If you or a loved one has been targeted by an online scam, hacking, identity theft, cyber harassment, or another form of cybercrime in the Philippines, knowing exactly where and how to report it matters. Quick action through the right channels can sometimes help freeze funds or preserve critical digital evidence before it disappears. The primary public-facing office for these reports is the Cybercrime Investigation and Coordinating Center (CICC), which runs the well-known 1326 hotline and coordinates with other agencies. This guide explains the CICC’s role, the most effective ways to contact them or related units, what to prepare, the practical step-by-step process, realistic timelines, common challenges, and special notes for overseas Filipinos and foreigners.

What the CICC Does and Its Legal Basis

The Cybercrime Investigation and Coordinating Center (CICC) serves as the main inter-agency body for responding to cybercrimes under Republic Act No. 10175, the Cybercrime Prevention Act of 2012. This law defines various cyber offenses—including offenses against computer systems, computer-related fraud and identity theft, and content-related crimes such as online libel or child sexual abuse material—and provides mechanisms for investigation and international cooperation.

In practice, the CICC operates the Inter-Agency Response Center (I-ARC), often described as the “911 for cybercrime.” It focuses on immediate triage, especially for financial scams, by coordinating in real time with banks, e-wallet providers like GCash and Maya, telcos, and other platforms to flag or freeze suspicious accounts. It works alongside the Philippine National Police Anti-Cybercrime Group (PNP-ACG) and the National Bureau of Investigation Cybercrime Division (NBI-CCD), which handle deeper investigations, while the Department of Justice Office of Cybercrime (DOJ-OOC) acts as the central authority for international mutual legal assistance requests.

Reporting to the CICC does not automatically start a full criminal case—that usually involves referral to PNP or NBI for investigation and the prosecutor’s office for filing charges—but it is often the fastest entry point for ordinary victims seeking urgent help or guidance on next steps.

Primary Ways to Contact the Cybercrime Office (CICC) and Report

Here are the current official channels (verified through government-linked sources as of 2026):

24/7 Hotline: 1326 — Toll-free from any network. Best for urgent cases involving recent money transfers where accounts might still be frozen. Operators can initiate real-time coordination with financial institutions.
Alternative mobile numbers (when 1326 is busy or under maintenance):
– DITO: 0991-481-4225
– Globe: 0966-976-5971
– Smart: 0947-714-7105
Online reporting portal: Visit the official page at cicc.gov.ph/report and follow the prompts to submit details and upload evidence.
Email: report@cicc.gov.ph (suitable for non-urgent or follow-up reports with attached evidence).
Walk-in complaints: 49 Don A. Roces Avenue, Barangay Paligsahan, Quezon City, 1103 Metro Manila. Office hours are typically weekdays from 8:00 AM to 5:00 PM.
Via eGovPH Super App: Many users now report scams directly through the app’s “e-Report” or scam category feature, uploading screenshots and the scammer’s number for faster SIM-related tracing under the SIM Registration Act (RA 11934).

You can also report directly to the PNP Anti-Cybercrime Group via their website acg.pnp.gov.ph or email acg@pnp.gov.ph, or to the NBI Cybercrime Division at their Taft Avenue headquarters in Manila (hotline inquiries through (02) 8523-8231 to 38 or cybercrime@nbi.gov.ph). The CICC often refers cases to these units for formal investigation.

Step-by-Step: How to Report Effectively

Follow these steps in order for the strongest possible report:

Preserve all evidence immediately — before calling or deleting anything.
Take clear screenshots or screen recordings that show full conversations, usernames/handles, URLs/links, timestamps, profile pictures, and any transaction details (reference numbers, amounts, dates, and recipient accounts). Do not delete messages, clear your chat history, or reset your device. Save original files and make working copies. Note the exact timeline in writing: when contact began, what promises or threats were made, how and when money or information was sent, and any follow-up demands. This chain-of-custody detail is critical because digital evidence must remain intact and verifiable for any future court use under the Rules on Electronic Evidence.
Assess urgency and call 1326 first if money was recently sent.
Explain the situation clearly, including transaction details and any identifiable account numbers or wallet addresses. The I-ARC team can sometimes coordinate account freezes within hours if the funds have not yet been withdrawn or layered through multiple accounts.
Submit a formal report through the preferred channel.
Use the online portal, email, or walk-in. Provide a clear narrative of what happened in chronological order. CICC staff or partner agencies will usually guide you in executing a sworn statement or complaint-affidavit. Bring at least two valid government-issued IDs (passport for foreigners) and copies of all evidence.
Follow up and cooperate with any requests for additional information.
Investigators may ask for device access (with proper legal process), more screenshots, or bank/e-wallet statements. Respond promptly. The CICC or referred agency (PNP-ACG or NBI) will handle coordination with platforms and financial institutions.
If referred for full investigation, proceed to the appropriate office.
PNP-ACG or NBI personnel will conduct deeper forensics, request preservation orders or subpoenas, and build the case for the prosecutor’s office if probable cause exists under RA 10175 or related laws such as estafa provisions in the Revised Penal Code.

The entire process is free. No filing fees apply for criminal complaints.

What to Expect: Realistic Timelines and Outcomes

Hotline response for urgent financial cases can happen within minutes to hours for initial triage and possible account flagging. Formal logging of a complaint usually occurs the same day or within a few days. Full investigation timelines vary widely—simple cases with clear local leads may see progress in weeks, while complex, cross-border, or high-volume syndicate cases often take several months or longer due to the need for digital forensics, international coordination through the DOJ-OOC, and court backlogs.

Recovery of funds is never guaranteed and depends on how quickly the report is made, whether the money can still be traced and frozen, and cooperation from banks or e-wallet providers. Many victims recover nothing or only a portion, but reporting still helps authorities identify patterns, block malicious infrastructure, and build larger cases against organized groups. Updates from investigators may be infrequent; patience and keeping your own records of all communications help.

Common Pitfalls and Challenges

Many victims make understandable mistakes that weaken their case or delay help:

Deleting messages, photos, or transaction records “to move on” — this destroys crucial evidence.
Confronting or continuing to engage the scammer after realizing it is fraud — this can alert them to destroy evidence or move funds.
Using unofficial “recovery services” or “hackers for hire” that charge upfront fees — these are almost always additional scams; report them too.
Reporting only to social media platforms without also notifying Philippine authorities — platforms may remove accounts but cannot freeze local bank or e-wallet funds.
Expecting immediate arrest or full recovery — cyber investigations are technically complex, and many perpetrators operate from abroad or use layers of mule accounts and VPNs.
Providing incomplete narratives or scattered evidence — a clear, chronological story with all reference numbers makes a big difference.

Even small losses should be reported. Individual cases help authorities spot larger operations.

Special Considerations for Foreigners and Overseas Filipinos

Foreigners and balikbayans can report through the same channels. The online portal and email work well from abroad. For urgent cases, international calling to 1326 or the mobile numbers is possible. If you later need to execute an affidavit for Philippine court proceedings and you are outside the country, the document may require apostille authentication under the Hague Apostille Convention (for countries that are parties) or consular notarization.

Jurisdiction can be an issue if the offender is overseas, but Philippine authorities can still investigate local victims, trace Philippine-registered SIMs or bank accounts, and request international assistance through the DOJ-OOC. Provide as much identifying information as possible (even partial usernames, wallet addresses, or foreign phone numbers). Reciprocity and existing mutual legal assistance treaties help in many cases.

Frequently Asked Questions

Is the 1326 hotline really free and available 24/7?
Yes. It is a toll-free public hotline operated by the CICC specifically for cybercrime reports and urgent coordination, including outside regular business hours.

Can I report anonymously?
Initial reports can sometimes be made without full personal details, but a formal complaint-affidavit for investigation usually requires your identity so authorities can follow up and you can be informed of developments. Your personal information is handled with confidentiality protocols.

What if I already deleted the messages or cleared my phone?
Report anyway. Investigators may still recover some data from the other party’s side, platforms, or financial records. Provide whatever screenshots, transaction proofs, or memory of details you still have.

Do I need a lawyer to file a report with the CICC?
No. The process is designed to be accessible. Staff will assist you with forms and statements. You may consult a lawyer later if the case proceeds to prosecution or if you want civil recovery options.

How long does a typical cybercrime investigation take?
It varies greatly. Simple local scam cases with good evidence may move faster, while complex or international cases involving multiple jurisdictions often take many months. There is no fixed deadline.

Will reporting to CICC help me recover money sent via GCash, bank transfer, or remittance?
It gives the best chance for rapid account flagging or freezing if done quickly. Actual recovery depends on the speed of the report, cooperation from the financial institution, and whether the funds can still be traced before they are withdrawn or layered.

What is the difference between reporting to CICC, PNP-ACG, and NBI?
Start with CICC (especially via 1326 or the portal) for immediate triage and possible real-time intervention. PNP-ACG and NBI handle the detailed investigation, digital forensics, and enforcement actions. The CICC often refers cases to them.

Can I report cyber libel, online harassment, or sextortion to the same office?
Yes. These fall under RA 10175 content-related offenses or related Revised Penal Code provisions. The CICC and partner units accept these reports and can coordinate takedowns or preservation of evidence from platforms.

Key Takeaways

Act fast on evidence preservation and urgent financial reports by calling 1326 or using the CICC online portal.
Prepare clear screenshots, transaction records, and a chronological narrative before reporting.
The CICC serves as the main public entry point and coordinates with PNP-ACG, NBI, and other agencies for investigation.
Reporting is free and helps both your case and broader efforts against cybercrime syndicates.
Realistic expectations are important: fund recovery is possible but not guaranteed; investigations take time, especially in cross-border cases.
Use only official channels — avoid unofficial recovery services that ask for upfront payment.
Both Filipinos in the Philippines and abroad, as well as foreigners, can use these same reporting mechanisms effectively.

Taking these practical steps puts you in the strongest position to seek accountability and any available remedies under Philippine law.