A mobile number can be an important lead when reporting a scam in the Philippines, but it does not automatically reveal the scammer’s identity. The number may be registered under another person’s name, obtained using false documents, transferred without proper registration, linked to a stolen phone, or deliberately spoofed so that a different number appears on your screen.
The safest approach is to report the incident through several channels at the same time. If money was transferred, contact the bank or e-wallet immediately. Preserve the messages and transaction records, report the number to the telecommunications company and the National Telecommunications Commission (NTC), and file a cybercrime complaint with the Philippine National Police Anti-Cybercrime Group (PNP-ACG), the National Bureau of Investigation Cybercrime Division (NBI-CCD), or the Cybercrime Investigation and Coordinating Center (CICC).
Can a Scammer Be Traced Through a Mobile Number?
Yes, Philippine authorities can use a mobile number as an investigative lead. However, an ordinary person generally cannot demand the registered subscriber’s name directly from a telecommunications company.
Under the implementing rules of the SIM Registration Act, SIM registration information is confidential. A telecommunications company may disclose it only in legally permitted situations, such as:
- With the subscriber’s written consent;
- Under a court order or subpoena;
- When required by law; or
- In response to a subpoena issued by a competent authority during an investigation based on a sworn written complaint involving a specific mobile number.
The sworn complaint must generally state that the number was used in a crime or fraudulent, malicious, or unlawful act and that the complainant cannot identify the person responsible. (Supreme Court E-Library)
This means the mobile number should be included in a formal complaint, together with the messages, transaction details, and other evidence. The investigating agency can then seek subscriber information and related records through proper legal process.
Why the registered subscriber may not be the actual scammer
SIM registration helps investigators, but it is not conclusive proof of guilt. The person whose name appears in the registration records may be:
- An identity-theft victim;
- The former owner of a transferred SIM;
- A person who lent or sold a registered SIM;
- An employee or relative whose phone was used by someone else;
- A victim of a stolen phone or SIM; or
- Completely unrelated to the call because the displayed number was spoofed.
Investigators must connect the number to the actual user through other evidence, such as device records, account logins, money transfers, IP addresses, CCTV footage, platform records, and witness statements.
Philippine Laws That May Apply to Mobile Number Scams
“Scamming” is not a single criminal charge. The applicable offense depends on what the person said, how the scheme was carried out, and whether money, property, account access, or personal information was obtained.
Estafa under the Revised Penal Code
Many scams fall under estafa, commonly called swindling, under Article 315 of the Revised Penal Code.
For estafa through false pretenses or fraudulent representations, prosecutors generally look for these elements:
- The accused made a false statement, representation, or fraudulent claim;
- The false representation was made before or at the same time the victim parted with money or property;
- The victim relied on the representation; and
- The victim suffered financial or property damage.
Examples include pretending to be a bank employee, online seller, recruiter, government officer, relative in an emergency, lending company, investment adviser, or prize representative. (Supreme Court E-Library)
The amount lost affects the possible penalty under the Revised Penal Code, as amended by Republic Act No. 10951.
Cybercrime Prevention Act of 2012
Republic Act No. 10175, or the Cybercrime Prevention Act of 2012, may apply when an offense under the Revised Penal Code or another special law is committed through information and communications technology.
Section 6 generally provides for a penalty one degree higher when a crime covered by the Revised Penal Code or a special law is committed through the use of ICT. Depending on the facts, authorities may also investigate offenses involving computer-related fraud, identity theft, illegal access, or misuse of electronic data.
SIM Registration Act
Republic Act No. 11934, or the SIM Registration Act, requires SIM registration and prohibits conduct such as:
- Registering a SIM using false or fictitious information;
- Using fraudulent identification documents;
- Selling or transferring a registered SIM without complying with registration requirements; and
- Spoofing a registered SIM or electronic identity to make it appear that a message or call came from another number.
The law’s implementing rules require telecommunications companies to provide a user-friendly mechanism for reporting potentially fraudulent calls or messages. A company may temporarily or permanently deactivate a SIM used for fraudulent calls or texts after due investigation. Deactivation is not necessarily automatic upon the first complaint. (Supreme Court E-Library)
Anti-Financial Account Scamming Act
Republic Act No. 12010, or the Anti-Financial Account Scamming Act, applies to schemes involving bank accounts, e-wallets, payment accounts, credit cards, and other financial accounts.
It penalizes activities such as:
- Money muling, where a person allows an account to receive, transfer, or withdraw proceeds of crime;
- Buying, selling, lending, or renting financial accounts;
- Opening an account using a false identity;
- Social engineering schemes designed to obtain passwords, one-time passwords, PINs, or account credentials; and
- Unauthorized access to or control of a financial account.
The law gives the Bangko Sentral ng Pilipinas, NBI, and PNP authority to investigate covered offenses and coordinate with financial institutions. (Lawphil)
Access Devices Regulation Act
Republic Act No. 8484, or the Access Devices Regulation Act, may also apply when the scam involves unauthorized use of credit cards, account numbers, PINs, codes, or similar access devices.
A cardholder or account holder should immediately notify the issuer after discovering loss, theft, or unauthorized use. Timely reporting may affect the account holder’s liability for later fraudulent transactions. (Lawphil)
What to Do Immediately After a Mobile Number Scam
1. Stop communicating and secure your accounts
Do not send more money, verification codes, identification documents, selfies, or account details.
Immediately change the passwords of affected accounts, especially:
- Online banking;
- E-wallets;
- Email;
- Social media;
- Shopping platforms; and
- Mobile carrier accounts.
Use a trusted device when changing passwords. Sign out other active sessions and enable two-factor authentication. If you disclosed an OTP, PIN, card number, CVV, recovery code, or online banking password, treat the account as compromised even if no unauthorized transaction has appeared yet.
2. Contact the bank or e-wallet immediately
If money was transferred or an account was accessed, contact the financial institution before waiting for a police report.
Ask the bank or e-wallet to:
- Block or secure the affected account;
- Record a disputed transaction;
- Attempt to hold or trace the transferred funds;
- Coordinate with the receiving institution;
- Preserve transaction and account-access records; and
- Give you a complaint or case reference number.
Under BSP Circular No. 1215, disputed funds may initially be held for up to five calendar days. The holding period may be extended by up to 25 additional calendar days, for a total of up to 30 days, when the applicable conditions are met. Further restraint may require court authority. A hold is not guaranteed, particularly when the funds have already been withdrawn, transferred again, converted to cryptocurrency, or moved outside the participating financial system.
Complain first through the bank or e-wallet’s official consumer assistance mechanism. If the institution does not resolve the complaint, it may be escalated through the BSP Consumer Assistance Mechanism, including the BSP Online Buddy or BOB. (Bangko Sentral ng Pilipinas)
3. Preserve the evidence before blocking the number
Save evidence before deleting messages, leaving a chat group, uninstalling an application, or resetting the phone.
Preserve:
- Screenshots showing the complete mobile number;
- Full conversations, including dates and timestamps;
- Call logs and voicemail;
- Profile names, usernames, account links, and profile photographs;
- Advertisements, product listings, or job postings;
- Payment receipts and transaction reference numbers;
- Recipient bank or e-wallet details;
- QR codes and payment links;
- Email headers and website addresses;
- Delivery records, invoices, and supposed contracts;
- Names of witnesses;
- Copies of identification or documents sent by the scammer; and
- Your communications with the bank, e-wallet, telco, or platform.
Do not rely only on cropped screenshots. Keep the original messages and the device on which they were received. Export the conversation where the application allows it. Make a backup without altering the original files.
Prepare a simple chronology showing:
| Date and time | What happened | Number or account used | Supporting evidence |
|---|---|---|---|
| 10:15 a.m. | Received message claiming to be from a bank | 09XX-XXX-XXXX | Screenshot 1 |
| 10:22 a.m. | Opened payment link | Website address | Browser history |
| 10:30 a.m. | Sent ₱15,000 | E-wallet account and reference number | Receipt |
| 10:40 a.m. | Reported transaction | Bank hotline | Case reference |
A clear chronology helps investigators understand the scheme quickly.
4. Report the number to your telecommunications company
Use the official fraud-reporting channel of the network that issued the number, when identifiable. Include:
- The complained-of mobile number;
- Screenshots of the fraudulent messages;
- Dates and times;
- A description of the scam;
- Your contact information; and
- Your complaint reference from law enforcement, if already available.
The telecommunications company may investigate, preserve relevant records, restrict service, or deactivate the SIM when legally justified. It will generally not give you the subscriber’s name directly.
5. File an NTC text scam report
The NTC accepts text spam and scam complaints through its online text scam reporting page.
The NTC has identified the following as commonly required:
- A copy of a valid government-issued ID;
- An image or screenshot of the scam message;
- The complained-of mobile number;
- Your name, address, email address, and contact number; and
- A brief description of the incident.
For students, a school ID may be accepted. A birth certificate or NBI clearance may be requested when the complainant has no standard government-issued ID. Complaints may also be brought to the appropriate NTC regional office. The NTC’s consumer hotline is 1682. (www.foi.gov.ph)
An NTC complaint is useful for action involving the SIM or telecommunications service. It does not replace a criminal complaint when money was stolen, an account was hacked, or threats were made.
6. Report the incident to CICC or through eGovPH
The CICC receives cybercrime reports through the government hotline 1326. Reports may also be submitted through the eReport feature of the eGovPH application.
Include the mobile number, complete narrative, screenshots, transaction details, identification, and any report reference already issued by the bank, telco, NTC, PNP, or NBI. (Facebook)
7. File a complaint with PNP-ACG or NBI-CCD
For criminal investigation, report to either:
- The nearest PNP station or Regional Anti-Cybercrime Unit;
- The PNP Anti-Cybercrime Group eComplaint portal;
- The NBI Cybercrime Division in Manila; or
- An NBI regional or district office with cybercrime investigation capability.
At the NBI, the usual intake process includes completing a complaint sheet, undergoing an initial interview, and executing a sworn statement or submitting a complaint-affidavit. Investigators may also examine the relevant device. The NBI Citizen’s Charter lists no government fee for cybercrime complaint intake and an estimated frontline processing period of approximately one hour and ten minutes, excluding the actual investigation. (National Bureau of Investigation)
The investigation itself may take weeks or months. Common delays include:
- Obtaining subpoenas;
- Identifying the correct telecommunications provider;
- Coordinating with several banks or e-wallets;
- Tracing money transferred through mule accounts;
- Securing records from foreign platforms;
- Reviewing multiple devices or accounts; and
- Locating witnesses and suspects.
8. Execute a complaint-affidavit when requested
A complaint-affidavit is a sworn written statement describing the offense and attaching the evidence. It should identify, as far as known:
- The complainant;
- The mobile number and other accounts used;
- The false representations made;
- The dates and places involved;
- The amount or property lost;
- Why the representations were believed;
- The steps taken after discovering the scam; and
- The documents attached as evidence.
The affidavit is usually signed before a prosecutor, investigating officer authorized to administer oaths, or notary public, depending on the receiving office’s procedure.
Once the suspect has been identified and sufficient evidence has been gathered, the complaint may be referred to the Office of the City or Provincial Prosecutor for preliminary investigation. A police or barangay blotter is not the same as a complaint-affidavit and does not, by itself, begin prosecution.
Where to Report a Scammer Using a Mobile Number
| Office or institution | Report here when | What the office may do |
|---|---|---|
| Bank or e-wallet | Money was sent or an account was compromised | Secure the account, dispute transactions, trace or hold funds, coordinate with the receiving institution |
| Telecommunications company | Its SIM or network was used | Investigate the number, preserve records, restrict or deactivate service when justified |
| NTC | Fraudulent or spam calls and texts were received | Process the telecom complaint and coordinate regulatory action |
| CICC or eGovPH | The incident involves online or mobile-enabled fraud | Receive and coordinate cybercrime reports |
| PNP-ACG | Criminal investigation, urgent threats, hacking, fraud, or account takeover is involved | Investigate, preserve evidence, seek records, identify suspects, and refer the case for prosecution |
| NBI-CCD | A formal cybercrime investigation is needed | Take sworn statements, examine devices, issue investigative requests, and build a criminal case |
| BSP | A supervised bank or e-wallet failed to address a consumer complaint | Review an unresolved complaint after first-level recourse with the institution |
| DTI | The dispute involves an identifiable online seller or consumer transaction | Handle consumer-protection issues; refer apparent crimes to appropriate authorities |
Reporting to only one office may not address every part of the problem. A bank focuses on the money, the NTC and telco focus on the number and service, while the PNP or NBI investigates the criminal offense.
Documents and Information to Prepare
Bring or upload copies of the following whenever available:
- Valid government-issued ID or passport;
- Complaint-affidavit or written incident narrative;
- Chronology of events;
- Screenshots and exported conversations;
- Original phone containing the messages;
- Mobile number and network involved;
- Bank or e-wallet receipts;
- Recipient account name, number, and institution;
- Transaction reference numbers;
- Bank, telco, and platform complaint references;
- Contracts, invoices, advertisements, or listings;
- URLs, email addresses, usernames, and social-media profiles;
- Proof of the amount lost;
- Witness statements; and
- Proof that you demanded a refund or questioned the transaction, when relevant.
Keep the originals. Submit copies unless investigators specifically need to inspect or take custody of a device or document. Ask for an acknowledgment receipt whenever physical evidence is surrendered.
Common Mistakes That Can Weaken a Scam Report
Deleting the conversation too early
Blocking the scammer may be necessary, but first preserve the number, messages, links, timestamps, and account information. Deleted chats may be difficult to recover.
Reporting only to the NTC
The NTC can act on the telecommunications aspect. It does not replace immediate reporting to the bank or a criminal investigation by the PNP or NBI.
Waiting for a police report before contacting the bank
Money can be transferred through several accounts within minutes. Contact the bank or e-wallet first, then complete the law-enforcement documents.
Expecting the telco to reveal the owner
SIM subscriber information is confidential. Investigators usually need a subpoena or another lawful basis to obtain it.
Assuming the registered owner is automatically guilty
The SIM could be stolen, fraudulently registered, transferred, shared, or spoofed. Publicly accusing the registered owner without adequate proof can harm an innocent person and create separate legal problems.
Posting the number and alleged owner’s personal information online
Public warnings should not expose unverified names, addresses, identification documents, or private account information. Send complete evidence to investigators instead of encouraging harassment or vigilante action.
Paying a “recovery agent”
Scammers sometimes contact victims again while pretending to be hackers, police contacts, lawyers, BSP personnel, or fund-recovery specialists. Government agencies do not require payment to “unlock” stolen funds or disclose a subscriber’s identity.
Special Situations
The number appears to belong to a legitimate company
Do not call back using the number in the message. Contact the company using the number printed on your card, official application, billing statement, or verified website.
Caller ID and sender names can be spoofed. A message appearing in the same thread as legitimate bank messages is not proof that it came from the bank.
The scam occurred through Viber, WhatsApp, Telegram, or Messenger
Report both the mobile number and the platform account. Preserve the username, profile URL, group or channel name, QR code, and application-specific identifiers. A person may change the visible profile name while retaining the same underlying account.
No money was lost
The incident may still be reported, especially when it involves phishing links, identity theft, account-access attempts, impersonation, threats, extortion, or repeated fraudulent messages. Reporting may help prevent other victims and create a record connecting the number to similar complaints.
The message contains threats or extortion
Preserve the threat and contact the police immediately. For an imminent risk of physical harm, call 911 or go to the nearest police station. Do not arrange a private meeting or payment without law-enforcement guidance.
The victim is outside the Philippines
An overseas Filipino or foreign national may begin reporting through the bank, e-wallet, telco, NTC online channel, CICC, eGovPH, or the PNP online portal.
A Philippine investigating office may later require a sworn affidavit, interview, original documents, or an authorized representative. An affidavit signed abroad may need to be notarized before a Philippine Embassy or Consulate, or notarized locally and apostilled, depending on the receiving office’s requirements. Confirm the required form before paying for notarization, authentication, or an apostille.
Report the incident to authorities in the country where you are located as well, particularly when the scammer, payment service, or financial loss has a connection to that country.
Frequently Asked Questions
Can I find the owner of a Philippine mobile number myself?
Generally, no. Telecommunications companies cannot ordinarily disclose confidential SIM registration information to a private person. Police, NBI investigators, prosecutors, or courts may obtain the information through lawful process.
Will the NTC immediately block a reported number?
Not necessarily. The telco or NTC must assess the complaint and conduct the required investigation. A SIM may be restricted or deactivated when the evidence and applicable rules justify it.
Does SIM registration make every scammer easy to identify?
No. Registration provides an investigative lead, but scammers may use stolen identities, illegally transferred SIMs, mule registrants, stolen phones, foreign numbers, internet-based numbers, or caller-ID spoofing.
Can I report a scammer using only screenshots?
You can begin a report with screenshots, but stronger evidence includes the original phone, complete conversation, payment records, platform information, and a sworn account of what happened. Avoid heavily edited or cropped images.
What should I do after sending money through GCash, Maya, or a bank?
Report the transaction to the provider immediately, request that the account be secured and the funds traced or held, obtain a case reference, preserve the receipt, and report the receiving account and mobile number to law enforcement. Recovery is possible in some cases but is never guaranteed.
Do I need a notarized affidavit?
An initial online report may not require one. A sworn complaint or complaint-affidavit is commonly required when investigators seek subscriber records, build a criminal case, or refer the matter to a prosecutor. Follow the instructions of the receiving office.
Do I need to report first to the barangay?
Not usually for an anonymous mobile or online scam. Do not delay urgent reporting to the bank, telco, NTC, PNP, or NBI merely to obtain a barangay blotter. Barangay conciliation is generally impractical when the offender’s identity or address is unknown or the parties are not within the same covered locality.
Can I recover all the money I lost?
Recovery depends on how quickly the transaction was reported, whether the funds remain in a traceable account, whether the receiving institution can hold them, and whether the scammer or mule account can be identified. A criminal complaint does not automatically produce a refund.
What if the mobile number is foreign or internet-based?
Report it anyway. Include the country code, platform, full messages, transaction route, URLs, and account identifiers. Philippine authorities may coordinate with foreign platforms or agencies, but obtaining overseas records can take longer and may depend on foreign law.
Key Takeaways
- A mobile number is an investigative lead, not automatic proof of the scammer’s identity.
- Contact the bank or e-wallet immediately when money or account access is involved.
- Preserve complete messages, transaction records, links, call logs, and the original device.
- Report the number to the telco and the NTC, but file with the PNP-ACG or NBI for criminal investigation.
- SIM registration data is confidential and normally requires lawful process, such as a subpoena, before it can be disclosed.
- Do not publicly accuse the registered subscriber without evidence; the SIM may be stolen, fraudulently registered, transferred, or spoofed.
- Keep every complaint reference number and follow up with the institution or agency handling the report.