Quick answer
If you believe you were defrauded, act immediately: stop further payments, contact the bank or e-wallet involved, secure the account, preserve all evidence, and report the matter to the police or appropriate cybercrime unit. To pursue an estafa case, you will generally need a sworn complaint showing not merely that money was unpaid, but that the respondent used deceit or abused confidence and thereby caused you financial or property damage.
A criminal complaint can seek prosecution and may include a claim for civil liability, but neither filing nor conviction guarantees recovery. The money may already have been transferred, withdrawn, hidden, or spent. Prompt reporting improves the chance of tracing funds and preserving account, platform, CCTV, telecommunications, and other records.
When suspected fraud may be estafa
Estafa, or swindling, is punished under Article 315 of the Revised Penal Code. The law covers several distinct forms of fraud, including:
- Misappropriating or converting money or personal property received in trust, on commission, for administration, or under an obligation to deliver or return it;
- Denying receipt of property entrusted to the offender;
- Using specified false pretenses or fraudulent acts before or at the time the victim parts with money or property;
- Inducing someone through deceit to sign a document; and
- Certain fraudulent acts involving checks, gambling, or official records.
For estafa by false pretenses, the prosecution ordinarily must establish that:
- The accused made a false representation or committed a fraudulent act before or at the same time as the victim transferred money or property;
- The victim relied on that deception;
- Because of that reliance, the victim parted with money, property, or a valuable right; and
- The victim suffered damage capable of proof.
For estafa through abuse of confidence, the important questions include how the respondent received the property, whether there was a duty to deliver or return the same property, and whether the respondent misappropriated, converted, or denied receiving it.
The precise statutory acts and current value brackets appear in Article 315 as amended by Republic Act No. 10951.
Nonpayment or a failed deal is not automatically estafa
A broken promise, unpaid loan, delayed refund, failed investment, or breach of contract does not by itself prove estafa. Criminal fraud generally requires proof of the particular deceit or abuse of confidence defined by law.
Examples that require careful factual assessment include:
- A borrower who later becomes unable to pay;
- A seller who accepted payment but encountered a genuine supply problem;
- A business that failed after receiving investments;
- A contractor who abandoned incomplete work;
- A person who received money as a loan rather than in trust; and
- A disagreement over the quality, timing, or scope of promised services.
The case is stronger when contemporaneous evidence shows that material representations were false when made—for example, a fabricated identity, nonexistent property, falsified authority, imaginary transaction, fake proof of ownership, or deliberate concealment of a fact essential to the victim’s decision.
The distinction matters. Criminal proceedings should not be used merely to force payment of an ordinary debt. Depending on the documents and circumstances, the proper remedy may instead be collection of a sum of money, rescission, annulment, damages, enforcement of a contract, or another civil action.
If the fraud happened online
Online communication does not automatically make every scam “computer-related fraud.” Republic Act No. 10175 separately defines computer-related fraud involving unauthorized input, alteration, or deletion of computer data or interference with a computer system. It also provides that crimes under the Revised Penal Code committed by, through, and with information and communications technology are covered by the law, subject to the statute and controlling court decisions.
The National Bureau of Investigation and Philippine National Police are the designated law-enforcement authorities under the Cybercrime Prevention Act of 2012. An investigator or prosecutor must determine the correct charge from the actual conduct. Do not assume that use of Messenger, email, an online marketplace, or an e-wallet necessarily establishes every element of a cybercrime offense.
What to do immediately
1. Stop the loss and secure your accounts
Do not send an additional “release fee,” “verification payment,” “tax,” “refund charge,” or “recovery fee.” Fraudsters often demand another transfer after the victim asks for the money back.
If banking, card, or e-wallet details may have been compromised:
- Contact the provider through its official app, website, or hotline;
- Ask it to block or secure the affected account and unauthorized transactions;
- Request a trace, recall, freeze, or preservation of the recipient account and transaction records, if available;
- Obtain a complaint or reference number;
- Change passwords from a trusted device;
- Sign out other sessions and activate stronger authentication;
- Tell the provider if a SIM, device, OTP, PIN, or identity document was compromised; and
- Notify the receiving institution as well, when its verified fraud-reporting channel is available.
A provider may be unable to reverse a completed transaction, especially after withdrawal or onward transfer. Still, immediate notice can be important to any available tracing, fraud-control, dispute, or investigation process.
2. Preserve evidence before it disappears
Keep original electronic files whenever possible. Do not rely only on cropped screenshots.
Preserve:
- Full chat and email threads, including dates, times, usernames, profile links, email headers, and voice messages;
- Advertisements, listings, websites, domain names, social-media pages, and platform account identifiers;
- Bank statements, deposit slips, QR codes, transfer confirmations, reference numbers, receipts, and recipient account details;
- Contracts, invoices, purchase orders, acknowledgment receipts, promissory notes, checks, investment documents, and refund promises;
- Photographs or videos of meetings, goods, locations, IDs, business permits, and documents shown to you;
- Names and contact details of witnesses and other victims;
- Delivery records, call logs, CCTV information, and device details;
- Your written demands and the respondent’s replies; and
- A chronological account stating what was represented, when you relied on it, what you transferred, and what happened afterward.
Export chats where the platform permits it. Save copies in more than one secure location and retain the device on which the communications were received. Avoid editing files or annotating the only copy. Investigators may need the original device or metadata to authenticate electronic evidence.
3. Report the incident promptly
You may report the matter to the nearest police station. For an online or technology-enabled scheme, you may approach the PNP’s cybercrime unit or the NBI’s cybercrime investigators. Bring identification, a clear chronology, transaction records, and organized copies of your evidence.
A police blotter or initial incident report documents the report but is not necessarily the same as filing the sworn complaint needed for prosecution. Ask what further affidavits, certifications, electronic evidence, or referral to the prosecutor’s office are required.
If there is an immediate threat, continuing unauthorized access, active withdrawal of funds, destruction of evidence, flight risk, or ongoing victimization, tell law enforcement clearly and without exaggeration.
4. Prepare the criminal complaint carefully
Under the Rules of Criminal Procedure, a complaint is a sworn written statement charging a person with an offense. For preliminary investigation, the complaint should state the respondent’s address, if known, and be accompanied by the complainant’s and witnesses’ affidavits and supporting documents.
The affidavit should tell the story in chronological, factual terms:
- Who made each representation;
- The exact substance of the representation;
- Why it was false;
- When and where it was made;
- How you relied on it;
- What money or property you transferred;
- Where and how the transfer occurred;
- What obligation the respondent assumed;
- What the respondent later did; and
- How much actual loss resulted.
Avoid conclusory statements such as “the respondent is a scammer” without supporting facts. Identify each participant’s role rather than treating every person associated with the transaction as automatically criminally liable.
A preliminary investigation is required when the prescribed penalty meets the threshold in Rule 112—at least four years, two months, and one day, without regard to the fine. The investigating prosecutor determines whether the evidence supports a well-founded belief that a crime was committed and that the respondent is probably guilty and should stand trial. The governing procedure appears in Rules 110 to 127 of the Rules of Criminal Procedure.
5. File in the proper place
As a general rule, a criminal case must be instituted and tried where the offense was committed or where any essential ingredient occurred. In a fraud case, relevant places may include where the deceit was communicated, where reliance occurred, or where money or property was delivered. Online and multi-location transactions can create difficult venue questions, so confirm venue with the prosecutor or counsel before filing.
Barangay conciliation may be a precondition only when the dispute falls within the lupon’s authority. The rules depend on the parties’ actual residences, the nature of the dispute, and statutory exclusions. Among the exclusions are offenses punishable by imprisonment exceeding one year or a fine exceeding ₱5,000. Direct filing is also allowed in specified urgent situations, including when delay could cause prescription or when an action is coupled with certain provisional remedies. See Sections 408 and 412 of the Local Government Code.
Because the applicable estafa penalty depends on the amount and mode charged, do not assume that barangay proceedings are always required—or always unnecessary.
Seeking recovery of the money or property
Civil liability in the criminal case
When a criminal action is instituted, the civil action to recover civil liability arising from the offense is generally deemed included unless the offended party:
- Waives it;
- Reserves the right to file it separately; or
- Filed the civil action before the criminal case.
A reservation must ordinarily be made before the prosecution begins presenting evidence and while there is a reasonable opportunity to reserve. The civil claim may include properly proved restitution, return of property, actual loss, and other damages allowed by law.
Do not casually sign a waiver, quitclaim, desistance, settlement, or reservation. Its effect can depend on its wording, timing, consideration, and the source of the civil obligation.
A separate civil action
A civil case may be appropriate when the evidence supports a debt or contractual claim but not criminal deceit, or when another civil remedy offers a better route to judgment and enforcement. The correct action may depend on whether the transaction involved a loan, sale, agency, trust arrangement, service contract, investment, negotiable instrument, or unauthorized transaction.
A judgment is not the same as actual collection. Enforcement may require locating attachable property, bank funds, income, receivables, or other assets. If assets are being transferred or concealed, a lawyer should promptly assess whether a provisional remedy such as attachment is legally available. Such remedies require specific grounds, supporting evidence, procedural compliance, and usually a bond.
For qualifying civil money claims not exceeding the current small-claims ceiling, the small-claims procedure may offer a simplified route. Whether it fits depends on the nature of the claim, the defendant, the requested relief, and the latest Supreme Court rules—not simply on the amount lost.
Settlement and repayment
A genuine settlement may produce faster recovery, but it should be documented carefully. A written agreement should identify:
- The parties and verified addresses;
- The acknowledged amount or property;
- Exact payment dates and method;
- Consequences of default;
- Treatment of partial payments;
- Any security or guaranty;
- The scope and timing of any release or waiver; and
- Who bears costs and lawful interest, if applicable.
Do not withdraw a complaint or surrender original evidence merely in exchange for an unsupported promise. Confirm that funds have cleared. Criminal liability is prosecuted in the name of the People of the Philippines; a private settlement or affidavit of desistance does not automatically require dismissal, although it may affect the evidence or civil aspect.
Deadlines and prescription
Do not wait for the respondent’s repeated promises to expire.
The prescription period for estafa is not one universal number. It depends on the statutory penalty applicable to the charged mode and amount, the date the offense was committed or discovered, whether the offense was concealed, and what legally interrupted prescription. The institution of the criminal action generally interrupts prescription under Rule 110, subject to special laws and controlling jurisprudence.
Civil claims have separate limitation periods based on the source of the obligation and relief sought. Written contracts, oral contracts, injury to rights, fraud-based actions, and actions to annul a contract may have different periods and different starting points.
Barangay proceedings interrupt prescription only within the limits set by the Local Government Code; Section 410 states that the interruption cannot exceed 60 days from filing with the punong barangay.
Have a lawyer or prosecutor calculate the deadline from the original documents and exact dates. A demand letter, police report, platform complaint, or private negotiation should not be assumed to stop every applicable period.
Common mistakes to avoid
- Treating every unpaid obligation as estafa;
- Deleting chats after taking screenshots;
- Sending more money to unlock a supposed refund;
- Waiting months because the respondent keeps promising payment;
- Posting accusations, private data, or unverified identities publicly;
- Threatening violence or making unlawful demands;
- Filing in the wrong city or municipality;
- Submitting altered, incomplete, or misleading evidence;
- Naming account holders as conspirators without evidence of knowing participation;
- Signing a broad waiver without understanding its effect;
- Assuming that a police blotter alone starts the criminal case;
- Assuming that a guilty verdict automatically returns the money; and
- Paying a private “recovery agent” who guarantees arrest, account access, or fund retrieval.
When legal help is urgent
Seek prompt assistance from a Philippine lawyer, the Public Attorney’s Office if you qualify, or another authorized legal-aid provider when:
- The amount is substantial or several victims are involved;
- Funds are still moving through identifiable accounts;
- Assets appear to be disappearing or transferred to other people;
- The respondent is abroad, uses false identities, or cannot be located;
- Corporate officers, agents, nominees, or multiple accounts are involved;
- You received a subpoena, counter-affidavit, resolution, or court notice;
- A dismissal, review, appeal, or prescription deadline may be approaching;
- You are considering attachment or another provisional remedy;
- The transaction involves investments, securities, insurance, real estate, public funds, or regulated financial institutions;
- The respondent is threatening, blackmailing, stalking, or retaliating; or
- You are being asked to sign a settlement, quitclaim, or affidavit of desistance.
Frequently asked questions
Can I file estafa if I know only the recipient’s account name?
You may report the incident and provide every available identifier, but a prosecution requires evidence identifying the responsible person and connecting that person to the criminal acts. The named account holder may be the offender, an accomplice, an unwitting recipient, or a person whose account or identity was misused. Investigators must establish the connection.
Must I send a demand letter first?
Not in every form of estafa. A demand can be important evidence, particularly where it helps show failure to account for or return entrusted property, but it cannot create criminal fraud where the statutory elements are absent. Its necessity and wording depend on the theory of the case.
Is an affidavit of desistance enough to dismiss the case?
Not automatically. Once a criminal case is pursued, the State controls the prosecution. A desistance may be considered, but the prosecutor or court must evaluate the evidence and applicable law.
Can I recover through both a criminal and civil case?
Potentially, but double recovery for the same loss is not allowed. Rule 111 also governs when a separate civil action may be filed, reserved, consolidated, or suspended. Obtain advice before choosing or changing remedies.
What if the scam used a bounced check?
A bounced check may raise issues under Article 315, Batas Pambansa Blg. 22, civil law, or a combination of these, but their elements and notice requirements differ. A check issued for a pre-existing debt does not automatically establish deceit under estafa. Preserve the original check, bank return slip, written notice of dishonor, and proof of receipt.
Can several victims file together?
Victims should coordinate evidence, but each transaction may involve different representations, dates, losses, venues, and respondents. Prosecutors determine whether complaints or charges may properly be joined. Each victim should prepare a personal affidavit and proof of payment rather than relying only on a group narrative.
Does reporting guarantee that the bank will return the funds?
No. Reporting may support blocking, tracing, investigation, or an internal dispute process, but recovery depends on factors such as timing, authorization, available balances, provider rules, evidence, and lawful orders.
Should I confront the suspected offender?
Only if it is safe and lawful. A written, factual demand may preserve useful evidence, but do not warn someone in a way that endangers you or facilitates destruction of evidence or flight. In urgent cases, speak to law enforcement or counsel first.
Official legal references
- Republic Act No. 10951—current Article 315 value brackets and penalties
- Revised Rules of Criminal Procedure—Rules 110, 111, and 112
- Republic Act No. 10175—Cybercrime Prevention Act of 2012
- Republic Act No. 7160—barangay conciliation provisions
- Supreme Court of the Philippines
- Department of Justice
- Philippine National Police
- National Bureau of Investigation
- Bangko Sentral ng Pilipinas
This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Charges, venue, prescription, procedure, and recovery options depend on the evidence and documents. Official sources were checked as of 21 September 2026.