A growing form of fraud in the Philippines involves text messages, chat messages, emails, and fake websites that pretend to come from courts, judges, clerks of court, prosecutors, law offices, sheriffs, or other justice-sector offices. These scams often attempt to frighten recipients into paying money, clicking malicious links, disclosing personal information, or communicating with impostors posing as court personnel.

The format varies, but the pattern is familiar: a message claims that a complaint, warrant, subpoena, summons, estafa case, cybercrime case, or “court order” has been issued against the recipient, and says that immediate payment or urgent contact is needed to avoid arrest, public posting, blacklisting, or asset freezing. In other versions, the scammer says the recipient has won or is about to lose a case, and must pay “processing fees,” “release fees,” “settlement fees,” or “notarial charges.” Some scams attach counterfeit documents bearing seals, case numbers, bar codes, or the names of real courts and real public officials.

In Philippine law and procedure, court processes are formal, structured, and governed by rules. Courts do not ordinarily begin legitimate proceedings by sending random SMS messages with payment instructions or suspicious links. Because these scams exploit fear of criminal prosecution and ignorance of judicial procedure, it is important to understand both the legal framework and the practical steps for verification and reporting.

This article explains the Philippine context, the common scam methods, the legal rules that make these schemes suspicious, the laws that may apply to offenders, and the best practices for protecting yourself and preserving evidence.

II. What These Scams Usually Look Like

Fraudsters impersonating courts typically use one or more of the following approaches:

1. Fake criminal warning texts A message claims that a complaint for estafa, cyber libel, cybercrime, online lending, bouncing checks, trafficking, or another offense has been filed. It may threaten arrest unless the recipient responds immediately.

2. Fake warrants, subpoenas, or summons The victim receives a message or attachment stating that a warrant of arrest, subpoena, summons, or notice of hearing has been issued. The document is often fake, edited, or entirely fabricated.

3. Settlement-demand scams The impostor claims to represent the court, a sheriff, or a complainant and says the case can be “settled” if the recipient pays a stated amount through e-wallet, bank transfer, remittance center, or cryptocurrency.

4. Fake eCourt or docket verification messages The victim is told to click a link to “view your case,” “verify your hearing date,” or “download the court order.” The link leads to a phishing page that steals passwords, OTPs, banking credentials, or personal data.

5. Identity harvesting The scammer asks the victim to confirm full name, address, birthday, government IDs, bank details, or selfies “for court verification.” This is often a prelude to identity theft, loan fraud, SIM registration abuse, or account takeover.

6. Spoofed institutional language The message may use legal terms such as “final demand,” “summons,” “appearance,” “warrant,” “hold departure,” “bench warrant,” “garnishment,” or “blacklist order” in order to sound official.

7. Fake use of real names and seals Scammers may copy the names of actual RTC, MTC, MeTC, MTCC, CA, or Supreme Court offices, or of real judges, lawyers, and clerks. Use of a real name does not make the message genuine.

8. Pressure and secrecy The victim is told not to tell anyone, not to contact the court directly, or to act within minutes. Pressure is a central feature of fraud.

III. Why Court-Impersonation Scams Are Legally and Practically Suspicious

The strongest defense is understanding how legitimate court action usually works.

A. Courts follow formal service rules

In the Philippines, court processes are not ordinarily served by random SMS from personal mobile numbers demanding immediate payment. Depending on the proceeding, service may be made personally, by registered mail, courier, authorized electronic means where permitted, or through other modes specifically recognized by procedural rules and court directives. Legitimate service is tied to a case, a court, a party, and a formal record.

A random text saying “You have a warrant, pay now” is inconsistent with ordinary judicial process.

B. Courts do not settle cases through unofficial personal channels

A court does not usually direct litigants to pay “settlement fees” to a GCash number, a personal bank account, or an unnamed agent. Court fees are governed by law, rules, and official payment channels. Demands for private payment are a major red flag.

C. Criminal cases do not vanish because of instant e-wallet payment to a stranger

A scammer may falsely imply that paying them will make a complaint disappear or prevent arrest. Court proceedings, warrants, bail, and prosecutorial actions are governed by legal procedure, not private texting arrangements with unknown persons.

D. Real court notices contain traceable case information

Authentic judicial documents normally indicate identifiable details such as the court, branch, case title, case number, parties, date, and proper signatures or certification practices. Even then, a document can still be forged, so the safe step is independent verification through official channels.

E. Threats of immediate arrest by text are commonly fraudulent

Arrest warrants follow legal procedure. Fraudsters exploit panic by invoking arrest, “blacklisting,” airport hold orders, or account freezes. Urgency is often the scam itself.

IV. Philippine Legal Context: What Laws May Apply

A single court-impersonation scam may violate several Philippine laws at once. The legal characterization depends on the exact conduct.

1. Revised Penal Code

Several crimes under the Revised Penal Code may be implicated:

Estafa If the scammer deceives the victim into parting with money, property, or something of value, estafa may apply. The deceit lies in the false representation that the scammer is a court officer or that payment will prevent legal consequences.

Usurpation of authority or official functions Pretending to be a judge, clerk of court, sheriff, prosecutor, or other officer, or performing acts as though one had official authority, may amount to usurpation-related offenses depending on the facts.

Falsification of public or official documents Creating fake warrants, subpoenas, notices, certifications, court orders, IDs, or judicial documents may amount to falsification. Using a falsified document can also be punishable.

Unlawful use of means of publication and unlawful utterances / false news-type conduct Not every false statement is criminal, but spreading false official notices or fabricated legal threats in a way that causes public harm may trigger other criminal issues depending on content and context.

Grave threats, light threats, coercion, unjust vexation A scam message that threatens arrest, violence, reputational harm, or other injury to force payment may also give rise to these offenses, depending on the wording and circumstances.

Identity-related fraud Where the offender misuses another person’s name, signature, office, or position, further penal issues may arise.

2. Cybercrime Prevention Act of 2012

When the fraud is committed through text, messaging apps, email, social media, fake websites, or other ICT means, the Cybercrime Prevention Act may come into play. If a traditional crime such as estafa or falsification is committed through information and communications technologies, it may be prosecuted in its cyber-enabled form where the law allows.

This is especially relevant where the scam involves:

phishing websites,
fraudulent emails,
SMS with malicious links,
account takeovers,
digital document forgery,
social engineering through electronic communications.

3. Data Privacy Act of 2012

If the scam involves collecting, processing, stealing, or misusing personal information, several data-privacy concerns arise. Fraudsters often seek:

full names,
addresses,
birthdays,
ID numbers,
selfies,
account credentials,
OTPs,
financial information.

Unlawful acquisition, processing, disclosure, or misuse of personal data may trigger liability under the Data Privacy Act, subject to the facts and proof available.

4. Anti-Photo and Video Voyeurism, identity misuse, and related digital harms

While not always directly applicable, scammers may ask for selfies, ID photos, or video verification clips and later use them in further fraud. Different penal and privacy laws may be implicated when biometric or image-based deception is involved.

5. Electronic Commerce Act

Electronic documents and electronic signatures are recognized in law, but forged or fraudulent electronic communications remain punishable when used to deceive or falsify. The fact that something is sent electronically does not make it legally valid.

6. SIM Registration and telecom-related regulation

A fraudulent text may be traceable through subscriber registration and telecommunications records, subject to lawful process. The existence of SIM registration does not eliminate scams, but it may assist investigation where records are preserved and the identity trail has not been layered through mule accounts or false registration.

7. Anti-Money Laundering concerns

If scammers route proceeds through banks, e-wallets, remittance centers, or mules, tracing and freezing mechanisms may become relevant through appropriate legal processes. Victims should report quickly, because funds often move fast.

V. How Legitimate Court Communications Usually Work in the Philippines

A clear understanding of ordinary judicial practice helps separate reality from fraud.

A. There is generally a real case and a real court record

A legitimate communication usually relates to an actual case with a docket or case number, named parties, a court and branch, and a paper or electronic trail.

B. Service is linked to legal procedure

Summons, subpoenas, notices, and orders are served according to procedural rules. The method depends on the nature of the case and applicable rules, including developments on electronic service in certain contexts. But official service is still tied to procedure, not panic texting from a private number asking for money.

C. Payment of court fees follows official systems

Courts and authorized offices do not normally require litigants to send money to a personal mobile number to “avoid arrest” or “settle” a case. Any payment instruction outside recognized channels should be treated as highly suspicious.

D. Clerks of court and sheriffs have defined functions

Even where court personnel communicate with parties in limited legitimate ways, their authority is not personal, informal, or unbounded. They do not operate like freelance collectors or anonymous text agents.

E. Warrants and criminal process are not private debt collection tools

Scammers exploit the public’s confusion between civil and criminal liability. They may cite “warrant,” “hold departure,” or “blacklist” even when the underlying alleged issue is a private debt or consumer transaction. Not every unpaid obligation leads to criminal liability, and not every legal dispute results in arrest.

VI. Common Red Flags That the Message Is Fake

In practice, one red flag may not be conclusive, but several together strongly indicate fraud.

1. The message comes from an ordinary mobile number or suspicious email and demands urgent action.

2. It asks for payment through GCash, Maya, bank transfer, remittance center, cryptocurrency, or a personal account.

3. It threatens arrest, account freezing, travel hold, or public shaming unless you pay immediately.

4. It tells you not to contact the court directly.

5. It contains grammar mistakes, awkward phrasing, incorrect titles, or inconsistent case details.

6. It uses generic greetings, such as “Dear defendant” or “Hello respondent,” without proper identifying information.

7. It asks for OTPs, passwords, PINs, or verification codes. Courts do not need your banking OTP.

8. It sends a link that is not clearly and independently verifiable as official.

9. It includes an attachment that pressures you to open a file to see a “warrant” or “court order.”

10. It cites the wrong court, branch, city, or legal terminology.

11. It offers to make the complaint disappear in exchange for payment.

12. It says the matter is confidential and must be handled only through the sender.

VII. How to Verify Authenticity Safely

Verification must be done independently. Do not use the contact details given in the suspicious message unless you have separately confirmed they are official.

Step 1: Do not click, call back, or pay immediately

Pause. A scam depends on speed and fear. Do not open links, download attachments, or send money.

Step 2: Preserve the message

Take screenshots showing:

sender number or email,
full message,
date and time,
any links,
attachment names,
payment instructions,
usernames on messaging apps.

Do not alter the content.

Step 3: Check whether the court named actually exists

Verify the court, branch, and location through official judiciary resources or publicly known official channels that you already know independently. A fake message may name a real court, but many scams invent branches or mismatch cities and branch numbers.

Step 4: Contact the court or office using independently sourced official contact details

Use contact information obtained from official judiciary channels, not from the suspicious message. Ask whether:

a case exists under your name,
the cited case number is real,
the document is authentic,
the sender is connected with the court.

Be precise and calm.

Step 5: If a lawyer is involved, verify independently

If the message claims to be from a law office or prosecutor, verify that office independently. Do not trust logos, signatures, or letterheads at face value.

Step 6: Check the document for legal and factual consistency

Look for:

correct case caption,
exact branch,
full court name,
date,
signature block,
proper designation,
internal consistency,
absence of odd formatting or spelling errors.

But remember: a sophisticated fake can look convincing. Independent verification is still necessary.

Step 7: Never disclose OTPs, passwords, banking credentials, or ID images

No legitimate court verification should require your banking secrets.

Step 8: If you suspect malware, isolate the device

If you clicked a link or opened an attachment:

disconnect sensitive accounts from that device,
change passwords from a clean device,
review banking and e-wallet activity,
notify financial institutions promptly.

VIII. What To Do If You Received the Scam But Have Not Paid

If you did not send money or credentials, you are still a target and should act promptly:

1. Save all evidence. Keep screenshots, files, URLs, and any payment details given by the scammer.

2. Block the sender after preserving evidence.

3. Report the number, account, and message to the relevant platform or telecom mechanisms.

4. If a phishing link was involved, change passwords for accounts that may be affected.

5. Monitor email, banking, e-wallet, and social media accounts for suspicious activity.

6. Warn family members, especially older relatives or those likely to panic over legal threats.

IX. What To Do If You Paid, Shared Data, or Clicked the Link

Time matters.

A. If you sent money

Immediately contact:

your bank,
e-wallet provider,
remittance service,
card issuer.

Ask them to:

document the fraud report,
attempt transaction hold or recovery,
flag the receiving account,
preserve transaction logs.

Recovery is not guaranteed, but delay makes recovery less likely.

B. If you gave personal data

Assume your data may be used in further fraud. Take steps such as:

changing passwords,
enabling stronger account security,
monitoring for loan fraud or account takeover,
watching for fake accounts opened in your name.

C. If you provided OTPs or credentials

Treat it as an account compromise. Immediately:

reset passwords,
log out of sessions,
notify banks and e-wallets,
review linked devices,
preserve proof of unauthorized transactions.

D. If you opened an attachment or link

Your device may be compromised. Change sensitive credentials from a different, clean device. Review installed apps, browser permissions, and account recovery settings.

X. Where and How To Report in the Philippines

A victim should report through more than one channel where appropriate. Different agencies and institutions handle different parts of the problem.

1. Law enforcement

For criminal investigation, report to appropriate law-enforcement authorities, especially units that handle cyber-enabled offenses. Provide:

screenshots,
sender information,
URLs,
file attachments,
transaction records,
dates and times,
account numbers,
chat logs.

A clean and organized evidence packet helps.

2. The judiciary or the specific court being impersonated

If a scam falsely uses the name of a court or court personnel, report it to the actual court or to appropriate judiciary channels. This helps the institution warn the public and distinguish fraudulent communications from official ones.

3. National Privacy Commission, where personal data is involved

If the incident includes unauthorized collection, misuse, or exposure of personal data, a privacy-related complaint or incident report may be appropriate.

4. Banks, e-wallets, and payment providers

Report fraudulent receiving accounts immediately. These institutions can document the report, investigate account misuse, and in some cases coordinate with authorities.

5. Telecommunications providers and platform operators

Report the SMS sender, messaging account, phishing domain, or social media account to the relevant telecom or platform. Even if this does not recover money, it may help disrupt the scam.

XI. Evidence Preservation: What Victims Should Keep

In fraud cases, proof matters. Preserve:

screenshots of messages,
full headers or metadata if email is involved,
the sender’s number and profile,
complete URLs,
any files or PDFs sent,
transaction receipts,
names used by the scammer,
voice notes or call logs,
dates and times,
account numbers or e-wallet IDs,
usernames on messaging apps,
proof of your report to banks or authorities.

Do not rewrite the evidence into a summary alone. Keep originals too.

Where possible, export conversations and save them in multiple secure places. Avoid editing screenshots in a way that changes content.

XII. Legal Issues in Fake Court Documents

One of the most alarming forms of this scam is the fake judicial document.

A. A realistic-looking document can still be entirely false

Scammers often copy:

seals,
logos,
signatures,
letterhead,
case-number formats,
branch names,
templates taken from public filings.

Visual realism is not proof.

B. The document may combine real and false details

A fraudster may use:

a real judge’s name,
a real courthouse address,
a real city,
but a fake case number,
fake hearing date,
fake signature,
fake payment instruction.

This is why line-by-line checking matters.

C. Use of fake public documents can aggravate liability

Creating or using a fabricated court document is not merely a “prank.” It can support charges relating to falsification, estafa, cybercrime, and impersonation.

XIII. Distinguishing Court Scams from Legitimate Collection or Legal Demand

Some victims are targeted because they already have debts, disputes, online loans, or family cases. Scammers exploit that fear. Distinctions matter.

A. A debt collector is not a court

A collection message may be aggressive, but it is not a judicial order. A text from a collector claiming to be “from the court” should be independently verified.

B. A demand letter is not the same as a warrant

People often confuse private legal threats with state-issued process. A real warrant has legal requirements and cannot be reduced to an informal SMS demand for payment to a mobile number.

C. Criminal liability is not automatic

A scammer may claim that nonpayment instantly created a criminal case and warrant. Real legal consequences depend on the facts and on proper proceedings.

XIV. Risks Beyond the Immediate Scam

Court-impersonation scams are not only about one payment.

1. Identity theft

Collected personal data may later be used for:

fake loan applications,
SIM registration misuse,
account recovery attacks,
social engineering against relatives.

2. Secondary extortion

Once a victim responds, the scammer may escalate with more fake officials or fake documents.

3. Malware and credential theft

A single click may compromise email, social media, and banking access.

4. Reputational targeting

Scammers may threaten to spread false criminal accusations if the victim refuses to pay.

XV. Practical Verification Checklist for Individuals and Businesses

For ordinary citizens:

Do not panic.
Do not pay.
Do not click.
Verify independently with the actual court or office.
Preserve evidence.
Report promptly.

For companies, schools, clinics, and small businesses:

Train staff to escalate any “court notice” received by SMS or email.
Require independent verification before any response.
Prohibit payment to personal accounts for legal matters.
Maintain an incident log.
Coordinate with counsel and IT if a link was clicked.

For law offices and HR teams:

Warn staff and clients that real legal process is formal.
Publish anti-fraud advisories where appropriate.
Verify directly before acting on any supposed court communication.

XVI. Corporate and Institutional Response

Organizations should treat court-impersonation phishing as both a legal and cybersecurity issue.

A sound internal response includes:

designating a reporting point for suspicious legal notices,
preserving logs and screenshots,
notifying counsel,
reviewing whether personal data was exposed,
checking whether employee accounts were compromised,
coordinating with banks or providers if funds were sent,
issuing internal advisories to prevent repeat attacks.

In a business setting, the fraud may also trigger obligations involving internal controls, privacy governance, and breach response.

XVII. Public Misconceptions That Scammers Exploit

“It has a seal, so it must be real.” False. Seals and logos are easily copied.

“They knew my full name, so they must be legitimate.” False. Personal information may come from leaks, prior scams, social media, or public sources.

“They knew I had a debt/dispute.” That may mean your data was shared, guessed, or obtained elsewhere; it still does not prove authenticity.

“They said I would be arrested today unless I paid.” This is a classic panic tactic.

“The sender sounded professional.” Fraudsters often script legal language very well.

XVIII. Possible Liabilities of Different Participants in the Scam Chain

These schemes may involve several actors:

The impersonator The person sending the messages or pretending to be court personnel.

The document forger The one creating fake warrants, subpoenas, seals, or notices.

The account mule The person allowing use of a bank account or e-wallet to receive proceeds.

The data broker or insider source Someone who unlawfully supplied personal data.

The domain operator or phishing page creator The one setting up fake websites or credential traps.

Each participant may face different but overlapping liabilities depending on intent, participation, and proof.

XIX. Remedies and Expectations

Victims often ask whether money can be recovered and offenders arrested. The answer depends on timing, evidence, and traceability.

Recovery of funds may be difficult if the money has already been layered through multiple accounts or withdrawn quickly. Still, immediate reporting improves the chance of tracing.

Criminal accountability depends on:

identification of offenders,
preservation of telecom and platform evidence,
financial records,
digital forensics,
cooperation between institutions.

Victims should act quickly and document everything. Even where immediate recovery is impossible, reporting helps build patterns that can support future enforcement.

XX. Special Note on Electronic Service and Modern Court Practice

It is true that Philippine legal practice has increasingly recognized electronic methods in various contexts. That fact should not lead the public to accept every digital message as authentic. The legal system may use electronic means under rules and controlled procedures, but scam texts exploit that modernization by copying the style of official communication.

The correct approach is not to assume all digital court communication is fake, nor to assume all digital court communication is genuine. The correct approach is independent verification through official channels.

That distinction is central.

XXI. Best-Practice Model Response to a Suspicious Court Text

A prudent recipient should do the following in order:

Do not reply substantively.
Screenshot everything.
Do not click the link or open the file.
Independently verify the court and contact details.
Ask the actual court whether the case or document exists.
If fake, report to law enforcement, the judiciary office concerned, your telecom/platform, and your bank or e-wallet if payment was requested or made.
Secure your accounts if any data was disclosed.

This sequence protects both legal position and digital safety.

XXII. Conclusion

SMS and phishing scams impersonating courts are effective because they weaponize fear of arrest, confusion about legal procedure, and respect for judicial authority. In the Philippine setting, they may violate multiple laws at once, including penal, cybercrime, falsification, and privacy laws. Their hallmark features are urgency, impersonation, unofficial payment demands, suspicious links, and misuse of legal language.

The most important legal and practical principle is simple: a genuine court process is tied to lawful procedure, an actual case record, and independently verifiable official channels. A threatening text demanding immediate payment to avoid arrest is not how courts normally function.

For that reason, the safest response is to verify independently, preserve evidence carefully, refuse unofficial payment demands, secure any exposed accounts, and report the fraud promptly to the proper authorities and institutions. In scams that mimic courts, caution is not defiance of the law. It is exactly how a law-abiding person protects themselves from criminal deception.