I. Introduction

Online scams in the Philippines have become increasingly common because most financial, commercial, and social transactions now pass through digital channels. Victims are often deceived through fake online sellers, investment schemes, phishing links, impersonation, romance scams, job scams, e-wallet fraud, unauthorized bank transfers, fake delivery notices, SIM-based scams, and social media marketplace fraud.

A victim’s first instinct is usually to “file a police report.” In the Philippine context, however, reporting an online scam may involve several institutions: the local police station, the Philippine National Police Anti-Cybercrime Group, the National Bureau of Investigation Cybercrime Division, banks, e-wallet providers, telecommunications companies, online platforms, and prosecutors.

This article explains the legal framework, complaint process, documentary requirements, remedies, and practical considerations for reporting online scams in the Philippines.

This is a general legal information article, not legal advice for a specific case.

II. What Is an Online Scam?

An online scam is a fraudulent act committed through the internet, mobile phones, social media, electronic messages, online marketplaces, e-wallets, banking apps, cryptocurrency platforms, or other digital systems.

Common examples include:

Fake online selling A seller accepts payment but never delivers the item.
Phishing A victim is tricked into giving passwords, OTPs, account credentials, card details, or personal information through a fake website, message, email, or call.
Unauthorized bank or e-wallet transfers Money is transferred without the account holder’s valid consent.
Investment scams A person or group promises unrealistic returns, often through social media, messaging apps, or referral schemes.
Romance scams A scammer pretends to have a romantic relationship with the victim and later asks for money.
Job or task scams Victims are asked to pay “processing fees,” “training fees,” or “unlocking fees,” or are lured into fake online work.
Identity theft and impersonation A scammer uses another person’s name, image, account, or personal data to deceive victims.
Fake loan apps or lending scams Victims are induced to pay advance fees, or their personal data is misused.
Delivery, customs, or parcel scams Victims receive fake notices asking for payment to release a package.
Crypto or trading scams Victims are induced to deposit funds into fake exchanges, wallets, or investment dashboards.

III. Main Philippine Laws Involved

Several laws may apply depending on the facts.

A. Revised Penal Code: Estafa

The most common offense in scam cases is estafa under Article 315 of the Revised Penal Code.

Estafa generally involves fraud or deceit that causes damage to another person. In an online scam, the deceit may consist of false representations, fake identities, false promises, or fraudulent schemes used to obtain money or property.

Examples:

A seller claims to have an item for sale, receives payment, then disappears.
A person pretends to represent a company and collects processing fees.
A scammer promises guaranteed investment returns and later refuses to return the funds.

Estafa may still apply even if the transaction happened online.

B. Cybercrime Prevention Act of 2012

Republic Act No. 10175, the Cybercrime Prevention Act of 2012, is highly relevant because online scams often involve computer systems, digital communications, or internet platforms.

The law recognizes cyber-related offenses and also provides that crimes under the Revised Penal Code may be committed through information and communications technology. When estafa is committed through the internet or digital means, it may be treated as cyber-related estafa.

This matters because the use of information and communications technology may affect jurisdiction, evidence gathering, and penalties.

C. Access Device Regulation Act

Republic Act No. 8484, the Access Devices Regulation Act, may apply where the scam involves credit cards, debit cards, ATM cards, account numbers, bank credentials, or other access devices.

Examples include:

Unauthorized use of another person’s card details.
Fraudulent transactions using stolen account information.
Possession or use of access device information without authority.

D. Data Privacy Act of 2012

Republic Act No. 10173, the Data Privacy Act, may apply when personal information is collected, used, shared, or processed unlawfully.

This is relevant in phishing, identity theft, fake loan app harassment, doxxing, or unauthorized use of personal data.

E. SIM Registration Act

Republic Act No. 11934, the SIM Registration Act, is relevant where scam messages, calls, or mobile wallet accounts are linked to registered SIM cards. While SIM registration does not automatically identify the scammer to the victim, law enforcement may request relevant information through lawful processes.

F. Electronic Commerce Act

Republic Act No. 8792, the Electronic Commerce Act, recognizes electronic documents, electronic signatures, and digital transactions. It supports the admissibility and legal recognition of electronic evidence, subject to the Rules on Electronic Evidence.

G. Securities Regulation Code and Investment Scam Rules

If the scam involves solicitation of investments, securities, pooled funds, or promises of profit from the efforts of others, the Securities and Exchange Commission may become involved. Investment scams may involve violations of securities laws, especially if the person or entity soliciting investments is not authorized.

H. Consumer Protection and Online Transactions

Online sales scams may also involve consumer protection issues. Depending on the nature of the transaction, complaints may be brought before the Department of Trade and Industry, online platforms, payment providers, or law enforcement. However, if deceit and criminal fraud are present, the matter is not merely a consumer dispute; it may be criminal.

IV. Where to Report an Online Scam in the Philippines

A victim may report to one or more of the following.

A. Local Police Station

The nearest police station may receive the initial complaint and prepare a police blotter or incident report. This is often useful for documentation, bank disputes, insurance claims, platform reports, and later prosecution.

However, not all local police stations have specialized cybercrime capability. If the case involves digital evidence, online accounts, or tracing, the complaint may be referred to a cybercrime unit.

B. Philippine National Police Anti-Cybercrime Group

The PNP Anti-Cybercrime Group handles cybercrime-related complaints, including online scams, phishing, identity theft, online fraud, and cyber-enabled estafa.

Victims may file complaints with PNP cybercrime offices or units, depending on location and availability.

C. National Bureau of Investigation Cybercrime Division

The NBI Cybercrime Division also receives complaints involving online fraud, hacking, phishing, impersonation, and other cyber-related offenses.

In practice, victims often choose between the PNP Anti-Cybercrime Group and the NBI Cybercrime Division. Both may investigate cybercrime complaints. A complainant should avoid filing multiple inconsistent complaints, but reporting to the appropriate agency is allowed where necessary.

D. Bank or E-Wallet Provider

If money was transferred through a bank, e-wallet, remittance center, card, or payment platform, the victim should immediately report the transaction to the financial institution.

This is urgent because banks and e-wallet providers may be able to:

freeze or hold funds;
flag suspicious accounts;
initiate internal fraud investigation;
issue certificates or transaction records;
preserve logs;
assist law enforcement upon proper request.

Time is critical. The sooner the report is made, the better the chance of preventing withdrawal or further transfer.

E. Telecommunications Provider

If the scam involved SMS, calls, or a mobile number, the victim may report the number to the telecommunications provider. The telco may not simply disclose subscriber information to the victim, but it may block numbers, receive abuse reports, or cooperate with lawful law enforcement requests.

F. Online Platform

If the scam occurred on Facebook, Messenger, Instagram, TikTok, Shopee, Lazada, Carousell, Telegram, WhatsApp, Viber, or another platform, the victim should also report the account, page, listing, or conversation to the platform.

Platform reports may help preserve account data, suspend fraudulent accounts, and support later investigation.

G. Prosecutor’s Office

A criminal complaint ultimately goes through preliminary investigation before the prosecutor when the offense requires it. Law enforcement may assist in preparing the complaint, but the prosecutor determines whether there is probable cause to file the case in court.

V. Immediate Steps After Discovering the Scam

The first few hours are important.

A. Stop Communicating Carelessly

Do not threaten the scammer or announce that a complaint has been filed if doing so may cause deletion of accounts, withdrawal of funds, or destruction of evidence.

It may be useful to preserve communication, but avoid sending more money or personal information.

B. Preserve Evidence

Do not delete chats, emails, SMS, transaction notices, account profiles, posts, listings, receipts, or call logs.

Take screenshots, but also keep the original messages where possible. Screenshots are useful, but original digital records are stronger.

C. Contact the Bank or E-Wallet Immediately

Report the transaction as fraudulent. Ask for a reference number. Request preservation or freezing if possible. Ask what documents they require.

D. Change Passwords

If credentials were exposed, immediately change passwords for affected accounts and related accounts. Enable two-factor authentication.

E. Secure SIM and Email Accounts

If the scam involved OTPs, SIM compromise, email hacking, or account takeover, contact the relevant provider immediately.

F. File a Police or Cybercrime Complaint

Prepare documents and file with the appropriate authority as soon as possible.

VI. Documents and Evidence Needed

A strong complaint depends on complete evidence. The complainant should prepare the following, as applicable.

A. Identification Documents

Bring valid government-issued ID. Law enforcement usually requires proof of identity from the complainant.

B. Written Complaint or Narrative

Prepare a clear written statement containing:

complainant’s full name and contact details;
date and time of the incident;
platform used;
name, username, phone number, email, or account used by the scammer;
amount lost;
payment method;
transaction reference numbers;
timeline of events;
description of the scammer’s representations;
damage suffered;
actions already taken.

C. Screenshots

Include screenshots of:

profile page of the scammer;
advertisements, posts, or listings;
chat conversations;
payment instructions;
proof of payment;
account names and numbers;
delivery promises;
threats or follow-up messages;
group chats or referral schemes;
links sent by the scammer.

Screenshots should show dates, times, usernames, URLs, and phone numbers where possible.

D. Transaction Records

Collect:

bank transfer receipts;
e-wallet receipts;
remittance slips;
card transaction records;
account statements;
confirmation emails;
SMS transaction alerts;
QR code payment details;
recipient account name and number;
reference numbers.

E. URLs and Usernames

Record exact URLs, usernames, handles, page names, group names, phone numbers, email addresses, and account IDs.

Do not rely only on display names, because scammers often change them.

F. Affidavit of Complaint

For prosecution, a sworn affidavit is often required. It should clearly narrate the facts and attach supporting documents.

The affidavit should be truthful, chronological, and specific. Avoid exaggeration. State only facts personally known or supported by records.

G. Certificate or Report from Bank or Platform

If available, obtain a bank certificate, fraud report reference, transaction verification, or platform incident report.

H. Device and Account Logs

Where relevant, preserve logs from email accounts, social media accounts, bank apps, and devices. Do not tamper with devices if forensic examination may be needed.

VII. The Police Complaint Process

The exact process may vary by office, but a typical online scam complaint follows these stages.

A. Initial Intake

The complainant goes to the police station, PNP cybercrime office, or NBI cybercrime office and presents the facts.

The officer may ask:

What happened?
When did it happen?
How much was lost?
What platform was used?
What account received the money?
Do you know the suspect?
Do you have screenshots and receipts?
Have you reported to the bank or e-wallet?
Are there other victims?

B. Blotter or Incident Report

At the local police level, the incident may be entered into the police blotter. A blotter is a record that an incident was reported. It is not the same as a criminal conviction or a finding that the suspect is guilty.

A police report or incident report may be issued. This document can be useful for banks, e-wallets, platforms, insurers, employers, and later legal proceedings.

C. Evaluation of Cybercrime Elements

If the case involves online communication, electronic transactions, account takeover, phishing, or digital evidence, it may be referred to cybercrime investigators.

They may evaluate whether the facts show:

estafa;
cyber-related estafa;
identity theft;
illegal access;
computer-related fraud;
misuse of access devices;
data privacy violations;
securities violations;
other offenses.

D. Submission of Evidence

The complainant submits screenshots, receipts, IDs, written narrative, affidavits, and other supporting documents.

The office may require printed copies and digital copies. It is prudent to bring both.

E. Request for Preservation or Data

Law enforcement may seek preservation of computer data, account information, logs, subscriber information, or transaction records through appropriate legal processes.

Private companies usually will not disclose sensitive account information directly to the victim. They typically require lawful requests, subpoenas, court orders, or official law enforcement processes.

F. Investigation

Investigators may:

trace account numbers;
identify recipient accounts;
request information from banks or e-wallets;
examine phone numbers, emails, IP logs, or account activity;
coordinate with platforms;
interview witnesses;
identify other victims;
conduct entrapment or follow-up operations where legally appropriate.

G. Referral for Inquest or Preliminary Investigation

If a suspect is arrested lawfully, the case may proceed to inquest. If there is no arrest, the case usually proceeds by complaint-affidavit and preliminary investigation before the prosecutor.

H. Prosecutor’s Resolution

The prosecutor determines whether probable cause exists. If probable cause is found, an information is filed in court. If not, the complaint may be dismissed, subject to remedies such as motion for reconsideration or appeal under applicable rules.

I. Court Proceedings

If filed in court, the case proceeds through arraignment, pre-trial, trial, and judgment. The victim may testify and present evidence.

The court may impose criminal penalties and may award civil liability, depending on the case.

VIII. Filing with the PNP Anti-Cybercrime Group

For online scams, the PNP Anti-Cybercrime Group is often a practical first stop because it specializes in cybercrime complaints.

A complainant should generally prepare:

valid ID;
complaint narrative;
screenshots;
transaction records;
links, usernames, phone numbers, and account details;
proof of ownership of affected account;
bank or e-wallet reports;
other supporting documents.

The complaint should be filed as soon as possible because digital evidence can disappear quickly. Scammers delete accounts, change usernames, erase posts, withdraw funds, transfer money, or use mule accounts.

IX. Filing with the NBI Cybercrime Division

The NBI Cybercrime Division is another major cybercrime enforcement office. It may be especially useful where the case involves:

organized fraud;
large amounts;
multiple victims;
identity theft;
hacking;
fake websites;
phishing operations;
investment scams;
cross-border elements;
complex digital evidence.

The NBI may require a written complaint and supporting evidence. The complainant may be asked to execute affidavits and coordinate during investigation.

X. Difference Between a Blotter, Complaint, and Criminal Case

Victims often confuse these terms.

A. Police Blotter

A police blotter is an official record that an incident was reported. It does not by itself mean that a criminal case has been filed in court.

B. Police Complaint

A police complaint is a report made to law enforcement requesting investigation. Police may gather evidence and refer the case to the prosecutor.

C. Prosecutor’s Complaint

A complaint filed with the prosecutor, usually supported by affidavits and evidence, starts preliminary investigation when required.

D. Criminal Case in Court

A criminal case begins in court when the prosecutor files an information and the court takes jurisdiction.

XI. Online Scam as Estafa

Most online scam reports are framed as estafa because the victim parted with money due to deceit.

The usual elements are:

The accused used deceit, false pretenses, fraudulent acts, or abuse of confidence.
The offended party relied on the deceit.
The offended party suffered damage.
The deceit caused the damage.

In online transactions, deceit may be shown by:

fake identity;
false claim of product availability;
fake business registration;
fake payment confirmation;
false promise of investment returns;
fake employment offer;
fake emergency;
false representation as bank, government agency, or delivery company;
use of manipulated screenshots;
use of fake websites or pages.

A mere failure to pay a debt or failure to perform a promise is not automatically estafa. There must be fraud or deceit, often existing at or before the time the victim parted with money or property.

XII. Cyber-Related Estafa

When estafa is committed through information and communications technology, the cybercrime law may be involved. This may include scams through:

Facebook;
Messenger;
Instagram;
TikTok;
Telegram;
Viber;
WhatsApp;
email;
fake websites;
SMS links;
online marketplaces;
banking apps;
e-wallets;
crypto platforms.

The cyber element does not replace the need to prove fraud. It shows that the fraudulent act was committed using digital means.

XIII. Identity Theft and Account Impersonation

If a scammer uses another person’s identity, profile photo, name, or account to deceive victims, there may be identity theft or related offenses.

Victims may include:

the person whose identity was used;
the person who lost money;
both.

For example, if a scammer hacks a person’s social media account and asks that person’s friends for money, the account owner may complain about account compromise, while the friends may complain about financial loss.

XIV. Phishing and OTP Scams

Phishing cases often involve fake links or calls pretending to be from banks, e-wallets, government agencies, delivery companies, or online platforms.

A victim may be tricked into giving:

OTPs;
passwords;
PINs;
card numbers;
CVV;
login credentials;
recovery codes;
personal information.

In these cases, the victim should immediately:

call the bank or e-wallet;
freeze the account if possible;
change passwords;
report unauthorized transactions;
preserve SMS, email, and website links;
file a cybercrime complaint.

The complaint may involve computer-related fraud, identity theft, unauthorized access, access device fraud, estafa, or other offenses depending on the facts.

XV. Bank and E-Wallet Fraud: Practical Realities

A police complaint does not automatically return the money. Recovery depends on speed, traceability, account status, bank cooperation, and whether funds remain available.

Banks and e-wallets may ask for:

valid ID;
police report;
affidavit;
transaction reference;
proof that the transaction was unauthorized or fraudulent;
account ownership documents;
screenshots and communications.

Victims should ask for a case reference number from the financial institution. They should also follow up in writing.

Where funds are transferred to mule accounts and withdrawn quickly, recovery becomes difficult. This is why immediate reporting is essential.

XVI. The Role of the Prosecutor

Police and NBI investigators gather evidence, but prosecutors determine whether a criminal case should be filed in court.

For preliminary investigation, the complaint usually includes:

complaint-affidavit;
affidavits of witnesses;
documentary evidence;
digital evidence;
police or NBI investigation report;
other supporting records.

The respondent may be required to file a counter-affidavit. The prosecutor then evaluates whether probable cause exists.

XVII. Jurisdiction and Venue

Online scams raise venue questions because the victim, scammer, bank, platform, and servers may be in different places.

In practice, complaints may be filed where:

the victim resides;
the victim received the fraudulent communication;
the victim parted with money;
the bank or account transaction occurred;
the damage was suffered;
the suspect resides or was found;
the cybercrime unit has jurisdiction.

Cybercrime cases can involve complex venue issues. Law enforcement and prosecutors will evaluate where the offense or its elements occurred.

XVIII. Prescription Periods

Criminal offenses have prescriptive periods. The applicable period depends on the offense and penalty. Victims should not delay reporting, because delay can affect evidence preservation and legal remedies.

Even where the prescriptive period has not yet expired, practical recovery becomes harder as time passes.

XIX. Electronic Evidence

Online scam cases rely heavily on electronic evidence.

Relevant rules include recognition of:

electronic documents;
screenshots;
chat logs;
emails;
transaction confirmations;
metadata;
account logs;
system records;
digital signatures where applicable.

However, electronic evidence must be authenticated. The complainant may need to explain:

how the screenshots were taken;
whose account was used;
how the messages were received;
whether the records are complete;
whether the device or account belongs to the complainant;
whether the documents are true and faithful reproductions.

Printed screenshots alone may not always be enough. Original digital files, devices, account access, links, headers, and logs may strengthen the case.

XX. How to Preserve Digital Evidence Properly

Victims should:

Take screenshots showing full context, dates, times, usernames, numbers, and URLs.
Export chat histories where possible.
Save emails in original format when possible.
Keep SMS messages on the device.
Record URLs and profile links.
Preserve transaction receipts.
Avoid editing screenshots.
Keep the device used in the transaction.
Back up files securely.
Do not delete the conversation even after printing it.
Note the date and time when evidence was captured.
Preserve packaging, delivery details, or physical evidence if any.

For serious cases, forensic preservation may be necessary.

XXI. Can the Police Trace the Scammer?

Sometimes yes, but it depends on the evidence.

Possible leads include:

bank account name;
e-wallet account;
mobile number;
SIM registration data;
IP logs;
device identifiers;
social media account data;
email headers;
courier records;
remittance claims;
CCTV at withdrawal points;
linked accounts;
other victims’ reports.

However, scammers often use:

fake names;
mule accounts;
compromised accounts;
stolen IDs;
prepaid SIMs;
VPNs;
foreign numbers;
quickly deleted profiles;
cash-out agents;
cryptocurrency mixers or transfers;
layered transactions.

A police report is important, but identification and recovery are not guaranteed.

XXII. Money Mules

Many scams use “money mules,” meaning accounts used to receive and transfer stolen funds. The named bank or e-wallet account holder may not be the mastermind, but may still be investigated.

A mule may be:

a recruited person;
a person who sold or rented an account;
a fake identity account;
a compromised account holder;
a participant in the fraud.

Law enforcement may trace the flow of funds from the first recipient to later accounts.

XXIII. Investment Scams

Investment scams require special attention because they may involve both criminal fraud and securities violations.

Warning signs include:

guaranteed high returns;
“no risk” promises;
referral commissions;
pressure to recruit others;
unregistered entities;
fake SEC certificates;
fake trading dashboards;
refusal to allow withdrawals;
sudden account freezing;
demand for additional fees before withdrawal;
use of crypto wallets controlled by the scammer.

Victims may report to law enforcement and, where securities solicitation is involved, to the Securities and Exchange Commission.

XXIV. Online Seller Scams

For online seller scams, the key question is whether the case is a criminal scam or a civil/consumer dispute.

It may be criminal if:

the seller never intended to deliver;
the seller used a fake identity;
the seller used fake proof of stock;
multiple victims were deceived;
the seller blocked the buyer after payment;
the seller used fraudulent payment instructions;
the seller operated a fake page or fake shop.

It may be a civil or consumer dispute if:

there was a genuine transaction but delayed delivery;
the seller made a mistake;
the item was defective but the seller is identifiable and willing to resolve;
there is no clear proof of deceit.

The distinction depends on evidence.

XXV. Marketplace and Platform Complaints

Where the scam occurred on an online platform, the victim should use the platform’s reporting system. This may result in:

account suspension;
preservation of transaction information;
refund review;
seller sanctions;
internal investigation;
blocking of listings;
support records useful to law enforcement.

However, platform reporting is not a substitute for a police complaint where a crime has occurred.

XXVI. What to Include in a Complaint-Affidavit

A complaint-affidavit should be clear and organized. A common structure is:

Personal circumstances of the complainant Name, age, citizenship, address, and contact details.
How the complainant encountered the scammer Platform, page, post, referral, message, call, or website.
Representations made by the scammer What exactly was promised or claimed.
Reliance by the complainant Why the complainant believed the representations.
Payment or transfer Date, amount, method, recipient account, reference number.
Failure or fraudulent conduct Non-delivery, blocking, disappearance, refusal to return money, fake documents, unauthorized transfer.
Damage suffered Amount lost and other consequences.
Evidence attached Mark attachments clearly.
Prayer or request Request investigation and filing of appropriate charges.
Verification and oath The affidavit must be sworn before an authorized officer.

XXVII. Sample Outline of a Complaint Narrative

A practical narrative may read like this in substance:

On [date], I saw an advertisement on [platform] posted by an account using the name [name/username]. The account offered [item/service/investment]. I communicated with the account through [Messenger/Viber/SMS/email]. The person represented that [specific false statement]. Relying on this representation, I transferred ₱[amount] to [account name/account number/e-wallet/mobile number] on [date/time], with reference number [number]. After payment, the person [failed to deliver/blocked me/deleted the account/demanded more money]. I later discovered that the representation was false. I suffered damage in the amount of ₱[amount]. Attached are screenshots, transaction receipts, account details, and other evidence.

The actual affidavit should be tailored to the facts.

XXVIII. Remedies Available to Victims

A. Criminal Complaint

The main remedy is filing a criminal complaint for estafa, cyber-related estafa, computer-related fraud, identity theft, access device fraud, or other applicable offenses.

B. Civil Recovery

The victim may seek return of money or damages. Civil liability may be included in the criminal case, unless separately reserved or waived under procedural rules.

C. Bank or E-Wallet Dispute

The victim may dispute unauthorized or fraudulent transactions with the financial institution.

D. Platform Refund or Buyer Protection

Some platforms have internal buyer protection mechanisms. These should be used immediately where available.

E. SEC, DTI, NPC, or Other Administrative Complaints

Depending on the facts:

investment scams may involve the SEC;
consumer transactions may involve the DTI;
personal data misuse may involve the National Privacy Commission;
lending app harassment may involve privacy, lending, and consumer regulators;
banking issues may involve financial regulators.

XXIX. What Police Reports Can and Cannot Do

A police report can:

officially document the incident;
support bank or platform disputes;
trigger investigation;
support preservation requests;
help identify suspects;
become part of a criminal complaint;
support future prosecution.

A police report cannot automatically:

guarantee refund;
force immediate arrest without legal basis;
compel platforms to disclose data without proper process;
convict the suspect;
ensure recovery of funds already withdrawn.

XXX. Common Problems in Online Scam Complaints

A. Lack of Identifying Information

Victims often know only a display name or nickname. Investigators need more: phone numbers, account numbers, URLs, usernames, emails, receipts, and transaction logs.

B. Deleted Accounts

Scammers delete accounts quickly. Victims should capture evidence immediately.

C. Mule Accounts

The account receiving money may not be the mastermind.

D. Cross-Border Scams

Some scammers operate outside the Philippines. This complicates enforcement and may require international cooperation.

E. Small Amounts

Even small amounts can be reported, especially if there are multiple victims. However, practical investigative resources may vary.

F. Delay

Delay reduces the chance of freezing funds or preserving data.

G. Incomplete Screenshots

Screenshots without dates, usernames, URLs, or full conversation context may be challenged.

H. Voluntary Transfer

Scammers may argue that the victim voluntarily sent money. The legal issue then becomes whether the transfer was induced by fraud.

XXXI. Frequently Asked Questions

1. Can I file a police report even if I only lost a small amount?

Yes. A scam may be reported regardless of amount. The amount affects penalty and practical handling, but it does not erase the offense.

2. Should I go to the police, NBI, or PNP cybercrime unit?

For simple documentation, the local police station may be sufficient. For online scams involving digital tracing, PNP Anti-Cybercrime Group or NBI Cybercrime Division is usually more appropriate.

3. Can I file a complaint online?

Some agencies and platforms may provide online reporting or preliminary submission channels, but serious complaints often require personal appearance, affidavits, IDs, and supporting documents.

4. Will I get my money back after filing a police report?

Not automatically. Recovery depends on whether funds can be frozen, traced, or recovered, and whether civil liability is awarded or settlement occurs.

5. Can the scammer be arrested immediately?

Usually not unless there is a lawful basis for warrantless arrest or an arrest warrant is issued. Most cases require investigation and prosecutor action.

6. What if I only have a phone number?

Report it, but gather more evidence if possible: SMS, call logs, payment records, e-wallet details, account name, and screenshots.

7. What if the scammer used a fake name?

Still report. Law enforcement may trace through financial accounts, SIM information, platform records, IP logs, or other evidence.

8. What if the scammer is abroad?

You may still report in the Philippines if you are a victim here or elements occurred here. Cross-border enforcement is harder but not impossible.

9. Can I post the scammer’s identity online?

Be careful. Public accusations may expose you to defamation, privacy, or cyberlibel issues if unsupported or excessive. It is safer to report to authorities and platforms.

10. Can I recover money from the bank or e-wallet?

Possibly, but not always. Immediately file a dispute and ask whether the funds can be held or reversed. The outcome depends on the institution’s rules, timing, and facts.

XXXII. Practical Checklist for Victims

Before going to the police or cybercrime office, prepare:

valid government ID;
written timeline;
screenshots of conversations;
screenshots of profile, page, listing, or website;
exact URLs;
phone numbers and emails used;
payment receipts;
bank or e-wallet transaction records;
recipient account name and number;
reference numbers;
proof of bank/e-wallet report;
names of witnesses or other victims;
device used, if relevant;
printed and digital copies of evidence.

XXXIII. Suggested Order of Action

A practical sequence is:

Stop sending money or information.
Preserve all evidence.
Report immediately to the bank, e-wallet, card issuer, or remittance provider.
Change passwords and secure accounts.
Report the scam account or listing to the platform.
File a police blotter or cybercrime complaint.
Execute a complaint-affidavit if required.
Follow up with the investigating officer.
Cooperate with prosecutor proceedings.
Consider related administrative complaints if applicable.

XXXIV. Preventive Lessons

To avoid online scams:

verify seller identity;
avoid off-platform payments when buyer protection exists;
do not share OTPs or passwords;
check URLs carefully;
avoid “guaranteed return” investments;
verify SEC registration and authority to solicit investments;
be suspicious of urgency and secrecy;
do not pay advance fees for jobs or loans;
use strong passwords and two-factor authentication;
confirm requests for money through another channel;
avoid clicking suspicious links;
keep transaction records.

XXXV. Conclusion

The police complaint process for online scam reports in the Philippines is not merely a matter of telling the police that money was lost. A strong complaint requires a clear timeline, proof of deceit, transaction records, digital evidence, and prompt reporting to both law enforcement and the financial institution involved.

The usual legal theory is estafa, often with a cybercrime component when the internet, messaging apps, social media, e-wallets, or online platforms are used. Other laws may apply when the scam involves identity theft, phishing, unauthorized access, card fraud, personal data misuse, investment solicitation, or consumer transactions.

The most important practical points are speed and preservation. Report immediately, save everything, secure accounts, contact the bank or e-wallet, and file with the proper cybercrime authority. A police report does not guarantee recovery, but it is a critical step toward investigation, preservation of evidence, prosecution, and possible restitution.