Cybercrime Reporting Directory Philippines: Which Agency Handles What

Independent information guide. Cybercode does not receive complaints or dispatch emergency help. If someone is in immediate physical danger, contact local emergency services or the nearest police station now.

Help routes and material legal guidance reviewed: October 4, 2026. Individual entries show the dates their sources were checked.

Which Agency Do I Need?

Lost money or noticed an unauthorised transaction?

Intimate images, leaked videos or sextortion

A child is being threatened, abused or sexually exploited

Contact MAKABATA Helpline 1383 for child-protection assistance and referral, and report suspected offences to law enforcement. DSWD identifies this as a 24/7 child-abuse and OSAEC/CSAEM reporting route. Do not download, forward, repost or print suspected child sexual abuse material. Keep account identifiers and URLs and ask investigators how to preserve evidence safely. Take It Down should only be used with images already on the depicted person’s device; do not acquire a copy to use it.

Your account was hacked or taken over

Use the platform’s official account-recovery process, secure the linked email and other affected accounts, and save login alerts and transaction records. Find official platform recovery routes. Platform recovery restores access; PNP-ACG or NBI can assess a criminal complaint.

The Directory

NBI, NPC, CERT-PH and the new reporting routes were checked against the linked official sources on 4 October 2026. Older entry-specific checks are labelled. Contact availability and office requirements can change; confirm through the linked agency before travelling or sending documents.

PNP Anti-Cybercrime Group

• Mandate: Section 10 of RA 10175 requires that “the NBI and the PNP shall organize a cybercrime unit or center manned by special investigators to exclusively handle cases involving violations of this Act.”
• Handles: criminal investigation of cybercrime and cyber-related incidents — online fraud, account intrusion, online libel, sextortion, computer-related identity theft — through walk-in complaints at anti-cybercrime units and desks.
• Does not handle: administrative privacy adjudication, refunds or the prosecution decision. Privacy violations can overlap with criminal offences; NPC complaints and law-enforcement reporting may therefore be relevant to the same incident.
• Verified procedure (6 September 2026): the Southern Police District Citizen’s Charter 2024 publishes the walk-in service in full: report to the anti-cybercrime desk officer, assessment, endorsement to an investigator, Incident Record Form, extraction of online evidence, preservation request to the service provider. Requirements are one valid government ID plus printed screenshots of the posted material, printed transaction receipts, statement of account and dispute, and printed social-media conversations. Fees: “None.”
• Verified office address (6 September 2026): that charter gives the Southern District Anti-Cybercrime Team’s address as Lawton Avenue, Fort Bonifacio, Taguig City. Other districts and regions publish their own anti-cybercrime unit addresses in their own citizen’s charters.
• Could not verify: a national PNP-ACG hotline or email. On 6 September 2026 acg.pnp.gov.ph and pnp.gov.ph returned HTTP 403 on the contact and citizen’s-charter pages, so no national number is published here.
• Full guide: PNP Anti-Cybercrime Group complaint process.

NBI Cybercrime Division

• Mandate: the second law-enforcement authority designated by Section 10 of RA 10175.
• Handles: investigative assistance for victims of computer crimes, including preliminary interview, execution of sworn statements and examination of relevant devices.
• Does not handle: administrative privacy adjudication, consumer refunds or the prosecution decision; an incident may still involve overlapping privacy and criminal issues.
• Verified address and trunkline (6 September 2026, from nbi.gov.ph/contact): Filinvest Cyberzone Bay, Diosdado Macapagal Boulevard, Pasay City. Trunkline (02) 8523-8231.
• Verified online route (6 September 2026): the NBI publishes an online complaint form.
• Verified service standard (6 September 2026): the Cybercrime Division citizen’s charter entry lists fees as “None” and describes proceeding to the CCD to file a complaint or request an investigation.
• Full guide: NBI cybercrime complaint process.

National Privacy Commission

• Mandate: enforcement of the Data Privacy Act. Its role includes privacy complaints and investigations; under Section 7 of the Data Privacy Act, it may recommend prosecution to the DOJ for specified offences.
• Handles: complaints by data subjects against personal information controllers, and personal-data breach notifications.
• Does not handle: criminal investigation of scammers or hackers, recovery of money, or incident response.
• Verified numbers (6 September 2026, from privacy.gov.ph/contact-us): trunkline +632 5322 1322, ask for complaints local 115; mobile 0905 506 1478 (Globe) or 0970 818 0555 (Smart). Note that local 114 is listed for SPRINT, not complaints.
• Verified requirements (6 September 2026, from privacy.gov.ph — File a Complaint): “a filled-out and notarized complaint assisted form or a verified complaint” with “copies of any evidence and witnesses’ affidavit.” The published guidance calls for digitally signed electronic documents in PDF format, if practicable. The Complaints and Investigation Division decides within thirty calendar days whether to give the complaint due course.

CERT-PH (DICT Cybersecurity Bureau)

• Mandate: the Philippines National Computer Emergency Response Team, under the DICT Cybersecurity Bureau.
• Handles: reporting and response for cybersecurity incidents affecting systems and organisations.
• Does not handle: prosecution. Reporting an incident to CERT-PH is not filing a criminal complaint; if you want a case, file separately with the PNP or NBI.
• Verified contact (6 September 2026, from ncert.gov.ph — Report an Incident): landline (632) 920-0101, ask for local 1708; mobile 0916 489 4613 (SMS only); Cybersecurity Bureau Building, 49 Don A. Roces Avenue, Barangay Paligsahan, Quezon City. The reporting email address is published on that page behind the site’s email-protection script rather than as plain text, so it is not reproduced here — use the link.

DOJ Office of Cybercrime

• Mandate: established under RA 10175 as the “Central Authority in all matters relating to international mutual assistance and extradition for cybercrime and cyber-related matters,” and the focal office for national law-enforcement strategy against cybercrime.
• Handles (verified 6 September 2026, from cybercrime.doj.gov.ph): acting on complaints and referrals, issuing preservation orders to service providers, administering oaths and issuing subpoenas, monitoring service-provider compliance, facilitating international cooperation, and issuing guidelines for cybercrime investigation and forensic analysis.
• Where to start: PNP-ACG or NBI is ordinarily the practical starting point for a victim seeking investigation. OOC’s published mandate includes complaints and referrals; investigators and prosecutors handle international cooperation through the appropriate channels. Courts decide applications for cybercrime warrants under the Rule on Cybercrime Warrants.
• Contact: consult the official Office of Cybercrime page for current channels. Direct retrieval was unavailable during the 4 October 2026 check, so contact details are not newly verified here.

Cybercrime Investigation and Coordinating Center (CICC)

• Scam-reporting assistance: call 1326. The Philippine News Agency identifies it as the 24/7 Inter-Agency Response Center (I-ARC) hotline. The eReport feature in the eGov app is another published reporting route.
• Role: national coordination and facilitation under RA 10175, Sections 24 and 26, alongside public reporting assistance.
• Next step: retain the report/reference number. For criminal investigation, use PNP-ACG or NBI; reporting to the hotline does not itself establish that a formal criminal complaint or court case has been filed. CICC does not adjudicate your case.

Office of the City or Provincial Prosecutor

• Role: evaluates the complaint and supporting evidence under the applicable prosecution procedure and decides whether an Information should be filed in court. A report, referral or investigation does not automatically result in a court case.
• Current procedure: DOJ-NPS proceedings use the 2024 DOJ rules, including the standard of prima facie evidence with reasonable certainty of conviction. The Supreme Court upheld the DOJ’s authority in Meking v. Remulla, G.R. No. 280455 (11 November 2025); inconsistent portions of the old Rule 112 framework were repealed. The DOJ also provides summary and expedited procedures for lower-penalty offences. Do not apply one generic filing threshold or timeline to every complaint.
• Inquest: a distinct procedure associated with a lawful warrantless arrest. Ask the handling authority which procedure applies.
• Contact: ask your investigator or the prosecutor’s office with jurisdiction about the appropriate office, complaint-affidavit, annexes and current deadlines.
• Full guide: what happens after you report a cybercrime.

Barangay

• Role: conciliation for certain disputes between residents of the same city or municipality.
• Does not handle: anonymous online offenders. Barangay conciliation is not a precondition to reporting a cybercrime to an anti-cybercrime unit, and no barangay can compel a service provider to disclose anything.

DTI, BSP and SEC

• DTI: consumer disputes. For goods or services complaints, use the official DTI Consumer CARe portal. Consumer redress and criminal investigation are separate routes.
• BSP: unresolved bank or e-wallet complaints. Complain to the financial institution first and keep its reference number and response. Then use BSP Online Buddy (BOB) or the official CIR form for escalation. The published email is consumeraffairs@bsp.gov.ph; assistance line (02) 5306-2584. Follow the BSP submission and privacy instructions. This is not a guarantee of reimbursement.
• SEC: investment and lending issues. Use the SEC’s current complaints instructions. They route financing/lending-company and online-lending complaints to the SEC iMessage portal and distinguish reports involving unlicensed lending. For suspected investment schemes, consult the SEC’s investor-protection guidance and also report suspected criminal conduct to law enforcement.

What to Prepare Before You Report

These are useful preparation items, not universal prerequisites. Contact the receiving office for its current requirements; do not delay urgent reporting while gathering every item.

• Identification if requested by the receiving authority. NBI’s published CCD checklist lists no initial requirements, while its process includes interviews, sworn statements and relevant device examination.
• Account names, profile and post URLs, dates and timestamps; screenshots of threats or transactions where safe and lawful. Preserve original messages and records without altering them.
• Transaction receipts, reference numbers and the bank or e-wallet complaint ticket.
• Original emails with full headers, relevant login alerts and a short dated chronology.

Handle sensitive evidence safely: do not post evidence publicly or send intimate images to this website. Do not download, forward, repost or print suspected child sexual abuse material. Record URLs and identifiers and ask the investigator for safe evidence-handling instructions. Never share passwords, PINs or OTPs; avoid unnecessary identity and full account/card details in complaint attachments, particularly where the receiving agency says they are not required.

Keep originals available and seek advice before deleting accounts or threads. See electronic evidence preservation and screenshots and authentication.

Related Cybercode Guides

• How to Report Cybercrime in the Philippines
• PNP Anti-Cybercrime Group Complaint Process
• What Happens After You Report Cybercrime
• NBI Cybercrime Complaint Process
• Online Scam Complaint Procedure
• Sextortion: What Victims Should Do
• Hacked Facebook Account in the Philippines
• Computer-Related Identity Theft
• Are Screenshots Admissible Evidence?
• Electronic Evidence Preservation
• Government Cybersecurity Agencies Directory

Official Sources

Help-route update, 4 October 2026: I-ARC 1326; DSWD child-protection reporting; StopNCII; NCMEC Take It Down; BSP consumer assistance; Meking and the current DOJ-NPS framework. StopNCII and NCMEC are non-government services; their platform and eligibility limits apply.

• Republic Act No. 10175 — Sections 10, 24 and 26 (verified 6 September 2026)
• Revised Rules of Criminal Procedure, Rule 112 (older procedural text; read subject to the current DOJ-NPS framework explained above)
• NBI — Contact and NBI Citizen’s Charter — Cybercrime Division (verified 6 September 2026)
• PNP Southern Police District Citizen’s Charter 2024 (verified 6 September 2026)
• National Privacy Commission — Contact and File a Complaint (verified 6 September 2026)
• CERT-PH — Report an Incident (verified 6 September 2026)
• DOJ Office of Cybercrime — mandate and Rule on Cyber Warrants (verified 6 September 2026)

Disclaimer

Important: This article provides general educational information about Philippine law, regulation, cybersecurity, technology, or business compliance. It is not legal advice and does not create an attorney-client relationship. Laws, agency procedures, technical standards, platform rules, and the facts of each situation may change the result. Verify current requirements through the cited official sources and seek qualified professional advice when your rights, deadlines, money, safety, or legal exposure may be affected.