Introduction

A person who has already filed a cybercrime-related complaint with the Cybercrime Investigation and Coordinating Center, or CICC, often asks whether they must still file the same complaint again with the Philippine National Police Anti-Cybercrime Group, or PNP-ACG, or the National Bureau of Investigation Cybercrime Division, or NBI-CCD.

The practical answer is: not always, but often it is advisable depending on what you want to happen next.

Filing with the CICC does not automatically mean that a criminal complaint has already been filed with the police, the NBI, the prosecutor, or the court. The CICC is an important cybercrime coordinating and assistance body, but the PNP, NBI, and prosecutors have different legal functions in the criminal justice process.

A complaint filed with the CICC may help trigger assistance, referral, coordination, preservation, takedown-related help, victim support, or cybercrime response. But if the complainant wants a full criminal investigation, identification of suspects, evidence gathering, subpoena processes, case build-up, and eventual filing before the prosecutor, the complainant may still need to file with, coordinate with, or be referred to the PNP-ACG, NBI-CCD, or the appropriate Office of the City or Provincial Prosecutor.

The better way to frame the issue is not “Do I need to file again?” but:

Has my CICC complaint already been formally referred to an investigative law enforcement agency or prosecutor, and has a criminal investigation or preliminary investigation actually begun?

If the answer is no, then filing or following up with PNP-ACG, NBI-CCD, or the prosecutor may be necessary.

The Agencies Involved

1. CICC

The Cybercrime Investigation and Coordinating Center is a government body created under the Philippine cybercrime legal framework. It is generally associated with coordination, policy implementation, public assistance, cybercrime response, monitoring, and inter-agency coordination.

CICC may receive reports involving online scams, hacking, identity theft, phishing, cyber libel, fake accounts, online threats, online harassment, cybersex-related offenses, data breaches, and other technology-assisted offenses.

However, CICC should not be confused with the regular criminal investigation arms of the State. Its role is different from the police, the NBI, and the prosecutor.

In practical terms, CICC may:

receive and document cybercrime reports;
assist complainants in identifying the proper agency;
refer matters to PNP-ACG, NBI-CCD, prosecutors, regulators, platforms, or other agencies;
coordinate cybercrime response;
help with public-facing reporting mechanisms;
support anti-scam and cybercrime operations;
assist in preservation or coordination efforts where appropriate;
help channel complaints to agencies with investigative authority.

But a CICC filing alone may not be the same as a sworn criminal complaint filed before the investigating agency or prosecutor.

2. PNP Anti-Cybercrime Group

The PNP-ACG is the specialized unit of the Philippine National Police that handles cybercrime investigation and enforcement.

A complaint filed with PNP-ACG is generally closer to a traditional criminal complaint process. The PNP-ACG can conduct case assessment, take statements, request supporting documents, perform digital forensic examination where appropriate, conduct investigation, coordinate with platforms and service providers through lawful processes, and prepare the case for filing before the prosecutor.

The PNP-ACG is usually appropriate when the complainant wants law enforcement investigation, especially where the suspect may be identifiable, locatable, or connected to a broader scam or criminal network.

3. NBI Cybercrime Division

The NBI Cybercrime Division is another investigative body that handles cybercrime and technology-assisted offenses. Like the PNP-ACG, the NBI can receive complaints, conduct investigation, gather evidence, perform cybercrime-related inquiry, and prepare complaints for prosecution.

Some complainants choose the NBI because of its national investigative mandate, perceived technical capacity, or because the matter involves more complex facts, cross-border elements, organized schemes, public figures, business disputes, or sensitive evidence.

4. Prosecutor’s Office

The Office of the City Prosecutor or Office of the Provincial Prosecutor determines whether there is probable cause to charge a person in court. In many criminal cases, law enforcement agencies build the case and then refer it to the prosecutor.

A complainant may also file a criminal complaint directly with the prosecutor, usually through a sworn complaint-affidavit and supporting evidence. For cybercrime cases, however, complainants often benefit from first seeking assistance from PNP-ACG or NBI-CCD because digital evidence may need authentication, tracing, technical interpretation, or preservation.

Filing With CICC Is Not Always the Same as Filing a Criminal Case

The most important point is this:

A CICC report is not necessarily equivalent to a criminal complaint filed with the police, the NBI, the prosecutor, or the court.

A person may have a CICC reference number, acknowledgment, online ticket, or report confirmation. That confirms that the matter was reported or received by CICC. It does not always mean that:

a criminal case has already been filed;
a law enforcement investigation has started;
subpoenas or lawful requests have been issued;
the suspect has been identified;
evidence has been preserved;
the matter has been submitted to the prosecutor;
a case has been docketed for preliminary investigation;
a court case exists.

The complainant should check the status of the CICC filing. The most important question is whether CICC has referred the complaint to PNP-ACG, NBI-CCD, the prosecutor, or another appropriate agency.

If there has been no referral, or if the complainant has not been contacted by an investigator, it may be prudent to file separately with PNP-ACG or NBI-CCD.

When You May Not Need to File Again

You may not need to file again with PNP or NBI if the CICC has already formally referred your complaint to the proper investigative agency and you have confirmation that the agency is already acting on it.

For example, a second filing may be unnecessary if:

CICC forwarded your complaint to PNP-ACG or NBI-CCD;
you were given the name or contact details of the handling investigator;
you were asked to submit a sworn affidavit or evidence to PNP or NBI;
the investigative agency already docketed or recorded the complaint;
you have already executed a complaint-affidavit before PNP, NBI, or the prosecutor;
you have already submitted evidence to the handling law enforcement unit;
a prosecutor’s office has already received the case for preliminary investigation.

In that situation, filing the exact same complaint again may create duplication, confusion, or conflicting case records. The better course is to follow up with the handling agency, submit additional evidence, and ask for the status of the investigation.

When You Should Consider Filing With PNP-ACG or NBI-CCD After CICC

You should consider filing with PNP-ACG or NBI-CCD even after reporting to CICC if you want a formal criminal investigation and there is no clear sign that one has started.

This is especially important when:

1. You Need Law Enforcement Investigation

If the case requires tracing the suspect, identifying account owners, preserving digital records, or coordinating with online platforms, PNP-ACG or NBI-CCD may need to handle the investigative process.

Examples include:

hacking;
unauthorized account access;
identity theft;
phishing;
online investment scams;
romance scams;
fake seller scams;
SIM-linked fraud;
e-wallet fraud;
fake social media accounts;
online blackmail;
sextortion;
cyber libel;
online threats;
doxxing;
stalking or harassment using digital tools.

2. You Need a Complaint-Affidavit for Prosecution

A criminal complaint usually needs a sworn complaint-affidavit supported by documents and evidence. A CICC intake form, hotline report, or online report may not be enough for prosecution.

PNP or NBI may help you prepare the documents needed for referral to the prosecutor.

3. You Need Evidence Preservation

Digital evidence can disappear quickly. Messages can be deleted. Accounts can be renamed. Posts can be removed. IP logs and platform records may be retained only for a limited period, depending on the provider and applicable rules.

A complainant should preserve evidence immediately and ask the proper agency about preservation steps. If CICC has not confirmed that preservation or referral is being handled, approaching PNP-ACG or NBI-CCD may be necessary.

4. There Is Urgency

If there are threats, ongoing extortion, ongoing publication of private images, financial loss, or active impersonation, a complainant should not rely only on a passive report.

Urgent cases may require immediate coordination with law enforcement, platforms, banks, e-wallet providers, telecom providers, or prosecutors.

5. You Need a Police or NBI Record for Banks, Platforms, Employers, or Other Agencies

Victims of scams, unauthorized transactions, hacked accounts, or identity theft are often asked by banks, e-wallet providers, platforms, employers, or institutions to submit a police report, NBI report, or sworn complaint.

A CICC acknowledgment may help, but some institutions still require a formal law enforcement report.

6. CICC Only Gave General Advice or an Acknowledgment

If CICC merely acknowledged the report but did not refer it, assign an investigator, or give next steps, the complainant should not assume that a criminal case is already moving.

In that situation, filing with PNP-ACG or NBI-CCD may be the practical next step.

Should You File With Both PNP and NBI?

Usually, a complainant should avoid filing identical full complaints with multiple investigative agencies unless there is a specific reason.

Filing with both PNP and NBI can sometimes be useful, but it may also cause confusion. Two agencies may end up investigating the same facts, contacting the same parties, or preparing overlapping referrals. Prosecutors may later ask whether there are duplicate complaints.

A more orderly approach is:

File with one main investigative agency.
Disclose that you previously reported to CICC.
Provide the CICC reference number.
Ask whether the agency needs a fresh complaint-affidavit.
Ask whether CICC has already referred the matter.
Avoid inconsistent statements.
Keep copies of everything submitted.

There are situations where coordination with more than one agency may be justified, such as organized cyber fraud, multiple victims, cross-border suspects, public safety risks, or urgent takedown concerns. But for ordinary individual complaints, choosing one primary investigative route is usually cleaner.

Which Agency Should You Choose After Filing With CICC?

There is no single answer for all cases. The correct agency depends on the nature of the incident, the evidence available, the urgency, and the relief sought.

PNP-ACG may be appropriate when:

the incident is a typical cybercrime complaint;
the complainant wants police investigation;
the suspect may be local or traceable;
there is online fraud, hacking, threats, harassment, impersonation, or account compromise;
the complainant needs a law enforcement report;
the incident requires coordination with local police units.

NBI-CCD may be appropriate when:

the case is complex;
there are multiple jurisdictions;
the suspects are unknown or sophisticated;
there is a need for national-level investigation;
the matter involves organized schemes;
the complainant prefers NBI handling;
there are sensitive personal, business, or public-interest issues.

Prosecutor’s Office may be appropriate when:

the suspect is already known;
the complainant has complete evidence;
the case is ready for preliminary investigation;
the complainant has a properly prepared complaint-affidavit;
technical investigation is no longer necessary;
counsel is assisting with direct filing.

For most cybercrime victims, the practical route is to start with PNP-ACG or NBI-CCD for case build-up before prosecutor filing.

Difference Between a Report, a Complaint, and a Criminal Case

These terms are often confused.

Report

A report is an initial notification to an agency that an incident happened. Filing with CICC may be a report. A report may generate an acknowledgment or reference number.

A report does not always begin a formal criminal proceeding.

Complaint

A complaint is a more formal assertion that a person committed an offense. In criminal procedure, this often requires a sworn complaint-affidavit and supporting evidence.

Complaints may be filed with law enforcement agencies for investigation or directly with the prosecutor for preliminary investigation.

Criminal Case

A criminal case exists only after the appropriate prosecutorial and judicial steps occur. In general, the prosecutor evaluates probable cause. If the prosecutor finds probable cause, an Information may be filed in court. Once filed in court, the criminal case proceeds judicially.

A CICC report is usually not yet a criminal case.

What to Bring When Filing With PNP or NBI After CICC

A complainant should bring organized evidence. Cybercrime complaints often fail or slow down because evidence is incomplete, disorganized, or unauthenticated.

Bring the following, where applicable:

1. CICC Proof of Filing

Bring:

CICC reference number;
acknowledgment email or SMS;
screenshots of the report submission;
any reply from CICC;
any referral notice;
names of CICC personnel who contacted you;
dates and times of communication.

This helps PNP or NBI determine whether the case was already referred.

2. Personal Identification

Bring valid government-issued ID. If filing for a company, bring proof of authority, such as board authorization, secretary’s certificate, special power of attorney, authorization letter, or company ID, depending on the situation.

3. Complaint-Affidavit Draft or Statement

Prepare a chronological narration:

who you are;
what happened;
when it happened;
where you were when you discovered it;
how you discovered it;
what accounts, platforms, numbers, or websites were involved;
what losses or damage occurred;
who you suspect, if anyone;
what evidence supports your claim;
what steps you already took;
what relief or action you are requesting.

4. Screenshots

Screenshots should show:

full conversation threads;
account names;
profile URLs;
usernames or handles;
timestamps;
phone numbers;
email addresses;
transaction references;
post URLs;
group names;
captions;
comments;
threatening statements;
defamatory statements;
payment instructions;
account details used by the suspect.

Screenshots should be clear, complete, and preferably taken before blocking the suspect.

5. URLs and Account Links

Do not rely on screenshots alone. Provide clickable or written URLs where possible.

For social media, preserve:

profile link;
post link;
comment link;
group link;
marketplace listing link;
message thread details;
username and display name.

6. Transaction Records

For scams or unauthorized transactions, bring:

bank transfer receipts;
e-wallet receipts;
remittance slips;
payment confirmations;
QR codes used;
merchant references;
account numbers;
account names;
transaction dates and times;
amount lost;
bank or e-wallet correspondence.

7. Device and Account Details

For hacking or unauthorized access, bring:

account recovery emails;
login alerts;
password reset emails;
security notifications;
IP address notices, if shown;
device login history;
email headers, if available;
affected phone numbers and email accounts.

8. Preservation of Original Evidence

Do not delete messages, posts, emails, call logs, or transaction records. Do not alter screenshots. Do not crop in a way that removes timestamps or identifying details.

Where possible, keep the original device used to receive the messages or access the compromised account.

Should the CICC Filing Be Mentioned in the PNP or NBI Complaint?

Yes.

The complainant should disclose the prior CICC filing. This avoids confusion and helps the agency check whether a referral already exists.

A simple statement may be included in the complaint-affidavit:

“I previously reported this matter to the Cybercrime Investigation and Coordinating Center on [date], with reference number [reference number]. I am filing this complaint with [PNP-ACG/NBI-CCD] for investigation and appropriate action.”

This does not weaken the complaint. It shows diligence and helps establish the timeline.

Is Filing Again Double Filing?

Not necessarily.

There is a difference between duplicate filing and proper escalation.

If the first filing with CICC was merely a report or request for assistance, filing a formal complaint with PNP-ACG or NBI-CCD is not improper. It may be the necessary next step.

However, if the same matter is already under active investigation by PNP or NBI because of a CICC referral, filing another complaint with another agency may be redundant. The complainant should first verify the status of the referral.

The key is transparency. Always disclose prior filings.

Can CICC Itself File the Case for You?

Usually, the complainant still needs to participate.

Even when CICC refers a matter, the victim or complainant may need to:

execute a sworn complaint-affidavit;
submit original evidence;
identify accounts and transactions;
clarify facts;
appear before investigators;
appear before the prosecutor;
attend hearings if the case reaches court.

Government agencies may assist, investigate, or refer, but the complainant’s sworn statement and evidence are often essential.

What Happens After Filing With PNP or NBI?

The general process may include:

1. Initial Assessment

The agency reviews whether the facts suggest a cybercrime, a traditional crime committed through electronic means, a civil dispute, a regulatory matter, or a non-criminal issue.

2. Evidence Review

Investigators examine screenshots, messages, transaction records, account details, device logs, and other documents.

3. Statement Taking

The complainant may be asked to execute a sworn affidavit. Witnesses may also be asked to submit affidavits.

4. Technical Investigation

Depending on the case, investigators may conduct digital forensic examination, open-source investigation, account tracing, or coordination with platforms, banks, telcos, or service providers through lawful procedures.

5. Identification of Suspect

If the suspect is unknown, investigators attempt to identify the person or group behind the account, number, wallet, or transaction.

6. Case Build-Up

The agency prepares the complaint package, usually including affidavits, evidence, technical reports, and other supporting documents.

7. Referral to Prosecutor

If sufficient evidence exists, the case may be referred to the prosecutor for preliminary investigation or inquest, depending on the circumstances.

8. Prosecutor’s Determination

The prosecutor determines whether probable cause exists to file a criminal case in court.

Common Cybercrime Complaints and the Need for PNP or NBI Filing

Online Scam

If you reported an online scam to CICC, you may still need PNP or NBI investigation, especially if money was transferred and you want to identify or prosecute the scammer.

You should also promptly contact your bank, e-wallet provider, remittance center, or payment platform to report fraud and request freezing, reversal, or investigation where possible.

Hacked Account

For hacked social media, email, or e-wallet accounts, CICC may assist or guide you, but PNP or NBI may be needed if you want criminal investigation, forensic documentation, or prosecution.

Cyber Libel

Cyber libel is sensitive because it involves constitutional, criminal, and evidentiary issues. If the suspect is known and the post is preserved, direct filing with the prosecutor may be possible, but many complainants still seek PNP or NBI assistance for documentation and technical matters.

Timeliness is important because prescription periods may apply.

Online Threats

If there are credible threats of harm, extortion, or exposure of private information, the complainant should seek urgent law enforcement assistance. Filing only with CICC may not be enough if the threat is ongoing.

Sextortion or Non-Consensual Sharing of Intimate Images

This is urgent. The complainant may need immediate law enforcement help, platform reporting, preservation of evidence, and protective measures. A CICC report is useful, but direct coordination with PNP-ACG or NBI-CCD may be necessary.

Identity Theft or Fake Account

If someone uses your name, photos, or identity online, CICC reporting may help. But if you want the person identified or prosecuted, PNP or NBI filing is often advisable.

Unauthorized Bank or E-Wallet Transaction

Report immediately to the bank or e-wallet provider, then consider CICC, PNP-ACG, or NBI-CCD depending on the facts. A law enforcement report may be required by the financial institution.

The Role of the Prosecutor

Even if PNP or NBI investigates, they do not usually decide guilt or finally determine whether the case will go to trial. The prosecutor evaluates probable cause.

The prosecutor may require:

complaint-affidavit;
witness affidavits;
digital evidence;
proof of ownership of accounts;
proof of publication or communication;
proof of identity of the suspect;
proof of damage or loss;
technical reports;
certified records where necessary.

The prosecutor may dismiss the complaint if evidence is insufficient, if the wrong offense was alleged, if the suspect cannot be identified, if the facts are civil rather than criminal, or if procedural requirements are not met.

Thus, filing with the correct agency is only one part of the process. Evidence quality matters greatly.

Does the Cybercrime Prevention Act Require Filing With One Specific Agency?

Philippine cybercrime enforcement involves several agencies. There is no practical rule that every cybercrime complainant must file only with CICC, only with PNP, or only with NBI.

The correct path depends on the nature of the matter.

CICC plays a coordinating and assistance role. PNP-ACG and NBI-CCD are key investigative agencies. Prosecutors determine probable cause. Courts try criminal cases.

A complainant should choose the path that matches the objective:

For reporting and assistance: CICC may be appropriate.
For investigation: PNP-ACG or NBI-CCD may be appropriate.
For prosecution: the prosecutor is eventually necessary.
For urgent platform or financial action: contact the platform, bank, e-wallet provider, or relevant regulator immediately, in addition to government reporting.

Practical Rule: Ask Whether There Is Already a Docketed Investigation

After filing with CICC, ask for the following:

Was my complaint referred to PNP-ACG, NBI-CCD, or another agency?
What is the referral number?
Who is the handling agency?
Who is the investigator or contact person?
Do I need to execute a sworn complaint-affidavit?
Do I need to submit original screenshots or device evidence?
Has any preservation request been made?
Has the matter been forwarded to the prosecutor?
What further documents are required?

If there is no clear answer, it is safer to approach PNP-ACG or NBI-CCD directly with your CICC reference number.

Avoiding Problems When Filing After CICC

1. Do Not Change Your Story

Your facts should remain consistent across CICC, PNP, NBI, banks, platforms, and prosecutors. Inconsistent statements can weaken the case.

2. Keep a Master Timeline

Prepare a timeline with dates, times, events, screenshots, and transaction references. Cybercrime complaints are easier to investigate when the timeline is clear.

3. Keep All Reference Numbers

Maintain a file containing:

CICC reference number;
PNP or NBI complaint number;
bank or e-wallet ticket number;
platform report number;
prosecutor docket number, if any.

4. Preserve Originals

Screenshots help, but original messages, URLs, emails, devices, and account records are better. Do not delete evidence after taking screenshots.

5. Avoid Public Posting That May Complicate the Case

Victims often want to expose scammers or harassers online. Public posting may sometimes help warn others, but it may also create defamation risks, alert suspects, cause evidence deletion, or complicate the investigation.

6. Do Not Pay Extortionists Without Legal Advice

In sextortion or blackmail cases, payment often leads to further demands. Preserve evidence and report urgently.

7. Act Quickly

Delay can lead to deleted accounts, lost logs, unavailable witnesses, and expired platform retention periods.

Is a Barangay Blotter Required?

A barangay blotter is generally not a substitute for filing a cybercrime complaint with the appropriate cybercrime unit or prosecutor.

For some incidents, a barangay blotter may help document harassment, threats, or local disputes. But cybercrime cases often require technical investigation beyond barangay authority.

A complainant should not assume that a barangay blotter alone is enough for cybercrime prosecution.

Is a Local Police Station Report Enough?

A local police station may record the incident or assist the complainant, but cybercrime matters may need referral to specialized units such as PNP-ACG.

If the complaint involves technical evidence, online accounts, hacking, digital fraud, cyber libel, or platform tracing, a specialized cybercrime unit is usually more appropriate.

Filing Directly With the Prosecutor After CICC

A complainant may consider direct filing with the prosecutor if:

the suspect is known;
the evidence is complete;
the offense is clear;
the complaint-affidavit is properly prepared;
there is no need for further technical investigation;
counsel is assisting.

However, if the suspect is unknown or the evidence requires tracing, platform data, bank coordination, or forensic analysis, law enforcement investigation through PNP or NBI may be needed first.

What If CICC, PNP, or NBI Says the Matter Is Civil?

Some online disputes are civil rather than criminal. For example:

unpaid loans;
failed business arrangements;
breach of contract;
refund disputes;
poor service complaints;
ordinary debt collection;
disagreement over ownership;
employment disputes;
commercial misunderstandings.

However, a civil-looking dispute may become criminal if there is fraud, identity theft, hacking, threats, extortion, falsification, unauthorized access, or deceit from the beginning.

The classification depends on the facts and evidence, not merely on the complainant’s label.

What If the Suspect Is Abroad?

Cybercrime often crosses borders. If the suspect is outside the Philippines, filing with PNP-ACG or NBI-CCD may still be useful. The case may require coordination with foreign platforms, foreign law enforcement, international channels, or service providers.

However, cross-border cases can be slower and more difficult. The complainant should preserve all digital identifiers, including usernames, emails, phone numbers, payment routes, crypto wallet addresses, IP-related information if available, and platform links.

What If the Platform Is Foreign?

Many social media, messaging, email, marketplace, and hosting platforms are foreign-based. Philippine agencies may still investigate, but access to platform records may require formal legal processes, platform compliance procedures, preservation requests, or international cooperation.

This is another reason to act quickly and preserve URLs, screenshots, account IDs, and timestamps.

What If You Only Want Takedown, Not Prosecution?

If the complainant’s main goal is removal of content, account takedown, or stopping impersonation, the best path may involve:

platform reporting tools;
CICC assistance;
PNP or NBI documentation;
legal demand letters;
court remedies in appropriate cases;
complaints to relevant regulators depending on the facts.

However, takedown and prosecution are different remedies. A post may be removed without a criminal case. A criminal case may proceed even if a post is removed, provided the evidence was preserved.

What If You Already Filed With PNP or NBI Before CICC?

If the complaint was already filed with PNP-ACG or NBI-CCD, filing with CICC may still be helpful for coordination or public assistance, but it may not be necessary.

When filing with CICC after PNP or NBI, disclose the existing complaint number and handling investigator to avoid duplication.

What If You Filed With CICC and Received No Update?

If there is no update after filing with CICC, take practical steps:

Follow up using the reference number.
Ask whether the matter was referred.
Ask which agency is handling it.
Prepare a sworn complaint-affidavit.
Organize evidence.
File with PNP-ACG or NBI-CCD if no active investigation exists.
Consider direct prosecutor filing if the evidence is complete and the suspect is known.
Seek counsel for serious, urgent, or sensitive cases.

Prescription and Timing Concerns

Cybercrime complaints may be subject to prescription periods. The applicable period depends on the offense charged, the penalty, and the governing law.

This matters because reporting to one agency does not always guarantee that prescription is interrupted or that the proper complaint has been filed in the correct forum. Victims should not delay formal legal action merely because they submitted an online report.

For cyber libel, online threats, fraud-related offenses, hacking, identity theft, or other cybercrime-related acts, timing should be assessed carefully. When in doubt, file promptly with the proper investigative agency or prosecutor.

Evidentiary Issues in Cybercrime Complaints

Cybercrime cases depend heavily on digital evidence. A complainant should understand that not every screenshot automatically proves a case.

Important evidentiary questions include:

Who created the account?
Who controlled the account?
Was the post or message actually published or sent?
When was it published or sent?
Was the complainant the person referred to?
Was there damage, threat, fraud, unauthorized access, or unlawful intent?
Can the transaction be traced?
Can the suspect be linked to the digital account?
Are screenshots complete and reliable?
Are URLs and metadata preserved?
Are witnesses available to authenticate the evidence?

PNP or NBI involvement may help strengthen these aspects before prosecutor filing.

Common Mistakes by Complainants

Mistake 1: Thinking a CICC Report Is Already a Court Case

A CICC report is not usually a court case. There is no court case until an Information is filed in court after prosecutorial action.

Mistake 2: Waiting Too Long

Digital evidence can disappear. Suspects can delete accounts. Platforms may not retain useful records forever.

Mistake 3: Submitting Cropped Screenshots Only

Cropped screenshots may omit timestamps, URLs, usernames, and context. Submit full screenshots and preserve originals.

Mistake 4: Blocking the Suspect Too Early

Blocking may be necessary for safety, but it may also cut off access to evidence. Before blocking, preserve messages, account links, and transaction details.

Mistake 5: Filing in Multiple Places Without Disclosure

Always disclose prior reports and complaints. Hidden duplicate filings can create confusion.

Mistake 6: Treating a Civil Dispute as Cybercrime Without Evidence of Criminal Conduct

Not every online dispute is cybercrime. The complaint must show the elements of the offense.

Mistake 7: Ignoring Banks and Platforms

For financial scams and account compromise, immediate reporting to banks, e-wallets, telcos, and platforms may be as urgent as government reporting.

Sample Wording for Filing With PNP or NBI After CICC

A complainant may use wording similar to the following in a complaint-affidavit:

I am executing this complaint-affidavit to request investigation and appropriate legal action regarding the cybercrime incident described below. I previously reported this matter to the Cybercrime Investigation and Coordinating Center on [date], with reference number [reference number]. As of this filing, I am submitting this complaint to [PNP-ACG/NBI-CCD] for investigation, case build-up, and referral to the proper prosecutor if warranted.

Another version:

I respectfully request that this matter be investigated, that relevant digital evidence be preserved where legally available, and that appropriate criminal, administrative, or referral action be taken against the person or persons responsible.

For scams:

I transferred the amount of PHP [amount] to [account name/account number/e-wallet number] on [date and time] after being induced by the representations of [name/account/page]. After payment, the person failed to deliver the promised item/service/investment return and became unreachable. Screenshots of the conversation, proof of payment, account details, and the CICC report acknowledgment are attached.

For hacking:

My [account type] account was accessed without my authority on or about [date]. I received login/password reset/security notifications showing unauthorized access. The account was then used to [send messages/post content/solicit money/change credentials]. Attached are screenshots, security notices, account details, and my prior CICC report acknowledgment.

For cyber libel:

On [date], the respondent published or caused to be published through [platform] a post/comment/message referring to me and containing statements that are false, malicious, and defamatory. The post was accessible online and viewed by others. Attached are screenshots showing the post, URL, profile details, date, comments, and my prior CICC report acknowledgment.

Should You Get a Lawyer?

A lawyer is not always required to report a cybercrime, but legal assistance is advisable when:

the case involves cyber libel;
the facts are complex;
large sums of money are involved;
the suspect is known and may countersue;
the matter involves intimate images or extortion;
a company is the complainant;
evidence must be carefully presented;
the complaint may involve both civil and criminal claims;
urgent court relief may be needed;
the prosecutor has already required additional submissions.

A lawyer can help prepare the complaint-affidavit, organize evidence, identify the correct offenses, avoid inconsistent statements, and determine whether to file with PNP, NBI, the prosecutor, or another agency.

Practical Checklist

After filing with CICC, check the following:

Question	Why It Matters
Do I have a CICC reference number?	Proof that the report was received
Was the complaint referred to PNP, NBI, or prosecutor?	Determines whether another filing is needed
Do I know the handling investigator?	Allows proper follow-up
Have I executed a sworn complaint-affidavit?	Often necessary for criminal action
Have I preserved screenshots, URLs, and original messages?	Critical for evidence
Have I contacted my bank/e-wallet/platform?	Urgent for scams and account compromise
Is the suspect known?	Affects whether direct prosecutor filing is possible
Is the threat or harm ongoing?	May require urgent law enforcement action
Have I disclosed all prior filings?	Avoids duplication and inconsistency

Bottom Line

Filing a cybercrime complaint with CICC is an important step, but it does not always replace filing with PNP-ACG, NBI-CCD, or the prosecutor.

You may not need to file again if CICC has already formally referred the matter and an investigative agency is actively handling it. But if the CICC filing only resulted in an acknowledgment, reference number, or general guidance, and no formal investigation has begun, then filing with PNP-ACG or NBI-CCD is often advisable.

The safest practical approach is:

Keep your CICC reference number.
Ask CICC whether the complaint was referred.
Confirm whether PNP, NBI, or a prosecutor is already handling it.
If not, file a formal complaint with PNP-ACG or NBI-CCD.
Bring a sworn statement and complete digital evidence.
Disclose the CICC filing to avoid duplication.
Act quickly because digital evidence can disappear and legal deadlines may apply.

A CICC report may start the process. A PNP, NBI, or prosecutor filing may be needed to move the case toward investigation, case build-up, and prosecution.