Quick answer

If you suspect fraud or estafa, immediately contact the bank, e-wallet, remittance company, marketplace, or payment service involved and ask it to flag the transaction, preserve records, and attempt to hold or recover the funds. Then prepare a sworn, evidence-supported complaint for the appropriate police unit, the National Bureau of Investigation, or the prosecutor’s office.

Losing money does not automatically establish estafa. The evidence must show a form of fraud identified by law—such as deceit used before or when the victim parted with money, or misappropriation of property received under an obligation to deliver or return it—and resulting damage or prejudice. A mere unpaid debt, failed investment, delayed delivery, or broken promise may be civil rather than criminal unless fraudulent intent or another statutory mode of estafa can be proved.

Reporting may help investigators trace the recipient and prevent further losses, but it does not guarantee that funds will be frozen or returned. Recovery depends heavily on speed, traceable proceeds, available assets, admissible evidence, and the correct criminal or civil remedy.

Act immediately if money or account access may still be recoverable

Do these first, without waiting to complete a police affidavit:

Call the sending bank or e-wallet through its official fraud channel. Ask for an urgent fraud report, transaction recall or hold, and preservation of account and transaction records. Record the reference number, time, date, and name or identifier of the representative.
Notify the receiving institution if identifiable. Provide the transaction reference and police or complaint reference when available. Do not demand confidential information that the institution cannot lawfully disclose; investigators or courts can obtain protected records through proper process.
Secure compromised accounts. Using a clean device, change passwords, sign out other sessions, enable multi-factor authentication, block affected cards, and notify your mobile provider if a SIM takeover is possible.
Report unauthorized transactions through the provider’s dispute process. Follow the provider’s deadlines even if a criminal complaint is being prepared. A police report does not replace the provider’s internal dispute procedure.
Do not send “recovery fees.” Fraudsters frequently impersonate police officers, lawyers, regulators, hackers, or bank personnel and promise recovery in exchange for another payment.

If the provider is supervised by the Bangko Sentral ng Pilipinas, first raise the concern with the provider. An unresolved complaint may then be escalated through the BSP Consumer Assistance Mechanism. BSP assistance addresses complaints involving supervised institutions; it is not a substitute for a criminal complaint and does not decide criminal guilt.

When suspected fraud may amount to estafa

Article 315 of the Revised Penal Code recognizes several ways of committing estafa. The facts must fit a particular mode; “fraud” is not one all-purpose charge.

Estafa through false pretenses or deceit

Common examples include using a fictitious identity or falsely claiming to have authority, qualifications, property, credit, an agency relationship, a business, or a real transaction.

Generally, the evidence must establish that:

the respondent made a false pretense, fraudulent representation, or similar deceit;
the deceit occurred before or at the same time as the victim parted with money or property;
the victim relied on it; and
that reliance caused measurable damage or prejudice.

The timing matters. A lie invented only after money was received ordinarily cannot have induced the original payment. Evidence that the respondent never intended or was never able to perform—such as fabricated documents, impersonation, nonexistent inventory, simultaneous solicitations using the same false story, or immediate diversion of funds—may be important, but guilt still depends on the complete evidence.

The Supreme Court discusses these elements in decisions such as Dela Cruz-Bernabe v. People.

Estafa through misappropriation or conversion

This form may apply when money, goods, or other personal property were received in trust, on commission, for administration, or under another obligation requiring the recipient to deliver or return the same property, but the recipient instead misappropriated or converted it, denied receiving it, and caused prejudice.

Not every obligation to pay money qualifies. Ownership of money delivered under an ordinary loan generally passes to the borrower, whose obligation is to pay an equivalent amount—not to return the identical money. The wording of the agreement, the capacity in which the property was received, and the obligation to account, deliver, or return are therefore crucial.

A demand is especially useful in conversion cases because it can establish notice and refusal and may help prove misappropriation. Whether demand is legally indispensable depends on the particular mode and evidence; it should not be treated as a universal element of every estafa case.

Other statutory forms

Article 315 also covers specified conduct involving blank signatures, certain checks, inducement to sign documents, fraudulent gambling practices, and the removal, concealment, or destruction of particular records or documents. Other deceit not specifically covered by Article 315 may fall under Article 318.

The current text and amount-based penalty brackets appear in Republic Act No. 10951.

A failed deal or unpaid debt is not automatically a crime

The following facts, standing alone, do not necessarily prove estafa:

the debtor failed to pay on time;
a business later failed;
an investment lost value;
goods were defective or delivered late;
a contractor did not finish the work;
a check was dishonored; or
the parties disagree about what a contract required.

The complainant must identify evidence of the particular deceit, abuse of confidence, conversion, or other fraudulent means required by law. Criminal proceedings should not be used merely to force payment of a genuinely civil obligation.

Conversely, calling an arrangement a “loan,” “investment,” or “business loss” does not prevent prosecution when the surrounding evidence establishes the elements of estafa or another offense. The written agreement and the parties’ actual conduct both matter.

Online and technology-assisted fraud

When estafa is committed by, through, or with information and communications technology, Section 6 of the Cybercrime Prevention Act of 2012 may apply and can result in a penalty one degree higher than the penalty under the underlying law. The same incident may also involve computer-related fraud, computer-related identity theft, illegal access, falsification, or another offense, depending on the acts proved.

Online cases should be reported to a unit capable of preserving and tracing digital evidence, such as:

the PNP Anti-Cybercrime Group;
the NBI, particularly its cybercrime investigators; or
the local police, which can receive the report and coordinate with specialized units.

Do not assume that a social-media report, marketplace report, or bank dispute formally institutes a criminal action. Ask where the sworn criminal complaint must be filed and retain proof of filing.

Evidence to preserve

Keep original files and devices whenever possible. Prepare a working copy, but do not crop, annotate, enhance, or overwrite the only copy.

Preserve:

the complete message, email, and call history, including dates, times, usernames, phone numbers, email addresses, and profile links;
original emails with full headers;
transaction receipts, reference numbers, account names and numbers, QR codes, wallet addresses, and statements;
advertisements, product listings, websites, proposals, contracts, invoices, and promised returns or delivery dates;
identity documents or business records supplied by the respondent;
proof of what was false, such as confirmation from the real company, property owner, licensing body, or account holder;
proof that the representation caused the payment or transfer;
demand letters and proof of delivery or receipt;
the respondent’s replies, admissions, refund promises, or refusal to account;
names and contact details of witnesses and other victims;
proof of the loss, including the amount transferred and any amount recovered; and
device logs, login alerts, one-time-password messages, and notices of password, SIM, or account changes.

Take screenshots that show the surrounding conversation, account identifier, and timestamp—not isolated statements alone. Export chats where the platform allows it. Keep a written chronology linking each representation, payment, follow-up, and discovery of the suspected fraud.

Do not secretly access another person’s account, impersonate the respondent, publish private identifying information, or alter evidence. Give investigators the original source and explain how each item was obtained.

How to prepare and file the complaint

1. Identify the proper respondent and transaction

Collect the person’s real name if known, aliases, addresses, account identifiers, company position, and the role of each participant. If the person behind an online account is unknown, say so accurately and supply the identifiers available. Do not name account holders, employees, directors, or relatives as offenders without evidence of their participation or legally relevant responsibility.

2. Write a fact-focused affidavit

A useful complaint-affidavit should explain, in chronological order:

who made each representation;
the exact substance of the representation;
when, where, and through what medium it was made;
why it was false;
how and why you relied on it;
what money or property you delivered;
what happened to it;
when you discovered the problem;
what demands and responses followed; and
the exact loss and any partial return.

Attach clearly labeled supporting documents and authenticate them by explaining what they are, where they came from, and how you recognize them. The affidavit must be sworn before an authorized officer. False statements under oath can create separate liability.

3. File in the proper place

A police or NBI investigation can help identify suspects, trace accounts, and assemble evidence. The criminal complaint itself is ordinarily filed with the appropriate city or provincial prosecutor when prosecutor-level investigation is required. Venue generally lies where the offense or any essential ingredient occurred. For technology-assisted offenses, the Cybercrime Prevention Act contains additional jurisdictional rules.

The prosecutor—not the complainant—ultimately determines what charge the evidence supports. Court jurisdiction and the applicable DOJ investigation procedure depend on the offense and prescribed penalty.

The DOJ currently has separate rules for:

offenses carrying a prescribed penalty of six years and one day or more, under the 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings; and
offenses carrying a prescribed penalty of six years or less, under the 2024 DOJ-NPS Rules on Summary Investigation and Expedited Preliminary Investigation.

The applicable prosecutor’s office should confirm its current documentary, copy, oath, service, and filing requirements. The relevant issuances are available through the DOJ issuances page.

4. Keep proof of submission

Obtain a stamped receiving copy or official electronic acknowledgment and record the docket or case number. Monitor notices carefully. Missing a conference, clarification order, submission deadline, motion deadline, or review period may prejudice the case.

Penalties and amount thresholds

For most modes under Article 315, as amended by Republic Act No. 10951, the principal penalty bracket depends on whether the amount of fraud:

does not exceed ₱40,000;
is over ₱40,000 but not over ₱1,200,000;
is over ₱1,200,000 but not over ₱2,400,000; or
is over ₱2,400,000, with a further escalation mechanism above ₱4,400,000 and a statutory maximum of 20 years under that branch.

Article 315 contains a different, substantially heavier schedule for the check-related mode in paragraph 2(d). Technology-assisted commission may also raise the penalty under the Cybercrime Prevention Act. Syndicated or large-scale schemes involving money contributed by the public may require analysis under Presidential Decree No. 1689.

The amount alone does not determine the correct charge or final sentence. The mode of commission, date of the offense, applicable amendments, aggravating or mitigating circumstances, and rules on penalties must be examined. Penalty calculations should be left to the prosecutor, court, or counsel familiar with the full record.

Seeking repayment or damages

Civil liability within the criminal case

Under Rule 111 of the Rules of Criminal Procedure, the civil action to recover liability arising from the charged offense is generally deemed included when the criminal action is instituted, unless the offended party:

waives it;
reserves the right to file it separately; or
filed the civil action before the criminal action.

A reservation must be made before the prosecution begins presenting evidence and under circumstances giving the offended party a reasonable opportunity to reserve. Actual damages generally do not require an initial filing fee under Rule 111, while other claimed damages may have filing-fee consequences.

Recovery is not automatic upon filing a complaint. Liability and the recoverable amount must be proved, and a favorable judgment still has to be enforced against identifiable assets.

A separate civil case

Depending on the documents and facts, recovery may also be pursued through a civil action based on contract, restitution, damages, or another source of obligation. A civil case uses a different standard of proof, but its timing and relationship with a criminal case require care. A separate civil action arising from the offense may be suspended once the criminal action begins, subject to the rules on reservation, consolidation, and independent civil actions.

Do not file overlapping claims without first determining their legal basis. Double recovery for the same injury is not allowed.

Provisional attachment

When the Rule 111 civil claim is properly included in the criminal action, Rule 127 permits attachment in specified circumstances—for example, certain fiduciary conversions, concealment or disposal of property, impending flight, or residence outside the Philippines. Attachment is not automatic. It requires a proper application, factual basis, bond, and court order, and wrongful attachment can have consequences.

Urgent legal assistance is advisable if there is reliable evidence that assets are being transferred, hidden, or taken abroad.

Settlement and repayment

Repayment, restitution, or a settlement may reduce the victim’s loss, but it does not automatically erase a public criminal offense after it has been committed. Never sign an affidavit of desistance, release, quitclaim, or settlement without understanding:

whether it covers only civil claims or also expresses a position about prosecution;
whether payment is complete, conditional, or by installments;
what happens after default;
whether security is provided; and
whether the document contains inaccurate factual statements.

An affidavit of desistance does not by itself compel the prosecutor or court to dismiss a case when other evidence supports prosecution.

Time limits: do not delay

There is no single filing deadline for every fraud-related case. For Revised Penal Code offenses, prescription generally depends on the penalty attached to the offense, and Article 91 addresses when the period begins and how it is interrupted. Special laws may apply different periods or interruption rules. Civil claims have their own prescriptive periods based on whether the action arises from a written contract, an oral contract, injury to rights, fraud, or another legal source.

Determining prescription can require identifying the precise offense, applicable penalty, date of commission or discovery, concealment, filing history, and governing law. A demand letter, bank dispute, marketplace report, or informal police blotter should not be assumed to stop prescription. Seek case-specific advice promptly instead of waiting for negotiations to fail.

Common mistakes to avoid

Treating every unpaid obligation as estafa without identifying the statutory fraud.
Sending more money to unlock a refund, tax clearance, verification, or “recovery.”
Deleting or blocking the account before preserving the full conversation and identifiers.
Submitting edited screenshots without retaining the originals.
Omitting inconvenient facts, partial repayments, prior dealings, or contract terms.
Exaggerating the amount lost or naming people whose participation is unsupported.
Posting accusations and personal data publicly, creating possible privacy or defamation issues.
Assuming a police blotter, bank report, or online report is already a prosecutor’s complaint.
Waiting for the respondent’s repeated payment promises while evidence disappears or legal periods continue running.
Signing a settlement or desistance document before payment is secured and its legal effect is understood.

When legal help is urgent

Consult a Philippine lawyer promptly when:

a transfer has just occurred and significant funds may still be traceable;
there are several respondents, shell companies, recruiters, agents, or nominee accounts;
the respondent or assets may leave the Philippines;
property is being concealed, transferred, or sold;
the arrangement involves securities, pooled investments, cryptocurrency, real estate, lending, insurance, or overseas recruitment;
a corporation, partnership, estate, minor, or incapacitated person is the victim;
prescription may be near;
you are considering attachment or a separate civil action;
the prosecutor dismisses the complaint or issues an adverse resolution with a limited review period;
the respondent offers a settlement requiring a waiver or affidavit of desistance; or
you are accused of fraud and have received a subpoena, invitation, warrant, or account-freeze notice.

Those unable to afford private counsel may ask the Public Attorney’s Office about eligibility and available assistance.

Frequently asked questions

Can I file even if I know only the social-media name or account number?

You may report the incident using the identifiers available, but identifying the responsible person is necessary for effective prosecution. Preserve profile URLs, usernames, phone numbers, payment-account details, device or login notices, delivery records, and communications that can support lawful tracing.

Must I send a demand letter first?

Not in every estafa case. A demand may be highly relevant in alleged misappropriation or conversion and useful in documenting refusal, but it is not a universal prerequisite for all forms of deceit. Do not let repeated demands cause harmful delay.

Does a dishonored check automatically mean estafa?

No. Estafa involving a check has specific elements, including the purpose and timing of the check and evidence of deceit. Batas Pambansa Blg. 22 is a separate law with different elements and notice requirements. A check issued merely to pay a pre-existing obligation ordinarily raises a different estafa analysis because it did not induce the original transfer.

Can the bank reverse the transfer?

Sometimes, but no reversal is guaranteed. It depends on the payment rail, speed of reporting, available balance, account restrictions, provider rules, and lawful process. Report immediately and obtain a reference number.

Can I recover attorney’s fees, interest, or emotional-distress damages?

Possibly, but these are not automatic. The claimant must establish an appropriate legal basis and evidence, and some damages and specified claims require filing fees. The court determines what may be awarded.

What if several victims were approached using the same scheme?

Each victim should preserve and present their own evidence of representation, reliance, payment, and loss. Coordinated reporting may reveal a pattern, identify common accounts, and affect the legal analysis, but victims should not copy statements about events they did not personally witness.

Will repayment end the criminal case?

Not necessarily. Repayment can affect the civil loss and may be considered in the proceedings, but compromise of civil liability does not automatically extinguish criminal liability for a public offense.

Should I confront the suspected offender?

Preserve evidence and secure accounts first. Avoid threats, entrapment attempts, public shaming, or an in-person confrontation that could create danger or compromise an investigation. If contact is necessary for a demand or settlement, use a documented and lawful channel.

Official legal and reporting resources

Republic Act No. 10951—current Article 315 amount thresholds
Cybercrime Prevention Act of 2012
Rules 110 to 127 of the Rules of Criminal Procedure
Supreme Court E-Library
Department of Justice
Philippine National Police Anti-Cybercrime Group
National Bureau of Investigation
BSP Consumer Assistance Mechanism
Securities and Exchange Commission for investment-related reports and registration checks

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. The correct offense, venue, procedure, prescription period, and recovery strategy depend on the complete facts and documents. Sources and procedures were checked as of 11 September 2026.