Quick answer

If you suspect fraud or estafa, act immediately: stop further payments, contact the bank, e-wallet, remittance service, or platform involved, preserve the complete evidence, and report the incident to the police, the National Bureau of Investigation, or the appropriate prosecutor’s office. For online schemes, report promptly to the PNP Anti-Cybercrime Group or the NBI cybercrime unit because account records and other computer data may be time-sensitive.

A criminal complaint may help hold the offender liable, but it does not guarantee that the money will be returned. Recovery may come from a successful recall or reversal, voluntary repayment or settlement, civil liability awarded in the criminal case, or a separate civil action. The proper remedy depends on how the money or property was obtained, the parties’ agreement, where the relevant acts occurred, and what evidence remains available.

When suspected fraud may be estafa

Estafa is not simply any unpaid debt, broken promise, failed investment, delayed delivery, or bad business result. Article 315 of the Revised Penal Code requires fraud through one of the means defined by law, together with prejudice or damage to another.

Common forms include:

False pretenses or fraudulent representations. The offender makes a material false representation before or at the time the victim parts with money or property—for example, using a fictitious identity, inventing a transaction, or falsely claiming authority, qualifications, assets, credit, or business capacity. The victim relies on the deception and suffers damage.
Misappropriation or conversion. The offender receives money or personal property in trust, on commission, for administration, or under another obligation to deliver or return the same property, then misappropriates it, converts it, denies receiving it, or otherwise treats it as their own to another person’s prejudice.
Other fraudulent acts specifically covered by Article 315. These include taking advantage of a signature in blank, inducing someone by deceit to sign a document, and certain forms of check-related fraud.

The timing matters. In false-pretense cases, the deceit ordinarily must exist before or simultaneously with the victim’s transfer of money or property. A promise that was honestly made but later became impossible to perform does not automatically become estafa. Likewise, an ordinary loan normally transfers ownership of the money to the borrower and creates an obligation to repay an equivalent amount; nonpayment alone does not necessarily establish misappropriation of property received in trust.

The controlling text is Article 315 as amended by Republic Act No. 10951.

Estafa, a civil dispute, or another offense?

The label used by the parties is not controlling. Investigators and prosecutors examine what actually happened.

Indicators supporting a possible fraud complaint include:

false identity documents, fabricated permits, forged receipts, or nonexistent addresses;
representations about assets, authority, inventory, employment, licenses, or transactions that were already false when made;
instructions to pay an account belonging to an undisclosed third person;
immediate disappearance, blocking, or deletion of accounts after payment;
the same false story used against multiple victims;
diversion of entrusted funds or goods to an unauthorized purpose;
denial of receiving property despite records proving receipt; and
concealment or disposal of assets after demands for return.

Indicators that the matter may primarily be civil include a genuine contract, actual partial performance, a later business failure, or mere inability to pay without proof of deception or unlawful conversion. A civil dispute can still involve fraud, and the same facts may implicate other laws, but criminal liability should not be assumed from breach of contract alone.

Depending on the evidence, related laws may also apply—for example, the Bouncing Checks Law, falsification provisions, securities laws, consumer-protection laws, identity-theft provisions, or the Cybercrime Prevention Act. Each has separate elements and procedures.

Online and technology-assisted fraud

An online sale or conversation does not automatically create a separate cybercrime. However, Section 6 of the Cybercrime Prevention Act covers crimes under the Revised Penal Code or special laws when committed by, through, and with information and communications technologies, with the statutory penalty generally one degree higher. The Act also separately defines computer-related fraud involving unauthorized input, alteration, or deletion of computer data or interference with a computer system.

The NBI and PNP are designated law-enforcement authorities under the Act. It also establishes procedures for preserving, disclosing, searching, and examining computer data. Service providers generally preserve specified traffic data and subscriber information for at least six months from the transaction, while access or disclosure may require a preservation order, court warrant, or other lawful process. A private complainant should therefore report promptly rather than assume that a deleted account or old transaction can always be reconstructed.

See the Cybercrime Prevention Act of 2012.

What to do immediately

1. Stop the loss

Do not send a “release fee,” “verification deposit,” “tax,” “insurance payment,” or additional investment merely because the person promises that it will unlock a refund. Stop communicating if continued contact exposes you to threats, manipulation, malware, or further loss.

Change compromised passwords using a safe device. Enable multi-factor authentication, sign out unknown sessions, and contact the affected financial institution if account credentials, cards, one-time passwords, or identity documents were exposed.

2. Contact the payment provider

Call the bank, e-wallet, card issuer, remittance company, or platform through its official channel. Ask it to:

flag the transaction as suspected fraud;
attempt a recall, reversal, chargeback, or account freeze if available;
secure the receiving-account details and transaction records;
give you a case or reference number; and
explain any affidavit, police report, or deadline it requires.

A recall or freeze is not guaranteed. Whether funds can be held or returned depends on the payment method, the recipient’s account status, the institution’s rules, and lawful authority. Do not delay a criminal report while waiting for customer support to finish its review.

If the institution is supervised by the Bangko Sentral ng Pilipinas, first use the institution’s complaint process and, when appropriate, consult the BSP Consumer Assistance Mechanism. BSP assistance does not replace a criminal complaint.

3. Preserve evidence before accounts disappear

Keep original electronic files whenever possible, not only cropped screenshots. Preserve:

complete conversations, including dates, times, usernames, profile links, telephone numbers, and message context;
emails with full headers and original attachments;
advertisements, product listings, websites, URLs, QR codes, and social-media profiles;
bank statements, deposit slips, transfer confirmations, transaction IDs, card records, and e-wallet receipts;
the recipient’s account name, account number, wallet number, bank, branch, and payment instructions;
contracts, invoices, acknowledgments, delivery records, checks, demand letters, and proof of receipt;
identity documents or business papers supplied by the suspected offender;
call logs, voice messages, lawful recordings, and names of witnesses;
proof that particular claims were false when made;
proof of the amount lost and any partial refund; and
reports made to banks, platforms, regulators, or law enforcement.

Create a chronological list showing each representation, payment, delivery, demand, response, and discovery. Back up the material without modifying the originals. Do not hack an account, impersonate another person, publish private data, or obtain records unlawfully.

4. Notify the platform

Report the account, listing, advertisement, or merchant to the marketplace or social-media platform. Ask that relevant records be preserved for law-enforcement requests. Save the report confirmation and the exact profile or listing URL before content is removed.

5. Protect other potential victims carefully

You may give truthful information to investigators or affected institutions. Avoid publicly declaring someone guilty, releasing sensitive personal data, or organizing harassment. Public accusations can create separate legal and safety issues, particularly while facts remain disputed.

Where to report

You may begin with the office best matched to the incident:

Local police station or PNP Anti-Cybercrime Group: appropriate for immediate police assistance and technology-assisted offenses. Use the official PNP Anti-Cybercrime Group website to verify current contact details.
National Bureau of Investigation: appropriate for fraud, financial-crime, cybercrime, or multi-location schemes. The NBI website lists its services and regional and district offices.
City or provincial prosecutor’s office: a sworn complaint may be filed with the prosecutor having territorial authority, particularly when preliminary investigation is required.
Securities and Exchange Commission: report suspected unauthorized investment solicitation, fictitious investments, or misuse of corporate registration through the SEC Philippines website. SEC registration by itself does not necessarily authorize a company to solicit investments from the public.
Department of Trade and Industry: consumer complaints involving sellers or covered consumer transactions may also be brought through official DTI consumer channels. This is not a substitute for reporting suspected crime.

An administrative or regulatory complaint and a criminal complaint serve different purposes. Filing with a bank, platform, DTI, BSP, or SEC does not necessarily institute the criminal action or stop criminal prescription.

Preparing the criminal complaint

A complaint is a sworn written statement charging a person with an offense. It should clearly identify:

the complainant and available contact details;
every known respondent and the identifying information available;
where and approximately when the relevant acts occurred;
the exact representations or entrusted-property arrangement involved;
why the representations were false, or how the property was misappropriated;
how those acts caused the transfer of money or property;
the amount and manner of the loss;
demands, admissions, repayments, or later communications; and
the supporting documents and witnesses.

Arrange annexes logically and refer to each one in the affidavit. Avoid exaggeration, guesses, hearsay presented as personal knowledge, or unsupported claims about the respondent’s intent.

Under Rule 112, a complaint for preliminary investigation is accompanied by the complainant’s and witnesses’ affidavits and supporting documents. The prosecutor determines whether the evidence justifies filing an information in court; filing a complaint does not mean the respondent is already guilty.

The procedural framework appears in the Revised Rules of Criminal Procedure, Rules 110–127.

Where the complaint should be filed

Territorial jurisdiction is important. As a general rule, the criminal action is instituted and tried where the offense was committed or where any essential ingredient occurred. In an estafa case, that may require examining where the false representation was made or received, where reliance occurred, where money or property was delivered, and where the resulting damage occurred.

Online transactions can involve several places, but the victim’s residence alone does not automatically establish venue. State all relevant locations accurately and let the prosecutor assess jurisdiction. Filing in the wrong place can cause delay or dismissal without resolving the merits.

For lower-level disputes between individuals who actually reside in the same city or municipality, prior barangay conciliation may sometimes be required. Important exceptions apply, including disputes involving parties from different cities or municipalities, offenses above the statutory penalty limit, urgent legal action, and other exclusions under Sections 408 and 412 of the Local Government Code. Ask the prosecutor or a lawyer whether a Certificate to File Action is required in the particular case.

Deadlines and prescription

Do not postpone filing. The prescriptive period for estafa is not a single deadline for every case. It can depend on the penalty prescribed for the particular mode of estafa, the amount involved, whether information and communications technology was used, when the offense was discovered, and what legally interrupted prescription.

Article 90 of the Revised Penal Code generally assigns different prescriptive periods according to the classification of the penalty. Article 91 generally addresses when prescription begins and how it is interrupted. Rule 110 states that institution of the criminal action interrupts prescription unless a special law provides otherwise.

These rules can produce fact-sensitive results, especially in continuing transactions, entrusted-property cases, online offenses, checks, and complaints first filed in the wrong forum. A demand letter, bank complaint, or platform report should not be assumed to preserve the criminal case. Obtain legal advice promptly if significant time has passed.

Possible penalties

Under Article 315 as amended by Republic Act No. 10951, the ordinary penalty scale depends principally on the amount of fraud:

Amount involved	Ordinary Article 315 penalty bracket
Not more than ₱40,000	Arresto mayor in its medium and maximum periods
More than ₱40,000 but not more than ₱1,200,000	Arresto mayor in its maximum period to prisión correccional in its minimum period
More than ₱1,200,000 but not more than ₱2,400,000	Prisión correccional in its minimum and medium periods
More than ₱2,400,000 but not more than ₱4,400,000	Prisión correccional in its maximum period to prisión mayor in its minimum period
More than ₱4,400,000	The statute applies its maximum-period and incremental-year formula, subject to its stated 20-year ceiling

Article 315 contains a separate, substantially different penalty schedule for the specific check-related form described in paragraph 2(d). Technology-assisted commission may also trigger Section 6 of the Cybercrime Prevention Act. The applicable penalty cannot safely be determined from the amount alone; the date, precise allegations, mode of commission, amendments in force, and other circumstances must be examined.

Ways to seek recovery

Recall, reversal, or chargeback

This is usually the fastest potential route, but it is time-sensitive and governed by the payment provider’s rules. Supply accurate transaction information and comply promptly with document requests. A provisional credit or temporary freeze is not necessarily a final recovery.

Civil liability in the criminal case

When a criminal action is instituted, the civil action to recover civil liability arising from the charged offense is generally deemed included unless the offended party:

waives it;
reserves the right to file it separately; or
filed it before the criminal action.

A reservation ordinarily must be made before the prosecution begins presenting evidence and under circumstances giving the offended party a reasonable opportunity to reserve. Actual damages generally do not require an initial filing fee under Rule 111, while rules on filing fees apply to specified claims for other damages.

The victim may participate through counsel when the civil claim is included. The court may order restitution, payment of the value of property, or damages if liability and the amount are proved. A judgment is still subject to enforcement, and actual recovery depends in part on whether reachable assets exist.

Separate civil action

A separate action may be appropriate when the claim arises from a contract, loan, agency, trust, unjust enrichment, or another source independent of the offense. Timing and coordination matter: Rule 111 may suspend a separately filed civil action arising from the offense once the criminal action begins, subject to its provisions on consolidation and independent civil actions.

For a qualifying civil claim solely for payment or reimbursement of money not exceeding the current small-claims jurisdictional ceiling, the simplified small-claims procedure may be available. It should not be treated as a substitute for a criminal complaint, and not every fraud-related damages claim qualifies.

Provisional attachment

When the civil action is properly included in the criminal case, Rule 127 permits attachment in specified circumstances—for example, certain fiduciary misapplication claims, concealment or disposal of assets, impending flight, or residence outside the Philippines. Attachment is not automatic. It requires a proper application, evidence, compliance with procedural safeguards, and usually a bond.

Settlement or repayment

Repayment may reduce the outstanding civil claim and can be relevant to the proceedings, but it does not automatically erase criminal liability for a completed public offense. Never sign a waiver, release, desistance, quitclaim, or settlement without understanding:

the exact amount and payment dates;
whether payments are secured;
what happens upon default;
which civil claims are released;
whether the document contains factual admissions; and
what effect, if any, it may have on pending proceedings.

Do not accept a new suspicious check or make a false statement to an investigator merely to facilitate settlement.

Proving the amount to be recovered

Courts award proven loss, not merely the amount asserted in a complaint. Keep records showing:

every transfer of money or property;
fees, authorized charges, and partial returns;
the contractual or entrusted purpose;
the link between each payment and the deception;
ownership and value of delivered property; and
reasonable expenses or other damages for which the law permits recovery.

Separate actual loss from expected profits, emotional distress, penalties, interest, and legal expenses. These categories have different legal bases and standards of proof. Avoid double recovery from a bank reversal, insurance payment, settlement, and court award for the same loss.

Common mistakes

Continuing to pay because the suspected offender promises a larger refund.
Treating every unpaid obligation as estafa without proving deception or conversion.
Deleting conversations after taking only selected screenshots.
Editing, annotating, or forwarding files without retaining the originals.
Omitting the recipient-account details and transaction reference numbers.
Filing solely where the complainant lives without considering where essential acts occurred.
Naming company employees or account holders without evidence of their participation or knowledge.
Assuming a barangay blotter, bank dispute, platform report, or demand letter is already a criminal complaint.
Waiting for other victims before acting.
Signing a broad release in exchange for an unsecured promise of future payment.
Publicly threatening, doxxing, or harassing the suspected offender.
Expecting conviction alone to guarantee collection.

When legal help is urgent

Consult a Philippine lawyer promptly when:

the loss is substantial or involves several victims;
the transfer happened long ago and prescription may be disputed;
the scheme crosses cities, provinces, or countries;
corporate entities, nominees, cryptocurrency, or multiple recipient accounts are involved;
the respondent is disposing of assets or preparing to leave the Philippines;
a bank or platform says records will soon become unavailable;
you need a preservation request, subpoena, warrant, or attachment;
a prosecutor has dismissed the complaint or issued a deadline;
you are asked to execute a settlement, affidavit of desistance, or quitclaim;
the facts may support both civil and criminal claims; or
you face threats, blackmail, identity misuse, or immediate danger.

If there is an immediate threat to life or safety, contact emergency services or the nearest police station instead of confronting the person.

Frequently asked questions

Do I need to send a demand letter before filing estafa?

Not in every form of estafa. A demand can help prove misappropriation, refusal to return entrusted property, notice, or the amount claimed, but demand is not a universal substitute for the statutory elements. Check-related cases have distinct notice rules. Do not let preparation of a demand letter cause a filing deadline to expire.

Can I file even if I know only a username or account number?

You may report with the identifying information available, but investigators need enough detail to trace the person and transaction. Preserve exact profile URLs, account numbers, telephone numbers, email addresses, transaction IDs, and platform reports. Lawful disclosure of subscriber or bank information generally requires proper official process.

Is a failed online purchase automatically estafa?

No. Nondelivery may result from fraud, breach of contract, logistics failure, or another cause. Evidence that the seller used a false representation to obtain payment—or never intended or had the ability to perform—may support fraud, but intent must be inferred from provable circumstances.

Can the registered owner of the receiving account be charged automatically?

No. Receipt of funds is important evidence but does not by itself prove that the account holder devised, knew of, or participated in the fraud. Investigators must determine identity, control, knowledge, participation, and the flow of funds.

Will an affidavit of desistance end the case?

Not necessarily. Estafa is generally prosecuted in the name of the People of the Philippines. A complainant’s withdrawal or settlement may affect evidence and civil claims, but it does not automatically compel the prosecutor or court to terminate a case supported by evidence.

Can I recover attorney’s fees and emotional-distress damages?

Possibly, but not automatically. Each category of damages requires a legal basis and adequate proof. Actual loss should be documented separately, and any claim for additional damages should be evaluated under the Civil Code and Rule 111.

What if several victims were deceived by the same person?

Each transaction may require its own factual and legal assessment. Victims should preserve individual proof of representations, reliance, payments, and loss. Tell investigators about the apparent pattern, but do not coordinate false or embellished accounts.

Should I file a cybercrime complaint whenever messaging or an e-wallet was used?

Report the technology used, but do not assume the legal classification. Investigators and prosecutors will determine whether the evidence supports technology-assisted estafa, computer-related fraud, identity theft, or another offense.

Official legal sources

Disclaimer

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Estafa classification, venue, prescription, procedure, and recovery depend on the transaction, documents, dates, applicable amendments, and available evidence. Official sources and procedures were checked as of 15 September 2026; verify current filing requirements directly with the relevant office or consult a qualified Philippine lawyer before acting.