Yes. A deepfake video used to harass, shame, threaten, extort, impersonate, or sexually humiliate someone can be illegal in the Philippines. There is still no single Philippine “anti-deepfake law” that covers every possible deepfake situation, but several existing laws can apply depending on what the video shows, how it was made, where it was posted, who the victim is, and what the uploader intended. The most common legal bases are the Safe Spaces Act, the Cybercrime Prevention Act, the Anti-Photo and Video Voyeurism Act, the Data Privacy Act, the Civil Code, and, when a child is involved, the Anti-OSAEC and Anti-CSAEM Act.
The short answer: deepfake harassment can be criminal, civil, or both
A deepfake is an edited or AI-generated image, audio, or video that makes it appear that a real person said or did something they did not actually say or do. In online harassment cases, deepfakes are often used to:
- make a person appear naked or involved in a sexual act;
- shame an ex-partner, classmate, co-worker, influencer, or public figure;
- threaten to upload a fake sexual video unless the victim pays money or resumes a relationship;
- impersonate a victim through a fake account;
- post false “scandal” videos to ruin a person’s reputation;
- bully an LGBTQ+ person using sexist, homophobic, transphobic, or misogynistic content;
- target a minor through fake sexualized images.
Under Philippine law, the issue is not only whether the video is “real.” The issue is whether the act violates a protected right: privacy, dignity, reputation, personal security, sexual autonomy, child protection, or control over one’s personal information.
This means a person cannot avoid liability simply by saying, “It was only AI,” “It was edited,” or “It was not a real video.”
Which Philippine laws may apply to deepfake online harassment?
The correct charge depends on the facts. One deepfake incident may violate more than one law.
| Situation | Possible Philippine law | Why it may apply |
|---|---|---|
| Sexual deepfake shared to shame, threaten, or harass an adult | Republic Act No. 11313, or the Safe Spaces Act | Gender-based online sexual harassment includes ICT-based acts that terrorize or intimidate victims, sexual remarks, cyberstalking, sharing sexual media without consent, impersonation, and posting lies to harm reputation. (Supreme Court E-Library) |
| Deepfake posted with false accusations or reputation-damaging claims | Republic Act No. 10175, or the Cybercrime Prevention Act, in relation to libel under the Revised Penal Code | Online libel covers libel committed through a computer system or similar means. (Supreme Court E-Library) |
| Fake account or manipulated profile using someone’s name, photo, face, or identifying details | RA 10175 computer-related identity theft | Identity theft includes intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of another person’s identifying information without right. (Supreme Court E-Library) |
| Actual intimate photo or video was copied, edited, reposted, or distributed | Republic Act No. 9995, or the Anti-Photo and Video Voyeurism Act of 2009 | The law penalizes taking, copying, reproducing, selling, distributing, publishing, broadcasting, showing, or exhibiting covered sexual or private images without the required consent. (Lawphil) |
| Victim is a child, or the material makes someone appear to be a child in sexual content | Republic Act No. 11930, or the Anti-OSAEC and Anti-CSAEM Act | The law expressly includes computer-generated or digitally crafted images of a person represented or made to appear as a child, and it recognizes AI-constructed “deepfake” pornographic videos as image-based sexual abuse. (Supreme Court E-Library) |
| Face, photo, voice, contact details, or other personal information were misused | Republic Act No. 10173, or the Data Privacy Act of 2012 | A victim may complain to the National Privacy Commission when personal information is misused, maliciously disclosed, improperly disposed of, or when data privacy rights are violated. (National Privacy Commission) |
| Victim wants damages even apart from criminal prosecution | Civil Code, especially Articles 26, 32, 33, and 2176 | Civil actions may be available for privacy invasion, defamation, abuse of rights, quasi-delict, or damages arising from wrongful acts. Article 33 allows a separate civil action for defamation. (Lawphil) |
Deepfake sexual videos and the Safe Spaces Act
For many adult victims, the most direct law is Republic Act No. 11313, also known as the Safe Spaces Act or the Bawal Bastos Law.
The Safe Spaces Act covers gender-based online sexual harassment. It is not limited to strangers in public places. It also applies to online acts using information and communications technology.
Under Section 12 of RA 11313, gender-based online sexual harassment includes acts that use ICT to terrorize or intimidate victims through physical, psychological, or emotional threats; unwanted sexual, misogynistic, transphobic, homophobic, and sexist remarks or comments; invasion of privacy through cyberstalking and incessant messaging; uploading or sharing without consent any media with sexual content; unauthorized recording and sharing of photos, videos, or information online; impersonating identities; posting lies to harm reputation; or filing false abuse reports to silence victims. (Supreme Court E-Library)
A deepfake may fall under this law when, for example:
- an ex-boyfriend posts a fake sex video of a woman in a group chat;
- a classmate creates an AI nude image of a student and circulates it;
- a fake account uses a person’s face and name to post sexual content;
- someone sends repeated threats saying they will upload a fake “scandal” video;
- a person is targeted with homophobic, transphobic, sexist, or misogynistic deepfake content;
- a manipulated video is used to silence, humiliate, or intimidate the victim.
The penalty for gender-based online sexual harassment is prision correccional in its medium period, or a fine of ₱100,000 to ₱500,000, or both, at the discretion of the court. If the offender is an alien, RA 11313 also provides that the person may be subject to deportation proceedings after serving sentence and paying fines. (Supreme Court E-Library)
The law also allows the court, where appropriate, to issue a restraining order directing the perpetrator to stay away from the offended person, the victim’s residence, school, workplace, or other places the victim frequents. (Supreme Court E-Library)
Deepfake videos and cyber libel
If the deepfake falsely portrays the victim as doing something shameful, criminal, immoral, corrupt, or scandalous, cyber libel may be considered.
Cyber libel is punished under RA 10175, the Cybercrime Prevention Act, in relation to libel under the Revised Penal Code. Section 4(c)(4) of RA 10175 covers libel committed through a computer system or similar means. (Supreme Court E-Library)
A deepfake may become cyber libel when it publicly communicates a false and defamatory imputation, such as:
- a fake video making it appear that a person is using illegal drugs;
- a fake “sex scandal” accusing someone of immoral conduct;
- a manipulated video falsely portraying a public employee as taking a bribe;
- a deepfake posted with captions accusing the victim of prostitution, cheating, theft, or corruption.
For libel, Philippine courts generally look at whether there is:
- a defamatory imputation;
- publication;
- identifiability of the victim; and
- malice, either presumed by law or proven from facts.
The Supreme Court has clarified that cyber libel under RA 10175 is not a totally new crime separate from libel. It is libel committed through a computer system or ICT, with a higher penalty because of the online medium. (Supreme Court E-Library)
A very important timing point: the Supreme Court has ruled that cyber libel prescribes in one year from discovery by the offended party, authorities, or their agents. In practical terms, a victim who is considering cyber libel should act quickly and preserve evidence early. (Supreme Court E-Library)
Deepfake pornography and the Anti-Photo and Video Voyeurism Act
RA 9995, or the Anti-Photo and Video Voyeurism Act of 2009, penalizes certain acts involving sexual images or videos taken, copied, reproduced, distributed, published, broadcast, shown, or exhibited without consent.
This law clearly applies when a real intimate photo or video was:
- taken without consent;
- copied or reproduced;
- sold or distributed;
- uploaded online;
- shared through messaging apps;
- edited and reposted;
- shown to others without written consent.
RA 9995 covers photos or videos of a person performing a sexual act or similar activity, or images of private areas taken under circumstances where the person had a reasonable expectation of privacy. It also penalizes publishing or broadcasting covered material through the internet, cellphones, and similar means. (Lawphil)
The penalty is imprisonment of three to seven years and a fine of ₱100,000 to ₱500,000, or both, at the discretion of the court. If the offender is an alien, deportation proceedings may follow after service of sentence and payment of fines. (Lawphil)
There is an important nuance for adult deepfakes: RA 9995 was drafted around actual photo or video coverage, recordings, or images of sexual acts or private areas. If the material is entirely AI-generated and does not involve the taking or copying of an actual intimate image, prosecutors may still examine the facts, but the fit under RA 9995 can be more legally debatable. In that situation, RA 11313, RA 10175, the Data Privacy Act, and civil remedies may be more directly relevant.
If the victim is a child, the law is much stricter
When the victim is below 18, or the deepfake makes a person appear to be a child in sexual content, the case becomes much more serious.
RA 11930, the Anti-Online Sexual Abuse or Exploitation of Children and Anti-Child Sexual Abuse or Exploitation Materials Act, expressly includes computer-generated, digitally or manually crafted images or graphics of a person represented or made to appear as a child. It also defines image-based sexual abuse as including the use of artificial intelligence to construct “deepfake” pornographic videos. (Supreme Court E-Library)
This means a person may not escape liability by claiming:
- “It was not a real child.”
- “It was AI-generated.”
- “It was only a cartoon-like edit.”
- “The minor consented.”
- “I only possessed it but did not upload it.”
RA 11930 punishes production, dissemination, possession, access, promotion, pandering, and other acts involving OSAEC and CSAEM. Some violations carry penalties as serious as life imprisonment and fines of at least ₱2,000,000, depending on the prohibited act. (Supreme Court E-Library)
The law also provides a referral pathway for reporting, investigating, prosecuting, and supporting victims of OSAEC and CSAEM. (Supreme Court E-Library)
What if the deepfake was made by an ex-partner?
If the perpetrator is a spouse, former spouse, boyfriend, girlfriend, former dating partner, live-in partner, or someone with whom the woman has or had a sexual or dating relationship, RA 9262, the Anti-Violence Against Women and Their Children Act of 2004, may also be relevant.
RA 9262 covers acts that cause or are likely to cause physical, sexual, psychological, or economic harm or suffering to a woman or her child, including threats, harassment, coercion, and acts that place the woman or child in fear of harm. (Supreme Court E-Library)
A deepfake may support a VAWC complaint if it forms part of psychological violence, sexual humiliation, coercive control, threats, stalking, or retaliation after a breakup. Examples include:
- “Come back to me or I will upload your fake sex video.”
- “Pay me or I will send this scandal to your family.”
- “I will ruin your reputation at work.”
- repeated messages using fake intimate images to control or shame the victim.
VAWC cases may involve barangay protection orders, temporary protection orders, permanent protection orders, criminal prosecution, support, custody-related relief, and other remedies depending on the facts.
What victims should do immediately
Digital evidence disappears quickly. Accounts get renamed, videos are deleted, group chats are cleared, and platforms may remove posts before authorities can preserve them. The first 24 to 72 hours are often critical.
1. Preserve the evidence without spreading the video
Do not repost the deepfake to “warn others.” Do not upload it to another account to prove it exists. This can unintentionally expand the harm and may create complications, especially if the content is sexual or involves a minor.
Instead, preserve:
- screenshots showing the post, caption, comments, username, profile URL, and date/time;
- screen recordings showing how the post is accessed from the profile or group;
- the exact URL or link;
- the account name, display name, user ID, email, phone number, or other identifiers if visible;
- chat messages containing threats or admissions;
- names of witnesses who saw the post;
- proof that the person in the video is identifiable as the victim;
- copies of takedown reports submitted to the platform;
- any demand for money, sex, reconciliation, silence, or other condition.
For sexual content involving a child, avoid downloading, forwarding, or saving unnecessary copies. Preserve only what is needed for reporting and let law enforcement handle the material.
2. Report to the platform
Use the platform’s reporting tools for non-consensual intimate content, impersonation, harassment, privacy violation, or child sexual exploitation. Save the report confirmation.
For urgent sexual deepfake cases, report as:
- non-consensual intimate image;
- sexual exploitation;
- harassment or bullying;
- impersonation;
- privacy violation;
- minor safety issue, if a child is involved.
Platform takedown is not the same as a criminal case, but it can reduce the immediate spread.
3. Report to the proper Philippine office
Depending on the case, reports may be made to:
| Office or unit | When it is relevant |
|---|---|
| PNP Anti-Cybercrime Group (PNP-ACG) | Cyber harassment, fake accounts, cyber libel, identity theft, online threats, deepfake uploads |
| NBI Cybercrime Division | Cybercrime complaints, digital forensics, identity tracing, serious online offenses |
| PNP Women and Children Protection Desk (WCPD) | Sexual harassment, VAWC, child-related complaints, gender-based violence |
| Barangay VAW Desk or Anti-Sexual Harassment Desk | Initial assistance, referral, documentation, safety planning, protection-related concerns |
| City or Provincial Prosecutor’s Office | Filing of criminal complaint-affidavit and preliminary investigation |
| National Privacy Commission (NPC) | Misuse, malicious disclosure, or improper processing of personal information |
| DSWD / local social welfare office | Child victim support, psychosocial services, shelter, referral |
Under the Safe Spaces Act, PNP-ACG is primarily responsible for receiving gender-based online sexual harassment complaints, while the CICC coordinates with PNP-ACG for measures to monitor and penalize such acts. (Supreme Court E-Library)
Under RA 10175, law enforcement may seek preservation and disclosure of computer data. Traffic data and subscriber information are preserved for at least six months, and content data may be preserved for six months from receipt of a law enforcement preservation order. Disclosure generally requires a court warrant and must be complied with within 72 hours from receipt of the order. (Supreme Court E-Library)
4. Prepare a complaint-affidavit
For criminal prosecution, the usual route is a complaint-affidavit submitted to the prosecutor or through law enforcement for referral. A complaint-affidavit is a sworn written statement narrating what happened.
It should normally include:
- full name and contact details of the complainant;
- facts in chronological order;
- how the deepfake was discovered;
- why the victim is identifiable;
- what the accused did, if known;
- screenshots, links, recordings, and chat messages;
- witness affidavits, if available;
- proof of relationship, if VAWC applies;
- proof of age, if the victim is a minor;
- platform report confirmations;
- a request for investigation and appropriate charges.
Affidavits usually need to be notarized. If executed abroad, Philippine authorities may require notarization before a Philippine consulate or an apostilled document, depending on where it will be used and the receiving office’s requirements.
5. Consider a takedown or preservation request
Victims commonly want the video removed immediately. That is understandable. But there is a balance: evidence must be preserved before it disappears.
A practical sequence is:
- capture screenshots, URLs, and screen recordings;
- report to law enforcement or prepare a complaint;
- submit platform takedown requests;
- ask investigators about preservation requests to the platform or service provider;
- keep a timeline of every report, email, ticket number, and response.
Common practical problems in deepfake cases
The uploader used a fake account
This is common. A fake username does not automatically end the case. Investigators may look at account recovery details, phone numbers, emails, IP-related records, device data, payment trails, reused usernames, mutual contacts, and admissions in chat. However, platforms based abroad may require formal legal process, and this can take time.
The video was deleted
Deleted does not always mean gone. Other users may have saved or forwarded copies. Platforms may also retain certain data for limited periods. This is why early preservation is important.
The victim is abroad
A Filipino abroad can still report a Philippine-related cybercrime, especially if the offender is in the Philippines, the victim was in the Philippines when damage occurred, the content used Philippine-based systems, or the harm is connected to the Philippines. RA 10175 gives Philippine courts jurisdiction over cybercrime cases where elements occur in the Philippines, a Filipino national is involved, a Philippine computer system is used, or damage is caused to a person in the Philippines. (Supreme Court E-Library)
For documents signed abroad, the victim may need consular notarization or apostille authentication. In practice, prosecutors and investigators may ask for the complainant’s affidavit, ID, screenshots, and proof of residence or identity.
The offender is a foreigner
Foreigners can be prosecuted in the Philippines if Philippine jurisdiction exists. Several laws also mention immigration consequences. RA 11313 and RA 9995 both state that an alien offender may be subject to deportation proceedings after serving sentence and paying fines. (Supreme Court E-Library)
The deepfake was posted in a school or workplace group chat
If the victim is a student, employee, trainee, or worker, internal remedies may also apply. Schools and workplaces have duties under the Safe Spaces Act. Educational institutions must have mechanisms such as a Committee on Decorum and Investigation (CODI), and schools are required to investigate possible gender-based sexual harassment or sexual violence when they know or reasonably should know about it. (Supreme Court E-Library)
Workplace incidents may involve the employer’s anti-sexual harassment policy, CODI, administrative sanctions, labor-related remedies, or civil service rules if the offender is a government employee.
The deepfake is “just a joke” or “meme”
A joke can still be illegal if it invades privacy, sexually humiliates the victim, damages reputation, threatens safety, impersonates the victim, or targets the person based on sex, gender, sexual orientation, gender identity, or gender expression. Intent matters, but so do the content, context, and effect.
Documents and evidence checklist
| Evidence | Why it matters |
|---|---|
| Screenshots with date, time, username, URL, and caption | Shows publication and context |
| Screen recording navigating from profile or chat to the video | Helps prove the post was accessible from that account |
| Original link or URL | Helps investigators and platforms trace the content |
| Account profile screenshots | Shows identity, username changes, followers, and possible links to offender |
| Chat messages or threats | Supports harassment, coercion, extortion, VAWC, or intent |
| Witness affidavits | Shows others saw the content and recognized the victim |
| Proof of identity of victim | Shows the person is identifiable |
| Proof of relationship | Important for VAWC or domestic abuse context |
| Birth certificate or school ID of minor | Important for child protection laws |
| Platform report/takedown receipts | Shows prompt action and supports timeline |
| Medical or psychological records, if any | Supports damages and impact |
| Notarized complaint-affidavit | Usually needed for prosecutor-level filing |
Possible penalties and remedies
| Legal basis | Possible consequence |
|---|---|
| Safe Spaces Act, RA 11313 | Imprisonment, fine of ₱100,000 to ₱500,000, restraining order, administrative sanctions where applicable |
| Cybercrime Prevention Act, RA 10175 | Criminal prosecution for cyber libel, identity theft, computer-related offenses, or cyber-enabled crimes; RTC cybercrime jurisdiction |
| Anti-Photo and Video Voyeurism Act, RA 9995 | Imprisonment of 3 to 7 years and fine of ₱100,000 to ₱500,000 |
| Anti-OSAEC and Anti-CSAEM Act, RA 11930 | Severe penalties, including life imprisonment and multimillion-peso fines for certain acts |
| Data Privacy Act, RA 10173 | NPC complaint, administrative enforcement, possible criminal liability for unlawful processing or malicious disclosure |
| Civil Code | Damages, injunction-related relief, independent civil action for defamation, moral and exemplary damages where proven |
Frequently Asked Questions
Is making a deepfake video automatically illegal in the Philippines?
Not always. A harmless parody, satire, or obvious fictional edit may not automatically be a crime. But once the deepfake is used to harass, threaten, shame, impersonate, sexually humiliate, extort, or defame a real person, Philippine criminal and civil laws may apply.
Is a fake sex video illegal even if the victim was never actually naked?
It can be. For adult victims, RA 11313 may apply if the fake sexual video is used for gender-based online sexual harassment, intimidation, privacy invasion, impersonation, or reputational harm. For child-related sexual deepfakes, RA 11930 is especially strict because it covers computer-generated or digitally crafted material that makes a person appear to be a child.
Can I file a case if the deepfake was only sent in a private group chat?
Yes. “Online” does not mean it must be posted publicly. Direct messages, private group chats, closed Facebook groups, Telegram channels, Discord servers, workplace chats, and class group chats can still be evidence of online harassment, publication, threats, or distribution.
What if I do not know who made the deepfake?
You can still report it. Law enforcement may investigate the account, platform records, subscriber information, device data, messages, and other digital traces. It is helpful to preserve links, usernames, screenshots, and any clue connecting the account to a real person.
Should I message the uploader and ask them to delete it?
Be careful. If you communicate, keep it short and preserve everything. Do not threaten, bargain, or send money. If the uploader is extorting you, the messages may become important evidence. In urgent situations, prioritize evidence preservation, platform reporting, and law enforcement reporting.
Can I sue for damages even if no criminal case is filed?
Possibly. Civil remedies may be available for defamation, privacy invasion, emotional distress, abuse of rights, or quasi-delict. Article 33 of the Civil Code allows an independent civil action for damages in defamation cases, separate from criminal prosecution. (Lawphil)
What if the victim is a foreigner in the Philippines?
A foreigner can be protected by Philippine law when the act or damage falls within Philippine jurisdiction. If the offender is also a foreigner, immigration consequences may be possible after conviction under certain laws. Documents executed abroad may need consular notarization or apostille authentication before use in Philippine proceedings.
How long does a cyber harassment case take?
Timelines vary widely. Initial police or NBI intake may happen within days, but tracing accounts, obtaining platform records, preparing affidavits, preliminary investigation, and court proceedings can take months or longer. Common bottlenecks include incomplete screenshots, missing URLs, deleted accounts, foreign platform response times, and lack of notarized affidavits.
Can the barangay handle a deepfake harassment case?
The barangay can help with documentation, referral, VAW Desk assistance, Anti-Sexual Harassment Desk assistance, and immediate safety support. But serious cybercrime, sexual harassment, voyeurism, child exploitation, or VAWC cases usually need police, NBI, prosecutor, or court action. Barangay conciliation is generally not a substitute for reporting serious online sexual harassment or cybercrime.
What should I avoid doing after discovering a deepfake?
Avoid reposting the video, forwarding it to friends, confronting the suspect in a way that destroys evidence, paying extortion demands, deleting conversations, or relying only on one screenshot. Preserve evidence first, report through the platform, and bring organized documentation to the proper office.
Key Takeaways
- Deepfake videos used for online harassment can be illegal in the Philippines even without a single standalone anti-deepfake law.
- The most relevant laws are RA 11313, RA 10175, RA 9995, RA 11930, RA 10173, RA 9262, and the Civil Code.
- Sexual deepfakes of adults often fall under the Safe Spaces Act, cybercrime laws, privacy laws, and civil liability.
- Deepfake sexual content involving children is treated much more severely under RA 11930, which expressly covers computer-generated and AI-related sexual material.
- Cyber libel may apply when the deepfake harms a person’s reputation through false and defamatory online publication.
- Evidence preservation is critical: save screenshots, URLs, account details, screen recordings, messages, and report confirmations.
- Victims may report to PNP-ACG, NBI Cybercrime Division, PNP Women and Children Protection Desk, the prosecutor’s office, the National Privacy Commission, school or workplace CODI, barangay VAW/ASH desks, or social welfare offices depending on the facts.
- Do not repost or spread the deepfake to prove your point. Preserve evidence carefully and report through proper channels.