The legal framework
Section 4(b)(3) of the Cybercrime Prevention Act of 2012 makes computer-related identity theft a distinct offence: the intentional acquisition, use, misuse or deletion of identifying information belonging to another. The SIM Registration Act requires SIM cards to be registered, which has changed both the risk and the investigative picture.
Computer-related identity theft is a specific offence under the Cybercrime Prevention Act of 2012, punished more severely than the equivalent offline offence. The practical tools have improved since: the anti-financial account scamming legislation allows accounts used in fraud to be frozen and investigated, and the SIM registration law was intended to make disposable numbers harder to use, with mixed results.
Key points
| Statute | Cybercrime Prevention Act of 2012, section 4(b)(3) |
|---|---|
| Penalty | Imprisonment and fines, increased where other offences are committed through it |
| SIM registration | Required by law; report a lost SIM to the provider immediately |
| Reporting | PNP Anti-Cybercrime Group and NBI Cybercrime Division |
| Banking | BSP rules on unauthorised transactions and consumer redress |
| Credit | Credit Information Corporation holds credit data |
| BSP escalation | Consumer assistance mechanism reviews bank refusals |
| Anti-Financial Account Scamming Act | Strengthened powers to freeze mule accounts |
In practice
- Report to the bank and to the PNP Anti-Cybercrime Group or the NBI without delay.
- Have the compromised SIM deactivated and re-registered.
- File a complaint with the BSP consumer assistance mechanism if the bank refuses to refund.
- Request your credit report from the Credit Information Corporation.
- Escalate to the BSP consumer assistance mechanism if the bank rejects your dispute.
Where to go
- PNP Anti-Cybercrime Group.
- NBI Cybercrime Division.
- BSP Consumer Assistance Mechanism.
Worth knowing
If the bank rejects your dispute, the central bank's consumer assistance mechanism can review it: that escalation is free and often decisive. Recent legislation gave regulators power to freeze accounts used to receive scam proceeds. Speed of reporting determines whether that power can be used.
Frequently asked questions
Can a fraudulent account be frozen in the Philippines?
Yes. The anti-financial account scamming law allows banks and the regulator to freeze accounts implicated in fraudulent transfers and to investigate money mules, on a much faster timetable than a court order. Report to your bank and to the police cybercrime unit immediately.
What should you do in the first hour?
Call your bank and freeze the affected accounts and cards, change the passwords on your email first and then on everything linked to it, and turn on two-factor authentication. Take screenshots of everything before anything is deleted. Then report to the police and keep the reference number: banks, lenders and telecom operators will ask for it before they reverse anything.
Official sources and links
- gov.ph — official government portal