If someone is threatening you online, posting private information, spreading intimate images, impersonating you, or harassing you through repeated messages, the most important thing is to move fast without destroying evidence. In the Philippines, urgent cyber harassment complaints may involve several laws and offices at the same time: the PNP Anti-Cybercrime Group, the NBI Cybercrime Division, the DOJ Office of Cybercrime, the CICC hotline, the prosecutor’s office, the barangay or Women and Children Protection Desk, and sometimes the National Privacy Commission. This guide explains how to identify the legal issue, preserve digital evidence, file the complaint, and escalate it when the situation is urgent.

What Counts as Cyber Harassment in the Philippines?

“Cyber harassment” is a practical term, not always the exact name of a single criminal offense. In real cases, online harassment may be charged under different laws depending on what the offender actually did.

Common examples include:

Repeated threats through Messenger, Viber, Telegram, Instagram, TikTok, X, email, or SMS
Posting your address, workplace, school, phone number, IDs, or family details to invite attacks or humiliation
Creating fake accounts to impersonate you
Sending sexual comments, rape threats, or misogynistic, homophobic, or transphobic abuse
Uploading or threatening to upload intimate photos or videos
Blackmailing someone using screenshots, private chats, or nude images
Spreading false accusations online that damage reputation
Hacking or taking over social media accounts
Harassing a former partner online as part of abuse or control
Targeting a child with sexual messages, grooming, or exploitation materials

The right escalation path depends on the danger level. A death threat, rape threat, extortion threat, doxxing incident, or intimate-image threat should be treated differently from a single rude comment online.

When the Complaint Is Urgent

Treat the case as urgent if any of these are present:

The offender threatens physical harm, rape, kidnapping, self-harm coercion, or harm to your family.
Your home address, live location, workplace, school, phone number, or child’s details were exposed.
Intimate images or videos were uploaded, threatened, or sent to others.
The offender is demanding money, sex, reconciliation, silence, or another act in exchange for not posting something.
The victim is a minor.
The harassment is connected to an abusive spouse, former partner, dating partner, or co-parent.
The offender appears to know your daily routine or is near your location.
The account is newly created, but the messages suggest the person knows you personally.

For immediate physical danger, contact 911, go to the nearest police station, or ask the barangay for immediate safety assistance. Cybercrime units are important, but they are not a substitute for emergency response when someone may show up at your home, office, or school.

Legal Bases Commonly Used in Cyber Harassment Cases

RA 10175: Cybercrime Prevention Act of 2012

Republic Act No. 10175, or the Cybercrime Prevention Act of 2012, is the main cybercrime law in the Philippines. It covers offenses such as illegal access, computer-related identity theft, cybersex, child pornography-related offenses, and online libel.

A very important provision is Section 6, which increases the penalty by one degree when a crime under the Revised Penal Code or special laws is committed through information and communications technology. This is why threats, fraud, stalking-like conduct, or harassment done through social media may become more serious when committed online.

Cyberlibel

Online defamatory posts may fall under cyberlibel under RA 10175 in relation to libel under the Revised Penal Code. In Disini v. Secretary of Justice, G.R. No. 203335, the Supreme Court upheld the constitutionality of cyberlibel but also struck down or limited certain provisions of the Cybercrime Prevention Act.

Cyberlibel is not the best label for every online harassment case. If the problem is threats, sexual harassment, doxxing, account hacking, or intimate-image abuse, other laws may be more direct.

RA 11313: Safe Spaces Act

Republic Act No. 11313, or the Safe Spaces Act, covers gender-based sexual harassment in online spaces. It may apply to online acts that terrorize, intimidate, threaten, harass, or humiliate a person based on sex, gender, sexual orientation, gender identity, or expression.

This is especially relevant for:

Unwanted sexual remarks or comments online
Rape threats or sexualized threats
Repeated private messages with sexual content
Uploading or sharing photos, videos, or information without consent
Impersonation meant to humiliate or sexually harass
Misogynistic, homophobic, transphobic, or sexist abuse online

RA 9995: Anti-Photo and Video Voyeurism Act of 2009

Republic Act No. 9995 penalizes taking, copying, reproducing, selling, distributing, publishing, or broadcasting certain intimate photos or videos without consent.

This law is often relevant when an ex-partner, former fling, online acquaintance, or blackmailer threatens to leak private sexual images. Even if the victim originally consented to the recording or photo, later sharing it without consent can still create criminal liability.

RA 9262: Violence Against Women and Their Children

Republic Act No. 9262, the Anti-Violence Against Women and Their Children Act, may apply when the harasser is a husband, former husband, sexual partner, former sexual partner, dating partner, or person with whom the woman has or had a child.

Online harassment by an intimate partner may be psychological violence, especially when it involves humiliation, threats, control, stalking-like monitoring, economic abuse, or intimidation. A victim may also seek protection orders, including a Barangay Protection Order, Temporary Protection Order, or Permanent Protection Order under the Rule on Violence Against Women and Their Children.

Revised Penal Code: Threats, Coercion, Unjust Vexation, and Other Crimes

The Revised Penal Code may apply even if the harassment happens online. Depending on the facts, possible offenses include:

Grave threats if the offender threatens a crime such as killing, rape, serious injury, or arson
Light threats for certain lesser threats
Grave coercion if someone is forced to do something against their will through violence, threats, or intimidation
Unjust vexation for conduct that unjustly annoys, irritates, or causes distress, depending on the circumstances
Libel or cyberlibel for defamatory public statements

Because RA 10175 can increase penalties for crimes committed through ICT, online conduct should not be dismissed as “just Facebook drama” when there are real threats or harm.

RA 10173: Data Privacy Act of 2012

Republic Act No. 10173, the Data Privacy Act, may be relevant when the harasser unlawfully uses, discloses, or processes personal or sensitive personal information. This can include doxxing, posting IDs, medical information, financial details, private addresses, or other personal data without lawful basis.

The National Privacy Commission can be involved when the complaint is mainly about misuse of personal data, especially if a company, employer, school, platform, online lender, or organization mishandled or exposed personal information.

RA 11930: Anti-OSAEC and Anti-CSAEM Act

If a child is involved, Republic Act No. 11930, the Anti-Online Sexual Abuse or Exploitation of Children and Anti-Child Sexual Abuse or Exploitation Materials Act, may apply. Cases involving minors should be escalated immediately to law enforcement, the Women and Children Protection Desk, social welfare authorities, or child-protection units.

Do not download, forward, repost, or circulate sexual images of a minor, even for “evidence sharing.” Preserve evidence in a way that avoids further distribution and let law enforcement handle the material.

First 24 Hours: What to Do Before Filing

1. Secure Yourself First

If the offender knows where you live or work, consider practical safety steps:

Tell trusted family, housemates, office security, school authorities, or building guards.
Avoid meeting the harasser alone.
Change passwords and enable two-factor authentication.
Check account recovery emails and phone numbers.
Review privacy settings on Facebook, Instagram, TikTok, X, LinkedIn, and messaging apps.
Save emergency contacts offline.

If the threat is credible, go to the nearest police station first. You can still file with PNP Anti-Cybercrime Group or NBI after immediate safety measures are in place.

2. Preserve Digital Evidence Properly

Screenshots help, but they are stronger when organized and supported by context. Under the Rules on Electronic Evidence, A.M. No. 01-7-01-SC, electronic documents and data messages may be used as evidence if properly authenticated.

Prepare an evidence folder containing:

Screenshots showing the full message, post, username, profile photo, date, and time
URLs or profile links
Screen recordings scrolling through the account, post, comment thread, or conversation
Original messages, emails, SMS, or chat threads
Sender phone numbers, email addresses, usernames, account IDs, and display names
Transaction receipts if blackmail, extortion, or payment is involved
Names and contact details of witnesses who saw the post or received the message
Any previous reports to the platform and the platform’s response
Your own short timeline of events

Do not rely only on cropped screenshots. A cropped image may still be useful, but investigators often need the surrounding context to prove identity, intent, timing, and continuity.

3. Avoid Actions That Can Weaken the Case

Common mistakes include:

Deleting the conversation before saving evidence
Warning the offender that you will file a case, causing them to delete accounts
Posting the offender’s private information in retaliation
Hacking the offender’s account “to get proof”
Sending money without documenting the demand
Forwarding intimate images to friends or group chats
Editing screenshots with highlights, stickers, or captions before saving originals

You may block the person for safety, but preserve evidence first if you can do so safely.

Where to File an Urgent Cyber Harassment Complaint

Office or agency	Best for	Practical notes
Nearest police station or 911	Immediate physical danger, threats, stalking-like conduct, urgent safety	Ask for a blotter entry and referral to the proper unit if cyber evidence is involved.
PNP Anti-Cybercrime Group / Regional Anti-Cybercrime Unit	Online threats, fake accounts, hacking, cyberlibel, harassment through social media or messaging apps	PNP ACG has national and regional units. Bring evidence in printed and digital form.
NBI Cybercrime Division	Cybercrime investigation, digital evidence, serious online harassment, identity theft, account compromise	The NBI Citizen’s Charter lists investigative assistance for victims of computer crimes.
DOJ Office of Cybercrime	Cybercrime policy, referrals, international coordination, mutual legal assistance concerns	The DOJ Office of Cybercrime is the central authority for international cooperation in cybercrime and cyber-related matters.
CICC / Hotline 1326	Central cybercrime or online scam reporting and referral	Useful for quick reporting and routing, especially where online fraud, impersonation, phishing, or coordinated cyber abuse is involved.
Barangay / VAW Desk / Women and Children Protection Desk	Domestic abuse, ex-partner harassment, threats involving women or children	Especially important for RA 9262 protection orders and immediate local safety measures.
National Privacy Commission	Doxxing, misuse of personal data, data exposure by companies, institutions, online lenders, or organizations	Best when the core issue is unlawful processing or disclosure of personal information.
City or Provincial Prosecutor’s Office	Formal criminal complaint after evidence is prepared	The prosecutor determines probable cause and whether charges should be filed in court.

In practice, many victims start with PNP ACG or NBI. If there is immediate danger, start with the nearest police station or 911, then escalate to the cybercrime unit.

Step-by-Step Process to Escalate the Complaint

1. Prepare a Short Incident Summary

Before going to the agency, write a one-page summary:

Your full name, address, contact number, and email
The suspect’s name, username, phone number, or identifying details, if known
The platform used
What happened, in chronological order
Why the situation is urgent
What evidence you have
What relief you are asking for, such as investigation, preservation of data, takedown assistance, protection, or filing of charges

If the suspect is unknown, write “John Doe,” “Jane Doe,” or “unknown person using the account name ______.”

2. Bring Both Printed and Digital Evidence

Bring:

Valid government ID
Printed screenshots
USB drive or phone containing the original files
Links written clearly on paper
A timeline of events
Any previous police blotter, barangay record, or platform report
Medical, psychological, or counseling records if the harassment caused trauma or panic attacks
Proof of relationship if the complaint involves an ex-partner, spouse, or dating partner
Birth certificate or proof of age if the victim is a minor

Do not surrender your only device unless required. If investigators need forensic examination, ask how the device will be received, documented, and returned.

3. File With PNP ACG or NBI Cybercrime Division

At intake, you will usually be asked to fill out a complaint sheet and undergo an initial interview. The NBI Citizen’s Charter describes the initial steps for computer-crime complaints, including complaint-sheet assistance, preliminary interview, sworn statements, and collection of supporting documents.

For urgent cases, clearly say:

“There is an immediate threat to my safety.”
“The suspect is threatening to release intimate images.”
“My address or child’s information was posted.”
“The suspect is demanding money or sex.”
“The victim is a minor.”
“The account may be deleted soon, so preservation is urgent.”

Ask for the case reference number, the assigned investigator’s name, and the proper channel for submitting additional evidence.

4. Ask About Preservation of Computer Data

Under RA 10175 and the Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC, cybercrime investigations may involve preservation, disclosure, interception, search, seizure, and examination of computer data through proper legal processes.

This matters because social media platforms, telecoms, email providers, and internet service providers may not keep all useful data forever. In urgent complaints, ask the investigator whether a preservation request or appropriate cybercrime warrant process is needed.

Victims themselves generally cannot force Facebook, Google, X, TikTok, Telegram, telecoms, or ISPs to disclose account registration data, IP logs, or subscriber information. That usually requires law enforcement action, legal process, or a court order.

5. File a Sworn Complaint-Affidavit

A criminal complaint normally needs a sworn statement or complaint-affidavit. This is a written narrative signed under oath. It should attach evidence as annexes.

A good affidavit usually includes:

Who you are
How you know the suspect, if known
The exact acts committed
Dates, times, platforms, links, and account names
Screenshots and files attached as annexes
How the acts affected your safety, reputation, work, family, or mental well-being
Witnesses, if any
A statement that the allegations are true based on personal knowledge and authentic records

If you are abroad, you may need to execute the affidavit before a Philippine embassy or consulate, or have foreign notarized documents authenticated or apostilled depending on where they were executed and where they will be used. The DFA’s Apostille information page explains authentication requirements for documents.

6. Coordinate With the Prosecutor’s Office

After investigation, the complaint may be filed with the prosecutor’s office for preliminary investigation. The prosecutor evaluates whether there is probable cause to charge the respondent in court.

Typical steps include:

Filing of complaint-affidavit and evidence
Issuance of subpoena to the respondent
Respondent’s counter-affidavit
Reply-affidavit, if needed
Prosecutor’s resolution
Filing of Information in court if probable cause is found

Cyber harassment cases can slow down when the suspect is anonymous, uses fake accounts, deletes posts, uses foreign platforms, or is outside the Philippines. This is why early preservation of evidence is critical.

How to Escalate When the Case Is Not Moving

If your complaint is urgent but you are not getting a response, escalate in writing and keep proof of every follow-up.

Practical escalation steps:

Ask for the assigned investigator and case reference number. Without these, follow-ups become difficult.
Submit a written urgency letter. State the continuing threats, new posts, new accounts, or risk of evidence deletion.
Attach new evidence in organized batches. Label them by date and platform.
Ask whether preservation or cybercrime warrant steps are being pursued. Do not demand confidential details, but ask if the necessary process is being considered.
If filed at a local station only, ask for referral to PNP ACG or NBI Cybercrime Division.
If the case involves a foreign platform or suspect abroad, ask whether DOJ Office of Cybercrime coordination may be necessary.
If the case involves personal data exposure, consider a parallel complaint or report with the National Privacy Commission.
If the case involves a woman or child in an abusive relationship, pursue protection orders and local safety measures separately from the cybercrime complaint.

Escalation works better when it is factual, organized, and evidence-based. Avoid emotional accusations against investigators; instead, show the continuing risk and the specific action needed.

Required Documents and Practical Timelines

Item	Why it matters	Practical notes
Valid ID	Confirms complainant identity	Bring at least one government-issued ID.
Complaint-affidavit	Main sworn statement	May be prepared before filing or with assistance during intake.
Screenshots and screen recordings	Shows content, dates, accounts, and threats	Save originals before editing or printing.
URLs and account links	Helps investigators locate accounts	Write them in a document because printed screenshots may not show full links.
Device used	May contain original messages and metadata	Bring the device if safe; do not factory reset.
Witness statements	Useful if others saw posts or received messages	Witnesses may later execute affidavits.
Proof of relationship	Relevant for RA 9262 or ex-partner abuse	Photos, chats, child’s birth certificate, marriage certificate, or other proof.
Proof of age	Required if victim is a minor	Birth certificate, school ID, passport, or other records.
Medical or psychological records	Supports harm and urgency	Useful in threats, trauma, VAWC, or severe harassment cases.
Foreign affidavits or documents	Needed for OFWs, foreigners, or overseas witnesses	May require consular notarization, authentication, or apostille.

There is generally no official filing fee for reporting a cybercrime complaint to law enforcement. Costs usually come from printing, notarization, transportation, certified records, legal assistance, or authentication of documents executed abroad.

Initial intake may happen the same day, but full investigation can take weeks or months. Prosecutor-level preliminary investigation may also take months, especially if platform records, telecom records, warrants, or foreign cooperation are needed. Court proceedings can take much longer.

Special Situations

If the Harasser Is an Ex-Partner

Do not treat this as only a cybercrime issue. If the offender is a spouse, former spouse, sexual partner, dating partner, or co-parent, RA 9262 may provide stronger immediate remedies, including protection orders.

Online harassment by an ex-partner often overlaps with:

Psychological violence
Threats
Coercive control
Sexual-image abuse
Doxxing
Economic abuse
Child-related intimidation

A Barangay Protection Order may provide urgent local protection, while a court-issued Temporary Protection Order can include broader restrictions.

If Intimate Images Are Involved

Move quickly. Preserve proof of the threat or upload, but do not spread the image further. Report the content to the platform for removal and file with PNP ACG or NBI.

Possible laws include RA 9995, RA 11313, RA 10175, and sometimes RA 9262 if the offender is an intimate partner. If the victim is a minor, RA 11930 becomes a priority.

If the Suspect Is Anonymous

You can still file. Many cybercrime complaints begin against an unknown person using a username, phone number, or account link.

Useful identifiers include:

Profile URL
Username and display name
Phone number
Email address
GCash, Maya, bank, or crypto wallet details
IP-related clues from email headers, if available
Screenshots showing the account before deletion
Mutual friends, groups, or pages where the offender posted

Do not assume that a fake name makes the case impossible. But expect that identifying the suspect may require platform records, telecom data, or court-authorized processes.

If You Are a Foreigner in the Philippines

Foreigners can file complaints in the Philippines if they are victims of crimes committed in the Philippines or affecting them here. Bring your passport, ACR I-Card if applicable, local address, and any evidence showing where the harassment occurred or how it affected you in the Philippines.

If evidence or witnesses are abroad, documents may need notarization, consular authentication, apostille, or certified translation depending on the document and country.

If You Are an OFW or Filipino Abroad

You may begin by preserving evidence, reporting the platform content, contacting trusted family in the Philippines, and coordinating with Philippine authorities. If you need to execute affidavits abroad, check with the nearest Philippine embassy or consulate regarding notarization or acknowledgment.

For urgent threats against family members in the Philippines, ask the family member to report immediately to the nearest police station or barangay and then coordinate with PNP ACG or NBI.

Frequently Asked Questions

Can I file a cyber harassment complaint even if I do not know the real name of the person?

Yes. You may file against an unknown person using the account name, profile link, phone number, email address, or other identifiers. Investigators may need legal processes to request platform, telecom, or subscriber information.

Should I go to PNP Anti-Cybercrime Group or NBI Cybercrime Division?

Either may be appropriate. PNP ACG is often accessible through regional anti-cybercrime units, while NBI Cybercrime Division also handles computer-related investigations. For immediate physical danger, go first to the nearest police station or call 911, then proceed with the cybercrime complaint.

Is a screenshot enough evidence?

A screenshot can help, but it is stronger with the full URL, account link, date, time, screen recording, original messages, witness statements, and proof that the screenshot was not altered. Keep the original chat or post accessible if possible.

Can I ask Facebook, Google, TikTok, X, or Telegram to reveal the harasser?

As a private person, you can report content and request takedown through platform tools, but platforms usually do not disclose account registration data, IP logs, or subscriber information without valid legal process. Law enforcement may need preservation requests, subpoenas, warrants, or international cooperation.

What if the harasser deleted the posts?

Deleted posts make the case harder but not automatically impossible. Your screenshots, screen recordings, witnesses, notifications, email alerts, cached links, and platform records may still help. This is why early preservation is important.

Can I file both a cybercrime complaint and a VAWC case?

Yes, if the facts support both. For example, an ex-partner who threatens to leak intimate images may face cybercrime or voyeurism-related complaints and may also be subject to RA 9262 remedies if the relationship falls under the law.

Is barangay conciliation required before filing a cyber harassment complaint?

Often, no. Many cybercrime-related offenses carry penalties beyond the barangay conciliation threshold or involve issues that should go directly to law enforcement or prosecutors. However, the barangay may still be useful for immediate safety assistance, blotter records, VAWC desk assistance, or Barangay Protection Orders.

Can I sue someone for posting my address or private information online?

Possibly. Depending on the facts, doxxing may involve the Data Privacy Act, Safe Spaces Act, threats, coercion, cybercrime provisions, or civil liability under the Civil Code. The strongest route depends on what information was posted, why it was posted, and what harm resulted.

What if the harasser is outside the Philippines?

You may still report the case in the Philippines if there is a Philippine victim, Philippine impact, Philippine-based evidence, or other jurisdictional basis. Cross-border cases are slower because they may require coordination through the DOJ Office of Cybercrime, foreign law enforcement, or platform legal channels.

Can I get the post taken down immediately?

You can report the post directly to the platform, especially for threats, harassment, impersonation, non-consensual intimate images, child safety, or private information. Law enforcement reports can strengthen takedown requests, but takedown timing depends on the platform and the urgency category.

Key Takeaways

Cyber harassment in the Philippines may involve RA 10175, RA 11313, RA 9995, RA 9262, RA 10173, RA 11930, the Revised Penal Code, and civil remedies.
If there is immediate physical danger, call 911 or go to the nearest police station before dealing with the cybercrime paperwork.
Preserve evidence before blocking, deleting, or confronting the harasser.
File urgent cyber harassment complaints with PNP ACG, NBI Cybercrime Division, or the proper local police unit, depending on the risk and location.
Ask about preservation of computer data when accounts, posts, or messages may be deleted.
For intimate partner harassment, pursue protection orders separately from the cybercrime complaint.
For doxxing or misuse of personal data, consider the National Privacy Commission in addition to law enforcement.
For minors, sexual images, grooming, or exploitation, escalate immediately and avoid further sharing of the material.