Overview

Online threats and harassment are crimes in the Philippines. They can violate several laws, led by the Cybercrime Prevention Act of 2012 (Republic Act No. 10175), which punishes crimes committed “through and with the use of” information and communication technologies. Depending on the facts, other laws often apply alongside RA 10175—especially when harassment is sexual, gender-based, involves intimate images, children, intimate partners, or data privacy.

This article explains the legal framework, your remedies, the evidence you need, where to report, and practical steps to protect yourself.

Core Legal Framework

1) Cybercrime Prevention Act (RA 10175)

What it does: Increases penalties (usually one degree higher) when certain crimes are done online; creates cyber-specific offenses; sets rules for investigation, evidence preservation, and cooperation with service providers.
Common charges for online harassment cases:
- Grave threats / light threats (from the Revised Penal Code) committed online, penalized under RA 10175.
- Unjust vexation, grave coercion, or similar RPC offenses committed online, with higher penalties via RA 10175.
- Cyberlibel (if the harassment defames a person online).
- Illegal access, data interference, system interference, computer-related fraud/forgery (if accounts are hacked, impersonated, or content is fabricated).
Key procedural tools built into RA 10175:
- Data preservation orders on service providers (initial period is measured in months and may be extended).
- Specialized cyber warrants issued by courts for disclosure, interception, searching, seizing, and examining computer data.
- Extraterritorial reach in defined scenarios (e.g., offender, victim, or computer system is in the Philippines).

Note on jurisprudence: The Supreme Court, in a landmark case commonly known as Disini v. Secretary of Justice, partly upheld and partly struck down provisions of RA 10175. Among other things, the Court invalidated the takedown power that allowed the executive branch to block content without a court order, and narrowed liability for aiding or abetting cyberlibel. The upshot: law enforcement generally needs judicial authorization for content restrictions and certain kinds of data collection, while core cybercrimes (including cyberlibel) remain enforceable.

2) Safe Spaces Act (RA 11313) – “Bawal Bastos” Law

Covers gender-based online sexual harassment, including unwanted sexual remarks, lewd messages, repeated unwanted advances, misogynistic, transphobic, homophobic, or sexist slurs, stalking behaviors, and the creation/propagation of non-consensual sexual content.
Imposes duties on employers, schools, and online platforms to act on reports.
Provides administrative and criminal penalties and internal redress mechanisms.

3) Anti-Photo and Video Voyeurism Act (RA 9995)

Criminalizes recording or distributing a person’s intimate images or videos without consent, including “revenge porn” and threats to publish such content.

4) Anti-OSAEC and Anti-CSAEM Act (RA 11930)

Strong, specialized law against online sexual abuse or exploitation of children. Obligates platforms, internet service providers (ISPs), and financial intermediaries to detect, preserve, and report child sexual abuse/exploitation material.
If the victim is a minor, this law usually takes precedence alongside RA 10175.

5) Violence Against Women and Their Children (VAWC) Act (RA 9262)

If threats/harassment come from an intimate partner, ex-partner, or someone with whom the victim shares a child or intimate relationship, VAWC can apply—even when the abuse is purely online.
Enables Protection Orders (BPO/TPO/PPO), with urgent reliefs (stay-away orders, custody/financial relief, device/account restrictions).

6) Data Privacy Act (RA 10173)

Protects against unauthorized processing or disclosure of personal data. Useful when doxxing or leaks of personal data are involved.

7) Anti-Bullying Act (RA 10627) & School Policies

Applies to basic education (K–12) settings, including cyberbullying involving students. Schools must have clear procedures for reporting, investigation, and discipline.

What Conduct Typically Counts as Online Threats & Harassment?

Direct threats to kill, injure, or commit a crime against you, your family, or property (grave/light threats).
Stalking and surveillance behaviors (e.g., persistent tracking, unwanted following online, doxxing, obsessive messaging).
Harassing communications: repeated unwanted messages, harassment in group chats, forums, or comment sections.
Gender-based online sexual harassment: unwanted sexual remarks, lewd photos/messages, sexual advances, deepfakes, non-consensual sharing of intimate content.
Doxxing / exposure of personal data, including addresses, numbers, IDs.
Impersonation: fake accounts, spoofed emails, hacked profiles used to harass or defraud.
Defamation (cyberlibel): false statements online that tend to dishonor or discredit; includes posts, tweets, videos, and comments.
Extortion: threats to publish intimate images or false allegations unless you pay or comply.

Your Options: Criminal, Civil, Administrative

A) Criminal complaints

You can file a criminal complaint with the PNP Anti-Cybercrime Group (ACG), NBI Cybercrime Division, or directly with the Office of the City/Provincial Prosecutor. Prosecutors may pursue:

Cybercrime-enhanced RPC offenses (threats, coercion, unjust vexation, estafa, etc.).
Cyberlibel.
Voyeurism (non-consensual intimate images).
Illegal access, identity theft, or computer-related fraud/forgery.
OSAEC-related offenses if a child is involved.

Tip: Some offenses have short prescriptive (deadline) periods. Act promptly.

B) Civil actions

Damages under the Civil Code for injury to reputation, mental anguish, or property loss.
Injunctions to stop ongoing harassment or to compel the removal of unlawful content (with proper judicial process).

C) Administrative & institutional remedies

Safe Spaces Act: Complaints within workplaces, schools, and to local authorities.
School/HR policies: Separate from criminal liability, schools and employers may discipline offenders.
Data Privacy complaints** to the National Privacy Commission (NPC)** if personal data were mishandled.

Evidence: What to Collect (and How)

Courts follow the Rules on Electronic Evidence and the Rule on Cybercrime Warrants. Good documentation can make or break a case.

Capture the content completely
- Full-page screenshots that include: the post/message, URL, username/handle, date/time, and context thread.
- Screen recordings for stories/live streams that disappear.
- Export chats (where possible) and download media in original format.
Preserve metadata
- Save message headers (for emails), file properties, and original files.
- Do not edit or re-compress originals. Keep a separate working copy.
Keep a chronology
- A simple incident log with dates, times, platform, links, and witnesses.
Secure account forensics
- Keep login alerts, location logs, password reset emails, and platform notices.
- If hacking is suspected, avoid altering the device until examined; consider a forensic image (hash-verified).
Third-party corroboration
- Witness affidavits (e.g., group chat members), platform responses, and official receipts for any monetary loss (extortion, fraud).
Send preservation requests
- Report promptly to platforms and request data preservation, referencing legal obligations under Philippine law. Investigators can follow with court-authorized warrants for disclosure.

Where and How to Report

Immediate danger? Call your local police or the PNP ACG. If a child is involved, contact child protection hotlines and report to law enforcement at once.
PNP ACG / NBI Cybercrime: You may file a complaint with supporting evidence, affidavits, and IDs. They can assist with cyber warrants and coordination with platforms and ISPs.
City/Provincial Prosecutor: File a criminal complaint with your evidence and jurat-sworn affidavits (e.g., Affidavit-Complaint, Affidavits of Witnesses).
For school/workplace cases: File through guidance offices, disciplinary bodies, or HR under the Safe Spaces Act and internal policies.
For doxxing/data leaks: File a Data Privacy complaint with the NPC (and parallel criminal complaint if other offenses apply).
Platform reporting: Use the in-app reporting flow (harassment, threats, impersonation). Keep ticket numbers and auto-replies.

Jurisdiction & venue: Cyber offenses can be pursued where any element of the crime occurred, where the complainant resides in certain cases under special laws, or where the data/system is located. Authorities also rely on the extraterritorial reach of RA 10175 when appropriate.

Practical Safety & Containment Steps

Document first, then block/mute. Preserve evidence before limiting contact.
Lock down accounts.
- Enable multi-factor authentication, change passwords, revoke suspicious sessions/apps.
- Review privacy settings; restrict who can message or tag you.
Segment your digital life.
- Separate emails and phone numbers for public vs. private use.
- Remove unnecessary personal info from profiles.
Doxxing protection.
- Ask data brokers/directories to remove your info; request takedowns for posted IDs/addresses.
- Consider a mailbox service instead of a home address for public-facing work.
If intimate images are threatened or shared:
- Treat as voyeurism and/or extortion; report to law enforcement and the platform immediately.
- Avoid paying; this typically escalates demands.
- If you are a minor or the content involves a minor, it triggers OSAEC protocols—report urgently.
Mental health support. Harassment is traumatic; consult counselors or support groups.
Media and public responses. If the issue goes public, coordinate with counsel on measured statements to avoid defamation risks.

Building a Strong Case: Step-by-Step

Triage & preserve
- Screenshot/record, copy URLs, export chats, secure originals.
- Start an incident log (date, time, platform, link, what happened).
Initial reports
- File in-app reports; request data preservation.
- If there are explicit threats, minors, or intimate images, contact law enforcement immediately.
Legal consultation
- A lawyer can assess the best legal theory (threats, cyberlibel, voyeurism, OSAEC, VAWC, data privacy, fraud) and draft affidavits.
Affidavit-Complaint package
- Affidavit-Complaint narrating facts in chronological order.
- Annexes: screenshots (labeled), chat exports, headers, forensic reports, platform tickets.
- Witness affidavits and IDs.
Filing & investigation
- File with PNP ACG/NBI or Prosecutor’s Office.
- Expect requests for original files, device examination, or additional certification.
Motions and protective relief
- Where applicable: Protection Orders (VAWC), injunctions, or hold-departure/watchlist (in appropriate cases).
Parallel civil or administrative action
- File for damages, and pursue Safe Spaces procedures at school/work.

Special Topics

Cyberlibel vs. Legitimate Speech

Truth, fair comment on matters of public interest, and good motives/justifiable ends are traditional defenses.
Avoid retaliatory posts; let evidence speak in your complaint. Counter-defamation claims are common.

Anonymity & Pseudonyms

Investigators can seek court-authorized disclosure orders directed at platforms/ISPs to identify account holders (subject to due process and privacy safeguards).

Children and Youth

If the victim is a minor, authorities use child-sensitive procedures. Schools have obligations under the Anti-Bullying Act and Safe Spaces Act; law enforcement prioritizes OSAEC angles.

Intimate Partner Digital Abuse

If the harasser is a partner/ex, VAWC offers swift protection orders and criminal liability, even for purely online acts (stalking, threats, economic/psychological abuse).

Frequently Asked Questions

Do I need a lawyer to report? No, but a lawyer is very helpful for framing charges, preserving evidence properly, and seeking urgent court relief.

Can I make the platform “take it down” immediately? Platforms have their own rules and will often remove content that violates those rules. In the Philippines, takedowns by government require due process/court authorization, except for platform-driven moderation under private terms of service.

What if the harasser is abroad? RA 10175 allows extraterritorial enforcement in defined cases; local authorities coordinate with foreign counterparts and platforms. Evidence preservation becomes even more urgent.

How fast do I need to act? Some offenses have short prescriptive periods. Preserve evidence and file promptly.

Simple Checklist

Screenshot/record everything with URL, handle, date/time visible.
Export chats; save original media and email headers.
Secure accounts (MFA, password changes, session/device review).
Report in-app and note ticket numbers; request data preservation.
File with PNP ACG/NBI (urgent if threats, minors, or intimate images).
Consult counsel for Affidavit-Complaint and possible protection orders.
Consider civil damages and Safe Spaces remedies at work/school.
Seek support services for mental well-being.

Final Notes

Philippine law does not require you to tolerate harassment until it becomes physical. Threats and persistent harassment online can be crimes.
The best cases combine solid digital evidence, prompt reporting, and clear legal theory (which law(s) were violated).
If you’re unsure which path to take, start by preserving evidence and filing reports—those steps keep your options open.