How to Handle Sextortion and Cyberbullying in the Philippines: Legal Remedies and Evidence Preservation

This is a practical, Philippine-focused guide. It’s general information—not legal advice. If you’re in immediate danger, call 911. If a child may be involved, do not forward or share any image/video; go straight to law enforcement.

Quick-response checklist (use this first)

Stop engaging with the offender. Don’t negotiate or pay. Block only after you’ve captured evidence.
Preserve evidence immediately (screenshots, screen-recordings, original files/URLs, dates/times, usernames, phone/SIM details).
Tighten account security: change passwords, enable 2-factor authentication, review recovery emails/numbers, log out of other devices.
Report on-platform (use “non-consensual intimate imagery (NCII)”/harassment tools) and request urgent takedown.
File a report with authorities (see “Where & how to report”).
Tell someone you trust; consider trauma-informed counseling. If the offender threatens to “send to everyone,” inform those closest to you so the threat loses leverage.
If a minor is involved (victim or depicted): Immediately contact PNP/NBI; do not save or resend files except as instructed by authorities.

What counts as “sextortion” and “cyberbullying”?

Sextortion: Using sexual images/videos, or threats to obtain more images, sexual acts, money, or anything of value (“Pay or I’ll post this”). It often involves hacked/leaked content, deepfakes, romance scams, or grooming.
Cyberbullying: Repeated online harassment that humiliates, threatens, or abuses a person (posting/sharing humiliating content, doxxing, impersonation, group pile-ons). In schools, “cyberbullying” has a specific policy framework.

Philippine legal framework (what law applies, when)

You can use multiple laws at once; prosecutors often “layer” charges.

1) Cybercrime Prevention Act of 2012 (R.A. 10175)

Use for: Threats, identity theft/impersonation, hacking, phishing, online fraud, online libel, and crimes committed “through and with the use of ICT.”
Key points:
- Makes ordinary crimes one degree higher when committed via ICT.
- Extraterritorial reach: authorities may act if any element happened in the Philippines, if the offender or victim is Filipino, or if Philippine systems were used.
- “Online libel” exists, with constitutional limits; defenses and privacy/public-interest considerations still apply.

2) Anti-Photo and Video Voyeurism Act of 2009 (R.A. 9995)

Use for: Taking, copying, or sharing intimate/sexual images recorded under a reasonable expectation of privacy without consent (including ex-partners leaking content).
Key points: Consent to capture is not consent to share. Applies to those who publish or re-publish.

3) Safe Spaces Act (Bawal Bastos) 2019 (R.A. 11313)

Use for: Gender-based online sexual harassment (unwanted sexual remarks, threats, misogynistic/homophobic slurs, stalking, sharing of photos without consent, repeated unwanted sexual advances online).
Key points: Covers streets, workplaces, schools, and online spaces. Employers and schools must adopt policies, act on complaints, and may be liable for non-compliance.

4) Anti-Bullying Act of 2013 (R.A. 10627) & DepEd IRR

Use for (in schools): Any bullying including cyberbullying affecting students.
Key points: Schools must have clear reporting, investigation, and disciplinary procedures; parents must be notified; counseling and protection measures required.

5) Anti-Child Pornography Act 2009 (R.A. 9775) and OSAEC/CSAEM Act 2022 (R.A. 11930)

Use for: Any sexual content involving a minor (under 18), or those who present to be minors.
Key points: Possession, production, distribution, or facilitating online sexual abuse/exploitation of children is a serious offense. ISPs/platforms have duties to prevent, detect, report, and take down content. Never store or forward suspected child sexual abuse material (CSAM); immediately report.

6) Anti-Violence Against Women and Their Children Act (R.A. 9262)

Use for: Abusive acts by a spouse/partner/ex (including electronic harassment, stalking, and controlling behaviors).
Key points: You can seek Protection Orders (Barangay, Temporary, Permanent) with swift timelines. Violations carry criminal liability.

7) Data Privacy Act of 2012 (R.A. 10173)

Use for: Unauthorized processing/disclosure of personal data, especially sensitive personal information (including one’s sexual life).
Key points: You may file a complaint with the National Privacy Commission (NPC). Useful against doxxing, non-consensual sharing of intimate data, and negligent data leaks.

8) Revised Penal Code (RPC) provisions

Grave Threats / Light Threats (sextortion often qualifies), Grave Coercion (forcing you to do something), Libel/Slander, Unjust Vexation, Estafa (if money/property obtained).
Filed alongside the special laws above, especially when messages include explicit threats or demands.

9) SIM Registration Act 2022 (R.A. 11934)

Use for: Tracing/identifying abusers using mobile numbers; supporting subpoenas/court orders for telco data; requesting telco actions on abusive SIMs.

10) Rules on Electronic Evidence (A.M. No. 01-7-01-SC)

Use for: Getting screenshots, chats, emails, social media exports admitted in court.
Key points: Electronic evidence is admissible if you can authenticate it (show integrity, origin, and that it has not been altered). “Ephemeral” communications (e.g., chats, calls) may be proven through testimony, logs, or recordings by a party to the conversation.

Takedowns: General administrative “blocking” powers were curtailed by the Supreme Court; court orders are typically required for blocking—except for specific child-protection regimes where platforms have affirmative obligations.

Choosing your legal route (criminal, civil, administrative)

Criminal complaints (strong deterrence): Good for sextortion, threats, NCII, hacking, identity theft, OSAEC, online VAWC. Where to file: PNP Anti-Cybercrime Group (ACG), NBI Cybercrime Division, or directly with the City/Provincial Prosecutor (with police assistance for investigation).
Civil actions for damages/injunctions: Under the Civil Code (e.g., Art. 19/20/21 abuse of rights/acts contrary to morals, Art. 26 privacy, Art. 33 defamation, Art. 2176 quasi-delict). Useful for takedown injunctions (TRO/preliminary injunction), especially against identifiable individuals or organizations.
Administrative/regulatory complaints:
- NPC for Data Privacy violations (doxxing/NCII data disclosure).
- School (R.A. 10627) for cyberbullying; DepEd policies obligate prompt action.
- Employer (R.A. 11313) for gender-based online sexual harassment in the workplace; employers must have procedures and can be sanctioned for non-compliance.
Protection Orders (R.A. 9262) if the abuser is/was your partner (BPO/TPO/PPO) to restrain contact, compel takedowns/returns of devices, and secure custody/visitation safeguards.

Evidence preservation: step-by-step (what actually works)

Golden rule: Collect first, then block. Aim to preserve originals and context.

Capture the full context
- Screenshots that include: the entire message/post, username/handle, profile URL, date/time, platform/app, and your device clock if possible.
- Screen-record scrolling pages, live stories, disappearing messages, voice notes (record playback), and the steps to the abusive content.
- Copy URLs (post, profile, image file URL), message IDs, email headers (showing sender IPs/relays), and phone/SIM details (MSISDN, time received).
- Export data from platforms (Facebook “Download your information,” Google Takeout for Gmail/Drive, Instagram/TikTok/Twitter/X archives). Save the original files you received (not just screenshots).
Keep originals “forensically clean”
- Save the original files (images/videos/audio/emails) without editing/renaming if possible. If you must rename, log the original name and the new name.
- Preserve metadata (EXIF, file hashes). If you can, compute a SHA-256 hash of each original and note it in your log.
Maintain a chain-of-custody log
- A simple table works:
  - What (filename/URL/message ID)
  - Where (platform/app)
  - When collected (date/time, time zone)
  - Who collected (your name)
  - How (screenshot on iPhone 14, screen-recording via …)
  - Hash (if computed)
  - Notes (e.g., “threat to release photos unless paid ₱… by 10 Aug 2025”)
- Store evidence in a read-only archive (external drive/cloud) plus a backup. Don’t annotate on the originals; make working copies for highlighting.
Email and messaging specifics
- For email, save as .eml with full headers.
- For messaging apps (Messenger, WhatsApp, Viber, Telegram), take screenshots and export chats if the app supports it; include contact number/handle.
Web/social posts
- Save the page (HTML) and media; note permalinks. Take multiple screenshots (top of post, comments showing threats, the poster’s profile). If it’s a story/livestream, screen-record.
Don’t do this
- Don’t “test” the suspect link; you might trigger malware or tip them off.
- Don’t forward sexual images of minors—that’s illegal.
- Don’t edit media (cropping/filters strip metadata); annotate only on copies.

Tip: On-platform reports generate case IDs/emails—save those too; they help prosecutors prove notice and takedown history.

Where & how to report (Philippines)

PNP Anti-Cybercrime Group (ACG): For sextortion, hacking, threats, identity theft, NCII. Bring your ID, a narrative, and evidence (digital + printed index).
NBI Cybercrime Division: Similar coverage; helpful for cross-border cases or complex forensics.
Women & Children Protection Center (PNP WCPC): If the case involves women/children; trauma-informed handling.
City/Provincial Prosecutor: You can file a criminal complaint directly (with your affidavit and annexes). The prosecutor may refer to police for further investigation.
National Privacy Commission (NPC): For doxxing/unauthorized processing of your personal/sensitive data; ask for cease and desist and other relief.
Barangay: For BPO under R.A. 9262 against intimate partners; often fastest for immediate restraint.
Schools/Employers: Use formal mechanisms under R.A. 10627 and R.A. 11313; demand investigation and protection measures.

If the offender is overseas: Cite R.A. 10175’s extraterritorial reach; law enforcement may coordinate through the DOJ Office of Cybercrime for mutual legal assistance and service provider cooperation.

Strategic combos (what usually gets results)

Sextortion by a stranger: R.A. 10175 (threats/coercion via ICT) + RPC grave threats/coercion + R.A. 9995 if intimate images were captured/shared + platform NCII takedown + SIM Act data request via subpoena/court order.
Ex-partner leaking nudes: R.A. 9995 (voyeurism/IBSA) + R.A. 9262 (if intimate partner violence) + NPC complaint (unauthorized processing of sensitive personal info) + civil damages/injunction.
Student cyberbullying: R.A. 10627 (school process) + R.A. 11313 (GBOOSH) if sexualized harassment + RPC threats/coercion if applicable + counseling/safety planning.
Impersonation to harass: R.A. 10175 (identity theft) + RPC libel + NPC complaint (personal data misuse) + urgent on-platform impersonation takedown.
Child victim or child-related content: R.A. 9775 + R.A. 11930 (OSAEC/CSAEM) + immediate police/NBI report + platform “child safety” escalation. Do not keep or share files except as directed by authorities.

Filing a strong case: what to bring

Affidavit (clear narrative: who/what/where/when/how; attach exhibits).
Evidence index listing each file/screenshot/URL with brief description and date/time.
Digital media (USB/external drive) and printed key screenshots for quick review.
On-platform report receipts (emails/case numbers).
Any money trail (receipts, bank/e-wallet reference numbers, chat logs where demands were made).
Witness statements (if anyone saw/heard the threats or received the content).
For partners/ex-partners: Proof of relationship and prior abuse for R.A. 9262 relief.

Remedies & outcomes you can request

Criminal penalties (imprisonment/fines; higher when ICT is involved or victims are minors).
Protection Orders (no contact; compelled takedown; surrender of devices; stay-away).
Civil damages (moral, exemplary, actual; plus injunction ordering takedown and non-disclosure).
Administrative orders (NPC cease-and-desist; school/HR sanctions).
Orders to service providers (via court/prosecutor/law enforcement) to preserve logs, identify subscribers, or remove content consistent with due process.

Common defenses you’ll hear (and how they’re handled)

“You sent it to me, so I can share it.” No. Consent to capture is not consent to distribute (R.A. 9995).
“It’s just a joke.” Threats/coercion/harassment do not need to be “serious” in the offender’s mind; impact and context matter.
“Truth is a defense to libel.” Limited and context-dependent; malice and good motives/justifiable ends are assessed. Other laws (privacy, voyeurism) apply regardless of “truth.”
“It’s outside the Philippines.” R.A. 10175 allows extraterritorial prosecution when the victim is Filipino or any element occurs here.

Prevention & risk-reduction (practical)

Accounts: Unique passwords + 2FA; review connected apps and active sessions; update recovery details; beware of “video chat” setups that prompt you to install plugins or redirect to look-alike sites.
Devices: Keep OS/app/security patches current; scan for malware; cover webcams when not in use.
Social graphs: Lock down privacy settings; trim who can DM you; restrict story viewers; limit personal info in bios.
Minors: Ongoing, age-appropriate talks about grooming, privacy, and reporting; keep devices in shared spaces; model non-shaming responses.
If images already exist: Consider hash-based NCII programs (some platforms let you submit a hash so matching uploads are blocked platform-wide).

Templates you can adapt

A. Evidence/chain-of-custody log (sample)

Item #	File/URL/ID	Platform	Date/Time (Asia/Manila)	Collected by	Method	SHA-256 (optional)	Notes
1	https://…/post/123	Platform X	2025-08-20 14:23	J. Dela Cruz	iPhone screenshot	(hash here)	Threat: “send to your family…”
2	IMG_4321.MOV	Messenger	2025-08-19 22:10	J. Dela Cruz	Chat export	(hash)	Explicit video sent unsolicited

B. Incident affidavit (outline)

Introduction (name, address, capacity).
Background (how you know the person, or how they contacted you).
Chronology (dates/times, exact quotes if possible, demands made, payments requested).
Evidence (list of annexes; where/when each was obtained).
Effect on you (fear, anxiety, reputational harm, financial loss).
Prayer (criminal charges sought; protection orders; preservation/takedown; damages).

Special notes for schools and workplaces

Schools (R.A. 10627): Written report triggers the school’s duty to investigate, notify parents, and implement measures (safety plans, counseling, discipline). Keep copies of all submissions and the school’s responses.
Workplaces (R.A. 11313): Employers must have policies, a committee, training, and clear complaint channels. File a written complaint; request interim measures (no-contact orders, schedule/location changes). Failure to act can expose the employer to liability.

If you’re currently being sextorted (script you can follow)

“I will not pay. Your threats are being documented. Law enforcement has been notified.”
Do not send more images or engage further.
Preserve everything and move straight to reporting (platform + PNP/NBI).
Tell close contacts: “Someone may send you manipulated/private images of me. Please don’t open or share them; forward me the message and the sender details.”

One-page plan you can print

Document (screenshots + URLs + dates).
Secure (passwords + 2FA + sign-out everywhere).
Report (platform + PNP/NBI + NPC if data privacy is involved).
Protect (BPO/TPO/PPO if intimate partner; school/HR measures).
Remove (on-platform NCII/harassment takedown; pursue court orders if needed).
Recover (counseling, support network, budgeting if money was lost).

Final word

You are not to blame. Philippine law provides multiple, overlapping remedies for sextortion and cyberbullying—criminal, civil, administrative, and protective. The strongest cases start with clean, complete evidence and prompt reports. If you’d like, tell me your situation (no names needed), and I’ll map the exact laws and reporting steps that fit.