Quick answer

If you suspect fraud or estafa, act immediately: stop further payments, contact the bank or e-wallet involved, secure the account, preserve the complete transaction record, and report the incident to the police, the National Bureau of Investigation, or the appropriate prosecutor’s office. For an online or technology-assisted scheme, ask for referral to the PNP or NBI cybercrime unit.

A report does not automatically recover the money. Recovery may come through:

an urgent hold, reversal, or dispute process with the financial institution;
restitution or damages in the criminal case;
a separate civil action; or
a complaint before the regulator responsible for the bank, investment, seller, or service provider.

Move quickly. Fraud proceeds can pass through several accounts within minutes, electronic records may be deleted, and both criminal and civil claims have prescriptive periods. Whether conduct is criminal estafa—rather than only a broken promise, unpaid debt, or failed investment—depends on the representations made, when they were made, how the money or property was received, and proof of deceit, misappropriation, or damage.

What legally counts as estafa?

Article 315 of the Revised Penal Code covers several forms of swindling. The prosecution must prove the particular form alleged, not simply that the complainant lost money.

Two common forms are:

Estafa through false pretenses or fraudulent representations

This generally involves a false representation about matters such as identity, authority, qualifications, property, business, credit, agency, influence, or the existence of a supposed transaction. Ordinarily:

the false representation must have been made before or at the time the victim parted with money or property;
the victim must have relied on it; and
that reliance must have caused measurable damage.

A lie made only after the money was received may not establish this form of estafa, although it may be evidence of another offense or civil liability.

Examples that may qualify, depending on the evidence, include:

selling property the person did not own or was not authorized to sell;
collecting money for a fictitious product, job, investment, loan, or government service;
impersonating a bank, courier, government office, relative, or legitimate business;
using fabricated documents or transaction records to induce payment; and
receiving payment after falsely claiming that goods are available and ready for delivery.

Estafa through misappropriation or conversion

This may arise when money, goods, or other personal property are received in trust, on commission, for administration, or under an obligation to deliver or return the same, and the recipient later misappropriates, converts, or denies receiving them, causing prejudice.

The exact agreement matters. Receiving money under an ordinary loan or sale does not automatically create an obligation to return the identical money. A simple failure to pay a debt is not, by itself, estafa.

A demand is often important evidence that the recipient failed to account for or return entrusted property. Its precise legal significance depends on the charged mode of estafa and the other evidence; it should not be treated as a universal substitute for proof of conversion.

The statutory definitions and current value brackets appear in Article 315 as amended by Republic Act No. 10951.

A loss or unpaid obligation is not automatically a crime

Criminal liability requires proof of every element beyond reasonable doubt at trial. These situations may instead be principally civil disputes:

a borrower becomes unable to repay;
a genuine business fails after money was invested;
a seller cannot deliver because of an unforeseen supply problem;
a contractor performs poorly or late;
parties honestly disagree about contract terms; or
a debtor breaches a promise without evidence that the promise was fraudulent when made.

Later nonperformance can support an inference of fraud when combined with false documents, a fictitious identity, impossible claims, immediate diversion of funds, repeated victims, concealment, or other conduct. Nonperformance alone ordinarily does not prove that fraudulent intent existed from the start.

Labels used by the parties are not controlling. Calling a payment an “investment,” “loan,” “reservation,” or “commission” does not determine whether the case is criminal. Investigators and courts look at the actual transaction and documents.

Online scams and financial-account fraud

When estafa is committed by, through, or with information and communications technology, Section 6 of the Cybercrime Prevention Act of 2012 may apply and may raise the prescribed penalty by one degree. That rule does not mean every dispute arranged through chat or email is automatically cybercrime; the technology must have been used in committing the offense.

The Anti-Financial Account Scamming Act, Republic Act No. 12010, separately addresses conduct including:

knowingly lending, selling, buying, renting, or using financial accounts as money-mule accounts;
recruiting other people to provide such accounts; and
obtaining sensitive financial-account information through fraudulent social-engineering schemes.

The Act authorizes covered financial institutions, subject to Bangko Sentral ng Pilipinas rules, to hold funds involved in a disputed transaction temporarily. The statutory maximum for such a hold is 30 calendar days unless a competent court extends it. A hold is not automatic, and reporting does not guarantee that money remains available or will be returned.

The Act also allows restitution in specified circumstances when an institution failed to employ adequate safeguards or the legally required degree of diligence. Whether that rule applies requires examination of the transaction, the customer’s actions, the institution’s controls, and current BSP regulations. A victim should not assume either automatic bank liability or automatic customer liability.

What to do immediately

1. Stop contact and secure affected accounts

Do not send an additional “verification,” “release,” “tax,” “processing,” or “recovery” payment. Fraudsters commonly demand one final payment after the victim becomes suspicious.

If credentials, a device, SIM, email, or financial account may be compromised:

change passwords using a clean device;
sign out other sessions;
enable multi-factor authentication;
contact the mobile provider if a SIM swap is suspected;
block affected cards or accounts; and
warn trusted contacts if the fraudster may impersonate you.

Do not remotely wipe the affected device until relevant evidence has been preserved or an investigator advises you to do so.

2. Notify every financial institution in the payment chain

Contact the sending bank, card issuer, e-wallet, remittance service, or payment provider through its verified official channel. Ask it to:

mark the transaction as disputed or fraudulent;
trace and, where legally possible, hold the recipient funds;
contact the receiving institution;
secure the account;
preserve transaction and access records; and
issue a complaint or reference number.

If funds passed through several institutions, notify each known institution. Give the exact amount, date, time, reference number, receiving account, and reason the transaction was unauthorized or fraud-induced.

Do not rely only on a phone call. Follow up in writing and retain proof of submission. Chargeback, reversal, hold, insurance, and consumer-redress rules differ by payment method and do not guarantee reimbursement.

3. Preserve evidence in its original form

Create a chronological evidence folder containing:

the advertisement, listing, profile, website, and URL;
complete chats, emails, SMS messages, and call logs;
original electronic files, not only cropped screenshots;
payment confirmations, deposit slips, statements, QR codes, and transaction IDs;
account names and numbers, mobile numbers, email addresses, wallet addresses, and usernames;
contracts, receipts, invoices, identification documents, proposals, and certificates sent to you;
delivery records and tracking information;
recordings lawfully obtained;
names and contact details of witnesses;
written demands and proof of receipt;
reports made to platforms, banks, and agencies; and
a short timeline stating what was represented, why you relied on it, what you paid or delivered, and what happened afterward.

Export chats when the platform permits it. Keep the original phone and backup unedited files. Record when and how each item was obtained. Do not alter metadata or create a reconstructed conversation that could be mistaken for the original.

4. Send a careful written demand when appropriate

A demand may request payment, delivery, return of entrusted property, or a proper accounting by a definite date. State the facts, amount, transaction, and requested remedy accurately. Send it through a method that produces proof of delivery.

Do not threaten violence, public humiliation, unlawful disclosure, or a criminal complaint solely to obtain something to which you have no legal right. Do not exaggerate the amount or accuse uninvolved relatives and employees.

A lawyer should review the demand if the amount is substantial, the facts are disputed, property may be transferred, or the demand could affect the legal theory of the case.

Where to report

Police or NBI

A victim may report to the local police or the NBI. Technology-assisted cases may be referred to the PNP Anti-Cybercrime Group or the NBI cybercrime unit. Under the Cybercrime Prevention Act, both the PNP and NBI have designated responsibility for enforcing that law.

Ask for the complaint or incident reference and the investigator’s official contact details. A police blotter records a report; it is not, by itself, a criminal charge or proof that estafa occurred.

Prosecutor’s office

A criminal complaint may be filed with the proper city or provincial prosecutor when preliminary investigation is required. The complaint is ordinarily supported by the complainant’s sworn affidavit, witness affidavits, and documents establishing each element and identifying the respondent.

Venue is fact-sensitive. As a general rule, a criminal action must be filed where the offense, or an essential ingredient of it, occurred. Online communications, multiple transfers, unknown offenders, and victims or accounts in different locations can complicate venue. Confirm it with the investigator or prosecutor before filing.

A preliminary investigation determines whether there is sufficient basis to charge the respondent in court; it is not the criminal trial. The applicable procedure depends on the offense and prescribed penalty. The general framework is in Rules 110 to 112 of the Rules of Criminal Procedure, subject to current Department of Justice prosecution rules and local filing requirements.

Relevant regulator

A regulatory complaint can support immediate account action or address misconduct, but it generally does not replace a criminal complaint or civil case.

Depending on the transaction, the relevant body may include:

the Bangko Sentral ng Pilipinas for BSP-supervised banks, e-money issuers, and other covered financial institutions, ordinarily after using the institution’s complaint process;
the Securities and Exchange Commission for unregistered securities solicitations, investment schemes, and regulated corporations;
the Department of Trade and Industry for consumer transactions within its authority;
the Insurance Commission for regulated insurance, pre-need, or related products; or
the appropriate professional or sector regulator when the representation concerns a licensed activity.

Use only contact details published on the agency’s official website. Beware of supposed “agents” who demand payment to release recovered funds.

How recovery may be pursued

Recovery within the criminal case

Under Rule 111, the civil action for liability arising from the offense is generally deemed instituted with the criminal case unless the offended party waives it, reserves the right to sue separately, or filed the civil action first. Actual damages must be proved with competent evidence.

A criminal complaint is not a collection shortcut. The prosecutor may dismiss it if the evidence shows only a civil breach or fails to establish the selected form of estafa.

The court may, in qualifying cases, grant attachment to secure property for a possible civil judgment. Attachment is an exceptional provisional remedy, not an automatic consequence of filing. It requires legal grounds, procedure, and usually a bond. Urgent legal advice is needed if the respondent is disposing of assets or preparing to leave the Philippines.

Separate civil action

A civil case may seek repayment, return of property, rescission or annulment where legally available, and proven damages. The correct claim depends on the contract and facts.

Some money claims not exceeding the current small-claims ceiling may qualify for the Supreme Court’s simplified procedure. Eligibility turns on the nature and amount of the claim, not merely the amount lost. Claims requiring rescission, complex ownership findings, injunctions, or other relief may not fit small claims.

Filing a separate civil case without considering an existing or intended criminal action can create procedural complications. Before filing, determine whether the civil claim is already included in the criminal case and whether a reservation is necessary.

Settlement

A documented settlement may produce faster recovery, but do not surrender original evidence, withdraw a complaint, or sign a quitclaim before the promised payment has cleared and the legal consequences are understood.

Private settlement may resolve civil liability, but it does not necessarily extinguish criminal liability for a public offense. The effect depends on the offense, procedural stage, and terms.

Barangay conciliation may be required in some cases

For disputes between individuals who are actual residents of the same city or municipality, the Katarungang Pambarangay provisions of the Local Government Code may require prior barangay conciliation before court or government action.

Important exceptions include situations involving a detained accused, a person deprived of liberty requiring habeas corpus relief, an urgent provisional remedy, or an action that may otherwise be barred by prescription. Residency, party status, location, and the relief requested all matter. Do not assume barangay proceedings are required—or safely skip them—without checking the specific facts.

Penalties and amount thresholds

Republic Act No. 10951 adjusted Article 315’s amount brackets. For the forms of estafa governed by those brackets, the statute currently distinguishes fraud amounts:

not exceeding ₱40,000;
over ₱40,000 but not exceeding ₱1.2 million;
over ₱1.2 million but not exceeding ₱2.4 million;
over ₱2.4 million but not exceeding ₱4.4 million; and
over ₱4.4 million, for which the statute provides an additional-amount formula subject to a 20-year ceiling.

These figures are penalty brackets, not minimum-loss requirements for reporting estafa. They also do not, by themselves, state the sentence a particular accused will receive. The precise mode of estafa, date of commission, cybercrime provisions, aggravating or mitigating circumstances, Indeterminate Sentence Law, and other rules may affect the legally imposable sentence.

Time limits: do not wait

There is no single deadline for every fraud-related remedy.

For crimes under the Revised Penal Code, Articles 90 and 91 govern prescription according to the prescribed penalty and generally reckon the period from discovery by the offended party, authorities, or their agents, subject to statutory interruption and resumption rules. Cybercrime and special-law offenses may follow different rules.

Civil deadlines depend on the cause of action—for example, a written or oral contract, injury to rights, fraud affecting consent, or another legal basis. Regulatory and financial-institution dispute processes may have their own shorter notice or filing periods.

Because classification controls the deadline, do not calculate prescription solely from the amount lost or assume that a demand letter indefinitely stops the clock.

Common mistakes that weaken a complaint

Reporting only the final nonpayment without explaining the initial deceit or the obligation to return entrusted property.
Providing cropped screenshots that omit the account name, date, URL, or earlier conversation.
Deleting chats, resetting the phone, or losing access to the original account.
Continuing to pay supposed recovery, verification, or tax fees.
Naming a company officer, account holder, or recipient as the principal fraudster without evidence of participation or knowledge.
Posting accusations and personal data publicly before identities are verified.
Filing in the wrong venue or relying only on a barangay blotter, police blotter, platform report, or bank ticket.
Treating a regulatory complaint as a substitute for a prosecutor’s complaint.
Signing a quitclaim or accepting installment promises without security and clear default terms.
Waiting for the suspect to disappear before contacting the financial institution.

When legal help is urgent

Consult a Philippine lawyer promptly when:

the amount is substantial or several victims are involved;
funds or assets are being moved, concealed, or transferred;
the respondent may leave the country;
the transaction involves land, corporate shares, securities, cryptocurrency, trusts, or several jurisdictions;
a bank rejects the fraud dispute or attributes the transaction to you;
you need attachment, injunction, preservation, or another provisional remedy;
the prosecutor has dismissed the complaint or issued a resolution with a short review period;
you are being threatened, blackmailed, doxxed, or pressured to withdraw;
you unknowingly allowed your account to be used as a money mule; or
prescription may be close.

Persons unable to afford private counsel may inquire with the Public Attorney’s Office about eligibility and available assistance.

FAQ

Can I file estafa if I voluntarily transferred the money?

Yes, potentially. A transfer may still have been caused by deceit. “Authorized” entry of a transaction does not necessarily mean that the underlying inducement was honest. Proof of the false representation and reliance is essential.

Is a demand letter required before filing?

Not in every form of estafa. It can be important evidence, particularly where entrusted property should have been returned or accounted for, but it does not replace proof of the offense. Immediate reporting may be more important when funds can still be held or traced.

Can the account owner be charged even if someone else operated the scam?

Account ownership alone does not prove criminal participation. Evidence of knowledge, intent, control, benefit, or cooperation is needed. Conversely, knowingly lending or selling an account for criminal proceeds may create liability under the Anti-Financial Account Scamming Act.

Will the bank automatically refund an online-scam payment?

No. The result depends on the facts, payment method, timing, account controls, current regulations, and whether the institution or customer failed to meet applicable duties. Report immediately and request a written determination.

Can I pursue both criminal charges and repayment?

Often yes. Civil liability arising from the offense is generally included in the criminal case unless waived, reserved, or previously filed. Separate filing must be coordinated carefully to avoid duplication or procedural problems.

What if I do not know the fraudster’s real name?

Report the available identifiers: account numbers, wallet details, phone numbers, email addresses, usernames, URLs, transaction references, device information, and communications. Investigators may seek subscriber or financial records through lawful process. Do not invent a name or assume that the receiving-account owner personally designed the scheme.

Can several victims file together?

They may coordinate evidence and identify a pattern, but each victim should preserve an individual affidavit, payment trail, representations received, and loss computation. Venue and the proper charging structure require case-specific assessment.

Should I expose the suspected scammer on social media?

Usually not before evidence and identity are verified. Public accusations can compromise an investigation, alert suspects, expose private information, or create separate legal risk. Give the evidence to the institution, investigator, prosecutor, and relevant regulator.

This article provides general Philippine legal information, not legal advice or a prediction of any case outcome. The correct remedy, venue, offense, deadline, and recovery prospects depend on the documents and facts. Primary legal and official sources were checked as of 21 September 2026.