Quick answer

If you suspect fraud or estafa, immediately contact the bank, e-wallet, payment platform, or remittance company used; ask it to flag the transaction and preserve records; secure your evidence; and report the incident to the police, the National Bureau of Investigation, or the appropriate prosecutor’s office. For online fraud, approach the PNP Anti-Cybercrime Group or the NBI cybercrime unit.

A criminal complaint may punish the offender, but it does not guarantee repayment. Recovery may be pursued through the civil liability included in the criminal case, an appropriate separate civil action, or a lawful settlement. The correct route depends on how the money or property was obtained, what was promised, where the relevant acts occurred, and whether the suspect still has reachable assets.

Act quickly. Funds can be transferred within minutes, electronic records may be deleted or retained only temporarily, and criminal and civil claims have prescriptive periods.

When suspected fraud may be estafa

Article 315 of the Revised Penal Code punishes several forms of swindling. Two common forms are:

Estafa through false pretenses

This may exist when a person made a false representation—such as pretending to own property, operate a legitimate business, possess authority, or have an actual investment opportunity—before or at the time the victim parted with money or property.

The prosecution ordinarily must establish that:

The accused made a false pretense, fraudulent representation, or fraudulent act;
The deceit occurred before or simultaneously with the victim’s payment or delivery;
The victim relied on the deceit; and
The victim suffered damage as a result.

A promise that later goes unfulfilled is not automatically estafa. Evidence must ordinarily show that the representation was false when made and that it induced the victim to part with money or property.

Estafa through misappropriation or conversion

This may arise when a person receives money or personal property in trust, on commission, for administration, or under another obligation to deliver or return it, then misappropriates, converts, or denies receiving it, causing prejudice to another.

Ownership and the obligation created by the parties’ agreement matter. A person’s mere failure to repay an ordinary loan is generally a civil matter, because ownership of borrowed money normally passes to the borrower. The result may differ where the money or property was entrusted for a specific purpose and had to be returned or delivered.

A prior demand is not invariably a statutory element, but a clear written demand and proof of receipt can help establish conversion, refusal, the amount claimed, and when the complainant discovered the problem.

The controlling text is Article 315, as amended by Republic Act No. 10951.

Not every unpaid obligation is criminal fraud

The following circumstances, standing alone, do not necessarily prove estafa:

Failure to repay a debt on time;
Breach of contract;
A business that genuinely failed;
A postdated check that was later dishonored;
Poor service or defective goods;
A disagreement over accounting or contract interpretation; or
A representation that was true when made but later became impossible to perform.

The Constitution prohibits imprisonment for debt. Criminal liability requires proof of the elements of a crime, not simply proof that money remains unpaid.

A dishonored check may raise a separate issue under Batas Pambansa Blg. 22. It becomes estafa only if the facts independently satisfy Article 315—for example, where a check was used as a deceitful means to obtain money or property and the required elements are proven. Different notice, timing, and evidentiary rules may apply to the two offenses.

Fraud committed online

Use of social media, messaging applications, email, websites, electronic banking, or other information and communications technology can affect the offense and penalty.

Section 6 of the Cybercrime Prevention Act of 2012 covers crimes under the Revised Penal Code when committed through information and communications technology and generally prescribes a penalty one degree higher. The Act also defines computer-related fraud, forgery, and identity theft. Which provision applies depends on the actual conduct; ordinary online deception is not automatically the same as unauthorized alteration of computer data.

The PNP and NBI are the principal law-enforcement authorities designated by the Act for cybercrime cases.

What to do immediately

1. Contact the financial service provider

Report the transaction through the bank’s, e-wallet’s, card issuer’s, remittance company’s, or platform’s official fraud channel. Ask for:

A case or reference number;
An attempt to recall, hold, trace, or reverse the funds, if legally and operationally possible;
Preservation of transaction, account, device, login, and recipient records;
Written confirmation of your report; and
Instructions for submitting an affidavit, police report, or additional documents.

Do not assume that a transfer can be reversed. A completed authorized transfer may be difficult to recover, while an unauthorized transaction may be governed by different contractual and regulatory rules. The receiving institution may also need legal process before it can disclose account-holder information or freeze funds.

If the institution is supervised by the Bangko Sentral ng Pilipinas, complain to the institution first. If the concern remains unresolved, it may be escalated through the BSP Consumer Assistance Mechanism. A BSP consumer complaint is not a substitute for a criminal report.

2. Secure your accounts

If credentials, cards, one-time passwords, identity documents, or devices may have been compromised:

Change passwords using a trusted device;
Sign out other active sessions;
Enable multi-factor authentication;
Lock affected cards or accounts;
Tell your mobile provider if your SIM may have been taken over;
Review linked accounts and scheduled transfers; and
Warn trusted contacts if the offender is impersonating you.

Never give an alleged “recovery agent” another payment, password, PIN, recovery phrase, or one-time password.

3. Preserve the evidence

Keep original files where possible. Save:

Full conversations, including dates, times, usernames, profile links, and phone numbers;
Emails with complete headers;
Advertisements, listings, websites, and social-media profiles;
Screenshots and screen recordings showing the surrounding context;
Contracts, receipts, invoices, acknowledgment letters, and demand letters;
Deposit slips, transfer confirmations, QR codes, reference numbers, and account details;
Bank or e-wallet statements;
Copies of identification or business documents supplied by the suspect;
Delivery records, call logs, recordings lawfully made or obtained, and witness details;
Proof showing why the representation was false; and
Evidence of the resulting loss and any partial refund.

Do not crop the only copy of a screenshot or edit original files. Make working copies, retain the originals, and back them up in at least two secure locations. Prepare a chronological table showing each representation, payment, promised act, follow-up, and response.

Evidence obtained by hacking an account, impersonating another person, or unlawfully accessing private data can create separate legal problems. Ask investigators or counsel to obtain protected records through lawful process.

4. Stop direct confrontation if it creates risk

Do not threaten, harass, publicly shame, or impersonate the suspected offender. Avoid making categorical public accusations before the facts are established. Preserve communications and let investigators handle coercive measures.

If a demand is appropriate, keep it factual: identify the transaction, amount or property, obligation, supporting documents, requested action, and reasonable deadline. Obtain proof of delivery. Consult counsel first if there is a risk of flight, asset concealment, retaliation, or destruction of evidence.

Where to report

Depending on the facts, a victim may approach:

The nearest police station for an incident report and investigation;
The PNP Anti-Cybercrime Group for technology-enabled fraud;
The National Bureau of Investigation, including its cybercrime investigators where appropriate; or
The Office of the City or Provincial Prosecutor having territorial jurisdiction.

A police or NBI report begins or supports an investigation. It does not by itself mean that a criminal case has already been filed in court.

For a prosecutor’s complaint, expect to submit a sworn complaint-affidavit, sworn witness statements, and supporting documents. State facts in chronological order and identify, as precisely as available:

Who made each representation;
Exactly what was said or supplied;
Why it was false;
When and where it was made and received;
How it caused the payment or delivery;
Where and how payment occurred;
What obligation to deliver or return existed;
How the money or property was converted or withheld;
The amount of the actual loss; and
What happened after demand.

The precise filing office, number of copies, accepted filing channel, and documentary checklist should be confirmed directly with the prosecutor’s office. Venue is legally important and may depend on where essential elements of the offense occurred—not merely where the victim now lives.

Under Rule 112 of the Rules of Criminal Procedure, offenses meeting the prescribed penalty threshold undergo preliminary investigation before an information is filed in court. Current National Prosecution Service procedures also govern prosecutor-level proceedings. Filing a complaint does not guarantee prosecution; the evidence must satisfy the applicable standard.

Penalties and amount thresholds

For the principal forms of estafa under Article 315, Republic Act No. 10951 presently uses these basic amount brackets:

Amount of fraud	Basic statutory penalty under Article 315
Not over ₱40,000	Arresto mayor in its medium and maximum periods
Over ₱40,000 but not over ₱1,200,000	Arresto mayor maximum to prisión correccional minimum
Over ₱1,200,000 but not over ₱2,400,000	Prisión correccional minimum and medium
Over ₱2,400,000 but not over ₱4,400,000	Prisión correccional maximum to prisión mayor minimum
Over ₱4,400,000	The statute provides an incremental rule, subject to a 20-year ceiling

These are statutory starting points, not a prediction of sentence. The charged mode of estafa, date of commission, amount proved, participation, modifying circumstances, plea, applicable cybercrime provision, and other laws can change the result. Courts—not complainants or investigators—determine guilt and the final penalty.

Ways to seek recovery

Civil liability in the criminal case

Under Rule 111, the civil action to recover civil liability arising from the offense is generally deemed instituted with the criminal action unless the offended party waives it, reserves the right to file it separately, or filed it earlier.

A judgment may order restitution, return of property, or payment of proven damages. Actual loss should be supported by receipts, statements, contracts, valuation evidence, and proof linking the loss to the offense.

Recovery still depends on identifying property or income that can lawfully be reached. A judgment is not the same as immediate payment.

A separate or independent civil action

Article 33 of the Civil Code permits an independent civil action in cases of fraud. Rule 111 provides that such an action may proceed independently and is decided by preponderance of evidence, but there can be no double recovery for the same act or omission.

Other civil claims may arise from a contract, quasi-contract, or another source of obligation. Their interaction with a criminal case—including possible suspension, consolidation, reservation, filing fees, and prescription—requires careful planning.

Do not casually waive or reserve the civil action. Once a criminal case is being prepared or filed, ask counsel which choice best protects recovery.

Attachment and preservation of assets

Rule 127 permits provisional remedies in connection with the civil action deemed instituted in a criminal case. Attachment may be available in specified circumstances, including certain cases involving fraudulently converted property, a defendant about to leave the Philippines, or concealment or disposal of assets.

Attachment is not automatic. It normally requires a proper application, supporting facts, compliance with procedural requirements, and often a bond. Seek urgent legal advice if identifiable assets are being transferred or hidden.

Settlement

A documented settlement can sometimes produce faster recovery, but private payment does not automatically extinguish criminal liability for a public offense. The legal effect depends on the charge and procedural stage.

Any settlement should clearly state:

The acknowledged amount or property;
Payment dates and method;
Security or collateral, if any;
Consequences of default;
Treatment of existing complaints and civil claims; and
Whether a release takes effect immediately or only after full payment.

Do not sign an affidavit of desistance, quitclaim, release, or statement that the complaint was false without understanding its consequences. Never make a false statement to investigators or the court.

Deadlines and prescription

There is no single deadline for every fraud case.

For offenses under the Revised Penal Code, prescription generally depends on the penalty fixed by law. Article 91 ordinarily measures the period from discovery of the crime by the offended party, authorities, or their agents, subject to statutory rules on interruption and recommencement. Special laws may use different periods and rules.

Civil actions have their own prescriptive periods depending on whether the claim arises from a written contract, oral contract, injury to rights, fraud, or another source. The relationship between criminal and civil proceedings can also affect whether a civil period is suspended or tolled.

Do not calculate prescription from an online summary alone. The date of commission or discovery, applicable law, place of commission, prior filings, and nature of the obligation can alter the analysis. Obtain legal advice immediately if significant time has passed.

Common mistakes that weaken a case

Reporting only to the payment platform and never approaching law enforcement;
Deleting conversations after taking a few screenshots;
Submitting cropped images that omit dates, account identifiers, or context;
Describing a simple unpaid debt as estafa without identifying the original deceit or entrustment;
Failing to explain how the false statement caused the payment;
Overstating the amount by including unsupported expected profits;
Sending more money for “taxes,” “release fees,” or supposed recovery expenses;
Paying unofficial investigators or fixers;
Posting accusations that expose the victim to retaliation or legal claims;
Waiting for the suspect to disappear before preserving records;
Filing in a place with no connection to an essential element of the offense; and
Signing a quitclaim or accepting an undocumented installment arrangement without advice.

When legal help is urgent

Consult a Philippine lawyer promptly when:

The loss is substantial or involves several victims;
Funds or assets are being transferred, concealed, or moved abroad;
The suspect is about to leave the country;
Prescription may be near;
The transaction involved a corporation, investment scheme, securities, cryptocurrency, trust arrangement, or multiple intermediaries;
The suspect is using stolen identities or compromised accounts;
You are being threatened, blackmailed, or pressured to withdraw;
Police or prosecutors have declined the complaint for jurisdictional or evidentiary reasons;
A settlement, affidavit of desistance, waiver, or quitclaim has been offered; or
You must decide whether to include, reserve, or separately file the civil action.

Those unable to afford private counsel may inquire with the Public Attorney’s Office or an Integrated Bar of the Philippines legal-aid office, subject to their eligibility and case-assistance rules.

Frequently asked questions

Can I file estafa if I do not know the suspect’s real name?

You may report the incident using the available aliases, usernames, account numbers, phone numbers, transaction identifiers, and technical records. Identification remains necessary for prosecution, but lawful investigation and disclosure requests may help establish it.

Is a demand letter required before filing?

Not in every form of estafa. For misappropriation or conversion, demand can be important evidence of the obligation and refusal, even when it is not indispensable as a matter of law. Do not delay an urgent bank or law-enforcement report merely to send a demand.

Can the police freeze the recipient’s account immediately?

A victim cannot assume that a police report automatically freezes an account. Banks and e-money issuers must follow applicable law and lawful orders. Prompt reporting may improve the chance of tracing or preserving funds, but reversal or recovery is never assured.

Can I recover money if the accused is acquitted?

Possibly. The answer depends on the basis of the acquittal and the legal source of the civil claim. Rule 111 states that extinction of the penal action does not always extinguish the civil action, although civil liability based on the offense is extinguished when a final judgment finds that the act or omission from which it could arise did not exist.

May I pursue both criminal and civil remedies?

Often yes, but the claims must be coordinated. Civil liability arising from the offense is generally included in the criminal action, while an independent action for fraud may be available under Article 33. Double recovery is prohibited.

Does a refund prevent an estafa case?

Not automatically. Repayment may affect the victim’s loss, settlement position, or the court’s assessment, but it does not necessarily erase a crime already completed. The timing and terms of repayment matter.

Is an online investment loss automatically estafa?

No. Investment losses can result from legitimate risk, civil breach, illegal securities activity, or criminal fraud. The representations made before payment, use of funds, licensing, and structure of the offer must be examined. Suspected unauthorized securities solicitation should also be reported to the Securities and Exchange Commission.

Official legal references

This article provides general legal information, not legal advice or a prediction of any case outcome. Fraud cases are highly fact-dependent; have a Philippine lawyer review the documents, dates, venue, available defendants, and recovery options. Laws and official procedures were checked as of September 17, 2026.