Quick answer

If you suspect fraud or estafa, act immediately: contact the bank, e-wallet, remittance service, or platform that handled the payment; ask it to flag the transaction and preserve records; secure your evidence; and report the incident to law enforcement. A criminal complaint may be filed with the proper city or provincial prosecutor, or initially investigated through the police or the National Bureau of Investigation. Online or technology-assisted fraud may also involve the Cybercrime Prevention Act.

Reporting the crime does not guarantee that money will be recovered. Recovery depends on whether funds or assets can still be traced, preserved, attached, or collected from the responsible person. The civil claim arising from the offense is generally included in the criminal case unless it is waived, reserved for a separate action, or was filed earlier. Because funds can move quickly and legal claims can prescribe, prompt action matters.

When fraud may amount to estafa

Article 315 of the Revised Penal Code punishes specified forms of swindling or estafa. Not every unpaid debt, failed investment, broken promise, or disappointing transaction is criminal fraud.

Common forms include:

Estafa through false pretenses or fraudulent acts. The offender makes a false representation—such as using a fictitious identity or falsely claiming authority, qualifications, credit, property, agency, business, or an imaginary transaction—before or at the same time the victim parts with money or property.
Estafa through misappropriation or conversion. The offender receives money or personal property in trust, on commission, for administration, or under an obligation to deliver or return it, and then misappropriates, converts, or denies receiving it, causing prejudice to another.
Other forms expressly listed in Article 315, including abuse of a signature in blank and certain fraudulent acts involving checks, property, or services.

For estafa by false pretenses under Article 315(2)(a), the prosecution generally must show that:

The accused made a false pretense, fraudulent representation, or fraudulent act;
It was made before or simultaneously with the fraud;
The victim relied on it and, because of that reliance, gave money or property or otherwise suffered damage; and
The victim sustained prejudice capable of proof.

For estafa by misappropriation or conversion under Article 315(1)(b), the central questions usually include whether:

The accused received money or personal property under an arrangement requiring delivery or return;
The arrangement transferred not merely physical custody but the type of juridical possession contemplated by the law;
The accused misappropriated or converted the property, or denied receiving it; and
Another person suffered prejudice.

A demand to account or return the property can be strong evidence of misappropriation, but the Supreme Court has explained that demand is not indispensable when conversion is clearly shown by other evidence. See the Court’s discussion in Buenaflor v. Court of Appeals, G.R. No. 277067, May 5, 2025.

Fraud is different from an ordinary breach of contract

A person’s failure to pay a loan, deliver an item, complete a project, or produce an expected investment return does not automatically establish estafa.

For false-pretense estafa, the deceit must ordinarily exist before or when the victim parts with money or property. A promise that was honestly made but later became impossible to perform may support a civil claim without necessarily proving criminal fraud.

For misappropriation estafa, the document or arrangement must establish the legally required obligation to deliver or return the same money or property. If ownership passed to the recipient—depending on the nature and wording of the agreement—the dispute may instead concern a debt or contractual obligation.

The Supreme Court has repeatedly cautioned against treating a merely contractual failure as estafa without proof of the statutory elements. The controlling distinction is discussed in Cayanan v. People, G.R. No. 207373, March 23, 2022. The labels used by the parties—“investment,” “trust,” “loan,” “commission,” or “partnership”—are not conclusive. Prosecutors and courts examine the actual agreement, representations, transfer of possession, and use of the funds.

What to do immediately

1. Contact the financial institution or platform

If money was sent through a bank, e-wallet, payment processor, card, remittance company, cryptocurrency exchange, or online marketplace:

Use the institution’s official fraud or customer-service channel immediately.
Ask it to mark the transaction as disputed and determine whether a recall, reversal, temporary hold, or recipient-account restriction is legally available.
Obtain a ticket, case, or reference number.
Ask the institution to preserve account-opening information, transaction logs, device or access records, and communications connected with the transfer.
Change compromised passwords and PINs, revoke unfamiliar devices or sessions, and disable affected cards or accounts.
Never pay a supposed “recovery agent” who asks for another transfer, an advance tax, a release fee, or access to your device.

Under the Anti-Financial Account Scamming Act and its implementing BSP regulations, regulated institutions have procedures for disputed transactions and coordinated verification. Whether funds can be held or returned depends on the transaction, timing, available balance, applicable rules, and verification results. A report does not itself establish ownership or guarantee reimbursement.

For a BSP-supervised institution, first complain through the institution’s Financial Consumer Protection Assistance Mechanism. If the matter is unresolved or the institution does not act, it may be escalated through the BSP Consumer Assistance Mechanism. BSP guidance also says suspicious transactions should be reported immediately to the bank or e-money issuer through official channels.

2. Preserve evidence before accounts or messages disappear

Keep the original files and create secure backup copies. Preserve:

Deposit slips, bank statements, transfer confirmations, reference numbers, QR codes, wallet addresses, and transaction histories;
Receipts, invoices, contracts, order forms, loan documents, investment documents, acknowledgments, and written promises;
Complete email threads, text messages, chat exports, voice messages, and call logs;
Screenshots showing the full page, account name, username, URL, date, and time;
Social-media profiles, advertisements, websites, marketplace listings, and account links;
Names, aliases, telephone numbers, email addresses, bank or e-wallet details, delivery addresses, and identification documents supplied by the suspect;
Corporate records, permits, business cards, certificates, or claimed licenses;
Proof of what was promised, what you relied on, what you paid, and what you actually received;
Demand letters and proof of delivery, if a demand was made;
Names and contact details of witnesses and other possible victims; and
A chronological account written while events are still fresh.

Do not crop or edit the only copy of a screenshot. Do not delete conversations after reporting an account. Where possible, export chats and download statements directly from the service. Keep the device used in the transaction in substantially the same condition, especially if investigators may need to examine it.

3. Notify law enforcement

You may report the incident to the police or request investigative assistance from the NBI. Technology-assisted cases may be handled by specialized cybercrime units. The Cybercrime Prevention Act designates the NBI and PNP as law-enforcement authorities for cybercrime.

The NBI provides an online complaint page and publishes procedures for investigative assistance to victims of computer crimes

Quick answer

If you suspect fraud or estafa, act immediately: stop further payments, notify the bank or e-wallet involved, ask that the disputed transaction and recipient account be investigated, preserve every piece of evidence, and report the incident to law enforcement. A criminal complaint may be filed with the proper prosecutor’s office or, depending on the offense and location, through the police or National Bureau of Investigation for investigation and referral.

Not every unpaid debt, failed investment, delayed delivery, or broken promise is estafa. The evidence must show the kind of deceit, abuse of confidence, or other fraudulent conduct punished by Article 315 of the Revised Penal Code. Recovery is possible through the civil liability included in the criminal case, a properly reserved or previously filed separate civil action, or other remedies suited to the transaction. Actual collection, however, depends on proof, the respondent’s assets, and how quickly funds or property can lawfully be located and preserved.

What legally counts as estafa?

Article 315 punishes several forms of swindling. The two most commonly encountered are:

Estafa through false pretenses or fraudulent acts

This may apply when a person uses a fictitious name or makes a false claim about their authority, qualifications, property, credit, agency, business, influence, or an imaginary transaction.

The prosecution generally must establish that:

The accused made a false representation or committed a fraudulent act before or at the same time the victim parted with money or property.
The accused knew the representation was false.
The victim relied on the deception.
Because of that reliance, the victim suffered financial or property damage.

The timing matters. A promise that was genuine when made does not automatically become criminal fraud merely because it was later broken. Evidence that the supposed business, product, authority, asset, or transaction never existed—or that the accused already knew performance was impossible—can be important.

The Supreme Court’s discussion of these elements may be read in Rivera v. People, G.R. No. 258753, June 26, 2024.

Estafa through misappropriation or conversion

This may apply when a person receives money, goods, or personal property:

in trust;
on commission;
for administration; or
under another obligation requiring delivery or return of the same money or property,

and then misappropriates or converts it, denies receiving it, or otherwise causes prejudice to the owner.

The arrangement must normally transfer not only physical custody but also the kind of juridical possession contemplated by Article 315(1)(b). A cashier, employee, courier, or custodian with bare physical possession may fall under a different offense depending on the facts.

A demand to account for or return the property is useful evidence, but the Supreme Court has clarified that demand is not indispensable when conversion or misappropriation is otherwise clearly proved. See Buenaflor v. Bernardo, G.R. No. 277067, May 5, 2025.

When a failed transaction is only a civil dispute

Criminal law does not convert every contractual breach into estafa. Warning signs that a matter may be primarily civil include:

the agreement and the parties’ obligations were genuine at the outset;
the seller or borrower made real efforts to perform;
nonperformance resulted from delay, financial difficulty, a business loss, or a good-faith dispute;
the alleged misrepresentation occurred only after the victim had already paid; or
the recipient obtained ownership of the money, rather than receiving it under a duty to return or deliver the same property.

The Supreme Court distinguishes criminal fraud from mere failure to comply with a contract. The complete agreement, communications before payment, and the circumstances existing when the money was obtained are therefore crucial. See Cayanan v. People, G.R. No. 207373, March 16, 2022.

Labels do not control. Calling a payment a “loan,” “investment,” “trust fund,” “reservation fee,” or “commission” does not by itself establish or defeat estafa. Investigators and courts examine what the parties actually agreed to and did.

What to do immediately

1. Stop the loss and secure your accounts

Do not send an additional “release fee,” “tax,” “verification payment,” or “refund charge.” Fraudsters often request another payment after claiming that the first transaction is frozen or nearly recoverable.

If banking or e-money accounts are involved:

contact the bank or e-money issuer through its official fraud or customer-service channel;
identify the transaction as disputed or fraudulent;
request immediate investigation and lawful temporary holding or tracing of the funds;
ask for a case or reference number;
change passwords and PINs using a trusted device;
revoke unknown devices and sessions;
disable compromised cards or accounts; and
report any unauthorized SIM replacement or loss of mobile service to the telecommunications provider.

Prompt reporting matters because transferred funds can be withdrawn or moved through several accounts within minutes.

Republic Act No. 12010, the Anti-Financial Account Scamming Act, and BSP regulations establish mechanisms concerning disputed transactions, temporary holding of funds, and coordinated verification among covered financial institutions. A hold is not automatic and does not mean that the complainant has already proven ownership or secured reimbursement. Give the institution complete and truthful information; malicious or bad-faith reporting may itself carry liability. The current implementing materials are collected in the BSP’s AFASA booklet and regulations.

2. Preserve evidence before it disappears

Keep original electronic files and make secure backup copies. Preserve:

receipts, deposit slips, invoices, contracts, acknowledgment documents, and delivery records;
bank or e-wallet statements and transaction reference numbers;
the recipient’s account name, account number, QR code, mobile number, and bank or issuer;
complete chat histories, emails, SMS messages, voice messages, and call logs;
advertisements, listings, profiles, usernames, URLs, and website addresses;
screenshots showing the date, time, account name, and surrounding conversation;
photographs or videos of meetings, goods, documents, or premises;
names and contact details of witnesses;
proof of the accused’s representations before payment;
demands, replies, admissions, excuses, and refund promises; and
police, platform, bank, courier, or customer-service reference numbers.

Do not rely on cropped screenshots alone. When possible, export the entire conversation, retain the device on which it was received, and preserve the original email with its header information. Record a clear chronology while events are fresh.

Do not hack an account, impersonate another person, secretly take protected records, or publish personal data merely to identify the suspect. Evidence obtained unlawfully can create separate legal problems.

3. Send a careful written demand when appropriate

A written demand can establish that the recipient was asked to return or account for the money and can produce useful admissions. State:

the transaction and date;
the amount or property involved;
the agreed obligation;
what remains unpaid or unreturned;
a reasonable deadline; and
where payment or return should be made.

Send it through a traceable channel and preserve proof of delivery. Avoid threats, insults, exaggerated accusations, or statements that you will expose or embarrass the person unless paid.

Demand is not a universal legal prerequisite to estafa. Do not delay an urgent bank report, law-enforcement referral, or filing deadline merely to wait for a response.

Where to report the incident

The appropriate route depends on the method of fraud, place of occurrence, amount, prescribed penalty, and identity of the respondent.

Bank or e-wallet provider

Report first through the institution’s Financial Consumer Protection Assistance Mechanism or official fraud channel. If the institution is supervised by the Bangko Sentral ng Pilipinas and the concern remains unresolved, it may be escalated through the BSP Consumer Assistance Mechanism. The BSP’s current instructions are available in its guide to filing a complaint and consumer-assistance page.

A BSP consumer complaint is not a substitute for a criminal complaint. The BSP process addresses concerns involving supervised institutions; it does not itself convict the fraudster or guarantee reimbursement.

Police or NBI

A victim may seek investigative assistance from the Philippine National Police or the National Bureau of Investigation. Online scams, account intrusions, phishing, identity misuse, and technology-assisted fraud may be referred to their cybercrime units.

The NBI provides an online complaint page and describes its procedures for computer-crime complaints and fraud complaints.

An incident report or investigative request does not necessarily commence the criminal action for all legal purposes. Ask the investigator or counsel whether a sworn complaint must also be filed promptly with the prosecutor or court.

Prosecutor’s office

For an offense requiring preliminary investigation, the complaint is generally filed with the proper city or provincial prosecutor. Under Rule 112, preliminary investigation is required when the prescribed penalty is at least four years, two months, and one day, without regard to the fine.

A complaint for preliminary investigation should normally include:

the respondent’s name and address, if known;
the complainant’s sworn affidavit;
affidavits of witnesses;
supporting documents establishing probable cause; and
the required copies for each respondent plus copies for the official file.

The respondent is ordinarily subpoenaed and given ten days from receipt to submit counter-affidavits and supporting evidence. The prosecutor may decide on the submissions or conduct a clarificatory hearing. These procedural periods govern the investigating officer and respondent; they are not a safe measure of how long a victim may wait before filing.

For offenses below the preliminary-investigation threshold, Rule 110 permits filing with the prosecutor or, in applicable places, directly with the proper first-level court. In Manila and other chartered cities, filing is generally through the prosecutor unless the city charter provides otherwise. Local procedures should be confirmed with the proper office.

The governing provisions appear in the Supreme Court’s Revised Rules of Criminal Procedure, particularly Rules 110 and 112.

SEC for suspected investment solicitation

If the incident involves an investment scheme, securities solicitation, lending or financing company, or representations about SEC registration, verify the entity through official SEC resources. Corporate registration alone does not necessarily authorize a company to solicit investments from the public.

The SEC accepts public concerns and investment-scam complaints through its official iMessage ticketing system. An SEC report may support regulatory action, but it does not replace the victim’s criminal or civil remedies.

Online fraud and the Cybercrime Prevention Act

When an offense under the Revised Penal Code or a special law is committed by, through, and with the use of information and communications technology, Section 6 of Republic Act No. 10175 may apply and may increase the prescribed penalty by one degree. The Act also separately defines offenses such as computer-related fraud, computer-related forgery, and computer-related identity theft.

The mere fact that the parties exchanged ordinary messages online does not answer every coverage or penalty question. The technology must have the legally relevant relationship to the offense required by the statute and controlling decisions. The prosecutor must evaluate the specific acts and evidence.

The statutory text is available in the Cybercrime Prevention Act of 2012.

Penalties and why the amount matters

Republic Act No. 10951 adjusted the value thresholds under Article 315. For the forms of estafa covered by its graduated schedule:

Amount of fraud	Base penalty under Article 315
Not more than ₱40,000	Arresto mayor in its medium and maximum periods
Over ₱40,000 up to ₱1,200,000	Arresto mayor maximum to prisión correccional minimum
Over ₱1,200,000 up to ₱2,400,000	Prisión correccional minimum and medium
Over ₱2,400,000 up to ₱4,400,000	Prisión correccional maximum to prisión mayor minimum
Over ₱4,400,000	The statute provides an incremental calculation, subject to a 20-year ceiling

These are statutory base ranges, not a prediction of the sentence in a particular case. The final penalty can depend on the precise offense charged, the amount properly proved, amendments or special laws, cybercrime treatment, stages of execution, participation, and modifying circumstances.

See Section 85 of Republic Act No. 10951.

Filing location and barangay conciliation

A criminal action is generally instituted and tried where the offense was committed or where any essential ingredient occurred. In an online transaction, possible locations may include where the deception was made, where it was received and relied upon, or where money or property was delivered. Venue is jurisdictional in criminal cases, so it should not be guessed from the victim’s present address alone.

Katarungang Pambarangay conciliation may be a precondition when the dispute falls within the lupon’s authority, particularly where the parties actually reside in the same city or municipality and no statutory exclusion applies. Matters involving offenses punishable by imprisonment exceeding one year or a fine exceeding ₱5,000 are outside that authority. The law also permits direct court action in specified situations, including when the accused is detained, a provisional remedy is sought, or the claim may otherwise be barred by limitations.

Because the applicable penalty and the parties’ actual residences affect this issue, confirm with the prosecutor, barangay, or counsel whether a Certificate to File Action is required. The controlling provisions are Sections 408 and 412 of the Local Government Code.

How to seek repayment or return of property

Civil liability in the criminal case

When a criminal action is instituted, the civil action to recover liability arising from the offense is generally deemed included unless the victim:

waives it;
reserves the right to file it separately; or
filed the civil action before the criminal case.

A reservation must be made before the prosecution begins presenting evidence and while the victim has a reasonable opportunity to reserve. If the civil claim is included, the victim may intervene through counsel, subject to the prosecutor’s control of the criminal case.

Actual damages should be supported by receipts, statements, valuations, and a clear computation. Interest and other damages depend on the factual and legal basis proved; they should not be assumed.

Separate civil action

A separate case may sometimes be based on contract, unjust enrichment, quasi-delict, or another source of obligation. Its deadlines and elements may differ from those of the criminal case.

Once a criminal action has commenced, a separate civil action arising from the offense generally cannot be newly instituted until final judgment in the criminal case. If it was filed first, it is ordinarily suspended, although consolidation may be available. Independent civil actions expressly permitted by the Civil Code are treated differently, and double recovery for the same injury is prohibited.

Choosing between an included civil claim and a separate action can affect filing fees, evidence, timing, settlement, and enforcement. Obtain advice before waiving or reserving anything.

Attachment and preservation of assets

Rule 127 permits provisional remedies applicable to the civil aspect of a criminal case. Prejudgment attachment may be available in specified circumstances, such as when the accused is about to leave the Philippines, has concealed or is disposing of property, resides abroad, or received property in a qualifying fiduciary capacity.

Attachment is not automatic. It requires a proper application and compliance with procedural safeguards, potentially including a bond. It should be discussed urgently with counsel when there is reliable evidence that recoverable assets are being moved or hidden.

The civil-action and attachment rules are in Rules 111 and 127 of the Revised Rules of Criminal Procedure.

Prescription: do not wait

Criminal and civil claims have limitation periods. For estafa, the criminal prescriptive period depends on the penalty prescribed for the particular offense, which may depend on the amount and any applicable special law. The period may be relatively short in lower-penalty cases.

Under Articles 90 and 91 of the Revised Penal Code, prescription is generally measured from discovery of the offense by the offended party, authorities, or their agents and is interrupted by the filing of the complaint or information. Complications can arise when proceedings end without conviction or acquittal, the accused is abroad, several offenses are possible, or a special law supplies a different rule.

Do not assume that a bank complaint, demand letter, police blotter, online report, or platform ticket necessarily interrupts prescription. Have the dates reviewed immediately and file through the legally effective channel before the earliest arguable deadline.

Common mistakes that weaken a case

Continuing to pay after discovering warning signs.
Deleting or blocking the account before preserving the complete conversation.
Submitting only cropped screenshots without transaction records or original files.
Focusing on later excuses while failing to prove the deception made before payment.
Treating every broken promise or unpaid debt as criminal fraud.
Omitting unfavorable facts from an affidavit.
Naming account holders as perpetrators without evidence of their knowledge or participation.
Filing in a convenient but legally improper venue.
Waiting for a demand deadline while funds are being moved.
Assuming that an SEC certificate, business permit, social-media verification badge, or bank account proves that an offer is legitimate.
Posting accusations, addresses, identification documents, or account details publicly.
Accepting a settlement without written terms, verified payment, and advice about its effect on pending proceedings.
Paying a “recovery agent” who promises guaranteed account freezing, arrest, or reimbursement.

When legal help is urgent

Consult a Philippine lawyer promptly when:

the amount is substantial or several victims are involved;
funds have just been transferred and may still be traceable;
the respondent is moving assets or preparing to leave the country;
prescription or another filing deadline may be near;
the transaction crosses cities, provinces, or national borders;
the suspect used several accounts, corporations, aliases, or intermediaries;
the dispute could be characterized as either contractual breach or criminal fraud;
you are being asked to sign a waiver, quitclaim, compromise, affidavit of desistance, or reservation of civil action;
attachment, injunction, or another provisional remedy may be necessary;
the prosecutor dismissed the complaint and a review deadline is running; or
the fraud involves company officers, investments, land, inheritance, public funds, identity theft, or falsified documents.

Victims who cannot afford private counsel may inquire with the Public Attorney’s Office, subject to its governing eligibility, merit, and conflict-of-interest rules.

Frequently asked questions

Can I file an estafa complaint without first sending a demand letter?

Possibly. Demand is not an element in every form of estafa, and even for misappropriation cases it may be unnecessary when conversion is independently established. A documented demand is nevertheless often useful. Do not let it delay emergency reporting or a filing deadline.

Is a bounced check automatically estafa?

No. The facts may implicate Article 315, Batas Pambansa Blg. 22, civil liability, or a combination of remedies, but each has separate elements. For false-pretense estafa, the prosecution must connect the check and deception to the victim’s decision to part with money or property. BP 22 also has its own notice and procedural requirements.

Can the registered owner of a receiving account be charged?

Registration alone does not automatically prove criminal responsibility. It is important evidence, but investigators must determine who controlled the account, knew of the scheme, participated in it, or allowed the account to be used under circumstances covered by applicable law, including the Anti-Financial Account Scamming Act.

Will filing a criminal case guarantee repayment?

No. A court may award civil liability, but collection still depends on a judgment, available assets, enforcement, and any competing claims. Early bank reporting and legally proper asset-preservation measures may improve the possibility of recovery but cannot guarantee it.

What if the fraudster refunded part of the money?

Preserve proof of the partial refund. It may affect the amount of remaining damage and the parties’ positions, but it does not automatically erase an offense already completed. Do not sign a waiver or affidavit of desistance without understanding its consequences.

Can several victims file together?

Victims may coordinate evidence and report a common scheme, but each transaction may require proof of its own representations, payment, damage, date, and venue. Whether allegations belong in one complaint or separate cases depends on the acts, participants, and procedural rules.

What if I do not know the fraudster’s real name?

Report all known identifiers: account details, mobile numbers, usernames, email addresses, URLs, photographs, delivery information, transaction references, and device or platform records. A complaint must identify or sufficiently describe the respondent, but investigators may use lawful processes to establish identity.

Should I confront the suspect?

Only if it is safe and tactically sensible. Do not arrange a private meeting, threaten the person, or attempt to seize property. Preserve evidence and coordinate with the bank, investigator, or lawyer if immediate intervention is needed.

Official legal and reporting resources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Estafa, cybercrime, venue, prescription, and recovery depend on the exact representations, agreements, transfers, dates, documents, and applicable law. Official sources and procedures were checked as of September 14, 2026.