Quick answer

If you suspect fraud or estafa, act immediately:

Contact the bank, e-wallet, card issuer, remittance company, marketplace, or payment platform and ask it to flag the transaction, secure the account, and attempt a hold, recall, or reversal.
Preserve the original messages, advertisements, account details, receipts, transaction records, contracts, and proof of the representations that caused you to part with money or property.
Report the incident to the police, the Philippine National Police Anti-Cybercrime Group, or the National Bureau of Investigation when it occurred online or through electronic communications.
Prepare a sworn, chronological complaint supported by documents and file it through the proper prosecutor’s office or other authorized filing route.
Clearly pursue recovery. Civil liability arising from the alleged offense is generally included in the criminal case unless it is waived, reserved, or was filed separately beforehand.

A report does not guarantee that funds will be recovered or that an estafa charge will be filed. Investigators and prosecutors must determine the correct offense, the responsible persons, the proper venue, and whether the evidence meets the applicable legal standard. Fast reporting materially improves the chance that accounts, platform records, and other evidence can still be traced or preserved.

What legally counts as estafa?

Article 315 of the Revised Penal Code punishes specified forms of fraud—not every dishonest transaction or unpaid obligation. The principal categories are:

Abuse of confidence, such as misappropriating or converting money or personal property received in trust, on commission, for administration, or under an obligation to deliver or return it;
False pretenses or fraudulent acts, such as using a fictitious identity or making false claims about authority, qualifications, property, credit, agency, business, or an imaginary transaction before or when the victim parts with money or property; and
Other specifically listed fraudulent means, including deceitfully inducing a person to sign a document.

The controlling text is Article 315 of the Revised Penal Code, as amended by Section 85 of Republic Act No. 10951.

The precise elements depend on the form of estafa alleged. In a common false-pretenses case, the evidence generally must show that:

the accused made a false representation or committed a fraudulent act before or at the same time as the fraud;
the victim relied on it;
that reliance caused the victim to deliver money, property, or something of value; and
the victim suffered damage or prejudice.

For misappropriation or conversion, the important questions include how the property was received, whether there was a duty to deliver or return the same property, and what later conduct proves conversion, denial of receipt, or misuse.

An unpaid debt is not automatically estafa

Failure to repay a loan, deliver an item, complete a project, or perform a contract does not by itself prove criminal fraud. A transaction may be a civil dispute if the evidence shows only later nonperformance, financial difficulty, defective work, or disagreement over contractual terms.

The criminal issue is whether there was the particular deceit or abuse of confidence punished by Article 315. For false pretenses, the deception must ordinarily have existed before or when the victim parted with the money or property. A broken promise, standing alone, does not establish that the promisor intended to defraud from the beginning.

This distinction is fact-sensitive. False documents, fictitious identities, fabricated investments, nonexistent goods, diversion of entrusted funds, repeated use of different accounts, or immediate disappearance may support an inference of fraud—but each allegation still needs admissible evidence.

Does online fraud carry different consequences?

A scheme conducted through a computer system, messaging application, website, social-media account, online marketplace, email, or other information and communications technology may implicate the Cybercrime Prevention Act.

Section 6 of Republic Act No. 10175 provides for a penalty one degree higher when a crime under the Revised Penal Code or a special law is committed by, through, and with the use of information and communications technologies. Whether this provision applies depends on how the technology was used and on the offense ultimately charged.

Other laws may also apply to particular schemes—for example, laws involving bouncing checks, unauthorized financial accounts, securities, access devices, identity information, electronic evidence, or illegal recruitment. A complainant should describe the facts fully rather than select an offense based only on a label used online.

What to do immediately after discovering the fraud

Secure your money and accounts

Contact the financial institution or platform through its verified website, app, hotline, or branch. Ask it to:

block compromised cards, accounts, devices, or credentials;
investigate and formally dispute unauthorized transactions;
flag the recipient account as reportedly connected with fraud;
attempt a hold, recall, chargeback, or reversal, if available;
preserve transaction, account-access, and recipient-identification records; and
issue a reference number and written acknowledgment.

Do not assume that deleting an app, changing a password, or reporting a social-media profile automatically disputes the payment. Follow the provider’s formal fraud procedure. If your SIM or email was compromised, secure those accounts as well and notify the relevant provider.

For a complaint involving a BSP-supervised bank, e-money issuer, payment service, financing company, or similar institution, first use the institution’s consumer-assistance mechanism. If the issue remains unresolved, review the Bangko Sentral ng Pilipinas consumer-assistance channels.

Stop further loss

Do not send “release fees,” “taxes,” “verification deposits,” “recovery charges,” or additional investments merely because the suspected fraudster promises to return the original amount. Be cautious of supposed investigators or recovery agents who contact you unexpectedly and demand advance payment.

If threats, blackmail, stalking, or danger are involved, contact the police or emergency services immediately. Do not arrange a private confrontation or attempt to seize property yourself.

Evidence to preserve

Keep the originals whenever possible. Create working copies, but do not edit, crop, annotate, or overwrite the source files.

Preserve:

the advertisement, listing, profile, page, group, website, or investment presentation;
complete conversations, including dates, times, usernames, profile links, phone numbers, and message headers where available;
emails in their original electronic format, not only screenshots;
contracts, invoices, order forms, acknowledgments, promissory notes, checks, receipts, and delivery records;
bank statements, transfer confirmations, wallet receipts, transaction IDs, QR codes, recipient names, account numbers, and reference numbers;
recordings or photographs lawfully obtained;
proof of the suspected fraudster’s identity, business address, representations, authority, or claimed registration;
demand letters and proof that they were delivered or received;
names and contact details of witnesses and other victims;
reports made to platforms, banks, police, or regulators, including ticket numbers and replies; and
a dated chronology showing each representation, payment, delivery, follow-up, and discovery of the suspected fraud.

Export chats when the platform allows it. Capture the full context rather than isolated statements. Record the exact URL before a page disappears. Back up the evidence in at least two secure locations, and retain the device on which important communications were received.

Avoid secretly entering another person’s account, guessing passwords, impersonating someone, or publishing private identifying information to collect evidence. Unlawful access or public accusations can create separate legal problems.

Where and how to report

Police, PNP Anti-Cybercrime Group, or NBI

A local police station may receive the report and begin investigation. For an internet-enabled scheme, you may also approach the PNP Anti-Cybercrime Group or the National Bureau of Investigation. The Department of Justice also maintains official information on reporting cybercrime incidents.

An incident report or blotter entry documents the report, but it is not necessarily the same as filing the sworn complaint required to begin prosecution. Ask what additional complaint-affidavit, certification, identification, and documentary requirements apply.

Office of the prosecutor

Under Rule 110, a criminal complaint is a sworn written statement charging a person with an offense. Depending on the offense and prescribed penalty, it may be filed with the proper officer for preliminary investigation, with the prosecutor’s office, or through the court route permitted by the Rules. In Manila and other chartered cities, complaints are generally filed with the prosecutor’s office unless the city charter provides otherwise. See Rules 110 to 127 of the Revised Rules of Criminal Procedure.

The complaint should identify, as far as known:

the respondent or respondents;
the acts each respondent personally committed;
the victim and the property or amount lost;
the approximate dates and relevant places;
the false representations or basis of the alleged abuse of confidence;
why the victim relied on the representations;
the connection between the conduct and the loss; and
the supporting documents and witnesses.

Use a clear chronology. Do not conceal unfavorable facts or describe assumptions as personal knowledge. If the offender used an alias or an unknown identity, provide every available identifier and explain what remains unknown.

The 2024 DOJ-NPS Rules govern preliminary investigations and inquests handled by National Prosecution Service offices. The Supreme Court has upheld their validity, including the use of the standard of prima facie evidence with reasonable certainty of conviction. That standard makes it especially important to submit a coherent, evidence-supported complaint rather than a bare accusation. See the Supreme Court’s official explanation of the ruling.

Correct place of filing

Venue is not merely a matter of convenience in a criminal case. The complaint must generally be connected to a place where the offense, or an essential ingredient of it, occurred. In an online transaction, relevant places may include where a false representation was received, where reliance occurred, where payment or delivery was made, or where another essential act happened. The correct venue depends on the evidence and the offense charged.

If the parties reside in the same city or municipality, the dispute may also raise mandatory barangay-conciliation requirements, subject to the exceptions in Sections 408 and 412 of the Local Government Code. Ask the prosecutor, barangay office, or a lawyer whether those provisions apply before treating barangay proceedings as optional.

Report to the appropriate regulator as well

A regulatory complaint may help stop continuing misconduct, but it does not replace a criminal complaint or a claim for payment.

Depending on the transaction:

Report unresolved issues involving a BSP-supervised financial service provider through the BSP consumer-assistance process.
Report suspected unregistered securities offerings or investment solicitation to the Securities and Exchange Commission Philippines.
For a consumer transaction within DTI jurisdiction, use the Department of Trade and Industry consumer-complaint channels.

Verify jurisdiction before submitting sensitive records. Use official government domains and never pay a person merely to “endorse” a complaint.

How recovery works

Civil liability in the criminal case

As a general rule, filing the criminal action also institutes the civil action to recover civil liability arising from the offense. This does not apply if the offended party:

waives the civil action;
reserves the right to file it separately; or
filed the civil action before the criminal case.

Any reservation must be made before the prosecution begins presenting evidence and under circumstances giving the offended party a reasonable opportunity to reserve. Once the criminal action has begun, a separate civil action arising from the same offense generally cannot be started until final judgment in the criminal case. If the civil action was filed first, it is ordinarily suspended once the criminal action begins, subject to the rules on consolidation and independent civil actions.

These rules—and special treatment for civil claims arising from a Batas Pambansa Blg. 22 case—appear in Rule 111 of the Revised Rules of Criminal Procedure.

State the amount of actual loss accurately and support it with records. Recovery may include restitution, reparation, or indemnification when legally established, but a judgment is not the same as immediate collection. Actual recovery depends on available assets, lawful tracing and preservation measures, defenses, priority claims, and enforcement after judgment.

A separate civil remedy may be appropriate

If the evidence supports breach of contract, collection, rescission, damages, or another civil cause of action—but not the elements of estafa—a civil case may be the proper remedy. A qualifying money claim not exceeding the current small-claims ceiling may be handled under the Revised Rules of Procedure for Small Claims Cases.

Do not file overlapping claims without considering Rule 111. Separate civil and criminal proceedings can affect timing, filing fees, evidence, and the rule against double recovery.

Preserving assets

If there is reliable information that identifiable assets are being withdrawn, transferred, concealed, or disposed of, consult a lawyer promptly about lawful provisional remedies. Rule 127 permits attachment in specified circumstances in a criminal case, including certain cases involving money or property embezzled or fraudulently misapplied by a person acting in a fiduciary capacity. Attachment is not automatic; the legal grounds, affidavit, bond, court process, and property to be reached must be properly established.

Do not file a baseless attachment application simply to pressure the respondent. Wrongful provisional measures can produce liability.

Deadlines: do not wait

Criminal and civil claims are subject to prescriptive periods. The applicable period can change according to:

the particular offense and statutory penalty;
the amount involved and mode of commission;
whether a special law applies;
when the offense was committed or discovered;
whether the offender was unknown;
what legally interrupted prescription; and
which civil cause of action is pursued.

Rule 110 states the general rule that institution of the criminal action interrupts prescription unless a special law provides otherwise. That principle does not make every police report, demand letter, platform complaint, or informal submission sufficient to interrupt every deadline.

Because classification affects prescription, do not estimate the deadline from the word “scam” or from the amount alone. Have counsel or the prosecutor examine the documents immediately—especially if substantial time has passed.

Common mistakes that weaken a case

Reporting only to the platform or barangay and assuming a criminal complaint has been filed;
Sending more money after the fraud is discovered;
Deleting chats, surrendering the only device, or keeping only cropped screenshots;
Failing to preserve proof of the specific representation that caused the payment;
Combining every loss into one unexplained total;
Naming company officers, employees, relatives, or account holders without evidence of their personal participation;
Omitting the terms of a loan, contract, refund policy, or later settlement;
Treating nonpayment alone as proof of criminal intent;
Filing in a convenient but legally incorrect place;
Signing an affidavit containing facts learned only from others without identifying the source;
Accepting a partial payment or settlement without documenting whether it is full satisfaction and what happens to pending claims; and
Publicly identifying someone as a criminal before adjudication, instead of making a factual report to the proper authorities.

When legal help is urgent

Seek individual advice promptly when:

the loss is substantial or involves several victims;
funds are still moving through identifiable accounts;
real property, vehicles, corporate assets, cryptocurrency, or overseas transfers are involved;
the respondent is leaving the country or disposing of assets;
the case may involve an investment scheme, securities, illegal recruitment, falsified documents, identity theft, or organized conduct;
a prosecutor has issued a subpoena or an order with a response deadline;
you need to decide whether to reserve or separately file the civil action;
a settlement, quitclaim, affidavit of desistance, or confidentiality agreement has been offered;
the transaction happened years ago;
the suspected offender is unknown or used layered accounts; or
threats, coercion, or retaliation have begun.

Persons who cannot afford private counsel may ask the Public Attorney’s Office about eligibility and available assistance. Acceptance depends on its governing rules, merit assessment, conflict checks, and current requirements.

Frequently asked questions

Can I file even if I know only the account number or online username?

You may report what you know and provide every available identifier. Investigators may seek records through lawful process. Do not guess the offender’s identity or accuse the registered account holder of participation without evidence; an account may have been stolen, rented, sold, or used by another person.

Is a demand letter required before filing estafa?

Not in every form of estafa. A demand may be important evidence in a misappropriation or conversion case, but it is not a universal substitute for proving conversion, deceit, reliance, and damage. Some check-related cases have their own notice requirements. Obtain advice tailored to the alleged mode of commission.

Will repayment automatically erase criminal liability?

Not necessarily. Later payment may affect the civil claim and may be relevant to the evidence, but it does not automatically extinguish a crime that was already completed. Any settlement should identify the amount paid, the remaining balance, the claims covered, and the effect intended by the parties. Only the proper authorities or court can determine the legal effect on a pending criminal case.

Can I recover directly from the bank or e-wallet?

Not simply because its system was used. Liability and reimbursement depend on such matters as authorization, security procedures, prompt notice, contractual terms, applicable financial-consumer rules, and the provider’s own conduct. File a formal dispute immediately and preserve its response.

Is a police blotter enough?

Usually not. A blotter records an incident. Prosecution generally requires a sworn complaint and supporting evidence filed through the proper legal process. Ask for the report or reference number and the next filing step.

Can several victims file together?

Victims may coordinate evidence and identify a common scheme, but each person should document their own representations, payments, reliance, and loss. Whether complaints should be consolidated or separately handled is a procedural decision for investigators, prosecutors, or the court.

Should I post the suspect’s name to warn others?

Report facts privately to authorities, regulators, financial institutions, and platforms first. Public accusations can expose personal data, compromise the investigation, alert the suspect, or create defamation and harassment risks. If a public warning is necessary, use verified facts and avoid declaring anyone guilty before judgment.

How long will the case take, and will I recover everything?

There is no dependable universal timetable or guaranteed recovery rate. Investigation, preliminary investigation, court proceedings, appeals, asset location, and judgment enforcement are separate stages. Prompt, organized evidence and early asset-preservation efforts can help, but cannot guarantee an outcome.

This article provides general Philippine legal information, not legal advice or a prediction about any case. The proper remedy depends on the communications, contracts, payment records, location of relevant acts, persons involved, and laws in force when the transaction occurred. Official sources and current procedures were checked as of 11 September 2026.