When several accounts, platforms, or people are harassing you online, the hardest part is often not knowing how to present everything clearly. Screenshots pile up. Messages disappear. The same person may use different accounts. Some incidents may be threats, some may be cyber libel, some may involve intimate images, and some may be gender-based online sexual harassment. A strong complaint is not just a thick folder of screenshots. It is a well-organized evidence package that helps investigators, prosecutors, or the court quickly understand who did what, when, where online, how it affected you, and what proof supports each incident.

Why evidence organization matters in online harassment cases

Online harassment complaints in the Philippines usually involve digital proof: chats, screenshots, posts, account profiles, links, emails, photos, videos, call logs, transaction receipts, IP-related information, or witness messages.

The problem is that digital evidence can be questioned. The other side may say:

“That screenshot was edited.”
“That is not my account.”
“The post was taken out of context.”
“Someone else used my phone.”
“The complainant deleted parts of the conversation.”
“The account is fake.”
“The date and time are unclear.”

This is why your goal is to organize evidence in a way that shows:

Chronology — the order of events.
Identity — how the account, number, email, or profile connects to the respondent.
Content — the exact words, images, videos, or acts complained of.
Context — what happened before and after each message or post.
Preservation — that the files were saved in a reliable way.
Legal relevance — which evidence supports which possible offense.

Philippine investigators and prosecutors are not helped by a random folder named “screenshots.” They are helped by a clean evidence index, numbered files, a timeline, and a short explanation of why each item matters.

What online harassment may involve under Philippine law

“Online harassment” is not always one single crime. Depending on the facts, the complaint may involve different laws.

Situation	Possible legal basis	Evidence usually needed
Repeated abusive, sexual, misogynistic, homophobic, transphobic, or sexist messages online	Republic Act No. 11313, Safe Spaces Act of 2019	Screenshots, account links, message threads, proof of repeated contact, proof of gender-based or sexual nature
Defamatory posts accusing you of a crime, vice, defect, or dishonorable conduct	Revised Penal Code Articles 353 and 355, in relation to Republic Act No. 10175, Cybercrime Prevention Act of 2012	Exact post, URL, date posted, audience/publication, identity of poster, proof of reputational harm
Threats to harm you, your family, your job, or your reputation	Revised Penal Code Articles 282, 283, or 285, possibly in relation to RA 10175 if done through ICT	Threat messages, call logs, voice notes, prior incidents, witness statements
Forcing you to do or not do something through threats	Revised Penal Code Article 286 on grave coercions, possibly in relation to RA 10175	Threats, demands, proof of pressure or intimidation
Using your name, photos, identity, or account without permission	RA 10175 provisions on computer-related identity theft, plus possible Civil Code claims	Fake profiles, impersonation screenshots, profile links, reports from people deceived
Sharing or threatening to share intimate photos or videos	Republic Act No. 9995, Anti-Photo and Video Voyeurism Act of 2009, RA 11313, RA 10175, and possibly RA 9262	Original threat, image/video evidence handled carefully, proof of non-consent, account details
Harassment by a current or former spouse, dating partner, or sexual partner	Republic Act No. 9262, Anti-Violence Against Women and Their Children Act of 2004	Relationship proof, abusive messages, threats, emotional or psychological impact, child-related threats if any
Online sexual abuse, grooming, or exploitation involving a minor	Republic Act No. 11930, Anti-OSAEC and Anti-CSAEM Act	Preserve evidence without forwarding or redistributing illegal material; report promptly to authorities
Doxxing, exposure of private personal information, or misuse of sensitive data	Republic Act No. 10173, Data Privacy Act of 2012, Civil Code Articles 19, 20, 21, and 26	Posts exposing personal data, screenshots, URLs, proof of harm, proof of unauthorized use

Civil remedies may also be possible. Under the Civil Code, Article 19 requires every person to act with justice, give everyone their due, and observe honesty and good faith. Article 20 allows damages when a person willfully or negligently causes damage contrary to law. Article 21 covers willful acts contrary to morals, good customs, or public policy. Article 26 protects dignity, personality, privacy, and peace of mind.

The legal standard: make your evidence usable, not just numerous

Digital evidence is governed by the Rules on Electronic Evidence, A.M. No. 01-7-01-SC. In simple terms, the person presenting an electronic document must be ready to show that it is authentic, reliable, and connected to the case.

For criminal complaints filed with prosecutors, the current DOJ-National Prosecution Service rules require evidence strong enough to show prima facie evidence with reasonable certainty of conviction. The Supreme Court upheld the validity of this stricter prosecutorial standard in 2026, recognizing the DOJ’s authority over preliminary investigation and inquest processes through Department Circular No. 15, series of 2024. See the Supreme Court’s official notice on the DOJ-NPS Rules on Preliminary Investigations and Inquests.

This matters because prosecutors do not merely count screenshots. They look for whether the evidence can establish the elements of the offense and survive obvious defenses.

For cybercrime cases, law enforcement may need court-issued cybercrime warrants to obtain subscriber information, traffic data, or data from devices and service providers. The relevant procedure is in the Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC, which includes warrants to disclose computer data, intercept computer data, search, seize, and examine computer data.

Step-by-step guide to organizing evidence for multiple online harassment complaints

1. Create a master incident log first

Before arranging screenshots, create one spreadsheet or table called Master Incident Log. This becomes the backbone of your complaint.

Use this format:

Incident No.	Date and time	Platform	Account/name used	What happened	Evidence file	Possible legal issue	Urgency
001	12 Jan 2026, 9:14 PM PHT	Facebook Messenger	“Juan D.” profile link	Sent threat to release private photos	E001-E004	Threats, RA 9995, RA 11313	High
002	13 Jan 2026, 8:02 AM PHT	Facebook public post	Same profile	Posted accusation that complainant is a scammer	E005-E008	Cyber libel	Medium
003	15 Jan 2026, 11:30 PM PHT	Viber	Mobile no. ending 4567	Repeated sexual insults	E009-E012	Safe Spaces Act	Medium

This log should be factual. Avoid emotional labels like “evil,” “crazy,” or “monster.” Use neutral descriptions: “sent message saying ___,” “posted screenshot of private conversation,” “threatened to send video to employer.”

2. Separate evidence by respondent, platform, and legal issue

When there are multiple harassers or multiple accounts, do not place everything in one unstructured folder. Create a folder system like this:

Online Harassment Evidence/
  00_Master Incident Log/
  01_Complainant IDs and Personal Documents/
  02_Respondent A - Facebook and Messenger/
  03_Respondent A - Email/
  04_Respondent B - TikTok/
  05_Unknown Accounts/
  06_Witness Statements/
  07_Platform Reports/
  08_Impact Evidence/
  09_Drafts for Complaint-Affidavit/

If one person is using many accounts, create a subfolder called:

Respondent A - Possible Linked Accounts/

Inside it, keep proof that links the accounts, such as:

same profile photo;
same mobile number;
same writing style or repeated phrases;
same email recovery clue;
admission in chat;
mutual contacts;
same bank account or e-wallet number;
screenshots where the person refers to facts only they would know.

3. Preserve original evidence before editing, cropping, or annotating

Always keep an untouched copy of the original evidence.

Good practice:

Save screenshots in their original format.
Download videos instead of only screen-recording them, if the platform allows it.
Save emails as .eml or PDF with full headers if possible.
Save URLs of posts, comments, profiles, groups, and messages.
Keep the phone or computer where the messages were received.
Do not delete the conversation after screenshotting it.
Do not rename the only original file if doing so may erase useful metadata.

Create two versions:

Folder	Purpose
`Original Evidence - Do Not Edit`	untouched screenshots, downloads, videos, exports, emails
`Working Copies - Annotated`	copies where you add arrows, highlights, translations, or notes

Never submit only edited screenshots. If you need to highlight a threat, make a duplicate and label it clearly as an annotated copy.

4. Take screenshots in a way investigators can understand

A useful screenshot should show more than the offensive message. It should show identity, date, platform, and context.

For social media posts, capture:

the full post;
the profile name and profile photo;
the profile URL or username;
the date and time shown by the platform;
comments or reactions if relevant;
the audience setting if visible;
the browser address bar if using a computer;
the surrounding thread if context matters.

For private messages, capture:

the start of the conversation;
the offensive message;
the messages immediately before and after it;
the account name or number;
date and time markers;
proof that the message came from that account;
any media attachments;
any deletion notice, edited-message notice, or disappearing-message setting.

For emails, save:

sender email address;
recipient email address;
subject line;
date and time;
complete body;
attachments;
full email headers, if available.

For calls or voice notes, record:

caller number or account;
call date and time;
duration;
recording file name, if legally obtained;
transcript or summary;
witnesses who heard the call, if any.

5. Use consistent file names

Bad file names create confusion. Avoid names like:

Screenshot_20260115_221955.png
IMG_9981.png
proof final final 2.png

Use file names that connect directly to your incident log:

E001_2026-01-12_FBMessenger_ThreatToReleasePhotos_RespondentA.png
E002_2026-01-12_FBMessenger_ProfileURL_RespondentA.png
E003_2026-01-12_FBMessenger_ContextBeforeThreat_RespondentA.png
E004_2026-01-12_FBMessenger_ContextAfterThreat_RespondentA.png

A simple system is:

E[number]_[date]_[platform]_[short description]_[respondent].filetype

Then your complaint-affidavit can say:

On 12 January 2026 at around 9:14 PM, Respondent A sent me a Facebook Messenger message threatening to release my private photos unless I replied to him. A screenshot of the message is attached as Annex “E001,” with the surrounding conversation as Annexes “E003” and “E004.”

6. Build an evidence index

An evidence index is a table that tells the reader what each file proves.

Evidence Code	File name	Description	What it proves
E001	E001_2026-01-12_FBMessenger_ThreatToReleasePhotos.png	Screenshot of direct threat	Shows the threat and demand
E002	E002_2026-01-12_FB_ProfileURL.png	Screenshot of respondent’s profile page	Links message account to profile
E003	E003_2026-01-12_ContextBeforeThreat.png	Earlier part of same chat	Shows conversation was continuous
E004	E004_2026-01-13_PlatformReportReceipt.pdf	Report receipt from platform	Shows prompt reporting and preservation effort
E005	E005_2026-01-13_PublicPostCyberlibel.png	Public post accusing complainant of scam	Shows publication and defamatory statement

This index is especially important when you have multiple complaints. It prevents investigators from having to guess which screenshot belongs to which incident.

7. Prepare a short narrative for each complaint cluster

For multiple online harassment complaints, you may need to group incidents into clusters.

Example:

Cluster A: Threats and sextortion

Respondent A threatened to release private images.
Respondent A demanded communication or sexual favors.
Evidence: E001 to E010.
Possible laws: RA 9995, RA 11313, grave threats or coercion under the Revised Penal Code, in relation to RA 10175 if committed through ICT.

Cluster B: Public defamatory posts

Respondent A posted accusations on Facebook.
Posts were visible to mutual friends and workplace contacts.
Evidence: E011 to E020.
Possible laws: cyber libel under Article 353 and Article 355 of the Revised Penal Code, in relation to RA 10175.

Cluster C: Impersonation accounts

Unknown account used complainant’s name and photos.
Account messaged complainant’s relatives.
Evidence: E021 to E030.
Possible laws: computer-related identity theft under RA 10175, possible civil privacy claims.

This structure helps prevent a common mistake: mixing every bad act into one confusing narrative.

8. Keep a chain-of-custody log

A chain-of-custody log records who handled the evidence and when. This is more commonly emphasized in formal investigations, but complainants can still keep a simple version.

Date	Evidence handled	Action taken	Person handling	Storage location
13 Jan 2026	E001-E010	Saved screenshots from phone	Complainant	Phone + Google Drive folder
14 Jan 2026	E001-E010	Copied to USB	Complainant	USB in sealed envelope
15 Jan 2026	E001-E020	Printed for complaint	Complainant	Printed folder

For sensitive files, especially intimate images or videos, avoid unnecessary copying. Use sealed storage, password protection, and limited access. Do not forward intimate material to friends or post it online to “prove” what happened. That can create new privacy or criminal issues.

9. Preserve platform links and report receipts

For every post, profile, group, video, or comment, save the URL.

Also save:

report confirmation emails;
ticket numbers;
platform case numbers;
automated replies;
takedown notices;
screenshots showing the post was removed;
screenshots showing the account changed its name or photo.

Even if the content disappears, proof that it existed and was reported may still help investigators.

10. Document the impact on you

Legal complaints often focus on the offensive messages, but the effect on the victim can also matter.

Save evidence of:

missed work or school;
employer or school reports;
messages from relatives or friends who saw the post;
medical or psychological consultation records;
barangay blotter or police blotter entries;
requests to HR, school administration, or platform moderators;
financial loss, if any;
relocation, changed phone number, or security expenses.

For civil damages, VAWC-related psychological violence, or workplace/school harassment, impact evidence can be important.

How to decide whether to file one complaint or several complaints

There is no single format that fits all cases. The best structure depends on the number of respondents, the type of acts, and the evidence available.

Situation	Practical organization
One respondent, many incidents on different dates	One main complaint folder with a detailed timeline and annexes
One respondent, different legal issues such as threats, cyber libel, and intimate-image threats	One master folder, but separate evidence clusters by legal issue
Several respondents acting together	One folder per respondent, plus a shared “common acts/conspiracy or coordination” folder
Several unrelated harassers	Separate complaint folders to avoid confusion
Anonymous or fake accounts	One “Unknown Accounts” folder, with subfolders for each account and all identity-linking evidence
Same content reposted by many accounts	Master list of each repost, URL, date/time, account, and screenshot
Workplace or school harassment	Separate folders for government/legal complaint, HR/school complaint, and platform reports

If the acts are connected, a consolidated complaint may help show a pattern. If the acts are unrelated, separate complaints may be clearer.

Where to file or report online harassment in the Philippines

Different offices may be involved depending on the facts.

Office or agency	When it may be relevant	What to bring
NBI Cybercrime Division	Cybercrime, fake accounts, threats, sextortion, hacking, identity theft, online scams connected to harassment	Valid ID, complaint narrative, screenshots, URLs, devices if relevant, evidence index
PNP Anti-Cybercrime Group or Regional Anti-Cybercrime Unit	Cybercrime incidents requiring police investigation, tracing, or urgent response	Valid ID, evidence folder, incident log, account links, device used
City or Provincial Prosecutor’s Office	Filing a criminal complaint-affidavit for preliminary investigation	Notarized or sworn complaint-affidavit, affidavits of witnesses, annexes, evidence index, copies for respondents and official file
Barangay	Blotter, immediate community-level record, or Barangay Protection Order in proper VAWC situations	ID, address details, short incident summary, screenshots, relationship proof if VAWC
Women and Children Protection Desk	VAWC, threats by partner or former partner, harassment involving women or children	IDs, proof of relationship, screenshots, medical or psychological records if any
School, university, or employer	If harassment happened in a workplace, educational, or training environment	Incident report, screenshots, witness names, HR/school policy references
National Privacy Commission	If the core issue is misuse, unauthorized disclosure, or exposure of personal data	Screenshots of exposed data, URL, identity of data controller if known, harm suffered
Platform reporting channels	To preserve, restrict, or remove harmful content	URLs, screenshots, account profile, explanation of violation

The NBI Cybercrime Division’s citizens charter lists investigative assistance for victims of computer crimes as available to the general public. Its public page states that complainants fill out a complaint form and submit it to division personnel; practical investigation time varies depending on complexity, tracing needs, platform cooperation, and whether warrants or further case build-up are required.

Required documents for a well-prepared complaint package

Prepare both digital and printed versions when possible.

Document or item	Purpose
Valid government ID or passport	Identifies the complainant
Complaint-affidavit	Main sworn statement narrating the facts
Master incident log	Shows chronology
Evidence index	Explains each attachment
Numbered screenshots and files	Supports each incident
URLs and account links	Helps investigators locate online content
Witness affidavits	Supports publication, identity, impact, or context
Proof of relationship	Important for VAWC or domestic/dating-partner harassment
Proof of employment or school connection	Useful for workplace or school harassment
Medical, psychological, HR, or school records	Shows impact and damages
Platform report receipts	Shows prompt reporting and preservation efforts
Device used to receive messages	May be needed for inspection or authentication
USB or external drive	Helps submit organized digital copies
Printed annexes	Useful for prosecutor or investigator review

Do not sign a complaint-affidavit unless you are ready to swear to its truth. In the Philippines, complaint-affidavits are usually notarized or subscribed before an authorized officer, investigator, or prosecutor.

Practical timeline expectations

Actual timelines vary widely, especially in cyber cases.

Stage	Practical reality
Evidence preparation	Can be done immediately, but organizing multiple platforms may take several days
Initial report to NBI/PNP cybercrime unit	Frontline receiving may be quick, but technical evaluation and investigation can take longer
Case build-up	May require additional screenshots, device inspection, witness statements, or platform data
Cybercrime warrants or data requests	Require proper law enforcement action and court authorization where applicable
Preliminary investigation	May take weeks to months depending on docket load, number of respondents, counter-affidavits, and supplemental evidence
Court case, if filed	Usually much longer, especially if digital forensics or multiple witnesses are involved
Platform takedown	Can be fast or slow depending on platform rules, urgency, and content type

Do not wait for all evidence to be perfect before preserving urgent proof. If there are threats, sextortion, intimate images, child-related material, or risk of physical harm, the immediate priority is preservation and reporting.

Special issues when the complainant is abroad or a foreigner

Foreigners and Filipinos abroad can still organize evidence for Philippine proceedings, especially if the respondent is in the Philippines, the harm occurred in the Philippines, the victim was in the Philippines when harmed, or a computer system partly situated in the Philippines was used.

Practical points:

Use your passport or foreign government ID as identification.
If executing an affidavit abroad, ask the receiving Philippine office whether it requires consular notarization, apostille, or a locally notarized affidavit.
The Philippines is part of the Apostille system. The DFA maintains official information on apostille requirements and authentication.
Philippine embassies and consulates may notarize private documents such as affidavits and special powers of attorney; for example, the Philippine Embassy in Washington, D.C. explains its consular notarization services.
If a representative in the Philippines will file or follow up documents, a Special Power of Attorney may be needed.
Keep screenshots showing your time zone. In your incident log, write both local time and Philippine time if possible.
If documents are in another language, prepare English translations.

Some agencies still require personal appearance, especially if the investigator needs to ask questions, examine the device, or have the affidavit subscribed before the proper officer.

Common mistakes that weaken online harassment complaints

Submitting screenshots without context

A single cropped screenshot may not show who sent the message, when it was sent, or what conversation it belonged to. Always include surrounding context.

Deleting the original conversation

Deleting the chat after taking screenshots can make authentication harder. Archive or mute if needed, but preserve the original whenever safely possible.

Mixing unrelated incidents

If ten people harassed you on five platforms, do not submit one messy folder. Separate by respondent, platform, and incident.

Forgetting URLs and usernames

Screenshots are helpful, but URLs and usernames help investigators locate accounts and posts before they disappear.

Posting the evidence publicly

Victims sometimes repost threats or intimate-image blackmail to ask for help. This can worsen the harm and may create privacy or defamation issues. Keep evidence for investigators, not for public circulation.

Editing screenshots without keeping originals

Highlighting is fine on a working copy. But always keep the original unedited version.

Failing to show account identity

The legal issue is often not just “was this message sent?” but “who sent it?” Save profile pages, phone numbers, admissions, mutual contact information, and other identity-linking evidence.

Ignoring time zones

This matters for overseas complainants, platform timestamps, and sequence of events. State whether the time shown is Philippine Time, your local time, or the platform’s displayed time.

Waiting too long

Posts may be deleted. Accounts may change usernames. Platforms may limit access to old data. Witnesses may forget details. Preserve evidence early.

Sample evidence folder structure for multiple complaints

ONLINE HARASSMENT COMPLAINT PACKAGE

00_README
  - Summary of complaint
  - List of respondents
  - List of platforms
  - Contact details of complainant

01_MASTER FILES
  - Master Incident Log.xlsx
  - Evidence Index.xlsx
  - List of Witnesses.docx

02_COMPLAINANT DOCUMENTS
  - Valid ID.pdf
  - Proof of relationship.pdf
  - Employment or school records.pdf

03_RESPONDENT A
  03A_Profile and Identity
  03B_Threat Messages
  03C_Public Posts
  03D_Platform Reports
  03E_Impact Evidence

04_RESPONDENT B
  04A_Profile and Identity
  04B_Comments and Reposts
  04C_Witness Screenshots

05_UNKNOWN ACCOUNTS
  05A_Account 1
  05B_Account 2
  05C_Linkage Evidence

06_WITNESS AFFIDAVITS

07_PLATFORM REPORTS

08_PRINTED ANNEXES

09_DRAFT COMPLAINT-AFFIDAVIT

This structure makes it easier for an investigator or prosecutor to locate evidence quickly.

Frequently Asked Questions

Can screenshots be used as evidence in the Philippines?

Yes. Screenshots can be used, but they should be authenticated and supported by context. Under the Rules on Electronic Evidence, the party presenting electronic evidence must be ready to show that it is genuine and reliable. Stronger support includes URLs, full conversation threads, account profile pages, original files, witness statements, and the device where the messages were received.

Should I print my screenshots or submit digital copies?

Prepare both if possible. Printed screenshots are easier for initial review, while digital copies preserve quality and may contain file details. Keep the digital originals in a secure folder and submit organized copies through USB or the method required by the investigator or prosecutor.

What if the harasser deleted the post?

Save any screenshot, URL, report receipt, notification, email alert, witness screenshot, or cached preview showing that the post existed. Also record when you discovered it and when it disappeared. If the case is serious, law enforcement may explore platform data preservation or cybercrime warrant options, depending on the facts.

What if the harasser uses fake accounts?

Organize evidence showing links between the fake account and the suspected person. Look for repeated photos, usernames, phone numbers, writing style, shared contacts, admissions, payment details, timing patterns, or facts only that person would know. Do not rely only on suspicion. Create a separate “identity-linking evidence” folder.

Can I file separate complaints for different platforms?

Yes, but it is often better to maintain one master timeline even if complaints are separated by platform or offense. If the same respondent harassed you on Facebook, Viber, TikTok, and email, the master timeline helps show the pattern. The annexes can still be grouped by platform.

Do I need a barangay blotter before filing a cybercrime complaint?

Not always. Serious cybercrime, threats, VAWC, intimate-image abuse, and online sexual harassment may go directly to law enforcement or the prosecutor, depending on the facts. Barangay records can still help document the incident. Barangay conciliation is limited and generally does not cover offenses punishable by imprisonment exceeding one year or a fine over ₱5,000, as reflected in the Katarungang Pambarangay rules.

What should I do with intimate photos or videos used for blackmail?

Do not forward, repost, or unnecessarily duplicate intimate material. Preserve the threat messages, account details, and proof of non-consent. Store sensitive files securely and limit access. For cases involving intimate images, possible legal bases include RA 9995, RA 11313, RA 9262 if the respondent is an intimate partner or former partner, and RA 10175 if ICT was used.

Can online harassment by an ex-partner be VAWC?

Yes, if the victim is a woman and the respondent is a current or former spouse, a person with whom she has or had a sexual or dating relationship, or a person with whom she has a common child. Online threats, humiliation, controlling messages, and psychological abuse may be relevant under RA 9262 depending on the facts. A Barangay Protection Order may be available for certain acts and is effective for 15 days under RA 9262.

What if the victim is a minor?

Handle the evidence very carefully. If the material involves online sexual abuse or exploitation of a child, grooming, sexual images, or child sexual abuse or exploitation material, RA 11930 may apply. Do not circulate the material. Preserve what is necessary and report promptly to proper authorities, such as law enforcement units handling cybercrime or women and children protection.

How detailed should my complaint-affidavit be?

It should be detailed enough to show the timeline, identity of the respondent, exact acts complained of, evidence supporting each act, and harm suffered. Avoid exaggeration and legal conclusions you cannot support. A clear affidavit with numbered paragraphs and annex references is usually stronger than a long emotional narrative with unmarked screenshots.

Key Takeaways

Organize online harassment evidence by date, respondent, platform, and legal issue.
Create a master incident log before drafting the complaint-affidavit.
Keep original, unedited digital files and make separate working copies for highlights or annotations.
Every screenshot should show identity, date, platform, content, and context whenever possible.
Use an evidence index so investigators and prosecutors can quickly understand what each file proves.
For multiple complaints, separate evidence into clusters such as threats, cyber libel, impersonation, intimate-image abuse, and gender-based online harassment.
Save URLs, usernames, profile pages, platform report receipts, and proof linking fake accounts to the suspected person.
Be careful with intimate images, child-related material, and sensitive personal data; preserve evidence without spreading it.
Foreigners and Filipinos abroad should pay attention to notarization, apostille, consular documents, time zones, and possible need for a Philippine representative.
A strong complaint is not the one with the most screenshots. It is the one where every piece of evidence is clearly connected to a fact, a person, a date, and a possible legal violation.