If someone is threatening to send an intimate photo or video—real, altered, or fabricated—to your family, employer, school, partner, or social-media contacts unless you pay money, send more images, meet them, perform a sexual act, or resume a relationship, you may be dealing with sextortion or cyber blackmail. Do not panic, bargain indefinitely, or delete the conversation. Your immediate priorities are personal safety, preservation of digital evidence, account security, and prompt reporting to the Philippine National Police, National Bureau of Investigation, or prosecutor’s office.

What Counts as Sextortion or Cyber Blackmail?

Sextortion is the use of sexual images, videos, information, or allegations to frighten or pressure another person into complying with a demand. Common examples include:

A dating-app contact secretly records a video call and demands money.
A former partner threatens to upload intimate videos unless the victim returns to the relationship.
Someone obtains private files from a hacked account or repaired phone and demands payment.
An offender threatens to send genuine or fabricated nude images to the victim’s contacts.
A person demands additional sexual content, sexual favors, silence, or withdrawal of a complaint.
A scammer claims to possess a sexual recording, even when no such recording exists.
Someone creates a deepfake or digitally altered sexual image and threatens to circulate it.

“Blackmail” is not one all-purpose offense under Philippine law. The prosecutor identifies the proper charge from the offender’s actual conduct: what was threatened, what was demanded, whether anything was paid or surrendered, how the material was obtained, whether it was distributed, and whether the parties had an intimate relationship.

Philippine Laws That May Apply

Law	When it may apply	Important point
Republic Act No. 9995, Anti-Photo and Video Voyeurism Act of 2009	Intimate images were secretly recorded, copied, reproduced, distributed, published, or broadcast without the required consent	Consent to make or record an intimate image does not automatically authorize another person to copy or share it
Republic Act No. 11313, Safe Spaces Act of 2019	Gender-based online conduct involves sexual threats, intimidation, cyberstalking, impersonation, or nonconsensual sharing of sexual media	The PNP Anti-Cybercrime Group receives complaints; a court may also issue an appropriate restraining order
Republic Act No. 10175, Cybercrime Prevention Act of 2012	A crime under the Revised Penal Code or a special law is committed through information and communications technology	Section 6 may increase the penalty for an underlying offense committed through ICT
Revised Penal Code, including Articles 282, 286, and 293–294	The offender makes grave threats, uses intimidation to compel an act, or obtains money or property through intimidation	The correct charge depends partly on whether money or property was actually taken
Republic Act No. 9262, Anti-Violence Against Women and Their Children Act of 2004	The victim is a woman and the offender is or was her husband, boyfriend, dating or sexual partner, or the father of her child	Psychological violence, harassment, and protective orders may be relevant
Republic Act No. 11930, Anti-OSAEC and Anti-CSAEM Act of 2022	The victim was under 18 when the sexual image or exploitation occurred	A child who produced a self-generated image is treated as a victim, not an offender
Civil Code Articles 19, 20, 21, 26, and 32	Privacy, dignity, reputation, or other protected rights were violated	A separate civil claim for damages or injunctive relief may be possible

Nonconsensual recording or sharing under RA 9995

RA 9995 prohibits secretly capturing a sexual act or private area where the person reasonably expected privacy. It also prohibits copying, reproducing, selling, distributing, publishing, or broadcasting covered material without the required consent.

The law expressly states that its prohibitions against copying and distribution apply even when the person consented to the original recording. In other words, agreeing to take a private video with a partner does not amount to written consent for that partner to upload it, send it to friends, or use it as leverage. Violations are punishable by three to seven years’ imprisonment, a fine of ₱100,000 to ₱500,000, or both. (Lawphil)

A threat to distribute an image may be prosecuted under threats, coercion, the Safe Spaces Act, RA 9262, or another applicable law even if the offender has not yet posted anything. RA 9995 becomes especially relevant when the recording, copying, or distribution prohibited by the Act has already occurred.

Online sexual threats under the Safe Spaces Act

Section 12 of RA 11313 covers gender-based online sexual harassment, including the use of technology to terrorize or intimidate through physical, psychological, or emotional threats; cyberstalking and incessant messaging; unauthorized recording or sharing; nonconsensual uploading of sexual media; impersonation; and reputation-damaging lies.

The offense must still fit the law’s gender-based and sexual-harassment context. Not every rude or threatening message automatically qualifies, but sextortion involving sexual humiliation or nonconsensual intimate media commonly raises this law for investigation. The law provides for confidentiality protections, psychological-counselling remedies, and, where appropriate, a court order requiring the offender to stay away from the victim. (Supreme Court E-Library)

Threats, coercion, and robbery through ICT

Depending on the facts, the Revised Penal Code may apply:

Grave threats under Article 282 may arise when the offender threatens a wrong amounting to a crime against the victim, the victim’s honor or property, or the victim’s family, particularly when the threat carries a demand or condition.
Grave coercion under Article 286 may apply when intimidation is used to force someone to do something against their will.
Robbery through intimidation under Articles 293 and 294 may apply when the offender actually obtains money or personal property through the threat.
Article 356 concerns threats to publish a libel or offers to prevent publication for compensation. It is sometimes described as a blackmail provision, but it does not cover every intimate-image threat because it specifically concerns threatened defamatory publication.

In Catan v. People, G.R. No. 261156, August 23, 2023, the accused demanded ₱20,000 through Facebook Messenger in exchange for not posting nude images and videos, and obtained ₱1,000. The Supreme Court sustained his conviction for simple robbery in relation to Section 6 of RA 10175. The decision shows that digital intimidation can satisfy the intimidation element of robbery when the victim is made to surrender money. (Supreme Court E-Library)

Sextortion by a husband, boyfriend, or former partner

RA 9262 may apply when the victim is a woman and the offender is or was her husband, live-in partner, boyfriend, dating or sexual partner, or a person with whom she has a common child.

In Rustan Ang v. Court of Appeals, G.R. No. 182835, April 20, 2010, a former boyfriend sent a manipulated nude image bearing the victim’s face and threatened to circulate it online. The Supreme Court upheld his conviction under RA 9262 and recognized that even a single act of harassment can cause the substantial emotional or psychological distress punished by the law. (Supreme Court E-Library)

A victim covered by RA 9262 may ask about a Temporary Protection Order or Permanent Protection Order from the court. A TPO may be issued after an initial ex parte determination and is generally effective for 30 days while the court schedules the hearing on a PPO. A Barangay Protection Order is narrower and is principally directed at physical harm or threats of physical harm, so court-issued protection may be more appropriate for online psychological abuse. (Supreme Court E-Library)

What to Do Immediately After a Sextortion Threat

1. Stop complying with new demands

Do not send more money, images, passwords, identification documents, or sexual content. Payment often leads to another demand because it shows the offender that the threat is effective.

Do not meet the offender or arrange your own entrapment. A controlled payment or meeting should be undertaken only under specific instructions from authorized law-enforcement officers.

Call 911 or go to the nearest police station immediately if the offender knows your location, threatens physical violence, is waiting outside your home or workplace, or is demanding an immediate meeting.

2. Preserve evidence before blocking the account

When it is safe to do so, preserve the evidence before blocking or reporting the offender. Capture more than the final threat. Investigators need the surrounding conversation to establish identity, intent, intimidation, and the demand.

Save the following:

Full conversation from the first contact onward
Exact threat and exact demand
Dates, times, and time zone
Display name, username, profile URL, and user ID when visible
Phone numbers, email addresses, dating-app profiles, and account links
Profile photographs and identifying statements
Bank, e-wallet, remittance, or cryptocurrency details
QR codes, account names, reference numbers, and transaction receipts
URLs and account names where content was posted
Messages showing that the offender accessed your contact list
Platform complaint confirmations and ticket numbers

Take a screen recording that starts on the offender’s profile and scrolls through the conversation. This helps show that separate screenshots came from the same account. For email, retain the original message and full email headers. Use the platform’s export or download-data function when available.

Keep the original, unedited files. Do not crop, annotate, enhance, rename, or repeatedly convert the only copy. Make a separate working copy for printing or marking. Keep the device used to receive the messages and avoid factory-resetting it.

Do not secretly record a live private telephone or voice conversation without first obtaining case-specific guidance because the Anti-Wiretapping Act may create separate admissibility and liability issues. Saving written messages, voicemails already delivered to you, and visual screen recordings of text conversations is different from intercepting a live private call.

3. Write a chronology while events are fresh

Prepare a simple timeline containing:

When and where you met or first communicated with the offender
How the intimate material was created or obtained
When the first threat was made
What the offender demanded
Whether you paid or complied
Whether anything was sent to other people
What accounts, phone numbers, or payment channels were used
What steps you took to preserve evidence and report the content
How the incident affected your safety, health, work, studies, or family

Use exact dates whenever possible. When you do not remember the exact time, say that it is approximate rather than guessing.

4. Secure your accounts and payment channels

After preserving the evidence:

Change passwords using a device you believe is secure.
Use a different password for every important account.
Enable multifactor authentication.
Review logged-in devices and terminate unfamiliar sessions.
Check whether recovery email addresses or phone numbers were changed.
Secure your cloud-storage, email, social-media, banking, and e-wallet accounts.
Warn contacts not to open, download, or forward suspicious files.
Inform your bank or e-wallet provider immediately if you sent money or exposed account information.

Ask the financial institution to flag the recipient account and preserve the transaction record. Recovery is not guaranteed, but a quick report may assist restriction, tracing, or law-enforcement coordination.

5. Request platform removal after preserving evidence

Use the platform’s reporting category for nonconsensual intimate imagery, sexual exploitation, harassment, impersonation, or blackmail. Keep the report number and screenshots showing the URL before removal.

Adults who were at least 18 when the image was made may also use StopNCII.org. The service creates a digital fingerprint or “hash” on the user’s device; the intimate file itself does not leave the device. Participating platforms can use the hash to detect matching material, but the tool cannot remove content from the entire internet. (stopncii.org)

For an image made when the person was under 18, Take It Down may be used even if the person is now an adult. Do not download, forward, or ask someone to resend a child’s explicit image merely to use the service. It should be used only with a file already available on the appropriate device. (Take It Down)

These removal tools supplement—but do not replace—a Philippine criminal complaint.

How to File a Sextortion Complaint in the Philippines

Step 1: Choose the most appropriate reporting office

You may approach more than one office, but avoid repeatedly circulating explicit files through ordinary email.

Office	Practical role
PNP Anti-Cybercrime Group or Regional Anti-Cybercrime Unit	Receives and investigates technology-facilitated offenses, including online sexual harassment
Nearest PNP station or Women and Children Protection Desk	Useful for immediate safety, former-partner abuse, women and child victims, and referral to cybercrime personnel
NBI Cybercrime Division or Regional Cybercrime Center	Conducts cybercrime intake, investigation, device examination, and case build-up
CICC/DICT Hotline 1326	Provides round-the-clock cybercrime reporting, triage, and referral to the appropriate enforcement agency
City or Provincial Prosecutor’s Office	Receives criminal complaints and evaluates whether charges should be filed in court
DSWD or city/municipal social welfare office	Provides protection and services when a child is involved

Under RA 10175, the NBI and PNP are the principal cybercrime law-enforcement authorities. The Safe Spaces Act specifically directs the PNP Anti-Cybercrime Group to receive gender-based online sexual-harassment complaints. (Supreme Court E-Library)

The government’s 24/7 Inter-Agency Response Center may be reached through Hotline 1326. It is a central reporting and referral channel; criminal investigation and enforcement remain principally with the PNP and NBI. (Philippine Information Agency)

A police blotter is useful as a contemporaneous record, but it is not necessarily the same as a formal cybercrime complaint. Ask for the assigned investigator, case or reference number, and instructions for executing a sworn statement.

Step 2: Bring an organized complaint package

You do not need perfect evidence before reporting. Bring what you have and explain what may still be obtained.

A practical filing package includes:

Item	What to prepare
Identification	Government-issued ID and contact information
Complaint narrative	Printed chronology or draft complaint-affidavit
Digital evidence	Original device, screenshots, screen recordings, exported chats, email files, URLs, and stored media
Account information	Usernames, profile links, phone numbers, email addresses, and visible user IDs
Financial evidence	Receipts, account numbers, QR codes, transaction references, and provider report numbers
Witness evidence	Names, contact details, and affidavits of people who received the material or saw the threats
Harm or impact records	Medical, counselling, school, employment, or security records where relevant
Takedown records	Platform reports, acknowledgment emails, and removal decisions

Bring printed copies for convenient review, but preserve the original electronic files. Ask the investigator how intimate material should be transferred securely. Do not leave your only copy or send explicit attachments to an unofficial personal email address.

The NBI’s published cybercrime process includes completion of a complaint sheet, preliminary interview, sworn statements or prepared affidavits, submission of supporting documents, and possible examination of the relevant device. Its Citizen’s Charter lists no fee for this intake service. (National Bureau of Investigation)

Step 3: Execute a detailed complaint-affidavit

A complaint-affidavit is a written narrative signed under oath. It should contain facts rather than exaggerated legal conclusions.

A useful structure is:

Your full name, age, citizenship, address, and contact details
Your relationship with the respondent, if any
The respondent’s known name and every available account identifier
A numbered, chronological narration with dates and times
How the image, video, or information was created or obtained
Whether you consented to its creation and whether you ever consented to its distribution
The exact threat and demand
Why you believed the threat was credible
Details of any payment, meeting, or additional material surrendered
Details of actual distribution, including recipients and URLs
Steps taken to preserve evidence, secure accounts, and request removal
The fear, humiliation, financial loss, or psychological harm caused
A list of attachments marked as Annex “A,” “B,” “C,” and so on
A request for investigation, prosecution, and preservation of relevant digital records

When the offender’s real identity is unknown, identify the respondent truthfully as an unknown person using the specified accounts. Do not accuse a suspected individual merely because a profile used that person’s name or photograph.

An affidavit may be sworn before an investigator, prosecutor, or other officer authorized to administer oaths. If it was prepared elsewhere, the receiving office may require notarization or a new sworn statement in its prescribed format.

Step 4: Ask for prompt data preservation

Subscriber information, login records, traffic data, and account content may be held by telecommunications companies, platforms, banks, or e-wallet providers. A victim normally cannot compel these entities to disclose protected subscriber information directly.

RA 10175 provides for preservation of traffic data and subscriber information for at least six months from the transaction and allows law enforcement to order preservation of content data. Disclosure generally requires a court warrant tied to a valid, officially docketed complaint. This is one reason to report promptly even when the offender is using a fake account. (Supreme Court E-Library)

Provide the investigator with exact URLs, account identifiers, dates, and time zones. “Facebook account named John” is much harder to trace than a complete profile URL, user ID, message timestamp, payment account, and transaction reference.

Step 5: Cooperate with lawful investigation

Investigators may request:

A supplementary sworn statement
Clarification of screenshots or timestamps
The device for forensic examination
Witness interviews
Certified financial transaction records
Identification of the account or phone number
Participation in a lawfully supervised operation
Additional copies in an approved evidentiary format

Do not contact the offender against the investigator’s instructions. Unsupervised confrontation can warn the suspect, cause account deletion, compromise an operation, or create safety risks.

Step 6: Proceed to the prosecutor’s office

After case build-up, the PNP or NBI may endorse the records to the city or provincial prosecutor. A complainant may also file directly with the proper prosecution office, although prior cybercrime investigation is often useful when account identification, forensic examination, or preservation requests are needed.

The Department of Justice lists the following core requirements for a complaint undergoing preliminary investigation:

Accomplished National Prosecution Service Investigation Data Form
Complaint-affidavit or sworn statement
Witness affidavits, when available
Supporting documents and electronic evidence
Sufficient copies for the prosecutor and respondents

The prosecutor normally issues a subpoena to an identified respondent, receives a counter-affidavit, evaluates the evidence, and decides whether an information should be filed in court. Under the current DOJ-NPS rules, prosecutors apply the evidentiary standard governing preliminary investigations rather than deciding guilt beyond reasonable doubt at that stage. (Department of Justice)

Special Rules When the Victim Is Under 18

RA 11930 expressly includes sexual extortion of children and image-based sexual abuse within online sexual abuse or exploitation of children. Apparent consent by the child does not make the exploitation lawful. A child who created or sent a self-generated sexual image is treated as a victim. (Supreme Court E-Library)

When a child is involved:

Do not ask the child to resend the image.
Do not forward the material to relatives, teachers, lawyers, or police through ordinary messaging.
Preserve the device and show it directly to the assigned investigator.
Report through the PNP Women and Children Protection Desk, PNP Anti-Cybercrime Group, NBI, DSWD, or city/municipal social welfare office.
Avoid public posts that identify the child.
Request child-sensitive interviewing and case handling.

A complaint may be filed not only by the child or parents but also by specified relatives, social workers, barangay officials, law-enforcement officers, or a person with personal knowledge of the offense. The law protects the child’s identity and restricts access to sexual-abuse material in court records. It also provides services such as emergency shelter, counselling, free legal assistance, and medical or psychological support. An affidavit of desistance does not automatically require dismissal of an OSAEC or CSAEM case. (Supreme Court E-Library)

Filing From Abroad or When the Offender Is Overseas

A Filipino or foreign victim may report a Philippine offense regardless of citizenship. RA 10175 may give Philippine courts jurisdiction when an element of the offense occurred in the Philippines, a relevant computer system was situated here, a Filipino committed the offense abroad, or qualifying damage was caused to a person in the Philippines. Cross-border cases may require assistance from foreign platforms, police agencies, or the DOJ Office of Cybercrime. (Supreme Court E-Library)

A victim abroad should preserve evidence, report to the police in the country of residence, and contact the NBI or PNP when there is a Philippine connection. A complaint-affidavit intended for use in the Philippines may be:

Signed before a Philippine embassy or consulate;
Notarized locally and apostilled when the country participates in the Apostille Convention; or
Authenticated or legalized through the applicable consular process when apostille procedures are unavailable.

The investigator or prosecutor may still require a remote interview, original electronic files, additional authentication, or eventual personal appearance. Cross-border account requests and identification commonly take longer than purely domestic investigations.

Fees and Realistic Timelines

PNP and NBI complaint intake is generally free. The NBI Citizen’s Charter specifically lists no fee for its cybercrime intake process. Expenses may still arise from printing, storage media, transportation, notarization, apostille or authentication, translations, and private legal representation. Prosecutor-office fee schedules and local procedures should be verified through the office’s current Citizen’s Charter or cashier. Never pay an unofficial “facilitation” fee. (National Bureau of Investigation)

Actual timelines vary substantially:

Stage	Practical expectation
Evidence preservation and account security	Same day
Initial PNP or NBI intake	Often completed on the filing day when documents are organized
Preliminary evaluation and preservation requests	Several days to several weeks
Platform removal	Hours to weeks, with repeated reports sometimes necessary
Identification through platforms or financial providers	Weeks to months
Prosecutor proceedings	Commonly several months, depending on service of subpoena, evidence, and workload
Contested court case	Often years
Cross-border investigation	Usually longer because of foreign legal processes and provider response times

The NBI’s published processing time of approximately one hour and ten minutes concerns its front-end intake steps, not the completion of the investigation. No responsible office can guarantee immediate identification, arrest, permanent removal, or recovery of money.

Common Mistakes That Can Weaken a Complaint

Deleting the account or conversation too soon. Platform recovery may be incomplete or impossible.
Saving only one cropped screenshot. The investigator needs account details, timestamps, and surrounding context.
Paying repeatedly. Payment rarely guarantees deletion and can encourage escalating demands.
Editing original evidence. Cropping, filters, annotations, and conversions can create authenticity disputes.
Forwarding the intimate material widely. This increases exposure and may create serious legal issues, especially when a child appears in it.
Accusing the person shown in a profile photo. Sextortionists often use stolen identities.
Running a private entrapment. This may compromise evidence and expose the victim to physical danger.
Waiting for the image to be posted. A credible threat, demand, coercive message, hacking incident, or attempted offense may already justify reporting.
Treating a barangay blotter as the complete case. Serious cybercrime investigation normally requires PNP, NBI, or prosecutorial action.
Assuming a takedown ends the criminal case. Removal protects the victim but does not identify or prosecute the offender.

Barangay conciliation is ordinarily not a required first step for sextortion offenses carrying penalties beyond the Katarungang Pambarangay limits. A barangay may assist with immediate referral, documentation, social services, or protection, but the victim should not delay a PNP, NBI, or prosecutor complaint. (Lawphil)

Frequently Asked Questions

Can I file a complaint if I voluntarily sent the nude photo?

Yes. Voluntarily sending or consenting to the creation of an intimate image does not necessarily authorize its later copying, distribution, publication, or use as leverage. State clearly what you consented to and what you did not consent to.

Can I report sextortion even if nothing has been uploaded yet?

Yes. The threat and demand may already support investigation for threats, coercion, gender-based online sexual harassment, attempted offenses, RA 9262 violations, or other crimes. Actual uploading is not always required for criminal liability.

What if I do not know the offender’s real name?

You may file against an unknown person identified by usernames, profile URLs, phone numbers, emails, payment accounts, or other digital identifiers. Give investigators precise information and do not guess the offender’s identity.

I already paid. Can I still file a complaint?

Yes. Preserve the transaction receipt, recipient details, QR code, account name, and reference number. Notify the bank or e-wallet provider immediately. Payment may help prove the demand, intimidation, intent to gain, and actual taking of money.

Do I need a lawyer to report sextortion?

No. You may begin a complaint directly with the PNP, NBI, Women and Children Protection Desk, or prosecutor’s office. Legal assistance can be useful for protection orders, complicated affidavits, civil claims, or cases involving several possible offenses, but it is not a prerequisite for the initial report.

Will my intimate images become public during the case?

They should not be casually circulated, and specific confidentiality and protective rules apply under laws such as RA 11313 and RA 11930. However, necessary evidence may be reviewed by investigators, prosecutors, courts, the respondent, and counsel as required by due process. Ask how to submit explicit material securely and provide only the copies genuinely required.

Must I go to the barangay before filing with the police or NBI?

Usually not. The penalties for the principal sextortion-related offenses generally exceed the barangay conciliation limits. The barangay can still assist with referral, safety, social services, or appropriate protection, particularly in VAWC and child cases.

Can a foreigner or Filipino living abroad file a Philippine complaint?

Yes, when the case has a sufficient Philippine connection. The victim may begin by reporting to local foreign authorities and contacting Philippine law enforcement. Affidavits for Philippine use may require consular notarization, apostille, authentication, or further verification.

What if the offender used a deepfake or a completely fake sexual image?

Report it. A fabricated image can still be used for intimidation, harassment, coercion, impersonation, reputational harm, or psychological violence. Preserve evidence showing that it is altered or false, but do not let the absence of a genuine image delay reporting.

Can I withdraw the complaint after the offender apologizes or deletes the content?

You may communicate your position to the investigator or prosecutor, but an affidavit of desistance does not automatically terminate a criminal case. The decision depends on the offense, available evidence, and prosecutorial assessment. In child OSAEC and CSAEM cases, RA 11930 expressly states that the case should not be dismissed merely because the victim, parent, or guardian executed an affidavit of desistance.

Key Takeaways

Preserve the complete conversation, account identifiers, URLs, payment records, and original device before blocking or reporting the offender.
Do not send more money, sexual content, passwords, or identification, and do not conduct your own entrapment.
Consent to create or send an intimate image is not automatically consent to distribute it.
File with the PNP Anti-Cybercrime Group, NBI Cybercrime Division, nearest Women and Children Protection Desk, or proper prosecutor’s office.
Report quickly so law enforcement can seek preservation of platform, telecommunications, and financial records.
Use child-sensitive procedures and never forward a minor’s explicit material through ordinary email or messaging.
Platform takedown tools can limit circulation, but they do not replace a formal criminal complaint.