I. Introduction

Cybercrime has become one of the most common and disruptive forms of criminal activity in the Philippines. It affects individuals, businesses, schools, government offices, professionals, and ordinary internet users. A single fraudulent message, hacked account, fake online seller, phishing link, identity theft scheme, ransomware attack, or defamatory social media post can cause financial loss, reputational harm, emotional distress, and legal complications.

In the Philippine setting, cybercrime complaints are commonly reported to the Philippine National Police Anti-Cybercrime Group, more widely known as the PNP-ACG. The PNP-ACG is the specialized unit of the Philippine National Police tasked with handling cybercrime-related complaints, conducting cybercrime investigations, assisting complainants, preserving digital evidence, coordinating with other law enforcement bodies, and referring appropriate cases for prosecution.

This article explains, in practical legal terms, how cybercrime may be reported to the PNP in the Philippines, what laws are usually involved, what evidence should be prepared, what complainants should expect during the process, and what important legal considerations should be kept in mind.

II. Legal Framework on Cybercrime in the Philippines

The principal law on cybercrime in the Philippines is Republic Act No. 10175, otherwise known as the Cybercrime Prevention Act of 2012. This law penalizes offenses committed through or involving information and communications technology.

The Cybercrime Prevention Act does not replace all other criminal laws. Instead, it works alongside the Revised Penal Code, special penal laws, data privacy laws, electronic evidence rules, and other relevant statutes. In many cases, the same act may constitute both a traditional crime and a cybercrime when committed through a computer system, mobile device, social media platform, messaging app, website, email, or other digital means.

For example, fraud may be prosecuted as estafa under the Revised Penal Code, but if committed through online messages, fake websites, electronic wallets, or digital platforms, cybercrime-related provisions may also become relevant. Similarly, libel committed through social media or online publication may be treated as cyber libel under the Cybercrime Prevention Act.

III. Common Cybercrimes Reported to the PNP

Cybercrime complaints reported to the PNP often include the following:

1. Online Scam or Cyber Fraud

This includes fake online selling, investment scams, romance scams, job scams, cryptocurrency-related fraud, loan scams, fake payment confirmations, bogus delivery schemes, and other forms of deception committed online.

Common examples include a seller who receives payment but never delivers the item, a fake investment platform promising unrealistic returns, or a scammer pretending to be a company representative to obtain money or account information.

2. Phishing and Credential Theft

Phishing happens when a person is tricked into giving passwords, one-time passwords, banking details, e-wallet credentials, card numbers, or personal information through fake links, fake login pages, fraudulent emails, or impersonation messages.

3. Hacking or Unauthorized Access

This involves unauthorized access to a person’s social media account, email, mobile application, website, business system, database, or other protected computer system.

Unauthorized access may include account takeover, password cracking, session hijacking, unauthorized system entry, or changing account recovery details without consent.

4. Identity Theft

Identity theft occurs when someone uses another person’s name, photograph, personal details, documents, account, or identifying information without authority, usually to deceive others, obtain money, damage reputation, or commit further crimes.

5. Cyber Libel

Cyber libel generally refers to defamatory statements made online or through a computer system. This may involve posts, comments, videos, articles, shared content, or messages published through social media, websites, online forums, or similar platforms.

Because libel is a technical legal offense, not every offensive or insulting statement is automatically libelous. The statement must generally be defamatory, identifiable, published to a third person, and made with the required legal elements.

6. Online Threats, Harassment, and Extortion

Victims may report threats of harm, threats to release private information, blackmail, sextortion, doxxing, persistent harassment, stalking through digital platforms, or coercive demands made through online channels.

7. Cybersex and Online Sexual Exploitation

The law penalizes certain sexual acts or exploitation conducted through computer systems. Cases involving minors, sexual exploitation, coercion, or distribution of intimate images are treated with particular seriousness and may involve other laws protecting children and victims of gender-based abuse.

8. Child Sexual Abuse or Exploitation Material

Possession, distribution, production, or transmission of child sexual abuse material is a grave offense. Reports involving minors should be treated urgently and carefully. Victims, parents, guardians, schools, or concerned individuals may report these matters to law enforcement.

9. Unauthorized Use of Devices, Malware, or Ransomware

Cases may involve malicious software, ransomware attacks, spyware, unauthorized interception, data interference, system interference, website defacement, distributed denial-of-service attacks, or other attacks against systems and data.

10. Online Impersonation and Fake Accounts

Fake accounts may be used to scam others, harass a victim, spread false information, solicit money, or damage another person’s reputation. The legal treatment depends on the facts, intent, harm caused, and applicable offense.

IV. Where to Report Cybercrime to the PNP

Cybercrime complaints may generally be brought to the PNP Anti-Cybercrime Group or to the appropriate police office that can refer the matter to the cybercrime unit.

In practice, complainants may report to:

The PNP Anti-Cybercrime Group national headquarters;
A PNP-ACG regional or field unit, if available in the complainant’s area;
The nearest police station, especially for urgent threats or immediate danger;
Other law enforcement or government agencies when the matter overlaps with their jurisdiction, such as the National Bureau of Investigation Cybercrime Division, financial regulators, banks, e-wallet providers, or child protection agencies.

For urgent danger, threats of physical harm, ongoing extortion, kidnapping threats, child exploitation, or imminent release of sensitive material, the complainant should seek immediate police assistance instead of waiting to complete documents.

V. Who May File a Cybercrime Complaint

A cybercrime complaint may usually be filed by:

The victim;
A parent or guardian, if the victim is a minor;
A duly authorized representative of a company or organization;
A person legally authorized by the victim;
A public officer or institution affected by the offense;
In certain cases, any concerned person who has knowledge of a serious cybercrime, especially if children, exploitation, public safety, or continuing harm are involved.

For corporate or business complaints, the complainant should ideally be an officer, owner, authorized employee, or representative with proof of authority, such as a board resolution, secretary’s certificate, authorization letter, or company identification.

VI. What to Prepare Before Reporting

A well-prepared complaint is easier to evaluate and investigate. The complainant should gather and preserve evidence before going to the PNP.

1. Personal Identification

The complainant should bring valid identification, such as a government-issued ID. If representing another person or company, proof of authority should also be prepared.

2. Written Narrative or Complaint-Affidavit

The complainant should prepare a clear written account of what happened. The narrative should include:

The full name and contact details of the complainant;
The identity of the suspect, if known;
The suspect’s account name, username, email address, phone number, link, bank account, e-wallet number, or other identifiers;
The date and time of each relevant incident;
The platform used, such as Facebook, Messenger, Instagram, TikTok, Telegram, Viber, Gmail, Shopee, Lazada, GCash, Maya, bank app, or website;
The amount lost, if any;
The exact words or conduct complained of;
The steps already taken by the complainant;
The evidence available;
The harm suffered.

The account should be chronological. Avoid unnecessary speculation. Stick to facts that can be supported by documents, screenshots, witnesses, transaction records, and other proof.

3. Screenshots

Screenshots are often crucial in cybercrime cases. They should show:

The full conversation thread, not only selected messages;
Profile name, username, account link, phone number, or email address;
Date and time stamps;
URLs or web addresses, if applicable;
The offensive post, fraudulent listing, fake account, or threatening message;
Payment instructions or demands;
Proof that the content was published or sent.

Screenshots should not be edited, cropped excessively, filtered, or altered. If possible, take screenshots showing the device clock and full page context.

4. URLs, Links, and Account Identifiers

The complainant should copy and save relevant links, including:

Social media profile links;
Post links;
Marketplace listing links;
Website URLs;
Email headers, if available;
Chat usernames;
Telegram handles;
Mobile numbers;
Bank or e-wallet account details;
Transaction reference numbers.

Links may disappear if the suspect deletes content, so they should be saved immediately.

5. Original Device

The complainant should bring the phone, laptop, tablet, or device where the messages, posts, emails, transactions, or account activity can be viewed. The original device may help investigators verify authenticity and context.

Do not delete messages, clear browser history, uninstall relevant apps, factory reset the device, or tamper with the account before reporting.

6. Transaction Records

For online scam or fraud complaints, bring proof of payment and financial loss, such as:

Bank transfer receipts;
E-wallet transaction history;
Deposit slips;
Remittance receipts;
Credit card statements;
Order confirmations;
Invoices;
Tracking details;
Screenshots of payment instructions;
Reference numbers;
Account names and numbers used by the suspect.

7. Communications with the Suspect

Preserve all communications, including chat messages, emails, SMS, call logs, voice notes, video calls, and social media messages. Even if some messages are embarrassing, they may be legally important.

8. Proof of Ownership or Identity

For hacked accounts, fake accounts, or impersonation, prepare proof that the original account, photo, name, brand, page, or identity belongs to the complainant. This may include IDs, business registrations, old account recovery emails, prior posts, domain records, or platform notices.

9. Witnesses

If other persons saw the post, received the scam message, paid money, or can identify the suspect, their names and contact details should be listed. They may later execute affidavits.

VII. How to Preserve Digital Evidence

Digital evidence is fragile. It can be deleted, altered, hidden, or made inaccessible. Proper preservation increases the chance of successful investigation.

A complainant should:

Take screenshots immediately;
Save URLs and profile links;
Export chat history where possible;
Keep original files, images, videos, and messages;
Save emails in original format if possible;
Avoid altering metadata;
Do not confront the suspect in a way that causes deletion of evidence;
Record transaction references and account details;
Back up evidence to a secure drive or cloud folder;
Keep the original device available.

The complainant should not fabricate, edit, or manipulate evidence. Submitting falsified evidence may expose the complainant to criminal liability.

VIII. Step-by-Step Procedure for Reporting Cybercrime to the PNP

Step 1: Identify the Nature of the Cybercrime

Before reporting, determine the basic type of cybercrime involved. Is it a scam, hacked account, threat, fake account, cyber libel, phishing, identity theft, child exploitation, or data breach? The classification does not need to be perfect, but it helps organize the complaint.

Step 2: Gather and Preserve Evidence

Collect screenshots, links, payment records, conversations, account details, device information, and other relevant documents. The stronger the documentation, the easier it is for investigators to assess the complaint.

Step 3: Prepare a Written Statement

Write a chronological summary of the incident. Include dates, platforms, accounts involved, losses, and actions taken. If a formal complaint-affidavit is required, it may be prepared with the assistance of counsel or executed before the proper officer.

Step 4: Go to the PNP-ACG or Appropriate Police Office

The complainant may go to a PNP-ACG office or the nearest police station. At the office, the complainant may be interviewed, asked to submit evidence, and guided on the next steps.

Step 5: Submit Evidence and Identification

Bring printed copies if available, but also keep digital copies. Investigators may need to inspect the original device or request copies of files. For business complaints, proof of authority should be submitted.

Step 6: Execute a Complaint-Affidavit or Statement

The complainant may be asked to execute a sworn statement. The affidavit should be truthful, detailed, and consistent with the evidence.

Step 7: Cooperate with Investigation

The PNP may evaluate the complaint, preserve evidence, trace accounts where legally possible, coordinate with platforms, request documents, or refer the matter for further proceedings.

Step 8: Referral for Inquest or Preliminary Investigation

If the suspect is arrested or identified, the case may be referred to the prosecutor. Depending on the circumstances, the matter may proceed through inquest, preliminary investigation, or other legal processes.

Step 9: Prosecutorial Action

The prosecutor determines whether there is probable cause to file the case in court. The complainant may need to submit further affidavits, attend hearings, identify evidence, or testify.

IX. What Happens After a Cybercrime Report Is Filed

Filing a report does not automatically mean that a case will immediately be filed in court. Law enforcement must evaluate the evidence, identify suspects, determine applicable offenses, and coordinate with prosecutors.

Possible outcomes include:

Recording of the complaint;
Initial assessment by investigators;
Request for additional documents;
Forensic examination of devices, if applicable;
Preservation requests to platforms or service providers;
Coordination with banks, e-wallet providers, or telecom companies;
Identification or tracing of suspects;
Referral to a prosecutor;
Advice to pursue civil, administrative, or platform remedies if the matter is not criminal;
Closure or non-filing if evidence is insufficient.

The complainant should keep copies of all submitted documents and take note of the name and contact details of the investigating officer, the office handling the matter, and any reference number assigned to the complaint.

X. Reporting Online Scams

Online scams are among the most frequent cybercrime complaints in the Philippines. A complainant should provide:

Name or username of the seller or scammer;
Platform used;
Product, service, investment, or transaction involved;
Advertisement or listing;
Conversation history;
Payment instructions;
Proof of payment;
Delivery or non-delivery details;
Bank or e-wallet account information;
Other victims, if known.

The complainant should also immediately report the transaction to the bank, e-wallet provider, marketplace, or payment processor. Quick reporting may help freeze funds, preserve account records, or prevent further losses, although recovery is not guaranteed.

XI. Reporting a Hacked Social Media or Email Account

For hacked accounts, the complainant should:

Attempt account recovery through the platform’s official recovery process;
Preserve emails or notices showing unauthorized login;
Take screenshots of unauthorized posts, messages, or changes;
List recovery email, phone number, username, profile URL, and date of compromise;
Inform contacts not to transact with the hacked account;
Report fraudulent use to the PNP if the account is used for scams, threats, extortion, identity theft, or other crimes.

Not every account recovery issue is automatically a police matter. However, when hacking is involved or the account is used to commit further crimes, reporting may be appropriate.

XII. Reporting Cyber Libel

Cyber libel complaints require careful preparation because the legal elements are specific. The complainant should preserve:

The exact defamatory statement;
The URL or location of the post;
Screenshots showing publication;
The identity of the poster, if known;
Proof that the complainant is identifiable;
Evidence that third persons saw or accessed the statement;
Explanation of why the statement is false and defamatory;
Harm suffered, such as reputational damage, lost opportunities, or distress.

Because cyber libel has technical legal requirements and may raise constitutional, evidentiary, and procedural issues, legal counsel is highly advisable before filing.

XIII. Reporting Online Threats, Blackmail, and Sextortion

For threats, blackmail, or sextortion, the complainant should act quickly but carefully.

The complainant should:

Preserve all messages and demands;
Avoid sending more money or compromising material;
Avoid deleting conversations;
Report immediately if there is imminent harm;
Notify trusted family members or counsel if needed;
Secure social media and email accounts;
Change passwords and enable two-factor authentication;
Report the account to the platform;
Bring the matter to the PNP as soon as possible.

In sextortion cases, victims may feel shame or fear. However, prompt reporting is important because perpetrators often continue demanding money or threatening exposure.

XIV. Reporting Cybercrime Involving Minors

Cases involving minors require special urgency and sensitivity. Parents, guardians, schools, or concerned persons should report suspected exploitation, grooming, trafficking, sexual abuse material, coercion, or threats involving minors.

Evidence should be preserved but handled carefully. Do not share, forward, or unnecessarily reproduce explicit material involving minors. Such material should be reported to authorities and handled through proper channels.

XV. Role of Banks, E-Wallets, Telecoms, and Platforms

The PNP may investigate cybercrime, but other institutions often hold important records. In online scams, banks and e-wallet providers may have transaction logs and account information. Telecom companies may have subscriber information. Online platforms may have account records, login data, posts, chats, and preservation tools.

Complainants should report to these institutions as soon as possible. This may include:

Filing a dispute or fraud report with the bank;
Reporting unauthorized transactions;
Asking an e-wallet provider to investigate;
Reporting a fake account to a social media platform;
Reporting a fraudulent marketplace seller;
Requesting preservation of transaction details;
Changing passwords and securing accounts.

However, private companies may require law enforcement requests, court orders, subpoenas, or formal legal process before releasing certain information.

XVI. Evidence Under Philippine Rules on Electronic Evidence

Electronic documents and digital communications may be used as evidence, subject to rules on admissibility, authentication, relevance, integrity, and proper presentation.

Screenshots alone may be challenged if they are incomplete, altered, or unauthenticated. For stronger evidentiary value, complainants should preserve original electronic records, metadata, devices, account access logs, email headers, transaction records, and other supporting proof.

Affidavits from persons who took screenshots, saw the post, made the payment, or communicated with the suspect may also be useful.

XVII. Importance of Jurisdiction and Venue

Cybercrime cases can involve suspects, victims, platforms, servers, banks, and accounts located in different cities or countries. Jurisdiction and venue may therefore become complicated.

In general, the place where the complainant suffered damage, accessed the harmful content, made payment, received threats, or where the suspect acted may be relevant. The proper venue may depend on the offense, facts, and prosecutorial assessment.

If the suspect is abroad, Philippine authorities may still receive the complaint, but investigation and enforcement may require international cooperation, platform requests, mutual legal assistance, or coordination with foreign authorities.

XVIII. Prescription Periods and Delay

Complainants should report cybercrime as soon as possible. Delay can cause loss of evidence, deletion of accounts, dissipation of funds, expiration of platform logs, and weakening of witness memory.

Some offenses have prescriptive periods, meaning the State must act within legally defined time limits. The applicable period depends on the offense charged and the law involved. Because prescription can be technical, complainants should seek legal advice promptly, especially in cyber libel, fraud, and other offenses where timing may matter.

XIX. Civil, Criminal, and Administrative Remedies

Reporting to the PNP concerns possible criminal liability. However, cybercrime incidents may also involve civil or administrative remedies.

A victim may have:

Criminal remedies, such as filing a complaint for cybercrime, estafa, threats, unjust vexation, identity theft, cyber libel, or other offenses;
Civil remedies, such as recovery of money, damages, injunction, or protection of rights;
Administrative remedies, such as complaints before regulators, schools, employers, professional bodies, or government agencies;
Platform remedies, such as takedown requests, account recovery, reporting abuse, or suspension of fraudulent accounts.

A police report is important, but it is not always the only remedy.

XX. Practical Tips When Filing a Report

Complainants should keep the following in mind:

Bring both printed and digital copies of evidence;
Bring the device where the evidence can be viewed;
Organize screenshots by date and platform;
Keep a timeline of events;
Save all transaction references;
Do not delete messages;
Do not edit screenshots;
Avoid confronting the suspect unnecessarily;
Report to the bank or e-wallet provider immediately;
Ask for a receiving copy or reference number when possible;
Follow up respectfully with the assigned officer;
Consult a lawyer for serious, high-value, sensitive, or complex cases.

XXI. What Not to Do

A complainant should avoid actions that may harm the case:

Do not hack back;
Do not threaten the suspect;
Do not spread unverified accusations online;
Do not fabricate screenshots;
Do not edit evidence;
Do not pay extortionists repeatedly without reporting;
Do not share explicit images, especially involving minors;
Do not delete relevant messages;
Do not rely only on screenshots if original records are available;
Do not delay reporting serious incidents.

Taking matters into one’s own hands may create legal exposure or weaken the complaint.

XXII. Sample Cybercrime Complaint Checklist

Before going to the PNP, prepare the following:

Valid government ID;
Written narrative of events;
Screenshots of messages, posts, accounts, profiles, or listings;
URLs and account links;
Full chat history;
Proof of payment or loss;
Bank or e-wallet transaction receipts;
Suspect’s name, username, phone number, email, account number, or other identifiers;
Device used in the transaction or communication;
Witness names and contact details;
Prior reports made to platforms, banks, or e-wallet providers;
Authorization letter or company proof, if filing on behalf of another person or business.

XXIII. Sample Structure of a Complaint Narrative

A complaint narrative may be organized as follows:

1. Personal Information State the complainant’s name, address, contact number, and email address.

2. Background Explain how the complainant encountered the suspect, post, website, account, message, or transaction.

3. Chronology of Events List what happened in date order.

4. Description of the Cybercrime Explain the scam, hacking, threat, defamatory post, fake account, or other act complained of.

5. Evidence Available Identify screenshots, links, receipts, devices, witnesses, and records.

6. Damage or Harm Suffered State the amount lost, account compromised, reputation damaged, threats received, or other harm.

7. Action Requested Request investigation and appropriate legal action.

XXIV. Sample Short Complaint Narrative

A basic complaint narrative may read as follows:

I am filing this complaint regarding an online scam committed against me through Facebook Marketplace and GCash. On 15 May 2026, I saw a listing for a mobile phone posted by an account using the name “Juan D.” I contacted the account through Messenger. The seller instructed me to send payment of ₱12,000 to a GCash account under the name stated in our conversation. After I sent the payment, the seller stopped replying and blocked me. The item was never delivered. I have attached screenshots of the listing, our conversation, the profile link of the seller, and the GCash transaction receipt. I respectfully request investigation and appropriate action.

This is only a sample. Actual complaints should be tailored to the facts and supported by evidence.

XXV. Special Considerations for Businesses

Businesses reporting cybercrime should prepare more formal documentation. This may include:

SEC or DTI registration;
Mayor’s permit or business documents;
Board resolution or secretary’s certificate;
Authorization letter for the company representative;
Incident report;
System logs;
Customer complaints;
Financial loss computation;
Internal investigation report;
Data breach documentation, if applicable;
Coordination records with banks, platforms, or vendors.

If the incident involves personal data, the business should also consider obligations under the Data Privacy Act and relevant National Privacy Commission rules.

XXVI. Data Privacy and Cybercrime

Cybercrime incidents may involve personal data. Examples include hacked customer databases, leaked IDs, unauthorized disclosure of private information, identity theft, phishing, and account compromise.

The Data Privacy Act may become relevant when personal information controllers or processors fail to protect personal data, suffer a breach, or misuse personal information. Depending on the facts, a victim may need to report to both law enforcement and data privacy authorities.

XXVII. Coordination with Prosecutors

The PNP investigates, but prosecutors determine whether a criminal case should be filed in court. A complainant may be required to submit:

Complaint-affidavit;
Supporting affidavits;
Documentary evidence;
Electronic evidence;
Proof of identity;
Certification or authentication, if needed;
Supplemental affidavits;
Additional documents requested by the prosecutor.

The prosecutor evaluates whether probable cause exists. If probable cause is found, an information may be filed in court. If not, the complaint may be dismissed, subject to available remedies.

XXVIII. When Legal Counsel Is Advisable

A lawyer is especially advisable when:

The amount involved is substantial;
The suspect is known and may retaliate;
The complaint involves cyber libel;
The case involves intimate images or sextortion;
A minor is involved;
The complainant is a business;
There is a possible data breach;
The evidence is complex or technical;
The matter may involve foreign platforms or suspects;
The complainant also wants to recover money or damages;
The complainant may also face legal exposure.

Legal counsel can help prepare affidavits, evaluate charges, preserve evidence, coordinate with investigators, and protect the complainant’s rights.

XXIX. Rights and Responsibilities of the Complainant

A complainant has the right to seek assistance, report a crime, submit evidence, and pursue legal remedies. At the same time, the complainant has responsibilities.

The complainant must tell the truth, submit authentic evidence, cooperate with lawful investigation, respect due process, and avoid public accusations that may create defamation or privacy issues.

A cybercrime complaint should be pursued through lawful channels, not through online retaliation.

XXX. Frequently Asked Questions

1. Can I report a cybercrime even if I do not know the real identity of the suspect?

Yes. Many cybercrime complaints begin with only a username, phone number, account link, bank account, or e-wallet number. Investigators may evaluate whether further tracing is possible.

2. Are screenshots enough?

Screenshots are helpful but may not always be sufficient. Original messages, devices, URLs, transaction records, email headers, platform records, and witness affidavits can strengthen the case.

3. Should I delete embarrassing messages before reporting?

No. Deleting messages may remove important context and weaken the complaint. Preserve the complete conversation.

4. Can I recover money by reporting to the PNP?

Reporting may help investigation and prosecution, but recovery of money is not guaranteed. Victims should also report immediately to banks, e-wallet providers, payment processors, and platforms.

5. Can I report a fake account?

Yes, especially if the fake account is used for scams, harassment, threats, impersonation, identity theft, or reputational harm. Also report the account to the platform.

6. Can cyber libel be reported to the PNP?

Yes, but cyber libel is legally technical. The complainant should preserve the exact post, URL, screenshots, identity of the poster, proof of publication, and evidence of reputational harm.

7. What if the suspect is outside the Philippines?

A report may still be made, but investigation may require coordination with platforms, foreign service providers, or foreign authorities. Practical enforcement may be more difficult.

8. Should I message the suspect after filing a complaint?

It is usually better to avoid unnecessary communication. If communication continues, preserve all messages and inform the investigator.

9. Can businesses file cybercrime complaints?

Yes. Businesses may file through authorized representatives and should bring proof of authority and company documents.

10. Is reporting to the platform enough?

No. Platform reports may remove content or suspend accounts, but they do not replace a police report when a crime has been committed.

XXXI. Conclusion

Reporting cybercrime to the PNP in the Philippines requires prompt action, careful evidence preservation, and a clear presentation of facts. The most important steps are to secure digital evidence, prepare a chronological account, bring identification and supporting documents, report to the PNP Anti-Cybercrime Group or appropriate police office, and cooperate with investigators and prosecutors.

Cybercrime cases often depend on the quality of evidence. Screenshots, links, transaction receipts, account details, devices, and witness statements can make a significant difference. Victims should act quickly, avoid tampering with evidence, and use lawful remedies.

In serious or complex cases, especially those involving large financial losses, cyber libel, minors, sextortion, hacking, business systems, or personal data breaches, legal counsel should be consulted. A well-prepared complaint not only improves the chance of proper investigation but also helps protect the rights of the complainant throughout the legal process.