CyberCode.ph · Philippines

Online Scam Evidence Checklist Philippines

Last updated September 3, 2026 · Practical privacy, cybersecurity and technology-law guidance

Last materially reviewed: September 3, 2026

Direct Answer

After an online scam, preserve evidence before accounts, messages or listings disappear. Keep original screenshots, URLs, usernames, phone numbers, transaction records, payment references and a clear timeline.

Evidence Checklist

  • screenshots showing the full conversation and timestamps;
  • profile, marketplace or website URLs;
  • seller, scammer or account usernames;
  • mobile numbers and email addresses;
  • bank or e-wallet account details used for payment;
  • receipts, transfer confirmations and reference numbers;
  • product listing or advertisement screenshots;
  • delivery, tracking or order records;
  • emails and SMS messages, including headers where available;
  • voice recordings or call logs that were lawfully obtained;
  • proof of attempts to obtain a refund or resolve the issue;
  • a dated written timeline.

Preserve Originals

Do not crop away usernames, dates, URLs or transaction identifiers. Keep the original files where possible and create backup copies. Avoid editing or annotating the only copy of important evidence.

Where to Report

For online scams, CICC’s current public materials direct victims to hotline 1326 and report@cicc.gov.ph. You can also use the Cybercrime Reporting Directory Philippines to choose an agency.

Official Source

Cybercrime Investigation and Coordinating Center