A threat to release a private or intimate video unless you pay money is commonly called sextortion or intimate-image blackmail. It is designed to create panic, shame, and urgency so that you pay before thinking clearly. Under Philippine law, the threat itself may already be a crime even if the video has not been posted. If the offender shares, uploads, sells, or sends the video, additional and often more serious offenses may apply. Your immediate priorities are to preserve evidence, protect your accounts and physical safety, avoid spreading the material further, and report the incident quickly enough for investigators to preserve digital records.

What counts as sextortion or private-video blackmail?

Sextortion usually involves three elements:

The offender has—or claims to have—a sexual or intimate photo or video.
The offender threatens to send it to relatives, employers, schools, partners, social-media contacts, or the public.
The offender demands money, another intimate image, sexual activity, account access, or some other benefit.

Common situations include:

A former partner threatens to upload a consensually recorded video after a breakup.
A stranger records a video call and demands payment.
A fake dating profile persuades someone to undress on camera, then displays a list of the victim’s Facebook friends.
A hacked cloud, email, or messaging account contains private media.
An offender uses an edited, AI-generated, or falsely attributed sexual video to demand money.
Someone threatens to expose a nonsexual but highly private video unless paid.

The exact criminal charge depends on what the video shows, how it was obtained, what was threatened, whether anything was posted, the relationship between the parties, and whether either person is a minor.

Philippine laws that may apply

Anti-Photo and Video Voyeurism Act

The principal law for intimate recordings is Republic Act No. 9995, the Anti-Photo and Video Voyeurism Act of 2009.

RA 9995 covers recordings of:

A person performing a sexual act or similar activity; or
A person’s naked or underwear-clad genitals, pubic area, buttocks, or female breast under circumstances where the person reasonably expected privacy.

The law prohibits, among other things:

Recording such material without the person’s consent;
Copying or reproducing it;
Selling or distributing it; and
Publishing, broadcasting, showing, or exhibiting it through the internet, mobile phones, or similar technology.

A crucial rule is that consent to make the recording is not consent to distribute it. A person may therefore violate RA 9995 by uploading or forwarding a video that the couple originally recorded consensually. Distribution requires the written consent of the person shown in the material. (Lawphil)

A violation is punishable by imprisonment of three to seven years, a fine of ₱100,000 to ₱500,000, or both, at the court’s discretion. A foreign offender may also face deportation proceedings after serving the sentence and paying the fine. (Lawphil)

RA 9995 may not cover every embarrassing or private recording. For example, a nonsexual video that does not show a legally defined private area may fall outside this particular statute. The demand for money may nevertheless constitute threats, coercion, online sexual harassment, or another offense.

Grave threats and light threats under the Revised Penal Code

The Philippines does not rely on a single criminal provision called “blackmail.” Depending on the facts, prosecutors may use the provisions on threats in the Revised Penal Code.

Grave threats under Article 282 may apply when someone threatens a wrong that would itself amount to a crime and demands money or imposes a condition. Because the unauthorized publication of an intimate video may violate RA 9995, a threat to publish it in exchange for money can support a grave-threats charge.

The offense does not necessarily disappear merely because the victim refuses to pay or the offender fails to carry out the threat. Whether the offender achieved the demanded result can affect the applicable penalty, but an unfulfilled threat can still be punishable. The Supreme Court has recognized grave threats, light threats, and other light threats as separate offenses whose application depends on the nature of the threatened wrong and the surrounding conditions. (Lawphil)

Light threats under Article 283 may apply when the threatened harm does not itself amount to a crime but the offender demands money or imposes another condition.

Investigators may also consider grave coercion, unjust vexation, robbery through intimidation, or other offenses, but these are not interchangeable. The final charge must match the evidence and legal elements.

Cybercrime Prevention Act

When the threat, demand, or publication is carried out through messaging apps, email, social media, cloud services, or another computer system, Republic Act No. 10175, the Cybercrime Prevention Act of 2012, may affect the investigation and penalties.

Section 6 provides that crimes under the Revised Penal Code and special laws committed by, through, and with the use of information and communications technology are covered by the Cybercrime Prevention Act, generally with a penalty one degree higher. The exact application must be determined by the prosecutor because constitutional rules against double jeopardy limit when a person may be punished twice for substantially the same act.

RA 10175 is also important because it allows law-enforcement authorities to seek the preservation and lawful disclosure of subscriber information, traffic data, account records, and other computer data. Digital records are not kept forever, so early reporting can materially improve the chances of identifying the offender. (Lawphil)

Safe Spaces Act

Republic Act No. 11313, the Safe Spaces Act, penalizes gender-based online sexual harassment.

The law covers conduct involving information and communications technology that terrorizes or intimidates a victim through physical, psychological, or emotional threats. It also covers certain forms of nonconsensual uploading or sharing of sexual photos, recordings, videos, or other media, as well as online impersonation and privacy invasion.

The Safe Spaces Act can protect people regardless of sex, sexual orientation, or gender identity. It may be relevant even when RA 9995 does not perfectly fit the material involved.

Violence Against Women and Their Children Act

When the victim is a woman and the offender is her husband, former husband, live-in partner, former partner, dating or sexual partner, or the father of her child, Republic Act No. 9262, the Anti-Violence Against Women and Their Children Act of 2004, may apply.

Threatening to expose an intimate video may constitute psychological violence when it causes mental or emotional anguish, humiliation, harassment, or public ridicule. The woman may seek a criminal case and, where legally justified, a court-issued temporary or permanent protection order prohibiting contact, harassment, stalking, or further abuse.

A barangay VAW Desk can assist with referrals and documentation. However, a Barangay Protection Order has a more limited statutory scope than a court-issued protection order and may not address every form of online psychological abuse.

Civil liability for privacy violations

Criminal charges are not the only possible remedy. Articles 19, 20, 21, and 26 of the Civil Code of the Philippines protect dignity, privacy, and personal rights.

Depending on the facts, a victim may claim:

Actual damages, such as treatment expenses, lost income, or documented security costs;
Moral damages for humiliation, anxiety, wounded feelings, or mental suffering;
Exemplary damages in particularly abusive cases; and
Injunctive relief intended to stop or prevent further publication.

A civil case may proceed separately from the criminal case, subject to procedural rules on civil liability arising from an offense.

What to do immediately

1. Address any immediate physical danger

If the offender is nearby, stalking you, threatening physical harm, or trying to force an in-person meeting, move to a safe place and contact the police or emergency services.

Tell at least one trusted person what is happening. Isolation makes it easier for the offender to control the situation.

Do not attend a payment meeting alone. Any controlled payment, delivery, or entrapment operation should be planned and conducted by law-enforcement officers.

2. Do not send more money, images, passwords, or OTPs

Payment rarely guarantees deletion. An offender who receives money may demand a larger amount after learning that the victim can pay.

Do not provide:

Another intimate photo or video;
A government ID;
Banking credentials;
One-time passwords;
Cloud-storage access;
Social-media recovery codes; or
Remote access to your phone or computer.

If you have already paid, do not blame yourself and do not delete the transaction record. The receipt, destination account, QR code, wallet number, cryptocurrency address, or bank details may help investigators identify the recipient.

Contact the bank or e-wallet provider’s fraud channel immediately and ask it to flag the receiving account and determine whether a hold or recovery is still possible. Reversal is not guaranteed, particularly after the funds have been transferred or withdrawn.

3. Preserve the evidence before blocking or reporting the account

Do not rely on a few cropped screenshots. Preserve enough context to show who made the demand, what was threatened, when it happened, and where payment was supposed to go.

Save the following:

The complete conversation, including earlier messages;
The account name, username, profile link, user ID, phone number, and email address;
The threat and exact payment demand;
Deadlines imposed by the offender;
Bank, e-wallet, cryptocurrency, or remittance details;
URLs of posts, profiles, cloud folders, or shared files;
Call logs and missed-call records;
Email headers, when available;
Payment receipts;
Names of people who received the video or threat;
Notifications showing that material was posted or sent; and
Any message in which the offender admits recording, possessing, editing, or distributing the material.

Take a screen recording that starts from the app’s home screen or profile page and proceeds to the conversation. This helps show that screenshots came from the identified account rather than being assembled from unrelated images.

Keep original, unedited files. Do not add annotations to the only copy. Make a working copy for highlighting or printing.

The Rules on Electronic Evidence, A.M. No. 01-7-01-SC, allow electronic documents and data messages to be used as evidence, but they must still be authenticated. The phone, original file, metadata, full conversation, and testimony of the person who received the messages can help establish authenticity and integrity. (Lawphil)

4. Avoid unnecessarily copying or forwarding the intimate material

Preserving evidence does not mean sending the video to friends, group chats, or multiple offices.

Keep the material in a secure location and ask investigators how they want it submitted. When possible:

Preserve the original device;
Use an encrypted or password-protected storage method;
Limit access to the investigator, prosecutor, or lawyer handling the case;
Record who received a copy and when; and
Avoid uploading it to ordinary shared folders.

If the victim is a minor—or was under 18 when the material was created—do not download, forward, or create additional copies merely to prove that it exists. Show investigators the message, link, or device and let trained officers handle the material.

5. Secure your accounts

Assume that the offender may have obtained access to more than one account.

From a trusted device:

Change the password of the email account connected to your social-media and cloud accounts.
Enable two-factor authentication using an authenticator app where possible.
Sign out of unknown sessions and devices.
Review account-recovery email addresses and phone numbers.
Remove unfamiliar browser extensions and connected applications.
Check cloud albums, archived chats, shared folders, and deleted-item folders.
Set social-media friend lists and contact information to private.
Warn close contacts not to open suspicious links or send money.

Do not erase or factory-reset the device containing the evidence before an investigator determines whether forensic examination may be necessary.

6. Create a clear chronology

Write a factual timeline while the details are fresh.

Include:

When and how you first met the offender;
When the video was recorded or allegedly obtained;
Whether you consented to recording;
Whether you ever gave written consent to sharing;
When the threat began;
Every demand made;
Payments or attempted payments;
Accounts used by the offender;
Persons who received the material; and
Steps already taken to report or remove it.

Avoid guesses. Separate what you personally saw from what another person told you.

Where to report sextortion in the Philippines

You may report the incident through one or more of the following channels:

Office or channel	When it is useful
PNP Anti-Cybercrime Group or a PNP cybercrime desk	Online threats, fake accounts, hacked accounts, digital tracing, coordinated payment operations, and forensic examination
NBI Cybercrime Division or an NBI regional/district office	Cyber-enabled extortion, anonymous offenders, cross-regional conduct, digital forensics, and case build-up
CICC Hotline 1326 and cybercrime reporting channel	Initial reporting, incident intake, coordination, and referral to the appropriate agency
Local police station	Immediate danger, known local offender, stalking, physical threats, or urgent documentation
PNP Women and Children Protection Desk	Victim is a woman or child, particularly in intimate-partner abuse or child sexual exploitation cases
Office of the City or Provincial Prosecutor	Filing a complaint-affidavit for preliminary investigation, with or without prior police investigation
Barangay VAW Desk	Safety planning, documentation, and referral in cases involving violence against a woman by an intimate partner

The NBI website lists its main office and regional or district offices. The DOJ Office of Cybercrime coordinates matters involving cybercrime, digital evidence, international cooperation, and preservation procedures. The government’s CICC reporting channel may also be accessed through the CICC cybercrime report page. (National Bureau of Investigation)

A complaint under RA 9995 ordinarily does not need to pass through barangay conciliation because the law carries a penalty exceeding the jurisdictional ceiling for Katarungang Pambarangay proceedings. Do not allow an offender to use an unnecessary barangay confrontation to delay the preservation of digital evidence.

Documents to bring when filing a complaint

Bring both printed and electronic copies where available.

Document or evidence	Practical notes
Government-issued ID	Bring the original and photocopies
Complaint-affidavit or written narrative	State facts chronologically and identify attachments
Screenshots and printouts	Keep uncropped originals on the device
Phone, tablet, or computer	Bring chargers and do not alter the device
URLs and account identifiers	Record exact links, not only display names
Payment records	Include destination account, reference number, date, time, and amount
Proof of relationship	Useful in RA 9262 cases, such as messages, photographs, marriage record, or child’s birth certificate
Witness details	Include persons who saw the messages or received the material
Platform reports	Save confirmation emails and report numbers
Medical or psychological records	Relevant when claiming psychological harm or damages
Birth record or proof of age	Essential when a child is involved

A police blotter is useful documentation, but it is not the same as a complete criminal complaint. Ask whether the incident has been assigned for investigation and whether you must execute a formal complaint-affidavit.

Notarization is commonly required for complaint-affidavits and supporting affidavits. Notarizing screenshots themselves does not automatically prove that every message is genuine; authentication still depends on testimony, device evidence, metadata, and surrounding circumstances.

What happens after you report?

Initial assessment and evidence preservation

The investigator will review the messages, identify possible offenses, and obtain account, payment, or device details. You may be asked to provide a supplemental affidavit or surrender a device temporarily for forensic examination.

Law enforcement may send preservation requests to service providers so that relevant subscriber information, traffic data, or content is not routinely deleted. Preservation does not automatically give investigators access to the data. Disclosure or examination may require an appropriate cybercrime warrant or other lawful authority.

Complaint-affidavit and preliminary investigation

For offenses requiring preliminary investigation, the complaint and supporting evidence are filed with the city or provincial prosecutor.

The usual process includes:

Filing and docketing of the complaint;
Evaluation of supporting affidavits and evidence;
Issuance of a subpoena to the respondent;
Submission of a counter-affidavit;
Possible submission of replies or clarificatory evidence; and
A prosecutor’s resolution determining whether probable cause exists.

Probable cause does not mean proof beyond reasonable doubt. It means there is a reasonable basis to believe that a crime was committed and that the respondent probably committed it.

If probable cause is found, an information is filed in court. The court then determines the next procedural steps, including the issuance of a warrant when legally justified.

Practical timelines

There is no reliable one-size-fits-all timeline.

Stage	Common practical range
Police or NBI intake	Same day to several days
Initial preservation and account requests	Days to weeks, depending on urgency and available identifiers
Platform review or takedown	Hours to several weeks
Local case build-up	Several weeks to several months
Prosecutor’s preliminary investigation	Commonly several months, depending on subpoenas and workload
Cross-border identification or evidence request	Several months or longer
Criminal trial	Often measured in years rather than weeks

Anonymous accounts, foreign platforms, incomplete URLs, deleted conversations, cryptocurrency payments, and overloaded investigative offices are common bottlenecks.

How to request removal without destroying your evidence

After preserving the necessary evidence, report the material through the platform category for:

Nonconsensual intimate imagery;
Sexual exploitation;
Extortion or blackmail;
Harassment;
Impersonation; or
Child sexual exploitation, when applicable.

For every post or account:

Save the exact URL and account identifier.
Capture the post and surrounding profile information.
Submit a platform report.
Save the report confirmation or reference number.
Ask trusted recipients to report the material without forwarding it.
Inform the investigator if the content disappears.

Removal from a search engine does not necessarily remove the material from the original website. Each source, repost, mirror, and account may require a separate report.

Avoid publicly posting a detailed accusation while the investigation is ongoing. A public warning can alert the offender, encourage deletion of evidence, expose the victim to further circulation, or create a separate dispute over mistaken identity or defamatory statements.

If the offender is a former partner

Former partners frequently rely on the victim’s fear that filing a case will expose the relationship or recording.

Remember:

A consensual relationship does not authorize distribution.
Consent to sexual activity is not consent to recording.
Consent to recording is not written consent to publication.
A breakup does not transfer ownership of the other person’s privacy.
Deleting the offender’s copy from one phone may not remove cloud backups or forwarded copies.

When RA 9262 applies, document not only the threat but also the pattern of control: repeated calls, monitoring, stalking, humiliation, financial demands, threats against children, workplace contact, and messages sent to relatives.

If the offender is outside the Philippines

A foreign location does not automatically prevent a Philippine investigation. Philippine cybercrime jurisdiction may exist when an element of the offense occurred in the Philippines, a relevant computer system was situated here, or the harm was suffered by a person in the Philippines.

Cross-border cases are usually slower because subscriber records or content may require cooperation from foreign platforms, overseas law-enforcement agencies, or judicial authorities.

A foreign victim outside the Philippines may still make an initial report, particularly when the offender is in the Philippines. However, the victim may later need to:

Execute a sworn affidavit;
Present identification;
Authenticate foreign documents;
Permit lawful extraction of device data; and
Testify personally or through an authorized remote procedure if allowed by the court.

An affidavit notarized abroad may need an apostille if executed in a country that is a party to the Apostille Convention. Documents from a non-participating country may require authentication through the appropriate Philippine diplomatic or consular post. A special power of attorney can allow a Philippine representative to perform specified administrative acts, but it normally cannot replace the victim’s personal testimony about the threats.

If a child is involved

When the person shown was under 18 at the time the image or video was created, report the incident immediately to the PNP Women and Children Protection Center, NBI, local police, or another child-protection authority.

Republic Act No. 11930, the Anti-Online Sexual Abuse or Exploitation of Children and Anti-Child Sexual Abuse or Exploitation Materials Act, provides broader and more serious protections for children than the laws governing adult intimate images. (Lawphil)

Do not:

Forward the file to relatives to ask whether they recognize the child;
Upload it to an ordinary cloud folder;
Confront a suspected offender in person;
Pay for additional images as “proof”; or
Publicly identify the child.

Preserve the device, account information, message thread, and link, then let trained investigators handle the sexual material.

Common mistakes that weaken a case

Deleting the conversation immediately

Blocking may protect your mental health, but first preserve the evidence unless continued contact creates an immediate safety risk. Muting or restricting the account may be a temporary alternative.

Cropping out the sender’s identity

A screenshot of the threat without the username, phone number, profile URL, timestamp, or preceding conversation may be difficult to authenticate.

Negotiating for days without reporting

Long negotiations give the offender time to withdraw funds, delete accounts, change devices, or move the material to another platform.

Threatening the offender back

Threats, hacking attempts, or public accusations can complicate the investigation and expose you to a separate complaint.

Conducting a private entrapment operation

A victim should not organize a dangerous meetup, secretly recruit armed companions, or create a new offense for the suspect to commit. Coordinate with trained officers.

Paying repeatedly

A first payment often becomes proof to the offender that pressure works. Preserve the receipt and report instead of entering an open-ended payment cycle.

Assuming a fake name makes reporting pointless

Investigators may work from telephone numbers, IP-related records, payment accounts, device identifiers, recovery emails, transaction trails, and linked profiles. The visible name is only one possible lead.

Frequently Asked Questions

Is threatening to leak a private video already a crime?

It can be. A demand for money backed by a threat to commit the criminal act of distributing an intimate video may constitute grave threats even before publication. Other laws may also apply depending on the language used and the parties’ relationship.

What if I agreed to make the video?

Consent to recording does not authorize copying, selling, forwarding, uploading, or broadcasting. RA 9995 expressly recognizes this distinction.

Should I pay so the offender will delete it?

Payment provides no reliable guarantee of deletion and often leads to further demands. Preserve the payment instructions and report them. If you already paid, keep the receipt and immediately notify the payment provider and investigators.

Can I report without my family finding out?

You can initially report directly to a cybercrime unit, NBI office, prosecutor, or appropriate protection desk. However, complete anonymity cannot be guaranteed once a criminal case proceeds because the accused has constitutional rights to know and answer the accusation. Ask investigators to limit unnecessary copying and disclosure of the intimate material.

Can the police arrest the offender immediately?

An immediate warrantless arrest is possible only in legally defined situations, such as when officers personally observe an offense being committed or other conditions for a lawful warrantless arrest exist. Otherwise, investigators generally build the case and seek the appropriate warrant or file the complaint with the prosecutor.

Do I need the offender’s real name?

No. File the report using every identifier available: profile links, usernames, phone numbers, account numbers, QR codes, wallet addresses, email addresses, photographs, and transaction records.

What if the video is fake or AI-generated?

The absence of a genuine recording does not make the demand lawful. Threats, fraud, coercion, identity misuse, gender-based online sexual harassment, and civil privacy or dignity violations may still apply. Clearly tell investigators that the material is fabricated or manipulated.

Can I file a case if I am a man or LGBTQ+ person?

Yes. RA 9995 and the Revised Penal Code are not limited to female victims. The Safe Spaces Act also recognizes gender-based online sexual harassment affecting people of different sexes, sexual orientations, and gender identities.

Do I have to go through the barangay first?

Generally, not for an RA 9995 complaint because its penalty places it outside barangay conciliation. You may report directly to law enforcement or the prosecutor. A barangay or VAW Desk may still assist with safety planning and referrals.

What if the offender already sent the video to one person?

Save proof of the transmission and ask the recipient not to forward it. Obtain the recipient’s name and a brief account of when and how it was received. Actual distribution may support an RA 9995 charge in addition to the offense arising from the original threat.

Key Takeaways

A threat to leak an intimate video for money may already constitute a crime even before anything is posted.
Consent to record a private video is not consent to distribute it.
Preserve the full conversation, profile details, URLs, payment instructions, original files, and device evidence.
Do not send more money, intimate material, passwords, or one-time codes.
Report promptly to the PNP Anti-Cybercrime Group, NBI, local police, CICC Hotline 1326, or the appropriate prosecutor.
Save evidence before requesting platform removal, but do not forward the intimate material unnecessarily.
Cases involving former partners may also fall under RA 9262, while cases involving minors require immediate action under RA 11930.
Foreign or anonymous offenders can still be investigated, although cross-border evidence requests usually take longer.