Quick answer

If you suspect fraud or estafa, act immediately: stop further payments, contact the bank, e-wallet, card issuer, or remittance company through its official fraud channel, secure the account, and ask whether the transfer can still be held, recalled, or traced. Preserve the transaction records and communications before anything is deleted. Then report the incident to the police or National Bureau of Investigation and, when the evidence supports a criminal charge, file a sworn complaint with the prosecutor’s office that has territorial jurisdiction.

A report does not automatically recover the money. Recovery may be pursued through the civil liability included in the criminal case, a separate civil action when legally permitted, a small-claims case for an eligible money claim not exceeding ₱1 million exclusive of interest and costs, or an enforceable settlement. The correct route depends on how the money or property was obtained, the parties’ agreement, the available evidence, where the essential acts occurred, and whether the respondent can still be identified and located.

When suspected fraud may be estafa

Article 315 of the Revised Penal Code punishes several forms of swindling. In general, estafa requires fraud—through abuse of confidence, deceit, or another method specified by law—and damage or prejudice capable of being measured in money.

Two common forms are:

Estafa through false pretenses or deceit

This may apply when a person obtains money, property, or credit by making a material false representation, such as pretending to have authority, qualifications, property, funds, influence, or a genuine business opportunity.

Ordinarily, the prosecution must establish that:

The accused made a false pretense, fraudulent act, or representation;
The representation was made before, or at the same time as, the victim surrendered the money or property;
The victim relied on it; and
The reliance caused financial damage.

The timing matters. A lie made only after the transaction may not establish this form of estafa unless the evidence shows that the deceit already existed when the victim parted with the money.

Estafa through misappropriation or conversion

This may apply when someone receives money, goods, or other personal property in trust, on commission, for administration, or under another arrangement requiring delivery or return, and then misappropriates, converts, or denies receiving it to another person’s prejudice.

There must be an obligation to return or deliver the same money or property, not merely an obligation to pay an equivalent amount arising from an ordinary loan or sale. A demand is important evidence that the recipient failed to account for property that had to be returned, although the precise legal role of demand depends on the charged mode and facts.

The Supreme Court’s discussions of these distinctions include Sy v. People and Gacayan v. People.

Not every unpaid debt or failed transaction is estafa

A broken promise, unpaid loan, failed investment, delayed delivery, business loss, or breach of contract is not automatically a crime. Criminal liability generally requires proof of the particular fraud alleged.

For example:

A borrower’s inability or refusal to repay is not, by itself, estafa.
A business failure is not necessarily fraud merely because investors lost money.
Non-delivery after payment may be criminal if deceit induced the payment, but it may instead be a civil breach if the seller genuinely intended and attempted to perform.
Misuse of property received in trust may be estafa, while failure to pay a debt involving transfer of ownership may be only a civil matter.
Issuing a dishonored check may raise separate issues under Batas Pambansa Blg. 22, but its elements and notice requirements differ from estafa.

Labeling a dispute “estafa” does not make it criminal. Prosecutors and courts examine the transaction, the parties’ obligations, the timing of the alleged deceit, and the admissible evidence.

What to do immediately

1. Stop the loss and secure your accounts

Contact the financial institution through the number or channel published on its official website or app. Ask it to:

Block compromised cards, accounts, devices, or online-banking access;
Record a fraud report and provide a reference number;
Attempt a transfer recall, hold, or beneficiary-account alert, if still possible;
Preserve relevant transaction and access records;
Explain the requirements for a formal dispute; and
Confirm whether replacement credentials or additional account security are needed.

Change passwords from a trusted device, enable multifactor authentication, sign out other sessions, and secure the email address and mobile number connected to the account. Do not pay anyone claiming that an additional “unlock,” “tax,” “verification,” or “recovery” fee is required.

If the provider does not adequately address a complaint, use the Bangko Sentral ng Pilipinas’ Consumer Assistance Mechanism when the institution is BSP-supervised. A regulatory complaint is not a substitute for a criminal complaint or civil recovery action.

2. Preserve evidence before confronting the suspect

Save the original material whenever possible:

Deposit slips, transfer confirmations, bank statements, e-wallet receipts, card records, and reference numbers;
Full chat threads, emails, SMS messages, voice messages, and call logs;
Advertisements, listings, social-media profiles, websites, and URLs;
Contracts, invoices, official receipts, delivery records, promissory notes, acknowledgments, and demand letters;
Names, aliases, usernames, account numbers, phone numbers, email addresses, wallet addresses, and claimed business details;
Photographs, videos, CCTV information, and records identifying witnesses;
Proof of what was represented before payment;
Proof of the amount lost and any partial refund; and
A chronological account showing dates, places, representations, payments, follow-ups, and discovery of the suspected fraud.

Keep unedited originals and separate working copies. Export chats when the platform allows it; screenshots alone may omit dates, URLs, account identifiers, or surrounding context. Do not crop away information that may later authenticate the record. Back up the evidence in more than one secure location.

For websites or disappearing posts, save the URL, account name, date and time accessed, and a screen recording or full-page capture. Do not hack an account, impersonate another person, or obtain evidence unlawfully.

3. Send a careful written demand when appropriate

A written demand can establish that payment, delivery, accounting, or return was requested and refused. It should identify:

The transaction;
The money or property involved;
The obligation allegedly breached;
The amount or property demanded;
A reasonable compliance date; and
Where and how compliance may be made.

Send it through a method that produces reliable proof of delivery and retain the message, registry receipt, courier tracking, acknowledgment, or other proof.

A demand should not threaten unlawful exposure, violence, or prosecution solely to obtain an unrelated advantage. Do not delay an urgent bank report or law-enforcement referral while waiting for a response. Have counsel review the demand if the facts are disputed, the amount is substantial, or the wording may affect the legal theory.

Where to report

Police or NBI

You may report to the appropriate police station or investigative unit. Online scams, account takeovers, phishing, or fraud committed through an information and communications technology system may also be reported to the Philippine National Police Anti-Cybercrime Group or the NBI Cybercrime Division.

The NBI accepts requests for investigation through its offices and publishes an online complaint page and Cybercrime Division service guidance. Check the agency’s official site before visiting because intake arrangements may change.

A police blotter records a report, but it does not by itself commence the prosecutor’s preliminary investigation or establish the suspect’s guilt. Ask what additional complaint, affidavit, or referral is required.

City or provincial prosecutor

A criminal complaint is generally a sworn written statement charging the respondent with an offense. For an offense requiring preliminary investigation, it is filed with the proper prosecutor for that investigation. Other offenses may follow different filing routes under Rule 110.

Under the DOJ’s 2024 National Prosecution Service rules, prosecutors assess whether the evidence establishes prima facie evidence with reasonable certainty of conviction. This makes complete, credible, admissible, and preservable evidence especially important. Consult the DOJ filing guidance and Department Circular No. 15, series of 2024.

A typical filing includes:

A complaint-affidavit based on personal knowledge;
Witness affidavits;
Legible, organized annexes;
Proof of the transaction and damage;
Proof of the respondent’s identity and address, as far as known;
A demand and proof of receipt, when relevant; and
The required number of copies and properly completed oath or jurat.

Local offices may issue intake checklists. Verify their present requirements, office hours, accepted filing methods, and fees before filing. Electronic filing or virtual proceedings should not be assumed available in every office.

Other agencies

A specialized report may also be appropriate:

Report unauthorized or problematic transactions to the bank, e-wallet, card issuer, or other financial service provider first, then to the BSP when it supervises the provider.
Report suspected unauthorized investment solicitation, securities violations, or investment schemes to the Securities and Exchange Commission.
Report identity-related personal-data incidents to the affected organization and, where appropriate, the National Privacy Commission.
Report deceptive consumer transactions to the relevant regulator or the Department of Trade and Industry.

These reports can support investigation or regulatory action, but they do not necessarily replace a prosecutor’s complaint or a court action for recovery.

Jurisdiction and venue matter

A criminal case ordinarily belongs where the offense was committed or where any essential ingredient occurred. In an estafa-by-deceit case, relevant places may include where the false representation was made, where it was received and relied upon, or where the victim surrendered the money or property. Electronic communications and transfers can make this fact-sensitive.

Do not choose a prosecutor’s office merely because it is convenient. A mistaken venue may delay the case. Identify in the complaint the places connected to each essential act and obtain advice if the parties, bank accounts, communications, or payments span different cities or countries.

Barangay conciliation may be a precondition for some disputes between individuals who actually reside in the same city or municipality. It does not cover every case. Statutory exceptions include, among others, offenses punishable by imprisonment exceeding one year or a fine exceeding ₱5,000, disputes involving the government in specified circumstances, and many disputes between residents of different cities or municipalities. Because the applicable estafa penalty depends on the amount and circumstances, confirm whether barangay proceedings are required instead of assuming they are or are not. See Sections 408–412 of the Local Government Code.

If the fraud happened online

Estafa committed through an information and communications technology system may also implicate Section 6 of the Cybercrime Prevention Act of 2012, which provides a penalty one degree higher for a crime under the Revised Penal Code committed by, through, and with the use of such technology.

The use of a phone or computer somewhere in the events does not automatically establish cybercrime liability. The technology must have the legally required connection to the commission of the offense.

Digital evidence can disappear quickly. Ask the investigating agency or lawyer whether preservation or disclosure processes are needed. A victim’s request to a platform may preserve personal copies, but compulsory disclosure of subscriber, traffic, or content data generally requires the lawful process applicable to the type of data. Do not represent that you have a court order when you do not.

How recovery may be pursued

Recovery within the criminal case

Under Rule 111, the civil action to recover civil liability arising from the charged offense is generally deemed included when the criminal action is instituted, unless the offended party:

Waives it;
Reserves the right to file it separately; or
Filed the civil action before the criminal action.

A reservation must be made before the prosecution begins presenting evidence and when the offended party has a reasonable opportunity to reserve. Once a criminal action has begun, a separate civil action arising from the same offense generally cannot be newly instituted until final judgment; an earlier civil action may be suspended, subject to the rules on consolidation and recognized exceptions.

The criminal court may award restitution, reparation, or damages supported by evidence. A conviction or damages award still does not produce immediate payment if the liable person has no reachable property or refuses to satisfy the judgment. Enforcement may require a writ of execution and identification of assets.

A separate civil case

A civil action may be appropriate where the evidence proves a contractual or other civil obligation but does not establish criminal fraud. Possible claims depend on the documents and facts and may involve collection, rescission, restitution, damages, or enforcement of an agreement.

Before filing, assess:

The legal basis and prescriptive period;
The correct defendant and service address;
Venue and court jurisdiction;
Barangay conciliation, if applicable;
Filing fees;
The defendant’s assets and realistic collectability; and
Whether a criminal action has already affected the timing of a separate civil case.

Do not file parallel cases based on inconsistent theories without legal advice.

Small claims

An eligible claim solely for payment or reimbursement of money not exceeding ₱1 million, exclusive of interest and costs, may fall under the Rules on Small Claims Cases. Covered claims include specified obligations arising from loans, services, sales, leases, mortgages, and other contracts, as well as civil liability arising from an offense where no criminal action has been instituted.

Small claims use standardized forms and generally do not allow lawyers to appear at the hearing, although a party may consult a lawyer beforehand. The complete rules and current forms are available from the Supreme Court’s Small Claims page.

Small claims are not a shortcut for every fraud case. Confirm that the claim is within the rule, that the chosen court has venue, and that filing it will not conflict with a pending criminal case or the civil action deemed included in that case.

Settlement

A voluntary settlement may recover money faster, but it should identify the total obligation, payment schedule, default consequences, releases, security, and treatment of pending proceedings. Do not sign a quitclaim, affidavit of desistance, or broad release without understanding its effect.

Payment or compromise does not automatically erase criminal liability for a public offense. A prosecutor or court—not the parties alone—determines the criminal case. Any settlement should accurately disclose payments already made and should never contain false statements.

Provisional remedies

Rule 127 permits applicable provisional remedies in connection with the civil action included in a criminal case. In a proper case, counsel may consider preliminary attachment, but it is not automatic. Statutory grounds, supporting evidence, a court order, and ordinarily a bond are required. Attachment is not a lawful basis for a victim to seize, enter, disable, or publicly identify another person’s property without authority.

Deadlines and prescription

Do not wait for settlement discussions to fail before obtaining advice on prescription.

For ordinary estafa under Article 315, the criminal prescriptive period generally depends on the penalty corresponding to the amount and circumstances. Under Articles 90 and 91 of the Revised Penal Code, this can commonly result in a period of five, ten, or fifteen years. The computation ordinarily begins from discovery of the offense by the offended party, authorities, or their agents and may be interrupted by the institution of the complaint or information. Different rules or periods may apply where another offense, a special law, cybercrime treatment, continuing conduct, concealment, or events outside the Philippines are involved.

The amount thresholds and penalties for Article 315 were updated by Republic Act No. 10951. Civil claims have their own limitation periods, often determined by whether the action is based on a written contract, oral contract, injury to rights, fraud, or another source of obligation.

Because classification and computation can change the deadline, have a lawyer examine the documents and dates promptly. A demand letter, police blotter, platform report, or private negotiation should not be assumed to interrupt every applicable prescriptive period.

Common mistakes that weaken a case

Continuing to send money after being promised a refund or release of earlier funds;
Deleting the conversation after blocking the account;
Saving only selected screenshots instead of the complete exchange;
Failing to connect each payment to a specific false representation;
Alleging a large total loss without attaching a transaction-by-transaction computation;
Treating a contractual default as proof of criminal intent;
Filing in a place with no connection to an essential element of the offense;
Naming people solely because they own or work for a company, without evidence of personal participation;
Editing files, creating reconstructed conversations, or asking a witness to adopt facts the witness did not personally observe;
Posting accusations, IDs, addresses, or account details publicly, creating privacy, defamation, safety, or investigative problems;
Paying unofficial “fixers” or supposed agents promising arrest or guaranteed recovery;
Signing a settlement, quitclaim, or affidavit of desistance without advice; and
Assuming that reporting the crime automatically freezes assets or returns the money.

A useful complaint-affidavit structure

Write in numbered paragraphs and distinguish personal knowledge from information obtained from records or other witnesses:

Identify yourself and explain your relationship to the transaction.
Identify the respondent as completely and accurately as the evidence permits.
State each material representation, who made it, when, where, and through what channel.
Explain why it was false and what evidence proves falsity.
State that the representation induced the payment or transfer.
List every payment or item delivered, with date, amount, method, recipient, and reference number.
Explain the resulting loss and any amount recovered.
Describe subsequent communications, admissions, demands, and responses.
Identify witnesses and what each personally knows.
Attach and label the supporting documents in chronological order.
State the relevant places so the prosecutor can assess venue.
Ask for investigation and the filing of the offense or offenses supported by the evidence.

Tell the complete truth, including facts that may appear unfavorable, such as refunds, written risk disclosures, changed terms, prior dealings, or your knowledge of uncertainty. Omitting material facts can damage credibility.

When legal help is urgent

Seek prompt assistance from a Philippine lawyer when:

Transfers are still moving or assets may be dissipated;
The loss is substantial or involves several victims;
The suspect is abroad, unidentified, or using layered accounts;
The transaction involves cryptocurrency, investment solicitation, corporate structures, forged documents, or public officials;
You may need court-ordered preservation, disclosure, attachment, or injunctive relief;
A prescriptive period may be close;
You have received a subpoena, countercharge, settlement, quitclaim, or affidavit for signature;
A prosecutor has dismissed the complaint and a review deadline may be running;
The same facts may support both criminal and civil proceedings; or
There are threats, stalking, blackmail, or immediate physical danger.

For immediate danger, call 911 or go to the nearest police station. Persons who cannot afford private counsel may inquire with the Public Attorney’s Office, subject to its legal and indigency requirements.

Frequently asked questions

Can I file estafa if I know only the scammer’s username or account number?

You may report the incident and provide every available identifier, but identifying the responsible person is necessary for a sustainable prosecution. Investigators may use lawful processes to obtain records. Do not assume that the registered account holder is necessarily the person who devised or knowingly participated in the fraud.

Should I report first to the bank or to the police?

If money has just been transferred, contact the bank, e-wallet, card issuer, or remittance company immediately because recovery options may narrow quickly. Preserve the reference number, then report to law enforcement without unnecessary delay. These steps serve different purposes and may be pursued in close succession.

Is a police blotter enough?

No. It documents the report but does not necessarily commence preliminary investigation or place a criminal case before a court. Ask whether you must submit a sworn complaint-affidavit to the prosecutor or complete further investigative requirements.

Is a demand letter always required?

Not in every form of estafa. It can be important evidence, particularly where the allegation involves failure to account for or return property received under an obligation to deliver or return it. Whether it is legally necessary depends on the specific offense and evidence.

Can the accused avoid the case simply by refunding the money?

Not automatically. Repayment may affect the civil liability, evidence, settlement decisions, or penalty-related considerations, but it does not by itself extinguish criminal liability for an offense already committed.

Can I recover attorney’s fees, interest, and emotional-distress damages?

Only when a legal basis exists and the amounts are properly pleaded and proved. Actual loss should be documented. Other damages, interest, and attorney’s fees are not automatic, and filing fees may apply to certain damages claims.

What if the prosecutor dismisses the complaint?

Obtain the written resolution immediately. The available remedy and deadline depend on the office and procedure involved. A motion for reconsideration or petition for review may be possible, but strict filing and service requirements can apply. Consult counsel promptly rather than relying on an informal request to reopen the matter.

Will winning the case guarantee collection?

No. A judgment establishes liability, but actual recovery may still depend on locating non-exempt assets and completing execution procedures. Evaluate collectability early and use only lawful asset-tracing and enforcement methods.

Official legal references

Revised Penal Code, particularly Articles 90, 91, and 315
Republic Act No. 10951, updating value thresholds and penalties
Revised Rules of Criminal Procedure, Rules 110–127
DOJ Department Circular No. 15, series of 2024
Cybercrime Prevention Act of 2012
Local Government Code, particularly Sections 408–412
Supreme Court Small Claims resources
NBI complaint and investigative services

This article provides general legal information, not legal advice or a prediction of any case’s outcome. The proper charge, venue, deadline, and recovery strategy depend on the complete facts and documents. Legal sources and official procedures were checked as of September 15, 2026.