Quick answer

To file an estafa or fraud complaint in the Philippines:

Immediately notify your bank, e-wallet, payment platform, or card issuer if money was transferred or an account was compromised.
Preserve the original messages, transaction records, account details, advertisements, contracts, receipts, checks, and other evidence.
Report the incident to the Philippine National Police or National Bureau of Investigation—particularly their cybercrime or fraud unit if technology was involved.
Prepare a sworn complaint-affidavit explaining, in chronological order, what the respondent represented or promised, why you relied on it, what you delivered or paid, and how you suffered loss.
File the complaint and supporting evidence with the Office of the City or Provincial Prosecutor that has territorial jurisdiction.

A police or NBI report can support an investigation, especially when the offender’s identity is uncertain, but it is not necessarily the formal criminal complaint that starts prosecution. The prosecutor—not the complainant—ultimately determines the proper charge and whether the evidence justifies filing an Information in court.

Act quickly. Banks and financial institutions may be able to trace or temporarily hold disputed funds, while platforms may retain transaction or account data only for limited periods. Criminal offenses also have prescriptive periods that vary according to the precise offense, penalty, amount involved, date of discovery, and applicable special law.

First confirm whether the facts may constitute estafa

“Fraud” is a broad description, not a single criminal charge. Ordinary estafa is principally governed by Article 315 of the Revised Penal Code, as amended by Republic Act No. 10951.

Two frequently encountered forms are:

Estafa by false pretenses or fraudulent representations

This generally requires proof that:

the respondent made a false pretense or fraudulent representation about matters such as their power, qualifications, property, credit, agency, business, or an imaginary transaction;
the false representation was made before or at the same time as the victim parted with money or property;
the victim actually relied on it; and
the reliance caused damage.

The Supreme Court has emphasized these elements in cases such as Dy v. People.

The timing matters. A broken promise, unpaid debt, failed investment, delayed delivery, or unsuccessful business venture is not automatically estafa. For deceit-based estafa, the prosecution ordinarily must show that the fraudulent representation existed when the victim was induced to part with money or property—not merely that the respondent failed to perform later.

Estafa through misappropriation or conversion

This generally involves money, goods, or personal property received:

in trust;
on commission;
for administration; or
under another obligation requiring delivery or return of the same property.

The prosecution must connect the receipt of the property to its misappropriation, conversion, or denial of receipt, resulting prejudice, and the required demand. The Supreme Court discusses these elements in Quilatan v. People.

A simple loan is not necessarily estafa through misappropriation. If ownership of the money passed to the borrower and the obligation was merely to repay an equivalent amount, nonpayment may remain a civil breach unless separate criminal elements can be proved.

A demand may be oral in some cases, but a written demand with proof of receipt is usually much easier to establish. It should accurately state the transaction, property or amount involved, obligation to deliver or return it, and reasonable deadline for compliance. Do not exaggerate, threaten unlawful action, or claim facts you cannot prove.

Other offenses may apply

The facts may support another or an additional offense, including:

violation of Batas Pambansa Blg. 22 for a dishonored check;
computer-related fraud, identity theft, or another offense under the Cybercrime Prevention Act;
an offense under the Anti-Financial Account Scamming Act;
falsification;
syndicated estafa under a special law;
illegal recruitment, securities violations, investment fraud, or another regulated activity; or
a civil action for collection, rescission, restitution, or damages.

A dishonored check does not automatically establish estafa. For check-based estafa, the check generally must have induced the victim to give value at the time the obligation was contracted. A check issued only to pay a pre-existing debt ordinarily does not supply that inducement, although Batas Pambansa Blg. 22 may still require separate evaluation.

When estafa or another Revised Penal Code offense is committed through information and communications technology, Section 6 of Republic Act No. 10175 may raise the applicable penalty by one degree. That can affect jurisdiction, procedure, prescription, and potential exposure.

For schemes involving bank accounts, e-wallets, money mules, social engineering, account takeovers, or the sale or use of financial accounts, Republic Act No. 12010, the Anti-Financial Account Scamming Act, may also be relevant. Let investigators and prosecutors determine the correct legal characterization from the facts.

What to do immediately after discovering the fraud

Contact every financial institution involved

Call the official fraud hotline of your bank, e-wallet, remittance company, card issuer, or payment platform. Do not use a phone number or link supplied by the suspected scammer.

Ask the institution to:

mark the transaction as disputed;
attempt recall, reversal, or preservation of the funds;
secure the recipient or destination-account details;
preserve transaction and access logs;
disable compromised access where appropriate; and
provide a complaint or reference number.

Under the Anti-Financial Account Scamming Act, covered institutions have authority—subject to Bangko Sentral ng Pilipinas rules—to temporarily hold funds involved in a disputed transaction. The statutory period may not exceed 30 calendar days unless extended by a competent court. A hold or recovery is not automatic, so reporting within minutes or hours can matter.

If credentials, one-time passwords, identification documents, or a SIM were exposed, change passwords from a trusted device, revoke active sessions, contact the relevant telecommunications provider, and secure linked email and financial accounts.

Do not continue negotiating through unsafe channels

Stop sending money, including supposed “taxes,” “unlocking fees,” “verification deposits,” or “recovery charges.” Fraudsters often demand additional payments after the victim has already transferred funds.

Do not hack the suspect’s account, impersonate another person, publicly disclose private data, or arrange a confrontation. These actions can create safety risks, compromise evidence, or expose you to liability.

Evidence to preserve

Preserve evidence in its original form whenever possible. A useful case file normally includes:

your valid identification and current contact details;
the respondent’s name, aliases, addresses, phone numbers, email addresses, usernames, profile links, account numbers, wallet addresses, and identification documents, if lawfully obtained;
the advertisement, listing, proposal, investment presentation, product page, or job offer;
the complete conversation, including messages before payment and after demand;
contracts, acknowledgment receipts, invoices, delivery records, official receipts, purchase orders, trust receipts, consignment documents, or loan documents;
deposit slips, bank statements, transfer confirmations, reference numbers, QR codes, e-wallet histories, card records, cryptocurrency transaction hashes, and destination-wallet information;
copies of checks, deposit records, bank return slips, and notices of dishonor;
recordings or photographs lawfully made or obtained;
written demands and proof of delivery or receipt;
platform, bank, police, or NBI complaint reference numbers;
names and contact information of witnesses; and
a calculation of the actual amount lost.

For digital evidence:

export or download conversations if the platform permits it;
retain the original phone, computer, email, and accounts;
take screenshots showing the username, date, time, URL, and surrounding conversation;
do not crop away identifying details;
save webpages as PDF where possible;
record when and how each file was obtained;
keep untouched originals and make working copies; and
back up the evidence securely.

Screenshots are useful but may not be sufficient by themselves. The prosecutor may need evidence linking the online account to an identifiable person and linking that person to the transaction. Bank records, subscriber information, platform records, IP or device evidence, witness testimony, admissions, and properly obtained digital-forensic evidence can become important.

Do not alter messages, fabricate missing conversations, or submit misleadingly edited media. The current prosecutorial standard considers whether evidence is admissible, credible, and capable of preservation and presentation at trial.

Where to report the incident

Philippine National Police

A local police station may receive the report and refer it to the appropriate investigative unit. For internet-enabled fraud, request assistance from the PNP’s cybercrime unit.

A police blotter records a report; it does not by itself prove the allegation or guarantee that a criminal case has been filed with the prosecutor.

National Bureau of Investigation

The NBI has fraud and cybercrime investigative units. Its current official services include:

investigative assistance for victims of computer crimes;
investigative assistance for victims of fraud; and
the NBI’s online complaint page.

An NBI complaint is especially useful when the respondent is unknown, several victims or jurisdictions are involved, technical tracing is necessary, or the scheme appears organized. Confirm any appointment, submission channel, and documentary requirements directly with the NBI.

The appropriate regulatory agency

Depending on the scheme, also consider reporting it to the regulator responsible for the institution or activity—for example, the Bangko Sentral ng Pilipinas, Securities and Exchange Commission, Insurance Commission, Department of Migrant Workers, or another agency. A regulatory complaint may help stop ongoing activity, but it does not necessarily replace a criminal complaint before the prosecutor.

Choose the correct prosecution office

Ordinarily, file with the Office of the City Prosecutor or Provincial Prosecutor for the place where the offense was committed or where an essential ingredient occurred. Under Rule 110, Section 15 of the Rules of Criminal Procedure, territorial venue in a criminal case is jurisdictional.

Do not assume that you may file wherever you currently live. For estafa, relevant locations may include where:

the false representation was made or received;
the victim relied on it;
money or property was delivered;
entrusted property was received or converted; or
the resulting damage legally occurred.

Online transfers, communications across several cities, foreign respondents, and multiple victims can create difficult venue questions. Identify every relevant location in the complaint-affidavit and obtain legal advice before filing if venue is uncertain.

Prepare the complaint-affidavit

A complaint is a sworn written statement charging a person with an offense. The complaint-affidavit should be factual, chronological, and supported by identified attachments.

Include:

Your full name, address, and contact details.
The respondent’s full name and last known address, plus aliases and online identifiers.
How you came into contact with the respondent.
Each material representation, promise, or entrustment, including dates and method of communication.
Why the representation was false or how the entrusted property was converted.
What you did in reliance on the representation.
The amount or property delivered, with transaction details.
The damage suffered.
Demands made and the respondent’s response.
How each witness or attachment supports the allegations.
The places where the essential acts occurred.
A request that the respondent be prosecuted for the offense or offenses supported by the evidence.

Use numbered paragraphs. Mark attachments consistently—for example, “Annex A,” “Annex B,” and so on—and refer to each annex in the paragraph it supports.

State facts within your personal knowledge. If information came from another person, identify the source and submit that person’s affidavit where possible. Avoid legal conclusions unsupported by facts, speculation about the respondent’s motive, and sweeping accusations against people whose participation you cannot establish.

The affidavit must be subscribed and sworn before a prosecutor or another government official authorized to administer oaths, or, when permitted, a notary public. Do not sign it in advance if the administering officer requires execution in their presence.

Filing requirements

Requirements can vary by prosecution office and by the applicable investigation track. Contact the receiving office before filing.

Under the current DOJ-NPS framework, a regular preliminary-investigation filing generally includes:

the original complaint-affidavit;
two duplicate copies for the official file;
an additional copy for each respondent;
affidavits of witnesses;
legible copies of all supporting evidence; and
the completed NPS Investigation Data Form.

The DOJ provides the NPS Investigation Data Form and other official forms. Bring the original documents for comparison if requested, but keep your own secured copies. Ask for a stamped receiving copy and the NPS docket number.

The DOJ’s older public checklist may display different copy counts. The applicable 2024 DOJ-NPS rules and the receiving prosecution office’s current instructions should therefore be confirmed before submission.

Electronic filing and virtual hearings may be authorized as alternatives, but do not assume that an ordinary email constitutes a valid filing. Use only an official channel designated by the prosecution office and comply with any order requiring hard copies, verified declarations, or later submission of originals.

What happens after filing

The procedure depends on the penalty prescribed for the offense, not simply on the label “estafa.” The amount involved, mode of commission, use of technology, and applicable special laws may change the penalty and therefore the investigation track.

Current DOJ rules generally distinguish:

Summary investigation: for offenses punishable by one day to one year, a fine regardless of amount, or both. This is generally an ex parte evaluation of the complainant’s evidence.
Expedited preliminary investigation: for offenses punishable by one year and one day to six years and falling within first-level-court jurisdiction.
Regular preliminary investigation: generally for offenses carrying at least six years and one day, and for certain cases made cognizable by law in the Regional Trial Court.

For regular preliminary investigations under DOJ Department Circular No. 015, series of 2024:

the prosecution-office head first checks the complaint’s form and whether the evidence is complete;
the investigating prosecutor may recommend dismissal or issue subpoenas;
the respondent is ordinarily directed to submit a counter-affidavit;
the prosecutor may conduct a physical or virtual clarificatory hearing;
a reply-affidavit and rejoinder-affidavit may be permitted when necessary; and
the case is resolved on the submitted evidence.

The applicable DOJ standard is prima facie evidence with reasonable certainty of conviction. The evidence must be capable of establishing every element of the offense and the identity of the responsible person, and it must be admissible, credible, preservable, and capable of presentation at trial. The Supreme Court recognized the DOJ’s authority to issue these rules in A.M. No. 24-02-09-SC.

Filing does not mean that the respondent is guilty. The prosecutor may dismiss the complaint, require further evidence, or find sufficient basis to file an Information in court. The trial judge independently determines judicial probable cause for purposes such as issuing a warrant or summons.

Deadlines during the investigation

Read every subpoena and order immediately. Calendar the date of actual receipt.

In a regular preliminary investigation:

the respondent’s hearing must ordinarily allow at least 10 days from receipt of the subpoena and complaint;
a clarificatory hearing, when needed, may be set within 10 calendar days from receipt of the counter-affidavit; and
a required reply-affidavit or rejoinder-affidavit generally must be filed within 10 calendar days from receipt of the pleading being answered.

These are procedural periods under the current DOJ rules and may be affected by the specific order, authorized extensions, office closures, service issues, or special rules. Follow the written directive in the particular case.

A party adversely affected by a prosecutor’s resolution may have an administrative remedy, such as a motion for reconsideration or petition for review, subject to strict requirements and periods. Obtain the complete resolution, proof of receipt, and case record immediately. Do not rely on informal advice about appeal deadlines.

Criminal liability and recovery of money are related but distinct

When a criminal action is instituted, the civil action to recover civil liability arising from the offense is generally deemed included unless it is waived, reserved for separate filing, or was previously filed, subject to the Rules of Criminal Procedure.

However:

a criminal complaint is not a debt-collection shortcut;
dismissal or acquittal may have different effects depending on the stated ground and source of the civil obligation;
recovery may require tracing, preservation, attachment, or a separate civil remedy; and
there can be no double recovery for the same loss.

If recovery is the main concern—especially when the respondent is disposing of assets—consult counsel promptly about civil remedies and preservation measures. Do not casually sign an affidavit of desistance, waiver, quitclaim, or settlement without understanding its legal effect.

Common filing mistakes

Treating nonpayment as automatic estafa

A person’s inability or refusal to pay does not, by itself, prove deceit or criminal conversion. Explain and prove the facts existing when the money or property was obtained.

Submitting only selected screenshots

A cropped exchange may omit context, dates, account identifiers, or admissions. Preserve the complete conversation and the original device or account.

Failing to identify the respondent

A profile name, phone number, or receiving account does not automatically prove who operated it. Give investigators every lawful tracing lead and avoid accusing the named account owner unless the evidence supports their participation.

Using the wrong venue

A complaint filed in a place with no connection to an essential ingredient of the offense may fail for lack of territorial jurisdiction.

Omitting proof of reliance and damage

For deceit-based estafa, clearly connect the false representation to your decision to part with money or property. Document the exact loss.

Combining unrelated transactions without explanation

Separate each transaction by date, amount, representation, payment channel, and respondent. Explain whether the acts formed one scheme or distinct incidents.

Ignoring demands and proof of receipt

Where demand is material, preserve the demand itself and reliable evidence that it was received. An unverified screenshot marked “sent” may be disputed.

Waiting for the scammer to disappear

Delay can reduce the chance of freezing funds, obtaining platform data, locating witnesses, or filing before prescription becomes an issue.

Paying unofficial “fixers”

File only through official government channels. A legitimate officer should not ask you to transfer money to a personal account to “open,” “prioritize,” or guarantee a case.

When legal help is urgent

Consult a Philippine lawyer promptly when:

the amount is substantial;
the prescriptive period may be near;
the respondent or assets may leave the country;
funds are still traceable or capable of being held;
several victims, respondents, companies, or jurisdictions are involved;
cryptocurrency or foreign accounts were used;
the transaction may be partly civil and partly criminal;
the respondent is a corporation, public officer, regulated professional, or child;
you need attachment, an injunction, a cybercrime warrant, or another court order;
the prosecutor dismissed the complaint or issued an adverse resolution;
you are being threatened, blackmailed, or pressured to withdraw; or
you are asked to sign a settlement, waiver, quitclaim, or affidavit of desistance.

If you cannot afford private counsel, ask the Public Attorney’s Office or an accredited legal-aid office whether you meet its requirements. Threats to life or immediate safety should be reported to emergency and police authorities at once.

Frequently asked questions

Can I file even if I know only the scammer’s username or account number?

You may report the incident and seek investigation, but a criminal case requires evidence identifying the responsible person. Give the PNP, NBI, bank, e-wallet, or platform all available identifiers. Do not guess the respondent’s identity in a sworn affidavit.

Do I need a lawyer to file?

A lawyer is not always legally required to submit a complaint-affidavit. Legal assistance is nevertheless valuable when the facts, venue, evidence, amount, or possible offenses are complicated.

Can I file directly with the prosecutor without first going to the police?

Generally, yes, if you can identify the respondent and submit a sufficient sworn complaint with supporting evidence. Police or NBI investigation may still be necessary for tracing, interviews, digital evidence, or an unknown offender.

Is a police blotter enough?

No. It records the report but does not itself establish the elements of estafa or necessarily commence prosecutorial proceedings.

Can an online complaint replace the prosecutor filing?

Not automatically. An online report to the NBI, police, bank, platform, or regulator may begin assistance or investigation. A valid prosecutorial filing must comply with the designated office’s rules and official filing channel.

What if the respondent refunds the money?

A refund may affect damage, settlement, civil liability, and prosecutorial decisions, but it does not automatically erase a crime already committed. The effect depends on the offense, timing, agreement, and complete facts. Document all payments and obtain legal advice before withdrawing or signing anything.

Can I post the respondent’s identity on social media?

Public accusations can create defamation, privacy, safety, and evidentiary risks. Report through official channels and disclose information only when lawful and necessary.

How long will the case take?

No responsible estimate can be given without knowing the investigation track, number of parties, completeness of evidence, service of subpoenas, motions, review proceedings, and court workload. Obtain the docket number and monitor official notices.

Is there a minimum amount for estafa?

Article 315 uses the amount of fraud to determine the penalty, but the lowest statutory bracket covers amounts not exceeding ₱40,000. The amount is not the only issue: every element of the applicable form of estafa must still be established.

Does filing stop the prescriptive period?

The Supreme Court has recognized that filing the complaint with the prosecutor for investigation can interrupt prescription, but prescription remains highly fact-sensitive. The offense, governing statute, applicable penalty, date of commission or discovery, interruptions, and procedural history all matter. File promptly and seek case-specific advice instead of attempting to calculate the deadline informally.

Official sources

This article provides general legal information, not legal advice, and does not create an attorney-client relationship. Procedures and outcomes depend on the documents, evidence, venue, applicable offense, and orders issued in the particular case. Official sources were checked as of August 31, 2026.