Being targeted by a dummy account, repeated online harassment, or a threat sent through Facebook, Messenger, TikTok, Instagram, email, or text can feel frightening and overwhelming. In the Philippines, the safest approach is to preserve the digital evidence first, report immediate danger to the police, request platform action, and file a formal complaint with the appropriate cybercrime investigators. The correct legal remedy depends on what the offender actually did—not simply on whether the conduct is described as “cyberbullying.”

If the message contains a credible threat of immediate physical harm, move to a safe place and call 911 or the nearest police station. The Unified 911 service is the national emergency hotline and operates 24 hours a day. Do not wait for Facebook, TikTok, or another platform to respond before seeking police protection. (DILG)

Is Cyberbullying a Crime in the Philippines?

There is no single Philippine law that makes every form of adult “cyberbullying” a separate crime. Instead, investigators and prosecutors examine the specific acts involved.

For example, an insulting comment may involve online libel, repeated sexual messages may fall under the Safe Spaces Act, an account pretending to be another person may involve computer-related identity theft, and a message promising to kill or injure someone may constitute grave threats.

Online conduct	Possible Philippine law or remedy
Dummy account using another person’s name, photos, or identity	Computer-related identity theft under Section 4(b)(3), Republic Act No. 10175
Publicly posting false accusations that damage a person’s reputation	Online libel under Articles 353 and 355 of the Revised Penal Code, in relation to RA 10175
Threatening to kill, assault, kidnap, rape, or damage property	Grave threats under Article 282 of the Revised Penal Code
Forcing someone to send money, pictures, passwords, or information through threats	Grave threats, coercion, robbery or extortion-related offenses, depending on the facts
Repeated sexual, sexist, misogynistic, homophobic, or transphobic harassment	Gender-based online sexual harassment under RA 11313
Online harassment by a husband, boyfriend, former partner, or father of a woman’s child	Psychological violence or threats under RA 9262, when its requirements are present
Sharing intimate photos or videos without consent	Anti-Photo and Video Voyeurism Act of 2009, RA 9995
Cyberbullying involving an elementary or secondary school student	Anti-Bullying Act of 2013, RA 10627, plus possible criminal laws
Sexual exploitation, grooming, or sexual images involving a child	RA 11930 and other child-protection laws
Malicious disclosure or misuse of personal information	Data Privacy Act of 2012, RA 10173, where applicable
Serious invasion of privacy or abusive conduct causing damage	Civil damages under Articles 19, 20, 21, and 26 of the Civil Code

A dummy account is not automatically illegal merely because the user is anonymous or uses a nickname. The legal issue becomes more serious when the account deliberately uses another person’s identifying information, impersonates that person, deceives others, commits fraud, publishes defamatory statements, or threatens and harasses the victim.

Philippine Laws That May Apply

Cybercrime Prevention Act of 2012

Republic Act No. 10175, or the Cybercrime Prevention Act, covers several offenses relevant to dummy accounts and online abuse.

Computer-related identity theft includes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person without right. This may apply when someone creates an impostor account using your name, photographs, personal information, or credentials, although investigators must still establish the required intent and unauthorized use.

The law also recognizes online libel, which is libel committed through a computer system. Section 6 generally provides that crimes under the Revised Penal Code or special laws committed through information and communications technology may carry a penalty one degree higher. (Lawphil)

Online libel and defamatory posts

Libel under Articles 353 and 355 of the Revised Penal Code generally requires:

A defamatory allegation;
Publication or communication to another person;
Identification of the person being attacked; and
Malice, subject to recognized defenses and exceptions.

Not every criticism, negative review, political opinion, or angry statement is automatically libelous. Context matters, including whether the statement alleges a fact or expresses an opinion, whether it is substantially true, whether it concerns a public issue, and whether the person acted with malice.

In Disini v. Secretary of Justice, the Supreme Court upheld online libel as applied to the original author of the defamatory post. The Court did not treat every person who merely reacts to, likes, comments on, or shares an existing post as automatically liable for the original cyber libel. However, a person who adds a new defamatory caption or independently publishes a defamatory accusation may become the author of a separate statement. (Lawphil)

A particularly important deadline applies. In its April 8, 2026 resolution in Causing v. People, the Supreme Court En Banc affirmed that cyber libel prescribes—or becomes time-barred—one year from discovery by the offended person, the authorities, or their agents. Filing the criminal complaint with the prosecution office can interrupt the running of the prescriptive period. Anyone considering an online libel complaint should therefore act promptly rather than relying only on platform reports. (Supreme Court of the Philippines)

Online threats

Article 282 of the Revised Penal Code punishes grave threats, meaning a threat to inflict upon a person, the person’s honor or property, or the person’s family a wrong amounting to a crime.

Examples may include:

“I will kill you tonight.”
“I know where your children study, and I will hurt them.”
“Send me money or I will burn your house.”
“Give me private photos or I will attack you.”

A threat does not become harmless simply because it was sent through Messenger or made by an account using a false name. The exact words, surrounding circumstances, persistence of the offender, access to weapons, knowledge of the victim’s location, and prior violence can affect how seriously authorities assess it. Articles 283 and 285 cover certain lesser threats, while Article 286 may apply when threats or intimidation are used to force a person to do something against their will. (Lawphil)

Gender-based online sexual harassment

Republic Act No. 11313, or the Safe Spaces Act, penalizes gender-based online sexual harassment. Covered conduct may include:

Unwanted sexual remarks;
Misogynistic, sexist, homophobic, or transphobic comments;
Sexual threats;
Cyberstalking;
Incessant messaging;
Unauthorized sharing of photos or recordings;
Online conduct that causes or is likely to cause emotional distress or fear for personal safety; and
Certain forms of online identity theft connected with gender-based harassment.

The law may apply to public posts and private messages. A victim does not have to tolerate repeated sexual messages simply because the offender has never physically approached them. (Lawphil)

Threats or harassment by a partner or former partner

RA 9262, the Anti-Violence Against Women and Their Children Act, may apply when the victim is a woman and the offender is her husband, former husband, current or former dating or sexual partner, or the father of her child.

Repeated online threats, humiliation, surveillance, impersonation, or harassment may form part of psychological violence when the statutory relationship and other elements are present. A threat of physical harm may also support an application for a protection order.

A Barangay Protection Order is limited to particular acts covered by RA 9262. Temporary and Permanent Protection Orders issued by courts can provide broader relief. Victims may approach the barangay VAW desk, Women and Children Protection Desk, prosecutor’s office, or Family Court, depending on the urgency and relief needed. (Lawphil)

Cyberbullying involving students

The Anti-Bullying Act of 2013 requires public and private elementary and secondary schools to maintain policies for preventing and addressing bullying, including certain forms of cyberbullying.

Parents should report the matter in writing to the school principal, guidance office, or designated child-protection committee. Ask for a receiving copy and the school’s written response. A school investigation does not prevent the family from reporting threats, sexual exploitation, identity theft, or other possible crimes to law enforcement. (Lawphil)

How to Report Cyberbullying, Dummy Accounts, or Online Threats

1. Address immediate danger first

Call 911 or proceed to the nearest police station when:

The offender says they are on the way to your home, school, or workplace;
The person has previously assaulted or stalked you;
The threat identifies a weapon, location, or time;
Children or other family members are threatened;
Your home address or live location has been exposed;
The offender is attempting to enter your property; or
You reasonably believe violence may happen soon.

Tell the police the exact words used, whether the offender knows your location, and whether the person has access to weapons. Avoid describing the incident only as “cyberbullying.” State clearly that you received a threat to kill, injure, kidnap, sexually assault, or damage property.

2. Preserve evidence before blocking or reporting the account

Online content can be deleted within seconds. Before blocking the offender, preserve:

Full screenshots showing the username, profile photograph, date, time, message, and surrounding conversation.
The complete profile URL, post URL, video URL, or message link where available.
A screen recording showing how you opened the account, navigated to the profile, and viewed the threatening or defamatory content.
The account’s numeric or unique identifier, when visible.
Original photos, videos, audio files, emails, and message exports.
Platform notifications and report reference numbers.
Names and contact details of witnesses who saw the post or received messages from the dummy account.
An incident log listing each event by date and time.
Proof of harm, such as employer notices, school records, medical records, counselling records, security expenses, or messages from people who believed the fake account.

Keep the original files. Do not crop, annotate, enhance, rename, or repeatedly convert the only copy. Make separate working copies for printing or highlighting.

Philippine rules recognize electronic documents and readable printouts that accurately reflect electronic data. Authentication still matters, so being able to explain where the screenshot came from, who captured it, and whether it was altered can be important. (Lawphil)

3. Report the account to the platform

Use the platform’s reporting system after preserving the evidence.

For a Facebook or Instagram dummy account, select the option stating that the account is pretending to be you or another person. Meta may request identification documents to verify the impersonated person’s identity. Keep screenshots of the report confirmation and any email response. (Facebook)

A platform report may result in removal, restriction, or account suspension, but it does not automatically create a Philippine criminal case. File separately with law enforcement when the conduct involves threats, fraud, sexual harassment, identity theft, stalking, or serious reputational harm.

4. File with a cybercrime investigation office

You may report to:

The nearest Philippine National Police station;
A PNP Anti-Cybercrime Group or Regional Anti-Cybercrime Unit;
The NBI Cybercrime Division or an NBI regional office;
The CICC through the national 1326 reporting channel; or
A Women and Children Protection Desk for cases involving women or minors.

The NBI maintains an online complaint page and lists its Cybercrime Division at ccd@nbi.gov.ph. Its published Citizen’s Charter states that cybercrime assistance is available to the general public without an intake fee. The listed initial intake process—complaint sheet, interview, sworn statement, collection of documents, and request for authority to investigate—takes approximately one hour and ten minutes when requirements and personnel are available. That period covers intake, not the full investigation. (National Bureau of Investigation)

The DICT and CICC also operate the 1326 National Anti-Scam Hotline and accept reports through 1326@dict.gov.ph and reporting functions connected with government digital services. This can help route or coordinate a complaint, but investigators may still require a sworn statement and personal appearance. (Dictionary)

5. Prepare a detailed complaint-affidavit

A complaint-affidavit is a written statement made under oath. It should explain:

Your complete name, address, and contact information;
The respondent’s name and address, if known;
All usernames, account links, telephone numbers, and email addresses involved;
When and how you discovered the account or message;
The exact statements, threats, or acts complained of;
Why you believe the account is fake or impersonating you;
How the offender obtained or used your photographs or information;
Why the threat caused fear or appeared credible;
Who else saw or received the content;
What harm resulted; and
A numbered list of screenshots, files, and other attachments.

Quote the threatening or defamatory words accurately. Avoid exaggeration, guessing the offender’s identity, or stating as fact that a particular person owns the account unless you have evidence.

Complaints submitted to prosecutors ordinarily require sworn affidavits and supporting documents. The prosecutor evaluates whether the evidence is admissible, credible, capable of preservation, and sufficient to establish the elements of an offense and identify the responsible person. (Lawphil)

6. Ask about urgent data preservation

Screenshots show what appeared on your screen, but they may not reveal the real person behind a dummy account. Subscriber information, login records, IP-related data, and platform records normally require lawful requests or court-issued cybercrime warrants.

RA 10175 provides mechanisms for preserving specified computer data. Traffic data and subscriber information are generally preserved for at least six months from the transaction, while content data may be preserved following a law-enforcement order. Early reporting matters because providers may delete or overwrite records under their normal retention policies. (Lawphil)

Ask the assigned investigator:

Whether a preservation request should be sent immediately;
Which account URLs and identifiers are needed;
Whether the platform is located abroad;
Whether a cybercrime warrant will be required; and
What additional evidence is needed to identify the account owner.

7. Follow the prosecutor’s preliminary investigation

After evidence is gathered, the complaint may be filed with the appropriate city or provincial prosecutor.

The usual process includes:

Filing the complaint-affidavit and supporting evidence;
Evaluation by the prosecutor;
Issuance of a subpoena to the respondent;
Submission of the respondent’s counter-affidavit;
Possible reply or clarificatory submissions; and
A resolution dismissing the complaint or recommending the filing of an Information in court.

Actual timelines vary. A straightforward complaint involving an identified local respondent may move faster than a case requiring information from an overseas platform, multiple warrants, forensic examination, or coordination between several jurisdictions. Expect the complete process to take weeks or months rather than the short intake time stated in an agency Citizen’s Charter.

Documents and Evidence to Bring

Document or evidence	Why it matters
Government-issued ID	Confirms the complainant’s identity
Printed profile and post screenshots	Gives investigators an organized working copy
Original files on a phone, laptop, USB drive, or secure cloud folder	Allows examination of metadata and unaltered evidence
URLs and usernames in a separate list	Prevents errors when investigators access accounts
Chronology of incidents	Shows repetition, escalation, and context
Complaint-affidavit or draft statement	Speeds up the interview and formal filing
Witness affidavits or contact details	Supports publication, receipt, and authenticity
Proof that you own the real account or identity being copied	Helps establish impersonation
Platform report confirmations	Shows efforts to report and preserve the incident
Medical, employment, school, or security records	Helps prove fear, distress, financial loss, or other damage

Bring several photocopy sets. Keep one complete copy of everything you submit and ask for a receiving copy, reference number, investigator’s name, and official contact details.

Should You Report the Matter to the Barangay?

A barangay blotter can document the incident and may help with local safety measures, especially when the offender lives nearby or is personally known to the victim. However, the barangay cannot compel Meta, Google, TikTok, a telecommunications company, or an overseas service provider to disclose account records.

Katarungang Pambarangay conciliation applies only when statutory requirements are met, including residency and the nature of the offense. It does not cover every cybercrime, and offenses carrying more serious penalties may fall outside mandatory barangay conciliation. Do not delay an urgent police or cybercrime report while waiting for a barangay meeting. (Lawphil)

Data Privacy Complaints and Civil Remedies

A dummy account may also involve the Data Privacy Act when personal information was unlawfully collected, processed, disclosed, or misused. The National Privacy Commission is particularly relevant when an organization, employer, school, lender, business, or other personal-information controller mishandled the victim’s data.

The NPC is not a general replacement for police investigation or a universal remedy for every insulting post. Its jurisdiction depends on whether the facts involve personal-data processing covered by RA 10173.

A formal NPC complaint generally requires a notarized Complaints-Assisted Form or verified complaint, supporting evidence, identification, and applicable filing fees. The NPC accepts complaints personally, by courier or registered mail, and through authorized electronic submission. (Lawphil)

Separate civil damages may be available under Articles 19, 20, 21, and 26 of the Civil Code. These provisions protect against abuse of rights, acts contrary to law or morals that cause damage, and certain invasions of privacy and personal dignity. A civil claim normally requires proof of the wrongful conduct, resulting harm, and connection between the two.

Reporting from Abroad or as a Foreigner

A victim does not lose protection simply because they are a foreign national or are currently outside the Philippines. The key issues include where the offender acted, where the computer system or evidence is located, where the harmful effects occurred, and whether Philippine authorities can obtain jurisdiction over the offender.

Victims abroad should:

Preserve all electronic evidence;
Contact the NBI Cybercrime Division, PNP Anti-Cybercrime Group, or CICC;
Identify any Philippine address, telephone number, bank account, SIM, or person connected with the offender;
Coordinate with the nearest Philippine embassy or consulate when a sworn document must be executed abroad; and
Ask the receiving Philippine office whether personal appearance or original documents will eventually be required.

An affidavit executed abroad may be notarized before a Philippine consular officer. Alternatively, in a country that is a party to the Apostille Convention, it may generally be notarized locally and apostilled by the proper authority for use in the Philippines. Requirements can differ by country and by the Philippine office receiving the document. (Philippine Embassy)

Common Mistakes That Weaken Online Harassment Complaints

Blocking the account before saving its URL and content;
Submitting only cropped screenshots with no username, date, or context;
Deleting the victim’s own account or device data;
Assuming a platform takedown is the same as filing a criminal complaint;
Waiting beyond the one-year cyber-libel period;
Publicly accusing a suspected account owner without reliable evidence;
Hacking, threatening, or doxxing the suspected offender in retaliation;
Editing screenshots or adding text directly to the only copy;
Forwarding intimate images to many people instead of giving them securely to investigators;
Reporting the matter only as “cyberbullying” without identifying the actual threats, impersonation, sexual harassment, fraud, or defamatory accusations;
Expecting investigators to obtain subscriber information without legal process; and
Agreeing to meet the offender alone to “settle” a serious threat.

Frequently Asked Questions

Can I report a dummy account if I do not know who created it?

Yes. Give investigators the account URL, username, profile identifiers, messages, screenshots, and any clues connecting the account to a telephone number, email address, payment account, or known person. The complaint can begin even when the true account owner has not yet been identified.

Is making a fake Facebook account automatically a crime?

Not always. Anonymous, parody, fan, or nickname accounts are not automatically criminal. Liability may arise when the account unlawfully uses another person’s identity, deceives people, commits fraud, publishes libel, harasses a victim, or sends threats.

Can I report a threat sent only through a private message?

Yes. A threat does not have to be publicly posted. Preserve the full conversation, account profile, date and time, and any earlier messages showing context or escalation.

Are screenshots enough to file a complaint?

Screenshots are useful and may support a complaint, but investigators often need additional evidence such as URLs, original devices, exported conversations, witness statements, platform records, and information identifying the account owner.

Should I reply to the threat to get more evidence?

Do not provoke or challenge someone who may be dangerous. Preserve what already exists. Any further communication should prioritize safety and, in serious cases, follow the investigator’s instructions.

Can the offender escape liability by deleting the account?

Deleting the account may remove publicly visible content, but it does not necessarily erase all provider records. However, delay can make identification more difficult, which is why early evidence preservation and reporting are important.

Can I sue for emotional distress or damage to my reputation?

Potentially. Depending on the facts, the victim may pursue criminal charges, civil damages under the Civil Code, a protection order, an administrative complaint, or several compatible remedies. Proof of actual harm strengthens a claim.

Is a barangay complaint required before going to the NBI or PNP?

Not in every case. Barangay conciliation depends on the parties’ residences and the offense involved. Serious threats and incidents requiring urgent cybercrime investigation should be reported directly to law enforcement.

How long does a cybercrime complaint take?

Initial intake may be completed the same day, but identifying an anonymous account, obtaining warrants, requesting overseas platform records, conducting preliminary investigation, and filing a court case may take several months or longer.

Can I report while living outside the Philippines?

Yes, particularly when the offender, victim, evidence, harmful effects, telephone number, account, or other relevant conduct has a Philippine connection. Expect possible requirements for consular notarization, apostille, original affidavits, or later personal participation.

Key Takeaways

Treat credible and immediate threats as emergencies and call 911 or the nearest police station.
Preserve complete screenshots, URLs, screen recordings, original files, and an incident timeline before blocking the account.
A “dummy account” is not automatically illegal, but impersonation, identity theft, fraud, threats, libel, and harassment may be punishable.
Report platform violations and file separately with the PNP, NBI, prosecutor, CICC, school, workplace, or NPC when appropriate.
Cyber libel generally prescribes one year from discovery, so delay can permanently affect the case.
Ask cybercrime investigators about urgent preservation of platform and subscriber data.
Keep receiving copies, reference numbers, and a complete duplicate of everything submitted.
Avoid retaliation, hacking, public accusations, or altering the original digital evidence.