Most offshore working relationships end quietly. Someone gives notice, the final invoice is paid, accounts are handed over, and both sides move on.
Then there is the other kind.
A contractor resigns, or is let go, and within days something shifts. A demand arrives for money that was never in the contract. Then a message to your biggest client. Then a one-star review that has nothing to do with your product. Then an email that appears to come from your own company, sent to people on your list, saying things you would never say.
If you are reading this from Toronto, Melbourne, Manchester, Rotterdam, or Ann Arbor, and the person doing this is sitting in the Philippines, your first instinct is probably that you are out of options. Your lawyer at home tells you they cannot help. The platform you hired through has closed the ticket. The distance feels like a wall.
It is not a wall. It is an advantage, and this article explains why.
Why your contractor being in the Philippines works in your favour
Here is the counterintuitive part. If a former contractor doing this were in your own country, you would be looking at a slow civil suit, high legal costs, and a defendant who knows exactly how long you can afford to fight.
Because they are in the Philippines, they are sitting inside a jurisdiction with an unusually developed set of criminal remedies for exactly this conduct, and they are physically within reach of the prosecutors and cybercrime units that enforce them.
A demand letter from your solicitor in London or your attorney in Ontario is, to a person in Davao or Cebu, a piece of paper from very far away. A formal letter from Philippine counsel, citing the specific Philippine statutes they have violated, addressed to them in a language and a legal system that can actually reach them, is a fundamentally different document. In my experience, that difference alone resolves a significant number of these matters without anything further being filed.
The forms on which they turn against your business
Business owners who contact me about this usually describe one or two symptoms. The pattern is almost always broader. These are the recurring categories worth knowing about, whether or not you are experiencing them yet.
Retained access. The contractor still has credentials to an email account, CRM, invoicing tool, scheduling system, social media account, or Google Business Profile, sometimes months after the engagement ends. Often nobody realises until something is changed or deleted.
Impersonation accounts. A new email address, social profile, or business listing is created using your name, your company name, or a near-identical variation. Messages then go out that appear to come from you. This is one of the most damaging variants, because the harm lands on your reputation before you even know the account exists.
Client contact. Your clients, prospects, property managers, vendors, or partners receive messages about a “dispute” they have no business knowing about, often framed as a plea for help or an appeal to fairness. The goal is pressure, not resolution.
Review and platform attacks. One-star reviews on Yelp, GMB, Facebook, Trustpilot, or industry directories, written by someone who was never a customer, describing an employment grievance rather than a transaction. Sometimes coordinated across several accounts.
Data exfiltration. Client lists, contact databases, pricing sheets, supplier terms, internal documents, or credentials copied before departure. In some cases these are then used competitively. In others they are simply held as leverage.
Deletion and lockout. Files wiped, drives cleared, admin access transferred away, a domain or listing left unrecoverable. This is often the most operationally expensive category and the least visible until it is too late.
Payment interference. Altered invoice details, redirected payment instructions, or unauthorised charges. Occasionally, invoices submitted to your own clients without your knowledge.
Manufactured hardship and escalating demands. Requests for money framed around emergencies, medical claims, family crises, or newly discovered “unpaid” entitlements. Each payment tends to be followed by another request, because the first one established that pressure works.
Third parties who appear from nowhere. Relatives, friends, or supposed representatives who begin contacting you and your clients on the contractor’s behalf. It is worth verifying that these people exist and are who they say they are before you engage with them at all.
Doxxing and personal exposure. Photographs, family details, home information, or private messages published or threatened to be published. This is the category where the matter stops being commercial and becomes something you should treat seriously and immediately.
What Philippine law actually provides
Depending on the facts, conduct of this kind can engage several distinct bodies of Philippine law. This is not an exhaustive list and none of it is legal advice on your specific situation, but it gives you a sense of the toolkit.
The Cybercrime Prevention Act of 2012 (Republic Act No. 10175) covers illegal access to computer systems and accounts, computer-related identity theft where someone acquires or misuses your identifying information, and cyber-libel where defamatory statements are published online. Identity theft in particular carries a heavier penalty than many people expect.
The Revised Penal Code addresses threats, coercion, and the specific offence of threatening to publish damaging material in order to extract payment. It also covers estafa, which applies where money is obtained through false pretences.
The Data Privacy Act of 2012 (Republic Act No. 10173) applies where your client or customer data has been taken, retained, or disclosed without authority. Complaints can be brought before the National Privacy Commission, which is a separate and sometimes faster track than the criminal courts.
The SIM Registration Act (Republic Act No. 11934) means that mobile numbers used to contact you are tied to registered subscriber records. Anonymity in this context is thinner than the sender usually assumes.
Civil remedies under the Civil Code allow claims for damages and, in appropriate cases, court orders restraining further publication.
You do not need to know which of these applies. That is the assessment work.
The risk nobody warns you about: worker classification
This is where I want to be direct with you, because it is the part that most foreign business owners get wrong, and it is often the reason a straightforward dispute becomes expensive.
When a former contractor demands “additional compensation,” they are frequently not describing a contractual claim. They are describing unpaid wages, overtime, thirteenth month pay, or separation pay. Those are employment concepts, and they exist regardless of what your contract called the relationship.
Philippine labour tribunals do not decide employment status by reading the title on the agreement. They apply a control test that looks at what actually happened: who set the hours, who directed the methods, who could discipline or dismiss, and how payment was structured. A contractor with fixed daily hours, mandatory check-ins, assigned tools, and weekly payment can look a great deal like an employee to the National Labor Relations Commission, no matter what the PDF says.
This matters enormously for timing. If you send an aggressive demand letter without first assessing this exposure, you can find yourself defending a money claim or an illegal dismissal case that costs several multiples of the original demand. I have seen exactly this sequence.
The correct order is always: assess first, then act. That is not a delay tactic. It is the difference between closing a matter and opening a second one.
Practical prevention, from someone who has been on both sides
Before I practised law, I spent years as an independent contractor working with foreign clients, and I still maintain that side of my professional life. I have signed the same kinds of agreements your contractors sign, used the same platforms, and been paid through the same channels. That perspective shapes the advice I give, and it is worth sharing some of it freely.
Offboard on the day, not the week after. Revoke access to every system on the final day of the engagement. Not the password only. Sessions, connected apps, delegated access, recovery emails and phone numbers, app passwords, and any role held on a business listing or ad account. The gap between departure and revocation is where most of the damage in these cases originates.
Never share a login when you can grant a role. Individual accounts with defined permissions can be withdrawn cleanly. A shared password cannot be, because you can never be certain where it went.
Keep client data out of personal tools. If your contractor’s own Google Drive, personal phone, or private inbox holds your client list, you have no practical way to enforce deletion later.
Write the separation terms before you need them. A short, properly drafted agreement covering confidentiality, non-disparagement, no client contact, no impersonation, and return or deletion of data is inexpensive to prepare in advance and enormously valuable afterwards. Once it is signed, subsequent misconduct becomes a documented breach rather than a contested account of events.
Do not negotiate under pressure. If a demand arrives attached to a threat, any payment you make confirms that the method works. The next demand will follow. Preserve everything and take advice before responding at all.
Preserve properly. Screenshots are useful but native exports are better. Export full chat histories where the platform allows it, keep emails with complete headers, and record dates and times of discovery. Several Philippine causes of action run on prescriptive periods measured from the date you discovered the conduct, so dates matter more than people expect.
Say nothing publicly. Do not reply to the review. Do not post an explanation. Anything written while you are angry becomes evidence, and it is rarely evidence that helps you.
How I work on these matters
I act for business owners in North America, Australia, the United Kingdom, and continental Europe who are dealing with Philippine-based contractors, and I handle these matters in defined phases so you are never exposed to open-ended costs.
Assessment. I review your agreement, payment records, communications, and the conduct itself, and I give you a written analysis covering the other side’s exposure, your own classification risk, and any counter-claim worth taking seriously. You get a clear answer on whether this is a one-letter matter or something larger, before you commit to anything further.
Formal demand. Where warranted, a cease-and-desist and demand letter issued on law office letterhead, citing the specific Philippine offences engaged, and formally served. This is not a template. It is drafted to the facts, and it carries the weight of coming from counsel who can actually file in the jurisdiction where the recipient lives.
Escalation, if needed. Criminal complaint-affidavits before the Office of the City Prosecutor, complaints before the National Privacy Commission, and platform-level takedown and impersonation reports. You will never need to travel to the Philippines to do this. Complaint affidavits can be executed before a Philippine Consulate in your country or notarised and apostilled locally, and the investigation stage is largely document-driven.
Defence. If a labour claim is brought against you before the NLRC, I appear and defend it. This is a specific competence and not every adviser who will write you a letter can carry the matter through to a tribunal.
Prevention. Contractor agreements, separation and confidentiality agreements, offboarding protocols, and data handling terms drafted for the way remote engagements actually operate, so the next relationship ends the quiet way.
If this is happening to you now
Three things, before anything else. Stop responding to the person contacting you. Secure every account and revoke every access you can find today. Preserve everything and do not delete a single message, however unpleasant it is to keep.
Then get an assessment. Not a letter first, an assessment first. The sequence matters.
Book a consultation and send me what you have. I will tell you plainly whether you have a problem worth pursuing, what it will cost, and what the realistic path forward looks like.
Atty. Bryan Alvin Rommel Y. Villarosa is a Philippine lawyer and notary public based in Bacolod City, practising in labour and employment, data privacy, cybercrime, and cross-border commercial disputes, with a particular focus on advising foreign businesses engaging Philippine-based remote workers.
This article is general information about Philippine law and does not constitute legal advice on any specific situation. No solicitor-client or attorney-client relationship is created by reading it. Outcomes depend entirely on the facts of each matter.
