The rapid digital transformation in the Philippines has led to a significant increase in cybercrimes, ranging from personal harassment to sophisticated financial scams. For victims, navigating the legal landscape requires an understanding of specific laws, primarily the Cybercrime Prevention Act of 2012 (Republic Act No. 10175) and the Safe Spaces Act (Republic Act No. 11313).

Relevant Legal Frameworks

The Philippine legal system addresses digital offenses through several key pieces of legislation:

R.A. 10175 (Cybercrime Prevention Act): Punishes offenses such as cyber-libel, illegal access, data interference, and computer-related fraud.
R.A. 11313 (Safe Spaces Act / Bawal Bastos Law): Specifically addresses gender-based online sexual harassment, including stalking, uploading/sharing photos or videos without consent, and sending unsolicited lewd content.
R.A. 10173 (Data Privacy Act): Relevant when personal information is misused or leaked without authorization.

Step 1: Evidence Preservation (Digital Forensics)

Before approaching authorities, the integrity of the evidence must be secured. In the Philippine context, digital evidence is governed by the Rules on Electronic Evidence.

Screenshots: Capture the offending messages, posts, or profiles. Ensure the URL (link) and the timestamp are visible.
Transaction Records: For cyber scams, save proof of payment (e.g., GCash receipts, bank transfer slips, crypto transaction IDs).
URLs and Headers: Copy the direct link to the harasser’s profile or the fraudulent website. Do not rely solely on "display names," as these can be changed easily.
Chain of Custody: Avoid editing or altering the screenshots. Keep original files or emails in their digital format.

Step 2: Reporting to Specialized Agencies

There are two primary law enforcement agencies in the Philippines equipped to handle cybercrime. You may file a complaint with either, or both:

1. PNP Anti-Cybercrime Group (PNP-ACG)

The PNP-ACG is the primary police unit for digital offenses.

Online: Use the "e-Sumbong" portal or their official social media channels.
In-person: Visit the PNP-ACG headquarters at Camp Crame, Quezon City, or their regional field units.
Process: An investigator will conduct an initial interview and assessment of your evidence.

2. NBI Cybercrime Division (NBI-CCD)

The NBI is often preferred for complex financial scams or cross-border cybercrimes.

Online: File a complaint via the NBI’s official website or email (cybercrime@nbi.gov.ph).
In-person: Proceed to the NBI Building on Taft Avenue, Manila, or any regional office.

Step 3: Formal Filing of the Complaint-Affidavit

If the investigation yields enough information to identify the perpetrator, the next step is the filing of a Complaint-Affidavit.

Preparation: You will need a lawyer to help draft a Complaint-Affidavit. This document outlines the facts of the case and the specific laws violated.
Subscription: The affidavit must be sworn before a Prosecutor or a Notary Public.
Preliminary Investigation: The complaint is filed with the Office of the City Prosecutor where the victim resides (or where the crime was committed). The Prosecutor will determine if there is probable cause to bring the case to court.

Specific Considerations for Cyber Scams

For victims of financial fraud, additional steps are necessary to recover funds or freeze accounts:

BSP Consumer Affairs: If a bank or e-wallet is involved, report the incident to the Bangko Sentral ng Pilipinas (BSP) to ensure the financial institution complies with security protocols.
DTI / SEC: If the scam involves a fraudulent business or unregistered investment scheme, file a report with the Department of Trade and Industry (DTI) or the Securities and Exchange Commission (SEC).

Summary of Penalties

Offense	Law	Common Penalties
Cyber Libel	R.A. 10175	Prision mayor (6 years and 1 day to 12 years) or fine.
Computer-related Fraud	R.A. 10175	Prision mayor or a fine of at least ₱200,000.
Online Sexual Harassment	R.A. 11313	Prision correccional or a fine ranging from ₱100,000 to ₱500,000.

Note: Under R.A. 10175, any crime defined in the Revised Penal Code (like Estafa or Threats) that is committed through information and communication technologies carries a penalty that is one degree higher than those provided in the original code.