Quick answer

Republic Act No. 8484, or the Access Devices Regulation Act of 1998, punishes fraud involving credit cards, account numbers, PINs, electronic identifiers, and other means of accessing money, goods, services, or fund transfers. It covers conduct such as using a stolen or fraudulently obtained card, possessing counterfeit access devices, unlawfully keeping another person’s card details, altering sales slips, and using another person’s access device to receive value.

Estafa, meanwhile, is swindling under Article 315 of the Revised Penal Code. It generally requires fraud or abuse of confidence that causes another person measurable loss or prejudice.

The same incident may potentially violate RA 8484, the estafa provisions, or another law. Section 17 of RA 8484 expressly states that prosecution under the Act is without prejudice to liability under the Revised Penal Code or other laws. However, prosecutors must still prove every element of each charge, and constitutional protections against double jeopardy remain applicable. The correct charge depends on what was used, what the accused knew and intended, how the victim was induced to part with money or property, and what the records actually show.

A failed payment, unpaid credit-card balance, or broken promise is not automatically fraud or estafa. Criminal liability requires the elements prescribed by law, including fraudulent intent where the particular offense requires it.

What RA 8484 regulates

RA 8484 uses a broader concept than an ordinary plastic credit card. An access device may be a card, code, account number, electronic serial number, personal identification number, telecommunications identifier, or another means of account access capable of obtaining something of value or initiating a fund transfer, other than a transfer originating solely through a paper instrument.

The law also distinguishes among:

A counterfeit access device, which is counterfeit, fictitious, altered, forged, or an identifiable component of such a device.
An unauthorized access device, which includes one that is stolen, lost, expired, revoked, canceled, suspended, or obtained with intent to defraud.
An access device fraudulently applied for, meaning one obtained through falsified documents, false information, fictitious identities or addresses, or another false pretense or misrepresentation.
Device-making or altering equipment, meaning equipment designed or primarily used to make, alter, or re-encode access devices.

These definitions matter. A prosecutor cannot establish an RA 8484 violation merely by using the label “credit-card fraud.” The prosecution must identify the relevant access device, the prohibited act, and any required intent, knowledge, possession, or lack of authority.

Acts punishable as access-device fraud

Section 9 of RA 8484 contains a detailed list of prohibited acts. Among them are:

Producing, using, or trafficking in counterfeit access devices.
Trafficking in unauthorized or fraudulently applied-for access devices.
Using an unauthorized access device with intent to defraud.
Using or possessing an access device fraudulently applied for.
Possessing a counterfeit access device.
Unlawfully producing, possessing, controlling, or trafficking in device-making or altering equipment.
Inducing or allowing another person to produce, use, or traffic in prohibited access devices.
Creating multiple transaction records to make it appear that a cardholder authorized transactions that were never made.
Disclosing information imprinted on an access device without the holder’s permission.
Obtaining money or value through an access device with intent to defraud or gain and then fleeing.
Possessing another person’s access device—or a medium bearing its information—without authority.
Recording a false or deliberately altered approval number.
Altering the amount or other information on a sales slip without the holder’s authority.
Effecting transactions with access devices issued to other people in order to receive payment or another thing of value.
Unauthorized solicitation involving access devices or applications for them.
Unauthorized presentation or arrangement of transaction records for payment.

Several of these offenses are completed by possession, production, disclosure, trafficking, or another specified act. Actual withdrawal of funds or a completed purchase is not always required.

The statutory presumption of fraudulent intent

Section 14 identifies circumstances that constitute prima facie evidence that an access device or related equipment is intended to be used to defraud. These include possession or control of:

An access device without the owner’s permission or lawful authority.
A counterfeit access device.
An access device fraudulently applied for.
Device-making or altering equipment by someone whose lawful business or employment does not involve that equipment.
An access device or medium bearing access-device information outside the ordinary course of the possessor’s trade or business.
A genuine access device in another person’s name, outside the ordinary course of the possessor’s trade or business.

“Prima facie evidence” does not mean automatic guilt. It permits an inference unless adequately explained or rebutted, while the prosecution retains the burden of proving guilt beyond reasonable doubt at trial.

The 90-day credit-card presumption

RA 8484 contains a narrower rule for a cardholder who:

Abandons or surreptitiously leaves the employment, business, or residence stated in the application or credit-card records;
Fails to inform the credit-card company where the cardholder can actually be found;
Has an outstanding balance past due for at least 90 days at the time of leaving; and
Owes more than ₱10,000.

When all these statutory circumstances are shown, the cardholder is prima facie presumed to have used the card with intent to defraud.

Mere nonpayment does not, by itself, satisfy this provision. The prosecution must establish the additional facts specified in the law. The presumption also remains rebuttable—for example, through proof of notice to the issuer, an innocent relocation, billing disputes, identity theft, payment records, or other evidence inconsistent with fraudulent intent.

Penalties under RA 8484

For a first offense under Section 9(b) to (e) or Section 9(g) to (p), Section 10 generally provides:

Imprisonment of six to ten years; and
A fine of ₱10,000 or twice the value obtained by the offense, whichever is greater.

For a first offense involving the production, use, or trafficking of counterfeit access devices under Section 9(a), or unlawful device-making or altering equipment under Section 9(f), the law provides:

Imprisonment of ten to twelve years; and
A fine of ₱10,000 or twice the value obtained by the offense.

Section 10 also prescribes increased punishment for an offense committed after a prior conviction under Section 9. Sections 11 to 13 separately address conspiracy, attempted or frustrated offenses, and dealing in property known—or which should be known—to have been acquired through prohibited access devices.

The exact sentence cannot be determined from the charge alone. It may depend on the specific subsection, the stage of execution, prior convictions, applicable sentencing rules, and the facts proved in court.

What estafa means under Article 315

Estafa is not one single factual pattern. Article 315 recognizes several methods of committing it, broadly grouped into:

Unfaithfulness or abuse of confidence, including certain forms of misappropriation or conversion;
False pretenses or fraudulent acts, including specified misrepresentations and certain bad-check transactions; and
Other fraudulent means, such as inducing someone through deceit to sign a document.

Damage or prejudice to another is fundamental. The prosecution must prove the particular method alleged in the criminal charge, not simply that a transaction ended badly.

Estafa through false pretenses

For estafa based on false pretenses or fraudulent representation, the prosecution generally must establish that:

The accused made a false pretense, fraudulent representation, or similar deceit;
The representation concerned an existing fact, qualification, authority, credit, agency, business, influence, or another matter covered by Article 315;
The deceit was made before or at the same time as the victim parted with money or property;
The victim relied on it; and
The reliance caused damage or prejudice.

Timing is critical. A dishonest statement made only after the victim had already delivered the money ordinarily cannot be the deceit that induced the delivery. Likewise, failure to perform a promise does not automatically prove that the promise was fraudulent when made.

Estafa through misappropriation or conversion

For estafa under Article 315(1)(b), the prosecution generally must prove that:

The accused received money, goods, or other personal property in trust, on commission, for administration, or under an obligation to deliver or return the same;
The accused misappropriated or converted it, or denied receiving it;
The owner or another person suffered prejudice; and
Demand was made.

The nature of the obligation matters. When a person receives ownership of money under an ordinary loan, failure to repay is generally a civil matter rather than misappropriation of property received under an obligation to return the same property. By contrast, money collected for remittance or property received on commission may involve a fiduciary obligation, depending on the agreement and evidence.

Demand is often important evidence that the accused failed to account for entrusted property. But a demand letter does not, by itself, transform a civil debt into estafa or conclusively establish conversion.

Estafa involving a check

Issuing a dishonored check can raise different legal questions:

Estafa under Article 315(2)(d) may apply when the check was used to induce the victim to part with money or property and the statutory elements are established.
Batas Pambansa Blg. 22 separately penalizes the making or issuance of a check that is subsequently dishonored under the circumstances defined in that law.
A check issued only for a pre-existing obligation ordinarily could not have induced the creditor to make the original delivery, although BP 22 or civil liability may still require separate analysis.

Article 315 contains a special penalty schedule for estafa committed through postdating or issuing an unfunded check under paragraph 2(d). It is substantially heavier than the general amount-based schedule for other forms of estafa. Whether paragraph 2(d), BP 22, both, or neither applies depends on the check’s purpose, its timing, notice of dishonor, proof of deceit, and the other statutory elements.

General penalties for estafa

Republic Act No. 10951 adjusted the value thresholds in Article 315. For estafa other than the special bad-check penalty schedule, the statutory ranges are generally:

Amount of fraud	Penalty stated in Article 315
Not more than ₱40,000	Arresto mayor in its medium and maximum periods
More than ₱40,000 but not more than ₱1,200,000	Arresto mayor in its maximum period to prisión correccional in its minimum period
More than ₱1,200,000 but not more than ₱2,400,000	Prisión correccional in its minimum and medium periods
More than ₱2,400,000 but not more than ₱4,400,000	Prisión correccional in its maximum period to prisión mayor in its minimum period
More than ₱4,400,000	The statutory maximum-period and incremental rules apply, with one year added for each additional ₱2,000,000, subject to the 20-year ceiling stated in Article 315

This table does not produce the final sentence in a particular case. Courts must also consider the precise offense, applicable periods of the penalty, mitigating or aggravating circumstances, the Indeterminate Sentence Law where applicable, and controlling jurisprudence.

For estafa under Article 315(2)(d) involving a postdated or unfunded check, RA 10951 provides a separate schedule ranging from prisión mayor in its minimum period when the amount does not exceed ₱40,000 up to reclusion perpetua when the amount exceeds ₱8,800,000.

How RA 8484 and estafa differ

Question	RA 8484	Estafa under Article 315
Main subject	Access devices and related fraudulent conduct	Swindling through the particular means stated in Article 315
Is a physical credit card required?	No; codes, account numbers, PINs, and similar identifiers may qualify	No
Is completed financial loss always required?	Not for every prohibited act; some offenses concern possession, disclosure, production, or trafficking	Damage or prejudice is generally an essential element
Is deceit always the theory?	Some provisions require intent to defraud; others specify possession or conduct creating statutory inferences	The charged form must involve the deceit, abuse of confidence, or fraudulent means defined by Article 315
What determines the penalty?	The particular Section 9 offense, stage, value obtained, and prior conviction	Primarily the charged form and amount of fraud, subject to sentencing rules
Can other laws apply?	Yes; Section 17 expressly preserves liability under the Revised Penal Code and other laws	Yes, if the elements of another offense are independently present

Can one incident lead to both charges?

Potentially, but not automatically.

For example, unlawfully using another person’s account credentials may fit a prohibited act under RA 8484. If the offender also made a separate material misrepresentation that caused a victim to release money, the facts may support an estafa theory. Other incidents may involve RA 8484 but lack the reliance or damage required for estafa.

Section 17 allows prosecution under other laws, but it does not relieve prosecutors of proving each offense. Whether multiple charges or convictions are legally sustainable depends on their statutory elements, the acts alleged, the wording of the Informations, and double-jeopardy principles. Closely related offenses may also implicate rules on complex crimes, absorption, or separate acts, so conclusions should not be made without examining the complete records.

Online financial-account scams may additionally fall under the Anti-Financial Account Scamming Act, the Cybercrime Prevention Act, data-privacy laws, falsification provisions, identity-theft provisions, or other statutes. Their application must be assessed separately rather than assumed from the fact that a transaction occurred online.

What a victim should do immediately

1. Contact the bank, issuer, or financial institution

Report the loss, theft, account takeover, or disputed transaction through the institution’s official channel. Ask for:

Immediate blocking or suspension of the card or account access;
A reference or case number;
Written confirmation of the report;
Preservation of transaction, device, authentication, and communications records; and
Instructions for the institution’s dispute process.

Under Section 15 of RA 8484, a holder who learns that an access device was lost must notify the issuer of the details and circumstances. Full compliance with the issuer’s reporting procedure absolves the holder from financial liability for fraudulent use from the time the loss or theft is reported. Report promptly; do not wait for a police complaint before notifying the issuer.

For disputed electronic transfers, ask whether the temporary-hold and coordinated-verification procedures under RA 12010 and current Bangko Sentral regulations are available. Recovery is not guaranteed, particularly if funds have already been withdrawn or moved.

2. Secure every affected account

Change passwords and PINs using a trusted device. Revoke unknown sessions, remove unfamiliar devices, and enable stronger authentication. Contact the mobile provider immediately if a SIM swap is suspected.

Do not communicate through a phone number or link supplied by the suspected scammer. Use the institution’s official website, app, card hotline, or verified branch information.

3. Preserve evidence in its original form

Keep:

Account and card statements;
Transaction receipts and reference numbers;
Complete email headers where available;
Original text messages, chat threads, and call logs;
Screenshots showing usernames, dates, timestamps, URLs, and account details;
Contracts, applications, delivery records, invoices, and acknowledgments;
Copies of identification or documents submitted in the transaction;
Bank advisories, dispute forms, and written responses;
CCTV information and merchant records;
Demand letters and proof of delivery; and
A chronological account of what happened.

Do not edit screenshots, crop out timestamps, reset a relevant device, or delete messages after blocking the sender. Export chats where the platform permits it and retain the original device.

4. Prepare a factual complaint

A useful complaint-affidavit should identify the people and accounts involved, set out events chronologically, explain how the money or property was obtained, identify the false representation or unauthorized access, state the resulting loss, and attach properly labeled supporting evidence.

Avoid exaggeration. If a fact is inferred rather than personally known, say so and identify the supporting record.

5. Report to the proper authorities

Depending on the facts, reports may be made to the police, the National Bureau of Investigation, or the appropriate cybercrime unit. A criminal complaint requiring preliminary investigation is ordinarily submitted to the proper city or provincial prosecutor or other authorized prosecution office, supported by affidavits and evidence.

Venue and territorial jurisdiction can depend on where essential acts occurred, where representations were received and relied upon, where property was delivered, and where the relevant account or transaction was handled. Online communications do not make venue irrelevant.

Current rules generally require preliminary investigation for offenses carrying a prescribed penalty of at least four years, two months, and one day, regardless of the fine. RA 8484 offenses ordinarily meet that threshold. The process and filing requirements may differ for warrantless arrests, inquests, cases within special agencies, and offenses carrying lower penalties.

6. Seek civil recovery as well as criminal accountability

A criminal case may include civil liability arising from the offense, but criminal proceedings do not guarantee actual recovery. Consider whether prompt civil remedies, preservation orders, contractual claims, insurance, or the institution’s reimbursement process are also appropriate.

Deadlines and why delay is risky

Different time limits can apply to different parts of the case:

A lost access device should be reported upon knowledge of the loss. Protection under Section 15 begins from the time the loss or theft is reported in full compliance with the issuer’s procedure.
The special credit-card presumption in Section 14 requires, among other facts, a balance past due for at least 90 days and exceeding ₱10,000 at the time of the unexplained abandonment or surreptitious departure.
Bank or card-dispute procedures may have contractual or regulatory reporting periods. Check the issuer’s current rules immediately.
Criminal offenses have prescriptive periods. The applicable period and the event that interrupts prescription depend on the offense, its penalty, the governing statute, and controlling decisions.
A civil action may have a different prescriptive period from the criminal case.

Do not calculate prescription from an online summary alone. Recurring transactions, discovery of fraud, concealment, filing with the proper prosecuting authority, and the distinction between an offense under a special law and one under the Revised Penal Code may affect the analysis.

Evidence that often decides the case

The strongest evidence usually connects four questions:

Authority: Who owned the card, account, code, or identifier, and what authority—if any—did the user have?
Intent and knowledge: What shows that the accused knew the device was counterfeit, stolen, unauthorized, or fraudulently obtained?
Inducement or entrustment: For estafa, what representation caused the victim to part with property, or under what obligation was the property entrusted?
Loss and traceability: Where did the funds or property go, and what reliable records link the transaction to the respondent?

A name on a receiving account is important but may not conclusively prove who controlled the account or knew of the fraud. Conversely, the absence of a signed paper receipt does not necessarily defeat a case if authenticated electronic records, admissions, transaction logs, or other competent evidence establish the relevant facts.

Common mistakes

Treating every unpaid debt as estafa.
Assuming that dishonor of a check automatically proves estafa.
Waiting to notify the issuer while first negotiating with the suspected offender.
Sending more money for supposed “release,” “verification,” “tax,” or “recovery” fees.
Deleting messages after taking incomplete screenshots.
Posting accusations and personal information publicly, creating privacy or defamation risks.
Naming an account holder as the offender without evidence of control, knowledge, or participation.
Filing in a location with no legal connection to an essential element of the offense.
Combining separate transactions into one unexplained total.
Relying only on a demand letter instead of proving deceit, conversion, unauthorized use, or another statutory act.
Quoting obsolete estafa thresholds that were replaced by RA 10951.
Assuming that Section 17 of RA 8484 guarantees convictions under every potentially related law.

If you are accused

Do not destroy, alter, or fabricate records. Preserve proof of authority, consent, delivery, payment, account access, device ownership, employment duties, and communications with the complainant or issuer.

Read the subpoena and its attachments carefully. A preliminary investigation is a meaningful opportunity to answer the allegations with a counter-affidavit and supporting evidence; it is not yet the criminal trial. Observe the deadline stated in the subpoena or governing rules. If the allegations involve another person’s credentials, explain specifically how they came into your possession and what authority existed.

Avoid contacting the complainant in a manner that could be interpreted as intimidation, evidence tampering, or an admission. Settlement discussions should be handled carefully. Payment may affect civil exposure but does not automatically erase a completed public offense.

When legal help is urgent

Consult a Philippine lawyer promptly when:

A subpoena, warrant, freeze or hold notice, or prosecutor’s resolution has been received;
Funds are still moving through identifiable accounts;
A large number of victims or transactions is involved;
The evidence includes company systems, confidential financial records, or devices held by third parties;
Prescription or a filing deadline may be near;
The account is in another person’s name or may have been used as a “money mule” account;
The matter involves a SIM swap, identity theft, forged documents, or insider access;
The accused has been arrested or is being asked to appear for an inquest;
Multiple statutes or multiple jurisdictions may apply; or
Public accusations create safety, privacy, or defamation concerns.

A lawyer can assess the correct offense, venue, affidavit structure, preservation requests, available civil remedies, and whether immediate court or agency action is appropriate.

Frequently asked questions

Is failure to pay a credit-card bill automatically a violation of RA 8484?

No. Nonpayment alone is not enough. The prosecution must prove a prohibited act under Section 9 or establish the facts supporting a statutory inference. The special presumption for a cardholder requires all the additional conditions in Section 14, including abandonment or surreptitious departure without updating the issuer, a balance more than ₱10,000, and at least 90 days of past-due status.

Can someone be charged for merely possessing another person’s card?

Possession without the owner’s or issuer’s authority is specifically addressed by RA 8484 and may also constitute prima facie evidence of intent to defraud. The surrounding facts still matter, including consent, lawful employment, how possession occurred, and what the person did with the device.

Does RA 8484 cover account numbers and PINs?

Yes. Its definition of an access device expressly extends beyond physical cards to account numbers, PINs, electronic serial numbers, codes, and other qualifying means of account access.

Is a broken promise estafa?

Not necessarily. For false-pretenses estafa, deceit must generally precede or accompany the victim’s delivery of money or property. A later failure to perform may be evidence in context, but breach of contract alone is not automatically a crime.

Is demand always required before filing estafa?

Demand is commonly treated as an element of estafa through misappropriation or conversion and is important evidence of failure to account. Other forms of estafa have different elements. Demand should not be confused with proof of the underlying fraud.

Can an unauthorized online transfer be prosecuted even without a physical card?

Potentially, yes. A code, account number, PIN, or other account-access identifier can be an access device. RA 8484, RA 12010, the Cybercrime Prevention Act, or other laws may apply depending on the precise acts and evidence.

Can the victim recover money through the criminal case?

A court may award civil liability arising from the offense, but collection is not assured. The victim should also pursue the financial institution’s dispute process and obtain advice about available civil or provisional remedies.

Does repaying the victim automatically dismiss the case?

No. Repayment may affect the civil claim and may be relevant to the parties’ positions, but it does not automatically extinguish criminal liability for an offense already completed. The legal effect depends on the offense, timing, procedural stage, and applicable law.

Official sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Application of RA 8484, Article 315, and related laws depends on the charge, documents, transaction history, and admissible evidence. Official sources and current procedures were checked as of July 24, 2026.