Quick answer

If you suspect fraud or estafa, immediately contact the bank, e-wallet, card issuer, remittance company, or cryptocurrency platform that handled the payment and ask it to flag the transaction, preserve records, and attempt a hold, reversal, or recall. Then preserve the evidence and report the incident to the police, the National Bureau of Investigation, or the appropriate prosecutor’s office.

A failed transaction, unpaid debt, broken promise, or business loss is not automatically estafa. Criminal liability generally requires proof of the particular form of fraud defined in Article 315 of the Revised Penal Code—such as deceit used to obtain money or property, or fraudulent conversion of property received in trust—together with resulting damage. Recovery is possible through the civil liability attached to a criminal case, a separate civil action when legally available, settlement, or a combination of appropriate remedies. No agency can guarantee that transferred funds will still be recoverable.

Act immediately if money was just transferred

The first few hours can matter, especially when funds can be moved through several accounts.

Contact the sending institution. Use the official hotline or fraud channel of your bank, e-wallet, card issuer, remittance provider, or exchange. Ask for a case or reference number.
Contact the receiving institution if identifiable. Report the recipient account as connected to suspected fraud. Do not expect the institution to disclose confidential account information directly to you.
State exactly what happened. Identify the amount, date and time, transaction reference, recipient account, and reason you believe the transfer was induced by fraud. Do not exaggerate or describe an authorized payment as “unauthorized” if you personally approved it after being deceived.
Ask for preservation and recovery measures. Request preservation of account, transaction, device, access, and communication records and ask whether a recall, chargeback, dispute, temporary hold, or other recovery process is available. Eligibility depends on the payment method, the facts, and applicable rules.
Secure your accounts. Change compromised passwords, sign out other sessions, enable multi-factor authentication, block affected cards or SIMs, and notify your mobile provider if your number may have been taken over. Never disclose an OTP, PIN, password, recovery phrase, or remote-access code to someone claiming to help recover the money.

The Anti-Financial Account Scamming Act regulates prohibited acts involving financial accounts, social engineering schemes, and money-mule activity. It also provides mechanisms under which institutions may temporarily hold disputed funds in qualifying cases. Those protections are not an automatic refund, and their application depends on the institution’s investigation and the law’s requirements. See Republic Act No. 12010.

When suspected fraud may constitute estafa

Article 315 recognizes several forms of estafa. Two broad categories frequently arise in complaints.

Estafa through false pretenses or fraudulent acts

For the common form under Article 315(2)(a), the prosecution generally must establish that:

the accused made a qualifying false pretense or fraudulent representation;
the representation was made before or at the same time as the fraud;
the victim relied on it and was thereby induced to part with money or property; and
the victim suffered damage.

The Supreme Court applies these elements strictly. A later failure to perform ordinarily does not, by itself, prove that the accused used deceit at the beginning of the transaction. Evidence of what was represented before payment is therefore crucial. See the Supreme Court’s discussion in Gangan v. People, G.R. No. 239090.

Examples that may warrant investigation include fabricated investments, fictitious goods or property, false claims of authority or ownership, and impersonation used to obtain payment. Whether any example is actually estafa depends on the evidence satisfying every statutory element.

Estafa through abuse of confidence or conversion

Article 315(1)(b) may apply when money, goods, or other personal property was received in trust, on commission, for administration, or under an obligation to deliver or return it, and the recipient later misappropriated or converted it or denied receiving it, causing prejudice.

The precise agreement matters. An ordinary loan generally transfers ownership of the money to the borrower and creates an obligation to repay; nonpayment alone is not automatically criminal conversion. Courts examine the parties’ documents, the purpose for which the property was delivered, and whether there was a duty to return the same property or account for it.

A demand is often important evidence of conversion, non-accounting, or damage. Its legal necessity and form depend on the particular charge and facts.

Bad checks

A dishonored check can raise issues under Article 315(2)(d), Batas Pambansa Blg. 22, or both, but their elements differ. For estafa, the check generally must have been used as part of the deceit that induced the victim to part with money or property. A check issued only to pay an already-existing debt ordinarily does not supply the prior or simultaneous deceit required for that form of estafa.

BP 22 has separate requirements, including rules concerning dishonor and notice. Do not assume that a bounced check automatically establishes every element of either offense. Preserve the original check, deposit records, bank return slip, written notice of dishonor, and proof that the notice was actually received.

Not every unpaid obligation is a crime

The Constitution prohibits imprisonment for debt. Criminal law does not turn every unpaid loan, delayed refund, unsuccessful investment, breached contract, or defective purchase into estafa.

A matter may be primarily civil when the evidence shows only:

inability or refusal to pay an ordinary debt;
a later breach without proof of deceit when the agreement was made;
a genuine business failure;
a disagreement over contract terms or quality of performance; or
negligence without the fraudulent intent required by the charged offense.

Conversely, describing a transaction as a “loan,” “investment,” or “business deal” does not defeat criminal liability when admissible evidence proves the elements of fraud. The legal classification depends on what actually occurred, not merely the label placed on the documents.

Evidence to preserve

Keep original files and devices whenever possible. Make working copies, but do not edit, crop, annotate, or overwrite the originals.

Preserve:

contracts, receipts, invoices, acknowledgment receipts, promissory notes, checks, and demand letters;
transfer confirmations, transaction IDs, account numbers, QR codes, wallet addresses, and blockchain transaction hashes;
complete chat and email threads showing dates, account identifiers, and surrounding context;
advertisements, listings, websites, social-media profiles, usernames, and profile URLs;
recordings lawfully obtained, photographs, delivery records, and meeting details;
the exact representations that induced payment and evidence showing why they were false;
corporate, property, professional-license, or product claims that can be checked against official records;
names and contact details of witnesses and other victims;
bank statements and proof of the amount actually lost;
fraud reports, ticket numbers, and responses from financial institutions and platforms; and
a chronological account written while events remain fresh.

Export electronic conversations when the platform permits it. Take screenshots in addition to saving the underlying data, because accounts and messages may disappear. Record the date and method of collection and retain the device on which the communication was received. Electronic evidence must still be authenticated; a screenshot whose origin or integrity cannot be shown may receive less weight.

Do not hack an account, secretly obtain protected bank information, impersonate another person, or publish private identifying information in an attempt to investigate.

Where and how to report

Police or NBI

You may report to the Philippine National Police, including its Anti-Cybercrime Group when digital systems were involved, or to the National Bureau of Investigation. Use contact details obtained from the agencies’ official websites:

An initial police or NBI report can document the incident and begin investigation, but it is not necessarily the same as filing the complaint that will be evaluated for prosecution.

Prosecutor’s office

A criminal complaint is generally filed with the prosecution office that has territorial jurisdiction over the offense. Venue can be fact-sensitive: an offense may be prosecuted where it was committed or where an essential ingredient occurred. Online communications, remote payments, and victims and respondents in different locations can make venue more complicated.

Prepare a complaint-affidavit that clearly states:

who was involved;
what each person represented or did;
when and where each material act occurred;
why the representation was false or why the handling of entrusted property was fraudulent;
how you relied on the act;
how much you lost; and
what evidence supports each statement.

Attach legible, organized exhibits and identify witnesses with personal knowledge. An affidavit is sworn evidence: include material facts you can truthfully establish and distinguish personal knowledge from information received from others.

Under the 2024 DOJ-NPS Rules, preliminary investigation is generally required when the prescribed penalty is at least six years and one day, regardless of the fine. Prosecutors assess whether the available admissible, credible, and preservable evidence establishes a prima facie case with reasonable certainty of conviction. The precise procedure—including whether physical or electronic filing is accepted—should be confirmed with the prosecution office that will receive the complaint.

Online or ICT-enabled fraud

When an offense under the Revised Penal Code or a special law is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act may apply and can affect the penalty. It does not eliminate the need to prove the elements of the underlying offense. The statute also contains procedures for preservation, disclosure, and examination of computer data by authorized authorities. See Republic Act No. 10175.

Regulatory reports

A regulatory report may be appropriate in addition to—not necessarily instead of—a criminal complaint:

Report problems involving a bank or BSP-supervised financial institution through the institution’s own complaint process and, if unresolved, the Bangko Sentral ng Pilipinas consumer-assistance channels.
Report suspected unauthorized investment solicitation or securities activity to the Securities and Exchange Commission.
For deceptive consumer transactions within its jurisdiction, consult the Department of Trade and Industry consumer channels.

Jurisdiction depends on the respondent, product, and transaction. Filing with a regulator does not automatically commence a criminal case or recover the money.

What happens after a complaint is filed

Investigators may seek records, identify account holders, interview witnesses, and refer the case for prosecution. During preliminary investigation, the respondent is ordinarily given an opportunity to submit counter-evidence. The prosecutor then determines whether the evidentiary standard for filing an information in court has been met.

Under the 2024 DOJ-NPS Rules, the stated internal period for an investigating prosecutor to resolve a preliminary-investigation complaint is generally 60 calendar days from assignment, with a maximum 30-day extension in specified cases. Additional periods apply for approval and promulgation. These periods do not mean the entire criminal case will finish within that time.

An aggrieved party may generally file a motion for reconsideration within 15 days from receipt of the resolution. Review remedies depend on which prosecutor issued the resolution and which court would have jurisdiction over the offense. Because these deadlines are short and the applicable route can differ, obtain legal advice immediately upon receiving an adverse resolution.

Options for seeking recovery

Civil liability in the criminal case

Under Rule 111 of the Rules of Criminal Procedure, the civil action to recover liability arising from the charged offense is generally deemed instituted with the criminal action unless the offended party:

waives it;
reserves the right to file it separately; or
filed it before the criminal action.

Different rules apply to BP 22 cases: the corresponding civil action is deemed included, and reservation to file it separately is not allowed. Filing fees and procedural consequences can depend on the damages claimed.

A conviction may include restitution, reimbursement, or damages, but a favorable judgment does not guarantee collection. Recovery still depends on identifying reachable assets and enforcing the judgment. Read Rule 111 in the Rules of Criminal Procedure.

Separate civil action

Depending on the facts, a separate claim may arise from contract, fraud, abuse of rights, or another source of obligation. The proper cause of action, filing period, court, venue, and need for prior barangay proceedings depend on the documents and parties.

Do not file overlapping claims without advice. Once a criminal case begins, Rule 111 may prohibit or suspend a separate civil action arising from the same offense, although independent civil actions and claims based on other sources of obligation are treated differently. Double recovery for the same injury is not permitted.

Attachment and preservation of assets

In qualifying cases, a court may order preliminary attachment to secure property for a possible judgment. Rule 111 specifically recognizes attachment in certain criminal cases, including some involving fraudulently misapplied property, concealment or disposal of assets, an accused about to abscond, or an accused residing outside the Philippines.

Attachment is not automatic. It normally requires a proper application, sworn factual grounds, and a bond, and wrongful attachment can create liability. A lawyer should evaluate this urgently if assets are being transferred or hidden.

Settlement

Restitution or a documented settlement may recover funds faster than litigation, but use caution:

verify that payments have cleared before signing a release;
specify the amount, schedule, consequences of default, and treatment of the pending case;
do not accept another questionable check without safeguards;
understand that compromise does not automatically extinguish a public offense; and
do not agree to conceal evidence, mislead authorities, or make a false statement.

The effect of repayment on criminal liability or penalty depends on the offense, timing, and applicable law. It should not be assumed that repayment automatically ends an estafa case.

Deadlines and prescription

Do not delay. Criminal and civil claims have prescriptive periods, but the correct period depends on the exact offense, prescribed penalty, source of the civil obligation, accrual date, discovery rules, and legally effective interrupting acts. Demand letters, private negotiations, reports to a platform, and informal police entries do not necessarily have the same legal effect as filing the proper action or complaint.

Prompt action also protects evidence. Platforms may delete data, CCTV may be overwritten, witnesses may become unavailable, and funds may move beyond practical reach.

Common mistakes to avoid

Treating nonpayment alone as proof of criminal fraud.
Omitting the false statement that actually induced the payment.
Filing against every employee, director, relative, or account holder without evidence of personal participation.
Submitting cropped screenshots without account details, dates, or surrounding messages.
Deleting conversations after saving only selected images.
Sending money to supposed “recovery agents,” law-enforcement impostors, or persons demanding a release fee or tax.
Publicly accusing an identifiable person without adequate basis, creating possible defamation or privacy issues.
Threatening arrest solely to collect an ordinary debt.
Signing a quitclaim without understanding its scope.
Waiting for a regulator, platform, or bank to finish its process before checking prosecutorial and civil deadlines.
Assuming that an arrest will occur immediately after a report. Arrest ordinarily requires lawful grounds and process; a complaint is not proof of guilt.

When legal help is urgent

Consult a Philippine lawyer promptly when:

the loss is substantial or involves several victims;
funds or assets are being moved, sold, or concealed;
cryptocurrency, foreign accounts, or respondents abroad are involved;
the respondent used stolen identity information or compromised your accounts;
you need attachment, an injunction, or another time-sensitive court remedy;
the prosecutor dismissed the complaint or you received a resolution with a review deadline;
a criminal and civil case may overlap;
the transaction involves corporate officers, trustees, agents, entrusted property, or complex investment documents;
you are being pressured to sign a settlement or withdrawal; or
you have received threats or face an immediate risk of further loss.

The Public Attorney’s Office may assist persons who meet its legal and indigency requirements. Its official information is available from the Public Attorney’s Office.

Frequently asked questions

Can I file an estafa complaint if I do not know the scammer’s real name?

You may report the incident using the identifiers and evidence you possess, such as phone numbers, usernames, account details, wallet addresses, transaction records, and profile links. Authorities may use lawful processes to seek subscriber or financial records. Identification and attribution must still be supported by evidence before a person can properly be charged.

Is a demand letter required before filing?

Not in every form of estafa. A demand can nevertheless be important evidence, particularly in alleged misappropriation or failure to account for entrusted property. Some civil or barangay procedures may also require prior steps. The correct approach depends on the proposed charge and documents.

Can the bank simply return the money?

Not necessarily. A bank or payment provider must follow applicable law and its dispute procedures and cannot ordinarily take another customer’s money merely on an unsupported allegation. Fast reporting may improve the chance of locating or holding funds, but recovery is not guaranteed.

Does refunding the money erase estafa?

Not automatically. A crime, if already committed, is generally not erased merely by later repayment, although restitution may affect the civil claim and may have other legal consequences. The prosecution of a public offense is not controlled solely by the complainant.

Can I recover even if the accused is acquitted?

Possibly. The result depends on the wording and basis of the judgment and on the source of the claimed civil liability. Rule 111 states that extinction of the criminal action does not invariably extinguish the civil action. Civil liability arising from the offense is extinguished, however, when a final judgment finds that the act or omission from which it could arise did not exist. Separate liability based on contract or another legal source requires its own analysis.

Should I post the suspect’s identity online to warn others?

Give evidence to authorities and relevant platforms instead. Public accusations can compromise an investigation, expose personal information, encourage harassment, and create defamation or privacy risk—especially where identity is uncertain.

How severe is the penalty for estafa?

It depends on the statutory mode, the amount of fraud or damage, and potentially the use of information and communications technology. Republic Act No. 10951 adjusted the monetary thresholds in Article 315. Courts, not complainants or investigators, determine the proper charge and penalty. See Republic Act No. 10951.

Official legal sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. The correct remedy depends on the evidence, documents, location, amount, parties, and applicable procedural rules. Sources and procedures were checked as of September 16, 2026.