The Philippines has one of the highest rates of online fraud victimization in Southeast Asia. From investment scams, romance scams, phishing, fake online selling, job offer scams, cryptocurrency fraud, loan app harassment, to identity theft, Filipinos lose billions of pesos annually to cyber fraudsters. Reporting these crimes properly is the only way to trigger criminal investigation, account freezing, asset recovery attempts, and eventual prosecution.
This article contains everything a victim, lawyer, or concerned citizen needs to know about reporting online scams under Philippine law as of December 2025.
I. Governing Laws and Punishable Acts
Republic Act No. 10175 (Cybercrime Prevention Act of 2012, as amended by RA 11449)
- Section 4(a)(1): Cybercrime of estafa (online fraud)
- Section 4(a)(2): Computer-related forgery
- Section 4(a)(3): Computer-related fraud
- Section 4(a)(6): Computer-related identity theft
- Section 4(b)(3): Content-related offenses (cyber libel, often used in tandem with scams)
Penalty: prision mayor to reclusion temporal + fines up to ₱1,000,000 or more.
Revised Penal Code (Act No. 3815)
- Article 315: Estafa through deceit (most common charge for online scams)
- Article 172: Falsification by private individuals
- Article 183: False testimony (when scammers use fake identities)
Republic Act No. 8484 (Access Devices Regulation Act of 1998)
Punishes credit card skimming, carding, and unauthorized use of access devices.Republic Act No. 10173 (Data Privacy Act of 2012)
Violation when personal data is stolen or misused without consent.Republic Act No. 11934 (SIM Registration Act)
Makes it easier to trace scammers who use registered SIMs.Republic Act No. 12010 (Anti-Financial Account Scamming Act – AFASA, signed July 2024)
The most important new law. It specifically penalizes money mules, social engineering attacks, and financial account scams with penalties up to reclusion perpetua if the amount exceeds ₱5 million.Bangko Sentral ng Pilipinas Circulars and Republic Act No. 9160 (Anti-Money Laundering Act, as amended)
Banks and e-wallets are required to freeze accounts upon receipt of lawful orders from the AMLC or law enforcement.
II. Key Government Agencies That Accept Online Scam Reports
| Agency | Types of Scams They Handle | How to Report | Contact Details (as of 2025) |
|---|---|---|---|
| Philippine National Police – Anti-Cybercrime Group (PNP-ACG) | All cybercrimes, especially financial scams, phishing, hacking | Online portal, walk-in at Camp Crame, or nearest police station | Hotline: (02) 8723-0401 loc. 7491 Email: report@pnpacg.ph Online: https://pcacg.pnp.gov.ph |
| National Bureau of Investigation – Cybercrime Division (NBI-CCD) | Investment scams, large-scale syndicates, sextortion, identity theft | Online complaint form or in-person | Hotline: (02) 8523-8231 to 38 loc. 3400-3403 Online: https://nbi.gov.ph/online-services/ |
| Department of Justice – Office of Cybercrime (DOJ-OOC) | Accepts complaints for preliminary investigation and prosecution | eComplaint portal | https://cybercrime.doj.gov.ph |
| Cybercrime Investigation and Coordinating Center (CICC) | Central reporting hub; coordinates all agencies | CyberTip.ph portal (24/7) | https://cybertip.ph Hotline: 1326 |
| Bangko Sentral ng Pilipinas (BSP) – Consumer Protection Dept. | Scams involving banks, e-money (GCash, Maya, ShopeePay, etc.) | Online complaint form; triggers immediate account freeze requests | Email: consumeraffairs@bsp.gov.ph Hotline: (02) 8708-7087 |
| Securities and Exchange Commission (SEC) | Investment scams, fake lending apps, Ponzi schemes, unregistered crypto platforms | Online complaint or Enforcement and Investor Protection Dept. | https://www.sec.gov.ph/complaints/ Hotline: (02) 8818-6337 |
| National Privacy Commission (NPC) | Data breach, unauthorized selling of personal information | Online complaint form | https://privacy.gov.ph/file-a-complaint/ |
| Anti-Money Laundering Council (AMLC) | Large-scale scams, money mule accounts | Referral only (through PNP/NBI) | Does not accept direct public complaints |
Best Practice: File with PNP-ACG or NBI first, then forward the case reference number to BSP or SEC if needed. Multiple filings are allowed and encouraged.
III. Step-by-Step Guide to Reporting (2025 Updated Procedure)
Preserve All Evidence Immediately
- Screenshots of conversations (Facebook Messenger, Viber, Telegram, WhatsApp – use built-in screenshot or screen recording).
- Transaction receipts (GCash, Maya, bank transfers, Coins.ph, Binance, etc.).
- Links, usernames, phone numbers, email addresses.
- Bank statements showing the transfer.
- Record the exact time and date of every interaction.
Do NOT delete chats or block the scammer until evidence is secured.
Report to the Platform First (Within Minutes/Hours)
- Facebook/Instagram: Report profile/post → “Scam or Fraud.”
- GCash/Maya/ShopeePay: Use in-app “Report Scam” feature.
- Telegram/WhatsApp: Report and block.
This often results in immediate account suspension and helps authorities later.
File a Police Blotter at Your Barangay or Nearest Police Station
Even if the amount is small. This creates an official record and is required for bank reimbursement claims.File Formal Complaint with PNP-ACG or NBI (Within 72 Hours for Best Recovery Chance)
Submit online or in person. Include:- Sworn affidavit (sinumpaang salaysay) – template available on NBI/PNP websites
- All evidence in PDF or printed
- IDs of complainant
The agency will assign a case number (e.g., NBI-CCD-2025-XXXXX).
Forward the Case to BSP (If Money Went Through Bank or E-Wallet)
BSP can issue a “hold-out” or freeze order within 24–48 hours if the mule account is still active. Success rate is highest within 72 hours of transfer.File with SEC (If Investment, Lending App, or Crypto Scam)
SEC can issue Cease and Desist Orders and freeze corporate accounts.File with DOJ-OOC or CICC CyberTip.ph
This ensures the case is entered into the national cybercrime database and may trigger international cooperation if scammers are abroad.
IV. Recovery of Funds – Realistic Expectations
| Time Elapsed | Recovery Likelihood |
|---|---|
| < 24 hours | High (60–80%) if mule account not yet withdrawn |
| 24–72 hours | Moderate (30–50%) |
| > 1 week | Very low (<10%) data-preserve-html-node="true" |
Banks and e-wallets (GCash, Maya) have voluntary reimbursement programs for victims who reported promptly and were not grossly negligent (e.g., did not share OTP).
Under BSP Circular 1160 (2023), financial institutions must refund victims of unauthorized transactions unless gross negligence is proven.
V. Special Types of Scams and Specific Reporting Channels
| Scam Type | Primary Agency to Prioritize | Additional Notes |
|---|---|---|
| Investment / Ponzi / Crypto | SEC first, then PNP-ACG | SEC has recovered over ₱2 billion in 2024–2025 |
| Fake online selling (FB Marketplace, Shopee, Lazada) | PNP-ACG or NBI | File also with DTI if seller is a business |
| Romance / sextortion | NBI-CCD (specializes in this) | They have a dedicated Anti-Violence Against Women and Children desk |
| Loan app harassment | SEC (most apps are unregistered) | Many apps are now blocked under SEC Memo 2024 |
| Job scam (fake recruitment) | PNP-ACG + DOLE | If illegal recruitment, also file with POEA |
| Phishing / bank account takeover | BSP + PNP-ACG | Immediate bank notification critical |
VI. What Happens After You Report
- Case is docketed and assigned to an investigator.
- Subpoena issued to banks/e-wallets/telecoms for subscriber information.
- If mule account identified, freeze order requested from AMLC or court.
- If syndicate identified, raid operations conducted (common in POGO hubs in Bamban, Porac, Pasay).
- Case endorsed to prosecutor (DOJ) for inquest or preliminary investigation.
- Trial in Regional Trial Court (cybercrime cases are now heard faster due to Supreme Court directives).
Average resolution time for recovery: 3–18 months. Prosecution: 1–5 years.
VII. Preventive Measures (Legally Recommended)
- Enable 2FA everywhere.
- Never share OTP, MPIN, or CVV.
- Verify investment offers on SEC website (https://www.sec.gov.ph/advisories/).
- Use only registered lending apps (list at https://www.sec.gov.ph/lending-companies-and-financing-companies/).
- Report suspicious accounts immediately.
Reporting online scams is not just about recovering money — it is a civic duty that helps dismantle entire syndicates. Every legitimate report contributes to arrests, asset seizures, and eventual reduction of cyber fraud in the Philippines.
Victims should never feel ashamed. The shame belongs entirely to the criminals.
File your report today. The system works when citizens use it.