A subpoena in your inbox can feel terrifying, especially if the email says you will be arrested, deported, sued, or publicly exposed unless you act immediately. The safest approach is simple: do not ignore it, but do not panic, click suspicious links, send IDs, or pay anyone. In the Philippines, real subpoenas usually come from a court, prosecutor, or authorized government body and can be verified through official channels. This guide explains how to check whether an emailed subpoena is real or fake, what details to look for, who to contact, what laws may apply, and what to do next if the email turns out to be a scam.

What a Real Philippine Subpoena Is

A subpoena is a legal process requiring a person to appear and testify. A subpoena duces tecum is a subpoena that also requires the person to bring or produce documents, records, books, or other things under their control. Under Rule 21 of the Rules of Court, a subpoena may be issued by a court, a court where a deposition is being taken, an officer or body authorized by law, or a Justice of the Supreme Court or Court of Appeals in a pending case or investigation. (Supreme Court of the Philippines)

In practice, the document should clearly show:

The issuing office, such as an RTC, MTC, MeTC, MCTC, prosecutor’s office, or authorized agency
The court branch or office address
The case title, such as People of the Philippines v. Juan Dela Cruz
The case number, docket number, or NPS docket number
The name of the person being summoned
The date, time, and place of appearance
The purpose of the appearance
The documents required, if it is a subpoena duces tecum
The signature of the judge, clerk of court, prosecutor, or authorized officer

For court subpoenas, Rule 21 requires the form and contents to state the name of the court, title of the action or investigation, and command to attend at a specific time and place. If documents or things are required, the subpoena must describe them with reasonable particularity. (Supreme Court of the Philippines)

A subpoena may also come from a prosecutor during preliminary investigation, which is the stage where the prosecutor determines whether there is enough basis to charge a person in court. The Supreme Court has recognized that preliminary investigation is an executive function handled by the prosecution service, and it has upheld the validity of the 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings.

The important point is this: a real subpoena should be traceable to a real case, real office, and real issuing officer. A PDF with a court logo is not enough.

Is an Email Subpoena Automatically Fake?

No. An emailed document is not automatically fake just because it is electronic.

Philippine law recognizes electronic documents and electronic evidence. The Electronic Commerce Act of 2000, or Republic Act No. 8792, recognizes that electronic documents can have legal effect and evidentiary value when properly authenticated. The Rules on Electronic Evidence also allow electronic documents to be admitted if they meet the rules on admissibility and authentication. (Lawphil)

However, that does not mean every “subpoena” received by email is valid.

For courts, the Office of the Court Administrator has issued electronic filing and service guidance for first- and second-level courts. These rules allow court documents to be transmitted as PDF copies to parties or counsel with email addresses of record, but the reckoning of periods is tied to the primary mode of service, not merely the emailed PDF copy. (Office of the Court Administrator)

That distinction matters. If you are a party or lawyer in an existing case and you gave your email address to the court, an emailed court document may be part of official service. But if you are a random person receiving a first-time “subpoena” from an unknown Gmail address demanding payment through GCash, that is highly suspicious.

Common Red Flags of a Fake Subpoena Email

Treat the email as suspicious if you see any of these warning signs:

It demands immediate payment to “cancel” a subpoena, warrant, criminal case, immigration hold, or arrest.
It asks you to pay through GCash, Maya, cryptocurrency, remittance, or a private bank account.
The sender uses Gmail, Yahoo, Outlook, or a suspicious domain pretending to be a government office.
The email address does not match the displayed sender name.
The document has no case number, docket number, branch, prosecutor’s office, or complete address.
It uses strange terms like “Supreme Court of Manila,” “Federal Court of the Philippines,” or “National Trial Court.”
It threatens arrest “within 24 hours” unless you pay or click a link.
It tells you not to contact the court, police, prosecutor, lawyer, or your family.
It asks for your OTP, bank login, passport scan, credit card details, or selfie with ID.
It contains ZIP files, executable files, password-protected attachments, or links requiring you to log in.
The hearing date is impossibly soon, falls outside office hours, or gives no physical or official virtual hearing details.
The grammar, seals, formatting, or letterhead look copied, blurred, inconsistent, or generic.

A real court, prosecutor, or government office may call or email for coordination. But a real document should survive verification through the official court, prosecutor’s office, or agency—not just through the phone number written in the suspicious email.

Step-by-Step Guide: How to Verify a Fake Subpoena Received by Email

1. Do Not Click, Pay, or Reply Immediately

Your first job is to preserve evidence and avoid making the situation worse.

Do this first:

Do not click any link in the email.
Do not open unknown attachments on your phone or main computer if they look suspicious.
Do not send IDs, passports, bank details, passwords, or OTPs.
Do not pay any “settlement,” “clearance,” “filing fee,” or “warrant cancellation fee.”
Do not call the number in the email until you independently verify it.

If you already opened the attachment, clicked a link, or entered information, act quickly:

Change your email and banking passwords.
Enable two-factor authentication.
Contact your bank or e-wallet provider.
Check your accounts for unauthorized transactions.
Preserve screenshots before deleting anything.

2. Save the Email and Evidence

Do not delete the email. Investigators may need the original message.

Keep:

The original email in your inbox
Full email headers, if your email provider allows you to view them
The sender’s actual email address
The date and time received
Screenshots of the message
Screenshots of threats, payment demands, QR codes, account numbers, or phone numbers
The attached PDF or image
Any links, copied carefully without visiting them
Call logs, chat messages, and transaction receipts
The envelope, courier document, or printed copy, if any

For Gmail, you can usually open the message menu and choose “Show original” to view technical header details. For Outlook, Yahoo, and other providers, look for “view message source,” “view headers,” or similar options.

3. Identify the Supposed Issuing Office

Read the document carefully and determine who supposedly issued it.

If the document says it came from	It may involve	Verify with
RTC, MTC, MeTC, MCTC, or court branch	Court case or witness subpoena	The specific court branch or Office of the Clerk of Court
Office of the City or Provincial Prosecutor	Preliminary investigation	The prosecutor’s office named in the document
DOJ, NBI, PNP, or DOJ Office of Cybercrime	Criminal or cybercrime investigation	The official office or unit concerned
Barangay	Barangay conciliation or summons	The barangay hall or Lupon office
NLRC or DOLE	Labor dispute	The labor office or NLRC branch
BIR, BI, SEC, DHSUD, or other agency	Administrative or regulatory matter	The agency’s official hotline, office, or website

Be careful with fake hybrid names. Scammers often mix real-sounding words, such as “Philippine National Court,” “Manila Regional Prosecutor Court,” or “Cyber Warrant Division.” Philippine offices have specific names, jurisdictions, and addresses.

4. Verify Through Official Contact Details, Not the Email

Do not rely on the phone number, QR code, or link provided in the suspicious email.

For court subpoenas, use the Supreme Court’s official Court Locator or the Office of the Court Administrator’s directory to find the contact details of the court branch or office. The Supreme Court website provides a Court Locator for trial courts and offices, and the OCA maintains court contact information. (Supreme Court of the Philippines)

When you contact the court, ask:

Does this case number exist?
Is this case pending in your branch?
Is my name listed as a party, witness, respondent, or person required to appear?
Did your branch issue this subpoena?
Was it sent by email?
What email address did the court use?
Is the hearing date, time, and courtroom correct?
Who signed the subpoena?
How was service made or attempted?

For prosecutor subpoenas, contact the Office of the City Prosecutor, Provincial Prosecutor, or DOJ office named in the document. Ask if the NPS docket number exists and whether a subpoena was issued to you.

For NBI, PNP, DOJ Office of Cybercrime, BIR, BI, SEC, DHSUD, DOLE, NLRC, or other agencies, verify through their official website, published directory, or physical office.

5. Check the Case or Docket Details

A fake subpoena often collapses when you ask for basic details.

Look for:

Correct court or office name
Correct city or province
Branch number, if from a court
Case number or NPS docket number
Names of parties
Date of issuance
Name and position of signatory
Purpose of appearance
Complete hearing details
Attached complaint-affidavit or supporting documents, if from a prosecutor

In a preliminary investigation, a respondent normally receives a complaint-affidavit and supporting documents so they can prepare a counter-affidavit. If the email only says “you are charged with cyber libel, pay now to avoid arrest” but provides no complaint, docket number, prosecutor, or office, that is a major red flag.

6. Ask Whether Service Was Properly Made

For court subpoenas, Rule 21 provides specific rules on service. Service is generally made in the same manner as personal or substituted service of summons. The original must be exhibited, a copy delivered, and fees for one day’s attendance and kilometrage must be tendered when required, subject to the rules. (Supreme Court of the Philippines)

This does not mean every defect automatically makes the document fake. But it does mean that proper service matters.

Ask the issuing office:

Was I personally served?
Was substituted service made?
Was service made through counsel?
Was email service authorized in this case?
Is my email address on record?
Is there a return of service?
Was this only a courtesy PDF copy?

If the court or office confirms that the document is real but service is questionable, do not simply ignore it. Confirm your next step in writing, calendar the date, and consider filing the proper motion, manifestation, request for resetting, or opposition before the deadline.

If the Subpoena Is Real: What Should You Do?

If official verification confirms that the subpoena is real, take it seriously.

For a Court Subpoena

You generally have two choices:

Comply with it, by appearing at the stated date, time, and place and bringing required documents if applicable.
Challenge it, usually by filing a motion to quash or appropriate motion before the hearing date.

Under Rule 21, a subpoena may be quashed on grounds such as being unreasonable or oppressive, requiring irrelevant documents, failing to describe documents with reasonable particularity, failure to tender required fees in proper cases, or other grounds recognized by the rule. (Supreme Court of the Philippines)

If a subpoena is valid and properly served, failure to obey without adequate cause may lead to contempt or even a warrant to bring the witness before the court. Rule 21 also recognizes exceptions, including the 100-kilometer rule for certain witnesses. (Supreme Court of the Philippines)

For a Prosecutor’s Subpoena

If the subpoena comes from a prosecutor’s office, it usually means a complaint has been filed for preliminary investigation.

You should:

Request or secure a complete copy of the complaint-affidavit and attachments.
Check the NPS docket number.
Note the deadline to submit your counter-affidavit.
Prepare sworn statements and supporting evidence.
Ask whether appearance is in person or virtual.
Avoid submitting an unsworn explanation when a sworn counter-affidavit is required.
Keep proof of filing and service.

Do not assume that “it is only at the prosecutor level” and therefore unimportant. A prosecutor’s finding may lead to the filing of an Information in court if probable cause exists.

For OFWs, Foreigners, and People Abroad

If you are outside the Philippines, verification is still possible.

Practical steps include:

Contact the issuing office through official channels.
Ask for confirmation by official email.
Ask whether remote appearance is allowed.
Ask whether affidavits must be notarized, consularized, apostilled, or sworn before a Philippine consular officer.
Ask whether a Philippine lawyer or authorized representative may appear or file on your behalf.
Account for Philippine business hours and local holidays.

A subpoena is not the same as a deportation order, hold departure order, blacklist order, or immigration notice. Be especially suspicious if an email claims that a court subpoena automatically means you will be deported unless you pay money immediately.

If the Subpoena Is Fake: What Should You Do?

If the court, prosecutor, or agency confirms that the subpoena is fake—or if the document is clearly a scam—focus on safety, evidence preservation, and reporting.

If You Did Not Pay or Share Information

Do not reply further.
Block the sender after saving evidence.
Report the email as phishing in your email app.
Preserve the original email and headers.
Warn family members or employees if the scam used your name or company.
Report to the relevant cybercrime authority if the threat is serious or targeted.

If You Paid Money

Act quickly. Recovery is often time-sensitive.

Contact your bank, e-wallet, or remittance provider immediately.
Request freezing, reversal, or fraud investigation if still possible.
Save the transaction reference number.
File a report with cybercrime authorities.
Prepare a sworn statement describing the timeline.

If the scammer used deceit to obtain money, the facts may involve estafa under Article 315 of the Revised Penal Code. If the scam used email, fake digital documents, or online impersonation, cybercrime laws may also apply.

If You Sent IDs, Passport, or Personal Data

If you sent a passport, driver’s license, national ID, ACR I-Card, bank statement, selfie, or signature specimen, treat it as an identity-risk situation.

Do the following:

Monitor bank and e-wallet accounts.
Watch for loan, SIM, or account-opening attempts.
Change passwords.
Notify your bank or financial institution.
Keep copies of what you sent.
Consider filing a complaint or report with the National Privacy Commission if personal data was misused.

The Data Privacy Act of 2012, Republic Act No. 10173, protects personal information in government and private systems, and the National Privacy Commission provides procedures for filing formal complaints involving personal data concerns. (National Privacy Commission)

What Laws May Apply to a Fake Subpoena Email?

Several Philippine laws may be relevant depending on what the scammer did.

Falsification and Use of Fake Documents

A fake subpoena may involve falsification if it imitates a court, prosecutor, government seal, signature, or official document.

The Revised Penal Code penalizes falsification by public officers and private individuals, including falsification of public, official, or commercial documents and use of falsified documents. It also penalizes usurpation of authority or official functions in appropriate cases. (Supreme Court E-Library)

Estafa

If the sender used lies or false pretenses to make you send money, the facts may involve estafa under Article 315 of the Revised Penal Code. The exact charge depends on the evidence, amount, method of deception, and identity of the offender.

Cybercrime

The Cybercrime Prevention Act of 2012, Republic Act No. 10175, covers computer-related forgery, computer-related fraud, and computer-related identity theft. It also covers crimes under the Revised Penal Code and special laws when committed through information and communications technology. (Supreme Court E-Library)

This is why an emailed fake subpoena may be more than an ordinary scam. If it involves forged electronic documents, phishing links, identity theft, or online payment fraud, cybercrime authorities may investigate.

The law designates the NBI and PNP as law enforcement authorities for cybercrime enforcement, with the DOJ Office of Cybercrime coordinating cybercrime matters under the implementing rules. (Supreme Court E-Library)

Where to Report a Fake Subpoena Scam in the Philippines

Office or channel	Best for	What to prepare
NBI Cybercrime Division or regional cybercrime office	Phishing, fake legal documents, online extortion, identity theft, email scams	Original email, headers, screenshots, attachments, transaction receipts, IDs, sworn statement
PNP Anti-Cybercrime Group or local police	Online scams, threats, traceable phone numbers or local suspects	Screenshots, phone numbers, account numbers, payment proof, narrative
DOJ Office of Cybercrime	Cybercrime referrals, preservation concerns, coordination	Email evidence, headers, links, platform details
CICC / Inter-Agency Response Center hotline 1326	Quick reporting of online scams and phishing	Screenshots, sender details, links, payment information
National Privacy Commission	Misuse of personal data, IDs, identity documents, or sensitive personal information	Complaint form, evidence, proof of identity, notarized complaint when required
Bank, e-wallet, remittance provider, or telecom	Freezing funds, fraud reports, account blocking	Transaction reference, recipient account, screenshots, valid ID

The NBI Citizen’s Charter identifies investigative assistance for victims of computer crimes through its Cybercrime Division, with a process involving complaint evaluation, interview, sworn statements, and supporting evidence. (National Bureau of Investigation)

For urgent online scam reports, the Cybercrime Investigation and Coordinating Center’s Inter-Agency Response Center hotline 1326 has been promoted as a 24/7 reporting channel for cybercrime concerns including phishing and email scams. (Philippine News Agency)

Evidence Checklist Before You Report

Bring or preserve as much of the following as possible:

Original email, not just a screenshot
Full email headers
Attached PDF, image, or document
Screenshots of the email body
Screenshots of sender details
Screenshots of links, QR codes, and payment instructions
Phone numbers, Telegram, Viber, WhatsApp, Messenger, or SMS details
Bank, GCash, Maya, remittance, or crypto transaction records
Proof of any money sent
Proof of any personal information sent
Timeline of what happened
Names used by the scammer
Any recording, voicemail, or call log
Your valid ID for complaint filing
A printed copy, if filing in person

When writing your complaint narrative, keep it factual:

When you received the email
What it claimed
What threats were made
What links or attachments were included
What information you gave, if any
What money you sent, if any
What verification you made with the court, prosecutor, or agency
What loss or risk resulted

What Real Courts and Prosecutors Usually Will Not Do

A Philippine court, prosecutor, or government office will generally not:

Ask you to pay a private individual to cancel a case
Demand GCash, Maya, cryptocurrency, or remittance payment to stop arrest
Ask for your OTP, password, or online banking login
Threaten immediate imprisonment through email without proper legal process
Tell you not to contact the issuing office
Use a fake “settlement link” to collect money
Require you to upload your passport or national ID to a random website
Send executable files or suspicious compressed attachments
Use foreign court terms that do not match Philippine procedure

Court fees, bonds, fines, and official payments—when truly applicable—are handled through official channels and should be supported by official receipts or court-approved payment systems. A personal QR code in an email is not normal court procedure.

Common Scenarios

“The email says I have a warrant if I do not pay today.”

Be very careful. Scammers often use fear of arrest to force quick payment.

A subpoena is not the same as a warrant of arrest. A subpoena generally commands appearance or production of documents. A warrant of arrest is issued by a judge in a criminal case after legal requirements are met. If the email says payment to a private account will “cancel the warrant,” treat it as a serious scam warning sign and verify through the court or prosecutor’s office immediately.

“The email uses a real court name and judge’s name.”

Still verify. Scammers can copy real court names, branch numbers, seals, and judges’ names from public sources. Authenticity depends on whether the issuing office actually issued the document in a real case.

“The email came from a .gov.ph address.”

A government-looking address is reassuring, but not conclusive. Email sender names can be spoofed, and compromised accounts can be misused. Verify through official numbers or published directories, especially if the message asks for money, passwords, IDs, or urgent action.

“The subpoena is from a prosecutor, not a court.”

That can be legitimate. Prosecutors issue subpoenas in preliminary investigations. But it should identify the prosecutor’s office, docket number, complainant, respondent, date, and required action. You should be able to verify it directly with the named prosecutor’s office.

“The subpoena says I must attend by Zoom or Google Meet.”

Virtual appearances can happen in some proceedings, especially when allowed by the court, prosecutor, or agency. But verify the meeting details through the official office before joining, especially if the link asks you to install software, enter passwords, or upload IDs.

“I am abroad and cannot appear.”

Do not ignore it. Contact the issuing office, explain your location, and ask what procedure is allowed. You may need to submit a written explanation, request resetting, appear virtually, authorize counsel, or submit sworn documents in the form required by the office.

Frequently Asked Questions

Is a subpoena sent by email valid in the Philippines?

It can be, depending on the case, issuing office, mode of service, and whether your email address is officially on record. But an email alone does not prove validity. Verify the document directly with the court, prosecutor, or agency using official contact details.

How do I know if a Philippine subpoena is fake?

Check whether it has a real issuing office, case or docket number, case title, date, time, place, authorized signature, and official contact trail. Strong scam signs include payment demands, private QR codes, threats of immediate arrest, fake court names, suspicious links, and instructions not to contact the court.

Can I be arrested for ignoring an emailed subpoena?

Ignoring a real and properly served court subpoena can have serious consequences, including contempt or a warrant to bring a witness before the court in appropriate cases. But a fake subpoena has no legal force. The key is to verify quickly instead of assuming either way.

Should I call the number in the subpoena email?

Not as your first step. Look up the court, prosecutor, or agency through official directories or websites, then call the published number. Scammers often place their own phone numbers in fake documents so they can “confirm” the scam.

What if the email says I must pay to cancel a warrant or criminal case?

That is a major red flag. Do not pay. Verify with the court or prosecutor’s office through official channels. If you already paid, report immediately to your bank or e-wallet provider and preserve all transaction records.

What if I clicked the link or downloaded the attachment?

Disconnect from the suspicious page, change passwords, enable two-factor authentication, scan your device, and monitor your accounts. If you entered banking details, OTPs, or IDs, contact your bank or e-wallet provider immediately and consider filing a cybercrime report.

What if the subpoena came from a prosecutor’s office?

It may be real if there is a pending preliminary investigation. Verify the NPS docket number and ask for the complaint-affidavit and attachments. If confirmed, prepare your counter-affidavit and evidence before the deadline.

Can an OFW or foreigner verify a subpoena from abroad?

Yes. Use official court, prosecutor, or agency contact details. Ask for written confirmation, remote appearance options, and document requirements. Do not rely on a phone number or link inside the suspicious email.

Do I need to send my passport or ID to verify the subpoena?

Usually, you should not send sensitive ID documents to an unverified email sender. First confirm the office and case through official channels. If an official office later requires identification, ask how it should be submitted securely.

What should I do if the court confirms the subpoena is real?

Calendar the date immediately. Ask what exactly is required from you. If you can comply, prepare to appear and bring the required documents. If the subpoena is improper, burdensome, irrelevant, or impossible to comply with, consider filing the appropriate motion or written request before the scheduled date.

Key Takeaways

An emailed subpoena is not automatically fake, but it must be verified.
A real Philippine subpoena should identify a real court, prosecutor, agency, case number, parties, date, purpose, and issuing officer.
Do not click suspicious links, send IDs, share OTPs, or pay money based on an email threat.
Verify using official court, prosecutor, or government agency contact details—not the number or link in the email.
If the subpoena is real, comply or challenge it before the deadline.
If it is fake, preserve the email, headers, attachments, screenshots, and payment records.
Fake subpoena emails may involve falsification, estafa, cybercrime, identity theft, or data privacy violations under Philippine law.