How to File a Cybercrime Complaint for Online Shaming in the Philippines

Being publicly humiliated online can feel urgent, personal, and overwhelming. In the Philippines, “online shaming” is not always the name of the offense written in the law, but the act may fall under cyber libel, gender-based online sexual harassment, photo or video voyeurism, data privacy violations, threats, stalking, or other crimes depending on what was posted, who posted it, and what harm was caused. This guide explains how to file a cybercrime complaint for online shaming in the Philippines, what evidence to prepare, where to file, what usually happens at the NBI, PNP Anti-Cybercrime Group, and prosecutor’s office, and what common mistakes can weaken a case.

What Counts as Online Shaming in the Philippines?

Online shaming usually means someone uses the internet to expose, insult, accuse, ridicule, or embarrass another person. It may happen through Facebook posts, TikTok videos, Messenger group chats, X/Twitter threads, Instagram stories, YouTube videos, Reddit posts, online reviews, screenshots, livestreams, fake accounts, or private messages shared publicly.

Common examples include:

  • Posting that someone is a “scammer,” “kabitan,” “thief,” “drug user,” “prostitute,” or “cheater” without proof
  • Uploading screenshots of private chats to humiliate someone
  • Posting a debtor’s photo, address, ID, workplace, or family details to pressure payment
  • Sharing intimate photos, videos, or sexual rumors
  • Creating fake accounts or edited images to mock a person
  • Tagging the person’s employer, school, relatives, or community to ruin reputation
  • Encouraging others to bash, threaten, or harass the person
  • Publishing personal information such as phone number, address, IDs, or medical details

The key question is not simply, “Was I embarrassed?” The legal question is: What specific unlawful act was committed, and what evidence proves it?

Main Legal Bases for Online Shaming Complaints

Cyber Libel Under RA 10175 and the Revised Penal Code

The most common complaint for online shaming is cyber libel.

Under Article 353 of the Revised Penal Code, libel is a public and malicious imputation of a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or cause contempt against a person. Article 355 punishes libel committed through writing or similar means. (Supreme Court E-Library)

Republic Act No. 10175, or the Cybercrime Prevention Act of 2012, applies libel to acts committed through a computer system or similar means. Section 4(c)(4) covers libel online, while Section 6 provides that crimes under the Revised Penal Code and special laws committed through information and communications technology may carry a penalty one degree higher. (Supreme Court E-Library)

For a cyber libel complaint, you generally need to show:

  1. There was a defamatory statement or imputation.
  2. It identified you or made you identifiable.
  3. It was published online or communicated to another person.
  4. It was malicious, meaning it was made with bad motive or without justifiable reason.
  5. It caused dishonor, discredit, contempt, or reputational harm.

A post does not have to mention your full legal name if people can identify you from the context, photos, tags, workplace, family references, screenshots, or comments.

Important Update: Cyber Libel Prescription Period

Timing matters. In April 2026, the Supreme Court affirmed in Causing v. People that cyber libel prescribes in one year from discovery, not 12 or 15 years. The Court explained that cyber libel is libel committed through a computer system, and prescription begins when the offended party, authorities, or their agents discover the offense. (Supreme Court of the Philippines)

This means a cyber libel complaint should be acted on quickly. Do not wait months before preserving evidence, identifying witnesses, or filing.

Safe Spaces Act: Online Sexual Harassment

If the online shaming involves sexual comments, sexualized insults, repeated unwanted sexual messages, cyberstalking, threats involving sexual content, or non-consensual sharing of sexual images, the Safe Spaces Act, Republic Act No. 11313, may apply.

The Safe Spaces Act protects individuals, regardless of sex, sexual orientation, gender identity, or gender expression, from gender-based sexual harassment in public spaces, workplaces, educational institutions, and online spaces. (Tourism Promotions)

Examples may include:

  • Posting sexual insults about a woman, LGBTQ person, or any person targeted because of sex, gender, or sexuality
  • Repeated unwanted sexual messages
  • Threatening to expose intimate images
  • Sexual rumors posted in group chats or public pages
  • Cyberstalking with sexual or gender-based humiliation

Anti-Photo and Video Voyeurism Act

If the online shaming involves intimate photos or videos, consider Republic Act No. 9995, the Anti-Photo and Video Voyeurism Act of 2009.

RA 9995 prohibits taking, copying, selling, distributing, publishing, broadcasting, showing, or exhibiting intimate photos or videos without the required consent, including through the internet, cellular phones, and similar devices. Importantly, the law can apply even if the person originally consented to the recording, because separate consent is required for copying, sharing, publishing, or broadcasting it. (Lawphil)

This is especially relevant in “revenge porn” situations, breakup-related threats, leaked private videos, or intimate images circulated in chat groups.

Data Privacy Act

If the online shaming involves posting your personal information, such as your phone number, address, IDs, medical information, financial details, workplace records, screenshots of accounts, or government-issued numbers, Republic Act No. 10173, the Data Privacy Act of 2012, may also be relevant.

The Data Privacy Act protects personal information and sensitive personal information. It defines personal information as information from which an individual’s identity is apparent or can reasonably be ascertained, and sensitive personal information includes health, education, sexual life, proceedings for offenses, government-issued identifiers, and similar data. (National Privacy Commission)

However, not every embarrassing post is automatically a Data Privacy Act case. The issue is whether there was unlawful processing, disclosure, or misuse of personal data covered by the law.

Civil Code Remedies for Humiliation and Privacy Violations

Even when the act may not result in a criminal conviction, there may be a civil case for damages. Articles 19, 20, and 21 of the Civil Code require people to act with justice, give everyone their due, observe honesty and good faith, and compensate others for damage caused unlawfully or contrary to morals, good customs, or public policy. Article 26 specifically protects dignity, personality, privacy, and peace of mind, including acts that vex or humiliate another person because of personal condition. (Supreme Court E-Library)

A civil case is different from a criminal complaint. A criminal case seeks punishment by the State. A civil case seeks compensation, injunction, or other relief.

Where to File a Cybercrime Complaint for Online Shaming

You may usually start with any of these offices:

Office Best for Practical notes
NBI Cybercrime Division / Cybercrime Regional Centers Cyber libel, online harassment, fake accounts, doxxing, hacking-related evidence, intimate image circulation The NBI Citizen’s Charter says complainants may proceed to the Cybercrime Division to file a complaint or request investigation; the initial complaint sheet and interview process has no listed fee. (National Bureau of Investigation)
PNP Anti-Cybercrime Group (PNP-ACG) Online shaming, threats, scams, fake accounts, harassment, cyber-related offenses The PNP-ACG has regional units and online reporting channels, but serious complaints often still require sworn statements and personal appearance.
City or Provincial Prosecutor’s Office Filing a criminal complaint directly for preliminary investigation Best when you already have a complete complaint-affidavit and evidence.
National Privacy Commission Data privacy violations such as unlawful disclosure or processing of personal information More appropriate when the heart of the case is misuse of personal data, not just insult or defamation.
Barangay Minor disputes between residents of the same city/municipality where barangay conciliation applies Cyber libel and serious cybercrime issues often go beyond barangay settlement, but barangay records may help show prior harassment or attempts to resolve.

The NBI and PNP do not convict anyone. Their role is usually to receive the complaint, preserve or evaluate digital evidence, conduct investigation, identify account users when legally possible, and refer the case to the prosecutor. The prosecutor determines whether there is probable cause to file the criminal case in court.

Step-by-Step Guide to Filing the Complaint

1. Preserve the Evidence Immediately

Online evidence disappears fast. The post may be deleted, edited, hidden, or changed from public to private.

Before confronting the poster, preserve:

  • Screenshots of the post, comments, shares, reactions, profile, page, group, URL, date, and time
  • Screen recordings showing how you reached the post from the profile or page
  • The full URL or link to the post, profile, page, video, or comment
  • Names and URLs of accounts that shared or reposted it
  • Messages from people who saw the post
  • Any threats, private messages, or follow-up harassment
  • Proof of your identity and proof that the post refers to you
  • Medical, employment, business, school, or family consequences if relevant

Do not rely on cropped screenshots only. Investigators and prosecutors prefer evidence that shows context: account name, profile URL, date, time, full thread, and how the post is connected to you.

2. Make a Simple Timeline

Write down the facts in chronological order:

  1. When you discovered the post
  2. Who sent it to you or how you found it
  3. What exact words, images, or videos were posted
  4. Why people would know it refers to you
  5. Who posted, shared, or commented
  6. What harm happened afterward
  7. Whether the post is still online
  8. Whether the person has done similar acts before

This timeline will help your complaint-affidavit become clearer and more credible.

3. Identify the Correct Offense

Do not force every online shaming case into cyber libel. Classify it based on the facts:

Situation Possible legal route
False public accusation of crime, immorality, disease, debt fraud, or misconduct Cyber libel
Sexualized insults, repeated unwanted sexual comments, cyberstalking Safe Spaces Act
Intimate photo or video shared or threatened to be shared RA 9995, Safe Spaces Act, possibly cybercrime-related offenses
Posting address, phone number, IDs, private records, medical details Data Privacy Act, civil damages, possibly other offenses
Threats to harm, extort, expose, or force payment Threats, coercion, robbery/extortion-related offenses depending on facts
Edited images, fake accounts, impersonation Cybercrime offenses, identity-related complaints, possibly libel
Employer/school group chat humiliation Cyber libel, labor/school disciplinary remedies, civil damages

The complaint can mention several possible offenses, but it should be fact-based. Prosecutors dislike complaints that list many laws without explaining how each law was violated.

4. Prepare a Complaint-Affidavit

A complaint-affidavit is your sworn written statement. It should be signed before a notary public or authorized officer, depending on the filing office’s requirements.

It should include:

  • Your full name, address, contact number, and valid ID details
  • The respondent’s name, account name, address, and other identifying details, if known
  • The facts in chronological order
  • The exact defamatory, sexual, private, or harmful statements or materials
  • Why the post refers to you
  • How and when you discovered it
  • Who saw it or sent it to you
  • What harm resulted
  • A list of attached evidence
  • A statement that you are executing the affidavit to support a criminal complaint

If the respondent’s real identity is unknown, describe the account, profile link, phone number, email, payment account, page, group, or any digital identifiers you have. Investigators may need a court process or platform request to obtain subscriber or traffic data.

5. File With the NBI Cybercrime Division or PNP Anti-Cybercrime Group

For NBI cybercrime complaints, the NBI Citizen’s Charter describes an initial process where the complainant proceeds to the Cybercrime Division, fills out a complaint sheet, undergoes preliminary interview and initial investigation, and submits sworn statements, affidavits, devices, and supporting documents. The listed initial processing steps show no fee and an initial processing time of about 1 hour and 10 minutes, though actual investigation time depends heavily on complexity, evidence, workload, and whether platform data must be requested. (National Bureau of Investigation)

Bring:

  • Original and photocopy of valid government ID
  • Printed screenshots with URLs
  • Digital copies saved in USB or phone, if requested
  • Your complaint-affidavit
  • Witness affidavits, if available
  • The device where the messages or posts were received
  • Any notarized statements, if already prepared

Expect an interview. Be ready to explain the facts calmly and specifically. Avoid exaggerations. The strongest complaints are usually those that clearly connect the post, the respondent, the victim, the publication, and the harm.

6. Ask About Preservation of Computer Data

Under RA 10175, service providers may be required to preserve traffic data, subscriber information, and content data for specified periods. The law provides for preservation of traffic data and subscriber information for at least six months from the transaction date, while content data may be preserved for six months from receipt of a preservation order; disclosure of computer data generally requires a court warrant. (Supreme Court E-Library)

This is one reason speed matters. If the case requires platform records, IP logs, subscriber information, or preserved content, delay can make the evidence harder to obtain.

7. Prosecutor Review and Preliminary Investigation

After law enforcement evaluation, the complaint may be referred to the prosecutor, or you may file directly with the prosecutor’s office.

The prosecutor may require:

  • Complaint-affidavit and attachments
  • Counter-affidavit from the respondent
  • Reply-affidavit from the complainant
  • Clarificatory hearings, if needed
  • Additional evidence from investigators

If the prosecutor finds probable cause, an Information may be filed in court. Cybercrime cases under RA 10175 fall within the jurisdiction of Regional Trial Courts, including designated cybercrime courts. RA 10175 states that RTCs have jurisdiction over violations of the Act, including cases where elements were committed in the Philippines or involved computer systems wholly or partly situated in the country. (Supreme Court E-Library)

Evidence Checklist for Online Shaming Complaints

Evidence Why it matters Practical tip
Full screenshots Shows exact words, date, account, and context Capture the entire thread, not only the insulting line
URL links Helps investigators locate the post Copy the post link, profile link, and page/group link
Screen recording Shows authenticity and navigation path Record from opening the app/browser to viewing the post
Witness screenshots/messages Shows publication and third-party viewing Ask people who saw it to send screenshots and statements
Proof of identity Shows you are the person referred to Include ID, profile, employment/school proof if relevant
Proof of respondent identity Connects account to real person Save messages, phone numbers, payment details, admissions
Harm evidence Supports seriousness and damages Save employer notices, lost clients, medical records, threats
Notarized affidavits Converts facts into sworn testimony Include witnesses who saw the post or know it refers to you

Practical Problems That Commonly Delay Cybercrime Complaints

Deleted Posts

A deleted post does not automatically destroy your case, but it makes proof harder. Screenshots, URLs, cached copies, shares, comments, and witness affidavits become more important.

Anonymous or Fake Accounts

A fake account is not a dead end, but it requires more work. Investigators may look at linked phone numbers, emails, payment accounts, repeated language, mutual contacts, admissions, IP or subscriber information, and device evidence. Platform data usually requires proper legal process.

Private Group Chats

A private group chat can still be “published” if a third person saw the defamatory statement. For libel, publication does not always mean public to the whole world; communication to another person may be enough. But you still need credible proof of who posted it and what was said.

Truth Is Not Always a Complete Defense

Many people think, “It is true, so I can post it.” That is risky. Under Article 354 of the Revised Penal Code, defamatory imputations may be presumed malicious even if true, unless good intention and justifiable motive are shown. (Supreme Court E-Library)

For example, reporting suspected fraud to the police is very different from posting someone’s photo online and inviting the public to shame them.

Sharing, Liking, or Commenting

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel but was careful about overbreadth concerns involving online participation such as likes, shares, or comments. The liability of a person who merely reacted to or shared a post depends on the specific act, intent, wording, and applicable offense. (Lawphil)

The original author is usually the clearest respondent. Republishers, page admins, commenters, or sharers may require separate analysis.

Foreigners and Filipinos Abroad

A foreigner may file a complaint in the Philippines if the harmful act has a sufficient Philippine connection, such as the victim being in the Philippines, the respondent being in the Philippines, the post targeting people in the Philippines, or the computer system or damage being connected to the country. RA 10175 recognizes jurisdiction where elements were committed in the Philippines, where a computer system wholly or partly situated in the country was used, or where damage was caused to a person in the Philippines. (Supreme Court E-Library)

If evidence is executed abroad, Philippine authorities may require consular notarization or an apostille, depending on the document, country, and purpose. Foreign-language documents may also need certified English translation.

What Not to Do After Being Shamed Online

Avoid these common mistakes:

  • Do not threaten the poster with violence or illegal exposure.
  • Do not hack, access, or guess passwords to gather evidence.
  • Do not create a fake account to entrap someone without legal guidance.
  • Do not post a “counter-shaming” statement that may expose you to a separate complaint.
  • Do not edit screenshots in a way that removes context.
  • Do not wait too long, especially for cyber libel.
  • Do not submit fabricated or exaggerated evidence.
  • Do not assume barangay blotter alone is enough for a cybercrime case.

A calm, complete, evidence-based complaint is usually stronger than an emotional but poorly documented one.

Frequently Asked Questions

Can I file cyber libel if someone shamed me on Facebook?

Yes, if the post contains a defamatory imputation, identifies you or makes you identifiable, was published online, and appears malicious. Save the post link, screenshots, profile details, comments, and proof that people understood the post to refer to you.

Is online shaming automatically cybercrime in the Philippines?

No. Online shaming is a description of what happened, not always the legal offense. It may be cyber libel, sexual harassment, voyeurism, data privacy violation, threats, unjust vexation, or only a civil wrong depending on the facts.

Where should I file first, NBI or PNP Anti-Cybercrime Group?

Either may receive cybercrime-related complaints. Many complainants go to the NBI Cybercrime Division or the nearest PNP Anti-Cybercrime Group unit for investigation and evidence handling. If your evidence is already complete, filing directly with the prosecutor may also be possible.

What if the post was already deleted?

You may still file, but you need preserved evidence: screenshots, URLs, screen recordings, witnesses, shares, cached copies, and messages showing the post existed. Deleted content may be harder to authenticate, so act quickly.

Can I sue someone for posting my private chats?

Possibly. It depends on the content and context. If the post defames you, cyber libel may apply. If it exposes personal data, the Data Privacy Act may be relevant. If it involves intimate or sexual content, RA 9995 or the Safe Spaces Act may apply.

Can a debt collector post my photo online to shame me into paying?

That may create legal exposure for the poster or collector, especially if the post contains defamatory statements, threats, harassment, or personal information. Debt collection does not give someone unlimited authority to humiliate a debtor online.

How long does a cybercrime complaint take?

The initial receiving and interview may be done in one visit, but the full investigation can take weeks or months depending on the evidence, identity of the respondent, platform cooperation, prosecutor workload, and whether cyber warrants or data preservation requests are needed.

Can I file even if I do not know the real name of the fake account owner?

Yes. Provide every identifier you have: profile URL, username, screenshots, phone number, email, linked pages, payment accounts, messages, mutual contacts, and any admissions. The case may begin against an unknown account user while investigators work on identification.

Can I ask Facebook, TikTok, or another platform to remove the post?

Yes. Platform reporting is separate from filing a legal complaint. Report the post for harassment, privacy violation, bullying, impersonation, sexual content, or non-consensual intimate content as applicable. Save evidence before requesting takedown.

Can the person who shamed me also be liable for damages?

Yes. Apart from criminal liability, Articles 19, 20, 21, and 26 of the Civil Code may support a civil claim for damages, prevention, or other relief when the act violates dignity, privacy, peace of mind, morals, good customs, or legal duties. (Supreme Court E-Library)

Key Takeaways

  • Online shaming is not one single offense; it may be cyber libel, online sexual harassment, photo/video voyeurism, data privacy violation, threats, or a civil wrong.
  • Cyber libel is usually the main route when someone publicly posts false or malicious accusations that damage your reputation.
  • Act quickly because the Supreme Court has affirmed that cyber libel prescribes in one year from discovery.
  • Evidence is everything: save full screenshots, URLs, screen recordings, profile links, comments, shares, witness messages, and proof of harm.
  • NBI Cybercrime Division, PNP Anti-Cybercrime Group, and prosecutor’s offices are the usual complaint channels for cybercrime-related online shaming.
  • Do not retaliate by shaming back; preserve evidence and file a clear, sworn, fact-based complaint instead.
  • Civil damages may still be possible even when the facts do not lead to a criminal conviction.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.