Quick answer

If you suspect fraud or estafa, act immediately:

Contact the bank, e-wallet, remittance company, or payment platform and report the transaction as disputed or fraudulent. Ask it to trace, recall, restrict, or temporarily hold any remaining funds.
Secure your accounts by changing passwords, disabling compromised cards or SIMs, and notifying your mobile provider if your number may have been taken over.
Preserve the evidence before messages, profiles, advertisements, transaction records, or websites disappear.
Report the incident to the Philippine National Police, the National Bureau of Investigation, or the appropriate cybercrime unit.
Prepare a sworn complaint and supporting documents for the prosecutor’s office with territorial jurisdiction.
Plan the recovery claim carefully. Filing a criminal complaint does not guarantee repayment, and the choice between claiming civil liability in the criminal case and filing a separate civil action can affect procedure and timing.

Speed matters, especially after an electronic transfer. Under the Anti-Financial Account Scamming Act, covered financial institutions may temporarily hold funds involved in a disputed transaction, subject to Bangko Sentral ng Pilipinas rules. The statutory ceiling is 30 calendar days unless a court extends the hold. A report does not automatically reverse a transfer, however, and money already withdrawn or moved through several accounts may be difficult to recover. (lawphil.net)

When suspected fraud may be estafa

Estafa is not simply another name for an unpaid debt or a failed transaction. Article 315 of the Revised Penal Code covers several forms of swindling, including fraud through false pretenses and the fraudulent conversion of money or property received in trust, on commission, for administration, or under an obligation to deliver or return it.

Fraud through false pretenses

For estafa by deceit under Article 315(2)(a), the prosecution generally must prove that:

the accused made a false pretense or fraudulent representation about matters such as identity, authority, qualifications, property, credit, agency, business, or an imaginary transaction;
the misrepresentation was made before or at the same time the victim parted with money or property;
the victim relied on it; and
the victim suffered damage as a result.

The timing matters. A lie made only after a debt already arose ordinarily cannot be the deceit that induced the original payment. The Supreme Court has repeatedly applied these elements. (lawphil.net)

Examples that may qualify, depending on the evidence, include:

selling property that the seller knowingly does not own or has no authority to sell;
collecting investments for a fictitious project;
using a false identity or fake credentials to obtain money;
accepting payment for nonexistent goods while never intending to deliver them; or
impersonating a bank, government office, employer, relative, or legitimate business to induce a transfer.

Misappropriation or conversion

Article 315(1)(b) may apply when a person receives money, goods, or other personal property under an obligation to deliver, administer, or return the same property, but instead converts or misappropriates it to another use, denies receiving it, and causes prejudice.

The nature of the agreement is crucial. A transaction that merely creates an ordinary debtor-creditor relationship is not automatically estafa. Ownership, possession, the duty to return the same money or property, and the parties’ actual arrangement must be examined. A written demand can be important evidence of conversion or denial, although the legal effect of demand depends on the particular mode charged and the surrounding facts. (lawphil.net)

When the matter may be civil rather than criminal

The following circumstances do not, by themselves, establish estafa:

a borrower fails to repay a loan;
a customer or client does not pay an invoice;
a business closes or a project fails;
a seller delivers late;
a check is dishonored;
a contractual promise is broken; or
an investment loses money.

There must be evidence of the particular fraudulent act, deceit, abuse of confidence, or conversion required by law. Courts cannot use a criminal prosecution merely to force payment of a civil debt.

A civil claim may nevertheless exist for collection, rescission, restitution, damages, breach of contract, unjust enrichment, or another recognized cause of action. The correct remedy depends on the contract, communications, payment trail, and reason the transaction failed.

Online scams and financial-account fraud

When fraud is committed through a computer, mobile device, social-media account, messaging application, website, or other information and communications technology, the conduct may be prosecuted under the Revised Penal Code in relation to Section 6 of the Cybercrime Prevention Act. That provision generally imposes a penalty one degree higher when a crime defined by the Revised Penal Code or a special law is committed through ICT. (lawphil.net)

The Anti-Financial Account Scamming Act, or Republic Act No. 12010, separately penalizes conduct such as:

knowingly using, lending, selling, buying, renting, or recruiting another person to provide a financial account for criminal proceeds;
social-engineering schemes used to obtain sensitive identifying information or gain unauthorized account access;
opening an account under a fictitious name or another person’s identity; and
knowingly aiding, abetting, or attempting covered offenses.

The Act also provides a framework for coordinated verification among financial institutions, BSP investigation of implicated accounts, and possible restitution when an institution failed to employ adequate safeguards or the required degree of diligence. Institutional liability is fact-dependent; a victim is not automatically entitled to reimbursement for every scam. (lawphil.net)

What to do during the first hours

Report the transfer to every financial institution involved

Contact the sending bank or e-wallet through its official fraud channel. If known, also identify the receiving institution. Provide:

transaction reference number;
date, time, and amount;
sending and receiving account details;
recipient name displayed during the transaction;
a short explanation of the deception or unauthorized access; and
any police, NBI, or complaint reference number already obtained.

Request written acknowledgment and a case or ticket number. Ask whether the institution has initiated coordinated verification, a fund-recall request, or a temporary hold under applicable BSP regulations. Do not assume that a customer-service chat alone is a formal fraud report.

Never pay a supposed “recovery agent” who asks for another transfer, an OTP, a remote-access installation, or advance “release fees.”

Secure compromised access

If account takeover, phishing, or SIM swapping is possible:

change passwords using a clean device;
sign out other sessions;
revoke unfamiliar devices and connected applications;
block affected cards;
replace a compromised SIM through the telecommunications provider;
enable multi-factor authentication; and
check other accounts that used the same password or recovery email.

Do not delete the compromised account until its data has been preserved.

Evidence to preserve

Keep original electronic files whenever possible, not just cropped screenshots. Preserve:

the full conversation, including profile names, usernames, URLs, phone numbers, dates, and timestamps;
advertisements, listings, websites, QR codes, email headers, and social-media profile links;
deposit slips, transfer confirmations, bank statements, payment instructions, and transaction reference numbers;
contracts, receipts, invoices, acknowledgments, delivery records, and identification documents supplied by the other party;
recordings or call logs lawfully obtained;
written demands and proof of sending and receipt;
the financial institution’s acknowledgment, ticket number, and responses;
names and contact details of witnesses;
a chronological account of what was represented, why you relied on it, what you paid or delivered, and what happened afterward; and
proof of the resulting loss.

Export chats where the application permits it. Save copies in more than one secure location. Avoid altering filenames or editing the original files. If you prepare annotated screenshots, retain the originals as well.

Do not publicly post unverified accusations, private identification documents, account numbers, or evidence that investigators may need. Public accusations can create privacy, defamation, safety, and evidentiary problems.

Where and how to report

Bank or e-wallet

For an electronic transfer, report first to the institution through its verified hotline, application, branch, or fraud-reporting channel. This is the step most likely to preserve funds still within the financial system.

If the institution does not handle the complaint properly, use its formal consumer-assistance mechanism. Escalation to the BSP may be appropriate after following the institution’s complaint process, but a regulatory complaint is not a substitute for a criminal complaint.

PNP or NBI

For an online scam or account compromise, approach the PNP’s cybercrime unit or the NBI Cybercrime Division. For other fraudulent schemes, a police investigative unit or the NBI Fraud and Financial Crimes Division may assist.

The NBI provides an official online complaint page and publishes procedures for computer-crime assistance and fraud complaints. An online submission or police report may begin an investigation, but ask whether you must appear personally, execute a sworn statement, or submit original records. (National Bureau of Investigation)

Prosecutor’s office

A criminal case is ordinarily initiated through a sworn complaint supported by affidavits and documentary or electronic evidence. File in the proper city or provincial prosecution office, which generally depends on where the offense or any essential element occurred. Online transactions can create difficult venue questions, so obtain legal advice if the parties, accounts, communications, and loss are connected with different places.

The DOJ’s published checklist for a preliminary-investigation complaint includes an Investigation Data Form and a complaint-affidavit or sworn statement, with supporting documents and the required number of copies. Confirm the current local requirements, fees, operating hours, and electronic-filing instructions directly with the receiving office before filing. See the DOJ’s official filing requirements and forms. (doj.gov.ph)

A preliminary investigation is required when the prescribed penalty meets the threshold in Rule 112—at least four years, two months, and one day, without regard to the fine. Cases below that threshold may follow a different filing route. The applicable process depends on the offense and amount involved. (Criminal Proceedure)

If the parties reside in the same city or municipality and the offense falls within the Katarungang Pambarangay system, prior barangay conciliation may be required unless a statutory exception applies. This issue is especially relevant to lower-value allegations carrying lighter penalties. Do not assume that a barangay certificate is always required—or never required—without checking the parties’ residences, the alleged offense, and its prescribed penalty.

What a complaint-affidavit should explain

A useful complaint-affidavit should state facts, not merely conclude that the respondent is a “scammer.” It should clearly identify:

the complainant and respondent;
how they met or communicated;
the exact representations made;
when and where each material event occurred;
why the representations were false;
how those representations induced payment or delivery;
the amount or property transferred;
the receiving account and transaction details;
what happened after payment;
the demands made and responses received;
the resulting loss; and
what each attachment proves.

Number the annexes and refer to them in the affidavit. Explain gaps or inconsistencies honestly. False statements, altered screenshots, exaggerated losses, or malicious reports can expose the complainant to liability and seriously damage the case.

Penalties and amount thresholds

Republic Act No. 10951 adjusted the value thresholds used in Article 315. For the principal penalty schedule under Article 315, the relevant brackets are generally:

damage not exceeding ₱40,000;
damage exceeding ₱40,000 but not exceeding ₱1,200,000;
damage exceeding ₱1,200,000 but not exceeding ₱2,400,000; and
damage exceeding ₱2,400,000, with the law providing an incremental rule subject to a 20-year maximum.

The exact penalty cannot safely be determined from the amount alone. It may depend on the particular paragraph of Article 315, the date of the offense, aggravating or mitigating circumstances, participation, special laws, and whether ICT was used. Consult the official text of Republic Act No. 10951. (elibrary.judiciary.gov.ph)

Dishonored checks

A bounced check does not automatically prove estafa. For Article 315(2)(d), the check must generally have been issued as part of the deceit that induced the obligation, not merely as payment of an existing debt.

A separate offense may arise under Batas Pambansa Blg. 22. Among its important requirements are presentment within the statutory period, notice of dishonor, and failure to pay or arrange full payment within five banking days after receipt of that notice. Proof that the drawer actually received the notice is critical. Preserve the returned check, bank notation, written notice, and proof of delivery. See the official text of B.P. Blg. 22. (lawphil.net)

Seeking repayment or recovery

Civil liability in the criminal case

Under Rule 111, the civil action to recover liability arising from the offense is generally deemed instituted with the criminal action unless the offended party:

waives it;
properly reserves the right to file it separately; or
filed the civil action before the criminal action.

Timing is important. A reservation must be made before the prosecution starts presenting evidence and while the offended party has a reasonable opportunity to reserve. For B.P. Blg. 22, the corresponding civil action is included in the criminal action, and a separate reservation is not allowed. (Criminal Proceedure)

Separate civil action

A separate action may be appropriate when recovery should not depend solely on the criminal case, when liability rests on a contract or another source of obligation, or when an independent civil action is legally available. But once a criminal action has commenced, Rule 111 may prevent or suspend a separate civil action arising from the offense. Double recovery is not permitted.

For qualifying money claims not exceeding ₱1,000,000, the small-claims procedure may be available. Eligibility depends on the nature of the claim, not just its amount. Official forms are available through the Supreme Court’s Small Claims page. (Supreme Court of the Philippines)

Attachment and preservation of assets

In suitable cases, provisional attachment may help secure property against a future judgment, including where property was fraudulently converted, the accused is about to leave the Philippines, assets are being concealed or disposed of, or the accused resides abroad. Attachment requires compliance with procedural requirements and ordinarily involves a bond. It is not automatic upon filing a complaint. (Criminal Proceedure)

Deadlines: do not wait

Criminal and civil claims have prescriptive periods. For Revised Penal Code offenses, the criminal period depends principally on the penalty prescribed by law; Article 90 provides different periods ranging from one year for light offenses to five, ten, fifteen, or twenty years for more serious offenses. The point from which prescription runs, and events that interrupt it, can be disputed.

Civil periods vary according to whether the claim arises from a written contract, oral agreement, injury to rights, fraud, or another legal source. Online and cross-border facts may add further complications.

Because classification affects the deadline, do not estimate prescription from the amount lost or from the date you discovered a social-media post. Seek advice promptly, particularly if months or years have passed.

Common mistakes

Waiting for the scammer’s repeated promise to repay before contacting the bank.
Sending more money for supposed taxes, clearance fees, account verification, or fund release.
Treating every unpaid debt as criminal fraud.
Filing in a place with no legally sufficient connection to the offense.
Submitting cropped screenshots without profile identifiers, dates, or surrounding conversation.
Deleting chats or surrendering the only copy of a device or document.
Naming only the account holder without investigating who made the representations or controlled the proceeds.
Omitting unfavorable facts from the affidavit.
Using threats, public shaming, or unlawful access to obtain evidence.
Signing a quitclaim, settlement, affidavit of desistance, or acknowledgment of full payment without understanding its effect.
Assuming a police blotter, platform report, or bank ticket is already a prosecutor’s complaint.
Overlooking the civil claim until procedural choices have already limited the available route.

When legal help is urgent

Consult a Philippine lawyer promptly when:

a large amount or essential family funds are involved;
funds are still traceable or an institution has imposed a temporary hold;
the suspected offender is transferring, hiding, or selling assets;
several victims, companies, nominee accounts, or foreign transfers are involved;
the scam used identity theft, account takeover, forged documents, or unauthorized access;
the respondent’s identity or location is unknown;
the prosecutor dismissed the complaint or issued a resolution with an appeal deadline;
prescription may be near;
you are being pressured to sign a settlement or affidavit of desistance;
the same facts may support both criminal and civil cases; or
threats, stalking, coercion, or physical danger accompany the fraud.

If there is an immediate safety threat, contact local law enforcement or emergency services rather than confronting the suspected offender.

Frequently asked questions

Can I file an estafa case if I know only the receiving account?

You may report the incident and provide the account details, but identifying the person criminally responsible may require records from financial institutions, platforms, telecommunications providers, or other sources. The registered account holder is not necessarily the person who made the fraudulent representation, although knowingly lending or selling an account for criminal proceeds may create separate liability under Republic Act No. 12010.

Does a demand letter have to be sent first?

Not in every form of estafa. A demand is particularly important in alleged misappropriation or conversion and in dishonored-check cases, but its precise legal role varies. Use a method that produces reliable proof of content, sending, and receipt. Do not allow a demand process to consume time needed for an immediate bank or law-enforcement report.

Will filing a criminal complaint get my money back?

Not necessarily. Recovery may come from funds preserved by a financial institution, voluntary restitution, a settlement, civil liability awarded in the criminal case, a separate civil judgment, or enforcement against assets. A conviction does not itself guarantee that the offender has recoverable money or property.

Can the bank or e-wallet reverse the transfer?

Sometimes, particularly if the funds remain available and the report is made quickly. But completed transfers are not automatically reversible. The institution must follow applicable law, BSP regulations, verification procedures, and the rights of affected account holders.

Can I file both criminal and civil cases?

Possibly, but Rule 111 controls how the actions interact. The civil liability arising from the offense is ordinarily included in the criminal case unless properly waived, reserved, or previously filed. Independent or contract-based civil claims may follow different rules. Obtain advice before choosing or reserving a remedy.

What if the scammer is abroad?

Report the matter in the Philippines if an essential element occurred here, a Philippine financial account or infrastructure was used, or the victim and damage have the jurisdictional connection required by the applicable law. Cross-border evidence, service, extradition, and asset recovery can be slow and may require agency or international cooperation.

Can the parties settle?

Restitution or settlement may resolve some civil issues, but its effect on criminal proceedings depends on the offense and procedural stage. Crimes are prosecuted in the name of the People of the Philippines; a private settlement does not invariably require the prosecutor or court to dismiss the case. Have any settlement reviewed before signing, and document actual payment rather than relying on another promise.

Official legal sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Fraud cases are highly dependent on the documents, representations, timing, venue, flow of funds, and applicable charging theory. Laws and official procedures were checked against primary and government sources current as of September 22, 2026.