How to Report Online Casino Scams in the Philippines: NBI and PNP-ACG Complaints
This is practical legal information for the Philippines. It is not a substitute for advice from your own lawyer.
Executive summary
If you’ve been scammed by an “online casino” (rigged platforms, fake PAGCOR logos, apps that won’t let you withdraw, romance/pig-butchering schemes disguised as gaming), act fast:
- Secure your accounts and money (freeze/dispute with your bank/e-wallet/crypto exchange);
- Preserve evidence (screenshots, chat exports, receipts, TXIDs);
- File a criminal complaint with NBI-Cybercrime Division and/or PNP Anti-Cybercrime Group (ACG);
- Escalate to regulators when relevant (e.g., PAGCOR for licensed operators, BSP-supervised banks/e-wallets, NPC for data misuse); and
- Consider civil remedies to recover losses while the criminal case is investigated.
Typical scam patterns (so you can describe them clearly in your complaint)
- “Deposit bonus” or “sure-win” tasks that require ever-larger top-ups to unlock withdrawals.
- “Verification/withdrawal fee” requests after you win (“pay taxes/anti-money-laundering fee first”).
- Impersonation of PAGCOR-licensed brands, banks, or celebrities.
- Romance/pig-butchering grooming that funnels you into a gaming or “investment-gaming” app.
- Fake customer support directing you to send OTPs, install remote-desktop tools, or share IDs.
What to do in the first 24–48 hours
Financial containment
- Bank/e-wallet (GCash, Maya, etc.): report fraud, request a transaction hold, chargeback/dispute (for cards), and account password/OTP reset.
- Crypto: gather wallet addresses and TXIDs; file an immediate report with the exchange/VA SP (Virtual Asset Service Provider). Ask for an urgent account hold at the receiving platform.
- Telco/e-mail/social: change passwords, enable 2FA, and secure recovery e-mail/phone.
Evidence preservation (do not edit originals)
- Full chat exports (Messenger, Telegram, WhatsApp, Viber, SMS), including timestamps and handles.
- Screenshots of profiles, group pages, ads, deposit/withdrawal pages, “error” messages.
- Receipts/statements (bank/e-wallet/crypto), reference numbers, TXIDs, and e-mail confirmations.
- Device details if asked later: model, OS version, app version; keep the app installed if safe.
- Maintain a simple chain-of-custody log (who collected what, when, and how).
Safety & legality
- Never pay “unlock” or “tax” fees.
- Do not record voice calls without consent—anti-wiretapping rules apply to private communications.
- Avoid vigilantism or confronting suspects; let investigators handle it.
Where to report: NBI vs PNP-ACG (you can do both)
NBI – Cybercrime Division (NBI-CCD) National-level investigative bureau with cyber forensics capability. Handles complaints, builds cases, and coordinates with prosecutors, banks, e-wallets, telcos, and foreign counterparts.
PNP – Anti-Cybercrime Group (PNP-ACG) Police unit dedicated to cybercrime with regional offices. You can file a police blotter and a complaint-affidavit for case build-up and referral to prosecutors. Also coordinates preservation requests to platforms.
Which to choose? There’s no penalty for reporting to both. If the scammer is unknown, cross-border, or platform-based, many victims start with NBI-CCD. If you need a blotter quickly or prefer a nearby office, PNP-ACG regional units are convenient.
Legal bases commonly invoked (cite these in your complaint)
Revised Penal Code – Estafa (Art. 315): deceit to obtain money/property.
PD 1689 – Syndicated/Large-Scale Estafa: when committed by a group, penalties are heavier.
Cybercrime Prevention Act (RA 10175):
- Computer-related fraud (Sec. 4[b][2]);
- Computer-related identity theft (Sec. 4[b][3]);
- Related offenses (illegal access, data interference) if applicable.
Access Devices Regulation Act (RA 8484): if cards/“access devices” were used.
E-Commerce Act (RA 8792) and Rules on Electronic Evidence: e-docs/e-signatures are admissible; preserve integrity and authenticity.
SIM Registration Act (RA 11934): for SIMs used in the scam (helpful for tracing).
Illegal gambling laws may apply if the site is unlicensed; if it claims to be licensed, PAGCOR oversight becomes relevant.
Step-by-step: Filing with NBI-Cybercrime Division
- Prepare a complaint-affidavit (template below).
- Bring 1 valid government ID and evidence bundle (USB/cloud link + printed index).
- Visit NBI-CCD (main or regional office). You can also start with any NBI office and ask to be routed to CCD.
- Execute your affidavit under oath before the agent on duty; request a receiving copy with stamp.
- Provide contact details for updates; ask for your NBI case reference number.
- Ask the agent to issue data-preservation letters promptly (banks/e-wallets, domain hosts, social platforms, exchanges). Under cybercrime rules, service providers can be directed to preserve computer data for a limited time—speed matters.
- Expect subpoenas/letters to counterparties and, where needed, court-issued cybercrime warrants. Cooperate with requests for additional logs, devices, or clarifications.
- After case build-up, the NBI typically refers to the prosecutor for preliminary investigation.
Step-by-step: Filing with PNP-Anti-Cybercrime Group
- Go to the nearest PNP-ACG office or police station with cyber desk.
- Blotter the incident (succinct facts, amount lost, platforms used, dates). Keep the blotter number.
- Prepare/submit a complaint-affidavit with attachments. You may subscribe to it before the duty officer.
- Request preservation letters to be sent immediately to banks/e-wallets, telcos, platforms, and exchanges.
- Ask for your PNP-ACG case/reference number and the investigator’s name and contact.
- Monitor follow-ups and be available for clarificatory questions; the case will be referred to the prosecutor when evidence is sufficient.
Parallel reports that strengthen your case (and may unlock recovery)
Bank/e-Wallet/Exchange Disputes File formal disputes with your issuing bank (for card chargebacks) and transfering/receiving institutions. Provide the police/NBI reference number once available to support holds and reversals.
PAGCOR (if the site claims to be licensed) Complain to PAGCOR’s regulatory/complaints channel with your evidence and the operator’s branding, URLs, and payment rails. Ask them to verify licensing and take regulatory action.
National Privacy Commission (NPC) If your ID, selfies, or personal data were harvested or misused, file a complaint/incident report.
Tip: When you or the investigator serve requests to banks/e-wallets/exchanges, ask for: KYC details of the receiving account, account activity, and freezing/hold pending investigation. Attach your NBI/PNP reference and an evidence index.
Jurisdiction, venue, and courts
- Cybercrime cases are usually filed in Regional Trial Courts designated as cybercrime courts.
- Venue can be where any essential element occurred (e.g., where you sent funds or accessed the platform) or where the offender was traced, depending on the offense alleged. Your investigator and prosecutor will guide venue strategy.
Criminal vs. civil remedies
- Criminal case (through NBI/PNP then Prosecutor): aims to punish and can enable restitution.
- Civil action (separate or implied in criminal): for damages and recovery against identified individuals/entities (including platforms if legally liable).
- Ask counsel about pre-trial asset preservation (e.g., injunctions, writs) once respondents are identified.
Special notes for crypto-related scams
- Provide all wallet addresses, TXIDs, screenshots, and platform names.
- Identify whether you used a BSP-supervised VASP or a foreign exchange.
- Ask investigators to request KYC/transaction data and a hold from exchanges; many cooperate on receipt of official letters.
- If funds hop across chains, investigators may involve chain analytics; your precise TXIDs are crucial.
Follow-up and timelines
- Expect weeks to months for data requests and responses. Avoid duplicate filings; instead, send new evidence to your assigned agent/prosecutor under your case number.
- Keep a case diary: dates filed, reference numbers, persons spoken to, next steps promised.
Evidence checklist (attach to your affidavit)
- Chronology of events (dates/times, time zone).
- Names/handles/phone numbers/links used by the scammer.
- Chat exports and screenshots (unaltered).
- Deposit/withdrawal pages, error prompts, and “verification/fee” requests.
- Bank/e-wallet receipts, reference numbers, and statements.
- Crypto wallet addresses and TXIDs.
- Any advertising posts/pages and their URLs.
- A summary table of loss amounts per transaction.
What not to do
- Don’t send additional money to “unlock” your balance.
- Don’t delete the app/account until an investigator says it’s safe.
- Don’t share OTPs or install remote-access tools at anyone’s request.
- Don’t post doxxed identities publicly; it can harm the case and create risk for you.
Templates you can copy-paste
A) Complaint-Affidavit (outline)
Republic of the Philippines [City/Province]
I, [Full Name], Filipino, of legal age, with address at [Address], after being duly sworn, depose and state:
- I am the complainant in this case for Estafa (Art. 315, RPC) and violations of RA 10175 (Computer-Related Fraud/Identity Theft), among others.
- On [Date(s)], I was induced to register/deposit on an online platform identified as [App/Site Name, URLs, social media pages] which claimed [e.g., PAGCOR licensing/sure-win tasks/etc.].
- Following instructions from [Name/Handle/Number], I made the following transfers: [Table: date — amount — reference no./TXID — channel].
- When I attempted to withdraw [Amount] on [Date], the platform demanded [“verification fee,” “tax,” etc.] and blocked my account.
- I later discovered [facts showing deceit: fake licenses, blocked users, cloned site, etc.].
- I suffered a total loss of ₱[amount]. Attached as Annexes “A” to “__” are true copies of chats, screenshots, receipts, and other electronic evidence.
- I respectfully request investigation, issuance of data-preservation letters/warrants as appropriate, and the filing of charges against the responsible persons identified as [known names/handles/numbers/IPs if any].
Affiant further says naught.
[Signature over Printed Name] [Gov’t ID Type & No.] Subscribed and sworn to before me this [date] in [city]. Affiant personally appeared and presented the above ID.
B) Evidence Index (sample)
Annex | Description | Source/Link | Hash/Notes |
---|---|---|---|
A | Chat export with @User (Jan 3–10, 2025) | Messenger ZIP | Exported unchanged |
B | Deposit receipts (GCash/Bank) | Ref nos. listed | |
C | Wallet address & TXIDs | Block explorer links | Copied verbatim |
C) Bank/e-Wallet Dispute Letter (short form)
To: Disputes/Fraud Team, [Bank/e-Wallet] Subject: Urgent Fraud Dispute – Online Casino Scam I am disputing the following transactions connected to an online casino scam: [list with date, amount, reference]. A criminal report has been filed under [NBI/PNP case number if available]. Please place an immediate hold on the receiving account(s), initiate chargeback/reversal where applicable, and preserve related logs and KYC. Attached are supporting documents. Kindly confirm actions taken and a contact person for coordination with investigators. [Name, contact]
D) Data Preservation Request (for investigators or your cover letter)
Please preserve subscriber information, access logs, IP logs, device fingerprints, chat/content data, transaction and KYC records, and any authentication artifacts relating to [accounts/wallets/URLs/numbers] from [date range], to support an ongoing cybercrime investigation. Case Ref: [number].
FAQs
Do I need a lawyer to file with NBI/PNP-ACG? Not required to start, but highly recommended—especially for complex/large losses or cross-border funds.
Is there a filing fee? Police blotters and crime reports generally do not have filing fees. Notarization and document reproduction are on you.
Can I file if I don’t know the scammer’s real name? Yes. Provide all nicknames, handles, numbers, URLs, wallet addresses, and transactions. Investigators can trace through service providers.
What if the site claims to be PAGCOR-licensed? Report anyway. Also complain to PAGCOR and your bank/e-wallet. If it’s truly licensed, regulators can pressure the operator; if fake, that supports the deceit element.
Can I recover my money? Sometimes—especially if holds/freezes are placed quickly and recipients are domestic. Cross-border recovery is harder but still worth pursuing.
Practical pointers that help cases succeed
- Clarity beats volume. Provide a clean timeline and an indexed evidence bundle.
- Originals matter. Keep raw exports (not just screenshots). Don’t crop metadata.
- Speed saves money. The sooner holds/preservation letters go out, the better the recovery odds.
- One voice to institutions. After you have a case number, route updates through your assigned agent to avoid duplication.
If you’d like, I can turn this into a fill-in-the-blanks affidavit and evidence index tailored to your facts, or help you structure your bundle for NBI-CCD and PNP-ACG submission.