Quick answer

If you suspect fraud or estafa, act immediately: stop further payments, contact the bank or e-wallet involved, secure the account, preserve the evidence, and report the incident to law enforcement. If funds were transferred electronically, speed matters because the receiving institution may still be able to hold disputed funds, subject to law and Bangko Sentral ng Pilipinas (BSP) rules.

A criminal complaint may be filed with the proper city or provincial prosecutor’s office, often after or together with reporting to the Philippine National Police (PNP) or National Bureau of Investigation (NBI). For an online scheme, report it to a cybercrime unit. Recovery may be pursued as civil liability in the criminal case or, when legally appropriate, through a separate civil action.

Not every unpaid debt, failed investment, broken promise, or bad business deal is estafa. The available remedy depends on what the other person represented, when the deception occurred, how the money or property was received, what documents exist, and whether the loss resulted from fraud rather than ordinary nonperformance.

What counts as estafa?

Article 315 of the Revised Penal Code punishes several forms of swindling. Common forms include:

Obtaining money or property through a fictitious name, false qualifications, an imaginary business or transaction, pretended authority or credit, or similar deceit;
Misappropriating or converting money, goods, or other personal property received in trust, on commission, for administration, or under an obligation to deliver or return it;
Denying receipt of property held under such an obligation;
Altering the substance, quantity, or quality of something that must be delivered;
Taking advantage of another person’s blank signature;
Fraudulently inducing someone to sign a document; and
In the circumstances covered by Article 315, issuing or postdating a check without sufficient funds.

The relevant text, including the value thresholds and penalties adjusted by Republic Act No. 10951, appears in Republic Act No. 10951.

Estafa through false pretenses

A typical false-pretenses case requires proof that:

The accused made a false representation or committed a fraudulent act before or at the same time the victim parted with money or property;
The accused knew the representation was false;
The victim relied on it; and
The reliance caused financial or property damage.

Timing matters. A promise that was apparently sincere when made, followed only by later inability or refusal to perform, may support a civil claim but does not automatically establish criminal deceit. Evidence that the transaction was fictitious from the beginning, that material facts were deliberately concealed, or that the offender used fabricated credentials or documents can be important.

Estafa through misappropriation or conversion

This form generally involves money or personal property received under an obligation to deliver it to another person or return the same property, followed by misappropriation, conversion, or denial of receipt, causing prejudice.

The distinction between receiving property in trust and receiving it as an ordinary loan can be decisive. Ownership of money loaned ordinarily passes to the borrower, who must return an equivalent amount—not the identical money. Mere failure to repay a loan therefore does not, by itself, establish estafa. The agreement, receipts, accounting records, messages, and actual handling of the property must be examined.

A prior demand is often valuable evidence because it may show the recipient’s failure to account for or return entrusted property. Demand is not a substitute for proving every legal element, however, and its necessity or effect depends on the particular charge and evidence.

Other laws may apply to digital and financial-account scams

An online incident is not automatically “cybercrime,” but several laws may apply alongside or instead of Article 315.

Under the Cybercrime Prevention Act of 2012:

Unauthorized manipulation of computer data or interference with a computer system that causes damage with fraudulent intent may constitute computer-related fraud;
Unauthorized use or misuse of another person’s identifying information may constitute computer-related identity theft; and
A Revised Penal Code offense committed through information and communications technology may fall under Section 6, which generally prescribes a penalty one degree higher.

The precise charge depends on how technology was used. A scammer merely communicating through a messaging application presents different issues from someone who accessed an account without authority or altered computer data.

The Anti-Financial Account Scamming Act, Republic Act No. 12010, separately addresses activities such as:

Lending, selling, renting, buying, or allowing the use of financial accounts for known criminal proceeds or social-engineering schemes;
Recruiting money mules;
Obtaining sensitive financial-account information through deception; and
Certain acts of aiding, attempting, or facilitating financial-account scamming.

The Act authorizes covered BSP-supervised institutions to hold funds involved in a disputed transaction for the period prescribed by BSP rules, not exceeding 30 calendar days unless extended by a competent court. It also requires coordinated verification among the institutions and account owners involved. A hold is not automatic proof that a crime occurred and does not guarantee that funds will be returned.

What to do immediately

1. Stop contact and additional payments

Do not send a “release fee,” “tax,” “verification payment,” or “recovery charge.” Do not follow links supplied by the suspected scammer. If contact must be preserved for an investigation, avoid threats, impersonation, unauthorized account access, or attempts to trap the person unlawfully.

2. Call the bank, e-wallet, card issuer, or payment provider

Use the institution’s official application, website, hotline, or branch—not contact details supplied in the suspicious message.

State clearly that the transaction is disputed and suspected to be fraudulent. Ask the institution to:

Secure or restrict the compromised account;
Block cards or credentials when necessary;
Attempt a transfer recall or fund hold;
Coordinate with the receiving institution;
Preserve transaction, login, device, and recipient-account records;
Give you a complaint or reference number; and
Explain its written dispute and restitution process.

Provide the transaction reference, exact amount, date and time, recipient name and account number, and a concise explanation. Follow up in writing and retain proof of submission.

If the institution’s response is unresolved, use the BSP’s official Consumer Assistance Mechanism. BSP escalation does not replace a police, NBI, or prosecutor complaint.

3. Secure affected accounts

Change passwords using a trusted device, starting with the email account connected to banking and social-media services. Enable multi-factor authentication, sign out unknown sessions, revoke suspicious application access, and contact the mobile provider if a SIM swap is suspected.

Never give an investigator, bank employee, or “recovery agent” your password, PIN, one-time password, recovery phrase, or full card security code.

4. Preserve evidence before blocking or deleting anything

Save the evidence in its original form where possible:

Full chat and email threads, including dates, times, usernames, phone numbers, headers, and profile links;
Screenshots and screen recordings showing the account or page in context;
Original electronic files, not only printed copies;
Bank statements, transfer confirmations, QR codes, receipts, payment references, and destination-account details;
Advertisements, product listings, proposals, contracts, invoices, identification documents, permits, and certificates supplied by the other party;
Website addresses, domain names, social-media pages, wallet addresses, and transaction hashes;
Call logs and recordings lawfully obtained;
Names and contact information of witnesses and other victims;
Demand letters and proof of delivery; and
Reports made to platforms, banks, or government offices and every reference number received.

Do not crop away identifying details. Keep a backup and retain the original device. Prepare a chronological table showing each representation, payment, follow-up, discovery of the suspected fraud, and resulting loss. Identify which facts you personally witnessed and which came from someone else.

Do not publish another person’s identification documents, account details, home address, or private communications on social media. Public accusations can create privacy, defamation, safety, and evidentiary problems.

Where to report

Local police or the PNP Anti-Cybercrime Group

A local police station can record the incident and refer it to the appropriate investigative unit. For internet-enabled fraud, contact the PNP Anti-Cybercrime Group.

Bring a government-issued ID, a written chronology, copies of the evidence, transaction details, and the known identifying information of the suspect. Ask for the complaint or blotter reference and the investigator’s official contact details.

A police blotter documents that a report was made. It is not, by itself, a criminal charge, a finding of probable cause, or an order compelling repayment.

National Bureau of Investigation

The NBI may investigate fraud, cybercrime, organized schemes, falsified documents, or cases crossing local jurisdictions. Confirm the current submission requirements and office with the NBI before travelling.

Cybercrime Investigation and Coordinating Center

Online scam incidents may also be reported through the Cybercrime Investigation and Coordinating Center. Preserve any acknowledgment or ticket number and disclose prior reports so agencies can coordinate rather than duplicate work.

Securities and Exchange Commission

Report an unregistered investment solicitation, fake investment platform, Ponzi-type operation, or misuse of a company’s identity to the Securities and Exchange Commission. Check the entity’s registration and secondary licences through official SEC resources.

Company registration alone does not authorize an entity to solicit investments from the public. An SEC report can support regulatory action, but it does not automatically recover an investor’s money or replace a criminal complaint.

Other regulators

Depending on the transaction, the relevant regulator may include:

The BSP for BSP-supervised banks, e-wallets, payment providers, and other financial institutions;
The Insurance Commission for regulated insurance or pre-need activity;
The Department of Trade and Industry for consumer transactions within its authority; or
Another licensing agency responsible for the product or profession involved.

An administrative complaint and a criminal case serve different purposes. One does not necessarily substitute for the other.

Filing a criminal complaint

The proper filing route depends on the possible offense and its prescribed penalty.

Under Rules 110 and 112 of the Revised Rules of Criminal Procedure, a criminal complaint is a sworn written statement charging a person with an offense. Where preliminary investigation is required, the complaint is filed with the proper prosecutor for that investigation. The complaint should be supported by the complainant’s and witnesses’ affidavits and relevant documents.

A practical complaint package commonly includes:

A complaint-affidavit identifying the complainant and each known respondent;
A chronological, first-hand account of what happened;
The specific representations or entrustment relied upon;
An explanation of why the representations were false or how the property was converted;
Proof that the complainant relied on the conduct;
Proof of each payment or delivery;
The amount and nature of the loss;
Witness affidavits;
Clearly marked attachments; and
The respondent’s known addresses and identifying details.

The affidavit should state facts, not merely label the transaction a “scam.” Explain who said what, through which medium, on what date, why it was false, what action followed, and how the loss was calculated.

Venue

As a general rule, a criminal case must be instituted and tried where the offense was committed or where any essential ingredient occurred. For estafa, relevant locations may include where the false representation was made or received, where reliance occurred, where money or property was delivered, or where conversion took place. Online transactions and parties in different cities require careful venue analysis.

Filing in the most convenient office is not always valid. Ask the investigator or prosecutor to confirm territorial jurisdiction before finalizing the complaint.

Barangay conciliation

Katarungang Pambarangay proceedings may be a required condition before filing certain disputes when the parties actually reside in the same city or municipality and the case falls within the Lupon’s authority. Statutory exceptions include some disputes involving the government or public officers, parties residing in different cities or municipalities, offenses beyond the Lupon’s authority, and matters requiring urgent legal action.

Whether barangay conciliation applies depends on the parties, addresses, possible charge, penalty, and circumstances. Do not assume that a barangay settlement process is always required—or that a barangay official can finally determine criminal liability.

What happens during preliminary investigation?

Preliminary investigation determines whether there is sufficient ground to believe that a crime was committed and that the respondent should be held for trial. It is not the criminal trial itself.

The prosecutor may dismiss a complaint that lacks the required factual or documentary support. If an information is filed in court, the judge independently determines whether judicial probable cause exists for a warrant or other appropriate process. Filing a complaint does not mean the respondent will automatically be arrested.

Procedural periods can be short. Keep the address supplied to the prosecutor current, monitor official notices, and obtain advice promptly if a resolution is received.

Seeking repayment or compensation

Civil liability in the criminal case

As a general rule, the civil action to recover civil liability arising from the charged offense is deemed instituted with the criminal action unless the offended party:

Waives it;
Reserves the right to file it separately; or
Filed the civil action before the criminal case.

A reservation must be made before the prosecution begins presenting evidence and while the offended party has a reasonable opportunity to reserve. Separate actions can also raise suspension, consolidation, prescription, filing-fee, and double-recovery issues.

Before signing a complaint or standard form, decide with counsel whether the civil claim should remain attached to the criminal case. Do not casually waive or reserve it without understanding the consequences.

A separate civil action

Depending on the documents and facts, recovery may also be sought through an action based on contract, rescission, unjust enrichment, tort, or another recognized source of obligation. A civil claim generally requires proof by preponderance of evidence, while criminal conviction requires proof beyond reasonable doubt.

Dismissal or acquittal in a criminal case does not always dispose of every possible civil claim. The result depends on the ground for the criminal ruling, the source of the civil obligation, prior reservations, and applicable procedural rules.

Provisional remedies and preservation of assets

If there is credible evidence that the defendant is concealing, transferring, or disposing of assets to defeat creditors, a lawyer can assess whether attachment, injunction, or another court remedy is legally available. These remedies require specific legal grounds, sworn proof, and often a bond. They are not automatic merely because a fraud complaint has been filed.

Do not seize property, access accounts, or pressure third parties on your own. A victim’s claim does not authorize self-help measures that violate the law.

A judgment still has to be enforced

Even a favorable judgment does not guarantee actual collection. Recovery may depend on whether funds were preserved, whether traceable assets exist, whether property belongs to the defendant, and whether other claimants have priority.

Be cautious of anyone promising guaranteed recovery, immediate account freezing, insider access, or repayment in exchange for another advance fee. Verify lawyers through the Supreme Court’s official lawyer resources and verify public officers through their agency.

Deadlines and why delay is risky

Criminal and civil claims are subject to prescription. The applicable period may depend on:

The specific offense;
The penalty prescribed by law;
The amount involved;
Whether a special law applies;
When the offense was committed or discovered;
Whether the offender was unknown;
When and where the complaint was filed; and
Events that interrupted or suspended prescription.

Different rules may govern Revised Penal Code offenses, special-law offenses, and civil actions. Do not rely on a generic online statement that an estafa case always prescribes after one fixed number of years.

Delay also creates practical harm: electronic data may be deleted, service-provider retention periods may expire, witnesses may become unavailable, accounts may be emptied, and addresses may change. Obtain case-specific advice promptly even if negotiations are ongoing. A promise to repay does not necessarily preserve every legal remedy.

Common mistakes to avoid

Treating every unpaid debt or failed investment as criminal estafa;
Sending more money after being promised release of the original funds;
Reporting only to the social-media platform and not to the bank or authorities;
Waiting for the scammer’s deadline before contacting the financial institution;
Deleting chats, resetting the device, or discarding receipts before preserving evidence;
Submitting cropped screenshots without dates, account identifiers, or surrounding context;
Altering files, fabricating a conversation, or exaggerating the amount lost;
Filing in the wrong city without analyzing where an essential element occurred;
Naming people merely because their bank accounts received money, without evidence of their knowledge or participation;
Posting accusations, identification documents, or private account details publicly;
Paying unverified “hackers,” “asset tracers,” or recovery agents;
Assuming that a blotter entry, regulator complaint, or demand letter is already a criminal case;
Signing a settlement, quitclaim, waiver, or affidavit of desistance without understanding its effect; and
Waiting for voluntary repayment until evidence or legal deadlines are lost.

When legal help is urgent

Consult a Philippine lawyer promptly when:

A large amount, family home, business capital, retirement funds, or several victims are involved;
The funds are still moving through identifiable accounts;
The suspect is transferring or concealing assets;
The transaction involves cryptocurrency, foreign platforms, or parties outside the Philippines;
You must choose whether to attach, reserve, or separately file the civil claim;
A corporation, partnership, agent, employee, or multiple account holders are involved;
You received a prosecutor’s resolution, subpoena, counter-affidavit, settlement proposal, or court notice;
Prescription may be approaching;
The suspected offender is threatening, blackmailing, or doxxing you;
Your identity, SIM, email, or financial account was taken over; or
You are being asked to withdraw the complaint in exchange for postdated or conditional payments.

For immediate threats to life or safety, contact the police or emergency services rather than confronting the suspect.

Frequently asked questions

Can I file estafa if someone simply refuses to pay a debt?

Not necessarily. Nonpayment ordinarily creates civil liability. Estafa requires proof of the particular deceit, abuse of confidence, conversion, or other fraudulent means defined by law. False representations made before obtaining the money may change the analysis.

Do I need to send a demand letter first?

A written demand is useful and may be important in some misappropriation or check-related cases, but it is not a universal cure for missing elements. Do not delay an urgent bank report or allow prescription to run merely to wait for a response.

Can I report even if I know only a username, phone number, or receiving account?

Yes. Provide all available identifiers and explain what remains unknown. Investigators may seek subscriber, transaction, or account records through lawful processes. Do not illegally access an account to identify the user yourself.

Will the bank automatically refund an unauthorized or scam-induced transfer?

No. Report immediately and invoke the institution’s dispute process. Liability and restitution depend on the facts, account security, authorization, the institution’s controls and diligence, AFASA and BSP rules, and whether funds can still be located. A fraud report is not a guaranteed refund.

Is an online seller’s failure to deliver automatically estafa?

No. It may be fraud if the seller used deceit from the beginning—for example, a fictitious identity or nonexistent goods—but delayed delivery, poor performance, or a genuine contractual dispute does not automatically establish criminal intent.

Can I pursue both a criminal case and recovery?

Often yes, but the procedural relationship matters. Civil liability arising from the offense is generally included in the criminal case unless waived, reserved, or previously filed. Independent or contract-based claims may follow different rules. Double recovery for the same injury is not allowed.

What if the suspect offers repayment?

Document the offer and obtain advice before withdrawing, waiving, or compromising anything. Specify amounts, deadlines, payment method, default consequences, and the treatment of the criminal and civil claims. A private settlement does not automatically compel prosecutors or courts to terminate every criminal case.

Can an affidavit of desistance end the case?

Not automatically. Crimes are prosecuted in the name of the People of the Philippines. A desistance may affect the evidence or the complainant’s participation, but the prosecutor or court determines its legal effect.

Should I hire someone who promises to hack the scammer or recover cryptocurrency?

No. Unauthorized access can itself be criminal, may destroy evidence, and can expose you to another scam. Use regulated institutions, lawful investigators, and verifiable lawyers.

Official legal and reporting resources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Philippine law and agency procedures can change, and the correct remedy depends on the evidence, documents, location, parties, and specific offense. Sources and procedures were checked as of September 19, 2026.