Cyberbullying, fake or dummy accounts, and online threats can feel frightening because the person behind the account may be unknown, the posts can spread quickly, and evidence can disappear without warning. In the Philippines, there is no single criminal offense called “cyberbullying” that covers every situation involving adults. The correct legal and reporting process depends on what the person actually did—such as threatening violence, publishing defamatory accusations, impersonating someone, repeatedly sending sexual messages, exposing personal information, or sharing intimate images without consent.

Is Cyberbullying a Crime in the Philippines?

“Cyberbullying” is a general description, not always the exact criminal charge. Philippine authorities normally examine each message, post, account, image, or video and determine which law applies.

Possible offenses include:

Online conduct	Possible Philippine law
Publicly posting false and damaging accusations	Cyberlibel under Article 353 in relation to Article 355 of the Revised Penal Code and Sections 4(c)(4) and 6 of RA 10175
Threatening to kill, injure, kidnap, expose, or destroy property	Grave threats, light threats, or other threats under Articles 282–285 of the Revised Penal Code
Repeated messages intended to annoy, torment, or distress	Unjust vexation under Article 287 of the Revised Penal Code, depending on the facts
Using another person’s name, photos, or identifying information without right	Computer-related identity theft under Section 4(b)(3) of RA 10175
Sexual, misogynistic, homophobic, transphobic, or gender-based harassment	Online gender-based sexual harassment under RA 11313
Online abuse by a husband, ex-husband, boyfriend, ex-boyfriend, dating partner, or person with whom the victim has a common child	Psychological violence or another offense under RA 9262
Posting or sharing intimate images without written consent	RA 9995, the Anti-Photo and Video Voyeurism Act
Sexual exploitation or sexual images involving a child	RA 11930 and other child-protection laws
Unauthorized disclosure or misuse of personal information	RA 10173, the Data Privacy Act, when its requirements are met
Cyberbullying involving elementary or secondary school students	RA 10627, the Anti-Bullying Act, and applicable Department of Education rules

Under Section 6 of the Cybercrime Prevention Act of 2012, crimes already punishable under the Revised Penal Code or special laws may carry a penalty one degree higher when committed through information and communications technology. (Lawphil)

Not every insult is cyberlibel

Cyberlibel generally requires a defamatory statement that:

Attributes a crime, vice, defect, dishonorable act, or discreditable condition to a person;
Identifies or makes the person identifiable;
Is published or communicated to at least one person other than the victim;
Is malicious, subject to legally recognized defenses or privileged communications; and
Is published through a computer system or similar digital technology.

A cruel message sent privately only to the victim may lack the “publication” required for libel. It could still qualify as a threat, unjust vexation, gender-based online sexual harassment, psychological violence under RA 9262, or a school or workplace offense.

In Disini v. Secretary of Justice, the Supreme Court upheld cyberlibel liability principally as to the original author of the defamatory online statement. The Court did not treat a person’s mere receipt of, reaction to, or passive association with a post as automatic cyberlibel liability. Someone who reposts material while adding a new defamatory statement, however, may create a separate publication attributable to that person. (Lawphil)

Are Dummy Accounts Illegal?

Creating an account under a nickname, screen name, or invented identity is not automatically a crime. Many people use pseudonyms for privacy, entertainment, or professional reasons.

A dummy account becomes legally significant when it is used to commit an unlawful act, such as:

Pretending to be a real person;
Using another person’s name, photographs, contact details, or identifying information without permission;
Sending threats or extortion demands;
Publishing defamatory statements;
Scamming people or collecting money;
Obtaining passwords or accessing accounts without authority;
Sexually harassing or stalking someone;
Sharing private information or intimate content; or
Manipulating financial accounts or payment credentials.

Section 4(b)(3) of RA 10175 penalizes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person without right. A completely fictional profile does not necessarily amount to identity theft, but its operator may still be liable for threats, fraud, harassment, cyberlibel, or another offense. (Lawphil)

A profile name and photo may not prove who owns the account

Do not assume that the name or photograph shown on a profile conclusively identifies its operator. A person can copy someone else’s photograph or create an account in another person’s name.

In a 2025 decision, the Supreme Court explained that ownership or authorship of a social media account may be established through direct or circumstantial evidence, including:

An admission by the suspected operator;
A witness who saw the person use the account;
Information in a message known only to the suspected person;
Distinctive expressions, language patterns, nicknames, or inside jokes;
A linked phone number, email address, or other account;
Records from the platform, internet service provider, or telecommunications company;
Device, browser, search-history, geolocation, or forensic evidence; and
Conduct by the person that is consistent with the account’s posts or messages.

The Court emphasized that no single type of technical record is indispensable. The evidence must be considered as a whole. (Supreme Court of the Philippines)

What to Do Immediately After Receiving an Online Threat

When a message contains a credible threat of immediate violence, do not wait for a social media platform or specialized cybercrime office to respond.

Call 911 or contact the nearest police station.
Move to a secure location, particularly if the sender knows your home, school, workplace, or travel routine.
Tell trusted relatives, building security, school officials, or workplace security personnel.
Do not agree to meet the sender.
Preserve the message before blocking the account.
Inform police about weapons, prior violence, stalking, physical access, or specific plans mentioned by the sender.
For women and children, ask for assistance from the police Women and Children Protection Desk when appropriate.

Statements such as “I know where you live” are alarming but must be assessed together with the surrounding facts. A message naming a place, weapon, date, or intended act normally requires more urgent intervention than a vague insult.

How to Preserve Evidence Properly

Evidence preservation is often the most important thing a victim can personally control. Accounts can be deleted, usernames can be changed, disappearing messages can expire, and platform records may eventually become unavailable.

Save more than one screenshot

For every relevant post, account, message, or comment:

Take screenshots showing the full screen, not only the offensive words.
Include the account name, username or handle, profile photo, date, time, and surrounding conversation.
Copy the exact profile, post, video, or comment URL.
Record the account’s numeric or unique identifier when the platform displays one.
Make a screen recording that scrolls through the profile and opens the relevant posts.
Export the full chat when the application permits it.
Save original photographs, videos, voice messages, emails, and attachments.
Preserve email headers and notification emails.
Keep platform report confirmations and reference numbers.
Record the date when you first discovered each post.

Keep untouched originals. Do not crop, annotate, enhance, rename, or edit your only copies. Make separate working copies for highlighting or printing.

Electronic documents, screenshots, chat logs, photographs, and videos may be admitted in court when properly identified and authenticated under the Rules on Electronic Evidence. The Supreme Court has also recognized that electronic messages obtained by a private individual are not automatically inadmissible merely because they came from a private online account. (Supreme Court of the Philippines)

Record evidence that may identify the operator

Create a separate list of facts connecting the dummy account to a particular person:

Statements only that person would know;
Similar spelling, expressions, nicknames, or grammatical habits;
References to private conversations;
Admissions made through another account;
Phone numbers, email addresses, payment accounts, or recovery information;
Witnesses who saw the person operating the account;
Messages sent immediately after an offline dispute;
Repeated activity matching the person’s location or schedule; and
Earlier accounts that used the same photographs or contact details.

A notarized screenshot does not, by itself, prove who controlled an account. Notarization confirms the oath or execution of the affidavit; it does not independently establish digital authorship.

Do not obtain evidence illegally

Do not hack the account, steal a password, install spyware, impersonate law enforcement, pay an alleged “hacker,” or publish the suspected person’s private information in retaliation. These acts may expose the victim to a separate complaint and may damage the credibility of the original case.

Step-by-Step: How to Report Cyberbullying or Online Threats

1. Secure your safety

For immediate danger, report first to the nearest police station or emergency responders. A local police station can create an initial record, respond to an imminent threat, and refer the matter to the appropriate cybercrime or investigative unit.

2. Preserve the account and messages

Complete the evidence-preservation steps before blocking the account whenever it is safe to do so. If a child is involved, a parent or guardian should preserve the evidence without repeatedly exposing the child to the harmful material.

3. Report the content to the platform

Use the platform’s reporting functions for impersonation, harassment, threats, privacy violations, non-consensual intimate images, or child sexual content.

A platform report may result in removal or suspension, but it is not the same as filing a criminal complaint. Social media companies generally do not disclose subscriber information directly to private complainants. Investigators may need lawful preservation requests, disclosure orders, or cybercrime warrants.

4. File a complaint with the PNP or NBI

You may approach:

The nearest Philippine National Police station;
A PNP Anti-Cybercrime Group office or regional cybercrime unit;
The NBI Cybercrime Division; or
An NBI regional or district office that can receive or refer the complaint.

The NBI’s published cybercrime complaint process requires an initial complaint form, interview, and evaluation. The NBI Citizen’s Charter lists approximately one hour and ten minutes for the initial service process, but this does not include the actual investigation, digital forensic examination, platform response time, case build-up, or prosecution. Those stages may take weeks or months. NBI cybercrime complaint intake is listed without a service fee. (National Bureau of Investigation)

Give the investigator a factual chronology rather than insisting on one particular criminal charge. For example:

“On 4 July 2026, I discovered a Facebook account using my name and photograph. It sent my employer a message falsely accusing me of theft and later threatened to post my home address unless I paid ₱20,000.”

This gives investigators facts relevant to identity theft, cyberlibel, threats, extortion, and other possible offenses.

5. Execute a complaint-affidavit

A complaint-affidavit is a sworn written statement describing:

Who you are;
What happened;
When and where you discovered it;
Which accounts, numbers, or devices were involved;
Why you believe a particular person may be responsible;
Who else received or saw the content;
What harm, fear, or damage resulted; and
What documents and electronic evidence support your account.

Number the attachments as annexes and refer to each annex in the affidavit. Ask for a receiving copy, docket number, investigation reference number, or other proof that your complaint was recorded. The implementing rules of RA 10175 require law-enforcement authorities to record sworn cybercrime complaints in their official docketing systems. (Cybercrime Center)

6. Allow investigators to request data lawfully

Investigators may send a preservation request so that relevant subscriber, traffic, or content data is not deleted while legal process is being prepared. RA 10175 generally provides for preservation of specified computer data for six months, with procedures for extension.

Disclosure or search of protected data normally requires the appropriate legal authority or court-issued cybercrime warrant. Victims themselves cannot compel a platform, telecommunications company, or internet provider to disclose another user’s private subscriber information. (Lawphil)

7. Proceed to the prosecutor’s office when the evidence is ready

A criminal complaint may be filed with the proper city or provincial prosecutor’s office, often after police or NBI case build-up. The DOJ’s filing requirements for preliminary investigation include an Investigation Data Form, a complaint-affidavit or sworn statement, and supporting evidence, generally in the required number of copies. (Department of Justice)

The respondent may be required to submit a counter-affidavit. The prosecutor then determines whether the evidence satisfies the standard under the applicable DOJ investigation rules. Filing a police or NBI complaint does not automatically mean that a criminal case will be filed in court.

Where Else Should You Report?

Situation	Additional office or process
Misuse, unauthorized disclosure, or malicious processing of personal data	National Privacy Commission
Harassment involving a student	School principal, child-protection committee, guidance office, or school division office
Workplace sexual or gender-based harassment	Employer’s committee on decorum and investigation or HR office
Abuse by a spouse, former spouse, dating partner, or person with a common child	Police Women and Children Protection Desk, barangay VAW desk, prosecutor, or Family Court
Online scam involving money, bank accounts, or e-wallets	Bank or e-wallet provider, PNP/NBI, and the government’s 1326 anti-scam channel
Intimate images or sexual content involving a minor	Police, NBI, social welfare authorities, and the platform’s child-safety reporting system

A formal complaint before the National Privacy Commission generally requires a completed and notarized complaint form or verified complaint, supporting evidence, identification, and any witness affidavits. The NPC accepts filings through the authorized channels listed on its website and currently publishes an updated complaint-affidavit form. (National Privacy Commission)

The Data Privacy Act does not automatically convert every personal argument or embarrassing post into a privacy case. The NPC will examine whether personal information was processed, whether the respondent was subject to the law, whether there was a lawful basis, and whether a specific DPA violation occurred. (Lawphil)

Special Rules for Sexual Harassment and Intimate Images

Gender-based online sexual harassment

The Safe Spaces Act, or RA 11313, covers online conduct targeted at a person that causes or is likely to cause mental, emotional, or psychological distress or fear for personal safety when the conduct is gender-based or sexual.

Examples include:

Unwanted sexual remarks;
Misogynistic, sexist, homophobic, or transphobic comments;
Sexual threats;
Cyberstalking and incessant messaging;
Uploading or sharing photographs without consent in a gender-based harassment context;
Online impersonation;
Posting lies to damage a victim’s reputation; and
Using digital communication to intimidate or terrorize the victim.

The law can apply to public posts and private messages. (Lawphil)

Non-consensual intimate images

Under the Anti-Photo and Video Voyeurism Act, it may be unlawful to copy, distribute, publish, broadcast, or exhibit intimate sexual photographs or recordings without the required written consent.

Consent to make the original recording does not automatically mean consent to share or publish it. Preserve the original threatening messages and distribution links, but avoid unnecessarily forwarding the intimate material to friends or posting it publicly as “proof.” (Lawphil)

When sexual images involve a child, report immediately. RA 11930 imposes strong duties and penalties concerning online sexual abuse or exploitation of children and child sexual abuse or exploitation materials. (Lawphil)

Online Abuse by a Spouse or Dating Partner

Online humiliation, repeated verbal abuse, stalking, threats, or malicious posts by a husband, former husband, boyfriend, former boyfriend, dating partner, or person with whom a woman has a common child may fall under RA 9262.

For psychological violence, the prosecution generally must prove the legally covered relationship, the abusive act, and the mental or emotional anguish suffered by the woman or child. Public ridicule, humiliation, and repeated verbal or emotional abuse are expressly relevant, but anguish cannot simply be presumed in every case; it must be supported by evidence.

Useful supporting evidence may include:

The victim’s detailed affidavit;
Messages and public posts;
Testimony from relatives or co-workers;
Medical or psychological records;
Evidence of panic attacks, sleep disturbance, workplace disruption, or changes in behavior; and
Prior police, barangay, or protection-order records.

The Supreme Court has repeatedly discussed these requirements in cases applying Section 5(i) of RA 9262. (Lawphil)

Cyberbullying Involving Students or Minors

RA 10627 requires elementary and secondary schools to adopt policies addressing bullying, including cyberbullying. Parents should report the incident in writing to the school principal or designated child-protection personnel and request a written acknowledgment.

The school process can proceed at the same time as a police, NBI, or child-protection investigation. A school investigation does not replace criminal reporting when there are serious threats, sexual exploitation, identity theft, hacking, extortion, or distribution of intimate content. (Lawphil)

When the suspected offender is a minor, criminal responsibility is governed by RA 9344, as amended. A child aged 15 or below is exempt from criminal liability, while a child above 15 but below 18 is criminally liable only when acting with discernment. Exemption from criminal liability does not mean nothing happens: intervention, diversion, school discipline, parental participation, and civil liability may still be relevant.

Documents to Bring When Filing a Complaint

Prepare both printed and digital copies where possible.

Document or evidence	Why it matters
Government-issued ID or passport	Confirms the complainant’s identity
Written chronology	Helps investigators understand the sequence of events
Complaint-affidavit	Provides the sworn factual basis of the complaint
Full screenshots and printouts	Shows the account, content, context, date, and time
URLs, usernames, handles, and account IDs	Helps locate and preserve the correct account
Original device	May be needed for verification or forensic examination
Chat exports, emails, audio, and video files	Preserves original electronic content
Witness affidavits or contact details	Establishes publication, authorship, threats, or resulting harm
Platform report acknowledgment	Shows when and how the content was reported
Proof of relationship	Important in RA 9262 cases
Birth certificate and guardian’s ID	May be requested when a child is involved
Medical or psychological records	Can support proof of injury or mental anguish
Proof of financial or reputational damage	Useful when damages or fraud are involved
English or Filipino translation	Helpful when evidence is in another language

An investigator may ask to inspect the original device. Back up your data first, document the device’s condition, and obtain an acknowledgment whenever a device is formally surrendered.

Typical Fees and Timelines

Stage	Typical practical expectation
Platform report	Usually free; response may take hours, days, or longer
Police or NBI intake	Generally no complaint-intake fee; initial interview may be completed the same day
Investigation and account attribution	Often several weeks or months, especially when warrants or foreign platform records are required
Prosecutor’s investigation	Commonly takes several months, depending on service of subpoenas, submissions, workload, and complexity
NPC complaint	Requires formal documents and notarization; official fees and filing rules should be checked with the NPC
Court proceedings	May take months or years, particularly when attribution or expert evidence is disputed

Platform location is a common bottleneck. Many social media providers store records or process government requests outside the Philippines. Investigators may need international cooperation, and some records may no longer exist by the time a request is received.

Can Foreigners or Overseas Filipinos File a Complaint?

Foreign nationals may report offenses committed against them in the Philippines. Overseas Filipinos may also report conduct connected to the Philippines, although practical arrangements for affidavits and testimony may be required.

Useful steps include:

Present a passport and, when applicable, an ACR I-Card or Philippine identification document.
Provide a Philippine address or reliable local contact.
Ask the receiving office whether a remote interview is possible.
Execute affidavits before a Philippine embassy or consulate when available.
For documents notarized abroad, confirm whether an apostille or consular authentication is required.
Obtain certified translations of evidence not written in English or Filipino.
Identify where the victim, suspected offender, devices, witnesses, and resulting harm are located.

RA 10175 gives Philippine courts jurisdiction in several situations, including when an element of the offense occurs in the Philippines, a relevant computer system is wholly or partly situated here, or damage is suffered by a person in the Philippines. Actual investigation and enforcement may still be slower when the suspected operator, service provider, or evidence is abroad. (Lawphil)

Common Mistakes That Weaken Online Harassment Cases

Deleting or blocking before preserving evidence

Blocking may be necessary for safety, but save the profile URL, messages, and full context first whenever possible.

Submitting only cropped screenshots

A cropped image may omit the username, URL, date, surrounding discussion, or information needed for authentication.

Delaying a cyberlibel complaint

In Causing v. People, as affirmed by the Supreme Court En Banc in April 2026, cyberlibel was held to prescribe in one year from discovery of the alleged offense by the offended party or authorities. Record the exact date of discovery and report promptly. (Supreme Court of the Philippines)

Assuming a platform report is a criminal complaint

A Facebook, TikTok, Instagram, X, YouTube, or messaging-app report asks the company to enforce its rules. It does not automatically begin a Philippine criminal investigation.

Publicly accusing a suspected operator without sufficient proof

A public accusation can create a new defamation dispute, especially when the account’s true operator has not yet been established.

Treating a barangay blotter as the entire case

A barangay record may help document events, provide immediate community assistance, or support a request for protection. It does not replace reporting to police, the NBI, or the prosecutor when cybercrime investigation, warrants, digital forensics, or urgent law-enforcement action is needed.

Paying unofficial “cyber investigators”

Be cautious of people who promise to reveal an account owner instantly in exchange for money. Subscriber information and protected computer data generally require lawful cooperation from platforms, providers, investigators, and courts.

Frequently Asked Questions

Where should I report a dummy Facebook account in the Philippines?

Report the account to Facebook for impersonation and preserve the profile URL, username, screenshots, and messages. File a complaint with the PNP Anti-Cybercrime Group, the nearest police station, or the NBI Cybercrime Division when the account is being used for threats, fraud, defamation, harassment, or identity theft.

Can the police identify an anonymous account?

Possibly. Investigators may use admissions, witnesses, linked numbers or emails, platform records, telecommunications records, device evidence, distinctive language, and other circumstantial evidence. Identification is not guaranteed, particularly when records have expired or the operator used foreign services and effective concealment methods.

Are screenshots enough to file a complaint?

Screenshots are enough to begin reporting, but they may not be enough by themselves to prove the entire case. Preserve URLs, originals, full conversations, account identifiers, witnesses, and evidence connecting the account to its operator.

What happens if the dummy account is deleted?

Report it anyway. Your screenshots, screen recordings, emails, witnesses, and platform acknowledgment may remain useful. Investigators may still seek preserved provider records, but available data depends on the platform’s retention practices and how quickly the complaint was made.

Should I go to the barangay before the NBI or police?

Not when there is immediate danger, serious threats, sexual content, hacking, extortion, or a need to preserve digital records. Go directly to police or the NBI. A barangay report may be made in parallel when local documentation or protection is useful.

Can I report an account even if I do not know who owns it?

Yes. Identify the respondent as an unknown account operator and provide every available username, URL, profile ID, phone number, email address, payment account, and attribution clue.

Can a private message be cyberlibel?

Cyberlibel generally requires communication to another person besides the victim. A message seen only by the victim may not satisfy that element, but it may still constitute a threat, unjust vexation, gender-based online sexual harassment, psychological violence, or another offense.

Can I force a platform to remove a post immediately?

A victim can use the platform’s reporting and appeal systems, but removal is not always immediate. Philippine authorities may pursue appropriate judicial remedies, but the Supreme Court struck down the government’s unrestricted administrative blocking power under Section 19 of RA 10175 in Disini. Preserve the content before seeking removal. (Lawphil)

How long do I have to file a cyberlibel complaint?

The Supreme Court has ruled that cyberlibel prescribes in one year from discovery. Other offenses have different prescriptive periods. Do not assume that all online offenses follow the same deadline.

What if the person behind the account is a minor?

Report the conduct to the school, parents or guardians, and authorities when necessary. Juvenile justice rules may affect criminal liability, but intervention, diversion, school discipline, protective measures, and civil consequences may still apply.

Key Takeaways

“Cyberbullying” is not one universal adult offense; the correct charge depends on the actual conduct.
A dummy account is not automatically illegal, but impersonation, threats, identity theft, fraud, sexual harassment, and defamation may be punishable.
Preserve full screenshots, URLs, screen recordings, original files, devices, witness information, and the date of discovery.
For immediate threats, contact 911 or the nearest police station instead of waiting for a platform response.
Platform reporting and criminal reporting serve different purposes and should often be done in parallel.
File with the PNP, NBI, or prosecutor and obtain a receiving copy or official reference number.
Do not hack, retaliate, publicly accuse an unverified suspect, or pay unofficial operators to obtain private account data.
Cyberlibel currently prescribes in one year from discovery, so delay can permanently affect the case.
Special protections may apply when the conduct involves students, children, intimate images, personal data, gender-based harassment, or abuse by a spouse or dating partner.