Quick answer

If you suspect fraud or estafa, act immediately. Contact the bank, e-wallet, remittance company, marketplace, or payment provider through its official fraud channel; ask that the transaction be marked disputed and that remaining funds be preserved or held; secure your accounts; save the reference number; and report the incident to the police, the National Bureau of Investigation, or the appropriate prosecutor’s office.

Recovery is possible, but it is not automatic. It may come through a reversal or refund by a financial institution, restitution or damages in a criminal case, an independent civil action, a regulatory proceeding, or enforcement of a settlement. The best route depends on how the money was obtained, where it went, who received it, whether any funds or assets remain, and what the available records can prove.

Do not send an additional “release,” “verification,” “tax,” or “recovery” payment. Scammers commonly demand more money after the first loss or pose as investigators, lawyers, bank employees, or recovery agents.

When suspected fraud may be estafa

Article 315 of the Revised Penal Code punishes several forms of swindling. Broadly, estafa involves fraud that causes measurable damage to another person through either:

Abuse of confidence, such as misappropriating money or personal property received in trust, on commission, for administration, or under an obligation to deliver or return it; or
False pretenses or fraudulent acts, such as using a false identity, falsely claiming qualifications, authority, property, credit, business, or influence, or making another material misrepresentation to obtain money or property.

The precise elements depend on the paragraph of Article 315 charged. For estafa by false pretenses, the prosecution ordinarily must establish that the material deceit existed before or at the time the victim parted with money or property, that the victim relied on it, and that the deceit caused damage. For misappropriation or conversion, the prosecution must establish the qualifying receipt of the property, conversion or denial of receipt, resulting injury, and the legally relevant circumstances surrounding demand. The Supreme Court discusses these distinctions in Velayo v. People.

The current value thresholds and penalties under Article 315 were adjusted by Republic Act No. 10951. The possible penalty depends on the particular mode of estafa, the amount of fraud, and any applicable special law. The amount should therefore be stated and documented accurately rather than estimated.

Not every unpaid obligation is estafa

A broken promise, unpaid loan, delayed delivery, failed business, or breach of contract is not automatically criminal fraud. A person’s later inability or refusal to pay does not, by itself, prove that the person used deceit at the beginning of the transaction.

Facts that may distinguish possible estafa from an ordinary civil dispute include:

A false identity, forged document, fictitious business, nonexistent property, or fabricated transaction;
A knowingly false claim made to induce payment;
Concealment of a material fact when there was a duty to disclose it;
Money or property received for a specific purpose and then diverted despite an obligation to return or deliver it;
Multiple victims subjected to the same representations or payment instructions; or
Conduct before and immediately after payment showing that the promised transaction may never have been genuine.

The classification remains fact-sensitive. Contracts, messages, advertisements, account records, and the sequence of events often matter more than the label placed on the transaction by either side.

Online and financial-account scams may involve additional laws

When fraud is committed through a computer system, social-media account, messaging service, website, electronic payment channel, or similar technology, the same conduct may also fall under the Cybercrime Prevention Act of 2012. Section 6 generally provides for a penalty one degree higher when a crime under the Revised Penal Code or a special law is committed by, through, and with the use of information and communications technology.

The Anti-Financial Account Scamming Act, or Republic Act No. 12010, separately addresses acts involving financial accounts, including money-mule activity, social-engineering schemes, buying or selling accounts, and opening an account under a fictitious name or another person’s identity.

Under that law:

Covered institutions may temporarily hold funds involved in a disputed transaction, subject to Bangko Sentral ng Pilipinas rules and a statutory maximum of 30 calendar days unless a competent court extends the hold;
Institutions and account owners involved must undertake coordinated verification;
An institution may be liable for restitution when the statutory requirements for liability are met; and
A criminal conviction is not always a prerequisite to institutional restitution under the law.

These provisions do not guarantee that transferred funds will still be present or that every reported transaction will be frozen or refunded. Speed and complete transaction details are critical.

Other laws may apply to particular schemes, including the Securities Regulation Code for unlawful investment solicitations, the Access Devices Regulation Act for payment-card or access-device offenses, the Anti-Money Laundering Act, the Consumer Act, and laws governing particular regulated businesses.

What to do immediately

1. Contact the financial institution first

Use only the phone number, app, website, branch, or email published by the bank or payment provider. Report both the sending and receiving accounts if known.

Ask the institution to:

Mark the transfer or charge as disputed or fraudulent;
Trace the destination and identify any transaction reference numbers;
Preserve account, device, access, and authentication records;
Coordinate with the receiving institution;
Apply any available temporary hold, chargeback, recall, reversal, or account-protection process;
Secure or temporarily restrict your compromised account; and
Give you a written complaint or case-reference number.

A transfer described as “authorized” because the victim personally entered a one-time password is not necessarily the end of the inquiry. Explain exactly how consent or credentials were obtained—for example, through impersonation, account takeover, remote-access software, a fake login page, or social engineering.

The BSP advises consumers to report suspicious transactions immediately to the concerned bank or e-money issuer. If the institution’s response is unsatisfactory, the complaint may be elevated through the BSP’s official fraud-reporting and consumer-assistance channels. The BSP generally requires the institution’s complaint-reference number first.

2. Secure affected accounts and devices

Change passwords using a device you reasonably believe is safe. Sign out other sessions, enable multi-factor authentication, remove unknown devices, and contact your mobile provider if a SIM swap is suspected. Review linked email, banking, e-wallet, marketplace, and social-media accounts.

Do not erase the affected phone, reset it, delete conversations, or uninstall relevant applications until important evidence has been preserved. If remote-access or malicious software may be present, disconnect the device from the internet and obtain qualified technical assistance.

3. Report the incident to law enforcement

Depending on the facts, a report may be made to:

The local Philippine National Police station;
The PNP Anti-Cybercrime Group for technology-enabled fraud;
The NBI, including its cybercrime or anti-fraud personnel; or
The city or provincial prosecutor’s office for the filing of a criminal complaint.

A police blotter or incident report documents the report but is not necessarily the criminal complaint that begins prosecutorial proceedings. Ask what additional sworn complaint, affidavits, supporting documents, copies, identification, or electronic evidence the receiving office requires.

For online schemes, reporting promptly also gives investigators a better chance to request preservation of subscriber, traffic, transaction, or account records before providers delete them under ordinary retention practices.

4. Notify the appropriate regulator or platform

The additional reporting destination depends on the transaction:

For a BSP-supervised bank, e-money issuer, payment provider, or other covered institution, complain first to the institution and then use the BSP’s consumer-assistance process if needed.
For a securities offering, investment solicitation, lending company, or financing company, verify and report through the Securities and Exchange Commission.
For insurance-related conduct, contact the Insurance Commission.
For a cooperative, contact the Cooperative Development Authority when the matter falls within its jurisdiction.
For an online marketplace or social-media account, report the seller, advertisement, page, and payment account through the platform’s official process, while preserving copies first.

A regulatory report can support investigation or consumer redress, but it does not automatically replace a criminal complaint or civil action.

Evidence to preserve

Create a chronological file showing what was represented, why you relied on it, what you transferred, who received it, and what happened afterward. Preserve originals and make backups.

Useful evidence may include:

Complete chats, emails, text messages, call logs, voice messages, and video-call details;
Profile links, usernames, account IDs, phone numbers, email addresses, websites, advertisements, and QR codes;
Screenshots that show the full screen, date, time, URL, sender, and surrounding conversation;
Original electronic files or exports, not screenshots alone;
Bank statements, e-wallet histories, deposit slips, transaction receipts, reference numbers, and receiving-account details;
Contracts, invoices, acknowledgments, official receipts, promissory notes, delivery documents, and demands;
Copies of false credentials, permits, titles, certificates, investment materials, or other representations;
Names and contact details of witnesses and other victims;
Platform, bank, regulator, police, and NBI complaint-reference numbers;
Proof of attempts to verify the person or business; and
Proof of loss, consequential expenses, returned property, partial repayments, or settlements.

Keep the device on which the communication was received when feasible. Record when and how each item was obtained. Do not crop, annotate, alter, forward repeatedly, or recompress the only copy of an important file. Electronic evidence may require authentication, and metadata or surrounding context can become important.

Preparing a criminal complaint

A strong complaint-affidavit is factual, chronological, and supported by properly identified annexes. It should generally state:

The complainant’s and respondent’s identifying information, to the extent known;
Where each important act occurred;
The exact representation, act of entrustment, or other fraudulent conduct alleged;
When and how the respondent made it;
Why it was false or how entrusted property was converted;
What caused the complainant to release money or property;
The amount and destination of every payment;
The resulting loss;
Any demand and response, where relevant; and
How each attachment supports a particular fact.

Avoid exaggeration, legal conclusions unsupported by facts, or accusations against people merely because their name appears on an account. A recipient may be a perpetrator, a knowing money mule, an innocent account owner, or another victim; investigation is needed.

The governing prosecutor procedure depends on the offense and imposable penalty. The DOJ’s current framework includes its 2024 Rules on Preliminary Investigations and Inquest Proceedings and its rules on summary and expedited investigation. The prosecutor evaluates whether the evidence satisfies the governing standard for filing a case in court. A complaint does not guarantee the filing of an information or a conviction.

Venue must also be established. Under the Rules of Criminal Procedure, a criminal action is generally instituted and tried where the offense was committed or where an essential ingredient occurred. For an online transaction involving several places, venue may require careful analysis of the representations, receipt or transfer of funds, and other essential acts.

Ways to seek recovery

Reversal, recall, hold, or institutional restitution

This is usually the fastest potential route, particularly while funds remain within the financial system. Provide complete transaction information immediately and cooperate with verification requests. Obtain written results of the institution’s investigation and elevate unresolved consumer complaints to the proper regulator.

The Financial Products and Services Consumer Protection Act requires covered financial service providers to maintain a free consumer-assistance mechanism. For disputed amounts or unauthorized transactions, the provider must suspend interest, fees, and charges pending its final investigation or give a similar reasonable accommodation. Liability for the underlying loss still depends on the law, the provider’s controls and diligence, the transaction facts, and applicable regulations.

Civil liability connected with the criminal case

Under Rule 111 of the Rules of Criminal Procedure, the civil action to recover civil liability arising from the offense is generally deemed instituted with the criminal action unless the offended party waives it, reserves the right to bring it separately, or has already filed it.

The complainant should make the intended civil remedy clear and keep proof of the full loss. Restitution ordered after conviction may include the return of property or payment of the amount established by evidence, with legally recoverable interest or damages when warranted. A judgment still has to be enforced against identifiable assets; a favorable decision does not by itself create funds.

The rules can differ for offenses under special laws. For example, the civil action arising from a prosecution under the Bouncing Checks Law is governed by a specific rule that generally treats it as included with the criminal action and does not permit reservation of a separate civil action.

A separate civil action

A victim may have contractual, quasi-contractual, tort, fraud-based, rescission, collection, or other civil remedies independent of or related to the criminal case. The correct cause of action affects the evidence, filing fees, venue, prescriptive period, defenses, and recoverable relief.

Article 33 of the Civil Code recognizes an independent civil action for fraud, among other listed wrongs. Whether that remedy, a contract action, or another claim is appropriate depends on the documents and allegations. Coordination is important to avoid inconsistent positions or prohibited double recovery.

Small claims

The Supreme Court’s Rules on Expedited Procedures allow qualifying money claims of up to ₱1,000,000 to proceed as small claims in first-level courts. Covered claims include certain amounts owed under contracts of lease, loan and other credit accommodations, services, or sale of personal property, as well as qualifying barangay settlements and awards. A fraud allegation is not automatically a small-claims case; the actual source and nature of the money claim control.

Small-claims proceedings use official forms, generally do not allow lawyers to appear for the parties at the hearing, and result in a final, executory, and unappealable decision, subject to remedies allowed by law for jurisdictional error. See the Supreme Court’s official overview of the Rules on Expedited Procedures.

Attachment and asset preservation

In an appropriate civil action, a court may issue a writ of preliminary attachment on grounds stated in Rule 57—for example, in certain actions involving fraud in contracting or performing an obligation, fraudulent disposal of property, or an intent to defraud creditors. Attachment is not automatic. It requires specific facts, a proper application and affidavit, and ordinarily a bond. Wrongful attachment can create liability, so urgent legal advice is advisable before seeking it.

Do not attempt to seize property, access another person’s account, threaten exposure, or pressure relatives or employers to pay. Recovery should proceed through lawful institutional, regulatory, prosecutorial, or court processes.

Demand letters and settlement

A written demand can clarify the obligation, document refusal, and invite voluntary repayment. In some forms of estafa, demand is legally significant evidence; in others, it is not an independent element. A demand does not create criminal fraud where the original facts show only a civil debt.

A useful demand identifies the transaction, amount, supporting documents, requested action, reasonable deadline, and method of payment. Send it through a method that produces proof of delivery. Avoid threats of arrest, public shaming, violence, or disclosure of private information.

Settlement may provide quicker recovery, but it should be documented carefully. Specify the amount, dates, payment method, effect of default, treatment of property or security, and whether any release becomes effective immediately or only after full cleared payment. Accepting repayment does not necessarily erase a public offense, and an affidavit of desistance does not automatically terminate a criminal case once the State is prosecuting it.

Deadlines: do not assume you have unlimited time

Prescriptive periods vary according to the offense, imposable penalty, cause of action, date of discovery, and acts that legally interrupt prescription. Estafa penalties vary with the amount and manner of commission, so there is no single safe deadline for every estafa complaint.

Civil claims also have different prescriptive periods depending on whether they arise from a written contract, oral contract, injury to rights, fraud, or another legal source. The Financial Products and Services Consumer Protection Act contains its own rule: claims under that Act generally prescribe five years from consummation of the transaction or discovery of deceit or material nondisclosure, subject to an outside limit of ten years from the violation and special treatment for insurance contracts.

Internal deadlines for chargebacks, marketplace disputes, account-recovery requests, reconsideration, appeals, and regulatory remedies may be much shorter than court prescription. Report immediately and obtain case-specific advice rather than waiting for the longest period that might arguably apply.

Barangay conciliation may also be a precondition for some disputes between individuals who actually reside in the same city or municipality, subject to statutory exceptions. Whether it applies depends on the parties, residence, offense, relief, and urgency; it should not be assumed in a substantial or cross-border fraud case.

Common mistakes that reduce the chance of recovery

Waiting for the scammer’s promised refund before contacting the financial institution;
Paying a supposed recovery agent who guarantees a freeze, arrest, or reimbursement;
Deleting chats, resetting the phone, or keeping only cropped screenshots;
Continuing to communicate through a compromised account;
Reporting an approximate lump sum without a transaction-by-transaction schedule;
Sending original evidence without retaining a complete copy;
Naming people without explaining their individual acts;
Treating a police blotter as the completed prosecutor’s complaint;
Posting accusations, private data, or unverified identities publicly;
Signing a release, quitclaim, settlement, or affidavit of desistance before payment clears;
Filing overlapping cases without disclosing related proceedings; or
Assuming that criminal prosecution alone will locate assets or collect a judgment.

When legal help is urgent

Seek prompt advice from a Philippine lawyer, the Public Attorney’s Office if eligible, or another accredited legal-aid provider when:

A large amount or essential household or business funds are involved;
Funds are still traceable and an urgent hold, attachment, or preservation order may be possible;
The suspect is transferring, hiding, or disposing of assets;
Several victims, corporate entities, forged titles, investments, cryptocurrency, or foreign accounts are involved;
The respondent or evidence is outside the Philippines;
You received a subpoena, counter-affidavit, prosecutor’s resolution, dismissal, or court paper with a deadline;
A bank denies the claim as “authorized” despite account takeover or social engineering;
You are being threatened, extorted, stalked, or pressured to withdraw;
You are considering a settlement, release, or affidavit of desistance; or
The facts could expose you to a counterclaim or criminal allegation.

If there is an immediate threat to safety, contact emergency services or the nearest police station rather than confronting the suspected offender.

Frequently asked questions

Where should I report first?

For a bank, e-wallet, card, or remittance transaction, report first to the provider so it can trace and potentially preserve funds. Report the suspected crime to the PNP, NBI, or appropriate prosecutor as soon as possible. These steps serve different purposes and may be pursued together.

Can the bank automatically refund me?

No. A report triggers review but does not guarantee reimbursement. Refund or restitution depends on the transaction, available funds, applicable network rules, the institution’s security controls and diligence, the customer’s conduct, and laws including Republic Acts Nos. 11765 and 12010.

Is a screenshot enough?

It can help, but it is safer to preserve the complete conversation, original files, account identifiers, URLs, transaction records, device data, and proof connecting the representation to the payment. A screenshot can be challenged if it lacks context or authentication.

Do I need to know the scammer’s real name?

Not necessarily to make an initial report. Provide every available identifier, including usernames, numbers, URLs, account names, account numbers, transaction references, delivery details, and device or profile information. Identifying and linking the responsible person may require institutional records and lawful investigative process.

Is failure to repay a loan estafa?

Not by itself. The evidence must establish the elements of a recognized form of estafa or another crime. A genuine loan that later goes unpaid is generally a civil collection matter unless qualifying fraud or another criminal act can be proved.

Can I file both criminal and civil cases?

Sometimes, but the relationship between the proceedings must be handled correctly. Civil liability arising from the offense is generally included in the criminal action unless waived, reserved, or previously filed, while an independent civil action may exist on another legal basis. Obtain advice before filing parallel proceedings.

Will an affidavit of desistance end the case?

Not automatically. A criminal offense is prosecuted in the name of the People of the Philippines. A desistance may affect the available evidence or prosecutorial assessment, but it does not compel dismissal.

Can I publicly identify the suspected scammer?

Public accusations create risks involving defamation, privacy, mistaken identity, retaliation, and interference with an investigation. Give identifying material to the institution, investigators, prosecutor, regulator, and your lawyer. Publicly describe someone as a suspect only with great care and a sound factual and legal basis.

What if the scammer or receiving account is abroad?

Report locally and to the financial institution immediately. Cross-border tracing, preservation, service, and enforcement can require cooperation between providers and authorities in different jurisdictions. Recovery may be harder, but delay makes it harder still.

Official references

This article provides general legal information, not legal advice or a prediction of outcome. Fraud cases are highly fact- and document-dependent. Procedures, available remedies, and deadlines should be confirmed with the receiving institution, agency, court, or a qualified Philippine lawyer. Sources checked as of September 11, 2026.