Being a victim of cybercrime in the Philippines—whether through an online investment or romance scam that emptied your bank account, hacking of your social media or email, unauthorized fund transfers, malicious online posts damaging your reputation, or other digital offenses—can feel overwhelming and deeply personal. Many victims hesitate because they worry about complicated procedures, lack of evidence, or that nothing will be done. The National Bureau of Investigation’s Cybercrime Division (NBI-CCD) exists precisely to handle these cases with specialized investigators and digital forensic capabilities. This guide explains exactly how to file a complaint with the NBI, what to expect at every stage, the documents and evidence that strengthen your case, and practical realities drawn from how the process actually works under current Philippine procedures.

Understanding Cybercrimes Under Philippine Law

Republic Act No. 10175, the Cybercrime Prevention Act of 2012, defines and penalizes offenses committed against or through computer systems, networks, or data. It covers acts that target the confidentiality, integrity, or availability of computer data and systems, as well as traditional crimes committed using information and communications technology.

Common offenses victims encounter include:

Illegal access (hacking into accounts or systems)
Data interference or system interference (altering, deleting, or damaging data)
Computer-related fraud and computer-related identity theft (phishing, fake websites, or using someone else’s identity online for gain)
Cyber libel (defamatory statements published through a computer system)
Misuse of devices and other related acts

Certain acts, such as online child sexual abuse material or sextortion, also fall under RA 10175 in combination with other laws like Republic Act No. 9775 (Anti-Child Pornography Act) or Republic Act No. 11313 (Safe Spaces Act). Jurisdiction exists in the Regional Trial Court (with designated cybercrime courts) when any element of the offense occurs in the Philippines, when a computer system partly or wholly situated in the country is used, or when damage is caused to a person in the Philippines—even if the perpetrator is abroad or the act was committed by a Filipino national anywhere in the world (RA 10175, Section 21).

The law gives law enforcement specific tools, including the ability to apply for preservation orders, disclosure of subscriber or traffic data, and search and seizure of computer data under the Supreme Court’s Rule on Cybercrime Warrants (A.M. No. 17-11-03-SC).

The Role of the NBI Cybercrime Division

Section 10 of RA 10175 mandates that the NBI (and the Philippine National Police) organize a dedicated cybercrime unit or center staffed by special investigators to handle violations exclusively. The NBI-CCD operates under the Department of Justice and maintains forensic laboratories and investigators trained in digital evidence handling. It is particularly suited for complex, high-value, transnational, or technically sophisticated cases, though it also handles everyday complaints from ordinary citizens.

You may also report to the PNP Anti-Cybercrime Group (ACG), and the two agencies sometimes coordinate. The DOJ Office of Cybercrime serves as the central authority for international requests and policy coordination. Starting with the NBI-CCD is a strong option when you want specialized forensic examination of devices, chat logs, or financial trails.

Preparing to File Your Complaint

Strong preparation significantly improves the chances of a thorough investigation. Begin by preserving evidence immediately—do not delete messages, posts, or transaction records.

Key steps before going to the NBI:

Take clear screenshots or screen recordings that capture the full context, including URLs, timestamps, usernames, and profile details. Note the date and time you captured them.
Export or print chat histories, emails, and transaction records from banks, e-wallets (GCash, Maya, etc.), or remittance services. Request official certifications or statements from financial institutions—these carry more weight than personal printouts.
If a device was compromised, do not factory reset it or run cleaning software; NBI forensic examiners can create bit-for-bit images while preserving chain of custody.
Identify what you know about the suspect (usernames, phone numbers, email addresses, bank accounts used, websites involved). Even partial information helps; “John Doe” complaints are possible when identity is unknown.
Draft or have a lawyer draft a Complaint-Affidavit or Sworn Statement. It should clearly narrate the facts (who, what, when, where, how), describe the harm suffered, list and attach evidence as annexes (labeled A, B, C, etc.), and request that the NBI investigate and cause the filing of appropriate charges.

The affidavit must be sworn before a notary public or, for Filipinos abroad, before a Philippine consul or embassy officer. Notarization fees typically range from a few hundred pesos depending on the notary and document length.

Step-by-Step Process to File with the NBI

The official procedure follows the NBI Citizens Charter for Investigative Assistance for Victims of Computer Crimes – Cybercrime Division. No specific documentary requirements are listed in the charter (they assist on-site), but bringing complete evidence and a prepared sworn statement speeds everything up.

Make initial contact (recommended). Call the NBI hotline at (02) 8523-8231 and ask to speak with the Cybercrime Division, or email ccd@nbi.gov.ph. Explain the nature of your complaint briefly. They can advise on the best office to approach and whether any preliminary information can be sent electronically. For urgent threats or ongoing harm (e.g., active sextortion or large ongoing scam), call immediately—do not wait.
Proceed to the appropriate NBI office. The main NBI Cybercrime Division is currently located at Filinvest Cyberzone Bay, Diosdado Macapagal Boulevard, Pasay City, Metro Manila. Regional NBI offices have Cybercrime Regional Centers or designated investigators; call the hotline or visit your nearest NBI office and ask for the cybercrime unit. Walk-in complainants are assisted.
At the CCD. Present your valid government-issued ID (passport, driver’s license, UMID, etc.—original and photocopy). The receiving personnel will assist you in filling out the official Complaint Sheet. You will undergo a preliminary interview with an agent or special investigator on duty. Provide your prepared sworn statement/affidavit and all supporting evidence and witness statements.
Swearing and documentation. Your Complaint Sheet will be placed under oath. The investigator will collect everything, prepare a request for Authority to Investigate, and forward it for approval (usually within the same day or shortly after). You should receive a reference or case number and contact details for the assigned investigator or team.
Follow-up. Keep records of everything you submitted. Ask for the investigator’s direct contact or extension. Investigations involve forensic analysis, subpoenas or court orders to internet service providers, social media platforms, and banks, and possible coordination with other agencies. You may be asked to provide additional statements or clarifications.

The initial intake and swearing process typically takes about 1 hour to 1 hour and 10 minutes according to the Citizens Charter, though complex cases or high volume may extend waiting time. There is no filing fee at the NBI.

Required Documents, Evidence, and Practical Tips

While the charter states “none” as a checklist, practical filing almost always involves:

Valid government-issued photo ID (original + photocopy)
Notarized Complaint-Affidavit or Sworn Statement detailing the incident and attaching evidence
Original or certified copies of digital evidence (screenshots, chat exports, transaction proofs, device for forensic examination if relevant)
Contact information and sworn statements of any witnesses
For bank or e-wallet losses: official bank/e-wallet certifications and police blotter if you already reported locally

Practical tips that make a real difference:

Organize evidence chronologically with a simple index or cover note.
Bring extra photocopies of key documents.
If your case involves financial loss, report it to your bank or e-wallet provider immediately (many have 24-48 hour windows for certain reversals) and obtain their incident report or certification.
For ongoing harassment or threats, also consider a barangay protection order or court protection order alongside the NBI complaint.

Common Pitfalls and Challenges

Victims often lose critical evidence by deleting chats “to move on” or failing to back up data promptly. Digital evidence must be authenticated; NBI forensics helps, but the cleaner and more complete your initial submission, the faster they can act.

When the perpetrator uses fake accounts, VPNs, or is located abroad, tracing takes longer and may require court orders and international cooperation. Success is higher when there is a clear financial trail through Philippine banks or e-wallets. High caseloads mean prioritization—cases with significant financial loss, vulnerable victims (elderly, minors), or ongoing harm usually receive faster attention.

Prescription periods apply (generally following the Revised Penal Code or the special law involved); do not delay filing if you have evidence. Some victims also pursue parallel civil actions for damages under the Civil Code.

Special Considerations for Foreigners and Overseas Filipinos

Foreign nationals or Filipinos abroad can file complaints. Jurisdiction under RA 10175 covers damage caused to persons in the Philippines or use of systems located here.

If you are outside the country, execute your Complaint-Affidavit before a Philippine Embassy or Consulate officer (they perform notarial functions). Alternatively, have it notarized locally and apostilled (Philippines is a party to the Apostille Convention) with an English translation if necessary. A Special Power of Attorney (also properly notarized and apostilled) allows a trusted representative in the Philippines to file on your behalf.

NBI investigators can still pursue leads through international channels when evidence justifies it, though results depend on the strength of the case and available cooperation mechanisms. Many overseas Filipinos successfully file romance scam or investment scam complaints this way.

What Happens After You File

The NBI-CCD will conduct further investigation, which may include forensic examination of submitted devices or data, requests for subscriber information or traffic data via proper legal process, interviews, and surveillance where warranted. Upon finding sufficient basis, the case is typically endorsed to the Office of the Prosecutor for preliminary investigation under the Revised Rules of Criminal Procedure. If the prosecutor finds probable cause, an Information is filed in the appropriate Regional Trial Court (cybercrime-designated if available).

You will likely be notified of developments and may be required to testify. The entire process—from initial complaint to court filing—can take weeks to several months depending on complexity, evidence volume, and court dockets. Throughout, maintain open communication with your assigned investigator.

You may also explore civil remedies (independent civil action for damages) separately or in conjunction with the criminal case.

Frequently Asked Questions

Can I file a cybercrime complaint with the NBI entirely online?
Initial inquiries and some preliminary reports can be made by calling the hotline or emailing the Cybercrime Division. Formal complaints, however, follow the in-person process under the NBI Citizens Charter, where you complete the Complaint Sheet, undergo an interview, and submit sworn statements and evidence. This allows investigators to assess the case immediately and begin proper documentation.

How long does an NBI cybercrime investigation usually take?
The initial filing and swearing of the complaint typically occurs the same day. Full investigation length varies widely—simple cases with clear digital trails may advance in weeks, while complex transnational matters or those requiring multiple court orders and forensic analysis can take several months. Cases involving ongoing harm or large losses are often prioritized.

What if I don’t know the exact identity of the person who scammed or harassed me?
You can still file. Many complaints proceed against “John Doe” or “Jane Doe” respondents. The NBI can use subpoenas, court orders for data disclosure, and forensic tools to trace IP addresses, account details, and financial flows. Strong evidence of the acts committed is what matters most at the start.

Is there a filing fee to file with the NBI Cybercrime Division?
No filing fee is charged by the NBI. You will only incur costs for notarization of your affidavit (usually a few hundred pesos) and any photocopies or transportation.

Can a foreigner or someone living abroad file a complaint with the NBI?
Yes. Execute your sworn statement before a Philippine consul or embassy officer, or have it notarized locally and apostilled. A representative in the Philippines with a properly executed Special Power of Attorney can file on your behalf. Jurisdiction exists when the offense caused damage to a person in the Philippines or involved systems here.

What kind of evidence is most useful for an online scam complaint?
Screenshots or exports showing the full conversation or website, transaction records and bank/e-wallet certifications showing the flow of funds, any links or websites used, and communications with the suspect. The more complete and timestamped the evidence, the stronger the case for investigation and eventual prosecution.

Should I also file with the PNP Anti-Cybercrime Group?
You can file with both if you wish; the agencies sometimes coordinate. Many victims start with one and let investigators decide on referral or joint action. For immediate threats, contacting whichever agency can respond fastest is practical.

What happens if the suspect is outside the Philippines?
The NBI can still investigate and may seek international cooperation through established channels. Success often depends on strong evidence linking the suspect to Philippine victims or financial trails that pass through local institutions. Extradition is possible for serious offenses under applicable treaties.

Are cybercrime complaints kept confidential?
Investigations are generally handled with appropriate confidentiality, especially in sensitive cases involving personal data or vulnerable victims. However, once a case reaches the prosecutor’s office or court, certain documents may become part of public records, subject to applicable rules on privacy and protection of victims.

Key Takeaways

File promptly while evidence is fresh; preserve digital records immediately and organize them clearly.
Prepare a detailed, notarized Complaint-Affidavit or Sworn Statement and bring strong supporting evidence (screenshots, transaction proofs, device if relevant).
Visit the NBI Cybercrime Division (currently at Filinvest Cyberzone Bay, Pasay City) or the nearest regional NBI office with cybercrime capability; the process is walk-in and assisted, with no filing fee.
Initial intake is usually completed the same day; full investigation timelines vary but dedicated investigators and forensic tools are available.
Foreigners and overseas Filipinos can file by executing documents before a Philippine consul or through a properly authorized representative.
The NBI-CCD handles investigation; prosecution proceeds through the DOJ prosecutor’s office and the courts. You play an important role by providing complete information and following up.
Acting protects not only you but helps prevent the same perpetrators from victimizing others.

Taking this step puts the specialized resources of the NBI to work on your behalf. Many victims who prepare thoroughly and persist with follow-up see meaningful progress in their cases. If your situation involves immediate danger or threats to life, contact the nearest police station or emergency services in addition to reaching out to the NBI.