I. Introduction

Cyber libel has become one of the most common legal issues arising from social media disputes in the Philippines. A single defamatory post, comment, private message, screenshot, or uploaded image can trigger criminal, civil, and administrative consequences when it imputes a crime, vice, defect, dishonor, or discredit to a person.

The issue becomes more complicated when the allegedly defamatory statement is posted through a fake account, dummy profile, impersonation account, anonymous page, parody page, or throwaway social media identity. In such cases, the complainant must not only prove that the post is defamatory, but must also connect the act to a real person who can be held legally liable.

This article explains the Philippine legal framework on cyber libel involving fake accounts, including the elements of the offense, evidence needed, investigative process, possible defenses, liability of account operators, and practical considerations in filing or defending against a complaint.

II. Governing Law

Cyber libel in the Philippines is primarily governed by:

Article 353 of the Revised Penal Code, which defines libel;
Article 355 of the Revised Penal Code, which penalizes libel committed through writing or similar means;
Republic Act No. 10175, or the Cybercrime Prevention Act of 2012, particularly Section 4(c)(4), which punishes libel committed through a computer system or similar means;
Rules on electronic evidence, especially the Rules on Electronic Evidence;
Procedural rules on criminal complaints, preliminary investigation, cybercrime warrants, and preservation of computer data.

Cyber libel is essentially traditional libel committed through digital means. The online medium does not create an entirely new concept of defamation; rather, it provides the technological method by which libel is committed.

III. What Is Cyber Libel?

Cyber libel is libel committed through a computer system or any similar means that may be devised in the future. This includes defamatory statements posted or transmitted through:

Facebook posts, comments, stories, pages, groups, or reels;
X/Twitter posts;
TikTok captions, videos, comments, or livestreams;
YouTube videos, descriptions, comments, or community posts;
Instagram posts, stories, captions, comments, or messages;
blogs and websites;
online forums;
messaging platforms, depending on publication and context;
email or digital newsletters;
digital posters, memes, edited photos, or screenshots;
fake accounts or impersonation accounts.

The key is not the platform itself, but whether a defamatory statement was made, published, and identifiable as referring to the complainant.

IV. Elements of Cyber Libel

For a cyber libel complaint to prosper, the complainant generally needs to establish the following elements:

1. There is an imputation.

There must be an allegation, accusation, insinuation, or statement that imputes something discreditable to another person. The imputation may involve:

commission of a crime;
dishonesty;
immorality;
corruption;
professional incompetence;
sexual misconduct;
fraud;
vice or defect;
dishonorable conduct;
reputationally damaging behavior.

The imputation may be direct or indirect. A statement does not need to explicitly say “you are a criminal” if the natural and ordinary meaning of the words conveys that accusation.

2. The imputation is defamatory.

A statement is defamatory if it tends to dishonor, discredit, or put the person in contempt, ridicule, or public hatred.

Examples may include statements accusing someone of being a scammer, thief, adulterer, corrupt official, fake professional, abusive employer, swindler, sexual predator, drug user, or criminal, if such accusations are false and damaging.

However, not every harsh statement is libelous. Insults, opinions, satire, emotional outbursts, or hyperbole may not always amount to libel, depending on context.

3. The imputation is malicious.

Malice is an essential element of libel. In Philippine libel law, malice may be presumed from every defamatory imputation, unless the communication is privileged.

There are two broad kinds of malice:

Malice in law is presumed from the defamatory nature of the statement.

Malice in fact means actual ill will, bad motive, intent to injure, or reckless disregard for the truth.

In cases involving public officers, public figures, or matters of public concern, the complainant may face a higher burden in showing actual malice, especially where constitutional protections on free speech and public discussion are implicated.

4. The imputation is published.

Publication means communication of the defamatory statement to a third person. Online posting usually satisfies publication because the statement is made accessible to others.

Publication may occur through:

public posts;
posts in a private group with multiple members;
comments visible to others;
shared screenshots;
group chats;
online articles;
video captions;
uploaded images;
reposts or shares, depending on participation and context.

A purely private message sent only to the complainant may raise questions about whether there was publication to a third person. But if the message was sent to a group chat, forwarded to others, or posted where third persons could read it, publication may exist.

5. The complainant is identifiable.

The defamatory statement must refer to a specific person or entity. The complainant need not be named directly if identity can be reasonably inferred.

Identification may arise from:

use of the complainant’s name;
photos;
workplace;
address;
initials;
nicknames;
screenshots;
tags;
references to family members;
unique circumstances;
comments from readers identifying the person;
contextual clues.

A fake account case often involves anonymous posts, but anonymity of the account does not defeat liability if the post clearly refers to the complainant and the operator of the account can be identified.

6. The act was committed through a computer system.

For cyber libel, the defamatory publication must be made through information and communications technology. This is the distinguishing feature from ordinary libel.

A social media platform, website, app, email service, or online messaging system generally qualifies.

V. Why Fake Account Cases Are More Complex

A cyber libel complaint involving a fake account has two major layers:

First, the complainant must show that the post is libelous.

Second, the complainant must prove who created, operated, controlled, or knowingly used the fake account.

The mere existence of a fake account is not enough to convict a person. Criminal liability is personal. The prosecution must prove beyond reasonable doubt that the accused was responsible for the defamatory publication.

The central legal problem is therefore attribution.

VI. What Is a Fake Account?

A “fake account” may refer to several different situations:

1. Dummy account

An account created using a false name, false photo, or fabricated identity.

2. Impersonation account

An account pretending to be another real person, often using that person’s name, photos, or personal details.

3. Anonymous account

An account that does not reveal the real identity of the user.

4. Parody or satire account

An account that imitates a person or institution for humor, commentary, criticism, or political expression. Liability depends on whether a reasonable reader would understand it as parody or as a factual accusation.

5. Page, group, or community account

A page or group may have multiple administrators. Liability may depend on who authored, approved, posted, or maintained the defamatory content.

6. Hacked or compromised account

A real account may be used by another person without authorization. This may be a defense if properly supported by evidence.

VII. Liability for Using a Fake Account

A person may be liable for cyber libel even if the account uses a false identity, provided the complainant can prove that the person was the author, publisher, administrator, or responsible operator of the account.

Possible liable persons include:

the person who created the fake account;
the person who wrote the defamatory post;
the person who uploaded or published it;
an administrator who approved or maintained the defamatory content;
a person who directed another to post the defamatory material;
a person who knowingly participated in a scheme to defame using the fake account.

However, liability should not be based on suspicion alone. The complaint must be supported by evidence linking the accused to the account or post.

VIII. Evidence Needed in a Cyber Libel Complaint Involving a Fake Account

Evidence is crucial. A complainant should preserve digital proof immediately because online content can be deleted, edited, hidden, renamed, or made private.

Useful evidence may include:

1. Screenshots

Screenshots should show:

the defamatory post or comment;
the account name;
profile URL or account handle;
date and time of posting;
number of reactions, comments, or shares;
visible comments showing that others understood the post;
the complainant’s identification;
full page context, not only cropped portions.

Screenshots are helpful but may be challenged. They are stronger when supported by authentication, metadata, witness testimony, platform records, or forensic evidence.

2. URLs and links

The exact URL of the post, profile, page, comment, or media file should be saved. URLs help investigators and platforms locate content.

3. Screen recordings

A screen recording showing navigation from the profile to the post can help establish authenticity and context.

4. Affidavits of witnesses

Witnesses who saw the post should execute affidavits stating:

when they saw it;
where they saw it;
what it said;
why they understood it to refer to the complainant;
whether they believed the accusation;
how it affected their opinion of the complainant.

5. Printed copies and notarized documentation

Some complainants preserve online posts through notarized affidavits, photographs, or documentation by a neutral person. While notarization does not automatically prove truth or authorship, it may help establish that the content existed at a given time.

6. Platform reports or account information

Reports from Facebook, Google, TikTok, X, or other platforms may help, though access to subscriber data often requires lawful process.

7. IP address, login records, or subscriber data

These are often critical in fake account cases. They may show the device, location, network, or user associated with account access. However, obtaining this information usually requires proper legal process and cooperation from platforms or internet service providers.

8. Device evidence

A phone, laptop, or tablet may contain:

logged-in fake account;
saved passwords;
browser history;
screenshots;
drafts;
app data;
email confirmations;
recovery numbers;
authentication codes;
messages discussing the account;
images used in the post.

Device evidence should be obtained lawfully. Illegal access or unauthorized seizure can create evidentiary problems.

9. Admissions

The accused may have admitted ownership or control through:

messages;
conversations;
emails;
comments;
witnesses;
prior posts;
account recovery details;
use of the same photos, writing style, or contact information.

10. Circumstantial evidence

Because fake accounts hide identity, complainants often rely on circumstantial evidence. Examples include:

the fake account used personal information known only to the accused;
the post appeared shortly after a dispute;
the account used phrases commonly used by the accused;
the account interacted with the accused’s real account;
the fake account used photos or files from the accused;
recovery email or phone number points to the accused;
IP records match the accused’s location or device;
the accused had motive and opportunity.

Circumstantial evidence can support a case, but it must form a coherent chain pointing to the accused as the author or operator.

IX. Preservation of Digital Evidence

Speed matters. Digital evidence may disappear quickly.

A complainant should:

capture screenshots immediately;
save URLs;
record screen activity;
note date and time;
identify witnesses;
avoid engaging emotionally with the fake account;
report the post to the platform but preserve evidence before it is taken down;
consider filing a report with law enforcement cybercrime units;
request preservation of computer data where legally available.

Under cybercrime procedure, preservation of computer data may be sought so that relevant electronic evidence is not deleted before formal legal processes are completed.

X. Where to File a Complaint

A cyber libel complaint may be brought before appropriate law enforcement or prosecution offices, depending on the circumstances.

Common routes include:

Filing a complaint with the Philippine National Police Anti-Cybercrime Group;
Filing a complaint with the National Bureau of Investigation Cybercrime Division;
Filing a criminal complaint directly with the Office of the City or Provincial Prosecutor for preliminary investigation.

The complaint usually includes:

complaint-affidavit;
evidence of the defamatory post;
proof of identity of the complainant;
proof that the post refers to the complainant;
proof of publication;
evidence linking the fake account to the respondent;
witness affidavits;
supporting digital evidence.

XI. Contents of a Complaint-Affidavit

A strong complaint-affidavit should clearly narrate:

Who the complainant is;
Who the respondent is, if known;
The relationship or background between the parties;
The existence of the fake account;
The defamatory statement;
The exact words used;
When and where the post appeared;
How the complainant was identified;
Who saw the post;
How the post damaged the complainant;
Why the respondent is believed to be behind the fake account;
What evidence supports that belief;
What laws were violated.

The affidavit should avoid exaggeration. It should distinguish facts personally known to the complainant from conclusions, suspicions, or information received from others.

XII. Jurisdiction and Venue

Venue can be an important issue in libel and cyber libel cases.

In traditional libel, venue rules can be strict, especially when the complainant is a private individual or public officer. Cyber libel complicates venue because online material can be accessed from many places.

In practice, venue may be argued based on factors such as:

where the complainant resides;
where the defamatory material was accessed;
where the complainant’s reputation was damaged;
where the publication was made;
where the respondent resides;
applicable rules on criminal venue.

Because venue defects can affect the case, the complaint should carefully allege facts connecting the offense to the place where it is filed.

XIII. Prescription Period

Prescription refers to the period within which a criminal action must be filed.

Cyber libel has been treated as subject to a longer prescriptive period than ordinary libel because it is punishable under the Cybercrime Prevention Act. There has been legal discussion on whether cyber libel prescribes in one year, like ordinary libel, or under a longer period applicable to offenses under special laws.

Given this uncertainty and the seriousness of delay, a complainant should act promptly. From a practical standpoint, evidence also becomes harder to obtain as time passes.

XIV. Penalty

Cyber libel carries a heavier penalty than ordinary libel because the Cybercrime Prevention Act generally imposes a penalty one degree higher than that provided under the Revised Penal Code when the offense is committed through information and communications technology.

Aside from imprisonment and fine, the accused may face civil liability for damages.

Possible consequences include:

criminal conviction;
imprisonment;
fine;
civil damages;
moral damages;
exemplary damages;
attorney’s fees;
reputational harm;
employment or professional consequences.

XV. Civil Liability and Damages

A cyber libel complaint may include a claim for civil damages arising from the defamatory publication.

The complainant may seek:

1. Moral damages

For mental anguish, social humiliation, wounded feelings, anxiety, sleeplessness, and reputational injury.

2. Exemplary damages

To deter similar conduct, especially if the act was malicious, abusive, or part of a harassment campaign.

3. Actual damages

For measurable losses, such as lost clients, lost employment opportunities, medical expenses, or business losses. These require proof.

4. Attorney’s fees and litigation expenses

These may be awarded in proper cases.

XVI. Fake Account Plus Identity Theft or Impersonation

A fake account may involve more than cyber libel. Depending on the facts, other possible violations may include:

identity theft under cybercrime law;
unjust vexation;
grave coercion or threats;
stalking or harassment-related offenses, depending on circumstances;
violation of data privacy laws;
use of someone’s photos or personal information without authority;
falsification-related issues;
gender-based online sexual harassment under relevant laws, if sexualized abuse is involved;
child protection laws, if minors are involved.

For example, if a fake account uses the complainant’s name and photo while posting defamatory or obscene content, the case may involve both defamation and identity-related offenses.

XVII. The Role of Platforms

Social media platforms may remove fake accounts, defamatory posts, impersonation accounts, or harassment content if their community standards are violated.

However, platform takedown is different from legal liability.

A platform report may result in:

post removal;
account suspension;
account deletion;
preservation of data, if formally requested;
account verification review;
impersonation review.

But platforms generally do not disclose user identity to private persons without proper legal process. Law enforcement or courts may need to request subscriber information, IP logs, or other data through lawful channels.

XVIII. Common Defenses in Cyber Libel Fake Account Cases

A respondent may raise several defenses.

1. Denial of authorship

The respondent may deny creating, owning, controlling, or using the fake account. This is especially relevant when attribution is weak.

A bare accusation such as “I know it was him” is usually insufficient without supporting evidence.

2. Hacked account or unauthorized access

The respondent may argue that someone else used the device, account, internet connection, or credentials.

This defense is stronger if supported by:

police report;
platform security notices;
password reset records;
login alerts;
evidence of compromised email or phone;
proof that the respondent was elsewhere or lacked access.

3. Lack of publication

If the statement was not seen by a third person, publication may be disputed.

4. The complainant was not identifiable

If the post did not name or reasonably identify the complainant, the respondent may argue that the complainant is not the subject of the statement.

5. Truth

Truth may be a defense when the imputation is true and published with good motives and justifiable ends. However, truth alone may not always be enough in criminal libel; motive and purpose may matter.

6. Fair comment or opinion

Statements of opinion, especially on matters of public interest, may be protected. However, disguising false factual accusations as “opinion” may still be actionable.

For example:

“I think his policies are incompetent” is more likely opinion.
“He stole public funds” is a factual accusation that requires proof.

7. Privileged communication

Some communications are privileged, such as fair and true reports of official proceedings, or statements made in proper performance of a legal, moral, or social duty.

Privilege may be absolute or qualified. Qualified privilege can be defeated by proof of actual malice.

8. Absence of malice

The respondent may argue that there was no intent to defame, no reckless disregard of truth, or that the post was made in good faith.

9. Parody, satire, or humor

A parody account may argue that reasonable readers would not treat the statement as a factual assertion. This depends heavily on context.

10. Constitutional free speech

Speech on public issues, public officials, and matters of public concern receives constitutional protection. However, free speech does not generally protect knowingly false defamatory statements made with malice.

11. Defective evidence

The respondent may challenge:

authenticity of screenshots;
completeness of screenshots;
chain of custody;
manipulation of images;
hearsay affidavits;
lack of proof connecting the account to the respondent;
lack of platform or forensic records.

XIX. The Problem of Screenshots Alone

Many cyber libel complaints rely heavily on screenshots. While screenshots can be useful, they may be attacked because they can be edited, cropped, fabricated, or taken out of context.

A case based only on screenshots may be vulnerable if there is no independent proof that:

the post actually existed;
it was published on the alleged date;
the account belonged to or was controlled by the respondent;
the screenshots were not altered;
third persons saw the post;
the complainant was identifiable.

Screenshots are stronger when paired with URLs, witness affidavits, platform records, metadata, forensic examination, or admissions.

XX. Identifying the Person Behind the Fake Account

Attribution is often the heart of the case.

Investigators may look into:

registration email;
phone number linked to the account;
login IP addresses;
device identifiers, where available;
recovery details;
browser or device logs;
related accounts;
reused usernames;
profile photos;
metadata of uploaded images;
writing style;
timing of posts;
connection with known disputes;
messages sent by the account;
account interactions;
platform records.

However, criminal liability should not be based solely on motive. A person may have motive to defame, but motive alone does not prove authorship.

XXI. Anonymous Speech and the Law

Not all anonymous speech is unlawful. People may speak anonymously for legitimate reasons, including political criticism, whistleblowing, consumer complaints, satire, or fear of retaliation.

The law becomes involved when anonymous speech crosses into unlawful conduct, such as:

false defamatory accusations;
identity theft;
threats;
extortion;
harassment;
doxxing;
non-consensual intimate image sharing;
impersonation;
fraud.

A fake or anonymous account is not automatically illegal. The legal issue is the wrongful act committed through it.

XXII. Public Officials, Public Figures, and Matters of Public Concern

Cyber libel complaints involving public officials or public figures require special caution because they implicate free speech, criticism of government, and public accountability.

Criticism of official conduct is generally given broader protection. Public officials are expected to tolerate a higher degree of criticism than private individuals.

However, false statements of fact made with actual malice may still be actionable.

Examples:

Protected criticism: “The mayor’s flood control program is a failure.”
Potentially defamatory factual allegation: “The mayor stole the calamity fund,” if false and malicious.

The line between criticism and libel depends on wording, context, proof, and the public-interest nature of the statement.

XXIII. Online Reviews and Consumer Complaints

Fake account cyber libel may arise from online reviews accusing a business, professional, or seller of fraud or misconduct.

A consumer may lawfully express dissatisfaction, but false factual accusations can create liability.

Examples:

“The delivery was late and the service was bad” is generally opinion or consumer experience.
“This shop sells fake products and scams customers” may be defamatory if false.
“The doctor is not licensed” is a factual accusation requiring proof.

Businesses may file libel complaints, but courts and prosecutors may consider whether the post was a genuine consumer complaint, fair comment, or malicious attack.

XXIV. Group Chats and Private Online Spaces

Cyber libel may occur in group chats or private online groups if the defamatory statement is communicated to third persons.

The “private” nature of the group does not automatically prevent publication. If multiple people saw the statement, publication may exist.

However, the size, nature, and confidentiality of the group may affect analysis. A post in a small private group may differ from a public viral post in terms of reach, damages, and malice.

XXV. Reposting, Sharing, Liking, and Commenting

Liability for reposting or sharing depends on participation.

A person who republishes a defamatory statement with endorsement, added defamatory comment, or intent to spread it may face liability.

Mere passive liking or reacting is more complicated and would depend on whether the act can be considered publication or participation. Generally, criminal liability requires a clearer defamatory act than simply clicking a reaction button.

Commenting on or amplifying a defamatory post can create separate liability if the comment itself is defamatory or if the person knowingly republishes the defamatory accusation.

XXVI. Administrators of Pages and Groups

Administrators may face risk when a defamatory post appears in a page or group they control, especially if they authored, approved, pinned, reposted, refused to remove, or actively promoted the content.

However, admin status alone should not automatically create criminal liability. The complainant should show participation, knowledge, control, or approval.

Important questions include:

Who posted the content?
Who approved it?
Who had admin access?
Who controlled the page?
Did the admin know it was defamatory?
Did the admin add comments or captions?
Was the content removed after notice?
Was the page created for harassment or defamation?

XXVII. Minors and Fake Accounts

If the person behind the fake account is a minor, special rules apply under juvenile justice laws. The case may involve intervention, diversion, or child-sensitive procedures depending on age and circumstances.

If the victim is a minor, other protective laws may also apply, especially if the content involves sexual abuse, bullying, exploitation, threats, or personal information.

Schools may also impose disciplinary measures for online misconduct, subject to due process and child protection policies.

XXVIII. Data Privacy Issues

Fake account cyber libel may also involve misuse of personal information, such as:

name;
photos;
address;
workplace;
school;
phone number;
private messages;
medical details;
financial details;
family information;
sensitive personal data.

If personal data is used to harass, shame, impersonate, or defame, a separate data privacy complaint may be considered, depending on the facts.

However, not all online mention of personal information is automatically a privacy violation. Context, consent, purpose, public availability, and harm are relevant.

XXIX. Remedies Aside from Criminal Complaint

A complainant may consider several remedies:

1. Platform takedown

Report the fake account or defamatory post for impersonation, harassment, bullying, hate speech, privacy violation, or defamation, depending on platform rules.

2. Demand letter

A demand letter may ask the offender to:

delete the post;
stop using the fake account;
issue a public apology;
retract the statement;
preserve evidence;
pay damages;
cease further defamatory conduct.

A demand letter should be carefully worded to avoid threats that may be construed as extortion or harassment.

3. Barangay proceedings

If the parties are individuals residing in the same city or municipality and the matter is covered by barangay conciliation rules, barangay proceedings may be required before court action. However, cybercrime and offenses with certain penalties may fall outside barangay settlement requirements. This should be checked based on the specific case.

4. Civil action

A complainant may seek damages through civil action, depending on strategy and procedural rules.

5. Protection orders or workplace/school remedies

If the defamatory fake account is part of harassment, stalking, gender-based abuse, or institutional misconduct, other remedies may be available.

XXX. Risks of Filing a Weak or Retaliatory Complaint

Cyber libel complaints are serious. A weak, exaggerated, or retaliatory complaint can backfire.

Possible risks include:

dismissal at preliminary investigation;
counter-affidavit exposing factual weaknesses;
counterclaims or civil suits;
complaints for malicious prosecution, perjury, unjust vexation, or abuse of process, depending on facts;
public criticism if the complaint targets legitimate speech;
reputational consequences.

A complainant should avoid using cyber libel as a tool to silence truthful criticism, consumer complaints, labor grievances, public-interest commentary, or whistleblowing.

XXXI. Best Practices for Complainants

A complainant should:

Preserve evidence before reporting or confronting the account.
Save screenshots, URLs, screen recordings, and timestamps.
Identify witnesses who saw the post.
Document harm to reputation, work, business, family, or mental health.
Avoid retaliatory posts.
Avoid hacking or attempting to access the fake account illegally.
File reports with proper cybercrime authorities.
Prepare a detailed complaint-affidavit.
Focus on facts, not speculation.
Gather evidence linking the fake account to the respondent.

The most important part of a fake account case is proving authorship or control.

XXXII. Best Practices for Respondents

A person accused of operating a fake account should:

Preserve their own evidence.
Avoid deleting relevant material without legal advice, as deletion may appear suspicious.
Document account security history if hacking is claimed.
Gather alibi or access evidence, if relevant.
Save messages showing lack of involvement.
Avoid contacting or threatening the complainant.
Prepare a counter-affidavit addressing each element.
Challenge unauthenticated screenshots where appropriate.
Explain context if the statement was opinion, fair comment, parody, or privileged communication.
Avoid making new posts about the complainant while the case is pending.

XXXIII. Drafting Issues: How to Plead the Fake Account Connection

A complaint should not merely say, “I believe the respondent is behind the fake account.” It should explain why.

Useful allegations include:

The fake account used information known only to the respondent.
The account was created shortly after a specific dispute.
The account messaged people connected to both parties.
The account used the respondent’s phrases, photos, email, number, or aliases.
Witnesses saw the respondent use the account.
The respondent admitted involvement.
Technical data links the account to the respondent.
The account interacted with the respondent’s real account in a coordinated way.
The fake account’s posts align with threats previously made by the respondent.

The goal is to show a reasonable factual basis for attribution.

XXXIV. Sample Structure of a Cyber Libel Complaint-Affidavit

A complaint-affidavit may follow this structure:

Personal circumstances of complainant;
Personal circumstances of respondent, if known;
Background facts and relationship of parties;
Description of fake account;
Exact defamatory post or statement;
Date, time, and platform of publication;
Explanation of why statement is defamatory;
Explanation of how complainant is identifiable;
Explanation of publication to third persons;
Witnesses who saw or reacted to the post;
Evidence linking respondent to fake account;
Damage suffered;
Legal basis;
Prayer for prosecution and damages;
Attachments.

Attachments may include screenshots, URLs, witness affidavits, platform reports, notarized documentation, and other electronic evidence.

XXXV. Evidentiary Authentication

Electronic evidence must be authenticated. The proponent should be prepared to explain:

how the screenshot was obtained;
who captured it;
when it was captured;
what device was used;
whether it accurately reflects what appeared online;
whether the URL was preserved;
whether the account and post were accessible;
whether other people saw the same post;
whether the evidence was altered.

Authentication may come from the person who captured the evidence, a witness who saw the content, platform records, forensic examination, or admissions by the opposing party.

XXXVI. Chain of Custody

In cybercrime cases, chain of custody may matter, especially for device evidence, forensic images, logs, or seized electronic data.

The chain should show:

who collected the evidence;
when and where it was collected;
how it was preserved;
who handled it;
whether it was altered;
how it was examined;
how it was stored.

Weak chain of custody can undermine electronic evidence.

XXXVII. Cyber Warrants and Lawful Investigation

Investigators may need lawful authority to obtain electronic data. Depending on the case, this may involve:

preservation requests;
disclosure of subscriber information;
traffic data requests;
search, seizure, and examination of computer data;
forensic examination of devices;
court orders or warrants.

Private persons should not hack, phish, impersonate, or unlawfully access accounts to gather evidence. Illegally obtained evidence may be excluded and may expose the complainant to liability.

XXXVIII. Distinguishing Cyber Libel from Online Harassment

Cyber libel focuses on defamatory imputation. Online harassment may involve repeated unwanted conduct, threats, insults, stalking, doxxing, or intimidation.

A fake account may commit both, but they are conceptually different.

Examples:

“She stole money from our company” may be cyber libel if false and malicious.
“I will ruin your life” may be a threat or harassment issue.
Posting someone’s address and encouraging others to shame them may involve privacy, harassment, or safety concerns.
Creating a fake profile using someone’s photo may involve identity-related violations.

The correct legal theory depends on the actual content and conduct.

XXXIX. Cyber Libel and Freedom of Expression

Cyber libel law must be balanced against constitutional free speech. The internet is a major space for public discussion, criticism, journalism, activism, consumer reviews, and political speech.

Not every offensive post should become a criminal case. The law should distinguish between:

false factual accusations and protected opinions;
malicious defamation and legitimate criticism;
harassment and public-interest reporting;
impersonation and parody;
personal attacks and fair comment.

The more the speech involves public interest, public officials, or public accountability, the more carefully authorities should assess whether prosecution would chill legitimate expression.

XL. Practical Examples

Example 1: Clear cyber libel through a fake account

A dummy Facebook account posts: “Maria Santos stole ₱500,000 from her employer and is hiding from the police,” tags her workplace, and attaches her photo. The statement is false. Several coworkers see it and confront her. Evidence later shows the account was linked to the respondent’s phone number.

This may support cyber libel because there is defamatory imputation, identification, publication, malice, and attribution.

Example 2: Weak attribution

A fake account accuses a person of being a scammer. The complainant suspects a former friend because they had an argument. There are screenshots but no evidence linking the former friend to the account.

The complaint may be weak because suspicion and motive alone may not prove authorship.

Example 3: Opinion or fair comment

An anonymous account posts: “I think this contractor’s work is sloppy and overpriced based on my experience.” If based on actual experience and stated as opinion, this may be protected.

But if the account says, “This contractor steals deposits and never completes projects,” that is a factual accusation requiring proof.

Example 4: Parody account

A page clearly labeled as parody posts exaggerated jokes about a public figure. If reasonable readers understand the page as satire, libel may be harder to prove.

But a parody label will not protect a false and believable factual accusation made with malice.

Example 5: Group chat publication

A fake account joins a neighborhood group chat and accuses a resident of being a drug dealer. Members discuss and share the accusation. Even though the chat is not public to the whole internet, publication to third persons may exist.

XLI. Common Mistakes by Complainants

Complainants often make these mistakes:

failing to preserve the URL;
submitting cropped screenshots without context;
accusing a respondent based only on suspicion;
failing to show that third persons saw the post;
failing to explain why the post refers to them;
relying on emotional statements rather than evidence;
deleting conversations that may show context;
engaging in retaliatory defamation;
reporting the account before preserving evidence;
confusing insult with libel;
assuming a fake account is automatically traceable.

XLII. Common Mistakes by Respondents

Respondents often make these mistakes:

posting more statements after receiving a complaint;
deleting accounts or messages without preserving explanation;
threatening the complainant;
relying only on denial;
failing to address circumstantial evidence;
admitting partial control of the account casually;
claiming “opinion” when the post states factual accusations;
ignoring subpoenas or preliminary investigation notices;
failing to preserve hacking evidence;
underestimating screenshots supported by witnesses.

XLIII. Settlement, Retraction, and Apology

Some cyber libel disputes are resolved through settlement, retraction, apology, or takedown.

A settlement may include:

deletion of defamatory posts;
deactivation of fake account;
written apology;
public clarification;
undertaking not to repost;
payment of damages;
confidentiality clause;
waiver or desistance, where legally appropriate.

However, in criminal cases, settlement does not always automatically extinguish criminal liability. Prosecutorial discretion and applicable law still matter.

XLIV. The Importance of Legal Counsel

Cyber libel involving a fake account is evidence-heavy and procedurally sensitive. Legal counsel can help determine:

whether the post is actually libelous;
whether other offenses apply;
where to file;
how to preserve electronic evidence;
how to draft affidavits;
how to respond to subpoenas;
whether settlement is advisable;
whether constitutional defenses apply;
whether the case is strong enough to pursue.

Because cyber libel carries criminal penalties, both complainants and respondents should treat the matter seriously.

XLV. Conclusion

A cyber libel complaint involving a fake account in the Philippines requires more than proof that an offensive or defamatory post exists. The complainant must establish the elements of libel and, crucially, must connect the fake account to a real person through competent evidence.

The strongest cases usually contain clear defamatory statements, identifiable reference to the complainant, proof of publication, evidence of reputational harm, and credible technical or circumstantial evidence linking the respondent to the fake account.

The weakest cases rely only on screenshots, suspicion, motive, or personal belief.

Fake accounts may hide identity, but they do not automatically prevent liability. At the same time, anonymity alone is not a crime. The law must balance reputation, accountability, privacy, due process, and freedom of expression.

In Philippine cyber libel cases, the decisive question is often not merely “Was the post defamatory?” but also “Can the complainant prove who was legally responsible for publishing it?”