The proliferation of online scams, investment frauds, phishing sites, fake e-commerce platforms, and cryptocurrency Ponzi schemes has made the reporting of fraudulent websites one of the most critical cybercrime concerns in the Philippines. This article consolidates the current legal framework, competent authorities, step-by-step reporting procedures, evidentiary requirements, criminal liabilities, and available civil remedies as of December 2025.
1. Primary Laws Governing Online Scams and Fraudulent Websites
a. Republic Act No. 10175 (Cybercrime Prevention Act of 2012)
- Section 4(a)(1): Computer-related fraud
- Section 4(a)(2): Computer-related forgery
- Section 4(a)(3): Computer-related identity theft
- Section 4(b)(3): Cyber-squatting
- Section 6: All offenses under the Revised Penal Code committed through ICT are raised one degree higher in penalty.
b. Republic Act No. 8792 (Electronic Commerce Act of 2000)
- Recognizes the legal validity of electronic documents and signatures; used in proving authenticity of scam websites.
c. Revised Penal Code (Act No. 3815) offenses committed online
- Art. 315: Estafa (swindling) – the most commonly charged offense for investment and pig-butchering scams
- Art. 171-172: Falsification of documents
- Art. 183: False testimony
- Art. 184: Offering false testimony in evidence
d. Republic Act No. 10173 (Data Privacy Act of 2012)
- Violations are often present when scammers harvest personal data via fake websites.
e. Republic Act No. 11934 (SIM Registration Act of 2022)
- Used to trace mobile numbers linked to GCash, Maya, or bank accounts used by scammers.
f. Republic Act No. 12010 (Anti-Financial Account Scamming Act – AFASA, signed October 2024)
- Criminalizes money mule accounts, social engineering, and financial scams involving electronic fund transfers.
- Explicitly covers “economic abuse” through phishing links and fake investment platforms.
2. Competent Government Agencies for Reporting Scam Websites
| Agency | Primary Mandate | How to Report | Turn-around / Action |
|---|---|---|---|
| Philippine National Police – Anti-Cybercrime Group (PNP-ACG) | Investigation and filing of criminal complaints | • Online: cybercrime.pnp.gov.ph • Hotline: 723-0401 loc 7491 • Walk-in: Camp Crame |
Primary investigating agency; issues subpoena for subscriber data |
| National Bureau of Investigation – Cybercrime Division (NBI-CCD) | Independent investigation, especially high-profile cases | • Online: nbi.gov.ph • Hotline: 8523-8231 to 38 • Walk-in: Taft Ave., Manila |
Preferred for complex international scams |
| Department of Justice – Office of Cybercrime (DOJ-OOC) | Preliminary investigation and prosecution | File complaint-affidavit after PNP or NBI investigation | Prosecutorial arm |
| Cybercrime Investigation and Coordinating Center (CICC) | Policy coordination and takedown requests | cicc.gov.ph/report | Coordinates with international partners for domain takedown |
| Bangko Sentral ng Pilipinas (BSP) | Financial/investment scams involving banks or e-money | bsp.gov.ph – Consumer Assistance | Freezes bank accounts within 72 hours upon court order |
| Securities and Exchange Commission (SEC) | Fake investment schemes, unregistered entities | sec.gov.ph – “Scam-O-Meter” or enforcement@sec.gov.ph | Issues Cease and Desist Orders (CDO) and advisory postings |
| Department of Information and Communications Technology (DICT) | Domain and IP blocking | Request via CICC or direct to DICT | Coordinates with ISPs for local blocking |
3. Step-by-Step Guide: How to Report a Scam Website (2025 Procedure)
Preserve Evidence Immediately
- Take full-page screenshots (date and time visible)
- Record screen videos of the entire transaction process
- Save URLs, chat logs (Telegram, WhatsApp, Viber), emails, and receipts
- Download the entire website using singlefile or HTTrack (if still online)
- Note bank accounts, GCash/Maya numbers, cryptocurrency wallet addresses used.
Report to Financial Institutions First (within minutes to hours)
- Call your bank’s fraud hotline and request temporary freeze and dispute.
- For GCash/Maya: report via app → “Report Scam” (automatic 72-hour hold possible under AFASA).
File Police Blotter (Barangay or nearest police station) – optional but strengthens case.
File Formal Report
Most victims now file directly online:- PNP-ACG: cybercrime.pnp.gov.ph → “File a Complaint”
- NBI: nbi.gov.ph → “Cybercrime Complaint”
Required attachments: IDs, screenshots, transaction receipts.
Request Preservation and Takedown
- PNP-ACG or NBI will issue preservation request to hosting provider (usually via ICANN or APNIC).
- CICC will request DICT to block the site locally (appears as “This site has been blocked by the Government of the Philippines”).
Follow-up for Inquest or Preliminary Investigation
- If suspect is identified and arrested within 36 hours → inquest before prosecutor.
- Otherwise, regular preliminary investigation (DOJ or City Prosecutor).
4. Criminal Liabilities and Penalties (2025)
| Offense | Law | Penalty |
|---|---|---|
| Estafa through fake website | Art. 315 RPC + RA 10175 | Prisión mayor to reclusion temporal (6 years 1 day – 20 years) + fine |
| Syndicated estafa | PD 1689 | Reclusión perpetua if five or more persons |
| Computer-related fraud | Sec. 4(a)(1) RA 10175 | One degree higher than RPC penalty |
| Money mule under AFASA | RA 12010 | 10–20 years + fine up to ₱3,000,000 |
| Illegal access / phishing | Sec. 4(a)(4) RA 10175 | Up to 12 years |
5. Civil Remedies and Recovery of Funds
- File civil action for damages incidental to criminal case (no separate filing fee).
- BSP-mediated recovery: possible if bank is negligent.
- SEC restitution fund (limited to registered victims of revoked investment companies).
- Small claims (up to ₱1,000,000) against identifiable local perpetrators.
6. International and Domain Takedown Realities
- .ph domains: PPT (dotPH) usually suspends within 24–48 hours upon NBI/CICC request.
- .com/.net/.org: takedown is slower (7–30 days) via ICANN registrar.
- Hosting in Russia, Vietnam, Cambodia, or bulletproof hosts: almost impossible to take down; focus shifts to freezing financial trails.
7. Preventive Measures Recognized by Law
- SEC Advisory List and Scam-O-Meter
- BSP Unlicensed Entities List
- CICC “Blocked URLs” public list (accessible via DICT portal)
Reporting a scam website in the Philippines is now faster and more coordinated than ever, with the PNP-ACG and NBI accepting fully online complaints and the DICT capable of nationwide blocking within hours. Victims who act within the first 24–72 hours have the highest chance of account freezes and perpetrator identification. While full recovery remains statistically low (10–15 % nationally), successful prosecution rates for syndicated online scams have risen sharply since the enactment of the Anti-Financial Account Scamming Act in 2024.
Prompt, evidence-rich reporting remains the single most effective tool against the evolving threat of fraudulent websites in the Philippine cyberspace.