In the Philippines, the proliferation of fake Facebook accounts—often used for identity theft, harassment, or "trolling"—is governed primarily by Republic Act No. 10175, also known as the Cybercrime Prevention Act of 2012. Victims of such accounts have legal recourse to identify the perpetrators and hold them criminally and civilly liable.
I. Legal Grounds for Filing a Case
Under Philippine law, creating or using a fake Facebook account is not a crime in itself unless it is used to commit specific prohibited acts. The most common charges include:
- Computer-related Identity Theft (Section 4(b)(3), R.A. 10175): The intentional acquisition, use, or transfer of identifying information belonging to another person (natural or juridical) without right. This includes creating an account using another person’s name and photos to damage their reputation or gain an advantage.
- Cyber Libel (Section 4(c)(4), R.A. 10175): If the fake account is used to publish false and malicious statements that tend to dishonor or discredit a person.
- Unjust Vexation (Article 287, Revised Penal Code): If the fake account is used to annoy, irritate, or harass a person without necessarily committing libel.
- Violation of the Data Privacy Act (R.A. 10173): If the perpetrator processed personal information (like photos and contact details) without the owner's consent or for malicious purposes.
II. How to Identify the Owner of a Fake Account
Identifying the person behind an anonymous or "dummy" account is the most challenging step. Individual citizens cannot legally compel Facebook (Meta) to release private IP addresses or registration data. This must be done through official channels.
1. Digital Evidence Preservation
Before the account is deleted or the content is changed, you must preserve evidence:
- Screenshots: Capture the profile URL (the unique link in the address bar), the account’s "About" section, and the specific posts or messages.
- Permalinks: Copy the direct links to specific malicious posts or comments.
- Source Code (Optional): On a desktop browser, right-clicking and "viewing page source" can sometimes provide internal numeric IDs (UIDs) that remain even if the user changes their display name.
2. Assistance from Law Enforcement
You must seek the help of specialized agencies that have the authority to request data from Meta:
- PNP-ACG: Philippine National Police - Anti-Cybercrime Group.
- NBI-CCD: National Bureau of Investigation - Cybercrime Division.
These agencies can issue a Preservation Order to Meta, requiring them to keep the data associated with the account (IP logs, login times, linked email/phone numbers) while an investigation is pending.
3. Court-Issued Warrants
Under the Rule on Cybercrime Warrants, law enforcement can apply for a Warrant to Disclose Computer Data (WDCD). Once issued by a court, this legally obligates service providers to hand over subscriber information that can link the account to a specific physical address or person.
III. The Procedural Steps to File a Case
Step 1: Complaint-Affidavit
Prepare a Complaint-Affidavit detailing the facts of the case. Attach all preserved screenshots as "Annexes." This must be sworn before a prosecutor or an authorized officer.
Step 2: Filing with the Office of the Prosecutor
The complaint is typically filed in the city or province where:
- The victim resides at the time of the offense; or
- The offense was committed (where the computer system is located); or
- The computer result was enjoyed/suffered.
Step 3: Preliminary Investigation
The Prosecutor will issue a subpoena to the respondent (if already identified). If the respondent is "Unknown," the case remains in the investigative stage with the PNP or NBI until the identity is unearthed through a WDCD.
Step 4: Filing of Information in Court
If the Prosecutor finds Probable Cause, they will file a formal "Information" in the Regional Trial Court (RTC) designated as a Special Cybercrime Court. The court will then issue a Warrant of Arrest.
IV. Critical Considerations
The "Unknown" Respondent
You can file a complaint against a "John Doe" or "Jane Doe." This allows law enforcement to begin the technical process of tracking the IP address. Once the identity is revealed through the NBI or PNP investigation, the complaint is amended to include the real name of the perpetrator.
Prescription Period
For Cyber Libel, the prescriptive period (the deadline to file) has been a subject of debate, but recent Supreme Court clarifications suggest it is one (1) year. For Identity Theft under R.A. 10175, the period is significantly longer (15 years), as the penalty is higher than standard Revised Penal Code crimes.
Civil Liability
Aside from criminal charges, you can file a separate civil action for Damages (Article 33, Civil Code) to seek compensation for moral sufferings, wounded feelings, and exemplary damages.
Summary Table: Agency Contact Information
| Agency | Office Location | Primary Function |
|---|---|---|
| PNP-ACG | Camp Crame, Quezon City | Technical investigation and forensic extraction. |
| NBI-CCD | NBI Building, Taft Ave, Manila | Investigation and application for Cybercrime Warrants. |
| DOJ-OOC | Department of Justice, Manila | Office of Cybercrime; handles international legal cooperation. |