Quick answer

If you suspect fraud or estafa, act immediately: stop further payments, contact the bank or e-wallet through its official fraud channel, secure all records, and report the incident to law enforcement. For online transactions, also ask the financial institution to trace, hold, or recall the transfer if still possible.

To pursue criminal charges, you will ordinarily submit a sworn complaint and supporting evidence to the prosecutor’s office with authority over the place where the offense—or an essential part of it—occurred. Police or cybercrime investigators can help identify suspects and preserve digital evidence, but a police report alone does not necessarily begin the prosecutor’s case.

Recovery is not automatic. You may claim the money or property as civil liability in the criminal case, file an appropriate separate civil action, use a contractual remedy, or pursue more than one lawful channel without obtaining double recovery. The correct route depends on how the money was obtained, what was promised, where the relevant acts occurred, and whether the recipient can still be identified or located.

What counts as estafa?

Estafa is not a general label for every unpaid debt, failed investment, undelivered purchase, or broken promise. Article 315 of the Revised Penal Code punishes specified forms of fraud, principally involving abuse of confidence, false pretenses or fraudulent acts, and certain other fraudulent means. The current monetary brackets were introduced by Republic Act No. 10951.

Common forms include:

Receiving money, goods, or property under an obligation to deliver or return them, then misappropriating or converting them to another use, to another person’s prejudice.
Obtaining money or property through a false name, false qualifications, fictitious business, imaginary transaction, fabricated authority, or another material false pretense.
Issuing a postdated or payment check as part of the fraud under circumstances covered by Article 315.
Inducing a person through deceit to sign a document.

The prosecution must prove the particular statutory form charged. Broad accusations that someone “lied,” “scammed me,” or “did not pay” are not enough by themselves.

Fraud by false pretenses

A typical false-pretenses case requires proof that:

the accused made a false representation or fraudulent act;
the deceit occurred before or at the time the victim parted with money or property;
the victim relied on it; and
the victim suffered damage.

A lie invented only after receiving the money usually does not establish this form of estafa, although another form of estafa or another offense may apply.

Misappropriation or conversion

This form generally requires proof that:

money, goods, or personal property was received in trust, on commission, for administration, or under another obligation involving a duty to deliver or return it;
the recipient misappropriated, converted, or denied receiving it;
the act prejudiced another person; and
where relevant, a demand was made.

The legal nature of possession matters. The Supreme Court has stressed that an employee who physically holds an employer’s money may have only material possession, while juridical possession remains with the employer. In that situation, the facts may point to theft rather than estafa. See the Supreme Court’s explanation in its 2024 guidance on estafa by misappropriation.

Demand can be strong evidence of conversion or failure to account, but it is not a substitute for proving every element of the offense.

A failed deal is not necessarily a crime

A person is not guilty of estafa merely because a business failed, an investment lost money, goods were delivered late, or a borrower could not repay. Criminal liability generally requires the deceit or dishonest conversion specified by law.

Indicators that may support a fraud complaint include:

material statements that were demonstrably false when made;
fabricated permits, receipts, identities, titles, account statements, or proof of inventory;
receiving the same property or investment from several victims on incompatible promises;
immediately diverting entrusted funds contrary to their stated purpose;
pretending to own, represent, or control something the person did not;
blocking all communication, destroying records, or using disposable accounts after receiving payment; and
admissions showing that the person never intended to perform.

These circumstances are evidence, not automatic proof. Conversely, a written contract does not prevent criminal prosecution if the agreement was used to carry out fraud.

What to do immediately

1. Stop the loss

Do not send an additional “release fee,” “tax,” “verification payment,” or “recovery charge.” Do not share another one-time password, PIN, password, seed phrase, or remote-access code.

Contact the bank, card issuer, remittance company, cryptocurrency exchange, or e-wallet through the number or channel shown in its official app or website. Ask it to:

secure or freeze your account;
block compromised cards or credentials;
mark the transaction as disputed or fraudulent;
attempt a transfer recall or recipient-account hold;
preserve transaction, device, login, and know-your-customer records; and
give you a case or reference number.

A hold or reversal is not guaranteed. Speed matters because funds can be withdrawn, transferred through several accounts, or converted into other assets.

2. Secure your accounts and devices

Change affected passwords using a trusted device. Enable multifactor authentication, sign out other sessions, remove unknown devices, and contact your mobile provider if your SIM may have been taken over.

Do not factory-reset or discard a device containing relevant messages or transaction records until the evidence has been preserved.

3. Preserve the evidence

Keep the original electronic records whenever possible, not only cropped screenshots. Preserve:

complete chat and email threads, including dates, times, usernames, profile links, and message headers;
advertisements, listings, websites, domain names, and social-media pages;
contracts, proposals, invoices, purchase orders, receipts, and delivery records;
bank statements, deposit slips, transaction IDs, QR codes, wallet addresses, and account names;
checks and bank return notices;
recordings or photographs lawfully obtained;
the suspect’s phone numbers, email addresses, government-ID details provided to you, and known physical addresses;
names and contact details of witnesses;
demand letters and proof of delivery or receipt;
reports made to platforms or financial institutions; and
a chronological account of what was represented, when you relied on it, what you transferred, and what happened afterward.

Export records before an account or post disappears. Retain the unedited files and make backups. Record how each file was obtained. Do not alter timestamps or impersonate another person to obtain more evidence.

4. Send a careful written demand when appropriate

A demand may help establish failure to return or account for entrusted property and may encourage repayment. State the transaction, amount or property involved, contractual or legal basis, requested action, reasonable deadline, and payment or return instructions.

Use a delivery method that produces proof of receipt or attempted delivery. Avoid threats, public shaming, or demands unrelated to the lawful claim. A demand is not always required and should not delay urgent reporting, account preservation, or an application for provisional relief.

Where to report

Depending on the facts, you may approach:

the nearest Philippine National Police station;
the PNP Anti-Cybercrime Group for internet- or technology-facilitated incidents;
the National Bureau of Investigation, particularly for complex, organized, or cyber-enabled fraud;
the appropriate Office of the City or Provincial Prosecutor;
your bank, e-wallet, remittance provider, exchange, or payment platform;
the relevant regulator, such as the Bangko Sentral ng Pilipinas for concerns involving BSP-supervised financial institutions; or
the relevant marketplace, social network, telecommunications provider, or other platform.

Use only contact details published by the agency or provider itself. A report to a platform, bank, or regulator can help preserve funds and records, but it does not necessarily replace a criminal complaint.

If the transaction involved identity theft, account intrusion, computer data, phishing, or another online method, the Cybercrime Prevention Act of 2012 may also be relevant. When a Revised Penal Code offense is committed through information and communications technology, the Act provides for a penalty one degree higher, subject to the charge proved and applicable Supreme Court rulings.

Preparing the criminal complaint

A useful complaint-affidavit should present facts in chronological order and identify the precise representations, transfers, obligations, and loss. It should explain:

who made each representation;
the exact substance of the representation;
why it was false;
when and where it was made and received;
why you relied on it;
when, where, and how money or property was transferred;
who received or controlled the account;
what obligation arose after receipt;
what the respondent did with the property;
the amount of actual loss; and
which documents or witnesses support each important fact.

Attach legible, organized copies and label them consistently. Bring originals when required for comparison, but keep your own complete set. If several victims are involved, each should generally provide a personal account of what happened rather than relying only on a group narrative.

The prosecutor evaluates whether the evidence establishes probable cause. The respondent is ordinarily given an opportunity to answer. The prosecutor may dismiss the complaint or file the appropriate information in court. An investigation or filing is not a finding of guilt; guilt must be proved beyond reasonable doubt at trial.

Venue and jurisdiction matter

A criminal action must be filed in a place where the offense or an essential ingredient occurred. In an estafa case, relevant locations may include where a false representation was made or received, where the victim relied on it, where money or property was delivered, or where conversion and resulting prejudice occurred. Online transfers and parties in different cities can make venue difficult.

The court that will hear the case also depends on the offense charged and the penalty prescribed by law, which may turn on the amount and mode of fraud. Do not select a venue merely because it is convenient. Filing in the wrong place can waste time and create prescription problems.

How recovery works

Civil liability in the criminal case

Under Rule 111 of the Rules of Criminal Procedure, the civil action to recover civil liability arising from the offense is generally deemed instituted with the criminal action unless the offended party waives it, reserves the right to file it separately, or has already filed it.

This can allow the criminal court to order restitution, reparation, or indemnification if liability is established. Keep proof of the exact principal loss and any other legally recoverable damage. An estimate unsupported by records may be challenged.

If the accused is acquitted, the effect on the civil claim depends on the reason for the acquittal and the legal basis of the claim. Some civil claims may survive because they arise from contract, quasi-delict, or another source independent of the offense.

A separate civil case

A separate case may be appropriate when recovery rests on a loan, sale, agency, trust, contract, unjust enrichment, tort, or another civil obligation. Before filing, determine whether the civil claim was already included in the criminal action and whether a reservation was required. Courts will not permit double recovery for the same injury.

Possible remedies may include collection of a sum of money, rescission, restitution, damages, or recovery of specific property. The correct remedy depends on the documents and facts.

Small claims

The Rules on Expedited Procedures allow qualifying money claims not exceeding ₱1,000,000, exclusive of interest and costs, to be pursued through the small-claims process. The claim must be one of the types covered by the rule; the amount alone does not make every fraud-related dispute a small claim. Small claims are intended to be simpler, and lawyers generally may not appear at the hearing, although a party may seek legal advice before or after it.

Review the current forms and guidance from the Supreme Court of the Philippines before filing.

Provisional remedies

When there is reliable evidence that assets are being hidden, transferred, or removed, ask a lawyer promptly whether attachment, injunction, preservation orders, or other provisional relief is available. These remedies have strict grounds and usually require court proceedings, supporting evidence, and sometimes a bond.

A private complainant cannot simply freeze another person’s account. Banks and government authorities must act under applicable law and lawful process.

Deadlines and prescription

Do not assume that an estafa complaint can be filed at any time.

Under Articles 90 and 91 of the Revised Penal Code, the prescriptive period for a crime depends on the penalty prescribed by law. Estafa penalties vary according to the statutory form and amount involved, and cyber-related circumstances can affect the applicable penalty. Prescription generally runs from discovery of the offense by the offended party, authorities, or their agents and is interrupted by the filing of the complaint or information, subject to governing jurisprudence.

Civil claims have separate limitation periods. Depending on the legal basis, the Civil Code provides different periods for claims based on written contracts, oral contracts, injury to rights, fraud, and other obligations. A later demand does not necessarily restart an expired period.

Because classification, penalty, discovery, interruption, venue, and prior filings can change the calculation, obtain legal advice immediately if the transaction is old or a deadline may be near. Do not rely solely on negotiations or informal assurances of repayment.

Related offenses and remedies

The facts may support an offense other than—or in addition to—estafa. Possibilities include theft, falsification, use of falsified documents, identity theft, illegal access, computer-related fraud, violations involving access devices, or offenses involving bounced checks.

A dishonored check does not automatically prove estafa. Liability under Batas Pambansa Blg. 22 has distinct elements, including legally sufficient notice of dishonor and failure to pay or make arrangements within the statutory period. Estafa involving a check also has its own requirements, including the relationship between the deceit and the victim’s delivery of money or property.

For schemes soliciting investments, securities, lending, insurance, consumer transactions, or regulated financial products, a complaint to the relevant regulator may be appropriate. Regulatory action, however, does not necessarily recover the victim’s money or replace a criminal or civil filing.

Common mistakes to avoid

Treating every unpaid debt as estafa.
Focusing on labels rather than the exact representation, obligation, conversion, and loss.
Deleting chats, resetting devices, or keeping only cropped screenshots.
Sending more money in in the hope of unlocking a refund.
Posting accusations, personal data, or unverified identities publicly.
Threatening arrest, humiliation, or harm to force payment.
Filing in a convenient location without analyzing venue.
Naming account holders as perpetrators without evidence that they knowingly participated.
Accepting repayment terms without documenting dates, amounts, admissions, and consequences of default.
Assuming a police blotter, bank dispute, or platform report has already filed the criminal case.
Waiting for negotiations while prescription continues to run.
Seeking the same loss twice through overlapping criminal and civil proceedings.

When legal help is urgent

Consult a Philippine lawyer promptly when:

a large amount or essential family or business asset is involved;
the suspect is moving, concealing, or disposing of assets;
the fraud involves land, corporate shares, securities, cryptocurrency, trusts, or several jurisdictions;
the identity behind the recipient account is unknown;
several victims or coordinated accounts are involved;
documents may have been forged;
you are being threatened, blackmailed, or pressured to withdraw;
the events occurred years ago;
a prosecutor has dismissed the complaint or issued a resolution with a short review period;
you need attachment, an injunction, or another court order; or
you are unsure whether to reserve or separately pursue the civil action.

If there is an immediate threat to life or safety, contact emergency services or the police rather than confronting the suspected offender.

Frequently asked questions

Can I file an estafa complaint without first sending a demand letter?

Sometimes. Demand is not a universal element of every form of estafa. In misappropriation cases, however, demand and failure to account may be important evidence. Whether it is legally necessary depends on the charge and facts.

Is a receipt or bank-transfer record enough?

Usually not by itself. It can prove payment, but estafa also requires proof of the applicable deceit, trust obligation, misappropriation, or fraudulent means and resulting damage.

Can the owner of the receiving bank or e-wallet account be charged?

Not automatically. The account record is an investigative lead. Evidence must connect the account holder to knowing participation, control, conspiracy, or another basis of liability. Accounts may be borrowed, sold, compromised, or opened using stolen identities.

Will the bank refund an authorized transfer made because of a scam?

Not necessarily. Report immediately and follow the provider’s dispute procedure. The outcome may depend on how the transaction was authorized, the provider’s controls, applicable financial-consumer rules, and whether the funds can still be traced or held.

Can I withdraw the case if the money is returned?

Repayment can affect the civil claim and may be considered in the proceedings, but estafa is a public offense prosecuted in the name of the People of the Philippines. A private settlement does not automatically require the prosecutor or court to dismiss the criminal case. Do not sign a waiver, affidavit of desistance, or release without understanding its consequences.

Can I recover attorney’s fees, interest, and emotional-distress damages?

Only when there is a sufficient legal and evidentiary basis. Courts do not award these amounts automatically. Keep receipts, medical or business records, and other proof of claimed damages.

What if the suspect used a fake identity?

Preserve the fake profile and all transaction identifiers. Report promptly to the financial institution and cybercrime investigators, who may seek subscriber, account-opening, device, or transaction information through lawful process.

What if I do not know whether the case is estafa, theft, or a civil dispute?

Describe the facts accurately and provide the complete records. Do not force the incident into a particular label. A prosecutor or lawyer can assess the proper offense and remedy.

Official legal references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. The correct offense, venue, deadline, evidence, and recovery procedure depend on the specific facts and documents. Sources and procedures were checked as of 17 September 2026.