Yes. A Philippine cybercrime complaint can include multiple anonymous harassers, especially when several fake accounts, dummy profiles, phone numbers, email addresses, or chat handles appear to be attacking the same victim. You do not need to know each person’s real name before reporting. What matters at the start is that you clearly identify each account, preserve the online evidence, explain what each account did, and ask the proper cybercrime unit to investigate who is behind them.
The important nuance is this: you may report many anonymous accounts in one complaint package, but investigators and prosecutors still need to establish which person controlled which account, what specific law each person may have violated, and whether the acts are connected or should be treated as separate offenses.
Can You File One Cybercrime Complaint Against Several Unknown Accounts?
Yes. In practice, victims often submit one complaint-affidavit covering all related online harassment incidents, then list the anonymous accounts separately, for example:
| Label in complaint | Online identity | Platform | Act complained of |
|---|---|---|---|
| John Doe 1 | Facebook profile “Maria Truth” | Posted defamatory accusations | |
| Jane Doe 2 | TikTok handle “@expose123” | TikTok | Uploaded edited video and insults |
| John Doe 3 | Unknown prepaid number ending 4821 | SMS/Viber | Sent threats |
| Jane Doe 4 | Gmail address “nameandshame…” | Sent doxxing messages to employer |
This is acceptable because Philippine criminal procedure recognizes that an accused whose true name is unknown may be described by a fictitious name, with a statement that the true name is unknown. If the true name is later discovered, it may be inserted in the complaint, information, and record. This rule appears in Section 7, Rule 110 of the Revised Rules of Criminal Procedure, as quoted by the Supreme Court in Victor Jose Tan Uy v. Office of the Ombudsman. (Supreme Court E-Library)
For cybercrime cases, this is especially important because online identities are often usernames, page names, email addresses, burner SIMs, or accounts using stolen photos. A complaint should therefore describe the person as “the unknown individual using and controlling [specific account/handle/number], whose true name is presently unknown.”
The Main Rule: One Complaint Package Can Cover Many Accounts, But Each Act Must Be Clear
A common mistake is to simply write, “Several anonymous people are harassing me online,” then attach random screenshots. That is usually too vague.
A stronger complaint separates the facts per account:
Who is the account? Username, display name, profile URL, email address, phone number, group chat name, account ID, or page link.
What exactly did the account do? Posted a defamatory statement, sent a threat, impersonated you, leaked private information, sent sexual messages, uploaded intimate material, or coordinated others to attack you.
When did it happen? Dates and times matter because online evidence can disappear and some offenses have prescriptive periods.
Where did it happen online? Facebook, Messenger, TikTok, X, Instagram, YouTube, Telegram, Viber, SMS, email, website, forum, or group chat.
How are the accounts connected, if at all? Same wording, same timing, same hashtag, same edited image, same target, same group chat, same IP clues if available, or one account reposting another.
What harm resulted? Fear, reputational damage, job consequences, school consequences, family conflict, business loss, anxiety, stalking, or exposure of personal data.
The more organized the complaint is, the easier it is for the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or prosecutor to understand that this is not a random pile of screenshots but a pattern of conduct by identifiable online accounts.
What Laws May Apply to Anonymous Online Harassment in the Philippines?
“Cyber harassment” is a common phrase, but Philippine law does not always use that exact label. The correct charge depends on the act.
Cybercrime Prevention Act of 2012: RA 10175
The main cybercrime law is Republic Act No. 10175, the Cybercrime Prevention Act of 2012. It covers specific cybercrime offenses such as illegal access, illegal interception, data interference, computer-related forgery, computer-related fraud, computer-related identity theft, cybersex, unsolicited commercial communications, and cyber libel. (Supreme Court E-Library)
For online harassment cases, the commonly relevant parts are:
| Online act | Possible legal basis |
|---|---|
| Fake account using your identity | Computer-related identity theft under Section 4(b)(3), RA 10175 |
| Defamatory post accusing you of a crime, vice, or dishonorable act | Cyber libel under Section 4(c)(4), RA 10175, in relation to Articles 353 and 355 of the Revised Penal Code |
| Threats sent through chat, text, email, or social media | Grave threats or other Revised Penal Code offense, in relation to Section 6 of RA 10175 |
| Hacking or accessing your account without permission | Illegal access under Section 4(a)(1), RA 10175 |
| Altering, deleting, or damaging digital files | Data interference under Section 4(a)(3), RA 10175 |
| Coordinated use of fake login data or malicious tools | Misuse of devices under Section 4(a)(5), RA 10175 |
Section 6 of RA 10175 is important because it covers crimes under the Revised Penal Code and special laws when committed through information and communications technology, with the penalty generally one degree higher. (Supreme Court E-Library)
Cyber Libel
Cyber libel applies when a person publishes a defamatory statement through a computer system or similar means. RA 10175 specifically refers to libel as defined under Article 355 of the Revised Penal Code when committed through a computer system. (Supreme Court E-Library)
The Supreme Court has explained that cyber libel is not an entirely new crime separate from libel; rather, the Cybercrime Prevention Act recognizes the use of ICT as the means of publishing defamatory material.
This matters when multiple anonymous accounts are involved. A person who merely receives or reads a defamatory post is different from a person who created, posted, reposted with defamatory content, or coordinated publication. Each account’s role should be described separately.
Safe Spaces Act: RA 11313
If the harassment is sexual, gender-based, misogynistic, homophobic, transphobic, or involves cyberstalking or incessant messaging, Republic Act No. 11313, the Safe Spaces Act, may apply.
Its implementing rules define gender-based online sexual harassment to include acts using ICT to terrorize or intimidate victims through threats, unwanted sexual or sexist remarks, cyberstalking, incessant messaging, non-consensual sharing of sexual media, unauthorized recording or sharing of photos or information online, impersonation, lies posted to harm reputation, and false abuse reports meant to silence victims. (Supreme Court E-Library)
For gender-based online sexual harassment, the rules specifically identify the PNP Anti-Cybercrime Group as the unit that receives complaints, develops online reporting mechanisms, and apprehends perpetrators, while the DOJ leads in evidence-gathering and case build-up standards. (Supreme Court E-Library)
Data Privacy Act: RA 10173
If the anonymous harassers are spreading your address, phone number, school, workplace, private photos, IDs, medical information, or other personal data, the Data Privacy Act of 2012, RA 10173, may also be relevant. The law protects personal information in government and private information systems and created the National Privacy Commission. (National Privacy Commission)
This is especially useful in doxxing-type incidents, although criminal liability will still depend on the specific facts, the data involved, how it was obtained, and how it was disclosed.
Anti-Photo and Video Voyeurism Act and Other Special Laws
If the harassment involves intimate images, sexual videos, voyeuristic material, minors, trafficking, sextortion, or threats to release private sexual content, other laws may be involved, including:
- RA 9995, the Anti-Photo and Video Voyeurism Act of 2009
- RA 11930, the Anti-Online Sexual Abuse or Exploitation of Children and Anti-Child Sexual Abuse or Exploitation Materials Act
- RA 9262, the Anti-Violence Against Women and Their Children Act, if the harasser is a spouse, former spouse, sexual partner, dating partner, or person with whom the woman has or had a sexual or dating relationship
- Revised Penal Code provisions on threats, coercions, unjust vexation, slander, or other offenses, depending on the words and acts used
Where Should You File the Complaint?
For multiple anonymous online harassers, the most practical offices are usually:
| Office | Best for | Practical notes |
|---|---|---|
| PNP Anti-Cybercrime Group (PNP ACG) | Cybercrime complaints, online sexual harassment, threats, fake accounts, coordinated harassment | Often accessible through regional or local cybercrime desks |
| NBI Cybercrime Division / Cybercrime Regional Centers | Complex cases, anonymous accounts, account tracing, digital forensic assistance | NBI’s citizen charter for computer crime victims includes complaint filing, preliminary interview, sworn statements, and device examination |
| Office of the City or Provincial Prosecutor | Filing a criminal complaint for preliminary investigation | Usually needs organized affidavits and evidence |
| National Privacy Commission | Personal data misuse, doxxing, unlawful processing or disclosure of personal information | Best when the issue is privacy/data misuse by an identifiable person or organization |
| Barangay | Minor, non-cyber disputes where parties are known and live in the same city/municipality | Not ideal for anonymous cybercrime because barangays cannot compel platform data or conduct digital forensics |
The NBI’s published process for victims of computer crimes includes proceeding to the Cybercrime Division to file a complaint or request investigation, filling out a complaint sheet, undergoing preliminary interview and initial investigation, executing sworn statements or submitting affidavits, and submitting devices relevant to the probe. The listed government fee is none, with initial frontline processing estimated at around one hour and ten minutes, excluding the actual investigation period. (National Bureau of Investigation)
Step-by-Step Guide: How to Prepare a Complaint Against Multiple Anonymous Harassers
1. Make a master timeline
Create a simple chronology before going to the police, NBI, or prosecutor.
Example:
| Date and time | Account/number | Platform | What happened | Evidence file |
|---|---|---|---|---|
| Jan. 3, 2026, 8:14 PM | @truth_expose | TikTok | Posted edited video calling me a scammer | Screenshot 1, screen recording 1 |
| Jan. 4, 2026, 9:02 AM | FB profile “Anna Cruz” | Commented my home address | Screenshot 2 | |
| Jan. 4, 2026, 10:30 PM | 09XX-XXX-4821 | SMS | Sent “we know where your child studies” | Screenshot 3, phone retained |
| Jan. 5, 2026, 1:15 PM | Gmail account | Sent same defamatory post to employer | Email header saved |
This helps show whether the accounts acted independently or as part of one coordinated campaign.
2. Preserve evidence before reporting the accounts
Many victims report fake accounts immediately, then the platform removes the content before investigators can view it. Reporting to the platform may be necessary, especially for safety, but preserve evidence first when possible.
Save:
- Full-screen screenshots showing the URL, username, date, and time
- Screen recordings scrolling from the profile/page to the post or message
- Message links, post links, profile links, and account IDs
- Email headers for threatening or defamatory emails
- The original phone containing SMS, Viber, Messenger, Telegram, or WhatsApp messages
- Names of witnesses who saw the posts before deletion
- Any proof connecting the anonymous account to a real person, such as payment details, admissions, shared photos, repeated phrases, or known phone numbers
Do not rely only on cropped screenshots. Cropped images are easier to challenge.
3. Label each anonymous respondent clearly
Instead of writing “all fake accounts,” use labels:
- John Doe 1, unknown person using Facebook profile URL: [profile link]
- Jane Doe 2, unknown person using TikTok handle: @____
- John Doe 3, unknown person using mobile number: 09XX-XXX-____
- Jane Doe 4, unknown person using Gmail address: ____@gmail.com
State that their true names and addresses are unknown and are the subject of investigation.
4. Describe the connection between accounts
If you suspect coordination, explain why:
- They posted the same wording within minutes.
- They used the same edited photo or video.
- One account tagged the others.
- They used the same hashtag.
- A known person threatened you offline, then the online attacks began.
- The accounts joined the same group chat.
- They targeted the same employer, school, family members, or business clients.
Avoid unsupported conclusions like “I know they are all my ex’s friends” unless you explain the factual basis.
5. Execute a complaint-affidavit
A complaint-affidavit is a sworn written statement narrating facts based on your personal knowledge. It should include:
- Your complete name, address, and contact details
- A short background explaining why the harassment began, if known
- A numbered timeline of incidents
- A separate section for each anonymous account
- The specific harm caused
- A list of attachments
- A request for investigation, preservation of data, and identification of the persons behind the accounts
If filing with NBI, PNP, or the prosecutor, bring a government ID and multiple printed copies. Some offices may require the affidavit to be notarized; others may assist with sworn statements on-site.
6. Ask investigators about preservation and disclosure of computer data
Speed matters because platforms and telecom providers may not keep all useful logs forever.
Under RA 10175 and the Rule on Cybercrime Warrants, service providers must preserve traffic data and subscriber information for at least six months from the transaction, while content data is preserved for six months from receipt of a law enforcement preservation order. A one-time six-month extension may be ordered by law enforcement.
To obtain subscriber information, traffic data, or other relevant data from a service provider, law enforcement generally needs a Warrant to Disclose Computer Data (WDCD), and the service provider must disclose or submit the data within 72 hours from receipt of the order when the requirements are met.
This is why delay is a serious problem in anonymous harassment cases.
7. Prepare for the case to be split later
Even if you submit one complaint package, the prosecutor may later treat the matter as:
- One case against one identified person using multiple accounts
- Separate cases against different persons
- A conspiracy or coordinated case, if facts support it
- A cyber libel case for certain posts, plus a threats case for certain messages
- A Safe Spaces Act case for gender-based harassment
- A data privacy complaint for doxxing
- No criminal case for some accounts if the evidence is too weak
This is normal. The purpose of your initial complaint is to preserve the facts and allow authorities to investigate.
What If the Harassers Are Abroad or the Platform Is Foreign?
A cybercrime complaint may still be possible even if the person is abroad, the victim is abroad, or the platform is foreign. RA 10175 provides jurisdiction where any element of the offense was committed in the Philippines, where the computer system used was wholly or partly situated in the country, or where damage was caused to a natural or juridical person who was in the Philippines at the time. It also covers violations committed by Filipino nationals regardless of place of commission. (Supreme Court E-Library)
However, foreign platforms create practical bottlenecks. If the service provider or person is outside the Philippines, the Rule on Cybercrime Warrants states that service of warrants or court processes should be coursed through the DOJ Office of Cybercrime in line with relevant international instruments or agreements.
For Filipinos or foreigners filing from abroad, Philippine authorities may ask for:
- A sworn affidavit executed before a Philippine embassy or consulate, or properly notarized and authenticated/apostilled where applicable
- Clear copies of passport or government ID
- Screenshots and digital files with links
- A Philippine contact person or counsel for coordination
- Translation if the evidence is not in English or Filipino
- Proof that the harm occurred in the Philippines, involved a Filipino national, or involved Philippine-based systems or persons
Common Problems in Complaints Against Anonymous Harassers
“I only have screenshots. Is that enough?”
Screenshots can help start an investigation, but they are often not enough by themselves to prove who controlled the account. Investigators may still need platform data, subscriber information, phone records, device examination, witness statements, admissions, or other corroborating evidence.
Electronic documents may be admissible if they comply with the Rules of Court and related laws. The Rules on Electronic Evidence state that an electronic document is admissible if it meets the rules on admissibility. (Lawphil)
“Can I include people I suspect but cannot prove?”
You can state facts that explain your suspicion, but avoid naming real persons as respondents unless you have a good-faith factual basis. Recklessly accusing a named person without evidence can create legal exposure, especially if the accusation is circulated publicly.
A safer format is:
“I suspect that the unknown person behind Account A may be connected to [name], because [specific facts]. I request investigators to verify this.”
“What if one person is using many dummy accounts?”
Then your complaint should say exactly that: one unknown person, or a group of unknown persons, appears to be using several accounts. List all accounts and explain the similarities.
The investigation may later show:
- One person controlled all accounts.
- Several people coordinated.
- Some accounts were unrelated.
- Some accounts were hacked or impersonated.
“What if several people are in a group chat planning the harassment?”
Preserve the group chat carefully. Do not delete it. Take screen recordings showing the group name, members, messages, dates, and sequence. If you are lawfully part of the conversation, your own copy may be useful evidence. If the evidence was obtained by hacking or unauthorized access, it may create admissibility and liability issues.
“Can the case proceed if the accounts are deleted?”
Possibly, but it becomes harder. Deleted accounts may still leave traces in screenshots, cached links, platform records, notifications, email alerts, phone backups, other users’ screenshots, or law enforcement-preserved data. The earlier the complaint is filed, the better.
“Should I confront the anonymous harassers?”
Usually, no. Confronting them may cause deletion of evidence, escalation, or counter-accusations. Preserve evidence first. If there are threats of physical harm, prioritize safety and report urgently.
Documents and Evidence to Bring
| Item | Why it matters |
|---|---|
| Government-issued ID | Confirms identity of complainant |
| Complaint-affidavit or draft narrative | Helps investigators understand the case quickly |
| Printed screenshots | Easy for initial review and attachment |
| Digital copies of screenshots/videos | Needed for clearer examination |
| URLs and profile links | More useful than screenshots alone |
| Original device | Allows verification and possible forensic examination |
| Witness affidavits | Helpful if others saw posts/messages |
| Employment/school/business proof of harm | Supports damage and motive |
| Medical or psychological records, if relevant | May support serious emotional impact |
| Platform reports and responses | Shows takedown history and account behavior |
| Prior police blotter, barangay record, or demand messages | Useful background if harassment escalated |
Practical Timelines
Timelines vary widely, but ordinary complainants should expect these stages:
| Stage | Usual practical timeline |
|---|---|
| Initial filing and interview | Same day, sometimes a few hours |
| Preparation or notarization of affidavits | Same day to several days |
| Initial case evaluation | Days to weeks |
| Preservation request or warrant preparation | Depends on investigator and facts |
| Platform or telco response | Weeks to months, longer for foreign platforms |
| Prosecutor preliminary investigation after respondents are identified | Several months or more |
| Court case, if filed | Often years, depending on court docket, evidence, and defense motions |
Anonymous-account cases are often slow because the hardest part is not proving that harassment happened. The hardest part is proving who was legally responsible for the account at the relevant time.
Frequently Asked Questions
Can I file a cybercrime complaint even if I do not know the real names of the harassers?
Yes. You may identify them by account name, profile URL, email address, phone number, or handle, and describe them as John Doe or Jane Doe respondents whose true names are unknown. Philippine criminal procedure allows fictitious names when the accused’s true name cannot yet be ascertained. (Supreme Court E-Library)
Can one cybercrime complaint include many fake accounts?
Yes, especially if the incidents are connected. But organize the complaint by account and by date. Investigators or prosecutors may later separate the case into different charges or respondents.
What if the anonymous harassers are all part of the same online group?
Explain the group connection clearly. Attach screenshots or recordings showing group membership, coordinated posting, shared instructions, common hashtags, or repeated content. Coordination must be shown by facts, not just suspicion.
Is online harassment automatically cybercrime in the Philippines?
No. The act must fit a specific law, such as cyber libel, grave threats through ICT, computer-related identity theft, gender-based online sexual harassment, doxxing-related privacy violations, illegal access, or another offense.
Can I sue the platform for refusing to identify the harasser?
Usually, platforms will not disclose subscriber or traffic data to private individuals just because they ask. Law enforcement generally needs the proper legal process, such as a warrant to disclose computer data, depending on the data requested. Under RA 10175, disclosure of subscriber information, traffic data, or relevant data requires legal process and must relate to a valid docketed complaint. (Supreme Court E-Library)
What if the posts are defamatory but made by anonymous accounts?
You may report the accounts for possible cyber libel, but the prosecution must still prove the elements of libel and identify who published or controlled the account. Cyber libel under RA 10175 covers libel under Article 355 of the Revised Penal Code when committed through a computer system. (Supreme Court E-Library)
Can foreigners file cybercrime complaints in the Philippines?
Yes, if the case has sufficient connection to the Philippines, such as harm suffered in the Philippines, use of Philippine-based systems, Filipino perpetrators, Philippine victims, or other jurisdictional links under RA 10175. Foreign complainants abroad may need properly notarized, consularized, or apostilled documents depending on where the affidavit is executed.
Should I file with PNP ACG or NBI?
Either may be appropriate. PNP ACG is specifically identified in the Safe Spaces Act IRR for gender-based online sexual harassment complaints. NBI Cybercrime Division also handles investigative assistance for computer crime victims and has a published process for complaint filing, interview, sworn statements, and device examination. (Supreme Court E-Library) (National Bureau of Investigation)
Can I include screenshots from friends who saw the harassment?
Yes, but it is better if those friends also execute affidavits explaining what they personally saw, when they saw it, and how they captured or saved it. Their testimony may help prove publication, reach, or harm.
What should I do first if the harassment includes threats to my safety?
Preserve the messages, keep the original device, avoid engaging further, and report urgently to law enforcement. If there is an immediate physical threat, go to the nearest police station as well, not only to a cybercrime office.
Key Takeaways
- A cybercrime complaint in the Philippines can include multiple anonymous harassers.
- Use clear labels such as John Doe 1, Jane Doe 2, and identify each by account, handle, URL, email, or number.
- One complaint package may cover many accounts, but each act must be described separately.
- The most common legal bases are RA 10175, RA 11313, the Revised Penal Code, the Data Privacy Act, and special laws on intimate images or child sexual abuse material.
- Screenshots help, but account ownership usually requires deeper investigation, platform data, telco records, device evidence, or corroborating proof.
- File promptly because platform logs and relevant computer data may disappear or become harder to obtain.
- The case may later be split into different respondents or offenses depending on what investigators and prosecutors discover.
- The strongest complaints are organized, factual, chronological, and supported by preserved digital evidence.