If you or someone you know has lost money to an online scam in the Philippines—whether through a fake seller on Facebook or Instagram, a fraudulent investment pitch on Viber or Telegram, a phishing link that emptied a GCash or bank account, or a romance scam that built trust before requesting transfers—you are not alone, and you have clear legal avenues to report it. Taking prompt, documented action can help authorities investigate, disrupt scam networks, preserve evidence for prosecution, and in some fortunate cases support efforts to trace or freeze funds. This guide provides a practical, step-by-step explanation of how to file an online scam complaint under Philippine law, the agencies that handle these cases, the evidence required, realistic timelines and outcomes, and what to expect as an ordinary victim or a foreigner dealing with Philippine-related fraud.

Online scams typically involve estafa (swindling) under Article 315 of the Revised Penal Code, where the perpetrator uses deceit or false pretenses to induce the victim to part with money or property, causing damage. When the deception, communication, transaction, or interference occurs through a computer system, information and communications technology (ICT), or online platform, the case falls under the Cybercrime Prevention Act of 2012 (Republic Act No. 10175). Section 6 of RA 10175 provides that any crime under the Revised Penal Code or special laws committed “by, through and with the use of” ICT carries a penalty one degree higher than the usual penalty, plus additional fines that can reach PHP 200,000 or more, commensurate with the damage caused. Specific provisions such as Section 4(b)(2) on computer-related fraud (unauthorized input, alteration, deletion of data, or interference with a computer system causing damage with fraudulent intent) directly apply to many online scams. Jurisdiction lies with the Regional Trial Court, particularly designated special cybercrime courts in major cities.

Legal Basis and Your Rights as a Victim

The primary legal foundations are:

Revised Penal Code, Article 315 (Estafa) — Covers deceitful schemes that cause financial damage. The essential elements are (1) deceit or false representation, (2) reliance on that deceit by the victim, and (3) resulting damage or prejudice.
RA 10175 (Cybercrime Prevention Act of 2012) — Elevates traditional crimes when committed online and gives law enforcement stronger tools for digital evidence. Section 10 designates the Philippine National Police Anti-Cybercrime Group (PNP ACG) and the National Bureau of Investigation Cybercrime Division (NBI CCD) as the primary agencies for investigation. Section 14 allows authorities, with proper process, to obtain subscriber information, traffic data, and other records from service providers. Section 21 establishes broad jurisdiction: a case can proceed in the Philippines if any element occurred here, if a computer system partly situated in the country was used, or if damage was caused to a person in the Philippines—even if the scammer is abroad or anonymous.
Rules on Electronic Evidence (A.M. No. 01-7-01-SC) — Govern how screenshots, chat logs, transaction records, and digital files are authenticated and admitted in court. Proper preservation (original files, metadata, timestamps visible) strengthens your case significantly.
Supporting frameworks include the Civil Code provisions on damages (Articles 2176, 20, 21, 33) for possible civil recovery and the 2019 Revised Rules on Criminal Procedure (or current version) for preliminary investigation and prosecution.

You have the right to report without identifying the exact real name of the scammer—complaints against “unknown persons using [specific username or number]” are routinely accepted. Reporting also creates an official record that can support parallel actions such as requesting platforms to take down scam accounts or financial institutions to investigate transactions.

Step-by-Step Practical Guide to Filing an Online Scam Complaint

Act quickly. Digital evidence can disappear, accounts can be deleted, and funds can move through multiple “money mule” accounts within hours or days.

Preserve all evidence immediately (do this before anything else)
Take clear screenshots or screen recordings that show full conversation threads, usernames/handles, profile links or URLs, timestamps, dates, and any promises or representations made. Export or photograph entire chat histories. Save original transaction records from GCash, Maya, banks, remittance apps, or crypto wallets (include reference numbers, amounts, dates, and recipient details). Note your own device and account details used. Do not delete anything. Store originals securely and make working copies. Under the Rules on Electronic Evidence, authenticity can be proven through your testimony, metadata, or service provider certification.
Report to the platforms and financial institutions right away
Report the scam account or post on Facebook/Meta, Instagram, TikTok, or whichever platform was used—they often remove fraudulent profiles and may preserve data for authorities. Contact your bank, e-wallet provider (GCash, Maya), or remittance company immediately to report the fraudulent transaction and request a freeze or investigation. Many have dedicated fraud teams that coordinate with law enforcement. This step can sometimes stop further withdrawals or flag mule accounts.
Contact the Cybercrime Investigation and Coordinating Center (CICC) Inter-Agency Response Center (I-ARC) first for rapid assistance
Call the 24/7 hotline 1326 (toll-free). Alternative numbers are often listed on cicc.gov.ph or scamwatchpilipinas.com. The I-ARC coordinates real-time responses among DICT, PNP, NBI, NTC, and financial regulators. They can help flag or freeze suspicious accounts with banks and e-wallets while you prepare a full complaint. You can also email report@cicc.gov.ph or use their online reporting form at cicc.gov.ph/report/. This is often the fastest way to get immediate protective action on the financial side.
File a formal complaint with PNP ACG or NBI CCD
These are the specialized agencies under RA 10175 Section 10. Most day-to-day online scam cases go to PNP ACG (headquarters at Camp Crame, Quezon City, with regional units nationwide). For complex, high-value, transnational, or organized cases, go to NBI CCD (main office on Taft Avenue, Manila, or regional offices).
- How to file: Use the agency’s online portal or form where available (check acg.pnp.gov.ph or nbi.gov.ph), email (acg@pnp.gov.ph or ccd@nbi.gov.ph), dedicated hotlines (PNP ACG examples include (02) 8723-0401 local 7491 or published regional numbers; NBI CCD at (02) 8523-8231 locals 3455/3456), or walk in. Personnel often assist in drafting or swearing the statement.
- Prepare a Complaint-Affidavit: A written, sworn narrative in English or Filipino detailing who you are, how contact began, the false representations made, the sequence of events, exact amounts lost, and a list of attached evidence. Include all known suspect identifiers (usernames, phone numbers, emails, bank/wallet details, links). You can swear it before a notary or before an authorized officer at the agency (they frequently help). Attach a photocopy of your valid government-issued ID (passport, driver’s license, UMID, etc.).
- Local police stations can take an initial blotter entry, but they should refer cyber-related cases to ACG or NBI.
Follow through with the investigation and prosecution
You will receive a reference or case number. Investigators may request additional statements, device access for forensics (with your consent or proper process), or coordination with platforms and banks. They can seek court orders for data preservation and disclosure. If probable cause is found, the case is referred to the Office of the City or Provincial Prosecutor for preliminary investigation under the Rules of Court. The prosecutor evaluates evidence, subpoenas the respondent if identified, and decides whether to file an Information in court. If filed, the case proceeds before a designated cybercrime court in the Regional Trial Court. You may be required to testify.

Required Documents, Evidence, and Practical Realities

Core requirements:

Valid government-issued photo ID
Sworn Complaint-Affidavit (narrative + evidence list)
Digital evidence package: screenshots/recordings with visible timestamps and context, full chat exports, transaction proofs, suspect profile links or numbers
Proof of loss (bank/e-wallet statements, receipts)
Witness affidavits, if any

Fees: Filing the criminal complaint with PNP or NBI is generally free. Notary fees for a private notary are modest (typically a few hundred pesos). There are no filing fees for the initial criminal complaint itself. Civil recovery actions have separate docket fees based on the amount claimed.

Timelines (approximate and variable due to case volume and complexity):

Initial agency assessment: days to a couple of weeks
Investigation and data requests: weeks to several months (digital trails go cold quickly)
Preliminary investigation by prosecutor: often targeted at 10–60 days under the rules, but backlogs occur
Full court trial: commonly 1–3 years or longer in practice, though cybercrime courts aim for more focused handling

Recovery of funds is never guaranteed. Success depends on quick freezing of accounts, identification of money mules (often themselves victims), and whether assets remain traceable. Many victims recover nothing or only partial amounts through restitution orders in a final judgment. Still, reporting contributes to broader efforts that dismantle networks and protect others.

Common Challenges and Scenarios for Ordinary Filipinos and Foreigners

Many victims delete messages out of frustration or embarrassment—never do this. Others only have partial screenshots without context or timestamps, weakening the case. Scammers frequently use anonymous accounts, VPNs, or foreign-based operations, making full identification and extradition slow or impossible without strong international cooperation through the DOJ Office of Cybercrime. Money often passes through multiple “mule” accounts opened by people recruited with small incentives, complicating tracing.

For Filipinos abroad or foreigners victimized by Philippine-linked scams: You can still file. If you are in the Philippines, proceed normally. If abroad, many agencies accept initial reports via email or online portals; you may later need to execute a sworn affidavit (potentially apostilled for formal use) or appoint a representative. Jurisdiction exists if damage occurred to a person in the Philippines or if Philippine computer systems or elements were involved. Reciprocity and mutual legal assistance treaties apply for cross-border cases, though these processes take time.

Smaller losses may receive less intensive investigation than large organized schemes, but every report adds to intelligence databases and can trigger action against repeat offenders. Romance scams, online shopping fraud, fake investment or “double-your-money” schemes, and impersonation of government or bank officials remain among the most reported.

Frequently Asked Questions

What is the very first thing I should do after realizing I was scammed online?
Preserve every piece of digital evidence immediately—screenshots with timestamps, full chats, transaction records—before deleting or altering anything. Then contact your bank or e-wallet provider to report the transaction and request a freeze. Call the CICC hotline 1326 for rapid coordination help.

Can I file a complaint if I only know the scammer’s username, fake name, or phone number?
Yes. Complaints against “unknown persons using [specific username or number]” are accepted. Investigators use subpoenas and data requests under RA 10175 to trace subscriber information and IP addresses.

How long does the whole process usually take?
Initial reporting and agency intake can happen within days. Full investigation and prosecution often stretch over many months to years due to evidence gathering, preliminary investigation, and court schedules. Acting fast improves outcomes because digital evidence and financial trails degrade quickly.

Will filing a complaint help me get my money back?
It increases the possibility. Authorities can request freezes and, if successful prosecution occurs, courts may order restitution. However, full recovery is not guaranteed, especially if funds have already been withdrawn or layered through multiple accounts. Parallel civil action for damages is also an option.

Do I need to hire a private lawyer to file the complaint?
No. You can file directly with PNP ACG or NBI, and their personnel often assist in preparing the sworn statement. A lawyer can help with complex cases, civil recovery, or if you want stronger representation during preliminary investigation and trial.

What if the scammer is based abroad or the platforms are foreign?
Philippine authorities can still investigate if any element (damage, use of Philippine systems or victims, or perpetrator links) occurred here. The DOJ Office of Cybercrime handles international cooperation and mutual legal assistance. Reporting remains valuable even if full enforcement is challenging.

Is there a difference between reporting to PNP ACG versus NBI?
Both are authorized under RA 10175. PNP ACG handles the majority of everyday online scam cases and has nationwide presence. NBI CCD often takes more complex, high-value, or transnational organized cases. You may report to either or both; they coordinate when appropriate.

Can I file both a criminal complaint and a civil case for my money?
Yes. The criminal case (estafa/cybercrime) focuses on punishment. You can pursue a separate civil action for recovery of the sum of money and damages, or in some instances, civil liability is deemed instituted with the criminal action. Consult the specifics of your case for strategy.

What happens if I ignore small scams or feel embarrassed to report?
Many victims hesitate, but every report helps authorities map networks, identify patterns, and protect future victims. Scammers rely on under-reporting. Documenting the incident creates an official record that can support insurance claims (if any) or other remedies.

Key Takeaways

Online scams are prosecuted primarily as estafa under the Revised Penal Code, elevated by one degree in penalty when committed through ICT under RA 10175 (Cybercrime Prevention Act of 2012).
Start by preserving complete digital evidence, reporting to platforms and your financial provider, then calling the CICC 24/7 hotline 1326 for immediate coordination help.
File a formal sworn Complaint-Affidavit with PNP Anti-Cybercrime Group or NBI Cybercrime Division—the specialized agencies under the law—with your ID and all supporting evidence.
Expect investigation, possible preliminary investigation by the prosecutor, and trial in a designated cybercrime court; timelines vary but acting quickly is critical.
Recovery is not guaranteed but reporting strengthens the chance of freezes, tracing, and restitution while contributing to broader enforcement.
Foreigners and victims abroad can file, with jurisdiction possible when damage occurs in the Philippines or Philippine elements are involved; initial reports can often begin online or via email.
You do not need a lawyer to start the complaint process, though professional assistance helps in complex or high-value matters.

Reporting an online scam is a concrete, empowering step that upholds accountability under Philippine law. The sooner you act with complete, well-preserved evidence, the stronger your position becomes. Authorities have dedicated units and tools precisely for cases like yours.