Quick answer

If you suspect fraud or estafa, act immediately. Stop further payments, secure the affected accounts, preserve the evidence, and report the transaction to the bank, e-wallet, payment provider, or remittance company involved. Ask for a case or reference number and request that the recipient account and disputed funds be traced and handled under applicable anti-fraud procedures.

Then report the incident to the Philippine National Police (PNP), the National Bureau of Investigation (NBI), or—particularly for online transactions—their cybercrime units. A criminal complaint is ordinarily pursued through the proper Office of the City or Provincial Prosecutor, supported by a sworn complaint-affidavit, witness affidavits, and documents establishing the deception, transfer of money or property, resulting loss, and the respondent’s participation.

A report does not automatically result in reimbursement, arrest, or conviction. Recovery depends on factors such as how quickly the transaction was reported, whether funds remain traceable, the evidence available, the legal basis for holding or returning funds, and whether the offender has assets.

What counts as estafa?

Article 315 of the Revised Penal Code punishes specified forms of swindling. Calling conduct a “scam” is not enough; the facts must satisfy a mode of estafa or another offense.

Common forms include:

False pretenses or fraudulent acts. A person uses a fictitious identity or makes material false claims about authority, qualifications, property, credit, agency, business, or an imaginary transaction. The deceit must generally occur before or at the same time as the victim parts with money or property, and the victim must have relied on it and suffered damage.
Misappropriation or conversion. A person receives money, goods, or other personal property in trust, on commission, for administration, or under an obligation requiring delivery or return, but misappropriates or converts it to another use, denies receipt, or otherwise prejudices the owner.
Fraud involving checks. Particular circumstances involving a postdated or unfunded check may fall under Article 315. A dishonored check can also raise a separate issue under Batas Pambansa Blg. 22, but dishonor alone does not establish every element of estafa.
Other fraudulent means specified by law. These include deceitfully inducing a person to sign a document and certain other conduct expressly listed in Article 315.

The current statutory text and amount-based penalty bands appear in Republic Act No. 10951, which amended Article 315.

A broken promise is not automatically estafa

Failure to repay a loan, complete a project, deliver goods, or comply with a contract is not by itself proof of criminal fraud. The dispute may be purely civil if the evidence shows only nonperformance, delay, insolvency, poor management, or a later change of circumstances.

For false-pretenses estafa, the prosecution generally must prove that the fraudulent representation existed before or when the victim surrendered money or property. A promise that was honestly made but later broken does not automatically become criminal.

For misappropriation or conversion, the legal basis on which the property was received matters. Money transferred as ownership, such as the proceeds of an ordinary loan, is legally different from identifiable property received with a duty to deliver or return it. The contract, receipts, instructions, and actual handling of the property must be examined.

What to do immediately

1. Stop the loss and protect your accounts

Do not send another “release fee,” “tax,” “verification payment,” or “recovery charge.”
Contact the bank, e-wallet, card issuer, remittance company, exchange, or payment provider through its official app, website, branch, or published hotline.
Identify the transaction as fraudulent or disputed and provide the date, time, amount, reference number, and destination account.
Request an account lock, password reset, token or card replacement, transaction recall, beneficiary-account review, and preservation of relevant records, as applicable.
If credentials or one-time passwords were exposed, change passwords from a trusted device. Secure the linked email address and mobile number as well.
Notify the mobile provider if a SIM was lost, taken over, or fraudulently replaced.
Obtain written confirmation or a ticket number. Record when the report was made and the name or identifier of the representative who received it.

Do not assume that deleting an app, changing a password, or reporting a social-media account will reverse the transaction.

2. Ask the financial institution to trace the funds

Republic Act No. 12010, the Anti-Financial Account Scamming Act (AFASA), covers financial-account scamming such as money-mule activity and specified social-engineering schemes. It establishes mechanisms for coordinated verification of disputed transactions.

Under AFASA, covered institutions may temporarily hold funds subject to a disputed transaction within the period prescribed by the Bangko Sentral ng Pilipinas, which may not exceed 30 calendar days unless extended by a competent court. Whether a hold is justified and whether funds can ultimately be returned depend on the law, implementing rules, validation results, account balances, and the facts of the transaction. Read the official text of Republic Act No. 12010.

A hold is not the same as reimbursement. It is a time-sensitive measure intended to prevent further movement while the transaction is verified.

3. Preserve evidence before accounts or messages disappear

Keep the original files and make secure backups. Preserve:

Complete chats, emails, text messages, call logs, and voice messages
Advertisements, product listings, investment presentations, profiles, usernames, and profile links
The full website address, not only a screenshot of the page
Receipts, transaction confirmations, bank statements, QR codes, account numbers, wallet addresses, and reference numbers
Contracts, invoices, acknowledgment receipts, delivery records, demand letters, and proof of promised terms
Names, aliases, telephone numbers, email addresses, physical addresses, government-issued identification previously supplied, and business-registration claims
Screenshots showing the date and time, together with exported conversations or downloaded files when available
Records of calls to financial institutions, platforms, police, and other agencies
Names and contact details of witnesses or other victims
Proof of actual loss, including payments, fees, replacement expenses, and property transferred

Do not crop the only copy of a screenshot or alter its metadata. Keep both the original and a working copy. Do not impersonate another person, unlawfully enter an account, threaten the suspect, or publish sensitive personal information in an attempt to obtain more evidence.

4. Write a clear chronology

Prepare a timeline stating:

How and when you encountered the person or offer
What representations were made
Why you believed them
What verification you performed
When and how money or property was transferred
Who received or controlled it
What happened afterward
When you discovered the suspected fraud
What reports and recovery requests you made

Separate facts you personally observed from information supplied by someone else. Identify each supporting document by date and description.

Where to report

Several reports may be appropriate because criminal investigation, financial recovery, platform enforcement, and regulatory action serve different purposes.

The financial institution or payment provider

Report first to every institution involved, especially when funds were transferred electronically. Use only verified contact details. Ask the sending institution to communicate promptly with the receiving institution.

If the complaint concerns the conduct of a regulated financial-service provider, use its formal consumer-assistance mechanism. If unresolved, the appropriate financial regulator may offer a complaint, mediation, or adjudication process under the Financial Products and Services Consumer Protection Act.

The relevant regulator may be:

The Bangko Sentral ng Pilipinas for BSP-supervised institutions
The Securities and Exchange Commission for securities, public investment solicitations, lending or financing entities under its authority, and unregistered investment schemes
The Insurance Commission for regulated insurance, pre-need, and related products
The Cooperative Development Authority for covered cooperative financial services

A regulator’s authority depends on the provider and product. A regulatory complaint does not replace a criminal complaint.

PNP or NBI

You may report to the nearest police station or the appropriate investigative office. For internet-enabled conduct, reports may be directed to the PNP Anti-Cybercrime Group or the NBI, including its cybercrime investigators.

Bring identification, a concise chronology, transaction records, suspect identifiers, original electronic evidence where available, and printed or organized copies. Ask for the complaint, blotter, or reference number.

A police or NBI report begins documentation and investigation; it is not necessarily the formal institution of the criminal action.

Office of the City or Provincial Prosecutor

A criminal complaint may be filed with the prosecutor’s office having territorial jurisdiction. Venue is fact-dependent: a criminal action is generally brought where the offense was committed or where an essential ingredient occurred. Online transactions may involve several locations, so venue should be evaluated from the actual communications, payment, receipt, and resulting damage.

The complaint normally requires:

A sworn complaint-affidavit based on personal knowledge
Sworn affidavits from material witnesses
Clearly marked supporting documents
The respondent’s known address and identifying details
Sufficient copies and any locally required filing or data forms

Current DOJ-NPS rules determine whether the matter undergoes summary investigation, preliminary investigation, or another applicable process. The prosecutor—not the complainant—decides what offense the evidence supports and whether the required evidentiary threshold is met.

Online fraud and related offenses

Using the internet does not automatically make every failed transaction “cybercrime.” The precise conduct matters.

The Cybercrime Prevention Act of 2012 separately addresses computer-related fraud, forgery, identity theft, and other offenses. It also covers crimes under the Revised Penal Code or special laws when committed through information and communications technologies, subject to the statute and controlling case law.

Computer-related fraud under the Act concerns unauthorized input, alteration, or deletion of computer data or programs, or interference with a computer system, causing damage with fraudulent intent. That is not identical to every deception communicated through Facebook, text, email, or a marketplace.

Depending on the facts, investigators may also examine identity theft, falsification, unauthorized account access, financial-account scamming, securities violations, or other offenses. Avoid choosing charges solely from social-media descriptions; describe the acts and supply the evidence.

Investment scams

Treat these warning signs seriously:

Guaranteed or unusually consistent profits
Pressure to invest immediately
Returns supposedly generated mainly from later investors
Payments demanded through personal accounts or changing e-wallets
Refusal to provide registration and offering documents
Claims that SEC company registration alone authorizes public investment solicitation
A dashboard showing profits but requiring additional deposits before withdrawal
Recruitment commissions that dominate any genuine product or service
Requests to lend, rent, sell, or “verify” your bank or e-wallet account for another person

Company registration is not the same as authority to solicit investments from the public. Preserve the offer, presentation, account details, payment trail, and representations about returns, then verify and report through the SEC’s official channels.

Seeking repayment or compensation

Civil liability in the criminal case

Under Rule 111 of the Rules of Criminal Procedure, the civil action to recover civil liability arising from the alleged offense is generally deemed instituted with the criminal action unless the offended party waives it, reserves the right to sue separately, or filed the civil action earlier. Different rules apply to certain offenses, including B.P. Blg. 22 cases.

Potential relief may include restitution, reparation, or indemnification for proven loss. Recovery still depends on proof, a favorable disposition, available property, and successful enforcement. A conviction does not create money or guarantee collection.

Before filing a separate civil case or making a reservation, obtain advice. The timing can affect whether proceedings are suspended, consolidated, or barred from duplicating recovery. The governing provisions are in Rules 110–127 of the Rules of Court.

Direct financial-institution remedies

AFASA provides potential institutional liability in specified circumstances, including failures concerning required risk-management systems, diligence, or temporary holding of disputed funds. It does not make a financial institution automatically liable for every scam or every customer-authorized transfer. Liability and restitution require application of the statute, BSP rules, and the particular evidence.

Under Republic Act No. 11765, the BSP and SEC may adjudicate qualifying, purely civil financial-transaction claims seeking only payment or reimbursement of money not exceeding ₱10 million, within their respective jurisdictions. Regulatory remedies may involve prerequisites and do not necessarily determine the suspect’s criminal liability.

A separate civil action

A lawyer may assess contractual remedies, rescission, collection, damages, unjust enrichment, independent civil actions, provisional remedies, or claims against additional responsible parties. The correct action depends on the documents, the source of the obligation, the defendant’s identity and location, and whether a criminal case is pending.

Small-claims procedure may be available for a qualifying money claim within the current jurisdictional limit, but not every fraud-related claim fits that procedure. Classification should be checked before filing.

Settlement

Repayment discussions do not necessarily erase criminal liability. Do not sign an affidavit of desistance, waiver, quitclaim, confidentiality agreement, or full settlement without understanding its effect on the criminal and civil claims.

Use traceable payment methods and a written agreement that clearly states the amount, deadlines, defaults, security, and whether claims are released immediately or only after full payment. Never surrender original evidence merely because repayment was promised.

Penalties and amount thresholds

For most modes of Article 315 estafa, Republic Act No. 10951 sets these amount bands:

Amount of fraud	Statutory penalty
Not over ₱40,000	Arresto mayor in its medium and maximum periods
Over ₱40,000 up to ₱1.2 million	Arresto mayor in its maximum period to prisión correccional in its minimum period
Over ₱1.2 million up to ₱2.4 million	Prisión correccional in its minimum and medium periods
Over ₱2.4 million up to ₱4.4 million	Prisión correccional in its maximum period to prisión mayor in its minimum period
Over ₱4.4 million	The statute applies its maximum-period and incremental rules, subject to the stated 20-year ceiling

Article 315 contains a separate, more severe schedule for the particular check-based mode described in paragraph 2(d). Cybercrime, securities, falsification, identity-theft, money-mule, or other charges may carry different consequences. The court determines the proper penalty only after the offense, amount, date, and applicable law are established.

Deadlines and delay

Do not wait for the suspect to disappear or for every document to become available. Criminal and civil claims are subject to prescription, but the period varies with the offense, prescribed penalty, legal source of the claim, date of discovery or accrual, and legally recognized interruptions.

Barangay conciliation may also affect some disputes when the parties reside in the same city or municipality and the matter falls within the Katarungang Pambarangay Law. Several exceptions apply, including exclusions based on the nature or penalty of the offense and circumstances requiring urgent legal action.

Because classification changes the deadline and procedure, obtain legal advice promptly instead of relying on a general online limitation period.

Common mistakes to avoid

Waiting days before notifying the bank or e-wallet
Sending more money to unlock a refund or withdrawal
Reporting only to the social-media platform
Deleting the conversation after taking a few screenshots
Submitting a long accusation without a dated chronology or transaction trail
Exaggerating facts or naming people without evidence of participation
Assuming the account holder is necessarily the mastermind
Treating every unpaid debt as criminal estafa
Posting the suspect’s identification documents or banking data publicly
Paying an unverified “hacker,” “asset retriever,” or recovery agent
Filing in a convenient location without checking territorial jurisdiction
Signing a waiver or settlement before payment is complete
Assuming a police report automatically freezes an account or returns funds

When legal help is urgent

Consult a Philippine lawyer promptly when:

The loss is substantial or still increasing
Funds have moved through several banks, e-wallets, crypto wallets, or countries
You need a court order to preserve assets or records
The financial institution refuses to document or investigate a timely dispute
A company, partnership, estate, or several victims are involved
The transaction involves an investment, real property, trust, corporate funds, or fiduciary duties
A prosecutor has dismissed the complaint or issued a resolution with a short review deadline
You are being pressured to sign a waiver or affidavit of desistance
The suspect is threatening, blackmailing, stalking, or exploiting intimate material
Your identity, SIM, email, or financial account has been taken over
You unknowingly received or transferred suspected criminal proceeds
A prescription period, barangay requirement, venue issue, or foreign element is uncertain

If you cannot afford private counsel, inquire with the Public Attorney’s Office about eligibility and available assistance. The Integrated Bar of the Philippines and local legal-aid programs may also provide referrals.

Frequently asked questions

Can I file even if I know only an alias or account number?

Yes, you may report the facts and provide every available identifier. Formal prosecution ultimately requires sufficient identification and evidence connecting a person to the offense. An account holder may be a perpetrator, accomplice, identity-theft victim, or money mule; investigators must establish the role.

Should I report to the bank or the police first?

For an electronic transfer, contact the financial institution immediately because funds can move in minutes. Make the law-enforcement report as soon as possible afterward—or simultaneously if someone can assist you. Obtain reference numbers from both.

Will the bank automatically refund an authorized transfer?

No. A transfer you personally confirmed may still have been induced by fraud, but reimbursement is not automatic. The institution will consider the transaction, authentication, customer conduct, applicable consumer-protection rules, AFASA obligations, and the evidence.

Is a demand letter required before filing estafa?

Not in every mode of estafa. A demand can be important evidence in misappropriation or conversion cases, particularly in showing failure to account for or return property, but it does not substitute for proof of receipt, the duty to deliver or return, conversion, and prejudice. A demand letter also cannot turn a purely civil breach into a crime.

Does repayment end the criminal case?

Not automatically. Repayment may affect the civil claim and may be relevant to the proceedings, but a crime is prosecuted in the name of the People of the Philippines. The legal effect of settlement depends on the charge, stage of the case, and terms of the agreement.

Can I recover legal fees and emotional damages?

Only if there is a legal and evidentiary basis. Attorney’s fees and moral or exemplary damages are not automatic. They must be properly claimed and proved, subject to the governing substantive and procedural rules.

Can several victims file together?

Victims should coordinate evidence and identify common accounts, representations, and actors. Whether complaints should be consolidated or separately filed depends on venue, transactions, respondents, and the relationship among the offenses. Each victim should preserve and authenticate their own records.

What if the fraudster is abroad?

Report locally without delay and preserve the cross-border payment and communications trail. International tracing, evidence requests, extradition, and enforcement are more complex and are not guaranteed. The location of the offender does not make early reporting less important.

Can I publicly expose the suspected scammer?

Public posting can prejudice an investigation, reveal confidential information, alert suspects, endanger victims, and create privacy or defamation risks. Give the complete evidence to institutions, regulators, investigators, prosecutors, and counsel. If issuing a public warning, stick to verifiable facts and avoid publishing sensitive data.

Official legal sources

This article provides general Philippine legal information, not advice for a particular case and not a guarantee of recovery or prosecution. Procedures and legal consequences depend on the documents, dates, locations, payment method, and conduct of each participant. Official sources were checked as of 19 September 2026.