Yes. In the Philippines, an employee can become legally liable for planning harm against a co-worker, but the exact liability depends on what the employee actually did. A private thought, anger, or fantasy is not enough by itself. Liability becomes serious when the “plan” turns into threats, messages, coordination with others, preparation with weapons, stalking, an attempted attack, harassment, or conduct that makes the workplace unsafe. The same facts can also trigger workplace discipline, a criminal complaint, civil damages, and safety action by the employer.

Planning Harm Is Not Always the Same as a Crime

Philippine law generally punishes acts, not merely thoughts. A person may be angry enough to say, “I want to hurt him,” but criminal liability usually requires a punishable act, such as threatening the co-worker, taking direct steps toward the attack, conspiring in a punishable way, or committing a separate offense like illegal possession of a firearm.

The key question is: Has the employee crossed the line from private intent into a legally punishable act?

Situation	Possible Legal Effect
Employee privately thinks about harming a co-worker	Usually not punishable by itself
Employee tells others, “I will kill him” or “I will have him beaten up”	Possible threats under the Revised Penal Code
Employee sends threats by text, email, chat, or social media	Possible threats, cyber-related liability, workplace misconduct
Employee buys or brings a weapon to carry out the plan	Possible criminal liability depending on the weapon and circumstances
Employee waits for the co-worker and starts an attack	Possible attempted homicide, attempted murder, or physical injuries
Employee and another person agree to carry out the attack and one acts on it	Possible conspiracy liability if a crime is attempted or committed
Employee’s conduct creates fear or danger at work	Possible preventive suspension, dismissal, or OSH action

Criminal Liability Under Philippine Law

Mere intent is not enough, but overt acts can be punishable

Under Article 6 of the Revised Penal Code, attempted and frustrated felonies are punishable. An attempted felony happens when the offender directly begins committing the felony by overt acts, but does not complete all acts of execution because of a cause other than voluntary desistance. (Supreme Court E-Library)

In simple terms, the law looks for a direct act toward the crime, not just a plan in the person’s mind.

For example:

Not punishable by itself: “I hate him. I want to punch him someday.”
More serious: the employee waits outside the office with a weapon after telling others he will attack.
Clearly dangerous: the employee swings a knife, fires a gun, or attacks but the co-worker escapes.

If the facts show direct acts toward killing the co-worker, the case may involve attempted homicide or attempted murder. If the co-worker is injured, the case may involve physical injuries, homicide, or murder depending on the result and circumstances.

Threatening a co-worker can already be a crime

The Revised Penal Code separately punishes threats. Article 282 covers grave threats, where a person threatens another with harm amounting to a crime against the person, honor, or property of the victim or the victim’s family. Articles 283 and 285 cover light threats and other light threats in less serious situations. (Lawphil)

A threat may be criminal even if the employee never actually attacks. What matters is whether the words or acts convey a serious intention to cause unlawful harm.

Examples that may be treated seriously:

“I will kill you after shift.”
“I know where you live. I’ll have someone stab you.”
“Pay me or I’ll hurt your family.”
Sending a photo of a weapon with a message naming the co-worker.
Telling a third person to relay a threat to the co-worker.

The surrounding facts matter: prior arguments, access to the victim, history of violence, possession of weapons, repeated messages, or whether the employee actually went near the victim’s home or workplace.

Online threats and group chat messages can create added exposure

If the plan or threat is made through text, email, messaging apps, work chat, or social media, the Cybercrime Prevention Act of 2012, Republic Act No. 10175, may become relevant. RA 10175 covers certain offenses committed through information and communications technology, and Section 6 treats crimes under the Revised Penal Code and special laws as cybercrime-related when committed through a computer system. (Lawphil)

This matters because many workplace threats today are not said face-to-face. They appear in:

Viber, Messenger, Telegram, WhatsApp, or Signal chats
workplace platforms like Slack, Teams, or company email
Facebook posts or comments
screenshots shared in group chats
anonymous or dummy accounts

A common mistake is assuming “it was only online.” In practice, screenshots, message links, device records, sender accounts, and witness statements can become evidence.

If the conduct is gender-based, sexual, misogynistic, homophobic, transphobic, or involves sexual intimidation, RA 11313, the Safe Spaces Act, may also apply because it covers gender-based sexual harassment in workplaces and online spaces. (Lawphil)

Conspiracy is more complicated than people think

Article 8 of the Revised Penal Code says conspiracy and proposal to commit a felony are punishable only in cases where the law specifically provides a penalty. It defines conspiracy as two or more persons agreeing to commit a felony and deciding to commit it; proposal exists when a person who has decided to commit a felony proposes its execution to another. (Supreme Court E-Library)

This is important because conspiracy to commit murder is not automatically a separate standalone crime under the Revised Penal Code in the same way conspiracy to commit certain national security offenses may be. However, once an attempted or completed crime happens, conspiracy can make all conspirators liable as principals if their agreement and coordinated action are proven.

For ordinary workplace violence cases, investigators usually look for:

messages showing agreement to harm the co-worker
who planned the act
who provided the weapon, money, vehicle, or location
who acted as lookout
who lured the victim
whether one person’s act was part of a common plan

Suspicion is not enough. But coordinated planning plus acts toward execution can become powerful evidence.

Weapons, firearms, and preparation may create separate offenses

If the employee brings a gun, ammunition, explosives, or other regulated weapon into the situation, separate laws may apply. Republic Act No. 10591, the Comprehensive Firearms and Ammunition Regulation Act, regulates the ownership, possession, carrying, manufacture, and dealing of firearms and ammunition in the Philippines. (Lawphil)

For example, an employee who says he will shoot a co-worker and is later found carrying an unlicensed firearm may face issues beyond threats. The firearm itself may become the basis of a separate complaint, and it can also make the threat appear more credible.

Workplace Liability: Can the Employee Be Suspended or Dismissed?

Yes. Even if the criminal case is still being evaluated, the employer may take workplace action if the conduct violates company rules, creates danger, or destroys trust and order in the workplace.

Article 297 of the Labor Code allows termination for just causes, including serious misconduct, willful disobedience, fraud or breach of trust, commission of a crime or offense against the employer or the employer’s family or representative, and analogous causes. Philippine jurisprudence explains that serious misconduct must be grave, work-related, and show that the employee is unfit to continue working for the employer. (Lawphil)

A threat against a co-worker may be treated as:

serious misconduct, especially if made at work or connected with work;
violation of the code of conduct;
workplace violence or harassment;
gross discourtesy or intimidation;
analogous cause, depending on company rules and facts.

The employer must still observe due process

The employer should not simply dismiss the accused employee on gossip or panic. For just-cause termination, DOLE guidance recognizes the two-notice rule: first, a written notice specifying the charge and giving the employee an opportunity to explain; second, a notice of decision after the employee has been heard and the evidence has been evaluated. (blr.dole.gov.ph)

A proper workplace process usually includes:

Incident report or complaint
- The victim, witness, supervisor, HR officer, or security team documents what happened.
Immediate safety assessment
- The employer checks whether the accused employee should be separated from the complainant temporarily.
Notice to Explain
- The notice should state the specific acts, dates, messages, witnesses, and violated policy.
Opportunity to respond
- The employee should be given a meaningful chance to submit a written explanation and evidence.
Administrative hearing or conference when appropriate
- A formal hearing is especially important when facts are disputed, company rules require it, or the employee requests it.
Written decision
- The employer decides based on substantial evidence, not rumors.

Preventive suspension may be allowed in serious cases

Preventive suspension is not a penalty. It is a temporary measure used when the employee’s continued presence poses a serious and imminent threat to the life or property of the employer or co-workers. Philippine labor rules limit preventive suspension to a maximum of 30 days for the same offense, after which the employer must reinstate the employee or extend the period with pay if allowed by the circumstances. (Lawphil)

Preventive suspension may be appropriate when there are credible threats, access to weapons, repeated intimidation, stalking, or a real risk of confrontation at work.

Employer Duties to Keep the Workplace Safe

The employer has a duty to maintain a safe and healthful workplace. RA 11058, the Occupational Safety and Health Standards Law, affirms that workers should be protected from hazards in the work environment and gives DOLE enforcement authority over mandatory occupational safety and health standards. (Supreme Court E-Library)

Workplace violence is not only an HR issue. It can also become an occupational safety issue, especially when management ignores repeated reports.

Practical safety measures may include:

separating the employees’ workstations or shifts
issuing a temporary no-contact instruction
increasing security at entrances and exits
preserving CCTV footage
disabling access cards if needed
escorting the threatened employee to transport areas
documenting all incidents in writing
coordinating with building security, barangay officials, or police when necessary
reviewing whether the accused employee has access to tools, vehicles, firearms, chemicals, or other dangerous items

An employer should avoid two extremes: ignoring the complaint as “personal drama,” or punishing the accused employee without evidence and due process.

What the Threatened Co-Worker Should Do

1. Prioritize immediate safety

If there is an immediate danger, leave the area, inform security or a supervisor, and contact local police emergency channels. A person should not wait for HR processing if the threat is specific, urgent, or accompanied by a weapon.

2. Preserve evidence before it disappears

Useful evidence may include:

screenshots of messages with date, time, sender, and full conversation thread
screen recordings showing the account profile and message context
emails with full headers if available
call logs
photos or videos
names of witnesses
CCTV location and approximate time
medical records if there was any injury
barangay or police blotter entries
prior incident reports

Do not edit screenshots in a way that removes context. Do not hack the other person’s account. Do not fabricate or exaggerate messages.

3. Report internally in writing

A written report to HR or management should include:

full names and positions of the people involved
exact words used, if remembered
date, time, and location
screenshots or attachments
names of witnesses
why the threat feels credible
requested safety measures, such as separation or no-contact arrangements

A short but complete written report is usually more useful than a long emotional narration.

4. Make a police or barangay record when appropriate

A police blotter is not the same as a criminal case, but it creates an official record. For serious threats, stalking, weapons, or attempted violence, the matter should be brought to the police and, when necessary, the prosecutor’s office.

Barangay conciliation may apply to some disputes between residents of the same city or municipality, but it is not a substitute for emergency protection. The Katarungang Pambarangay rules under RA 7160 generally require barangay conciliation for covered disputes before filing in court or government offices, subject to exceptions. (Lawphil)

In urgent safety situations, serious offenses, or cases outside barangay authority, the matter should not be delayed just to “settle” at the barangay.

5. File the proper criminal complaint if the facts support it

Criminal actions are generally commenced by complaint or information under the Rules of Criminal Procedure, and offenses requiring preliminary investigation are handled under Rule 112. (Lawphil)

Common documents include:

Document	Purpose
Complaint-affidavit	Main sworn statement of the complainant
Witness affidavits	Statements from people who heard, saw, or received the threat
Screenshots or printed messages	Evidence of online or written threats
Certification or records from HR/security	Workplace incident documentation
Police blotter	Initial official record
Medical certificate	If there was physical injury
CCTV preservation request or footage	To prove presence, conduct, or attempted attack
IDs of complainant and witnesses	Identification for affidavits and filings

Affidavits are usually notarized. If a Filipino or foreign witness is abroad and needs to execute documents for use in the Philippines, authentication may be required, such as apostille for public documents where applicable or consular notarization depending on the country and document. The DFA’s apostille system explains requirements for documents used in the Philippines or abroad. (Apostille Services)

Civil Liability and Damages

A threatened or injured co-worker may also have civil remedies. The Civil Code recognizes liability for wrongful acts that cause damage. Articles 19, 20, and 21 deal with abuse of rights and acts contrary to law, morals, good customs, public order, or public policy, while Article 2176 covers quasi-delicts, meaning fault or negligence causing damage to another. (Lawphil)

Civil claims may include:

medical expenses
lost income
moral damages for serious anxiety, fear, humiliation, or mental suffering
exemplary damages in proper cases
attorney’s fees and litigation expenses when legally justified

If a criminal case is filed, civil liability arising from the offense is often handled together with the criminal case unless reserved or separately pursued under the Rules of Court.

Common Real-Life Scenarios

“My co-worker said he was only joking. Can that still be a threat?”

Yes, depending on context. “Joke lang” is not a magic defense. Authorities will look at the words used, the relationship of the parties, prior incidents, body language, whether a weapon was shown, and whether a reasonable person would feel threatened.

“The threat was made in a private group chat. Does that matter?”

It can still matter. A private group chat may show planning, agreement, motive, or intent. Even if the victim was not originally in the chat, the messages can become relevant if they are lawfully obtained and authenticated.

“Can HR discipline the employee even without a criminal conviction?”

Yes. A workplace administrative case is different from a criminal case. The employer generally decides based on substantial evidence and company rules, while criminal liability requires proof beyond reasonable doubt. The employer must still observe labor due process.

“Can the victim refuse to work near the threatening employee?”

If there is a credible safety risk, the employee should immediately report the danger and request reasonable protective measures. Under RA 11058, workers have safety-related rights, including the right to know workplace hazards and the right to report accidents, dangerous occurrences, and hazards. (Labor Law PH Library)

“What if both employees are foreigners working in the Philippines?”

Philippine criminal and labor laws generally apply to acts committed in the Philippines, regardless of nationality. A foreign victim may file complaints in the Philippines. A foreign accused employee may face criminal proceedings, workplace discipline, and possible immigration consequences depending on the facts and outcome.

“What if the employee is outside the Philippines but sends threats to a Philippine co-worker?”

The case becomes more complicated. Philippine authorities may still evaluate whether a Philippine offense was committed or whether there is sufficient connection to the Philippines, but enforcement, service of notices, evidence gathering, and witness affidavits may require additional steps. Documents executed abroad may need apostille, consular notarization, or proper authentication depending on where they were made.

Practical Checklist for Employers

When management receives a report that an employee is planning harm against a co-worker, the safest approach is structured and documented.

Separate safety from discipline
- First, prevent harm. Then investigate.
Record the complaint
- Require an incident report and collect available evidence.
Preserve evidence immediately
- Save CCTV, access logs, chat records, emails, and security reports.
Assess risk
- Consider the specificity of the threat, access to the victim, weapons, prior incidents, and mental or emotional escalation.
Consider temporary measures
- No-contact order, schedule changes, work-from-home arrangement, security escort, or preventive suspension if legally justified.
Issue a proper Notice to Explain
- Avoid vague charges like “bad behavior.” State the facts clearly.
Hold a fair investigation
- Interview the complainant, accused employee, and witnesses separately.
Coordinate with authorities when needed
- Do not handle credible threats of violence as a purely internal matter.
Issue a written decision
- Explain the evidence, rule violated, and penalty imposed.
Monitor retaliation

Protect complainants and witnesses from further intimidation.

Frequently Asked Questions

Can an employee go to jail for planning to hurt a co-worker?

Possibly, but not for mere thoughts alone. Jail exposure usually arises when the plan becomes a punishable act, such as grave threats, attempted homicide or murder, physical injuries, illegal firearm possession, or another offense.

Is saying “I will kill you” at work a crime in the Philippines?

It can be. A serious threat to kill may fall under grave threats under Article 282 of the Revised Penal Code, especially if the circumstances show that the threat was intentional and credible.

Can a company terminate an employee for threatening a co-worker?

Yes, if the threat amounts to serious misconduct, violates company policy, or makes the employee unfit to remain in the workplace. The employer must still prove a valid cause and follow the two-notice due process requirement.

Is a police blotter enough to file a case?

No. A blotter is only an official record. To pursue a criminal case, the complainant usually needs a complaint-affidavit, supporting evidence, and witness statements for submission to the police, prosecutor, or proper court process.

What if the co-worker only told another person about the plan?

That can still be relevant. If the statement was a serious threat relayed through another person, or if it shows planning with others, it may be evidence. The witness should write down the exact words, date, time, place, and surrounding circumstances.

Can screenshots be used as evidence?

Yes, screenshots may be useful, but they should be preserved carefully. Keep the original device, full conversation context, profile details, timestamps, URLs when available, and backup copies. The other side may challenge authenticity, so context matters.

Can HR force the victim and accused employee to “settle” at work?

HR can encourage workplace resolution for minor misunderstandings, but credible threats of violence should not be minimized or forced into a simple apology. Safety, documentation, and proper investigation should come first.

Can the accused employee be suspended while the investigation is ongoing?

Yes, preventive suspension may be used when the employee’s continued presence poses a serious and imminent threat to life or property. It should not be used as punishment before the investigation is completed.

Does it matter if the planned harm was supposed to happen outside the office?

Yes, but the employer may still act if the threat is work-related, involves co-workers, affects workplace safety, or creates fear that disrupts employment. Criminal liability also does not depend solely on whether the threatened harm is inside the office.

What if the threat was caused by a heated argument?

Heat of anger may affect how the case is evaluated, but it does not automatically excuse the conduct. The words used, persistence of the threat, later actions, and seriousness of the harm threatened are all considered.

Key Takeaways

An employee is not usually criminally liable for a private thought alone.
Liability begins when the plan becomes a punishable act, such as threats, cyber threats, attempted violence, physical injuries, illegal weapons possession, or coordinated action toward a crime.
Threatening a co-worker can be a crime under the Revised Penal Code even if no attack happens.
Online threats through chat, email, or social media can still be evidence and may create cyber-related exposure.
Employers may discipline, suspend, or dismiss an employee for credible threats, but must follow labor due process.
Preventive suspension is allowed only when the employee’s continued presence poses a serious and imminent threat, and it is generally limited to 30 days for the same offense.
Victims should preserve evidence, report in writing, prioritize safety, and use the proper police, prosecutor, barangay, or workplace channels depending on the urgency and seriousness of the facts.
Employers should treat credible threats as both a disciplinary matter and a workplace safety concern.