The rapid digital transformation in the Philippines has led to a significant increase in cyber-enabled crimes. Under Philippine law, online scams are primarily governed by Republic Act No. 10175, otherwise known as the Cybercrime Prevention Act of 2012. This legislation treats crimes defined in the Revised Penal Code—such as swindling (estafa)—with higher penalties when committed through information and communications technology (ICT).

1. Legal Basis and Classifications

Online scams generally fall under Computer-related Fraud (Section 4(b)(2) of R.A. 10175). This involves the unauthorized input, alteration, or deletion of computer data or program with the intent of procuring an economic benefit for oneself or for another person.

Section 6 of R.A. 10175: "All crimes defined and penalized by the Revised Penal Code, as amended, and special laws, if committed by, through and with the use of information and communications technologies shall be covered by the relevant provisions of this Act: Provided, That the penalty to be imposed shall be one (1) degree higher than that provided for by the Revised Penal Code, as amended, and special laws, as the case may be."

Common Modalities

Phishing/Vishing/Smishing: Fraudulent attempts to obtain sensitive information (passwords, credit card details).
Investment Scams: Ponzi schemes or "double your money" offers promoted via social media.
E-commerce Fraud: Non-delivery of items or misrepresented goods from online sellers.
Love Scams: Emotional manipulation to solicit money from victims.

2. Immediate Steps for Victims

Before approaching the authorities, a victim must secure all digital evidence. Under the Rules on Electronic Evidence (REE), digital files are functional equivalents of paper documents.

Preserve Digital Evidence: Take screenshots of conversation threads, the scammer’s profile, transaction receipts, and URLs. Do not delete the original messages.
Document Transaction Details: Note down the account names, bank account numbers, or mobile wallet numbers (e.g., GCash, Maya) used by the perpetrator.
Report to the Platform: If the scam occurred on Facebook, Viber, or Telegram, use the internal reporting tools to flag the account.
Contact Financial Institutions: Immediately call your bank or e-wallet provider to request a "hold" on the transaction or the recipient's account, although this usually requires a police report.

3. Where to File a Formal Complaint

In the Philippines, there are two primary law enforcement agencies (LEAs) tasked with handling cybercrime:

Law Enforcement Agencies

Agency	Role	Contact Channels
PNP Anti-Cybercrime Group (PNP-ACG)	Principal agency for cybercrime investigation and field operations.	Camp Crame, Quezon City; Regional offices; "E-Complaint" website.
NBI Cybercrime Division (NBI-CCD)	Specialized investigation into complex technical fraud and international scams.	NBI Headquarters, Taft Ave, Manila; Regional NBI offices.
Cybercrime Investigation and Coordinating Center (CICC)	Inter-agency body for policy and rapid response (Inter-Agency Response Center).	Hotline 1326.

The Reporting Process

Walk-in Complaint: Visit the PNP-ACG or NBI-CCD office.
Affidavit-Complaint: You will be required to execute a sworn statement (affidavit) detailing the circumstances of the scam.
Technical Evaluation: Forensics experts will examine your device or the digital evidence provided to verify the authenticity of the logs.
Inquest or Preliminary Investigation: Once the perpetrator is identified, a complaint is filed with the Office of the Prosecutor to determine probable cause.

4. Penalties under Philippine Law

The penalties for online scams are severe due to the "one degree higher" rule.

Computer-related Fraud: Prision mayor (6 years and 1 day to 12 years) or a fine of at least ₱200,000.00, or both.
Estafa via ICT: If the elements of Estafa under Article 315 of the Revised Penal Code are met, the penalty is significantly increased when ICT is the means of commission.

5. Challenges and Important Considerations

Anonymity: Scammers often use "mule accounts" (rented bank/e-wallet accounts), making it difficult to trace the actual beneficiary.
Jurisdiction: If the scammer is based outside the Philippines, the PNP and NBI must coordinate with INTERPOL, which can prolong the process.
Prescription Period: Under R.A. 10175, the prescription period (the timeframe within which you can file a case) for cybercrimes is fifteen (15) years.

The Role of the Data Privacy Act (R.A. 10173)

While victims often want to "shame" scammers online, they should be cautious. Posting the scammer's personal information (even if they are a criminal) may lead to counter-suits for Cyber Libel or violations of the Data Privacy Act. It is always legally safer to submit identity information directly to the authorities.