How to Report Cybercrime in the Philippines: CICC, PNP & NBI

Last materially reviewed: September 3, 2026

Direct Answer

If you are a victim of hacking, online fraud, identity theft, cyber libel, extortion, fake accounts, phishing, or another cyber-related offense in the Philippines, you can report the incident to the Cybercrime Investigation and Coordinating Center (CICC), the Philippine National Police Anti-Cybercrime Group (PNP-ACG), or the National Bureau of Investigation Cybercrime Division (NBI-CCD). If personal data was unlawfully collected, exposed, or misused, a separate complaint may also be appropriate with the National Privacy Commission.

For urgent scam reporting, the CICC operates hotline 1326 and lists report@cicc.gov.ph as a reporting email. The NBI also provides an online complaint facility and accepts walk-in complaints through its Cybercrime Division and regional offices.

Primary authorities: Cybercrime Investigation and Coordinating Center, NBI Online Complaint, and Republic Act No. 10175.

Key Takeaways

Report serious cyber incidents quickly because account logs, IP records, messages, and platform data may disappear.
CICC 1326 is a practical first reporting and referral channel for online scams and cyber incidents.
PNP-ACG and NBI-CCD are the principal law-enforcement cybercrime units.
Save original evidence before blocking, deleting, resetting, or reporting an account to a platform.
Bank, e-wallet, marketplace, telecom, NPC, SEC, or other regulator reports may be needed in parallel depending on the incident.
Immediate threats to life or physical safety should be reported to 911 or the nearest police station.

Where Can You Report Cybercrime?

1. Cybercrime Investigation and Coordinating Center

The CICC coordinates national cybercrime response and accepts cyber complaints. Its public anti-scam materials direct victims to report through hotline 1326 and report@cicc.gov.ph. The CICC can receive information, assess the incident, and coordinate or refer it to the appropriate investigative agency.

2. PNP Anti-Cybercrime Group

The PNP is expressly identified as a law-enforcement authority under Section 10 of Republic Act No. 10175. The PNP-ACG and its regional anti-cybercrime units commonly handle online scams, hacked accounts, threats, fake accounts, online harassment, identity misuse, and other computer-related offenses.

3. NBI Cybercrime Division

The NBI is also a designated cybercrime law-enforcement authority under RA 10175. The NBI’s current Citizens Charter says members of the public may request investigative assistance for computer crimes, undergo a preliminary interview, execute sworn statements, submit supporting documents, and make relevant devices available for examination when necessary. The NBI also maintains an online complaint facility.

4. Prosecutor’s Office

For a criminal complaint that requires preliminary investigation, you may ultimately need to submit a complaint-affidavit and evidence to the appropriate city or provincial prosecutor. Law-enforcement agencies commonly assist in developing and referring cases.

5. National Privacy Commission

If the incident involves leaked personal data, doxxing, unauthorized disclosure, misuse of identity information, or unlawful processing, consider whether a separate NPC complaint is appropriate. See what evidence you need for a data privacy complaint.

What Evidence Should You Prepare?

Full screenshots showing dates, account names, URLs, phone numbers, and surrounding context.
Original emails, including headers where available.
Chat exports, SMS records, call logs, and screen recordings.
Profile URLs and usernames for suspicious or fake accounts.
Bank, e-wallet, or cryptocurrency transaction records.
Receipts, order records, invoices, contracts, or advertisements connected to the incident.
A simple chronological timeline of what happened.
Copies of any reports already filed with a bank, e-wallet, telecom, platform, regulator, or other agency.
The original device when investigators request it for examination.

Do not crop or edit your only copy of important evidence. Keep the original files and create working copies for submission.

Decision Snapshot

Situation	Useful first route
Online scam or phishing	CICC 1326, PNP-ACG, NBI-CCD, plus the bank/e-wallet
Hacked account	Platform recovery, PNP-ACG or NBI-CCD
Cyber libel	PNP-ACG, NBI-CCD, lawyer/prosecutor
Identity theft	PNP-ACG or NBI-CCD; NPC if personal data misuse is involved
Data leak or doxxing	NPC plus cybercrime authorities if a crime may have occurred
Immediate threat of violence	911 or nearest police station first

How to File a Cybercrime Report

Preserve the evidence. Save the original messages, files, URLs, transaction details, and account identifiers.
Secure affected accounts. Change passwords from a clean device, revoke unknown sessions, and turn on multi-factor authentication.
Notify the financial provider. If money was sent or stolen, contact your bank or e-wallet immediately and request account or transaction action where available.
Choose a reporting channel. Start with CICC, PNP-ACG, or NBI-CCD depending on urgency and complexity.
Prepare your timeline. Explain what happened in date order, who was involved, what was lost, and what you already did.
Keep your reference number. Save complaint, blotter, ticket, and investigator details for follow-up.

Do You Need to Report to More Than One Agency?

Often, yes. A single incident can trigger several processes. For example, a phishing attack that steals your bank credentials may require reports to the bank, CICC or police, and possibly the NPC if personal data was improperly processed or disclosed. These routes serve different purposes and one filing does not automatically substitute for another.

If you clicked a suspicious link, follow the immediate response steps in What to Do If You Clicked a Phishing Link in the Philippines.

What Happens After You Report?

An agency may conduct an intake interview, request a sworn statement, examine documents or devices, seek preservation of platform records, coordinate with service providers, trace accounts or transactions, or refer the case for further investigation or prosecution. Not every report automatically becomes a criminal case. Investigators and prosecutors still need evidence supporting the elements of an offense.

Frequently Asked Questions

Is there a fee to report cybercrime?

The NBI’s current Citizens Charter lists investigative assistance for victims of computer crimes as having no fee. Be cautious of anyone demanding payment to merely accept an official cybercrime report.

Can I report a scam even if I did not lose money?

Yes. Attempted scams, phishing messages, malicious links, and suspicious accounts can still be reported, particularly when they may affect other people.

Should I block the scammer immediately?

Preserve the evidence first when it is safe to do so. After saving the relevant messages, identifiers, and transaction information, blocking can reduce further contact.

Can screenshots be used as evidence?

They can be useful, but stronger evidence includes original messages, full URLs, device records, account identifiers, transaction records, and other material that helps establish authenticity and context.

Where and How to Report Cybercrime in the Philippines