As of 2026, the digital landscape in the Philippines has expanded significantly, bringing with it an increase in sophisticated online scams. This guide outlines the comprehensive legal procedures for victims of cyber-fraud under the current Philippine legal framework.
I. Relevant Legal Framework
The primary law governing online scams is Republic Act No. 10175, otherwise known as the Cybercrime Prevention Act of 2012. This law classifies "Computer-related Fraud" and "Computer-related Identity Theft" as criminal offenses. Additionally, the following laws may apply depending on the nature of the scam:
- RA 8484 (Access Devices Regulation Act of 1998): Covers credit card fraud and unauthorized use of access devices (e-wallets, ATM cards).
- RA 7394 (Consumer Act of the Philippines): Applicable for deceptive sales acts and practices in online commerce.
- The Revised Penal Code: Specifically provisions on Estafa (Art. 315), which can be committed through digital means.
II. Preliminary Phase: Preservation of Evidence
The success of a legal complaint relies heavily on the "Best Evidence" rule. Before the scammer can delete accounts or purge messages, you must build a Digital Dossier:
- Screenshots: Capture full conversations, the perpetrator's profile (including the unique URL or User ID), and specific advertisements or posts.
- Financial Records: Save PDF receipts or screenshots of transaction confirmation messages from apps like GCash, Maya, or online banking portals. Ensure the Reference Number is clearly visible.
- URLs: Do not just record the display name; copy the direct link to the scammer's profile or website.
- Correspondence: Keep logs of emails, SMS, and call history. Do not delete these, as investigators may require metadata.
III. Identifying the Proper Agency
In the Philippines, three primary agencies handle online fraud, depending on the severity and nature of the incident:
| Agency | Best For... |
|---|---|
| PNP-ACG (Anti-Cybercrime Group) | General online scams, hacking, and social media fraud. Best for immediate local response. |
| NBI-CCD (Cybercrime Division) | Complex fraud, high-value cases, or scams involving international elements. |
| DTI (Department of Trade and Industry) | Scams involving online shops, non-delivery of items, or deceptive business practices. |
| SEC (Securities and Exchange Commission) | Investment scams or "Ponzi" schemes involving unregistered securities. |
IV. Step-by-Step Filing Process
Step 1: Initial Reporting and Account Freezing
Immediately report the incident to the financial institution involved (e.g., your bank or e-wallet provider). While they cannot usually "reverse" a voluntary transfer without a court order, they can flag the recipient's account for internal investigation.
Step 2: Visit the Agency
While initial reports can be made online via the PNP-ACG e-Complaint portal or the NBI website, a formal criminal case requires a physical appearance to execute a Complaint-Affidavit.
- Location: Visit the PNP-ACG Headquarters at Camp Crame, Quezon City, or any Regional Anti-Cybercrime Unit (RACU). For the NBI, visit their main office in Manila or regional centers.
Step 3: Interview and Technical Evaluation
An Investigator-on-Case (IOC) will interview you and review your evidence. They will determine if the facts constitute a violation of RA 10175.
Step 4: Execution of the Complaint-Affidavit
You must submit a sworn statement (affidavit) detailing the "Who, What, When, Where, and How" of the scam. This must be notarized or sworn before a prosecutor.
Step 5: Case Build-up and Referral
The agency will conduct a "case build-up." This may involve:
- Applying for a Warrant to Disclose Computer Data (WDCD) to get account details from service providers.
- Identifying the real-world identity of the "John/Jane Doe."
- Referral of the case to the Department of Justice (DOJ) or the local Office of the City Prosecutor for Preliminary Investigation.
V. Special Considerations for E-Commerce
If the scam is a consumer-related issue (e.g., a Shopee/Lazada seller sending a fake item), the DTI process is often faster:
- Mediation: The DTI will schedule a meeting between you and the seller/platform to settle.
- Arbitration: If mediation fails, a DTI adjudicator will hear the case and can order refunds plus administrative fines of up to ₱1,000,000.
VI. Penalties for Online Scammers
Under RA 10175, the penalties are one degree higher than those defined in the Revised Penal Code.
- Computer-related Fraud: Imprisonment of prision mayor (6 years and 1 day to 12 years) and/or a fine of at least ₱200,000, or the damage caused, whichever is higher.
- Identity Theft: Similar imprisonment and/or a fine of at least ₱50,000.
Note: If the crime is committed against the critical infrastructure of the Philippines, the penalty can reach life imprisonment.
VII. Key Requirements Checklist
Before heading to the authorities, ensure you have the following:
- At least two (2) valid Government-issued IDs.
- Printed copies of all screenshots and receipts.
- A USB flash drive containing digital copies of all evidence.
- A chronological summary of events (prepared in advance to save time).