If you've lost money to an online scam in the Philippines—whether through a fake seller on Facebook or Instagram, a fraudulent investment or crypto scheme, a romance scam that built trust over weeks or months before asking for funds, a phishing message that tricked you into authorizing a transfer, or a fake job offer demanding upfront “processing fees”—you have options under Philippine law. The offense is commonly referred to as cyber-estafa or online estafa. This guide explains exactly what it is, the legal basis, the practical steps to file a criminal complaint, the evidence required, where to go, what to expect during investigation and prosecution, special considerations for victims abroad or foreigners, common pitfalls, and answers to the questions people most often ask.

What Constitutes Cyber-Estafa or Online Estafa

Cyber-estafa occurs when the elements of estafa (swindling) under Article 315 of the Revised Penal Code are committed through, or with the material use of, information and communications technology such as computers, smartphones, social media platforms, messaging apps, email, e-wallets, or websites.

The core elements remain the same as traditional estafa by means of deceit:

The offender made false pretenses, fraudulent representations, or executed other deceitful acts (these must occur prior to or simultaneously with the victim parting with money or property).
The victim relied on those representations and was induced to deliver money, property, or other things of value.
The victim suffered damage or prejudice that can be estimated in money.
There was intent to defraud on the part of the offender.

What makes it “cyber” or online is the essential role of ICT in carrying out the scheme. Examples include creating fake social media profiles or websites to lure victims, communicating false promises via Messenger, Viber, Telegram, or WhatsApp, directing payments through GCash, bank transfers, or crypto wallets, and then disappearing or delivering nothing (or something worthless).

Even if the scammer used a fake identity or operated from outside the Philippines, the case can still qualify if any element occurred in the country, a Philippine computer system was used, or damage was caused to a person in the Philippines.

Legal Basis Under Philippine Law

The primary anchor is Article 315 of the Revised Penal Code (as amended by Republic Act No. 10951, which updated the penalty brackets according to the amount involved). When the estafa is committed by, through, and with the use of information and communications technologies, Section 6 of Republic Act No. 10175 (the Cybercrime Prevention Act of 2012) applies. It provides that the penalty shall be one degree higher than what the Revised Penal Code prescribes.

In appropriate cases, the same facts may also constitute computer-related fraud under Section 4(b)(2) of R.A. 10175: the unauthorized input, alteration, or deletion of computer data or interference in a computer system causing damage with fraudulent intent.

Prosecution under R.A. 10175 does not bar liability under the Revised Penal Code; both frameworks work together. Jurisdiction lies with the Regional Trial Court, and special cybercrime courts have been designated to handle these cases. The Supreme Court’s ruling in Disini v. Secretary of Justice (G.R. No. 203335, February 18, 2014) upheld the core mechanisms of R.A. 10175 relevant to these offenses, including the higher penalty for ICT-committed crimes and the framework for digital evidence.

You can read the full text of Republic Act No. 10175 on the LawPhil website.

Step-by-Step Guide to Filing a Criminal Complaint

1. Preserve Evidence Immediately — This Is Critical

Digital evidence disappears or gets overwritten quickly. Act fast:

Take clear, full-context screenshots or screen recordings of every chat, post, profile, website, and transaction. Include visible timestamps, usernames/handles, URLs, profile pictures, and any other identifying details. Do not crop or edit.
Export or save complete chat histories (not just selected messages).
Secure bank statements, GCash/BPI/ other e-wallet transaction histories or official receipts showing amounts, dates, reference numbers, and recipient details.
Save any photos, videos, links, or documents the scammer sent you.
Note phone numbers, email addresses, account numbers, wallet addresses, and any other identifiers.
Immediately report the incident to the platform (Facebook, Instagram, Telegram, etc.) and request preservation of data. Report the transaction as fraudulent to your bank or e-wallet provider right away — they may be able to trace or freeze funds within a narrow window.
Store originals securely and make multiple backup copies. Consider noting the date and time you captured each piece of evidence.

The Rules on Electronic Evidence (A.M. No. 01-7-01-SC) govern how digital evidence is authenticated and admitted in court. Specialized units will guide you on proper handling.

2. Prepare Your Notarized Complaint-Affidavit

This is the heart of your filing. It must be in writing (English or Filipino), sworn to before a notary public (or Philippine consular officer if abroad), and contain:

Your complete personal details (name, age, civil status, address, contact information, and government-issued ID).
Details of the respondent(s) — even if unknown, describe them specifically (e.g., “the person using Facebook account [exact username or profile link] and GCash number [number]” or “John Doe operating Telegram account [@handle]”).
A clear, chronological narrative of facts: how you met or were contacted, what false representations were made, how they induced you to send money, the exact amounts and dates, what happened afterward (non-delivery, disappearance, excuses), and how ICT was used at each stage.
Specific statements showing each element of estafa and the use of ICT.
Reference to the laws violated (Article 315 of the Revised Penal Code in relation to Section 6 of R.A. 10175, and Section 4(b)(2) if applicable).
A list of attached evidence as labeled annexes (e.g., Annex “A” – Screenshots of chat conversations; Annex “B” – Transaction proofs).
A verification that the statements are true and a prayer for investigation, arrest, and filing of appropriate charges.
Your signature and the notary’s jurat.

Be factual and specific with dates, amounts, and exact words used. Avoid legal conclusions — let the facts demonstrate the deceit and damage. Many victims find it helpful to draft a detailed timeline first. If you qualify as indigent, the Public Attorney’s Office (PAO) can assist in preparing or reviewing the affidavit at no cost.

3. Gather Supporting Documents

Original valid government-issued ID (passport, driver’s license, UMID, etc.) plus photocopies.
Printed or digital copies of all evidence, organized and labeled consistently with your affidavit.
If filing through a representative: a duly notarized and authenticated Special Power of Attorney.
For victims abroad: the affidavit executed before a Philippine consular officer, or locally notarized and apostilled (if your country participates in the Apostille Convention), plus proof of identity.

4. File the Complaint

The most effective route for cyber cases is to file directly with the specialized units:

Philippine National Police Anti-Cybercrime Group (PNP ACG) — Preferred starting point for most online scam cases. Headquarters at Camp Crame, Quezon City, or regional anti-cybercrime units. They have dedicated investigators experienced in tracing digital trails.
National Bureau of Investigation Cybercrime Division (NBI CCD) — Handles many complex or high-value cases, including those with cross-border elements. Main office in Manila (Taft Avenue/UN Avenue area) or regional offices.

You may also file directly with the Office of the City or Provincial Prosecutor for preliminary investigation, but beginning with PNP ACG or NBI CCD is usually better because of their technical capabilities, access to warrants for subscriber data and traffic data under Sections 13–14 of R.A. 10175, and coordination with platforms and banks.

Present your notarized affidavit and evidence package in person (bring originals for verification). The receiving officer will log the complaint, assign a reference or blotter number, and may conduct an initial interview. There is generally no filing fee for the criminal complaint itself (only modest notarial fees apply). Some units accept initial reports online or via email, followed by submission of hard copies.

The Cybercrime Investigation and Coordinating Center (CICC) hotline 1326 can also provide guidance and referrals.

5. What Happens After Filing

The assigned investigator reviews your complaint and evidence, interviews you (possibly more than once), and may request additional statements or device access for forensics. They can apply for court warrants to compel disclosure of subscriber information, IP logs, and other data from service providers within 72 hours in many cases.

If the investigation yields sufficient basis, the unit endorses the case to the prosecutor. The prosecutor conducts preliminary investigation: the respondent is given an opportunity to file a counter-affidavit, and a clarificatory hearing may be held. If the prosecutor finds probable cause, an Information is filed in the Regional Trial Court (special cybercrime court). The case then proceeds to arraignment, pre-trial, and trial.

Throughout the process, stay in touch with your investigator using your case number and respond promptly to requests. Digital evidence must be properly authenticated during trial.

Common Challenges and Practical Realities

Perpetrators often use anonymous or fake accounts, VPNs, money mules (third parties who receive and withdraw funds), and cryptocurrency to obscure trails. Identification and arrest can take time, especially in cross-border cases. Evidence preservation is the single biggest factor victims control — delay or poor documentation weakens the case.

Investigation and preliminary investigation typically take several months; full court proceedings often run one to three years or longer due to court dockets. There is no guaranteed quick recovery of funds through the criminal case alone, though a conviction can include an order for restitution as civil liability. Many victims pursue parallel remedies: bank or e-wallet dispute/chargeback processes, civil action for damages, or coordination with the Anti-Money Laundering Council (AMLC) for asset tracing when large amounts or patterns are involved.

Prescription periods for estafa are generally long (often ten years or more depending on circumstances), but filing promptly strengthens your position and preserves evidence.

Special Considerations for Victims Abroad, OFWs, and Foreigners

Philippine courts have jurisdiction if any element of the offense occurred in the Philippines, a Philippine computer system was used, or damage was caused to a person in the Philippines — even if the offender is abroad or a foreign national in some cases. Filipino nationals can be prosecuted regardless of where the offense was committed under certain conditions.

If you are outside the Philippines:

Execute your complaint-affidavit before a Philippine consular officer (they can administer the oath).
Alternatively, have it notarized locally and apostilled, then send it with supporting documents.
Execute a Special Power of Attorney (also authenticated) authorizing a trusted relative, friend, or lawyer in the Philippines to file and follow up on your behalf.
Provide clear contact details and be prepared to participate remotely (e.g., via video or additional sworn statements) if needed.

Foreign victims follow the same process when jurisdiction exists. Group complaints from multiple victims can sometimes strengthen a case.

Required Documents and Evidence Summary

Core filing documents:

Notarized complaint-affidavit (original + copies)
Valid government-issued ID of the complainant
Organized evidence package with labeled annexes

Strong supporting evidence:

Complete chat/message threads with timestamps and context
Transaction proofs (official bank/e-wallet records with reference numbers)
Screenshots or recordings of profiles, websites, and communications
Any witness statements (if others were involved or present)
Platform reports or preservation requests (if obtained)

Organize everything clearly — investigators and prosecutors handle high volumes and appreciate well-prepared submissions.

Frequently Asked Questions

What if I don’t know the scammer’s real name or they used a fake profile?
You can still file. Complaints are routinely accepted against “John Doe” or “the unknown person using [specific Facebook/Telegram/GCash details].” Investigators use warrants to trace IP addresses, subscriber data, and financial trails from the information you provide.

How much money do I need to have lost to file?
There is no minimum amount. Even smaller losses can be pursued, though case priority and resource allocation may vary with volume and complexity. The focus is on the elements of the crime and the use of ICT.

Will I automatically get my money back if I file and win?
A conviction can result in a judgment ordering restitution, but actual recovery depends on locating and freezing assets. Many victims combine the criminal complaint with immediate bank/e-wallet reports and, where appropriate, civil action. Success is never guaranteed, especially with sophisticated or cross-border schemes.

Do I need a private lawyer?
No, it is not required. The PNP ACG and NBI CCD investigators guide complainants through the process. If you are indigent, the Public Attorney’s Office provides free assistance. For complex cases involving large amounts, multiple victims, or difficult tracing, consulting a lawyer experienced in cybercrime can be beneficial.

How long do I have to file the complaint?
Estafa generally prescribes in ten years (or longer in some circumstances) from the commission or discovery of the offense, but you should act as quickly as possible while evidence is fresh. Digital records and witness memory fade.

Can the case proceed if the scammer is outside the Philippines?
Yes, if Philippine jurisdiction applies. Enforcement and arrest may require international cooperation through mutual legal assistance treaties, which can be slower, but the complaint can still be investigated, docketed, and used to pursue any available local remedies or asset tracing.

What makes digital evidence strong in these cases?
Completeness and context matter most — full unedited threads showing how the deceit developed over time are far more persuasive than isolated messages. Proper timestamps, metadata, and chain-of-custody handling (which the cybercrime units help with) are essential under the Rules on Electronic Evidence.

Can I file both a criminal complaint and pursue civil recovery at the same time?
Yes. The criminal case focuses on punishment and can include restitution. A separate civil action for damages is also available and can proceed independently or be consolidated in some instances.

What if the scam involved cryptocurrency or international transfers?
These cases are still covered. Investigators coordinate with financial institutions and, where possible, blockchain analysis or foreign counterparts. Early reporting to your exchange or wallet provider is especially important.

Key Takeaways

Cyber-estafa is estafa under Article 315 of the Revised Penal Code committed through ICT, carrying a penalty one degree higher under Section 6 of R.A. 10175 (and potentially additional liability under Section 4(b)(2)).
Success starts with immediate, thorough preservation of complete, unaltered digital evidence and transaction records.
File your notarized complaint-affidavit with the PNP Anti-Cybercrime Group or NBI Cybercrime Division for specialized investigation and digital tracing capabilities.
The process involves investigation, possible warrants for data, preliminary investigation by the prosecutor, and trial in a designated cybercrime court — expect months for investigation and potentially years for full resolution.
No filing fee applies for the criminal complaint; modest notarial costs are the main expense.
Victims abroad or foreigners can file with proper authentication (consular or apostille) and, if needed, through an authorized representative via Special Power of Attorney.
Parallel steps with banks, e-wallets, and platforms can aid recovery efforts even as the criminal case proceeds.
The Public Attorney’s Office is available for those who qualify for free legal assistance; persistence and organized documentation make a real difference.

Taking these steps puts the machinery of the law in motion and creates an official record of what happened. Many victims find that the process, while not always fast or resulting in full financial recovery, brings a measure of accountability and closure. Start with evidence preservation today, prepare a clear and factual affidavit, and reach out to the PNP ACG or NBI CCD — they are equipped to handle exactly these kinds of cases.