Online threats can feel confusing because they may look like “just chats,” “just posts,” or “just DMs,” but Philippine law can treat them as real criminal conduct when they threaten harm, extort money, intimidate, harass, stalk, shame, or expose someone online. If you are trying to report online threats against someone in the Philippines, the most important things are to preserve the digital evidence properly, identify the right reporting office, and prepare a clear written account of what happened.

What Counts as an Online Threat in the Philippines?

An online threat is any message, post, comment, email, chat, video, caption, or other digital communication that makes another person fear harm to their person, family, reputation, property, privacy, or safety.

Common examples include:

“I will kill you.”
“I know where your child studies.”
“Pay me or I will post your private photos.”
“I will go to your house tonight.”
“I will ruin your reputation online.”
“I will leak your address and ID.”
Repeated messages saying the person is being watched or followed.
Threats sent through fake accounts, dummy accounts, anonymous numbers, gaming platforms, dating apps, or group chats.

The threat does not have to be written in perfect legal language. Investigators will look at the words used, the surrounding circumstances, the relationship of the parties, the history of harassment, whether the sender demanded money or a condition, and whether the victim reasonably felt unsafe.

Main Philippine Laws That May Apply

Revised Penal Code: Grave Threats, Light Threats, and Coercion

The core criminal law is still the Revised Penal Code. Under Article 282, grave threats happen when a person threatens another with a wrong amounting to a crime against the person, honor, or property of the victim or the victim’s family. Republic Act No. 10951 updated the fine for grave threats not subject to a condition to up to ₱100,000, aside from imprisonment. (Supreme Court E-Library)

Article 285 covers other light threats, including threatening another with a weapon, threats made in the heat of anger under certain circumstances, and oral threats to do harm not amounting to a felony. RA 10951 updated the fine for other light threats to up to ₱40,000. (Supreme Court E-Library)

Article 286 on grave coercions may apply when the threat or intimidation is used to force someone to do something against their will or stop them from doing something lawful. RA 10951 updated the penalty to prision correccional and a fine of up to ₱100,000. (Supreme Court E-Library)

In simple terms:

Situation	Possible offense
“I will kill you” or “I will burn your house”	Grave threats
“Send money or I will hurt you”	Grave threats with condition; possibly robbery/extortion-related charges depending on facts
Repeated intimidation to force someone to resign, leave, apologize, pay, or obey	Coercion or cyber-related offense
Annoying or humiliating conduct that may not clearly be a threat	Unjust vexation or civil damages, depending on facts

Cybercrime Prevention Act: When the Threat Is Sent Online

Republic Act No. 10175, the Cybercrime Prevention Act of 2012, is important because Section 6 covers crimes under the Revised Penal Code and special laws when they are committed “by, through and with the use of information and communications technologies.” The law provides that the penalty may be one degree higher when the crime is committed through ICT. (Lawphil)

This is why a threat sent through Messenger, Viber, Telegram, TikTok, Instagram, X, email, SMS, gaming chat, or another online platform should not be dismissed as informal. The medium itself can affect how the case is handled and penalized.

Cybercrime cases under RA 10175 fall under the jurisdiction of the Regional Trial Court, including violations committed by a Filipino national regardless of the place of commission. (Lawphil)

Safe Spaces Act: Gender-Based Online Threats and Harassment

Republic Act No. 11313, the Safe Spaces Act or “Bawal Bastos Law,” specifically covers gender-based online sexual harassment. Section 12 includes online acts that use ICT to terrorize or intimidate victims through physical, psychological, or emotional threats, unwanted sexual, misogynistic, transphobic, homophobic, or sexist remarks, cyberstalking, incessant messaging, identity impersonation, posting lies to harm reputation, and sharing sexual photos, videos, or recordings without consent. (Supreme Court E-Library)

This law is especially relevant when the threat involves:

Sexual humiliation
Threats to leak intimate images
Misogynistic, sexist, homophobic, or transphobic attacks
Cyberstalking
Repeated private messages meant to intimidate
Fake accounts used to shame or silence someone

The Safe Spaces Act also states that the PNP Anti-Cybercrime Group receives complaints for gender-based online sexual harassment and that the CICC coordinates with PNP-ACG on appropriate measures. (Supreme Court E-Library)

Anti-VAWC Law: Threats by a Partner, Ex-Partner, or Person With a Child in Common

Republic Act No. 9262, the Anti-Violence Against Women and Their Children Act of 2004, may apply when online threats are made by a husband, former husband, boyfriend, ex-boyfriend, live-in partner, former partner, or a person with whom the woman has or had a sexual or dating relationship, or with whom she has a common child.

RA 9262 covers psychological violence, not just physical violence. It also provides protection orders: Barangay Protection Order (BPO), Temporary Protection Order (TPO), and Permanent Protection Order (PPO). A protection order is meant to prevent further violence, safeguard the victim, reduce disruption in daily life, and help the victim regain control. (Supreme Court E-Library)

A BPO may be issued by the Punong Barangay on the date of filing after an ex parte determination, meaning the barangay may act based on the applicant’s side first because protection is urgent. A TPO may be issued by the court on the date of filing and is effective for 30 days. (Supreme Court E-Library)

Anti-Photo and Video Voyeurism Act

Republic Act No. 9995, the Anti-Photo and Video Voyeurism Act of 2009, may apply when the online threat involves intimate photos or videos. The law covers capturing sexual images or private areas without consent, and also selling, copying, reproducing, broadcasting, sharing, showing, or exhibiting such material through the internet, mobile phones, and similar means without written consent. (Lawphil)

This is relevant when someone says:

“I will post your sex video.”
“I will send your private photos to your family.”
“Pay me or I will upload this.”
“I will create a group chat and share your nudes.”

Data Privacy Act and Doxxing

Republic Act No. 10173, the Data Privacy Act of 2012, may be relevant when the threat includes exposing personal information such as address, phone number, school, workplace, government ID, medical details, bank details, or private records. The law penalizes unauthorized processing of personal information and sensitive personal information. (National Privacy Commission)

Not every act of “doxxing” automatically becomes a Data Privacy Act criminal case, but if personal data is collected, used, disclosed, or spread without lawful basis, the National Privacy Commission and law enforcement may become relevant depending on the facts.

Civil Code Remedies

Even when a specific criminal charge is difficult to prove, the Civil Code may still matter. Article 26 of the Civil Code requires every person to respect the dignity, personality, privacy, and peace of mind of others. It recognizes causes of action for damages, prevention, and other relief for acts such as meddling with private life, disturbing family relations, intriguing to alienate a person from friends, and vexing or humiliating another based on personal conditions. (Lawphil)

This can matter in cases involving humiliation, privacy invasion, reputational attacks, and harassment that may support a civil claim for damages or injunctive relief.

Where to Report Online Threats in the Philippines

1. Nearest Police Station

If there is immediate danger, physical stalking, a credible threat to go to someone’s house, school, or workplace, or a threat against a child, the nearest police station is usually the fastest first stop. The police can blotter the incident, assess urgent safety risks, and refer the case to the proper unit.

For women and children, ask for the Women and Children Protection Desk (WCPD) if the threat involves domestic violence, sexual threats, minors, or abuse by a partner or former partner.

2. PNP Anti-Cybercrime Group

The PNP Anti-Cybercrime Group (PNP-ACG) handles cybercrime and cyber-related offenses. It is usually the practical office for threats made through social media, messaging apps, fake accounts, email, websites, or other online systems.

PNP-ACG may help with:

Receiving cybercrime complaints
Evaluating screenshots and URLs
Assisting in cyber-related investigation
Referring or coordinating with prosecutors
Seeking cybercrime warrants when legally justified

3. NBI Cybercrime Division

The NBI Cybercrime Division (CCD) also receives complaints and requests for investigation from the general public. The NBI Citizen’s Charter lists the process for investigative assistance: the complainant proceeds to CCD, files a complaint or request for investigation, undergoes preliminary interview and initial investigation, executes sworn statements or submits prepared affidavits, and submits supporting documents; the listed government fees are none. (National Bureau of Investigation)

The NBI route is commonly used when:

The suspect is anonymous or using dummy accounts
The case involves multiple platforms
The victim needs technical investigation
The threat involves extortion, intimate images, identity theft, or hacking
The complainant wants an NBI investigation record

4. DOJ Office of Cybercrime

The Department of Justice Office of Cybercrime (DOJ-OOC) was created under RA 10175 and is the central authority for cybercrime-related matters, including international cooperation. It may act on complaints or referrals, cause investigation and prosecution of cybercrimes, and issue preservation orders addressed to service providers. (Department of Justice)

This is important when evidence or account data is held by foreign platforms, such as Meta, Google, X, TikTok, Telegram, Discord, or overseas email providers.

5. Barangay

A barangay report may be useful when:

The victim and suspect live in the same barangay or nearby area
The threat is connected to a neighborhood dispute
The victim needs a blotter-like local record
The matter involves VAWC and the victim needs a Barangay Protection Order

However, barangay conciliation is not always required before going to police or prosecutors. Under Katarungang Pambarangay rules, offenses punishable by imprisonment exceeding one year or a fine over ₱5,000 are outside mandatory barangay conciliation, and urgent legal action may also be exempt. (Lawphil)

For serious online threats, threats of death, sexual extortion, threats against children, VAWC, or ongoing harassment, it is usually better to report directly to police, PNP-ACG, NBI, or the prosecutor rather than waiting for barangay mediation.

Step-by-Step Guide to Reporting Online Threats

Step 1: Preserve the Evidence Before Blocking or Deleting

Do this first, if it is safe:

Take screenshots of the threat.
Include the sender’s profile name, username, handle, account link, phone number, or email address.
Capture the date and time visible on the device.
Screenshot the full conversation, not only the worst line.
Copy the URL of the profile, post, comment, group, or video.
Save the original messages if possible.
Export the chat history if the app allows it.
Record the screen scrolling through the account and message thread.
Save photos, videos, voice notes, emails, headers, payment demands, and call logs.
Do not edit, crop, annotate, or beautify the evidence copy that will be submitted.

Screenshots can be useful, but investigators and courts may ask how they were obtained and whether they truly reflect the original electronic communication. The Rules on Electronic Evidence provide that an electronic document is admissible if it complies with the rules on admissibility under the Rules of Court and related laws. (Lawphil)

Step 2: Write a Clear Timeline

Make a simple timeline with:

First date of threat
Platform used
Exact words or summary of the threat
Name or account used by the sender
Whether the victim knows the sender personally
Any previous incidents
Any demand for money, apology, meeting, sexual favor, silence, or action
Whether the sender knows the victim’s home, school, workplace, family, or routine
Whether the threat was public or private
What the victim did afterward

A timeline helps investigators understand whether the incident is a one-time angry message, a repeated pattern of harassment, a credible safety threat, or an extortion scheme.

Step 3: Identify the Victim and Your Role

If you are reporting for someone else, be ready to explain:

Your relationship to the threatened person
How you saw the threat
Whether the victim knows you are reporting
Whether the victim is a minor, elderly person, person with disability, employee, student, partner, or family member
Whether you have personal knowledge or only received screenshots from someone else

A third party can report information to authorities, especially if the threat is serious or involves a child. But for a criminal complaint to move forward, investigators often need the victim’s own sworn statement, unless the victim is a minor, incapacitated, unavailable, or the law allows another qualified person to act.

Step 4: Prepare IDs and Documents

Bring or prepare digital and printed copies of:

Document or item	Why it matters
Valid government ID of complainant	Confirms identity
Victim’s ID, if available and appropriate	Confirms victim identity
Screenshots and printouts	Initial evidence
URLs, usernames, phone numbers, email addresses	Helps trace accounts
Chat export or downloaded data	Stronger than isolated screenshots
Affidavit or written narrative	Basis of complaint
Witness statements	Supports credibility
Medical, psychological, school, workplace, or barangay records	Shows impact or urgency
Prior police blotter, barangay blotter, or protection order	Shows pattern
Proof of relationship, if VAWC	Helps establish RA 9262 context
Birth certificate or guardianship proof for minors	Shows authority to act

The DOJ’s requirements for filing a complaint for preliminary investigation include an investigation data form, a complaint-affidavit or sworn statement of the complainant or victim, and supporting affidavits and documents. (Department of Justice)

Step 5: File the Report With the Proper Office

You may report to:

The nearest police station for urgent safety.
PNP-ACG for cybercrime investigation.
NBI Cybercrime Division for investigative assistance.
DOJ-OOC for cybercrime-related referrals or matters involving preservation and international coordination.
The barangay for BPOs in VAWC cases or local records.
The prosecutor’s office for criminal complaint filing, especially when evidence is already organized.

For many online threat cases, the practical path is:

Preserve evidence.
Report to police, PNP-ACG, or NBI.
Execute a sworn statement or complaint-affidavit.
Submit evidence.
Investigator evaluates and may request more documents.
Case may be referred to the prosecutor.
Prosecutor determines whether to file charges in court.
If filed, the case proceeds before the proper court.

Step 6: Ask About Preservation of Platform Data

Online evidence can disappear quickly. The user may delete messages, deactivate accounts, change usernames, or hide posts. Platforms may also retain certain data only for limited periods depending on their internal policies.

For serious cases, ask investigators whether a preservation request or cybercrime warrant process is appropriate. Preservation is different from public screenshots. It seeks to preserve data held by the service provider so it is not lost while lawful process is pursued.

Step 7: Also Report the Content to the Platform

Reporting to Facebook, Instagram, TikTok, X, YouTube, Telegram, Discord, Viber, or the relevant platform may help remove harmful content or suspend the account. But do this after preserving evidence. If you report first and the content disappears before screenshots or URLs are saved, the criminal complaint may become harder to prove.

Platform reports are not a substitute for police, NBI, or prosecutor action when the threat is serious.

What Happens After You File a Report?

The process varies, but a typical case may involve:

Stage	What usually happens	Practical timeline
Intake	Complaint is received; forms are filled out	Same day
Initial interview	Investigator asks what happened and reviews screenshots	Same day to a few days
Sworn statement	Victim and witnesses execute affidavits	Same day to several days
Evidence evaluation	Investigator checks if more documents or technical steps are needed	Days to weeks
Referral to prosecutor	Complaint may be filed for preliminary investigation	Weeks, depending on completeness
Preliminary investigation	Prosecutor evaluates probable cause	Varies by office and complexity
Court filing	If probable cause is found, an Information may be filed	Varies
Trial	Evidence and witnesses are presented	Often months to years

Common bottlenecks include incomplete screenshots, missing URLs, anonymous accounts, uncooperative platforms, foreign-hosted data, unclear identity of the offender, and victims who are afraid to execute affidavits.

Special Situations

If the Threat Is Against a Child

If the threatened person is a minor, act faster. Threats involving sexual exploitation, coercion, grooming, or intimate images of children may involve child protection laws, including RA 11930, the Anti-Online Sexual Abuse or Exploitation of Children and Anti-Child Sexual Abuse or Exploitation Materials Act, and other child protection statutes. (Lawphil)

Report to police, WCPD, PNP-ACG, NBI, or appropriate child protection authorities. Do not forward, repost, or circulate any sexual image of a minor, even to “warn people,” because possession or distribution of child sexual abuse material can itself create legal consequences.

If the Suspect Is a Partner or Ex-Partner

If the threat comes from an intimate partner or former partner, do not treat it as only a cybercrime issue. Consider RA 9262 protection remedies. A BPO may help stop immediate threats of physical harm, while court protection orders can include broader reliefs such as prohibiting harassment, contacting, or communicating with the victim. (Supreme Court E-Library)

If the Threat Involves Private Photos or Videos

Preserve evidence of the threat, but do not spread the intimate material. Save it securely only for reporting purposes. RA 9995 specifically penalizes unauthorized sharing or exhibition of sexual photos or videos through the internet, phones, and similar means. (Lawphil)

If the Sender Is Anonymous

A dummy account does not make the case hopeless, but it makes evidence preservation more important. Save:

Profile URL
User ID if visible
Screenshots of account photos and posts
Mutual friends
Messages
Linked phone numbers or emails, if visible
Payment account, e-wallet, bank details, or delivery details if the threat involves extortion
Any writing style, nickname, or personal detail connecting the account to a real person

Do not rely only on “I know it was him/her.” Investigators need facts that connect the online account to the suspect.

If the Victim Is Abroad

A Filipino abroad, an OFW, or a foreigner outside the Philippines may still preserve evidence and coordinate with Philippine authorities. If the complaint-affidavit will be executed abroad, it may need to be notarized before a Philippine Embassy or Consulate, or notarized locally and apostilled depending on the country and the document’s intended use in the Philippines.

If evidence is in a foreign language, prepare accurate English or Filipino translations. For serious cybercrime cases involving foreign platforms or foreign suspects, coordination may involve the DOJ Office of Cybercrime because it functions as a central authority for cybercrime-related international cooperation. (Department of Justice)

If the Victim Is a Foreigner in the Philippines

A foreigner in the Philippines can report online threats to Philippine law enforcement. The key issue is not citizenship but whether Philippine authorities have jurisdiction, whether the act occurred in the Philippines or affected someone in the Philippines, whether the suspect is in the Philippines, and whether evidence can be obtained.

Foreigners should keep copies of passport bio page, visa or entry stamp if relevant, local address, and contact details when filing a report.

Common Mistakes That Make Online Threat Cases Harder

Deleting the Conversation Too Soon

Blocking may be necessary for safety, but deleting messages before saving them can weaken the case. Preserve first, then block if needed.

Sending Only One Cropped Screenshot

A cropped screenshot may hide context. Investigators usually need the full thread, profile, date, time, and account details.

Posting the Accused Person’s Information Online

Publicly posting the alleged sender’s name, address, ID, school, workplace, or family details may create new legal problems, including privacy, defamation, or harassment issues. Report to authorities instead of starting a public doxxing campaign.

Negotiating With an Extortionist

If the threat involves money, private photos, or blackmail, negotiation can escalate the demands. Preserve the demand and report it.

Relying Only on Barangay Mediation for Serious Threats

Barangay settlement may help in minor neighborhood disputes, but death threats, sexual threats, cyberstalking, VAWC, threats against children, and extortion should be reported to law enforcement or prosecutors promptly.

Waiting Too Long

Online data can disappear. Accounts can be deleted. CCTV, call logs, and platform logs may have limited retention. Early reporting improves the chance of preserving evidence.

Practical Evidence Checklist

Before going to PNP-ACG, NBI, police, barangay, or the prosecutor, prepare:

Full name and contact details of complainant
Full name and details of victim, if different
Full name, username, handle, phone number, email, or known details of suspect
Screenshots of threats
URLs of posts, profiles, comments, videos, or groups
Chat exports or downloaded conversations
Screen recordings showing the account and messages
Copies of voice notes, videos, photos, and attachments
Proof of demands for money or conditions
Proof of relationship, if VAWC
Birth certificate or proof of authority, if reporting for a minor
Witness names and contact information
Written timeline
Prior reports, blotters, or protection orders
Valid IDs
Printed copies and digital copies on a USB drive or secure folder

Frequently Asked Questions

Can I report online threats even if the account is fake?

Yes. A fake or dummy account can still be reported. Save the profile link, screenshots, messages, usernames, photos, mutual connections, phone numbers, payment details, and anything that may connect the account to a real person. The harder part is proving who controls the account.

Can I report online threats against another person?

Yes. You can report what you saw, especially if the threat is serious, public, or involves a child or vulnerable person. However, authorities may still need the victim’s own statement to pursue the case fully, unless another person is legally allowed to act for the victim.

Should I go to the barangay first?

Not always. For serious online threats, cybercrime, VAWC, sexual extortion, child-related threats, or urgent danger, go directly to police, PNP-ACG, NBI, or the prosecutor. Barangay remedies are useful for local records and BPOs in VAWC cases, but they are not a substitute for urgent law enforcement action.

Are screenshots enough evidence?

Screenshots help, but they are stronger when supported by URLs, full conversation threads, chat exports, screen recordings, witness affidavits, original devices, and a clear explanation of how the screenshots were taken. Electronic evidence must still be authenticated under court rules.

What if the person deletes the post after I report it?

If you already saved screenshots, URLs, screen recordings, and timestamps, the deletion does not automatically destroy the case. But early preservation is important. Investigators may also consider preservation requests or lawful processes to obtain platform-held data.

Can someone be arrested immediately for online threats?

It depends. If the threat is ongoing, the suspect is caught in the act, or other legal grounds for warrantless arrest exist, police may act urgently. In many cases, however, the complaint goes through investigation and prosecutor evaluation before a court case proceeds.

What if the threat came from outside the Philippines?

Report it if the victim is in the Philippines, the suspect is Filipino, the harm is connected to the Philippines, or Philippine evidence or witnesses are involved. Cross-border cases are more complicated because platform data and suspects may be abroad, so DOJ-OOC coordination may become relevant.

What if the threat is mixed with insults or defamation?

A message can involve more than one legal issue. Depending on the facts, it may involve grave threats, unjust vexation, cyber libel, Safe Spaces Act violations, Data Privacy Act issues, or civil damages. Preserve the entire conversation so the correct charge can be evaluated.

Can I report threats sent through private messages?

Yes. A threat does not need to be public to be reportable. Direct messages, private chats, emails, SMS, voice notes, and group messages can be relevant evidence.

What if the victim is afraid to file a complaint?

A trusted family member, guardian, witness, social worker, barangay official, teacher, employer, or other concerned person may help bring the matter to authorities, especially in cases involving minors, VAWC, or immediate danger. For the case to move forward, the victim’s statement may still be needed when safe and appropriate.

Key Takeaways

Online threats in the Philippines can be punished under the Revised Penal Code, Cybercrime Prevention Act, Safe Spaces Act, Anti-VAWC Law, Anti-Photo and Video Voyeurism Act, Data Privacy Act, and Civil Code, depending on the facts.
Preserve evidence before blocking, deleting, reporting to the platform, or confronting the sender.
Serious threats should be reported to the police, PNP-ACG, NBI Cybercrime Division, DOJ-OOC, or prosecutor’s office, not handled only through barangay mediation.
For threats by a partner or ex-partner, RA 9262 protection orders may be as important as the criminal complaint.
For threats involving intimate images, do not repost or circulate the material; preserve it securely for authorities.
A clear timeline, full screenshots, URLs, chat exports, IDs, sworn statements, and witness details make the report stronger.
If the suspect is anonymous or abroad, the case may take longer, but early reporting improves the chance of preserving digital evidence.