially the same false representations;
Immediate disappearance, blocking, account closure, or rapid movement of funds after payment; or
Evidence that the promised asset, authority, business, or capacity never existed when the representation was made.

These facts are indicators, not automatic proof. Conversely, later silence or nonpayment may be relevant evidence but does not by itself prove that the accused had fraudulent intent at the beginning.

What to do immediately

1. Stop the loss and secure your accounts

Do not send an additional “release fee,” “verification payment,” “tax,” “insurance charge,” or “recovery fee.” Fraudsters commonly demand more money after the first transfer.

If you disclosed a password, PIN, one-time password, recovery code, card number, or identity document:

Change affected passwords using a trusted device;
Sign out other sessions;
Enable strong multifactor authentication;
Lock or replace compromised cards or SIMs;
Inform the bank, e-wallet, email provider, mobile network, or platform; and
Review linked accounts and recent transactions.

Do not call a number supplied by the suspected fraudster. Use the institution’s official app, card, statement, or verified website.

2. Contact the sending institution immediately

Ask the bank, e-money issuer, remittance company, or other financial institution to:

Record a formal fraud dispute;
Attempt a recall, reversal, or preservation of remaining funds;
Coordinate with the receiving institution;
Flag the recipient account and related transactions;
Preserve transaction, device, access, and communications records; and
Give you a case or reference number and written acknowledgment.

Republic Act No. 12010, the Anti-Financial Account Scamming Act, authorizes covered institutions to temporarily hold funds involved in a disputed transaction under applicable Bangko Sentral ng Pilipinas rules. The statutory holding period may not exceed 30 calendar days unless extended by a competent court. The law also provides for coordinated verification among institutions.

This does not create an automatic refund. Whether funds can be held or returned depends on how quickly the report is made, whether the money remains traceable within the financial system, the evidence, and the institution’s legal obligations. The Act may impose restitution liability on an institution when the statutory conditions concerning inadequate controls or lack of required diligence are established; a victim should not assume that every scam loss must automatically be reimbursed.

3. Make a law-enforcement report

For an online or technology-assisted incident, report to the Philippine National Police Anti-Cybercrime Group or the National Bureau of Investigation’s cybercrime investigators. A local police station can also record the incident and direct or endorse the complaint to the appropriate unit.

Bring or submit a clear chronology and copies of the evidence. Obtain the report, complaint, or reference number and the name of the receiving office.

A police report supports investigation, but do not assume that a blotter entry, platform report, bank dispute, or informal email is already the criminal complaint required to commence prosecution or interrupt prescription. Confirm with the proper prosecutor’s office what must be formally filed.

4. Consider a written demand

A lawyer-prepared or carefully drafted demand can identify the transaction, state what must be returned, set a reasonable deadline, and create proof of refusal or failure to account.

Demand is particularly important evidence in disputes involving property allegedly received with a duty to deliver or return. Its exact legal significance depends on the specific mode of estafa and the facts; it is not a substitute for proving receipt, the nature of the obligation, conversion or deceit, and damage.

Send the demand through a method that proves both content and delivery, such as personal service with acknowledgment, registered mail, an accredited courier, or a verified electronic channel. Preserve the letter, attachments, tracking information, delivery receipt, and response. Do not threaten unlawful exposure, violence, or harassment.

Evidence to preserve

Create one secure folder containing the original electronic files and a separate working copy. Preserve:

The advertisement, listing, profile, page, URL, username, and account identifier;
Complete chats, emails, SMS messages, call logs, and voice messages;
Original photos, audio, video, contracts, proposals, invoices, receipts, and identification documents received;
Bank statements, transfer confirmations, deposit slips, reference numbers, QR codes, recipient names, account numbers, and timestamps;
Screenshots showing the full screen, date, account name, and relevant URL where possible;
Proof of what was promised and what induced the payment;
Proof of delivery, nondelivery, falsity, diversion, or refusal to return;
Written demands and proof of service;
The names and contact details of witnesses;
Bank, platform, police, and agency case numbers; and
A chronological narrative showing who said what, when, through which channel, and what happened next.

Do not crop away identifying details or edit the only copy. Export the complete conversation when the platform permits it. Keep the original device if possible, and back up evidence without resetting or reformatting it.

Avoid secretly accessing another person’s account, impersonating the suspect, installing spyware, or obtaining records through threats or deception. Investigators and courts can seek records through lawful processes.

Where to file the criminal complaint

The proper filing place depends on the offense, its prescribed penalty, and territorial jurisdiction.

Under Rule 110 of the Rules of Criminal Procedure, a criminal case is generally instituted and tried where the offense was committed or where any essential ingredient occurred. In a fraud case, relevant locations may include where the deceptive representation was made or received, where the victim relied on it, or where money or property was delivered. An online transfer does not automatically allow filing in any location chosen by the complainant.

For offenses requiring preliminary investigation, the complaint is ordinarily filed with the Office of the City or Provincial Prosecutor that has territorial jurisdiction. Rule 112 requires a complaint supported by the complainant’s and witnesses’ affidavits and the documents relied upon. The affidavits must be properly sworn.

A preliminary investigation is generally required when the prescribed penalty is at least four years, two months, and one day, without regard to the fine. For an offense below that threshold, a different procedure may apply, including filing with the prosecutor or the proper Municipal Trial Court. In Manila and other chartered cities, the applicable charter and procedural rules must also be considered.

The National Prosecution Service currently operates under the DOJ’s 2024 rules on preliminary investigations and inquest proceedings. Before filing, obtain the current checklist, number of copies, prescribed forms, and accepted filing method directly from the prosecutor’s office. Local administrative requirements may change, and an incomplete or unsworn submission can cause delay.

What the complaint-affidavit should establish

A useful complaint-affidavit is factual, chronological, and supported by identified exhibits. It should ordinarily state:

The complainant’s identity and contact information;
The respondent’s known name, address, account details, usernames, and other identifiers;
The exact representation, agreement, or basis on which money or property was delivered;
When, where, and through what means each material act occurred;
Why the representation was false, or why the respondent had a duty to deliver or return the property;
How the complainant relied on the representation;
The amount or property delivered and the resulting loss;
The respondent’s later acts, explanations, admissions, refusal, or failure to account;
Any demand and proof that it was received; and
A list of attached documents and witnesses.

State what you personally know and clearly identify information received from others. Do not exaggerate the amount, alter messages, hide unfavorable facts, or name people merely because they are related to or employed by the principal suspect. Criminal responsibility is personal and must be supported by evidence of participation.

Penalty thresholds under Article 315

Republic Act No. 10951 adjusted the monetary thresholds used in the penalty structure for estafa:

Amount of fraud	Article 315 penalty bracket
Not more than ₱40,000	Arresto mayor in its medium and maximum periods
More than ₱40,000 but not more than ₱1,200,000	Arresto mayor in its maximum period to prisión correccional in its minimum period
More than ₱1,200,000 but not more than ₱2,400,000	Prisión correccional in its minimum and medium periods
More than ₱2,400,000 but not more than ₱4,400,000	Prisión correccional in its maximum period to prisión mayor in its minimum period
More than ₱4,400,000	The statute applies the maximum period of the preceding bracket and adds one year for every additional ₱2,000,000, subject to the statutory 20-year ceiling

This table is only the basic Article 315 structure. The charging theory, date of the offense, applicable special laws, qualifying circumstances, and rules on complex crimes can change the analysis. If the conduct was committed through information and communications technology, Section 6 of the Cybercrime Prevention Act may also affect the penalty for a crime covered by that provision.

How recovery may be pursued

Recovery through the criminal case

Under Rule 111, the civil action to recover civil liability arising from the charged offense is generally deemed included when the criminal action is instituted, unless the offended party:

Waives it;
Reserves the right to file it separately; or
Filed the civil action before the criminal case.

A reservation must generally be made before the prosecution begins presenting evidence and under circumstances giving the offended party a reasonable opportunity to reserve. Discuss this decision with counsel before filing parallel cases; the timing rules can result in suspension, consolidation, unnecessary expense, or an unintended waiver.

Actual damages must be proved with competent evidence. A conviction does not itself locate assets or guarantee collection.

Provisional attachment

Rule 127 permits attachment in specified circumstances as security for a possible civil judgment, including certain claims involving embezzled, fraudulently misapplied, or converted money or property, an accused who is about to leave the Philippines, concealment or disposal of assets, or residence abroad.

Attachment is not automatic. It requires a proper application, factual and legal grounds, and compliance with procedural safeguards, which may include a bond. Seek legal assistance quickly if there is evidence that assets are being transferred or concealed.

A separate civil action

A civil case may be appropriate when the evidence supports breach of contract, collection of a sum of money, rescission, restitution, damages, or another civil cause of action—even if the evidence does not establish estafa beyond reasonable doubt.

The correct remedy depends on the documents and transaction. Claims based on a loan, sale, lease, or service agreement may fall within the Rules on Expedited Procedures or the small-claims process if their nature and amount meet the current requirements. Fraud-based and ownership disputes may require ordinary civil proceedings instead.

Do not seek double recovery for the same loss. Coordinate any civil filing with the criminal complaint and disclose related cases.

Claims against a financial institution

Complain first through the institution’s formal consumer-assistance mechanism. If unresolved, use the appropriate regulator’s current escalation process, such as the Bangko Sentral ng Pilipinas for BSP-supervised financial institutions.

A regulator’s consumer-assistance proceeding is different from a criminal complaint. It may address the institution’s handling of the disputed transaction but does not by itself prosecute the fraudster.

Other agencies that may be relevant

The correct regulator depends on the scheme:

Banks, e-wallets, remittance services, and other BSP-supervised institutions: Bangko Sentral ng Pilipinas
Online or technology-assisted fraud: PNP Anti-Cybercrime Group, NBI, or the DOJ Office of Cybercrime
Securities, unregistered investment solicitations, or investment entities: Securities and Exchange Commission
Consumer transactions involving a business: Department of Trade and Industry

An agency complaint may support regulatory action, but it may not replace the complaint-affidavit needed for criminal prosecution or the court action needed to obtain and enforce a civil judgment.

Deadlines and prescription

There is no single filing deadline for every fraud case. The prescriptive period depends on the offense actually established, the prescribed penalty, the date and manner of discovery, possible concealment, and which legally recognized filing interrupts prescription.

Article 91 of the Revised Penal Code generally addresses when prescription begins and how it is interrupted. Special laws may use different rules. Because choosing the wrong office or making only an informal report may not protect the claim, obtain case-specific advice promptly—especially if the transaction occurred years ago.

Separate civil claims have their own prescriptive periods, often determined by whether the claim is based on a written contract, oral contract, injury to rights, fraud, or another source of obligation. Do not delay while waiting for the bank, platform, or suspect to finish an informal review.

Common mistakes to avoid

Sending more money to “unlock” a refund or recovered funds;
Deleting the conversation after blocking the suspect;
Relying only on screenshots when original messages or export files remain available;
Posting accusations, personal data, or unverified identities publicly;
Filing in a convenient location without establishing territorial jurisdiction;
Treating every unpaid debt as criminal estafa;
Failing to explain the false representation or the legal duty to return entrusted property;
Naming account holders or company officers without evidence of knowing participation;
Signing an affidavit containing guesses, exaggerated losses, or facts supplied by someone else;
Accepting a partial payment or settlement without written terms addressing the balance and pending cases;
Paying supposed investigators, officials, or “hackers” who promise guaranteed recovery; and
Assuming that a police blotter, bank dispute, or regulator report has already commenced the criminal case.

When legal help is urgent

Seek a Philippine lawyer promptly when:

A substantial amount, family home, retirement fund, or business capital is involved;
The suspect is moving assets, closing accounts, or preparing to leave the country;
Several people, corporations, nominees, or recipient accounts participated;
The transaction crosses cities, provinces, or national borders;
Cryptocurrency, shell companies, investment solicitations, or forged titles are involved;
The prosecutor has issued a deadline or resolution;
You must decide whether to reserve or include the civil action;
You are considering attachment, an injunction, or another urgent court remedy;
The case may soon prescribe; or
The suspect, a collector, or another person is threatening or harassing you.

For those unable to afford private counsel, inquire with the Public Attorney’s Office about eligibility and available assistance.

Frequently asked questions

Can I file an estafa complaint if I know only the scammer’s username?

You may report the incident and provide every available identifier, including usernames, phone numbers, account numbers, URLs, transaction references, delivery addresses, and device or platform records. Investigators may use lawful processes to identify the person. A prosecutor will still need evidence linking a respondent to the acts charged.

Is a demand letter always required?

Not in every form of estafa. It can nevertheless be important evidence of the obligation, failure to account, conversion, or refusal to return property. The specific legal effect depends on the mode charged and the facts.

Does blocking me after payment prove estafa?

No. It may support an inference when considered with the entire transaction, but the prosecution must still establish all elements of the charged offense.

Can the bank reverse the transfer?

Sometimes, particularly if the report is immediate and funds remain available. A completed transfer cannot always be reversed without the recipient’s authority or a legal basis. Ask the institution to initiate its fraud-dispute and inter-institution verification procedures immediately.

Will filing a criminal complaint guarantee repayment?

No. The respondent may have no recoverable assets, funds may already have been dispersed, or the evidence may not establish the offense. Recovery also requires proof of loss and, after judgment, successful enforcement.

Can I file both criminal and civil cases?

Possibly, but Rule 111 controls whether the civil claim is included, reserved, previously filed, suspended, or consolidated. Obtain advice before pursuing parallel actions.

What if the suspect offers a settlement?

Require written terms identifying the parties, acknowledged amount, payment schedule, default consequences, and effect on pending complaints. Do not withdraw or execute a desistance merely on an oral promise or a postdated payment that has not cleared. A private settlement does not automatically extinguish the State’s authority to prosecute a public offense.

Is an online scam automatically a cybercrime?

Not necessarily. The underlying conduct may be estafa, another Revised Penal Code offense, an offense under the Anti-Financial Account Scamming Act, or a combination of laws. The use of information and communications technology may affect jurisdiction, investigation, or penalty, but the prosecution must still prove the elements of the underlying offense.

Official legal sources

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Jurisdiction, prescription, available remedies, and liability depend on the evidence and governing documents. Official sources and procedures were checked as of September 19, 2026.