How to Report an Online Scam in the Philippines
A practitioner-oriented guide to the legal framework, the correct offices to approach, and the step-by-step mechanics of filing a complaint
Disclaimer: This article is for general information only and does not constitute legal advice. Cyber-fraud cases move quickly; consult a Philippine lawyer or accredited law-enforcement officer for advice on your particular facts.
1. Why reporting matters
- Cyber-fraud is punishable under several penal statutes (chiefly R.A. 10175, the Cybercrime Prevention Act of 2012).
- Victims who file promptly preserve digital evidence and activate the powers of law-enforcement to freeze assets, trace IP addresses, and restore funds.
- A formal complaint also lays the foundation for civil recovery and for administrative sanctions against erring banks, e-wallets, and telcos.
2. Legal bases you will invoke
| Statute / Rule | Key Offences & Remedies |
|---|---|
| R.A. 10175 (Cybercrime Prevention Act) + A.M. No. 17-11-03-SC (Rules on Cybercrime Warrants) | Hacking, phishing, online fraud, computer-related identity theft; warrants to Preserve, Disclose, Intercept, Search & Seize computer data |
| R.A. 8484 (Access Devices Regulation Act) | Unauthorized use of credit/debit cards, e-wallet accounts |
| R.A. 8799 (Securities Regulation Code) & R.A. 11232 (Revised Corporation Code) | Investment scams, Ponzi-type solicitation |
| R.A. 9160 (Anti-Money Laundering Act) & BSP Circulars 1105/1140 | Freezing/forthwith return of funds in banks and VASP/e-money issuers |
| Consumer Act (R.A. 7394) & DTI FTEB Rules | E-commerce purchase scams, deceptive sales |
| NPC Advisory S-2012-03 (Data Breach Rules) | When the scam involves leakage of personal data |
| Special laws: R.A. 9775 (Child Pornography), R.A. 9208/10364 (Trafficking), R.A. 11927 (SIM Registration Act) for scam SMS |
3. The agencies you can approach
| Agency / Unit | When to choose them | How to reach them |
|---|---|---|
| PNP Anti-Cybercrime Group (ACG) | Any cyber-fraud, phishing, identity theft, romance scam, online libel | Hotline 0998-598-8116 · Landline (02) 8414-1560 · Walk-in at Camp Crame or any ACG regional office |
| NBI Cybercrime Division (CCD) | Large-value loss, transnational syndicates, if suspect is unknown or located abroad | Landline (02) 8523-8231 loc. 3484 · “NBI Online Complaint” portal |
| Cybercrime Investigation & Coordinating Center (CICC) — Inter-Agency Response Center 1326 | 24 × 7 triage for scams, DDoS, data leaks; they route you to PNP/NBI, CERT-PH, or regulator | Dial 1326 (nationwide) |
| SEC Enforcement and Investor Protection Department (EIPD) | Unregistered investment offers, crypto/forex Ponzi schemes | Email epd@sec.gov.ph · Landline (02) 8818-6047 |
| Bangko Sentral ng Pilipinas (BSP) Consumer Assistance Mechanism & AMLC | Unauthorized bank/e-money transfers, failure of a bank/e-wallet to freeze funds | Hotline FSR-CD; email consumeraffairs@bsp.gov.ph · AMLC online portal |
| DTI Fair Trade Enforcement Bureau (FTEB) | Fake online sellers, non-delivery of goods | DTI Hotline 1384 · e-commerce complaint form |
| National Privacy Commission (NPC) | Personal-data theft, doxxing, account takeover due to a data breach | Email complaints@privacy.gov.ph |
| DICT-CERT-PH | Cyber-incidents requiring technical forensics, malware takedown | Email certph@dict.gov.ph |
Tip: If you are unsure, file simultaneously with PNP-ACG and NBI-CCD. Double filing is allowed because cyber-offences are continuing crimes.
4. Collecting evidence — your first 24 hours
- Do NOT delete anything.
- Take full-frame screenshots (showing the task bar / device clock).
- Save chat logs, emails, URLs, headers, invoices, e-wallet reference numbers, ATM slips, courier receipts.
- Print or export in PDF where possible; label each file chronologically.
- Prepare an Affidavit of Complaint (see § 7 below).
- Notify your bank or e-wallet provider in writing and request a “freeze” under BSP Circular 1105 and AMLA §10.
- Change passwords, enable multi-factor authentication, and log the time you did so.
5. Step-by-step: Filing a criminal complaint
| Step | What happens | Practical notes |
|---|---|---|
| 1. Inquiry / desk evaluation | Duty officer checks jurisdiction and sufficiency of evidence | Bring two (2) government IDs; minor complainants must appear with parent/guardian |
| 2. Sworn Affidavit of Complaint | You narrate facts, identify laws violated, attach evidence | Have it notarised on-site or before a prosecutor to reduce later challenges |
| 3. Case build-up | Digital forensic exam, issuance of Warrant to Disclose Computer Data (WDCD) or Data Preservation Order | Expect requests for original devices; ask for a formal chain-of-custody receipt |
| 4. In-quest / regular preliminary investigation (DOJ/OCP) | Prosecutor determines probable cause; respondent is subpoenaed | Cybercrime venue: anywhere the computer system was used, data stored, or damage felt (R.A. 10175 § 21) |
| 5. Filing of Information in court | Case raffled to a designated Cybercrime court; arrest warrant may issue | Metro Manila courts often allow electronic testimony for foreign platforms |
| 6. Trial & judgment | Restitution and damages may be ordered; courts may order permanent account blocking and domain takedown | Cyber-fraud carries max. imprisonment +₱200k fine per act, plus accessory penalties |
6. Parallel or alternative remedies
- Civil action for damages under Art. 33 (fraud) or Art. 19-20-21 (abuse of rights) of the Civil Code.
- Small claims (≤₱1 million) for straightforward refund cases; now allowed for online filing.
- Charge-back / dispute with card issuer within 90 days under R.A. 10870 (Philippine Payments Act) rules.
- BSP mediation (15-day conciliation, free).
- SEC cease-and-desist order for investment scams—often faster than a criminal case.
- NTC takedown: submit phishing domain/IP to the National Telecommunications Commission for blocking under Memorandum Order 10-12-2017.
7. Outline of a strong Complaint-Affidavit
- Title & Parties – “Affidavit-Complaint for Violation of R.A. 10175 in Relation to Art. 315(2)(a), RPC.”
- Personal details – Name, age, address, citizenship.
- Statement of capacity – “I am the lawful owner of BPI Account No. xxxx-xxxx-xx.”
- Narrative of facts in numbered paragraphs (dates, amounts, platforms, IP addresses).
- Elements of the offence – tie each fact to the statute.
- Damages suffered – monetary loss + emotional distress (with receipts / medical abstracts).
- Prayer for relief – issuance of cyber-warrants, preservation of data, return of funds, prosecution.
- Verification & jurat – sworn before prosecutor or notary.
Attach an Index of Evidence so the investigator can cross-reference quickly.
8. Special scenarios & bespoke contacts
| Scenario | Extra step to take |
|---|---|
| GCash or Maya wallet hacked | Email support@gcash.com / support@maya.ph with incident ticket and furnish BSP-CAM for faster freeze |
| Cryptocurrency rug-pull | Report wallet address to PDAX/Coins.ph and SEC; request blockchain analytics from CICC |
| Online love scam with foreign national | Ask PNP-ACG to alert INTERPOL via I-24/7; attach passport copy or photos |
| Investment webinar promising 3 % daily ROI | Send screenshots to SEC-EIPD; they can issue a public advisory within 48 hrs |
| SMS lottery scam | Forward message to #7726 (SPAM) and file under SIM Registration Act §10 for number de-activation |
9. Timelines you should know
- Freeze order on bank/e-wallet – within 24 hours of AMLC notice or BSP directive.
- Cyber-warrant issuance – court must act within 10 days (A.M. 17-11-03-SC § 11).
- Data Preservation Order – valid up to 90 days; extendable once.
- Prescriptive period – Cyber-fraud prescribes in 12 years (Art. 90, RPC as amended), but do not wait; digital traces fade rapidly.
10. Practical tips from prosecutors & investigators
- File early, file complete. A half-baked complaint slows everything.
- Label your flash drive with name, case title, hash value.
- Remain accessible. If you change numbers/emails, inform the investigator in writing; otherwise subpoenas bounce.
- Beware “Case-fixers.” Only transact at official offices; receipts are official PNP/DOJ documents with OR numbers.
- Use English or Filipino. Regional dialect affidavits must have sworn translations.
11. Sample one-page checklist before you head to the station
- Two government-issued IDs
- Printed & soft-copy screenshots (chronological)
- Transaction receipts / reference numbers
- Device(s) used (phone, laptop, external drive)
- Draft Complaint-Affidavit + USB copy
- Approx. ₱200–₱300 for notarisation & photocopies
- A companion witness (ideal but not required)
Key Take-aways
- Multiple doors, one crime scene. You may—and often should—file with PNP ACG and NBI CCD, while simultaneously alerting BSP/SEC/DTI.
- Evidence is king. Time-stamped, hash-verified digital evidence sharply increases the odds of asset recovery and conviction.
- Stay engaged. Follow up in writing every 30 days; the Rules on Expedited Trials for Cybercrime cap postponements but only if the complainant appears.
Remember: The sooner you mobilise the cyber-crime apparatus, the better your chance of getting your money—and justice—back.
Prepared June 13 2025 | All statutes cited are in force as of this date.