If you have lost money or property to an online scam in the Philippines—such as a fake investment scheme promoted on social media, a romance scam, a fraudulent online seller, or phishing that led to unauthorized transfers—you can file a cyber estafa complaint to seek accountability and potential recovery. This guide explains the legal foundation, what counts as cyber estafa, exactly how to prepare and file your complaint with the right agencies, what documents and evidence you need, the realities of the process, and answers to the most common questions victims ask.

What Cyber Estafa Means Under Philippine Law

Cyber estafa occurs when the crime of estafa (swindling) under Article 315 of the Revised Penal Code is committed through or with the use of information and communications technology (ICT)—such as computers, mobile phones, the internet, social media platforms, e-wallets, or messaging apps.

The core elements remain the same as traditional estafa:

There was deceit or abuse of confidence.
This caused damage or prejudice to you.
The offender acted with intent to gain.

What makes it “cyber” is the use of digital means to carry out the deceit (for example, fake online profiles promising high returns on investments, fabricated delivery proofs, or spoofed bank pages).

Republic Act No. 10175, the Cybercrime Prevention Act of 2012, applies through its Section 6 catch-all provision: any crime under the Revised Penal Code or special laws, when committed by, through, or with the use of ICT, is covered and the penalty is increased by one degree. In some cases involving unauthorized alteration of data or interference with computer systems for fraudulent purposes, Section 4(b)(2) on computer-related fraud may also apply. Prosecution under RA 10175 does not prevent liability under the Revised Penal Code.

Penalties for estafa under Article 315 (as amended by RA 10951 in 2017) are graduated according to the amount involved. The one-degree increase under RA 10175 can result in significantly longer imprisonment and higher fines. Courts may also impose civil liability, including restitution of the amount taken plus damages.

Preparing Strong Evidence Before Filing

Digital evidence disappears quickly—messages get deleted, accounts get deactivated, and transaction trails grow cold. Start here:

Preserve everything immediately. Do not delete chats, emails, transaction histories, or browser data. Take clear screenshots that show full conversation threads, timestamps, usernames or handles, URLs, and profile details. Record screen videos if the content is dynamic (such as disappearing messages or live trading dashboards). Note exact dates, times, amounts, and any bank, GCash, or crypto wallet details used by the other party.
Keep original files in a secure folder and create working copies. Avoid editing images or documents.
Gather financial proof: bank statements, GCash or other e-wallet transaction histories, remittance receipts, and any proof that you transferred money or property based on the false representations.
Collect suspect identifiers: usernames, phone numbers, email addresses, bank or wallet account numbers/names, social media profiles, and any other details.
If there were witnesses (friends you told at the time, or people who saw the same scam), prepare their sworn statements.

Digital evidence must satisfy the Supreme Court’s Rules on Electronic Evidence (A.M. No. 01-7-01-SC). Timestamped, unaltered screenshots with context and metadata are far stronger than cropped images. Law enforcement can later perform forensic imaging to strengthen the chain of custody.

Drafting Your Complaint-Affidavit

The main document is a complaint-affidavit—a sworn written statement that tells your story clearly and factually. It does not need to be in legal jargon, but it must be complete and truthful.

A strong affidavit typically includes:

Your complete personal details (name, age, civil status, occupation, residence address, and contact information).
A clear statement that you are filing to charge the respondent(s) with violation of Article 315 of the Revised Penal Code in relation to Section 6 of RA 10175 (and, where applicable, Section 4(b)(2)).
A chronological narrative: how contact began, what false representations or promises were made, what actions you took in reliance on them, the exact loss or damage you suffered, and how ICT was used throughout.
All known details about the suspect(s)—even if only a username or account number. If the person is unknown, describe them as “John/Jane Doe using [specific username/account details].”
A list of attached evidence (Annex “A” – Screenshot of chat thread dated ___, Annex “B” – GCash transaction history, etc.).
A prayer asking the agency to investigate, file the appropriate charges, and prosecute the offender(s).
Your signature and a jurat (sworn statement) before a notary public or authorized officer.

Write in simple, numbered paragraphs. Stick to facts—avoid emotional language or speculation. Many victims draft it first in their own words, then have it reviewed or polished. Notarize it before a notary public in the Philippines. If you are abroad, execute it before a Philippine consular officer or have a foreign notary’s signature apostilled and then authenticated for use in the Philippines. A representative can file for you with a properly notarized and authenticated Special Power of Attorney.

Where and How to File the Complaint

You can file with the Philippine National Police Anti-Cybercrime Group (PNP ACG) or the National Bureau of Investigation Cybercrime Division (NBI CCD). Both have concurrent jurisdiction over cybercrimes, including cyber estafa. For straightforward online scams, many victims and practitioners start with PNP ACG because it is often more accessible for these cases. You may file with one or both agencies.

PNP Anti-Cybercrime Group

Online: Use the official eComplaint portal or reporting section on acg.pnp.gov.ph.
Email: acg@pnp.gov.ph (use a clear subject line such as “Cyber Estafa Complaint – [Your Name] – [Date of Incident]”).
Hotline: (02) 8723-0401 local 7491 (or check current local numbers).
In-person: Headquarters at Camp Crame, EDSA, Quezon City, or any regional anti-cybercrime unit. Walk-in complainants receive assistance completing forms.

National Bureau of Investigation Cybercrime Division

Email: ccd@nbi.gov.ph.
Online: Initial reporting options via nbi.gov.ph.
In-person: NBI Cybercrime Division at the National Bureau of Investigation main facility (Taft Avenue area or current headquarters location—confirm via official channels) or capable regional offices.
Hotline for Cybercrime Division: (02) 8523-8231 to 38 (verify current number).

You can also make an initial report to the Cybercrime Investigation and Coordinating Center (CICC) hotline 1326, which coordinates responses, but formal investigation and case building usually go through PNP ACG or NBI.

Practical filing tips:

Prepare scanned or clear PDF copies of your notarized complaint-affidavit, valid government-issued ID (passport, driver’s license, PhilID, etc.), and all supporting evidence.
Online or email submission is widely accepted for initial filing; bring or send originals or certified copies when requested.
You will usually receive a reference or blotter number—keep it safe for follow-up.
There is generally no filing fee for the complaint itself (only notarial fees, typically a few hundred pesos).

For victims abroad or OFWs, the process is essentially the same. Use the online/email channels, execute documents before a Philippine embassy or consulate, or authorize a representative in the Philippines with an apostilled or consularized Special Power of Attorney.

What Happens After Filing

Agency investigators will review your submission, conduct an initial assessment, and may ask for additional statements, device access (with your consent), or more documents. They can coordinate with banks, e-wallet providers, and internet service providers (often through court-issued preservation or disclosure orders under RA 10175) to trace transactions and identify suspects.

If probable cause is found, the case is referred to the Office of the City or Provincial Prosecutor for preliminary investigation under Rule 112 of the Revised Rules of Criminal Procedure. The prosecutor issues subpoenas; the respondent has the opportunity to file a counter-affidavit. If the prosecutor finds probable cause, an Information is filed in the appropriate Regional Trial Court (many cybercrime cases go to designated cybercrime courts in major cities).

The criminal case proceeds to arraignment, pre-trial, and trial. Digital evidence is authenticated according to the Rules on Electronic Evidence. Throughout the process, you may claim civil damages (restitution of the amount taken plus moral and exemplary damages) either as part of the criminal case or through a separate civil action.

Common Challenges and Realistic Expectations

Online scam cases are among the most difficult to resolve fully. Many perpetrators use fake identities, money mules, virtual private networks, cryptocurrency, or operate from abroad. Even when suspects are identified, tracing and recovering funds is not guaranteed—especially if the money has already been withdrawn or layered through multiple accounts.

Investigation and prosecution often take months to several years because of case volume, the technical nature of digital forensics, court backlogs, and the need for international cooperation when suspects are overseas. Early reporting and strong, well-preserved evidence significantly improve the chances of meaningful action.

Report the transactions to your bank or e-wallet provider immediately for possible fraud investigation or reversal attempts. You can also report the accounts or posts to the platforms involved (Facebook, Instagram, etc.) for takedown.

Special Notes for OFWs, Foreigners, and Cross-Border Cases

Filipinos abroad and foreigners whose loss occurred through Philippine-linked systems or who suffered damage in the Philippines can file. Jurisdiction under Section 21 of RA 10175 covers cases where any element of the offense occurred in the country, a Philippine computer system was used, or damage was caused to a person in the Philippines.

Document execution abroad requires consular notarization or apostille plus authentication. A trusted representative in the Philippines with proper authority can handle filing and follow-up. Transnational cases may involve mutual legal assistance, which adds time but is possible.

Frequently Asked Questions

Can I file a cyber estafa complaint if I am an OFW or living abroad?
Yes. Use the online or email channels of PNP ACG or NBI. Execute your complaint-affidavit before a Philippine consular officer or have it apostilled and authenticated. You may also authorize a representative in the Philippines through a properly executed and authenticated Special Power of Attorney. The process is the same in substance.

Do I need a lawyer to file?
No. You can prepare and file the complaint yourself, and agency personnel will assist with forms and procedures. However, a lawyer experienced in cybercrime or criminal law can help draft a stronger affidavit, organize evidence effectively, and guide you through preliminary investigation and trial—especially in complex or high-value cases.

How long does the process take?
It varies. Initial investigation by PNP or NBI can take weeks to several months. Preliminary investigation usually takes 1–3 months or longer. Full trial in court often lasts 1–5 years or more, depending on court docket, complexity, and whether the accused is at large or abroad. Prompt action on your part helps prevent evidence from disappearing.

Will I get my money back if I file?
Recovery is possible but never guaranteed. Success depends on early tracing and freezing of accounts, identification of the perpetrators or money mules, and a court order for restitution upon conviction. Report the fraud to your bank or e-wallet provider right away—the sooner the better for any reversal or hold attempts. Many victims pursue parallel civil remedies for damages.

What if the scammer used a fake name or is outside the Philippines?
File anyway. Describe the suspect using all available identifiers (username, account number, phone, etc.). Investigators can subpoena service providers for subscriber information and IP logs (through proper court processes) and may identify local accomplices or money mules. Cross-border cases require international coordination, which takes time but is pursued when feasible.

Can I file anonymously?
No. Complaints must be sworn under oath, so your identity as the complainant must be known. However, you can describe unknown respondents as “John/Jane Doe” with all available identifying details.

Is there a filing fee?
There is generally no fee for filing the complaint with PNP ACG or NBI. You will only pay standard notarial fees for your affidavit and any supporting documents (usually a few hundred pesos). No court filing fee applies at the complaint stage.

What is the most important evidence in online scam cases?
Clear proof of the false representations (chat threads showing promises or deceit), proof that you acted on them by transferring money or property (transaction records), and proof of the resulting loss or non-delivery. Any details linking the suspect to the accounts used strengthen the case significantly.

Can I also pursue a civil case for damages?
Yes. You may claim civil liability (restitution and damages) in the criminal case itself or file a separate civil action. In some situations, small claims court may be an option for lower amounts, but criminal prosecution for estafa is usually the stronger path when deceit and significant loss are involved.

Should I report to the platform or bank first?
Yes—do both immediately. Report the account or transaction to the platform for possible takedown or preservation of data. Contact your bank or e-wallet provider right away to report fraud and request any available protective measures. These steps complement, rather than replace, the formal criminal complaint.

Key Takeaways

Cyber estafa is estafa (Article 315, Revised Penal Code) committed through ICT and carries a higher penalty under Section 6 of RA 10175.
Preserve all digital evidence immediately—screenshots with full context and timestamps, transaction records, and suspect identifiers are essential.
File your notarized complaint-affidavit with the PNP Anti-Cybercrime Group (often the practical first choice for online scams) or NBI Cybercrime Division through their online portals, email, hotline, or in person.
Strong, well-organized evidence and prompt action give investigators the best chance to trace funds and build a case that can proceed to preliminary investigation and court.
The process can be lengthy due to technical and procedural realities; cooperate fully with investigators and keep records of all communications.
OFWs and foreigners can file using consular or apostilled documents and may authorize representatives.
Report fraud to banks, e-wallets, and platforms immediately for any possible protective or reversal actions while pursuing the criminal complaint.
While recovery is never assured, filing a well-supported complaint is the formal step toward accountability and possible restitution through the justice system.

Taking these steps puts you in the strongest possible position. Many victims have successfully navigated this process by acting quickly, preserving evidence meticulously, and working closely with PNP ACG or NBI investigators. Start with evidence preservation today, prepare your affidavit, and reach out to the official channels listed above.