Being harassed or threatened on Facebook, Messenger, Instagram, TikTok, X, YouTube, or another online platform can feel frightening and overwhelming—especially when the person knows where you live, involves your family, threatens to publish private material, or hides behind a fake account. In the Philippines, “social media harassment” is not one single crime. The applicable law depends on exactly what was said or done, whether other people saw it, whether the conduct was sexual or gender-based, whether the offender is a current or former partner, and whether private information or intimate images were exposed.

Your priorities should be to protect your physical safety, preserve usable digital evidence, secure your accounts, and report the incident through the correct legal channel.

If the threat may be real, protect yourself first

Treat the situation as urgent when the person:

Threatens to kill, injure, kidnap, rape, or physically attack you or a family member.
Mentions your address, workplace, school, daily route, vehicle, or current location.
Sends photographs showing that you are being watched.
Has a history of violence, stalking, weapon possession, or violating protection orders.
Demands money, sexual content, a meeting, or another act in exchange for not harming or exposing you.
Says the attack will happen at a specific time or place.

In an immediate emergency, call the Philippines’ Unified 911 Emergency Hotline, contact the nearest police station, or go to a secure public location. Tell a trusted person what is happening and avoid meeting or confronting the sender. The national 911 system coordinates police, fire, medical, and rescue assistance. (DILG)

Do not delay urgent safety measures merely because the threat was made “only online.” A person can commit a punishable threat through a private message, comment, email, group chat, or other electronic communication.

What Philippine laws may apply to social media harassment or threats?

The exact charge depends on the evidence. One incident may violate several laws at the same time.

Online conduct	Possible Philippine legal basis	Important distinction
Threatening to commit murder, physical injury, kidnapping, sexual assault, property damage, or another crime	Articles 282 to 285 of the Revised Penal Code on grave threats, light threats, and other light threats	The wording, seriousness, conditions imposed, surrounding conduct, and credibility of the threat matter.
Forcing someone through threats or intimidation to pay, resign, meet, withdraw a complaint, send photographs, or do something against their will	Article 286 on grave coercion; grave threats; robbery, extortion, or other offenses depending on the demand	A demand combined with a threat is more serious than an offensive comment alone.
Persistent messages, tormenting conduct, humiliation, or harassment not covered by a more specific offense	Article 287 on unjust vexation	Unjust vexation generally covers conduct intended to annoy, irritate, torment, distress, or disturb another person.
Publicly posting false and damaging accusations	Articles 353 and 355 on libel, together with Section 4(c)(4) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175	Cyberlibel normally requires publication to someone other than the person defamed. A purely private one-to-one message may not satisfy this element, although another offense may apply.
Sexual threats, incessant sexual messages, sexist or homophobic abuse, cyberstalking, impersonation, or unauthorized sexual content	Sections 12 and 13 of the Safe Spaces Act, Republic Act No. 11313 of 2019	The law covers gender-based online sexual harassment in both public posts and private messages.
Harassment by a husband, former husband, boyfriend, former boyfriend, dating partner, sexual partner, or father of a woman’s child	Anti-Violence Against Women and Their Children Act, Republic Act No. 9262 of 2004	Online threats, stalking, public humiliation, and repeated harassment may form part of psychological violence. Protection orders may be available.
Posting or threatening to post intimate photographs or videos without consent	Anti-Photo and Video Voyeurism Act, Republic Act No. 9995 of 2009	Consent to taking or recording intimate content does not automatically mean consent to publish or share it.
Sexual images or exploitation involving a person below 18	Republic Act No. 11930 of 2022 and other child-protection laws	Do not forward, repost, or repeatedly download the material. Preserve only what investigators instruct you to preserve.
Hacking an account, stealing login credentials, or using another person’s identity online	Sections 4(a) and 4(b) of Republic Act No. 10175	Illegal access and computer-related identity theft may apply even if no defamatory post was made.
Publishing addresses, phone numbers, IDs, medical information, or other personal data to facilitate harassment	Data Privacy Act of 2012, Republic Act No. 10173; Civil Code remedies	“Doxxing” is not automatically one specific crime in every case. Liability depends on how the data was obtained, processed, disclosed, and used.

The relevant primary texts include the Cybercrime Prevention Act of 2012, the Revised Penal Code, the Safe Spaces Act, Republic Act No. 9262, and the Anti-Photo and Video Voyeurism Act. (Lawphil)

Offensive speech is not always a crime

A rude opinion, criticism, insult, political disagreement, or negative review is not automatically criminal. Investigators and prosecutors examine the exact words, context, audience, intent, truth or falsity of factual accusations, and whether a credible threat or other prohibited act occurred.

For cyberlibel, the prosecution generally must establish a defamatory imputation, publication, identification of the offended person, and malice, subject to recognized defenses and constitutional protections. In Disini v. Secretary of Justice, the Supreme Court upheld the cyberlibel provision as applied to the original author of the defamatory online material, while rejecting automatic criminal liability for people who merely receive and react to it. (Lawphil)

What to do after receiving online threats or harassment

1. Preserve the evidence before blocking or reporting the account

Digital material can disappear within seconds. Before blocking the person, collect evidence showing not only the message but also where it came from.

Preserve the following:

Full-screen screenshots showing the account name, username, profile photograph, date, time, and complete message.
The direct URL of every post, profile, video, comment, or account involved.
A screen recording that begins at the person’s profile and navigates to the threatening content.
The full conversation, including earlier messages that explain the context.
Original photographs, videos, voice recordings, attachments, and email files.
Notifications showing when the message was received.
The date and time when you first discovered a defamatory post.
Names of people who saw the post or received similar messages.
Platform-generated reports, confirmation emails, and reference numbers.
Records of financial demands, payment instructions, bank accounts, e-wallet numbers, or cryptocurrency addresses.
Proof of harm, such as medical records, counseling records, missed work, security expenses, damaged business relationships, or messages from concerned relatives and clients.

Keep the original files untouched. Do not crop, annotate, apply filters, or repeatedly resave the only copy. You may create marked working copies, but retain the original version on the device and in a secure backup.

Electronic documents are admissible when they satisfy the Rules of Court and can be properly authenticated. Screenshots are useful, but investigators may still need testimony identifying who captured them, how they were obtained, and why they accurately represent the original communication. The Rules on Electronic Evidence govern the authentication and admissibility of electronic documents. (Lawphil)

2. Secure your accounts and physical location

After preserving the evidence:

Change the passwords of your social media and email accounts.
Turn on two-factor authentication.
Log out of unfamiliar devices and revoke unknown app access.
Remove public location information, workplace schedules, school details, and family addresses.
Warn household members, building security, your employer, or your child’s school when the threat mentions them.
Check whether the sender has access to shared cloud storage, family accounts, old devices, or location-sharing apps.
Block or restrict the account when continued contact is unnecessary for evidence collection.

Do not click links or open files sent by the harasser. They may be intended to steal credentials, obtain your location, or infect your device.

3. Do not pay a blackmailer or send additional intimate content

Payment often leads to further demands rather than permanent deletion. Preserve the demand, payment details, and account information, then report the incident promptly.

Do not send another image “to prove cooperation,” and do not meet the offender alone. Where intimate material is involved, limit the number of people who handle or view it.

4. Report the content to the platform

Use the platform’s reporting process after preserving evidence. Select the most accurate category, such as:

Credible threat of violence.
Harassment or bullying.
Stalking.
Impersonation.
Non-consensual intimate imagery.
Sexual exploitation of a child.
Disclosure of private information.
Hacked or compromised account.

Save the report confirmation and case number. A platform report can help remove content or restrict an account, but it is not the same as filing a criminal complaint. Platform removal also does not guarantee that subscriber records or technical data will remain available indefinitely.

5. Report the incident to the correct government office

Situation	Office or first point of contact
Immediate danger or threatened physical attack	Unified 911, nearest police station, or local emergency responders
Fake accounts, anonymous threats, hacking, cyberlibel, online extortion, or technical tracing	PNP Anti-Cybercrime Group or National Bureau of Investigation Cybercrime Division
Harassment by a current or former intimate partner	PNP Women and Children Protection Desk, barangay VAW desk, prosecutor’s office, or Family Court
Gender-based online sexual harassment	PNP Anti-Cybercrime Group or NBI, which are identified implementing bodies under RA 11313
Unauthorized processing or exposure of personal data	National Privacy Commission
Workplace-related harassment	Employer’s Committee on Decorum and Investigation or human-resources process, without giving up criminal remedies
Student or school-related harassment	School administration or child-protection committee, together with law enforcement when warranted

The NBI’s published procedure allows members of the public to file a complaint with its Cybercrime Division, undergo an initial interview, execute sworn statements, submit supporting documents, and permit examination of a relevant device. Its Citizen’s Charter lists no government fee and estimates approximately one hour and ten minutes for the initial intake stages, excluding the actual investigation. (National Bureau of Investigation)

The Department of Justice’s Office of Cybercrime also handles cybercrime complaints and facilitates preservation and production of computer data, legal assistance, international cooperation, and referrals to investigating agencies. (Department of Justice)

6. Prepare a complete complaint packet

Bring both printed copies and a digital copy stored on a USB drive or other secure medium. A practical complaint packet includes:

Valid government-issued identification.
A chronological incident summary.
A sworn complaint-affidavit.
Printed screenshots with attachment labels.
Original digital files.
URLs and account identifiers.
The device on which the messages were received, when requested.
Witness affidavits from people who saw the posts or messages.
Proof connecting the account to a known person.
Medical, psychological, employment, or financial records showing harm.
Previous police blotters, barangay records, demand letters, or protection orders.
The platform’s report confirmation.
Birth certificate or proof of relationship when RA 9262 or child-protection laws are involved.

The complaint-affidavit should state:

Who you are and how you know the respondent.
What the respondent said or did, using the exact material words when possible.
When and where each incident occurred or was discovered.
Which account, device, or platform was used.
Why you believe the threat is credible.
Who else saw or received the material.
What harm, fear, expense, or disruption resulted.
How each attached exhibit was obtained.

Affidavits must be sworn before a person authorized to administer oaths. Some investigating offices can administer the oath during intake. Privately prepared affidavits are commonly notarized using a valid ID.

7. Ask investigators about immediate data preservation

Social media records are controlled by private companies, many of which are located outside the Philippines. Subscriber information, login records, IP logs, deleted messages, and content may be unavailable by the time a case reaches court.

Under Republic Act No. 10175 and its implementing rules, law-enforcement authorities may require preservation of specified computer data in connection with a valid, officially docketed complaint. The usual preservation period is six months and may be extended under legally defined conditions. A preservation request does not automatically disclose the information; disclosure or search may require the appropriate cybercrime warrant. (Lawphil)

This is one reason to report anonymous threats quickly. A victim cannot personally compel a foreign platform to reveal an account holder’s identity, but an authorized investigator can pursue lawful preservation and disclosure procedures.

8. Understand what happens after filing

A police blotter records an incident, but it does not necessarily start a complete criminal prosecution. Ask whether your matter has been formally assigned for investigation and obtain the reference number and investigator’s contact details.

The usual process is:

Initial investigation: Police or NBI officers interview the complainant, examine evidence, and attempt to identify the account user.
Complaint before the prosecutor: A sworn complaint and supporting evidence are submitted to the proper city or provincial prosecutor.
Respondent’s submission: When the respondent is known and the procedure requires it, the respondent may be ordered to submit a counter-affidavit.
Prosecutor’s resolution: The prosecutor determines whether the evidence meets the applicable prosecutorial standard.
Court filing: If the complaint is approved, an information is filed in the court with jurisdiction.
Trial and civil liability: The prosecution presents authenticated evidence and witnesses. Damages may also be claimed where legally available.

The 2024 DOJ National Prosecution Service rules now govern preliminary investigations conducted by prosecutors. Depending on the prescribed penalty and court jurisdiction, a case may undergo regular preliminary investigation, expedited preliminary investigation, or summary investigation. (Lawphil)

Intake may occur on the same day, but technical tracing, foreign-platform responses, prosecutorial review, and court proceedings can take months or longer. Delays are common when the account is anonymous, records are overseas, screenshots are incomplete, or the complainant cannot identify the person operating the account.

Is barangay conciliation required?

Not every social media complaint must first pass through the barangay.

Under the Katarungang Pambarangay provisions of Republic Act No. 7160, barangay conciliation generally applies only when the parties actually reside in the same city or municipality and the dispute is not within a statutory exception. Offenses carrying imprisonment exceeding one year or a fine exceeding ₱5,000 are excluded, as are certain disputes requiring urgent legal action. (Lawphil)

In practice:

Serious threats, cyberlibel, Safe Spaces Act violations, hacking, and many cybercrime offenses are generally not treated as ordinary barangay disputes.
A prosecutor may examine whether barangay conciliation applies to a lower-level local offense involving residents of the same city or municipality.
Urgent action may proceed when delay could cause further harm or allow the case to prescribe.
A barangay settlement does not necessarily erase criminal liability for offenses that cannot legally be compromised.

Do not allow informal mediation to place you in the same room as a person who has made credible violent threats without adequate safety arrangements.

Protection orders for harassment by a partner or former partner

Republic Act No. 9262 may apply when the victim is a woman and the offender is her:

Husband or former husband.
Current or former boyfriend.
Current or former dating or sexual partner.
Person with whom she has a common child.

Psychological violence may include repeated verbal abuse, stalking, harassment, public ridicule, intimidation, and conduct causing mental or emotional suffering. Online messages and social media posts can form part of the pattern.

Possible protective remedies include:

A Barangay Protection Order, generally effective for 15 days.
A Temporary Protection Order, generally effective for 30 days.
A Permanent Protection Order, which remains effective until revoked by the court.

A protection order may prohibit contact, communication, stalking, approaching the victim, or going near specified places. A criminal complaint and a protection-order proceeding may be pursued separately when the facts support both.

Privacy complaints and online doxxing

The Data Privacy Act may apply when a person, business, lender, employer, organization, or other personal-information controller unlawfully obtains, uses, or discloses personal data.

The National Privacy Commission has emphasized that photographs, videos, contact details, and other personal information shared online must still be processed for a lawful purpose and in a proportionate manner. Public availability does not automatically permit every harmful use. (National Privacy Commission)

A formal NPC complaint normally requires the prescribed form, supporting documents, notarization, and submission in person, by courier, or through the Commission’s authorized email channel. The NPC publishes its current procedure and schedule of fees on its formal complaint page. (National Privacy Commission)

An NPC complaint may be appropriate when an online lender contacts your relatives to shame you, a company exposes confidential customer information, or someone weaponizes data obtained from an organization. A purely personal quarrel involving publicly known information may require a different criminal or civil remedy.

Civil remedies for online harassment

Even when conduct does not result in a criminal conviction, it may create civil liability.

Articles 19, 20, and 21 of the Civil Code require people to exercise rights with justice, honesty, and good faith and provide compensation for unlawful or deliberately harmful acts. Article 26 protects dignity, personality, privacy, family relations, and peace of mind. Article 33 permits an independent civil action for damages in cases involving defamation, fraud, or physical injuries. (Lawphil)

Depending on the case, civil relief may include:

Actual damages for proven financial loss.
Moral damages for mental anguish, serious anxiety, humiliation, or wounded feelings.
Exemplary damages in appropriate cases.
Attorney’s fees where legally justified.
Injunctive or preventive relief against continued harmful conduct.

Civil cases require court filing fees based partly on the relief or damages claimed and generally take longer than emergency protective measures.

Special situations

The harasser is using a fake or anonymous account

You may still report the incident. Preserve the account URL, user ID when visible, linked phone numbers, payment details, reused photographs, writing patterns, and any earlier communication connecting the account to a person.

A display name or profile photograph alone does not prove who operated the account. Technical data, admissions, witness testimony, device evidence, or circumstantial evidence may be needed before someone can be formally charged.

The threat was sent through a private message

A private message can support charges such as threats, coercion, unjust vexation, gender-based online sexual harassment, extortion, or violations of RA 9262. However, a one-to-one message may not constitute cyberlibel because libel ordinarily requires publication to a third person.

The offender threatens to release intimate images

Preserve the threat and report it immediately, even if the content has not yet been uploaded. Do not negotiate by sending more material.

If the material is released, document each URL and report it as non-consensual intimate imagery. Republic Act No. 9995 penalizes unauthorized copying, distribution, publication, or broadcasting of covered intimate recordings, even where the original recording was made with consent. (Lawphil)

The victim is below 18

A parent, guardian, school official, social worker, or trusted adult should assist the child. Report sexual exploitation to law enforcement without circulating the material among relatives, teachers, or group chats.

Republic Act No. 11930 specifically addresses online sexual abuse or exploitation of children and child sexual abuse or exploitation material. (Lawphil)

The harassment is connected with work or school

Preserve internal emails, chat logs, meeting records, and previous reports. File through the employer’s or school’s internal procedure while preserving the right to approach police, the NBI, the prosecutor, or another government agency.

An internal finding is not automatically binding on a criminal court, but workplace or school records can provide useful evidence of notice, repeated conduct, witnesses, and institutional response.

The offender or victim is outside the Philippines

Republic Act No. 10175 gives Philippine courts jurisdiction in specified situations where an element of the offense occurred in the Philippines or damage was suffered by a person in the Philippines. Cross-border cases are possible, but obtaining records, identifying the offender, serving documents, and enforcing warrants may take longer. (Lawphil)

A victim abroad should also report immediate threats to local police in the country where the victim is physically located. For Philippine proceedings, an affidavit executed abroad may be sworn before a Philippine embassy or consulate. A document notarized by a foreign notary may need an apostille or consular authentication, depending on the country and the receiving office’s requirements. (Philippine Embassy in New Delhi)

Common mistakes that weaken social media harassment cases

Blocking the account before capturing the profile, URLs, and full conversation.
Submitting only cropped screenshots that hide the sender, date, or context.
Editing the original files or adding annotations to the only saved copy.
Publicly threatening the alleged offender in return.
Posting the alleged offender’s personal information and exposing yourself to a countercomplaint.
Paying a blackmailer without first preserving payment instructions.
Assuming a profile name proves the operator’s real identity.
Treating a police blotter as the final criminal complaint.
Waiting for a platform to finish its internal investigation before approaching law enforcement.
Forwarding intimate images to friends “for safekeeping.”
Ignoring the date on which a defamatory post was discovered.
Filing under cyberlibel when the stronger and more appropriate offense is threats, coercion, sexual harassment, hacking, or a violation of RA 9262.

Fees and realistic timelines

Step	Typical cost	Practical timing
Emergency call or police response	No government fee	Immediate, depending on location and available responders
Police or NBI cybercrime complaint intake	Generally no filing fee; printing, storage media, and notarization may cost extra	Often completed the same day
Platform report	Free	Automated action may occur quickly; human review may take days or weeks
Cybercrime investigation and tracing	No complainant filing fee in ordinary criminal investigation	Weeks to months or longer
Prosecutor’s investigation	Generally no regular filing fee for the criminal complaint; incidental document expenses may apply	Commonly several months, depending on docket and complexity
NPC formal complaint	Notarization and fees under the current NPC schedule may apply	Several months or longer
Protection order	Costs depend on the proceeding and whether fee exemptions apply	Emergency or temporary relief may be issued much faster than a full criminal case
Civil damages case	Court docket fees depend on the claim; other litigation expenses apply	Often months or years

These are practical estimates, not guaranteed deadlines. Anonymous accounts, overseas data, incomplete evidence, multiple respondents, and repeated requests for records commonly lengthen the process.

Frequently Asked Questions

Is a screenshot enough to file a complaint?

A screenshot can be enough to begin an investigation, but it may not be enough by itself to secure a conviction. Preserve the original device, full conversation, URL, account details, timestamps, and testimony explaining how the screenshot was obtained.

Can I file a case if the post has already been deleted?

Yes, provided you preserved reliable evidence or other records remain available. Witnesses, notifications, cached material, platform records, and technical data may help. Report promptly because providers do not keep all data forever.

Can the police identify a fake Facebook or social media account?

Sometimes. Investigators may use lawful requests and cybercrime warrants to seek subscriber, traffic, or content data. Success depends on the platform’s records, retention periods, foreign legal requirements, and whether the offender used false information or anonymity tools.

Can I sue someone for insulting me in a private message?

Possibly, but not every insult is cyberlibel. Depending on the words and circumstances, threats, unjust vexation, coercion, gender-based online sexual harassment, RA 9262, or a civil action may be more appropriate.

Can I obtain a restraining order against an online harasser?

A protection order may be available under RA 9262 when the required intimate or family relationship exists. In other situations, preventive or injunctive relief may be requested in an appropriate civil action, but there is no automatic general “social media restraining order” for every online dispute.

Must I go to the barangay before filing with the police or NBI?

Not necessarily. Barangay conciliation applies only to qualifying disputes. Serious threats, urgent cases, cybercrime offenses, and cases exceeding the statutory penalty limits may proceed without barangay conciliation.

Can I file even if the offender lives abroad?

Yes, when Philippine jurisdiction exists, but cross-border investigation and enforcement are usually slower. Report the matter both in the Philippines and to authorities where the immediate danger or offender is located when appropriate.

How long do I have to file cyberlibel?

In its April 8, 2026 resolution in Causing v. People, G.R. No. 258524, the Supreme Court held with finality that cyberlibel prescribes in one year from discovery by the offended party, authorities, or their agents, subject to the rules on interruption of prescription. Do not assume the period begins only when the post is deleted or that every later view restarts it.

Should I publicly expose the person who threatened me?

Public exposure can escalate the danger, compromise an investigation, reveal private data, or expose you to a countercomplaint. Preserve the evidence and report through the platform and proper authorities instead of organizing public retaliation.

Can a foreigner file a complaint in the Philippines?

Yes. Philippine criminal laws and protective procedures generally apply to people within Philippine territory regardless of citizenship. A foreign victim should bring a passport or valid identification and any immigration or local-contact details needed for notices and case follow-up.

Key Takeaways

Take specific or credible threats seriously, even when sent only through social media.
Preserve complete, unedited evidence before blocking or reporting the account.
Match the conduct to the correct law; not every abusive message is cyberlibel.
Report anonymous or technical cases promptly so investigators can seek data preservation.
A police blotter is not always the same as a formally investigated criminal complaint.
RA 11313, RA 9262, RA 9995, RA 10173, RA 10175, and the Revised Penal Code may overlap.
Barangay conciliation is not required for every online harassment case.
Cyberlibel currently has a one-year prescriptive period counted from discovery.
Avoid retaliation, public doxxing, payment to blackmailers, and circulation of intimate material.