If you or someone you know has lost money to an online scam in the Philippines—whether through a fake investment group on Telegram or Facebook promising high daily returns, a non-delivery seller who insisted on GCash or bank transfer payment upfront, a romance or “pig butchering” scam that built trust over weeks before requesting funds, phishing messages that drained an account, or a job offer that required “processing fees”—you have real options under Philippine law. Filing a cyber estafa complaint is one of the most concrete steps you can take to create an official record, trigger a formal investigation, and help authorities trace perpetrators who often hide behind fake profiles, VPNs, or money mules. This guide explains exactly what cyber estafa is, its legal foundation, the practical step-by-step process for filing with the PNP or NBI, the evidence that matters most, common challenges ordinary victims face (including those abroad), realistic timelines, and what to expect.

What Constitutes Cyber Estafa or Online Estafa?

Cyber estafa, also called online estafa, happens when a person uses deceit, false pretenses, or abuse of confidence to induce another to part with money or property, causing damage or prejudice, and the key elements of the fraud—such as the false promises, building of trust, payment instructions, or failure to deliver—are carried out through computers, the internet, social media, messaging apps, email, or electronic fund transfers.

Typical scenarios include:

Fake online sellers on Facebook Marketplace, Shopee, or direct messages who accept payment but never ship goods.
Investment or crypto “groups” or “mentors” on Telegram, Viber, or Facebook that show fabricated proofs of payouts and then disappear after victims send money.
Romance or relationship scams where perpetrators spend time cultivating emotional connection before requesting “help” with medical bills, travel, or investments.
Phishing or fake bank/government alerts that trick victims into authorizing transfers or revealing credentials.
Job or freelance scams that require upfront “bond,” “training,” or “equipment” fees.

The core elements remain the same as traditional estafa, but the use of information and communications technology (ICT) qualifies the offense for enhanced treatment.

Legal Basis and Key Rights

The primary legal foundation is Article 315 of the Revised Penal Code (as amended by Republic Act No. 10951 in 2017), which defines and penalizes estafa or swindling. Penalties are graduated according to the amount involved, ranging from arresto mayor for smaller sums up to reclusion temporal for larger amounts.

When the crime is committed “by, through and with the use of information and communications technologies,” Section 6 of Republic Act No. 10175 (the Cybercrime Prevention Act of 2012) applies. This provision states that all crimes defined and penalized by the Revised Penal Code and special laws, if committed through ICT, are covered by the Act, and the penalty shall be one degree higher than that provided under the Revised Penal Code.

In some cases involving direct manipulation of computer data, Section 4(b)(2) of RA 10175 (computer-related fraud) may also apply. Complaints are commonly captioned as “Violation of Article 315 of the Revised Penal Code, in relation to Section 6 of Republic Act No. 10175.”

The Supreme Court upheld the constitutionality and framework of RA 10175, including the higher penalty for ICT-committed crimes, in the landmark case Disini v. Secretary of Justice (G.R. No. 203335, February 18, 2014).

Jurisdiction generally lies with the Regional Trial Court (often a designated cybercrime court or special commercial court branch). Venue can be laid where the deceit was received or acted upon by the victim, where money or property was transferred or lost, where the victim resides, or where any essential element of the offense occurred. This flexibility is especially helpful in online cases.

You have the right to file a criminal complaint even if you do not know the scammer’s real name. Law enforcement can use legal processes under RA 10175 (Sections 13–15 and related rules) to obtain subscriber information, traffic data, and content from platforms, banks, and telecommunications companies through court-issued warrants or orders.

Step-by-Step Guide to Filing a Cyber Estafa Complaint

Act immediately to preserve evidence. Do not delete any messages, chats, emails, or transaction records. Take clear screenshots that show full conversation threads, usernames or profile links, URLs or group names, timestamps, and surrounding context. Export full chat histories from apps like Messenger, WhatsApp, Telegram, or Viber before they can be lost. Record short screen videos if conversations are long or disappearing. Note exact dates, times, amounts sent, payment methods (GCash reference numbers, bank account details, crypto wallet addresses), and any descriptions or photos of the scammer or fake profiles/websites. Keep original files untouched on your device and make organized copies (digital on USB or secure cloud, plus printed versions).
Report the loss right away to your bank, e-wallet provider (GCash, Maya), or remittance company. Provide transaction reference numbers and request they preserve records, investigate for fraud, and consider any available reversal, hold, or chargeback. Ask for written acknowledgment or a reference number. This step can sometimes stop funds from moving further and creates contemporaneous records that strengthen your case.
Prepare a detailed Complaint-Affidavit. This is the heart of your filing. Write it in clear, chronological, factual language (in English or Filipino). Include:
- How contact began and on which platform.
- The specific false representations, promises, or pretenses made (use direct quotes or screenshots where possible).
- How those statements induced you to send money (your reliance).
- Exact details of every transfer: dates, amounts, methods, recipient information or account numbers, and reference numbers.
- The total loss or damage you suffered.
- Any description of the scammer (usernames, phone numbers, emails, profile details, or known associates).
- A clear prayer requesting investigation, identification and prosecution of the responsible persons, and such other relief as may be just.
Have the affidavit notarized before a notary public. If you qualify as indigent, the Public Attorney’s Office (PAO) can assist with preparation and notarization at no cost. If you are abroad, execute it before a Philippine consular officer or have it apostilled (for countries party to the Apostille Convention) and consider executing a Special Power of Attorney authorizing a trusted representative or lawyer in the Philippines to file and follow up.
Organize your supporting evidence into a clean package. Label items as Annex “A” (screenshots), Annex “B” (transaction records), etc., and prepare a simple index or summary sheet. Include printed copies and digital files (USB or shared drive link if requested). Strong evidence typically includes full-context screenshots, unaltered chat exports, official bank or e-wallet statements showing the transfers, photos or captures of fake ads/profiles/websites, and any post-loss communications that may show pattern or admissions.
Submit your complaint to the appropriate agency.
- PNP Anti-Cybercrime Group (ACG) is often the most practical starting point for typical online scam cases. You can submit via their official eComplaint portal (check acg.pnp.gov.ph for the current link), email to acg@pnp.gov.ph with a clear subject line such as “Cyber Estafa Complaint – [Your Full Name] – [Brief Description and Date]”, or walk in at their headquarters in Camp Crame, EDSA, Quezon City, or designated regional/provincial ACG units. Hotlines and mobile numbers are posted on their active Facebook page (@anticybercrimegroup) and official site—common contacts include (02) 8723-0401 local 7491 and various mobile lines. They are experienced with digital evidence and can coordinate quickly with platforms and financial institutions.
- NBI Cybercrime Division (CCD) is excellent for more complex, high-value, or technically sophisticated cases requiring deeper digital forensics. File in person at the NBI main office on Taft Avenue, Manila, or capable regional offices (e.g., Cebu, Davao), or email ccd@nbi.gov.ph. Walk-in complaints are accepted.
- You may also make an initial report to the Cybercrime Investigation and Coordinating Center (CICC) hotline 1326 for referral, or start with your local police station for a blotter entry that can be forwarded.
Bring your valid government-issued ID (original and photocopy; passport for foreigners or OFWs), the notarized Complaint-Affidavit (original plus copies), and your organized evidence. Request and keep a reference or case number and acknowledgment receipt.
Cooperate fully during the investigation. Investigators may request additional statements, clarification, or submission of your device for forensic examination (with proper documentation and consent protocols). They can seek court authorization to obtain data from social media platforms, banks, and telcos. Provide updates on any new information promptly.
Participate in preliminary investigation if the case reaches the prosecutor’s office. Once investigators find sufficient basis, the case is referred for preliminary investigation. The prosecutor evaluates probable cause, may issue a subpoena to the respondent (if identified) for a counter-affidavit, allow you to reply, and hold clarificatory hearings if needed before resolving whether to file an Information in court.
Follow through if the case proceeds to court. Expect arraignment, pre-trial, and trial. Digital evidence must be properly authenticated under the Rules on Electronic Evidence. You will likely be called as a witness. A conviction can include restitution or civil liability as part of the judgment.

Required Documents, Evidence, and Practical Requirements

Core documents:

Valid government-issued ID of the complainant (original + photocopy).
Notarized Complaint-Affidavit (original + multiple copies).
Organized evidence package with labeled annexes and index.

Strong supporting evidence (prioritize these):

Screenshots showing full context, timestamps, usernames, URLs, and profile details.
Exported chat or message histories (unaltered originals preferred).
Official transaction records or statements from banks, GCash, Maya, or remittance services showing dates, amounts, and recipient details.
Captures or photos of fake profiles, websites, ads, or investment “proofs.”
Any witness affidavits (if others saw the communications or transfers).
Special Power of Attorney (notarized/consularized/apostilled) if someone else will file or follow up on your behalf.

For foreigners, OFWs, or victims abroad: Documents should be executed before a Philippine consular officer or apostilled (most countries are now Apostille members). A Special Power of Attorney is highly recommended so a representative in the Philippines can submit and monitor the case. Jurisdiction is generally available when the victim is Filipino, the deceit was received in or directed to the Philippines, funds moved through Philippine financial systems, or other essential elements occurred here.

There is no filing fee for submitting a criminal complaint to PNP ACG or NBI. The only typical cost is the notary fee for the Complaint-Affidavit (usually modest). Later court docket fees may apply if a civil aspect or private prosecutor is involved.

Common Challenges and How Victims Overcome Them

Many victims face difficulties tracing perpetrators who use fake accounts, VPNs, cryptocurrency, or foreign-based operations. Digital evidence can disappear if accounts are deleted or platforms do not preserve data promptly. Case backlogs at investigative agencies and prosecutors’ offices can cause delays. Small-amount cases sometimes receive less priority, though they remain valid. Victims abroad struggle with logistics, time zones, and follow-up.

Practical ways to strengthen your position:

Preserve evidence meticulously and never alter screenshots or chats.
File promptly while memories and data are fresh.
Organize everything neatly with summaries and labels—investigators appreciate clarity.
Report simultaneously to the platform (for takedown or data preservation) and your financial provider.
Consider joining with other victims of the same scammer or group for a stronger, more resource-intensive investigation.
Follow up consistently using your case reference number and keep records of all communications with authorities.
For complex or higher-value cases, consult a lawyer early or approach the PAO if you qualify for free assistance.
Avoid confronting the scammer directly or making public accusations, which can complicate matters or expose you to counter-claims.

Realistic expectations matter: Full financial recovery is never guaranteed (funds are often quickly moved or laundered), but a successful criminal case delivers justice, deterrence, and possible court-ordered restitution. Parallel civil remedies for damages or recovery of sum of money are also available.

Frequently Asked Questions

Can I file a cyber estafa complaint even if I don’t know the scammer’s real name or exact location?
Yes. Provide every identifier you have—usernames, phone numbers, account or wallet details, profile links, and transaction recipients. Investigators use legal tools under RA 10175 to request data from platforms, banks, and telcos and trace the responsible persons, including local facilitators or money mules.

How much money do I need to have lost before filing?
There is no minimum threshold. Even losses of a few thousand pesos can and should be reported if you have solid evidence. Larger amounts or cases with multiple victims or clear patterns tend to attract more investigative resources, but every valid complaint helps.

Do I need a lawyer to file?
No. You can prepare and submit the complaint yourself. However, a lawyer can help craft a stronger, more precise Complaint-Affidavit and organize evidence effectively. If you cannot afford private counsel, the Public Attorney’s Office (PAO) provides free assistance to qualified indigent complainants.

Can OFWs or foreigners abroad file a cyber estafa complaint?
Yes, many do so successfully. Execute your documents before a Philippine Embassy or Consulate or have them apostilled, and consider a Special Power of Attorney for a representative in the Philippines. Jurisdiction generally exists when Philippine elements are present (victim is Filipino, funds routed through Philippine systems, or deceit directed here).

What evidence is most important for a strong case?
Clear proof of the false pretenses or promises that induced the transfer (detailed screenshots or chat exports with context and timestamps), proof of the actual money transfers matching those conversations (official statements with reference numbers), and proof of the resulting loss. Full, unaltered context is far more persuasive than cropped or edited images.

How long does the process usually take?
Investigation by PNP ACG or NBI can take several weeks to several months depending on complexity and caseload. Preliminary investigation by the prosecutor adds more time. If an Information reaches court, trial often lasts a year or longer. Cross-border or technically difficult cases take longer. Prompt and complete evidence submission helps move things forward.

Can I recover my money through this process?
The criminal case focuses on establishing guilt and imposing penalties. Upon conviction, the court may order restitution or civil damages. Many victims also pursue a separate civil action. The fastest potential recovery route is often through early reporting to your bank or e-wallet provider for possible reversal before funds dissipate.

Is there a time limit for filing?
Criminal actions for estafa generally prescribe after 10 to 15 years depending on the imposable penalty. File as soon as possible while evidence remains fresh and accessible. Do not delay for months.

Should I report to the platform and my bank at the same time as filing with PNP or NBI?
Yes. Reporting the account or ad to Facebook, Telegram, or other platforms can lead to takedown or data preservation. Contacting your financial provider immediately supports possible fraud disputes and creates additional records that complement your criminal complaint.

What if the scammer is based overseas or used sophisticated hiding methods?
This is common and does not bar filing. Philippine authorities can still investigate digital footprints, coordinate with foreign law enforcement through mutual legal assistance when needed, and prosecute any identifiable Philippine-based participants or facilitators. Many cases succeed by tracing money flows or local enablers even when the main operator is abroad.

Key Takeaways

Cyber estafa is traditional estafa under Article 315 of the Revised Penal Code committed through ICT, penalized one degree higher under Section 6 of RA 10175.
Begin by preserving every piece of digital evidence without any alteration and immediately reporting the transactions to your bank or e-wallet provider.
Prepare a clear, chronological, notarized Complaint-Affidavit detailing the deceit, your reliance, the transfers, and your loss, then submit it with well-organized evidence to the PNP Anti-Cybercrime Group (often the most accessible entry point) or NBI Cybercrime Division via their online channels, email, or in person.
No filing fee applies to the criminal complaint itself; act promptly and follow up persistently with your case reference number.
Even when full financial recovery is uncertain, filing creates an official record, supports law enforcement efforts, and helps hold perpetrators accountable.
Victims abroad or facing complex situations can use consular services, apostille, or a local representative to make filing feasible.
Strong evidence organization, patience, and consistent follow-up significantly improve outcomes. For higher-value or complicated cases, consider early assistance from a lawyer or the PAO.

This process empowers you to take concrete action with the Philippine legal system. Many victims who prepare thoroughly and persist with follow-up see their complaints move forward and contribute to stopping scammers who target others.