Quick answer

If you suspect fraud or estafa, act immediately: stop further payments, contact the bank or e-wallet through its official fraud channel, secure your accounts, preserve every record, and report the incident to law enforcement. A criminal complaint may be filed with the prosecutor’s office or, for investigation and assistance, with the Philippine National Police or National Bureau of Investigation. Online and account-based scams may also involve the Cybercrime Prevention Act or the Anti-Financial Account Scamming Act.

Recovery is possible, but reporting does not guarantee that money will be returned. The outcome depends on whether funds can still be traced or held, whether the suspect and assets can be identified, the quality of the evidence, and whether a criminal or civil claim succeeds. Do not wait for the scammer’s promises before notifying the financial institution and authorities.

What counts as estafa?

Article 315 of the Revised Penal Code punishes specified forms of swindling. Broadly, an estafa case requires fraud and resulting damage or prejudice. Common forms include:

Obtaining money or property through a material false representation made before or at the time of the transaction, when the victim relied on that representation.
Receiving money, goods, or other personal property in trust, on commission, for administration, or under an obligation to deliver or return it, and later misappropriating, converting, or denying receipt of it.
Defrauding another through certain fraudulent acts expressly covered by Article 315.

The exact statutory categories and amount-based penalties appear in Article 315 as amended by Republic Act No. 10951.

Calling conduct a “scam” does not automatically make it estafa. A failed investment, unpaid loan, broken promise, delayed delivery, or breach of contract may be only a civil dispute unless the required criminal intent and statutory acts can be proved. In false-pretenses cases, later nonperformance alone ordinarily does not establish that the accused already intended to deceive when the victim parted with money.

Conversely, a written contract does not automatically prevent criminal liability. Courts examine what was represented, when it was represented, why the victim transferred the money or property, and what the recipient was legally required to do with it.

First steps after discovering the fraud

1. Stop the loss

Do not send a “release fee,” “tax,” “verification payment,” or additional investment merely because the other person promises to return your money. Do not give an OTP, PIN, password, recovery code, remote-access permission, or screen-sharing access to anyone.

If an account may be compromised:

Change its password using a trusted device.
Sign out other sessions and remove unfamiliar devices.
Change the password of the connected email account.
Enable multi-factor authentication.
Block or replace affected cards and SIMs where appropriate.
Review recent transactions and linked accounts.

Use contact details shown on the institution’s official website or app—not numbers or links sent by the suspected scammer.

2. Notify the bank, e-wallet, card issuer, or remittance provider immediately

Ask the institution to:

Record the transaction as disputed or fraud-related.
Secure the sending account.
Check whether a transfer can be recalled, rejected, held, or traced.
Preserve transaction, device, login, and recipient-account records.
Give you a reference or case number and written confirmation of your report.

Do not assume that a transaction can be reversed. Transfers authorized by a victim after being deceived can raise different issues from transactions made without the account holder’s authority. The institution must investigate under the rules applicable to the account and transaction.

Republic Act No. 12010, the Anti-Financial Account Scamming Act, addresses financial accounts used in scams, including money-mule activity and social-engineering schemes. It permits regulated institutions, under prescribed conditions, to temporarily hold disputed funds involved in a questioned transaction. This makes prompt reporting especially important, but the law does not promise automatic reimbursement. The BSP publishes the law and implementing materials in its official AFASA booklet.

If the institution does not adequately address a complaint after you first use its complaints process, consult the BSP Consumer Assistance Mechanism for concerns involving BSP-supervised financial institutions.

3. Preserve evidence before accounts or messages disappear

Keep original electronic files whenever possible. Useful evidence may include:

The suspect’s name, aliases, photographs, usernames, profile links, telephone numbers, email addresses, and claimed business details.
Complete chat and email histories, including dates, times, voice messages, and attachments.
Screenshots showing the full screen, account name, URL, date, and time—not only cropped statements.
Advertisements, product listings, proposals, contracts, invoices, receipts, acknowledgments, and investment materials.
Bank statements, deposit slips, transfer confirmations, QR codes, card records, e-wallet receipts, transaction IDs, and recipient-account details.
Proof of cash delivery, courier records, CCTV availability, and the names and contact details of witnesses.
Recordings lawfully obtained by a participant to the communication, if applicable. Secretly intercepting communications to which you are not a party can create legal problems.
Demand letters, delivery receipts, returned mail, replies, admissions, excuses, and refund promises.
A chronological account showing every representation, payment, meeting, discovery, and report.

Export chats where the platform permits it. Back up the files in at least two secure locations. Do not edit originals. Prepare working copies for highlighting or annotation.

Avoid publicly posting unverified accusations, personal information, or account numbers. Public shaming can alert suspects, endanger an investigation, expose other victims’ data, or create separate legal disputes.

Where to report

Local police or a specialized investigative office

You may report to the local police. For internet-enabled or digital-account fraud, consider the PNP Anti-Cybercrime Group or the NBI, including its Cybercrime Division or Fraud and Financial Crimes Division. Regional and district offices may accept or assess complaints according to their jurisdiction and current procedures.

An investigative report is valuable, but it may not itself commence the prosecutor’s preliminary investigation or constitute the final criminal complaint required for prosecution. Ask which office will receive the complaint-affidavit and supporting documents.

If the fraud is ongoing, involves threats, identity theft, unauthorized account access, a coordinated scam network, or funds still moving through accounts, say so clearly at the start.

Office of the prosecutor

A criminal complaint is commonly initiated by filing a sworn complaint-affidavit and supporting affidavits and documents with the proper city or provincial prosecutor’s office. Venue depends on where the offense, or an essential element of it, occurred. Online communications, transfers, account locations, and the place where money was received can make venue fact-sensitive.

The prosecutor evaluates whether the evidence meets the governing standard for filing a criminal case. The current DOJ-NPS preliminary-investigation rules are in DOJ Department Circular No. 015, series of 2024. In 2026, the Supreme Court upheld the circular’s use of a “reasonable certainty of conviction” standard, while explaining the respective constitutional and procedural roles of prosecutors and courts. See the Supreme Court’s official announcement and decision materials.

Requirements can differ by office and case. Before filing, confirm the current number and format of copies, notarization requirements, accepted electronic media, and whether personal filing or another channel is available. Do not rely on social-media instructions.

Other agencies, depending on the scheme

A specialized regulator may have a separate complaint or enforcement role:

Report suspected unauthorized investment solicitation, securities fraud, or use of an unregistered investment entity to the Securities and Exchange Commission.
Consumer complaints about sellers or service providers may fall within the Department of Trade and Industry, although DTI proceedings are not a substitute for a criminal complaint.
Report misuse of personal data or a qualifying personal-data breach to the National Privacy Commission.
If a government employee or public transaction is involved, different offices and offenses may apply.

Filing with a regulator does not automatically file an estafa case. Keep the acknowledgment and reference number from every agency.

Preparing a strong complaint-affidavit

A useful complaint-affidavit is specific, chronological, and supported by identifiable exhibits. It should ordinarily state:

Who you are and how you can testify about the events.
Who the respondent is, including verified identifiers and addresses if known.
The exact representation, instruction, or obligation involved.
When, where, and through what channel it was made.
Why it was material and why you relied on it. .
What money or property you delivered, to whom, and how.
What happened afterward and how the deception or conversion was discovered.
The amount of actual loss and how it is calculated.
What demand or notice was made, if relevant, and the response.
What each attachment proves.

Label exhibits consistently. For a chat, identify the participants, account ownership, date range, and relevant passages. For a transfer, connect the transaction ID to the representation that caused the payment. If several victims or transactions are involved, provide a table and separate the proof for each.

State facts you personally know. Identify information supplied by someone else instead of presenting it as firsthand knowledge. Do not exaggerate the loss, alter screenshots, invent an address, or include a person merely because their account received funds; an account holder’s knowledge and participation may still need proof.

The respondent generally has an opportunity to answer during preliminary investigation. A prosecutor may dismiss a complaint if the evidence does not establish the elements of an offense, even when the complainant genuinely suffered a loss.

Is a demand letter required?

It depends on the alleged form of estafa and the evidence.

For misappropriation or conversion, a demand and the recipient’s failure to account may be persuasive evidence, but demand is not universally a statutory element in every estafa theory. In a false-pretenses case, the central questions usually concern the representation made before or at the transaction, reliance, and resulting damage.

A demand letter can still be useful because it:

Identifies the obligation and exact amount claimed.
Gives a deadline and payment instructions.
Creates proof of delivery and the recipient’s response.
May produce an admission, explanation, or settlement proposal.

A demand letter should not falsely claim that a criminal case has already been filed. Avoid threats unrelated to lawful enforcement. If assets may disappear or the suspect may flee, obtain legal advice before allowing a long payment period.

Routes for seeking recovery

Civil liability in the criminal case

Under Rule 111 of the Rules of Criminal Procedure, the civil action to recover civil liability arising from the offense is generally deemed instituted with the criminal action unless the offended party waives it, reserves the right to file it separately, or previously filed it. Special rules apply to the timing of a reservation, filing fees, and certain offenses.

Do not casually sign a waiver or accept language describing a payment as “full and final settlement.” A prosecutor represents the People in the criminal case; that role is not necessarily the same as acting as your personal civil lawyer.

A conviction can include restitution, reparation, or indemnification as permitted by law. Actual recovery still depends on enforceable assets and proper execution of the judgment.

A separate civil action

Depending on the facts, recovery may also be sought through a civil action based on contract, fraud, unjust enrichment, or another recognized cause of action. A civil claim can have different elements and a different burden of proof from a criminal prosecution.

Filing separately requires careful coordination with Rule 111. The criminal and civil proceedings may affect one another, and duplicative recovery is not allowed. Get legal advice before reserving, waiving, or separately filing the civil claim.

Small claims

A straightforward money claim within ₱1,000,000, exclusive of interest and costs, may qualify for the small-claims process in a first-level court if it falls within the categories covered by the Rules on Expedited Procedures. Small claims are designed for specified civil money demands and generally proceed without lawyers appearing for the parties at the hearing.

Not every fraud-related claim belongs in small claims. Disputed ownership, complex fraud, injunctive relief, attachment, multiple defendants, or a claim primarily for unliquidated damages may require a different action. The current forms and procedural materials are available through the Supreme Court’s small-claims resources.

Settlement and repayment arrangements

A settlement may produce faster recovery, but evaluate it carefully. A written agreement should identify:

The parties and verified addresses.
The acknowledged amount and payment schedule.
The account or method for payment.
Consequences of default.
Whether security or a guarantor is provided.
The effect, if any, on existing civil and criminal proceedings.
Whether the agreement is a compromise, acknowledgment of debt, novation, waiver, or full settlement.

Acceptance of partial payment does not automatically resolve every criminal or civil issue, but poorly drafted waivers, releases, affidavits of desistance, or novation terms can materially affect the case. An affidavit of desistance does not automatically require dismissal of a public offense, yet it may weaken the available evidence if the complainant is the principal witness.

Online fraud and other possible offenses

When information and communications technology is used, the conduct may also fall under the Cybercrime Prevention Act of 2012, depending on the acts proved. Possible issues include computer-related fraud, illegal access, identity theft, or an offense under the Revised Penal Code committed through ICT.

Where bank or e-wallet accounts are lent, sold, transferred, or used to receive and move scam proceeds, the Anti-Financial Account Scamming Act may apply. Do not agree to receive funds for a stranger, “rent” an account, surrender a SIM or verified e-wallet, or convert and forward money for a commission. A person may face investigation even if they were not the one who spoke directly to the victim.

Other laws may apply to bouncing checks, falsified documents, unauthorized investment-taking, syndicated schemes, or deceptive consumer transactions. The correct charge depends on the evidence; one incident can support more than one legal theory, but offenses should not be added merely as leverage.

Deadlines and delay

Do not postpone reporting. Several clocks may matter:

The prescriptive period for the criminal offense.
The prescriptive period for any civil action.
Deadlines in a bank, card, e-wallet, insurance, or platform dispute process.
The short practical window in which transferred funds may still be traceable or subject to a lawful hold.
Data-retention periods for CCTV, logs, messages, and platform records.

Under Articles 90 and 91 of the Revised Penal Code, prescription depends partly on the penalty assigned to the offense, and computation and interruption can depend on when the offense was discovered and when proceedings were instituted. Because the penalty for estafa varies with the proven mode and amount, there is no single safe deadline for every case. Online or special-law offenses may be governed by different rules.

A private demand or ongoing repayment negotiation should not be assumed to stop prescription. Have counsel calculate deadlines from the actual documents and dates.

Common mistakes that weaken a case

Continuing to pay after warning signs appear.
Deleting the conversation after blocking the scammer.
Submitting cropped screenshots without account identifiers or dates.
Relying only on a spreadsheet summary instead of source records.
Confusing an unpaid debt with proof of criminal deceit.
Failing to connect each transfer to a specific false representation or obligation.
Naming every employee, relative, or account holder without evidence of participation.
Filing in a location that has no connection to an essential element of the offense.
Exaggerating the amount by combining principal, expected profits, penalties, and emotional distress without explanation.
Waiting for informal promises while evidence and assets disappear.
Paying a supposed “fixer” who guarantees an arrest, conviction, or fund recovery.
Withdrawing or compromising a case without understanding the written terms.
Assuming that an arrest, prosecutor’s finding, or judgment automatically returns the money.

When legal help is urgent

Consult a Philippine lawyer promptly when:

The loss is substantial or involves many victims.
Funds or assets are being moved, concealed, sold, or transferred.
The respondent may leave the country.
You need to consider attachment, injunction, preservation orders, or other time-sensitive relief.
The transaction involves corporations, investment contracts, property titles, cryptocurrency, cross-border transfers, or several receiving accounts.
A prosecutor has dismissed the complaint or a review deadline is running.
You are being asked to sign a settlement, waiver, quitclaim, affidavit of desistance, or repayment agreement.
The complainant is elderly, a child, abroad, incapacitated, or at risk of retaliation.
You unknowingly received or forwarded suspected scam proceeds through your own account.
Police, prosecutors, banks, or platforms have requested access to a device containing privileged, intimate, or unrelated personal data.

Those unable to afford private counsel may ask the Public Attorney’s Office about eligibility and available assistance. Local Integrated Bar of the Philippines chapters and law-school legal-aid programs may also offer help, subject to their requirements.

Frequently asked questions

Can I file an estafa complaint if there was no written contract?

Possibly. Estafa can be proved through testimony and other competent evidence, including messages, receipts, transfers, advertisements, and conduct. A written contract is helpful but not always indispensable. The evidence must still establish every element of the particular form charged.

Is failure to repay a loan automatically estafa?

No. Nonpayment ordinarily creates civil liability. Criminal liability requires proof of the fraudulent conduct specified by law, not merely inability or refusal to pay. A knowingly false representation that induced the lender to release money may change the analysis.

Can I report even if I know only the recipient’s account number?

Yes. Give investigators and the financial institution every available identifier. An account number can be an investigative lead, but it does not by itself prove that the registered holder designed or knowingly joined the fraud.

Should I confront the suspect first?

Not if doing so may trigger destruction of evidence, further transfers, flight, threats, or retaliation. Preserve the communications and notify the financial institution and authorities. If a demand is appropriate, send it in a controlled and provable manner.

Will the bank automatically refund an online-scam transfer?

No. Liability depends on how the transaction occurred, what security measures and warnings were involved, what the customer and institution did, and the governing laws and account terms. Promptly dispute the transaction and obtain the institution’s written findings.

Can several victims file together?

They may coordinate evidence or file related complaints, but each victim should document their own representations, transfers, loss, and personal knowledge. Whether incidents form one case, several cases, or a syndicated or large-scale scheme is a legal determination based on the evidence and applicable law.

Can I recover expected investment profits?

Usually, the clearest starting point is the money or property actually delivered and not returned. Claims for promised returns, consequential loss, interest, or other damages require a legal and evidentiary basis and should not be treated as automatically recoverable.

Does an affidavit of desistance end the case?

Not automatically. A criminal offense is prosecuted in the name of the People, and the prosecutor or court decides the legal effect. However, desistance can seriously affect proof and may carry civil consequences. Obtain independent advice before signing.

Can I pursue both criminal charges and recovery?

Often yes, but the civil claim arising from the offense must be coordinated with Rule 111. A complainant cannot recover the same loss twice. The choice between joining the civil claim to the criminal case and filing separately should be made with advice based on the documents, assets, venue, and deadlines.

Official references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Estafa, cybercrime, venue, prescription, recovery, and procedural requirements depend on the particular representations, transactions, documents, and dates. Official sources and current procedures were checked as of September 14, 2026.