Quick answer

If you suspect fraud or estafa, act immediately:

Contact the bank, e-wallet, card issuer, remittance company, or cryptocurrency platform involved. Ask it to flag the transaction, secure the account, trace the recipient account, and consider holding any remaining disputed funds.
Preserve the original messages, transaction records, account details, advertisements, contracts, receipts, recordings, and device data.
Report the incident to the police or the National Bureau of Investigation, particularly when it happened online.
Prepare a sworn complaint supported by documents and witness affidavits for the prosecutor’s office with territorial jurisdiction.
Consider the appropriate recovery route: restitution through the criminal case, a separate civil action, an eligible small-claims case, or a complaint against a regulated financial institution.

Reporting does not guarantee that money will be recovered. Recovery depends heavily on speed, whether funds can still be traced or held, the evidence, the offender’s identity and assets, and the legal basis of the claim.

When fraud may amount to estafa

Article 315 of the Revised Penal Code covers several distinct forms of swindling. Calling conduct a “scam” is not enough; the evidence must establish a statutory mode of estafa.

Common forms include:

Estafa through false pretenses or fraudulent acts. The accused makes a false representation about identity, authority, qualifications, property, credit, business, or another material fact; the representation is made before or at the same time the victim parts with money or property; the victim relies on it; and the victim suffers damage.
Estafa through misappropriation or conversion. Money, goods, or other personal property are received in trust, on commission, for administration, or under an obligation to deliver or return them, but are then misappropriated, converted, or denied.
Other specific fraudulent means. Article 315 also addresses particular conduct involving fraudulent documents, checks, gambling, and other enumerated methods.

The amount involved affects the possible penalty under Article 315, as amended by Republic Act No. 10951. It does not determine by itself whether fraud occurred.

A purely online incident may also involve the Cybercrime Prevention Act of 2012, including computer-related fraud, identity theft, forgery, or an offense under the Revised Penal Code committed through information and communications technology. The correct charge depends on what the suspect actually did. An ordinary false sales pitch delivered through chat is not automatically “computer-related fraud,” which specifically concerns unauthorized input, alteration or deletion of data, or interference with a computer system.

Financial-account schemes may also fall under the Anti-Financial Account Scamming Act, especially where accounts are lent, sold, purchased, used as conduits, or employed in social-engineering schemes.

A broken promise or unpaid debt is not automatically estafa

Nonpayment, delayed delivery, a failed investment, or breach of contract does not automatically become a crime. For estafa by deceit, the prosecution generally must show that the dishonest representation existed before or when the victim surrendered the money or property. Later nonperformance, standing alone, ordinarily proves only that a promise was not fulfilled.

Facts that may support an inference of pre-existing deceit include:

use of a false name, address, licence, identity, title, or business registration;
fabricated receipts, contracts, tracking records, permits, bank documents, or screenshots;
claims of owning goods that did not exist or were never controlled by the seller;
repeated collection from different victims using the same false story;
immediate transfer of funds through layers of unrelated accounts;
blocking the victim immediately after payment;
contradictory explanations showing that material claims were knowingly false; or
evidence that the promised transaction was impossible from the beginning.

Conversely, partial performance, documented business losses, genuine efforts to deliver or repay, or a good-faith dispute over contract terms may point toward civil liability rather than criminal fraud. These facts are not conclusive; investigators and prosecutors assess the complete record.

In misappropriation cases, the agreement must be examined carefully. Money received as a loan ordinarily transfers ownership to the borrower and creates an obligation to repay, which is different from receiving identified money in trust or under a duty to return or deliver it. The label placed on the document is less important than the parties’ actual rights and obligations.

What to do immediately

1. Stop further loss

Do not send an additional “release fee,” “tax,” “verification payment,” or “recovery charge.” Do not provide an OTP, PIN, password, recovery phrase, remote-access code, or new identification document.

If an account or device may have been compromised:

change passwords using a trusted device;
sign out other sessions;
replace exposed credentials;
notify the provider that the account may have been taken over;
block affected cards or payment facilities; and
review connected email, banking, marketplace, and social-media accounts.

If the suspect threatens physical harm or is nearby, prioritize safety and contact the police or emergency services.

2. Notify the financial institution at once

Use the institution’s official fraud channel—not a number or link supplied by the suspected scammer. Give it:

the transaction reference number;
date, time, amount, and currency;
sending and receiving account details;
the recipient’s displayed name, number, wallet address, or merchant ID;
a short explanation of why the transaction is disputed; and
the police or investigation reference number, if already available.

Ask for a written complaint or case number. Request preservation of account and transaction records and ask whether a recall, chargeback, transfer trace, account restriction, or temporary hold is available.

Under Section 7 of the Anti-Financial Account Scamming Act, covered institutions have authority to hold funds involved in a disputed transaction for the period prescribed by the Bangko Sentral ng Pilipinas, subject to a statutory ceiling of 30 calendar days unless a court extends it. A hold is not automatic, and the law does not guarantee that the money will still be present or ultimately returned.

Complain first to the institution. If it does not resolve a complaint falling within the BSP’s authority, use the BSP consumer-assistance channels. A BSP complaint is not a substitute for a criminal complaint.

3. Report the incident

Depending on the facts, a victim may report to:

the local police station;
the PNP Anti-Cybercrime Group for internet- or technology-facilitated incidents;
the National Bureau of Investigation, including its cybercrime investigators;
the prosecutor’s office for the city or province where an essential element of the offense occurred;
the Securities and Exchange Commission if the scheme involves unregistered securities, investment solicitation, or misuse of a corporation or partnership;
the Department of Trade and Industry for an appropriate consumer complaint against a business; or
the relevant regulator for insurance, lending, remittance, virtual assets, cooperatives, or another regulated activity.

A regulator may address licensing, consumer, or administrative issues but may not investigate or prosecute every criminal aspect. Parallel reports can therefore be appropriate.

A police blotter or online report documents the incident but does not necessarily commence a criminal case in court. Ask what further affidavit, evidence, or prosecutor filing is required.

Evidence to preserve

Keep the originals and make secure backups. Do not crop, annotate, edit, or re-save the only copy.

Preserve:

the complete conversation, including dates, times, usernames, profile links, group names, phone numbers, email headers, voice messages, and attachments;
screen recordings showing the account, profile, advertisement, conversation history, and relevant URLs;
bank statements, deposit slips, transfer confirmations, QR codes, wallet addresses, transaction hashes, card records, and official receipts;
contracts, invoices, purchase orders, acknowledgment receipts, promissory notes, demand letters, and proof of delivery or nondelivery;
advertisements and representations that induced payment;
the suspect’s names, aliases, photographs, account numbers, addresses, identification details, and claimed affiliations;
records of calls, meetings, witnesses, and dates;
the device used, if it contains important original data; and
subsequent demands, admissions, repayment promises, threats, or attempts to obtain more money.

Prepare a chronological table stating what was represented, when it was said, why it was false, what action you took in reliance on it, and the resulting loss. Separate personal knowledge from information received from someone else.

Electronic evidence is admissible only if properly authenticated. Screenshots are useful, but originals, complete exports, device records, provider records, and testimony explaining how the material was created or obtained can make the evidence substantially stronger.

Do not access another person’s account without authority, secretly install spyware, impersonate investigators, or publish sensitive personal information. Let investigators seek subscriber or content data through lawful processes.

Preparing a criminal complaint

A well-supported complaint normally includes:

the complainant’s sworn complaint-affidavit;
sworn affidavits from witnesses with material personal knowledge;
a clear chronological narration;
the exact false statements, entrusted property, or fraudulent acts relied upon;
proof that the suspect made or participated in them;
proof of payment, transfer, delivery, or entrustment;
proof of reliance and actual damage;
available identifying information for each respondent;
documentary and electronic exhibits, properly labelled; and
a computation of the amount sought.

The narration should explain the offense rather than merely attach a large collection of screenshots. For deceit, identify what was false and why it caused the payment. For misappropriation, attach the document or communications showing the purpose for which the property was received and the duty to deliver or return it.

Complaints within the National Prosecution Service are governed by the 2024 DOJ–NPS Rules on Preliminary Investigations and Inquest Proceedings, together with applicable court rules and later issuances. Filing requirements can include sufficient copies for the respondents and the investigating office. Confirm the current checklist, filing hours, accepted media, and territorial jurisdiction with the particular prosecutor’s office.

If a subpoena is issued, comply strictly with its stated deadline. The rules generally give the respondent an opportunity to submit a counter-affidavit and supporting evidence. The prosecutor then determines whether the evidence meets the standard for filing a case in court. A finding sufficient to file charges is not a judgment of guilt.

Barangay conciliation may apply in limited cases

Prior barangay proceedings may be required when the parties are natural persons who actually reside in the same city or municipality and the dispute falls within the Lupon’s authority. Statutory exceptions include offenses carrying punishment beyond the limits in the Local Government Code, cases involving government entities or officials acting officially, urgent legal action, and other excluded disputes.

Because estafa penalties vary with the amount and manner of commission, do not assume that barangay conciliation is either always required or always unnecessary. Ask the prosecutor’s office or a lawyer whether a Certificate to File Action is needed in the specific case.

Deadlines should be checked early

Do not wait simply because the suspect promises repayment.

Criminal prescription depends on the precise offense and penalty. For estafa under Article 315, the applicable period can change with the amount involved and any special law that affects the penalty. Article 90 of the Revised Penal Code provides different periods for offenses punished by arresto mayor, correctional penalties, and afflictive penalties. Article 91 addresses when prescription begins and how it is interrupted.

Online conduct, special statutes, concealment, the date of discovery, and the filing made can affect the calculation. A report to a platform, bank, regulator, or police desk should not automatically be assumed to interrupt prescription in the same way as a legally sufficient complaint filed with the proper authority.

Civil claims have separate limitation periods. Depending on their legal basis, the Civil Code may provide different periods for written contracts, oral contracts, injury to rights, fraud, quasi-delict, or other obligations. The correct period cannot be determined from the word “scam” alone.

Seek legal advice promptly if the transaction is old, the limitation date may be close, the suspect is leaving the country, or assets are being transferred.

How recovery may be pursued

Restitution or damages in the criminal case

Under Rule 111 of the Rules of Criminal Procedure, the civil action to recover civil liability arising from the offense is generally deemed instituted with the criminal action unless the victim:

waives it;
reserves the right to bring it separately; or
filed the civil action before the criminal case.

A reservation must be made at the stage and in the manner allowed by the rule. Tell the prosecutor about any existing civil case, settlement, insurance payment, chargeback, or intended separate action. A victim cannot obtain double recovery for the same loss.

A conviction may include restitution, reparation, or damages supported by evidence. Nevertheless, a favorable judgment has limited practical value if the offender has no identifiable assets.

A separate civil case

A civil case may be appropriate when the evidence establishes an enforceable obligation, rescission, restitution, damages, unjust enrichment, or another civil cause of action even if criminal fraud cannot be proved beyond reasonable doubt.

The court, procedure, filing fee, venue, required prior demand, and need for barangay conciliation depend on the cause of action, amount, parties, and location. Provisional remedies such as preliminary attachment are extraordinary remedies with factual, procedural, bond, and court-order requirements; a victim cannot personally seize or freeze another person’s property.

Small claims

The small-claims procedure may offer a faster route for qualifying civil money claims not exceeding the current jurisdictional ceiling. It is not a general prosecution process for estafa, and not every fraud-related claim qualifies. Confirm that the claim falls within the categories covered by the Supreme Court’s Rules on Expedited Procedures in the First Level Courts, including the current ₱1 million ceiling, before using the forms.

Claims involving a financial institution

The Anti-Financial Account Scamming Act provides potential restitution consequences where a covered institution fails to employ adequate risk-management controls or exercise the required degree of diligence in preventing loss from offenses covered by that law. It also addresses failure to hold disputed funds when required by the Act and BSP regulations.

This does not make an institution automatically responsible for every customer-authorized transfer or scam. Liability depends on whether the statute applies, the institution’s conduct, causation, and the governing BSP rules and evidence.

Demand letters and settlement

A written demand can document the amount claimed, the factual basis, a reasonable payment deadline, and where payment should be made. It may also produce admissions or identify a genuine civil dispute.

A demand is not a universal legal element of every form of estafa. In some misappropriation cases, however, a demand can be important evidence of conversion or denial. Dishonored-check cases have their own notice requirements and should not be treated as identical to ordinary online fraud.

Keep proof of delivery. Do not threaten unlawful exposure, violence, arrest without process, or criminal prosecution solely to obtain an unrelated advantage.

A genuine settlement can save time and preserve value, but obtain written terms addressing:

the admitted or compromised amount;
payment dates and method;
consequences of default;
treatment of pending civil or criminal proceedings;
releases and their effective date;
security or guaranties, if lawful; and
who will bear costs.

Do not withdraw a complaint merely in exchange for another unsupported promise. Settlement does not automatically require prosecutors or courts to terminate a public criminal action.

Common mistakes

Waiting for repeated repayment promises while funds and records disappear.
Deleting conversations after taking a few screenshots.
Sending money to a supposed “hacker,” “asset-recovery agent,” or unofficial fixer.
Treating a police blotter as the complete criminal complaint.
Filing in a place with no connection to an essential element of the offense.
Describing only nonpayment without identifying the original deceit or entrustment.
Omitting inconvenient facts, partial repayments, prior dealings, or contract terms.
Naming account holders as masterminds without evidence of their knowledge or participation.
Posting accusations, IDs, addresses, or family information publicly.
Assuming that business registration proves an offer is legitimate—or that lack of registration alone proves estafa.
Signing a quitclaim, waiver, or settlement without understanding its effect on recovery.
Bringing simultaneous proceedings without disclosing them to counsel, the prosecutor, or the court.

When legal help is urgent

Consult a Philippine lawyer promptly when:

the loss is substantial or involves several victims;
the transaction crosses cities, provinces, or national borders;
cryptocurrency, layered accounts, shell entities, or stolen identities were used;
the suspect’s property is being sold or transferred;
you need to consider attachment, injunction, or another provisional remedy;
the transaction involves securities, investments, corporate officers, fiduciaries, or public officials;
a subpoena, demand, or court paper has been received;
the incident is near a possible prescriptive deadline;
the victim is a child, older person, person with disability, or someone under coercion;
the suspect is threatening retaliation; or
you are being asked to sign a waiver or withdraw an existing case.

Those unable to afford private counsel may ask the Public Attorney’s Office about eligibility and available assistance.

Frequently asked questions

Can I file estafa if I voluntarily transferred the money?

Possibly. Voluntary transfer does not defeat an estafa complaint if the transfer was induced by legally sufficient deceit. The evidence must connect the false representation to your decision to pay.

Is failure to repay a loan estafa?

Ordinarily, failure to repay a genuine loan is a civil matter. Estafa may arise only if separate facts satisfy a statutory mode of fraud—for example, qualifying deceit existing when the money was obtained. The loan documents and actual transaction control the analysis.

Can the bank reverse the transfer?

Sometimes, but there is no automatic reversal. It depends on the payment rail, timing, available balance, institution rules, applicable law, and whether the recipient institution can hold or return the funds. Report immediately.

Can I demand the account holder’s identity from the bank or e-wallet?

You may give investigators the account details, but the institution may be unable to disclose protected customer information directly to you. Law-enforcement authorities, prosecutors, courts, and the BSP have specific lawful mechanisms for obtaining relevant records.

Are screenshots enough?

They can support a complaint but may not be sufficient by themselves. Preserve the complete conversation, original device or export, transaction records, profile and URL information, and witnesses who can authenticate the evidence.

Must I send a demand letter before filing?

Not in every estafa case. A demand may be useful or legally significant depending on the charged mode and related civil claim. Do not delay an urgent bank or law-enforcement report while waiting to send one.

Can I file both a criminal and civil case?

Sometimes, subject to Rule 111 and the prohibition against double recovery. The timing of any reservation or earlier civil filing matters. Obtain advice before starting parallel proceedings.

What if the scammer used a mule account?

Report both the person who dealt with you and every known receiving or onward-transfer account. Do not assume that the named account holder is innocent or guilty; investigators must determine knowledge, participation, and possible liability under the Anti-Financial Account Scamming Act or other laws.

What if several people were victimized?

Each victim should preserve and present their own proof of representations, payments, and loss. A coordinated chronology can reveal a common scheme, but one victim’s affidavit does not automatically establish what happened to everyone else.

Will repayment erase criminal liability?

Not automatically. Repayment may affect the civil liability, settlement discussions, or appreciation of the facts, but it does not by itself extinguish a public offense once committed.

Official legal sources

This article provides general legal information, not advice for a particular case and not an assurance of prosecution or recovery. Applicable charges, jurisdiction, deadlines, and remedies depend on the documents and facts. Official sources and procedures were checked as of 19 September 2026.