Quick answer

If you suspect fraud or estafa, act immediately: stop further payments, contact the bank or e-wallet provider, preserve the evidence in its original form, and report the incident to law enforcement. To pursue criminal charges, you will usually need a sworn complaint supported by documents showing the fraudulent act, your reliance on it, the transfer or delivery of money or property, and the resulting loss.

A report does not automatically recover your money. Recovery may be pursued as civil liability within the criminal case, through an appropriate independent or separate civil action, or through urgent measures to trace and preserve assets. The correct route depends on how the transaction occurred, what the suspect represented, who received the funds, and whether recoverable assets can still be located.

When fraud may amount to estafa

Estafa is not simply any unpaid debt, failed investment, broken promise, or bad business deal. Article 315 of the Revised Penal Code covers particular forms of fraud, including:

Obtaining money or property through a false name, fictitious business, imaginary transaction, or false claim about authority, qualifications, credit, property, or capacity;
Using another fraudulent representation made before or at the time the victim parts with money or property;
Misappropriating, converting, or denying receipt of money or personal property received in trust, on commission, for administration, or under an obligation to deliver or return it;
Taking advantage of a signature given in blank;
Inducing a person through deceit to sign a document; and
Certain fraudulent uses of checks and other means specifically identified by law.

The prosecution must prove the applicable statutory form. In a typical false-pretenses case, the evidence must establish a fraudulent representation made before or simultaneously with the transaction, reliance by the victim, and resulting damage. A lie made only after the money was obtained may not establish that form of estafa, although other offenses or civil remedies may apply.

For misappropriation or conversion, the documents must show that the accused received identifiable money or personal property under an obligation to deliver or return it—not merely that the accused borrowed money and later failed to pay. Demand can be important evidence of conversion or denial, but its legal significance depends on the particular facts and charge.

The governing text is Article 315 of the Revised Penal Code, as amended by Republic Act No. 10951. The Supreme Court’s discussion of the elements of estafa by deceit is illustrated in G.R. No. 199907.

A failed transaction is not automatically criminal fraud

The dividing line is usually fraudulent intent and the manner in which the money or property was obtained or handled.

A case may be primarily civil when the evidence shows only:

Nonpayment of an ordinary loan;
Delay in delivering goods or performing a contract;
A business that genuinely failed;
A disputed accounting;
A promise that later became impossible to perform; or
Breach of contract without proof that the accused deceived the victim from the beginning or misappropriated property held in trust.

The use of terms such as “investment,” “loan,” “deposit,” or “trust” is not conclusive. Prosecutors and courts examine the parties’ actual agreement, communications, conduct, and flow of funds. A written contract does not prevent an estafa charge if it was used to carry out fraud, but breach of that contract alone does not establish a crime.

What to do immediately

1. Stop the loss

Do not send “verification fees,” “taxes,” “unlocking charges,” or additional money supposedly required to release a refund or investment. Scammers commonly demand one final payment after the victim asks for the money back.

Change passwords and enable multi-factor authentication if an account, device, email address, or one-time password may have been compromised. Ask your mobile provider to secure your number if SIM takeover is suspected.

2. Notify the payment provider

Contact the bank, card issuer, remittance company, cryptocurrency platform, or e-wallet through its official fraud channel. Give the exact transaction references and ask whether the transfer can be recalled, frozen, or traced.

Speed matters, but reversal is not guaranteed. A transfer authorized by the account holder may be treated differently from an unauthorized transaction. Obtain a case or reference number and keep copies of every response.

If the institution does not resolve a consumer complaint, follow its formal escalation process and, where applicable, consult the Bangko Sentral ng Pilipinas consumer-assistance resources. A BSP complaint concerns the supervised institution’s handling of the matter; it does not replace a criminal complaint against the scammer.

3. Preserve evidence before accounts disappear

Save the evidence in its original form whenever possible:

Full chat and email threads, including dates, times, usernames, email headers, and profile links;
Advertisements, listings, websites, social-media pages, and promises of returns;
Contracts, proposals, invoices, receipts, acknowledgment documents, and demand letters;
Bank statements, deposit slips, transfer confirmations, QR codes, wallet addresses, and transaction IDs;
The recipient’s account name, account number, telephone number, email address, and delivery address;
Call logs, voice messages, photographs, and recordings lawfully obtained;
Corporate records, permits, identification documents, and business cards supplied by the suspect;
Names and contact details of witnesses and other victims; and
A chronological account of what happened and how each payment was induced.

Take screenshots, but also export conversations or preserve the original device and files. Avoid cropping out identifying details. Do not edit, annotate, rename, or repeatedly forward the only copy of a file. Keep backups and record where each item came from.

4. Do not alert the suspect unnecessarily

A clear written demand can help establish the response, refusal, denial, or disposition of entrusted property. It may also support settlement. However, a warning can cause a suspect to transfer assets, delete accounts, or leave the country. For a substantial loss, multiple victims, an ongoing scheme, or assets that may disappear, consult counsel or investigators before sending a demand.

Do not threaten, impersonate an officer, hack an account, seize property, or publicly accuse a person without adequate basis. Those acts may expose you to separate legal problems.

Where to report

Depending on the circumstances, you may approach:

The local Philippine National Police station or the police unit with jurisdiction over the incident;
The PNP Anti-Cybercrime Group for online or technology-enabled fraud;
The National Bureau of Investigation, particularly its cybercrime or fraud investigators; and
The Office of the City or Provincial Prosecutor for the filing of the appropriate sworn complaint.

A police or NBI report starts or supports an investigation, but it is not necessarily the same as filing a complaint for preliminary investigation. Ask for a receiving copy, reference number, and written instructions concerning any further affidavit or evidence required.

Other agencies may have concurrent regulatory roles. For example, complaints involving unauthorized investment solicitations may warrant a report to the Securities and Exchange Commission, while deceptive consumer transactions may fall within the responsibilities of the Department of Trade and Industry. Regulatory reports do not ordinarily substitute for a criminal complaint or a court action to recover money.

Preparing the criminal complaint

A complaint is a sworn written statement charging a person with an offense. It should identify the respondent as accurately as possible and narrate concrete facts rather than conclusions.

A useful complaint-affidavit generally explains:

Who made each representation;
Exactly what was represented or concealed;
When and where the representation was made;
Why it was false;
Why you relied on it;
What money or property you delivered;
Who received or controlled it;
What the recipient was required to do;
What happened afterward;
The amount of actual loss; and
How each attached document supports the account.

Arrange the annexes chronologically and label them consistently. Include proof connecting the respondent to the receiving account; a transfer receipt alone may show payment but not necessarily who controlled the account or devised the scheme.

Venue is fact-sensitive. Under Rule 110, a criminal action is generally instituted and tried where the offense was committed or where any essential ingredient occurred. An online transfer does not automatically make every location a proper venue. The place where the false representation was received, where reliance occurred, and where the money was delivered may matter.

The procedure before National Prosecution Service offices is governed by the 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings. Those rules use prima facie evidence with reasonable certainty of conviction and allow procedural mechanisms including e-filing and virtual proceedings where implemented. Confirm the current filing method, documentary requirements, and available channels directly with the particular prosecution office; local implementation and official facilities can differ.

The Supreme Court has formally recognized the DOJ’s authority to issue these rules in A.M. No. 24-02-09-SC.

Preliminary investigation and court filing

Whether a full preliminary investigation is required depends on the penalty prescribed for the offense. Under the 2024 DOJ-NPS Rules, it is required for offenses whose prescribed penalty is at least six years and one day, without regard to the fine. Lower-penalty cases follow the applicable summary, expedited, or direct-filing procedure.

This classification cannot safely be determined from the amount lost alone. The precise mode of estafa, the amount alleged, special laws, and use of information and communications technology may change the prescribed penalty and the proper procedure.

After evaluating the affidavits and evidence, the prosecutor may dismiss the complaint or file an information in court. Filing a complaint does not establish guilt, guarantee an arrest warrant, or assure recovery.

Online fraud and related offenses

If estafa or another Revised Penal Code offense is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act of 2012 may apply. The Act generally prescribes a penalty one degree higher for a qualifying crime committed by, through, or with the use of such technology.

The same conduct may also raise issues under laws covering access devices, electronic evidence, identity theft, securities, money laundering, or bouncing checks. These are not interchangeable charges. Investigators and prosecutors must match the evidence to the elements of each law.

For a dishonored check, estafa and a case under Batas Pambansa Blg. 22 have different elements and notice requirements. Do not assume that a bounced check automatically proves estafa or that an oral message alone satisfies every legal requirement.

Recovering the money or property

Civil liability in the criminal case

Under Rule 111, the civil action to recover liability arising from the offense is generally deemed instituted with the criminal action unless the offended party:

Waives it;
Reserves the right to file it separately; or
Filed the civil action before the criminal case.

Actual damages must be proved with competent evidence. A prosecutor’s finding of probable cause or a criminal conviction does not itself locate money or make an insolvent accused able to pay.

Separate or independent civil action

A separate civil claim may be available under the contract, quasi-delict, fraud provisions of the Civil Code, or another source of obligation. Article 33 of the Civil Code permits an independent civil action in cases of fraud, requiring proof by preponderance of evidence. Double recovery for the same injury is not allowed.

Timing and coordination matter. Rule 111 contains rules on reservation, suspension, consolidation, and the effect of the criminal judgment. Filing the wrong action or making an uninformed reservation can create delay and expense. Review the strategy with counsel before the prosecution begins presenting evidence.

The governing provisions appear in Rules 110 and 111 of the Revised Rules of Criminal Procedure and Articles 19–21, 31–33, and 1156–1162 of the Civil Code.

Asset-preservation measures

Where there is evidence that identifiable assets or proceeds may be transferred, a lawyer can assess whether attachment or another provisional remedy is legally available. Courts require specific statutory grounds, evidence, a bond in appropriate cases, and observance of due process. A victim cannot privately freeze an account merely by alleging fraud.

Report receiving accounts promptly to the relevant institution and investigators. Banks and e-wallet providers are subject to confidentiality and due-process rules and may be unable to disclose account information directly to a private complainant without lawful authority.

Deadlines and prescription

Do not delay. Criminal prescription depends on the precise offense and prescribed penalty, while civil claims have separate prescriptive periods based on their legal source. Under Articles 90 and 91 of the Revised Penal Code, prescription for crimes under the Code varies according to the penalty and generally begins from discovery by the offended party, authorities, or their agents, subject to the statutory rules on interruption and recommencement.

Institution of the criminal action generally interrupts prescription under Rule 110, but special laws may follow different rules. A police blotter, private demand, bank complaint, or social-media report should not be assumed to interrupt a legal prescriptive period.

Because classification can alter both procedure and prescription, obtain case-specific advice promptly—especially if the events occurred years ago.

Common mistakes that weaken a case

Describing the matter only as “scam” without identifying the actual false statement or entrusted property;
Submitting cropped screenshots without usernames, dates, URLs, or surrounding conversation;
Failing to connect the accused to the account that received the money;
Treating nonpayment alone as proof of criminal intent;
Deleting messages after saving only low-quality images;
Paying a private “recovery agent” who promises guaranteed tracing, arrest, or reimbursement;
Posting accusations that alert the suspect or create defamation and privacy risks;
Filing in a location with no connection to an essential element of the offense;
Signing an affidavit that contains guesses, exaggerations, or facts supplied by someone else;
Accepting a partial payment or settlement without documenting whether it is restitution, compromise, waiver, or acknowledgment of the balance; and
Waiting for a platform investigation before protecting legal deadlines.

When legal help is urgent

Seek a Philippine lawyer promptly if:

A large amount or your family’s essential funds are at risk;
The suspect is transferring assets, closing accounts, or preparing to leave;
There are multiple suspects, shell companies, nominees, or cross-border transfers;
Cryptocurrency, property titles, corporate shares, or investment securities are involved;
You are asked to sign a quitclaim, compromise, affidavit of desistance, or repayment agreement;
The incident is old and prescription may be an issue;
The prosecutor dismissed the complaint or an information has already been filed;
You need attachment or another provisional remedy; or
You are also being threatened, blackmailed, stalked, or deprived of account access.

If you cannot afford private counsel, inquire with the Public Attorney’s Office about eligibility and available assistance.

Frequently asked questions

Can I file estafa if the debtor simply refuses to pay?

Not necessarily. Ordinary failure to pay a debt is generally civil. Estafa requires proof of a statutory fraudulent means, such as deceit that induced the delivery of money or misappropriation of property received under a duty to return or deliver it.

Is a demand letter always required?

No single rule makes a demand letter indispensable in every form of estafa. Demand may nevertheless be important evidence, particularly in an alleged misappropriation, denial of receipt, or dishonored-check case. Its contents, service, and timing should match the legal theory.

Can screenshots prove an online scam?

They can form part of the evidence, but authenticity, completeness, identity, and connection to the transaction still must be shown. Preserve the original device, full conversation, account identifiers, links, transaction records, and corroborating evidence.

Should I report first to the police or file directly with the prosecutor?

Either may be appropriate. Police or NBI investigation is especially useful when the offender’s identity, account ownership, or digital trail must be established. A sufficiently documented complainant may also approach the proper prosecutor’s office. Confirm venue and current filing requirements before submission.

Will filing a criminal complaint freeze the receiving account?

No. A complaint alone does not automatically freeze an account. Notify the financial institution immediately and give investigators the transaction details so they can pursue lawful preservation, disclosure, seizure, or court processes when justified.

Can the case continue if the suspect offers repayment?

An offer to repay does not automatically erase criminal liability. A settlement may affect the civil claim and the complainant’s participation, but estafa is prosecuted in the name of the People of the Philippines. Obtain advice before signing a waiver, desistance, or compromise.

Can I recover attorney’s fees, interest, or moral damages?

Possibly, but these are not automatic. They require a legal basis, proper pleading, and proof. Courts distinguish actual loss from interest and other damages and will not permit duplicate recovery.

Does reporting to Facebook, an e-wallet, or a bank count as filing a legal case?

No. Platform and financial-institution reports may preserve records or limit further loss, but they do not ordinarily replace filing with law enforcement, the prosecutor, or the proper court.

Official legal references

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. The applicable offense, venue, procedure, deadlines, and recovery options depend on the evidence and documents. Official sources were checked as of September 12, 2026.