How to File an Estafa Case Against an Online Scammer in the Philippines

I. Introduction

Online scams have become one of the most common fraud problems in the Philippines. A victim may pay for an item that is never delivered, invest in a fake opportunity, send money to a romantic partner who disappears, transfer funds to a fake online seller, deposit into a fraudulent casino or trading platform, or disclose account details through a phishing link. When money or property is obtained through deceit, the legal remedy may include filing a criminal complaint for estafa, often with related cybercrime allegations.

Estafa is a criminal offense under the Revised Penal Code. When the fraud is committed through the internet, social media, messaging apps, e-wallets, online banking, fake websites, or digital platforms, the case may also involve the Cybercrime Prevention Act, electronic evidence, data privacy issues, banking rules, and digital forensics.

Filing an estafa case against an online scammer requires more than saying “I was scammed.” The complainant must show the scammer’s deceit, the victim’s reliance on that deceit, the transfer of money or property, and damage. The complainant must also preserve digital evidence properly and identify the person or account behind the scam as much as possible.


II. What Is Estafa?

Estafa is a form of fraud. It generally involves defrauding another person through abuse of confidence, deceit, false pretenses, fraudulent acts, or other means recognized by law.

In simple terms, estafa occurs when a person obtains money, property, or value from another through dishonest means and causes damage.

In online scam situations, estafa may arise when the scammer:

  1. Pretends to sell goods but never intends to deliver them.
  2. Pretends to operate a legitimate investment scheme.
  3. Uses a fake identity to induce payment.
  4. Misrepresents ownership, authority, or capacity.
  5. Receives money for a specific purpose and misappropriates it.
  6. Uses fake receipts, fake screenshots, fake websites, or fake business permits.
  7. Lures victims into sending money through romance, friendship, employment, gambling, crypto, or trading schemes.
  8. Receives funds in trust and refuses to return or account for them.
  9. Uses false promises to induce repeated transfers.

Not every unpaid debt or failed transaction is estafa. The key distinction is fraudulent intent and deceit.


III. Estafa Versus Ordinary Debt

Many people confuse estafa with unpaid debt. A person’s failure to pay money does not automatically mean estafa.

A. Ordinary civil debt

A civil debt usually exists when:

  1. Money was borrowed.
  2. The borrower promised to pay.
  3. The borrower failed to pay on time.
  4. There was no clear fraud at the beginning.
  5. The dispute is about collection, not deception.

The remedy may be a civil collection case, small claims, or demand letter.

B. Estafa

Estafa is more likely when:

  1. The accused used false statements to obtain the money.
  2. The accused never intended to comply from the start.
  3. The accused used a fake identity or fake business.
  4. The accused disappeared after receiving payment.
  5. The accused used the same scheme on multiple victims.
  6. The accused promised something impossible or nonexistent.
  7. The accused misappropriated money entrusted for a specific purpose.
  8. The accused used forged or fabricated proof.

The decisive question is often whether there was deceit or fraudulent intent at the time the victim parted with money or property.


IV. Common Online Scam Situations That May Involve Estafa

A. Fake online selling

A seller posts products online, accepts payment, and never delivers.

Examples:

  1. Gadgets
  2. Shoes
  3. Bags
  4. Concert tickets
  5. Airline tickets
  6. Vehicles or motorcycles
  7. Rental units
  8. Appliances
  9. Food packages
  10. Event reservations
  11. Livestream sale items
  12. Pre-order products

Red flags include stolen photos, very low prices, refusal to do meetups, pressure to pay immediately, changing accounts, and blocking the buyer after payment.

B. Fake investment schemes

The scammer promises high returns, often with little or no risk.

Examples:

  1. Crypto investment
  2. Forex trading
  3. Online casino investment
  4. “Double your money” schemes
  5. Tasking or liking jobs
  6. Ponzi-style referral programs
  7. Fake cooperative investments
  8. Fake lending investments
  9. Fake stock trading groups
  10. Fake franchising or dropshipping programs

The promise of guaranteed or unusually high returns is often a major warning sign.

C. Romance scams

A person builds an online romantic relationship and asks for money.

Common excuses include:

  1. Medical emergency
  2. Travel expenses
  3. Customs fees
  4. Business problems
  5. Locked bank account
  6. Military deployment
  7. Hospital bills
  8. Family emergency
  9. Visa or immigration fees
  10. Package delivery charges

The scam may involve fake identities, stolen photos, fake documents, and repeated emotional manipulation.

D. Fake job or work-from-home scams

The scammer offers employment but requires payment first.

Examples:

  1. Training fee
  2. Processing fee
  3. Uniform fee
  4. Equipment fee
  5. Activation fee
  6. Deposit to unlock tasks
  7. Payment to receive salary
  8. Fake overseas job placement

Legitimate employers generally do not require applicants to pay money to receive work.

E. Phishing and account takeover scams

The scammer tricks the victim into giving OTPs, passwords, card details, or e-wallet credentials.

The scam may involve:

  1. Fake bank links
  2. Fake delivery notices
  3. Fake government aid forms
  4. Fake verification messages
  5. Fake customer support pages
  6. Fake e-wallet promos
  7. Fake marketplace payment links

This may involve estafa, identity theft, illegal access, computer-related fraud, or other cybercrime issues.

F. Fake rental or real estate listings

The scammer posts a property, accepts reservation money, and disappears.

Evidence may include fake ownership documents, stolen photos, fake IDs, and chat messages promising occupancy.

G. Fake ticket sales

The scammer sells fake or duplicate tickets for concerts, travel, sports events, seminars, or shows.

Evidence may include payment receipts, ticket screenshots, seller profile, and proof the ticket was invalid.

H. Online casino, betting, or trading withdrawal refusal

A platform accepts deposits, shows winnings or profits, then refuses withdrawal unless the victim pays more.

Common fake charges include:

  1. Tax
  2. AML clearance
  3. VIP activation
  4. Withdrawal password
  5. Verification fee
  6. Wallet unlocking fee
  7. Processing fee

This pattern may support a fraud complaint.


V. Legal Elements to Prove

The exact elements depend on the kind of estafa alleged, but an online scam complaint usually needs to show:

  1. False representation, deceit, abuse of confidence, or fraudulent act
  2. The victim relied on the deceit
  3. The victim delivered money, property, or value
  4. The accused caused damage
  5. The accused had fraudulent intent

In online scams, the most important evidence usually answers these questions:

  1. What did the scammer promise?
  2. Why did the victim believe it?
  3. How much money was sent?
  4. Where was the money sent?
  5. What happened after payment?
  6. Did the scammer disappear, block the victim, or make more excuses?
  7. Is there proof the representation was false?
  8. Can the person behind the account be identified?

VI. Estafa by False Pretenses or Deceit

Many online scams fall under estafa by deceit or false pretenses. This occurs when the accused falsely represents a fact, qualification, authority, business, property, product, investment, or intention, and the victim gives money because of that representation.

Examples:

  1. “I own this phone and will ship it after payment.”
  2. “I am an authorized ticket seller.”
  3. “This investment is registered and guaranteed.”
  4. “I am a customs officer and your package requires fees.”
  5. “I can process your visa.”
  6. “I am a legitimate lender.”
  7. “I will deliver the item tomorrow.”
  8. “I am a licensed trader.”
  9. “Your profit is ready, but you must pay tax first.”
  10. “I represent this company.”

If these statements were false and were used to obtain money, estafa may be considered.


VII. Estafa by Misappropriation or Conversion

Another common type involves money or property entrusted to the accused for a specific purpose, which the accused later misappropriates or refuses to return.

Examples:

  1. A person receives money to buy an item but keeps the money.
  2. An agent receives collections but does not remit them.
  3. A person receives funds for business use but uses them personally.
  4. A reseller receives inventory proceeds but refuses to account.
  5. A coordinator receives group funds and disappears.
  6. A broker receives reservation money but does not remit it.

This type often requires proof that the money was received in trust, commission, administration, or under an obligation to deliver or return it.


VIII. Estafa and Cybercrime

When estafa is committed through online means, the Cybercrime Prevention Act may become relevant. The scam may involve computer-related fraud, identity theft, illegal access, misuse of devices, or other cybercrime conduct.

Online tools used in the scam may include:

  1. Facebook Marketplace
  2. Messenger
  3. Instagram
  4. TikTok
  5. Telegram
  6. Viber
  7. WhatsApp
  8. Discord
  9. Email
  10. Fake websites
  11. Online banking
  12. E-wallets
  13. Cryptocurrency wallets
  14. Online classified ads
  15. Dating apps
  16. Fake apps

The involvement of digital systems may affect investigation, evidence preservation, and possible penalties.


IX. Who May File the Complaint?

The person who was defrauded may file the complaint. This is usually the person who:

  1. Sent the money
  2. Owned the money or property
  3. Was induced by the scam
  4. Suffered damage
  5. Was authorized to represent the victim

If the victim is a company, an authorized officer may file the complaint with proof of authority.

If the victim is a minor, a parent or guardian may assist.

If multiple victims are involved, each victim should prepare their own evidence, though complaints may be coordinated where appropriate.


X. Against Whom Should the Complaint Be Filed?

The complaint may be filed against:

  1. The online seller or scammer
  2. The person who received the money
  3. The person who controlled the bank or e-wallet account
  4. The recruiter or agent
  5. The person using the fake account
  6. The owner of the phone number used
  7. The operator of the fake website or platform
  8. Co-conspirators
  9. Persons who helped collect or move the money
  10. Persons who knowingly lent accounts for the scam

However, the complainant should be careful not to accuse people without basis. A bank or e-wallet account holder may be a scammer, a money mule, a hacked account owner, or an innocent recipient. The complaint should state facts and evidence, not unsupported conclusions.


XI. What If the Scammer Used a Fake Name?

A case may still be reported even if the scammer used a fake name. The complaint may initially identify the person through:

  1. Username
  2. Profile link
  3. Phone number
  4. E-wallet number
  5. Bank account name
  6. Bank account number
  7. Email address
  8. Website domain
  9. Wallet address
  10. IP-related data, if later lawfully obtained
  11. Delivery address
  12. Pickup address
  13. Photos used
  14. Voice notes or video calls
  15. Other linked accounts

Law enforcement or prosecutors may use subpoenas, preservation requests, or coordination with platforms and financial institutions where legally available.


XII. Immediate Steps After Being Scammed

1. Stop sending money

Do not pay more to “unlock,” “refund,” “verify,” or “process” anything. Scammers often ask for repeated payments.

2. Preserve evidence before confronting the scammer

Take screenshots and screen recordings before the scammer deletes messages or blocks you.

3. Contact your bank or e-wallet immediately

Report the transaction as a scam. Request investigation, account tagging, freezing, reversal, or assistance if available.

4. Report the account to the platform

Report the scammer’s social media, marketplace, or messaging account, but only after saving evidence.

5. Prepare a written timeline

Write dates, amounts, promises, payment details, and events in order.

6. Avoid public accusations without proof

Public posts may create defamation risks. It is safer to report through proper channels.

7. Do not hack or threaten the scammer

Illegal retaliation can create separate liability.


XIII. Evidence Checklist

A strong estafa complaint should include:

  1. Screenshots of the scammer’s profile
  2. Profile link or URL
  3. Full conversation history
  4. Screenshots of product, investment, job, or offer
  5. Payment instructions given by scammer
  6. Proof of payment
  7. Bank transfer receipt
  8. E-wallet transaction receipt
  9. Account name and number of recipient
  10. Phone number used
  11. Email address used
  12. Delivery or shipping details, if any
  13. Fake tracking numbers
  14. Fake receipts or documents
  15. Screenshots showing refusal to deliver or refund
  16. Proof that the scammer blocked the victim
  17. Screenshots of deleted or changed posts, if available
  18. Witness statements
  19. Copies of demand messages
  20. Police blotter or incident report, if any
  21. Other victims’ statements, if available
  22. Identification documents of complainant
  23. Written timeline
  24. Any proof linking the online identity to a real person
  25. Any platform report reference number
  26. Any bank or e-wallet complaint reference number

The most important evidence is the link between the false promise, the payment, and the resulting damage.


XIV. How to Preserve Digital Evidence

Digital evidence can be deleted or altered. Preserve it carefully.

Best practices:

  1. Screenshot the entire conversation, not only selected parts.
  2. Include dates and timestamps.
  3. Capture the scammer’s profile page.
  4. Copy the profile link.
  5. Save the marketplace listing or post URL.
  6. Record the screen while opening the profile and conversation.
  7. Download transaction receipts.
  8. Keep original files, not just forwarded copies.
  9. Back up evidence to cloud storage and external storage.
  10. Avoid editing screenshots.
  11. Keep the phone or device used in the transaction.
  12. Preserve SIM messages and call logs.
  13. Save emails in original format if possible.
  14. Print copies for filing but keep digital originals.
  15. Ask witnesses to execute affidavits if needed.

Screenshots alone may be challenged, so support them with receipts, links, witnesses, and platform records.


XV. Payment Evidence

Payment evidence is central.

For bank transfers, keep:

  1. Deposit slip
  2. Online transfer receipt
  3. Reference number
  4. Date and time
  5. Amount
  6. Recipient name
  7. Recipient account number
  8. Bank name
  9. Sender account details
  10. Confirmation email or SMS

For e-wallet transfers, keep:

  1. Screenshot of successful transfer
  2. Reference number
  3. Receiver name or number
  4. Transaction history
  5. Wallet statement
  6. Date and time
  7. Amount
  8. Complaint ticket number

For crypto transfers, keep:

  1. Wallet address
  2. Transaction hash
  3. Exchange records
  4. Screenshot of deposit instruction
  5. Date and time
  6. Amount and token
  7. Blockchain explorer record
  8. Chat showing the wallet was provided by the scammer

XVI. Chat and Conversation Evidence

The conversation should show the scammer’s false representation and the victim’s reliance.

Important messages include:

  1. Offer or advertisement
  2. Promise to deliver
  3. Payment instruction
  4. Confirmation of receipt
  5. Excuses after payment
  6. Demand for additional money
  7. Refusal to refund
  8. Admission of delay or inability to deliver
  9. Threats or blocking
  10. Identity claims
  11. Fake proof sent by scammer
  12. Statements showing intent

Do not delete messages even if embarrassing. Full context is important.


XVII. Demand Letter or Demand Message

A demand is often useful, especially in estafa by misappropriation, because it can show that the accused refused to return or account for money after demand.

A demand may be made through:

  1. Formal written letter
  2. Email
  3. Registered mail
  4. Courier
  5. Messenger or chat message
  6. Lawyer’s letter
  7. Barangay demand, where appropriate

The demand should be calm and factual. It should state:

  1. Amount paid
  2. Date of payment
  3. Transaction reference
  4. Promise or obligation
  5. Failure to comply
  6. Demand for refund or delivery
  7. Deadline
  8. Warning that legal remedies will be pursued

A demand letter is not always legally required for every form of estafa, but it is often helpful evidence.


XVIII. Filing With the Police or Cybercrime Unit

A victim may report the scam to the police, cybercrime unit, or other law enforcement office. The report may help document the incident, initiate investigation, and identify the scammer.

Bring:

  1. Government ID
  2. Printed screenshots
  3. Digital copies of evidence
  4. Payment receipts
  5. Written timeline
  6. Contact details of scammer
  7. Bank or e-wallet account details
  8. Links and URLs
  9. Phone numbers
  10. Names of witnesses
  11. Other victims, if known

The police may prepare a blotter, incident report, or referral. For serious online scams, cybercrime investigators may assist in preserving or requesting digital records.


XIX. Filing With the Prosecutor’s Office

A criminal complaint for estafa is commonly filed through a complaint-affidavit before the appropriate prosecutor’s office.

The complaint package may include:

  1. Complaint-affidavit
  2. Affidavits of witnesses
  3. Proof of payment
  4. Screenshots and chat logs
  5. Copies of IDs
  6. Demand letter or demand messages
  7. Certification or verification requirements, if applicable
  8. Other supporting documents

The prosecutor evaluates whether there is probable cause to file the case in court.


XX. Complaint-Affidavit: What It Should Contain

The complaint-affidavit should clearly narrate the facts.

It should answer:

  1. Who is the complainant?
  2. Who is the respondent?
  3. How did the complainant encounter the respondent?
  4. What did the respondent represent or promise?
  5. Why did the complainant believe the respondent?
  6. How much money was sent?
  7. When and how was payment made?
  8. What happened after payment?
  9. Why was the representation false?
  10. What damage was suffered?
  11. What evidence supports the complaint?
  12. What relief is requested?

The affidavit should be chronological and specific. Avoid vague statements like “the respondent scammed me” without explaining the exact deceit.


XXI. Sample Complaint Narrative Structure

A strong complaint narrative may follow this order:

  1. “On [date], I saw the respondent’s post offering [item/service/investment].”
  2. “The respondent represented that [specific promise].”
  3. “Because of that representation, I agreed to send ₱[amount].”
  4. “The respondent instructed me to send payment to [account name/number].”
  5. “On [date/time], I transferred ₱[amount], as shown by the attached receipt.”
  6. “After receiving payment, the respondent [failed to deliver/gave excuses/demanded more money/blocked me].”
  7. “I demanded refund or delivery on [date], but respondent refused or ignored me.”
  8. “I later discovered that [item did not exist/account was fake/other victims had same experience/license was fake].”
  9. “Because of respondent’s deceit, I suffered damage in the amount of ₱[amount].”
  10. “I am filing this complaint for estafa and other appropriate offenses.”

XXII. Where to File

Venue can be important. Possible filing locations may depend on:

  1. Where the victim was deceived
  2. Where the victim sent the money
  3. Where the payment was received
  4. Where the scammer resides, if known
  5. Where the damage occurred
  6. Where cybercrime-related acts were committed or accessed

Because online scams involve multiple places, venue may be technical. The complainant should be prepared to explain where they were when they transacted, paid, and discovered the fraud.


XXIII. Preliminary Investigation

After a complaint is filed, the case may undergo preliminary investigation.

The usual process includes:

  1. Filing of complaint-affidavit and evidence
  2. Prosecutor’s review
  3. Subpoena to respondent
  4. Respondent’s counter-affidavit
  5. Reply-affidavit by complainant, if allowed
  6. Prosecutor’s resolution
  7. Filing of information in court if probable cause is found
  8. Dismissal if probable cause is not found

The prosecutor does not decide guilt beyond reasonable doubt at this stage. The question is whether there is enough basis to charge the respondent in court.


XXIV. Court Proceedings

If the prosecutor finds probable cause, a criminal information may be filed in court.

Court proceedings may include:

  1. Issuance of warrant or summons
  2. Bail proceedings, if applicable
  3. Arraignment
  4. Pre-trial
  5. Presentation of prosecution evidence
  6. Cross-examination
  7. Defense evidence
  8. Decision
  9. Appeal, if any

In court, the prosecution must prove guilt beyond reasonable doubt.


XXV. Civil Liability in an Estafa Case

A criminal estafa case may include civil liability. The victim may seek restitution or return of the amount lost, plus damages when proper.

Possible civil claims include:

  1. Return of money
  2. Value of property lost
  3. Actual damages
  4. Moral damages in proper cases
  5. Exemplary damages in proper cases
  6. Attorney’s fees
  7. Costs

The victim should keep proof of actual loss. Receipts and transfer records are essential.


XXVI. Small Claims or Civil Case as an Alternative

Sometimes the evidence of fraud is weak, but the evidence of debt or non-payment is strong. In that situation, a civil remedy may be more appropriate.

A victim may consider:

  1. Small claims case
  2. Civil collection case
  3. Breach of contract action
  4. Demand letter
  5. Barangay conciliation, if applicable

Small claims may be faster for money recovery, but it does not impose criminal liability. Estafa is appropriate when there is criminal fraud, not merely unpaid debt.


XXVII. Bank and E-Wallet Complaints

The victim should promptly report the transaction to the bank or e-wallet provider.

The report should include:

  1. Transaction date and time
  2. Amount
  3. Recipient name and account
  4. Reference number
  5. Screenshots of scammer’s instructions
  6. Police report or complaint reference, if available
  7. Request to investigate, freeze, or tag the recipient account
  8. Request for available recovery options

Time is critical. Scam funds are often moved quickly.

A bank or e-wallet may not always reverse the transaction, especially if the transfer was authorized by the victim, but the report can help investigation and may prevent further fraud.


XXVIII. Marketplace and Platform Reports

If the scam occurred through a marketplace or social media platform, report the account and listing.

Before reporting, preserve evidence. Platform takedowns may delete visible proof.

Report may include:

  1. Fake seller profile
  2. Scam listing
  3. Conversation screenshots
  4. Payment proof
  5. Other victim reports
  6. Impersonation claim
  7. Fake business page
  8. Fraudulent ads

Platform action may suspend accounts but may not guarantee money recovery.


XXIX. Barangay Conciliation

Barangay conciliation may be relevant if the parties are known and live in the same city or municipality, subject to legal limitations.

However, many online scams involve unknown persons, fake identities, different cities, or offenses beyond barangay settlement scope.

Barangay proceedings may be useful when:

  1. The scammer is identifiable.
  2. The amount is small.
  3. The parties are within the same locality.
  4. The victim primarily wants refund.
  5. The matter may be settled.

Barangay settlement should be approached carefully. A settlement may affect later criminal action, depending on wording and execution.


XXX. Identifying the Scammer

Identification is often the hardest part of online scam cases.

Possible leads include:

  1. Bank account name
  2. E-wallet registered name
  3. Mobile number
  4. SIM registration information, if lawfully obtained
  5. Social media profile
  6. Profile photos
  7. Linked pages
  8. Delivery address
  9. Pickup address
  10. IP-related records
  11. Email address
  12. Domain registration
  13. Other victims
  14. Voice calls
  15. Video calls
  16. CCTV from cash-out locations
  17. Remittance claim records
  18. Courier records
  19. Marketplace verification data
  20. Admissions from relatives or associates

The victim should not use illegal methods to identify the scammer. Let investigators request records through proper channels.


XXXI. Money Mules and Account Holders

Online scammers often use bank or e-wallet accounts belonging to others. These may be “money mules.”

A money mule may be someone who:

  1. Lends an account for a fee
  2. Opens accounts for scammers
  3. Allows cash-in or cash-out
  4. Receives funds and transfers them onward
  5. Claims ignorance but repeatedly receives scam proceeds
  6. Was tricked into receiving funds
  7. Had their account hacked

The account holder may be investigated. The complaint should include the recipient account information but should avoid unsupported allegations beyond the evidence.


XXXII. Multiple Victims

If several people were scammed by the same person or scheme, coordination may strengthen the case.

Multiple victims can provide:

  1. Similar transaction patterns
  2. Same recipient account
  3. Same scripts or promises
  4. Same fake documents
  5. Same website or platform
  6. Same recruiter
  7. Same refusal or blocking behavior
  8. Proof of fraudulent scheme

Each victim should still prepare individual proof of payment and reliance.


XXXIII. Online Seller Scam: Strong Evidence

A strong fake seller case may include:

  1. Screenshot of item listing
  2. Seller’s promise to deliver after payment
  3. Payment receipt to seller’s account
  4. Seller confirmation of receipt
  5. Failure to deliver
  6. False tracking number
  7. Demand for refund
  8. Seller blocking victim
  9. Proof photos were stolen from another source
  10. Other victims with same account

This shows both deceit and damage.


XXXIV. Investment Scam: Strong Evidence

A strong investment scam complaint may include:

  1. Screenshots of promised returns
  2. Proof of solicitation
  3. Payment receipts
  4. Fake registration documents
  5. Payout screenshots sent to induce investment
  6. Referral scheme details
  7. Refusal to release funds
  8. Demand for additional fees
  9. Other victims
  10. Evidence the investment was not legitimate

Investment scams may involve additional regulatory issues, especially if securities, lending, crypto, or pooled funds are involved.


XXXV. Romance Scam: Strong Evidence

A romance scam complaint may include:

  1. Dating profile or social media profile
  2. Full chat history
  3. Emotional relationship timeline
  4. Specific money requests
  5. Payment receipts
  6. Fake documents
  7. Fake emergency stories
  8. Evidence of stolen identity or photos
  9. Repeated excuses
  10. Disappearance after payments

Romance scams can be embarrassing, but complete evidence is important.


XXXVI. Phishing Scam: Strong Evidence

A phishing-related complaint may include:

  1. Fake link or website
  2. SMS or email lure
  3. Screenshot of page asking for credentials
  4. Unauthorized transfer records
  5. Bank alerts
  6. Timeline of account compromise
  7. Device screenshots
  8. Complaint to bank
  9. Reported phone numbers
  10. IP or platform records, if later obtained

Phishing cases may involve offenses beyond estafa.


XXXVII. Defenses Commonly Raised by Respondents

A respondent may argue:

  1. It was a civil debt, not estafa.
  2. There was no deceit.
  3. The product was delayed, not nonexistent.
  4. The complainant voluntarily invested and assumed risk.
  5. The account holder did not know about the scam.
  6. The respondent’s account was hacked.
  7. The complainant sent money to someone else.
  8. The screenshots are fabricated.
  9. The complainant misunderstood the terms.
  10. The respondent intended to pay but suffered business losses.
  11. The complainant was also part of an illegal transaction.
  12. The case was filed in the wrong venue.
  13. The complaint was filed too late.
  14. The identity of the respondent is not proven.

The complaint should anticipate these defenses by presenting clear evidence.


XXXVIII. Prescription

Criminal offenses must be filed within the applicable prescriptive period. The period may depend on the penalty, amount involved, and exact offense charged.

Because prescription can be technical, victims should file as soon as possible. Delay creates problems such as:

  1. Lost records
  2. Deleted accounts
  3. Closed bank accounts
  4. Disappearing witnesses
  5. Memory gaps
  6. Transferred scam proceeds
  7. Prescription defenses

Prompt reporting is always better.


XXXIX. Penalties

The penalty for estafa depends on the amount defrauded, manner of commission, and applicable law. If cybercrime provisions apply, penalties may be affected.

Potential consequences for the accused include:

  1. Imprisonment
  2. Fine
  3. Restitution
  4. Damages
  5. Criminal record
  6. Asset-related consequences
  7. Related cybercrime charges
  8. Other regulatory or administrative consequences

The exact penalty should be evaluated based on the charge and amount involved.


XL. What If the Scammer Returns the Money?

Returning the money may affect settlement, civil liability, damages, and the complainant’s willingness to proceed. However, repayment does not always automatically erase criminal liability, especially if estafa was already committed.

Important questions:

  1. Was the money returned before or after complaint?
  2. Was the return complete?
  3. Did the complainant sign a settlement or waiver?
  4. Was there an admission?
  5. Was the offense already consummated?
  6. Did the accused scam other victims?
  7. Is the complainant willing to execute an affidavit of desistance?

An affidavit of desistance may influence the case, but prosecutors and courts are not always bound by it.


XLI. Settlement

Many online scam disputes are settled through refund. Settlement may be practical when the accused is identifiable and willing to pay.

A settlement agreement should state:

  1. Parties’ names
  2. Amount owed
  3. Payment schedule
  4. Payment method
  5. Deadline
  6. Consequences of default
  7. Whether complaint will be withdrawn or desistance executed
  8. No admission clause, if agreed
  9. Confidentiality, if appropriate
  10. Signatures and proof of identity

Do not sign a full waiver until payment is actually received and cleared.


XLII. Affidavit of Desistance

An affidavit of desistance states that the complainant no longer wishes to pursue the case. It may be used after settlement or reconciliation.

However:

  1. It does not automatically dismiss the criminal case.
  2. The prosecutor or court may still proceed.
  3. It may weaken the complainant’s position if settlement fails.
  4. It should not be signed under pressure.
  5. It should be carefully reviewed.

The complainant should not execute desistance merely based on a promise to pay later unless protected by a written agreement.


XLIII. Avoiding Defamation and Retaliation Risks

Victims often want to post the scammer’s name online. This can warn others, but it may also create legal risks if done recklessly.

Safer approaches:

  1. File official reports.
  2. Share warnings without unsupported accusations.
  3. Stick to verifiable facts.
  4. Avoid insults or threats.
  5. Avoid exposing private personal data unnecessarily.
  6. Do not post IDs, addresses, or bank details without legal advice.
  7. Do not encourage harassment.
  8. Do not fabricate or exaggerate.

A victim can pursue justice without creating a cyber libel or data privacy problem.


XLIV. Illegal Evidence Gathering

Victims should not commit illegal acts to build a case.

Avoid:

  1. Hacking the scammer’s account
  2. Doxxing family members
  3. Threatening violence
  4. Secretly installing spyware
  5. Using stolen passwords
  6. Pretending to be law enforcement
  7. Forging documents
  8. Creating fake evidence
  9. Coercing confessions
  10. Publicly posting intimate or private materials

Unlawful conduct may harm the case and expose the victim to liability.


XLV. Practical Remedies Aside from Estafa

Depending on the scam, other legal or practical remedies may include:

  1. Civil collection
  2. Small claims
  3. Cybercrime complaint
  4. Identity theft complaint
  5. Complaint to bank or e-wallet
  6. Complaint to online marketplace
  7. Complaint to securities or investment regulators
  8. Complaint to consumer protection offices
  9. Complaint to data privacy authorities
  10. Complaint to telco or SIM provider
  11. Complaint to domain host or website provider
  12. Coordinated complaint with other victims

The best remedy depends on the type of scam.


XLVI. Special Issue: Investment Scams and Securities

If the scam involved pooled investments, guaranteed returns, trading packages, crypto investments, lending, or referral-based earning, it may involve securities or investment regulation.

Possible issues include:

  1. Unregistered securities
  2. Unauthorized investment solicitation
  3. Ponzi scheme
  4. Illegal lending
  5. Fake trading
  6. Misrepresentation of license
  7. Use of influencers or agents
  8. Referral commissions
  9. Fake dashboards showing profits
  10. Withdrawal refusal

The victim may file not only an estafa complaint but also a regulatory complaint, depending on the scheme.


XLVII. Special Issue: Online Lending Scams

Online lending scams may involve:

  1. Advance fee before loan release
  2. Fake loan approval
  3. Processing fees
  4. Insurance fees
  5. Verification fees
  6. Harassment after collecting data
  7. Identity theft
  8. Fake lending apps
  9. Unauthorized deductions
  10. Public shaming threats

If no loan is released and money is collected through false promises, estafa may be considered.


XLVIII. Special Issue: Fake Delivery and Customs Scams

Victims may be told that a package is held by customs or courier and requires fees.

Red flags include:

  1. Payment to personal accounts
  2. Fake courier websites
  3. Fake customs letters
  4. Threats of arrest
  5. Repeated fee demands
  6. No valid tracking number
  7. No official receipt
  8. Sender met through romance or social media
  9. Package allegedly contains cash, jewelry, or expensive items

These scams often combine romance fraud and fake delivery fraud.


XLIX. Special Issue: Business Email Compromise

A business may be scammed through fake emails changing payment instructions.

Example:

  1. Company expects invoice from supplier.
  2. Scammer sends email with new bank details.
  3. Company pays the scammer.
  4. Real supplier never receives payment.

Evidence includes email headers, invoice copies, payment records, supplier communications, and cybersecurity logs. This may involve estafa, cybercrime, and internal security investigation.


L. Special Issue: Cryptocurrency Scams

Crypto scams are difficult because transactions are often irreversible.

Common crypto estafa patterns include:

  1. Fake exchange
  2. Fake mining platform
  3. Fake trading bot
  4. Fake wallet recovery
  5. Romance-investment scam
  6. Withdrawal tax scam
  7. Pump-and-dump scheme
  8. Fake airdrop requiring wallet connection
  9. Seed phrase theft
  10. Fake customer support

Preserve wallet addresses, transaction hashes, websites, chat logs, and exchange records.


LI. Special Issue: SIM Registration and Phone Numbers

A scammer’s phone number may be useful, but it does not automatically identify the scammer in a way the victim can personally verify.

SIM registration information, subscriber records, and related data generally require lawful process. The victim should give the number to investigators and payment providers rather than attempting illegal access.


LII. How to Organize the Evidence Folder

A practical evidence folder may be arranged as follows:

  1. Timeline
  2. Scammer identity
  3. Offer or representation
  4. Conversation screenshots
  5. Payment receipts
  6. Failure or refusal
  7. Demand for refund
  8. Blocking or disappearance
  9. Other victims
  10. Bank/e-wallet reports
  11. Platform reports
  12. Draft complaint-affidavit

Label files clearly by date and content.

Example:

  • 2026-05-01 Facebook listing screenshot
  • 2026-05-01 Messenger payment instruction
  • 2026-05-01 GCash receipt ₱8,500
  • 2026-05-02 Seller delivery excuse
  • 2026-05-04 Demand for refund
  • 2026-05-05 Seller blocked complainant

LIII. Drafting Tips for the Complaint-Affidavit

Use clear, factual language.

Better:

“Respondent represented that he had an iPhone 14 Pro for sale and would ship it after full payment. Relying on this statement, I transferred ₱28,000 to the GCash account he provided. After receiving payment, respondent failed to ship the item, sent a false tracking number, and blocked me.”

Weaker:

“Respondent is a scammer and a liar. He tricked me and should go to jail.”

The complaint should let the evidence show the fraud.


LIV. What Victims Should Not Do

Victims should avoid:

  1. Sending more money
  2. Deleting messages
  3. Editing screenshots
  4. Threatening the scammer
  5. Posting personal data online
  6. Signing settlement papers before payment
  7. Filing against the wrong person without basis
  8. Waiting too long
  9. Ignoring bank or e-wallet reporting
  10. Relying only on verbal statements
  11. Losing access to the account where chats are stored
  12. Throwing away receipts
  13. Using fake evidence
  14. Hacking accounts
  15. Assuming police can recover funds instantly

LV. What Makes a Case Strong?

An estafa complaint against an online scammer is stronger when:

  1. The scammer made a clear false promise.
  2. The victim relied on that promise.
  3. Payment was made to an account connected to the scammer.
  4. The scammer acknowledged receipt.
  5. The promised item, service, or return was never delivered.
  6. The scammer gave inconsistent excuses.
  7. The scammer blocked the victim.
  8. Other victims exist.
  9. The scammer used fake documents or fake identity.
  10. The victim preserved full conversations.
  11. The complaint was filed promptly.
  12. The respondent can be identified or traced.

LVI. What Makes a Case Weak?

A case may be weaker when:

  1. There is no proof of payment.
  2. The respondent is not identifiable.
  3. The transaction looks like a simple unpaid debt.
  4. There is no false representation.
  5. The complainant voluntarily assumed investment risk.
  6. The product was delayed but not necessarily nonexistent.
  7. The complainant deleted messages.
  8. Screenshots are incomplete or edited.
  9. The complainant sent money to a different person than the accused.
  10. The accused made partial payments.
  11. The complaint is based only on suspicion.
  12. The victim waited too long.
  13. The transaction involved illegal activity by the complainant.
  14. The complainant cannot show damage.

LVII. Practical Step-by-Step Guide

Step 1: Preserve everything

Screenshot and record the scammer’s profile, posts, messages, payment instructions, and receipts.

Step 2: Write a timeline

List events by date, time, platform, amount, and action.

Step 3: Report to bank or e-wallet

Ask for investigation and possible account tagging or freezing.

Step 4: Report to platform

Report the social media, marketplace, app, or website account.

Step 5: Send a demand, if safe and appropriate

Demand refund or compliance. Save proof of sending.

Step 6: Prepare complaint-affidavit

State the facts clearly and attach evidence.

Step 7: File with law enforcement or prosecutor

Bring printed and digital evidence.

Step 8: Attend preliminary investigation

Respond to subpoenas and submit reply evidence if needed.

Step 9: Follow the case

Keep copies of filings, resolutions, and court notices.

Step 10: Consider civil recovery

Even with criminal proceedings, consider whether small claims or civil recovery is practical.


LVIII. Conclusion

Filing an estafa case against an online scammer in the Philippines requires careful preparation. The victim must prove more than disappointment, delay, or unpaid debt. The case must show fraud: a false representation or deceitful scheme that caused the victim to part with money or property and suffer damage.

The strongest cases are built on organized evidence: screenshots, full chat logs, payment receipts, account details, demand messages, platform links, witness statements, and a clear timeline. The complainant should act quickly because online accounts can disappear, scam funds can be moved, and digital evidence can be deleted.

The proper approach is to stop sending money, preserve evidence, report the transaction to banks or e-wallets, document the scam, and file a complaint with the appropriate authorities. Where the evidence shows criminal deceit, estafa and related cybercrime remedies may be pursued. Where the facts show only debt or breach of contract, civil remedies such as demand letters, small claims, or collection suits may be more appropriate.

In online scam cases, preparation is often the difference between a weak complaint and a strong one. A clear timeline, complete evidence, and accurate legal theory give the victim the best chance of holding the scammer accountable and recovering losses where possible.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.