How to Verify a Fake Subpoena Email in the Philippines

A subpoena email can be frightening, especially if it says you will be arrested, blacklisted, deported, or charged unless you reply immediately. In the Philippines, a real subpoena is serious, but scammers now copy court seals, prosecutor letterheads, PNP/NBI names, docket numbers, and legal language to pressure people into clicking links, sending IDs, or paying “settlement” money. The safest response is to pause, preserve the email, and verify directly with the court, prosecutor, or agency using official contact details—not the phone number, email address, QR code, or link inside the message.

What a Subpoena Means Under Philippine Law

A subpoena is an official legal process requiring a person to do something connected with a case, investigation, or proceeding.

The two common types are:

Type of subpoena What it requires
Subpoena ad testificandum You must appear and testify.
Subpoena duces tecum You must bring or produce specific documents, records, objects, or electronic evidence.

Under Rule 21 of the Rules of Court, subpoenas are connected to a pending action, investigation, deposition, or proceeding before a court or competent authority. The subpoena should identify the issuing court or authority, the case or investigation, the person required to appear, and, for a subpoena duces tecum, the documents or things required with reasonable description and apparent relevance. (Lawphil)

A subpoena is different from:

Document Meaning
Summons A court document requiring a defendant to answer a complaint.
Notice of hearing A notice of a scheduled court or agency hearing.
Demand letter A private letter, usually from a lawyer or creditor, demanding payment or action.
Barangay summons A notice from the barangay for conciliation under the Katarungang Pambarangay system.
Subpoena from prosecutor A notice in a criminal preliminary investigation requiring a respondent to answer a complaint.

This distinction matters because scammers often use the word “subpoena” even when the document they copied is really a demand letter, fake police notice, fake court order, or fake prosecutor’s notice.

Can a Subpoena Be Sent by Email in the Philippines?

A subpoena sent by email is not automatically fake, but an email alone does not prove that it is valid.

Philippine courts and agencies increasingly use electronic filing, service, and online communication. The Electronic Commerce Act of 2000, Republic Act No. 8792, recognizes electronic documents and electronic signatures when integrity, reliability, and authentication requirements are met. It also states that an electronic document may be the functional equivalent of a written document for evidentiary purposes. (Lawphil)

But RA 8792 does not mean every PDF attached to an email is a real subpoena. A valid legal document must still come from a real issuing authority, relate to a real case or investigation, comply with the applicable rules, and be capable of authentication.

For court proceedings, the question is not simply “Was it emailed?” The better questions are:

  1. Is there a real case or investigation?
  2. Is the issuing court, branch, prosecutor, or agency real?
  3. Was the subpoena actually issued by that office?
  4. Was email service allowed or used in that proceeding?
  5. Is there proof of service or an official record confirming it?

Why Fake Subpoena Emails Are Common

Fake subpoena emails work because they exploit fear. A person who sees “NBI,” “PNP Cybercrime,” “Office of the Prosecutor,” “Regional Trial Court,” “warrant,” or “cyber libel” may panic and reply before verifying.

Common goals include:

  • Getting you to pay a fake “settlement,” “clearance,” “bail,” “processing fee,” or “anti-cybercrime fee”
  • Stealing your government IDs, passport, Alien Certificate of Registration, or bank details
  • Making you click a malware link or open an infected PDF/ZIP file
  • Capturing your email, Facebook, GCash, Maya, or banking login
  • Intimidating OFWs, foreigners, or business owners who are afraid of immigration or criminal consequences
  • Using your personal data for identity theft or future scams

A real court, prosecutor, police unit, or government agency does not normally resolve a subpoena by demanding immediate payment to a private bank account, e-wallet, cryptocurrency wallet, or QR code.

Legal Bases You Should Know

Several Philippine laws may apply when someone sends a fake subpoena email.

Rule 21, Rules of Court

Rule 21 governs subpoenas in court proceedings. It covers the types of subpoenas, who may issue them, what they should contain, how they may be challenged, and consequences for unjustified non-compliance with a valid subpoena. (Lawphil)

If the subpoena is real but improper—for example, it demands irrelevant documents or is oppressive—the remedy is usually to file the proper motion before the issuing court or authority, such as a motion to quash before the time stated in the subpoena.

Rule 112, Criminal Procedure

In a criminal preliminary investigation, the prosecutor may issue a subpoena to the respondent. The subpoena should generally come with the complaint and supporting affidavits or documents, because the respondent must be given an opportunity to submit a counter-affidavit and evidence. Rule 112 materials consistently describe this process: the respondent is issued a subpoena with the complaint and supporting documents, and the respondent is usually given 10 days from receipt to submit a counter-affidavit. (Lawphil)

This is a major verification point. If the email claims to be a prosecutor’s subpoena but gives no complaint, no complainant, no docket number, no prosecutor’s office, and no clear deadline for a counter-affidavit, treat it as suspicious.

Cybercrime Prevention Act of 2012, RA 10175

A fake subpoena email may involve cybercrime, especially if the sender used email, messaging apps, spoofed accounts, fake websites, or malware. RA 10175 covers offenses such as computer-related forgery, computer-related fraud, and computer-related identity theft. (Lawphil)

Revised Penal Code

Depending on the facts, a fake subpoena scheme may also involve:

  • Falsification of public or official documents under Articles 171 and 172
  • Usurpation of authority or official functions under Article 177
  • Estafa under Article 315 if deceit caused payment or property loss
  • Civil liability arising from crime under Article 100

If the scammer pretended to be a judge, prosecutor, police officer, NBI agent, court sheriff, or government lawyer, the facts may support more than one offense.

Data Privacy Act of 2012, RA 10173

If the fake subpoena email is used to obtain, misuse, disclose, or process personal information without authority, the Data Privacy Act of 2012 may also become relevant, especially where IDs, addresses, biometrics, account numbers, or sensitive personal information are involved. (Lawphil)

Anti-Financial Account Scamming Act, RA 12010

If the fake subpoena email is used to obtain bank, credit card, e-wallet, username, password, OTP, or other sensitive financial account information, Republic Act No. 12010, the Anti-Financial Account Scamming Act, may apply. The law expressly covers electronic communications such as email and penalizes social engineering schemes used to obtain sensitive identifying information for unauthorized access to financial accounts. (Lawphil)

How to Verify a Fake Subpoena Email in the Philippines

1. Do not click, pay, reply, or download in panic

Before doing anything else:

  • Do not click links.
  • Do not scan QR codes.
  • Do not open ZIP, RAR, EXE, or password-protected attachments.
  • Do not send IDs, selfies, passwords, OTPs, or bank details.
  • Do not pay “settlement,” “bail,” “clearance,” or “processing” fees.
  • Do not call the number inside the suspicious email as your first verification step.

Scammers often put their own phone number in the fake subpoena so they can “confirm” their own scam.

2. Preserve the email properly

Do not delete the email immediately. Preserve evidence first.

Save:

Evidence Why it matters
Original email Shows sender, date, subject, routing, and attachments.
Full email headers Helps investigators trace technical details.
Attachments May show forged letterhead, fake signatures, malware, or metadata.
Screenshots Useful for quick review, but not a substitute for the original email.
Links and URLs Investigators need exact links, not just screenshots.
Payment demands Shows intent to defraud or extort.
Bank/e-wallet details May help freeze funds or identify mule accounts.

For Gmail, Outlook, Yahoo, and business email systems, use the “show original,” “view source,” or “message details” function to preserve headers. Avoid forwarding the suspicious email repeatedly because forwarding can alter useful technical information.

3. Identify what the document claims to be

Read the document carefully and classify it.

Ask:

  • Is it allegedly from a court?
  • Is it from the Office of the City/Provincial Prosecutor?
  • Is it from the DOJ Office of Cybercrime?
  • Is it from the NBI Cybercrime Division?
  • Is it from the PNP Anti-Cybercrime Group?
  • Is it from a barangay?
  • Is it actually just a lawyer’s demand letter pretending to be a subpoena?

A real subpoena should point to a specific legal proceeding. A vague statement like “You are under investigation for cybercrime” without a case number, office, complainant, date, time, place, and responsible officer is a red flag.

4. Check the basic details

Look for these details:

Detail to check Why it matters
Exact name of issuing office Fake emails often use non-existent offices like “Supreme Regional Trial Court” or “National Cyber Court.”
Court branch or prosecutor docket number Real matters normally have a traceable case, NPS docket, I.S. number, criminal case number, civil case number, or investigation reference.
Case title A real document usually identifies parties, such as “People of the Philippines v. ___” or “Juan dela Cruz v. Maria Santos.”
Date, time, and place A subpoena must tell you when and where to appear or submit documents.
Name and position of signatory Check whether the judge, prosecutor, clerk of court, hearing officer, or investigator exists.
Official email domain Government offices usually use official domains, though some local offices still use published Gmail accounts. Verify independently.
Attachments Prosecutor subpoenas in preliminary investigation should normally attach the complaint and supporting affidavits or documents.
Payment instructions A subpoena demanding private payment is highly suspicious.

A seal or logo is not enough. Scammers copy official seals easily.

5. Verify using official contact details only

For court documents, use the Supreme Court Court Locator to find the relevant court or branch and contact the Office of the Clerk of Court or the branch directly. The Supreme Court’s official Court Locator provides court information and contact channels; do not rely on numbers printed in the suspicious email. (Supreme Court of the Philippines)

When contacting the court or agency, say:

“I received an email claiming to be a subpoena. I am verifying whether your office issued it. The alleged case number is ____. The alleged date is ____. The alleged signatory is ____. May I confirm if this is in your official records?”

Ask for confirmation of:

  1. Whether the case or investigation exists
  2. Whether the subpoena was actually issued
  3. Whether you are the named recipient
  4. How it was served
  5. Whether email service was authorized or used
  6. The official next step and deadline
  7. The name and position of the person who confirmed the information

Write down the date, time, office called, name of personnel, and what was said.

6. If it claims to be from a prosecutor, check the NPS or prosecutor’s office

For a prosecutor’s subpoena, verify with the Office of the City Prosecutor, Office of the Provincial Prosecutor, or relevant DOJ prosecution office. A preliminary investigation subpoena should normally relate to an actual complaint and should give you a chance to submit a counter-affidavit and supporting evidence.

Common prosecutor-subpoena red flags include:

  • No complainant named
  • No I.S. or NPS docket number
  • No prosecutor’s office address
  • No attached complaint-affidavit
  • No sworn statements or supporting documents
  • Threat of immediate arrest if you do not pay
  • Demand to settle through GCash, Maya, bank transfer, crypto, or remittance
  • Instruction not to contact the prosecutor’s office

7. If it claims to be from PNP, NBI, or DOJ cybercrime offices, verify separately

The NBI Cybercrime Division handles investigative assistance for victims of computer crimes, and its Citizen’s Charter describes steps such as filing a complaint, preliminary interview, sworn statements, and submission of supporting documents. (National Bureau of Investigation)

The DOJ Office of Cybercrime was created under RA 10175 and is the central authority for cybercrime matters. (Department of Justice Philippines)

For online scam reporting, the Inter-Agency Response Center hotline 1326 is promoted through Scam Watch Pilipinas for reporting online scams, with alternative mobile numbers listed for major networks. (ScamWatch Pilipinas)

Do not assume that a message is real because it uses “cybercrime,” “NBI,” “PNP,” or “DOJ.” Verify through official websites, published hotlines, physical offices, or known government directories.

Signs the Subpoena Email Is Probably Fake

Treat the email as highly suspicious if it has several of these signs:

  • It demands payment to avoid arrest.
  • It uses a private bank account, e-wallet, QR code, or crypto wallet.
  • It says “do not contact the court/police/prosecutor.”
  • It threatens immediate arrest, deportation, hold-departure, or NBI blacklist without due process.
  • It has no case number, docket number, branch, prosecutor, or named complainant.
  • It uses poor grammar, strange formatting, or mixed agency names.
  • It comes from a free email account not officially published by the agency.
  • It uses shortened links or unfamiliar domains.
  • It attaches a password-protected file.
  • It asks for OTPs, passwords, selfies, IDs, or bank details.
  • It says the case will disappear if you pay today.
  • It claims to be from the Supreme Court but tells you to transact with a private “legal department.”
  • It names a real judge or prosecutor but gives a fake contact number.

What If the Subpoena Is Real?

If verification shows the subpoena is genuine, do not ignore it.

Your next step depends on the type of proceeding.

Situation Practical next step
Court subpoena to testify Confirm date, time, branch, and whether you need to appear personally or may request accommodation.
Court subpoena duces tecum Check exactly what documents are required and whether they are relevant, available, and within your control.
Prosecutor subpoena Calendar the deadline for counter-affidavit, usually counted from receipt, and review the complaint and evidence.
Agency subpoena Verify the agency’s authority and the specific rules governing that proceeding.
Overbroad or improper subpoena Consider filing the proper motion or objection before the deadline or appearance date.
You are abroad Ask the issuing office how appearance or submission may be handled; affidavits executed abroad may require consular notarization or apostille depending on where they are signed.

For Filipinos abroad, OFWs, dual citizens, or foreigners outside the Philippines, documents signed abroad for use in Philippine proceedings may need proper notarization or authentication. Philippine consular notarization is commonly accepted for documents to be used in the Philippines, while documents notarized locally in an Apostille country may need an apostille from that country’s competent authority. DFA materials explain apostille requirements and related authentication procedures. (Apostille Philippines)

What If You Already Paid or Sent Personal Information?

Act quickly.

  1. Contact your bank, e-wallet, or remittance provider. Report the transaction as fraud and ask if funds can be held, reversed, traced, or flagged.
  2. Change passwords immediately. Prioritize email, banking, e-wallets, social media, and cloud storage.
  3. Enable multi-factor authentication. Use an authenticator app where possible.
  4. Report compromised IDs. Monitor for SIM registration, loan app, credit, e-wallet, or account-opening misuse.
  5. Preserve all evidence. Keep email headers, screenshots, receipts, account numbers, and chat logs.
  6. File a report. Use the appropriate channel: PNP ACG, NBI Cybercrime Division, DOJ Office of Cybercrime, I-ARC 1326, or the nearest police station depending on urgency and location.
  7. If a financial account was used, report immediately. RA 12010 allows coordinated verification and temporary holding of disputed transactions in certain circumstances, with institutions and regulators involved. (Lawphil)

Common Scenarios

“The email says I will be arrested today if I do not pay.”

A subpoena is not the same as a warrant of arrest. A real warrant is issued by a court and follows a different process. A demand for payment to avoid immediate arrest is one of the strongest signs of a scam.

“The PDF has a real judge’s name. Does that mean it is real?”

No. Scammers copy names of real judges, prosecutors, lawyers, and police officers from public sources. Verify with the actual court branch or office.

“The sender used a .gov.ph email. Is it automatically real?”

Not automatically. Email accounts can be spoofed, compromised, or made to appear similar. Check the full email headers and verify by contacting the office through independently sourced details.

“The subpoena is about cyber libel from a Facebook post.”

Cyber libel complaints can exist in the Philippines, but a real preliminary investigation should still have a complainant, docket number, prosecutor’s office, complaint-affidavit, supporting evidence, and a real deadline to submit a counter-affidavit. A demand to pay privately is not how legitimate prosecution works.

“I am a foreigner and the email threatens immigration consequences.”

A subpoena does not automatically create a blacklist, deportation case, hold-departure order, or immigration lookout bulletin. Immigration consequences require separate legal authority and procedure. Verify first with the issuing office, and be especially cautious if the email asks for passport pages, visa documents, ACR details, or payment to “clear” your name.

Documents and Information to Prepare for Verification

Item Purpose
Copy of the email Shows what was received.
Full email headers Helps trace sender and authenticity.
PDF or attachment filename Helps the office confirm if it matches their records.
Alleged case number or docket number Main reference for verification.
Name of issuing office Determines where to verify.
Name of signatory Helps confirm if the person is connected to the office.
Screenshots of payment demands Supports scam or extortion report.
Proof of payment, if any Needed for bank/e-wallet dispute and complaint.
Government ID Usually needed if filing a formal complaint.
Sworn statement or complaint-affidavit Often needed for NBI/PNP/prosecutor action.

Frequently Asked Questions

Is an emailed subpoena valid in the Philippines?

It can be valid in some situations, but you should not rely on the email alone. Verify the case, issuing office, signatory, mode of service, and official record directly with the court, prosecutor, or agency.

How do I know if a subpoena email is fake?

It is likely fake if it has no real case number, no issuing branch or office, no named parties, no official contact trail, no attached complaint in a prosecutor proceeding, or if it demands payment to avoid arrest.

Can I ignore a fake subpoena email?

A fake subpoena has no legal force, but you should preserve and report it if it involves threats, identity theft, fraud, malware, or payment demands. If there is any doubt, verify first before ignoring it.

Can I be arrested for ignoring a real subpoena?

Ignoring a real and properly served court subpoena can have serious consequences, including contempt or compulsory processes in appropriate cases. The key is to verify quickly and respond properly if it is genuine.

Should I call the number written in the subpoena email?

Not first. Look up the court, prosecutor, NBI, PNP, DOJ, or agency through official directories or websites. Scammers often place their own numbers in fake legal documents.

What if the email says it is from the NBI Cybercrime Division?

Verify directly with the NBI through official channels. The NBI Cybercrime Division handles computer-crime complaints and investigations, but a scammer can still misuse the NBI name, seal, or logo. (National Bureau of Investigation)

What if the subpoena asks me to send my counter-affidavit by email?

That may be possible in some offices or proceedings, but first verify that the subpoena is genuine, the email address is official or authorized, and the deadline is correct. Make sure the complaint and supporting evidence were furnished to you.

What if I am abroad and cannot appear in the Philippines?

Verify the subpoena first. If genuine, ask the issuing office about remote appearance, resetting, counsel appearance, or written submission. If you need to execute affidavits abroad, check whether consular notarization or apostille is required for use in the Philippines. (Apostille Philippines)

Can a real subpoena require me to pay money?

A subpoena may require appearance, testimony, or production of documents. It should not require you to send money to a private account to avoid arrest, remove a case, or “clear” your name. Payment demands are a major scam indicator.

Key Takeaways

  • A subpoena email is not automatically real or fake; verify it directly with the issuing court, prosecutor, or agency.
  • Do not click links, open suspicious attachments, send IDs, reveal OTPs, or pay money because of a threatening email.
  • A real subpoena should identify a real case, office, signatory, date, time, place, and legal proceeding.
  • Prosecutor subpoenas in criminal preliminary investigations should normally come with the complaint and supporting documents.
  • Use independent official sources such as the Supreme Court Court Locator, DOJ, NBI, PNP ACG, and I-ARC 1326 reporting channels.
  • Fake subpoena emails may involve cybercrime, falsification, estafa, identity theft, data privacy violations, or financial account scamming.
  • If the subpoena is genuine, respond within the proper deadline or file the appropriate objection before the scheduled date.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.