Quick answer

If you suspect fraud or estafa, act immediately: contact the bank, e-wallet, card issuer, or payment provider involved; ask that the transaction be treated as disputed and that remaining funds be held; secure your accounts; preserve all evidence; and report the incident to the police, the National Bureau of Investigation (NBI), or the appropriate prosecutor’s office.

To pursue criminal liability, you generally need a sworn complaint supported by documents showing how the suspect deceived you or misappropriated money or property entrusted to them—and how that conduct caused loss. A criminal complaint can also carry a claim for restitution or damages. Depending on the facts, a separate civil action, including a small-claims case for a qualifying money claim not exceeding ₱1 million, may be another route.

Reporting does not guarantee recovery. Speed matters because transferred funds may be withdrawn or moved through several accounts, electronic records may disappear, and both criminal and civil claims have prescriptive periods.

First steps after discovering the suspected fraud

1. Contact the financial institution immediately

Call the official fraud hotline or use the in-app reporting channel of every bank, e-wallet, card issuer, remittance company, or payment provider involved. Do not rely on a number or link supplied by the suspected scammer.

Provide:

The transaction date, time, amount, and reference number
Your account and the recipient account or wallet
The recipient’s displayed name and contact details
A short explanation of why the transaction was unauthorized or fraud-induced
Copies of transfer receipts, alerts, and relevant messages
Your police, NBI, or prosecutor reference number when available

Request written confirmation of your report and its case or ticket number. Ask whether the institution has sent a recall, hold, or fraud alert to the receiving institution.

Under the Anti-Financial Account Scamming Act, BSP-supervised institutions may temporarily hold funds involved in a disputed transaction under BSP rules. The statutory ceiling is 30 calendar days unless a competent court extends the hold. The law also provides for coordinated verification among the institutions and account owners involved. A hold is not automatic proof that fraud occurred, and it does not guarantee that funds still in the system will ultimately be returned.

If your password, PIN, one-time password, SIM, email, or device may have been compromised, also:

Freeze or lock affected accounts and cards
Change passwords using a clean device
Sign out other sessions
Enable multi-factor authentication
Notify your mobile provider if SIM swapping is suspected
Check for newly enrolled devices, beneficiaries, loans, or transactions
Do not erase or factory-reset the affected device before preserving evidence

2. Preserve evidence before accounts or messages disappear

Keep the original files whenever possible, not screenshots alone. Preserve:

Complete chat, SMS, and email threads with dates and timestamps
Usernames, profile links, page URLs, phone numbers, and email addresses
Advertisements, listings, proposals, contracts, invoices, and receipts
Bank statements and transaction confirmations
QR codes and recipient account or wallet details
Voice messages, call logs, meeting links, and recordings lawfully obtained
Photos or copies of IDs, permits, certificates, or documents presented to you
Courier records, delivery addresses, and tracking information
Names and contact details of witnesses and other possible victims
Demand letters, replies, refund promises, and acknowledgment of debt
The device and original electronic files, with metadata intact where practicable

Prepare a chronological table showing what was represented, when you relied on it, each payment or delivery, what happened afterward, and the resulting loss. Distinguish what you personally know from what another person told you.

Do not edit screenshots, impersonate the suspect, unlawfully access an account, or publish personal information online. Investigators may need lawful process to obtain subscriber, traffic, account, or content data.

When suspected fraud may constitute estafa

Estafa is swindling punished under Article 315 of the Revised Penal Code, as amended by Republic Act No. 10951. The label “scam” does not by itself establish the offense. The prosecution must prove the particular statutory method charged.

Two common forms are:

Estafa through deceit or false pretenses

This generally requires proof that:

The accused made a false representation or used another fraudulent means;
The deceit occurred before or at the time the victim parted with money, property, or a right;
The victim relied on it; and
The reliance caused damage.

Examples may include taking payment while falsely claiming to own property, possess authority, have a business or qualification, or be able and willing to deliver something when the surrounding evidence shows a fraudulent plan from the beginning.

A broken promise, failed investment, unpaid loan, delayed delivery, or unsuccessful business venture is not automatically estafa. If the evidence shows only a later inability or refusal to perform a genuine agreement, the dispute may be civil rather than criminal. The suspect’s intent at the relevant time must be established from admissible evidence and circumstances.

Estafa through misappropriation or conversion

This commonly arises when money, goods, or other personal property are received under an obligation to deliver them, return them, or apply them to an agreed purpose, but the recipient later misappropriates, converts, or denies receiving them, causing prejudice.

Ownership and the terms of receipt matter. Money transferred as an ordinary loan generally becomes the borrower’s property, subject to an obligation to repay; nonpayment alone ordinarily does not establish misappropriation under this form of estafa. By contrast, money received in trust, on commission, for collection, or for a specifically limited purpose may present a different issue.

A written demand and proof of receipt can be important evidence, particularly where the dispute concerns failure to account or return property. Demand is not a substitute for proving all elements, and its legal significance depends on the form of estafa alleged.

Other laws may apply

The correct charge depends on what actually happened. Possible laws include:

The Cybercrime Prevention Act, when an offense is committed through information and communications technology or involves computer-related fraud, forgery, identity theft, or unauthorized access
The Anti-Financial Account Scamming Act, which covers specified money-muling and social-engineering conduct involving financial accounts
Batas Pambansa Blg. 22 for qualifying worthless checks, subject to its own elements, notice requirements, and procedures
Securities, consumer-protection, access-device, data-privacy, falsification, or other special laws where their elements are present

An online transaction is not automatically “computer-related fraud.” Investigators and prosecutors must identify the conduct and legal provision supported by the evidence.

Where and how to report

Police or NBI

You may report to the local Philippine National Police unit or, for an online or technology-assisted incident, seek assistance from the PNP’s cybercrime unit or the NBI’s cybercrime investigators. The Cybercrime Prevention Act designates the PNP and NBI as cybercrime law-enforcement authorities.

A police or NBI report creates an investigative record but is not always the same as filing the formal complaint that begins preliminary investigation or prosecution. Ask what further affidavits, certifications, device examination, or prosecutor filing will be required.

Use only official agency contact details:

Prosecutor’s office

A criminal complaint may be filed with the proper city or provincial prosecutor’s office. Venue is fact-sensitive: it ordinarily depends on where the offense, or an essential element of it, occurred. For online and multi-location transactions, where the representations were received, where payment was made or received, where conversion occurred, and where damage was suffered may require legal analysis. Filing in the wrong place can cause delay or dismissal.

The DOJ’s official preliminary-investigation filing guidance calls for an investigation data form, a complaint-affidavit or sworn statement, witness affidavits, and supporting documents, with the required copies. Confirm the current local checklist, fees, accepted form of notarization or oath, and filing arrangements before submission.

The complaint-affidavit should clearly state:

The complainant’s and respondent’s identifying details
Each material representation or act
When, where, and how it occurred
Why it was false, unauthorized, or a misuse of entrusted property
How you relied on it
Each payment or property transfer
The amount and nature of the loss
The role of each respondent
The documents and witnesses supporting each point

Attach legible, organized annexes and identify them in the affidavit. Do not exaggerate, conceal unfavorable facts, or name account holders as conspirators without evidence of knowing participation.

The DOJ issued the 2024 DOJ–National Prosecution Service Rules on Preliminary Investigations and Inquest Proceedings. Prosecutors evaluate the evidence under those rules; filing a complaint does not mean that an information will automatically be filed in court.

Regulatory or consumer complaint

An agency complaint can support account action, consumer redress, or regulatory enforcement, but it does not necessarily replace a criminal complaint.

For a BSP-supervised bank, e-wallet, or payment provider, complain to the institution first and use the BSP consumer-assistance channels if the issue remains unresolved.
For a suspected unauthorized investment solicitation, unregistered security, or investment scheme, consult and report to the Securities and Exchange Commission.
For a consumer transaction involving a seller or service provider, the Department of Trade and Industry may have a relevant complaint process.

Verify that the entity and product fall within the agency’s jurisdiction.

Seeking return of the money or property

Civil liability in the criminal case

Under Rule 111 of the Rules of Criminal Procedure, the civil action to recover civil liability arising from the charged offense is generally deemed instituted with the criminal action unless the offended party:

Waives it;
Properly reserves the right to file it separately; or
Filed the civil action before the criminal action.

A reservation must generally be made before the prosecution begins presenting evidence and while the offended party has a reasonable opportunity to reserve. Special rules apply to cases under Batas Pambansa Blg. 22, where the corresponding civil action is deemed included and a separate reservation is not allowed.

Tell the prosecutor, and later the court, that you seek restitution and other legally supportable damages. Submit proof of the exact loss, payments recovered, consequential expenses, and ownership. Avoid double recovery: the same loss cannot be collected twice through different actions.

Acquittal does not invariably end every possible civil claim. The result depends on the basis of the judgment and the legal source of the claimed obligation. A final finding that the act or omission from which civil liability would arise did not exist can extinguish the civil action based on the offense.

Separate civil action

A separate civil case may be appropriate when the evidence establishes a debt, breach of contract, rescission, unjust enrichment, tort, or another civil cause of action even if criminal fraud cannot be proved beyond reasonable doubt. Civil cases ordinarily use the lower “preponderance of evidence” standard, but the claimant must still prove a recognized cause of action and the recoverable amount.

Procedural coordination is essential. Once a criminal action begins, a separate civil action arising from the offense generally cannot be newly instituted until final judgment; an earlier civil case may be suspended, subject to the Rules’ provisions on consolidation and independent civil actions. Obtain advice before reserving or filing separately.

Small claims

A qualifying money claim of not more than ₱1 million may be filed as a small-claims case in a first-level court under the Supreme Court’s Rules on Expedited Procedures. Small claims are intended for specified civil money demands, including certain obligations arising from contracts and other covered sources. They are not a procedure for obtaining a criminal conviction.

Lawyers generally may not appear for a party at the small-claims hearing, although a party may consult one before or after it. Decisions are final, executory, and unappealable, subject only to limited remedies recognized by law.

Before filing a civil action, check whether Katarungang Pambarangay conciliation is a mandatory precondition. Under the Local Government Code, this can apply to covered disputes between parties actually residing in the same city or municipality, subject to statutory exceptions. The rule may affect a civil money claim even when the criminal aspect is outside barangay authority.

Deadlines and prescription

Do not wait for negotiations or repeated refund promises to fail.

The prescriptive period for estafa is not one fixed number of years. It may depend on:

The specific form of estafa;
The amount involved;
The penalty prescribed by law;
Whether a special law or cybercrime provision applies;
The date of commission or discovery;
Whether the offense is continuing or complete;
The procedural act that legally interrupts prescription; and
Controlling Supreme Court rulings on the applicable procedure.

Civil deadlines also vary by the cause of action and the documents involved. Claims based on a written contract, an oral contract, injury to rights, fraud affecting consent, or another legal source may have different periods and starting points. A demand letter or private negotiation should not be assumed to stop any deadline.

Have prescription assessed promptly if the transaction is old, the suspect has disappeared, the loss is substantial, or the facts involve repeated payments over time.

Common mistakes that weaken a complaint

Reporting only to a social-media platform and not to the financial institution or law-enforcement authorities
Deleting chats, blocking the account before recording its identifiers, or resetting the device
Submitting cropped screenshots that omit dates, usernames, URLs, or surrounding context
Describing nonpayment as estafa without evidence of prior deceit or entrusted property
Failing to identify what representation caused each payment
Sending more money for a supposed refund, tax, verification, legal fee, or account release
Accepting an unverifiable settlement while allowing deadlines to pass
Filing in a place with no connection to an essential element of the offense
Naming every account holder, employee, director, or relative without evidence of personal participation
Signing a quitclaim, waiver, affidavit of desistance, or settlement without understanding its effect
Assuming that an arrest, account hold, prosecutor resolution, or conviction automatically produces payment

When legal help is urgent

Consult a Philippine lawyer promptly when:

The amount is substantial or involves many victims
Funds are still traceable and a court order may be needed
The suspect is leaving the country, hiding assets, threatening witnesses, or deleting records
Real property, corporate funds, securities, cryptocurrency, or foreign accounts are involved
The transaction may be both a civil dispute and a crime
You are approaching a possible prescriptive deadline
You are asked to sign a settlement, waiver, or affidavit of desistance
A complaint was dismissed and a motion, petition for review, or other time-limited remedy is being considered
You are the respondent and have received a subpoena requiring a counter-affidavit
The incident involves identity theft, SIM swapping, account takeover, or continuing unauthorized transactions

Those unable to afford private counsel may inquire with the Public Attorney’s Office, subject to its indigency, merit, and conflict-of-interest rules.

Frequently asked questions

Must I send a demand letter before filing estafa?

Not in every estafa case. A demand may be important evidence in misappropriation or failure-to-account cases, but it does not create criminal liability where the statutory elements are absent. The need and wording depend on the theory of the case.

Can I file if I know only the scammer’s username or recipient account?

You may report with the information available. Include all account, wallet, phone, email, profile, device, and transaction identifiers. Identifying and charging a person will still require competent evidence and, where necessary, lawful disclosure from service providers.

Is the recipient account holder automatically guilty?

No. The account may belong to the principal offender, a knowing money mule, an innocent person whose account was compromised, or someone with another explanation. Liability requires proof of the person’s acts, knowledge, and participation under the applicable law.

Can the bank or e-wallet reverse the transfer?

Possibly, particularly if funds remain available and the transaction is reported quickly, but reversal is not guaranteed. Institutions must follow applicable law, BSP rules, verification procedures, and the rights of affected account owners.

Does a police blotter start the criminal case?

Not necessarily. A blotter or incident report documents the report and may begin investigation. Formal prosecution commonly requires a sworn complaint and supporting evidence filed through the proper prosecutor or court procedure.

Can I pursue both criminal and civil remedies?

Often yes, but Rule 111 controls whether the civil claim is deemed included, reserved, separately filed, suspended, or consolidated. You cannot recover the same damages twice.

What if the suspect offers installment repayment?

A genuine settlement may aid recovery, but document it carefully. Identify the admitted amount, schedule, payment method, default terms, treatment of partial payments, and effect on pending cases. Do not assume a private agreement automatically dismisses a criminal case or preserves prescription.

Is every online scam cybercrime?

No. The facts must satisfy the elements of estafa, a Cybercrime Prevention Act offense, the Anti-Financial Account Scamming Act, or another law. Use of chat or electronic payment may affect evidence, jurisdiction, or penalties, but it does not eliminate the need to prove each element.

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Rules, filing practices, and the legal classification of conduct depend on the facts, documents, location, amount, and applicable law. Official sources were checked as of 14 September 2026.