Navigating the legal landscape to seek redress against online scammers in the Philippines requires a multi-agency approach. Under Republic Act No. 10175, otherwise known as the Cybercrime Prevention Act of 2012, victims have several avenues for filing complaints and pursuing criminal charges.

1. Primary Law Enforcement Agencies

In the Philippines, two main specialized units handle cybercrime. It is advisable to report to these agencies immediately to facilitate the preservation of digital evidence.

PNP-ACG (Philippine National Police - Anti-Cybercrime Group)

The PNP-ACG is the primary responder for consumer-to-consumer scams, investment fraud, and phishing.

Method: Victims can file an initial report through their official website or social media pages, but a physical appearance at Camp Crame or a regional ACG office is usually required to execute a formal affidavit.

NBI-CCD (National Bureau of Investigation - Cybercrime Division)

The NBI handles more complex or large-scale digital fraud cases.

Method: Complaints can be filed at the NBI Building in Manila or via their regional offices. They offer a "Cyber Clearing House" where victims can submit evidence for technical evaluation.

2. Specialized Regulatory Bodies

Depending on the nature of the scam, additional agencies may have jurisdiction:

Department of Trade and Industry (DTI): For scams involving e-commerce platforms (Lazada, Shopee) or deceptive sales acts under the Consumer Act of the Philippines.
Securities and Exchange Commission (SEC): For online investment scams, "Ponzi" schemes, or unlicensed lending apps.
Bangko Sentral ng Pilipinas (BSP): If the scam involved a bank account or an e-wallet like GCash or Maya. The BSP can compel financial institutions to investigate "unusual transactions."
National Privacy Commission (NPC): If the scam involved identity theft or the unauthorized processing of personal data.

3. The Filing Process: Step-by-Step

Step 1: Evidence Gathering (The Golden Rule)

Digital evidence is volatile. Before the scammer deletes the profile or conversation:

Screenshots: Capture the scammer’s profile, the fraudulent advertisement, and the entire conversation history.
Transaction Records: Save digital receipts, SMS confirmations from e-wallets, and bank deposit slips.
URL Links: Copy the exact URL of the scammer's profile or website (usernames can be changed; IDs often remain static).

Step 2: Initial Reporting and Verification

Contact the PNP-ACG or NBI-CCD. They will conduct a preliminary evaluation to determine if the act falls under the Cybercrime Prevention Act.

Step 3: Execution of Complaint-Affidavit

A formal criminal complaint requires a sworn statement. This document outlines:

The identity of the complainant.
The identity of the respondent (if known, or "John Doe" if unidentified).
A chronological narration of the facts.
The specific violation (e.g., Computer-related Fraud under Section 4(b)(2) of R.A. 10175).

Step 4: Filing with the Prosecutor's Office

Once the law enforcement agency completes its investigation, the case is forwarded to the Department of Justice (DOJ) or the local Prosecutor's Office for Inquest or Preliminary Investigation. The prosecutor determines if there is "probable cause" to file the case in court.

4. Relevant Penalties

Under Philippine law, penalties for cyber-fraud are generally one degree higher than those prescribed by the Revised Penal Code for the same crimes committed without technology.

Computer-related Fraud: Punishable by prision mayor (6 years and 1 day to 12 years) and/or a fine of at least ₱200,000.
Identity Theft: Punished similarly if personal information is used to defraud others.

5. Important Legal Reminders

Prescription Period: For violations of R.A. 10175, the state has fifteen (15) years to file the case. However, immediate filing is encouraged to prevent the loss of digital logs.
Bank Secrecy: Law enforcement cannot unilaterally open a scammer’s bank account due to strict bank secrecy laws. A Court Order is usually required to examine bank deposits unless the scammer waives this right.
Cybercrime Warrant: Under the Supreme Court's Rule on Cybercrime Warrants, law enforcement may apply for a Warrant to Disclose Computer Data (WDCD) to compel service providers to reveal the identity of an anonymous scammer.