Receiving a “demand letter” by email can feel frightening, especially when it threatens arrest, court action, barangay complaints, immigration trouble, employer notification, or public shaming unless you pay immediately. In the Philippines, a real demand letter can be a legitimate step before a civil case, but scammers also use fake lawyer letters, forged law office letterheads, spoofed email addresses, and pressure tactics to scare people into sending money. The safest response is to pause, preserve the email as evidence, verify the sender independently, check whether the claim is real, and avoid paying or admitting anything until the demand is authenticated.

What a Demand Letter Means in Philippine Law

A demand letter is usually a written request asking someone to pay money, perform an obligation, stop doing something, or settle a dispute before a case is filed. It is common in collection cases, lease disputes, loans, unpaid services, dishonored checks, business disagreements, and family property conflicts.

Under the Civil Code, an obligation is a legal necessity “to give, to do or not to do,” and obligations may arise from law, contracts, quasi-contracts, crimes, and quasi-delicts. A demand can matter because a person obliged to deliver or do something generally incurs delay from the time the creditor judicially or extrajudicially demands performance, unless the law or obligation says demand is unnecessary. (Lawphil)

But a demand letter is not the same as a court order. It does not automatically prove that you owe money. It does not authorize arrest. It does not freeze your bank account by itself. It does not mean a case has already been filed.

An email demand letter may still be legally relevant. The E-Commerce Act, Republic Act No. 8792 (2000), recognizes electronic documents for evidentiary purposes as the functional equivalent of written documents, but it does not remove legal formalities required by other laws. (Lawphil) This means an emailed letter can be evidence, but the sender still has to prove authenticity, authority, and the legal basis of the claim.

Why Fake Demand Letters Are Common

A fake demand letter works because it imitates something Filipinos already take seriously: a law office letter, a barangay notice, a prosecutor’s warning, or a collection letter. Scammers often use urgency and shame because many people would rather pay a small or even large amount than risk embarrassment.

Common fake demand letter scenarios include:

A supposed lawyer demanding payment for an online loan you never took.
A fake law firm claiming you violated a contract but refusing to show the contract.
An email threatening an arrest warrant unless you pay through GCash, Maya, crypto, or a personal bank account.
A “final notice” using a real lawyer’s name but a free Gmail or Yahoo address.
A fake collection agency threatening to message your relatives, employer, or social media contacts.
A supposed foreign company demanding “settlement” for copyright, employment, immigration, or investment issues in the Philippines.
A fake “court notice” attaching a PDF with a suspicious link or password-protected file.

A real claimant may be firm. A scammer usually adds panic.

Red Flags That an Email Demand Letter May Be Fake

Red flag	Why it matters
The email comes from a free or strange domain	Real law offices often use official firm domains, although smaller firms may still use Gmail. The address must still match the sender’s identity.
The letter threatens immediate arrest for a debt	Ordinary unpaid debt is generally civil, not a basis for automatic arrest. A warrant of arrest requires probable cause personally determined by a judge. (Supreme Court E-Library)
The sender refuses to identify the client	A legitimate demand should clearly state who is making the claim and why.
No contract, invoice, account number, transaction record, or factual basis is attached	A demand without supporting details is harder to verify.
Payment is demanded to a personal e-wallet or unrelated bank account	This is common in scams and “money mule” arrangements.
The letter uses fake court language such as “cyber warrant,” “NBI hold departure order,” or “automatic estafa case”	Philippine procedure does not work that way.
The sender says you cannot contact the supposed law office directly	A real representative should allow independent verification.
The email includes links asking for passwords, OTPs, IDs, or banking details	This may be phishing or social engineering.
The amount changes when you ask questions	Legitimate demands usually have a consistent computation.
The letter threatens public posting, employer contact, or family harassment	Even a real creditor cannot use unlawful harassment or threats.

Legal Bases That May Apply to Fake Demand Letters

Cybercrime Prevention Act: Forgery, Fraud, Identity Theft, and Cyberlibel

Republic Act No. 10175, the Cybercrime Prevention Act of 2012, is highly relevant when a fake demand letter is sent by email, social media, messaging app, or another computer system.

A fake legal letter may involve computer-related forgery if computer data is created or altered without right so it can be acted upon as authentic, or if forged computer data is knowingly used for a fraudulent design. It may involve computer-related fraud when unauthorized computer data acts are done with fraudulent intent and damage results. It may involve computer-related identity theft if someone uses identifying information belonging to another person or entity without right. (Supreme Court E-Library)

If the email also contains defamatory accusations, the cyberlibel provision may be implicated, but accusations of cyberlibel should be assessed carefully because intent, publication, identity, and malice issues can be fact-specific. RA 10175 also states that crimes under the Revised Penal Code and special laws committed through information and communications technology are covered, generally with a higher penalty. (Supreme Court E-Library)

Revised Penal Code: Threats, Estafa, Falsification, and Coercion

Depending on the facts, a fake demand letter may also involve crimes under the Revised Penal Code.

Grave threats may apply when a person threatens to inflict a wrong amounting to a crime and demands money or imposes a condition. Article 282 specifically covers threats involving a demand for money or another condition, and a threat made in writing may carry consequences under the provision. (Lawphil)
Estafa under Article 315 may be considered when the sender uses deceit or fraudulent representations that cause the victim to part with money or property.
Falsification may be relevant if signatures, official-looking documents, law office letterheads, IDs, receipts, or court papers are forged.
Unjust vexation, coercion, or light threats may be considered in less serious but still unlawful harassment situations.

Civil Code: Abuse of Rights and Damages

Even when conduct does not neatly fit a criminal offense, abusive collection or harassment may still create civil liability. Articles 19, 20, and 21 of the Civil Code require people to act with justice, give everyone their due, observe honesty and good faith, and compensate another for damage caused contrary to law, morals, good customs, or public policy. Article 26 also protects dignity, privacy, and peace of mind in situations such as meddling with private life. (Lawphil)

Anti-Financial Account Scamming Act

If the fake demand letter tricks you into sending money to a bank account or e-wallet, Republic Act No. 12010, the Anti-Financial Account Scamming Act (AFASA), may become relevant. AFASA covers financial account scamming, including money mule activities and social engineering schemes involving electronic communications such as email, SMS, social media messages, and instant messaging. (Supreme Court E-Library)

AFASA and BSP rules also matter because scam proceeds often move quickly through bank and e-wallet accounts. BSP Circular No. 1215, Series of 2025, implements rules on temporary holding of funds subject to disputed transactions and coordinated verification. It applies to electronic transfers from one financial account to another and allows temporary holding procedures subject to the circular’s requirements. (Bangko Sentral ng Pilipinas)

What to Do Immediately After Receiving a Fake Demand Letter by Email

1. Do not panic and do not pay immediately

Scammers rely on speed. They often give deadlines like “pay within one hour,” “settle before 5 p.m.,” or “we will file cybercrime charges today.” A real legal demand may have a deadline, but a genuine claimant can usually provide verifiable documents and a reasonable opportunity to check the claim.

Do not send money just to “make it go away” unless you have verified:

The sender’s identity.
The claimant’s identity.
The legal basis of the claim.
The exact amount and computation.
The payment account’s ownership.
Whether a settlement document or release will be issued.

2. Do not click links, open suspicious attachments, or give OTPs

A fake demand letter may be only the first step of a phishing attack. Do not input passwords, bank details, OTPs, PINs, passport numbers, TIN, SSS, GSIS, PhilHealth, driver’s license details, or e-wallet information into any link sent in the email.

If you already clicked a link, change passwords from a clean device, enable multi-factor authentication, notify your bank or e-wallet, and monitor unauthorized transactions.

3. Preserve the evidence properly

Do not delete the email. Do not only take one screenshot. Preserve as much original data as possible.

Keep:

The original email in your inbox.
The full email headers, if available.
The sender address and reply-to address.
All attachments.
Screenshots showing the date, time, email address, and full message.
Any payment instructions, QR codes, bank accounts, e-wallet numbers, or crypto wallet addresses.
Call logs, text messages, Viber, WhatsApp, Messenger, Telegram, or social media messages connected to the demand.
Receipts if payment was already made.
Your bank or e-wallet transaction reference numbers.

Electronic evidence can be used in Philippine proceedings when properly authenticated. The Rules on Electronic Evidence apply when electronic documents or electronic data messages are offered or used in evidence, and the Supreme Court has recognized the admissibility of online messages and chat logs in appropriate cases. (Lawphil)

4. Verify the supposed lawyer or law office independently

Do not use only the phone number or link provided in the suspicious email. Verify from independent sources.

Check:

The lawyer’s name in the Supreme Court Lawyers List.
The law office’s official website or public contact details.
The lawyer’s Roll of Attorneys information, if available.
The Integrated Bar of the Philippines chapter or office, when necessary.
Whether the email domain matches the law office.

The Supreme Court E-Library has a Lawyers List search page with fields such as surname, first name, middle name, address, Roll Signed Date, and Roll Number. (Supreme Court E-Library) Absence from an online list should be checked carefully because databases can have update issues, spelling differences, married names, middle initials, and suffix variations, but it is still a useful first verification step.

5. Verify the claim, not just the sender

Even if the sender is real, the demand may still be exaggerated, stale, mistaken, or unsupported. Ask yourself:

Did I sign a contract?
Did I receive the money, goods, service, or benefit claimed?
Is the amount correct?
Is the claim already paid, settled, prescribed, or disputed?
Is the alleged debt mine, or is it another person’s debt?
Did someone use my identity?
Is the claimant licensed or registered, if it is a lender, financing company, or corporation?
Is there a real case number, court, prosecutor’s office, or barangay docket?

A real court case has a court, branch, docket number, parties, and official processes. A random email saying “case filed” is not enough.

6. If money was transferred, report to your bank or e-wallet immediately

Time matters. Scam funds often move within minutes. Contact the bank, e-wallet, remittance platform, or payment service provider and report the transaction as disputed or fraudulent.

Prepare:

Transaction reference number.
Date and time.
Amount.
Recipient name, number, or account.
Screenshots of the fake demand.
Police/NBI/PNP report, if already available.
Valid ID.

Under BSP rules implementing AFASA, covered institutions must participate in temporary holding and coordinated verification processes for disputed transactions, subject to the applicable triggers, documentation, and timelines. The BSP rules mention initial and extended holding procedures and state that the total temporary holding period generally must not exceed 30 calendar days unless extended by a competent court. (Bangko Sentral ng Pilipinas)

How to Respond to the Sender Without Hurting Your Position

If you choose to reply, keep it short, neutral, and focused on verification. Do not admit liability. Do not argue emotionally. Do not threaten back. Do not provide personal information the sender does not already have.

A safe response usually asks for:

Full name of the claimant.
Full legal basis of the claim.
Copies of the contract, invoice, statement of account, or transaction record.
Government-issued or company proof of authority, if not a lawyer.
Lawyer’s full name, Roll Number, IBP chapter, and office address.
Official payment account under the claimant’s name, not a personal account.
A written settlement agreement and release, if payment is later made.

Avoid saying:

“I admit I owe this.”
“I will pay tomorrow” if you have not verified the claim.
“Please do not file a case” if you are unsure.
“I used that account” if identity theft may be involved.
“I am sorry for scamming” or similar language copied from the sender.

A verification-focused reply is often enough. If the sender refuses to provide documents and only repeats threats, treat that as another red flag.

Where to Report a Fake Demand Letter in the Philippines

Situation	Where to go	What usually happens
Fake email, phishing, impersonation, online extortion	NBI Cybercrime Division or NBI Regional Cybercrime Center	Intake, interview, complaint sheet, sworn statement, evidence review
Cyber harassment or threats	PNP Anti-Cybercrime Group or local police cybercrime desk, where available	Blotter or complaint intake, referral, cybercrime assessment
Money transferred to bank or e-wallet	Your bank/e-wallet and possibly BSP consumer channels	Disputed transaction report, account review, possible temporary holding process
Misuse of personal data	National Privacy Commission	Complaint if personal information was misused, maliciously disclosed, or privacy rights violated
Same-city personal dispute that is real, not a scam	Barangay, if covered by Katarungang Pambarangay	Mediation or conciliation before court filing in covered disputes
Real court document claimed in the email	Clerk of Court of the named court	Verification of docket number, parties, branch, and issued process

The NBI’s Citizens Charter for victims of computer crimes describes a process where complainants proceed to the Cybercrime Division to file a complaint or request investigation, undergo preliminary interview, execute sworn statements or submit affidavits, and provide supporting documents and relevant devices for examination. The listed government fee is none for that process, with an indicative front-end processing time of about 1 hour and 10 minutes. (National Bureau of Investigation)

RA 10175 designates the NBI and PNP as law enforcement authorities responsible for enforcing the Cybercrime Prevention Act, and it requires cybercrime units or centers to handle cases involving violations of the Act. (Supreme Court E-Library)

Documents to Prepare Before Filing a Complaint

Bring printed and digital copies when possible.

Document or evidence	Why it helps
Valid government ID	Establishes your identity as complainant
Printed copy of the email demand letter	Easy reference for investigators
Original email and full headers	Helps trace sender, routing, spoofing, and technical details
Screenshots of email, attachments, chats, SMS, and calls	Shows the sequence of threats or demands
PDF attachments and file names	May show forgery, metadata, or malware indicators
Proof you do not owe the debt, if available	Helps show falsity or mistaken identity
Contracts, receipts, payment records, or account statements	Helps verify whether the claim is real
Bank/e-wallet transaction receipts	Essential if money was sent
Names, numbers, emails, URLs, account numbers, and QR codes used by the sender	Helps investigators identify accounts and infrastructure
Sworn statement or complaint-affidavit	Often required for formal investigation or prosecution

If you are abroad, your complaint documents may need proper notarization or consular notarization depending on how and where they will be used. For Philippine public documents used abroad, the DFA Apostille system applies; the DFA appointment system notes that authentication services are by online appointment and warns against fixers. (DFA Appointment System) For affidavits executed outside the Philippines for use in a Philippine proceeding, practical requirements can vary by agency, prosecutor, court, and consulate, so check the receiving office’s requirements before sending originals.

Special Situations

The email says you will be arrested if you do not pay

Treat this as a major red flag. A private lawyer, collection agent, lender, or complainant cannot issue an arrest warrant. Under the Constitution, no warrant of arrest or search warrant may issue except upon probable cause personally determined by a judge after examination under oath or affirmation of the complainant and witnesses. (Supreme Court E-Library)

Some unpaid obligations may lead to civil cases. Some facts may also create criminal exposure, such as estafa, bouncing checks, falsification, or fraud. But “pay now or police will arrest you tonight” is often intimidation, especially when no court, case number, prosecutor, or official process is identified.

The email claims to be from a court

Do not click links. Verify directly with the named court using independent contact information from the judiciary, not from the email. Real Philippine court documents should identify the court, branch, case number, parties, and type of process.

Electronic filing and service exist in Philippine procedure, but that does not make every emailed PDF a valid court notice. The Supreme Court’s e-filing guidelines for civil cases in trial courts state that electronic submissions must be completed within 24 hours from the primary manner of service, such as personal filing, registered mail, or accredited courier. (Supreme Court of the Philippines) A suspicious email should be checked with the actual court before any response.

The sender is a real law office, but the demand is wrong

A demand can be genuine but mistaken. This happens with old debts, identity theft, reused mobile numbers, relatives with the same surname, prior tenants, business name confusion, or incomplete records.

Respond calmly with a denial and request for documents. Provide only what is necessary. If identity theft is involved, state clearly that you dispute the account and request proof of application, signatures, IP logs, delivery records, ID used, and payment history.

The letter came from an online lending app or collector

Even if the debt is real, harassment, threats, public shaming, and contacting unrelated third parties may create separate legal issues. Save all messages. Record the dates, numbers, names, and screenshots. Report financial scam issues to the relevant financial institution and law enforcement if threats, impersonation, identity theft, or unauthorized use of personal data are involved.

You already paid because you were scared

Act quickly:

Save all proof of payment.
Report the transaction to your bank, e-wallet, or remittance provider.
Ask whether the transaction can be disputed, traced, held, or recalled.
File a cybercrime complaint with the NBI or PNP.
Preserve the original email and all communications.
Do not send more money for “clearance,” “dismissal fee,” “notarial fee,” “release fee,” or “case withdrawal fee” unless independently verified.

Scammers often ask for a second payment after the first one works.

Frequently Asked Questions

Is an email demand letter valid in the Philippines?

It can be legally relevant because Philippine law recognizes electronic documents, but validity depends on authenticity, authority, content, and the underlying claim. An email alone does not prove that the sender is a lawyer, that the debt is real, or that a case has been filed. (Lawphil)

Can I ignore a fake demand letter?

You can ignore obvious spam, but do not ignore a possibly real legal dispute. The better approach is to preserve evidence, verify independently, and respond only if needed with a neutral request for proof. If threats, impersonation, phishing, or money demands are present, report it.

Can I be arrested for not paying a debt in the Philippines?

Ordinary unpaid debt is generally civil. Arrest requires a valid legal basis and, in most cases, a warrant issued by a judge upon probable cause. Threats of immediate arrest by email are often used to scare people into paying. (Supreme Court E-Library)

How do I check if the lawyer in the email is real?

Search the lawyer’s name through the Supreme Court Lawyers List and verify independently with the law office. Check spelling, middle names, suffixes, Roll Number, office address, and official contact channels. Do not rely only on the contact number in the suspicious email. (Supreme Court E-Library)

Should I reply to a fake demand letter?

Reply only if it helps verify the claim or protect your position. Keep the reply short and factual. Ask for proof of authority, basis of claim, documents, and official payment details. Do not admit liability or provide sensitive personal data.

What if the email uses the name of a real lawyer without permission?

That may involve identity theft, computer-related forgery, fraud, or other offenses under RA 10175, depending on the facts. Save the email and notify the real lawyer or law office through independent contact details. (Supreme Court E-Library)

Can screenshots be used as evidence?

Screenshots can help, but they are better when supported by the original email, full headers, attachments, device data, transaction records, and testimony explaining how they were received. Philippine electronic evidence rules and Supreme Court rulings recognize electronic communications as potential evidence when properly presented and authenticated. (Lawphil)

Where should OFWs or foreigners report a fake Philippine demand letter?

If the sender, victim, account, or transaction is connected to the Philippines, reports may be made to the NBI Cybercrime Division, PNP Anti-Cybercrime Group, the relevant bank or e-wallet, and possibly the National Privacy Commission if personal data was misused. If documents are executed abroad for Philippine use, ask the receiving agency whether consular notarization, apostille, or another authentication step is required.

What if the email contains my real personal information?

That increases the risk of identity theft or data misuse. Change passwords, secure financial accounts, monitor transactions, and preserve the email. If your personal information was misused, maliciously disclosed, or improperly handled, the National Privacy Commission recognizes the right to file a complaint. (National Privacy Commission)

Does barangay conciliation apply to a fake demand letter?

Barangay conciliation may apply to certain real disputes between parties covered by the Katarungang Pambarangay rules, but it is not a substitute for reporting cybercrime, extortion, phishing, or identity theft. The Local Government Code makes barangay conciliation a pre-condition for covered disputes before filing in court, subject to exceptions. (Supreme Court E-Library)

Key Takeaways

A demand letter received through email is not automatically fake, but it is also not automatically valid.
Do not pay, click links, or give personal data until the sender and claim are independently verified.
A private sender cannot cause your immediate arrest by email; warrants require judicial action and probable cause.
Preserve the original email, full headers, attachments, screenshots, payment details, and all related communications.
Verify lawyers through the Supreme Court Lawyers List and contact law offices through independent channels.
Fake legal emails may involve cybercrime, threats, estafa, identity theft, falsification, harassment, or financial account scamming.
If money was sent, report immediately to the bank, e-wallet, NBI, PNP, and other relevant agencies because scam funds move quickly.
A calm, evidence-based response protects you better than panic, silence in the face of a real claim, or an emotional admission.