When someone is harassing, threatening, shaming, impersonating, stalking, or sexually harassing you online, the first instinct is often to block, delete, reply angrily, or post a warning to others. Those reactions are understandable, but they can also destroy or weaken the very evidence needed for a Philippine cyber harassment case. Digital evidence is fragile: accounts can be renamed, posts can be deleted, messages can disappear, and platforms may keep logs only for limited periods. This guide explains how to preserve screenshots, chats, URLs, account details, devices, and platform data in a way that is useful for a complaint before the PNP Anti-Cybercrime Group, NBI Cybercrime Division, prosecutor’s office, or court in the Philippines.

Why Digital Evidence Matters in a Cyber Harassment Case

In a cyber harassment case, the issue is usually not only what was said or posted. Investigators and prosecutors also need to know:

Who likely sent, posted, uploaded, shared, or threatened the content
When it happened
Where it appeared online
How it reached you or other people
Whether it was public, private, repeated, threatening, sexual, defamatory, or identity-based
Whether the evidence is authentic and has not been manipulated
How the harassment affected you, your safety, reputation, work, family, studies, or mental health

A screenshot alone may help, but it is often not enough. A strong evidence file usually includes screenshots, screen recordings, URLs, account identifiers, exported chats, device details, witness statements, reports to the platform, and a clear timeline.

Philippine courts can admit electronic documents and electronic data messages, but the party presenting them must be ready to show authenticity, integrity, and relevance. Under the Electronic Commerce Act of 2000, Republic Act No. 8792, electronic documents have legal effect and may be treated as the functional equivalent of written documents when integrity and reliability can be shown. The Rules on Electronic Evidence, A.M. No. 01-7-01-SC, further explain how electronic documents, audio, video, text messages, chat messages, and similar materials may be authenticated and presented.

What Counts as Digital Evidence for Cyber Harassment?

Digital evidence may include almost anything created, transmitted, stored, or displayed through a phone, computer, website, app, or online account.

Common examples include:

Type of evidence	Examples	Why it matters
Messages	Messenger, Viber, WhatsApp, Telegram, Instagram DMs, SMS, email	Shows threats, insults, stalking, extortion, demands, sexual comments, or repeated harassment
Public posts	Facebook posts, TikTok videos, X posts, YouTube comments, Reddit posts, blog entries	Shows publication, audience, defamatory statements, or public humiliation
Profile information	Username, display name, profile URL, profile photo, bio, user ID, linked accounts	Helps identify or trace the account
Technical details	Email headers, URLs, timestamps, file metadata, IP-related platform logs	Helps law enforcement request data from platforms or service providers
Media files	Photos, videos, voice notes, screen recordings, edited images, memes	Shows the actual harmful content and whether images were manipulated or sexualized
Platform reports	Confirmation emails or case numbers from Facebook, Google, TikTok, X, Instagram, etc.	Shows prompt reporting and preserves a trail of action
Witness materials	Screenshots from friends, relatives, co-workers, classmates, or group chat members	Helps prove reach, publication, repetition, or public impact
Harm records	Medical certificates, counseling notes, school or HR reports, lost work messages	Helps prove damage, fear, emotional distress, or practical consequences

For text messages, chatroom sessions, and similar “ephemeral electronic communications,” the Rules on Electronic Evidence allow proof through the testimony of a person who was a party to the communication or who has personal knowledge of it. This is why your own affidavit and the affidavits of witnesses who saw the content can become important later.

Philippine Laws That May Apply to Cyber Harassment

“Cyber harassment” is a practical term. The exact legal case depends on what the harasser did. The same set of facts may fall under one or more laws.

Cybercrime Prevention Act of 2012

The main law is the Cybercrime Prevention Act of 2012, Republic Act No. 10175. It covers cybercrime offenses such as illegal access, computer-related identity theft, cybersex, unsolicited commercial communications in certain contexts, and online libel. It also increases penalties when crimes under the Revised Penal Code or special laws are committed by, through, and with the use of information and communications technologies.

In Disini v. Secretary of Justice, G.R. No. 203335, the Supreme Court upheld portions of RA 10175 but also struck down or limited some provisions, including concerns involving warrantless real-time collection of traffic data. The decision is important because cybercrime investigations must still respect privacy, due process, and constitutional protections against unreasonable searches and seizures. You can read the decision in Disini v. Secretary of Justice.

Online Libel

If the harassment involves false and defamatory statements posted online, the case may involve cyber libel under Article 355 of the Revised Penal Code, as amended by RA 10175. Evidence should show:

The exact defamatory words, image, video, caption, or comment
The URL or platform where it appeared
The date and time it was published or viewed
The account or person who posted it
The people who saw, reacted to, shared, or commented on it
The damage caused to reputation, work, business, family, or personal life

Screenshots should show not only the statement but also the account name, date, public setting if visible, comments, reactions, and URL.

Gender-Based Online Sexual Harassment

If the conduct involves unwanted sexual remarks, threats to upload intimate images, misogynistic abuse, homophobic or transphobic harassment, stalking, cyberflashing, or repeated sexual messages, the Safe Spaces Act, Republic Act No. 11313, may apply. The law covers gender-based sexual harassment in online spaces, workplaces, schools, streets, and public spaces.

For this type of case, preserve:

Sexual comments, images, stickers, voice notes, or videos
Threats to expose private photos or sexual history
Repeated unwanted messages after you clearly refused or told the person to stop
Account details of the harasser
Evidence that the conduct was gender-based, sexual, degrading, threatening, or intimidating

Photo or Video Voyeurism

If someone took, shared, sold, uploaded, or threatened to distribute intimate photos or videos without consent, the Anti-Photo and Video Voyeurism Act of 2009, Republic Act No. 9995, may apply. This is especially relevant to “leaked” intimate images, revenge porn, hidden camera recordings, and threats to post private sexual content.

Do not repost the image to “expose” the offender. Preserve the evidence privately and securely. Sharing intimate material further can harm the victim and create separate legal and privacy issues.

Violence Against Women and Their Children

If the offender is a spouse, former spouse, boyfriend, ex-boyfriend, dating partner, live-in partner, or someone with whom the woman has or had a sexual or dating relationship, online threats, humiliation, surveillance, or coercive messages may support a case under RA 9262, the Anti-Violence Against Women and Their Children Act of 2004. The Supreme Court has recognized that psychological violence under RA 9262 can include acts causing mental or emotional anguish, public ridicule, or humiliation.

Evidence may include repeated messages, threats to publish intimate materials, tracking, forced access to accounts, public shaming, financial control through online means, or harassment of family members.

Threats, Coercion, Unjust Vexation, Grave Scandal, or Other Revised Penal Code Offenses

Some online harassment may also involve crimes under the Revised Penal Code, such as grave threats, light threats, coercion, unjust vexation, slander by deed, alarms and scandals, or other offenses depending on the facts. Under Section 6 of RA 10175, if a Revised Penal Code offense is committed through ICT, the cybercrime framework may become relevant.

Data Privacy and Illegal Access Issues

While preserving evidence, avoid committing a separate violation. Do not hack the harasser’s account, guess passwords, install spyware, open private accounts without permission, or impersonate someone to obtain hidden data. Unauthorized access can be treated as illegal access under RA 10175.

Also be careful with personal data. The Data Privacy Act of 2012, RA 10173, protects personal information. Keeping evidence for a legitimate complaint is different from publicly dumping private information online. Preserve only what is relevant and share it only with law enforcement, your lawyer, the prosecutor, the court, or the platform as needed.

The Golden Rule: Preserve Before You Block, Delete, or Reply

Before blocking the harasser or deleting anything, capture the evidence in a complete and organized way. Blocking may remove your access to the conversation. Deleting may erase original timestamps. Replying may escalate the situation or create confusing screenshots later.

A practical order is:

Secure your account first if there is hacking, extortion, or immediate risk.
Capture the evidence while it is still visible.
Save URLs, account details, and timestamps.
Export or download data where possible.
Back up copies safely.
Report to the platform.
Report to law enforcement if the conduct is criminal or escalating.
Block or restrict the offender after preservation, especially if continued contact affects your safety or mental health.

If there is an immediate physical threat, stalking, blackmail involving intimate images, a threat to come to your home or workplace, or a threat involving a child, prioritize safety and report to local police or the nearest law enforcement unit.

Step-by-Step Guide to Preserving Digital Evidence

1. Take Clear Screenshots With Full Context

A useful screenshot should show more than the offensive words. It should show the surrounding details that help prove authenticity and identity.

For each screenshot, try to include:

The harasser’s display name and username or handle
Profile photo, if visible
Date and time of the message or post
Full message, caption, comment, image, or video thumbnail
URL or address bar, if using a browser
Group chat name or page name, if applicable
Your device date and time, if visible
Earlier and later messages for context
Reaction counts, shares, comments, or public visibility settings, if relevant

For long conversations, take overlapping screenshots. The bottom of one screenshot should overlap with the top of the next. This prevents gaps and helps show continuity.

2. Record a Short Screen Video Showing How You Found the Content

A screen recording can be very helpful because it shows the path from the app or website to the offending content.

For example:

Start from the platform home screen or browser.
Open the profile, page, group, chat, or post.
Show the username, URL, date, and content.
Scroll slowly through the thread.
Open the profile information, if visible.
Stop recording without editing the file.

Do not add music, captions, filters, stickers, or annotations to the recording. Keep an untouched copy.

3. Save the URL, Username, User ID, and Profile Link

Many people only save screenshots of the message but forget to save the link. This is a common mistake.

Preserve:

Profile URL
Post URL
Comment URL, if available
Group or page URL
Email address
Phone number
Username or handle
Display name
User ID, if the platform shows it
Linked accounts or pages
Old usernames, if you know them

On Facebook, for example, a person may change their display name, but a profile URL, username, or numeric ID may still help investigators. On X, Instagram, TikTok, Telegram, and similar platforms, handles can change quickly, so capture them early.

4. Export Chats or Download Platform Data When Available

Some apps allow you to export chats or download account data. This can preserve more information than screenshots.

Examples:

Facebook/Messenger: Download your information through Meta account settings.
WhatsApp: Export chat, with or without media.
Telegram: Desktop export may allow chat export in certain cases.
Viber: Backup features may preserve message history.
Email: Save the full email with headers, not only the body.
Google services: Google Takeout may preserve relevant account data.

When exporting, save the original exported file. Do not only copy-paste messages into Word. A typed transcript can help you organize the facts, but it is weaker than the original exported data.

5. Preserve Email Headers for Harassing Emails

For email harassment, screenshots are not enough. Email headers can show technical routing information, timestamps, sending servers, and authentication results.

Save:

The full email as .eml or .msg, if possible
Full headers
Sender address
Reply-to address
Subject line
Date and time received
Attachments
Embedded links
Screenshots showing the email in your inbox

Do not click suspicious links or open unknown attachments unless law enforcement or a qualified technical person is helping you. If the email contains malware or phishing links, clicking may compromise your account.

6. Keep the Original Device and Account Accessible

If the case becomes serious, investigators may ask to view the original message on your phone, laptop, or account. Courts may also care about whether the screenshot accurately reflects the original electronic document.

As much as possible:

Do not factory reset the phone.
Do not delete the app.
Do not clear the chat.
Do not rename files randomly.
Do not edit screenshots.
Do not crop out important details.
Do not use “beautify,” markup, or compression apps on the original files.
Keep the SIM card if SMS or calls are involved.
Keep the old phone even if you buy a new one.

You can make separate working copies for printing or highlighting, but preserve the original files untouched.

7. Make Secure Backups

Digital evidence should exist in more than one place.

A practical backup setup:

One copy on your phone or computer
One copy on an external USB drive or hard drive
One copy in secure cloud storage
One printed set for filing, if needed

Name folders clearly, for example:

Cyber Harassment Evidence - Juan Dela Cruz - March 2026

Inside the folder, use subfolders:

01 Screenshots
02 Screen Recordings
03 Chat Exports
04 Profile and URLs
05 Platform Reports
06 Witness Screenshots
07 Medical or HR Records
08 Timeline and Affidavit Drafts

Avoid sharing the folder with friends through unsecured links. Evidence folders often contain sensitive personal data.

8. Create a Timeline While Your Memory Is Fresh

A timeline helps the investigator, prosecutor, and lawyer understand the pattern.

Use a simple format:

Date and time	Platform	What happened	Evidence file	Witnesses
5 March 2026, 8:15 PM	Messenger	Sender threatened to post private photos	Screenshot 001, ScreenRec 001	None
6 March 2026, 9:30 AM	Facebook	Public post called me a thief and tagged my employer	Screenshot 010, URL list	Ana, Mark
7 March 2026, 2:00 PM	Email	Anonymous email sent to HR with false allegations	Email export 001	HR staff

Include repeated conduct. Harassment cases often become stronger when the pattern is clear.

9. Ask Witnesses to Preserve What They Saw

If friends, relatives, co-workers, classmates, customers, or group members saw the post or received messages, ask them to preserve their own screenshots and notes. Their screenshots may show publication, reach, comments, shares, or the fact that the content was visible to others.

Useful witness evidence includes:

Screenshot from their own account
Date and time they saw it
How they found it
Whether the post was public, shared in a group, or sent privately
Whether they commented, reacted, reported, or received a direct message
A short written statement or affidavit later, if needed

Witness evidence is especially useful for cyber libel, public shaming, workplace harassment, school harassment, and group chat harassment.

10. Report the Content to the Platform Without Losing Evidence

After capturing the evidence, report the post, account, message, or image to the platform. Keep proof of your report.

Save:

Report confirmation screen
Email confirmation
Ticket number
Date and time of report
Platform response
Notice of takedown or refusal
Any warning that the platform removed the content

A platform takedown can protect you, but it may also make the content harder to access later. That is why preservation should come first unless there is urgent risk, such as intimate image abuse involving a minor or imminent physical harm.

How to Keep a Proper Chain of Custody

“Chain of custody” means the record of who had possession or control of the evidence from the time it was collected until it is submitted. In digital evidence, this is important because files are easy to modify.

For ordinary complainants, a simple chain-of-custody log can help.

Date and time	Action	Person	File or device	Notes
10 April 2026, 7:45 PM	Took screenshots	Maria Santos	iPhone 13	Original screenshots saved in Photos
10 April 2026, 8:10 PM	Copied files to USB	Maria Santos	USB Kingston 32GB	No edits made
11 April 2026, 9:00 AM	Printed screenshots	Maria Santos	Print shop	Printed from PDF copy
12 April 2026, 2:30 PM	Submitted copies to NBI	Maria Santos	Printed set and USB copy	Original phone retained

If you know how, you may generate a hash value, such as SHA-256, for important files. A hash is like a digital fingerprint. If the file changes, the hash changes. This is helpful but not required for every ordinary complainant. What matters most is that the original files are preserved and your process is clear.

Printing Screenshots for a Complaint

Law enforcement and prosecutors often still work with printed attachments. Prepare printed copies, but do not rely only on printouts.

For each printed screenshot, include:

Page number
Date captured
Platform
URL or profile link
Short description
Your initials or signature, if asked
Reference to the original digital file name

Example label:

Screenshot 004 - Facebook comment by @sampleuser - captured 12 May 2026 at 9:45 PM - original file IMG_0045.PNG

Do not crop the screenshot so tightly that the account name, date, or URL disappears. If you need a zoomed-in version, include both the full screenshot and the zoomed copy.

Affidavits and Sworn Statements

For criminal complaints, you will usually need a complaint-affidavit or sworn statement. At the NBI or PNP, investigators may interview you and help prepare the complaint sheet or sworn statement. If you go directly to the Office of the City or Provincial Prosecutor, you may need to file a complaint-affidavit with supporting evidence.

A useful affidavit usually explains:

Your full name and basic personal details
How you know the respondent, if known
What platform or account was used
What happened, in chronological order
How you captured and preserved the evidence
Why you believe the respondent is responsible
Who else saw or received the content
What harm or fear resulted
What evidence is attached

Attachments may include screenshots, printed URLs, chat exports, email headers, witness affidavits, medical records, HR reports, school reports, or platform reports.

Affidavits executed in the Philippines are usually notarized. If the complainant or witness is abroad, a sworn statement may need consular notarization at a Philippine Embassy or Consulate, or an apostille process depending on where the document is executed and how it will be used. The DFA’s official Apostille information page explains authentication procedures for documents for cross-border use.

Where to Report Cyber Harassment in the Philippines

Depending on the facts, you may report to the PNP, NBI, prosecutor’s office, or other agency.

Office or agency	When it is commonly used	Practical notes
PNP Anti-Cybercrime Group	Cyber harassment, cyber libel, threats, impersonation, online scams, cyberstalking	The PNP has cybercrime units and may receive complaints through its official channels and regional offices
NBI Cybercrime Division	Serious cybercrime complaints, identity-related cases, threats, online extortion, platform tracing	The NBI Citizens Charter describes interview, complaint sheet, sworn statement, and evidence examination steps for computer crime complaints through the NBI Cybercrime Division service
Office of the City or Provincial Prosecutor	Filing a criminal complaint for preliminary investigation	Usually requires a complaint-affidavit, evidence, witness affidavits, and respondent details if known
Barangay	Blotter, immediate community intervention, some minor disputes	A barangay blotter can document an incident but is not a substitute for cybercrime investigation
School, employer, or HR office	Student or workplace harassment	Internal action may proceed separately from criminal or civil remedies
Platform reporting tools	Takedown, account restriction, preservation request route	Report after preserving evidence unless urgent safety requires immediate takedown

The DOJ Office of Cybercrime has information on reporting cybercrime incidents and plays an important role in cybercrime policy, coordination, and international cooperation. For foreign platforms or suspects abroad, Philippine law enforcement may need platform channels, preservation requests, warrants, or mutual legal assistance depending on the data sought.

Why Time Is Critical: Platform Logs and Preservation Orders

Many social media and messaging platforms do not keep all data forever. Some logs may be deleted, anonymized, or overwritten. Users may also delete posts, deactivate accounts, change usernames, or move conversations to disappearing-message apps.

Under RA 10175 and the Rule on Cybercrime Warrants, law enforcement authorities may use legal processes involving preservation, disclosure, search, seizure, and examination of computer data. The Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC, covers procedures such as warrants to disclose computer data and warrants to search, seize, and examine computer data. The law also recognizes preservation of traffic data, subscriber information, and content data under specific conditions.

In practical terms, this means you should preserve what you can immediately, then report promptly if the identity of the harasser depends on platform or telecom data.

Common Mistakes That Weaken Digital Evidence

Deleting the Original Conversation

Deleting the chat may make you feel safer, but it can weaken authentication. Archive or mute instead, then preserve and back up.

Cropping Screenshots Too Much

A screenshot that only shows the offensive sentence but not the sender, date, platform, or surrounding context is weaker. Capture the full screen first.

Editing or Annotating the Only Copy

Do not draw circles, arrows, or comments on the only copy. Keep a clean original. Make a separate marked copy if needed.

Posting the Evidence Publicly

Publicly posting the harasser’s private data, intimate images, phone number, address, or workplace can expose you to counterclaims or privacy issues. It may also alert the harasser to delete evidence.

Using Spyware or Hacking Back

Do not install tracking software, access private accounts, guess passwords, or ask someone to hack the harasser. Evidence obtained illegally can create separate criminal exposure and may become unusable.

Secretly Recording Calls Without Understanding RA 4200

The Anti-Wire Tapping Act, RA 4200, restricts secretly recording private communications without authorization from all parties, subject to specific legal exceptions. Screenshots of messages you received are different from secretly recording a private call. Be careful with call recordings and seek proper law enforcement guidance when interception or recording is involved.

Waiting Too Long

Delay can cause loss of platform data, deleted posts, changed usernames, forgotten details, or unavailable witnesses. Even if you are not ready to file a full complaint, start preserving evidence immediately.

Special Situations

If the Harasser Is Anonymous or Using a Dummy Account

Preserve every clue:

Profile URL
Username changes
Profile photos
Mutual friends
Groups joined
Language, nicknames, school or workplace references
Payment details, if extortion is involved
Phone numbers, email addresses, or recovery clues
Times when the person is active
Similar posts from known accounts

Do not assume a dummy account cannot be traced. But also do not rely on screenshots alone. Platform or telecom data may require formal legal process.

If the Harasser Is Abroad

A Philippine case may still be possible if the victim is in the Philippines, the harmful content was accessed in the Philippines, or elements of the offense occurred here. However, identifying a foreign-based account holder or obtaining platform data from abroad may take longer.

Expect possible issues involving:

Foreign platform policies
Mutual legal assistance
Time zone differences in timestamps
Apostilled or consularized affidavits from witnesses abroad
Translation of foreign-language evidence
Longer investigation timelines

Foreigners in the Philippines should also preserve passport details, visa status documents if relevant to identity or safety, and local address information for complaint forms. The criminal complaint itself generally focuses on the act and evidence, not citizenship.

If the Evidence Involves a Minor

If the victim is a child, handle the evidence with extreme care. Do not forward sexual images or videos of a minor, even for “proof,” except through proper law enforcement channels. Philippine laws such as RA 7610, RA 9775, and RA 11930 may apply depending on the facts. Reports involving online sexual abuse or exploitation of children should be treated as urgent.

If the Harassment Is Happening at Work or School

Preserve both the online evidence and the institutional trail:

HR reports
School incident reports
Emails to supervisors, teachers, guidance counselors, or administrators
Meeting notes
Witness statements
Screenshots of work chats or class group chats
Policies on sexual harassment, bullying, or online conduct

A workplace or school case may proceed administratively while a criminal complaint proceeds separately.

If the Harasser Is an Ex-Partner

Preserve the pattern, not just one message. In intimate partner harassment, the evidence often shows control, threats, humiliation, stalking, financial pressure, or repeated unwanted contact. Save:

Threats to upload private photos
Demands for passwords
Attempts to monitor location
Messages to your relatives or employer
Fake accounts used after blocking
Apologies or admissions
Prior incidents of violence or threats

This evidence may support cybercrime, VAWC, Safe Spaces Act, or other remedies depending on the relationship and facts.

Practical Evidence Checklist

Before filing or reporting, prepare as much of the following as possible:

Item	Prepared?
Valid government ID of complainant	☐
Printed screenshots with labels	☐
Original screenshot files	☐
Screen recordings	☐
URLs and profile links	☐
Chat exports or email files	☐
Email headers, if applicable	☐
Device used to receive or capture messages	☐
SIM card or phone number details, if SMS/calls involved	☐
Platform report confirmations	☐
Witness names and contact details	☐
Witness screenshots or affidavits	☐
Timeline of incidents	☐
Medical, counseling, HR, school, or business records showing harm	☐
Notarized complaint-affidavit, if already prepared	☐
Consularized or apostilled documents, if executed abroad	☐

Frequently Asked Questions

Are screenshots enough to file a cyber harassment complaint in the Philippines?

Screenshots may be enough to start a report, but they are usually stronger when supported by URLs, profile links, timestamps, screen recordings, chat exports, witness statements, and the original device. A screenshot should show the sender, platform, date, and context—not just the offensive words.

Can deleted posts or messages still be used as evidence?

Yes, if you preserved screenshots, recordings, exports, witness evidence, or platform confirmations before deletion. However, tracing deleted content through a platform may require prompt reporting and proper legal process. Delay can make recovery harder.

Should I block the harasser immediately?

If there is immediate danger or severe emotional distress, blocking may be necessary. But if safe to do so, preserve the evidence first. Blocking can remove access to profile details, messages, and links. A safer approach is often to screenshot, screen record, save links, back up, report, then block.

Can I record a phone call with the harasser?

Be careful. RA 4200, the Anti-Wire Tapping Act, restricts secret recording of private communications without authorization from all parties, subject to specific exceptions. Text messages and chats you received are usually easier to preserve safely through screenshots and exports. For calls, get proper legal or law enforcement guidance before relying on recordings.

What if the harasser uses a fake account?

Preserve the fake account’s URL, username, profile photo, bio, posts, mutual connections, messages, and any clues connecting it to a real person. Do not try to hack or trick the account into revealing private information. Law enforcement may need platform data or cyber warrants to pursue attribution.

Can I report cyber harassment even if I live abroad?

Yes, Filipinos abroad and foreigners dealing with Philippine-related harassment may still preserve evidence and prepare sworn statements. If documents are executed abroad for use in the Philippines, consular notarization or apostille requirements may apply depending on the country and document type.

Where should I report cyber harassment: PNP or NBI?

Both the PNP Anti-Cybercrime Group and the NBI Cybercrime Division handle cybercrime-related complaints. The best office may depend on location, urgency, type of offense, and available evidence. You may also file a complaint with the city or provincial prosecutor, especially when you already have a prepared complaint-affidavit and supporting documents.

Do I need a lawyer before reporting to the NBI or PNP?

You can report to law enforcement without a lawyer. However, a lawyer can help organize evidence, identify the correct offense, prepare the complaint-affidavit, avoid privacy or wiretapping mistakes, and assess whether civil, criminal, administrative, workplace, school, or protection-order remedies may apply.

Can I post the harasser’s name and screenshots online to warn others?

This can be risky. Public posting may expose private data, spread defamatory claims, or further distribute intimate images. It may also alert the harasser to delete evidence. For legal purposes, it is usually safer to preserve evidence privately and submit it to the proper platform, law enforcement office, prosecutor, school, employer, or court.

How long does a cyber harassment case take in the Philippines?

Timelines vary widely. Initial reporting may be done in a day, but investigation, platform data requests, forensic examination, subpoena or warrant processes, preliminary investigation, and court proceedings can take months or longer. Cases involving anonymous accounts, foreign platforms, suspects abroad, or deleted content usually take more time.

Key Takeaways

Preserve digital evidence before blocking, deleting, replying, or posting publicly.
Good screenshots show the content, account, date, platform, URL, and surrounding context.
Keep original files and devices; use copies for printing or marking.
Save URLs, usernames, profile links, email headers, chat exports, screen recordings, and witness screenshots.
Make a clear timeline and evidence folder.
Avoid hacking back, using spyware, secretly recording private calls without legal guidance, or publicly dumping private information.
Cyber harassment may involve RA 10175, RA 11313, RA 9995, RA 9262, the Revised Penal Code, and other Philippine laws depending on the facts.
Prompt preservation and reporting matter because platform logs, posts, usernames, and messages can disappear quickly.