Reporting Suspected Fraud or Estafa and Seeking Recovery

Quick answer

If you suspect fraud or estafa, immediately contact the bank, e-wallet, remittance company, marketplace, or other service involved and ask it to secure the account, trace the transaction, and treat it as disputed. Preserve the evidence, report the incident to the police or National Bureau of Investigation, and prepare a sworn criminal complaint for the proper city or provincial prosecutor’s office—or the proper first-level court when the Rules allow direct filing.

Reporting does not guarantee that the money will be returned. Recovery may come from a voluntary refund, a financial institution’s fraud-resolution process, preservation of funds under the Anti-Financial Account Scamming Act, or the civil liability pursued with the criminal case. Speed matters because transferred funds can be moved quickly and legal claims have prescriptive periods.

When fraud may amount to estafa

Article 315 of the Revised Penal Code punishes estafa committed through specified forms of fraud. The label “scam” is not enough; the facts must fit the legal elements of a particular offense.

Common forms include:

  • Estafa through false pretenses or fraudulent acts. The offender makes a material false representation—such as using a fictitious identity or falsely claiming to possess authority, qualifications, property, credit, an agency relationship, a business, or an actual transaction—before or at the time the victim parts with money or property. The victim relies on the deception and suffers damage.
  • Estafa through abuse of confidence. Money or personal property is received in trust, on commission, for administration, or under another obligation requiring its delivery or return, but is later misappropriated, converted, or denied to have been received, causing prejudice.
  • Other forms specifically listed in Article 315. These include taking advantage of a signature in blank, inducing someone through deceit to sign a document, and certain fraudulent check transactions.

A broken promise, unpaid loan, failed investment, delayed delivery, or breach of contract is not automatically estafa. For estafa by false pretenses, the prosecution generally must show that the deceit existed before or simultaneously with the victim’s payment or transfer—not merely that the other party later failed to perform. For misappropriation, the terms under which the property was received are crucial: an ordinary debtor-creditor relationship may differ from an obligation to return the same money or property.

The precise offense may instead involve computer-related fraud, identity theft, falsification, unauthorized account access, bouncing checks, securities violations, consumer-law violations, or another crime. Charging decisions depend on the documents and the full sequence of events.

The controlling text is Article 315 as amended by Republic Act No. 10951. If the offense was committed through information and communications technology, Section 6 of the Cybercrime Prevention Act may apply and can raise the prescribed penalty by one degree.

Act immediately after discovering the transaction

1. Contact every financial institution involved

Use the official fraud or customer-service channel of your bank, e-wallet, card issuer, remittance company, or payment service—not a number supplied by the suspected scammer.

Ask the institution to:

  • Block compromised cards, accounts, devices, or online-banking access;
  • Mark the transfer as disputed or fraud-related;
  • Attempt a recall or trace;
  • Preserve transaction, device, login, and recipient-account records;
  • Coordinate with the receiving institution;
  • Give you a reference or ticket number and written confirmation; and
  • Explain what affidavit, identification, police report, or dispute form it requires.

Do not wait for a police report before making the first fraud notification unless the institution expressly requires it. A recall or hold is not guaranteed, especially if the recipient has already withdrawn or transferred the funds.

Republic Act No. 12010, the Anti-Financial Account Scamming Act, authorizes covered BSP-supervised institutions to temporarily hold funds involved in a disputed transaction under applicable Bangko Sentral rules. The statutory holding period may not exceed 30 calendar days unless extended by a competent court. The Act also requires coordinated verification of disputed transactions and allows restitution in specified cases involving an institution’s failure to employ adequate safeguards or exercise the required diligence. These provisions do not mean that every scam loss must automatically be reimbursed.

If the institution does not resolve the complaint, follow its internal escalation process and then use the Bangko Sentral ng Pilipinas consumer-assistance channels when the provider is BSP-supervised.

2. Secure your accounts

Change passwords using a clean device, beginning with the email account linked to financial services. Enable multi-factor authentication, sign out unknown sessions, remove unfamiliar devices, and contact your mobile provider if a SIM swap is suspected.

Never give an OTP, PIN, password, recovery code, or remote-access permission to someone claiming that these are needed to “reverse” the fraud.

3. Preserve evidence before accounts or messages disappear

Keep original electronic files wherever possible. Preserve:

  • Complete chat, email, SMS, and social-media conversations;
  • Usernames, profile links, phone numbers, email addresses, and website URLs;
  • Advertisements, listings, livestreams, proposals, and promised returns;
  • Deposit slips, receipts, invoices, contracts, acknowledgment receipts, and checks;
  • Bank or e-wallet statements and transaction confirmations;
  • Recipient account names, numbers, QR codes, reference numbers, dates, times, and amounts;
  • Recordings lawfully made or received;
  • Delivery records, IDs, permits, business-registration claims, and authorization letters;
  • Demand letters, replies, refund promises, and admissions;
  • Names and contact details of witnesses or other victims; and
  • Your reports to platforms, institutions, and government agencies.

Take screenshots, but also export chats or download original files when the service permits. Retain the device on which the communications were received. Do not edit, crop, annotate, or overwrite the only copy. Record a simple chronology explaining what was represented, why you believed it, what you transferred, and what happened afterward.

Where to report

Police or NBI

For an online scam, account takeover, phishing incident, fake investment solicitation, or identity misuse, report promptly to the nearest police station, the PNP Anti-Cybercrime Group, or the National Bureau of Investigation. Bring identification and organized copies of the evidence.

A police or NBI report can start an investigation and help identify account holders, devices, or communications. It is not necessarily the same as filing the sworn complaint required for prosecution.

Call emergency services or go to the nearest police station immediately if there are threats, coercion, stalking, an ongoing unauthorized withdrawal, or danger to a person.

Prosecutor’s office or proper court

Under Rules 110 and 112 of the Revised Rules of Criminal Procedure:

  • An offense requiring preliminary investigation is initiated by filing the complaint with the proper investigating officer.
  • Other offenses may generally be initiated through the prosecutor’s office or, where the Rules permit, directly before the proper Municipal Trial Court or Municipal Circuit Trial Court.
  • In Manila and other chartered cities, complaints are generally filed with the prosecutor unless the city charter provides otherwise.

A preliminary-investigation complaint ordinarily includes:

  • A sworn complaint-affidavit containing facts based on personal knowledge;
  • Affidavits of supporting witnesses;
  • Copies of relevant documents and electronic evidence;
  • The respondent’s available name and address;
  • Proof of the loss and payment trail; and
  • The required number of copies and local intake forms.

Check the current filing checklist of the particular prosecutor’s office before filing. Requirements for notarization, electronic submission, physical copies, data storage, and identification can differ.

The complaint should be filed in the proper territorial venue—generally where the offense, or an essential ingredient of it, occurred. Online transactions involving parties, representations, and transfers in different places can create difficult venue questions. Do not assume that the victim’s present address is automatically the proper venue.

Other agencies

A criminal complaint may be accompanied by a regulatory report when appropriate:

  • Report deceptive consumer transactions to the Department of Trade and Industry.
  • Report suspected illegal investment solicitation, unregistered securities, or misuse of a company’s identity to the Securities and Exchange Commission.
  • Escalate unresolved complaints against BSP-supervised banks, e-money issuers, and other covered financial service providers to the Bangko Sentral ng Pilipinas.
  • Report impersonation, fake pages, and fraudulent listings through the platform’s official reporting mechanism, while first preserving the content and URLs.

A platform takedown or regulatory complaint does not by itself commence the criminal action.

Barangay conciliation may apply in limited cases

The Katarungang Pambarangay process can be a precondition to court or prosecutorial action when the parties are natural persons who actually reside in the same city or municipality and the dispute falls within the lupon’s authority.

Important exceptions apply, including offenses punishable by imprisonment exceeding one year or a fine exceeding ₱5,000, disputes involving parties who do not reside in the same city or municipality subject to limited adjoining-barangay rules, urgent cases requiring immediate legal action, and other exclusions under Sections 408 and 412 of the Local Government Code.

Because the applicable penalty and cybercrime implications affect this question, ask the prosecutor’s intake office or a lawyer whether a Certificate to File Action is required. Do not assume that every estafa complaint must first pass through the barangay.

Penalties and amount thresholds

For the principal forms of estafa under Article 315, as amended by Republic Act No. 10951, the base imprisonment range depends on the amount of fraud:

  • ₱40,000 or less: arresto mayor in its medium to maximum periods;
  • More than ₱40,000 up to ₱1.2 million: arresto mayor in its maximum period to prisión correccional in its minimum period;
  • More than ₱1.2 million up to ₱2.4 million: prisión correccional in its minimum to medium periods;
  • More than ₱2.4 million up to ₱4.4 million: prisión correccional in its maximum period to prisión mayor in its minimum period; and
  • Above ₱4.4 million: the statute provides an incremental rule, subject to its 20-year ceiling.

Article 315 prescribes different, higher brackets for the particular check-based form described in paragraph 2(d). Cybercrime, syndicated fraud, financial-account scamming, securities violations, falsification, and other accompanying offenses can also alter the charges and penalties. The law in force when the act occurred, constitutional rules on retroactivity, and the proven amount all matter.

How recovery can be pursued

Civil liability in the criminal case

Under Rule 111, the civil action to recover liability arising from the offense is generally deemed instituted with the criminal action unless the victim:

  • Waives it;
  • Properly reserves the right to file it separately; or
  • Filed the civil action before the criminal action.

A reservation must be made before the prosecution begins presenting evidence and while the victim has a reasonable opportunity to reserve. Once the criminal case has begun, a separate civil action arising from the same offense generally cannot be newly instituted until final judgment, subject to the Rules on independent civil actions and consolidation.

The victim should provide proof of:

  • The amount transferred or property delivered;
  • Any amount already returned;
  • Direct expenses and other claimed damages;
  • Ownership of the money or property; and
  • The connection between the accused’s conduct and the loss.

An order to pay does not itself ensure collection. Actual recovery may still require locating non-exempt assets and enforcing a judgment.

Separate civil remedies

Depending on the facts, a victim may have claims based on contract, fraud, quasi-delict, unjust enrichment, rescission, or another source of obligation. These claims can have different defendants, proof requirements, limitation periods, and procedural consequences.

Small claims are not a universal substitute for an estafa complaint. The simplified small-claims procedure covers specified demands for payment within the governing monetary limit; whether a particular fraud-related demand qualifies depends on the source and character of the obligation.

A lawyer should evaluate whether a separate civil case, provisional attachment, or preservation order is available and strategically appropriate. Courts—not victims, banks, or investigators acting alone—determine whether the legal requirements for such remedies are met.

Settlement or repayment

You may send a factual written demand for repayment, but avoid threats, public shaming, doxxing, or demands unrelated to the actual claim.

Full or partial repayment can affect the civil claim and may be relevant evidence, but private settlement or an affidavit of desistance does not automatically extinguish criminal liability. The State prosecutes crimes, and the prosecutor or court is not necessarily bound by the complainant’s later desire to withdraw.

Any settlement should identify the amount, deadlines, payment method, effect of default, treatment of the criminal and civil claims, and whether releases become effective only after cleared payment. Obtain legal advice before signing a quitclaim, waiver, compromise, or confidentiality clause.

Common mistakes to avoid

  • Waiting for the scammer’s promised refund before notifying the financial institution;
  • Deleting chats, blocking the account before preserving it, or losing the original device;
  • Submitting only screenshots without transaction records or a coherent chronology;
  • Treating every unpaid obligation as criminal estafa;
  • Filing in a convenient but legally improper venue;
  • Naming people solely because their name appears on a receiving account, without explaining their alleged participation;
  • Exaggerating facts or submitting altered evidence;
  • Posting accusations publicly while identity and responsibility remain unverified;
  • Paying a “recovery agent,” “hacker,” or supposed government contact who demands another transfer;
  • Signing an unconditional waiver before funds have cleared; or
  • Assuming that a police blotter, barangay record, bank dispute, or platform report automatically files the criminal case.

When legal help is urgent

Consult a Philippine lawyer promptly when:

  • The amount is substantial or funds are still traceable;
  • Several banks, e-wallets, intermediaries, or jurisdictions are involved;
  • The respondent used a corporation, investment scheme, forged document, or another person’s identity;
  • You need a freezing, preservation, attachment, or other urgent court remedy;
  • A prosecutor dismissed the complaint or a deadline to seek review may be running;
  • The prosecutor or court requires clarification about venue or barangay conciliation;
  • You are asked to sign a settlement, quitclaim, or affidavit of desistance;
  • The respondent has threatened retaliation or filed a counter-complaint; or
  • You are unsure whether the facts show criminal fraud or only a civil dispute.

Those who cannot afford private counsel may inquire with the Public Attorney’s Office, subject to its eligibility and case-merit requirements, or seek help from an Integrated Bar of the Philippines legal-aid office.

Frequently asked questions

Can I file even if I know only the scammer’s screen name?

You may report the incident and provide every available identifier, but prosecution ultimately requires adequate identification of the person allegedly responsible. Preserve the profile URL, account details, phone numbers, email headers, transaction records, and communications that investigators can use to establish identity.

Is a demand letter required before filing estafa?

Not in every form of estafa. A demand can help show non-return, conversion, notice, or an opportunity to explain, but it cannot create criminal intent that did not exist. Check-specific offenses may have separate notice requirements.

Does a bank transfer receipt prove estafa?

It proves a transfer, not necessarily deceit, criminal intent, identity, or participation. It should be connected to the representation that induced the payment and to evidence showing what happened afterward.

Can I recover from the owner of the receiving account?

Possibly, but account ownership alone does not conclusively establish criminal responsibility or civil liability. The account may have been compromised, rented, sold, or used as a money-mule account. Investigation must establish the holder’s conduct, knowledge, participation, and the legal basis for recovery.

Will filing a criminal complaint freeze the account?

No. Filing alone does not automatically freeze every related account. Immediately notify the institution and law-enforcement authorities. A temporary hold under the Anti-Financial Account Scamming Act, a court order, or another lawful process depends on the applicable requirements and whether funds remain available.

How long do I have to file?

There is no single deadline for every fraud case. Criminal prescription depends on the offense, prescribed penalty, applicable special law, date of discovery or commission under the governing rule, and acts that interrupt prescription. Civil claims have their own periods. File promptly and obtain advice rather than calculating the deadline from the amount alone.

Can several victims file together?

Victims may coordinate evidence and identify a common scheme, but each transaction and each victim’s reliance and loss must still be proved. The prosecutor determines how the complaints and charges should be handled.

What if the suspect is abroad?

Report locally and preserve all foreign contact, platform, payment, and remittance information. Cross-border identification, evidence requests, service, extradition, and recovery are more complex and require early professional assistance.


This article provides general Philippine legal information, not advice for a particular case and not a guarantee of prosecution or recovery. Procedures and remedies depend on the evidence, location, amount, transaction structure, and law applicable when the acts occurred. Official sources were checked as of 18 September 2026.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.