Quick answer

Report blackmail or extortion immediately to the nearest police station, the Philippine National Police Anti-Cybercrime Group (PNP-ACG) if electronic communications are involved, or the National Bureau of Investigation (NBI). If there is an immediate threat to life, physical safety, or a child, call 911 or go directly to the nearest police station.

Do not pay, negotiate, threaten the offender, delete the conversation, or attempt your own entrapment operation before seeking police guidance. Preserve the complete messages, account details, payment instructions, URLs, phone numbers, and transaction records. Ask the investigator whether an urgent data-preservation request, controlled delivery, or lawful entrapment operation is appropriate.

“Blackmail” is not always charged under a single offense bearing that name. Depending on the exact threat, demand, means used, and whether money or property was actually obtained, the conduct may constitute grave threats, robbery through intimidation, threatening to publish a libel for compensation, or another offense under the Revised Penal Code or a special law. If committed through messaging apps, social media, email, or another computer system, the Cybercrime Prevention Act may also apply.

What counts as blackmail or extortion?

Blackmail or extortion generally involves a demand for money, property, a service, a sexual act, silence, or some other concession backed by a threat. Examples include:

“Send ₱20,000 or I will post your private photos.”
“Pay me or I will falsely accuse you of a crime.”
“Transfer money or I will hurt you or your family.”
“Give me access to your account or I will reveal confidential information.”
“Meet me for sex or I will send your intimate video to your employer.”
“Pay a processing fee or your supposedly hacked files will be released.”

The exact criminal charge is fact-dependent. Important questions include:

What wrong was threatened?
Was the threatened act itself a crime?
Did the offender demand money or impose another condition?
Was anything paid or surrendered?
Was force or intimidation used to take property?
Was the threat made in writing or through an intermediary?
Were intimate images, a child, hacked data, impersonation, or account intrusion involved?
Was the communication made through an information and communications technology system?

Under Article 282 of the Revised Penal Code, threatening a person or the person’s family with a wrong amounting to a crime may constitute grave threats. A demand for money or another condition is expressly relevant, and liability may exist even if the offender fails to obtain what was demanded.

Article 356 separately addresses threatening to publish a libel concerning a person or a family member, or offering to prevent such publication in exchange for compensation. Robbery may instead be considered when personal property is taken with intent to gain through violence or intimidation. Prosecutors and courts determine the proper charge from the actual evidence; the label used by the complainant is not controlling.

What to do immediately

1. Protect yourself first

If the offender knows where you live or work, has threatened physical harm, is nearby, or has access to weapons:

Move to a secure place.
Inform trusted family members, building security, your employer, or school officials as appropriate.
Do not meet the offender alone.
Call 911 or request immediate police assistance.
Tell the police about any known weapon, history of violence, stalking, or access to your home.

Do not disclose your location or routine to the offender. If the threat involves a child, notify the police and the appropriate women-and-children protection authorities without delay.

2. Do not rush to pay

Payment rarely guarantees that the threat will stop or that copies of information or images will be deleted. It can lead to repeated demands.

If you have already paid, you can still report the case. Save the receipt, reference number, destination account or wallet, QR code, recipient name, bank details, and all messages surrounding the payment. Contact the bank, e-wallet provider, or remittance company immediately and ask whether the transfer can be held, traced, or recalled. Do not misrepresent the transaction when reporting it.

3. Preserve the complete evidence

Before blocking, deleting, deactivating, or resetting anything, preserve:

The complete conversation from its beginning, not only the most threatening message
Screenshots showing the account name, username, number, date, and time
Screen recordings showing the conversation and profile in context
Original emails, including available header information
Profile links, post URLs, group names, channel names, and platform identifiers
Phone numbers, email addresses, usernames, and account links
Audio recordings, voice messages, photos, videos, and attached files
Payment instructions, QR codes, bank or e-wallet accounts, crypto addresses, and receipts
Call logs and a written account of what was said during calls
Names and contact details of witnesses
Any earlier dealings that explain how the offender obtained the material
Copies of posts already published and the identities of people who received them
Proof of resulting harm, such as medical records, counseling records, lost work, or security expenses

Retain the original device and unedited files where possible. Back up the evidence to secure storage, but avoid repeatedly forwarding intimate material. Record when and how each item was obtained.

Screenshots are useful, but they may not be enough by themselves if authenticity is disputed. Original messages, devices, account records, and platform data can provide important context and technical information.

4. Secure compromised accounts

If hacking or unauthorized access may be involved:

Change passwords using a device you reasonably believe is secure.
Use a unique password for each account.
Enable multi-factor authentication.
Sign out unknown sessions.
Check recovery email addresses, recovery numbers, forwarding rules, linked devices, and app permissions.
Save evidence of unauthorized access before removing it.
Notify the relevant service provider through its official security or abuse channel.

Do not click links or install software sent by the offender. Do not send identification documents merely to prove that you are the victim.

Where to report

You may report to one or more of the following:

Nearest police station

A local police station can receive the initial report, address immediate safety threats, record the incident, and coordinate with the proper investigative unit. Ask for the blotter or reference number and the investigator’s name and contact details.

For online blackmail, request referral or coordination with the PNP-ACG. The PNP’s own cybercrime-reporting guidelines recognize procedures for recording, referring, investigating, and monitoring cybercrime and cyber-related incidents. See the PNP guidelines on reporting cybercrime incidents.

PNP Anti-Cybercrime Group

The PNP-ACG is an appropriate investigative office when the threat was sent through social media, email, text, a messaging application, an online platform, or another computer system. Consult the official PNP-ACG website for current offices and reporting information.

National Bureau of Investigation

The NBI may investigate cybercrime, extortion, threats, fraud, and related offenses. Confirm the current office, appointment practice, and documentary requirements through the official NBI website before traveling.

Office of the prosecutor

A criminal case may be initiated by filing the required complaint and supporting affidavits with the proper prosecution office, subject to the Rules of Criminal Procedure and any applicable preliminary-investigation requirements. A police or NBI investigation is often helpful but does not necessarily replace the need for a properly executed complaint-affidavit.

The prosecutor—not the complainant—determines whether the evidence establishes probable cause and what offense should be charged. The general rules governing the institution of criminal actions are found in Rules 110 to 127 of the Rules of Criminal Procedure.

What to bring when reporting

Prepare, if available:

A government-issued ID
A chronological written narrative
Printed copies of the clearest messages and transaction records
The phone, computer, or storage device containing the original evidence
A secure electronic copy of the relevant files
The offender’s identifying and payment information
A list of witnesses
Proof of any payment, injury, publication, or financial loss
Copies of earlier reports to the platform, bank, barangay, employer, school, or other agency

Your narrative should state:

How you know or encountered the offender.
When and where communications occurred.
The threat made, using the offender’s exact words where material.
What the offender demanded.
The deadline or conditions imposed.
Whether you paid, complied, refused, or negotiated.
What the offender already did after making the threat.
Why you fear the threat may be carried out.
What accounts, devices, payment channels, and witnesses are involved.

Be accurate. Clearly distinguish what you personally saw or heard from what another person merely told you.

Online blackmail and the Cybercrime Prevention Act

Section 6 of the Cybercrime Prevention Act of 2012 covers crimes defined under the Revised Penal Code and special laws when committed by, through, and with the use of information and communications technologies. It generally provides for a penalty one degree higher than the penalty under the underlying law, although the correct application depends on the offense and controlling jurisprudence.

The Act designates the PNP and NBI as cybercrime law-enforcement authorities. It also contains mechanisms for preserving and obtaining computer data. Among other things:

Traffic data and subscriber information held by service providers must generally be preserved for at least six months from the transaction.
Content data may be preserved after an appropriate law-enforcement preservation order.
Certain disclosures, searches, seizures, examinations, or interceptions require judicial authority.

This is one reason to report promptly. A victim ordinarily should not attempt to compel a platform or telecommunications provider to disclose another user’s protected subscriber or content data. Investigators and prosecutors must use the proper legal process.

Sextortion and threats involving intimate images

A threat to release intimate images unless the victim pays money, provides more images, or performs a sexual act is commonly called sextortion. Report it promptly even if:

You originally sent the image voluntarily.
You consented to the recording but not its later sharing.
Your face is not visible.
The offender is a former partner.
The offender is outside the Philippines.
The offender has not yet uploaded anything.
You feel embarrassed or fear being blamed.

The Anti-Photo and Video Voyeurism Act of 2009 prohibits specified acts involving the unauthorized capture, copying, reproduction, sale, distribution, publication, broadcast, showing, or exhibition of covered sexual images or recordings. Consent to the original recording does not by itself amount to written consent to later copying or publication.

Whether a particular image falls within that statute depends on its contents and the circumstances in which it was created. The accompanying demand or threat may separately support charges under the Revised Penal Code and, if made online, the Cybercrime Prevention Act.

Do not publicly repost the intimate material as proof. Give it only to authorized investigators, prosecutors, counsel, or other persons who legitimately need it.

If a child is involved

Treat the case as urgent if the person depicted, targeted, or pressured is below 18. Do not pay for, request, download, circulate, or create additional copies of child sexual-abuse material in an attempt to investigate the offender.

Report immediately to law enforcement and inform the investigator that a child is involved. The Anti-Online Sexual Abuse or Exploitation of Children and Anti-Child Sexual Abuse or Exploitation Materials Act establishes specific offenses, duties, and investigative measures for online abuse or exploitation involving children.

A parent or responsible adult should protect the child from further contact, preserve the communications without unnecessary dissemination, and obtain appropriate psychological and legal support.

If the offender is a spouse, former partner, or dating partner

A threat by a husband, former husband, boyfriend, former boyfriend, or dating partner against a woman or her child may also fall under the Anti-Violence Against Women and Their Children Act, depending on the relationship and conduct.

The victim may ask the police Women and Children Protection Desk about criminal remedies and protection orders. Do not assume that the case is merely a “private relationship problem.” Threats, harassment, coercion, psychological violence, and economic abuse can have legal consequences when the statutory requirements are met.

Should you block the offender?

Preserve the evidence first. Then ask the investigator whether continued communication has investigative value.

Blocking may be appropriate for safety and emotional protection, especially if the offender is escalating. In other cases, investigators may advise the victim not to alert the offender while lawful investigative measures are considered. Do not continue the conversation solely to obtain an admission unless police or counsel has advised you how to proceed safely.

If you must respond before receiving guidance, avoid promises, admissions, counter-threats, fabricated claims, or unnecessary disclosure. A short response such as “I received your message” may preserve the communication without escalating it, but even that may be unsuitable where immediate disengagement is safer.

Can the police conduct an entrapment operation?

Law-enforcement officers may consider a controlled payment or entrapment operation when legally and operationally appropriate. The decision belongs to the authorities after evaluating the facts.

Do not arrange your own cash handoff, recruit friends to confront the offender, secretly carry a weapon, or meet the offender without police supervision. An improvised operation can endanger the victim, contaminate evidence, or interfere with the investigation.

Entrapment generally involves catching a person carrying out an already conceived criminal plan. It must not become improper inducement to commit an offense the person had not intended to commit. Let trained officers plan and document any operation.

Reporting to the platform or financial provider

In addition to making a law-enforcement report:

Report the threatening account through the platform’s official abuse, harassment, impersonation, privacy, or intimate-image channel.
Ask the platform to preserve relevant account and message data for law enforcement.
Record the report or ticket number.
Notify the bank, e-wallet, remittance provider, or crypto exchange of the suspected extortion payment.
Request that the provider preserve account, login, and transaction records.
Ask what documents law enforcement must submit for disclosure or freezing.

Platform reporting can help limit harm, but it is not a substitute for a criminal complaint. Do not delete your own evidence merely because the platform removes the account or post.

If the offender is anonymous or overseas

You may still report the incident. Provide every available identifier, including:

Username and profile URL
Phone number and country code
Email address
IP or login alerts visible to you
Bank, e-wallet, remittance, or crypto details
Time zone reflected in communications
Language, voice, location claims, and linked accounts
Original message files and email headers

An anonymous account does not necessarily make investigation impossible, but identification may require preservation requests, court orders, service-provider cooperation, or international assistance. Outcomes and timelines vary, especially when platforms, accounts, or suspects are abroad.

Do not pay an online “hacker” or recovery agent who claims to be able to trace the offender instantly. This may expose you to a second scam or unlawful activity.

Common mistakes to avoid

Paying immediately in the hope that the offender will disappear
Deleting or unsending messages out of fear or embarrassment
Saving only cropped screenshots without dates, usernames, or context
Editing files or adding annotations to the only available copy
Publicly accusing a suspected person without sufficient proof
Impersonating another person to lure the offender
Hacking the offender’s account or secretly installing tracking software
Arranging a private confrontation or cash handoff
Forwarding intimate images to friends or group chats
Reporting only to the social-media platform and not to law enforcement
Delaying until the offender’s account, transaction data, or content disappears
Giving inconsistent or exaggerated accounts to different authorities
Assuming that payment prevents the filing of a complaint
Assuming that refusal to pay means no crime occurred

When legal help is especially urgent

Consult a lawyer promptly when:

The offender threatens imminent physical harm.
The case involves intimate images or a child.
The victim is being stalked or repeatedly contacted through new accounts.
A substantial payment has already been made.
The offender is a public official, employer, police officer, lawyer, teacher, or person exercising authority over the victim.
The offender claims to possess privileged, confidential, medical, business, or government information.
The victim is being pressured to commit a crime, sign a document, surrender property, or provide account access.
Police decline to receive or properly document the report.
A controlled operation or evidence turnover is being planned.
The relevant platform or financial records may soon be unavailable.
The victim may face separate legal exposure arising from the underlying facts.

A lawyer can help organize the evidence, prepare the complaint-affidavit, identify the proper venue and respondents, coordinate urgent preservation measures, and avoid statements that unnecessarily compromise the victim’s rights.

Frequently asked questions

Is blackmail a crime even if I did not pay?

Potentially, yes. Grave threats may be punishable even when the offender does not attain the demanded condition. The proper offense and stage of execution depend on the exact words, threatened wrong, intent, and surrounding conduct.

What if the information the offender threatens to reveal is true?

Truth does not automatically make a coercive demand lawful. A threat to injure another’s person, honor, property, or family, coupled with a demand, may still have criminal consequences. Article 356 specifically concerns threats to publish a libel, so its application requires closer analysis of the contemplated publication. Other offenses may apply even when Article 356 does not.

Can I report without knowing the offender’s real name?

Yes. Report the account, number, payment destination, and every other available identifier. Law enforcement may seek subscriber, transaction, or platform records through lawful procedures.

Should I delete an intimate image from my phone?

Do not destroy the only evidentiary copy before consulting investigators or counsel. Secure the device and restrict access. Avoid uploading or forwarding the image unnecessarily.

Can I record a phone call with the offender?

Secret recording may raise issues under the Anti-Wiretapping Act, depending on how the recording is made and who participates. Do not assume that being part of the conversation automatically makes secret recording lawful. Preserve existing lawful records and obtain legal or police advice before deliberately recording calls.

Do I need a barangay complaint first?

Not always. Katarungang Pambarangay conciliation depends on factors such as the parties’ residences, the offense, and applicable statutory exceptions. Immediate threats, offenses carrying penalties beyond the barangay system’s coverage, and cases requiring urgent law-enforcement action should be brought directly to the police or appropriate authorities. Let the prosecutor or counsel determine whether barangay proceedings are a prerequisite in the particular case.

Can I recover money already paid?

Possibly, but recovery is not guaranteed. Notify the financial provider immediately, obtain a transaction report, and include the payment in the criminal complaint. A court may award restitution or civil damages when legally established, but practical recovery depends on tracing the recipient and locating assets.

Will filing a police blotter automatically start a criminal case?

No. A blotter entry documents the report but is not necessarily the formal complaint required for prosecution. Ask what additional complaint-affidavit, witness affidavits, evidence, and referral are needed.

Practical reporting checklist

Before leaving the police station or investigative office, confirm that you have:

Explained the threat and demand clearly
Disclosed any immediate safety risk
Provided or identified the original evidence
Obtained a report, blotter, or case-reference number
Recorded the investigator’s name and office
Asked whether platform or financial data must be urgently preserved
Asked whether you should block or continue receiving messages
Received instructions before making any payment or meeting
Confirmed the next submission, interview, or affidavit required
Kept your own secure copy of everything submitted

Prompt reporting, accurate documentation, and preservation of original electronic evidence usually provide the strongest starting point. Do not let embarrassment, prior consent, or an earlier payment prevent you from seeking assistance.

This article provides general legal information, not legal advice for a particular case. The proper offense, venue, procedure, and available protective measures depend on the exact threats, relationship of the parties, evidence, and applicable law. Sources and procedures were checked as of August 25, 2026.