Quick answer

If you suspect fraud or estafa, act quickly: stop further payments, contact the bank or e-wallet provider through its official fraud channel, preserve the complete transaction trail, report the incident to law enforcement, and prepare a sworn complaint supported by documents.

Not every unpaid debt, failed investment, broken promise, or bad business deal is estafa. A criminal case generally requires proof of a legally recognized form of fraud—such as deceit that induced you to release money, or misappropriation of money or property received in trust—and resulting damage. Recovery is possible through the civil liability included in the criminal case, an appropriate separate civil action, voluntary repayment, or other remedies, but reporting does not guarantee that the money will be traced or returned.

When suspected fraud may be estafa

Article 315 of the Revised Penal Code recognizes several forms of estafa. Two commonly encountered forms are:

Estafa through false pretenses or deceit

This may apply when a person makes a material false representation before or at the time you part with money or property—for example, by using a fictitious identity, inventing a transaction, or falsely claiming to possess authority, qualifications, property, credit, agency, or a business opportunity.

The prosecution ordinarily must establish that:

There was a false pretense, fraudulent act, or fraudulent means.
It occurred before or at the same time as the fraud.
You relied on it and, because of that reliance, released money or property.
You suffered damage.

These elements are reflected in Article 315, as amended by Republic Act No. 10951 and Supreme Court decisions such as People v. Bautista.

The timing matters. A lie made only after an existing debt became due may not establish estafa by deceit if it did not cause the original transfer.

Estafa through misappropriation or conversion

This may apply when money, goods, or other personal property are received under an obligation to deliver them, return them, or account for their value, but the recipient later misappropriates, converts, or denies receiving them, causing prejudice.

The documents creating the obligation are critical. A loan usually transfers ownership of the money to the borrower and creates an obligation to repay. That is different from property received for safekeeping, administration, sale on commission, or another arrangement requiring return or accounting. The label placed on a document is not conclusive; its actual terms and the parties’ conduct matter.

A written demand is often important evidence in misappropriation cases because it may show that the recipient was required to return or account for the property and failed to do so. Demand is not a substitute for proving all the elements of the offense.

When the problem may be civil rather than criminal

The following do not automatically amount to estafa:

A borrower fails to pay an ordinary loan.
A customer or business partner cannot meet a payment deadline.
An investment loses value without proof that material facts were fraudulently misrepresented.
A seller fails to deliver because of negligence, insolvency, or a genuine operational problem.
A promise is broken, but there is no proof that it was false when made.
A contract is breached after both sides entered it in good faith.

The Philippine Constitution prohibits imprisonment for debt. That protection does not shield independently fraudulent conduct, but criminal proceedings should not be used merely to pressure someone into paying a civil obligation.

The distinction turns on evidence of deceit, abuse of confidence, misappropriation, or another offense—not simply on nonpayment.

What to do immediately

1. Stop further loss

Do not send “release fees,” “verification deposits,” taxes, recovery charges, or additional investments merely because the recipient promises to return the original amount. Do not give the suspected offender one-time passwords, PINs, passwords, recovery codes, identification selfies, or remote access to your device.

If there is an ongoing threat, coercion, or immediate danger, contact the police or emergency services.

2. Contact the financial institution at once

Report the transaction through the official hotline, app, branch, or fraud channel of every bank, e-wallet, card issuer, remittance service, or cryptocurrency platform involved. Ask it to:

secure or freeze your account if compromised;
block cards, tokens, or online access;
attempt a recall, hold, or fraud review where available;
preserve transaction and account-access records;
give you a reference or case number; and
explain its formal dispute process and deadlines.

A transfer may already be final, and an institution generally cannot promise recovery. Speed nevertheless matters because funds can be withdrawn or moved through several accounts.

If the institution does not resolve the complaint, use the Bangko Sentral ng Pilipinas’ official Consumer Assistance Mechanism where the provider is under BSP supervision. Follow the provider’s internal complaint process and retain its response and reference number.

3. Secure compromised accounts and devices

Change passwords from a clean device, starting with the email account used for password resets. Enable multi-factor authentication, sign out other sessions, and notify mobile and financial providers if your SIM or identity may have been compromised.

Do not wipe, reset, repair, or surrender a relevant device before preserving the evidence and, where appropriate, consulting investigators. If malware or unauthorized access is suspected, disconnect the device from networks without altering its stored data.

4. Preserve evidence in its original form

Keep complete, unedited copies of:

deposit slips, receipts, transfer confirmations, bank statements, and reference numbers;
account names, account numbers, QR codes, wallet addresses, and transaction hashes;
advertisements, listings, websites, social-media profiles, and profile URLs;
emails, text messages, call logs, voice messages, and complete chat threads;
contracts, order forms, invoices, delivery documents, acknowledgments, and promissory notes;
photographs or scans of identification documents supplied by the other party;
proof of what was promised, when it was promised, and why you relied on it;
demands for return, refund, delivery, or accounting, together with proof of receipt;
names and contact details of witnesses; and
replies from banks, platforms, couriers, regulators, and law-enforcement agencies.

Export chats where the service permits it. Preserve the sender, recipient, date, time, URL, and surrounding conversation—not only selected screenshots. Keep the original files and make separate backups. Do not crop, annotate, enhance, or rename the only copy.

Create a chronological table showing each representation, payment, delivery, demand, and response. Identify whether the date and time are in Philippine time or another time zone.

5. Avoid public accusations that could create a separate dispute

You may warn others using accurate, supportable facts, but avoid publishing unverified identities, addresses, identification documents, or accusations stated as established guilt. Give relevant information to investigators and regulators. A pending complaint is not a conviction.

Where to report

The proper route depends on how the incident occurred and what evidence is available.

Police or NBI

You may report to the Philippine National Police, including the PNP Anti-Cybercrime Group for online incidents, or to the National Bureau of Investigation. These agencies may document the report, investigate, preserve digital leads through lawful processes, and refer or assist with the criminal complaint.

A police blotter or incident report records the report but is not, by itself, the criminal case or proof that estafa occurred.

Prosecutor’s office

A criminal complaint is generally initiated through a sworn complaint-affidavit filed with the appropriate Office of the City or Provincial Prosecutor, accompanied by witness affidavits and supporting documents. Under Rule 112 of the Rules of Criminal Procedure, the complaint should identify the respondent’s address and be supported by evidence establishing probable cause.

The prosecutor will determine the correct offense and procedure. Depending on the penalty prescribed for the alleged offense, the matter may undergo preliminary investigation or follow the procedure for offenses not requiring one.

Confirm current filing requirements directly with the receiving prosecutor’s office. Requirements concerning copies, electronic media, notarization or administration of oaths, and local filing arrangements may vary.

Regulators and specialized agencies

A separate regulatory report may be useful when the transaction involves:

an unauthorized investment solicitation or securities activity—report it to the Securities and Exchange Commission;
a BSP-supervised bank, e-money issuer, remittance company, or similar financial provider—use the BSP consumer channel after raising the matter with the provider;
deceptive consumer sales or online retail activity—consult the Department of Trade and Industry; or
misuse of personal information or a data breach—consult the National Privacy Commission.

A regulator may impose administrative measures or refer evidence, but a regulatory complaint does not necessarily replace the criminal complaint or a claim for recovery.

Preparing a strong complaint-affidavit

A useful complaint is factual, chronological, and document-based. It should ordinarily explain:

Who you are and how you can personally attest to the facts.
Who the respondent is, including known names, aliases, addresses, contact details, and account identifiers.
The precise representation or undertaking made.
Why it was false, fraudulent, or inconsistent with the entrusted purpose.
When and where it was communicated.
What money or property you released because of it.
Where, when, and how the transfer occurred.
What happened afterward.
The resulting loss or prejudice.
What demands, reports, and recovery attempts you made.
Which numbered attachment proves each important fact.

Separate personal knowledge from information learned from other people. Do not exaggerate, guess at identities, alter messages, or state that an account holder personally committed the fraud unless the evidence supports that conclusion. An account may have been stolen, rented, or used as a pass-through account.

Each witness with material first-hand knowledge should prepare a truthful affidavit. Attach readable documents and retain the originals for authentication or production when required.

Choosing the correct place to file

Criminal venue is jurisdictional. As a general rule, the case must be brought where the offense or an essential element occurred. In estafa, relevant places may include where the deceit was communicated, where the victim relied on it, where money or property was delivered, or where legally cognizable damage occurred. Electronic transactions and multiple locations can make venue fact-sensitive.

Do not assume that you may file anywhere merely because the communication was online. Bring the full transaction trail to the police, prosecutor, or counsel so the proper venue can be assessed.

Barangay conciliation may also need to be considered when the parties actually reside in the same city or municipality and no statutory exception applies. The Local Government Code excludes, among other matters, offenses punishable by imprisonment exceeding one year or a fine exceeding ₱5,000, but application to a particular dispute depends on the offense, prescribed penalty, parties’ residences, and other exceptions. See Sections 408 and 412 of the Local Government Code. Confirm with the prosecutor or a lawyer before bypassing the barangay process.

Online fraud and the Cybercrime Prevention Act

When an offense under the Revised Penal Code or a special law is committed by, through, or with information and communications technology, Section 6 of the Cybercrime Prevention Act of 2012 may apply. The statute provides for a penalty one degree higher for a covered offense committed through ICT.

However, the use of a phone, social-media account, or bank transfer does not eliminate the need to prove every element of the underlying offense. Other cybercrime provisions—such as computer-related fraud or identity theft—may apply only if their separate statutory elements are established.

Preservation should be requested promptly because providers may retain different kinds of records for limited periods. Investigators must use the legal processes required to obtain subscriber, traffic, content, banking, or account information.

Checks and payment disputes

A dishonored check may raise issues under Article 315 or Batas Pambansa Blg. 22, but the offenses have different elements.

For check-based estafa, the check and alleged deceit must be examined in relation to when the obligation arose. A check issued only to pay a pre-existing obligation does not necessarily establish that the payee was induced by the check to release the original money or property.

A possible BP 22 case has its own requirements, including matters concerning dishonor, notice, and failure to pay or make arrangements within the period provided by law. Keep the original check, deposit or return slip, bank notation, written notice of dishonor, and reliable proof of actual receipt. Obtain legal advice promptly because incorrect service or missing proof may affect the case.

How recovery can be pursued

Civil liability in the criminal case

Under Rule 111, the civil action to recover civil liability arising from the offense is generally deemed included when the criminal action is instituted, unless the offended party waives it, reserves the right to file separately, or has already filed the civil action.

Actual damages must be proved. Present evidence of the amount transferred, property delivered, payments already returned, and other legally recoverable loss. A demand for an inflated amount can weaken credibility.

A separate civil action

Depending on the facts, possible civil remedies may arise from contract, fraud, unjust enrichment, or other sources of obligation. Article 33 of the Civil Code also permits an independent civil action in cases of fraud, subject to the prohibition against double recovery for the same act.

The timing and interaction of civil and criminal cases require care. Rule 111 can require suspension of a civil action arising from the offense after the criminal action begins, while a genuinely independent action may follow different rules. Filing fees, venue, jurisdiction, provisional remedies, and prescription must also be assessed.

Settlement or repayment

The parties may agree on restitution or repayment where legally permissible. Put any agreement in writing, identify the amount and schedule, require verifiable payment, and state what happens upon default.

Payment or settlement does not automatically erase criminal liability for an offense already committed. Conversely, accepting partial payment does not automatically prove or waive a criminal claim. Do not execute an affidavit of desistance, waiver, quitclaim, or acknowledgment of full payment unless it accurately reflects your informed decision and the money has actually cleared.

Provisional remedies and asset preservation

In an appropriate case, counsel may consider attachment or another provisional remedy. These remedies require statutory grounds, evidence, court approval, and often a bond. A complainant cannot privately seize, freeze, or take the respondent’s property without lawful authority.

Even a favorable judgment does not guarantee collection. Recovery depends on locating assets, establishing ownership, observing exemptions and priorities, and using lawful enforcement procedures.

Deadlines and delay

There is no single filing deadline for every fraud case. Criminal prescription depends on the offense charged and its prescribed penalty; civil claims may have different limitation periods based on their legal source and the documents involved. Rules on when prescription begins, is interrupted, or resumes are fact-sensitive.

Do not wait for prolonged informal negotiations before obtaining advice. Delay can result in:

expiration of criminal or civil claims;
deletion of platform, CCTV, communications, or transaction records;
movement or dissipation of funds;
loss of access to witnesses; and
disputes over notice, demand, or venue.

Ask a Philippine lawyer or the prosecutor to calculate the applicable periods from the actual dates and documents. Do not rely on a generic online deadline.

Common mistakes to avoid

Treating every unpaid obligation as estafa.
Sending more money to “unlock” a refund or recovery.
Filing against a bank-account holder without evidence connecting that person to the deceit.
Submitting only cropped screenshots instead of complete conversations and transaction records.
Deleting embarrassing messages or facts that appear unfavorable.
Failing to identify the specific false statement or entrusted obligation.
Omitting proof that the false statement caused the payment.
Using inconsistent dates, amounts, account numbers, or time zones.
Waiting for the suspect to confess before reporting.
Filing in a convenient location without examining criminal venue.
Assuming a police report automatically freezes an account or starts prosecution.
Paying an unofficial “recovery agent” who promises guaranteed tracing, arrest, or reimbursement.
Signing a quitclaim before confirmed funds have cleared.
Expecting conviction alone to produce immediate reimbursement.

When legal help is urgent

Seek prompt assistance from a Philippine lawyer, the Public Attorney’s Office if you may qualify, law enforcement, or the prosecutor when:

the loss is substantial or involves many victims;
money is still moving through identifiable accounts;
the suspect is threatening witnesses, destroying records, or leaving the country;
your identity, bank access, SIM, email, or device was compromised;
you are being asked to sign a settlement, waiver, or affidavit of desistance;
checks, trust receipts, investments, corporations, cryptocurrency, land, or overseas transfers are involved;
the incident involves an employee, fiduciary, public officer, licensed professional, or organized group;
you are uncertain about venue, barangay conciliation, prescription, or whether to reserve a separate civil action; or
you have received a subpoena, counter-affidavit, dismissal, or adverse resolution with a stated deadline.

Frequently asked questions

Can I file estafa merely because someone did not repay me?

Usually not on that fact alone. You need evidence of the particular fraud recognized by law, such as prior deceit that induced the transfer or misappropriation of property received under an obligation to return or account for it. An ordinary unpaid loan is generally a civil matter.

Do I need to send a demand letter first?

It depends on the mode of estafa and the documents. A demand may be important evidence of misappropriation, default, notice, or damages, but it does not create criminal liability where the other elements are absent. Use a delivery method that reliably proves receipt.

Can I report an online seller whose item never arrived?

Yes, you may report suspected fraud and seek platform or consumer remedies. Whether the facts establish estafa depends on proof that the seller used deceit to obtain payment, rather than merely failing to perform a genuine transaction.

Where should an online scam be reported?

Start with the financial provider and platform, then report to the PNP, including the Anti-Cybercrime Group, or the NBI. A sworn criminal complaint is generally filed with the prosecutor having proper territorial jurisdiction. Regulators may also have authority over the business or financial provider involved.

Will the bank reveal the recipient’s identity to me?

Not necessarily. Banking, privacy, and investigative rules may restrict direct disclosure. Preserve the account details and let the institution and authorities obtain or disclose records through the proper legal process.

Can several victims file together?

Victims may coordinate and provide evidence of a common scheme, but each transaction and each victim’s reliance and loss should be documented. Whether allegations belong in one complaint or separate cases depends on the acts, respondents, venue, and applicable rules.

Can I recover attorney’s fees, interest, or emotional damages?

Possibly, but these are not automatic. The legal basis, pleadings, evidence, filing fees, and court findings matter. Actual loss should be documented separately from other claimed damages.

Does an acquittal always end the recovery claim?

No. Rule 111 recognizes that extinction of the criminal action does not invariably extinguish every civil claim. The result depends on the basis of the judgment and the source of civil liability. A final finding that the act or omission did not exist has particular consequences.

Does repayment automatically dismiss the criminal case?

No. Repayment may affect the civil liability and may be relevant to the parties’ positions, but it does not necessarily extinguish criminal liability. Any settlement should be reviewed before documents are signed or complaints withdrawn.

What if I know only an alias or account number?

Report the available identifiers and preserve the complete source records. Do not guess the person’s legal identity. Investigators may seek subscriber, banking, platform, or device information through lawful process.

Official legal and reporting resources

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. The proper offense, venue, evidence, procedure, deadlines, and recovery options depend on the complete facts and documents. Official sources were checked as of 18 September 2026.