Quick answer

If you suspect fraud or estafa, act immediately: stop further payments, contact the bank or e-wallet involved, secure your accounts, preserve the complete transaction record, and report the incident to law enforcement. For a criminal case, you will ordinarily need a sworn complaint-affidavit and supporting evidence filed with the proper prosecutor’s office or referred through the police or National Bureau of Investigation.

Reporting may help trace the offender and preserve funds, but it does not guarantee reimbursement. Recovery may come through a disputed-transaction process with the financial institution, restitution or damages in the criminal case, or a separate civil action. The correct route depends on how the money was obtained, where the acts occurred, what documents exist, whether the transaction was authorized, and whether recoverable assets can still be located.

When fraud may amount to estafa

“Fraud” is a broad description. Estafa is a specific criminal offense under Article 315 of the Revised Penal Code. The prosecution must prove the particular form of estafa alleged—not simply that someone suffered a financial loss.

Common forms include:

Estafa by false pretenses or fraudulent acts. The offender makes a material false representation before or at the same time the victim parts with money or property; the victim relies on it; and that reliance causes damage.
Estafa by misappropriation or conversion. Money, goods, or property are received in trust, on commission, for administration, or under an obligation to deliver or return them, but are later misappropriated, converted, or denied to the prejudice of another.
Other forms expressly listed in Article 315, including certain fraudulent dealings involving signed documents, checks, or property.

The Supreme Court emphasizes that mere nonpayment of a debt or failure to perform a contract is not automatically estafa. The evidence must establish criminal fraud, such as deceit existing when the victim was induced to part with money, or a qualifying receipt and later conversion of property. A broken promise, delayed delivery, failed investment, or unpaid loan may instead be a civil dispute if fraudulent intent or the required act cannot be proved. See Cabral v. People and Corpuz v. People.

The precise charge may also be different from estafa. Depending on the facts, the conduct could involve computer-related fraud, identity theft, financial-account scamming, falsification, theft, an access-device offense, securities violations, or no criminal offense at all.

Online, account-based, and technology-assisted fraud

When estafa or another Revised Penal Code offense is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act of 2012 may apply. That law also separately covers computer-related fraud where unauthorized input, alteration, deletion, or system interference causes damage with fraudulent intent. An online transaction is not automatically “cybercrime”; the facts must satisfy the elements of the relevant offense.

The Anti-Financial Account Scamming Act, or AFASA, separately addresses matters such as:

knowingly allowing, lending, selling, buying, or using financial accounts for money-mule activities;
obtaining sensitive account information through deceptive social-engineering schemes;
opening or trading accounts under false identities; and
aiding, attempting, or participating in covered account-scamming offenses.

AFASA permits covered institutions to temporarily hold funds involved in qualifying disputed electronic transfers while coordinated verification is conducted. Under the law and the BSP’s implementing rules in Circular No. 1215, a temporary hold is subject to prescribed procedures and may not exceed 30 calendar days unless extended by a competent court. It is not an automatic reversal or finding that the recipient committed a crime.

AFASA also provides possible restitution consequences when an institution fails to employ adequate risk-management controls or the legally required degree of diligence. Liability remains fact-dependent; not every scam loss must be refunded by the bank or e-wallet.

What to do immediately

1. Stop the loss and secure your accounts

Do not send “release fees,” “taxes,” “verification deposits,” or additional investments to recover earlier payments. Scammers commonly use a promised refund to demand more money.

Contact the sending bank, receiving bank if known, e-wallet, card issuer, remittance company, or payment platform through its official channel. Ask it to:

mark the transaction as disputed or fraudulent;
secure or restrict the affected account;
preserve transaction, device, access, and beneficiary records;
initiate any available recall, chargeback, temporary hold, or coordinated verification;
issue a complaint or reference number; and
explain what documents and deadlines apply to its process.

Change compromised passwords from a trusted device, revoke unfamiliar sessions, replace exposed cards or SIMs where necessary, and enable multi-factor authentication. If identity documents were disclosed, alert the issuing agency and relevant financial institutions.

Speed matters because electronically transferred funds can be moved through several accounts or withdrawn quickly.

2. Preserve evidence before accounts or messages disappear

Keep original files where possible, not only cropped screenshots. Preserve:

the complete chat, email, SMS, marketplace, or social-media conversation;
profile names, usernames, page links, account URLs, phone numbers, and email addresses;
advertisements, product listings, investment presentations, contracts, invoices, and receipts;
bank statements, transfer confirmations, reference numbers, QR codes, wallet addresses, and beneficiary details;
call logs, voice messages, meeting links, and recordings lawfully obtained;
the exact representations that induced payment;
proof of what was promised, what was delivered, and the resulting loss;
demand letters, delivery records, returned checks, refund promises, and responses;
names and contact details of witnesses or other victims; and
complaint numbers and correspondence with banks, platforms, regulators, police, or prosecutors.

Export chats using the platform’s available function. Retain the original phone or computer and avoid factory-resetting it. Make at least one secure backup, while protecting passwords, one-time PINs, and unrelated personal data.

Prepare a simple chronology showing each date, representation, payment, follow-up, and discovery. This often makes the complaint easier to understand than a folder of unsorted screenshots.

3. Report through the appropriate channel

Depending on the facts, you may approach:

the local Philippine National Police station for an incident report and investigation;
the PNP Anti-Cybercrime Group for an online or technology-assisted offense;
the NBI, including its cybercrime investigators where appropriate;
the city or provincial prosecutor’s office with territorial jurisdiction;
the financial institution’s fraud or consumer-assistance unit;
the Bangko Sentral ng Pilipinas for an unresolved complaint involving a BSP-supervised institution;
the Securities and Exchange Commission for suspected unauthorized investment solicitation or securities activity; or
another regulator responsible for the business or transaction involved.

Use contact details published on the agency’s official website. Be cautious of search advertisements, social-media accounts, or people claiming that an agency requires payment to “release” recovered funds.

A police blotter or online report records the incident but does not necessarily commence a criminal prosecution. Ask what further sworn complaint, referral, or prosecutor filing is required.

Preparing a complaint-affidavit

A criminal complaint must identify the acts that constitute the offense, not merely label the respondent a “scammer.” Your sworn narrative should ordinarily state:

your identity and basis for personal knowledge;
the respondent’s known identity and identifying details;
when and where the relevant communications, representations, receipt of property, and payments occurred;
the exact false statement, trust arrangement, or duty to deliver or return;
why the statement was false or how the money or property was converted;
how you relied on the representation;
the amount and nature of the damage;
how the electronic accounts, devices, or platforms were used;
what happened after you demanded performance, accounting, or return; and
which attached document supports each important fact.

Number and label the attachments. If the respondent’s true name is unknown, provide all available account, device, transaction, and profile information so investigators can seek lawful disclosure or preservation orders.

Do not alter screenshots, exaggerate the loss, omit refunds, or claim personal knowledge of facts learned only from someone else. False or malicious reporting can itself create criminal and civil exposure.

Where the criminal complaint is filed

Territorial jurisdiction depends on where the offense or any essential ingredient occurred. Relevant locations may include where the false representation was made or received, where money or property was delivered, or where damage occurred. Online and cross-border cases require careful venue analysis.

Complaints needing preliminary investigation are generally filed with the proper city or provincial prosecutor or another authorized prosecution office. Under the current National Prosecution Service framework, the prosecutor evaluates whether the evidence provides a sufficient basis to pursue the charge, applying the governing prima facie-evidence and reasonable-certainty-of-conviction standard. A complaint may be dismissed when its allegations or supporting documents do not establish the elements of an offense.

If the prosecutor issues a subpoena, the respondent is given an opportunity to submit a counter-affidavit and evidence. Parties must follow the deadline stated in the subpoena or order. Do not assume that informal negotiations, a police report, or a pending bank investigation extends a prosecution deadline.

For a low-penalty offense between parties residing in the same city or municipality, barangay conciliation may sometimes be a precondition. Numerous exceptions apply, including limits based on the offense, penalty, residence, urgency, and the parties involved. Confirm the requirement with the prosecutor or a lawyer instead of filing in the wrong forum.

Important amount thresholds

The amount of fraud generally affects the penalty for estafa, but it does not by itself determine whether fraud occurred. As amended by Republic Act No. 10951, Article 315 uses these principal amount brackets:

not more than ₱40,000;
over ₱40,000 but not more than ₱1.2 million;
over ₱1.2 million but not more than ₱2.4 million;
over ₱2.4 million but not more than ₱4.4 million; and
amounts over ₱4.4 million, for which the provision adds time for specified increments, subject to its 20-year ceiling.

Penalty computation can change with the mode of estafa, amount, date of the offense, use of technology, mitigating or aggravating circumstances, and other applicable laws. It should not be calculated from the amount alone.

Time limits: do not wait

There is no single filing deadline for every fraud case. Criminal prescription depends on the offense ultimately charged, its prescribed penalty, the applicable special law, the date the crime was committed or discovered, and legally recognized interruptions or suspensions.

Civil deadlines also differ according to the cause of action and documents. Under the Civil Code, actions based on a written contract generally have a different prescriptive period from actions based on an oral contract, injury to rights, fraud, or annulment. The date from which the period runs can also be disputed.

Treat any delay as risky. Evidence may be deleted, records may be retained only for limited periods, funds may leave the financial system, and a claim may prescribe even while the victim is attempting informal settlement. Obtain case-specific advice promptly if significant time has passed.

Routes for recovering money or property

Recovery through the financial institution

For electronic transfers, immediately invoke the institution’s fraud and disputed-transaction process. Supply accurate transaction details and cooperate with verification. A recall, hold, or freeze depends on the type of transaction, the status of the funds, the legal basis, and the institutions involved.

A pending complaint does not authorize you to access, seize, or publicly expose another person’s account. Formal account disclosure and restraint generally require lawful institutional, regulatory, investigative, or judicial process.

Civil liability in the criminal case

Under Rule 111 of the Rules of Criminal Procedure, the civil action to recover civil liability arising from the charged offense is generally deemed instituted with the criminal action unless the offended party:

waives it;
properly reserves the right to file it separately; or
filed it before the criminal action.

A reservation must be made before the prosecution begins presenting evidence and under circumstances giving the offended party a reasonable opportunity to reserve. The rules for a bouncing-check prosecution under Batas Pambansa Blg. 22 are different: the corresponding civil action is included, and a separate reservation is not allowed.

Discuss this choice early with counsel. Filing parallel cases without considering Rule 111 can cause suspension, duplication, filing-fee issues, or inconsistent strategies. Double recovery for the same loss is not allowed.

The court may award proven restitution or damages, but a favorable judgment is not the same as actual collection. Enforcement may still require locating non-exempt assets, garnishing funds, levying property, or using other lawful remedies.

A separate civil case

A civil claim may be appropriate when the evidence better establishes a contract, debt, restitution, rescission, unjust enrichment, or damages than a criminal offense. Civil liability ordinarily requires proof by a preponderance of evidence, while criminal guilt must be proved beyond reasonable doubt.

A qualifying money claim of ₱1 million or less, exclusive of interest and costs, may fall under the Supreme Court’s Rule on Small Claims. Coverage still depends on the nature of the claim, venue, parties, and exclusions in the Rules on Expedited Procedures in the First Level Courts. Small claims are designed to be simplified, but they are not a substitute for the criminal investigation of a scam.

Provisional remedies

In an appropriate case, counsel may consider attachment or another provisional remedy to preserve assets. Rule 127 allows attachment in specified circumstances, including certain fraudulent conversion cases, concealment or disposal of property, a respondent about to leave the Philippines, or residence abroad. These remedies require legal grounds, court process, and often a bond; they are not granted merely because fraud is alleged.

Settlement, repayment, and desistance

Repayment can reduce the remaining civil loss and may influence the parties’ decisions, but it does not automatically erase criminal liability once estafa has been committed. The Supreme Court has repeatedly treated subsequent reimbursement or compromise as generally not extinguishing the public offense.

Before signing a settlement, affidavit of desistance, quitclaim, release, or confidentiality clause, confirm:

the exact amount and payment dates;
whether payment is secured;
what happens upon default;
which civil claims are released;
whether the document contains inaccurate statements;
how it affects an existing complaint; and
whether the prosecutor or court must still act on the criminal case.

Do not state that no crime occurred if that is untrue. Prosecutors and courts, not private parties alone, decide whether a public criminal case should proceed.

Common mistakes that weaken a case

Continuing to pay after the supposed seller, investor, or recovery agent changes the explanation.
Deleting the conversation after taking only selected screenshots.
Reporting only a profile name without payment and account identifiers.
Describing a simple unpaid debt as estafa without evidence of prior deceit or conversion.
Sending threats, publishing personal data, or impersonating investigators to force payment.
Editing transaction records or leaving out partial refunds and material conversations.
Filing in a location with no connection to an essential element of the offense.
Assuming a police blotter, demand letter, or bank ticket automatically starts the criminal case or stops prescription.
Reserving a separate civil action too late.
Paying an unofficial “investigator,” “hacker,” or asset-recovery service promising guaranteed reimbursement.
Accepting payment from an unknown third party without checking whether it may be another victim’s money.

When legal help is urgent

Consult a Philippine lawyer promptly when:

the loss is substantial or involves many victims;
funds are still traceable and an urgent preservation or provisional remedy may be possible;
the respondent is transferring, hiding, or selling assets;
the transaction crosses cities, provinces, or national borders;
cryptocurrency, shell companies, investment solicitation, or multiple mule accounts are involved;
the prosecutor has issued a subpoena, resolution, or short deadline;
prescription may be approaching;
the dispute could be characterized as either civil breach or criminal fraud;
you are being asked to execute a desistance, quitclaim, or settlement; or
you have been accused of receiving or transferring scam proceeds.

Victims who cannot afford private counsel may ask the Public Attorney’s Office about eligibility and available assistance. The Integrated Bar of the Philippines and accredited legal-aid organizations may also have referral or legal-aid programs.

Frequently asked questions

Can I file estafa if I do not know the scammer’s real name?

You may report the incident using all available identifiers, but identifying the responsible person remains necessary for prosecution. Preserve usernames, account numbers, phone numbers, URLs, transaction references, device information, and communications that investigators can use in seeking lawful records.

Is a demand letter always required?

Not in every form of estafa. In misappropriation cases, a demand can be important evidence of the obligation to account for or return property and of the recipient’s failure to do so, but the legal elements depend on the specific charge. A demand letter does not transform an ordinary debt into estafa.

Can the bank automatically reverse a transfer?

Usually not. Availability of reversal, chargeback, or a temporary hold depends on the payment rail, whether the transaction was authorized, whether the funds remain available, and the institution’s rules and legal duties. Report immediately and obtain a reference number.

Does an online promise that turns out false prove estafa?

No. The evidence must show the required fraudulent representation or act, reliance, and damage. A representation made only after the victim had already paid ordinarily cannot be the inducement for that earlier payment, although it may be relevant to intent or another offense.

Will a refund end the criminal complaint?

Not automatically. Repayment may satisfy some or all civil liability, but later reimbursement generally does not erase a completed public offense. The prosecutor or court determines the criminal case.

Can I pursue both criminal and civil remedies?

Often yes, but their timing and coordination are governed by Rule 111. The civil liability arising from the offense is normally included in the criminal case unless waived, reserved, or previously filed. Obtain advice before choosing or changing routes.

Does an acquittal always prevent recovery?

No. Civil liability is not necessarily extinguished by acquittal. The result depends on the ground for acquittal and the legal basis of the civil claim. Civil liability arising from the offense is extinguished if a final criminal judgment finds that the act or omission from which it could arise did not exist.

Should I post the suspect’s identity online?

Public accusations can create privacy, harassment, safety, and defamation risks and may alert the suspect to destroy evidence or move assets. Give evidence to the financial institution, investigator, prosecutor, regulator, or lawyer through proper channels.

Official legal sources

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Procedures and conclusions may change according to the charge, evidence, location, transaction, and later issuances. Official sources were checked as of 15 September 2026.