The digital landscape in the Philippines is governed by several key laws, most notably the Cybercrime Prevention Act of 2012 (Republic Act No. 10175). Reporting illegal websites—whether they involve financial scams, child exploitation, piracy, or the sale of prohibited goods—is a civic duty that helps maintain the integrity of the Philippine cyberspace.

Below is a comprehensive guide on the agencies involved and the evidentiary requirements for reporting illegal online activities.

1. Key Government Agencies to Contact

In the Philippines, cybercrime enforcement is primarily split between the police and specialized investigative bureaus.

The PNP Anti-Cybercrime Group (PNP-ACG)

The PNP-ACG is the primary unit of the Philippine National Police dedicated to implementing cyber laws. They handle everything from online libel and identity theft to large-scale phishing sites.

Best for: Localized scams, harassment, and immediate police intervention.
Reporting Channel: E-Complaint desk at their headquarters (Camp Crame) or through their official website and social media "Cyber Tip" hotlines.

The NBI Cybercrime Division (NBI-CCD)

The National Bureau of Investigation handles high-profile or technically complex cases. They often work closely with international agencies (like the FBI or Interpol) if the illegal website is hosted abroad but targets Filipinos.

Best for: Organized cybercrime, international phishing rings, and complex financial fraud.

The Department of Justice (DOJ) Office of Cybercrime

The DOJ serves as the central authority on matters related to international mutual legal assistance and the overall coordination of cybercrime enforcement.

Best for: Reporting websites that require legal takedown orders or international coordination.

Specialized Regulatory Bodies

Depending on the content of the website, you should also notify:

SEC (Securities and Exchange Commission): For "investment" websites or Ponzi schemes.
CICC (Cybercrime Investigation and Coordinating Center): For reporting critical infrastructure threats and inter-agency coordination.
DTI (Department of Trade and Industry): For fraudulent e-commerce sites or consumer rights violations.

2. Evidence Preparation: The "Cyber Trail"

Under Philippine law, evidence must be handled carefully to maintain its integrity and authenticity for it to be admissible in court.

A. Digital Snapshots (Screenshots)

Do not just take one screenshot. Capture the following:

The URL (Uniform Resource Locator) or the web address shown in the browser bar.
The specific content that is illegal (e.g., the fraudulent investment offer, the defamatory post).
Date and time stamps (usually visible on your computer’s taskbar).

B. Electronic Logs and Metadata

If possible, save the "Source Code" or the "Header" of an email if the website was linked through a phishing mail.

What to look for: IP addresses, domain registration details (via WHOIS lookups), and any contact information listed on the site.

C. Transaction Records

If the website involved a financial loss:

Transaction receipts from banks, e-wallets (GCash/Maya), or cryptocurrency addresses.
Keep copies of all "conversations" with the site administrators or "chat support."

D. Preservation of Evidence

Crucial: Do not attempt to "hack" back or alter the site. Simply document what is there. Once you report it, the authorities may request a "Preservation of Data" under Section 13 of RA 10175, which requires service providers to keep the data intact for at least six months.

3. The Step-by-Step Reporting Process

Documentation: Compile all screenshots and URLs into a chronological folder.
Initial Filing: Visit the PNP-ACG or NBI-CCD website to file an initial complaint. For serious crimes, a physical visit to their office to execute an Affidavit of Complaint is usually required.
The Cyber-Warrant: If the authorities find merit, they will apply for a Warrant to Disclose Computer Data (WDCD) or a Warrant to Search, Seize, and Examine Computer Data (WSSECD) from a designated Cybercrime Court.
Takedown Requests: The DOJ or CICC can coordinate with Internet Service Providers (ISPs) or the National Telecommunications Commission (NTC) to block access to the illegal site within Philippine territory.

4. Legal Protections for the Reporter

Under the law, informants are generally protected, provided the report is made in good faith. However, ensure that the report is factual, as malicious reporting or filing false testimonies can lead to counter-charges of perjury or even online libel under the same Cybercrime Act.

Note: For cases involving the Special Protection of Children Against Child Abuse, Exploitation, and Discrimination Act (RA 7610), the reporting process is expedited, and identities are kept strictly confidential to protect the victims.

Would you like me to draft a template for a formal letter of complaint to the NBI or PNP regarding an illegal website?