If you have been targeted by an online scam, received threatening messages, discovered defamatory posts about you on social media, had your account hacked, or suffered any other form of digital harm in the Philippines, you have the right to file a cybercrime complaint. Republic Act No. 10175, the Cybercrime Prevention Act of 2012, gives law enforcement specific tools to investigate these offenses and hold perpetrators accountable. This guide explains exactly how the process works in practice, from preserving evidence to what happens after you submit your complaint, so you can take clear, effective steps.

Cybercrimes under RA 10175 cover a wide range of acts committed through computers, the internet, or other information and communications technology. These include illegal access to computer systems (hacking), data interference, computer-related fraud and identity theft, and content-related offenses such as cyber libel (defamatory statements published online) and child pornography or exploitation. Traditional crimes under the Revised Penal Code, such as libel, threats, or estafa (swindling), become cybercrimes when committed using digital means, often carrying higher penalties under Section 6 of RA 10175.

The law applies even if the offender is abroad, provided the act affects Philippine citizens, interests, or systems. Regional Trial Courts handle most cybercrime cases because of the penalties involved.

Key Legal Bases and Your Rights

RA 10175 is the primary law. Its Implementing Rules and Regulations detail procedures for investigation, including the 72-hour period for service providers to disclose subscriber information or traffic data upon a valid court order or warrant. The Revised Penal Code supplies the definitions for offenses like libel (Article 353) when committed online. The Rules on Electronic Evidence govern how digital materials are authenticated and admitted in court.

The Supreme Court has clarified important points in practice. In cases such as Berteni Cataluña Causing v. People (G.R. No. 258524), the Court affirmed that cyber libel prescribes one year from the time of discovery. Broader jurisdiction and venue rules allow filing where the offense or its effects occurred, which often includes the complainant’s residence for cyber libel cases.

You have the right to file a complaint as the offended party or through an authorized representative. Authorities must investigate when a proper complaint is filed. You can also pursue civil damages for any harm suffered, either alongside the criminal case or in a separate action.

Step-by-Step: How to File a Cybercrime Complaint

1. Gather and Preserve Your Evidence Immediately

Strong evidence is the foundation of any successful complaint. Digital material disappears or gets altered easily, so act fast.

Collect:

Full screenshots or screen recordings showing the exact post, message, URL, username or profile link, date, and time.
Exported chat histories or conversation logs with timestamps.
Transaction records, bank statements, GCash references, or payment proofs for fraud cases.
Emails, links to fake websites, or any other digital traces.
Platform report or ticket numbers if you already reported the content to the site (e.g., Facebook or TikTok).

Practical preservation tips: Save original files without editing or cropping. Note exactly when and how you obtained each piece. Print copies and keep digital backups on a separate device or cloud storage you control. For videos or live streams, record the screen while showing the full context. If possible, have a trusted person or notary witness the capture process and sign a simple log. Never delete anything from your own accounts or devices until authorities have reviewed it.

Many victims lose cases or face delays because evidence was incomplete or its authenticity was questioned later. Taking these steps early makes a real difference.

2. Prepare Your Complaint-Affidavit

This sworn written statement starts the formal process. It must be factual, clear, and organized. You can draft it yourself or with help from a lawyer or the Public Attorney’s Office.

A complete complaint-affidavit typically includes:

Your full personal details (name, age, civil status, address, contact information, occupation).
If filing for someone else (e.g., a minor or relative), your authority and supporting documents such as a Special Power of Attorney or birth certificate.
Identification of the respondent or suspect — use real name if known, or detailed description such as “unknown person using Facebook account [exact username or profile URL] with the following profile picture and linked email/phone.”
A chronological narration of facts: what happened, when (specific dates and times), how it was done through digital means, and the harm or damage you suffered.
The specific legal provisions violated (for example, “Section 4(c)(4) of RA 10175 in relation to Article 353 of the Revised Penal Code for cyber libel” or the relevant section for computer-related fraud).
A numbered list of attached evidence (Annexes A, B, C, etc.) with short descriptions.
A verification stating that the facts are true based on your personal knowledge or authentic records, and that you are willing to testify.
Your signature and a jurat (oath) before a notary public, prosecutor, or authorized officer at the agency.

Keep the language straightforward and factual. Avoid arguments or conclusions — simply state what occurred and attach proof. False statements in a sworn affidavit can lead to perjury charges, so be accurate and precise.

3. Choose Where to File

Two main agencies handle cybercrime complaints:

Philippine National Police Anti-Cybercrime Group (PNP ACG): Best starting point for most everyday cases such as online scams, cyber libel, harassment, or identity theft. They have a main office at Camp Crame, Quezon City, and regional units in many provinces. You can make an initial report through their website (acg.pnp.gov.ph), the eComplaint portal, or by emailing acg@pnp.gov.ph. Hotlines are listed on their official channels.
National Bureau of Investigation Cybercrime Division (NBI CCD): Suitable for more complex, high-value, or transnational cases. Main office along Taft Avenue in Manila, with regional offices in key cities.

You may also coordinate with the Department of Justice Office of Cybercrime for cases with international elements. Some victims first obtain a blotter report at their local police station, but filing directly with the specialized cyber units is usually faster and more effective.

For overseas Filipinos or foreigners: Execute your complaint-affidavit before a Philippine consul or embassy officer (they can administer the oath). If your country is part of the Apostille Convention, have the documents apostilled for use in the Philippines. Alternatively, execute a Special Power of Attorney (also authenticated) so a lawyer or trusted representative in the Philippines can file on your behalf.

4. Submit Your Complaint

In person: Bring your valid government-issued ID (passport for non-residents), the notarized complaint-affidavit, printed evidence, and digital copies. The receiving officer will review it, may ask clarifying questions, and assign a case or reference number. You will usually receive an acknowledgment and instructions for follow-up.

Online or initial report: Upload or email your documents through the PNP ACG portal or email. These submissions are often treated as initial reports. Authorities will usually require you (or your representative) to appear in person later to swear to the affidavit and verify details.

After submission, keep copies of everything and note all reference numbers and the names of officers you speak with.

What Happens After You File

Investigators from PNP ACG or NBI will review your complaint. They may request additional evidence or statements from you. They can apply for court orders or subpoenas to compel social media platforms, internet service providers, or banks to disclose user information, IP addresses, or transaction records — service providers are generally required to respond within 72 hours under the IRR when a valid order is issued.

If the evidence supports probable cause, the case may proceed to the Office of the City or Provincial Prosecutor for preliminary investigation. You and the respondent will have the opportunity to submit affidavits and evidence. The prosecutor then decides whether to file formal charges (an Information) in the Regional Trial Court.

If charges are filed, the case moves to trial: arraignment, pre-trial, presentation of evidence (including your testimony), and judgment. You can claim civil damages within the criminal case.

Realistic timelines: Investigation by the cyber unit often takes several weeks to several months, depending on complexity and caseload. Preliminary investigation usually lasts 30–60 days but can extend. Full court proceedings in the RTC commonly take one to several years due to dockets and possible appeals. Some straightforward scam cases with clear local suspects and strong financial records move faster. Complex anonymous or cross-border cases take longer and may focus partly on content removal or account suspension.

Common Challenges and How Victims Handle Them

Digital evidence can be deleted or hidden using VPNs or fake accounts, but investigators routinely trace users through platform cooperation and court orders. Success is higher when you provide clear, timestamped evidence and act quickly.

Backlogs exist at both investigation and prosecution levels, so follow up politely and keep records of all communications. Some victims experience frustration when platforms delay responses or when the offender cannot be fully identified — in those situations, authorities may still achieve partial remedies such as content takedown or account disabling.

For ongoing threats or harassment, request immediate protective action or coordinate with local police in addition to the cyber unit. In cases involving minors or sexual exploitation, agencies prioritize and apply special sensitive procedures, often coordinating with the Department of Social Welfare and Development.

Foreigners and overseas Filipinos sometimes face extra logistical hurdles for hearings or document authentication, but the law’s extraterritorial reach allows cases to proceed when Philippine interests are involved.

Required Documents and Practical Details

Essential items:

Valid government-issued photo ID (original and photocopy)
Notarized or properly sworn complaint-affidavit
Supporting evidence organized and indexed (printed copies plus digital files)
Proof of authority if filing as a representative (SPA, etc.)

Helpful additions:

Any existing police blotter or platform reports
Records showing damages (receipts, medical certificates for distress, etc.)

There is no government filing fee for the criminal complaint. Notarization typically costs a modest amount. Hiring a private lawyer is optional but helpful for complex matters; the Public Attorney’s Office provides free assistance to qualified individuals.

Frequently Asked Questions

Can I file without identifying the exact person behind the account?
Yes. Provide the best identifying details you have (username, profile link, email, phone number, or IP if known). Investigators can subpoena platforms to reveal more information.

How long do I have to file?
For cyber libel, one year from discovery according to Supreme Court rulings. For other cybercrimes, follow the applicable prescription period under the Revised Penal Code or special laws — often longer. File as soon as you have evidence.

Do I need a lawyer?
No, you can file personally. Many people do. A lawyer helps organize evidence and navigate later stages, especially if the case goes to trial or involves significant damages.

Can everything be done online?
Initial reports and document submission can often start online through PNP ACG channels. Formal swearing of the complaint-affidavit usually requires personal appearance or a properly authorized representative.

What if the offender is abroad?
You can still file. The DOJ Office of Cybercrime serves as the central authority for international coordination. Results depend on available cooperation mechanisms, but many cases focus on local effects or assets.

Will my information stay private?
Law enforcement handles complaints with standard confidentiality protocols. Your affidavit becomes part of official records, but authorities protect sensitive personal data during investigation.

What evidence works best for online scams or fraud?
Complete transaction records showing the flow of money, full chat or message histories with the suspect, screenshots of advertisements or promises made, and any fake websites or payment links used.

Can I get my money back through a cybercrime complaint?
The criminal case focuses on prosecution. You can claim civil damages in the same proceeding or file a separate civil action. Actual recovery depends on whether assets can be identified and attached.

What if the prosecutor dismisses my case?
You can file a motion for reconsideration or a petition for review with the Department of Justice within the allowed period. You may also pursue civil remedies independently.

Key Takeaways

Preserve every piece of digital evidence in its original, unaltered form right away and create a clear record of how and when you obtained it.
Draft a factual, detailed, sworn complaint-affidavit that identifies the suspect as specifically as possible, narrates events chronologically, cites the relevant legal provisions, and attaches well-organized evidence.
File primarily with the PNP Anti-Cybercrime Group for most cases or the NBI Cybercrime Division for complex ones, using their official websites, email, or in-person offices at Camp Crame or regional locations.
Expect an investigation phase involving possible subpoenas to platforms, followed by preliminary investigation at the prosecutor’s office and potential trial in the Regional Trial Court.
Overseas Filipinos and foreigners can file effectively by authenticating documents through Philippine embassies or using authorized representatives, thanks to the law’s extraterritorial application.
Follow up diligently, keep copies of all submissions and communications, and act promptly within applicable time limits to give your complaint the strongest possible foundation.

The process requires patience because of technical and procedural realities, but a well-documented complaint gives authorities the concrete information they need to investigate and pursue accountability. Many victims have successfully navigated this system by focusing on thorough preparation and consistent follow-through.