Reporting an Online Scammer to the NBI in the Philippines
A comprehensive legal guide for complainants, practitioners, and law-enforcement liaisons
1. Why go to the National Bureau of Investigation (NBI)?
| Unit | Core Mandate | Typical Cases |
|---|---|---|
| Cybercrime Division (CCD) | Detection, investigation, and prosecution of cyber-enabled and cyber-dependent offenses under R.A. 10175 and related laws | Credit-card/GCash theft, phishing, hacking, doxxing, ransomware |
| Anti-Fraud Division (AFD) | Classical swindling and large-scale fraud (including when electronic means are used) | Online marketplace scams, investment fraud, bogus ticketing |
The NBI has nationwide jurisdiction and can subpoena banks, telcos, social-media platforms, and—through MLATs—their foreign counterparts. Compared with local police stations, it has more digital forensics resources and a direct liaison with prosecutors.
2. Principal Laws and Offenses
| Statute | Section | Elements Relevant to Online Scams | Penalty Range* |
|---|---|---|---|
| Revised Penal Code (RPC) Art. 315 (Estafa) | deceit + damage through failure to deliver, false pretenses, or fraudulent means | Prisión correccional to reclusión temporal (graduated by amount, plus up to P2M fine under R.A. 10951) | |
| R.A. 10175 (Cybercrime Prevention Act of 2012) | §4(b)(2) Computer-Related Fraud; §6 penalty-augmenting clause | Unlawful input/alteration of data or interference causing fraud; adds 1 degree to underlying RPC penalty | |
| R.A. 8792 (E-Commerce Act) | §33(a) Hacking; §33(b) Computer-related fraud | 6 mo.–3 yrs. + P100k–P1M (or treble profit, whichever is higher) | |
| R.A. 8484 (Access Devices Regulation Act) | §9 fraudulent use or possession of access devices | 6 yrs. + one day to 20 yrs.; fine double the value or P10k–P1M | |
| R.A. 11934 (SIM Registration Act) | §10 providing false info or spoofing leading to fraud | 6 mo.–6 yrs.; P300k–P1M | |
| Revised Corporation Code & SEC rules | Unregistered investment solicitation | P5k–P2M/day; up to 21 yrs. imprisonment |
* Exact terms depend on qualifying circumstances (e.g., large-scale, syndicated, or if the victim is a senior citizen or PWD).
3. Evidence Checklist: “Capture–Preserve–Authenticate”
Screenshots/Screen-recordings
- Full web address, username, date/time stamp
- Chat threads in chronological order (use “export chat” where available)
Financial Records
- Deposit/transfer slips, e-wallet transaction history (PDF or CSV)
- Bank certification of beneficiary account
Device & Network Logs
- Header of phishing e-mails
- IP logs from admin dashboards, if you own the compromised site/app
Victim Statement
- Sworn affidavit narrating events in detail, signed and notarized
Corroborative Material
- Delivery receipts, bogus IDs sent by scammer, social-media profiles, WHOIS records
Chain of Custody: Seal digital files in a write-protected medium (USB, DVD) or generate SHA-256 hash values; note these in the transmittal sheet.
4. Step-by-Step Filing Procedure
| Stage | What to Prepare | Where / How |
|---|---|---|
| 1 — Online Triage (optional) | Quick complaint via the NBI Online Complaint System (ISTAHM portal) to secure a reference number | https:// complain.nbi.gov.ph |
| 2 — Visit an NBI Office | Original + 3 copies of affidavit, valid government ID, and evidence set | NBI-CCD (Taft Ave., Manila) or any Regional Office / Satellite Desk |
| 3 — Interview & Sworn Statement | Clarify timeline, quantify loss, identify jurisdiction | You, investigating agent, and barangay-assigned PAO lawyer if needed |
| 4 — Payment of Fees | Approx. ₱200–₱500 for document verification & fingerprinting | NBI cashier |
| 5 — Case Building | Additional subpoenas, digital forensics imaging, preservation orders to banks & telcos | Handled by NBI; you may be asked to execute further affidavits |
| 6 — Referral to Prosecution | Information/Complaint is filed before the DOJ or City/Provincial Prosecutor’s Office | Prosecutor will issue subpoena to respondent(s) for preliminary investigation |
| 7 — Court Action & Enforcement | Filing of Information; issuance of warrants of arrest, search, or asset freeze (AMLC coordination) | RTC Cybercrime Courts (if RPC + cybercrime) or RTC-regular branch (estafa only) |
Processing time: 2–6 weeks from filing to inquest referral (urgent cases) or 6–18 months for full-blown preliminary investigation.
5. Parallel & Complementary Remedies
| Agency | When to Go | Key Powers |
|---|---|---|
| PNP Anti-Cybercrime Group (ACG) | Real-time takedowns, on-site digital forensics outside NCR | 24/7 cyber patrol, rapid response “e-Sabong” and sextortion units |
| Securities and Exchange Commission (EIPD) | Ponzi, forex, or crypto investment offers without license | Cease-and-desist, asset freeze via TRO, revocation of corporate registration |
| Bangko Sentral ng Pilipinas (BSP) & AMLC | Unauthorized fund transfers, mule accounts | Account-freeze orders, beneficiary-bank coordination |
| Small Claims Court | Refund of ≤ ₱1 M if identity of scammer is known | No lawyer required; expedited hearings |
| Civil Action for Damages | Long-term reputational or opportunity loss | May be consolidated with criminal case under Art. 100 RPC |
6. Practical Tips for Complainants
- Act within 10 days for bank/GCash dispute to maximize chargeback chances.
- Don’t delete chats—block the scammer only after you have exported data.
- Be specific in your affidavit: dates, amounts, mode of communication, exact promises made.
- Bring two IDs; foreigners should bring passport + ACR I-Card or visa page.
- Keep receipts of every NBI appearance; these are reimbursable in restitution.
7. Rights and Protections of Victims
| Right | Basis | Practical Effect |
|---|---|---|
| Restitution & Damages | Art. 100 RPC; R.A. 10175 §12 | Court may order the accused to return proceeds or pay equivalent value plus interest |
| Witness Protection | R.A. 6981 and DOJ Circular 62-2017 for cyber-witnesses | Security escort, relocation, subsistence allowance |
| Data Privacy | R.A. 10173 (Data Privacy Act) | NBI must safeguard complainant’s personal data; court records may be sealed for minors |
| Free Legal Aid | Public Attorney’s Office (PAO) or IBP Legal Aid | Available if income ≤ National Poverty Threshold |
8. Sample Affidavit of Complaint (Outline)
- Caption (NBI-CCD, Mother Station)
- Personal background of affiant (name, age, address, citizenship)
- Statement of authority (competent to testify)
- Narrative of facts in numbered paragraphs
- Specific acts constituting estafa / computer-related fraud
- Damages suffered (exact figures, currency)
- Prayer: investigation and filing of appropriate charges
- Verification & jurat (acknowledged before notary public)
Attach “ANNEX A” onward for screenshots; label and paginate consecutively.
9. Statute of Limitations & Venue
- Estafa (RPC Art. 315): 15 years if complexed with cybercrime; otherwise 10 years if amount ≥ P1.2 M, 5 years if less.
- Cybercrime Offenses (R.A. 10175): 15 years from discovery.
- E-Commerce Act Offenses: 3 years from commission.
Venue: The place where any element occurred (e.g., where the victim clicked a phishing link, where money was deposited, or where data is stored), or at RTC Manila (for cybercrime, under A.M. No. 03-03-03-SC).
10. Frequently Asked Questions
| Q | A |
|---|---|
| Can I file if the scammer is abroad? | Yes. The NBI can invoke the trans-border applicability of R.A. 10175 and seek MLAT assistance. |
| Is mediation possible? | Rarely. The criminal nature and public interest in cybercrime usually preclude Barangay Katarungang Pambarangay proceedings. |
| How long before the NBI actually arrests someone? | If identity and location are verified early, 3–6 months. Cross-border digital footprints can extend this to years. |
| Will my name appear in online dockets? | Cybercrime courts may seal sensitive parts; you can request the clerk of court to redact addresses from uploaded decisions. |
11. Penalties Recap (Quick-Look)
- Standard Online Estafa ≤ ₱1.2 M → Prisión correccional (6 mo.–6 yrs.) +1 degree under R.A. 10175 = Prisión mayor minimum.
- Large-Scale or Syndicated (> ₱10 M or ≥ 5 offenders) → Reclusión temporal (12 yrs.–20 yrs.).
- Access-Device Fraud (credit-card theft) → Up to 20 yrs. imprisonment + double value of loss.
- SIM-Registration Falsehood aiding fraud → Up to 6 yrs. + ₱1 M fine.
12. Takeaways for Lawyers & IT Investigators
- Immediate Preservation Orders to telcos and e-wallet providers are critical; data retention is only six months (R.A. 10175 §13).
- Hash & Log Everything; courts increasingly exclude evidence with broken chain.
- Coordinate Early with Prosecutors to pre-draft subpoena duces tecum; avoids refiling.
- Leverage Republic Act 11934 to unmask prepaid numbers used in scams; request SIM registration records in camera.
- Parallel Civil Claim for moral and exemplary damages often induces settlement when the accused is bail-bond-averse.
13. Disclaimer
This article is informational and does not constitute legal advice. For advice tailored to a specific situation, consult a Philippine lawyer or accredited cybercrime specialist.
14. Quick Reference Contacts
- NBI-CCD Hotline: (02) 8523-8231 loc. 4465
- NBI Online Complaints: complain.nbi.gov.ph
- PNP-ACG 24/7: (02) 8414-1560 / 0998-598-8116 (Globe)
- SEC Investor Protection: eipd@sec.gov.ph
- BSP Consumer Assistance: consumeraffairs@bsp.gov.ph
You now have a robust, end-to-end map of what, why, and how to report an online scammer to the NBI—grounded in Philippine statutes, law-enforcement practice, and real-world timelines. Stay vigilant, document meticulously, and assert your rights without delay.