Quick answer
If you suspect fraud or estafa, act immediately: stop further payments, contact the bank or e-wallet through its official fraud channel, preserve the original evidence, and report the incident to law enforcement. To start a criminal case, you will generally need a sworn complaint supported by affidavits and documents showing how the suspect deceived you or abused your confidence and caused financial loss.
A police, NBI, cybercrime, bank, SEC, DTI, or CICC report may help investigate or freeze funds, but it does not by itself guarantee repayment. Recovery usually requires the return of funds by the financial institution, a voluntary settlement, restitution or damages awarded in the criminal case, or a separate civil action. Speed matters because transferred funds can move quickly and legal claims have prescription periods.
When suspected fraud may be estafa
Estafa is punishable under Article 315 of the Revised Penal Code. The provision covers several distinct forms of fraud, including:
- obtaining money or property through false pretenses or fraudulent representations made before or at the time the victim parts with it;
- misappropriating or converting money or personal property received in trust, on commission, for administration, or under an obligation to deliver or return it;
- denying receipt of property that was entrusted under such an obligation;
- altering the substance, quantity, or quality of something that must be delivered;
- taking advantage of a signature placed on a blank document; and
- certain fraudulent acts involving checks, gambling, or deceptive inducements.
For estafa through false pretenses, the prosecution ordinarily must establish that:
- the accused made a false representation or used a fraudulent act or means;
- the deceit occurred before or at the same time as the fraud;
- the victim relied on it and was induced to part with money, property, or a right; and
- the victim suffered damage as a result.
The Supreme Court applies these elements to the evidence in each case. See, for example, its discussion in People v. Balasa.
For estafa through misappropriation or conversion, the transaction must generally involve an obligation to deliver or return the same money or property received—not merely an ordinary obligation to pay a debt.
Not every unpaid debt or failed deal is estafa
Failure to pay, refund money, perform a contract, or make an investment profitable does not automatically establish a crime. A transaction may be only a civil dispute when the evidence shows a genuine agreement followed by nonperformance, without prior deceit or a legally relevant abuse of confidence.
Important distinctions include:
- A promise that later went unfulfilled is not necessarily a fraudulent representation. Evidence may be needed that the accused already knew the representation was false when it was made.
- A borrower ordinarily acquires ownership of money loaned and must repay an equivalent amount. Mere failure to repay a loan is generally different from converting money received in trust.
- Business loss, delay, insolvency, or poor performance does not alone prove criminal intent.
- Later silence, excuses, or failure to refund may support the overall evidence, but ordinarily cannot replace proof of the required deceit or conversion.
- A bounced check may raise issues under both estafa and Batas Pambansa Blg. 22, but the elements and notice requirements are different. Issuance of a dishonored check does not automatically prove every element of estafa.
The labels used by the parties—such as “investment,” “loan,” “capital,” “consignment,” or “trust”—are not conclusive. Prosecutors and courts examine what was actually promised, when each representation was made, how the money was delivered, and what obligation governed it.
Current value thresholds under Article 315
Republic Act No. 10951 adjusted the amount-based penalties for estafa. The current statutory brackets are:
| Amount of fraud | Penalty bracket stated in Article 315 |
|---|---|
| Not more than ₱40,000 | Arresto mayor in its medium and maximum periods |
| More than ₱40,000 but not more than ₱1,200,000 | Arresto mayor in its maximum period to prisión correccional in its minimum period |
| More than ₱1,200,000 but not more than ₱2,400,000 | Prisión correccional in its minimum and medium periods |
| More than ₱2,400,000 but not more than ₱4,400,000 | Prisión correccional in its maximum period to prisión mayor in its minimum period |
| More than ₱4,400,000 | The statutory maximum-period rule applies, with an additional year for every additional ₱2,000,000, subject to the 20-year ceiling stated in Article 315 |
These are penalty brackets, not estimates of the sentence in a particular case. The precise charge, amount proved, applicable special laws, modifying circumstances, and rules on penalties can change the result. The controlling text is Republic Act No. 10951.
If estafa is committed through an information and communications technology system, Section 6 of the Cybercrime Prevention Act may apply and can increase the penalty by one degree. The mere fact that people communicated online does not settle the issue; the prosecution must establish that the technology was used in the commission of the offense contemplated by the law. See Republic Act No. 10175.
Other laws may also apply to the facts, including laws concerning access devices, identity theft, falsified documents, illegal investment solicitation, securities fraud, or syndicated estafa. Let the investigating authority or prosecutor determine the proper charge from the evidence.
What to do immediately
1. Stop the loss and secure your accounts
Do not send another “release fee,” “tax,” “verification payment,” or “refund charge.” Do not follow instructions to move funds into a supposed safe account.
If banking, e-wallet, card, or account credentials may be compromised:
- call the provider using the number in its official app, website, or card;
- ask it to block the transaction, account, card, or device as appropriate;
- request a fraud case or reference number;
- change passwords from a trusted device;
- sign out other sessions and enable stronger authentication;
- change any reused passwords; and
- tell your mobile provider immediately if a SIM swap is suspected.
Ask the sending institution whether it can initiate a recall, trace, hold, or coordination request to the receiving institution. These remedies are time-sensitive and are not guaranteed. Do not wait for a police report before notifying the provider unless the provider specifically requires one for a particular step.
2. Preserve evidence before accounts or messages disappear
Keep the originals and make secure backups of:
- the advertisement, listing, profile, website, and complete URL;
- usernames, account identifiers, phone numbers, email addresses, and display names;
- complete chat and email threads, including dates and times;
- voice messages, recordings lawfully obtained, and call logs;
- contracts, proposals, invoices, receipts, acknowledgments, and delivery records;
- bank statements, deposit slips, transaction confirmations, reference numbers, QR codes, and recipient-account details;
- checks, deposit records, dishonor slips, and written notices;
- identity documents or business documents provided by the suspect;
- photographs of goods, packaging, waybills, and courier records;
- demands for payment or return, and proof that each demand was received; and
- names and contact information of witnesses or other victims.
Screenshots are useful, but preserve more than cropped images. Export chats when possible, retain the original device and files, and record the URL, date, time, account name, and surrounding conversation. Do not edit the originals. Create a simple chronology matching every representation, payment, follow-up, demand, and response to its supporting document.
3. Notify the payment provider in writing
After the urgent call or in-app report, send a concise written notice. Identify:
- the exact disputed transactions;
- when and how you discovered the fraud;
- why the transactions were unauthorized or fraudulently induced;
- the recipient details;
- the steps already taken; and
- the remedy requested.
Keep the complaint, attachments, acknowledgment, ticket number, and final response. If the provider is supervised by the Bangko Sentral ng Pilipinas, first use the provider’s formal complaint mechanism. An unresolved complaint may then be raised through the BSP’s official Consumer Assistance Mechanism. A BSP complaint is not a substitute for a criminal complaint.
Where to report
Choose the channels that fit the incident. Reporting to more than one relevant institution can be appropriate, but disclose prior reports and use consistent facts.
Local police, PNP Anti-Cybercrime Group, or NBI
You may report to the police or the National Bureau of Investigation. For an online scam, account takeover, phishing, identity misuse, or digitally facilitated fraud, the PNP Anti-Cybercrime Group or NBI Cybercrime Division may be particularly relevant.
The Cybercrime Investigation and Coordinating Center also operates official cybercrime-reporting and assistance channels through CICC. Confirm current office locations, hotlines, and submission methods on the agency’s official website before sending sensitive documents.
An investigative report is not necessarily the same as filing the complaint that begins prosecution. Ask whether the agency will endorse the case to the proper prosecutor and whether you must separately submit a complaint-affidavit.
Office of the City or Provincial Prosecutor
A criminal complaint is commonly filed with the prosecutor having territorial jurisdiction. Under Rule 110, a criminal action is generally instituted where the offense was committed or where any essential ingredient occurred. Online transactions can present difficult venue questions—for example, where the representation was received, reliance occurred, payment was made, or damage was suffered—so obtain fact-specific advice if the parties or accounts are in different places.
Where a preliminary investigation is required, the complaint is filed with the proper investigating officer. Rule 112 generally requires preliminary investigation when the prescribed penalty is at least four years, two months, and one day, regardless of the fine. For offenses below that threshold, different filing procedures apply.
The complaint should ordinarily identify the respondent’s address and include the complainant’s and witnesses’ sworn affidavits plus supporting documents. Current documentary, copy, oath, and filing requirements should be confirmed directly with the receiving prosecutor’s office. The governing framework appears in Rules 110–112 of the Revised Rules of Criminal Procedure.
SEC, DTI, or another regulator
Make an additional regulatory report when appropriate:
- Contact the Securities and Exchange Commission if the scheme involves unregistered securities, public investment solicitation, a purported investment platform, or misuse of a company’s identity.
- Contact the Department of Trade and Industry for a consumer complaint within its jurisdiction, such as certain seller or e-commerce disputes.
- Report misconduct by a BSP-supervised financial service provider through the provider’s complaint system and, if unresolved, the BSP.
- If personal information was unlawfully collected, disclosed, or used, consult the National Privacy Commission about its complaint process.
A regulator may investigate, mediate, warn the public, or impose administrative measures within its mandate. It does not necessarily prosecute estafa or recover money for an individual complainant.
Preparing a strong complaint-affidavit
A useful affidavit tells a complete, document-supported story in chronological order. It should ordinarily state:
- who the complainant and respondent are;
- how they met or communicated;
- the respondent’s exact material representations;
- why those representations were false;
- when the representations were made;
- why the complainant relied on them;
- each amount or item transferred, including date, method, recipient, and reference number;
- the agreement governing any property entrusted to the respondent;
- what happened after the transfer;
- demands made and the respondent’s replies;
- the loss or damage suffered;
- the location of relevant events; and
- how each attachment supports a stated fact.
Quote only what you can prove and attach the full conversation when context matters. Distinguish firsthand knowledge from information received from others. Identify aliases as aliases; do not present an unverified identity as established fact.
Avoid conclusory statements such as “the respondent is a scammer” without describing the acts and evidence. The prosecutor—not the complainant—ultimately determines whether probable cause exists and what offense the evidence supports.
Can you recover the money through the criminal case?
Usually, the civil action to recover civil liability arising from the alleged offense is deemed instituted with the criminal action unless the offended party:
- waives it;
- properly reserves the right to file it separately; or
- filed the civil action before the criminal action.
Actual damages generally do not require an advance filing fee in the criminal case. Different filing-fee rules can apply to other damages. A victim who wants a separate civil case must make any required reservation before the prosecution begins presenting evidence.
The rules also prohibit double recovery for the same injury. If a civil case has already been filed, the later criminal case may cause it to be suspended, subject to the rules on independent civil actions and consolidation. Review Rule 111 before choosing a route.
Recovery is not automatic after conviction. The accused may lack reachable assets, and a judgment may still need to be enforced. In qualifying situations, Rule 127 permits provisional attachment in connection with the civil action deemed instituted in the criminal case—for example, where property was fraudulently converted in a fiduciary capacity, the accused is about to leave the Philippines, or assets are being concealed or disposed of. Attachment requires a court application and compliance with procedural safeguards.
When a separate civil claim may be more practical
A separate collection, rescission, damages, or other civil action may be appropriate when the evidence establishes a contractual or civil obligation but not criminal deceit. The correct action depends on the documents and remedy sought.
Money claims not exceeding ₱1,000,000, exclusive of interest and costs, may qualify for the Supreme Court’s small-claims procedure if they fall within the covered categories. Small claims are designed for certain straightforward money demands and generally proceed without lawyers appearing for the parties at the hearing, although legal advice before filing can still be valuable. Consult the judiciary’s current Small Claims information and forms and the applicable Rules on Expedited Procedures.
Before filing separately, check whether a criminal action involving the same acts is already pending and whether Rule 111 requires reservation, suspension, or another procedural step.
Settlement and repayment offers
A genuine repayment can reduce the victim’s loss, but exercise care:
- Put all terms in writing.
- Identify the total admitted amount, schedule, payment method, default terms, and security.
- Verify every payment before issuing a receipt or release.
- Do not surrender original evidence merely because a settlement is proposed.
- Do not sign an affidavit of desistance, quitclaim, waiver, or broad release without understanding its effect.
- Do not accept a new check as unquestioned proof that the original obligation has been satisfied.
- Tell the prosecutor or court about any material settlement or payment.
Estafa is a public offense. An affidavit of desistance or private settlement does not automatically compel dismissal, although it may affect the evidence, civil liability, or exercise of prosecutorial discretion.
Prescription: do not wait
The deadline depends on the offense ultimately charged, its prescribed penalty, when the offense was discovered, who discovered it, whether the offender was unknown, and what event legally interrupted prescription.
Under Articles 90 and 91 of the Revised Penal Code, offenses punishable by correctional penalties generally prescribe in ten years, while offenses punishable by arresto mayor prescribe in five years; offenses carrying afflictive penalties generally prescribe in fifteen years. The rules for computing and interrupting prescription require legal analysis, especially when the amount crosses an Article 315 threshold or a special law applies.
Rule 110 states that institution of the criminal action interrupts prescription unless a special law provides otherwise. An informal report, demand letter, bank complaint, or social-media post should not be assumed to stop the clock. If the transaction is old—or close to five, ten, or fifteen years—consult counsel and the proper prosecutor immediately.
Civil claims have separate limitation periods that may depend on whether the action is based on a written contract, oral contract, injury to rights, fraud, or another source of obligation. Do not assume that the criminal and civil deadlines are identical.
Common mistakes to avoid
- Sending more money to unlock a refund or recover the first payment.
- Deleting messages, blocking the suspect before preserving evidence, or losing access to the original account.
- Submitting only screenshots without transaction records, full conversations, or a chronology.
- Treating every breach of contract or unpaid loan as criminal estafa.
- Naming account holders, agents, company officers, or relatives as respondents without evidence of their personal participation.
- Posting accusations, private data, or identification documents publicly. Public accusations can create separate legal and safety problems.
- Threatening violence, unlawful exposure, or arrest in exchange for payment.
- Paying an unofficial “recovery agent,” hacker, fixer, or person claiming guaranteed access to frozen funds.
- Filing in a location with no legally relevant connection to the offense.
- Assuming an agency report automatically starts prosecution or preserves every deadline.
- Signing a settlement or desistance document without checking its effect on the criminal and civil remedies.
- Expecting a criminal complaint by itself to freeze assets or guarantee reimbursement.
When legal help is urgent
Seek prompt assistance from a Philippine lawyer, the Public Attorney’s Office if you qualify, or the proper prosecutor when:
- a large amount or essential household funds are at risk;
- funds were sent very recently and may still be traceable;
- the suspect is moving, concealing, or transferring assets;
- several victims or jurisdictions are involved;
- the respondent used a corporation, investment scheme, cryptocurrency, foreign platform, or multiple accounts;
- you are unsure whether the transaction was a loan, trust, investment, sale, or agency arrangement;
- checks, forged documents, identity theft, or unauthorized account access are involved;
- a civil case, arbitration, insolvency proceeding, or criminal case is already pending;
- you received a subpoena, prosecutor’s resolution, court notice, settlement, waiver, or affidavit of desistance;
- the incident occurred years ago and prescription may be an issue; or
- there are threats, stalking, extortion, or an immediate risk of physical harm.
For an immediate safety threat or an offense in progress, contact emergency services or the nearest police station.
Frequently asked questions
Do I need to send a demand letter before filing estafa?
Not in every form of estafa. Demand is not a universal substitute for proving the statutory elements. It can, however, be important evidence in cases involving property received under an obligation to deliver or return it, and specific notice rules apply to other offenses such as B.P. Blg. 22. Obtain advice on the correct wording and method of service.
Can I file if I know only the scammer’s username or account number?
You may report the incident using the identifiers available, but investigation and prosecution require a legally identifiable respondent and evidence connecting that person to the offense. Preserve account numbers, URLs, device or platform records, recipient names, transaction references, and communications so investigators can seek appropriate records through lawful process.
Is the owner of the receiving bank account automatically guilty?
No. Receipt of funds can be important evidence, but guilt requires proof of participation and the elements of the charged offense. The account may belong to a mule, an identity-theft victim, an intermediary, or another participant. Report the account accurately without assuming facts not yet established.
Will the bank or e-wallet automatically refund a scam transfer?
No. The result depends on the facts, the provider’s investigation, whether the transaction was authorized, the applicable law and terms, and whether funds remain recoverable. Report immediately and keep the provider’s written decision. A transfer personally authorized because of deception may be treated differently from an account transaction the customer never authorized.
Can I report an online seller who did not deliver?
Yes, but non-delivery alone does not establish estafa. Preserve the listing, representations, seller identity, payment records, promised delivery terms, courier information, and later communications. Depending on the evidence, the matter may support a criminal complaint, a consumer complaint, a civil claim, or a platform dispute.
Does deleting an account or blocking me prove fraud?
Not by itself. It may be relevant circumstantial evidence when considered with false representations, payment records, other victims, fabricated documents, and the suspect’s conduct, but every element must still be proved through admissible evidence.
Can multiple victims file together?
They may coordinate evidence and report a common scheme, but each victim should ordinarily document their own representations, reliance, transfers, and loss. Whether complaints can be joined or whether a special law concerning a syndicate or large-scale scheme applies is a matter for prosecutors based on the evidence.
Can I recover attorney’s fees, interest, or moral and exemplary damages?
Possibly, but these are not automatic. The legal basis, pleading, proof, filing fees, and the court’s findings matter. Keep evidence of actual expenses and obtain advice before stating or reserving civil claims.
Where can I get free legal assistance?
Qualified indigent persons may inquire with the Public Attorney’s Office. The Integrated Bar of the Philippines and law-school legal-aid offices may also have assistance programs, subject to their current eligibility and intake rules.
Official legal sources
- Article 315 as amended by Republic Act No. 10951
- Revised Penal Code
- Rules 110–127 of the Revised Rules of Criminal Procedure
- Cybercrime Prevention Act of 2012
- Batas Pambansa Blg. 22
- Supreme Court of the Philippines
- National Bureau of Investigation
- PNP Anti-Cybercrime Group
- Cybercrime Investigation and Coordinating Center
- Bangko Sentral ng Pilipinas
- Securities and Exchange Commission
This article provides general legal information, not legal advice, and cannot determine whether a particular transaction constitutes estafa or whether money is recoverable. The result depends on the documents, evidence, dates, location, amount, parties, and law applicable to the specific facts. Official sources and procedures were checked as of September 12, 2026.