If you have lost money, shared sensitive information, or been deceived through an online transaction, investment scheme, romance ploy, or phishing attack, reporting the incident to the Philippine National Police Anti-Cybercrime Group (PNP ACG) gives law enforcement the information and evidence they need to investigate and pursue the perpetrators. Online scams in the Philippines frequently involve social media platforms, messaging apps, e-wallets such as GCash or Maya, bank transfers, and fake websites or apps. The PNP ACG specializes in crimes where information and communications technology serves as the instrument or target, making it the most direct agency for most digital fraud cases.

This article explains the legal framework that covers these offenses, the practical steps to prepare and file a report, the documents and evidence required, what typically happens during an investigation, the challenges many victims encounter, and how the process works for Filipinos abroad and foreigners. It draws on the actual procedures followed by the PNP ACG and the realities victims face when dealing with sophisticated syndicates that often use dummy accounts, money mules, virtual private networks, and cross-border elements.

Legal Basis for Reporting Online Scams

The primary law governing cyber-related offenses is Republic Act No. 10175, the Cybercrime Prevention Act of 2012. This law created dedicated cybercrime units within the PNP and the National Bureau of Investigation and gave them specific powers to investigate, preserve digital evidence, and obtain data from service providers. It covers computer-related fraud, which includes inputting, altering, or deleting computer data with intent to cause damage or gain unlawful advantage—precisely the mechanism behind most online investment scams, fake trading platforms, and deceptive social media schemes.

Many online scams are also prosecuted under Article 315 of the Revised Penal Code (estafa or swindling). Estafa occurs when a person uses deceit or false pretenses to obtain money or property. When the deceit is carried out through computers, mobile phones, or the internet, prosecutors commonly file both the estafa charge and the corresponding cybercrime provision under RA 10175. Penalties for estafa depend on the amount involved and were adjusted by Republic Act No. 10951 in 2017; even relatively small losses remain criminal offenses.

The PNP ACG operates under the Directorate for Investigation and Detective Management. Its investigators can issue preservation orders to internet service providers, telcos, banks, and e-wallet companies, and they work with the Department of Justice Office of Cybercrime on cases that require international cooperation. Regional Trial Courts have jurisdiction over these cases.

Preparing Strong Evidence Before You Report

Digital evidence disappears or becomes harder to authenticate if you delay. Start by securing your own accounts: change passwords, enable two-factor authentication, and monitor for further unauthorized activity. Do not delete or alter anything.

Collect and organize the following in chronological order:

Full conversation threads from Messenger, WhatsApp, Viber, Telegram, Instagram, TikTok, or email, showing usernames, profile links, timestamps, and every message.
Clear screenshots or screen recordings that capture dates, times, profile pictures, and any “proof” the scammer showed (fake dashboards, transaction screenshots, or certificates).
Transaction records: GCash, Maya, bank statements, remittance receipts, or crypto wallet addresses with exact reference numbers, amounts, dates, and recipient details.
Any links, websites, or apps the scammer directed you to, including URLs and screenshots of the pages.
Phone numbers, email addresses, bank account numbers, or wallet addresses used by the scammer or any money mule.
A simple timeline you create yourself listing every contact, promise, payment, and discovery of the scam.

Store original files in a secure folder and make working copies. Label files clearly (for example, “2026-05-12_Scammer_Profile_Screenshot.png”). Strong, well-organized evidence significantly increases the chance that investigators can trace accounts, identify mules, and build a case that prosecutors will accept.

Step-by-Step Process to Report to the PNP Anti-Cybercrime Group

Report the fraud immediately to your bank or e-wallet provider. Call or use the in-app reporting feature for GCash, Maya, or your bank. Request a transaction hold or investigation. Provide them with the police report reference number once you have it. Financial institutions can sometimes freeze funds or reverse transactions if acted upon quickly.
Report the scammer’s account or page to the platform. On Facebook, Instagram, TikTok, or the relevant app, use the built-in reporting tools for fraud or impersonation. This can lead to quick takedowns even before police action.
Prepare your complaint-affidavit. Write a clear, chronological narrative in your own words. Include who contacted you, what was promised, what you sent or did, how and when you realized it was a scam, the total amount lost, and every piece of identifying information about the suspect. Sign it in front of a notary public or at the police station where an officer can administer the oath. This sworn statement becomes the foundation of the official complaint.
Choose how to file with PNP ACG.
- Online portal: Use the official PNP ACG reporting system at acg.pnp.gov.ph or the dedicated eComplaint facility. Upload your ID, complaint-affidavit, and evidence files. You will usually receive a reference or tracking number.
- Email: Send a complete package to acg@pnp.gov.ph with the subject line clearly stating it is a cybercrime complaint. Attach scanned PDFs of your ID, notarized affidavit, and organized evidence.
- Hotline: Call (02) 8723-0401 local 7491 or the current mobile numbers posted on the official PNP ACG Facebook page. Officers can give immediate guidance and may direct you to the portal or a regional unit.
- In person: Visit the ACG headquarters at Camp Crame in Quezon City or the nearest Regional Anti-Cybercrime Unit (RACU) under your local Police Regional Office. Bring original documents and copies. Staff will assist you in finalizing the complaint.
Follow up and cooperate. Keep the reference number safe. Investigators may contact you for additional statements, clarifications, or to execute further affidavits. Respond promptly. You may be asked to identify suspects in photo line-ups or provide supplemental evidence as the investigation progresses.

What Happens After Filing and Realistic Timelines

Once received, the complaint undergoes initial assessment. If it falls under ACG jurisdiction, an investigator is assigned. The team can issue preservation and disclosure orders to telcos, banks, e-wallet providers, and social media companies under RA 10175. These orders typically require providers to supply subscriber information, transaction histories, and IP logs within set periods.

Investigation length varies widely. Straightforward cases involving identifiable local mules or repeated patterns may see arrests or account freezes within weeks. Complex syndicate operations, especially those using cryptocurrency, foreign servers, or multiple layers of mules, can take several months or longer. Digital forensics, coordination with other PNP units, and court processes for search warrants all add time.

The PNP ACG’s role is to investigate and build the criminal case. They forward findings to prosecutors when there is probable cause. Actual prosecution and trial occur in the appropriate Regional Trial Court. Recovery of money is not automatic. Early reporting to banks combined with police action offers the best chance of freezing funds before they are fully laundered. Many victims also file a separate civil action for sum of money or damages to pursue civil recovery.

Common Challenges and How Ordinary People Overcome Them

Many victims delete chats or confront the scammer, which can destroy evidence or alert the perpetrators to delete their own accounts. Always preserve first and report quietly through official channels.

Scammers frequently use money mules—ordinary people whose accounts are used to receive and forward funds. Identifying the ultimate operators takes time and resources. Reporting still matters because each complaint adds to the data that allows ACG to spot patterns and target higher-level actors.

Fake recovery scams are rampant. Individuals or pages claiming to be connected to PNP ACG or offering to “recover” your money for an upfront fee are themselves scammers. The real PNP ACG never asks victims for money to process reports or return funds. Verify every contact only through the official website and verified Facebook page.

Volume of complaints is high, so prioritization occurs based on evidence strength, amount involved, and whether the case forms part of a larger pattern. Even smaller losses are worth reporting; they help authorities track emerging scam types and protect the public.

Special Considerations for Filipinos Abroad and Foreigners

Overseas Filipino workers and Filipinos living abroad can file through the online portal or email. For the complaint-affidavit, you may execute it before a Philippine Embassy or Consulate officer, or have it notarized locally and apostilled under the Apostille Convention (which the Philippines joined in 2019). A Special Power of Attorney can authorize a trusted relative or lawyer in the Philippines to file and follow up on your behalf; the SPA itself usually requires proper notarization and apostille.

Foreigners victimized while in the Philippines or by syndicates operating from the Philippines follow the same process. Jurisdiction generally exists when the crime was committed using Philippine systems or when the victim or offender has sufficient connection to the country. If you have already returned home, the online and email options remain available. In complex cross-border cases, the DOJ Office of Cybercrime can coordinate through mutual legal assistance mechanisms, though these take additional time.

Required Documents and Practical Details

Item	Purpose	Notes / Tips
Valid government-issued ID	Prove identity of complainant	Passport, PhilID, driver’s license, or UMID; foreigners use passport
Notarized complaint-affidavit	Official sworn statement of facts	Must be signed before notary or authorized police officer
Digital evidence package	Support the allegations and enable tracing	Organized screenshots, chat exports, transaction proofs with timestamps
Proof of loss	Establish the amount and method of transfer	Bank/e-wallet statements, remittance receipts, crypto records
Timeline or summary sheet	Help investigators quickly understand the case	One-page chronological list of key events

There is no filing fee for submitting a complaint to the PNP ACG. Notarial fees for the affidavit typically range from PHP 100 to PHP 500 depending on the notary and location. Regional units may assist with the oath at no or minimal cost.

Frequently Asked Questions

How do I report a GCash or online investment scam to the PNP Anti-Cybercrime Group?

Begin by reporting the transaction inside the GCash or banking app and requesting an investigation. Then prepare your evidence and complaint-affidavit and submit through the official PNP ACG online portal at acg.pnp.gov.ph, by email to acg@pnp.gov.ph, or in person at the nearest ACG office or regional unit. Provide complete transaction references and chat records.

Is there an official online form or portal for PNP ACG cybercrime complaints?

Yes. The PNP Anti-Cybercrime Group maintains an online reporting facility through its website (acg.pnp.gov.ph) and a dedicated eComplaint system where you can upload your documents and evidence electronically. Always access it directly from the official site to avoid fake pages.

Do I need a lawyer to file a complaint with PNP ACG?

No. You can prepare and file the complaint yourself. Many victims successfully submit reports without legal representation. However, if the amount is large, the case is complex, or you are abroad, consulting a lawyer for help drafting the affidavit or following up can be beneficial. The PNP ACG assists complainants in completing the necessary forms.

Will reporting to PNP ACG guarantee that I get my money back?

Reporting starts the criminal investigation and can lead to freezes or arrests, but it does not guarantee full financial recovery. The earlier you report the fraud to your bank or e-wallet provider, the better the chance of freezing funds. Many victims also file a separate civil case for recovery of the amount plus damages.

What if I already deleted the chat messages or screenshots?

Report anyway and provide whatever evidence remains—transaction records, bank statements, emails, or even a detailed written recollection with approximate dates. Investigators may still obtain records from service providers. Act quickly; the sooner you report, the more likely digital records can still be preserved.

Can foreigners or overseas Filipinos file reports with PNP ACG?

Yes. The same channels—online portal, email, hotline, or in-person—are available. For the sworn affidavit, use Philippine Embassy or Consulate services or have a local notarization apostilled. You may also execute a Special Power of Attorney so someone in the Philippines can file and coordinate on your behalf.

How long does a typical PNP ACG investigation into an online scam take?

Initial assessment and evidence preservation can happen within days or weeks. Full investigation, including tracing through multiple accounts or mules, often takes one to several months. Complex syndicated cases may take longer. You will receive updates and a reference number to track progress.

What is the difference between reporting to PNP ACG and NBI Cybercrime Division?

Both agencies handle cybercrime. PNP ACG has regional units across the country and often provides faster initial response for local cases. The NBI Cybercrime Division tends to handle more complex, high-value, or transnational investigations. You may report to either or both; many victims start with PNP ACG and escalate if needed.

How do I avoid fake PNP ACG pages or recovery scams?

Only use the verified official Facebook page (@anticybercrimegroup), the website acg.pnp.gov.ph, and the published hotline and email addresses. The PNP ACG repeatedly warns the public about fake pages. Never send money or personal details to anyone claiming they can recover funds on your behalf—legitimate authorities do not operate this way.

Should I also report to other agencies besides PNP ACG?

Yes. Report the fraudulent transaction to your bank or e-wallet provider right away. Report the account or post to the social media platform. For investment or securities-related scams, file a complaint with the Securities and Exchange Commission. These parallel reports help with immediate account takedowns and financial tracing.

Key Takeaways

Preserve every piece of digital evidence immediately and organize it chronologically before reporting.
File your complaint-affidavit and supporting documents through the official PNP ACG channels: the online portal at acg.pnp.gov.ph, email to acg@pnp.gov.ph, hotline, or in-person visit.
Report the fraud to your bank or e-wallet provider at the same time or even earlier to maximize chances of freezing funds.
The legal foundation rests on RA 10175 (Cybercrime Prevention Act) for the cyber aspects and Article 315 of the Revised Penal Code for estafa.
Filipinos abroad and foreigners can file using the same online and email options, with proper notarization or apostille for sworn documents.
Recovery of money is not guaranteed through the criminal process alone; early action with financial institutions and a possible separate civil case improve outcomes.
Beware of fake recovery offers and unofficial pages claiming to represent PNP ACG—verify everything through official sources only.
Even if your individual loss seems small, reporting helps authorities track patterns and protect the wider public from the same syndicates.

Taking these steps promptly and thoroughly gives the Philippine justice system the best possible foundation to act. Many victims who prepare complete evidence and follow the process see meaningful investigative action, account takedowns, and, in some cases, arrests and partial recoveries. The PNP ACG exists precisely to handle these cases—use the official channels and give investigators the clear, organized information they need to do their work.