How to Report Online Sexual Exploitation of Children (OSEC) in the Philippines

This article explains the legal framework, reporting channels, step-by-step procedures, evidentiary rules, privacy safeguards, and post-report services for OSEC cases in the Philippines. It is written for parents/guardians, educators, social workers, technology platforms, financial service providers, and legal practitioners.

1) What counts as OSEC?

Online Sexual Exploitation of Children (OSEC) is an umbrella term for offenses where a child (any person below 18, or over 18 but unable to fully care for or protect themselves) is sexually abused, exploited, or groomed using computers, mobile devices, or the internet. Common modalities include:

Producing, distributing, possessing, or accessing child sexual abuse or exploitation material (CSAEM) (often called “child sexual abuse material” or “child pornography” in older laws).
Live-streamed sexual abuse for payment or tips.
Grooming and enticement via chat, games, or social media.
Sexual extortion (“sextortion”)—threatening to share sexual images unless money or further images are provided.
Commercial sexual exploitation facilitated online (e.g., bookings, advertising).
Voyeurism, non-consensual sharing of intimate images of a child, deepfakes depicting a child, or morphing a child’s face onto sexual content.

2) Core Philippine laws and rules

Republic Act (RA) 11930 — Anti-Online Sexual Abuse or Exploitation of Children and Anti-Child Sexual Abuse or Exploitation Materials Act of 2022 (Anti-OSAEC & Anti-CSAEM Act).
- Defines OSAEC/CSAEM; imposes duties on electronic service providers (ESPs), internet intermediaries, and financial intermediaries to prevent, detect, preserve and report OSEC activities; requires blocking/takedown of CSAEM and data preservation.
- Creates/strengthens the Inter-Agency Council Against OSAEC and CSAEM and clarifies roles of the PNP, NBI, DOJ, DICT/CICC, DSWD, DepEd, etc.
- Provides victim-centered procedures, confidentiality, and strong penalties; prohibits criminalization of child victims.
RA 9775 — Anti-Child Pornography Act of 2009.
- Criminalizes producing, distributing, possessing, or accessing child sexual abuse material; mandates reporting by ISPs and content hosts.
RA 10175 — Cybercrime Prevention Act of 2012, and the Supreme Court “Rules on Cybercrime Warrants” (A.M. No. 17-11-03-SC).
- Enables Warrants to Disclose Computer Data (WDCD), Intercept Computer Data (WICD), and Search, Seize & Examine Computer Data (WSSECD)—critical for lawful evidence gathering from platforms/ISPs.
RA 9208, as amended by RA 10364 and RA 11862 — Expanded Anti-Trafficking in Persons Act.
- Covers online-facilitated trafficking and child prostitution; provides 1343 Actionline reporting and victim protection.
RA 7610 — Special Protection of Children Against Abuse, Exploitation and Discrimination Act.
- Establishes criminal liability for child abuse/exploitation and mandates reporting by public officers.
RA 9995 — Anti-Photo and Video Voyeurism Act (applies to minors too); RA 11313 Safe Spaces Act (online sexual harassment).
RA 10173 — Data Privacy Act (DPA).
- Allows lawful processing and disclosure to authorities for compliance with legal obligations and law enforcement; still requires data minimization and secure handling.

Key principle: A child who appears to “consent” in an online sexual act is still a victim. Adults who produce, solicit, possess, distribute, pay for, or profit from CSAEM or OSAEC are criminally liable.

3) Where to report (official & practical channels)

You may use any one or several of the channels below; multiple reports are acceptable and sometimes helpful.

Emergency or child at immediate risk
- Dial 911 (national emergency).
- Nearest PNP station or barangay; request Barangay VAWC Desk assistance for children (they coordinate with police and social workers).
Law-enforcement & specialized units
- PNP Anti-Cybercrime Group (ACG) — for online offenses, digital evidence, takedowns.
- PNP Women and Children Protection Center (WCPC) — for child-related and trafficking cases.
- NBI (e.g., Cybercrime Division; Anti-Human Trafficking Division) — complex or covert online operations.
Inter-agency & hotlines
- 1343 Actionline Against Human Trafficking (IACAT/IACAT Task Forces) — accepts OSEC/trafficking tips and coordinates referrals.
- DSWD — local City/Municipal Social Welfare and Development Office (C/MSWDO) for intake, rescue, shelter, psychosocial services.
- Bantay Bata “163” — child-protection hotline with referral to authorities and social workers.
Department of Justice
- Office of Cybercrime (DOJ-OOC) — central authority for mutual legal assistance and coordination with platforms/foreign partners; accepts reports and referrals from agencies and the public.
Cyber regulators / coordination bodies
- DICT / CICC — telecoms/data coordination, blocking requests, incident reporting by networks and platforms.
Schools, LGUs, and healthcare
- Guidance offices, child protection committees, school administrators, LGU child protection councils, public health units—all can intake and refer cases to police/DSWD.
Platforms & payment providers
- Report directly via in-app reporting tools (Facebook, TikTok, YouTube, Discord, etc.) and e-wallet/bank abuse channels; select categories like “child sexual exploitation” to trigger expedited review and law-enforcement referral.

If the material is hosted abroad, still report. Local agencies coordinate with foreign partners and international hotlines; platforms are obligated to act worldwide.

4) Step-by-step: How to report safely and effectively

A. Immediate safety first

Do not confront the offender or alert them.
Preserve the child’s safety: ensure the child is physically safe; stop further contact; move devices out of reach if necessary.
Call 911 if there is ongoing abuse, planned meetings, threats, or self-harm risk.

B. Preserve—but don’t proliferate—evidence

Do not reshare or forward CSAEM; possession/distribution is illegal except for law-enforcement handling.
Capture metadata-rich evidence without altering files:
- Take screenshots of chats/profiles/IDs/URLs, showing timestamps and usernames.
- Record URLs (full links), post IDs, group names, payment handles, wallet IDs, transaction refs, and IP/email headers if available.
- If files already exist on your device, do not edit or rename them.
- Write a quick incident log: who, what, when, where, how you found it; include timezone (PHT).
Seize devices only if you have lawful authority (e.g., parent/guardian for a child’s device). Otherwise, do not access someone else’s account/device without consent or a warrant.

C. Make the report

Provide:
- Child’s details (only as needed): name/alias, age, contact, current location, immediate safety concerns.
- Suspect information (usernames, platforms, numbers, emails, photos, known addresses).
- Exact dates/times (PHT) and platforms used.
- Payment flows (wallets, bank accounts, remittance, in-game currencies).
- Any known helpers (recruiters, “runners”, camera operators).
Ask for a reference number and the officer/desk name.
For platforms: use the child exploitation category; attach screenshots/links; request preservation and law-enforcement referral.

D. After reporting

Follow up with the case reference.
Coordinate with DSWD/C/MSWDO for psychosocial support, shelter, medical exam, and legal assistance.
For schools, trigger Child Protection Policy mechanisms and Bullying Prevention protocols as applicable.
If the child’s images persist online, request takedown and de-indexing through platforms and search engines; law enforcement can escalate.

5) Special duties of companies and professionals

A. Electronic service providers & platforms

Under RA 11930 and RA 9775, providers must:

Adopt and enforce child-safety policies, age-appropriate design, proactive detection where lawful, and reporting pipelines.
Promptly report detected OSEC/CSAEM to competent Philippine authorities and, where applicable, international hotlines; preserve data for lawful requests.
Block or remove CSAEM and implement hash-matching/URL blocking consistent with law.
Maintain trust & safety teams trained to handle OSEC and cooperate with warrants.

Failure to report/preserve can incur penalties and administrative sanctions.

B. Financial intermediaries and VASPs/e-wallets

Flag and report suspicious transactions linked to OSEC/trafficking under AML/CFT rules; preserve KYC and transaction data for subpoenas/warrants.
Implement monitoring typologies (small frequent transfers, unusual foreign tips, payments linked to suspect handles).

C. Schools, LGUs, and healthcare providers

Activate Child Protection Committees, mandatory incident logs, and referral to PNP/DSWD.
Maintain confidential records and avoid unauthorized disclosure under the DPA except as allowed for child protection and law-enforcement.

6) Investigations: warrants, process, and child-friendly justice

Cybercrime Warrants (WDCD, WICD, WSSECD) enable disclosure, interception (where lawful), and seizure/examination of computer data. Requests must show probable cause and specify particularity.
Chain of custody and forensic imaging standards apply; devices/media are handled by trained digital forensic officers.
Victim-sensitive procedures:
- Use the Rule on Examination of a Child Witness (e.g., live-link testimony, in-camera proceedings, screens, support persons).
- No child should repeatedly recount trauma; use forensic interviews by trained social workers/psychologists; recordings may be used.
- Identity confidentiality: courts and agencies must protect the child’s identity; media publication of identifying details is punishable.
Extraterritoriality & cooperation: Philippine authorities coordinate with foreign platforms, hotlines, and law-enforcement through mutual assistance channels; evidence and warrants can be executed with partner jurisdictions subject to law.

7) Remedies and protections for children and families

Immediate protection: safety planning, temporary shelter, medical care, psychological first aid, trauma-informed therapy.
Legal remedies: prosecution of offenders; asset restraint/forfeiture of proceeds; restitution and civil damages.
Online content removal: takedowns, hash-blocking, search de-indexing; repeat delisting requests if mirrors reappear.
School measures: anti-bullying interventions, discipline for student-offenders consistent with due process, digital citizenship education.

8) Evidence checklist (practical)

When you report, try to provide:

Screenshots: chats, profiles, usernames, timestamps, and platform URLs.
Links/IDs: post IDs, group/channel names, invite links, email addresses, phone numbers.
Files (if already in your possession): keep originals, do not edit/rename; store on a secure drive for law enforcement.
Payments: wallet handles, bank account names/numbers, transaction IDs, receipts, remittance slips.
Devices: make, model, IMEI/serial, who used them, passcodes (if voluntarily provided by the owner).
Witnesses: names/contacts of teachers, neighbors, relatives, classmates who observed grooming/abuse.
Child details: age, school/year level, languages, special needs, safety concerns.

Do not circulate the material further. Hand it only to authorities. If in doubt, bring the device without opening files and let digital forensics handle it.

9) Privacy, consent, and safe handling of data

Minimal disclosure: share only what’s necessary for the report and child protection.
Secure storage: password-protect logs, use encrypted drives where possible, avoid sending files through unsecured channels.
Informed involvement: obtain the child’s assent and the guardian’s consent for services when safe and appropriate; where guardians are suspects, DSWD or a temporary custodian may consent.
Media & school publications: strictly avoid identifying details (name, face, address, school, unique circumstances).

10) Common scenarios & what to do

A classmate is being groomed in a game chat
- Save screenshots and the gamer tags; inform the school Child Protection Committee and parents/guardians (unless they’re suspects); report to PNP-ACG/WCPC and DSWD.
A parent receives a sextortion threat
- Tell the child it’s not their fault. Do not pay. Preserve chats/handles; report to police and platform; request account preservation; implement safety measures (block/report, change passwords, secure accounts).
A teacher finds a student’s intimate images circulating
- Treat the student as a victim; do not discipline the student for “immorality.” Follow school policy: confiscate devices only as allowed, report to PNP-ACG/WCPC, DSWD, and initiate takedown requests.
An e-wallet flags repeated micro-transactions to a suspect handle
- File suspicious transaction reports; preserve logs; contact law enforcement per RA 11930/AMLC rules; do not tip off the suspect beyond legal requirements.

11) Sample reporting template (you can copy-paste and fill in)

Subject: Report of suspected OSEC/CSAEM Your name & role: (parent/guardian/teacher/social worker/neighbor/platform T&S/financial institution) Contact details: (phone/email) Child victim: (initials/age/sex; current location; immediate safety concerns) Incident summary: (narrative of what happened, including dates/times in PHT) Platforms used: (app/site), usernames/IDs/URLs Evidence preserved: (screenshots, device, transaction records; where securely stored) Suspect(s): (name/alias, contact, known address) Payments: (wallets, bank accounts, remittances, amounts, dates) Other witnesses/agencies informed: (school, barangay, DSWD) Requested actions: (rescue, preservation letters, takedown, investigation, safety planning)

Attach screenshots separately. If you must transmit files, ask the receiving agency for a secure channel.

12) Frequently asked legal questions

Q1: Can I report anonymously? Yes. Anonymous tips are accepted, especially via hotlines and online portals. Providing contact details helps investigators reach you for clarifications, but it’s not strictly required.

Q2: Will I get in trouble for possessing a screenshot? Possession/distribution of CSAEM is illegal, but good-faith reporting with minimal necessary handling and prompt turnover to authorities is recognized. Do not store or share more than necessary; deliver it quickly to law enforcement.

Q3: Is the child liable if they sent images? No. Children in OSEC contexts are victims, not offenders. Focus is on abusers, facilitators, and profiteers.

Q4: Can schools discipline bullies who circulate a minor’s image? Yes—subject to due process—and must also report to authorities. Where minors are offenders, juvenile justice and diversion principles apply, but CSAEM circulation is serious and mandates intervention.

Q5: What if the suspect is a parent/relative? Involve DSWD immediately; consider protective custody and safety planning; avoid notifying the suspect before coordinated action.

13) Practical do’s & don’ts

Use precise timestamps (PHT), keep an incident log, and ask agencies to preserve platform data.
Coordinate early with DSWD for trauma-informed care.
Involve school Child Protection Committees when the child is a student.
Seek pro bono legal aid or PAO for victims when needed.

Don’t

Don’t circulate, forward, or “test-upload” images to confirm links.
Don’t conduct your own “sting” operations.
Don’t shame or blame the child.
Don’t promise confidentiality you cannot legally keep; explain who must know (e.g., police, DSWD, court).

14) Quick reference (memorize these concepts)

911 — emergencies/active harm.
PNP-ACG / PNP-WCPC / NBI — primary investigative bodies.
1343 Actionline — trafficking/OSEC tips and referrals.
DSWD / C-MSWDO — child protection, rescue, shelter, psychosocial support.
Anti-OSAEC & Anti-CSAEM Act (RA 11930) — mandates reporting, blocking, data preservation, and victim-centered handling.
Cybercrime Warrants — WDCD, WICD, WSSECD (probable cause; particularity).

Final note

Reporting OSEC saves children from immediate harm and prevents future abuse. If you even suspect online sexual exploitation, act now: preserve essential evidence, report through any of the channels above, and involve social workers to protect the child.