Being scammed online can feel urgent and confusing: the seller blocked you, the GCash or bank transfer already went through, the fake investment “agent” disappeared, or someone used your account without permission. In the Philippines, the most important first move is to preserve evidence and report fast, because scam funds can move through multiple bank or e-wallet accounts within minutes. This guide explains where to file a complaint for online scams in the Philippines, what documents to prepare, which laws apply, how the PNP, NBI, CICC, banks, BSP, DTI, and SEC fit together, and what usually happens after you file.

What Counts as an Online Scam in the Philippines?

An online scam is not one single crime name. In practice, investigators and prosecutors classify the facts under the law that best fits what happened.

Common examples include:

A fake online seller accepts payment, then blocks the buyer.
A scammer uses a fake Facebook, Instagram, TikTok, Telegram, or marketplace account.
Someone pretends to be a bank, e-wallet, courier, government agency, or company representative to steal OTPs, passwords, or account access.
A “job recruiter” asks for deposits, processing fees, or task payments.
A fake investment, crypto, forex, casino, paluwagan, or “double your money” scheme collects funds.
A romance scammer asks for emergency money, customs fees, or travel costs.
A compromised account messages friends or relatives asking for money.
A person allows their bank or e-wallet account to be used as a “mule account” to receive scam proceeds.

Under the Cybercrime Prevention Act of 2012, Republic Act No. 10175, computer-related fraud, computer-related forgery, and computer-related identity theft are cybercrime offenses. RA 10175 also covers crimes under the Revised Penal Code and special laws when committed “by, through and with the use of” information and communications technology, with a higher penalty under Section 6. (Supreme Court E-Library)

For many online selling and payment scams, the basic crime is often estafa, also called swindling, under Article 315 of the Revised Penal Code. Estafa generally involves deceit or abuse of confidence that causes damage to another person. The “online” part does not erase estafa; it may make the act cyber-related when the internet, mobile app, e-wallet, or online messaging platform was used. (Lawphil)

A newer and very important law is the Anti-Financial Account Scamming Act, Republic Act No. 12010 of 2024. AFASA penalizes financial account scamming, including money muling and social engineering schemes involving bank accounts, e-wallets, credit cards, and other financial accounts. It also allows temporary holding of funds in disputed transactions within BSP-prescribed limits, which is why speed matters when reporting to your bank or e-wallet provider. (Lawphil) (Lawphil)

Where Should You File a Complaint for an Online Scam?

The right office depends on your goal. If you want to stop or freeze funds, start with the bank or e-wallet. If you want a criminal investigation, report to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or CICC. If you have a dispute with a regulated financial institution’s handling of your complaint, escalate to the BSP. If the issue is an online seller, investment scheme, or lending app, other regulators may also be involved.

Situation	Where to Report	Purpose
Bank transfer, e-wallet transfer, card fraud, phishing, unauthorized transaction	Your bank, e-wallet, card issuer, or payment provider first	Ask for fraud tagging, recall, temporary hold, investigation, ticket number
Online scam involving social media, websites, messaging apps, fake accounts, cyber fraud	PNP Anti-Cybercrime Group, NBI Cybercrime Division, or CICC	Criminal investigation, evidence preservation, identification of suspects, case build-up
Urgent scam report and guidance	CICC Inter-Agency Response Center	Hotline-based assistance and referral
Complaint against how a bank, e-wallet, or BSP-supervised financial institution handled your fraud report	BSP Consumer Assistance Mechanism	Consumer redress against the financial institution, not direct arrest of scammers
Fake online seller or consumer transaction with identifiable seller/business	DTI Consumer CARe System	Consumer complaint, mediation, refund/replacement issues
Investment scam, unauthorized investment solicitation, fake corporation, online lending app abuse	SEC I-Message Mo Portal or relevant SEC department	Regulatory action against corporations, lending companies, financing companies, investment solicitors
Personal data misuse, identity theft, leaked IDs, unauthorized use of personal information	National Privacy Commission, plus law enforcement if criminal	Data privacy complaint and investigation

The BSP itself encourages scam or fraud victims to report criminal activity to law enforcement agencies such as the PNP, NBI, and CICC because those agencies can commence formal criminal investigation and apprehension processes. The BSP’s listed channels include PNP-ACG, NBI-CCD, and CICC contacts, while BSP complaints against supervised financial institutions go through the BSP consumer mechanism.

Do These First Before Filing the Formal Complaint

Time is critical. Before drafting long affidavits, do these immediately:

Stop all communication that may cause more loss. Do not send “release fees,” “taxes,” “verification deposits,” “refund processing fees,” or “last payment” demands.
Secure your accounts. Change passwords, remove linked cards, enable two-factor authentication, log out other devices, and call your bank or e-wallet if your account was compromised.
Report the transaction to the bank or e-wallet right away. Ask for:
- a fraud or dispute ticket number;
- tagging of the receiving account;
- recall, hold, or investigation of the transfer;
- written confirmation by email or in-app ticket;
- instructions for submitting police report, affidavit, screenshots, or transaction receipts.
Preserve evidence before the scammer deletes it. Take screenshots and screen recordings showing the full conversation, account name, username, profile URL, phone number, email address, QR code, payment instructions, receipts, transaction reference numbers, dates, and times.
Do not edit or crop your only copy of evidence. Save clean originals. You may make a separate annotated copy later, but investigators prefer complete screenshots with timestamps and identifiers.
Save the links, not just the names. A Facebook name, Telegram display name, or marketplace nickname can be changed. Copy the profile URL, listing URL, group URL, website URL, email headers when available, and any account number used.
Write a simple timeline. Include the date you first contacted the scammer, what was promised, how much you paid, where you sent it, when you were blocked, and what loss you suffered.

Step-by-Step Guide to Filing an Online Scam Complaint

1. Report to Your Bank, E-Wallet, or Payment Provider

For GCash, Maya, bank transfers, InstaPay, PESONet, credit cards, debit cards, remittance centers, or payment links, report first to the financial institution involved.

Tell them clearly:

“I am reporting a scam/fraud transaction.”
“Please tag the receiving account and preserve records.”
“Please check if the funds can be held, recalled, or subjected to coordinated verification.”
“Please provide a ticket or reference number.”
“Please tell me what documents you require for your fraud investigation.”

Under AFASA, institutions may temporarily hold funds subject of a disputed transaction within the period prescribed by the BSP, not exceeding 30 calendar days unless extended by a competent court. The law also recognizes disputed transactions based on complaints from aggrieved parties, information from another institution, or fraud management system findings. (Lawphil)

This does not guarantee recovery. If the scammer already withdrew or transferred the funds, the provider may have nothing left to hold. But fast reporting increases the chance that a receiving or pass-through account can be flagged.

2. File an Initial Report with CICC

The Cybercrime Investigation and Coordinating Center operates scam reporting channels, including the Inter-Agency Response Center hotline. The BSP’s official complaint guide lists CICC at 1326, with email report@cicc.gov.ph, and alternative mobile numbers for scam or fraud reporting.

CICC is useful when:

you need immediate guidance;
the scam is ongoing;
the scam involves multiple victims;
you need to know which law enforcement or regulator should handle the matter;
you are not sure whether to go to PNP, NBI, BSP, DTI, or SEC.

A CICC report is helpful, but for prosecution you should still expect to submit evidence and a sworn statement to law enforcement or the prosecutor.

3. File with the PNP Anti-Cybercrime Group or Regional Anti-Cybercrime Unit

The PNP Anti-Cybercrime Group handles cybercrime and cyber-related offenses. You may report through PNP-ACG headquarters or the relevant regional anti-cybercrime unit.

Bring or prepare:

valid government ID;
printed and digital copies of evidence;
transaction receipts;
screenshots and links;
written timeline;
names and contact details of witnesses, if any;
draft affidavit, if already prepared.

A common practical route is to visit the nearest Regional Anti-Cybercrime Unit. The duty investigator will screen whether the incident is cybercrime-related, ask for documents, and may assist in preparing or receiving a complaint-affidavit.

4. File with the NBI Cybercrime Division

The NBI Cybercrime Division also receives complaints for computer crimes. According to the NBI Citizen’s Charter for investigative assistance to victims of computer crimes, the general public may avail of the service, the initial steps include proceeding to the Cybercrime Division, filling out a complaint sheet, undergoing preliminary interview and initial investigation, and executing sworn statements or submitting prepared affidavits. The same NBI charter states no fee for those listed complaint intake steps and indicates an initial total processing time of about 1 hour and 10 minutes for the intake stages, although the full investigation can take much longer. (National Bureau of Investigation)

NBI is often a practical choice when:

the scam is technical or cross-platform;
there are multiple victims;
the suspect may be part of an organized group;
you need cybercrime investigators to evaluate digital evidence;
you are preparing a case for prosecutor filing.

5. Prepare and Submit a Complaint-Affidavit

A complaint-affidavit is your sworn written statement. “Sworn” means you declare under oath that the facts are true. It may be notarized or sworn before an authorized officer, depending on the receiving office’s procedure.

A useful complaint-affidavit usually includes:

Your full name, nationality, address, contact number, and ID details.
The respondent’s known details, if any: name, alias, username, phone, email, account number, bank/e-wallet, address, platform link.
A chronological narration of what happened.
The exact amount lost and how it was paid.
The false promise or representation made by the scammer.
How you relied on the representation.
How and when you discovered the scam.
Evidence attached as annexes.
A request for investigation and prosecution for the proper offense, such as estafa, cyber-related estafa, computer-related fraud, identity theft, or violation of AFASA, depending on the facts.

Do not exaggerate. A clear, factual affidavit is stronger than an angry one.

6. Follow Up and Submit Additional Evidence

After filing, ask for:

complaint number or reference number;
name/unit of assigned investigator;
email address for supplementary evidence;
next step and expected update date;
whether you need a separate bank certification, platform report, or prosecutor filing.

If more victims contact you, ask them to prepare their own affidavits and evidence. Multiple independent complaints may help show pattern, conspiracy, or economic sabotage under AFASA if the facts fit.

Documents and Evidence Checklist

Document or Evidence	Why It Matters	Practical Tip
Valid ID	Proves complainant identity	Passport, driver’s license, UMID, PhilID, PRC ID, or other government ID
Complaint-affidavit	Main sworn statement	Attach evidence as annexes and number them clearly
Screenshots of chats	Shows promises, payment instructions, admissions, blocking	Include dates, timestamps, usernames, phone numbers, and full message context
Profile links and URLs	Helps identify accounts better than display names	Copy the exact URL before reporting the profile to the platform
Transaction receipts	Proves payment and amount lost	Include reference number, sender, recipient, date, time, bank/e-wallet
Bank or e-wallet ticket	Shows immediate reporting	Ask provider for written acknowledgment
Product listing or advertisement	Shows what was offered	Save the listing, photos, price, seller page, and comments
Call logs, emails, SMS	Shows communication trail	For emails, preserve headers when possible
Witness statements	Supports your account	Useful when a relative, friend, or employee saw the transaction
Police blotter, if obtained	May be requested by some providers	Not a substitute for a cybercrime complaint

What Happens After You File?

Initial assessment

The investigator checks whether the complaint falls under cybercrime, estafa, financial account scamming, identity theft, or another offense. If it is mainly a consumer dispute, you may be referred to DTI, BSP, SEC, or another agency.

Evidence preservation and requests

Law enforcement may request preservation of data or apply for cybercrime warrants and related orders. Under RA 10175, service providers are required to preserve traffic data and subscriber information for a minimum period, and disclosure of computer data generally requires proper legal process. (Supreme Court E-Library)

This is why investigators may tell you they cannot simply “trace the IP address” on the spot. Philippine cybercrime investigations must respect warrant rules, privacy rights, and admissibility requirements. The Supreme Court’s Rule on Cybercrime Warrants provides special procedures for venue, cybercrime warrants, disclosure, interception, search, seizure, custody, and related matters. (Office of the Court Administrator)

Case build-up

If the suspect is unknown, law enforcement first tries to identify the person or account owner behind the scam. If the suspect is known, the complaint may proceed faster to the prosecutor.

Preliminary investigation by prosecutor

The prosecutor determines whether there is probable cause, meaning enough basis to believe a crime was committed and the respondent should be charged in court. The respondent may be required to file a counter-affidavit. You may be asked to submit reply-affidavits or clarify evidence.

Court case

If the prosecutor files an information in court, the case proceeds as a criminal case. The court may also address civil liability, such as restitution or damages, depending on the evidence and outcome.

Bank, E-Wallet, and BSP Complaints: What They Can and Cannot Do

Banks and e-wallet providers can investigate accounts, review transactions, tag suspicious activity, and coordinate within the limits of law and BSP regulations. They are not the same as the police, and they usually will not disclose the recipient’s full personal information directly to you because of privacy and banking rules.

The BSP Consumer Assistance Mechanism is a second-level recourse. BSP materials explain that a financial consumer should first report the issue to the BSP-supervised institution’s Financial Consumer Protection Assistance Mechanism. If unresolved or ignored, the complaint may be escalated to BSP-CAM. The BSP FAQ states the BSP-CAM process may take around 55 to 65 days from receipt of the complaint up to termination, while adjudication may take around 180 to 240 days from receipt of the formal complaint up to decision. (Bureau of Special Projects)

Use BSP escalation when the issue is about the financial institution’s response, such as:

failure to act on a fraud report;
refusal to give a ticket number;
unexplained account freeze or release;
mishandling of a disputed transaction;
unauthorized transaction complaints;
denial of reimbursement where the institution may have failed in its obligations.

BSP is not a substitute for a criminal complaint against the scammer. If a crime occurred, file with PNP, NBI, or CICC as well.

Special Situations

The scammer used a GCash, Maya, or bank account

Report to the sending and receiving institutions if known. Ask your provider to coordinate with the receiving institution. Include the account name, number, QR code, reference number, amount, and timestamp.

If the receiving account holder says “I only lent my account” or “I just received money for someone else,” that may raise money mule issues under AFASA, depending on the facts.

The scam happened on Facebook Marketplace, Instagram, TikTok, Shopee, Lazada, Telegram, or Viber

Report both to the platform and to Philippine authorities. Platform reports may remove the account, but removal can also make evidence harder to access later. Preserve screenshots and URLs first.

For a marketplace purchase involving an identifiable seller or business, DTI may help with consumer redress through the DTI Consumer CARe System. For pure fake-account fraud where the seller vanishes after payment, law enforcement is usually more important.

The scam is an investment, crypto, forex, lending, or “tasking” scheme

Report to law enforcement and consider filing with the SEC through the SEC I-Message Mo Portal, especially if the scam involves unauthorized investment solicitation, a fake corporation, lending or financing company, online lending app, or misuse of SEC registration. The SEC portal allows users to open tickets and check ticket status. (Securities and Exchange Commission)

The scammer is unknown or used a dummy account

You can still file. In fact, unknown-suspect cases are common. Focus on identifiers:

profile URL;
user ID or handle;
phone number;
email address;
bank or e-wallet account;
device or login alerts;
IP-related information, if lawfully obtained;
transaction trail.

Do not hack, dox, threaten, or pay someone online to “trace” the scammer. Evidence obtained illegally may become unusable and may expose you to liability.

You are a foreigner or OFW outside the Philippines

Foreigners and Filipinos abroad may report Philippine-related scams if there is a Philippine element, such as a Philippine bank account, e-wallet, phone number, seller, victim, platform activity, or damage suffered in the Philippines.

Practical options include:

filing initial reports online or by email with the relevant agency;
calling CICC if accessible;
asking the bank or e-wallet to preserve the fraud ticket;
executing a complaint-affidavit abroad;
having documents notarized at a Philippine Embassy or Consulate, or notarized locally and apostilled where appropriate;
authorizing a trusted representative in the Philippines through a Special Power of Attorney if physical follow-up is needed.

If your evidence is in another language, keep the original and prepare an English translation. A formal certified translation may be required later, depending on the agency or court.

The amount is small

Small scams are still reportable. Many scam networks rely on victims not filing because each amount is “too small.” Even if recovery is unlikely, your complaint may help connect accounts, phone numbers, and patterns used against other victims.

The scammer offers to return the money if you withdraw the complaint

Be careful. Repayment may affect the civil aspect of the case, but it does not automatically erase criminal liability for estafa or cybercrime. If there is a settlement, document everything properly. Do not sign statements saying the incident never happened if that is false.

Common Mistakes That Hurt Online Scam Complaints

Deleting the chat thread after taking screenshots.
Reporting the account to the platform before saving the URL and evidence.
Sending cropped screenshots only with no dates, usernames, links, or payment details.
Waiting weeks before reporting to the bank or e-wallet.
Posting accusations publicly without verified facts, which can create separate defamation or cyberlibel problems.
Paying “recovery agents” or hackers who promise to retrieve funds.
Filing only a barangay blotter and assuming it is already a cybercrime case.
Not getting a reference number from the bank, e-wallet, police, NBI, CICC, or regulator.
Using inconsistent amounts or dates across bank reports, affidavits, and agency complaints.

A barangay blotter may help document that you reported an incident, and some platforms or financial providers may ask for a police or incident report. But barangay officials cannot compel Facebook, Telegram, banks, or e-wallet providers to disclose cyber records. For online scam investigation, PNP-ACG, NBI-CCD, CICC, and the prosecutor are usually more relevant.

Fees, Timelines, and Practical Expectations

Step	Typical Cost	Practical Timeline
Bank/e-wallet fraud report	Usually none	Ticket usually same day; investigation varies
CICC report	Usually none	Hotline guidance may be immediate; follow-up varies
PNP-ACG complaint intake	Usually no filing fee	Same day intake possible; investigation may take weeks to months
NBI Cybercrime Division intake	No listed fee for complaint intake steps in the NBI Citizen’s Charter	Initial intake may be same day; investigation varies
Notarization of affidavit	Private notarial fee if not sworn before agency officer	Same day if documents are complete
Prosecutor complaint	Usually no filing fee for criminal complaint	Several weeks to months, depending on docket and complexity
Court case	No filing fee for the criminal prosecution itself; private costs may vary	Months to years, depending on court docket and evidence
BSP-CAM	No lawyer required under BSP FAQ	BSP-CAM may take about 55 to 65 days; adjudication may take 6 to 8 months

The biggest bottlenecks are usually incomplete evidence, unknown suspects, dummy accounts, foreign platforms, bank secrecy and privacy constraints, multiple mule accounts, and heavy agency dockets.

Frequently Asked Questions

Can I file an online scam complaint even if I only know the scammer’s Facebook or Telegram account?

Yes. You can file using the account link, screenshots, phone number, payment account, and transaction receipts. The case may begin as an unknown-suspect complaint. Identification may require preservation requests, platform cooperation, bank records, or cybercrime warrants.

Should I go to PNP or NBI for an online scam?

Either may receive cybercrime complaints. PNP-ACG has regional anti-cybercrime units, while the NBI has a Cybercrime Division and regional cybercrime centers. If the scam is urgent, also report to CICC. Avoid filing multiple confusing versions; keep your facts and documents consistent.

Can I recover my money after being scammed online?

Sometimes, but it depends on speed and whether funds remain traceable or still held in an account. Report immediately to the bank or e-wallet. Criminal authorities can investigate and prosecutors may seek criminal liability, but they are not a guaranteed collection service.

Is a police blotter enough for GCash, Maya, or bank scam complaints?

A blotter may help, but it is usually not enough for a full cybercrime investigation. You should also file a fraud report with the financial provider and, when appropriate, a cybercrime complaint with PNP-ACG, NBI, or CICC.

What law punishes online scammers in the Philippines?

Depending on the facts, online scammers may be liable for estafa under Article 315 of the Revised Penal Code, cyber-related offenses under RA 10175, financial account scamming under RA 12010, identity theft, computer-related fraud, or violations of securities, consumer, lending, or data privacy laws.

Can I file a complaint if the scammer is abroad?

Yes, if there is a Philippine element such as a Philippine victim, account, e-wallet, phone number, computer system, or damage in the Philippines. Cross-border cases are harder and slower because authorities may need international cooperation, platform records, or foreign law enforcement assistance.

Do I need a lawyer to file an online scam complaint?

For initial reports to banks, e-wallets, CICC, PNP, NBI, DTI, SEC, or BSP-CAM, people commonly file on their own. A well-organized affidavit and complete evidence are often more important at the first stage than legal wording.

Can I post the scammer’s name and photos online?

It is safer to submit evidence to authorities and platforms rather than publicly accusing someone, especially if the identity is not verified. Public accusations may create separate legal risks if the person named is wrong or if unnecessary private information is exposed.

What if the scammer used my ID or account?

Report immediately to your bank or e-wallet, law enforcement, and the platform involved. If personal information was misused or exposed, consider filing with the National Privacy Commission. The NPC’s official site lists complaint channels and a complaint-affidavit template for privacy complaints. (National Privacy Commission)

Can a relative file the complaint for me?

A relative may help with reporting and follow-up, but the victim or real party-in-interest should execute the complaint-affidavit when possible. For BSP complaints, the BSP FAQ states that another person generally needs written authority from the aggrieved party or real party-in-interest. (Bureau of Special Projects)

Key Takeaways

Report online scams fast because funds and digital evidence can disappear quickly.
Start with your bank, e-wallet, or payment provider if money was transferred.
File criminal scam reports with PNP-ACG, NBI Cybercrime Division, or CICC.
Use BSP for complaints against banks, e-wallets, and BSP-supervised institutions; use DTI for consumer seller disputes; use SEC for investment, financing, lending, and corporate scams.
Preserve complete screenshots, URLs, transaction receipts, account numbers, phone numbers, emails, and timestamps.
A complaint-affidavit should tell a clear, chronological, truthful story supported by annexes.
Barangay blotters and platform reports may help, but they do not replace a formal cybercrime or fraud complaint.
Recovery is more likely when the report is made immediately, but criminal investigation and money recovery are separate processes.