Sextortion can feel terrifying because the threat is personal: someone is demanding money, more photos, sex, or silence by threatening to expose intimate images or videos. In the Philippines, this is not just an “online issue.” It may involve cybercrime, threats, coercion, privacy violations, gender-based online sexual harassment, child protection laws, and, in some cases, violence against women and children. This guide explains how to file a cybercrime sextortion report in the Philippines, what evidence to prepare, where to report, what laws may apply, and what usually happens after you file.

What Is Sextortion Under Philippine Law?

Sextortion usually means a person threatens to release, upload, send, or show intimate photos, videos, chats, or edited sexual images unless the victim does something. The demand may be:

Money through GCash, Maya, bank transfer, crypto, remittance, or gift cards
More nude or sexual photos or videos
A video call or livestream
Sexual acts
Continued communication with the offender
Silence about abuse
Reconciliation with an ex-partner
Withdrawal of a complaint

Philippine law does not always use the exact word “sextortion” as the name of the criminal charge. In practice, investigators and prosecutors look at the actual acts: the threat, the demand, the use of a computer or phone, the taking or sharing of intimate material, the age of the victim, the relationship between the parties, and whether money or sexual favors were demanded.

A sextortion complaint may therefore be treated as one or more criminal offenses, depending on the facts.

Legal Basis for a Sextortion Report in the Philippines

Republic Act No. 10175, or the Cybercrime Prevention Act of 2012

RA 10175 is the main cybercrime law. It covers cybercrimes committed through a computer system, including mobile phones and internet-connected devices. The law and its implementing rules recognize the role of the NBI and PNP cybercrime units in investigating cybercrimes, conducting forensic analysis, preserving electronic evidence, and coordinating with the DOJ Office of Cybercrime. (Supreme Court E-Library)

Sextortion may involve RA 10175 when the offender uses Facebook, Instagram, Messenger, Telegram, WhatsApp, Viber, email, dating apps, online wallets, cloud storage, or other computer systems to threaten, extort, impersonate, hack, distribute content, or demand payment.

Possible cybercrime-related angles include:

Situation	Possible legal issue
Offender uses a fake profile with your name/photos	Computer-related identity theft
Offender manipulates accounts, messages, or digital files	Computer-related forgery or data interference
Offender uses online threats to demand money	Cybercrime plus Revised Penal Code offenses
Offender demands paid sexual performance online	Possible cybersex or related offense
Offender posts defamatory sexual accusations online	Possible cyberlibel, depending on the content
Offender is abroad but victim, device, system, or damage is in the Philippines	Possible Philippine jurisdiction under RA 10175

Under the RA 10175 IRR, Philippine courts may have jurisdiction if any element of the cybercrime happened in the Philippines, if a computer system partly located in the Philippines was used, if damage was caused to a person in the Philippines, or if the violation was committed by a Filipino national regardless of place of commission. (Supreme Court E-Library)

Republic Act No. 9995, or the Anti-Photo and Video Voyeurism Act of 2009

RA 9995 is often highly relevant in sextortion cases involving intimate photos or videos. It penalizes acts such as taking intimate photos or videos without consent and also selling, copying, reproducing, distributing, publishing, broadcasting, showing, or exhibiting intimate photos or videos through the internet, mobile phones, or similar means without written consent. Importantly, the law states that the prohibition on copying, selling, distributing, publishing, or broadcasting applies even if the person originally consented to the recording. (Lawphil)

This matters in common situations such as:

A former boyfriend or girlfriend threatens to upload a private video.
A person recorded an intimate video consensually during the relationship, but never agreed to have it shared.
A scammer secretly recorded a video call.
Someone sends intimate images to your relatives, employer, school, spouse, or group chat.
A third party reposts or forwards intimate material.

RA 9995 carries imprisonment of 3 to 7 years and/or a fine of ₱100,000 to ₱500,000, at the court’s discretion. If the offender is a foreigner, the law also provides for deportation after service of sentence and payment of fines. (Lawphil)

Revised Penal Code: Grave Threats, Coercion, and Related Offenses

Many sextortion cases involve threats even before any image is posted. Under Article 282 of the Revised Penal Code, grave threats may arise when a person threatens another with harm to the person, honor, or property of the victim or the victim’s family, especially when the threat is tied to a demand for money or another condition. Article 286 on grave coercions may apply when a person, without lawful authority, uses violence, threats, or intimidation to compel another to do something against their will. (Lawphil)

In actual case evaluation, prosecutors may also consider robbery by intimidation, unjust vexation, alarms and scandals, acts of lasciviousness, or other Revised Penal Code provisions depending on what happened. The complaint does not have to perfectly name the offense at the beginning. What matters most is that the facts, evidence, identities, timelines, and demands are clearly presented.

Republic Act No. 11313, or the Safe Spaces Act

The Safe Spaces Act covers gender-based sexual harassment in streets, public spaces, workplaces, schools, and online spaces. Its IRR expressly covers gender-based online sexual harassment and identifies the PNP Anti-Cybercrime Group as the unit that receives complaints of gender-based online sexual harassment. It also requires confidentiality, privacy, and security for victims. (Supreme Court E-Library)

This may be relevant where the sextortion involves misogynistic, homophobic, transphobic, sexist, or sexualized harassment online, including cyberstalking, repeated sexual messages, or threats to expose sexual content.

Republic Act No. 11930, or the Anti-OSAEC and Anti-CSAEM Act

If the victim is below 18, the case becomes more serious. RA 11930 protects children from online sexual abuse or exploitation and child sexual abuse or exploitation materials. The law defines OSAEC to include sexual extortion of children, image-based sexual abuse, online grooming, livestreaming of sexual abuse, and the production, dissemination, possession, or access of child sexual abuse or exploitation materials. (Supreme Court E-Library)

For child victims:

The child is treated as a victim, not as an offender, in self-generated sexualized materials.
Complaints may be filed by the offended party, parents, guardians, relatives, DSWD, local social welfare officers, law enforcement, and other authorized persons.
Law enforcement agencies are mandated to immediately initiate investigation upon receiving statements, affidavits, or information about OSAEC or CSAEM.
The child’s identity and records must remain confidential. (Supreme Court E-Library)

This is why sextortion involving minors should be handled carefully. Do not forward, repost, or circulate suspected child sexual abuse material. Investigators can guide how evidence should be viewed, preserved, and turned over without creating more illegal copies.

Republic Act No. 9262, or the Anti-VAWC Act

If the offender is a husband, former husband, boyfriend, former boyfriend, dating partner, live-in partner, or a person with whom the woman has or had a sexual or dating relationship, RA 9262 may also apply. The law covers physical, sexual, psychological, and economic abuse, including threats, harassment, coercion, and conduct causing mental or emotional anguish. Victims may also seek protection orders, support services, confidentiality, and damages. (Supreme Court E-Library)

This is common in “revenge porn” or post-breakup sextortion cases where an ex-partner threatens to expose intimate material unless the victim returns, stops dating someone else, withdraws a complaint, or gives money.

Where to File a Cybercrime Sextortion Report

For most sextortion cases, the main reporting options are:

Office or unit	Best for	Practical notes
PNP Anti-Cybercrime Group (PNP-ACG)	Cybercrime complaints, online threats, social media blackmail, digital evidence	Also relevant for gender-based online sexual harassment under the Safe Spaces Act. (Supreme Court E-Library)
NBI Cybercrime Division (NBI-CCD)	Cybercrime investigation, digital forensic examination, online extortion, identity-related cybercrimes	NBI’s Citizen’s Charter says the general public may avail of investigative assistance for computer crimes, with complaint intake, preliminary interview, sworn statements, and device examination. (National Bureau of Investigation)
DOJ Office of Cybercrime	Coordination, cybercrime referrals, preservation, international cooperation, prosecution support	The DOJ Office of Cybercrime is the central authority for cybercrime assistance, preservation, production of data, and international cooperation. (Supreme Court E-Library)
CICC / Cybercrime Investigation and Coordinating Center	Cybercrime coordination and immediate reporting channels	CICC coordinates national cybercrime response and monitors cases handled by law enforcement and prosecution agencies. (Supreme Court E-Library)
Women and Children Protection Desk / VAW Desk / DSWD / Local Social Welfare Office	Minors, VAWC, sexual abuse, child protection, domestic or dating violence	Particularly important where the victim is a child, woman in a dating relationship, or person needing protection and social services.
Nearest police station or barangay VAW/ASH desk	Immediate safety, local assistance, referral	Barangays are not substitutes for cybercrime investigators, but they can help with immediate protection, blotter, referral, and VAWC-related support.

NBI-CCD’s published Citizen’s Charter states that filing investigative assistance for victims of computer crimes has no listed filing fee, includes assistance in filling out the complaint sheet, preliminary interview, sworn statements or prepared affidavits, and examination of a relevant device, with a listed total front-line processing time of about 1 hour and 10 minutes for the intake steps. (National Bureau of Investigation)

What to Do Before Filing the Report

1. Preserve the Evidence Without Spreading the Images

The strongest cybercrime complaints are organized. Save evidence in a way that shows the full story without unnecessarily copying or distributing intimate material.

Prepare:

Screenshots of the full conversation, not just selected messages
The exact profile URL, username, handle, phone number, email address, or account ID
Screenshots showing the threat and demand
Screenshots showing the intimate image/video was threatened, posted, or sent
Payment demands and payment instructions
GCash, Maya, bank, crypto, remittance, or card transaction receipts
Dates and times of each threat
The platform used: Messenger, Instagram, Telegram, dating app, email, etc.
Names of people who received the images or threats
Links to posts, groups, pages, cloud folders, or websites
Device used by the victim
Any known identity of the suspect

For electronic evidence, authenticity matters. Philippine law recognizes electronic data messages and electronic documents, but the person presenting them may need to prove that the evidence is what it claims to be, including its origin and integrity. (Supreme Court E-Library)

Practical tips:

Do not delete the conversation.
Do not block immediately if it will erase the account, messages, or profile links from view. Take screenshots and copy URLs first.
Use another phone to record a short video scrolling through the conversation if the platform allows disappearing messages.
Export chats when the app allows it.
Keep the original device.
Write down the date, time, and timezone.
Do not edit screenshots except for making separate redacted copies for personal organization.
Keep payment receipts in PDF or screenshot form.
For child-related material, avoid making extra copies; preserve the device and let law enforcement guide evidence handling.

2. Stop Negotiating as Soon as Evidence Is Secured

Sextortion offenders often keep asking for more. Paying once rarely ends the abuse. It may confirm that the victim is frightened and able to pay. In many real cases, the offender asks for a second, third, or larger payment.

A safer approach is to preserve evidence, avoid sending more images, avoid sending more money, and report the incident through proper channels. If communication continues for evidence purposes, keep it short and avoid provoking, threatening, or impersonating law enforcement.

3. Secure Your Accounts

Sextortion may be linked to hacking, phishing, SIM compromise, or access to private cloud storage. Secure accounts while preserving evidence:

Change passwords for email, social media, cloud storage, and online wallets.
Turn on two-factor authentication.
Log out unknown devices.
Check email forwarding rules.
Check linked phone numbers and recovery emails.
Save a screenshot of suspicious login alerts.
Report hacked or fake profiles through the platform.
Warn close contacts briefly if there is a real risk of exposure, without sharing the intimate content.

4. Prepare a Short Chronology

Investigators appreciate a clear timeline. A simple chronology is often more useful than a long emotional narrative.

Example format:

Date / Time	What happened	Evidence
June 10, 2026, 9:00 PM	I met the suspect on a dating app.	Screenshot 1, profile URL
June 11, 2026, 12:30 AM	Suspect moved conversation to Telegram.	Screenshot 2
June 11, 2026, 1:15 AM	Suspect threatened to send my video to family unless I paid ₱10,000.	Screenshot 3
June 11, 2026, 1:20 AM	Suspect sent GCash number.	Screenshot 4
June 11, 2026, 1:40 AM	I sent ₱3,000 out of fear.	GCash receipt
June 12, 2026	Suspect demanded more money.	Screenshot 5

Step-by-Step: How to File a Sextortion Cybercrime Report

1. Choose the Correct Reporting Office

For purely online sextortion, the usual first choices are PNP-ACG or NBI-CCD. If the victim is a minor, also involve the Women and Children Protection Desk, DSWD, or local social welfare office. If the offender is an intimate partner or ex-partner and the victim is a woman, VAWC remedies may also be relevant.

2. Bring Identification and Evidence

Bring:

One or two government-issued IDs
Printed screenshots, if available
Digital copies in a USB drive or organized folder
The device where the messages are still visible
Payment receipts
Profile links and usernames written down
Contact details of witnesses
Draft chronology
For minors: birth certificate or proof of age if available, plus parent/guardian ID
For foreigners: passport, visa/ACR I-Card if available, Philippine address or contact details, and local phone/email

Do not rely only on printed screenshots. Investigators may need to see the original messages on the device or request forensic examination.

3. Fill Out the Complaint Sheet and Give an Initial Statement

At the NBI-CCD, the Citizen’s Charter describes an intake process where the complainant proceeds to the Cybercrime Division, is assisted in filling out a complaint sheet, undergoes preliminary interview, and executes a sworn statement or submits a prepared affidavit. (National Bureau of Investigation)

At PNP-ACG, the process is similar in practice: initial interview, presentation of evidence, complaint affidavit or sworn statement, recording/docketing, and possible referral for digital forensic examination or further investigation.

4. Execute a Sworn Statement or Affidavit-Complaint

A sworn statement or affidavit-complaint is your written statement signed under oath. It should state:

Your identity and contact details
How you encountered the offender
What was threatened
What was demanded
Whether you paid or sent anything
Whether images/videos were posted or sent
Who received them, if known
What accounts, phone numbers, links, or payment channels were used
What evidence you are submitting

Be truthful and specific. Do not exaggerate. Do not guess the suspect’s identity if you are not sure. Use phrases like “the account using the name…” or “the GCash number provided by the suspect…” when identity is not yet verified.

5. Ask That the Evidence Be Preserved

In cybercrime cases, speed matters because platforms delete accounts, usernames change, messages disappear, and logs expire. Under the RA 10175 IRR, service providers preserve traffic data and subscriber information for a minimum of six months from the transaction, and content data may be preserved for six months from receipt of a preservation order from law enforcement. Law enforcement may order a one-time extension for another six months. (Supreme Court E-Library)

Law enforcement may also seek court warrants for collection, disclosure, search, seizure, and examination of computer data. The IRR provides that disclosure of subscriber information, traffic data, or relevant data requires a court warrant and must be connected to a valid complaint officially docketed and assigned for investigation. (Supreme Court E-Library)

This is why a formal complaint is important. A platform report may remove content, but a formal cybercrime complaint helps law enforcement request preservation and identify the offender.

6. Cooperate With Digital Forensic Examination

Investigators may ask to examine your phone, laptop, email, or cloud account. The NBI and PNP cybercrime units are authorized to conduct data recovery and forensic analysis on computer systems and electronic evidence. (Supreme Court E-Library)

Practical realities:

You may be asked to unlock the device in the investigator’s presence.
You may be asked to sign consent forms for examination or account viewing.
The device may need to be turned over temporarily if it is central evidence.
If the evidence is sensitive, ask how it will be handled and recorded.
For child victims, confidentiality and protective rules are stricter under RA 11930. (Supreme Court E-Library)

7. Follow the Case Through Investigation and Prosecutor Review

After filing, the usual path is:

Complaint intake and docketing
Investigator review of evidence
Identification or tracing of accounts, numbers, wallets, or devices
Preservation or disclosure requests, if legally justified
Digital forensic examination, if needed
Preparation of complaint for the prosecutor
Preliminary investigation by the prosecutor
Filing of criminal information in court if probable cause is found

Timelines vary widely. Simple intake may happen on the same day. Identification of anonymous or foreign offenders may take longer, especially when platforms, telecoms, banks, e-wallets, or foreign service providers must respond. Cases involving minors, organized groups, money trails, or overseas accounts usually take more coordination.

Reporting to Platforms and Takedown Options

Filing with law enforcement and reporting to the platform are different but complementary.

Platform reporting can help remove content quickly. Law enforcement reporting can help identify the offender, preserve evidence, and build a criminal case.

Useful platform-related steps include:

Report the threatening account for blackmail, harassment, or non-consensual intimate images.
Report each post, story, group upload, or message containing the intimate material.
Copy the URLs before the content is removed.
Use built-in privacy violation tools for Facebook, Instagram, TikTok, X, Telegram, or other platforms.
Use StopNCII.org for adult non-consensual intimate images where appropriate; it creates a hash or digital fingerprint of intimate images/videos and shares that hash with participating companies to help detect and remove matching content without uploading the image itself. (stopncii.org)

Meta’s safety guidance states that sharing or threatening to share intimate images without consent violates its policies and identifies sextortion as threatening to reveal intimate images to force a person to do something they do not want to do. (Meta)

For minors, avoid using adult NCII tools without checking eligibility and child-safety rules. Child sexual abuse material should be reported through law enforcement, child protection channels, and the platform’s child safety reporting system.

Common Mistakes That Hurt Sextortion Complaints

Deleting the Conversation Too Early

Victims often delete messages out of panic or shame. This can make it harder to prove the threat, demand, account identity, and timestamps. If already deleted, check archived chats, cloud backups, email notifications, screenshots sent to trusted people, or device backups.

Sending More Money or More Images

Offenders often promise to stop after payment, then demand more. More payments can also complicate the money trail and prolong the abuse. More images create more leverage.

Posting the Suspect Publicly

Publicly naming the alleged offender may create separate risks, including retaliation, loss of evidence, or even a counter-complaint for libel if statements go beyond provable facts. It may also alert the offender to delete accounts and transfer funds.

Sending Intimate Evidence to Friends or Group Chats

Forwarding intimate material can worsen the spread and may create legal risk, especially if a minor is involved. Preserve evidence in controlled form and submit it to investigators properly.

Relying Only on Screenshots Without Links

Screenshots are useful, but URLs, usernames, account IDs, phone numbers, transaction references, and original device data are often more useful for tracing.

Waiting Too Long

Digital logs can disappear. Accounts can be deleted. E-wallet funds can be withdrawn. The RA 10175 framework recognizes preservation of computer data, but preservation works best when a report is made promptly. (Supreme Court E-Library)

Special Situations

If the Offender Is Abroad

A Philippine complaint may still be possible if the victim is in the Philippines, damage occurred in the Philippines, a Philippine computer system or account was used, or the offender is Filipino. The DOJ Office of Cybercrime handles international mutual assistance and extradition-related cybercrime functions, and the RA 10175 IRR provides mechanisms for international cooperation and preservation of data. (Supreme Court E-Library)

In practical terms, cross-border cases often take longer because foreign platforms and law enforcement agencies may require formal legal processes.

If the Victim Is a Foreigner in the Philippines

Foreigners may file cybercrime complaints in the Philippines. Bring a passport, local contact details, proof of stay if available, and evidence showing the Philippines connection: location of the victim, local phone number, Philippine e-wallet demand, Philippine suspect, Philippine platform account, or harm occurring in the Philippines.

If the affidavit is executed abroad, Philippine authorities may require consular notarization or apostille/authentication depending on the country and the document’s intended use. Requirements can vary by office, so the receiving investigator or prosecutor’s instructions matter.

If the Victim Is a Minor

Treat the case as urgent child protection. RA 11930 covers sexual extortion of children and image-based sexual abuse and requires confidentiality of the child’s identity and records. It also states that in self-generated child sexual abuse materials, the child producing the sexualized materials is considered a victim and not an offender. (Supreme Court E-Library)

Parents, guardians, DSWD, local social welfare officers, law enforcement, and other authorized persons may file complaints. (Supreme Court E-Library)

If the Offender Is an Ex-Partner

If an ex-partner threatens to leak intimate materials, the case may involve RA 9995, RA 10175, the Revised Penal Code, and possibly RA 9262 if the victim is a woman and the offender is a current or former husband, boyfriend, dating partner, or similar covered person. RA 9262 also provides protection-order remedies and confidentiality protections. (Supreme Court E-Library)

If the Material Is AI-Generated or Edited

Even if the nude image or video is fake, the threat, harassment, identity misuse, humiliation, and sexualized abuse may still be legally relevant. Preserve the original message, the fake image, the account that sent it, and any demand. The possible charges may differ from a case involving a real private recording, but it can still support complaints for cyber harassment, threats, identity-related offenses, or other applicable laws.

Documents and Evidence Checklist

Item	Why it matters
Government ID	Confirms identity of complainant
Screenshots of threats	Shows intimidation and demand
Full chat thread	Shows context and continuity
Profile URLs / account links	Helps investigators identify the account
Phone numbers / emails	Helps tracing and subpoenas
Payment receipts	Shows extortion demand and money trail
Bank/e-wallet account details	Helps identify recipient or mule account
Original device	Allows verification and forensic review
Timeline / chronology	Helps investigator understand the case quickly
Witness names	Useful if images were sent to others
Proof of age for minor	Triggers child protection handling
Relationship proof for VAWC	Helps if offender is spouse/ex/dating partner
Prior complaints or blotter entries	Shows pattern or escalation

Frequently Asked Questions

Can I file a sextortion report even if I sent the intimate photo voluntarily?

Yes. Consent to send or record an intimate image does not mean consent to threaten, publish, sell, copy, distribute, or broadcast it. RA 9995 expressly penalizes certain acts of copying, distributing, publishing, or broadcasting intimate material without written consent, even if consent to record was previously given. (Lawphil)

Should I pay the sextortionist?

Payment often does not stop sextortion. Many offenders ask for more after the first payment. From an evidence perspective, receipts are useful if payment already happened, but continuing to pay can prolong the abuse.

Can I report sextortion if the offender is using a fake account?

Yes. Fake accounts are common. Save the profile URL, username, display name, profile photos, mutual contacts, phone numbers, email addresses, payment channels, and all messages. Investigators may use preservation, disclosure, forensic analysis, and money-trail evidence.

What if the offender already posted my intimate photos or videos?

Preserve URLs and screenshots before reporting the content for takedown. Report to the platform and file with PNP-ACG or NBI-CCD. If the material involves a child, do not forward or repost it; report immediately through law enforcement and child protection channels.

Can I file a report online?

Initial reporting channels may be available through official cybercrime offices or hotlines, but a formal criminal complaint usually requires a sworn statement, identity verification, and submission or presentation of evidence. In practice, many victims still need to appear personally or coordinate directly with PNP-ACG, NBI-CCD, or the assigned investigator.

How long does a cybercrime sextortion case take?

Initial intake can be same-day, especially when evidence is organized. NBI-CCD’s Citizen’s Charter lists front-line intake steps for computer-crime investigative assistance with no fee and a total processing time of about 1 hour and 10 minutes. Actual investigation, identification, platform requests, forensic examination, prosecutor review, and court proceedings can take weeks to months or longer depending on complexity. (National Bureau of Investigation)

Will my family, school, or employer be notified?

Not automatically. Investigators generally focus on the complaint and evidence. However, if the offender already sent the material to family, school, or workplace contacts, those persons may become witnesses. For child victims and VAWC-related cases, confidentiality rules are especially important. RA 11930 requires protection of the child’s identity and records. (Supreme Court E-Library)

Can a foreigner file a sextortion complaint in the Philippines?

Yes, if there is a Philippine connection such as the victim being in the Philippines, the suspect being in the Philippines or Filipino, the use of a Philippine account/payment channel, or damage occurring in the Philippines. Bring passport details, local contact information, and all digital evidence.

What if I deleted the messages?

A deleted conversation does not automatically end the case. Check archived chats, backups, email notifications, synced devices, cloud storage, screenshots, payment records, and messages received by friends or family. Report what happened honestly and tell the investigator what was deleted and when.

Is sextortion against men also punishable?

Yes. Sextortion can happen to anyone, including men, women, LGBTQ+ persons, Filipinos, foreigners, adults, and minors. The available charges depend on the facts, not the gender of the victim. Some laws, such as RA 9262, apply to specific protected relationships, while RA 10175, RA 9995, the Revised Penal Code, and child protection laws may apply more broadly.

Key Takeaways

Sextortion in the Philippines may involve RA 10175, RA 9995, the Revised Penal Code, RA 11313, RA 11930, and sometimes RA 9262.
The main cybercrime reporting offices are PNP-ACG and NBI-CCD, with DOJ Office of Cybercrime and CICC involved in coordination, preservation, and international aspects.
Preserve evidence before blocking, deleting, or reporting content for takedown.
Save full conversations, profile links, usernames, phone numbers, payment receipts, URLs, timestamps, and the original device.
Do not send more intimate images or keep paying the offender.
For minors, avoid copying or forwarding sexual material; involve law enforcement and child protection authorities immediately.
A formal sworn complaint helps investigators request preservation, disclosure, forensic examination, and prosecution.
Platform takedown is useful, but it is not the same as filing a criminal complaint.
Faster reporting usually improves the chance of preserving account data, payment trails, and digital evidence.