If you received an email claiming you have been “subpoenaed” by a Philippine court, the NBI, the PNP, a prosecutor, or a government office, do not panic and do not click anything yet. Fake subpoena emails are commonly used to frighten people into paying money, giving personal information, downloading malware, or contacting a scammer pretending to be an officer. A real subpoena is serious, but it has legal form, an identifiable issuing authority, a case or investigation reference, and a proper way to verify it.
What a Subpoena Means in Philippine Law
A subpoena is a legal order requiring a person to appear and testify, or to bring documents or things needed in a case or investigation.
Under Rule 21, Section 1 of the Rules of Court, there are two common types:
| Type of subpoena | Meaning |
|---|---|
| Subpoena ad testificandum | Requires you to appear and testify |
| Subpoena duces tecum | Requires you to bring documents, records, objects, or other evidence |
You can read the text of Rule 21 on subpoenas in the 2019 Amendments to the Rules of Civil Procedure on Lawphil.
A subpoena may come from a court, prosecutor, investigating body, or government agency authorized by law. For example, the Department of Justice Office of Cybercrime has authority under Republic Act No. 10175, or the Cybercrime Prevention Act of 2012, to issue subpoenas and summon witnesses in cybercrime investigations. The DOJ describes this function on its official Office of Cybercrime page.
Can a Philippine Subpoena Be Sent by Email?
Sometimes, official communications may involve email, especially as Philippine courts and agencies move toward electronic filing and service. The Supreme Court has issued guidelines on electronic submission and service of court documents, including the use of official court email addresses. See the Supreme Court’s page on electronic filing.
But this does not mean every “subpoena” sent by email is valid.
For court subpoenas under Rule 21, service is traditionally made in a formal manner: the original is exhibited, a copy is delivered to the person served, and service must give the witness reasonable time to prepare and travel. If an email suddenly threatens arrest, demands payment through GCash, or tells you to download an attachment immediately, treat it as suspicious.
Red Flags of a Fake Subpoena Email
A fake subpoena email often looks urgent, official, and frightening. Watch for these warning signs:
The sender uses a free email address
- Gmail, Yahoo, Outlook, ProtonMail, or random domains are suspicious.
- Government offices normally use official domains such as
.gov.ph, although even these can be spoofed visually.
It demands payment to “clear” your name
- Real subpoenas do not ask you to pay settlement fees, bail, penalties, or “processing fees” through GCash, Maya, crypto, remittance centers, or personal bank accounts.
It threatens immediate arrest if you do not reply
- A subpoena is generally an order to appear or produce evidence. It is not the same as a warrant of arrest.
The attachment is suspicious
- Be careful with
.zip,.rar,.exe,.scr, password-protected files, or links to Google Drive, Dropbox, Telegram, or shortened URLs.
- Be careful with
The case details are vague
- Fake emails often say “cyber libel,” “estafa,” “money laundering,” or “online scam complaint” without a clear docket number, court branch, prosecutor’s office, complainant, or hearing details.
The grammar, format, logo, or seal looks wrong
- Scammers copy logos but often use wrong spacing, outdated office names, blurred seals, fake signatures, or strange letterhead.
The email pressures you to keep it secret
- A message saying “do not contact any lawyer,” “do not call the court,” or “reply only to this officer” is a major red flag.
How to Verify a Subpoena Email in the Philippines
1. Do not click links or download attachments first
Before opening anything, preserve the email. Take screenshots showing:
- Sender email address
- Subject line
- Date and time received
- Full body of the message
- Attachments listed
- Any phone numbers, links, QR codes, or payment instructions
If possible, view the full email headers. These can help cybercrime investigators trace whether the email really came from the claimed source.
2. Identify the supposed issuing office
Check what the email claims to be from:
| Claimed source | Where to verify |
|---|---|
| Court subpoena | Clerk of Court or Branch Clerk of Court of the named court |
| Prosecutor subpoena | City, Provincial, or Regional Prosecutor’s Office |
| NBI subpoena | Named NBI division, regional office, or main office |
| PNP subpoena | PNP Anti-Cybercrime Group or named police unit |
| DOJ cybercrime subpoena | DOJ Office of Cybercrime |
| Barangay notice | Barangay hall or Lupon secretary |
Do not use the contact number inside the suspicious email. Search for the office through an official website, court locator, or government directory.
For courts, use the Supreme Court’s official court locator.
3. Verify using independent contact details
When you call or email the office, give only the basic reference details first:
- Your name
- Case number or docket number, if stated
- Name of complainant, if stated
- Date of alleged hearing or appearance
- Name of officer, prosecutor, or court branch appearing in the email
Ask: “Can you confirm whether this subpoena or notice was issued by your office?”
Do not immediately send your ID, passport, bank details, or screenshots containing sensitive information unless you are certain you are communicating with the real office.
4. Check the case number and format
Real legal documents usually have identifiable references, such as:
- Court case number
- NPS docket number for prosecutor-level complaints
- I.S. number or investigation slip number
- NBI or PNP reference number
- Court branch and station
- Names of parties
- Date, time, and place of appearance
- Signature and position of issuing officer
A fake subpoena may use random numbers, incomplete names, or impossible office combinations like “Supreme Court Cybercrime Prosecutor Division” or “NBI Court Branch.”
5. Look at the method of service
Under Rule 21, a subpoena must be served in a way that gives reasonable time for preparation and travel. In practice, subpoenas are often served by process servers, sheriffs, police officers, authorized personnel, registered mail, courier, or formal agency channels.
An email alone may be questionable if:
- You never gave that email address in the case or proceeding;
- There is no pending case or investigation you know of;
- The email gives you only a few hours to respond;
- It demands money instead of attendance;
- It refuses independent verification.
6. If the subpoena appears real, do not ignore it
If verification confirms that the subpoena is genuine, read it carefully. Check:
- Where you must appear;
- When you must appear;
- Whether you must bring documents;
- Whether you are a witness, respondent, complainant, or records custodian;
- Whether you need to file a written explanation or counter-affidavit.
Ignoring a real subpoena can have consequences. In some proceedings, failure to comply may lead to a show-cause order, contempt, adverse procedural consequences, or further action by the investigating authority.
What Philippine Laws May Apply to Fake Subpoena Emails
Fake subpoena emails may involve several possible offenses, depending on the facts.
| Possible offense | Legal basis | Example |
|---|---|---|
| Computer-related fraud or forgery | RA 10175, Cybercrime Prevention Act of 2012 | Using fake electronic documents to deceive victims |
| Falsification | Revised Penal Code, Articles 171 and 172 | Creating or using a fake official document |
| Usurpation of authority | Revised Penal Code, Article 177 | Pretending to be a government officer |
| Estafa or swindling | Revised Penal Code, Article 315 | Demanding money through deceit |
| Unlawful processing or misuse of personal data | RA 10173, Data Privacy Act of 2012 | Collecting IDs, passports, addresses, or bank information through deception |
You can read the relevant Revised Penal Code provisions on Lawphil’s copy of Act No. 3815, the Cybercrime Prevention Act on Lawphil’s RA 10175 page, and the Data Privacy Act on the National Privacy Commission website.
What to Do If You Already Clicked, Replied, or Paid
If you already interacted with the email, act quickly.
Disconnect and scan your device
- Run a malware scan.
- Change passwords from a clean device.
- Turn on two-factor authentication.
Preserve evidence
- Do not delete the email.
- Save screenshots, receipts, chat logs, numbers, links, and account names.
- Keep proof of payment if money was sent.
Contact your bank or e-wallet provider
- Report the transaction as fraudulent.
- Request freezing, reversal, or investigation if still possible.
Report to cybercrime authorities
- You may report cybercrime concerns to the NBI Cybercrime Division, PNP Anti-Cybercrime Group, or the DOJ Office of Cybercrime.
- The DOJ has an official page for reporting cybercrime incidents.
Protect your personal information
- If you sent IDs, passports, or sensitive data, monitor for identity misuse.
- Consider reporting serious personal data misuse to the National Privacy Commission.
Common Real-Life Scenarios
“The email says I am accused of cyber libel. Is it real?”
It might be real or fake. Cyber libel complaints in the Philippines can involve the NBI, PNP, prosecutors, or courts. But a real notice should identify the office, complaint details, and appearance requirements. Verify directly with the named office before replying or opening attachments.
“The email says I must pay bail today or I will be arrested.”
That is a strong sign of a scam. Bail is handled through proper court processes, not through random email payment instructions, personal bank accounts, or e-wallet numbers.
“I am abroad. Can I still receive a Philippine subpoena?”
Yes, foreigners and Filipinos abroad can become involved in Philippine legal matters. But service, verification, authentication, and participation may involve additional steps. If documents must be used abroad or sent to the Philippines, notarization, consular acknowledgment, or an apostille may be relevant depending on the country and document type. Always verify the issuing office first.
“The email has a court logo and judge’s signature.”
A logo and signature are not enough. Scammers can copy seals and signatures from public documents. Verify the case number, branch, issuing officer, and hearing details through the court’s official contact details.
Documents to Prepare When Reporting a Fake Subpoena Email
| Document or evidence | Why it matters |
|---|---|
| Screenshot of email | Shows the threat, sender, and content |
| Full email headers | Helps trace technical source |
| Attachment filename | Helps investigators identify malware or fake documents |
| Payment receipt | Proves loss and destination account |
| Chat logs or call logs | Shows follow-up contact by scammers |
| Valid ID | Usually required when filing a complaint |
| Written narrative | Explains what happened in chronological order |
| Bank or e-wallet details | Helps trace fraudulent transfers |
Prepare a simple timeline:
- Date and time you received the email.
- What the email claimed.
- What you clicked or downloaded, if any.
- What information you gave.
- Whether you paid money.
- What accounts, numbers, or emails were used by the sender.
Frequently Asked Questions
Is a subpoena sent by email valid in the Philippines?
It depends. Some official communications may involve email, especially under electronic filing and digital court procedures. But a subpoena email must still come from a legitimate authority and be verifiable through official channels. Do not assume validity just because it has a logo.
How do I know if an NBI subpoena email is fake?
Verify directly with the NBI office or division named in the document using official contact information, not the number in the email. Be suspicious if it demands payment, uses a free email address, threatens immediate arrest, or refuses independent verification.
Can I be arrested for ignoring a subpoena email?
A fake subpoena has no legal effect. A real subpoena should not be ignored because non-compliance may have legal consequences. The practical first step is to verify the subpoena with the issuing office before deciding what to do.
Do courts in the Philippines send subpoenas through Gmail?
Official court communications should come through official court channels. A Gmail address claiming to be a court, judge, sheriff, prosecutor, or police officer is suspicious and should be independently verified.
What if the subpoena email includes my real name and address?
That does not automatically make it real. Scammers may obtain personal information from data leaks, public records, delivery forms, social media, or previous transactions. Verify the issuing office and case details.
Should I reply to a suspicious subpoena email?
Usually, no. Replying may confirm that your email is active and may expose you to more pressure. Verify through independent official contact details instead.
What should I do if I opened the attachment?
Disconnect from the internet if you suspect malware, scan your device, change passwords from another clean device, and preserve the email for reporting. If you entered passwords or banking details, contact the relevant bank or service immediately.
Where can I report a fake subpoena email in the Philippines?
You may report to the NBI Cybercrime Division, PNP Anti-Cybercrime Group, or DOJ Office of Cybercrime. If personal data was misused, you may also consider reporting to the National Privacy Commission.
Key Takeaways
- A real subpoena is a formal legal process; a scary email is not automatically valid.
- Do not click links, download attachments, pay money, or send IDs until you verify.
- Use official government or court contact details, not the contact information inside the suspicious email.
- Red flags include payment demands, free email addresses, threats of immediate arrest, vague case details, and suspicious attachments.
- Fake subpoena emails may involve cybercrime, falsification, estafa, usurpation of authority, and data privacy violations.
- If you already clicked, replied, or paid, preserve evidence and report quickly to the proper cybercrime authorities.