Quick answer
If someone demands money, property, sexual acts, access to an account, or another benefit while threatening violence, exposure, humiliation, prosecution, or publication of private material, preserve the evidence and report the matter promptly to the police, the National Bureau of Investigation (NBI), or—when electronic communications are involved—the PNP Anti-Cybercrime Group or NBI Cybercrime Division.
If anyone is in immediate danger, call 911, go to the nearest police station, and move to a safe place. Do not confront the person or arrange a payment or meeting on your own. If investigators propose an entrapment operation, follow their instructions exactly.
Paying does not guarantee that the threats will stop or that files will be deleted. If you have already paid, you can still report the incident.
What counts as blackmail or extortion?
“Blackmail” and “extortion” are commonly used descriptions, but the precise Philippine criminal charge depends on what was threatened, what was demanded, whether the demand succeeded, how the threat was communicated, and the relationship between the parties.
Possible offenses include:
- Grave threats under Article 282 of the Revised Penal Code. This can apply when a person threatens a wrong amounting to a crime against another person’s life, honor, or property—or that of the person’s family. The article expressly covers threats accompanied by a demand for money or another condition.
- Light threats under Article 283. This concerns a conditional threat to commit a wrong that does not itself amount to a crime.
- Robbery through intimidation under Articles 293 and 294. Depending on the facts, obtaining money or property through intimidation may constitute robbery. The Supreme Court has explained that “extortion” may describe a manner of committing robbery rather than a separate offense bearing that formal name.
- Grave coercion under Article 286. This may apply when violence, threats, or intimidation are used to force someone to do something against their will or prevent a lawful act.
- Other offenses involving fraud, unauthorized account access, identity misuse, stalking, harassment, or unlawful disclosure. These may be charged separately when their elements are present.
The controlling text is the Revised Penal Code, as amended, including the penalty adjustments under Republic Act No. 10951.
The legal classification is not determined solely by the label used in a police blotter or complaint. Investigators and prosecutors must assess the complete communications, the nature of the demand, the threatened harm, and whether money or property was actually obtained.
When the threat was made online
If the offense was committed through a computer system, messaging service, social-media platform, email, or another information and communications technology, the Cybercrime Prevention Act of 2012 may apply.
Section 6 of that law covers crimes under the Revised Penal Code and special laws when committed through information and communications technology. Where Section 6 applies, the penalty is generally one degree higher than the penalty under the underlying law. This enhancement is fact-dependent; merely mentioning a phone or computer in the evidence does not automatically establish every element of a cybercrime charge.
The law also authorizes specified investigative measures involving computer data, subject to statutory requirements and judicial warrants where required. Reporting quickly matters because accounts can be deleted and providers may retain different categories of data for limited periods.
Sextortion and threats involving intimate material
“Sextortion” commonly involves a demand for money, more images, sexual activity, or another benefit backed by a threat to release intimate material. Preserve the threat even if the image is fake, altered, AI-generated, or was originally shared consensually.
Under the Anti-Photo and Video Voyeurism Act of 2009, copying, distributing, publishing, broadcasting, showing, or exhibiting covered intimate recordings without the required written consent may be unlawful even when the person originally consented to the recording. Whether a particular image or recording falls within the Act depends on its content, how it was created, the expectation of privacy, and what the accused did with it.
A threat to distribute material may also support charges under the Revised Penal Code even if no upload ultimately occurs. Actual publication can create additional liability.
If the depicted or targeted person is under 18—or the offender believes the person is a child—report the matter immediately. Do not forward, download repeatedly, or show sexual material involving a child to friends or relatives. Preserve the surrounding messages and device, then let trained investigators handle the material. The Anti-Online Sexual Abuse or Exploitation of Children and Anti-Child Sexual Abuse or Exploitation Materials Act specifically addresses online child sexual exploitation, sexual extortion, and child sexual abuse or exploitation material.
Where to report
Immediate or physical danger
Call 911 or proceed to the nearest police station. Tell the officer immediately if the person:
- has a weapon;
- knows your home, school, or workplace;
- is nearby or following you;
- has threatened a child or family member;
- has imposed an imminent deadline; or
- is demanding an in-person meeting.
Ask for the police-blotter or incident-reference details and the investigator’s name and contact information.
Online threats or electronic evidence
You may report to:
- PNP Anti-Cybercrime Group or its regional cybercrime unit. Use the current contact directory on the official PNP-ACG website.
- NBI Cybercrime Division or an appropriate NBI regional or district office. The NBI identifies
ccd@nbi.gov.phas the Cybercrime Division’s email and publishes its services through the official NBI Cybercrime Division page and computer-crime assistance page. - DOJ Office of Cybercrime. Its functions and current reporting information appear on the DOJ Office of Cybercrime page and DOJ cybercrime-reporting page.
Check the official page before relying on a saved phone number or email because government contact details can change. An initial email or platform report may alert an agency, but it may not by itself complete the sworn criminal-complaint process.
Prosecutor’s office
A criminal complaint may be filed with the Office of the City or Provincial Prosecutor having proper venue. The prosecutor, not the complainant, determines the charge supported by the evidence and whether the required standard for filing a case in court is met.
The DOJ’s current checklist for a preliminary-investigation complaint includes an investigation data form, a complaint-affidavit or sworn statement, witness affidavits, and supporting documents, with required copies depending on the number of respondents. Consult the DOJ filing checklist and the prosecutor’s office before filing because the applicable process may be a summary investigation, expedited preliminary investigation, or regular preliminary investigation.
The governing prosecutorial procedures include the 2024 DOJ–National Prosecution Service Rules on Preliminary Investigations and Inquest Proceedings. The proper procedure depends principally on the offense and prescribed penalty; victims do not need to select the procedure themselves.
What to do before blocking or deleting anything
1. Preserve the complete conversation
Capture the entire thread, not just the most frightening message. Include:
- the account name, username, profile URL, phone number, or email address;
- dates and times, with the time zone if relevant;
- the demand and payment deadline;
- the exact threatened harm;
- preceding and succeeding messages;
- attachments, voice messages, missed calls, and call logs; and
- any message showing the offender’s identity or knowledge of private facts.
Screen recordings can help show how a conversation appeared in the application, but they should supplement—not replace—original messages and exported data.
2. Keep original electronic files
Do not crop, annotate, rename, compress, or repeatedly convert the only copy. Preserve original emails with full headers, original images or audio, exported chats, and the device on which the communications were received.
Back up the evidence to a secure location that the offender cannot access. Keep a working copy for review and an untouched copy whenever possible.
3. Record transaction information
If money, cryptocurrency, prepaid credits, or another asset was requested or transferred, preserve:
- bank or e-wallet receipts;
- account names and numbers;
- transaction and reference numbers;
- QR codes and payment links;
- cryptocurrency wallet addresses and transaction hashes;
- deposit slips;
- dates, times, amounts, and currencies; and
- communications with the bank or payment provider.
Contact the provider’s official fraud channel immediately and ask whether a transfer can be held, traced, recalled, or the receiving account restricted. Do not rely on contact details supplied by the blackmailer.
4. Write a chronology
While events are fresh, list what happened in date-and-time order. Identify witnesses and explain how you know the suspected offender. Separate facts you personally observed from assumptions or information supplied by someone else.
5. Secure your accounts
After preserving evidence:
- change compromised passwords using a safe device;
- use unique passwords and enable multifactor authentication;
- sign out unknown sessions;
- review recovery email addresses and phone numbers;
- remove unfamiliar applications or forwarding rules; and
- tell relevant contacts not to respond to suspicious messages.
Do not delete an account before investigators have had an opportunity to advise you if it contains important evidence.
6. Report the account to the platform
Preserve the evidence first, then use the platform’s reporting tools for extortion, impersonation, harassment, or non-consensual intimate imagery. Save the report confirmation. A platform report can help limit distribution, but it is not a substitute for reporting a crime.
What to include in a complaint-affidavit
A useful complaint-affidavit is factual, chronological, and specific. It should ordinarily state:
- your identifying and contact information;
- the respondent’s known name, aliases, usernames, addresses, and contact details;
- how and when contact began;
- the exact demand;
- the threatened act;
- why you believed the threat was serious;
- whether you complied, partly complied, refused, or requested more time;
- every payment or transfer;
- what happened after compliance or refusal;
- the devices, accounts, and platforms involved;
- the witnesses and supporting exhibits; and
- the place or places connected with the communications, demand, payment, and threatened harm.
Mark and describe attachments clearly. Do not guess the offender’s identity or alter the wording of a message to make it sound stronger. State when an account attribution is suspected rather than confirmed.
Affidavits must be properly sworn before an authorized officer. Investigators or the prosecutor’s office can provide filing instructions. The DOJ’s current procedures should be consulted instead of relying on an old affidavit template.
Should you pay or negotiate?
There is no universal response that is safe in every case. As a general rule, avoid sending more money, intimate material, passwords, verification codes, or identity documents. Compliance can lead to repeated demands and does not guarantee deletion or silence.
However, personal safety comes first. If the offender is physically present, armed, or able to carry out an immediate violent threat, do not take steps that unnecessarily provoke the person. Move to safety and contact emergency services.
Do not pretend to agree to a payment, arrange a controlled delivery, install tracking software, or conduct your own entrapment operation without law-enforcement direction. Poorly planned contact can endanger people, compromise evidence, or alert the suspect.
If the offender is a partner, former partner, or household member
When the victim is a woman and the offender is a spouse, former spouse, dating or former dating partner, or a person with whom she has a common child, the conduct may also fall under the Anti-Violence Against Women and Their Children Act, depending on the relationship and evidence of threats, harassment, coercion, or psychological violence.
A victim may ask the police, barangay VAW desk, social-welfare office, prosecutor, or counsel about an appropriate protection order. A barangay protection order is limited to specified acts and is not a substitute for emergency police intervention or a criminal complaint.
If the victim is a child, involve a trusted non-offending adult and request a women-and-children protection officer or other child-sensitive investigator.
Common mistakes that can weaken a report
- Deleting the conversation after taking only one screenshot.
- Cropping out usernames, timestamps, URLs, or surrounding context.
- Editing or enhancing the only copy of a file.
- Paying repeatedly without preserving transaction details.
- Warning the suspect that the police have been contacted.
- Meeting the suspect or attempting a citizen-led entrapment.
- Posting accusations and evidence publicly while the investigation is pending.
- Forwarding intimate images to friends “for safekeeping.”
- Giving investigators passwords when a safer, properly documented method can provide the relevant material.
- Secretly recording every oral conversation without legal advice.
The Anti-Wiretapping Act restricts secretly recording certain private communications without authorization from all parties. Saving messages, emails, files, or voice messages sent to you is different from secretly recording a live private conversation, but seek legal advice before making covert recordings.
Deadlines and delay
There is no single filing deadline for every blackmail or extortion case. Prescription depends on the offense ultimately charged, its prescribed penalty, whether a special law applies, when the offense was committed or discovered, and what event legally interrupted the prescriptive period.
Do not wait for the threat to be carried out. Early reporting improves the chance of preserving account, subscriber, transaction, location, and device evidence. Filing a complaint with the prosecution office can also have consequences for prescription, but the effect must be evaluated under the law applicable to the specific offense.
Treat any platform deletion deadline, bank-recall period, or data-retention window as separate from the criminal prescriptive period.
When legal help is urgent
Consult a Philippine lawyer promptly if:
- an intimate image has already been distributed;
- the target is a child;
- violence, kidnapping, stalking, or weapons are involved;
- the offender is a police officer, public official, employer, lawyer, or person exercising authority over you;
- a large payment, business account, cryptocurrency transfer, or confidential company information is involved;
- the suspected offender is abroad;
- investigators propose a controlled delivery or entrapment;
- you are concerned that your own acts or files may expose you to liability;
- the prosecutor dismisses the complaint and a review deadline may run; or
- you need a protection order or urgent court relief.
The Public Attorney’s Office may assist qualified persons, subject to its legal and indigency requirements. Private counsel can also coordinate evidence preservation and accompany a complainant during interviews.
Frequently asked questions
Do I have to know the offender’s real name?
No. Report the account, phone number, email address, payment destination, aliases, and every other identifier you have. Make clear that the true identity is unknown. Attribution may require provider records, financial records, or forensic examination obtained through lawful processes.
Can I report even if I did not pay?
Yes. A conditional criminal threat may be punishable even when the demand fails. Whether the facts constitute grave threats, attempted robbery, coercion, or another offense depends on the evidence.
Can I report after paying?
Yes. Preserve every receipt and any further demand. Do not conceal a payment because it may help link the offender to an account or transaction.
Is a demand to pay a debt automatically extortion?
No. A lawful demand for payment, a good-faith warning that lawful remedies will be used, or legitimate settlement negotiations are not automatically criminal. Threats of violence, fabricated accusations, unlawful exposure, or other improper harm may change the analysis. The exact language and context matter.
What if the threatened information is true?
Truth does not automatically make a demand lawful. A demand for money or another benefit backed by threatened criminal harm, unlawful publication, or coercion may still create liability. The proper charge depends on precisely what was threatened and demanded.
What if the blackmailer is overseas?
Report locally and preserve country codes, platform identifiers, wallet addresses, and transfer details. Philippine authorities may need provider cooperation or international assistance. Cross-border location can slow an investigation but does not make reporting pointless.
Will a screenshot be enough?
It may support a complaint, but a complete case is stronger when screenshots are accompanied by original messages, exported data, device access, transaction records, witness statements, and a clear chain showing where each item came from. Authenticity and completeness can be disputed.
Should I block the person immediately?
If blocking is necessary for safety or well-being, preserve the evidence first if you can do so safely. Investigators may sometimes prefer that an account remain observable, so seek prompt guidance. Never continue contact if doing so creates immediate danger.
Will the police keep intimate material private?
Ask how the material will be received, stored, copied, and documented, and provide it only through an official channel. Laws and procedural safeguards protect sensitive information, but no complainant should circulate additional copies unnecessarily. A child’s sexual material requires especially careful handling.
Official legal and procedural references
- Revised Penal Code
- Republic Act No. 10951—adjusted Revised Penal Code penalties
- Cybercrime Prevention Act of 2012
- Anti-Photo and Video Voyeurism Act of 2009
- Anti-OSAEC and Anti-CSAEM Act
- Anti-Violence Against Women and Their Children Act
- Rules of Criminal Procedure
- 2024 DOJ–NPS Rules on Preliminary Investigations and Inquest Proceedings
- DOJ filing requirements for preliminary investigation
- NBI computer-crime investigative assistance
This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Charges, venue, remedies, and deadlines depend on the complete facts and evidence. Official legal and procedural sources were checked as of September 2, 2026.