With the rapid digital transformation in the Philippines, cyber-related crimes—ranging from phishing and investment scams to marketplace fraud—have become increasingly prevalent. The primary legal framework governing these acts is Republic Act No. 10175, otherwise known as the Cybercrime Prevention Act of 2012.

If you have fallen victim to an online scam, immediate action is necessary to increase the chances of fund recovery and the prosecution of the perpetrators.

I. Preliminary Steps: Data Preservation

Before approaching authorities, you must secure all digital evidence. Under Philippine law, electronic documents and messages are admissible as evidence pursuant to the Rules on Electronic Evidence.

Screenshots: Capture all conversations (Messenger, WhatsApp, Viber, Telegram), profile pages of the scammer, and the original advertisement or post.
Transaction Records: Secure official receipts, bank transfer confirmations (InstaPay/PESONet), or GCash/Maya transaction histories.
URLs and Handles: Note the exact website URLs or social media handles. Scammers often change their names, but unique ID numbers or permanent links can sometimes be traced.

II. Reporting to Financial Institutions

If the scam involved a monetary transfer, your first call should not be to the police, but to the bank or e-wallet provider used.

Bank Freeze: Request a "Hold Out" on the recipient's account. While banks generally require a court order to freeze accounts permanently, filing an internal report immediately puts the account on the institution's radar for suspicious activity.
Platform Reporting: Report the user to the platform (e.g., Facebook Marketplace, Shopee, Lazada) to facilitate the banning of the account and to assist in data preservation should the police request it later.

III. Filing the Official Complaint

In the Philippines, two primary government agencies handle cybercrime complaints. You may choose to file with either, though the NBI is often preferred for complex financial trails, while the PNP is more accessible for localized incidents.

1. National Bureau of Investigation (NBI) - Cybercrime Division

The NBI is the premier investigative body for technical crimes.

Online Portal: Visit the NBI Complaint Management Service.
Walk-in: You may visit the NBI Cybercrime Division (CCD) at the NBI Headquarters in Manila or any regional office.
Process: You will be required to provide a sworn statement (Affidavit of Complaint).

2. Philippine National Police (PNP) - Anti-Cybercrime Group (ACG)

The PNP-ACG has "Cyber Response Units" across various provinces.

Online Portal: Use the E-Complaint portal or the "Aleng Pulis" platform.
Walk-in: Head to Camp Crame or the nearest Regional Anti-Cybercrime Unit (RACU).
Required Documents: Bring a printed copy of all evidence and a valid government ID.

IV. The Role of the Cybercrime Investigation and Coordinating Center (CICC)

The CICC is the inter-agency body that coordinates the national response to cyber threats.

Inter-Agency Response Center (IARC): You can call the Hotline 1326.
Purpose: The 1326 hotline is specifically designed to assist victims of scams in real-time, helping coordinate with banks and telcos to block fraudulent numbers or accounts.

V. Criminal Prosecution

Once the investigation identifies the perpetrator, the legal process moves to the Department of Justice (DOJ).

Inquest or Preliminary Investigation: A prosecutor will determine if there is "probable cause" to file the case in court.
Applicable Charges:

Swindling (Estafa): Under Article 315 of the Revised Penal Code, in relation to Section 6 of RA 10175.
Violation of RA 10175: Specifically for computer-related identity theft or fraud.
RA 11934 (SIM Registration Act): If the scammer used a registered SIM, this law provides a mechanism to identify the owner, though it requires a subpoena.

VI. Important Legal Considerations

Prescription Period: Under RA 10175, the penalty for cybercrimes is one degree higher than that provided by the Revised Penal Code. Crimes punishable under the Cybercrime Act typically prescribe in 15 years, but immediate filing is encouraged to prevent the loss of digital footprints.

Cyber Warrant: Only the police can apply for a Warrant to Disclose Computer Data (WDCD) to get detailed information from service providers (like Facebook or Google).
Private Prosecution: You may hire a private lawyer to act as a private prosecutor to ensure the case is actively pursued in court and to claim civil damages (reimbursement of the scammed amount plus moral damages).

VII. Summary Checklist for Victims

Stop communication with the scammer immediately.
Screenshot everything before they delete the messages.
Call Hotline 1326 (CICC) for immediate guidance.
Report to the Bank/E-wallet to flag the recipient's account.
File a formal complaint with the PNP-ACG or NBI-CCD.
Execute a Sworn Affidavit detailing the circumstances of the fraud.