If you have been victimized by an online scam, hacking incident, identity theft, unauthorized fund transfers, or other computer-related offenses in the Philippines, reporting the matter to the National Bureau of Investigation (NBI) Cybercrime Division offers a direct route to professional investigation using digital forensics and specialized tools. Many ordinary Filipinos and foreigners who lose money to romance scams, fake investment schemes, or account takeovers feel powerless at first. This article explains exactly how the process works in practice, what to prepare, the legal foundation, realistic timelines, and what to expect so you can take informed action.

Cybercrime complaints fall under Republic Act No. 10175, the Cybercrime Prevention Act of 2012. This law created dedicated cybercrime units within the NBI and the Philippine National Police (PNP). The NBI Cybercrime Division (CCD) handles complex cases involving digital evidence, transnational elements, large-scale fraud, or those requiring advanced forensic analysis. The PNP Anti-Cybercrime Group (ACG) also investigates many incidents, and cases are sometimes referred between the two agencies. You can start with either, but the NBI route is often chosen for its forensic laboratory capabilities and nationwide reach.

Legal Basis and Key Rights

Under Section 10 of RA 10175, the NBI must maintain a cybercrime unit staffed by special investigators. The law covers:

Offenses against the confidentiality, integrity, and availability of computer data and systems (e.g., hacking, data interference, system interference).
Computer-related offenses (e.g., computer-related forgery, fraud, and identity theft).
Content-related offenses (subject to Supreme Court rulings, such as in Disini v. Secretary of Justice, G.R. No. 203335, February 18, 2014, which limited liability for online libel to the original author).

Traditional crimes under the Revised Penal Code (such as estafa or swindling) committed through computers or networks can also be investigated as cybercrimes. Jurisdiction lies with designated Regional Trial Courts acting as cybercrime courts when any element of the offense occurs in the Philippines, when a computer system located wholly or partly in the country is used, or when damage is caused to a person in the Philippines (RA 10175, Section 21).

The NBI can apply for cybercrime warrants (preservation orders, disclosure of computer data, search and seizure of computer data) before these special courts under the Supreme Court’s Rule on Cybercrime Warrants. This is crucial for quickly freezing digital evidence or tracing transactions before they disappear.

You have the right to a thorough investigation when you provide credible information. The process is free of charge at the NBI.

Preparing to File Your Complaint

Strong evidence greatly increases the chances of meaningful action. Start preserving evidence the moment you suspect a crime:

Do not delete messages, emails, chat histories, or transaction records.
Take clear screenshots or screen recordings that show dates, times, usernames, URLs, and full conversation threads. Consider having printouts notarized for added authenticity in court.
Note exact transaction reference numbers, amounts, dates, and recipient details (GCash, bank, crypto wallet addresses).
Save original files on a separate device or cloud storage and avoid altering metadata.
Gather witness statements if anyone else observed the incident.
Keep your device available; the NBI may request to examine or create a forensic image of it.

Write or prepare a complaint-affidavit (or use the form the NBI provides on-site). It should be in English or Filipino, factual, chronological, and sworn to. Include your full personal details, a clear narrative of what happened (dates, platforms used, how contact began, what was promised or done, amounts lost, and impact), identification of the suspect(s) if known (even if only by online handle, phone number, or email), and a request for investigation and prosecution. Attach all evidence as annexes (e.g., “Annex A – Screenshot of chat dated [date]”).

Many people draft this themselves or with help from a lawyer or trusted person. The NBI CCD staff will assist you in completing their complaint sheet and sworn statements during your visit.

Valid government-issued ID is required (passport for foreigners is ideal). No filing fee is charged.

Step-by-Step Process to File with the NBI Cybercrime Division

Make an initial inquiry (recommended): Call the NBI hotline at (02) 8523-8231 (or extensions for the Cybercrime Division) or email ccd@nbi.gov.ph. Explain the nature of your case briefly. They can confirm current procedures, exact location for filing, and whether your case falls squarely under their mandate.
Go to the NBI Cybercrime Division: Visit the NBI Main Office at Filinvest Cyberzone Bay, Diosdado Macapagal Boulevard, Pasay City, or the appropriate NBI regional office/Cybercrime Center. Operating hours are typically weekdays; confirm in advance. Walk-in filing is the standard route for formal complaints.
Submit your documents and undergo initial processing: Present your complaint-affidavit (or prepared statement), supporting evidence, and valid ID. CCD personnel will assist you in filling out the official Complaint Sheet. This step usually takes about 10 minutes.
Preliminary interview and swearing of statements: An agent or special investigator will interview you, help refine your sworn statement, and prepare a request for authority to investigate. This typically takes 30 minutes to 1 hour. You and any witnesses will execute sworn statements.
Case assignment and investigation begins: Once authority is granted, your case receives a reference or case number. Assigned investigators collect and analyze evidence, may coordinate with banks, fintech companies, or internet service providers (often through warrants), and can request device examination through the NBI Digital Forensic Laboratory.
Further action: If probable cause is established, the NBI prepares a report and refers the matter to the Department of Justice or the appropriate prosecutor’s office for the filing of criminal charges before a cybercrime court. In some cases, they may directly support the filing of an information in court. You will be updated on major developments and may be asked for additional statements or evidence.

The entire initial filing process at the office often concludes within 1–2 hours, though the full investigation duration varies widely—from several weeks for straightforward cases to several months (or longer) for complex transnational scams involving cryptocurrency or multiple jurisdictions.

Common Challenges and Practical Realities

Many complainants face similar hurdles. Digital evidence can be deleted or encrypted quickly, and perpetrators often use VPNs, fake accounts, or cryptocurrency to obscure their tracks. Reporting promptly is critical—banks and e-wallets have better chances of freezing funds or reversing transactions if notified within hours or days of the incident.

Anonymous or foreign-based offenders make identification and arrest difficult, though the NBI works with international partners through the DOJ Office of Cybercrime when Mutual Legal Assistance Treaties or other mechanisms apply. Expect that full recovery of money is not guaranteed through the criminal process alone; many victims also pursue parallel civil actions or rely on bank/fintech dispute mechanisms.

Foreigners and overseas Filipino workers (OFWs) can file complaints if the offense has a sufficient connection to the Philippines (e.g., the perpetrator is in the Philippines, the computer system used is partly in the country, or damage occurred to a person in the Philippines). You may execute documents before a Philippine consul or notary public abroad and send them, or authorize a representative in the Philippines. Coordination through the Philippine embassy or consulate is often helpful for initial guidance.

Emotional stress is common. Consider bringing a trusted companion to your appointment and seeking counseling support if needed. Inconsistent stories or incomplete evidence can weaken a case, so be as precise and organized as possible.

Documents and Evidence Checklist

Notarized or NBI-sworn complaint-affidavit or detailed statement
Valid government-issued ID (original and photocopy)
All digital evidence (screenshots, chat exports, transaction proofs, URLs, usernames)
Device(s) involved, if requested for forensic examination
Witness affidavits, if any
Police blotter report (if you already reported elsewhere)
Any correspondence with banks, GCash, or other platforms regarding the incident

Multiple copies of everything are advisable.

Frequently Asked Questions

Can I file a cybercrime complaint with the NBI entirely online?
Initial reports or inquiries can be made by phone or email. Formal complaints generally require in-person submission of sworn documents and evidence at the NBI Cybercrime Division so investigators can conduct an interview and properly document the case. Some preliminary information may be accepted electronically, but expect to follow up in person or through an authorized representative.

How long does the entire process take?
The initial filing and interview usually take 1–2 hours. Full investigation timelines vary: simple cases may see significant progress in weeks, while complex ones involving tracing across borders or heavy forensic work can take several months. You will receive a case reference number for follow-ups.

Do I need a lawyer to file a complaint with the NBI?
No. The NBI CCD assists ordinary citizens in preparing and filing complaints. However, consulting a lawyer is helpful if your case involves large amounts, complex legal issues, or if you also want to pursue civil damages or recovery actions alongside the criminal complaint.

What if I do not know the identity of the person who scammed me?
You can still file. Many successful NBI investigations begin with limited information. Investigators use digital forensics, IP tracing (via warrants), transaction records, and other leads to identify suspects.

Can the NBI help me recover the money I lost?
The NBI’s primary role is criminal investigation and evidence gathering. They coordinate with financial institutions for tracing and possible asset freezes, but actual recovery depends on many factors, including how quickly the funds were moved and whether assets can be located. Report the incident to your bank or e-wallet provider immediately in addition to filing with the NBI.

Is there a deadline for filing a cybercrime complaint?
Criminal actions prescribe according to the Revised Penal Code or specific provisions (often 10–20 years depending on the offense and penalty). Evidence becomes harder to obtain over time, so file as soon as possible.

What is the difference between filing with the NBI and the PNP Anti-Cybercrime Group?
Both agencies have authority under RA 10175. The NBI often handles more complex, high-value, or transnational cases and has strong forensic resources. The PNP-ACG has more regional presence and may be more convenient for some complainants. You can file with either; the agencies coordinate and may refer cases.

Can foreigners file cybercrime complaints in the Philippines?
Yes, provided the offense meets the jurisdictional requirements under RA 10175 (elements committed in the Philippines, use of a computer system in the country, or damage to a person in the Philippines). Documents executed abroad may need authentication (apostille or consular legalization). Contact the NBI or your local Philippine embassy/consulate for guidance on remote or representative filing.

Will my personal information be kept confidential?
Law enforcement handles complaints with appropriate confidentiality, but certain details may become part of court records if charges are filed. Discuss any specific privacy concerns with the handling investigator.

Key Takeaways

File promptly with the NBI Cybercrime Division to preserve evidence and start a formal investigation—there is no filing fee.
Prepare strong, well-organized digital evidence and a clear sworn statement; the NBI will guide you through their forms during your visit.
The initial process at the Pasay City main office (or regional counterpart) is straightforward and usually completed within a couple of hours.
Investigations take time, especially in complex scams; stay in touch using your case reference number and respond promptly to requests for more information.
You can file with either the NBI or PNP-ACG; choose based on convenience and case complexity, or start with a hotline call for advice.
For money recovery, act fast with your bank or e-wallet provider in parallel with the criminal complaint.
Foreigners and OFWs have viable options through coordination with embassies or authorized representatives when jurisdiction exists.
This process empowers you to hold offenders accountable and contributes to broader efforts against cybercrime in the Philippines.

Taking this step shows strength. Many victims who file complete, well-documented complaints see their cases progress to prosecution or at least gain clarity and official documentation that helps with other remedies. For the most current details on location or procedures, call the NBI hotline or visit nbi.gov.ph before heading to the office.