Quick answer

If you suspect fraud or estafa, act immediately:

Contact the bank, e-wallet, remittance company, or payment platform and ask it to secure the account, trace the transfer, and attempt a hold or recall.
Preserve the original messages, transaction records, account details, advertisements, contracts, receipts, and devices.
Report the incident to the police, the National Bureau of Investigation, or the appropriate cybercrime unit.
Prepare a detailed complaint-affidavit and supporting affidavits for filing with the prosecutor’s office that has territorial jurisdiction.
Consider civil recovery at the same time, but coordinate the civil and criminal remedies carefully.

A criminal complaint does not automatically return the money. Recovery depends on whether funds or property can still be located, whether the recipient can be identified, the available evidence, and the respondent’s ability to pay. Moving quickly may improve the chance of preserving transaction records or stopping funds that have not yet been withdrawn.

When suspected fraud may be estafa

Article 315 of the Revised Penal Code punishes specified forms of swindling. Calling a transaction a “scam” is not enough; the evidence must establish a legally recognized means of fraud, actual prejudice or damage, and the respondent’s participation.

Common forms include:

Fraud through false pretenses

This may apply when a person obtains money or property by making a material false representation before or at the time the victim parts with it—for example, pretending to have authority, qualifications, property, credit, a genuine business, or a real transaction.

The prosecution generally must connect the following:

The respondent made a false representation or used a fraudulent act before or simultaneously with the transfer.
The victim relied on that representation.
Because of that reliance, the victim delivered money, property, or something of value.
The victim suffered damage or prejudice.

Later broken promises do not, by themselves, prove that the respondent intended to deceive from the beginning. Evidence of what was represented before payment is therefore critical.

Misappropriation or conversion

Estafa may also arise when a person receives money, goods, or other personal property in trust, on commission, for administration, or under an obligation to deliver or return the same property, then misappropriates or converts it, denies receiving it, or otherwise causes prejudice.

This is different from an ordinary loan or unpaid purchase price. If ownership of the money passed to the recipient and the obligation was merely to pay an equivalent amount later, the dispute may be civil rather than estafa. The contract, receipts, instructions, and purpose of delivery must be examined.

A written demand can help prove that the recipient failed to account for or return entrusted property, but demand is not a universal substitute for proving every element of the offense.

Fraud involving a check

Issuing or postdating a check may fall under Article 315(2)(d) when it was used to obtain a new obligation or consideration and the required deceit and damage are present. A check issued only for a pre-existing debt ordinarily does not establish this particular form of estafa because the payee did not part with value in reliance on the check.

A dishonored check may also raise a separate issue under Batas Pambansa Blg. 22. The elements, notice requirements, defenses, filing rules, and civil consequences of a BP 22 case are distinct from estafa. Keep the original check, deposit or return slip, and proof that the drawer actually received written notice of dishonor.

Not every unpaid obligation is a crime

Nonpayment, business failure, delay, breach of contract, or inability to refund is not automatically estafa. Criminal liability ordinarily requires the specific deceit, abuse of confidence, or fraudulent means defined by law.

Indicators that deserve closer investigation include:

A fictitious name, identity, office, licence, asset, transaction, or customer
Fabricated documents, receipts, permits, screenshots, or account balances
Representations contradicted by records that existed before payment
Money entrusted for a stated purpose but diverted elsewhere
Multiple victims receiving the same false explanation
Immediate withdrawal or onward transfer of funds
Deletion of accounts or messages immediately after payment
Use of accounts belonging to unexplained third parties

These are evidence leads, not automatic proof of guilt. The respondent remains presumed innocent, and conviction requires proof beyond reasonable doubt.

What to do immediately

Secure your money and accounts

Contact the sending institution through its official fraud channel—not a telephone number supplied by the suspected scammer. Ask it to:

Freeze or secure compromised access to your account
Disable affected cards, credentials, devices, or payment tokens
Record the transaction as disputed or fraud-related
Attempt a transfer recall or coordinate with the receiving institution
Preserve authentication, device, IP, beneficiary, and transaction records
Give you a reference or ticket number
Explain the documents required for its formal investigation

Do the same with the receiving bank, e-wallet, remittance company, marketplace, or platform if its official reporting channel is available. A private company may be unable to disclose account-holder information directly to you because of privacy and banking rules, but it can preserve records and respond to lawful requests.

Do not send a “release fee,” “tax,” “verification payment,” or additional deposit to recover the first payment.

Protect compromised identities

Change passwords from a trusted device, starting with the affected email account. Enable multifactor authentication, terminate unfamiliar sessions, and notify the relevant bank or platform if identification documents, one-time passwords, PINs, biometrics, or SIM access were exposed.

If a SIM was taken over, contact the telecommunications provider immediately. If threats or unauthorized transactions are continuing, go to law enforcement without waiting for the platform’s internal investigation.

Evidence to preserve

Keep original evidence in a secure folder and make a separate backup. Useful material may include:

The complete conversation, including dates, times, usernames, profile URLs, and message context
Emails with full headers, where available
Original electronic files rather than screenshots alone
Advertisements, product listings, livestreams, websites, and landing-page URLs
Contracts, proposals, invoices, receipts, acknowledgments, and delivery records
Bank statements, deposit slips, QR codes, transfer confirmations, reference numbers, and beneficiary details
Checks, bank return slips, and proof of receipt of any notice of dishonor
The respondent’s name, aliases, telephone numbers, email addresses, account numbers, wallet addresses, vehicle details, and known locations
Recordings lawfully made or received
Names and contact details of witnesses and other victims
A dated chronology showing each representation, payment, follow-up, demand, and response
Proof of the amount lost and related expenses
Written demands and proof of delivery or actual receipt

Avoid cropping screenshots so tightly that the account identity, date, time, and conversation sequence disappear. Export chats when the application permits it. Do not edit original files, impersonate another victim, unlawfully access an account, or install tracking software.

Turn over a device only through a documented process. Ask for an acknowledgment or inventory if investigators take custody of it.

Where to report

Police or NBI

A victim may approach the local police or the NBI for investigation. For an internet-enabled scheme, account takeover, phishing incident, unauthorized online transaction, or fraud using social media or messaging services, consider a specialized cybercrime office.

The NBI’s official procedure for computer-crime victims contemplates a complaint sheet, preliminary interview, sworn statements, supporting documents, and—when relevant—examination of the device. See the NBI Cybercrime Division’s citizen-service procedure and NBI regional and district office directory.

The Department of Justice also maintains official information on reporting cybercrime incidents.

A police or NBI report begins or supports an investigation. It is not necessarily the same as filing the complaint-affidavit that will be evaluated for prosecution.

Prosecutor’s office

A criminal complaint is ordinarily filed with the Office of the City Prosecutor or Office of the Provincial Prosecutor that has territorial jurisdiction. Venue usually lies where the offense, or an essential ingredient of it, occurred. Online transactions and payments can create fact-sensitive venue questions; the victim’s residence alone is not always decisive.

A filing normally includes:

The required investigation data form
A signed and sworn complaint-affidavit
Affidavits of witnesses with personal knowledge
Legible supporting documents
Copies for the prosecutor and each respondent
Translation or explanation where necessary

Check the receiving office’s current requirements before filing. The DOJ publishes a preliminary-investigation filing checklist and official National Prosecution Service forms.

Under DOJ Department Circular No. 15, series of 2024, prosecutors assess whether the evidence establishes a prima facie case with reasonable certainty of conviction. The complaint should therefore do more than accuse: it should identify each respondent, narrate the legally significant acts in chronological order, connect every exhibit to an allegation, and explain the loss.

Financial regulator or other agency

Regulatory reporting can supplement—but does not ordinarily replace—a criminal complaint.

For an unresolved complaint against a BSP-supervised bank, e-money issuer, or similar institution, first use the institution’s own consumer-assistance process. The matter may then be escalated through the BSP Consumer Assistance Mechanism.
Suspected unauthorized investment solicitation, investment contracts, or fraudulent securities offerings may be reported through the SEC iMessage system.
Fraud involving a licensed insurer, lending company, marketplace, telecommunications provider, or another regulated business may also be reported to the regulator with authority over that entity.

A regulatory complaint may address the company’s conduct, licence, or compliance obligations. It does not guarantee reimbursement or replace the prosecutor’s determination of criminal liability.

Preparing an effective complaint-affidavit

Use clear facts rather than conclusions. A practical structure is:

Identify yourself and explain how you know the facts.
Identify each respondent as completely as the available evidence permits.
State the exact representation or undertaking made.
Explain when, where, and through what channel it was made.
Explain why it was false or how entrusted property was converted.
State how you relied on it.
List every transfer or delivery, including date, amount, method, and recipient account.
Describe the resulting loss or prejudice.
Explain subsequent communications, demands, admissions, concealment, or repayments.
Identify and authenticate each attachment.

Separate facts personally known to you from information supplied by someone else. Do not exaggerate, guess an identity, or submit altered evidence. A sworn falsehood can create serious legal consequences and damage a legitimate case.

If several people participated, specify what each person said or did. Registration as a company officer, ownership of a receiving account, or relationship with the principal actor does not automatically establish conspiracy.

What happens after filing

Depending on the offense and applicable procedure, the prosecutor may require the respondent to submit a counter-affidavit and supporting evidence. The prosecutor then determines whether the case should be filed in court or dismissed.

If an information is filed, the criminal case is prosecuted in the name of the People of the Philippines under the direction and control of the public prosecutor. The complainant remains important as the offended party and usually as a witness.

Investigators, prosecutors, and courts perform different functions. A police finding or platform report does not bind the prosecutor or court. Likewise, filing a complaint does not mean a warrant of arrest will issue immediately.

The governing provisions on institution, venue, preliminary investigation, and civil liability appear in Rules 110 to 112 of the Rules of Criminal Procedure.

Seeking return of the money or property

Civil liability in the criminal case

Under Rule 111, the civil action to recover civil liability arising from the charged offense is generally deemed instituted with the criminal action unless the offended party:

Waives it;
Reserves the right to file it separately; or
Filed the civil action before the criminal action.

A reservation must be made at the proper time—before the prosecution starts presenting evidence and under circumstances giving the offended party a reasonable opportunity to reserve. Filing a separate case without considering Rule 111 can cause suspension, duplication, prescription, or procedural problems.

Actual damages must be proved with reliable records. A court may also consider other legally recoverable damages and interest when properly pleaded and supported, but neither an accusation nor the amount stated in a demand letter guarantees an award.

Acquittal does not always dispose of every possible civil claim. The effect depends on the reason for acquittal, the basis of the civil obligation, and the judgment’s findings.

Separate collection or damages action

A separate civil action may be appropriate when the available proof establishes a loan, contract, agency, trust, unjust enrichment, or another civil obligation even if criminal intent is uncertain. Possible relief may include payment, restitution, return of property, damages, or appropriate provisional remedies.

Small claims procedure may be available for qualifying money claims not exceeding ₱1,000,000, exclusive of interest and costs. It is designed for specified civil money claims and is not a criminal proceeding. See the Supreme Court’s Small Claims information and forms and the Rules on Expedited Procedures in the First Level Courts.

A small-claims case is not automatically suitable merely because the amount lost is below the threshold. The nature of the obligation, available defendant address, supporting documents, venue, and relationship to any criminal case must be considered.

Attachment and preservation of assets

In a proper civil action, a lawyer may assess whether preliminary attachment or another provisional remedy is legally available. Attachment is not granted merely because the claimant fears nonpayment; statutory grounds, an affidavit, and a court-approved bond are generally required.

Seek advice promptly if assets are being transferred, sold, concealed, or moved abroad. Do not attempt to seize property yourself.

Settlement

A respondent may offer repayment before or during the case. Put any settlement in writing and identify:

The admitted or compromised amount
Payment dates and method
Consequences of default
Treatment of recovered property
Pending civil claims
The status of any criminal complaint
Who bears fees and expenses

Do not sign an affidavit of desistance, quitclaim, release, or “full settlement” without understanding its effect. Estafa is an offense prosecuted by the State; repayment or desistance does not automatically erase criminal liability, although it may affect the evidence, civil claim, or other legal consequences.

Barangay conciliation

Katarungang Pambarangay may be a precondition for some civil disputes between individuals who actually reside in the same city or municipality. It has statutory exceptions, including offenses punishable by imprisonment exceeding one year or a fine exceeding ₱5,000, disputes between residents of different cities or municipalities subject to limited exceptions, urgent cases, and actions that may otherwise prescribe.

Because estafa penalties generally place the criminal charge outside the lupon’s authority, barangay conciliation should not automatically be treated as a prerequisite to the criminal complaint. A related civil collection claim may require separate analysis.

The rules and exceptions appear in Sections 408–412 of the Local Government Code.

Penalties and amount thresholds

For most forms of estafa under Article 315, as amended by Republic Act No. 10951, the penalty bracket depends on whether the amount of fraud:

Does not exceed ₱40,000;
Exceeds ₱40,000 but not ₱1,200,000;
Exceeds ₱1,200,000 but not ₱2,400,000;
Exceeds ₱2,400,000 but not ₱4,400,000; or
Exceeds ₱4,400,000.

Estafa involving checks under Article 315(2)(d) has a separate, more severe penalty scale. Fraud committed through information and communications technology may also implicate Republic Act No. 10175, subject to its elements and controlling jurisprudence.

Penalty computation is technical. It can depend on the precise paragraph charged, the amount proved, the date and method of commission, modifying circumstances, and other laws. The current statutory language is in Republic Act No. 10951.

Deadlines: do not wait

Criminal offenses and civil causes of action have prescriptive periods. The applicable period and the event that starts or interrupts it depend on the offense, penalty, discovery rules, governing statute, filing forum, and procedural history.

Do not assume that negotiations, a platform complaint, a police blotter, a demand letter, or a promise to repay stops prescription. Filing in the legally proper office matters. Obtain case-specific advice immediately if the transaction is old, the respondent is leaving, evidence may be deleted, or a deadline may be close.

Common mistakes

Treating every unpaid debt as criminal fraud
Filing in a convenient location without establishing venue
Naming account holders or company officers without evidence of knowing participation
Submitting isolated screenshots without the full conversation
Failing to preserve original files, devices, checks, or transaction records
Waiting for a promised refund while evidence disappears
Paying a person who claims they can “unlock” or recover the funds
Posting accusations or private information publicly instead of preserving evidence
Signing a quitclaim or affidavit of desistance without advice
Filing overlapping civil cases without considering Rule 111
Assuming arrest, conviction, or reimbursement is guaranteed
Sending threats, accessing another person’s account, or conducting an unauthorized “sting”

When legal help is urgent

Consult a Philippine lawyer promptly when:

The loss is substantial or involves several victims;
Funds or assets are being moved, withdrawn, or sold;
The respondent or evidence is outside the Philippines;
The scheme involves cryptocurrency, nominees, layered accounts, or a corporation;
A check, trust arrangement, investment solicitation, or complex contract is involved;
You need attachment, an injunction, or another provisional remedy;
You are approaching a possible prescriptive deadline;
The prosecutor has dismissed the complaint or you received an adverse resolution;
You must decide whether to reserve or separately file the civil action;
You have been threatened, blackmailed, or placed in immediate danger; or
You are being asked to surrender a device, sign a settlement, or withdraw a complaint.

Those unable to afford private counsel may inquire with the Public Attorney’s Office about eligibility and available assistance.

Frequently asked questions

Can I file estafa if I do not know the scammer’s real name?

You may report the incident and provide every available identifier, such as aliases, account numbers, telephone numbers, profile URLs, email addresses, wallet addresses, and recipient details. Law enforcement may seek records through lawful process. A usable identity and address may still be necessary as the case progresses.

Should I send a demand letter first?

A demand can document the obligation, the request for accounting or return, and the recipient’s response. It is especially relevant in some misappropriation and dishonored-check cases. It is not required in exactly the same way for every form of estafa, and it cannot create deceit that did not exist. Do not delay urgent reporting merely to wait for a demand period.

Can the bank reverse the transaction?

Sometimes, but there is no automatic right to reversal merely because the sender reports fraud. Recovery may depend on the payment system, authorization history, whether the funds remain available, institutional rules, and the result of an investigation. Report immediately and obtain a reference number.

Is the receiving account holder automatically guilty?

No. Account ownership is important evidence, but criminal liability requires proof of the holder’s knowing participation or another legally sufficient basis. Some accounts may be compromised, opened using stolen identities, or used by intermediaries.

Can I report the same incident to the bank, police, NBI, and SEC?

Yes, when each body has a relevant role. Tell each office about prior reports and provide their reference numbers. Regulatory and institutional reports supplement the criminal process; they do not create multiple entitlements to recover the same loss.

Will repayment end the criminal case?

Not automatically. Estafa is prosecuted in the name of the People of the Philippines. Repayment may settle or reduce the civil liability and may have other legal effects, but the public prosecutor and court determine the criminal case.

Can several victims file together?

Victims may coordinate evidence and identify a common scheme, but each transaction and each respondent’s participation must still be established. Whether incidents constitute separate offenses or may be handled together is a legal and prosecutorial question.

Can I recover legal fees and emotional-distress damages?

Only when a legal basis exists and the claim is properly pleaded and proved. Attorney’s fees and moral or exemplary damages are not automatic consequences of filing or winning a case.

Can I publicly name the suspected scammer?

Public accusations can create defamation, privacy, safety, and evidentiary risks. Preserve the material and give it to the proper institution or authority. If a public warning is genuinely necessary, obtain legal advice and state only verified facts.

Official legal references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Facts, documents, venue, prescription, and the precise offense charged can materially change the analysis. Official sources and procedures were checked as of 16 September 2026.