Quick answer

Do not pay, click a link, send an OTP, install an app, or give personal information merely because a message says that a criminal case, subpoena, or warrant has been issued against you. Preserve the notice, then independently contact the court, prosecutor’s office, or agency named in it using contact details obtained from an official government website—not the phone number or link supplied by the sender.

At the same time, do not simply ignore the notice. A real criminal complaint can carry a short deadline. In an ordinary preliminary investigation, a prosecutor’s subpoena should include the complaint and supporting affidavits and documents, and the respondent generally has 10 days from receipt to submit counter-affidavits and supporting evidence. A warrant of arrest, meanwhile, may be issued only by a judge after a personal determination of probable cause. These rules appear in Rule 112 of the Rules of Criminal Procedure and Article III, Section 2 of the 1987 Constitution.

The safest response is therefore: pause, preserve, verify independently, secure your accounts, and obtain legal help promptly if the notice is confirmed or cannot be ruled out before a stated deadline.

Why fake criminal-case notices work

Scammers exploit fear. The message may claim that:

a complaint for estafa, cybercrime, money laundering, illegal recruitment, or another serious offense has been filed;
a “national warrant,” “hold-departure order,” or “blacklist order” is about to be released;
police are already on the way;
the recipient must pay a “clearance,” “verification,” “bail,” “penalty,” or “settlement” fee immediately;
secrecy is required because the case is “confidential”;
an officer, lawyer, or complainant can make the case disappear through a private payment; or
the recipient must open an attachment, join a video call, share a screen, or install an application to “verify identity.”

A document may contain a real official’s name, copied seal, plausible docket number, or personal details obtained from social media or a data leak. Those features do not establish authenticity. Conversely, an unfamiliar delivery method or typographical error is a warning sign, but it does not by itself prove that the underlying case is fictitious. Verification must come from the issuing office and its official records.

What the real criminal process generally looks like

A complaint before the prosecutor is not yet a warrant

A preliminary investigation determines whether there is sufficient ground to believe that a crime was committed and that the respondent should be held for trial. It is not a trial and is separate from a judge’s determination of whether an arrest warrant should issue.

Under Rule 112, when an investigating prosecutor finds ground to continue an ordinary preliminary investigation, the prosecutor issues a subpoena to the respondent and attaches the complaint and supporting affidavits and documents. The respondent generally has 10 days from receipt to submit sworn counter-affidavits, witness affidavits, and supporting documents. A motion to dismiss cannot simply substitute for the required counter-affidavit.

Not every proceeding follows exactly the same path. Inquest cases, offenses not requiring preliminary investigation, cases governed by special laws or special rules, and proceedings before bodies such as the Ombudsman or COMELEC may involve different procedures. The document and the issuing office must be examined before calculating any deadline.

Only a judge may issue a warrant of arrest

The Constitution requires probable cause for a warrant of arrest to be determined personally by a judge. The prosecutor decides whether there is probable cause to file an information; the judge independently determines whether probable cause supports arrest. The Supreme Court has repeatedly emphasized this distinction, including in Ho v. People.

A prosecutor, police investigator, private lawyer, collection agency, barangay official, or supposed “court liaison” cannot personally create or cancel a judicial warrant in exchange for money.

A person may nevertheless be lawfully arrested without a warrant in the limited situations listed in Rule 113—for example, when an offense is committed, is being committed, or is attempted in the arresting person’s presence, or when an offense has just been committed and the arresting officer has probable cause based on personal knowledge of relevant facts or circumstances. The absence of a paper warrant is therefore not, by itself, a basis to physically resist officers.

A genuine matter does not require payment to a stranger

Legitimate bail, filing fees, and other court charges follow lawful procedures and official receipting. A demand to send money to a personal bank account, e-wallet, cryptocurrency wallet, remittance recipient, or courier to “stop” an arrest is a major scam indicator.

Even when a complainant may lawfully settle a private claim or execute an affidavit of desistance, that does not automatically erase criminal liability or terminate a case already under prosecutorial or judicial control. Do not negotiate through an unverified caller.

Warning signs that require extra caution

Treat the notice as suspicious when the sender:

demands immediate payment to avoid arrest;
asks for an OTP, PIN, password, recovery code, card security code, or screen-sharing access;
orders you to install a remote-access, videoconferencing, or unfamiliar government “verification” application;
sends a shortened or misspelled web address;
uses a free email account while claiming to represent a court or government office;
refuses to provide the complete court or office name, branch number, case title, docket number, and issuing official;
claims that you are forbidden to speak with a lawyer or family member;
threatens arrest solely because you will not pay during the call;
asks you to transfer money while remaining on the phone;
provides no copy of the complaint or supporting documents despite claiming to be a Rule 112 preliminary-investigation subpoena;
uses inconsistent names, dates, addresses, signatures, or case numbers; or
tells you to verify the notice only through the sender’s own number or link.

These are indicators, not a legal test. A polished notice may still be fake, while an imperfectly scanned genuine document may still require action.

What to do, step by step

1. Stop interacting without destroying the evidence

Do not argue with the sender or reveal what you know. Do not open attachments, scan QR codes, call embedded numbers, or follow links until they have been checked safely.

If the message is on a platform with disappearing content, capture it immediately. Do not delete the conversation or block the account until you have preserved the evidence you may need.

2. Preserve the complete notice

Keep:

screenshots showing the sender’s account, number, username, date, and time;
the entire conversation, not only the threatening portion;
the original email with full headers;
the original attachment or file, without editing or renaming it if practicable;
envelope, courier label, delivery receipt, and physical document;
call logs, voicemail, and any recording lawfully obtained;
URLs, QR codes, profile links, and advertisements;
names, claimed ranks, badge numbers, branch numbers, and office addresses;
bank or e-wallet account names and numbers;
transaction references, receipts, and confirmation messages; and
a written timeline of what happened.

Keep an untouched copy. Share redacted copies when seeking informal help so that sensitive identifiers are not spread unnecessarily.

3. Verify the issuing office independently

Identify exactly what the document claims to be:

Prosecutor’s subpoena: Contact the named city, provincial, regional, or national prosecution office through the Department of Justice or the office’s independently located official number. Ask whether the docket number, parties, investigating prosecutor, scheduled date, and subpoena exist.
Court summons, order, or warrant: Contact the Office of the Clerk of Court for the named court and branch. Obtain contact details from the Supreme Court’s official website, not from the notice or a sponsored search result.
NBI or police notice: Verify through the agency’s official office or complaint channel. The NBI maintains an official contact page and an online complaint page.
Supreme Court case: The Judiciary provides an official Supreme Court case-status facility. Its absence there does not establish that no lower-court or prosecutor matter exists.

When calling, give only what is necessary to locate the alleged matter. Ask for the verifier’s name, office, and a reference for the inquiry. If possible, confirm in person or through counsel before a deadline expires.

Do not assume that a case is fake merely because it is not found in a general internet search. Prosecutor records and many lower-court records are not comprehensively searchable by the public online.

4. Do not miss a real deadline while verification is pending

If the named office confirms the subpoena—or cannot complete verification before the response date—consult a lawyer immediately. Preserve proof of when and how the document was received because the date of receipt may affect the deadline.

For an ordinary Rule 112 preliminary investigation, the counter-affidavit deadline is generally 10 days from receipt of the subpoena and attachments. If the notice did not include the complaint and supporting evidence, inform counsel and the investigating office promptly rather than assuming that the deadline does not matter.

Do not send an improvised confession, denial, or detailed explanation to the sender. Statements made without reviewing the complaint and evidence may later be used against you or may disclose unnecessary personal information.

5. Secure your accounts and identity

If you clicked a link, opened a suspicious attachment, installed software, shared your screen, or disclosed credentials:

Use a different, trusted device to change affected passwords.
Start with the email account used for password recovery, then banking, e-wallet, social-media, and government-service accounts.
End unfamiliar sessions and remove unknown devices or recovery methods.
Enable multi-factor authentication where available.
Contact the bank or e-wallet through its official fraud channel immediately.
Ask that the report be logged and obtain a reference number.
Monitor accounts, cards, mobile numbers, and credit-related communications for unauthorized activity.
Tell your mobile provider promptly if your SIM stopped working unexpectedly or you suspect a SIM-swap attempt.

The Bangko Sentral ng Pilipinas advises consumers to report identity theft, phishing, spoofing, and similar incidents immediately to their bank or financial institution. See the BSP’s official fraud-and-scam guidance.

6. Report the scam

Depending on what happened, you may report to one or more of the following:

Cybercrime Investigation and Coordinating Center: Use the official CICC reporting portal or Hotline 1326.
National Bureau of Investigation: Use the NBI online complaint facility or contact an NBI office.
PNP Anti-Cybercrime Group or local police: Report online impersonation, threats, account compromise, or fraudulent transfers and obtain the complaint or blotter reference.
Department of Justice Office of Cybercrime: Consult the DOJ’s official cybercrime-reporting information.
Your bank or e-wallet: Report first through its official fraud channel if money or account access is involved. If the institution does not resolve the complaint through its internal mechanism, the BSP explains its consumer-assistance process in this official complaint guide.
National Privacy Commission: If personal information was unlawfully collected, disclosed, or misused, consider the NPC’s formal complaint procedure.
The platform or service provider: Report the impersonating profile, domain, phone number, advertisement, or message after preserving the evidence.

An online report may begin the process, but investigators may require identification, original evidence, a sworn complaint, or a personal appearance. Ask the receiving office what documents are needed.

If money has already been sent

Act immediately; recovery is not guaranteed.

Contact the sending bank or e-wallet using its official hotline or in-app channel. State that the transfer resulted from fraud, identify the transaction precisely, request a trace or recall where available, and ask the institution to preserve relevant records. Obtain a case or reference number.

Republic Act No. 12010, the Anti-Financial Account Scamming Act, provides mechanisms for financial institutions to temporarily hold disputed funds in specified circumstances and conduct coordinated verification. Whether funds can still be held or recovered depends on where they went, how quickly the incident was reported, the available records, and the institution’s lawful assessment. Do not pay a second person who promises guaranteed recovery or claims to be an “inside contact.”

Then report promptly to the CICC, NBI, or PNP and provide the transaction receipt, recipient account, communications, and your bank’s reference number.

Possible offenses do not have to be identified by the victim

A fake criminal-case notice may involve different offenses depending on how it was created and used. Potentially relevant laws include:

computer-related forgery, computer-related fraud, or computer-related identity theft under the Cybercrime Prevention Act of 2012;
financial-account scamming or misuse of financial accounts under Republic Act No. 12010;
estafa, falsification or use of falsified documents, usurpation of authority, or threats under the Revised Penal Code, as amended; and
unlawful processing or misuse of personal information under the Data Privacy Act of 2012.

The correct charge depends on the acts, intent, documents, technology used, loss caused, and admissible evidence. A victim does not need to settle the final legal classification before reporting the incident; describe the facts accurately and provide the evidence.

Common mistakes to avoid

Paying “just to be safe”

Payment may encourage further demands and does not resolve a genuine criminal case. Use only independently verified, official payment and receipting procedures.

Calling the number printed on the notice

That may connect directly to the scammer. Find the agency’s contact information independently.

Treating a logo, signature, or government email display name as proof

Images and sender names can be copied or spoofed. Verify the underlying office, record, and sender address.

Posting the unredacted notice publicly

Public posts may expose your address, identification numbers, signature, case details, or financial information. They may also alert the scammer that evidence is being collected.

Deleting messages after blocking the sender

Deletion may remove useful identifiers, metadata, transaction instructions, or admissions.

Ignoring every electronic communication

Electronic communication is not automatically fake. Courts and agencies may use authorized electronic systems or follow-up communications in appropriate cases. Verify the record and service method instead of relying on format alone.

Sending a detailed denial before seeing the complaint

A Rule 112 response is ordinarily a sworn submission supported by evidence. Prepare it with legal advice after reviewing the complete complaint and attachments.

Physically resisting apparent officers

If people claiming to be officers appear, remain calm and request their names, units, identification, and the issuing court and branch. Ask to see the warrant if one is claimed, and have a family member or lawyer verify the details immediately. Do not use force or obstruct a lawful arrest. Note that lawful warrantless arrests are possible only in the circumstances recognized by Rule 113.

Evidence that can help disprove the accusation

If the alleged case appears connected to identity theft or an event you did not participate in, preserve potentially exculpatory material now, before it disappears:

travel, work, school, building-access, or attendance records;
original device and account-login records;
bank and e-wallet statements;
delivery, ride, toll, parking, or location records;
contracts, invoices, receipts, and correspondence;
CCTV information and the identity of its custodian;
witnesses who can verify relevant events;
proof that an account, SIM, device, or identification document was lost or compromised; and
earlier reports made to a bank, platform, police station, employer, or government agency.

Do not fabricate, alter, backdate, or coach evidence. Ask counsel or investigators how originals should be preserved and produced.

When legal help is urgent

Seek a Philippine lawyer immediately if:

the issuing court or prosecutor confirms the matter;
the stated counter-affidavit, hearing, or appearance deadline is near;
a warrant may have been issued;
police or investigators are at your home or workplace;
you have already made admissions or supplied documents;
the alleged offense carries possible detention or significant financial exposure;
the scammer used your identity to transact with other victims;
substantial money was transferred;
intimate, confidential, or sensitive personal information is involved; or
you are being threatened with immediate physical harm.

If you cannot afford private counsel, inquire with the Public Attorney’s Office about eligibility and availability. The right response depends on the actual document, case status, evidence, and procedural stage.

Frequently asked questions

Can I be arrested because of a text message?

A text message itself does not create arrest authority. An arrest ordinarily requires a valid judicial warrant, unless the facts fall within a recognized warrantless-arrest situation under Rule 113. Verify any claimed warrant with the issuing court and obtain legal advice immediately.

Does a prosecutor’s subpoena mean I am already guilty?

No. A subpoena in a preliminary investigation gives the respondent an opportunity to answer a complaint. The prosecutor is determining probable cause, not guilt beyond reasonable doubt.

What is the usual deadline to answer a prosecutor’s subpoena?

In an ordinary Rule 112 preliminary investigation, the respondent generally has 10 days from receipt of the subpoena, complaint, and supporting materials to submit counter-affidavits and evidence. Special proceedings and unusual procedural circumstances may differ.

Is the notice fake if it arrived by email, text, or messaging app?

Not necessarily. The delivery method is only one factor. Confirm the document and case directly with the issuing office and ask whether the method of service used in your case was authorized.

Is it fake if no case appears in an online search?

Not necessarily. Prosecutor complaints and many lower-court matters are not fully available through public internet searches. Direct verification with the specific office is more reliable.

Can I pay the complainant to cancel the warrant?

A private payment does not cancel a judicial warrant. Only the proper court can act on its warrant and pending case through lawful proceedings. Any proposed settlement should be reviewed by counsel and properly documented.

Should I reply to tell the sender I know it is a scam?

Usually, preserve the evidence first and avoid further engagement. If authorities recommend continued communication for an investigation, follow their instructions and do not conduct your own entrapment operation.

What if the notice contains my real address or identification details?

Treat that as a possible identity or data-security incident. Secure your accounts, determine which information was exposed, preserve the notice, and consider reporting to law enforcement and the National Privacy Commission. Accurate personal details do not prove that the notice is genuine.

What if I already gave an OTP or password?

Contact the affected institution immediately, change credentials from a trusted device, end unfamiliar sessions, secure your recovery email and mobile number, and report unauthorized transactions. An OTP should be treated as compromised once disclosed.

Can authorities guarantee that transferred money will be recovered?

No. Speedy reporting may improve the chance that funds can be traced or held, but recovery depends on the transaction path, timing, remaining funds, institutional action, and legal process.

Official references

This article provides general legal information, not legal advice or a finding that any particular notice is genuine or fraudulent. Procedures and remedies depend on the document, issuing body, facts, and case stage. Official legal and procedural sources were checked as of July 27, 2026.