This article is for general information only and is not legal advice. For specific legal concerns, consult a qualified Philippine attorney.
Introduction
The Philippines has one of the highest rates of internet usage in the world, and with increased online activity comes a rise in cybercrimes. Whether you have been hacked, had your identity stolen, fallen victim to an online scam, or suffered from cyber harassment, the Cybercrime Prevention Act of 2012 (Republic Act No. 10175) is the primary law that protects you. This guide walks you through the step-by-step process of filing a cybercrime complaint in the Philippines — from gathering evidence to attending the preliminary investigation.
What Is RA 10175 (Cybercrime Prevention Act)?
RA 10175, enacted on September 12, 2012, criminalizes offenses committed through computers and other digital devices. It covers three main categories of offenses:
- Offenses against confidentiality, integrity, and availability of data — illegal access (hacking), illegal interception, data interference, system interference, and misuse of devices.
- Computer-related offenses — computer-related forgery, computer-related fraud, and computer-related identity theft.
- Content-related offenses — cybersex, child pornography, and cyber libel (though cyber libel is governed by a separate provision under the same law).
The law is enforced by the National Bureau of Investigation (NBI) Cybercrime Division and the Philippine National Police (PNP) Anti-Cybercrime Group (ACG). Both agencies accept complaints for investigation and preliminary prosecution.
Step 1: Secure and Preserve Evidence Immediately
Evidence preservation is the most critical step. Digital evidence can be deleted, altered, or lost if you wait too long. Do the following as soon as you discover the incident:
- Take screenshots — Capture clear screenshots of all suspicious messages, emails, transactions, or unauthorized access logs. Include timestamps and URLs.
- Save emails and chat logs — Export full conversations from your email provider or messaging app. Do not delete any related messages.
- Document URLs and IP addresses — Note any suspicious website URLs, sender email addresses, phone numbers, or account names involved.
- Preserve device state — If possible, avoid fully shutting down or reformatting your device. Investigators may need to create a forensic image of the hard drive.
- Print physical copies — Keep printed copies of digital evidence as a backup.
Tip: Do NOT confront the suspect or try to “hack back.” This can compromise evidence and even expose you to counter-charges. Let law enforcement handle the investigation.
Step 2: File a Complaint-Affidavit
The formal complaint process begins with a complaint-affidavit. This is a sworn written statement detailing the facts of the cybercrime incident. Your complaint-affidavit should include:
- Your complete name, address, and contact details.
- A clear, chronological narrative of what happened — how you discovered the cybercrime, what actions were taken, and who the suspected perpetrator is (if known).
- A description of all evidence you have gathered (screenshots, logs, emails, etc.).
- The specific provisions of RA 10175 that were violated, if you can identify them.
You can file your complaint-affidavit at either of the following agencies:
Option A: NBI Cybercrime Division
- Location: NBI Headquarters, Taft Avenue, Manila (main office); there are also regional offices nationwide.
- Procedure: Go to the NBI Cybercrime Division in person. Bring your complaint-affidavit, supporting evidence (digital and printed copies), and at least one valid government ID.
- Cost: Filing a complaint at the NBI is free of charge.
- Contact: NBI Cybercrime Division hotline — (02) 8523-8231 local 3413 or 3414.
Option B: PNP Anti-Cybercrime Group (ACG)
- Location: PNP-ACG Headquarters, Camp Crame, Quezon City.
- Procedure: Visit the ACG in person or coordinate through your local police station, which can refer your complaint to the ACG.
- Cost: Free of charge.
- Contact: PNP-ACG hotline — 0966-664-2062 or (02) 8723-0401 local 7497.
Some NBI and PNP offices now also accept complaints through email or online portals. Check the respective agency’s official website for updated submission guidelines.
Step 3: Preliminary Investigation by the Prosecutor’s Office
After the NBI or PNP-ACG evaluates your complaint and gathers additional evidence, they will refer the case to the Office of the City or Provincial Prosecutor for a preliminary investigation. During this stage:
- The prosecutor reviews the complaint-affidavit and supporting evidence.
- The respondent (suspect) is given the opportunity to submit a counter-affidavit.
- You may be required to submit a reply-affidavit if the respondent raises defenses.
If the prosecutor finds probable cause, an Information (formal charge) is filed in court, and a warrant of arrest may be issued against the suspect. If probable cause is not found, the case is dismissed — though you may file a motion for reconsideration or elevate the case to the Department of Justice.
Step 4: Arraignment and Trial
Once the case is filed in court, the accused is arraigned (formally read the charges) and enters a plea. The case then proceeds to trial, where both sides present their evidence. Depending on the complexity of the cybercrime and the court’s docket, trial can take months to several years.
Penalties under RA 10175 vary depending on the offense. For example:
- Illegal access (hacking): Prison correctional (6 months and 1 day to 6 years) and/or a fine of at least ₱200,000.
- Computer-related identity theft: Prison mayor (6 years and 1 day to 12 years) and/or a fine of at least ₱250,000.
- Computer-related fraud: Prison mayor (6 years and 1 day to 12 years) or a fine of at least ₱200,000, depending on the damage.
Frequently Asked Questions
Can I file a cybercrime complaint online?
Some NBI regional offices and the PNP-ACG offer online reporting portals. However, for a formal complaint that leads to prosecution, you will still need to personally appear to swear to your complaint-affidavit before a prosecutor or authorized officer. Online reporting is best used for initial reporting and coordination.
How long does a cybercrime case take?
The preliminary investigation typically takes 30 to 90 days. Once the case reaches court, trial can take 6 months to 2 years or longer, depending on the court’s caseload and whether the accused files motions or appeals.
Can I file a case if I don’t know who hacked me?
Yes. The NBI and PNP-ACG have forensic capabilities to trace IP addresses, device identifiers, and digital footprints. They can identify suspects even if you only have limited information. Provide as much evidence as possible to aid their investigation.
What is the difference between cybercrime under RA 10175 and data privacy violation under RA 10173?
RA 10175 (Cybercrime Prevention Act) criminalizes the act of hacking, online fraud, identity theft, and other computer-related offenses. RA 10173 (Data Privacy Act) governs how personal information is collected, stored, and processed by companies and organizations. A data breach may give rise to complaints under both laws — one criminal (RA 10175) and one administrative (RA 10173 via the National Privacy Commission).
Do I need a lawyer to file a cybercrime complaint?
While you can personally file a complaint-affidavit, having a lawyer draft your affidavit and guide you through the preliminary investigation significantly improves your chances. A lawyer can also help you identify the correct legal provisions and respond to the suspect’s counter-affidavit effectively.
Related Resources from AttyKalibre
- Online Libel in the Philippines: What to Do If You Are Defamed Online
- Data Privacy Rights in the Philippines: What To Do When Your Personal Data Is Misused
- Data Privacy Complaints in the Philippines: How to Report a Violation
- Data Breach Response in the Philippines: First Steps After a Leak
- Cyber Libel in the Philippines: What Counts and What Does Not
Explore more free Philippine legal guides at AttyKalibre.com.
Free Legal Guides and Consultation
Visit AttyKalibre’s Free Legal Guides page for more resources on Philippine law. If you need personalized legal assistance for a cybercrime matter, contact AttyKalibre through the website to schedule a consultation.
Disclaimer: This article provides general legal information about the cybercrime complaint process in the Philippines. It does not create an attorney-client relationship and is not a substitute for professional legal advice tailored to your specific situation.