Quick answer

If someone is demanding money, property, sexual material, a favor, or any other act while threatening harm, exposure, publication, or damage, preserve the evidence and report it immediately. You do not need to wait for the person to carry out the threat or successfully obtain payment.

If there is immediate physical danger, a weapon, a threat against a child, or a crime in progress, move to a safe place and call the nationwide Unified 911 emergency hotline. Do not meet the person, deliver money, or attempt an entrapment operation without law-enforcement direction.

For online blackmail or extortion, report to the Philippine National Police Anti-Cybercrime Group (PNP-ACG), a Regional Anti-Cybercrime Unit, or the National Bureau of Investigation Cybercrime Division (NBI-CCD). The Cybercrime Prevention Act designates both the PNP and NBI as cybercrime law-enforcement authorities.

What counts as blackmail or extortion?

“Blackmail” and “extortion” are commonly used descriptions, but the exact Philippine criminal charge depends on what was threatened, what was demanded, whether anything was taken, how the demand was communicated, and whether digital technology or intimate material was involved.

Possible offenses include:

Grave threats. Article 282 of the Revised Penal Code covers a threat to inflict a criminal wrong upon a person, honor, property, or family. It expressly addresses threats made while demanding money or imposing another condition, whether or not the offender succeeds. The penalty depends partly on the crime threatened, whether the demand succeeded, and whether the threat was made in writing or through an intermediary.
Light threats. Article 283 may apply when the threatened wrong is not itself a crime but is made with a demand for money or another condition.
Grave coercion. Article 286 may apply when violence, threats, or intimidation are used without lawful authority to force someone to do something against their will or prevent a lawful act.
Robbery through intimidation. Article 293 may apply when, with intent to gain, a person takes another’s personal property through violence or intimidation. The distinction between robbery and threats can turn on the timing, nature, and purpose of the intimidation.
Threatening publication for compensation. Article 356 specifically punishes threatening to publish a libel concerning a person or a family member, or offering to prevent such publication in exchange for compensation. As amended by Republic Act No. 10951, the penalty is arresto mayor, a fine of ₱40,000 to ₱400,000, or both.

These provisions appear in the Revised Penal Code, with updated fines in Republic Act No. 10951.

A demand is not automatically extortion merely because it is forceful. A creditor’s good-faith demand for payment, or a warning that lawful court action will be taken, is different from threatening violence, unlawful publication, fabricated accusations, property damage, or another illegal act. The words used and the full context matter.

The Supreme Court has explained that grave threats require a serious, deliberate communication intended to intimidate or be taken seriously. Courts assess the words objectively together with the surrounding circumstances, the parties’ relationship, the manner of communication, and other evidence. See Garma v. People.

If the threat was made online

When an offense under the Revised Penal Code or a special law is committed by, through, or with information and communications technology, Section 6 of the Cybercrime Prevention Act may apply and generally raises the prescribed penalty by one degree. Online conduct may also involve separate offenses such as illegal access, computer-related identity theft, or computer-related fraud.

Philippine jurisdiction may exist even if the sender uses an anonymous account or appears to be overseas—for example, when an element occurred in the Philippines, a relevant computer system was situated here, or the damage was suffered by a person in the Philippines. Identification and prosecution may still require lawful requests to platforms, service providers, or foreign authorities.

Do not assume that deleting, blocking, or reporting an account to the platform will preserve the data needed by investigators. Under the Cybercrime Prevention Act, service providers ordinarily preserve traffic data and subscriber information for at least six months from the transaction. Content data is preserved for six months from receipt of a lawful preservation order, with a possible one-time extension. Report promptly so investigators can consider a preservation request before data disappears.

What to do immediately

1. Protect yourself first

If the person is nearby, knows your present location, has a weapon, threatens immediate violence, or is on the way to your home, school, or workplace:

Go somewhere secure and tell a trusted person.
Call 911 or the nearest police station.
Do not confront or meet the person.
Warn household members, workplace security, or school officials if doing so will improve safety.
Ask the police whether you need an escort, safety plan, or another protective measure.

The Unified 911 system is free and available nationwide for police, fire, medical, and other emergencies.

2. Preserve the evidence before blocking the sender

Keep the original device and original messages whenever possible. Save:

The complete conversation, including earlier messages that explain the context
Screenshots showing the account name, username, date, time, and threat
A screen recording that shows the conversation from the profile or account page
Direct profile, post, file, and message links
Account IDs, usernames, phone numbers, email addresses, and display names
Emails with their full headers
Original photos, videos, audio, voicemail, and files sent by the person
Call logs and details of unrecorded calls
Payment demands, QR codes, wallet addresses, bank details, and cryptocurrency addresses
Receipts, reference numbers, account statements, and proof of any payment
Names and contact details of witnesses
Earlier reports made to the barangay, police, platform, bank, employer, or school

Avoid cropping, annotating, enhancing, or repeatedly converting the only copy. Keep a backup and note when and how each item was obtained. Electronic evidence must ultimately be authenticated, and its integrity and reliability matter under the Rules on Electronic Evidence.

Do not secretly record a private call or conversation without legal advice. The Anti-Wiretapping Act generally requires authorization from all parties to a private communication. Special statutory exceptions exist in limited cases, including recordings by victims made for reporting violations of the child-protection law discussed below.

3. Do not click links or send additional material

An extortionist may send malware, fake login pages, or links intended to take over another account. Do not provide:

Passwords or one-time PINs
Government IDs or selfies with IDs
Additional intimate images
Contact lists
Remote access to a phone or computer
Banking or cryptocurrency credentials

From a device you reasonably believe is secure, change compromised passwords, enable multi-factor authentication, review active sessions, remove unfamiliar recovery details, and preserve security-alert emails.

4. Do not negotiate an operation on your own

Payment does not guarantee deletion, silence, or safety. It can lead to repeated demands. On the other hand, abruptly confronting or provoking a person who poses a physical danger may increase risk.

Preserve the demand, stop making promises, and ask investigators how to handle further contact. Do not arrange a controlled payment, meeting, or entrapment unless law enforcement directs and conducts it.

5. Contact the financial institution immediately if money moved

If you paid through a bank, card, remittance center, cryptocurrency service, or electronic wallet:

Contact the institution using the number or channel on its official website or app.
Report the transaction as connected to extortion or fraud.
Request an urgent review, hold, recall, or restriction if still possible.
Obtain a case or reference number.
Preserve your complaint and the institution’s response.

The Bangko Sentral ng Pilipinas advises consumers to report unauthorized or suspicious transactions to their financial institution immediately. If the institution does not resolve a consumer complaint, it may be escalated through the BSP Consumer Assistance Mechanism. A bank or BSP complaint does not replace a criminal report to law enforcement.

Where to report

PNP or PNP Anti-Cybercrime Group

You may report to the nearest police station. For an online threat, ask for referral to the PNP-ACG or the appropriate Regional Anti-Cybercrime Unit. The Safe Spaces Act expressly directs the PNP-ACG to receive complaints involving gender-based online sexual harassment.

Bring the device containing the original messages, an identification document, your evidence copies, and a written timeline. Ask for:

The blotter or complaint reference number
The investigator’s name and contact details
A receiving copy of documents submitted
Instructions concerning a sworn complaint, device examination, or data-preservation request

National Bureau of Investigation Cybercrime Division

You may file with the NBI Cybercrime Division or an NBI regional office. The NBI’s current citizen procedure includes completing a complaint sheet, undergoing an initial interview, executing sworn statements or submitting prepared affidavits, presenting supporting documents, and—when relevant—allowing examination of the device. The NBI lists this investigative assistance as having no fee. See the NBI Cybercrime Division Citizen’s Charter.

The NBI also maintains an online complaint page and lists the Cybercrime Division at ccd@nbi.gov.ph in its official division directory. An online submission may assist with intake, but follow any instruction to appear, swear to a statement, or present the original evidence.

CICC and DOJ cybercrime channels

For cyber-incident reporting and coordination, the Cybercrime Investigation and Coordinating Center may be reached through DICT’s 1326 channel or 1326@dict.gov.ph, as listed on the DICT contact page. The DOJ Office of Cybercrime also publishes official cybercrime reporting information.

These channels can facilitate assistance or referral, but do not assume that a tip, email, or platform report is already a formally instituted criminal complaint.

Office of the prosecutor

A criminal complaint may be filed with the proper city or provincial prosecution office. Under current DOJ-National Prosecution Service procedures, the filing generally requires a sworn complaint-affidavit, an Investigation Data Form, witness affidavits when applicable, and supporting evidence. The applicable investigation track depends on the offense and prescribed penalty.

Use the DOJ’s official complaint-filing guidance, forms page, and 2024 DOJ-NPS Rules. Confirm the required number of copies and accepted filing channel with the specific prosecution office. Do not assume that an unsigned narrative or ordinary email is a valid complaint-affidavit.

What the complaint-affidavit should contain

State the facts in chronological order and in plain language. Include:

Your name and contact information, subject to any legally available confidentiality protection.
The respondent’s name or all available identifying information. An unknown legal name should not prevent reporting an anonymous account.
Your relationship with the respondent, if any.
The exact demand: money, property, sexual content, resignation, withdrawal of a case, silence, or another act.
The exact threat and who or what was threatened.
Dates, times, locations, platforms, accounts, and phone numbers used.
Whether the demand was met, partly met, or refused.
Every payment, including amount, date, recipient, reference number, and account details.
Whether the person already published, distributed, damaged, accessed, or took anything.
Witnesses and how they learned the facts.
A numbered list of attached evidence.
Earlier reports and their reference numbers.

Separate what you personally saw or received from what another person told you. Do not exaggerate, guess the sender’s identity, alter a quotation, or claim that a screenshot proves more than it actually does.

A police blotter is useful—but usually not the whole case

A blotter entry records that an incident was reported. It may support a timeline and prompt immediate police action, but it is not necessarily the same as a sworn criminal complaint filed for investigation or prosecution.

Likewise, blocking an account, reporting a post, complaining to a barangay, or asking a bank to reverse payment does not necessarily institute a criminal action. Obtain written instructions from the investigator or prosecutor and keep proof of formal filing.

There is no single filing deadline for every form of blackmail or extortion. Prescription depends on the offense, prescribed penalty, applicable special law, dates, and procedural acts that interrupt the period. File as soon as possible rather than attempting to calculate the last day yourself.

Special situations

Threats involving intimate images or videos

A threat to release intimate material may constitute grave threats, coercion, gender-based online sexual harassment, or another offense, depending on the facts.

The Anti-Photo and Video Voyeurism Act prohibits specified acts involving sexual activity or private areas, including unauthorized copying, distribution, publication, broadcasting, showing, or exhibition. Consent to making the recording is not consent to its later copying or distribution. A violation of Section 4 carries imprisonment of three to seven years, a fine of ₱100,000 to ₱500,000, or both.

The Safe Spaces Act also covers gender-based online conduct involving threats, intimidation, cyberstalking, unauthorized sexual media, impersonation, or reputation-harming posts. Its online offense carries prisión correccional in its medium period, a fine of ₱100,000 to ₱500,000, or both.

Preserve only what is necessary for reporting. Do not forward intimate material to friends, post it publicly to “expose” the offender, or make unnecessary copies.

When the victim is under 18

Treat sexual extortion of a child as urgent. Republic Act No. 11930 expressly includes sexual extortion of children within online sexual abuse or exploitation of children. A child’s apparent consent is not a defense.

Report immediately to the police, PNP Women and Children Protection Desk, PNP-ACG, NBI, DSWD, or the city or municipal social welfare and development office. The law allows a complaint to be filed by the child, parents or guardians, certain relatives and officials, or a person with personal knowledge. It also provides protective custody and mandatory services such as shelter, counseling, legal assistance, and medical or psychological care. See the Anti-OSAEC and Anti-CSAEM Act.

Do not circulate or repeatedly download child sexual-abuse material. Preserve the original device and show it directly to the assigned investigator.

When the offender is a spouse, former partner, dating partner, or co-parent

If the victim is a woman and the conduct is committed by a spouse, former spouse, person with whom she has or had a sexual or dating relationship, or person with whom she has a common child, the facts may also fall under the Anti-Violence Against Women and Their Children Act.

Protection orders may prohibit threats, harassment, contact, or approaching specified places. Where the statutory requirements are met:

A Barangay Protection Order is issued on the filing date after an ex parte determination and lasts 15 days.
A court Temporary Protection Order is issued on the filing date after an ex parte determination and lasts 30 days.
A Permanent Protection Order may be issued after notice and hearing and remains effective until revoked by a court.

Ask the barangay VAW desk, police Women and Children Protection Desk, social worker, prosecutor, PAO, or a private lawyer which protection order fits the facts.

Common mistakes to avoid

Paying repeatedly without first seeking safety and investigative advice
Deleting the conversation or account before preserving evidence
Keeping only cropped screenshots without dates, usernames, or context
Publicly accusing a suspected person without reliable identification
Forwarding intimate or child sexual material
Secretly recording private conversations without checking the Anti-Wiretapping Act
Meeting the offender or conducting a private entrapment
Using a compromised device to change passwords
Assuming a platform report, barangay blotter, or email tip is already a formal criminal complaint
Waiting for the offender to carry out the threat before reporting
Relying on promises that payment will permanently delete digital copies

When legal help is urgent

Seek immediate assistance from law enforcement and a Philippine lawyer when:

The threat involves death, serious injury, kidnapping, arson, or a weapon.
The offender knows where you or your children live, study, or work.
Intimate material has been posted or is about to be distributed.
A child is involved.
The offender appears to be a police officer, government official, employer, teacher, or other person with authority over you.
You are being told to withdraw a complaint, lie under oath, destroy evidence, or avoid court.
A large payment, business system, confidential database, or cryptocurrency transfer is involved.
The suspect is overseas or multiple accounts and victims are involved.
You received a subpoena, counter-affidavit, dismissal resolution, or court document with a stated deadline.

A lawyer is not required simply to make an initial police or NBI report. Legal assistance is valuable for preparing a complete affidavit, identifying the correct charges and venue, responding to prosecutor directives, seeking a protection order, or preserving civil claims. If you cannot afford private counsel, ask the Public Attorney’s Office whether you meet its eligibility and merits requirements.

Frequently asked questions

Can I report even if I already paid?

Yes. Preserve the payment records and report every demand, including those made after payment. Payment does not legalize the threat or prevent investigation.

Can I report an anonymous or fake account?

Yes. Provide the profile link, account ID, usernames, phone numbers, payment destination, complete messages, and any other identifiers. Investigators may seek subscriber or traffic data through lawful procedures, but identification cannot be guaranteed.

Must the offender actually publish the information?

Not necessarily. Grave threats expressly recognizes situations in which the offender does not attain the demanded purpose. The precise charge still depends on the words, intent, seriousness, and surrounding facts.

What if the information threatened to be exposed is true?

Truth does not automatically make a coercive demand lawful. Article 356 concerns a threat to publish libel, and Philippine libel law can involve an imputation that is real or imaginary, subject to its elements and defenses. Other threat, coercion, privacy, or special-law offenses may also be relevant. A prosecutor must assess the actual statement, threatened publication, demand, motive, and evidence.

Should I block the person?

Preserve the evidence first. Blocking may be appropriate for safety and peace of mind unless an investigator asks you to preserve a communication channel for a lawful operation. Do not continue engaging merely to collect more evidence.

Will reporting guarantee an arrest or conviction?

No. A report begins documentation and possible investigation. Arrest, prosecution, and conviction depend on lawful evidence, identification, jurisdiction, probable cause or the applicable prosecutorial standard, and proof beyond reasonable doubt at trial.

Is a screenshot enough?

It may be useful, but the complete conversation, original device, account identifiers, links, files, transaction records, and witness testimony can be important for authentication and context. Preserve as much original, unaltered evidence as safely possible.

Official legal and reporting references

This article provides general Philippine legal information, not advice for a specific case. Charges, venue, remedies, deadlines, and evidentiary requirements depend on the actual communications and documents. Official sources and procedures were checked as of July 29, 2026.