If someone used the internet, a phone, social media, email, e-wallet, online bank account, website, or messaging app to scam, threaten, impersonate, harass, defame, extort, hack, or expose private images, the complaint should usually be filed with a cybercrime-capable law enforcement office: the PNP Anti-Cybercrime Group, the NBI Cybercrime Division, or, for urgent online scams and coordination, the Cybercrime Investigation and Coordinating Center. The right office depends on what happened, how urgent it is, where you are, and whether you need immediate help preserving digital evidence, tracing accounts, freezing funds, or building a criminal case.

Where should you file a cybercrime complaint in the Philippines?

For most people, these are the practical filing options:

Office	Best for	What it usually does
PNP Anti-Cybercrime Group (PNP-ACG)	Online scams, hacking, threats, identity theft, cyber libel, account takeovers, harassment, extortion, fake accounts	Receives complaints, conducts investigation, digital forensics, coordination with platforms, and case build-up
NBI Cybercrime Division (NBI-CCD)	More complex cases, cross-border elements, public-interest cases, syndicated scams, online sexual extortion, data or device examination	Receives complaints, interviews complainants, examines devices, prepares investigation authority, and may file complaints with prosecutors
Cybercrime Investigation and Coordinating Center (CICC)	Urgent scam reporting, phishing, text scams, e-wallet or bank fraud, malicious links, fast coordination	Coordinates cybercrime response, including referrals to PNP/NBI and coordination with other agencies
City or Provincial Prosecutor’s Office / DOJ	When you already have a complete complaint-affidavit and evidence for preliminary investigation	Determines whether the case should be filed in court
National Privacy Commission (NPC)	Personal data breach, misuse of personal information, unauthorized disclosure of sensitive personal data	Handles data privacy complaints under the Data Privacy Act

In practice, many complainants start with PNP-ACG or NBI-CCD because cybercrime cases often need technical investigation before the prosecutor can act. If the issue is an online scam involving money, report it immediately through the CICC / Inter-Agency Response Center hotline 1326 because speed matters when funds may still be traceable or reversible.

Legal basis for cybercrime complaints in the Philippines

The main law is Republic Act No. 10175, the Cybercrime Prevention Act of 2012, which defines and penalizes cybercrime offenses in the Philippines. The full text is available on Lawphil’s copy of RA 10175.

RA 10175 covers several categories of offenses, including:

1. Offenses against computer systems

These include:

Illegal access or hacking
Illegal interception
Data interference
System interference
Misuse of devices
Cyber-squatting

These are common in cases involving hacked Facebook accounts, compromised email accounts, stolen business systems, unauthorized access to cloud drives, or malicious use of login credentials.

2. Computer-related offenses

These include:

Computer-related forgery
Computer-related fraud
Computer-related identity theft

This category is often relevant to online selling scams, investment scams, fake payment confirmations, phishing links, fake job recruitment pages, e-wallet fraud, impersonation accounts, and romance scams.

3. Content-related offenses

These include:

Cybersex
Child sexual abuse or exploitation material, connected with RA 9775 where applicable
Unsolicited commercial communications in specific situations
Online libel

For online libel, RA 10175 connects with Articles 353 and 355 of the Revised Penal Code, which define libel and punish libelous imputations made through writing or similar means. In Disini v. Secretary of Justice, G.R. No. 203335, February 18, 2014, the Supreme Court upheld the constitutionality of cyber libel but limited some parts of the law, including liability for mere reactions or sharing in certain contexts.

4. Crimes committed through ICT

Section 6 of RA 10175 provides that crimes under the Revised Penal Code and special penal laws may be covered when committed by, through, or with the use of information and communications technology, with the penalty generally one degree higher.

This is why online scams may involve both:

Estafa under Article 315 of the Revised Penal Code; and
Computer-related fraud under RA 10175.

Other laws may also apply depending on the facts, such as:

RA 10173, Data Privacy Act of 2012, for unauthorized processing, disclosure, or breach of personal data;
RA 11934, SIM Registration Act, for issues involving registered SIMs, spoofing, or scam numbers;
RA 9995, Anti-Photo and Video Voyeurism Act of 2009, for threats or distribution of intimate images;
RA 9262, Anti-Violence Against Women and Their Children Act, if the online abuse is committed by a current or former intimate partner;
RA 9775, Anti-Child Pornography Act of 2009, for child sexual abuse or exploitation materials.

Main offices where you can file

PNP Anti-Cybercrime Group

The PNP Anti-Cybercrime Group is one of the primary law enforcement units for cybercrime complaints. The official PNP-ACG e-complaint portal has been referenced by government channels as PNP-ACG eComplaint, and the PNP-ACG may also be reached through its official channels and regional anti-cybercrime units.

File with PNP-ACG when the case involves:

Online scam or fraud
Hacked account
Fake Facebook, Instagram, TikTok, or messaging account
Online threat or harassment
Identity theft
Phishing
Cyber libel
Sextortion or blackmail
Unauthorized access to devices or accounts

PNP-ACG is often the most accessible option if there is a regional cybercrime unit near you.

NBI Cybercrime Division

The NBI Cybercrime Division also handles cybercrime investigations. The NBI Citizens’ Charter page for Investigative Assistance for Victims of Computer Crimes states that the general public may proceed to the Cybercrime Division to file a complaint or request investigation. The process includes a complaint sheet, preliminary interview, sworn statements, supporting documents, and possible examination of relevant devices.

The NBI page lists no filing fee for this frontline investigative assistance and shows an estimated frontline processing time of around 1 hour and 10 minutes for the initial steps, although the full investigation can take much longer depending on the complexity of the case.

File with NBI-CCD when the case is:

Complex or syndicated
Involves multiple victims
Involves foreigners, overseas accounts, or cross-border elements
Requires device examination
Involves online sexual extortion or sensitive evidence
Connected to other serious offenses, such as trafficking, estafa, or data theft

Cybercrime Investigation and Coordinating Center

The CICC is the government’s inter-agency coordinating body for cybercrime matters. It is especially useful for urgent online scam reports, phishing, malicious links, SMS scams, and coordination with agencies such as DICT, NTC, NPC, PNP, and NBI.

For online scams, the publicized reporting channel is the I-ARC / CICC hotline 1326. Reports may also be made through the eGovPH app eReport feature for certain scams and suspicious messages. Government reports have also listed alternative I-ARC mobile numbers for Smart, Globe, and DITO users.

Use CICC when:

Money was just sent to a scammer;
A phishing link is actively stealing logins;
A scam SIM, number, or sender ID is being used;
You need quick routing to the proper agency;
You are unsure whether the case should go to PNP, NBI, NTC, NPC, or another office.

For criminal prosecution, however, a CICC report usually still needs to be followed by a formal complaint, investigation, and prosecutor evaluation.

Prosecutor’s Office or DOJ

A criminal case is not filed directly in court by the complainant in the ordinary way. It usually goes through the prosecutor first.

Under the 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings, prosecutors evaluate whether the evidence establishes prima facie evidence with reasonable certainty of conviction before filing an Information in court. This means the evidence should not merely show suspicion; it should be strong enough to establish the elements of the offense if left uncontroverted.

You may file with the prosecutor when you already have:

A notarized complaint-affidavit;
Supporting affidavits of witnesses;
Screenshots, transaction records, URLs, account links, emails, chat logs, receipts, bank or e-wallet records;
Identification of the respondent, if known; and
Enough evidence to show the elements of the crime.

In cybercrime cases, many complainants first go to PNP-ACG or NBI-CCD because law enforcement can help identify the respondent, preserve evidence, request platform or telecom data through proper legal channels, and prepare the case for the prosecutor.

Step-by-step guide to filing a cybercrime complaint

1. Preserve the evidence immediately

Do not just take one screenshot and delete the conversation. Cybercrime cases often fail because the complainant cannot prove the account, URL, transaction, date, or identity trail.

Save:

Full screenshots showing the profile name, username, URL, date, and time;
Complete chat history, not just selected messages;
Account links, profile URLs, group links, page links, email addresses, phone numbers, and usernames;
E-wallet or bank transaction receipts;
Reference numbers;
Delivery records, order confirmations, or tracking details;
Emails with full headers, if possible;
Photos or videos received;
Screenshots of threats, demands, defamatory posts, or blackmail messages;
Names and contact details of witnesses.

For serious cases, keep the original device and original account accessible. A printout alone may not be enough if the other side later claims the screenshot was edited.

2. Do not alert the suspect too early

Victims often message the scammer, threaten to sue, or post publicly before filing. This can cause the suspect to:

Delete the account;
Change usernames;
Block the victim;
Move the money;
Delete posts;
Warn accomplices;
Destroy evidence.

If money was transferred, immediately report to the bank, e-wallet provider, and CICC hotline 1326. For threats, sextortion, or hacking, preserve evidence first and file with PNP-ACG or NBI as soon as possible.

3. Prepare a written timeline

Investigators and prosecutors need a clear story. Make a simple timeline:

Date / Time	What happened	Evidence
June 1, 9:30 PM	Seller posted item on Facebook Marketplace	Screenshot of listing
June 2, 10:15 AM	Victim sent ₱8,500 via GCash	GCash receipt
June 2, 10:30 AM	Seller promised delivery	Messenger screenshot
June 3 onward	Seller blocked victim	Screenshot showing blocked account

This helps the investigator quickly understand the case and identify missing evidence.

4. Go to PNP-ACG, NBI-CCD, or the nearest cybercrime-capable office

Bring both printed and digital copies. If possible, bring the phone, laptop, or device where the messages or transactions can still be opened.

At the office, expect:

Initial interview or complaint intake;
Review of screenshots and supporting documents;
Filling out a complaint sheet or investigation form;
Execution of a sworn statement or complaint-affidavit;
Possible device examination or request for digital copies;
Referral for further investigation, case build-up, or prosecutor filing.

5. Execute a complaint-affidavit

A complaint-affidavit is a sworn written statement narrating the facts. It should state:

Your full name, address, and contact details;
The respondent’s name, username, account link, phone number, or identifying details, if known;
What happened, in chronological order;
Why the act is criminal;
What evidence supports each fact;
The damage suffered, such as money lost, reputational harm, emotional distress, business damage, or privacy violation.

The affidavit must be sworn before a prosecutor, notary public, or authorized officer, depending on the procedure of the office.

6. Cooperate during case build-up

Cybercrime investigations may require:

Requests to platforms or service providers;
Verification from banks, e-wallets, or telecom companies;
Cyber warrants under the Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC;
Digital forensic examination;
Identification of IP logs, subscriber information, devices, or linked accounts;
Additional affidavits from witnesses.

The Rule on Cybercrime Warrants governs special warrants such as warrants to disclose computer data, intercept computer data, and search, seize, and examine computer data. This is why complainants cannot simply demand that police “trace the IP address” instantly. Proper legal process is often required.

7. Prosecutor evaluation

If the investigating agency finds sufficient basis, the case may be referred to the prosecutor. The prosecutor may:

Docket the complaint;
Require additional evidence;
Issue subpoenas to respondents;
Conduct preliminary investigation;
Dismiss the complaint;
File an Information in court if the evidence meets the required standard.

The prosecutor does not decide guilt. The prosecutor decides whether the case should proceed to court.

What documents should you bring?

Bring as many of the following as applicable:

Requirement	Practical notes
Valid government ID	Passport, driver’s license, UMID, national ID, PRC ID, etc.
Complaint-affidavit or written narrative	Some offices help prepare the sworn statement; a prepared draft saves time
Screenshots	Print and save digital copies; include date, time, username, URL
Chat logs	Export if possible; do not crop important details
URLs and account links	Usernames can change, but URLs and IDs may help
Transaction receipts	Bank transfer, GCash, Maya, remittance, crypto wallet, card charge
Proof of ownership	For hacked accounts, show email, phone number, old screenshots, ID, business documents
Witness affidavits	Useful for threats, libel, business damage, or impersonation
Device used	Bring the phone or laptop containing the original messages or account access
Police blotter, if any	Not always required, but helpful for threats or harassment
Demand letters or platform reports	If already sent, keep copies

Common cybercrime scenarios and where to file

Online selling scam

File with PNP-ACG, NBI-CCD, or report urgently to CICC 1326 if payment was recent.

Possible offenses:

Estafa under Article 315 of the Revised Penal Code;
Computer-related fraud under RA 10175;
Possible SIM Registration Act issues if a scam SIM was used.

Also report to the bank, e-wallet, platform, and delivery service.

Hacked Facebook, Gmail, Instagram, or business account

File with PNP-ACG or NBI-CCD.

Possible offenses:

Illegal access;
Computer-related identity theft;
Data interference;
Computer-related fraud, if the hacked account was used to solicit money.

Do not delete recovery emails or security alerts. These may show dates, locations, devices, or suspicious logins.

Sextortion or threats to leak private photos

File immediately with PNP-ACG or NBI-CCD. If the victim is a woman and the offender is a current or former partner, RA 9262 may also apply. If the content involves a child, the case becomes extremely serious under child protection laws, including RA 9775 and related statutes.

Possible offenses:

Grave threats under the Revised Penal Code;
Robbery or extortion-related offenses, depending on the demand;
Anti-Photo and Video Voyeurism Act;
RA 10175 if committed through ICT;
VAWC, if applicable.

Preserve the threats, account details, payment demands, and any posted or sent images.

Cyber libel

File with PNP-ACG, NBI-CCD, or the prosecutor’s office if you already have a complete complaint.

Cyber libel usually requires proof of:

A defamatory imputation;
Publication through a computer system;
Identifiability of the offended person;
Malice, subject to legal rules on presumed or actual malice;
Authorship or responsibility of the respondent.

For cyber libel, timing is important. The Supreme Court has clarified in recent rulings, including Causing v. People, that cyber libel prescribes in one year from discovery, applying Article 90 of the Revised Penal Code. Do not wait.

Fake account or impersonation

File with PNP-ACG or NBI-CCD.

Possible offenses:

Computer-related identity theft under RA 10175;
Data Privacy Act violations, if personal data was misused;
Estafa or fraud, if the fake account was used to obtain money;
Cyber libel, if defamatory statements were posted.

Take screenshots showing the fake profile, URL, posts, messages, and any attempt to solicit money or damage reputation.

Data breach or unauthorized use of personal information

File with the National Privacy Commission if the main issue is misuse, exposure, or unauthorized processing of personal data. If there is fraud, hacking, identity theft, or extortion, also file with PNP-ACG or NBI-CCD.

The Data Privacy Act of 2012 penalizes certain unauthorized processing, access, disclosure, and concealment of security breaches involving personal information.

How long does a cybercrime complaint take?

There is no single timeline. The first intake may take only a few hours, but the full case may take weeks or months depending on the evidence.

Typical timing:

Stage	Usual practical timeframe
Initial complaint intake	Same day, if documents are complete
Preliminary interview and sworn statement	Same day to a few days
Case build-up and technical investigation	Several weeks to several months
Requests to banks, platforms, telcos, or service providers	Varies widely
Prosecutor evaluation	Several weeks to months
Court proceedings, if filed	Months to years

Common bottlenecks include incomplete screenshots, inability to identify the suspect, delayed reporting, deleted accounts, foreign-based platforms, lack of subscriber records, and the need for warrants or formal requests.

Can Filipinos abroad file a cybercrime complaint?

Yes, but practical filing is harder if the complainant is outside the Philippines.

A Filipino abroad may:

Prepare a detailed affidavit;
Have documents notarized or consularized, depending on where they are executed;
Coordinate with family or an authorized representative in the Philippines;
Report online scams through available digital channels;
File with PNP-ACG, NBI, or the prosecutor through proper procedures.

If the affidavit is executed abroad, it may need an apostille if the country is a party to the Apostille Convention, or consular authentication if not. Philippine authorities may also require the complainant’s personal appearance later, especially if the case proceeds.

Can foreigners file cybercrime complaints in the Philippines?

Yes. A foreigner may file if the cybercrime has a sufficient connection to the Philippines, such as:

The offender is in the Philippines;
The victim is in the Philippines;
The scam used Philippine bank accounts, e-wallets, SIM cards, or addresses;
The harmful post targeted a person or business in the Philippines;
The device, account, platform activity, or evidence is connected to the Philippines.

Foreign complainants should bring:

Passport and immigration documents, if in the Philippines;
Proof of transaction or communication;
Screenshots and account links;
Proof of business or personal identity, if impersonation is involved;
Properly authenticated foreign documents, if needed.

If the offender is abroad, the case may require coordination through the DOJ Office of Cybercrime, which is the central authority for certain international cooperation matters under RA 10175 and its implementing rules.

Important mistakes to avoid

Relying only on cropped screenshots

Cropped screenshots are easy to challenge. Always preserve full screenshots showing the username, URL, date, time, platform, and surrounding conversation.

Deleting the original conversation

Do not delete messages after printing them. Investigators may need to inspect the original account or device.

Waiting too long

Delay can cause loss of logs, deletion of accounts, transfer of funds, or prescription issues. For cyber libel, the one-year prescriptive period from discovery is especially important.

Posting accusations online

Publicly naming the suspect without sufficient proof may expose the complainant to a counterclaim for libel or cyber libel. Report first, preserve evidence, and let the investigation proceed.

Assuming barangay conciliation is required

Cybercrime complaints generally involve offenses beyond ordinary barangay mediation. While barangay blotters may help document threats or harassment, serious cybercrime complaints are usually handled by law enforcement and prosecutors, not settled through barangay conciliation.

Expecting instant identity tracing

Police and NBI cannot always instantly identify anonymous users. Platforms, telcos, banks, and e-wallets may require formal requests, preservation steps, warrants, or inter-agency coordination.

Frequently Asked Questions

Where do I report online scams in the Philippines?

For urgent online scams, report immediately through the CICC / I-ARC hotline 1326, then file a formal complaint with PNP-ACG or NBI Cybercrime Division. Also report to your bank, e-wallet provider, platform, and telecom provider if a SIM or mobile number was used.

Should I file with the PNP or NBI for cybercrime?

Either may be appropriate. File with PNP-ACG if there is an accessible regional cybercrime unit or the case is a common online scam, hacking, threat, or harassment case. File with NBI-CCD if the case is complex, syndicated, sensitive, cross-border, or requires deeper forensic investigation.

Is a screenshot enough to file a cybercrime complaint?

A screenshot can support a complaint, but it is usually better to preserve the original message, account, URL, device, transaction record, and full conversation. Screenshots should show the date, time, username, profile link, and context.

Can I file a cybercrime complaint online?

Some agencies provide online reporting or initial e-complaint channels, including PNP-ACG and CICC-related reporting options. However, a criminal case usually still requires a sworn statement, supporting evidence, and possible personal appearance or verification.

How much does it cost to file a cybercrime complaint?

Initial complaint filing with law enforcement is generally free. You may spend for printing, photocopying, notarization, transportation, authentication of documents, or legal assistance if you choose to get help preparing affidavits.

What if I do not know the real name of the scammer?

You may still report. Provide all identifiers you have: phone number, SIM, bank or e-wallet account, username, account link, email address, IP-related emails, transaction receipts, delivery details, and screenshots. Law enforcement may investigate the identity through proper channels.

Can I recover money from an online scam?

Recovery is possible in some cases, especially if reported quickly and funds have not been withdrawn or transferred. Immediately contact the bank or e-wallet provider, report to CICC 1326, and file with PNP-ACG or NBI. Criminal prosecution and money recovery are related but not always simultaneous.

Where do I file a complaint for cyber libel?

Cyber libel may be filed with PNP-ACG, NBI-CCD, or the prosecutor’s office if your evidence is complete. Preserve the post, URL, account details, date of discovery, and proof that the post refers to you. Act promptly because cyber libel has a one-year prescriptive period from discovery.

What if the cybercrime was committed by someone abroad?

File in the Philippines if there is a Philippine connection. The case may require international coordination through proper government channels, especially where foreign platforms, foreign law enforcement, or overseas records are involved.

Can I file both a cybercrime complaint and a data privacy complaint?

Yes, if the facts support both. For example, identity theft using leaked personal data may involve RA 10175 and the Data Privacy Act. File the criminal aspect with PNP-ACG or NBI, and the privacy aspect with the National Privacy Commission.

Key Takeaways

Most cybercrime complaints in the Philippines are filed with PNP-ACG or NBI Cybercrime Division.
For urgent online scams, especially recent money transfers, report immediately through CICC hotline 1326 and your bank or e-wallet provider.
The main law is RA 10175, the Cybercrime Prevention Act of 2012, but other laws like estafa under the Revised Penal Code, the Data Privacy Act, SIM Registration Act, Anti-Photo and Video Voyeurism Act, VAWC, and child protection laws may also apply.
Preserve full digital evidence: screenshots, URLs, usernames, transaction receipts, chat logs, emails, devices, and witness details.
A formal criminal case usually requires a complaint-affidavit, supporting evidence, investigation, and prosecutor evaluation.
Cybercrime cases can take time because investigators may need warrants, platform records, telco data, bank coordination, or forensic examination.
For cyber libel, act quickly because the prescriptive period is generally one year from discovery.
Filipinos abroad and foreigners may file Philippine cybercrime complaints when there is a sufficient Philippine connection.