If you have lost money to an online scam in the Philippines—whether through a fake seller on social media, a deceptive investment group chat, a romance scam, phishing that drained your e-wallet, or a job offer that required “processing fees”—you can file a criminal complaint for estafa committed through the use of information and communications technology. This is commonly referred to as cyber-estafa. Philippine law treats the underlying deceit and damage under the Revised Penal Code while giving law enforcement stronger tools under Republic Act No. 10175, the Cybercrime Prevention Act of 2012, to investigate digital evidence, trace transactions, and preserve computer data.

This article explains the legal basis, where and how to file, the exact documents and evidence required, realistic timelines, common obstacles victims face (including those living abroad), and practical steps that have helped many people move forward.

What Constitutes Cyber-Estafa or Online Estafa?

Estafa, or swindling, under Article 315 of the Revised Penal Code happens when a person uses deceit or false pretenses to induce another to part with money or property, causing damage. In online scams, the deceit usually occurs through chat messages, fake websites, social media profiles, emails, or apps. The “cyber” element comes in because the entire scheme or key parts of it—false representations, payment instructions, or delivery of nothing—were carried out using computers, the internet, or electronic communications.

Common real-life examples include:

Fake online sellers who take payment via GCash or bank transfer but never ship the item.
Investment or crypto groups that promise high daily returns and disappear after victims send money.
Romance or “pig butchering” scams that build trust over weeks or months before asking for funds.
Phishing or fake bank alerts that trick victims into authorizing transfers.

Even if the scammer used a fake name or profile, the act still qualifies if the elements of deceit and damage are present and ICT was used.

Legal Basis Under Philippine Law

The primary legal foundation is Article 315 of the Revised Penal Code (as amended), which defines and penalizes estafa. When the crime is committed “by, through and with the use of information and communications technologies,” Section 6 of RA 10175 applies. This provision states that all crimes defined under the Revised Penal Code and special laws, if committed through ICT, are covered by the Cybercrime Prevention Act, and the penalty is increased by one degree.

Additionally, Section 4(b)(2) of RA 10175 directly penalizes computer-related fraud: the unauthorized input, alteration, or deletion of computer data or interference in a computer system causing damage with fraudulent intent. Section 4(b)(1) on computer-related forgery may also apply when fake profiles, documents, or websites are used to perpetrate the scam.

The Supreme Court in Disini v. Secretary of Justice (G.R. No. 203335, February 18, 2014) upheld the core framework of RA 10175, including the application of higher penalties for ICT-committed crimes and the law enforcement powers to obtain warrants for disclosure and preservation of computer data. You can read the full text of RA 10175 on LawPhil.

Prosecution can proceed under both the Revised Penal Code and RA 10175. In practice, complaints are often captioned as estafa with the aggravating or qualifying circumstance of having been committed through cyber means, or as violation of RA 10175 in relation to estafa.

Jurisdiction generally lies with the Regional Trial Court (RTC) where any element of the offense occurred—such as the place where the deceit was received, where money was transferred, where the victim resides, or where the computer system used in the crime is located. Special cybercrime courts handle these cases.

Where to File a Cyber-Estafa Complaint

You have several options, and many victims file with more than one channel:

Philippine National Police Anti-Cybercrime Group (PNP ACG) — This is usually the best first stop for most online scam cases. They have specialized investigators, digital forensics capability, and direct coordination with banks, e-wallet providers, telecoms, and social media platforms. File at their headquarters in Camp Crame, Quezon City, any regional Anti-Cybercrime Unit, through their official online portal, or by email.
National Bureau of Investigation Cybercrime Division (NBI CCD) — Preferred for high-value losses, complex organized syndicates, or cases with transnational elements. They have broader authority in some investigative aspects and often work closely with the DOJ.
Office of the City or Provincial Prosecutor — You can file a complaint-affidavit directly here for preliminary investigation. Many victims do this after or alongside reporting to PNP ACG or NBI.
Additional helpful channels — Report to the Cybercrime Investigation and Coordinating Center (CICC) Hotline 1326 for monitoring and coordination. Also report immediately to your bank or e-wallet provider and the platform where the scam occurred (Facebook, Instagram, Telegram, etc.) to preserve evidence and request account takedowns or transaction tracing.

You can start with PNP ACG or NBI even if you do not yet know the scammer’s real identity. Complaints against “John Doe” or “unknown person using [specific username or number]” are accepted.

Step-by-Step Practical Guide to Filing

Act immediately to preserve evidence and stop further loss. Do not delete any messages, emails, or transaction records. Take clear screenshots that show full conversation threads, usernames, URLs, timestamps, and profile details. Record short videos of dynamic chats or websites if necessary. Note exact dates, times, amounts, and every identifier of the scammer (phone numbers, email addresses, bank or e-wallet account numbers, crypto wallet addresses, social media links). Export chat histories. Keep original files untouched; make working copies.
Report to your bank, e-wallet, or remittance provider right away. Provide transaction reference numbers and request preservation of records and possible account freezing or tracing. Time is critical for any chance of fund recovery.
Prepare a detailed Complaint-Affidavit. This is a sworn written statement before a notary public (or authorized officer at the agency). Write it chronologically and factually: how you first came into contact, what false representations or promises were made, how you relied on them, every step you took, the exact amounts and dates of transfers, and the resulting loss. List all known suspect identifiers. Attach or refer to all evidence. Many people draft it first then have it notarized. PNP ACG or NBI personnel can sometimes assist with the swearing.
Gather supporting documents. Valid government-issued ID of the complainant, printed or digital copies of all evidence (clearly labeled), transaction proofs, and any witness affidavits if available.
Submit your complaint.
- For PNP ACG: Use their online portal (acg.pnp.gov.ph), email acg@pnp.gov.ph, call their hotline (02) 8723-0401 local 7491 or check current numbers on their site, or visit in person. You will usually receive a reference or blotter number.
- For NBI: Email ccd@nbi.gov.ph, call (02) 8523-8231 local 3455, or file in person at Taft Avenue, Manila or regional offices.
- For direct filing with the prosecutor: Submit the notarized complaint-affidavit and evidence to the appropriate Office of the City or Provincial Prosecutor.
Cooperate fully during investigation. Investigators may ask for more details, request access to your device for forensic imaging (with proper documentation), or coordinate with service providers for data preservation and disclosure orders under Sections 13–15 of RA 10175. These court-issued warrants help obtain subscriber information, traffic data, and content data that platforms would not release directly to you.
Preliminary Investigation stage. If the law enforcement agency finds sufficient basis, or if you filed directly with the prosecutor, a preliminary investigation follows. The prosecutor evaluates probable cause, may subpoena the respondent (if identified), receives any counter-affidavit, and issues a resolution. If probable cause exists, an Information is filed in court.
Court proceedings. The case proceeds to arraignment, pre-trial, and trial in the appropriate RTC. If convicted, the court may order restitution of the amount defrauded plus damages.

Throughout the process, keep copies of everything you submit and all communications with authorities.

Required Documents, Evidence, and Practical Requirements

Valid government-issued ID.
Notarized Complaint-Affidavit (detailed narrative + list of evidence).
Digital and printed evidence: screenshots (with visible timestamps and full context), chat exports, transaction records/receipts showing amounts, dates, and recipient details, bank or e-wallet statements, photos of fake profiles or websites.
Any communications with the scammer after the loss (sometimes useful to show pattern or admissions).
For foreigners or OFWs abroad: The affidavit and any supporting documents may need to be executed before a Philippine consul or apostilled (if from a Hague Apostille country) and accompanied by a Special Power of Attorney if someone in the Philippines will file on your behalf.

There are generally no filing fees for the criminal complaint itself at the prosecutor’s office or police, though notarization has a small cost. Electronic evidence must comply with the Supreme Court’s Rules on Electronic Evidence (A.M. No. 01-7-01-SC) — authenticity can be shown through metadata, hash values, or testimony.

Common Challenges and How Victims Overcome Them

Many ordinary Filipinos and foreigners face the same difficulties:

Anonymous or hard-to-trace perpetrators. Scammers use fake profiles, VPNs, cryptocurrency, and money mules. Law enforcement can still trace through bank/e-wallet accounts, IP logs (via court order), and platform data. Filing promptly increases chances.
Deleted or expired evidence. Platforms and service providers delete logs after a time. Report immediately and request preservation orders under RA 10175.
Delays in the justice system. Investigations and trials can take months to years because of case volume and the technical nature of digital evidence. Persistent follow-up with the handling officer or prosecutor helps.
Difficulty recovering funds. Even with a conviction, actual restitution depends on whether assets can be located and attached. Early reporting to banks improves tracing chances. Many victims also file a separate civil action for damages.
For OFWs and foreigners abroad. You can still file if any element of the crime occurred in the Philippines (e.g., you were in the Philippines when deceived, or Philippine financial systems or platforms were used). Execute documents before a Philippine embassy/consulate or use a trusted representative with a properly authenticated Special Power of Attorney. Cross-border enforcement is slower and depends on mutual legal assistance, but many cases with Philippine-based elements proceed.
Emotional and practical barriers. Victims often feel shame or fear of being blamed. Remember that scammers are professionals at manipulation; reporting helps the authorities build patterns and protect others.

Avoid confronting the scammer directly or sending more money. Do not post public accusations that could expose you to counter-claims.

What to Expect: Timelines

Digital evidence preservation requests should be made within days or weeks. Agency investigation typically takes several weeks to a few months, depending on complexity and cooperation from platforms and banks. Preliminary investigation by the prosecutor usually aims for resolution within 30–60 days but can take longer. If the case reaches trial, it may last one to several years. Prescription periods for estafa generally range from 10 to 15 years depending on the imposable penalty, so there is usually time, but evidence quality deteriorates quickly.

Frequently Asked Questions

What is the difference between regular estafa and cyber-estafa?
Regular estafa is punished under Article 315 of the Revised Penal Code. When the same acts are committed using computers, the internet, or electronic communications, RA 10175 Section 6 increases the penalty by one degree and gives law enforcement special powers to obtain digital evidence through court warrants.

Do I need to know the scammer’s real name and address to file?
No. You can file against “John Doe” or “unknown person using [username/phone number]”. Investigators will work to identify the person through digital traces.

What evidence is most important?
Clear, timestamped screenshots of the entire conversation showing the false promises and your reliance on them, plus complete transaction records proving the transfer and loss. Original, unaltered files carry more weight.

How long does the whole process usually take?
From filing to a prosecutor’s resolution: often 1–4 months. Full trial, if it reaches that stage: 1–3+ years. Many cases resolve earlier through plea or dismissal.

Can I file if the scammer is based outside the Philippines?
Yes, if any element of the crime (deceit, damage, or use of Philippine computer systems or financial infrastructure) occurred in the Philippines. Enforcement and extradition are more difficult and slower, but the complaint can still be investigated and prosecuted here.

Do I need a lawyer?
Not required to file the initial complaint, but many victims benefit from one, especially for drafting a strong affidavit, navigating preliminary investigation, or pursuing civil recovery. Public Attorney’s Office (PAO) may assist qualified indigent complainants.

Can I recover my money through this process?
A successful criminal case can include an order for restitution. However, actual recovery depends on locating and attaching assets. Filing a parallel civil case for damages is often advisable. Early reporting to banks gives the best chance of tracing funds before they are moved or converted.

Is there a deadline to file?
While prescription periods are long (usually 10–15 years), digital evidence disappears quickly. File as soon as possible to maximize the chances of successful investigation.

What if the amount lost is relatively small?
You can still file. Even smaller cases contribute to patterns that help authorities identify and stop repeat offenders. Some victims also explore small claims court for civil recovery if the defendant can be identified.

Can foreigners or OFWs file from abroad?
Yes. Execute your complaint-affidavit before a Philippine consul or have it apostilled, and consider authorizing a representative in the Philippines through a Special Power of Attorney. Many OFWs successfully pursue these cases.

Key Takeaways

Preserve every piece of digital evidence immediately with timestamps and full context— this is the foundation of any successful cyber-estafa complaint.
Report first to PNP Anti-Cybercrime Group or NBI Cybercrime Division for specialized investigation under RA 10175, while also notifying your bank/e-wallet and the platform involved.
Prepare a clear, chronological, notarized Complaint-Affidavit that tells the complete story of the deceit and your loss.
The process involves investigation, preliminary investigation by the prosecutor, and potentially trial in the Regional Trial Court, with possible higher penalties because ICT was used.
Success depends heavily on the quality and timeliness of your evidence and the ability to trace the perpetrator or funds.
OFWs and foreigners abroad can file if Philippine jurisdiction applies, using consular authentication or a local representative.
While there are no guarantees of quick resolution or full financial recovery, filing a well-documented complaint asserts your rights, supports law enforcement efforts, and may help prevent others from becoming victims.

Taking these steps methodically gives you the strongest possible position under current Philippine law. Many victims who acted promptly and provided complete evidence have seen their cases move forward meaningfully.