How to Report Fraudulent Websites and Online Scams to the NBI and PNP

In the digital age, the rapid expansion of e-commerce and online interaction in the Philippines has been shadowed by a proportional rise in cybercrime. Victims of fraudulent websites, phishing, investment scams, and "love scams" often find themselves in a state of paralysis, unsure of the legal mechanisms available for recourse.

Under Republic Act No. 10175, otherwise known as the Cybercrime Prevention Act of 2012, the Philippine government established a robust framework for the investigation and prosecution of computer-related offenses. Reporting these crimes is not merely a personal remedy but a necessary step in the broader effort to dismantle criminal networks operating within and outside the country’s borders.


I. The Centralized Triage: The 1326 Hotline

The primary point of contact for any cybercrime victim is the Cybercrime Investigation and Coordinating Center (CICC). Acting as the "911 for cybercrime," the CICC operates the Inter-Agency Response Center (I-ARC).

  • The 1326 Hotline: This is a toll-free, 24/7 hotline dedicated specifically to online scams.
  • Purpose: The hotline facilitates "real-time" intervention. Upon reporting, the CICC can coordinate with banks, e-wallet providers (such as GCash or Maya), and telecommunication companies to flag or freeze suspicious accounts before the stolen funds are withdrawn or laundered.
  • Digital Reporting: Citizens can also use the eGovPH Super App via its "e-Report" feature to submit screenshots and details of fraudulent transactions directly to the CICC.

II. The Philippine National Police Anti-Cybercrime Group (PNP-ACG)

The PNP-ACG is the frontline enforcement arm of the Philippine National Police. It is the most accessible agency for localized incidents and handles the majority of initial complaints.

1. How to Report

Victims can choose between online reporting and physical walk-ins:

  • Online Portal: Visit the PNP-ACG E-Complaint website or the "Aleng Pulis" platform.
  • Walk-in: Visit the Regional Anti-Cybercrime Unit (RACU) in your province or the national headquarters at Camp Crame, Quezon City.

2. The Process

Once a report is filed, a duty investigator will conduct an initial assessment. If the complaint has merit, the victim will be asked to execute a Complaint-Affidavit. This is a sworn statement detailing the facts of the case, which serves as the foundation for the criminal investigation.


III. The National Bureau of Investigation (NBI) Cybercrime Division

The NBI-CCD is often the preferred agency for high-profile, complex financial frauds, or scams involving international elements and sophisticated hacking.

1. How to Report

  • Online Portal: Reports can be submitted via the NBI Complaint Management Service on their official website.
  • Walk-in: Complainants may go directly to the NBI Cybercrime Division at the NBI Main Office in Manila or any NBI Regional Office.

2. Agency Mandate

The NBI focuses on building "case dossiers" through forensic analysis and technical tracing. They have the capability to coordinate with INTERPOL and other international law enforcement agencies if the fraudulent website is hosted outside the Philippines.


IV. The Evidentiary Requirement: Preserving the Digital Trail

In a court of law, the success of a cybercrime case hinges on the integrity of the digital evidence. Under the Rules on Electronic Evidence, screenshots and digital logs are admissible, provided they are properly authenticated.

Before reporting, you must secure the following:

  • Screenshots: Capture full conversations (Messenger, WhatsApp, Telegram), the scammer’s profile page, and the fraudulent website’s URL. Ensure the system clock/date is visible in the screenshots.
  • Transaction Records: Secure official receipts, InstaPay/PESONet confirmation slips, or transaction history logs from your e-wallet.
  • Metadata and Links: Do not delete the original messages or emails. The "headers" in emails contain IP addresses that investigators use to track the source of the communication.
  • Chronology: Prepare a one-page timeline of events—from the first contact to the moment the fraud was discovered.

V. Financial and Platform Mitigation

Parallel to the criminal report, victims must take immediate administrative steps to minimize damage:

  1. Bank/E-wallet Report: Call your financial institution immediately to request a "Hold Out" on the recipient's account. While a court order is usually required for a permanent freeze, an internal report flags the account for suspicious activity.
  2. Platform Takedown: Report the fraudulent user or website to the platform host (e.g., Facebook Marketplace, Shopee, Lazada). This aids in data preservation for future police requests.
  3. SIM Registration Act (RA 11934): If the scammer used a local mobile number, law enforcement can now use the SIM Registration database to identify the registered owner, though this requires a specific subpoena or court warrant.

VI. The Prosecutorial Path

After the PNP or NBI completes their investigation, they will endorse the case to the Department of Justice (DOJ) Office of Cybercrime.

  • Preliminary Investigation: A prosecutor will evaluate the evidence to determine "probable cause."
  • Applicable Charges: Perpetrators are typically charged with Computer-related Fraud or Computer-related Identity Theft under RA 10175. If money was involved, they may also face charges of Swindling (Estafa) under the Revised Penal Code, which carries a higher penalty (one degree higher) when committed through information and communication technologies.

Summary Table: Reporting Channels

Agency Best For Contact Method
CICC (Hotline 1326) Real-time intervention, freezing accounts Call 1326 / eGovPH App
PNP-ACG Local scams, retail fraud, fast police response Camp Crame / RACU Offices
NBI-CCD Complex hacking, international fraud NBI Taft Ave, Manila
DOJ Office of Cybercrime Legal strategy and international cooperation DOJ, Padre Faura, Manila

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.