Quick answer

Report blackmail or extortion as soon as possible to the nearest police station, the Philippine National Police Anti-Cybercrime Group (PNP-ACG), or the National Bureau of Investigation Cybercrime Division (NBI-CCD). If the offender is threatening immediate violence, knows your location, is approaching you, or may harm another person, call 911 and move to a safe place.

Do not delete the messages, surrender your phone, negotiate a private “settlement,” or arrange a payoff or entrapment by yourself. Preserve the original conversation, account details, payment instructions, transaction records, and any material the offender threatens to release. Investigators—not the victim—should plan any controlled delivery, marked-money operation, or account-tracing request.

“Blackmail” is not always charged under one offense bearing that name. Depending on the exact threat, demand, medium, and property obtained, the conduct may constitute threatening to publish a libel, grave or light threats, robbery or another offense under the Revised Penal Code. Online conduct may also fall under the Cybercrime Prevention Act, while threatened distribution of intimate images may violate a separate special law.

What counts as blackmail or extortion?

In ordinary language, blackmail occurs when someone uses a threat—often exposure, accusation, humiliation, violence, or disclosure of private material—to force another person to give money, property, services, sexual content, or some other benefit.

Examples include:

“Send ₱50,000 or I will post your private photos.”
“Pay me or I will accuse you publicly of having an affair.”
“Give me access to your account or I will hurt your family.”
“Continue sending sexual videos or I will release the first one.”
“Pay for the deletion of information that I stole from your device.”
“Transfer money or I will send these messages to your employer.”

A demand does not become lawful simply because the threatened disclosure is true. Conversely, an aggressive demand for payment is not automatically criminal extortion. A creditor, for example, may lawfully demand payment and pursue proper collection remedies, but may not use violence, unlawful threats, fabricated accusations, or prohibited disclosure methods. The complete words used and the surrounding circumstances matter.

Possible criminal offenses

Threatening publication or offering silence for payment

Article 356 of the Revised Penal Code penalizes:

threatening another person with the publication of a libel concerning that person or certain family members; and
offering, for compensation or money, to prevent the publication of such libel.

This is the provision most closely associated with traditional blackmail. It does not automatically cover every threat to disclose information. Investigators and prosecutors must determine whether the threatened publication and demand satisfy the statutory elements.

Grave threats or light threats

A threat may instead fall under the Revised Penal Code provisions on threats:

Grave threats may apply when a person threatens another with a wrong amounting to a crime against the victim, the victim’s honor or property, or the person, honor, or property of the victim’s family. The presence of a demand for money or another condition can affect the applicable penalty.
Light threats may apply when the offender demands money or imposes another condition by threatening a wrong that does not amount to a crime.

The classification depends on what was threatened—not merely on how frightened the victim felt.

Robbery or another property offense

Under Articles 293 and following of the Revised Penal Code, robbery involves taking personal property belonging to another, with intent to gain, through violence or intimidation or by using force upon things. Whether a completed payment obtained through intimidation is robbery, threats, estafa, or another offense depends on how possession was obtained, the nature and immediacy of the intimidation, and the parties’ acts.

Victims should describe the facts accurately and let investigators and prosecutors determine the proper charge. Insisting on a particular legal label can obscure a stronger offense supported by the evidence.

Online blackmail and cyber-extortion

When a Revised Penal Code offense or a crime under a special law is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act of 2012 may apply. The law also separately penalizes conduct such as illegal access, computer-related fraud, and computer-related identity theft when their elements are present.

The Act designates the PNP and NBI as cybercrime law-enforcement authorities. It also establishes procedures for preserving, disclosing, searching, and examining computer data. Subscriber information and other nonpublic platform records generally cannot be obtained merely by asking the victim to identify an anonymous account; investigators may need preservation measures and the appropriate court process.

Threats involving intimate images

Republic Act No. 9995 prohibits specified acts involving photos or videos of sexual acts or similar private areas or circumstances, including unauthorized copying, distribution, publication, or exhibition. Consent to the original recording does not necessarily mean consent to its later distribution. See the Anti-Photo and Video Voyeurism Act of 2009.

If the victim or depicted person is under 18—or was under 18 when the material was created—the matter may also fall under the Anti-Online Sexual Abuse or Exploitation of Children and Anti-Child Sexual Abuse or Exploitation Materials Act. Report it immediately. Do not forward, repost, or make unnecessary copies of child sexual-abuse material.

What to do immediately

1. Protect yourself first

If there is an immediate physical threat:

Call 911 or go to the nearest police station.
Move to a secure location and alert a trusted person.
Do not meet the offender alone.
If the offender has access to your home, workplace, school, or vehicle, tell security personnel and law enforcement.
If the threat involves suicide or harm to another person, inform emergency responders rather than attempting to manage the situation alone.

2. Preserve the full communication

Before blocking or reporting an account to a platform, preserve:

the entire conversation, not only the most alarming message;
usernames, display names, profile links, account numbers, phone numbers, email addresses, and QR codes;
visible dates and times;
voice messages, call logs, emails, attachments, and original files;
the demand, amount, deadline, payment destination, and threatened consequence;
cryptocurrency wallet addresses or transaction hashes;
bank or e-wallet account names and numbers;
proof of any prior payment;
links to posts, cloud folders, or websites;
notifications showing logins, password changes, or unauthorized access; and
names and contact details of witnesses.

Take overlapping screenshots so the sequence is clear, but retain the original messages and device. Export chats or emails when the service permits it. Record the date, time, method, and person who created each copy.

Electronic records may need proof of authenticity and integrity. The Supreme Court’s Rules on Electronic Evidence illustrate why intact originals, reliable copies, and a person able to explain how the records were obtained are important.

3. Secure compromised accounts

Using a device the offender does not control:

change passwords, beginning with your primary email;
enable multifactor authentication;
sign out unknown sessions;
preserve evidence before deleting unauthorized devices or sessions;
review recovery emails, phone numbers, forwarding rules, and linked applications;
contact the platform if the account was taken over; and
warn close contacts if the offender is impersonating you.

Do not remotely wipe a device that investigators may need to examine unless immediate safety requires it.

4. Contact the bank, e-wallet, or payment provider

If money has been sent or an account has been exposed, report the transaction immediately through the provider’s official fraud channel. Request a reference number and preserve the acknowledgment.

A private report to a bank or platform does not replace a police, NBI, or prosecutor’s complaint. It may, however, help flag an account or preserve transaction records while the criminal complaint is being prepared.

Where and how to report

Nearest police station

You may report the incident to the nearest police station, especially where there is an immediate threat, a known local suspect, or a need for urgent protection. Ask that the incident be entered in the police blotter and obtain the entry or reference number.

A blotter entry documents the report; it is not, by itself, the filing or resolution of a criminal case. Cooperate with the investigator regarding the sworn statement, identification documents, witnesses, and evidence needed for investigation or referral to the prosecutor.

PNP Anti-Cybercrime Group

For threats made through social media, messaging applications, email, websites, online accounts, or other digital systems, approach the PNP Anti-Cybercrime Group. Its official cybercrime-reporting guidelines describe the recording and handling of cybercrime and cyber-related incidents.

Use contact information published on the official PNP-ACG website. Be cautious of unofficial pages or individuals who ask for payment to “process” a complaint.

NBI Cybercrime Division

The NBI states that members of the public may proceed to its Cybercrime Division to file a complaint or request an investigation, with no fee for the frontline service. See the NBI’s official page on investigative assistance for victims of computer crimes.

A complaint may also be brought to an appropriate NBI regional or district office. Confirm current office details before traveling.

Prosecutor’s office

A criminal complaint may ultimately be filed with the proper city or provincial prosecutor, ordinarily through a complaint-affidavit and supporting affidavits and evidence. Venue, jurisdiction, the penalty for the possible offense, and whether preliminary investigation is required depend on the facts and charge.

A lawyer or investigating officer can help identify the proper prosecutor’s office, particularly when the offender and victim are in different places or the acts occurred online.

Preparing the complaint

Your complaint-affidavit should present facts in chronological order and, where available, state:

Your identity and how the offender contacted you.
How you know—or why you believe—you have identified the offender.
The exact substance of the threat.
What the offender demanded.
The deadline or conditions imposed.
Why the threat was credible.
Whether you paid, transferred property, sent content, or performed another demanded act.
The accounts, numbers, devices, and platforms involved.
Any continuing or escalating threat.
A list of the attached evidence and witnesses.

Quote only what the evidence actually shows. Distinguish facts you personally witnessed from information supplied by another person. If the identity is unknown, say so and provide every available identifier rather than naming someone based only on suspicion.

Bring the original device if requested, but create a secure backup beforehand. Obtain a receipt or inventory for any device or item formally surrendered.

Should you pay?

Payment rarely guarantees that the offender will delete the material or stop demanding money. It may lead to repeated demands.

If no payment has been made, do not arrange a personal handoff. If investigators believe a controlled transaction could help identify or arrest the offender, follow their instructions exactly. Do not improvise a sting operation.

If you already paid, you can still report the crime. Preserve the transaction confirmation, recipient information, reference numbers, receipts, and subsequent demands. Paying under pressure does not prevent you from filing a complaint.

Should you keep communicating?

The safest course depends on the threat. Generally:

do not provoke or threaten the offender;
do not admit to crimes or fabricate a story;
do not send additional money, passwords, identification documents, or intimate material;
preserve messages before blocking the account; and
ask the assigned investigator whether continued communication would help or create additional risk.

Do not impersonate law enforcement or promise an unlawful favor. If a response is necessary to gain time, keep it neutral and avoid making commitments until you receive advice.

Evidence preservation and platform data

Under Section 13 of the Cybercrime Prevention Act, service providers must preserve certain traffic data and subscriber information for at least six months from the transaction. Content data may be preserved after an appropriate law-enforcement order, subject to the statutory periods and extensions.

This does not mean victims should wait six months. Accounts may be deleted, messages may disappear, platforms may be abroad, and different records may follow different retention practices. Prompt reporting gives investigators a better opportunity to seek preservation and lawful disclosure.

Do not attempt to hack the offender’s account, obtain private subscriber data through deception, install spyware, or secretly intercept communications between other people. Illegally obtained evidence can create separate criminal or admissibility problems.

The Anti-Wiretapping Act also restricts certain secret recordings and interceptions of private communications. Before secretly recording a call or installing any interception tool, obtain case-specific legal advice or instructions from investigators.

If the material has already been posted

Publication does not make the earlier threat or demand irrelevant. Immediately:

preserve the live URL, profile, date, time, comments, shares, and screenshots;
use the platform’s official reporting and removal process;
identify recipients who received the material;
ask recipients not to redistribute it and to preserve what they received;
document reputational, employment, financial, or psychological harm; and
give the updated evidence to the investigator.

Avoid publicly arguing with the offender or repeatedly sharing the material to prove what happened. Republication may worsen the harm and, for prohibited sexual material, may itself raise legal concerns.

Protection beyond the criminal complaint

Depending on the relationship and conduct, other remedies may be available. For example, threats by a current or former intimate partner may raise issues under laws on violence against women and children. Workplace, school, or professional disciplinary processes may also apply. A court order, civil action for damages, or other protective remedy may be appropriate in some cases.

These remedies are fact-specific. The criminal complaint should not be delayed where safety, disappearing evidence, or continued publication is involved.

Common mistakes to avoid

Deleting the conversation after taking only one screenshot.
Cropping out the username, date, time, or surrounding messages.
Editing, annotating, or compressing the only copy of the evidence.
Paying repeatedly in the hope that the offender will stop.
Meeting the offender or conducting a private entrapment.
Publicly accusing an unverified person.
Hacking an account to identify the offender.
Forwarding intimate or child sexual-abuse material unnecessarily.
Assuming that a platform report or police blotter alone completes the criminal complaint.
Waiting because the offender uses a foreign number, fake profile, or anonymous account.
Secretly recording or intercepting communications without checking whether it is lawful.
Accepting “deletion” as proof that no copies remain.
Signing a waiver, settlement, or affidavit of desistance without legal advice.

When legal help is urgent

Seek immediate help from law enforcement and a lawyer when:

violence, kidnapping, stalking, or physical confrontation is threatened;
the offender has weapons or knows your current location;
a child is involved;
intimate material is being used to demand sex, more images, or continued contact;
money is about to be transferred or a meeting has been scheduled;
the offender has access to your email, banking, cloud storage, or workplace systems;
evidence is disappearing or an account is being deleted;
the threat involves public office, business secrets, large financial exposure, or multiple victims;
the suspected offender is a police officer, public official, employer, teacher, or person exercising authority over you; or
you are being asked to sign an affidavit, waiver, or settlement that you do not fully understand.

Frequently asked questions

Must I wait until I have paid before reporting?

No. A completed payment is not always required for an offense involving threats or attempted cybercrime. Report the demand and threat even if you refused to comply.

Can I report an anonymous or fake account?

Yes. Give investigators the account link, username, associated numbers or emails, payment details, transaction identifiers, and original messages. The inability to identify the offender immediately does not prevent reporting.

Is a threat to reveal true information still blackmail?

It may still constitute an offense, depending on the demand, threatened act, manner of intimidation, and applicable provision. Truth does not automatically authorize a person to obtain money or another benefit through unlawful threats.

What if the offender is abroad?

Report locally, particularly where you were in the Philippines when the threat or damage occurred. The Cybercrime Prevention Act contains jurisdiction and international-cooperation provisions, but the ability to identify and prosecute an overseas offender will depend on available evidence and cooperation from foreign authorities and service providers.

Can I withdraw the complaint after the offender apologizes or refunds the money?

An apology, refund, private settlement, or affidavit of desistance does not automatically extinguish criminal liability. Once authorities are involved, the legal effect depends on the offense and procedural stage. Obtain advice before signing anything.

Is there a deadline for reporting?

There is no single reporting deadline applicable to every form of blackmail or extortion. Prescription depends on the offense ultimately established, its penalty, when it was committed or discovered, and whether prescription was interrupted. Digital evidence may disappear much sooner than the legal prescriptive period, so report without delay.

Will the authorities keep intimate evidence private?

Special laws and procedural safeguards may restrict disclosure, and investigators should handle sensitive evidence carefully. Nevertheless, some disclosure may be necessary for investigation and prosecution. Ask how files will be received, stored, examined, and presented, and avoid giving unnecessary copies to unauthorized persons.

Do I need a lawyer to make the initial report?

No. A victim may approach the police, PNP-ACG, NBI, or prosecutor without private counsel. Legal assistance is particularly valuable when the facts are complex, the suspect contests identity, several offenses may apply, sensitive material is involved, or urgent protective relief is needed.

This article provides general Philippine legal information, not legal advice for a particular case. The proper charge, venue, procedure, and remedy depend on the exact words used, evidence, relationship of the parties, medium, and acts already completed. Sources and procedures were checked as of 25 August 2026.