Being scammed is stressful because you are dealing with two urgent problems at the same time: stopping further loss and building a report that law enforcement, banks, e-wallets, platforms, or regulators can actually act on. In the Philippines, the right place to report depends on the scam: online seller fraud, GCash/Maya or bank transfer scams, phishing, investment scams, fake lending apps, romance scams, job scams, crypto scams, or identity theft may involve different agencies. This guide explains where to report a scammer in the Philippines, what evidence to prepare, what laws may apply, and what usually happens after you file a complaint.
What Counts as a Scam Under Philippine Law?
A “scam” is not one single offense. In Philippine law, it may fall under several crimes or regulatory violations depending on the facts.
The most common criminal charge is estafa, also called swindling, under Article 315 of the Revised Penal Code. Estafa generally involves deceit or abuse of confidence that causes another person to part with money, property, or something of value. Article 315 includes fraud by false pretenses, fictitious names, imaginary transactions, and similar deceitful acts. (Lawphil)
For online scams, Republic Act No. 10175, the Cybercrime Prevention Act of 2012, is often involved. It recognizes cybercrime offenses and gives the National Bureau of Investigation (NBI) and the Philippine National Police (PNP) authority to organize cybercrime units to handle cases involving violations of the Act. (Supreme Court E-Library)
For bank, e-wallet, phishing, and money mule cases, Republic Act No. 12010, the Anti-Financial Account Scamming Act (AFASA), is especially important. It penalizes money muling, social engineering schemes, opening accounts under fictitious names or another person’s identity, and buying or selling financial accounts. It also allows financial institutions to temporarily hold funds involved in a disputed transaction for a period prescribed by the BSP, not exceeding 30 calendar days unless extended by court order. (Lawphil)
A scam may also involve:
- RA 8484, Access Devices Regulation Act of 1998, for credit card, debit card, ATM, account, PIN, and similar access device fraud. (Lawphil)
- RA 11765, Financial Products and Services Consumer Protection Act, for complaints involving banks, e-wallets, securities, insurance, lending, payments, remittances, and other financial services. (Supreme Court E-Library)
- RA 11967, Internet Transactions Act of 2023, for business-to-consumer and business-to-business internet transactions under DTI’s mandate. (Lawphil)
- RA 7394, Consumer Act of the Philippines, for deceptive, unfair, and unconscionable sales acts or practices. (Lawphil)
- RA 11934, SIM Registration Act, for scams involving mobile numbers, spoofing, or SIM misuse. (Lawphil)
- RA 10173, Data Privacy Act of 2012, where personal information, IDs, account credentials, or sensitive data were misused. (Lawphil)
Where to Report a Scammer in the Philippines
The safest approach is to report to the agency that matches the scam, while also reporting to your bank, e-wallet, platform, or telco immediately.
| Situation | Where to Report | Why |
|---|---|---|
| Online scam, phishing, hacked account, fake profile, scam link, scam text | CICC / I-ARC Hotline 1326, PNP-ACG, or NBI Cybercrime Division | CICC’s Inter-Agency Response Center centralizes online scam reports, while PNP and NBI are enforcement agencies. (ScamWatch Pilipinas) |
| GCash, Maya, bank transfer, credit card, OTP, phishing, money mule account | Your bank/e-wallet first, then PNP-ACG/NBI/CICC; BSP if unresolved with a BSP-supervised institution | A fast report may help flag or temporarily hold disputed funds; BSP complaints are generally second-level recourse after reporting first to the financial institution. (Lawphil) |
| Investment scam, Ponzi scheme, fake trading platform, fake corporation, unauthorized solicitation | Securities and Exchange Commission (SEC) and law enforcement | SEC handles investment-related scams and complaints through its official complaint channels. (Securities and Exchange Commission) |
| Online seller scam, undelivered item, fake store, defective or misrepresented product | DTI Consumer Care if there is a merchant/seller issue; PNP/NBI if the seller appears fake or criminal | DTI handles consumer complaints, while fake identities and criminal fraud should be referred to cybercrime authorities. (DTI Consumer Care) |
| Fake lending app, abusive collection, identity misuse by financing/lending company | SEC, NPC if data privacy is involved, and PNP/NBI if there are threats or extortion | SEC regulates lending and financing companies; criminal conduct may still go to law enforcement. |
| Scam text only, no money lost yet | Report through CICC channels or eGov eReport where available | CICC has stated that victims of cyber fraud should call 1326, while text scam numbers may be reported through eGov eReport for NTC action. (Philippine News Agency) |
Immediate Steps After You Realize You Were Scammed
1. Stop communicating with the scammer
Do not send more money, “processing fees,” “unlocking fees,” “tax clearance fees,” or “recovery fees.” Many victims lose more money because the scammer pretends the first payment can still be recovered if the victim pays again.
Avoid threatening the scammer. Do not announce online that you are filing a case if doing so may cause the scammer to delete accounts, change numbers, transfer funds, or hide evidence.
2. Secure your accounts
If you clicked a link, gave an OTP, shared IDs, or installed an app:
- Change passwords for email, e-wallets, banking apps, social media, and shopping platforms.
- Log out all devices from your email and social media accounts.
- Enable multi-factor authentication.
- Call your bank or e-wallet and ask for account restriction, card blocking, transaction dispute, or fraud investigation.
- If your SIM or phone was compromised, contact your telco immediately.
For financial account scams, AFASA recognizes social engineering schemes involving deception to obtain sensitive identifying information and unauthorized access or control over financial accounts. (Lawphil)
3. Report to your bank, e-wallet, or remittance provider immediately
Speed matters. For bank and e-wallet scams, the receiving account may be emptied within minutes.
Ask the institution to:
- Create a fraud report or ticket number.
- Trace the receiving account or transaction reference.
- Coordinate with the receiving institution.
- Temporarily hold or flag the disputed funds if legally allowed.
- Give you written confirmation of your report.
Under AFASA, institutions may temporarily hold funds subject of a disputed transaction within the prescribed period, not exceeding 30 calendar days unless extended by a court. The law also provides that conviction is not a prerequisite to restitution where the institution is liable for failure to employ adequate risk management systems or the highest degree of diligence. (Lawphil)
4. Preserve evidence before accounts disappear
Take screenshots, but do not rely on screenshots alone. Save the original links, account URLs, transaction references, phone numbers, emails, usernames, and full chat threads.
For online scams, the important evidence is often not just “what the scammer said,” but also:
- The exact profile URL or page link.
- The mobile number used.
- The receiving bank or e-wallet account name and number.
- Transaction reference numbers.
- Date and time of each message and payment.
- Proof that you relied on the false representation.
- Proof that you suffered loss.
The Supreme Court’s Rule on Cybercrime Warrants covers preservation, disclosure, interception, search, seizure, and examination of computer data under RA 10175, which is why early preservation of digital details is important.
5. Report to CICC Hotline 1326 for online scams
For online scams, phishing, hacked accounts, and scam messages, the Inter-Agency Response Center (I-ARC) Hotline 1326 is a central reporting channel. Scam Watch Pilipinas lists 1326 as the hotline for online scam reports, with alternative I-ARC numbers for Smart, Globe, and DITO users. (ScamWatch Pilipinas)
Scam Watch Pilipinas also explains that Hotline 1326 is operated by I-ARC, composed of DICT, CICC, NPC, and NTC, with PNP and NBI as enforcement arms in the field. (ScamWatch Pilipinas)
6. File a formal complaint with PNP-ACG or NBI Cybercrime Division
A hotline report is useful, but a formal criminal complaint usually requires a written complaint, sworn statement, evidence, and follow-up with investigators.
The NBI Cybercrime Division’s Citizen’s Charter states that complainants may proceed to the Cybercrime Division, fill up a complaint sheet, undergo preliminary interview and investigation, execute sworn statements or submit prepared affidavits, and submit supporting documents. The listed processing time for the initial NBI cybercrime assistance flow is around 1 hour and 10 minutes, with no fee stated for those steps. (National Bureau of Investigation)
For the PNP Anti-Cybercrime Group, an official FOI response directed complainants to the PNP-ACG eComplaint link or to email acg@pnp.gov.ph for cybercrime-related reporting. (www.foi.gov.ph)
Evidence Checklist for Reporting a Scammer
Bring both digital and printed copies when possible. Investigators often need readable printed annexes for the complaint folder, but digital files are useful for forensic review.
| Evidence | What to Include | Practical Tip |
|---|---|---|
| Valid ID | Government-issued ID of the complainant | If a representative files, prepare authorization or SPA. |
| Written timeline | Date, time, platform, what was promised, when payment was made, when scam was discovered | Make it chronological and factual. |
| Screenshots | Chats, posts, profiles, product listings, investment offers, payment instructions | Include timestamps and account names. |
| Links and identifiers | Facebook profile URL, website, Telegram handle, email address, phone number, account number | A screenshot of a display name is not enough. |
| Proof of payment | Bank slip, Instapay/PESONet receipt, GCash/Maya receipt, remittance slip, crypto transaction hash | Save PDF receipts if available. |
| Proof of demand or follow-up | Messages asking for delivery, refund, withdrawal, or explanation | Helps show deceit, refusal, or shifting excuses. |
| Platform reports | Ticket numbers from bank, e-wallet, marketplace, telco, Facebook, Google, etc. | Attach replies from the platform. |
| Sworn statement or affidavit | Your narrative under oath | Some agencies help prepare this; others may accept a notarized affidavit. |
| Device or account access | Phone used, email account, app logs, original chat thread | Do not delete messages even if embarrassing. |
How to File a Strong Complaint-Affidavit
A complaint-affidavit is a sworn written statement. It should be clear enough that an investigator or prosecutor can understand what happened without guessing.
A practical structure is:
Your identity and contact details
- Full name, age, nationality, address, mobile number, email.
- If abroad, state your current country and Philippine address, if any.
How you encountered the scammer
- Facebook Marketplace, Viber, Telegram, dating app, job post, email, SMS, website, referral, or investment seminar.
What the scammer represented
- Example: “He claimed to be an authorized seller of iPhones.”
- Example: “The page represented that it was connected with a licensed investment company.”
- Example: “The caller pretended to be from my bank and asked me to verify my OTP.”
Why you believed it
- Screenshots of fake documents, reviews, IDs, business permits, SEC certificates, endorsements, official-looking links, or previous transactions.
How much you paid and where
- State the exact amount, date, time, sending account, receiving account, and transaction reference number.
What happened after payment
- Blocked account, deleted profile, excuses, failed delivery, denied withdrawal, new fees demanded, or unauthorized transfer.
Damage suffered
- Money lost, accounts compromised, identity documents misused, harassment, or reputational harm.
Evidence attached
- Label annexes clearly: Annex A, B, C, and so on.
Relief requested
- Investigation, tracing of accounts, preservation of data, filing of charges, and restitution where legally available.
What Happens After You Report?
Initial assessment
The receiving officer will check whether the matter is:
- A cybercrime complaint.
- A regular estafa or fraud complaint.
- A consumer complaint better handled by DTI.
- A financial consumer complaint for the bank/e-wallet and BSP.
- An investment or lending complaint for SEC.
- A civil dispute with insufficient evidence of fraud.
This is a common bottleneck. Many complainants say “na-scam ako,” but the agency still needs to identify the correct legal theory and evidence.
Investigation and preservation of data
For cybercrime cases, investigators may need subscriber information, login data, IP logs, account registration details, or platform records. These are not always obtainable by simply asking Facebook, Google, banks, telcos, or e-wallets. Court warrants or lawful requests may be required, especially for protected computer data. The Rule on Cybercrime Warrants specifically governs warrants and orders involving preservation, disclosure, interception, search, seizure, and examination of computer data.
Endorsement to the prosecutor
If investigators find enough basis, the case may be referred to the prosecutor for preliminary investigation. The prosecutor determines whether there is probable cause to file an Information in court.
If the complaint is weak, incomplete, or purely speculative, the prosecutor may dismiss it or require additional evidence. This is why a detailed timeline and complete transaction documents matter.
Court case and civil liability
If a criminal case is filed, the case generally proceeds in court. For AFASA violations, the Regional Trial Court has jurisdiction, and the law provides that conviction carries civil liability, which may include restitution for damage caused or unwarranted benefit derived from the violation. (Lawphil)
Common Scenarios and What to Do
GCash, Maya, or bank transfer scam
Report to the e-wallet or bank immediately. Ask for a fraud ticket and escalation to the fraud or dispute team. Then report to CICC 1326 and file with PNP-ACG or NBI if money was actually taken.
Include:
- Sender and receiver account details.
- Transaction reference number.
- Exact date and time.
- Screenshots of the scammer’s instructions.
- Any OTP, phishing link, or fake bank/e-wallet page used.
Do not share your PIN, password, account number, credit card number, ATM card number, passport, or other sensitive IDs unnecessarily. BSP’s own complaint guidance warns consumers not to share these details because they are not required for BSP-CAM processing.
Online seller took payment but never delivered
If the seller is a real merchant or platform seller, file first with the platform and consider DTI Consumer Care. If the “seller” is a fake account, used a mule account, blocked you after payment, or used stolen photos and fake IDs, report to PNP-ACG or NBI as a possible estafa or cybercrime matter.
For DTI, the Consumer CARe system is an online dispute resolution platform for consumer complaints. (DTI Consumer Care)
Investment scam or fake trading platform
Check whether the entity is authorized to solicit investments. A corporation’s SEC registration is not the same as authority to sell securities or solicit investments from the public.
Report investment scams to SEC and law enforcement. The SEC iMessage portal allows the public to submit complaints and reports, while SEC advisories and enforcement channels handle investment scam reports. (Securities and Exchange Commission)
Scam text or phishing link but no money lost
Report the number, link, and screenshot through CICC channels. For text scams, CICC has stated that victims of cyber fraud should call 1326, while scam SMS numbers may be reported through the eGov app’s eReport feature for action by the National Telecommunications Commission. (Philippine News Agency)
Fake job, visa, or immigration scam
Gather the job post, recruiter profile, email headers, payment receipts, fake contract, promised employer details, and any documents submitted. Report to PNP-ACG or NBI if the transaction was online. If the scam involves overseas employment, also report to the proper labor or migrant worker authorities if a recruitment agency is involved.
Romance scam, sextortion, or blackmail
Do not pay. Preserve chats, profile links, usernames, payment demands, threats, and any account used to receive money. Report to PNP-ACG or NBI promptly. If intimate images are involved, do not repost or send them around as “proof” except through proper reporting channels, because sharing them can create separate legal and privacy problems.
Special Notes for OFWs, Filipinos Abroad, and Foreigners
If you are outside the Philippines, you may still report an online scam involving a Philippine bank account, e-wallet, mobile number, person, company, or platform activity connected to the Philippines. Under AFASA, jurisdiction may exist when any element is committed in the Philippines, when a device or computer system in the country is used, when damage is caused to a person in the Philippines, or when the financial account is maintained with an institution operating in the Philippines. (Lawphil)
Practical options:
- File an initial online report with CICC, PNP-ACG, NBI, bank, e-wallet, platform, or SEC/DTI as applicable.
- Ask the agency whether your complaint-affidavit may be sworn before a Philippine Embassy or Consulate.
- Authorize a trusted representative in the Philippines through a Special Power of Attorney if personal appearance is difficult.
- If a document is executed abroad for use in the Philippines, Philippine embassies and consulates can notarize private documents such as affidavits and SPAs, usually requiring personal appearance of the signatory. (Philippine Embassy)
Foreigners should prepare a copy of their passport, Philippine address or transaction connection, proof of payment, and clear explanation of how the scam is connected to the Philippines.
Common Mistakes That Weaken Scam Complaints
Posting everything online before reporting
Public posts may warn others, but they can also alert the scammer, cause deletion of accounts, and expose your own sensitive data. Blur your address, IDs, account numbers, QR codes, and private conversations if you must post.
Submitting screenshots without links
Investigators need the actual URL, handle, phone number, email address, account number, transaction reference, and platform details. Display names can be changed easily.
Deleting messages out of shame or anger
Do not delete the chat thread. Preserve the original conversation. Screenshots are helpful, but the original thread may contain metadata or context.
Reporting only to the platform
Reporting to Facebook, TikTok, Telegram, Shopee, Lazada, GCash, Maya, or a bank may help freeze accounts or remove content, but it is not the same as filing a criminal complaint with PNP, NBI, or the prosecutor.
Treating every unpaid debt as estafa
Not every unpaid loan or failed business deal is estafa. The key issue is whether there was deceit, false pretense, fraudulent representation, or abuse of confidence at the legally relevant time. Philippine jurisprudence repeatedly emphasizes that estafa requires fraud or deceit causing damage or prejudice; for estafa by deceit, the false representation must generally be made before or at the time the victim parted with money or property. (Lawphil)
Paying “recovery agents”
Many “fund recovery,” “crypto recovery,” or “hack back” services are scams. They often ask for a fee, claim insider access, and then disappear. Report through official channels instead.
Practical Timeline: What to Expect
| Stage | Typical Reality |
|---|---|
| Same day | Report to bank/e-wallet/platform; request blocking, dispute, or fraud ticket. |
| Within 24–72 hours | File with CICC 1326, PNP-ACG, or NBI; gather affidavit and evidence. |
| First week | Agency may conduct intake, interview, evidence review, and initial coordination. |
| Several weeks to months | Investigation may require platform, telco, bank, or e-wallet records; delays are common if data must be requested formally. |
| Prosecutor stage | If endorsed, prosecutor evaluates probable cause and may require counter-affidavits, replies, or additional evidence. |
| Court stage | If filed in court, the case may take significantly longer, especially if digital evidence, foreign platforms, or multiple victims are involved. |
Fees and Costs
Reporting to CICC hotlines, filing an initial cybercrime complaint with NBI, or seeking police assistance should not require paying a private “facilitator.” The NBI Citizen’s Charter for investigative assistance to victims of computer crimes lists no fee for the intake, interview, sworn statement, and initial complaint processing steps shown there. (National Bureau of Investigation)
Possible costs may include:
- Notarization of affidavit, if not sworn before the agency.
- Printing and photocopying evidence.
- Transportation to PNP-ACG, NBI, prosecutor’s office, DTI, SEC, or court.
- Consular notarization or apostille-related costs if documents are executed abroad.
- Filing fees if you pursue a separate civil case.
Frequently Asked Questions
Can I report a scammer even if I only have a phone number?
Yes, but a phone number alone is usually not enough. Add screenshots, transaction receipts, account numbers, links, names used, and the full story of how the scam happened. If it is only a suspicious text and no money was lost, report it through CICC or eGov eReport where available.
Should I report to PNP or NBI?
For online scams, either PNP-ACG or NBI Cybercrime Division may be appropriate. RA 10175 authorizes both NBI and PNP to handle cybercrime cases. (Supreme Court E-Library) Many victims choose based on location, urgency, availability of a regional office, and which agency can act faster on the specific facts.
Can I get my money back after reporting a scam?
Sometimes, but it depends on how quickly you report, whether the money remains in the receiving account, whether the institution can legally hold the funds, and whether the scammer or mule account can be identified. AFASA provides mechanisms involving disputed transactions and possible restitution, but recovery is never automatic. (Lawphil)
Is a barangay blotter enough?
No. A barangay blotter may help document that you reported an incident, but it does not replace a cybercrime complaint, bank fraud report, NBI/PNP investigation, SEC complaint, DTI complaint, or prosecutor’s complaint-affidavit.
What if the scammer used a fake name or dummy account?
You can still report. Many cybercrime investigations start with a fake profile, phone number, e-wallet account, IP log, device, or transaction trail. The important thing is to preserve identifiers before they disappear.
Can I file a case if I am abroad?
Yes, especially if the scam involved a Philippine account, person, company, phone number, e-wallet, bank, or victim in the Philippines. You may need a consularized or properly notarized affidavit and, in some cases, a representative with a Special Power of Attorney.
What if the scammer is also abroad?
Report locally if money, accounts, platforms, victims, or evidence are connected to the Philippines. The DOJ Office of Cybercrime acts as a central authority for international cooperation in cybercrime-related matters under RA 10175’s framework. (Department of Justice)
Can I report anonymously?
You may submit tips, but a formal criminal complaint usually requires an identified complainant, a sworn statement, and evidence. Investigators and prosecutors need a real complainant who can authenticate documents and testify if needed.
What if the bank or e-wallet refuses to help?
Get the ticket number and written response. If the institution is BSP-supervised and your complaint remains unresolved after using the institution’s own consumer assistance mechanism, you may escalate through BSP’s Consumer Assistance Mechanism or BSP Online Buddy. (Bureau of the Treasury)
Can I sue the scammer in small claims court instead?
A civil claim may be possible when the main issue is recovery of money from an identifiable person, but small claims is different from a criminal scam complaint. If there is deceit, identity theft, phishing, mule accounts, or cybercrime, reporting to PNP, NBI, CICC, SEC, DTI, BSP, or the prosecutor may still be necessary.
Key Takeaways
- Report fast. For bank, e-wallet, and remittance scams, minutes can matter.
- Preserve evidence before confronting the scammer. Save links, receipts, screenshots, account numbers, and full chat threads.
- Use the correct agency. CICC/1326, PNP-ACG, and NBI handle cybercrime reports; BSP handles unresolved complaints against BSP-supervised institutions; SEC handles investment and lending-related complaints; DTI handles consumer seller issues.
- A formal complaint usually needs a sworn statement. A hotline report or platform report is helpful, but it may not be enough for prosecution.
- Not every money loss is estafa. The complaint must show deceit, fraud, abuse of confidence, or another punishable act.
- Do not pay recovery scammers. Use official channels and keep all ticket numbers, acknowledgments, and agency references.