How to Report a Facebook Scam Account in the Philippines (NBI / PNP Cybercrime)

This article explains, end-to-end, how to document, report, and prosecute Facebook-based scams in the Philippines. It covers what to collect, where to file (NBI Cybercrime Division and PNP Anti-Cybercrime Group), what laws typically apply, what to expect procedurally, and practical do’s and don’ts. It is written for victims, counsel, compliance officers, and investigators.

1) What Counts as a “Facebook Scam” (Philippine Legal Lens)

“Facebook scams” are schemes that use Facebook profiles, Pages, Groups, or Messenger to commit any of the following—often chargeable under multiple laws:

Estafa / Swindling (Art. 315, Revised Penal Code): deceit + damage or prejudice (e.g., “budol,” fake marketplace listings, investment schemes).
Computer-Related Fraud / Identity Theft (Cybercrime Prevention Act): using a computer system to defraud; unauthorized acquisition/misuse of personal data; account takeovers.
Access Device Fraud (Access Devices Regulation Act): using stolen cards/OTP/sessions to obtain value.
Unlawful / Fraudulent E-commerce Practices (E-Commerce Act).
Data Privacy Violations (Data Privacy Act): unauthorized processing/disclosure of personal data.
Photo/Video-related Offenses (e.g., non-consensual intimate image sharing, voyeurism) when applicable.
Intellectual Property (counterfeits in FB Marketplace/shops).
Threats/Extortion / Grave Coercion (RPC) and cyber harassment variations, where elements fit.

Note: One incident can violate several statutes. You don’t need to choose only one. Investigators and prosecutors can refine the legal theory later.

2) First 24 Hours: Preserve Evidence (Your Case Lives or Dies Here)

Courts and cyber units rely on forensically sound documentation. Do this immediately:

Full-frame screenshots of:
- The scammer’s Facebook profile/Page/Group (include the URL bar, Date/Time, device clock).
- Messenger chat threads (show conversation list + message timestamps).
- Posts, comments, Stories, Marketplace listings, ads, payment instructions, proof of payment.
Export chat data: In Facebook, use “Download Your Information” (select Messages, Posts, etc.). Save the archive (.zip) and keep its hash (optional but best practice).
Save links: Copy exact URLs to the specific post, profile, or message request thread. Keep in a text file.
Payment evidence: Bank transfer slips, e-wallet logs, remittance stubs, reference nos., device used, timestamps.
Device details: Note the phone/PC used, OS version, browser/app version. Keep original photos/videos.
Witnesses: Identify anyone who saw the transaction or can authenticate chats/payments.
Do NOT edit or annotate originals. Keep a pristine set; make separate redacted copies for sharing.

Pro tip: Take video screen-captures scrolling through the profile and message thread, showing the URL and system clock to establish continuity and authenticity.

3) Decide Where to Report

You can report to either or both agencies; they coordinate when needed.

A) NBI Cybercrime Division (NBI-CCD)

Handles complex, multi-jurisdictional cases; issues subpoenas through prosecutors; applies for cyber warrants via special courts.
Often preferred for investment fraud, identity-theft rings, large-value estafa, or when technical forensics are needed.

B) PNP Anti-Cybercrime Group (PNP-ACG)

National and regional cyber units (RCFUs) accept walk-ins and referrals from local stations.
Rapid response for ongoing scams, account takeovers, or extortion, especially where immediate coordination with telcos or platforms helps.

You may also file an incident blotter at your local police station for paper trail, then elevate to NBI-CCD or PNP-ACG.

4) What to Bring (Checklist)

Complaint-Affidavit (notarized), narrating facts in timeline order, identifying elements of the offense.
Annexes labeled as A, A-1, … (screenshots, videos, payment proofs, URLs, archive checksums).
Your IDs (government-issued), contact numbers, email.
Authority documents if filing for a company (board resolution/SOA, SPA for counsel, SEC/DTI docs).
Estimate of loss/damage (principal + fees/charges).
Witness Affidavits (if any).
Chain-of-custody memo for digital media (simple table: what, where, who, when).

5) How to File (Step-by-Step)

Prepare the Complaint-Affidavit (see template below). Keep a soft copy (PDF) and a printed, notarized set with annexes.
Submit to NBI-CCD or PNP-ACG:
- Walk in to their Manila HQ or the nearest regional cyber unit; many accept initial e-mail/online intake then require in-person verification.
- Provide copies of IDs and all annexes. Bring a USB or drive with your digital evidence.
Triage & Intake Interview:
- An officer reviews elements (e.g., deceit + damage for estafa; computer use for cybercrime), confirms identities, and logs the complaint.
Investigation:
- Law enforcement may issue letters to banks/e-wallets to secure logs, and coordinate with Facebook (LE channels) for data preservation.
- Where needed, they apply for Cybercrime Warrants (e.g., preservation, disclosure, interception, search, and seizure of computer data) from designated RTC cyber courts under the Rules on Cybercrime Warrants.
Referral to the Prosecutor:
- You may be called to execute a supplemental affidavit and to subscribe/swear before the prosecutor for preliminary investigation (or inquest if the suspect is arrested).
Filing in Court:
- If probable cause is found, an Information is filed with the Regional Trial Court (Special Cybercrime Court) with jurisdiction/venue as allowed by law.

6) Choosing the Right Charges (Common Pairings)

Estafa (RPC) + Computer-Related Fraud/Identity Theft (Cybercrime Law) For marketplace swindles, investment schemes using FB Pages, fake couriers, phishing via Messenger.
Access Devices Regulation Act If card/OTP/session tokens were obtained/used.
Data Privacy Act If the scammer harvested/abused personal data (e.g., scraping IDs to impersonate).
Intellectual Property Code For counterfeit goods advertised on Facebook.
Grave Threats / Extortion / Unjust Vexation / Gender-based offenses If the scam escalates beyond economic loss.

Drafting tip: Plead all plausible offenses in the fact narrative. The prosecutor can consolidate or reclassify.

7) Venue, Jurisdiction, and Warrants (Practical Notes)

Special Cybercrime Courts (RTC) handle cases requiring cyber warrants and complex digital evidence.
Venue is typically proper where any element of the crime occurred (e.g., where deceit was received or payment was made), or where computer systems/data were used or accessed—investigators will guide you given the facts.
Rules on Cybercrime Warrants provide for:
- Preservation (order not to delete data),
- Disclosure (subscriber/traffic/content data in defined scope),
- Search, Seizure, and Examination of Computer Data (SSECD),
- Interception (for defined serious offenses, with strict safeguards).

8) Working With Facebook (and What Not to Expect)

User-level reporting (via in-app “Report”) can prompt take-downs for policy violations but does not build a criminal case by itself.
Evidence first: Report after preserving your own copies; a taken-down profile or post can complicate later proof.
Law-Enforcement Requests: NBI/PNP can use official channels to request data preservation/disclosure. Private complainants cannot directly compel Facebook to produce data—this requires proper legal process.

9) Money Recovery (Realistic Expectations)

Criminal cases focus on punishment and may award civil liability (restitution/damages) if the accused is convicted.
For faster recovery against identifiable accounts (banks/e-wallets), ask the investigator about:
- Freeze/hold requests (subject to legal basis and timing),
- Coordinated chargeback/dispute processes,
- Parallel civil action for damages and pre-judgment remedies (e.g., attachment) through counsel.
If funds were layered through multiple wallets, expect limited recovery; speed of reporting is crucial.

10) Data Privacy and Safety Considerations

Do not dox suspects or publicly post IDs/addresses—you could face privacy or defamation exposure.
Share evidence only with law enforcement, counsel, or your bank/e-wallet’s fraud desk.
Keep your own account security tight: change passwords, enable 2FA, review active sessions, and report cloned profiles.

11) Timelines & Prescription

Some cyber-related offenses have shorter or longer prescriptive periods than you might assume. Act quickly and consult counsel to avoid lapses. Investigators can timestamp your complaint to preserve claims.

12) Do’s and Don’ts (Quick Guide)

Capture URL + date/time on every screenshot.
Keep original files; store in two locations.
Bring all payment references and device info.
File with NBI-CCD and/or PNP-ACG; maintain a blotter.
Request official receiving stamps on your complaint.

Don’t

Chat further with the scammer (avoid compromising statements).
Publicly post the suspect’s data.
Alter/annotate originals (mark-ups belong in separate copies).
Rely solely on in-app reporting; file a case.

13) Sample Complaint-Affidavit (Template)

Title: Complaint-Affidavit for Estafa and Violations of the Cybercrime Prevention Act Complainant: [Your Name], of legal age, [civil status], Filipino, with address at [address]. Respondent: “Facebook user [Name/URL/UID]” a.k.a. “[Aliases]”, and all persons acting in concert with him/her/them.

1. I am filing this Complaint-Affidavit for Estafa (Art. 315, RPC) and [Computer-Related Fraud/Identity Theft under Cybercrime Law], among others. 2. On [date/time], I saw [post/ad] at [full Facebook URL] offering [item/service/investment]. Attached as Annex A are screenshots showing the profile and post, with URL and timestamps. 3. We exchanged messages via Facebook Messenger from [date/time] to [date/time]. True copies are attached as Annex B series; a video capture of the thread is Annex C. 4. Relying on respondent’s representations, I transferred ₱[amount] via [bank/e-wallet] on [date/time] with reference [no.]. Proofs are attached as Annex D series. 5. Respondent failed/refused to deliver [item/service] and later blocked/cloned/changed accounts. I suffered damage in the amount of ₱[amount], exclusive of other charges. 6. I request issuance of the appropriate cybercrime warrants and subpoenas to obtain subscriber/traffic/content data from Facebook and [bank/e-wallet/telco]. 7. I execute this affidavit to support the filing of criminal charges and to pray for restitution.

[Signature over Printed Name] SUBSCRIBED AND SWORN before me this [date], affiant exhibiting [ID type/no.].

Annexing tips: paginate; label each page (e.g., “Annex B-3”); include a simple evidence index.

14) Simple Evidence Index (Model)

Annex	Description	Source/URL	Date/Time	Notes
A	Screenshot – FB Profile (with URL)	https://www.facebook.com/…	2025-10-05 14:12	Full-frame
B-1..B-n	Messenger chat (chronological)	thread link	2025-10-03..05	Exported archive attached
C	Screen-record scrollthrough	n/a	2025-10-05	Shows URL + system clock
D-1..	Transfer receipts	[Bank/E-wallet]	2025-10-04	Ref nos. included

15) Frequently Asked Practical Questions

Q: Can I stay anonymous? A: Criminal complaints normally require your identity. For sensitive cases, ask about victim-shielding measures and redactions when appropriate.

Q: The scammer is abroad. Still worth filing? A: Yes. Cyber units can use mutual legal assistance and platform cooperation. Money mules and local accomplices can still be charged locally.

Q: Can I recover funds without a criminal case? A: Try immediate disputes with your bank/e-wallet and notify law enforcement to support holds. For larger sums, consider a civil action in parallel.

Q: Will Facebook give me the scammer’s data if I ask? A: No. Disclosure is through law-enforcement legal process and court-authorized warrants, not private requests.

Q: I posted “scammer alerts” publicly. Is that risky? A: Potentially. Avoid statements that could be framed as defamatory; stick to reporting to authorities.

16) Quick Contacts & Next Steps (What You Can Do Today)

Compile your evidence set (originals + redacted copies).
Draft and notarize the Complaint-Affidavit with annexes and index.
File with NBI-CCD and/or PNP-ACG (nearest regional cyber unit); get receiving stamps.
Inform your bank/e-wallet fraud desk with your case reference no.
Maintain no contact with the offender; route communications via investigators/counsel.

Final Notes

This guide is informational and not a substitute for legal advice specific to your facts.
Laws and procedures evolve; where strategy or timing could be outcome-determinative (e.g., warrants, prescription, multi-jurisdictional issues), consult a Philippine lawyer experienced in cybercrime and financial fraud.