Online threats and harassment can feel confusing because the abuse happens on a screen, but the fear, damage, and legal consequences are very real. In the Philippines, a person who threatens, stalks, shames, blackmails, doxes, impersonates, or sexually harasses someone online may face criminal, civil, administrative, school, workplace, or platform consequences depending on what was said, who said it, where it was posted, and what evidence is preserved. This guide explains the main Philippine laws involved, how to preserve digital evidence, where to report, what documents are usually needed, and what common mistakes to avoid when dealing with online threats and harassment.

What Counts as Online Threats and Harassment in the Philippines?

“Online threats and harassment” is not just one crime. It is a practical label for different harmful acts committed through Facebook, Messenger, Viber, Telegram, TikTok, Instagram, X, email, SMS, dating apps, online games, forums, websites, workplace chat, school group chats, or fake accounts.

Common examples include:

“Papatayin kita” or threats to hurt you, your family, your property, or your business.
Repeated unwanted messages meant to scare, shame, or pressure you.
Posting edited photos, private conversations, your address, phone number, workplace, or family details.
Threatening to release intimate photos or videos.
Creating fake accounts to impersonate you.
Posting accusations that damage your reputation.
Sending sexual comments, rape threats, or degrading gender-based messages.
Harassing a former partner through messages, tags, group chats, or fake accounts.
Coordinated attacks by collectors, strangers, classmates, coworkers, or anonymous users.

The legal label matters because the proper complaint, evidence, agency, and possible penalty can differ. A death threat is treated differently from cyberlibel. Sextortion is treated differently from ordinary insults. Harassment by an intimate partner may trigger protection orders under the Anti-VAWC law.

Main Philippine Laws That May Apply

Several laws may apply at the same time. The same incident can involve a threat under the Revised Penal Code, a cybercrime because it was committed through ICT, a Safe Spaces Act violation if gender-based, and a privacy or voyeurism violation if intimate content or personal data is involved.

Situation	Possible legal basis	Practical meaning
Death threats, rape threats, threats to burn property, or threats to harm family	Revised Penal Code, especially Articles 282, 283, and 285 on threats	The focus is the threatening message and whether the threatened act is a crime. The Supreme Court has recognized the RPC categories of grave threats, light threats, and other light threats. (Lawphil)
Threats, harassment, or other crimes committed using phones, social media, email, or online platforms	Cybercrime Prevention Act of 2012, RA 10175	RA 10175 covers cybercrime offenses and also increases liability for crimes under the Revised Penal Code or special laws committed through information and communications technology. (Lawphil)
Defamatory online posts accusing someone of a crime, vice, defect, or shameful act	Cyberlibel under RA 10175 in relation to Articles 353 and 355 of the Revised Penal Code	Online libel generally requires a public and malicious imputation that tends to dishonor or discredit a person. The Supreme Court in Disini v. Secretary of Justice treated cyberlibel as online defamation under existing libel law, not an entirely new concept. (Lawphil)
Gender-based online sexual harassment, rape threats, sexualized insults, cyberstalking, unwanted sexual messages, or sharing sexual content	Safe Spaces Act, RA 11313	RA 11313 expressly covers gender-based sexual harassment in online spaces, including acts done through information and communications technology. (Lawphil)
Threatening to spread or actually spreading intimate photos or videos	Anti-Photo and Video Voyeurism Act of 2009, RA 9995	RA 9995 punishes capturing, copying, distributing, publishing, broadcasting, showing, or exhibiting sexual images or private areas without the required consent, including through the internet or phones. Consent to record does not automatically mean consent to share. (Lawphil)
Harassment, intimidation, or emotional abuse by a husband, former husband, boyfriend, ex-boyfriend, live-in partner, or person with whom the woman has or had a sexual or dating relationship	Anti-Violence Against Women and Their Children Act of 2004, RA 9262	Online abuse by an intimate partner can be evidence of psychological violence, harassment, or coercive control. RA 9262 also allows protection orders in proper cases. (Lawphil)
Harassment involving a child, child sexual abuse material, grooming, sexual extortion, or online exploitation	RA 11930, Anti-Online Sexual Abuse or Exploitation of Children and Anti-Child Sexual Abuse or Exploitation Materials Act	RA 11930 punishes online sexual abuse or exploitation of children and child sexual abuse or exploitation materials. Cases involving minors should be treated as urgent. (Lawphil)
Doxing, unauthorized disclosure of personal data, misuse of sensitive personal information, or account-related data abuse	Data Privacy Act of 2012, RA 10173	The Data Privacy Act protects personal information in government and private-sector information systems and penalizes certain unauthorized processing of personal and sensitive personal information. (Lawphil)
Repeated annoying, humiliating, or oppressive conduct that may not fit a more specific offense	Article 287 of the Revised Penal Code on unjust vexation	Unjust vexation is often considered when the act causes unjust annoyance or irritation but does not neatly fall under a heavier offense. (Supreme Court E-Library)

First Step: Assess Immediate Safety

Before thinking about affidavits or screenshots, ask: Is there an immediate risk of physical harm?

Treat the situation as urgent if the person:

Knows your home, school, office, or usual route.
Has previously hurt you or attempted to confront you.
Threatens to go to your place “now.”
Threatens sexual assault, kidnapping, arson, or serious physical harm.
Has weapons, violent history, or access to you.
Is an intimate partner or former partner with a pattern of control or stalking.
Is threatening a child or using intimate images.

In urgent situations, go to the nearest police station, Women and Children Protection Desk, barangay VAW Desk, campus security, building security, or trusted safe place. Online reporting is useful, but it should not delay immediate physical protection.

How to Preserve Evidence Properly

Weak evidence is one of the most common reasons online harassment complaints stall. Screenshots help, but investigators and prosecutors usually need more context than one cropped image.

Save More Than Just the Message

Preserve:

Full screenshots showing:
- Profile name
- Username or handle
- Profile URL or account link
- Date and time
- Complete message or post
- Replies, comments, reactions, and thread context
Screen recordings showing:
- Opening the app or browser
- Navigating to the profile
- Opening the threatening message or post
- Scrolling through the conversation
- Showing the URL, profile, username, date, and time
Original files:
- Photos
- Videos
- Voice notes
- Emails with full headers if possible
- SMS logs
- Call logs
- Uploaded files or attachments
Links and identifiers:
- Post URL
- Profile URL
- Group chat name
- Phone number
- Email address
- GCash/Maya/bank details if extortion or payment demand is involved
- Telegram, Viber, WhatsApp, Discord, or gaming handle
Timeline:
- First incident
- Most serious threat
- Dates you blocked, reported, or replied
- Any offline encounter
- Names of witnesses

Do Not Edit the Evidence

Avoid adding circles, arrows, stickers, filters, or captions to the only copy. Keep a clean original and make a separate annotated copy if needed.

Do Not Delete the Conversation Too Early

Blocking may be necessary for safety, but deletion can make proof harder. If possible, preserve evidence first. For disappearing messages, record the screen immediately and note the time.

Have Critical Screenshots Printed and Notarized When Useful

For serious complaints, complainants often attach printed screenshots to a complaint-affidavit. A notarized affidavit can identify the screenshots and explain how, when, and where they were obtained. Notarization does not automatically prove the truth of everything in the screenshots, but it helps organize the evidence and makes the complaint usable for prosecutors or investigators.

Where to Report Online Threats and Harassment

The right office depends on urgency, location, type of offense, and available evidence.

Office or agency	Best for	What usually happens
Nearest police station	Immediate danger, identifiable suspect nearby, threats connected to offline risk	Police blotter, initial assistance, referral to proper unit, possible investigation
PNP Anti-Cybercrime Group or Regional Anti-Cybercrime Unit	Cyber threats, fake accounts, hacked accounts, cyberlibel, online harassment, digital evidence	Intake, preservation of digital evidence, technical investigation, referral for complaint filing
NBI Cybercrime Division or regional cybercrime centers	Serious cybercrime, anonymous accounts, sextortion, cyberlibel, technical investigation	The NBI Citizen’s Charter describes a process involving complaint filing, preliminary interview, sworn statements, and submission of supporting documents. (National Bureau of Investigation)
City or Provincial Prosecutor’s Office	Filing a criminal complaint for preliminary investigation	Complaint-affidavit, supporting affidavits, evidence, counter-affidavit from respondent, prosecutor resolution
Barangay	Lower-level disputes between residents of the same city/municipality, if covered by Katarungang Pambarangay	Mediation or conciliation before a certificate to file action is issued, unless an exception applies
Women and Children Protection Desk / barangay VAW Desk	Abuse involving women, children, intimate partners, sexual violence, stalking, or protection concerns	Safety planning, referral, assistance with protection orders or criminal complaint
School, employer, HR, or disciplinary office	Harassment by students, teachers, coworkers, supervisors, employees, or contractors	Administrative investigation, protective measures, sanctions under school or workplace rules
National Privacy Commission	Doxing or misuse of personal information by personal information controllers/processors, or serious privacy violations	Privacy complaint or report depending on the facts and the entity involved

The NBI’s published procedure for computer-crime victim assistance indicates that a complainant may proceed to the CyberCrime Division to file a complaint or request investigation, undergo preliminary interview, execute sworn statements, submit supporting documents, and have relevant devices examined when needed. (National Bureau of Investigation)

Step-by-Step Guide to Handling Online Threats and Harassment

1. Secure Yourself and Your Accounts

Start with safety and access control:

Change passwords for email, social media, banking, and messaging apps.
Turn on two-factor authentication.
Log out unknown devices.
Review recovery email and phone numbers.
Limit public visibility of your address, workplace, school, family, and travel posts.
Warn close family, school, office security, or building guards if the threat is specific.
Do not meet the harasser alone to “settle” the issue.

If the harasser is an ex-partner, collector, coworker, or classmate who knows your routine, treat the risk as both digital and physical.

2. Preserve Evidence Before Reporting or Blocking

Take screenshots and screen recordings before the account disappears. Many harassers delete posts, change usernames, deactivate accounts, or move to another platform after being confronted.

Organize your files by date:

2026-06-01 Messenger death threat
2026-06-02 Facebook fake account profile
2026-06-03 Telegram sextortion demand
2026-06-04 Witness screenshot from group chat

This helps investigators understand the pattern instead of treating each message as an isolated insult.

3. Identify the Legal Nature of the Act

Use the facts, not emotions, to classify the complaint:

“I will kill you” may be a threat.
“She stole money from our office” posted publicly may be cyberlibel if false and defamatory.
“Send more nude photos or I will upload the old ones” may involve extortion, coercion, RA 9995, Safe Spaces Act, or cybercrime.
Repeated sexual messages or rape threats may fall under RA 11313.
A boyfriend or ex-boyfriend using threats, humiliation, or private photos to control a woman may implicate RA 9262.
Posting your phone number, home address, or ID may raise privacy and safety issues.

Correct classification matters because cyberlibel, VAWC, threats, voyeurism, Safe Spaces Act violations, and child exploitation cases have different elements.

4. File a Police Blotter or Initial Report for Safety Incidents

A blotter is not the same as a criminal case, but it can document that you reported the incident at a certain date and time. It is especially useful when:

The threat is specific.
The suspect knows you personally.
There were previous offline incidents.
You may later seek a protection order.
You need documentation for school, work, immigration, housing, or security purposes.

Bring printed screenshots, your valid ID, and a short written timeline.

5. Report to a Cybercrime Unit for Digital Investigation

For fake accounts, anonymous profiles, hacked accounts, extortion, cyberlibel, online stalking, or threats sent through social media, go to the PNP Anti-Cybercrime Group, a Regional Anti-Cybercrime Unit, or the NBI Cybercrime Division.

Cybercrime investigators may ask for:

Your phone or laptop for viewing or extraction.
The original account where the message was received.
URLs, usernames, phone numbers, and email addresses.
Screenshots and screen recordings.
A sworn statement.
Identification documents.

The Supreme Court’s Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC, governs special procedures for preservation, disclosure, interception, search, seizure, examination, custody, and destruction of computer data in cybercrime-related cases. It also supplements criminal procedure for crimes committed through information and communications technologies.

6. Prepare a Complaint-Affidavit

A complaint-affidavit is your sworn written statement. It should be clear, chronological, and evidence-based.

A practical structure is:

Your full name, age, address or safe contact address, and relationship to the respondent.
Respondent’s name, username, phone number, address, or identifying details, if known.
The platform used.
Dates and times of each incident.
Exact words used in the threat or harassment.
Why you believe the respondent owns or controls the account.
How the incident affected you, especially fear, reputational harm, emotional distress, safety risk, or financial loss.
List of attachments.
Names of witnesses.
Request for investigation and filing of appropriate charges.

The DOJ’s prosecution process generally requires an investigation data form, complaint-affidavit or sworn statement, and supporting documents for preliminary investigation. (doj.gov.ph)

7. File With the Prosecutor When the Case Is Ready

For many criminal complaints, the prosecutor determines whether there is probable cause to file an Information in court. The respondent may be required to submit a counter-affidavit. The prosecutor then evaluates the complaint, counter-affidavit, reply, and evidence.

Typical stages are:

Filing and assessment of complaint.
Docketing, if sufficient in form and evidence.
Subpoena to respondent.
Counter-affidavit.
Reply or clarificatory proceedings, if needed.
Prosecutor’s resolution.
Filing in court, dismissal, or further case build-up.

Timelines vary widely. Simple complaints may move in a few months. Cases involving anonymous accounts, foreign platforms, technical data requests, multiple respondents, or incomplete evidence may take longer.

8. Seek Protection Orders in VAWC or Child-Related Cases

If the harassment is from a husband, former husband, boyfriend, ex-boyfriend, live-in partner, or dating partner against a woman or her child, RA 9262 remedies may be available. These can include Barangay Protection Orders, Temporary Protection Orders, or Permanent Protection Orders depending on the facts and the issuing authority.

A protection order may address acts such as:

Contacting the victim.
Harassing through calls, messages, or social media.
Going near the victim’s home, school, or workplace.
Threatening the victim or child.
Causing further psychological violence.

For minors, online sexual exploitation, grooming, or threats involving sexual images should be escalated immediately to law enforcement and child protection authorities.

Documents and Evidence Checklist

Requirement	Notes
Valid government ID	Passport, driver’s license, PhilID, UMID, PRC ID, or other accepted ID
Complaint-affidavit	Notarized, chronological, and specific
Screenshots	Show full context, date, time, profile, URL, and exact words
Screen recordings	Especially useful for fake accounts, disappearing messages, and social media posts
Printed copies	Bring multiple sets for police, NBI/PNP, prosecutor, and receiving copy
URLs and usernames	Copy exact links, not just display names
Witness affidavits	From people who saw the post, received the message, or can identify the account
Medical or psychological records	Useful when threats caused anxiety, trauma, injury, or VAWC-related harm
Barangay blotter or police blotter	Helpful for timeline and safety documentation
Proof of identity of respondent	Photos, admissions, phone numbers, payment records, mutual contacts, prior messages
Device used	Bring the phone or laptop where the messages were received, if safe and available

Barangay Conciliation: Is It Required?

Sometimes, people are told to “go to the barangay first.” This is not always correct.

Under the Katarungang Pambarangay system, barangay conciliation may be required for certain disputes between individuals who actually reside in the same city or municipality before filing in court or government offices. But there are important exceptions. Supreme Court Circular No. 14-93 lists disputes not covered, including offenses punishable by imprisonment exceeding one year or a fine over ₱5,000, disputes involving parties in different cities or municipalities, cases involving juridical entities, and disputes where urgent legal action is necessary to prevent injustice. (Lawphil)

In practice:

If the case involves serious threats, cybercrime, VAWC, sexual content, child exploitation, or urgent safety issues, do not assume barangay conciliation is required.
If the issue is a lower-level dispute between neighbors in the same city and no urgent exception applies, the prosecutor or court may require barangay proceedings first.
If unsure, still preserve evidence and report urgent safety risks immediately.

Common Scenarios

“Someone threatened to kill me on Messenger. Can I file a case?”

Yes, a serious threat sent through Messenger may be actionable. Preserve the full conversation, profile link, date, and time. If the threat is specific or the person can reach you, file a police blotter and consider reporting to a cybercrime unit. The legal theory may involve grave threats under the Revised Penal Code, with cybercrime implications if committed through ICT.

“My ex is threatening to post my private photos.”

This can be very serious. Do not negotiate by sending more photos or money. Save the threats and the account details. RA 9995 may apply to non-consensual sharing or threatened circulation of intimate images, and RA 9262 may apply if the offender is an intimate partner or former partner. If you are a minor or the material involves a minor, RA 11930 issues may arise.

“A fake account is posting lies about me.”

Preserve the fake profile, URL, posts, comments, and shares. If the posts publicly accuse you of a crime, immoral act, disease, defect, or other matter that dishonors you, cyberlibel may be considered. If the account impersonates you or uses your photos, there may also be identity, privacy, or platform violations.

“Collectors are messaging my contacts and shaming me online.”

Debt collection does not justify harassment, threats, public shaming, or misuse of personal information. Save the messages sent to you and your contacts. Depending on the facts, possible issues may include unjust vexation, threats, privacy violations, unfair collection practices, or cyber-related offenses.

“The harasser is abroad.”

You can still preserve evidence and report in the Philippines if the victim, effects, platform activity, or relevant acts connect to the Philippines. Cross-border cases can be slower because investigators may need platform data, foreign cooperation, or mutual legal assistance. If you are abroad, consider executing your affidavit before a Philippine Embassy or Consulate, or having documents notarized and apostilled where appropriate for Philippine use.

“I am a foreigner being harassed by someone in the Philippines.”

Foreigners may report crimes in the Philippines. Bring your passport, local address or contact details, screenshots, and a clear timeline. If you are not in the Philippines, coordinate with a representative, counsel, or the nearest Philippine Embassy or Consulate for document execution. If your evidence is executed abroad, Philippine authorities may require consular acknowledgment, apostille, or other authentication depending on the country and document type.

Practical Timelines and Bottlenecks

Stage	Practical timeline	Common bottlenecks
Evidence preservation	Same day	Deleted posts, disappearing messages, changed usernames
Police blotter	Same day if walk-in	Incomplete printed evidence or unclear timeline
Cybercrime intake	Same day to several weeks depending on office and queue	Need for original device, URLs, sworn statement, or technical review
Complaint-affidavit preparation	A few days to several weeks	Missing respondent identity, scattered screenshots, no witnesses
Prosecutor preliminary investigation	Several months or longer	Subpoena service issues, respondent unknown, need for platform data
Court case after filing	Months to years	Court congestion, plea issues, witness availability, digital evidence authentication

The biggest practical problem is often not the law but proof: identifying the account holder, preserving the post before deletion, establishing publication, and connecting the online account to a real person.

Mistakes to Avoid

1. Replying in Anger

A heated reply can complicate the case, especially if you also threaten, insult, or post private information. If you must reply, keep it short and non-threatening, such as: “Stop contacting me. I am preserving these messages.”

2. Posting the Harasser’s Personal Data

Publicly posting the person’s address, phone number, employer, family members, or ID can create legal risk for you. Preserve evidence and report through proper channels instead.

3. Relying Only on Cropped Screenshots

Cropped screenshots are easy to challenge. Always keep full-page screenshots, screen recordings, URLs, and the original conversation.

4. Waiting Too Long

Delay can lead to deleted accounts, lost logs, unavailable witnesses, and weaker memory. Some offenses also have prescriptive periods, meaning the time to prosecute is not unlimited.

5. Assuming Every Insult Is Cyberlibel

Not every rude message is cyberlibel. A private one-to-one insult may be harassment, unjust vexation, or no criminal offense depending on context. Cyberlibel generally involves publication to someone other than the person defamed and a defamatory imputation.

6. Paying Sextortion Demands

Paying often leads to more demands. Preserve the threat, report, secure your accounts, warn trusted people if needed, and avoid sending additional material.

Frequently Asked Questions

Can I report online threats even if the sender used a fake account?

Yes. A fake account makes the case harder, not impossible. Save the profile URL, screenshots, screen recordings, usernames, linked phone numbers, mutual contacts, payment details, and any admission connecting the account to a real person. Cybercrime investigators may need technical processes or warrants to obtain data.

Is a screenshot enough to file a complaint?

A screenshot can support a complaint, but it is better to have full screenshots, screen recordings, URLs, original messages, witness affidavits, and a sworn complaint-affidavit. The more complete the context, the harder it is for the respondent to claim the image was edited, taken out of context, or not theirs.

Should I go to the barangay, police, PNP cybercrime, or NBI first?

For immediate danger, go to the police first. For serious cyber incidents, fake accounts, anonymous harassment, or technical investigation, go to PNP Anti-Cybercrime Group or NBI Cybercrime Division. For covered minor disputes between residents of the same city or municipality, barangay conciliation may be required unless an exception applies.

Can online harassment by an ex-boyfriend be VAWC?

It can be, if the facts show psychological violence, threats, harassment, coercion, or control by a person covered by RA 9262. Save messages, threats, call logs, fake accounts, and evidence of the relationship. Protection orders may be available in proper cases.

What if the person only threatened me once?

One serious threat can still matter, especially if it involves death, rape, kidnapping, arson, serious injury, or harm to your family. The law looks at the nature of the threat, context, credibility, and evidence—not only the number of messages.

Can I sue someone for posting my private conversations?

It depends on the content, how it was obtained, where it was posted, and what damage it caused. Possible issues may include privacy, cyberlibel, unjust vexation, Safe Spaces Act violations, VAWC, or internal school/workplace discipline. If the conversation includes intimate images, RA 9995 may be relevant.

Can I have the post taken down?

You can report the post to the platform, especially for threats, impersonation, sexual content, doxing, or harassment. But preserve evidence before requesting takedown because deletion may remove proof needed for a complaint.

What if the harassment is happening in a workplace group chat?

Preserve the messages and report through HR, management, or the company’s anti-sexual harassment or grievance mechanism. If the messages involve threats, cyberlibel, gender-based sexual harassment, or sexual images, criminal remedies may also be available.

Can foreigners file online harassment complaints in the Philippines?

Yes. Foreigners can file complaints when Philippine law enforcement or prosecutors have a proper basis to act. Bring your passport, proof of local address or contact person, screenshots, sworn statement, and any evidence connecting the offender or harm to the Philippines.

How long does an online harassment case take?

Simple reporting or blotter documentation may be done the same day. Cybercrime investigation and prosecutor review can take months, especially if the suspect is anonymous, abroad, or using multiple accounts. Court proceedings, if a case is filed, can take longer.

Key Takeaways

Online threats and harassment in the Philippines may involve the Revised Penal Code, Cybercrime Prevention Act, Safe Spaces Act, Anti-Photo and Video Voyeurism Act, Anti-VAWC law, Data Privacy Act, or Anti-OSAEC law.
Preserve evidence before blocking, reporting, or confronting the harasser.
Full screenshots, screen recordings, URLs, original messages, and a clear timeline are stronger than cropped screenshots.
Serious threats, sextortion, child-related incidents, and intimate partner harassment should be treated as urgent.
PNP cybercrime units, NBI Cybercrime Division, prosecutors, police stations, barangay VAW desks, schools, employers, and privacy authorities may each have a role depending on the facts.
Barangay conciliation is not always required, especially for serious offenses, cybercrime-related matters, urgent safety issues, or disputes outside barangay jurisdiction.
The strongest complaints are specific, chronological, evidence-based, and supported by sworn statements and original digital records.