How to Report Online Scams in the Philippines

A Comprehensive Legal Guide (July 2025)

1. Why Reporting Matters

Online scams—from bogus e‑commerce sales to fraudulent investments—violate criminal, civil, and even administrative laws. Swift, well‑documented reporting:

Stops ongoing losses (freeze or trace funds).
Builds prosecutable cases (digital footprints degrade quickly).
Creates official records you can rely on in civil or small‑claims actions.

2. Key Philippine Laws Covering Online Scams

Law	Salient Provisions	Typical Offences Covered
Cybercrime Prevention Act of 2012 (RA 10175)	Sec. 4(b)(2)/(3) identity theft, fraud; Sec. 6 elevates penalties for crimes committed via ICT	Phishing, fake online shops, account takeovers
Revised Penal Code (RPC)	Art. 315 estafa (swindling); Art. 318 other deceits	Investment & love scams, “paluwagan” fraud
E‑Commerce Act (RA 8792)	Admits electronic data/messages as evidence; Sec. 33 penalties for computer‑related fraud	Manipulated screenshots, forged e‑signatures
Access Devices Regulation Act (RA 8484)	Fraudulent use of credit/debit cards & e‑wallets	Carding, unauthorized GCash/PayMaya transfers
Consumer Act (RA 7394) & DTI E‑Commerce JMCs	False/misleading online sales practices	Non‑delivery, fake goods
Securities Regulation Code (RA 8799) & RA 11765 (Financial Products & Services Consumer Protection Act)	Unregistered securities, Ponzi schemes	HYIP, crypto token “pre‑sales”
Data Privacy Act (RA 10173)	Obligations when personal data is leaked during a breach	Phishing that harvests IDs

Penalties typically range from ₱100 k fines to 20 years’ imprisonment; estafa may include triple indemnity.

3. Competent Authorities & Their Jurisdictions

Agency	Typical Scope	Contact Channels*
NBI Cybercrime Division (NBI‑CCD)	Nationwide cyber‑fraud, bank/e‑wallet hacking, large‑scale estafa	Email: ccd@nbi.gov.ph • Trunkline: (02) 8523‑8231 loc 3456
PNP Anti‑Cybercrime Group (PNP‑ACG)	Real‑time rescue, rapid takedown of malicious sites/pages, mobile‑based scams	Hotline: (02) 8414‑1560 • 0998‑598‑8116 (Globe)
Securities and Exchange Commission (SEC‑EIPD)	Investment scams, pyramid/Ponzi	eipd@sec.gov.ph
Bangko Sentral ng Pilipinas (BSP) & AMLC	Unauthorized fund transfers, freezing assets	consumeraffairs@bsp.gov.ph
Department of Trade & Industry – Fair Trade Enforcement Bureau (DTI‑FTEB)	Consumer disputes ≤ ₱500 k, deceptive e‑commerce	#DTI (1‑384) hotline
National Privacy Commission (NPC)	Scams involving personal‑data breaches	complaints@privacy.gov.ph

*Hotlines current as of July 2025; verify before dialing.

4. Evidence Preservation Checklist

Item	How to Secure	Legal Basis
Full URL of fake page, seller profile, or transaction	Copy/paste into a text file; include date/time stamp	Rules on Electronic Evidence (REE) Rule 3, Sec. 2
Screenshots/Screen‑record of chats, listings, invoices	Prefer screen‑record to show scrolling; do not crop	REE Rule 11 on authenticity
Emails/SMS headers showing metadata	Use “Show Original” (Gmail) or export .eml; forward unopened SMS to 7726 (GSMA spam)	REE Rule 5
Bank/e‑wallet logs	Download PDF from portal or request certified true copy	BSP Circular 1022 on e‑payments
Any shipping receipts / waybills	Keep original or notarized photocopies	Best evidence rule (Rules of Court Rule 130)

5. Step‑by‑Step Reporting Procedure

Step 1: Draft a Sworn Statement

Narrate events chronologically—dates, platform, amounts.
Attach Annexes for each piece of documentary or electronic evidence.
Have it notarized or executed before an in‑house prosecutor/NBI agent (Jurat).

Step 2: File a Complaint with Law Enforcement

Where? Your choice of NBI‑CCD, PNP‑ACG (if urgent), or the fiscal’s office in the scammer’s location.
Bring: Two printed sets and one USB containing the e‑evidence.
Fees: None for filing; you pay only for certifications/copies if required.

Step 3: Parallel Administrative Reports

Banks/E‑wallets (GCash, Maya, Coins): Use their “Report Scam” in‑app forms ➔ trigger auto‑freeze under BSP Memorandum M‑2022‑051.
DTI for consumer transactions ≤ ₱500 k: File an e‑Complaint; mediation within 10 days.
SEC for investment scams: Email complaint with scanned ID and proof of payment; SEC may issue a CEASE & DESIST Order within 48 hrs for prima‑facie schemes.

Step 4: Civil or Small Claims (Optional but strategic)

Amount ≤ ₱400 k? Small‑Claims (AM 08‑8‑7‑SC as amended) ¬– no lawyer needed, decision in 30 days.
Above ₱400 k? Regular civil action for damages + estafa restitution.

Step 5: Monitor & Cooperate

Respond promptly to subpoenas/clarificatory hearings (prosecutor’s office).
Provide updated addresses/etc. so law enforcement can serve warrants of arrest (WOA) or freeze orders (AMLC).

6. Practical Tips for Faster Resolution

Consolidate complaints if multiple victims exist—classifying as “syndicated estafa” (RPC Art. 315 §2[a]) raises penalties and speeds AMLC intervention.
Request a “Hold Departure Order” from the prosecutor for large‑scale fraud when suspect identity is confirmed.
Use platform takedown portals: Facebook “Intellectual Property & Fraud” form, Shopee/Lazada “Report Seller” portal. Include NBI blotter number to compel quicker action.
Leverage Barangay Cyber Conciliation for small disputes (< ₱10 k) before filing in court (Katarungang Pambarangay Law) unless an exception applies (different cities, urgent relief).
Keep your devices unaltered until forensic imaging (especially if malware was involved).

7. Timelines & Prescriptive Periods

Offence	Prescriptive Period	Clock Starts
Cyber‑fraud under RA 10175	12 years (Sec. 6)	Date of discovery (People v. Tulagan, 2021)
Estafa ≥ ₱1.2 M	15 years (RPC Art. 315)	Date last deceitful act committed
Estafa < ₱1.2 M	10 years	Same
Violation of RA 8484	10 years	Date of unauthorized use
Consumer Act (DTI) actions	2 years	Date goods/services were received

8. Cross‑Border & International Cooperation

NBI/PNP may invoke Budapest Convention on Cybercrime (PH acceded in 2018) for Mutual Legal Assistance (MLAT).
Coordinate with Interpol I‑24/7 for red notices when suspects flee abroad.
For crypto scams: SEC & BSP communicate with FATF‑style regional bodies and request chain‑analysis from commercial blockchain intelligence firms.

9. Data Privacy & Victim Protection

NPC Advisory No. 2017‑03 allows lawful disclosure of personal data to law enforcement without consent if strictly necessary.
Victims may also file an NPC complaint if a platform leaked their data leading to a scam.

10. Common Pitfalls to Avoid

Pitfall	Consequence	How to Avoid
Deleting chat threads to “free space”	Spoliation; case may be dismissed	Back‑up before deleting
Sending docs via unsecured email	Tampering claims	Use password‑protected ZIP + courier hard copy to NBI
Accepting “refund” from scammer to drop case	Novation may bar criminal action if done after filing	Only accept through prosecutor‑approved compromise

11. Template: Contents of a Sworn Complaint‑Affidavit

Personal Circumstances of Affiant

Full Narrative (dates, platform, modus)

Particular Acts of Deceit (link to statutory elements)

Money Lost / Injury Suffered

List of Attached Annexes (A‑1 chat logs, A‑2 bank SOA, …)

Prayer (investigation, prosecution, asset freeze)

Jurat (notary public / prosecutor)

12. Final Takeaways

Act within 24 hours to maximise recovery—banks and e‑wallets can still trace or recall funds.
File in multiple fora concurrently (criminal, administrative, and civil) to create pressure.
Preserve every digital trace; courts now admit even video screen‑captures as best evidence.
Educate your circle: most Filipino victims first tell friends, not police—prompt reporting reduces secondary victimization.

Reporting is not merely retribution; it is a civic duty that starves cyber‑criminals of anonymity and impunity.

For checklists, affidavit templates, or further guidance, consult the DOJ “Cybercrime Complaints Manual” (2024 edition) or your nearest Integrated Bar of the Philippines (IBP) chapter’s legal aid desk.