Quick answer

If you suspect fraud or estafa, act immediately: stop further payments, contact the bank or e-wallet involved, secure the account, preserve the evidence in its original form, and report the incident to law enforcement. A criminal complaint is commonly filed with the Office of the City or Provincial Prosecutor having territorial jurisdiction, often after or with assistance from the police or the National Bureau of Investigation.

Estafa is not simply an unpaid debt or a failed transaction. The evidence must show one of the fraudulent acts punished by Article 315 of the Revised Penal Code—such as deceit used to obtain money or property, or the misappropriation of property received in trust—and resulting damage. The precise offense, filing procedure, possible penalty, prescription period, and recovery route depend on how the transaction occurred, the amount involved, where its essential acts happened, and whether a computer or online system was used.

A criminal complaint may seek punishment and civil liability, but reporting does not guarantee that money will be recovered. Early notice to the financial institution offers the best practical chance of stopping or tracing a recent transfer.

What counts as estafa?

Article 315 of the Revised Penal Code, as amended by Republic Act No. 10951, covers several forms of swindling. The most frequently encountered fall into two broad groups.

Estafa through deceit or false pretenses

This may exist when a person obtains money, property, credit, or services by making a material false representation before or at the time the victim parts with the money or property. Depending on the facts, the representation may concern the offender’s identity, authority, qualifications, business, property, financial capacity, agency, or an allegedly genuine transaction.

The prosecution generally needs evidence showing that:

the respondent made a false representation or used another fraudulent act;
the representation was made before or at the same time as the victim’s payment or delivery;
the victim relied on it; and
that reliance caused financial or property damage.

The timing matters. A promise that is later broken does not, by itself, prove that the person was already deceiving the victim when the agreement was made. Evidence of fabricated documents, a false identity, nonexistent inventory, multiple victims, immediate diversion of funds, or concealment may help establish fraudulent intent, but every case remains fact-specific.

Estafa through misappropriation or conversion

This form may arise when money, goods, or other personal property is received in trust, on commission, for administration, or under an obligation to deliver or return the same property, and the recipient later misappropriates, converts, or denies receiving it, causing prejudice to another.

Important questions include:

What exactly was delivered?
In what legal capacity was it received?
Was ownership transferred, or was the property supposed to be returned or applied to a particular purpose?
What written instructions, accounting duties, or liquidation requirements existed?
What act shows conversion or misappropriation?

Not every failure to repay a loan is misappropriation. In an ordinary loan, ownership of the money generally passes to the borrower, who must later pay an equivalent amount. A prosecutor or lawyer must examine the actual agreement rather than rely only on labels such as “investment,” “trust,” “cash advance,” or “loan.”

A demand to return or account for property is often important evidence of misappropriation and resulting prejudice. It is not a substitute for proving all elements of the offense, and whether demand is legally indispensable depends on the particular theory and evidence.

When nonpayment is not automatically fraud

The Constitution prohibits imprisonment for debt. A legitimate debt does not become estafa merely because the debtor is late, the business failed, or the creditor has been unable to collect.

The dispute may be primarily civil when the evidence shows only:

an unpaid loan;
failure to deliver because of a genuine later impossibility or contractual dispute;
poor performance without prior deceit;
a business loss without diversion or false representations;
a disagreement over accounting, quality, completion, or contract interpretation; or
inability to pay, without proof of a fraudulent act punished by law.

Conversely, a contract or written acknowledgment does not automatically shield fraud. Criminal liability may still exist if the transaction was induced by deceit or property received for a specific fiduciary purpose was converted. The distinction depends on the documents, communications, flow of funds, and conduct of the parties.

Checks, online transactions, and related offenses

Issuing a postdated or worthless check may be relevant to estafa when it was used as part of the deceit that induced the victim to part with money or property. A check given only after an obligation was already incurred ordinarily presents a different estafa analysis because the victim could not have relied on that later check when making the original delivery.

A dishonored check may also raise a separate issue under Batas Pambansa Blg. 22. That law has its own elements, including requirements concerning dishonor, notice, and the drawer’s failure to pay or arrange payment within the statutory period after receiving notice. Estafa and a B.P. Blg. 22 case should not be treated as interchangeable.

If estafa is committed through an information and communications technology system, Section 6 of the Cybercrime Prevention Act may affect the charge and penalty. Other conduct may instead or additionally constitute computer-related fraud, identity theft, illegal access, falsification, securities violations, money laundering, or another offense. The correct classification depends on what the technology did in the scheme; the mere fact that people communicated through chat or email does not automatically settle the cybercrime issue.

Relevant primary laws include the Revised Penal Code provisions amended by Republic Act No. 10951, the Cybercrime Prevention Act of 2012, and Batas Pambansa Blg. 22.

What to do immediately

1. Stop the loss and secure affected accounts

Do not send an additional “release fee,” “tax,” “verification payment,” or “refund charge.” Scammers commonly demand another payment after the victim asks for the money back.

If a bank, remittance service, card, or e-wallet was used:

contact its official fraud or customer-service channel immediately;
ask whether the transaction can be recalled, placed on hold, disputed, or traced;
give the transaction reference number, destination account, amount, and exact time;
request a complaint or incident reference number;
ask what affidavit, police report, or supporting document it requires; and
retain the institution’s written response.

A bank or e-wallet may be unable to reverse an authorized transfer once the recipient has withdrawn or moved the funds. Still, a prompt report can preserve records, support tracing, or prevent further loss. Do not rely on a social-media account claiming to represent the institution; use the contact details in the official app, website, card, or account statement.

Change compromised passwords, terminate unfamiliar sessions, enable multifactor authentication, and secure the associated email and mobile number. If a SIM may have been taken over, contact the telecommunications provider.

2. Preserve evidence before accounts or posts disappear

Keep the original devices and files where practical. Preserve:

contracts, receipts, invoices, acknowledgments, and promissory notes;
bank statements and transaction confirmations;
account names and numbers, QR codes, wallet identifiers, card details, and reference numbers;
complete chat and email threads, including dates, times, usernames, URLs, and headers where available;
advertisements, listings, profiles, livestreams, and webpages;
photographs, audio, and video in their original files;
call logs, delivery records, courier documents, and meeting details;
copies of IDs, permits, registrations, certificates, or investment materials supplied by the other party;
demand letters and proof of actual receipt;
names and contact details of witnesses; and
reports and reference numbers issued by banks, platforms, police, or government agencies.

Screenshots are useful but may omit context or metadata. When possible, export the full conversation, save the original email, download account statements directly, and preserve the full URL. Do not crop, annotate, alter, or repeatedly resave the only copy. Keep a read-only backup and make a simple evidence index.

Do not obtain evidence by hacking an account, impersonating another person, secretly taking property, or threatening publication. Lawful preservation is more useful than evidence gathered through a new offense.

3. Prepare a factual chronology

Write a dated account while events are fresh. State:

who approached whom;
what was represented;
why the representation appeared credible;
when and where each communication occurred;
what you paid or delivered;
how payment was made;
what the recipient was required to do;
when you discovered the suspected fraud;
what demands and responses followed; and
the exact amount of your present loss.

Separate personal knowledge from information supplied by someone else. Do not exaggerate, guess at identities, or describe a person as guilty when the investigation has not established it.

Where to report

Police or NBI

You may report to a local police station. For an online or technology-enabled scheme, you may seek assistance from the Philippine National Police Anti-Cybercrime Group or the NBI unit handling cybercrime. Investigators can help identify the appropriate offense, issue lawful preservation or production requests, and refer the complaint to the proper prosecution office.

Use only contact information published on the official PNP Anti-Cybercrime Group website or the National Bureau of Investigation website. Verify the current office address and submission requirements before travelling or sending sensitive documents.

A police blotter or incident report records the report; it is not itself a finding that estafa occurred and does not necessarily commence the prosecutor’s case.

Office of the prosecutor

A criminal complaint is generally initiated through a complaint-affidavit and supporting evidence filed with the Office of the City or Provincial Prosecutor that has territorial jurisdiction. Venue is not necessarily based only on where the complainant lives. At least one essential element of the alleged offense must generally have occurred within the place where the criminal case is brought.

For an online transfer involving several locations, jurisdiction may require careful analysis of where the false representation was made or received, where the victim relied on it, where payment or delivery occurred, and where damage was sustained. Filing in the wrong place can cause delay or dismissal without resolving the merits.

The 2024 DOJ–National Prosecution Service Rules on Preliminary Investigations and Inquest Proceedings govern prosecution-office proceedings within their scope. Required copies, affidavit formalities, submission methods, and response periods should be confirmed with the receiving office because the procedure may differ according to the offense, penalty, referral, and applicable local arrangements.

A complaint-affidavit should be based on facts the affiant can truthfully swear to. It should identify the parties, set out the material events in chronological order, explain how each important exhibit supports the allegation, and state the loss claimed. False statements under oath can create separate legal exposure.

Regulators and platforms

A report to a regulator may be appropriate in addition to—not necessarily instead of—a criminal complaint:

Report suspected unauthorized investment solicitation or securities fraud to the Securities and Exchange Commission.
For an unresolved complaint against a BSP-supervised bank, e-money issuer, or other supervised financial institution, first use the institution’s complaint process and, when appropriate, consult the Bangko Sentral ng Pilipinas consumer-assistance information.
Report the account, listing, advertisement, seller, or impersonation page through the platform’s official reporting tools.
If personal data were unlawfully processed or exposed, a separate complaint to the National Privacy Commission may be relevant.

Regulatory, platform, and criminal processes serve different purposes. A platform report may remove an account but does not replace evidence preservation or a formal complaint.

What happens after filing?

The prosecutor evaluates whether the evidence supports filing a criminal case in court. Depending on the governing procedure, the respondent may be required to submit a counter-affidavit and evidence. The prosecutor may seek clarification or additional evidence before issuing a resolution.

A prosecutor’s investigation is not a trial. Credibility, admissibility, intent, and the complete factual record may still be contested in court. If a criminal information is filed, guilt must ultimately be proved beyond reasonable doubt.

Keep copies of everything filed and obtain a receiving stamp, electronic acknowledgment, or docket number. Calendar every deadline stated in a subpoena, order, or notice. Do not assume that settlement discussions suspend a filing or response deadline.

Seeking repayment or compensation

Civil liability with the criminal case

Under Rule 111 of the Rules of Criminal Procedure, the civil action to recover civil liability arising from the offense is generally deemed instituted with the criminal action unless the offended party waives it, reserves the right to bring it separately when the rules permit, or has already filed it before the criminal action.

The civil claim may include the property or money that must be restored or reimbursed and other damages legally proved. The amount stated in the complaint should be documented. A large unsupported figure can weaken credibility.

The treatment of filing fees, additional damages, reservations, and previously filed civil cases is procedural and fact-dependent. Obtain advice before filing parallel cases so that one action does not prejudice another. Double recovery for the same injury is not allowed.

A separate civil case

A separate civil action may sometimes be available under a contract, the Civil Code provisions on fraud, or other law. Article 33 of the Civil Code also recognizes an independent civil action in cases of fraud, subject to its requirements and the prohibition against double recovery.

A civil remedy may be useful where the evidence proves a debt or contractual breach but does not establish every element of estafa. However, a favorable judgment is not the same as immediate collection. Recovery still depends on locating assets and using lawful enforcement procedures.

Claims within the current jurisdictional ceiling and subject matter of the small-claims rules may qualify for the streamlined small-claims process. Not every fraud-related demand belongs there, particularly when the claim is the civil liability arising directly from a criminal offense or requires relief beyond a qualifying money claim. Check the current Supreme Court small-claims forms and guidance before filing.

Settlement

Restitution may be considered, but use a written agreement that identifies the parties, amount, payment dates, default consequences, and treatment of pending cases. Confirm that the signer has authority to bind any company involved.

Do not surrender original evidence or sign an affidavit of desistance, quitclaim, release, or satisfaction without understanding its effect. Payment or compromise does not automatically erase criminal liability for a public offense, although restitution may affect the civil claim and, in some circumstances, the case’s practical course.

Asset preservation

If there is a real risk that identifiable assets will be concealed or disposed of, ask a lawyer promptly about lawful provisional remedies. Attachment, injunction, preservation orders, and financial-record requests have specific legal grounds and safeguards. A victim cannot privately freeze another person’s account merely by making an accusation.

Deadlines and prescription

Do not wait for the offender to promise repayment repeatedly. Criminal prescription depends on the offense charged and its prescribed penalty, which for estafa depends substantially on the amount and applicable circumstances. Cybercrime or another special law may alter the analysis. Determining when prescription began, whether it was interrupted by the institution of proceedings, and whether the offender was absent from the Philippines may require legal review.

Civil deadlines also vary by the legal basis of the claim. Actions based on a written contract, an oral contract, injury to rights, fraud, or civil liability arising from an offense do not necessarily share the same period or starting date.

A demand letter is useful in many cases but should not be assumed to preserve every criminal or civil remedy. Seek advice well before any arguable deadline rather than filing on the last day.

Evidence that commonly strengthens or weakens a case

Evidence is usually stronger when it shows the entire transaction rather than isolated screenshots. Helpful material may include:

the specific false statement and proof that it was false;
evidence that the statement preceded the payment;
the victim’s reliance on that statement;
a direct path from the victim’s funds to an account connected to the respondent;
written restrictions on how entrusted property could be used;
failure to account despite a documented demand;
records contradicting the claimed product, authority, inventory, registration, or transaction; and
corroboration from witnesses or official records.

A complaint may be weakened by:

presenting a collection dispute as fraud without evidence of deceit or conversion;
deleting messages that appear unfavorable;
submitting selected screenshots without the surrounding conversation;
inconsistent amounts, dates, or explanations;
naming account holders as offenders without evidence that they knowingly joined the scheme;
relying solely on a demand letter;
assuming that business registration proves an investment or offer was lawful;
altering electronic files; or
threatening arrest, public shaming, or violence to obtain payment.

An account holder or corporate officer is not automatically criminally liable merely because an account or company was used. Individual participation and criminal intent must be supported by evidence.

Common mistakes to avoid

Sending more money to recover the first payment. Legitimate authorities do not require payment to a private “recovery agent” who promises guaranteed tracing or arrest.
Warning the suspected offender before preserving evidence. Accounts, messages, listings, and funds may disappear.
Posting accusations publicly. Public naming may expose the complainant to privacy, defamation, or harassment issues and may compromise an investigation.
Using unofficial reporting contacts. Impostors sometimes pose as police officers, lawyers, bank investigators, or government personnel.
Filing in the nearest office without checking venue. The proper location depends on where essential acts occurred.
Treating a blotter entry as the complete complaint. Ask what further affidavit and supporting documents are required.
Giving away original documents. Submit certified or clearly marked copies when accepted and retain the originals for authentication.
Ignoring subpoenas and notices. Missing a prosecutor or court deadline can have serious consequences.
Assuming criminal filing guarantees repayment. Recovery depends on proof, available assets, tracing, and enforcement.
Paying anyone who guarantees conviction or fund recovery. No legitimate professional can guarantee a prosecutorial or judicial result.

When legal help is urgent

Seek a Philippine lawyer promptly when:

a substantial transfer was made recently and funds may still be traceable;
the suspected offender is disposing of assets, leaving the country, or threatening witnesses;
several victims or jurisdictions are involved;
the transaction used cryptocurrency, layered accounts, overseas platforms, or false identities;
company, partnership, trust, agency, or investment documents control the legal relationship;
you are unsure whether the case is estafa, a civil collection claim, or another offense;
a subpoena, counter-affidavit deadline, prosecutor’s resolution, or court notice has been received;
a settlement, quitclaim, affidavit of desistance, or confidentiality agreement is proposed;
the victim is a child, older person, person with disability, or someone facing continuing coercion;
sensitive personal data, intimate material, or account credentials were taken; or
a prescription deadline may be approaching.

Those unable to afford private counsel may inquire with the Public Attorney’s Office about eligibility and available assistance. A private complainant may also consult counsel regarding evidence organization, venue, civil recovery, and participation in prosecution proceedings.

Practical filing checklist

Before going to the investigator or prosecutor, prepare:

a government-issued ID;
the complaint-affidavit, if already prepared;
a one-page chronology;
a list of respondents and all known identifying information;
an itemized computation of the loss;
clearly numbered or lettered exhibits;
proof of each payment or delivery;
complete communications rather than isolated excerpts;
demand and proof of receipt, if applicable;
bank, e-wallet, platform, and police reference numbers;
witness names and contact information; and
the required number of copies confirmed with the receiving office.

Keep a matching set for yourself. Never hand over a device without obtaining an inventory or acknowledgment identifying what was received.

Frequently asked questions

Can I file estafa if I do not know the scammer’s real name?

You may report the incident and provide all known identifiers, such as account numbers, usernames, phone numbers, email addresses, URLs, transaction references, and delivery information. Identifying the responsible person may require lawful requests to financial institutions, telecommunications providers, or platforms. An account name alone does not conclusively identify every participant.

Must I send a demand letter first?

Not in every form of estafa. A demand can be important proof of conversion, refusal to account, notice, or the amount claimed, but its legal significance depends on the offense and documents. B.P. Blg. 22 has separate notice requirements. Do not delay an urgent bank or police report while waiting for a demand period to expire.

Can the bank simply return the money?

Not necessarily. A bank or e-wallet must follow applicable law, account agreements, and due process. Recovery is more likely when the report is immediate and funds remain available, but reversal or freezing is not automatic.

Can I report both to the police and the prosecutor?

Yes. Police or NBI investigators may gather and organize evidence, while prosecutors determine whether a criminal case should be filed in court. Coordinate the submissions and disclose related complaints to avoid inconsistent or duplicate filings.

What if the seller delivered something different or defective?

That may be a consumer or contractual dispute rather than estafa unless evidence shows legally actionable deceit from the start. Preserve the listing, specifications, delivery records, return requests, and the actual item. Depending on the transaction, consumer-protection remedies may also be available.

What if the respondent offers installment payments?

You may evaluate the proposal, but put any agreement in writing and obtain advice before withdrawing, reserving, or compromising claims. Verify the payer’s identity and authority, and do not surrender evidence merely because the first installment was paid.

Can I recover attorney’s fees and emotional-distress damages?

Only when a legal basis exists and the amount is properly alleged and proved. Such damages are not automatic. Courts determine them from the governing law and evidence.

Can I post the person’s name and evidence online to find other victims?

Public posting creates risks to privacy, reputation, evidence integrity, and personal safety. Give the material to investigators or counsel. If other victims exist, each should preserve and truthfully present their own evidence rather than coordinate a rehearsed account.

Official legal sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Philippine criminal and civil remedies depend on the complete facts, documents, applicable procedural rules, and current official issuances. Sources and procedures were checked as of 19 September 2026.