How to Report Online Scams in the Philippines

How to Report Online Scams in the Philippines: A Comprehensive Legal Guide

The Philippines has one of the highest rates of online fraud victimization in Southeast Asia. Investment scams, phishing, romance scams, fake online selling, job offer scams, and cryptocurrency fraud collectively cost Filipinos billions of pesos annually. Reporting these crimes is not only a civic duty but a critical step in evidence preservation, perpetrator prosecution, and potential recovery of funds.

This article provides an exhaustive, up-to-date (as of December 2025) guide on the legal framework, reporting procedures, competent authorities, evidentiary requirements, and practical remedies available under Philippine law.

I. Governing Laws and Punishable Acts

Online scams are prosecuted under a combination of special penal laws and the Revised Penal Code (Act No. 3815).

  1. Republic Act No. 10175 (Cybercrime Prevention Act of 2012, as amended by RA 11449)

    • Section 4(a)(1): Illegal Access
    • Section 4(a)(2): Data Interference
    • Section 4(a)(3): System Interference
    • Section 4(a)(6): Cyber-squatting
    • Section 4(b)(3): Computer-related Fraud
    • Section 4(c)(1): Computer-related Identity Theft
    • Section 4(c)(2): Computer-related Libel (often used in sextortion cases)
    • Section 6: All crimes defined in the Revised Penal Code committed through ICT are punished with one degree higher penalty.
  2. Revised Penal Code

    • Article 315: Estafa (swindling) through false pretenses – the most commonly applied provision in online scams
    • Article 318: Other Deceits
    • Article 183: False Testimony (used in fake document cases)
  3. Republic Act No. 10173 (Data Privacy Act of 2012) – for scams involving unauthorized processing of personal data

  4. Republic Act No. 11934 (SIM Registration Act) – violations involving unregistered SIMs used in scams

  5. Republic Act No. 12010 (Anti-Financial Account Scamming Act – AFASA, signed July 2024)

    • Specifically penalizes money mules, social engineering schemes, and financial account scams with penalties of up to 20 years imprisonment and fines of up to ₱2,000,000.
  6. Bangko Sentral ng Pilipinas Circulars on e-banking and consumer protection (for bank-related phishing and unauthorized transactions)

II. Competent Authorities for Reporting and Investigation

Victims may report to any of the following agencies. Multiple reporting is allowed and encouraged.

  1. Philippine National Police Anti-Cybercrime Group (PNP-ACG)
    Primary investigating agency for most online scams.

  2. National Bureau of Investigation Cybercrime Division (NBI-CCD)
    Handles high-profile cases and those involving international elements.

  3. Cybercrime Investigation and Coordinating Center (CICC)
    Coordinates multi-agency response and operates the national cyber tip hotline.

  4. Department of Justice – Office of Cybercrime (DOJ-OOC)
    Handles preliminary investigation and prosecution.

  5. Bangko Sentral ng Pilipinas (BSP) – for bank/PesoNet/InstaPay/GCash-related fraud

  6. Securities and Exchange Commission (SEC) – for investment scams and unregistered online lending apps

  7. National Privacy Commission (NPC) – when personal data was stolen or misused

III. Step-by-Step Reporting Procedure

Step 1: Preserve Evidence Immediately

Do NOT delete conversations, messages, or transactions.

Take the following:

  • Screenshots of chats (GCash, Messenger, Viber, Telegram, WhatsApp, etc.) with timestamps visible
  • Full screenshots of fake websites or phishing links
  • Transaction receipts (GCash, Maya, bank transfers, cryptocurrency wallet addresses)
  • Bank statements showing unauthorized transfers
  • Photos of fake IDs presented by scammers
  • Call recordings (if applicable)
  • Complete URLs of fake websites or social media profiles

Save everything in a dedicated folder and back it up.

Step 2: Report to the Financial Institution or Platform Immediately

  • GCash/Maya/ShopeePay: Use in-app reporting + call hotline within 24 hours for possible reversal
  • Banks: Report unauthorized transactions within 24–48 hours (BSP Circular 1098 requires banks to shoulder losses if reported promptly and victim is not negligent)
  • Social media: Report fake accounts to Facebook, Instagram, TikTok, etc.

Step 3: File a Formal Complaint

Choose any of the following options (filing in multiple agencies is recommended):

A. Online Filing (Fastest)

  • PNP-ACG cybercrime portal: Upload evidence and receive reference number instantly
  • NBI Cybercrime online complaint form
  • CICC 1326 hotline

B. Walk-in Filing

  • Nearest police station (Barangay → Municipal/City Police → PNP-ACG referral)
  • NBI Clearance Center or regional offices
  • File affidavit of complaint with supporting documents

C. Notarized Complaint-Affidavit (Required for DOJ/NBI prosecution) Prepare a detailed sworn statement containing:

  • Personal circumstances of complainant
  • Chronology of events
  • Amount defrauded
  • Details of scammer (name used, mobile numbers, bank accounts, wallet addresses, social media accounts)
  • Attached evidence marked as Annexes

Step 4: Follow-up and Case Build-up

  • You will receive a case reference number
  • Investigator may require additional affidavits or clarificatory questioning
  • Cooperate fully – cases move faster with victim participation

IV. Special Procedures for Specific Scam Types

  1. Investment Scams (e.g., fake crypto/trading platforms)
    Report to SEC + PNP-ACG + BSP (if funds went through banks/e-wallets)

  2. Online Selling Scams (Shopee/Lazada/Facebook Marketplace)
    Report to platform + PNP-ACG. If parcel contains illegal items (common modus), report to Philippine Drug Enforcement Agency or Bureau of Customs.

  3. Romance/Sextortion Scams
    PNP-ACG Women and Children Cybercrime Protection Unit specializes in these cases. Victims may request confidentiality.

  4. Job Scams (fake recruitment agencies)
    Department of Migrant Workers (DMW) for overseas job scams; POEA licensing violation may be filed.

  5. Online Lending App Harassment
    SEC for unregistered lenders + NPC for data privacy violations

V. Possibility of Fund Recovery

Recovery rates remain low (<10%), data-preserve-html-node="true" but possibilities exist:

  1. Bank/GCash reversals (if reported within 24–72 hours and account not yet withdrawn)
  2. Court-ordered asset freezing via DOJ/NBI
  3. Civil case for sum of money with damages under Article 19–21, Civil Code
  4. Insurance claims (some banks offer fraud insurance)

VI. Preventive Measures and Victim Rights

  • Enable 2FA everywhere
  • Never share OTPs
  • Verify investment platforms with SEC (https://www.sec.gov.ph)
  • Use only registered e-wallets and banks
  • Victims have the right to:
    • Free legal assistance from Public Attorney’s Office (RA 9406)
    • Confidentiality under RA 10175
    • Speedy disposition under RA 8493 (Speedy Trial Act)

Reporting online scams in the Philippines is straightforward, multi-channel, and increasingly digital. Every report contributes to the growing database that law enforcement uses to track and dismantle syndicates. Victims who act quickly and preserve evidence have the highest chances of justice and potential recovery.

Do not hesitate. Report immediately. The scammer who victimized you today is targeting someone else tomorrow.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.