Quick answer

To file an estafa or fraud complaint in the Philippines, prepare a detailed complaint-affidavit and attach admissible evidence showing how the respondent deceived you or misappropriated property entrusted to them, how you relied on the act, and what loss or prejudice resulted. File it with the Office of the City or Provincial Prosecutor that has territorial jurisdiction. You may first seek investigative assistance from the police, the NBI, or their cybercrime units, especially when the offender’s identity or digital trail must be established.

A failed investment, unpaid debt, breached contract, or broken promise is not automatically estafa. The evidence must establish every element of a specific offense—not merely that money remains unpaid. Prosecutors under the National Prosecution Service presently apply the standard of prima facie evidence with reasonable certainty of conviction, meaning the available evidence must be admissible, credible, preservable, and capable of proving all elements and identifying the offender. The Supreme Court upheld this prosecutorial standard in Meking v. Remulla, G.R. No. 280455, November 11, 2025.

First determine what kind of fraud occurred

“Fraud” is a broad description, not always the precise offense to charge. The facts may constitute estafa under Article 315 of the Revised Penal Code, another form of deceit under Article 318, computer-related fraud, identity theft, falsification, illegal recruitment, syndicated estafa, securities fraud, or another special-law offense.

Common forms of estafa include the following.

Estafa through false pretenses

This generally involves:

A false representation concerning identity, authority, qualifications, property, credit, agency, business, or an imaginary transaction;
The representation being made before or at the same time the victim parted with money or property;
Reliance by the victim on that representation; and
Resulting damage or prejudice.

Examples may include taking payment for nonexistent goods, impersonating an authorized agent, offering a fictitious investment, or falsely claiming ownership or authority to sell property.

The timing matters. A lie made only after the victim had already transferred the money ordinarily cannot be the deceit that induced the transfer.

Estafa through misappropriation or conversion

This may arise when a person receives money or personal property:

in trust;
on commission;
for administration; or
under another arrangement requiring its delivery or return,

and then misappropriates, converts, or denies receiving it, causing prejudice to another.

The obligation must generally involve returning or delivering the same money or property received, not merely paying an ordinary debt. Ownership, the wording of the agreement, accounting records, receipts, and the parties’ actual arrangement can determine whether the case is criminal estafa or only a civil dispute.

A prior demand is not invariably a formal element of every prosecution for misappropriation, but it can be important evidence of the duty to return, the respondent’s failure to account, and the discovery of the conversion. Preserve proof that the demand was actually received.

Estafa involving a dishonored check

A bouncing check does not automatically prove estafa. For estafa based on issuance or postdating of a check, the prosecution must establish the statutory requirements, including that the check formed part of the deceit that induced the victim to part with money or property. A check issued only for an already-existing obligation may present a different legal issue.

The same check may also require evaluation under Batas Pambansa Blg. 22. The elements, notice requirements, defenses, penalties, and civil consequences of BP 22 are distinct from estafa.

The current amount brackets and penalties under Article 315 were amended by Republic Act No. 10951. Do not rely on older templates using the former peso thresholds.

Online or technology-assisted fraud

Estafa committed through information and communications technology may also fall under Section 6 of the Cybercrime Prevention Act of 2012. Depending on the conduct, computer-related fraud, computer-related forgery, or identity theft may also be considered.

Not every online scam is technically “computer-related fraud” under Section 4(b)(2). That offense specifically concerns unauthorized input, alteration, or deletion of computer data or interference with a computer system. An ordinary deceit merely communicated through social media may instead be estafa committed through ICT. The prosecutor should determine the legally supportable charge from the evidence.

Where to file the complaint

File with the proper Office of the City Prosecutor or Office of the Provincial Prosecutor. Under Rule 110, the criminal action generally belongs in the locality where the offense was committed or where any essential ingredient occurred. Relevant places may include where:

the false representation was made or received;
the victim relied on it;
money or property was delivered;
entrusted property was required to be returned or accounted for; or
the resulting damage occurred, when legally material.

Venue is jurisdictional in criminal cases. The victim’s current residence alone does not automatically establish venue. Online transactions, transfers across several cities, overseas actors, and corporate respondents require closer analysis.

The DOJ’s filing guidance for preliminary-investigation complaints should be checked together with the current checklist of the particular prosecutor’s office. Local administrative requirements—such as copy counts, intake forms, identification, electronic copies, or document arrangement—may differ.

A police blotter or investigative report can support the case, but it is not necessarily the complaint that begins the prosecutor’s preliminary investigation. Conversely, a complainant does not always have to wait for a completed police investigation if the identities and admissible evidence are already sufficient.

For cyber-enabled cases, the NBI and PNP are designated law-enforcement authorities under Republic Act No. 10175. Their cybercrime units can assist in tracing accounts, securing technical evidence, and applying for appropriate cybercrime warrants.

What to prepare

1. A properly sworn complaint-affidavit

The affidavit should narrate the facts chronologically and from personal knowledge. Include:

the complainant’s complete identifying and contact information;
the respondent’s full name, known aliases, address, phone number, account details, and other identifiers;
when, where, and how the parties first communicated;
the exact representation, promise, or entrustment involved;
why the representation was false, or how the property was converted;
what caused the complainant to transfer money or property;
every payment or delivery, with dates and amounts;
demands, responses, admissions, excuses, repayments, or attempts to conceal the transaction;
the total documented loss; and
the role of each respondent.

Do not merely label the transaction a “scam.” State the facts that establish each element.

The affidavit must be signed and sworn before an officer authorized to administer oaths in the manner required by the applicable rules. Do not sign a jurat in advance unless instructed by the administering officer.

2. Witness affidavits

Obtain affidavits from witnesses who personally saw, heard, received, processed, or verified material facts. A witness should distinguish personal knowledge from information merely obtained from someone else.

Useful witnesses may include:

a person present during the negotiations;
the employee who released goods or funds;
the true owner or authorized representative whom the respondent impersonated;
the person responsible for company or account records; or
another victim whose evidence is independently relevant to the alleged scheme.

3. Documentary and electronic evidence

Depending on the case, attach:

contracts, purchase orders, acknowledgments, receipts, invoices, and delivery records;
bank statements, deposit slips, transfer confirmations, and official transaction references;
checks, bank return slips, and proof of notice of dishonor;
demand letters and reliable proof of receipt;
emails, text messages, chat exports, voice messages, and call records;
advertisements, listings, profiles, usernames, URLs, and account identifiers;
corporate records, authority documents, licenses, permits, or verification from the issuing agency;
proof that promised goods, property, authority, or transactions did not exist;
accounting records showing receipt, custody, shortages, and failure to remit; and
proof of actual loss or prejudice.

Number the annexes and refer to each one accurately in the affidavit. Explain what each document proves.

How to preserve digital evidence

Screenshots alone may omit account identifiers, URLs, dates, metadata, or the surrounding conversation. Preserve the strongest available version of the evidence:

Export or download the complete conversation when the platform permits.
Capture the profile, username, account URL, listing, phone number, and transaction page.
Keep original files and devices unchanged.
Preserve email headers, attachments, electronic receipts, and transaction-reference numbers.
Record the date, time, device, platform, and method used to obtain each item.
Back up the evidence in at least two secure locations.
Ask the bank, e-wallet, marketplace, or platform to preserve records and acknowledge the report.
Do not delete the conversation after blocking the account.

Computer data may be lost through retention limits or account deletion. Republic Act No. 10175 authorizes law-enforcement preservation processes, but a victim’s informal request is not the same as a statutory preservation order. Seek cybercrime assistance quickly when subscriber information, traffic data, or platform-held evidence will be needed.

Filing process

Identify the proper prosecutor’s office. Base this on where the offense or an essential element occurred, not simply convenience.
Verify the current filing checklist. Confirm office hours, required copies, identification, intake forms, and accepted filing method directly with the office.
File the sworn complaint and complete annexes. Obtain and keep the docket number, receiving copy, official acknowledgment, and contact details for status inquiries.
Comply with orders and notices. The prosecutor may dismiss an insufficient complaint at the initial evaluation stage or require the respondent to answer. If a counter-affidavit is filed, study it carefully and submit a reply only when authorized or directed.
Attend clarificatory proceedings if required. A preliminary investigation is not a full trial. The prosecutor generally evaluates affidavits and documents and may call a proceeding to clarify material issues.
Wait for the resolution. If the evidence satisfies the governing standard, the prosecutor may approve the filing of an information in court. Otherwise, the complaint may be dismissed.

The current framework for National Prosecution Service proceedings is DOJ Department Circular No. 015, series of 2024. Its evidentiary standard was upheld in Meking v. Remulla. General provisions on institution, venue, civil liability, and court proceedings remain found in the Revised Rules of Criminal Procedure, subject to later rules and issuances.

Civil recovery and the criminal complaint

A criminal complaint is not merely a collection device. Its purpose is to prosecute an offense, although civil liability arising from the alleged crime is generally deemed included in the criminal action unless it is waived, reserved, or previously filed as provided by Rule 111.

Discuss the following before filing a separate civil case:

whether civil recovery is already deemed included;
whether a separate reservation is necessary and timely;
whether attachment or another provisional remedy is available;
whether the defendant still has reachable assets; and
whether the claim also rests on a contract or another independent source of obligation.

A dismissal or acquittal does not produce the same civil consequence in every case. The result depends partly on the reason for the ruling and the legal basis of the civil claim.

Deadlines and prescription

Do not postpone filing while waiting indefinitely for repayment promises. The prescriptive period can depend on the exact offense, the penalty fixed by law, the amount involved, when the offense was discovered, and what legally interrupted prescription. Special-law offenses may follow different rules.

Demand letters, platform reports, barangay proceedings, and private settlement negotiations do not all have the same effect on criminal prescription. Obtain case-specific advice immediately if the transaction is old or a deadline may be near.

After receiving a prosecutor’s resolution or court notice, follow the remedy and deadline stated in the governing rules and the notice itself. Motions for reconsideration, DOJ review, and court remedies have different requirements; filing in the wrong forum does not necessarily stop the applicable period.

Common mistakes that weaken fraud complaints

Treating every unpaid debt or breached contract as estafa;
Failing to identify the particular false statement or act of conversion;
Omitting proof that the deceit occurred before or simultaneously with the transfer;
Submitting cropped screenshots without the account identity or complete context;
Alleging a lump-sum loss without a transaction-by-transaction computation;
Naming company officers solely because of their positions, without proving personal participation;
Filing in a locality with no legally relevant connection to the offense;
Relying on hearsay when direct witnesses or original records are available;
Altering, annotating, or repeatedly forwarding original electronic files;
Exaggerating facts or including unsupported accusations;
Assuming a demand letter automatically converts a civil dispute into a crime; and
Waiting until accounts, messages, CCTV recordings, or platform records disappear.

When help is urgent

Seek immediate assistance when:

money has just been transferred and the receiving institution may still be able to restrict or trace it;
the offender is actively soliciting additional victims;
an account, advertisement, or conversation may soon be deleted;
the respondent is leaving the country, hiding assets, or using false identities;
the case involves a large amount, numerous victims, securities, recruitment, public funds, or corporate records;
threats, extortion, identity theft, or unauthorized account access accompany the fraud;
a warrant, subpoena, prosecutor’s resolution, or court notice has already been received; or
the offense may be approaching prescription.

Report the transaction promptly to the bank, e-wallet, marketplace, or platform through its official fraud channel. Separately report unauthorized electronic transfers through the appropriate law-enforcement channel. Never pay a supposed “recovery agent” who demands another advance fee without verifiable authority.

Frequently asked questions

Do I have to send a demand letter before filing estafa?

Not in every form of estafa. A demand may nevertheless be important evidence, particularly in misappropriation cases or where it proves notice, refusal to account, or discovery of the loss. The wording and method of service should match the theory of the case.

Can I file estafa when the debtor simply failed to pay?

Usually, nonpayment alone is insufficient. You must prove the specific deceit, abuse of confidence, misappropriation, or other fraudulent means required by law. A genuine loan ordinarily creates a civil obligation unless separate criminal elements are established.

Can I file even if I know only the scammer’s username or account number?

You may report the matter and begin evidence preservation, but identifying the person responsible is essential to prosecution. Provide every available phone number, username, URL, bank or e-wallet account, transaction reference, delivery address, IP-related record, and communication. Cybercrime investigators may need legal process to obtain subscriber information.

Is a notarized affidavit enough to win the case?

No. Notarization confirms the sworn execution of the affidavit; it does not prove that its allegations are true. The evidence must establish all elements of the offense and reliably identify the offender.

Will filing a complaint guarantee repayment?

No. Filing does not guarantee conviction, settlement, asset recovery, or payment. Recovery may depend on the criminal judgment, available assets, provisional remedies, and any separate civil cause of action.

Can several victims file together?

Potentially, particularly when they were targeted through the same operation, but each transaction and each victim’s personal knowledge must still be documented. Whether the facts constitute separate offenses, a continuing scheme, or an offense under another law requires legal evaluation.

Should I report an online scam to the police, NBI, or prosecutor?

These functions can complement one another. The PNP or NBI can investigate and preserve technical leads; the proper prosecutor evaluates and prosecutes the criminal complaint. For a recent transfer, also notify the financial institution immediately.

This article provides general legal information, not advice for a particular case. Estafa classifications, venue, prescription, evidentiary requirements, and remedies depend on the documents and facts. Controlling sources and procedures were checked as of August 25, 2026.