What to Do If You Are Being Blackmailed Through Sextortion

If someone is threatening to send your intimate photos, videos, screenshots, or sexual messages to your family, employer, school, partner, or social-media contacts unless you pay money, send more content, or obey another demand, you are facing sextortion. The most important steps are to protect your immediate safety, preserve the evidence, secure your accounts, report the offender, and begin takedown requests. Do not let embarrassment stop you from acting. Philippine law can punish the threats, coercion, unauthorized sharing, and related cybercrime even when you originally agreed to take or send the image.

What Is Sextortion?

Sextortion is a form of blackmail involving sexual or intimate material. The offender may threaten to:

  • Publish a real intimate photo or video.
  • Send it privately to your relatives, friends, co-workers, clients, or classmates.
  • Upload a recording secretly captured during a video call.
  • Release edited, AI-generated, or “deepfake” sexual images.
  • Expose sexual conversations, dating-app activity, or personal information.
  • Continue the threats unless you pay, perform a sexual act, send more images, or remain in a relationship.

Philippine law does not use one single criminal charge called “sextortion” for every adult case. Prosecutors instead examine the precise threat, demand, relationship, content, payment trail, and manner of communication to determine which offenses apply.

A scammer does not necessarily need to publish anything before a case can arise. A written demand for money accompanied by a threat to commit a crime against your person, honor, property, or family may constitute grave threats under Article 282 of the Revised Penal Code. Using intimidation to force you to do something against your will may also constitute grave coercion under Article 286. Republic Act No. 10951 updated the penalties and fines for these offenses. (Supreme Court E-Library)

Philippine Laws That May Apply to Sextortion

Legal basis When it may apply
Article 282, Revised Penal Code — Grave Threats The offender threatens a criminal wrong against you, your honor, property, or family, often while demanding money or imposing a condition.
Article 286, Revised Penal Code — Grave Coercion Threats or intimidation are used to force you to pay, send more images, perform sexual acts, continue communicating, or do something else against your will.
Republic Act No. 9995 — Anti-Photo and Video Voyeurism Act of 2009 Someone secretly records intimate activity or copies, distributes, publishes, broadcasts, or shows covered intimate material without the written consent of the person depicted.
Republic Act No. 10175 — Cybercrime Prevention Act of 2012 An offense under the Revised Penal Code or another special law is committed through information and communications technology. Section 6 generally raises the applicable penalty by one degree.
Republic Act No. 11313 — Safe Spaces Act of 2019 The conduct amounts to gender-based online sexual harassment, including sexual threats, privacy invasion, incessant messaging, impersonation, or nonconsensual uploading and sharing of sexual media.
Republic Act No. 9262 — Anti-VAWC Act of 2004 A woman is being abused by a husband, former husband, dating or sexual partner, or a person with whom she has a common child.
Republic Act No. 11930 — Anti-OSAEC and Anti-CSAEM Act of 2022 The victim or person depicted was under 18 when the material was created, or the case otherwise involves online sexual abuse or exploitation of a child.
Civil Code Articles 19, 20, 21, and 26 The victim seeks damages, prevention, an injunction, or other relief for deliberate injury, humiliation, privacy invasion, or disturbance of private life.

Consent to take or send an image is not consent to distribute it

A common threat is: “You sent it willingly, so I can do whatever I want with it.” That is wrong.

Under the Anti-Photo and Video Voyeurism Act, covered sexual images and recordings cannot lawfully be copied, distributed, published, broadcast, shown, or exhibited without the required written consent. The law expressly states that these prohibitions can apply even when the person originally consented to the recording. A violation is punishable by imprisonment of three to seven years, a fine of ₱100,000 to ₱500,000, or both. (Lawphil)

The exact application of RA 9995 depends on what the material depicts and the circumstances in which it was created. Even where its technical elements are disputed, the threats may still support charges under the Revised Penal Code, the Safe Spaces Act, the Cybercrime Prevention Act, or other laws.

Online sexual threats may violate the Safe Spaces Act

Section 12 of the Safe Spaces Act covers gender-based online conduct that terrorizes or intimidates victims through physical, psychological, or emotional threats. It also covers cyberstalking, incessant messaging, unauthorized recording, impersonation, and uploading or sharing sexual photos, voice recordings, or videos without consent.

The law designates the Philippine National Police Anti-Cybercrime Group as the primary police unit for receiving complaints involving gender-based online sexual harassment. The prescribed penalty may include imprisonment, a fine of ₱100,000 to ₱500,000, or both. (Supreme Court E-Library)

The Safe Spaces Act is not limited to women. Its protection can extend to men and LGBTQ+ victims when the conduct meets the law’s gender-based sexual-harassment elements.

Sextortion by an intimate partner may be violence against women

RA 9262 may apply when the victim is a woman and the offender is her husband, former husband, present or former dating or sexual partner, or a person with whom she has a common child. The law recognizes psychological violence, intimidation, harassment, coercion, and threats that cause or are likely to cause psychological harm. (Supreme Court E-Library)

A qualifying victim may seek a protection order preventing the offender from threatening, harassing, telephoning, contacting, or communicating with her directly or indirectly. Temporary and permanent protection orders are issued through the proper Family Court or Regional Trial Court. A Temporary Protection Order can be issued upon filing and generally remains effective for 30 days, while a Permanent Protection Order remains effective until revoked by the court. (Supreme Court E-Library)

A Barangay Protection Order has a narrower statutory scope and primarily addresses the acts specified in Sections 5(a) and 5(b) of RA 9262. A purely online psychological-abuse case may therefore require a court-issued TPO or PPO rather than reliance on a BPO alone.

Cases involving minors require special handling

RA 11930 expressly recognizes image-based sexual abuse, including threats to distribute sexual images, sextortion scams, and AI-generated sexual deepfakes. When the person depicted was under 18, the material may be treated as child sexual abuse or exploitation material even if the child appeared to consent. (Supreme Court E-Library)

Internet service providers have specific reporting, blocking, preservation, and cooperation duties in cases involving child sexual abuse or exploitation material. For example, RA 11930 requires covered ISPs to notify the PNP or NBI within 48 hours after receiving qualifying information and to block identifiable child sexual abuse material within 24 hours after sufficient notice. (Supreme Court E-Library)

Do not download, forward, email, or make additional copies of a minor’s sexual image merely to show other people or prepare a report. Preserve the device and existing information, record the account name and URL without redistributing the file, and obtain instructions from trained investigators.

What to Do Immediately If You Are Being Sextorted

1. Deal with any immediate physical danger first

Call 911 if the offender is outside your home, knows your current location, is stalking you, has threatened physical violence, or you believe someone is in immediate danger. The Philippines’ Unified 911 system is the centralized emergency hotline for police, fire, medical, and rescue response. (DILG)

Move to a safe place and stay with someone you trust. Do not meet the offender alone, participate in a private “settlement,” or attempt your own entrapment operation.

2. Do not send more money or intimate material

Paying once does not guarantee deletion. It may instead tell the offender that you are willing and able to pay, leading to repeated or larger demands.

Do not send:

  • Additional photos or videos.
  • Identification documents.
  • Banking credentials or one-time passwords.
  • A “verification” selfie.
  • Money for supposed deletion, legal processing, hacking, recovery, or police fees.

If you already paid or sent more content, do not blame yourself and do not hide that fact from investigators. Payment records and later demands can strengthen the evidence of coercion.

3. Preserve evidence before deleting or blocking anything

Capture the evidence while the account, messages, posts, and payment instructions are still visible. Save:

  • Full-screen screenshots showing the account name, profile photo, platform, date, and time.
  • The complete threat and demand, not just one selected sentence.
  • The profile URL, post URL, channel name, group name, phone number, and email address.
  • A screen recording showing how you navigated from the profile to the conversation.
  • Exported chat records, where the platform allows export.
  • Voice messages, call logs, email headers, and original files.
  • E-wallet numbers, bank accounts, QR codes, cryptocurrency addresses, receipts, and transaction-reference numbers.
  • Names of people who received or saw the content.
  • Platform-report confirmation numbers and law-enforcement reference numbers.

Keep the original files and an unedited copy. Do not crop, annotate, enhance, rename repeatedly, or convert every file into a different format. Philippine rules recognize electronic documents and accurate printouts, but authenticity, integrity, and reliability may still need to be established. Preserving the original device and data makes that easier. (Supreme Court E-Library)

Write a simple timeline containing the date, time, platform, account used, exact demand, threatened consequence, payments made, and action you took. Note who handled each device or copy after the incident.

4. Secure your accounts using a clean device

Assume the offender may have obtained more than one password. From a device you reasonably believe is safe:

  1. Change the password of your primary email account first.
  2. Change social-media, cloud-storage, messaging, banking, and e-wallet passwords.
  3. Use a different password for every important account.
  4. Sign out all active sessions and unknown devices.
  5. Turn on multi-factor authentication.
  6. Check recovery email addresses and mobile numbers.
  7. Review connected apps and revoke unfamiliar access.
  8. Restrict who can see your friends list, employer, school, phone number, and relatives.
  9. Check shared cloud albums, recently deleted folders, and automatic photo backups.
  10. Inform your mobile provider if your SIM may have been taken over or duplicated.

Do not delete your account until the evidence has been preserved. Deactivation may make records harder for you to retrieve, although platforms may still retain information internally.

5. Contact the bank or e-wallet immediately if you paid

Report the transaction through the provider’s official fraud channel. Ask the institution to:

  • Open a fraud or scam case.
  • Attempt a hold, recall, reversal, or account restriction if still possible.
  • Preserve transaction details, recipient information, and relevant logs.
  • Give you a written reference number or acknowledgment.

A reversal or freeze is not guaranteed. Only the financial institution and authorized government bodies can take certain account-restriction measures. Fast reporting nevertheless improves the chance that funds and account records can be traced.

6. Report the account and request content removal

Report the profile, message, post, group, or file under the platform category for sexual exploitation, nonconsensual intimate imagery, blackmail, harassment, or threats to share private images.

Preserve the evidence first, then report both:

  • The account or person making the threat.
  • Each specific post, message, image, video, or URL.

For adults who still possess the image, StopNCII.org can create a digital fingerprint or hash on the user’s device. Only the hash is shared with participating platforms; the intimate image itself is not uploaded to StopNCII. The service works only with participating companies and cannot guarantee removal from every website or encrypted service. (stopncii.org)

If the image was taken when the person depicted was under 18, Take It Down offers a similar hash-based service. The image remains on the device, and the service specifically warns users not to download or share an image merely to submit it. (Take It Down)

If the content appears in Google results, use Google’s personal sexual-image removal process. Google permits reports involving real nonconsensual sexual images and fake or AI-generated sexual images. A Search removal does not necessarily delete the original file from the hosting website, so report the hosting page separately. (Google Help)

7. File a formal complaint even if the offender uses a fake identity

You do not need to know the offender’s legal name before reporting. Investigators can begin with usernames, phone numbers, account links, IP-related records, payment destinations, subscriber details, and device evidence.

The Rule on Cybercrime Warrants provides procedures for preservation, disclosure, interception, search, seizure, and examination of computer data. Service providers may be compelled to disclose relevant data when investigators obtain the required lawful order or warrant. (Supreme Court E-Library)

Do not threaten the offender with arrest, publish your own accusations, or alert the person that investigators are seeking records unless law enforcement tells you to do so. Premature confrontation may lead to account deletion, evidence destruction, or retaliation.

Where to Report Sextortion in the Philippines

Office or channel Best used for
911 Immediate physical danger, stalking, threatened violence, or another urgent emergency.
PNP Anti-Cybercrime Group or local police station Online threats, unauthorized sharing, fake accounts, blackmail, harassment, and urgent evidence preservation.
NBI Cybercrime Division or an NBI regional/district office More detailed cybercrime investigation, digital evidence, payment tracing, or cases involving several accounts or locations.
CICC National Anti-Scam Hotline 1326 Reporting and coordination for scam- and cybercrime-related incidents.
PNP Women and Children Protection Desk Cases involving women, children, intimate-partner abuse, sexual exploitation, or related safety concerns.
DSWD MAKABATA Helpline 1383 Violence, abuse, exploitation, or sextortion involving a child.
Barangay VAW Desk Immediate local support and assistance with RA 9262 protection-order procedures when the victim and relationship qualify.
National Privacy Commission A supplementary option where a company, organization, platform operator, employee, or other personal-information controller unlawfully handled sensitive personal data.

The NBI Cybercrime Division’s published procedure allows the general public to file a complaint, undergo a preliminary interview, execute sworn statements or submit prepared affidavits, and present a relevant device for examination. The listed intake steps carry no fee. The NBI’s current main-office and regional-office information should be checked through the official NBI contact page. (National Bureau of Investigation)

The Cybercrime Investigation and Coordinating Center operates the 1326 National Anti-Scam Hotline. Reports may also be directed through current DICT/CICC reporting channels, including the address published by DICT, 1326@dict.gov.ph. (Dictionary)

Cases involving violence against children may be reported through the DSWD MAKABATA Helpline 1383. (DSWD Field Office 7)

Documents to bring or prepare

Although an agency may initially accept a report without a complete file, a well-organized evidence pack reduces delay. Prepare:

  • At least one government-issued ID.
  • A chronological incident summary.
  • Printed screenshots with corresponding electronic copies.
  • Original phone, tablet, or computer when requested.
  • URLs, usernames, phone numbers, and email addresses.
  • Payment receipts and financial-account information.
  • A list of witnesses and recipients.
  • Copies of platform reports and takedown requests.
  • A draft complaint-affidavit, if available.

A complaint-affidavit is a written, sworn narrative explaining what happened and identifying the supporting evidence. It should state facts in chronological order, quote important threats accurately, identify each attachment, and avoid guesses presented as fact.

If you are abroad, coordinate first with the assigned Philippine investigator or prosecutor before paying for notarization, consular acknowledgment, apostille, courier service, or translation. The required form depends on how and where the affidavit will be used. A Philippine embassy or consulate can provide procedural information and referrals, but it does not replace the police, NBI, or prosecutor as the investigating authority.

Do You Need to Report to the Barangay First?

Usually, a serious sextortion case should not be delayed by informal barangay mediation.

Section 408 of the Local Government Code excludes offenses punishable by more than one year of imprisonment or a fine exceeding ₱5,000 from mandatory barangay conciliation. Many offenses commonly associated with sextortion exceed those limits. The law also contains residence-based and urgency-related exceptions. (Lawphil)

RA 9262 protection proceedings are not ordinary disputes that barangay officials should pressure the parties to compromise. A VAWC victim may approach the Barangay VAW Desk for safety assistance and protection-order support, while still reporting the criminal conduct to police, NBI, or the proper prosecutor.

What Happens After You File a Complaint?

The usual process may include:

  1. Initial intake and interview. An investigator reviews the threats, accounts, devices, payment details, and immediate risks.
  2. Execution of sworn statements. You and relevant witnesses may be asked to sign complaint-affidavits or supplemental affidavits.
  3. Evidence preservation. Investigators may send lawful preservation requests before data is deleted under a platform’s retention policy.
  4. Digital examination. A device may be examined or imaged. Ask for a receipt or documentation whenever an original device is surrendered.
  5. Identification work. Investigators may seek subscriber, traffic, payment, account-registration, or content data using the appropriate process.
  6. Prosecutor review. The complaint and evidence may be referred for preliminary or summary investigation, depending on the offenses and penalties involved.
  7. Court proceedings. If probable cause is found, the appropriate charge may be filed in court.
  8. Separate takedown efforts. Platform removal normally continues independently of the criminal case.

The NBI’s published estimates describe only the front-end complaint and interview process, not the duration of the full investigation. A straightforward intake may be completed the same day, while identification, warrants, forensic examination, prosecutor review, and international requests may take weeks or months. Common bottlenecks include incomplete URLs, cropped screenshots, deleted chats, foreign service providers, encrypted platforms, fake registration data, and delayed financial reporting.

A police report does not automatically erase online material. In Disini v. Secretary of Justice, the Supreme Court invalidated Section 19 of RA 10175, which had authorized executive blocking or restriction of computer data without the constitutionally required safeguards. In practice, victims often need simultaneous platform reports, preservation measures, investigative processes, and, where appropriate, court relief. (Lawphil)

Common Sextortion Scenarios and Practical Responses

The scammer may be bluffing

Some offenders use a list of your contacts, a harmless screenshot, or a fabricated collage to create panic. Preserve the threat and report it anyway. Threats, harassment, impersonation, and attempted coercion may be actionable even when the offender does not possess the material claimed.

The image is a deepfake

Save the original URL, account, threat, and available source image used to create the fake. Do not repeatedly repost the deepfake to prove it is false. The Safe Spaces Act, the Revised Penal Code, civil privacy remedies, and other laws may apply depending on the circumstances. RA 11930 expressly includes AI-generated sexual deepfakes within its discussion of image-based sexual abuse in cases involving children. (Supreme Court E-Library)

The offender is an ex-partner

Preserve messages showing the relationship and the pattern of abuse. Where RA 9262 applies, ask specifically about a TPO or PPO that prohibits direct and indirect communication. This may cover contact through relatives, friends, new accounts, or intermediaries. (Supreme Court E-Library)

The victim is male or LGBTQ+

Report the conduct. RA 9995, the Cybercrime Prevention Act, the Revised Penal Code, civil-law remedies, and the Safe Spaces Act are not limited to female victims. RA 9262 has a more specific scope protecting women and their children in qualifying relationships, but its limits do not remove protection under other laws.

The victim or offender is outside the Philippines

Report in the country where you are located and to Philippine authorities when the offender, victim, account, payment destination, device, or another material part of the incident has a Philippine connection. Cross-border cases often take longer because records may require coordination with foreign platforms, police agencies, or central authorities.

The offender is a co-worker, teacher, or classmate

After preserving evidence, report the incident to the employer’s or school’s designated mechanism. The Safe Spaces Act requires employers and educational institutions to maintain procedures for addressing gender-based sexual harassment, protecting complainants from retaliation, and maintaining confidentiality to the greatest extent possible. An internal case does not prevent a separate criminal complaint. (Supreme Court E-Library)

Common Mistakes That Can Weaken a Sextortion Case

  • Deleting the entire conversation before saving it.
  • Saving only cropped screenshots without dates, usernames, or URLs.
  • Editing screenshots or combining several messages into an unexplained collage.
  • Giving the offender advance warning that police are tracing the account.
  • Paying a “hacker,” “recovery agent,” or stranger who promises guaranteed deletion.
  • Forwarding intimate material to friends for advice.
  • Downloading or redistributing sexual material involving a minor.
  • Posting the offender’s alleged identity publicly before verification.
  • Meeting the offender for a private settlement.
  • Waiting several weeks before reporting a bank or e-wallet transfer.
  • Assuming that a platform report automatically preserves evidence for police.
  • Giving investigators a factory-reset device.
  • Allowing several people to handle or alter the original files without keeping a record.

Civil and Privacy Remedies

Civil Code Articles 19, 20, 21, and 26 require people to act with justice and good faith and to respect the dignity, privacy, and peace of mind of others. Deliberate humiliation, privacy invasion, and injury contrary to law, morals, good customs, or public policy may support a claim for damages, prevention, or other relief even when the conduct does not result in a criminal conviction. (Supreme Court E-Library)

An injunction or court order may be useful when the offender is identifiable and there is a continuing threat of publication. Court relief, however, normally requires a verified pleading, supporting evidence, proper jurisdiction, service on the respondent, and compliance with procedural requirements.

A complaint under the Data Privacy Act may also be considered where sensitive personal information was improperly collected, stored, accessed, or disclosed by an organization or personal-information controller. The National Privacy Commission’s formal complaint procedure requires the prescribed form, notarization, and submission by the permitted channel; the NPC also publishes a schedule of fees. This route is usually supplementary to urgent police reporting and platform takedown efforts. (National Privacy Commission)

Frequently Asked Questions

Should I pay a sextortion scammer?

Generally, no. Payment does not ensure deletion and frequently leads to more demands. If you already paid, immediately preserve the transaction details, contact the financial provider, and include the payment in your report.

Is it illegal to share an intimate photo that I originally sent willingly?

It can be. Consent to create or send an image is not automatically written consent to copy, publish, broadcast, or distribute it. RA 9995 expressly recognizes this distinction for material covered by the law. (Lawphil)

Should I block the offender immediately?

Preserve the threat, account information, payment details, URLs, and complete conversation first. After preservation, report and block or restrict the account unless investigators advise keeping communication open for a controlled operation.

Can the police trace a fake Facebook, Instagram, Telegram, or dating-app account?

Sometimes. Investigators may use subscriber information, traffic data, payment records, linked accounts, device evidence, IP-related records, and lawful requests to platforms. Success depends on data retention, provider cooperation, jurisdiction, and whether the offender concealed or falsified identifying information.

Can I report sextortion without knowing the offender’s name?

Yes. A complaint can begin with usernames, URLs, phone numbers, email addresses, payment accounts, wallet addresses, messages, and device evidence. Do not delay solely because the account uses a false name.

What if the photo or video has already been posted?

Preserve the exact URL and a screenshot showing where it appeared. Report the content to the hosting platform, submit Search-removal requests where applicable, use StopNCII or Take It Down when eligible, and update the investigator with every new link or recipient.

Will filing a police report automatically remove the content?

No. Criminal investigation and content removal are related but separate processes. Continue platform reports and takedown requests while investigators pursue preservation, identification, and evidence.

Do I have to go through the barangay before filing a sextortion complaint?

Not necessarily. Many applicable offenses fall outside mandatory barangay conciliation because of their penalties, the parties’ locations, or the urgency of the situation. Report continuing cyber threats directly to the PNP, NBI, or other proper authority.

What should I do if the victim is under 18?

Do not forward or download additional copies. Preserve the device, account information, URLs, and threats; contact the PNP Women and Children Protection Desk, PNP Anti-Cybercrime Group, NBI, DSWD, or MAKABATA Helpline 1383; and use Take It Down only with material already present on the appropriate device.

Can a foreigner file a sextortion complaint in the Philippines?

Yes, when the incident has a sufficient Philippine connection, such as an offender, victim impact, payment account, device, communication, or relevant evidence located in the Philippines. A foreign victim may also report to authorities in the country where the victim is located so cross-border preservation can begin promptly.

Key Takeaways

  • Sextortion may constitute grave threats, grave coercion, cybercrime, photo or video voyeurism, gender-based online sexual harassment, VAWC, or child sexual exploitation.
  • Do not pay, send additional content, meet the offender, or hire an unverified “recovery” service.
  • Preserve complete, unedited evidence before blocking, deleting, or deactivating accounts.
  • Secure your email, social-media, cloud, banking, and e-wallet accounts from a clean device.
  • Report financial transfers immediately and request preservation of transaction records.
  • Use platform reporting, Google removal tools, StopNCII, or Take It Down while pursuing the legal complaint.
  • Report immediate danger through 911; cybercrime cases may be reported to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, CICC through 1326, or the appropriate local police unit.
  • A victim does not need to know the offender’s real identity before filing a complaint.
  • Never create, forward, or download additional copies of sexual material involving a minor.
  • Platform removal, evidence preservation, criminal investigation, protection orders, and civil remedies can proceed on separate but coordinated tracks.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.