Can Unauthorized Corporate Withdrawals Constitute Estafa or Theft?
Introduction
When a business partner leaves a company and withdraws funds from a joint corporate merchant account without authorization, the transaction may create both civil and criminal exposure. The proper criminal charge depends on how the funds were obtained, the accused’s authority over the account, the existence of deceit, and whether the money was taken as tangible property or misappropriated through an electronic payment system.
In general, the possible offenses include estafa under Article 315 of the Revised Penal Code, theft under Article 308, violation of the Anti-Financial Account Scamming Act, or another offense under a special law. The evidence must establish the specific elements of the offense charged; unauthorized access or withdrawal, standing alone, does not automatically prove estafa or theft.
What Must Be Established First?
The prosecution should first determine the legal ownership and control of the merchant account. Relevant questions include whether the account was opened in the corporation’s name, whether both partners were authorized signatories, whether the separated partner retained access credentials, and whether the corporation or another entity owned the funds at the time of withdrawal.
The following evidence is ordinarily material:
- the corporate registration records and partnership or shareholders’ agreement;
- the merchant account application and account terms;
- the list of authorized users and signatories;
- the payment gateway’s transaction logs and withdrawal history;
- messages or notices revoking the former partner’s authority;
- bank records showing the destination of the funds; and
- proof of demand, nonpayment, concealment, or conversion.
A clear separation agreement, board resolution, written revocation of authority, or notice to the payment gateway may be especially important. These documents help show that any later withdrawal was outside the partner’s authority.
When May the Conduct Constitute Estafa?
Estafa may arise when the accused obtains or retains money through deceit, abuse of confidence, or misappropriation, causing damage to another person or entity. The particular mode of estafa must be identified because the elements differ depending on whether the charge is based on deceit or on misappropriation of property received in trust, commission, administration, or another obligation to return or deliver.
Where a former partner uses continued access to an online merchant account and represents, expressly or impliedly, that the withdrawal is authorized, the facts may support estafa by deceit if the representation induced the payment gateway, bank, corporation, or another person to release the funds. The prosecution must still prove the false representation, reliance, damage, and the accused’s intent to defraud.
Estafa through misappropriation may be considered where the accused received or controlled funds for the corporation or another person and later converted them for personal use. A mere failure to account is not always sufficient. The prosecution must establish the fiduciary or trust-based relationship, receipt of the property, conversion or misappropriation, demand when legally relevant, and resulting prejudice.
In Laurel v. Abrogar, et al. (2006), the Supreme Court recognized that a person who steals a credit card and uses it to obtain services may incur separate liability for theft of the card, violation of the Access Devices Regulation Act, and estafa against the service provider. The ruling illustrates that one transaction may produce separate offenses when each offense protects a different legal interest and has distinct elements.
For checks issued as payment, the Supreme Court held in People v. Rosell (2025) that estafa under Article 315(2)(d) requires proof that the check was issued for an obligation contracted at the time of issuance, that the check was dishonored for insufficient funds, and that the payee suffered damage. The same reasoning does not automatically govern electronic withdrawals, but it reinforces the requirement that the prosecution prove every element of the specific estafa mode charged.
When May the Conduct Constitute Theft?
Theft under Article 308 of the Revised Penal Code generally involves taking personal property belonging to another, without consent, with intent to gain, and without violence, intimidation, or force upon things. The prosecution must identify the property taken and prove that the accused had no legal authority to take it.
Theft may be difficult to apply directly to funds represented only as electronic balances. In Laurel v. Abrogar, et al. (2006), the Supreme Court stated that theft under Article 308 concerns tangible movable property with physical or material existence and susceptibility of occupation. The Court explained that intangible property, including telecommunications services, cannot be treated as the subject of theft under the Revised Penal Code unless legislation expressly provides otherwise.
Accordingly, the stronger charge in an unauthorized online withdrawal may be estafa or a special-law offense rather than ordinary theft of the electronic balance itself. Theft may nevertheless be relevant where the accused physically takes cash, a card, a device, or another tangible movable belonging to the corporation.
Can the Anti-Financial Account Scamming Act Apply?
The Anti-Financial Account Scamming Act, or R.A. No. 12010, may be examined where the conduct involves unauthorized access, social engineering, money muling, use of another person’s financial account, or other covered forms of financial-account fraud. Its application depends on the precise statutory definition of the prohibited act and the manner by which the funds were obtained or transferred.
The existence of a previous business relationship does not by itself exempt a former partner from liability under a special law. Conversely, the fact that a person had legitimate credentials or was once an authorized user does not automatically prove that every later transaction was lawful. The prosecution should establish when authority ended and how the accused obtained, used, or transferred the funds afterward.
Where the conduct was committed through an online payment gateway or information and communications technology, the Cybercrime Prevention Act of 2012 may also require examination. Section 6 of R.A. No. 10175 may impose a higher penalty when an offense under the Revised Penal Code or another special law is committed through information and communications technology, subject to the statute and applicable jurisprudence.
Estafa, Theft, and Special-Law Offenses Compared
| Possible offense | Primary issue to prove | Typical relevance to an online withdrawal |
|---|---|---|
| Estafa | Deceit, abuse of confidence, or misappropriation causing damage | Often relevant when a former partner induces release of funds or converts corporate funds under his or her control |
| Theft | Taking tangible personal property belonging to another, without consent and with intent to gain | More readily applicable to physical cash, cards, devices, or other tangible property than to an electronic account balance |
| R.A. No. 12010 | Commission of a covered financial-account scam or related prohibited act | May apply when the facts involve unauthorized financial-account access, social engineering, or covered fund-transfer conduct |
| R.A. No. 10175 | Commission of a qualifying offense through information and communications technology | May affect liability or penalty where the underlying offense was committed through an online platform or computer system |
Does a Former Partner’s Account Authority Defeat Criminal Liability?
Not necessarily. A former partner may have had valid authority when the account was opened but lose that authority upon withdrawal from the business, revocation by the corporation, termination of a partnership agreement, or a written resolution changing the account’s authorized users.
However, the prosecution must prove the revocation or limitation of authority. If the former partner remained an authorized signatory and the corporate documents permitted unilateral withdrawals, the issue may become one of accounting, corporate authority, or breach of contract rather than criminal fraud.
The parties’ internal agreement is therefore significant, but it is not conclusive in every case. The surrounding circumstances—including concealment, false representations, diversion to a personal account, fabricated business expenses, and refusal to return the money—may demonstrate criminal intent.
Can Multiple Criminal Charges Be Filed?
Possibly. Different charges may be filed when the same course of conduct violates separate laws and each offense has distinct elements. In People of the Philippines v. Marzan, et al. (2022), the Supreme Court recognized that illegal recruitment and estafa may coexist because the offenses have different elements and protect different interests.
Similarly, People of the Philippines v. Francisco, et al. (1998) discussed the application of P.D. No. 1689 to syndicated estafa involving five or more persons who solicit funds from the public through fraudulent means. The mere existence of several participants is not enough; the statutory requirements must be specifically established.
Separate filing of estafa, theft, cybercrime, or a special-law offense should not be assumed to be proper without examining double-jeopardy principles, the identity of the acts, the elements of each offense, and whether one offense is absorbed by another. The prosecutor must determine the correct charge based on the information and evidence.
What Evidence Best Supports the Complaint?
The complaint should present a chronological account of the business relationship, the withdrawal of authority, the unauthorized transactions, the destination of the funds, and the resulting loss. It should identify the person or entity that owned the money and explain why the accused had no right to withdraw or retain it.
Useful electronic evidence may include:
- certified transaction records from the payment gateway;
- login, device, internet protocol, and authentication records;
- bank statements and transfer confirmations;
- emails or text messages concerning authority and revocation;
- corporate resolutions and account-access records;
- audit reports tracing the funds; and
- affidavits from company officers, accountants, gateway representatives, and bank personnel.
Electronic records should be preserved in their original form, with metadata and a clear explanation of how they were obtained. Witnesses should be prepared to testify about the account system, the company’s authorization procedures, and the method used to authenticate the records.
What Should the Corporation Do Before Filing?
The corporation should immediately notify the payment gateway and banks that the former partner’s authority has been revoked or disputed. It should reset credentials, disable two-factor authentication devices associated with the former partner, preserve logs, and request a hold or investigation where the institution’s procedures permit it.
The company should also avoid altering or deleting account records. It should prepare a complete reconciliation showing the amount received, the amount withdrawn, the dates of the transactions, the recipient accounts, and the amount still unrecovered.
A criminal complaint should be coordinated with possible civil remedies, including restitution, accounting, damages, injunction, attachment, or recovery of corporate property. The civil and criminal theories should be consistent, particularly regarding ownership of the funds and the accused’s authority over the account.
Practical Legal Assessment
The most appropriate charge will ordinarily depend on four questions: who owned the funds, whether the accused still had authority, whether deceit or abuse of confidence caused the transfer, and whether the conduct falls within a special law governing financial-account fraud.
If the evidence shows that the former partner used a valid account credential but diverted corporate funds after authority had ended, estafa through misappropriation or another covered financial-account offense may be more appropriate than theft. If the accused obtained the release of funds through false representations, estafa by deceit may be considered.
If the evidence concerns only an electronic balance and no tangible property was taken, ordinary theft under Article 308 may face a legal objection under the rule discussed in Laurel v. Abrogar, et al. (2006). The complaint should therefore state the factual basis for the selected offense rather than rely solely on the description “unauthorized withdrawal.”
Conclusion
Unauthorized withdrawals from a joint corporate merchant account may result in criminal liability, but the correct offense cannot be determined from the withdrawal alone. Estafa generally requires proof of deceit, abuse of confidence, or misappropriation causing damage, while theft requires the taking of qualifying personal property without consent and with intent to gain.
The corporation should preserve electronic records, establish the termination of the former partner’s authority, trace the transferred funds, and identify the person or entity that suffered the loss. It should then assess possible liability under the Revised Penal Code, R.A. No. 12010, R.A. No. 10175, and other applicable laws before filing the complaint.
About Nicolas and De Vega Law Offices
Nicolas and de Vega Law Offices is a full-service law firm in the Philippines. You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines. You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com.
