A fake Facebook, TikTok, X, Instagram, or other social media account can still be the basis of a cyber libel complaint in the Philippines. The difficult part is usually not proving that the defamatory post existed—it is identifying the real person who created or controlled the account before electronic records disappear and before the short filing deadline expires. The safest approach is to preserve the post properly, document when you first discovered it, request cybercrime investigators to trace the account, and file the appropriate complaint with the prosecutor without delay.

What counts as cyber libel in the Philippines?

Cyber libel is ordinary written libel committed through a computer system, the internet, social media, or a similar digital means.

Article 353 of the Revised Penal Code defines libel as a public and malicious imputation of a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person or juridical entity to contempt. Section 4(c)(4) of the Cybercrime Prevention Act of 2012, or Republic Act No. 10175, applies those libel rules when the statement is published through a computer system. The Supreme Court has repeatedly explained that cyber libel is not a completely new offense; it is libel committed through information and communications technology.

A cyber libel case generally requires proof of the following:

A defamatory imputation. The post accuses a person of a crime, dishonesty, immorality, corruption, fraud, infidelity, professional misconduct, or another fact that could damage reputation.
Publication. At least one person other than the victim received, saw, or read the statement.
Identification of the victim. The victim was named, shown in a photograph, tagged, or could reasonably be identified from the surrounding details.
Malice. The statement was made with the legally required form of wrongful intent or recklessness.
Use of a computer system. The statement was posted, sent, uploaded, or published through social media, a website, an app, email, or another digital platform.

The account does not have to use the offender’s real name. An anonymous or fake account can commit cyber libel if investigators and prosecutors can connect the account and the defamatory publication to a particular person.

A fake account is not automatically cyber libel

Creating a dummy account is not, by itself, enough to prove cyber libel. The account must have published a legally defamatory statement concerning an identifiable victim.

For example:

A fake account that says, “Maria stole ₱500,000 from her employer,” may involve cyber libel if the accusation is false or malicious and other people saw it.
A parody account that posts obvious jokes may not be libelous, depending on the context and whether a reasonable reader would treat the statements as facts.
A private message sent only to the victim may lack the element of publication, although threats, harassment, coercion, or other offenses may still apply.
A fake account using another person’s name, photograph, or personal information may also involve computer-related identity theft under Section 4(b)(3) of RA 10175.
Posting intimate images, threats, personal data, or gender-based sexual remarks may trigger other laws even when the evidence is insufficient for cyber libel.

Why identifying the person behind the fake account is critical

A screenshot can show what an account posted, but it does not necessarily prove who operated the account. Prosecutors must have evidence connecting the accused to the account and to the specific post.

In a 2025 decision, the Supreme Court provided guideposts for proving who owns, accesses, or controls a social media account in a criminal case. Relevant evidence may include:

An admission of ownership or authorship;
A witness who saw the person access the account or compose the post;
Information in the post known only to the suspected offender or a small group;
Language, expressions, spelling, or other characteristics associated with the offender;
Records from the social media platform, internet service provider, or telecommunications company;
Device-forensic results, geolocation information, login records, or other technical attributes;
Conduct consistent with previous posts or messages; and
Other circumstances showing ownership, access, or authorship.

The Court emphasized that the prosecution must prove both the crime and the identity of the offender. A person’s photograph or name on a profile may be relevant, but it should ordinarily be supported by other evidence because anyone can copy a photograph and create a dummy account.

Evidence that often helps identify a fake account owner

Look for facts beyond the profile name:

Does the account know private details that only a former partner, employee, relative, customer, or neighbor would know?
Does it use a particular nickname, recurring misspelling, phrase, dialect, or writing style?
Did the suspected person threaten to post the accusation before the account appeared?
Did the account send messages referring to events known only to the suspected person?
Did it post photographs that came from a limited-access chat or device?
Did the suspected person later admit, apologize, demand money, or offer to delete the post?
Are there witnesses who previously communicated with that person through the same account?
Is the account connected to known telephone numbers, email addresses, devices, payment accounts, or other profiles?

Technical evidence can be decisive, but circumstantial evidence can also establish account ownership when several independent facts point to the same person.

The one-year deadline for filing cyber libel

This is one of the most important parts of a cyber libel complaint.

In Causing v. People, G.R. No. 258524, the Supreme Court En Banc affirmed in April 2026 that cyber libel generally prescribes in one year from discovery of the offense by the offended party, the authorities, or their agents. “Prescription” means that the State loses the right to prosecute once the legal filing period expires. The Court rejected both the former 15-year view and the argument that the period must always begin on the date of publication. (Supreme Court of the Philippines)

The discovery date is therefore crucial. Keep proof of:

The date and time you first saw the post;
The message through which somebody sent it to you;
The identity of the person who alerted you;
The date you reported it to the platform or authorities; and
Any circumstances showing that the post was previously hidden, private, restricted, or inaccessible to you.

Do not rely on the fact that the defamatory post remains online. A continuing online presence does not necessarily restart the one-year period every day.

The Supreme Court has also clarified that filing the complaint with the proper prosecution office interrupts the prescriptive period. A report submitted only to a social media platform or an initial request for police or NBI assistance should not be treated as a substitute for timely prosecutorial filing. (Supreme Court of the Philippines)

What to do immediately after discovering the fake account

1. Preserve the post before reporting or blocking the account

Capture the evidence before the account is deleted, renamed, made private, or disabled.

Save the following:

Full screenshots of the post, caption, comments, photographs, and reactions;
The account’s profile page, username, display name, biography, and profile photograph;
The complete post URL and profile URL;
The visible date and time of publication;
Group, page, channel, or chat information;
A screen recording showing how you opened the profile and navigated to the post;
Copies of messages sent by the same account;
Notifications, emails, or messages through which you discovered the post; and
A PDF or printed copy, where possible.

Make sure the browser address bar or the app’s “copy link” information is visible. Cropped screenshots that show only the defamatory words are weaker because they may omit the account, date, context, URL, and publication details.

Keep the original electronic files. Do not rely only on printouts or images forwarded through Messenger, because forwarding and editing may remove metadata or reduce quality.

2. Ask witnesses to preserve their own copies

Anyone who personally saw the post should save it independently. Record the witness’s:

Full name and contact information;
Date and approximate time the witness saw the post;
Device or account used to access it;
Relationship to the victim or suspected offender; and
Reaction or action taken after seeing it.

Publication can be established through testimony from a third person who actually read or received the statement.

3. Write down the exact discovery date

Prepare a short incident timeline. Include:

When the fake account first contacted or mentioned you;
When you first learned of the defamatory content;
Who informed you;
When you preserved the evidence;
When you reported the account;
When you approached investigators; and
Any later reposts, threats, admissions, or deletion attempts.

This timeline will help address the one-year prescriptive period.

4. Do not hack, impersonate, or unlawfully access the account

Do not guess passwords, access someone else’s device without authority, install spyware, or pay a supposed hacker to identify the account owner. Evidence obtained through unlawful access can create separate criminal and privacy problems.

Do not threaten the suspected offender. Statements made in anger may be used against you or may trigger a counter-complaint.

5. Report the content to the platform—but only after preserving it

A platform report may lead to removal of the post or suspension of the account. Save the report confirmation, reference number, and platform response.

Removal may reduce further damage, but it does not identify the account owner and does not by itself begin a Philippine criminal case.

How to file a cyber libel complaint against a fake account

Step 1: Seek cybercrime investigative assistance

When the account owner is unknown, the practical first step is usually to approach the National Bureau of Investigation Cybercrime Division, an NBI regional cybercrime office, or the appropriate police cybercrime unit.

The NBI’s published procedure allows a complainant to:

File a complaint or request for investigation;
Undergo an initial interview;
Execute a sworn complaint sheet or submit a prepared affidavit;
Provide supporting documents and devices relevant to the investigation; and
Permit investigators to evaluate the digital evidence.

The NBI Citizen’s Charter lists no government fee for this initial investigative assistance. Its stated processing time of about one hour and ten minutes refers to intake and internal routing—not completion of the investigation. Tracing an account, obtaining legal process, conducting device examination, and waiting for platform records may take substantially longer. See the NBI procedure for victims of computer crimes. (National Bureau of Investigation)

Tell the investigator immediately that:

The complaint involves cyber libel;
The account may be deleted;
The one-year prescriptive period is running; and
Preservation of subscriber, traffic, login, or content-related records may be necessary.

Law-enforcement authorities may use preservation requests and apply for appropriate orders under the Rule on Cybercrime Warrants, such as a warrant to disclose computer data. The victim cannot ordinarily compel a foreign social media company to disclose private subscriber or login records through a personal request.

Step 2: Identify the respondent as precisely as possible

If investigators identify the person behind the account, obtain the person’s:

Full name;
Known aliases;
Residential or business address;
Telephone number or email address, if lawfully available;
Connection to the account;
Connection to the victim; and
Facts linking that person to the publication.

Rule 110 of the Rules of Criminal Procedure allows an accused whose true name cannot yet be ascertained to be described under a fictitious name, with a statement that the true name is unknown. However, a “John Doe” filing can still face practical problems: the prosecutor needs enough identifying information to evaluate probable cause, issue subpoenas, and distinguish the respondent from other possible account users. (Lawphil)

When the offender remains unidentified, coordinate the investigative and prosecutorial steps. Do not wait passively for a platform response while the one-year period approaches.

Step 3: Choose the proper venue

Venue is not simply the complainant’s preferred city.

Under Section 2.1 of the Rule on Cybercrime Warrants, a criminal action for an offense under Section 4 or 5 of RA 10175 may be filed before the designated cybercrime court of the province or city:

Where the offense or any element occurred;
Where any part of the computer system used was situated; or
Where the damage to the natural or juridical person took place.

The first properly filed court case acquires jurisdiction to the exclusion of other possible venues. (Lawphil)

For the complaint stage, file with the Office of the City Prosecutor, Office of the Provincial Prosecutor, or DOJ prosecution office corresponding to a legally supportable venue. The affidavit should clearly state why that office has territorial authority—for example, that the victim lived, worked, conducted business, or suffered reputational damage there.

Step 4: Prepare the complaint-affidavit

The complaint-affidavit is the complainant’s sworn narrative. It should be chronological, specific, and supported by numbered attachments.

Include:

Your complete name, address, citizenship, contact information, and occupation;
The respondent’s known identity and address, or a clear description if still unknown;
The date and manner in which you discovered the post;
The exact defamatory words, with an English translation if written in another language or dialect;
The URL, platform, account name, and publication details;
An explanation of how the post referred to you;
The names of people who saw or received the post;
The facts showing that the statement was false, malicious, or recklessly published;
The facts linking the respondent to the fake account;
The harm caused to your work, family, business, profession, relationships, or reputation;
Details of reports made to the platform, NBI, or police; and
A request that the respondent be prosecuted for the applicable offense.

Avoid vague statements such as “I know it was my ex-partner.” State the underlying facts: prior threats, private information used, writing style, messages, witnesses, admissions, common devices, or investigative findings.

The affidavit must be sworn before a prosecutor, notary public, or another officer authorized to administer oaths, depending on the filing procedure.

Step 5: Attach and label the evidence

Use a simple annex system:

Annex A: Screenshot of the profile;
Annex B: Screenshot of the defamatory post;
Annex C: Post and profile URLs;
Annex D: Screen-recording file;
Annex E: Witness affidavit;
Annex F: Platform report confirmation;
Annex G: NBI or police report;
Annex H: Documents disproving the accusation;
Annex I: Proof of damage; and
Annex J: Evidence linking the account to the respondent.

Screenshots are electronic documentary evidence, but they must still be authenticated. The person presenting them should be able to explain when, where, and how they were obtained and why they accurately represent what appeared online. ([Supreme Court of the Philippines][6])

Step 6: File the required copies and pay the applicable fee

The DOJ’s published filing checklist for preliminary investigation includes:

Investigation Data Form;
Complaint-affidavit or sworn statement;
Supporting affidavits and documentary evidence; and
The required number of copies.

The DOJ page states that the complaint-affidavit should generally be submitted in five copies plus one copy for each respondent, although individual prosecution offices may have additional formatting, electronic-filing, or copy requirements. See the DOJ requirements for filing a complaint for preliminary investigation. ([Department of Justice][7])

The DOJ’s posted schedule lists a ₱100 preliminary-investigation fee. Notarial charges, printing, storage media, certifications, courier fees, and forensic services are separate. Confirm the current assessment with the office where the complaint will be filed. ([Department of Justice][8])

Step 7: Participate in the preliminary investigation

A preliminary investigation is not yet a trial. The prosecutor determines whether there is sufficient evidence establishing probable cause to charge the respondent in court.

The usual process includes:

Docketing and assignment to an investigating prosecutor;
Issuance of a subpoena to the respondent;
Filing of the respondent’s counter-affidavit;
Filing of a reply or rejoinder when allowed or required;
Evaluation of the affidavits and evidence; and
Issuance of a resolution.

A case involving an unverified address, an overseas respondent, multiple accounts, incomplete platform records, or contested account ownership can take longer. Several weeks to several months is common in practice, but there is no reliable fixed completion date.

If probable cause is found, the prosecutor files an Information in the designated Regional Trial Court. RA 10175 gives Regional Trial Courts jurisdiction over offenses under the Cybercrime Prevention Act. ([Lawphil][9])

Documents and evidence checklist

Item	Why it matters
Valid government-issued ID	Establishes the complainant’s identity
Notarized or properly sworn complaint-affidavit	Sets out the criminal accusation under oath
Full screenshots and printouts	Prove the content, account, date, and context
Profile and post URLs	Help investigators and platforms locate the records
Original digital files	Preserve quality and possible metadata
Screen recording	Shows the path from the account to the post
Witness affidavits	Prove publication and surrounding circumstances
Discovery-date evidence	Helps establish compliance with the one-year period
Documents disproving the accusation	Support falsity, malice, and lack of factual basis
Account-attribution evidence	Links the fake account to the respondent
Platform report confirmation	Documents takedown or reporting efforts
NBI or police records	Show investigative findings and technical requests
Proof of reputational or financial harm	Supports civil liability and damages
Certified translation	Needed when relevant content is not in English or Filipino

Is barangay conciliation required?

Ordinarily, no.

The Katarungang Pambarangay system does not cover offenses punishable by imprisonment exceeding one year or a fine exceeding ₱5,000. Cyber libel carries penalties beyond those limits and falls within Regional Trial Court jurisdiction. A barangay confrontation or Certificate to File Action is therefore generally not a condition before filing the criminal complaint. ([Lawphil][10])

The parties may still communicate voluntarily or settle civil aspects where legally permitted, but a barangay proceeding should not be allowed to consume the one-year prescriptive period.

Common mistakes that weaken cyber libel complaints

Reporting the account before saving the evidence

The platform may remove the content quickly. Preserve the profile, post, comments, URLs, and publication details first.

Filing only cropped screenshots

A screenshot showing defamatory words without the account name, URL, date, or surrounding conversation may be challenged as incomplete or manipulated.

Waiting for the fake account to reveal itself

Anonymous operators rarely volunteer their identities. Early preservation and investigative requests are more effective than prolonged online arguments.

Assuming the profile photograph proves ownership

A photograph can be copied. The case should include independent facts connecting the person to the account, device, messages, language, or platform records.

Ignoring the discovery date

The Supreme Court’s one-year rule makes delay dangerous. Record the discovery date and file with the proper prosecutor as soon as the evidence reasonably permits. (Supreme Court of the Philippines)

Filing in an unsupported venue

Cybercrime venue is broader than traditional libel venue, but it is not unlimited. The affidavit should state the specific territorial facts connecting the offense or damage to the chosen city or province.

Treating every insult as libel

Rude language, name-calling, satire, opinion, or emotional criticism is not automatically criminal libel. Courts examine the exact words, factual implications, context, audience, and whether the statement would reasonably damage reputation.

Assuming truth always prevents liability

Truth is important, but it does not automatically end every libel case. Articles 354 and 361 of the Revised Penal Code also consider good intention, justifiable motive, privilege, and the nature of the accusation.

Suing everyone who liked or shared the post

In Disini v. Secretary of Justice, the Supreme Court struck down aiding-or-abetting liability under Section 5 of RA 10175 insofar as it applied to cyber libel. A mere reaction or mechanical share is not automatically cyber libel. However, a person who adds a new defamatory caption, accusation, or commentary may become the author of a separate defamatory publication. ([Lawphil][11])

Special situations involving fake accounts

The account uses your name and photograph

This may involve both cyber libel and computer-related identity theft if the offender used your identifying information without right. Preserve evidence showing that people believed the fake account belonged to you.

The account never names you

Naming the victim is not always necessary. Identification may be established through a photograph, workplace, position, family relationship, nickname, location, prior controversy, or other details that allow readers to recognize the person.

The post was made in a private group or group chat

A restricted audience can still satisfy publication. It is enough that at least one third person received the defamatory statement. Preserve the group name, member list, privacy setting, and witnesses who saw it.

The suspected offender claims the account was hacked

Investigators should examine login records, devices, recovery emails, telephone numbers, location data, prior messages, and the person’s conduct before and after publication. A bare hacking claim does not automatically defeat attribution, but the prosecution must still prove authorship beyond reasonable doubt at trial.

The victim is a public official or public figure

Criticism concerning public affairs receives stronger constitutional protection. When a defamatory statement concerns a public official’s conduct or a public figure’s involvement in a matter of public interest, the prosecution may have to establish actual malice—knowledge that the statement was false or reckless disregard of whether it was true. Fair comment and qualified privilege may also become important.

The offender or victim is outside the Philippines

A Filipino or foreign citizen may be a complainant. Citizenship is not a requirement for protection against defamatory statements.

When the complainant is abroad, the complaint-affidavit may ordinarily be:

Signed before a Philippine embassy or consulate; or
Notarized by a local notary and apostilled by the competent authority in a country that participates in the Apostille Convention.

A representative in the Philippines may assist with physical filing under a proper authorization or Special Power of Attorney, but the victim’s own sworn testimony and later participation may still be required. Philippine embassies explain that private affidavits for use in the Philippines may be completed either through consular notarization or local notarization followed by an apostille. ([Philippine Embassy][12])

If the account operator, platform records, or relevant servers are abroad, obtaining evidence may take longer and may require international cooperation or foreign legal process.

Other legal remedies that may apply

Cyber libel is not always the only—or the best—legal characterization.

Depending on the content and relationship of the parties, the conduct may also involve:

Computer-related identity theft under RA 10175;
Grave threats, light threats, coercion, or unjust vexation under the Revised Penal Code;
Psychological violence under Republic Act No. 9262 when committed against a woman or her child by a covered intimate partner;
Gender-based online sexual harassment under Republic Act No. 11313;
Unauthorized disclosure or misuse of personal data under Republic Act No. 10173;
Anti-Photo and Video Voyeurism Act violations under Republic Act No. 9995;
Fraud, extortion, or robbery when deletion is conditioned on payment;
Child-protection offenses when the victim is a minor; or
Civil liability under Articles 19, 20, 21, 26, and 33 of the Civil Code.

Article 33 of the Civil Code permits an independent civil action for defamation. It is separate from the criminal prosecution and is decided under the civil standard of preponderance of evidence, although double recovery for the same injury is not allowed. Evidence of lost clients, employment consequences, medical or psychological treatment, public humiliation, and other actual harm should therefore be preserved.

Possible penalties for cyber libel

Section 6 of RA 10175 provides a penalty one degree higher when an existing offense is committed through information and communications technology.

The Supreme Court has ruled that a court may impose a fine instead of imprisonment in an appropriate online libel case. Under the Revised Penal Code as amended by RA 10951 and the one-degree increase applicable to online libel, the range of the fine is ₱40,000 to ₱1,500,000. Civil damages may be awarded separately. ([Lawphil][13])

The actual penalty depends on the charge, evidence, circumstances, and final judgment.

Frequently Asked Questions

Can I file cyber libel if I do not know who owns the fake account?

Yes, you can report the incident and request an investigation even when the operator is unknown. The immediate priorities are evidence preservation, account tracing, and compliance with the one-year deadline. A fictitious respondent name may be used in limited situations, but the case needs enough identifying facts to proceed effectively.

Is a screenshot enough to file a complaint?

A screenshot may be enough to begin an investigation, but it is rarely ideal as the only evidence. Preserve URLs, the profile, comments, witness testimony, digital originals, and account-attribution evidence.

When does the one-year filing period start?

Under the Supreme Court’s 2026 ruling in Causing v. People, the period generally begins when the victim, authorities, or their agents discover the cyber libel—not automatically on the publication date. The discovery date must be supported by evidence. (Supreme Court of the Philippines)

Does reporting the post to Facebook or TikTok stop the deadline?

No. A platform report is not a criminal complaint filed with the prosecution office. It may help remove the content and document your response, but it should not be relied upon to interrupt prescription.

Can I file directly with the prosecutor without going to the NBI?

Yes, particularly when the respondent is already known and the evidence is complete. When the account is anonymous, an NBI or cybercrime investigation is often necessary to obtain technical attribution evidence.

Do I need a lawyer to file the complaint?

A complainant may personally execute and file a complaint-affidavit. Cyber libel complaints involving fake accounts nevertheless require careful handling of prescription, venue, electronic evidence, account attribution, privilege, and possible overlapping offenses.

What happens if the fake account deletes the post?

Deletion does not erase an offense that has already been committed, but it can make proof more difficult. Screenshots, witnesses, cached copies, platform records, notifications, and forensic evidence may still establish the publication.

Can the person who shared the defamatory post also be charged?

A mere like or simple share is not automatically cyber libel. Liability becomes more likely when the person adds an original defamatory accusation or republishes the material in a way that constitutes a new defamatory statement.

Can I demand that the platform disclose the account owner?

A private complainant generally cannot compel disclosure of confidential subscriber or login information. Law-enforcement authorities must use preservation requests, cybercrime warrants, subpoenas, international procedures, or other lawful processes.

Can a foreigner file cyber libel in the Philippines?

Yes. A foreign national may file when Philippine jurisdiction and venue exist. An affidavit executed abroad may need Philippine consular notarization or local notarization followed by an apostille.

Key Takeaways

Cyber libel can be committed through an anonymous, dummy, or impersonation account.
Preserve the post, profile, URLs, witnesses, and original files before reporting the account.
A screenshot proves content more easily than it proves who controlled the account.
Account ownership may be shown through admissions, private knowledge, writing patterns, witnesses, platform records, and device forensics.
Cyber libel generally prescribes in one year from discovery under the Supreme Court’s 2026 Causing v. People ruling.
File with the proper prosecution office promptly; do not rely only on a platform or investigative report to stop prescription.
Venue must be tied to the offense, the computer system, or the place where legally cognizable damage occurred.
Barangay conciliation is generally not required.
Impersonation, threats, harassment, extortion, intimate-image abuse, and personal-data misuse may support additional or alternative charges.
Complainants abroad may execute affidavits through Philippine consular notarization or the apostille process.