The digital landscape in the Philippines, dominated largely by Facebook, has democratized communication but has also given rise to a unique breed of digital offenses. Among the most prevalent is defamation perpetrated through "dummy accounts"—anonymous or fake profiles intentionally created to shield the user from legal consequences.

There is a pervasive misconception that online anonymity grants complete immunity. However, Philippine jurisprudence and statutory laws have continuously evolved to track, unmask, and penalize perpetrators who use fake profiles to destroy reputations.

The Statutory Framework: Cyber Libel

Defamation committed on Facebook falls squarely under Section 4(c)(4) of Republic Act No. 10175, otherwise known as the Cybercrime Prevention Act of 2012. This provision penalizes cyber libel, which incorporates the definition of traditional libel found in Article 353 of the Revised Penal Code (RPC).

To successfully prosecute cyber libel—regardless of whether a real or dummy account was used—the prosecution must establish the following four elements beyond reasonable doubt:

Imputation of a discreditable act, condition, status, defect, or circumstance tending to cause dishonor, discredit, or contempt against a natural or juridical person.
Publication or circulation of the defamatory statement (which is met once an item is posted publicly or shared on Facebook).
Malice, which is presumed by law if the imputation is defamatory and no good intention or justifiable motive is shown.
Identifiability of the victim, meaning a third person reading the post can reasonably deduce who is being referred to, even if their exact name is not explicitly stated.

Note on Penalties: Under Section 6 of RA 10175, crimes committed through information and communications technology (ICT) carry a penalty one degree higher than traditional libel. However, in the landmark ruling of People v. Soliman, the Supreme Court clarified that courts retain the discretion to impose an alternative penalty of a fine only instead of mandatory imprisonment, depending on the circumstances of the case.

The Definitive Timeline: Prescription Period

A common point of confusion for both victims and lawyers has been the prescription period—the time limit within which a case must be filed. Because RA 10175 increased the penalty, lower courts previously argued that cyber libel prescribed in 12 or 15 years.

The Supreme Court En Banc settled this debate definitively in April 2026 in the case of Causing v. People. The High Court ruled that:

One-Year Prescription: Cyber libel prescribes within one (1) year. It is not a separate crime but rather traditional libel committed through a computer system.
Reckoning Point: The one-year period begins from the time of discovery by the offended party or the authorities, not from the date of publication.

The Court explicitly noted that because Facebook posts can have restrictive privacy settings or escape immediate notice, access depends heavily on connectivity and network links. Thus, a victim cannot be automatically presumed to have discovered a defamatory post the moment it was published.

The Evidentiary Hurdle: Proving Identity Behind a Dummy Account

The core defense of a dummy account user is simple denial: "That is not my account; anyone could have used my name or photo." To address this challenge, the Supreme Court has laid down critical guideposts to establish ownership or control over a social media profile in criminal cases. To pin liability on a specific individual hiding behind a dummy account, the prosecution can rely on circumstantial and digital evidence showing:

Internal Platform Data: Proof of who created or routinely accessed the account (e.g., the account using a specific mobile number or email address linked directly to the accused).
Forensic and Technical Links: Records from Internet Service Providers (ISPs), telecommunications firms, or digital forensics showing that the IP addresses or geolocation attributes used to log into the dummy account trace back to the accused’s physical location or personal devices.
Knowledge of Private Facts: The post containing specific information, localized dialects, or intimate details (such as nicknames or family disputes) that only the accused would realistically know.
Consistent Behavioral Patterns: Acts or declarations by the accused that are entirely consistent with the narrative, tone, or timeline of the dummy account's posts.
Visual Identifiers: The use of profile photos or background images that, upon cross-examination, are proven to be proprietary to the accused or showing their immediate family/surroundings, coupled with an inability to explain how a third party could have obtained them.

Compounded Criminal Liability

Creating a dummy account to defame someone often opens the door to additional criminal charges beyond cyber libel:

Computer-Related Identity Theft (Section 4(b)(3), RA 10175): If the dummy account uses the name, photos, and personal information of a real, living person to gain credibility or ruin that person's reputation, the perpetrator can be charged with identity theft. This carries a distinct and severe penalty of up to 12 years of imprisonment.
Psychological Violence under the VAWC Law (RA 9262): If the victim is a woman or her child, and the online defamation causes severe emotional or mental distress (e.g., public ridicule, slut-shaming, or digital stalking), the act can be prosecuted as psychological violence. The Supreme Court has upheld convictions where cyber-harassment through social media triggered liabilities under both the Cybercrime law and RA 9262 simultaneously.

Practical Steps for Victims

If you are targeted by a defamatory Facebook dummy account, immediate and strategic action is required to ensure the evidence remains admissible in a Philippine court:

Preserve Digital Evidence Immediately: Do not just take basic screenshots. Capture the full screen showing the date and time, the unique URL link of the profile, the unique URL links of the specific defamatory posts, and all reactions, comments, and shares.
Do Not Engage: Avoid commenting on or arguing with the dummy account. Public engagement can complicate the element of malice and may prompt the perpetrator to immediately deactivate or delete the account, destroying vital digital footprints.
Secure Legal and Forensic Assistance: File a formal complaint with the PNP Anti-Cybercrime Group (PNP-ACG) or the NBI Cybercrime Division. These specialized units have the legal authority to issue preservation requests to Meta (Facebook's parent company) to prevent the deletion of underlying log data and IP addresses while a cyber-warrant is being secured.