Quick answer

If you suspect fraud or estafa, act immediately: contact the bank, e-wallet, card issuer, or payment platform involved; ask it to secure the account, trace the transfer, and treat the transaction as disputed; preserve the evidence; and report the facts to law enforcement or the proper prosecutor’s office. Fast reporting may help prevent further transfers, but it does not guarantee that the money will be frozen or returned.

Estafa is not simply an unpaid debt, a failed investment, or a broken promise. Under Article 315 of the Revised Penal Code, the evidence must establish a legally recognized form of fraud—such as deceit used to obtain money, or the fraudulent conversion of money or property received in trust—and resulting damage or prejudice. The exact offense, filing office, procedure, and recovery route depend on how the transaction occurred and what the documents prove.

First steps after discovering the suspected fraud

1. Contact the financial institution immediately

Use the bank, e-wallet, card issuer, remittance company, or payment platform’s official fraud channel. Do not rely on a telephone number or link supplied by the suspected scammer.

Ask the institution to:

secure or temporarily restrict your compromised account;
record the transaction as unauthorized or disputed, as applicable;
attempt to trace or recall the transfer;
coordinate with the recipient institution;
preserve account, device, access, and transaction records;
give you a complaint or reference number; and
explain its written dispute and escalation process.

Under the Anti-Financial Account Scamming Act or Republic Act No. 12010, covered BSP-supervised institutions may temporarily hold funds involved in a disputed transaction. The statutory holding period may not exceed 30 calendar days unless extended by a competent court. The law also provides for coordinated verification among the institutions and account owners involved.

A hold is not automatic in every complaint. The institution must act under the law and applicable Bangko Sentral ng Pilipinas rules, and the funds may already have been withdrawn or moved. Report truthfully: knowingly making a malicious, completely unwarranted, or false report that causes funds to be held is itself punishable under the Act.

If your password, PIN, one-time password, SIM, email, or identity document may be compromised, change credentials from a trusted device and notify the relevant providers. Do not delete the compromised account before preserving its contents.

2. Stop further losses

Do not send an additional “release fee,” “tax,” “verification payment,” “AML clearance,” or “recovery fee.” A request for more money to unlock a refund is a common continuation of the fraud.

If remote-access software was installed, disconnect the affected device from the internet and seek qualified technical assistance. If a mobile number was taken over, notify the telecommunications provider. If cards or government IDs were exposed, contact the issuing institutions.

3. Preserve evidence before accounts or messages disappear

Save the material in its original form when possible. Keep copies in at least two secure locations.

Useful evidence may include:

the complete conversation, not only selected screenshots;
original emails with headers;
usernames, profile URLs, account IDs, telephone numbers, email addresses, and website addresses;
advertisements, listings, contracts, proposals, invoices, receipts, acknowledgments, and delivery records;
bank statements, transfer confirmations, QR codes, reference numbers, recipient-account details, and timestamps;
recordings or call logs lawfully obtained;
proof of what the suspect represented before you paid or transferred property;
proof that you relied on that representation;
demands for return or payment and the responses received;
proof of actual loss, related expenses, and any partial refund;
names and contact details of witnesses; and
your reports to the bank, platform, police, NBI, or other agency.

Export chats where the platform permits it. Preserve the original files and devices; avoid cropping, annotating, or repeatedly forwarding the only copy. Prepare a chronological table showing the date, event, representation made, amount transferred, recipient, and supporting exhibit.

When conduct may amount to estafa

Article 315 covers several distinct ways of committing estafa. The correct classification depends on the evidence, not the label used by the complainant.

Estafa by false pretenses or fraudulent acts

A common form involves a false representation about matters such as identity, authority, qualifications, ownership, credit, business, agency, property, or the ability to carry out a transaction.

Ordinarily, the prosecution must establish that:

the accused made a false pretense, fraudulent representation, or fraudulent act;
the deceit occurred before or at the same time as the victim parted with money or property;
the victim relied on it; and
the victim suffered damage or prejudice as a result.

A dishonest excuse invented only after a genuine transaction has failed does not necessarily prove that deceit existed when the money was obtained. Evidence of the suspect’s intention and representations at the beginning of the transaction is therefore critical.

Estafa through misappropriation or conversion

This form may arise when money, goods, or other personal property were received in trust, on commission, for administration, or under another obligation requiring delivery or return, and the recipient later misappropriated, converted, or denied receiving them, causing prejudice.

Ownership and the obligation created by the parties’ agreement matter. A demand is often important evidence that the property was not returned or accounted for, although whether demand is legally indispensable depends on the charged mode and facts.

Fraud through checks, electronic communications, or computer systems

A case involving a check may implicate Article 315, Batas Pambansa Blg. 22, or both, but each offense has different elements. A dishonored check does not by itself establish estafa. For estafa based on deceit, the timing and purpose of the check—and whether it induced the victim to part with property—are material.

If information and communications technology was used to commit a Revised Penal Code offense, Section 6 of the Cybercrime Prevention Act of 2012 may apply. The Act also separately defines computer-related fraud and computer-related identity theft. Which provision applies must be determined from the actual method used; the mere presence of messages or an online payment does not automatically prove every cybercrime element.

Phishing, account takeover, social engineering, and the use or trading of “mule” accounts may also fall under Republic Act No. 12010. Liability under one law does not necessarily exclude liability under another, but there can be no conviction without proof of the elements of each charged offense.

When the dispute may be civil rather than criminal

A person’s failure to pay a debt, return an investment, deliver goods, or fulfill a contract is not automatically estafa. Criminal fraud generally requires proof of deceit or fraudulent conversion of the kind punished by law.

Indicators that require careful legal assessment include:

the agreement was genuine when made but performance later became impossible;
the dispute concerns contract interpretation, accounting, quality, delay, or inability to pay;
business losses, rather than an initial fraudulent scheme, caused the failure;
the recipient acquired ownership of the money and merely undertook to repay it; or
the complainant cannot show what false statement induced the transfer.

Civil remedies may still be available even when the evidence does not support a criminal charge. Conversely, calling a transaction a “loan,” “investment,” or “business deal” does not prevent criminal liability if the required fraud is proven.

Where and how to report

You may initially report suspected fraud to the local police, the Philippine National Police’s appropriate investigative or anti-cybercrime unit, or the National Bureau of Investigation. For online schemes, provide electronic identifiers and transaction data as early as possible.

A police or NBI report can begin evidence gathering, but a report is not necessarily the same as a formal complaint that will support the filing of a criminal case in court. Depending on the prescribed penalty and the applicable DOJ rules, the complaint may undergo regular preliminary investigation, expedited preliminary investigation, or summary investigation before the prosecution office.

The Department of Justice’s current framework includes:

Department Circular No. 015, series of 2024, governing regular preliminary investigations and inquests for offenses within its coverage; and
Department Circular No. 028, series of 2024, governing summary investigations and expedited preliminary investigations for offenses within its coverage.

The Supreme Court recognized the DOJ’s authority to issue the 2024 rules in A.M. No. 24-02-09-SC. It later upheld Department Circular No. 015 in Meking v. Remulla, G.R. No. 280455.

Because the applicable process turns on the offense and prescribed penalty, do not rely on older descriptions stating that every case punishable by at least four years, two months, and one day follows the same Rule 112 procedure. The DOJ-NPS rules now control investigations conducted by DOJ prosecutors to the extent recognized by the Supreme Court.

Preparing the complaint

A formal complaint commonly requires a sworn complaint-affidavit, witness affidavits, and supporting documents. It should clearly state:

who committed or participated in the acts;
what each person said or did;
when and where each material act occurred;
how the representation was false or how property was converted;
why you relied on the representation;
the amount or property lost;
the accounts or devices used; and
how every attached exhibit supports the narrative.

Identify a respondent accurately. If the real identity is unknown, provide every available identifier and explain how it relates to the transaction. Do not accuse an account holder merely because money passed through the account without stating evidence of that person’s participation or knowledge.

Follow the prosecution office’s current requirements for copies, annex marking, oath, identification, service information, and electronic or physical submission. Filing practices can differ by office and type of investigation, so confirm them directly with the office that has territorial authority.

Venue matters

Under Rule 110 of the Revised Rules of Criminal Procedure, a criminal action is generally instituted and tried where the offense was committed or where any essential ingredient occurred. For estafa, relevant places may include where the deceit was made, where the victim relied and parted with money or property, or where damage occurred—but the correct venue depends on the charged mode and provable facts.

The victim’s residence, standing alone, is not always enough. Online and cross-border facts may raise additional jurisdictional questions. Filing in the wrong locality can delay or defeat the case, so state the location of each essential event and seek legal advice where the connections are uncertain.

Seeking recovery of the money or property

Recovery through the criminal case

As a general rule, when a criminal action is instituted, the civil action to recover civil liability arising from the offense is deemed instituted with it. Under Rule 111, this does not apply if the offended party:

waives the civil action;
reserves the right to file it separately; or
filed the civil action before the criminal action.

A reservation must ordinarily be made before the prosecution begins presenting evidence and while the offended party has a reasonable opportunity to reserve. Special rules apply to prosecutions under Batas Pambansa Blg. 22, where the corresponding civil action is deemed included and a separate reservation is not allowed.

Potential recovery may include proven restitution, reparation, or indemnification. Other damages require a proper legal and evidentiary basis. A conviction is not a guarantee of prompt collection: assets must still be found and the judgment enforced.

The offended party may, through counsel, intervene in the prosecution when the civil action is included. Rule 127 also allows applicable provisional remedies. Preliminary attachment may be available in specified circumstances, including certain claims involving fraudulently misapplied property, concealment or disposal of assets, risk of flight, or a defendant residing outside the Philippines. Attachment is a court remedy with procedural requirements and possible bond consequences; it should not be attempted without legal advice.

A separate civil action

A separate civil case may be appropriate when recovery rests on a contract, loan, unjust enrichment, quasi-delict, or another source of obligation rather than—or in addition to—civil liability arising from the crime. The effect of a pending criminal action, any required reservation, possible suspension, filing fees, jurisdiction, and the rule against double recovery must be assessed first.

The burden of proof in an ordinary civil case is generally preponderance of evidence, while a criminal conviction requires proof beyond reasonable doubt. An acquittal does not invariably dispose of every civil claim, but the language and basis of the judgment matter. Rule 111 provides that civil liability based on the offense is extinguished when a final criminal judgment finds that the act or omission from which it could arise did not exist.

Recovery from a financial institution

Republic Act No. 12010 provides that a covered institution may face restitution liability when it fails to employ adequate risk-management systems and controls or fails to exercise the legally required degree of diligence in preventing loss arising from offenses under that Act. It also states that conviction is not a prerequisite to such restitution.

This does not make every scam loss automatically refundable. The result may depend on whether the incident falls within the Act, the institution’s controls, the account owner’s acts, BSP regulations, and the evidence produced during verification. Use the institution’s internal complaint process and retain its final response. Complaints involving financial products or services may also be pursued through the applicable consumer-assistance process under the Financial Products and Services Consumer Protection Act and regulator rules.

Deadlines and prescription

Do not delay on the assumption that all fraud cases have the same filing period.

For offenses under the Revised Penal Code, Articles 90 and 91 govern prescription. The period depends principally on the penalty prescribed for the particular offense. Article 315’s penalties vary according to the mode of estafa and, in relevant cases, the amount of fraud, as adjusted by Republic Act No. 10951. Cybercrime or another special law may change the applicable offense, penalty, or prescription analysis.

Article 91 generally starts the period from discovery of the crime by the offended party, authorities, or their agents and provides for interruption upon the filing of the complaint or information. Current rules and decisions should be applied to determine what filing interrupts prescription in the particular proceeding.

Civil actions have separate prescriptive periods based on the source of the claim—for example, a written contract, oral contract, injury to rights, fraud, or civil liability arising from an offense. Discovery rules, demand, acknowledgment of debt, prior proceedings, and other facts may affect computation.

Because a mistaken classification or filing in the wrong office may consume valuable time, have prescription assessed promptly using the original documents and exact dates.

Common mistakes that weaken a complaint

Treating every unpaid obligation as estafa without identifying deceit or conversion.
Describing conclusions—“scammer,” “fake,” or “stole”—instead of the specific acts and representations.
Omitting what was said before the victim transferred money.
Filing in a locality with no provable connection to an essential element.
Supplying screenshots without the account identifiers, dates, full thread, or transaction records.
Editing, cropping, deleting, or losing the original electronic evidence.
Naming a company, director, employee, or recipient-account owner without facts showing personal participation.
Exaggerating the amount or concealing refunds, earnings, deliveries, or prior dealings.
Publicly posting accusations that could create privacy, defamation, or evidentiary problems.
Signing a quitclaim, settlement, acknowledgment, or waiver without understanding its effect.
Assuming a police blotter, bank ticket, or platform report automatically files the prosecutor’s complaint.
Waiting for the suspect’s repeated promises until evidence disappears or prescription becomes an issue.
Paying an unverified “asset recovery agent” who promises a guaranteed freeze or refund.

When legal help is urgent

Consult a Philippine lawyer promptly if:

a large amount or essential family funds are involved;
the transaction is ongoing or funds may still be traceable;
the suspect is disposing of assets, leaving the country, or threatening witnesses;
several victims, corporations, foreign accounts, cryptocurrency, or layered transfers are involved;
you must choose whether to include, reserve, or separately file the civil action;
preliminary attachment or another urgent court remedy may be needed;
the prosecutor dismisses the complaint or an appeal or motion deadline is running;
you are asked to sign a settlement, quitclaim, affidavit of desistance, or confidentiality agreement;
you have been accused of acting as a money mule or allowing your account to be used;
the disputed transaction resulted from account takeover, identity theft, or a security failure;
the victim is a senior citizen or otherwise vulnerable; or
you face retaliation, coercion, stalking, or a credible threat of violence.

For immediate danger, contact local law enforcement or emergency services. Do not personally confront a suspected fraud group or attempt to seize property.

Practical case checklist

Before filing, try to assemble:

a one- to two-page chronological statement;
a spreadsheet or table reconciling every payment, refund, and outstanding loss;
the respondent’s known identifiers and addresses;
sworn statements from witnesses with personal knowledge;
original agreements and communications;
certified or institution-issued transaction records where obtainable;
written demands and proof of delivery;
bank or platform complaint numbers and responses;
proof connecting each respondent to the deceit, account, property, or conversion;
a list of potential evidence held by third parties; and
a clear statement of the recovery requested.

Keep the facts consistent across the bank dispute, police report, complaint-affidavit, and civil claim. If new information corrects an earlier statement, disclose and explain the correction instead of silently changing the narrative.

Frequently asked questions

Can I file estafa if the suspect has not repaid me?

Possibly, but nonpayment alone is insufficient. The evidence must establish the elements of a particular form of estafa, including the required deceit or fraudulent conversion and resulting prejudice.

Is a demand letter required?

It depends on the theory of liability. A demand can establish notice, failure to return or account for property, default, and the amount claimed. In some forms of estafa it is important evidence rather than a universal statutory element. Obtain advice before delaying a criminal complaint merely to wait for a demand period.

Will filing a complaint automatically freeze the recipient’s account?

No. Report immediately to the institution and law enforcement. A financial institution may hold disputed funds under Republic Act No. 12010 and BSP rules, while longer restraint or other action may require legal authority. Recovery becomes less likely once funds leave the financial system.

Can I report an online seller who stopped responding?

Yes, you may report the facts, but criminal liability depends on proof that the seller used deceit or another punishable method. Non-delivery caused by a genuine commercial dispute, delay, or breach is not automatically estafa.

What if I voluntarily sent the money?

Voluntary authorization of the transfer does not necessarily defeat an estafa complaint if deceit induced it. It may, however, affect an unauthorized-transaction claim against the financial institution. State exactly how the transfer occurred and who entered each credential or confirmation.

Can I recover even if the accused is acquitted?

Sometimes. The result depends on the basis of acquittal, the court’s ruling on civil liability, and whether a claim exists from another source of obligation. A final finding that the underlying act or omission did not exist extinguishes the civil action based on the offense.

Can the parties settle an estafa case?

They may settle the civil liability, subject to the terms and applicable law. Because estafa is generally a public offense prosecuted by the State, payment, compromise, or an affidavit of desistance does not automatically require dismissal of the criminal case. Never sign a settlement without specifying payment dates, default consequences, releases, and the treatment of pending cases.

What if the scammer used another person’s account?

Include the recipient-account details and evidence, but do not assume the named account owner designed the fraud. Republic Act No. 12010 penalizes specified money-muling activity when its knowledge and purpose requirements are met. Investigators must determine whether the account owner knowingly participated, was deceived, or was also a victim.

Should I post the suspect’s name online to warn others?

Give evidence to the proper institutions and authorities first. Public accusations may expose personal data, alert suspects, compromise an investigation, or create legal risk if statements are inaccurate. If a public warning is necessary, obtain advice and use verified, restrained language.

Official legal sources

This article provides general legal information, not legal advice or a prediction of outcome. Estafa, cybercrime, venue, prescription, provisional remedies, and recovery depend on the documents and complete facts. Consult a Philippine lawyer or the appropriate government office about a specific case. Sources and procedures checked as of 14 September 2026.