The rise of digital transactions and social media interactions in the Philippines has led to a significant increase in cyber-related offenses. The Philippine National Police Anti-Cybercrime Group (PNP ACG) is the primary law enforcement agency tasked with investigating violations of Republic Act No. 10175, otherwise known as the Cybercrime Prevention Act of 2012.

This article outlines the legal framework, jurisdictional scope, and procedural steps for filing a formal complaint.

I. Jurisdictional Scope: What Crimes to Report

Under RA 10175, the PNP ACG has the authority to investigate several categories of offenses:

Offenses Against the Confidentiality, Integrity, and Availability of Computer Data/Systems: Illegal access (hacking), illegal interception, data interference, and system interference.
Computer-Related Offenses: Computer-related forgery, fraud, and identity theft.
Content-Related Offenses: Cyber libel, child pornography, and unsolicited commercial communications (spamming).
Other Related Offenses: Crimes defined by the Revised Penal Code and special laws, if committed by, through, and with the use of information and communications technologies (ICT).

II. Pre-Filing Phase: Preservation of Evidence

Digital evidence is volatile and can be easily deleted or altered. Before approaching the PNP ACG, victims must secure "Best Evidence":

Screenshots: Capture clear images of messages, posts, profiles, and comments. Ensure the timestamp and the perpetrator’s username/ID are visible.
URLs and Links: Copy the direct link to the profile or the specific offending post.
Financial Records: For fraud cases, secure bank statements, deposit slips, transaction receipts, or mobile wallet (e.g., GCash, Maya) confirmation messages.
Log Files: If the crime involves unauthorized access or hacking, try to preserve system logs if available.

III. The Formal Filing Process

Step 1: Initial Reporting

While the PNP ACG maintains online presence through social media and their official website, a formal criminal investigation typically requires a physical appearance.

Walk-in: Visit the PNP ACG Headquarters at Camp Crame, Quezon City, or any Regional Anti-Cybercrime Unit (RACU) located in various regional police offices across the country.

Step 2: Complaint Sheet and Interview

Upon arrival, the complainant will be asked to fill out a Complaint Sheet. An investigator-on-case (IOC) will conduct an initial interview to determine if the facts presented constitute a violation of RA 10175 or other applicable laws.

Step 3: Verification and Technical Analysis

The ACG may perform a technical verification of the digital evidence provided. This is to ensure that the links are active and the data has not been doctored. In complex cases (like hacking), the victim may be asked to turn over devices for forensic examination, subject to legal protocols.

Step 4: Execution of Complaint-Affidavit

If the investigator finds sufficient merit, the complainant must execute a Complaint-Affidavit. This is a sworn statement detailing the "who, what, when, where, and how" of the crime. This must be subscribed and sworn to before a prosecutor or a person authorized to administer oaths.

IV. Requirements for Complainants

To ensure a smooth process, the following should be prepared:

At least two (2) valid Government-issued IDs.
The printed copies of the evidence mentioned in Section II.
Electronic copies of the evidence (usually stored on a USB flash drive).
Proof of ownership of accounts (e.g., recovery emails or phone numbers) in cases of identity theft or hacking.

V. Post-Investigation: Filing with the Prosecutor

The PNP ACG does not "judge" the case; they gather evidence and identify the suspect. Once the investigation is complete:

Referral/Transmittal: The ACG will refer the case to the Department of Justice (DOJ) or the local Office of the City Prosecutor.
Preliminary Investigation: The Prosecutor will determine if there is probable cause to file the case in court.
Warrant of Arrest: Only a court can issue a warrant of arrest. However, if the perpetrator is caught in the act (in flagrante delicto), a warrantless arrest may occur.

VI. Important Legal Considerations

Prescriptive Period: For cyber libel, the prescriptive period is currently a matter of legal debate, but recent jurisprudence suggests it follows the shorter period of one (1) year under the Revised Penal Code, rather than the fifteen (15) years originally suggested for some cybercrimes. It is best to file as soon as the crime is discovered.
Cybercrime Warrant: Under the Rule on Cybercrime Warrants (RCW), law enforcement may apply for specific warrants to disclose, intercept, search, seize, or examine computer data.
Confidentiality: Complainants in cases involving sensitive content (e.g., photo extortion or RA 9262) are protected under various privacy laws to ensure their identity is not unnecessarily exposed during the proceedings.