Quick answer

If you suspect fraud or estafa, act immediately: stop further payments, secure your accounts, notify every bank or e-wallet involved, preserve the evidence, and report the incident to law enforcement. If you want criminal charges pursued, prepare a sworn complaint supported by documents and file it with the prosecutor’s office or through the appropriate law-enforcement unit.

Reporting the crime does not automatically recover the money. Recovery may come from:

A prompt hold, reversal, or restitution process through the financial institution;
Civil liability included in the criminal case;
A separate civil or small-claims action when legally appropriate;
A lawful settlement; or
Enforcement of a final judgment against assets of the person held liable.

Speed matters, especially when money was transferred electronically. Funds may be withdrawn, divided among “mule” accounts, converted to cryptocurrency, or sent abroad within hours.

First steps after discovering the fraud

1. Stop communicating and paying

Do not send a “release fee,” “tax,” “verification deposit,” “lawyer’s fee,” or additional investment merely because the other party promises to return your money. Do not give an OTP, PIN, password, recovery code, screen-sharing access, or remote control of your device.

If threats are involved, save them and contact the police. Do not arrange a private confrontation.

2. Contact the financial institution immediately

Call the official fraud hotline or use the in-app support channel of your bank, e-wallet, card issuer, remittance company, or payment service provider. Do not use contact details supplied by the suspected scammer.

Give the institution:

Your name and account details;
Transaction date, time, amount, and reference number;
Recipient account name, number, bank, or e-wallet;
A short explanation of why the transaction is disputed;
Any police, NBI, or prosecutor reference number already available; and
Copies of relevant messages or transaction records.

Ask for a case or ticket number and written confirmation of the report. Request preservation of transaction records and coordination with the receiving institution.

Under the Anti-Financial Account Scamming Act, covered institutions may temporarily hold funds involved in a disputed transaction under BSP rules. The statutory period cannot exceed 30 calendar days unless extended by a competent court. A report does not guarantee a hold or refund: the institution must assess the transaction, and recovery may be impossible if the money has already left the financial system.

The same law may require restitution where a covered institution failed to employ adequate risk controls or failed to exercise the legally required degree of diligence. Liability is fact-specific. It does not mean that every scam loss must automatically be reimbursed.

3. Secure your accounts and devices

If account access, identity information, or an OTP may have been compromised:

Change passwords using a clean device;
Sign out other sessions;
Replace exposed cards or SIMs;
Enable multi-factor authentication;
Ask the bank or e-wallet to block affected access;
Inform your mobile network if your SIM was taken over;
Check for unauthorized loans, purchases, transfers, or account changes; and
Remove unfamiliar remote-access or screen-sharing applications.

Do not factory-reset, discard, or repair the affected device until important evidence has been preserved.

When conduct may amount to estafa

Article 315 of the Revised Penal Code punishes several forms of swindling. The label “scam” is not enough; the evidence must establish the elements of a particular offense.

Estafa by false pretenses or fraudulent acts

This commonly involves a false identity, imaginary business, nonexistent goods, false qualifications, fraudulent investment, or or a false claim of authority, credit, property, or agency.

Ordinarily, the prosecution must show that:

The accused made a material false representation or used a fraudulent act;
The representation was made before or at the time the victim parted with money or property;
The victim relied on it; and
The reliance caused financial or property damage.

A lie made only after the money was obtained may not satisfy this particular form of estafa, although other offenses or civil remedies may apply.

Estafa through misappropriation or conversion

This may apply when a person receives money or personal property in trust, on commission, for administration, or under an obligation to deliver or return the same property, and then misappropriates, converts, or denies receiving it, causing prejudice.

The document and the nature of the transfer are critical. If ownership of money passed to the recipient and the obligation was simply to pay an equivalent amount later, the dispute may be a debt rather than estafa through conversion.

A prior demand is commonly useful evidence of misappropriation or denial, but it is not a substitute for proof of all the elements. Keep the demand and proof that it was delivered.

Other forms

Article 315 also covers specified conduct such as abuse of a signature in blank, inducing a person through deceit to sign a document, and certain check-related fraud. A dishonored check may also raise issues under Batas Pambansa Blg. 22, which has distinct elements, notice requirements, defenses, and rules on civil liability.

The current value-based penalties under Article 315 were adjusted by Republic Act No. 10951. The amount involved, method used, date of the offense, and applicable amendments affect the potential charge, penalty, court jurisdiction, preliminary investigation, and prescription period.

Not every unpaid obligation is estafa

A failed business, unpaid loan, delayed delivery, broken promise, or breach of contract is not automatically criminal fraud. A good-faith inability to perform may create civil liability without establishing estafa.

For deceit-based estafa, evidence that the offender already intended to deceive when the victim parted with money is usually decisive. Relevant facts may include:

Use of a false identity or forged documents;
A nonexistent product, property, license, office, or project;
False statements about ownership or authority;
Multiple victims given the same false story;
Immediate diversion or withdrawal of the money;
Fabricated receipts or transaction records;
Blocking the victim immediately after payment; or
Admissions showing that the promised transaction never existed.

Nonperformance alone does not prove fraudulent intent. Conversely, calling an arrangement a “loan” or “investment” does not prevent prosecution when the evidence shows deception from the beginning.

Online and account-based fraud

When estafa or another Revised Penal Code offense is committed through information and communications technology, the Cybercrime Prevention Act may apply. Section 6 generally provides a penalty one degree higher for a crime defined by the Revised Penal Code or a special law when committed by, through, and with the use of ICT.

Other possible offenses depend on the conduct, including:

Computer-related fraud;
Computer-related identity theft;
Illegal access;
Forgery or use of forged electronic data;
Access-device offenses;
Money-muling or social-engineering offenses under the Anti-Financial Account Scamming Act; and
Securities-law violations involving unauthorized or fraudulent investments.

A prosecutor determines the proper charge from the facts. Victims do not need to identify every possible offense before reporting.

Where to report

Police, PNP Anti-Cybercrime Group, or NBI

For an online scam, account takeover, identity theft, phishing incident, or electronically facilitated fraud, report to:

The nearest police station;
The PNP Anti-Cybercrime Group; or
The National Bureau of Investigation, including its cybercrime or regional offices.

These agencies may receive reports, preserve leads, identify account holders, and investigate. Obtain a copy or reference number for every report.

A police blotter or online report records and assists the investigation, but it is not necessarily the sworn criminal complaint that begins prosecution.

Office of the prosecutor

A criminal complaint may be filed with the Office of the City or Provincial Prosecutor having territorial jurisdiction. Venue ordinarily lies where the offense, or any essential ingredient of it, occurred. In electronic transactions, determining the proper place can require analysis of where the representations were received, where reliance and payment occurred, and where the damage was suffered.

Under Rules 110 and 112 of the Rules of Criminal Procedure, the complaint should identify the respondent’s address and be supported by the complainant’s and witnesses’ sworn affidavits and other evidence establishing probable cause. The required number of copies is generally one for each respondent plus two for the official file. Local offices may impose additional administrative or formatting requirements, so confirm the current checklist before filing.

A preliminary investigation is required when the prescribed penalty reaches the threshold stated in Rule 112—at least four years, two months, and one day, without regard to the fine. Whether that threshold is met depends on the applicable charge and amount.

Other regulators

Also consider the appropriate regulator when the scheme involves a regulated activity:

Report investment solicitations, unregistered securities, or unauthorized investment-taking to the Securities and Exchange Commission.
First complain to the bank or other BSP-supervised institution through its official consumer-assistance channel. If unresolved, consult the Bangko Sentral ng Pilipinas for its current consumer-assistance process.
Report deceptive online selling or consumer transactions to the relevant consumer-protection office, without assuming that an administrative complaint replaces a criminal complaint.

Use only current channels published on the agency’s official website. Beware of fake “recovery agents” pretending to represent a government office.

Preparing the complaint

Build a clear chronological account. State facts you personally know and identify information learned from records or other witnesses.

Include:

The respondent’s name, aliases, account names, usernames, telephone numbers, addresses, and known identifying details;
The first contact and each material representation;
Why the representation was false;
What caused you to rely on it;
Each payment or transfer, with date, amount, channel, recipient, and reference number;
The promised delivery, return, or use of the property;
What happened afterward;
Any demand and response;
The precise amount of loss; and
The recovery or refund, if any, already received.

Attach legible, organized exhibits. Mark them consistently and keep the originals. A prosecutor evaluates probable cause from the sworn allegations and supporting material, not from the length or emotional force of the complaint.

Never exaggerate, edit a screenshot to improve it, conceal a refund, or state speculation as fact. Knowingly making a malicious, completely unwarranted report that causes funds to be held can itself create liability under the Anti-Financial Account Scamming Act.

Evidence to preserve

Keep both human-readable copies and original electronic files where possible:

Contracts, order forms, proposals, loan documents, and receipts;
Bank statements, deposit slips, transfer confirmations, QR codes, and transaction reference numbers;
Full chat and email threads, including dates, timestamps, usernames, and headers;
Original screenshots and screen recordings;
Advertisements, listings, websites, social-media profiles, and URLs;
Voice messages, call logs, and recordings lawfully made or received;
Identification documents or business permits supplied by the other party;
Courier records and delivery information;
Demand letters and proof of delivery;
Names and contact details of witnesses and other victims;
Fraud-report ticket numbers and institutional replies; and
The device on which the transaction occurred.

Export chats rather than relying only on cropped screenshots. Preserve context around the relevant statement. Do not access another person’s account without authority, secretly obtain protected records, impersonate an investigator, or publish personal information online.

Prepare a simple evidence index and keep at least two secure backups. Give investigators copies unless they formally require the original and issue an acknowledgment.

Seeking recovery

Recovery through the bank or e-wallet

This is usually the most time-sensitive route. Ask the sending institution to trace the transaction and communicate with the receiving institution. A successful temporary hold preserves funds while verification proceeds, but it is not a final ruling that the money belongs to the complainant.

Do not expect the receiving institution to disclose the account holder’s confidential information directly to you. Investigators, prosecutors, courts, and authorized regulators can use lawful processes to obtain records.

Civil liability in the criminal case

Under Rule 111, the civil action to recover liability arising from the offense is generally deemed instituted with the criminal case unless the offended party:

Waives it;
Reserves the right to file it separately; or
Filed the civil action before the criminal action.

Actual damages must be proved with competent evidence. A criminal complaint should therefore document every payment, partial refund, and recoverable loss.

Do not casually sign a waiver or reserve a separate action without understanding the procedural consequences. Once the criminal case has begun, a separate civil action arising from the same offense generally cannot be newly instituted until final judgment, and an existing one may be suspended, subject to the rules on consolidation and independent civil actions.

Small claims

A qualifying money claim not exceeding ₱1,000,000, exclusive of interest and costs, may fall under the Supreme Court’s small-claims procedure in a first-level court. The procedure covers specified civil money claims; it does not determine criminal guilt.

Use the current Supreme Court small-claims forms and instructions and confirm that:

The claim is within the rule’s coverage;
The chosen court has territorial jurisdiction;
Any required barangay conciliation was completed or an exception applies; and
Filing the civil case will not conflict with a criminal action or another civil remedy.

A judgment is not the same as actual collection. If the defendant does not pay voluntarily, lawful execution against reachable property or income may still be necessary.

Attachment and preservation of assets

Rule 127 allows provisional remedies in appropriate criminal cases. Attachment may be available in specified circumstances, including certain claims involving fraudulently converted property, concealment or disposal of assets, a risk of absconding, or a defendant residing outside the Philippines.

Attachment is technical and may require a bond. Seek counsel promptly if identifiable assets are being transferred or hidden.

Settlement

Repayment or settlement may help the victim recover, but it does not automatically erase a public offense once committed. The prosecutor or court controls the criminal case. The legal effect of restitution, an affidavit of desistance, or a compromise depends on the offense, procedural stage, and facts.

Before signing:

Verify that funds have cleared;
Identify the exact amount and payment schedule;
Address default and enforcement;
Avoid stating that no fraud occurred if that is untrue;
Do not surrender original evidence prematurely; and
Obtain legal advice about waivers, releases, and the pending criminal case.

Never pay an upfront fee to a supposed recovery service that promises guaranteed access to frozen accounts, government contacts, or cryptocurrency tracing.

Barangay conciliation may apply in limited cases

The Katarungang Pambarangay process can be a precondition to court or government action for certain disputes between parties who reside in the same city or municipality. Statutory exceptions include offenses whose maximum imprisonment exceeds one year or maximum fine exceeds ₱5,000, along with other situations specified by law.

Whether conciliation is required depends on the parties, residences, charge, penalty, and relief sought. Ask the prosecutor, clerk of court, or a lawyer before assuming either that a barangay certificate is mandatory or that it can be skipped.

Deadlines and delay

Do not wait for negotiations, promises of repayment, or an internal bank investigation to end before checking legal deadlines.

Criminal prescription depends on the offense charged, its prescribed penalty, the date and manner of discovery, and legally recognized interruption. Civil claims have their own limitation periods based on the source of the obligation and documents involved. Filing only a police blotter, demand letter, platform report, or bank dispute may not interrupt every applicable period.

Seek a case-specific calculation immediately if:

The transaction occurred years ago;
The offender has made repeated partial payments;
The fraud was discovered long after the transaction;
Several places or countries are involved;
The possible charge arises under a special law; or
You are considering delaying filing while negotiating.

Common mistakes

Sending more money to unlock a refund;
Deleting or blocking the conversation before exporting it;
Reporting only to a social-media platform;
Treating a police blotter as the completed prosecutor complaint;
Filing in a place with no connection to an essential element;
Omitting the respondent’s address or copies required for preliminary investigation;
Submitting cropped, altered, or unexplained screenshots;
Focusing on broken promises without proving the original deceit;
Hiding partial repayments or facts that weaken the complaint;
Posting accusations or personal data publicly;
Paying fixers or supposed government insiders;
Assuming an arrest or conviction guarantees collection; and
Waiting until assets and electronic records disappear.

When legal help is urgent

Consult a Philippine lawyer promptly when:

The loss is substantial or involves many victims;
Assets are being concealed, sold, or transferred;
The transaction involves land, corporate funds, securities, cryptocurrency, or foreign accounts;
The suspect used your identity or took control of your financial account;
You must choose between an included civil claim and a separate action;
Prescription may be near;
You received a subpoena, countercharge, settlement agreement, or demand to withdraw;
The respondent is a lawyer, public officer, fiduciary, company officer, or regulated professional;
The bank denies a disputed transaction despite evidence of unauthorized access; or
You need attachment, injunctive relief, cybercrime warrants, or cross-border evidence.

Those unable to afford private counsel may inquire with the Public Attorney’s Office about eligibility and available assistance.

FAQ

Can I file estafa if I do not know the scammer’s real name?

You may report the incident using the available aliases, usernames, account details, telephone numbers, and other identifiers. Identifying and locating the responsible person may require lawful requests to banks, platforms, telecommunications providers, or other record holders. A prosecutor complaint must describe the respondent as accurately as the evidence permits.

Is a demand letter always required?

Not for every form of estafa. A demand may be important evidence in a conversion case and may be required for particular civil, barangay, or check-related remedies. It cannot cure the absence of deceit, receipt in trust, damage, or another essential element.

Does a refund prevent an estafa case?

Not necessarily. Later repayment ordinarily does not erase a crime already completed, although it may affect civil liability and other case-specific matters. If the payment was returned before damage occurred, or the facts show a genuine transaction rather than fraud, the analysis may differ.

Can the bank reverse a transfer I authorized because I was deceived?

Possibly, but not automatically. Report immediately and request coordinated verification. Recovery depends on whether funds remain available, the transaction trail, institutional controls, and the applicable law and BSP rules.

Can I recover from the owner of the receiving account?

Account ownership alone does not establish that the owner committed estafa or knowingly participated. Evidence may instead show that the account was stolen, misused, rented, sold, or used as a money-mule account. Liability must be based on the owner’s proven conduct and the applicable law.

Can several victims file together?

They can coordinate evidence and alert investigators to a common scheme. Whether the incidents belong in one complaint or in separate complaints depends on the respondents, transactions, venues, and relationship among the acts. Each victim should preserve and swear to their own facts.

Will an affidavit of desistance end the case?

Not automatically. A criminal case is prosecuted in the name of the People of the Philippines. The prosecutor or court determines the legal effect of the affidavit and the remaining evidence.

How long will recovery take?

There is no reliable universal timetable. A bank hold may happen quickly when funds remain traceable, while investigation, prosecution, civil judgment, and execution may take considerably longer. No legitimate person can guarantee recovery or conviction.

Official references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. The proper complaint, venue, deadlines, and recovery strategy depend on the documents and complete facts. Sources and procedures were checked as of September 14, 2026.