Quick answer

If you suspect fraud or estafa, act immediately: stop further payments, notify the bank, e-wallet, remittance service, or platform through its official fraud channel, preserve all evidence, and report the incident to the police or the National Bureau of Investigation. A criminal complaint may then be filed with the proper prosecution office or, depending on the offense and applicable procedure, directly with the appropriate first-level court.

Recovery is possible but not guaranteed. Speed matters because transferred funds may be withdrawn quickly, electronic records may not remain available indefinitely, and criminal and civil claims have prescriptive periods. A police report or criminal complaint can support an investigation, but it does not automatically freeze an account, return the money, or establish guilt.

When fraud becomes estafa

Article 315 of the Revised Penal Code punishes specified forms of swindling. Not every unpaid debt, failed investment, broken promise, or bad business deal is automatically estafa. The evidence must fit a mode of fraud defined by law.

Two commonly encountered forms are:

Estafa through false pretenses or fraudulent acts

This generally requires proof that:

The accused made a false representation or used a fraudulent act or means;
The representation concerned matters such as identity, authority, qualifications, property, credit, business, influence, or a supposed transaction;
The false representation was made before or at the same time as the victim parted with money or property;
The victim relied on it; and
That reliance caused financial or property damage.

The timing is critical. A lie made only after the money was delivered ordinarily cannot have induced the original payment. The Supreme Court has repeatedly explained that the deceit must be the efficient cause of the loss and must precede or accompany the victim’s disposition of property. See, for example, Batac v. People.

Evidence of a later failure to perform is relevant, but it does not by itself prove that the accused already intended to deceive at the beginning.

Estafa through misappropriation or conversion

This form generally involves:

Money, goods, or other personal property received in trust, on commission, for administration, or under an obligation to deliver or return the same;
Misappropriation, conversion, or denial of receipt;
Prejudice to another; and
A demand for delivery or return.

The arrangement must involve an obligation to account for, deliver, or return the property—not merely an ordinary debtor-creditor relationship in which ownership of borrowed money passed to the borrower. The Supreme Court has distinguished a punishable conversion from a simple unpaid loan, which is ordinarily a civil matter. See Gabionza v. Court of Appeals and Sy v. People.

A demand need not always follow a particular form, but a written demand is usually valuable evidence of the obligation, noncompliance, and the date the recipient was called upon to account. Keep proof that it was actually delivered or received.

Online fraud and identity misuse

If the conduct was committed through a computer system, messaging service, social-media account, website, email, online marketplace, or other information and communications technology, the Cybercrime Prevention Act may apply. Section 6 of Republic Act No. 10175 covers Revised Penal Code crimes committed through ICT and generally provides a penalty one degree higher. The Act also separately addresses computer-related fraud, forgery, and identity theft.

The precise charge depends on what the offender did. Using a phone or online platform does not automatically prove every element of cybercrime or estafa. Investigators and prosecutors must identify the applicable offense from the evidence.

Under Republic Act No. 10175, the PNP and NBI are the principal law-enforcement authorities for cybercrime. Its provisions on preservation of computer data make early reporting especially important. A victim should not attempt to hack an account, secretly access another person’s device, or impersonate the suspect to obtain evidence.

What to do immediately

1. Stop the loss

Do not send another “release fee,” “tax,” “verification payment,” “insurance charge,” or “refund-processing fee.” Do not follow instructions from someone claiming they can recover the money for an advance payment unless you have independently verified that person and the service.

If account credentials, cards, SIMs, email accounts, or identity documents may be compromised:

Change passwords using a clean device;
Enable multi-factor authentication;
Sign out unknown sessions;
Lock or replace affected cards or SIMs;
Tell the provider which transactions are unauthorized; and
Monitor connected accounts.

2. Contact the payment provider

Immediately notify the sending bank, receiving bank if known, e-wallet, card issuer, remittance company, or payment platform. Use only contact details shown in the provider’s official app, website, card, or account statement.

Provide the transaction reference, amount, date and time, receiving account, and reason you believe the transaction was fraudulent. Ask the provider to:

Record a formal fraud report;
Attempt a recall, hold, or other available protective action;
Preserve relevant account and transaction records; and
Give you a case or reference number.

The provider may be unable to reverse a transaction, particularly if it was authorized by the account holder or the funds have already moved. A private request also does not substitute for a lawful freeze, seizure, or disclosure order. Nevertheless, immediate notice may improve the chance of intervention.

For unresolved complaints involving a BSP-supervised financial institution, first use the institution’s consumer-assistance mechanism and then, if appropriate, consult the Bangko Sentral ng Pilipinas consumer-assistance channels. A regulatory complaint is separate from a criminal case.

3. Preserve evidence before reporting accounts

Save the evidence before blocking the suspect or asking a platform to remove an account. Preserve:

Complete chat and email threads, not just selected screenshots;
Original electronic files and attachments;
Usernames, profile links, page URLs, phone numbers, and email addresses;
Advertisements, product listings, proposals, contracts, invoices, and receipts;
Bank or e-wallet statements and transaction confirmations;
Recipient account names, numbers, QR codes, reference numbers, dates, and exact times;
Call logs, voice messages, meeting links, and recordings lawfully obtained;
Identity documents or business registrations supplied by the suspect;
Delivery records, demand letters, and proof of receipt;
Names and contact details of witnesses and other known victims; and
A chronological account written while events are fresh.

Export conversations when the service allows it. Keep original devices and files. Do not crop, annotate, rename, or repeatedly convert the only copy. Store working copies separately and record where each item came from.

A screenshot can be useful, but authenticity and context may later be challenged. Original files, device data, transaction records, testimony from a person with personal knowledge, and properly obtained provider records can be much stronger.

4. Report to law enforcement

You may report to the local police. For online or technology-assisted fraud, ask for referral to the PNP Anti-Cybercrime Group or approach the NBI’s cybercrime investigators. Republic Act No. 10175 identifies both agencies as cybercrime law-enforcement authorities.

Bring identification, a concise chronology, the suspect’s known details, proof of payment, and organized copies of the evidence. Obtain and retain the blotter entry, complaint reference, receiving officer’s name, and any instructions concerning affidavits or follow-up submissions.

A police blotter records the report; it is not itself a finding that estafa occurred, a court case, or an order compelling repayment.

5. Prepare the criminal complaint

A criminal complaint is a sworn written accusation. It should clearly state:

Who made each representation;
The exact representation and why it was false;
When, where, and through what medium it was made;
Why you relied on it;
What money or property you delivered;
Where and how payment or delivery occurred;
What happened afterward;
The resulting loss;
What demand was made, if relevant; and
How each attached document supports the account.

Do not exaggerate, guess at identities, or include statements you cannot truthfully swear to. Separate facts personally known to you from information received from other people. Each witness with material personal knowledge should ordinarily execute a separate affidavit.

The current DOJ-National Prosecution Service framework uses “prima facie evidence with reasonable certainty of conviction” for preliminary investigations and inquests. Preliminary investigation is required for offenses whose prescribed penalty is at least six years and one day, without regard to the fine. Other cases may follow summary or expedited procedures. Consult the DOJ issuances page and the receiving prosecution office for its current filing checklist, required copies, accepted e-filing channel, and applicable schedule. Do not send sensitive evidence to an unofficial email address merely because it appears in a post or message.

Venue is legally significant. Under Rule 110, Section 15, a criminal action is generally instituted and tried where the offense was committed or where any essential ingredient occurred. In an online transaction, relevant places may include where representations were made, where the victim relied and transferred property, or where damage occurred, but venue depends on the proved facts. If offices disagree about venue, obtain legal advice instead of repeatedly filing identical complaints.

Barangay conciliation may apply

If the parties are individuals who actually reside in the same city or municipality, the Katarungang Pambarangay process may be a precondition before filing a matter within the lupon’s authority. The Local Government Code provides exceptions, including cases involving a detained accused, urgent provisional remedies, or a claim about to prescribe.

Residence, the parties’ relationship, the offense’s maximum penalty, urgency, and other statutory exclusions can change the answer. Ask the barangay or prosecution office whether a Certificate to File Action is required. Do not allow conciliation to consume a prescriptive period; the Code expressly recognizes an exception where delay may cause prescription.

Penalties and amount thresholds

Republic Act No. 10951 amended Article 315’s value brackets. For the principal modes listed in Article 315, the statute provides:

Amount of fraud	Base statutory penalty under Article 315
Not more than ₱40,000	Arresto mayor in its medium and maximum periods
Over ₱40,000 but not over ₱1,200,000	Arresto mayor maximum to prisión correccional minimum
Over ₱1,200,000 but not over ₱2,400,000	Prisión correccional minimum and medium
Over ₱2,400,000 but not over ₱4,400,000	Prisión correccional maximum to prisión mayor minimum
Over ₱4,400,000	The statutory maximum-period and incremental rule applies, subject to the 20-year ceiling stated in Article 315

These brackets primarily affect punishment; a small loss is not automatically outside Article 315. Conversely, a large unpaid amount does not by itself establish estafa.

The final penalty can depend on the date of the offense, exact mode charged, aggregate amount, mitigating or aggravating circumstances, the Indeterminate Sentence Law, use of ICT, and special laws. The controlling text is Republic Act No. 10951.

Seeking repayment or damages

Civil liability in the criminal case

Under Rule 111, the civil action to recover civil liability arising from the charged offense is generally deemed included when the criminal action is instituted, unless the offended party:

Waives it;
Properly reserves the right to file it separately; or
Filed the civil action before the criminal action.

A reservation must generally be made before the prosecution begins presenting evidence and under circumstances giving the offended party a reasonable opportunity to reserve. Actual damages ordinarily require proof of the amount lost and its connection to the offense. Other damages require an appropriate legal and evidentiary basis.

There can be no double recovery for the same injury.

A separate civil claim

A separate collection, rescission, restitution, damages, or other civil action may sometimes be appropriate, particularly where the obligation arises from a contract rather than the crime itself. This distinction matters: civil liability arising from contract is not necessarily the same civil liability deemed included in the criminal case.

A separate action may involve filing fees, service of summons, proof requirements, prescription, and the risk that the defendant has no reachable assets. Once a criminal action begins, Rule 111 may suspend a separate civil action arising from the offense unless an exception applies.

Before filing, have a lawyer assess the source of the obligation, prior cases, any reservation, and the remedy most likely to reach assets.

Attachment, freezing, and tracing assets

Reporting fraud does not automatically freeze the suspect’s property. Attachment and similar provisional remedies require legal grounds and usually a court application, bond, or other procedural safeguards. Banks and payment providers are also bound by confidentiality and due-process rules.

If substantial assets are being transferred, concealed, sold, or taken abroad, consult counsel urgently about lawful preservation measures. Do not publish account details or accuse third parties publicly in an attempt to pressure them.

Common mistakes that weaken a case

Treating every unpaid loan or failed business venture as criminal estafa;
Focusing only on nonpayment and failing to prove the original deceit;
Deleting chats after blocking the suspect;
Submitting cropped screenshots without URLs, timestamps, or original files;
Paying a supposed investigator or recovery agent through an unverified account;
Naming account holders as conspirators without evidence of knowing participation;
Filing in the wrong venue;
Signing an inaccurate affidavit prepared by someone else;
Accepting a settlement without checking release, waiver, confidentiality, and default terms;
Assuming repayment automatically ends the criminal case;
Waiting while evidence disappears or claims approach prescription; and
Posting accusations online in a way that creates privacy, defamation, or safety risks.

When legal help is urgent

Seek immediate advice from a Philippine lawyer if:

The loss is substantial or involves many victims;
Funds or property are being moved or concealed;
The suspect is leaving the country;
A prescriptive deadline may be near;
The transaction involves real property, securities, investments, corporate funds, or trust receipts;
You are being threatened, blackmailed, or pressured to destroy evidence;
Your identity, SIM, bank account, or company credentials were taken over;
A prosecutor or investigator questions venue or the correct offense;
You have already filed or reserved a civil action;
You are asked to sign a settlement, quitclaim, affidavit of desistance, or confidentiality agreement; or
You receive a subpoena, resolution, dismissal, or court notice with a deadline.

Those who qualify may inquire with the Public Attorney’s Office about legal assistance.

Frequently asked questions

Can I file estafa if I voluntarily transferred the money?

Possibly. Voluntary payment does not defeat estafa if it was induced by legally sufficient deceit. You must still prove the false representation, reliance, delivery, and damage.

Is failure to repay a loan automatically estafa?

No. Mere nonpayment is generally a civil matter. Estafa may exist if the borrower obtained the money through a qualifying false representation made before or when the loan was granted, but intent and deceit must be proved from facts—not inferred solely from later default.

Do I need to send a demand letter first?

It depends on the mode charged. Demand is particularly relevant to estafa through misappropriation or conversion and is often important evidence. It is not a universal substitute for proving deceit, conversion, and damage. Use a delivery method that produces reliable proof of receipt.

Can the bank reverse my transfer?

Sometimes, but there is no automatic right to reversal merely because the sender later reports a scam. The result depends on the payment method, timing, account status, provider rules, and lawful authority. Report immediately to all involved providers.

Can I file even if I know only the scammer’s username or account number?

You can report what you truthfully know and provide the digital and payment identifiers. Investigators may seek subscriber or account records through lawful process. Do not guess the offender’s identity or assume that the named account holder necessarily planned the fraud.

Will an affidavit of desistance end the case?

Not necessarily. A crime is prosecuted in the name of the People of the Philippines. Settlement, repayment, or desistance may affect the evidence or civil claim, but it does not automatically erase criminal liability or compel the prosecutor or court to dismiss the case. The Supreme Court has held that a compromise on civil liability does not necessarily extinguish an already incurred criminal liability: Lee v. Court of Appeals.

How long do I have to file?

There is no single deadline for every fraud case. Prescription depends on the exact offense, prescribed penalty, governing statute, date and discovery rules where applicable, interruptions, and whether a special law controls. Filing with the proper authority can have legal consequences for prescription, while filing in the wrong place may create disputes. Obtain advice promptly rather than calculating the final day yourself.

Official legal sources

This article provides general legal information, not legal advice, and does not create an attorney-client relationship. The proper charge, venue, procedure, remedy, and deadline depend on the actual documents and facts. Official sources and current procedures were checked as of September 14, 2026.