89PHP How to Report a Scam Website in the Philippines, Step by Step

Seeing a padlock or a familiar logo does not make a site real, and reporting a fake one is quicker than most people expect. This page sets out how to report a scam website in the Philippines, who takes which kind of report and what each report should carry. If you are still deciding whether a site is genuine, run the checks in the legit site checklist first. If money has already moved, go straight to step 2.

How to report a scam website: the steps

Work through these in order. Steps 1 and 2 cannot wait; the rest can follow within the day.

1. Stop and save the evidence: copy the exact address, take screenshots of the page and of every message, and note the dates and times.
2. Report to your wallet first. If the money went through GCash or Maya, use that wallet’s own report route, set out below.
3. Call the Inter-Agency Response Center hotline 1326, which the CICC and DICT describe as the government’s central number for online scams.
4. File with the NBI Cybercrime Division or the PNP Anti-Cybercrime Group, using the numbers their own or your wallet’s pages print.
5. Report the page to Google, and take any personal-data problem to the National Privacy Commission.

Do not message the scammer again, and do not pay anything to “release” or “recover” funds.

What a report should carry

Every body below asks the same basic questions: what happened, where, when and how much. A report with these items is easier to act on.

1. The exact address of the site, copied from the address bar, with the ending.
2. Screenshots of the page, the login form, the chat and any message that sent you there. For a channel or account, add a screenshot of its profile; telling a real channel from a copy shows what to capture.
3. The date and time of each step.
4. For any payment: the amount, the transaction reference, the wallet or account that received it and the recipient’s name or number.
5. A short account in your own words, in the order things happened.

Maya’s help page lists the recipient’s name, the transaction date and time, the amount and other relevant details as what to have ready.

Where to report in the Philippines: 7 places

The table lists only bodies whose own saved pages, or a page from a body that works with them, give the route. Numbers are printed as those pages print them.

Report scam website details to the CICC hotline and the agencies

The Philippine Information Agency, quoting DICT Caraga, says the I-ARC is a joint effort of the CICC, DICT, NPC and NTC, while enforcement sits with the PNP Anti-Cybercrime Group and the NBI Cybercrime Division. The hotline connects victims to those agencies. Say that the scam used a website, give the address and read out your payment references.

Report to GCash or Maya

Both wallets ask you to report to them and to the authorities. GCash’s help page lists these steps for a scam payment:

1. Report the scammer to the police or the NBI.
2. Open the GCash app and go to Transactions.
3. Select the transaction, tap Load More if it is older, then tap Get Help and Report as scam.
4. Fill out the ticket form and tap Submit.
5. Block the scammer on SMS or social media.

GCash’s page says its support team reviews the case and reaches out within 24 hours, and that the return of scammed funds is not guaranteed. It also warns that a false or malicious report can carry criminal liability under the Anti-Financial Account Scamming Act. Maya’s page asks you to block the scammer, submit its Fraud Complaint Form on its support site (you then get a reference number by email), call Maya’s hotline (+632) 8845 7788 or toll-free 1800 1084 57788, and report to the authorities.

Report a data problem to the NPC

If a fake site kept your mobile number, password or ID details, that is a personal data matter. The National Privacy Commission’s mechanics page sets out how to file:

1. Fill out the complaint-assisted form and have it notarized, or prepare a verified complaint.
2. Attach copies of your evidence and any witness affidavit.
3. File it personally, by registered mail, by courier or by email the Commission authorizes.
4. Start at privacy.gov.ph for the form and the current instructions.

Report the page to Google and PAGCOR

Google’s Safe Browsing site carries a page titled “Report a Page to Google Safe Browsing”, and reports of a phishing page belong there. For a phishing email, Gmail’s help says to open the message on a computer, click More next to Reply and click Report phishing. CISA adds that report options usually sit near the sender’s name.

For a gaming site that claims a licence, PAGCOR’s contact page lists info@pagcor.ph and the trunkline numbers +632 8521-1542 and +632 8522-0299. Send the same evidence pack. PAGCOR warned on 29 June 2026 that fake gaming sites use its logo and fabricated certificates, so say if the page showed one.

Check the address before you report

A report is stronger when the address is exact. The padlock does not change that, and what the HTTPS padlock means explains why a site with one can still be a copy.

1. Copy the hostname from the address bar, not from the page.
2. Compare it with the address in the message that sent you there.
3. Include both in the report.