Losing money or sensitive information to an online scammer in the Philippines can feel overwhelming and isolating. Whether it was a fake online seller who never delivered goods, a fraudulent “investment” opportunity promising quick returns, a romance scam that drained your savings, or unauthorized transfers from your GCash, bank, or e-wallet account, you have practical options to report the incident and seek accountability. Philippine law treats most online scams as criminal acts—primarily estafa under the Revised Penal Code combined with cybercrime provisions—and provides clear channels through the Philippine National Police (PNP) Anti-Cybercrime Group (ACG) and the National Bureau of Investigation (NBI) Cybercrime Division. This guide gives you the exact steps, required evidence, realistic timelines, and what to expect so you can act effectively and protect yourself and others.

What Constitutes an Online Scam Under Philippine Law

An online scam typically involves deceit or fraudulent misrepresentation that causes damage or loss, often executed through computers, networks, social media platforms, messaging apps, or e-wallets. When the fraud uses digital means—such as fake websites, spoofed accounts, phishing links, or manipulated online transactions—it falls under both traditional criminal law and specific cybercrime rules.

The core offense is usually estafa (swindling) under Article 315 of the Revised Penal Code, which punishes any person who defrauds another by abuse of confidence or by deceit. When the same acts are committed through a computer system or data, they are also covered by Republic Act No. 10175, the Cybercrime Prevention Act of 2012. RA 10175 specifically addresses computer-related fraud and other offenses against the confidentiality, integrity, and availability of computer data and systems. In practice, prosecutors often charge both estafa and the corresponding cybercrime provision, which can affect penalties and procedural rules.

Other related laws may apply depending on the scam type: the Electronic Commerce Act (RA 8792) for certain online transactions, the Securities Regulation Code (RA 8799) for unregistered investment schemes, and the Anti-Money Laundering Act (as amended) when large or layered transfers occur. The Supreme Court upheld the constitutionality of RA 10175 in Disini v. Secretary of Justice (G.R. No. 203335, February 11, 2014), confirming that these digital offenses are prosecutable.

Key Legal Basis and Your Rights

Republic Act No. 10175 (Cybercrime Prevention Act of 2012) is the primary law for online scams. It mandates the PNP and NBI to maintain dedicated cybercrime units and gives them authority to investigate, preserve digital evidence, and coordinate with service providers. Section 14 allows law enforcement, upon a court order, to require disclosure of subscriber information, traffic data, or relevant data within 72 hours in appropriate cases.

Revised Penal Code, Article 315 (Estafa) provides the substantive fraud element. Penalties scale with the amount involved and can be increased when committed through cyber means.

Rules on Electronic Evidence (A.M. No. 01-7-01-SC) govern how screenshots, chat logs, transaction records, and other digital materials are authenticated and admitted in court. Preserving the original form and chain of custody is critical—altering files can weaken or disqualify evidence.

You have the right to file a criminal complaint without needing a lawyer for the initial report. You also have the right to be informed of case developments and to pursue parallel civil remedies for recovery of damages. False reporting can lead to perjury charges under Article 183 of the Revised Penal Code, so all statements must be truthful and based on personal knowledge.

Where to Report an Online Scammer

Two main government agencies handle these cases:

PNP Anti-Cybercrime Group (ACG) — Best starting point for most individual online scams, phishing, romance scams, and e-wallet fraud. They handle high volumes and have regional presence.
NBI Cybercrime Division — Preferred for larger losses, organized syndicates, cross-border elements, or complex identity theft cases.

You can report to both if the case warrants it; the agencies coordinate. Many victims also start by reporting directly to the platform (Facebook/Meta, Instagram, GCash, bank, or e-wallet provider) to preserve evidence and attempt account freezes or transaction reversals—these steps strengthen your official complaint.

Current contact points (verify on official sites as details can update):

PNP ACG: Email acg@pnp.gov.ph; hotline (02) 8723-0401 local 7491 or check acg.pnp.gov.ph / pnp.gov.ph for e-Sumbong or online portal; in-person at Camp Crame, Quezon City, or regional ACG units.
NBI Cybercrime Division: Email cybercrime@nbi.gov.ph; hotline (02) 8523-8231 to 38 (locals 3455 or 3456); online options via nbi.gov.ph; in-person at NBI main office on Taft Avenue, Manila, or regional offices.

Local police stations can take an initial blotter entry and refer cyber-related cases to ACG.

Step-by-Step Guide to Reporting

Act immediately on the platform or service involved. Report the account or transaction to Facebook, GCash, your bank, or the relevant app. Request preservation of data and any reversal or freeze. Keep records of these reports (reference numbers, screenshots of confirmation).
Gather and preserve your evidence carefully. Digital evidence must remain authentic under the Rules on Electronic Evidence. Do not edit, crop excessively, or delete originals. Take full-screen screenshots showing URLs, timestamps, usernames, and entire conversations. Export chat histories where possible. Obtain official transaction histories or statements from your bank or e-wallet provider. Note any scammer details (usernames, phone numbers, email addresses, bank or e-wallet account numbers used to receive funds). If others witnessed or were affected, get their statements. Store everything chronologically with brief descriptions of what each piece shows.
Choose your reporting channel. For most personal scams, begin with the PNP ACG hotline or online portal. For bigger or syndicated cases, go to NBI. You can also walk in.
Prepare and file your complaint.
- Online portals (preferred for speed and convenience) allow you to upload details and evidence directly.
- Hotline calls connect you to an officer who guides you and may create an initial record.
- In-person or formal filing usually requires a sworn Complaint-Affidavit. This document must clearly state your personal details, a chronological narrative of what happened (dates, platforms used, communications, amounts lost, how money was transferred), descriptions of the scammer, and a list of attached evidence. It is typically notarized or sworn before an agency officer. Bring at least one valid government-issued ID (PhilID, passport, driver’s license, or UMID). Foreigners should bring their passport and any relevant immigration documents.
Submit and obtain a reference or case number. Keep copies of everything you submit and note all reference numbers, officer names, and dates of contact.
Cooperate fully during investigation. Investigators may request additional documents, clarifications, or device examination. You may need to execute supplemental affidavits. Respond promptly to calls or messages.

What Happens After You File

The agency conducts an initial assessment and assigns an investigator. Digital forensics may trace IP addresses, analyze accounts, or recover data. With court authorization under RA 10175, they can obtain subscriber and traffic data from internet service providers, banks, or platforms (often within tight timeframes).

If sufficient evidence establishes probable cause, the case moves to the Department of Justice or the appropriate prosecutor’s office for preliminary investigation. The suspect may be required to submit a counter-affidavit. If an Information is filed in court (usually Regional Trial Court for cyber-related cases), trial follows, and you may be called to testify.

Realistic timelines: Initial acknowledgment is often quick (same day or within days via hotline or portal). Full investigation can take weeks to several months depending on complexity, evidence strength, and agency workload. Prosecution and trial may extend a year or more. Many cases, especially those involving anonymous foreign-based scammers using mule accounts or VPNs, do not result in quick arrests. However, every report adds to official records, helps identify patterns and syndicates, and supports platform or bank actions.

Recovery of money is separate from the criminal case. Dispute transactions promptly with your bank or e-wallet provider under applicable BSP rules. Criminal conviction does not automatically return funds; you may need a separate civil action for damages. Legal aid through the Public Attorney’s Office (PAO) is available if you qualify based on income.

Common Challenges and Practical Scenarios

Victims often face evidence that disappears quickly (deleted posts or deactivated accounts), scammers who operate from abroad or use layers of fake identities, and investigative backlogs. Reporting late or with incomplete details weakens the case. Confronting the scammer directly can alert them and sometimes lead to counter-allegations.

OFWs and Filipinos abroad: You can still file. Coordinate with the nearest Philippine Embassy or Consulate to notarize or authenticate your affidavit. Some embassies assist with remote or representative filing. Philippine courts generally have jurisdiction when the victim is Filipino, the transaction touches Philippine systems, or the computer used is in the Philippines.

Foreigners: The process is the same. Use your passport as primary ID. If abroad, apostille any foreign-executed documents if required for use in the Philippines.

Investment or crypto-related scams: Report additionally to the Securities and Exchange Commission (SEC) if unregistered securities or investment advice were involved. Large or suspicious fund movements may also warrant reporting to the Anti-Money Laundering Council (AMLC).

Smaller losses: Still worth reporting. It creates an official record, may help identify repeat offenders, and supports broader enforcement efforts even if individual recovery is limited.

Required Documents, Fees, and Timelines

Core requirements:

Valid government-issued photo ID of the complainant.
Sworn Complaint-Affidavit detailing the incident, timeline, loss amount, and scammer information.
Supporting evidence package: screenshots (full context with visible URLs and timestamps), transaction proofs (bank/e-wallet statements showing debits and any known recipient details), exported chat or email logs, and any other relevant records.
List or index of evidence with brief explanations.
If representing someone else (e.g., minor or family member): proof of authority or relationship.

Fees: Filing a criminal complaint with PNP or NBI is free. Notarization of the affidavit typically costs PHP 200–1,000 depending on the notary and location. Printing or USB copies are minor personal expenses.

Timelines: Hotlines and online portals provide immediate or same-day initial response. Substantive investigation varies widely. Prompt reporting (ideally within days) maximizes evidence preservation.

Additional Helpful Channels

Report simultaneously to:

The platform or app where the scam occurred (for content removal and account action).
Your bank or e-wallet provider (for dispute and possible reversal).
SEC (for investment scams).
Bangko Sentral ng Pilipinas consumer assistance channels (for financial institution issues).

These parallel actions often yield faster practical results (account suspensions or transaction holds) while the criminal investigation proceeds.

Frequently Asked Questions

Can I report an online scammer anonymously?
Formal complaints generally require your identity because you will be the complainant and a potential witness. Some hotlines accept initial tips with limited details, but full investigation and prosecution need a sworn statement from you.

What if the scammer is outside the Philippines?
You should still report. Authorities can trace digital evidence and, in significant cases, seek international cooperation through mechanisms like the Budapest Convention on Cybercrime. Recovery and arrest are more difficult but not impossible if there is a clear money trail or Philippine links.

Do I need a lawyer to report?
No for the initial complaint. The PNP or NBI can guide you. For complex cases, preliminary investigation responses, or pursuing civil recovery, many victims benefit from a lawyer. Indigent persons may qualify for free assistance from the Public Attorney’s Office.

Will reporting get my money back?
The criminal case focuses on punishment and accountability. Refunds or reversals usually come from disputing the transaction directly with your bank or e-wallet provider (time-sensitive) or through a separate civil case for damages. Success depends on the facts and available assets.

How long does it take to catch a scammer?
There is no fixed timeline. Simple local cases with strong evidence can move faster; complex, cross-border, or low-value cases often take months or longer, and some may not result in arrest if the perpetrator remains unidentifiable.

What is the strongest evidence?
Clear proof of financial loss (official transaction records) combined with communications that link the scammer’s identity or accounts to the fraud. Timestamped, unaltered screenshots and exported logs carry significant weight under the Rules on Electronic Evidence.

Should I report to both PNP ACG and NBI?
For most ordinary scams, start with one (usually PNP ACG). Report to both only if the case involves large amounts, syndicates, or international elements—the agencies can coordinate.

Is it worth reporting small amounts?
Yes. Every report helps build patterns that authorities use to dismantle larger operations. It also creates an official record that can support platform actions or future claims by other victims.

What happens if I already deleted some chats or evidence?
Report what you still have. Investigators may still recover data from other sources (service providers, recipient accounts). Act quickly on remaining evidence and platforms.

Key Takeaways

Report promptly to preserve digital evidence and maximize options for reversal or investigation.
Start with the platform or e-wallet provider for immediate practical steps, then file a formal complaint with PNP ACG or NBI.
Prepare a clear, chronological sworn Complaint-Affidavit supported by well-organized, unaltered digital evidence.
Expect investigation to take time; follow up using your reference number and cooperate fully.
Criminal reporting holds scammers accountable and protects the public; separate steps with your financial provider are usually needed for any chance of recovering funds.
Foreigners and OFWs have the same rights and can file with proper identification and, when abroad, through embassy assistance or representatives.
Resources like the PNP ACG and NBI websites, lawphil.net for full texts of RA 10175 and the Revised Penal Code, and the Rules on Electronic Evidence provide further official details.

Taking these steps puts you in the strongest possible position. Many victims who document thoroughly and persist see results—whether through account actions, pattern identification by authorities, or eventual accountability. Start with what you have today; every piece of preserved evidence matters.