Anda di halaman 1dari 1

BASIC STEPS ON INVESTIGATING CYBERCRIME

STEP NO. 1

*Interview the Complainant


*Duty investigator will conduct initial assessment
to determine if the complaint will fall under the
mandate of Anti-Cybercrime Group, especially in
violation of or in relation with the following:
*R.A. 8792 (E-Commerce Act)
*R.A. 8484 (Access Device Act)
*R.A. 9775 (Anti-Child Pornography Act)
*R.A. 9995 (Anti Photo and Video Voyeurism Act)
*R.A. 9208 (Anti-Human Trafficking Act)

STEP NO. 7

*Coordination,

Verification and
Preservation with TELCO/ISP
*Investigator will prepare necessary
request/communication to concern
TELCO/ISP/Money Transfer Agency for the
verification and preservation of details of IP
address/ Phone Number under investigation. This
may include subscriber information and traffic
data.

STEP NO. 8

STEP NO. 2

*Complaint Documentation
*Complainant must fill-out complaint sheet under
oath, with brief narrative of the incident. This
may include presentation of pieces of evidence
that the complainant previously secured in
relation to his/her complaint.

STEP NO. 3

*Documentation of Evidence
*Investigator must document the concerned
complaint on the website by capturing a screen
shot or save the webpage as a PDF file indicating
the URL. This may also include the following:
*Full header in case of email
*ISP of the IP address concern through WHOIS
verification
*Website hosting through WHOIS verification
*Online search on the possible comments,
information, blogs concerning the accounts under
investigation.
*Save all the gathered digital evidence in one
folder with appropriate name. (proper case file
management)

STEP NO. 4

*Complainant detailed Sworn


Statement
*Complainant will give his/her detailed sworn
statement to the investigator under oath. The
investigator must comply the basic investigation
questions i.e. the 4 Ws and 1H and must
establish the elements of the crime violated.

STEP NO. 5
*Complaint Documentation
*Complainant must fill-out complaint sheet under
oath, with brief narrative of the incident. This
may include presentation of pieces of evidence
that the complainant previously secured in
relation to his/her complaint.

STEP NO. 6

*Request for the Conduct of Digital


Forensic Examination on the
submitted electronic evidence
*In case that there is/are electronic evidence
presented, Investigator will prepare necessary
memorandum request to Digital Forensic Section
for the conduct of forensic examination on the
submitted electronic evidence.

*Coordination, Verification and


Preservation with Website Admin (local
and international)

*Investigator will prepare necessary


request/communication to concern website
administrator for the verification and preservation
of the details of account/s under investigation.
This may include IP address, phone number and
email address used in the registration of the
account/s.

STEP NO. 9
*Preparation of MLAT Request (Mutual
Legal Assistance Treaty)

*Upon receipt of the confirmation that the website


administrator already preserved the necessary
information requested, the investigator will
prepare the communication to Philippine DOJ to
represent this Group to US DOJ through the Mutual
Legal Assistance Treaty (MLAT) in securing the
preserved information.

STEP NO. 10

*Preparation and Application for


Court Order to ISP/TELCO to give the
preserved information requested.
*Upon receipt of the confirmation that the
ISP/TELCO administrator that they already
preserved the necessary information requested,
the investigator will prepare the Application for
Court Order to ISP/TELCO to give the preserved
information requested

STEP NO. 11

*Referral to the Office of the


Prosecutor for the Preliminary
Investigation
*Upon completion of necessary pieces of evidence
that lead to determination of the perpetrator,
investigators will prepare the referral letter for
Preliminary Investigation to the Prosecutors Office.

STEP NO. 12

*Investigation Report

*It is recommended that an Investigation Report


must be made for every referred case. This report
will be a very good reviewer in testifying in court
since it includes the chronology of events on how
the case was built and other information not
mentioned in the referral letter.