NBI CyberCrime complaint: preserve fake-casino evidence safely

Check whether the incident fits the cybercrime route

The official service record, NBI investigative assistance for victims of computer crimes PH-S44 · accessed 2026-08-13, identifies investigative assistance for victims of computer crimes under the NBI CyberCrime Division and describes an in-person complaint or investigation request process. Verify the live instructions before travelling or submitting records.

A cash-out delay or disagreement over terms is not automatically a computer-crime report. Preserve facts that indicate impersonation, unauthorised access, phishing, malicious software or another suspected computer-related act, without deciding the offence yourself.

Preserve identifiers without engaging further

Save the full URL, profile identifier, phone number, email, app package or store route, message timestamps, payment instructions and transaction references. Export or capture the context where possible; a cropped logo or display name is weak evidence.

The legal context recorded in PNP ACG copy of Cybercrime Prevention Act PH-S30 · accessed 2026-08-11 does not turn every online dispute into a crime. Use it as background only. Do not bait the account, make another transfer or install a file to obtain stronger screenshots.

Keep gaming, financial and privacy files parallel

PAGCOR's warning on fraudulent gaming certifications, Warning against fraudulent gaming certifications PH-S10 · accessed 2026-08-09, supports the prevention context but does not identify the actor in a reader's incident. GCash guidance, GCash report a scam PH-S24 · accessed 2026-08-11, covers the provider-side report when that wallet is involved.

If IDs or personal records were misused, consult the current NPC route reflected in NPC filing a complaint PH-S29 · accessed 2026-08-11. Each institution should receive the evidence relevant to its role, with an attachment index and redactions that do not remove essential identifiers.

Build a short chronology

For a suspected fake-casino incident that may involve computer-related conduct, write one line for each material event: Philippine date and time, exact domain or provider route, amount or account action, reference number, response received and question still open. Keep original records privately and use redacted copies for ordinary correspondence. A clean chronology helps the receiving institution identify its part without exposing unrelated personal data.

Separate observation from conclusion

For a suspected fake-casino incident that may involve computer-related conduct, a receipt proves the details displayed on that receipt. A support message proves what the sender stated. A regulator list proves the dated entry it contains. None automatically proves intent, ownership of every lookalike address or the cause of a private account outcome. Use neutral verbs such as recorded, displayed, reported and replied until a competent body reaches a documented finding.

Protect the account before investigating further

For a suspected fake-casino incident that may involve computer-related conduct, if credentials, an e-wallet or a bank account may be compromised, use the verified provider security route first. Do not make another deposit, reveal an OTP, install an unknown app or pay a release fee merely to collect more evidence. Verification should reduce exposure. A person who needs to stop gambling should use the support and exclusion route without waiting for a commercial dispute to finish.

Submit only what the recipient needs

For a suspected fake-casino incident that may involve computer-related conduct, a payment provider handling NBI CyberCrime Division needs the transaction reference and account-security facts. A gaming regulator needs the exact domain, operator identity and relevant gaming condition. A privacy regulator needs the personal-data event and prior communication. A cybercrime unit needs the suspected computer-related conduct and preserved identifiers. Tailoring the evidence pack prevents one allegation from being copied into every channel as though each institution had already accepted it.

Correction and freshness record

For a suspected fake-casino incident that may involve computer-related conduct, live forms, domains and instructions can change. Recheck the controlling source before acting, preserve the earlier dated observation and add the new one rather than silently replacing it. A substantiated correction should identify the clean URL, exact statement, dated primary record and requested factual change. Do not send full IDs, passwords or bank records to request an editorial correction.

Check the acknowledgement, not a promise

For a suspected fake-casino incident that may involve computer-related conduct, after submitting, preserve the official acknowledgement, case or ticket number, receiving office and stated follow-up route. An acknowledgement proves receipt only within its wording. It does not establish that an allegation is true, that money will be recovered or that the receiving body has accepted every issue raised. Record later responses as new dated events and quote their scope accurately.

Close the immediate decision

For a suspected fake-casino incident that may involve computer-related conduct, end the evidence review with one practical decision: pause a payment, secure an account, wait for a stated response, provide a specifically requested record, or escalate through a verified official route. Do not leave the next step as a vague instruction to keep researching. If the source record is unclear, the safe conclusion is to preserve the uncertainty and avoid adding financial or identity exposure.

Evidence and decision tables

Questions Philippine readers ask