I. Introduction

Cyberbullying is not merely “online drama” or a private quarrel. In the Philippine legal context, it may trigger school disciplinary proceedings, criminal investigation, civil liability, data privacy remedies, child protection mechanisms, and platform takedown procedures, depending on the facts. The law does not use one single statute for every cyberbullying case. Instead, victims usually rely on a combination of laws, including the Anti-Bullying Act of 2013, the Cybercrime Prevention Act of 2012, the Safe Spaces Act, the Anti-Photo and Video Voyeurism Act, the Data Privacy Act, the Revised Penal Code, and child protection laws.

The correct reporting route depends on four key questions: Who is the victim? Who is the offender? What exactly was posted or sent? Where did it happen—school, workplace, social media, private chat, group chat, or public page?

II. What Counts as Cyberbullying?

Under the Anti-Bullying Act of 2013, cyberbullying is expressly recognized as “bullying done through the use of technology or any electronic means.” The Act requires elementary and secondary schools to adopt anti-bullying policies, and its scope is especially important when the victim and offender are learners. (Lawphil)

Cyberbullying may include:

Posting insults, threats, rumors, edited photos, or humiliating content.
Creating fake accounts to impersonate or ridicule someone.
Sending repeated abusive private messages.
Group chat harassment or coordinated online attacks.
Doxxing, or publishing private information such as address, school, workplace, phone number, or family details.
Sharing intimate images, screenshots, or videos without consent.
Gender-based, sexual, homophobic, transphobic, or misogynistic online harassment.
Encouraging others to harass, exclude, shame, or threaten the victim.
Using school platforms, class group chats, learning management systems, or student pages to humiliate another student.

Not all cyberbullying is automatically a crime, but many cyberbullying acts may become criminal when they involve libel, threats, coercion, unjust vexation, identity theft, stalking-like conduct, sexual harassment, voyeurism, child sexual material, or unauthorized processing of personal information.

III. Main Philippine Laws That May Apply

A. Anti-Bullying Act of 2013 — Republic Act No. 10627

The Anti-Bullying Act is the main law for bullying involving elementary and secondary schools. It requires schools to adopt anti-bullying policies and explicitly includes cyberbullying. (Lawphil)

This law is most relevant when:

the victim is a student;
the offender is a student;
the act affects the student’s school life, safety, attendance, mental health, or learning environment;
the bullying happens through online class platforms, class group chats, student organizations, school pages, or social media connected to school life.

A school complaint may result in disciplinary action, intervention, counseling, parent conferences, referral to appropriate authorities, or protective measures for the victim. The school route is often the fastest first step for minors because the school has immediate authority over student conduct.

DepEd’s child protection framework also requires public and private elementary and secondary schools to create mechanisms for child protection and case monitoring. DepEd has stated that its Child Protection Policy requires schools to create Child Protection Committees to monitor and investigate abuse-related incidents. (Department of Education)

B. Cybercrime Prevention Act of 2012 — Republic Act No. 10175

The Cybercrime Prevention Act applies when the cyberbullying act is committed through a computer system or information and communications technology. It punishes specific cybercrimes, including computer-related offenses and content-related offenses, and it also treats certain crimes under the Revised Penal Code as cybercrimes when committed through ICT. (Lawphil)

The cyberbullying acts most commonly connected to RA 10175 are:

cyber libel, when defamatory statements are posted online;
identity theft, when someone uses another person’s identity or account details without authority;
computer-related fraud, when deception online is involved;
illegal access, when someone hacks or enters an account without permission;
data interference or misuse, when accounts, files, or systems are tampered with;
other Revised Penal Code crimes committed through ICT.

The Department of Justice Office of Cybercrime was created under RA 10175 and serves as a central authority for cybercrime matters. (Department of Justice)

C. Cyber Libel

Cyber libel is one of the most common legal theories in Philippine online harassment cases. It generally involves a public and malicious imputation of a crime, vice, defect, act, condition, status, or circumstance that tends to dishonor or discredit a person, committed through online means.

A victim may consider cyber libel if the post:

identifies the victim directly or by clear implication;
is public or shared with third persons;
contains defamatory statements of fact, not merely opinion;
damages reputation;
was made maliciously or without lawful justification.

However, cyber libel should be assessed carefully. Truth, fair comment, privileged communication, lack of identifiability, absence of publication, or lack of defamatory meaning may affect the case. The Supreme Court has recognized the cyber libel framework under RA 10175 and has dealt with issues such as penalty and prescription in cyber libel cases. (Lawphil)

D. Safe Spaces Act — Republic Act No. 11313

The Safe Spaces Act is relevant when the cyberbullying involves gender-based online sexual harassment. This may include unwanted sexual remarks, misogynistic, homophobic, transphobic, or sexist attacks, threats involving sexual content, sending unwanted sexual images, or using online spaces to create a hostile environment.

RA 11313 covers gender-based sexual harassment in online spaces, workplaces, educational institutions, streets, and public spaces. It also imposes duties on schools and workplaces when harassment creates a hostile environment. (Lawphil)

This law may apply when online harassment is connected to:

sex, gender, sexual orientation, gender identity, or gender expression;
sexualized humiliation;
threats to release intimate material;
repeated sexual comments through chat or social media;
online conduct that creates a hostile school or work environment.

E. Anti-Photo and Video Voyeurism Act — Republic Act No. 9995

When cyberbullying involves intimate images or videos, the Anti-Photo and Video Voyeurism Act may apply. The law penalizes taking, copying, reproducing, selling, distributing, publishing, broadcasting, showing, or exhibiting sexual photos or videos or images of private areas under prohibited circumstances. Importantly, the law may apply even if the person initially consented to the recording, if later distribution or publication is without the required consent. (Lawphil)

This is especially important in cases involving:

leaked intimate photos;
threats to post private videos;
“revenge porn”;
sharing intimate content in group chats;
screenshots or recordings of private sexual acts;
secretly taken images of private body parts.

F. Data Privacy Act and National Privacy Commission Remedies

Cyberbullying may also involve privacy violations, such as unauthorized posting of personal information, doxxing, exposing private messages, publishing phone numbers or addresses, or processing personal data without lawful basis.

The National Privacy Commission accepts formal complaints in a specific format. The NPC explains that a complaint may be filed by downloading and completing the form, having it notarized, and submitting it in person, by courier, or by scanned email submission. (National Privacy Commission)

A privacy complaint may be appropriate when the harmful act centers on:

unauthorized disclosure of personal information;
publication of private contact details;
misuse of photos, IDs, addresses, school records, or medical information;
unauthorized processing of sensitive personal information;
doxxing or exposing identifying details to enable harassment.

G. Revised Penal Code Offenses

Even when no special cyberbullying law seems obvious, the conduct may still fall under the Revised Penal Code, especially because RA 10175 may increase penalties when Revised Penal Code crimes are committed through ICT. Possible offenses include:

grave threats;
light threats;
unjust vexation;
coercion;
slander or oral defamation, if verbal and transmitted online;
libel, if written or posted;
alarms and scandals, depending on facts;
incriminating innocent persons;
falsification, if documents or screenshots are fabricated;
identity-related deception.

The exact offense depends on the evidence and wording of the posts or messages.

IV. Where to Report Cyberbullying in the Philippines

1. Report to the School

For student victims, especially minors, the first practical step is often to report to the:

class adviser;
guidance counselor;
school principal;
Child Protection Committee;
discipline office;
school head;
division office, if the school fails to act.

Under RA 10627, schools are required to adopt anti-bullying policies, and cyberbullying is expressly included. (Lawphil)

A school complaint should ask for:

immediate protection from retaliation;
preservation of school-related evidence;
investigation under the school’s anti-bullying policy;
conference with parents or guardians;
disciplinary and restorative measures;
referral to law enforcement if the act may be criminal;
confidentiality for the victim;
written acknowledgment of the complaint.

2. Report to the PNP Anti-Cybercrime Group

For cybercrime-related harassment, threats, fake accounts, cyber libel, identity theft, or online sexual harassment, the victim may report to the Philippine National Police Anti-Cybercrime Group or the nearest cybercrime unit.

The PNP Anti-Cybercrime Group is the police unit commonly tasked with cybercrime complaints. Public government responses have directed complainants to the PNP-ACG eComplaint portal and the official PNP-ACG email address. (www.foi.gov.ph)

This route is appropriate when:

the offender is unknown;
the account is fake or anonymous;
the victim needs investigation or tracing;
there are threats of violence;
private images are being distributed;
the posts are ongoing;
the victim needs a police blotter or investigative referral.

3. Report to the NBI

The National Bureau of Investigation may also receive complaints involving cybercrime, online threats, extortion, scams, identity misuse, online blackmail, or complex cases. The NBI website provides information on its offices and services, and official FOI guidance has directed complainants to proceed to the NBI Complaints and Assessment Division for filing complaints or requests for investigation. (National Bureau of Investigation)

The NBI route may be useful when:

the case involves organized harassment;
there is extortion or blackmail;
there are multiple victims;
the offender is anonymous or technically concealed;
evidence needs forensic handling;
the case may require deeper investigation.

4. Report to the Department of Justice Office of Cybercrime

The DOJ Office of Cybercrime is relevant for cybercrime reporting and coordination. The DOJ maintains a page for reporting cybercrime incidents, and RA 10175 created the Office of Cybercrime within the DOJ. (Department of Justice)

The DOJ-OOC may be relevant for:

cybercrime incident reporting;
coordination with law enforcement;
cross-border or platform-related issues;
referral concerns;
guidance on cybercrime matters.

5. Report to the National Privacy Commission

If the cyberbullying involves doxxing, unauthorized disclosure of personal data, or misuse of sensitive personal information, a formal complaint may be filed with the National Privacy Commission. The NPC requires a formal complaint in the proper format and explains the submission options on its official filing page. (National Privacy Commission)

6. Report to the Social Media Platform

A platform report is not a substitute for a legal complaint, but it is often necessary to stop further harm. Victims should report the content to the relevant platform for:

harassment;
bullying;
impersonation;
hate speech;
threats;
non-consensual intimate imagery;
child safety violations;
privacy violations;
fake accounts.

Before reporting, the victim should preserve evidence because the platform may remove the content, making later proof harder.

7. Report to the Barangay or Local Authorities

Barangay involvement may be useful for local intervention, especially when the offender is known, lives nearby, or is a schoolmate or neighbor. However, serious cybercrime, threats, sexual image abuse, or child exploitation concerns should be reported directly to proper law enforcement or child protection authorities.

8. Emergency Reporting

If there is an imminent threat of physical harm, self-harm, kidnapping, sexual violence, or immediate danger, the victim should contact emergency services or local police immediately. Cyberbullying becomes urgent when the offender says things like “I know where you live,” “I will hurt you,” “I will post your private photos tonight,” or “you should kill yourself.”

V. Evidence to Preserve Before Filing a Report

Evidence is often the heart of a cyberbullying case. Victims should preserve it before the offender deletes posts, changes usernames, blocks the victim, or deactivates the account.

Preserve the following:

Screenshots of posts, comments, messages, captions, usernames, profile pages, URLs, timestamps, and reactions.
Screen recordings showing the account, post, comments, and navigation from the profile to the abusive content.
URLs or links to posts, profiles, pages, videos, comments, or group chats.
Full conversation history, not just isolated messages.
Date and time of each incident.
Names of witnesses, group chat members, classmates, page admins, or people who saw the content.
Account identifiers, including username, display name, profile link, email if visible, phone number if visible, and account ID if available.
Proof of identity of offender, if known, such as admissions, classmates who know the account, linked accounts, or prior messages.
Medical, psychological, or counseling records, if the bullying caused anxiety, trauma, inability to attend school, or other harm.
School records, such as incident reports, emails to teachers, guidance referrals, or prior complaints.
Platform reports, including confirmation emails or case numbers.
Notarized printouts or affidavits, when advised by counsel or requested by authorities.

Do not edit screenshots. Do not crop out timestamps or usernames unless you keep the original. Save the files in more than one place.

VI. Step-by-Step: How to Report Cyberbullying

Step 1: Secure the Victim

The first priority is safety. Block or restrict the offender only after preserving evidence. Tell a trusted adult, parent, guardian, teacher, HR officer, or lawyer. If the victim is a minor, an adult should help file the report.

If there is a threat of immediate physical harm or sexual exploitation, go directly to the nearest police station, PNP-ACG unit, NBI office, or emergency authority.

Step 2: Preserve Evidence

Take screenshots, screen recordings, and links. Record dates and times. Identify witnesses. Keep original files.

Step 3: Identify the Legal Nature of the Conduct

Classify the incident:

Student-to-student bullying: school complaint under RA 10627.
Public defamatory posts: possible cyber libel.
Threats: possible grave threats or related offenses.
Fake account: possible identity-related cybercrime.
Doxxing: possible privacy complaint and cybercrime angle.
Sexual insults or harassment: possible Safe Spaces Act complaint.
Intimate image sharing: possible RA 9995 complaint.
Hacked account: possible illegal access under RA 10175.
Minor victim with sexual content: possible child protection and exploitation laws.

Step 4: File the Appropriate Complaint

A complainant may file with one or more of the following, depending on the case:

school authorities;
PNP Anti-Cybercrime Group;
NBI;
DOJ Office of Cybercrime;
National Privacy Commission;
barangay or local police;
workplace HR or Committee on Decorum and Investigation, if employment-related;
platform reporting system.

Step 5: Prepare a Written Narrative

The complaint should clearly state:

who the victim is;
who the offender is, if known;
what happened;
when it happened;
where it was posted or sent;
how the victim was affected;
what laws or policies may have been violated;
what action is requested.

A simple narrative is better than an emotional but unclear complaint. Attach evidence in chronological order.

Step 6: Ask for a Receiving Copy or Reference Number

When filing physically or by email, ask for:

stamped receiving copy;
complaint reference number;
blotter number;
investigator’s name;
next steps;
schedule for follow-up.

Step 7: Follow Up in Writing

Follow up politely and consistently. Keep copies of all communications. If a school or agency fails to act, escalate to the proper higher office.

VII. Sample Complaint Structure

A cyberbullying complaint may follow this structure:

Subject: Complaint for Cyberbullying / Online Harassment / Cyber Libel / Online Sexual Harassment

Complainant: Name, age, address, contact details Victim: If different from complainant Respondent: Name or account details, if known Platform: Facebook, Messenger, TikTok, Instagram, X, Telegram, Discord, email, school platform, etc. Date and Time of Incidents: Specific dates Narrative: Chronological explanation Evidence: Screenshots, links, screen recordings, witness names Effect on Victim: Fear, anxiety, reputational harm, school absence, emotional distress, safety concerns Relief Requested: Investigation, takedown, protection, disciplinary action, criminal referral, privacy remedy

VIII. Special Rules When the Victim Is a Minor

When the victim is a child, the matter should be handled with confidentiality, urgency, and child-sensitive procedures. Parents or guardians should be involved unless doing so would place the child at risk. Schools should avoid victim-blaming, forced confrontation, or public disclosure of the child’s identity.

For school-related incidents, the Child Protection Committee and anti-bullying policy should be activated. DepEd’s child protection framework recognizes the need for school-level monitoring and investigation mechanisms. (Department of Education)

If the cyberbullying involves sexual images, grooming, coercion, exploitation, or threats to expose intimate content, the matter should not be treated as ordinary school discipline only. It should be referred to law enforcement and child protection authorities.

IX. Cyberbullying in Schools

Schools have a legal duty to address bullying, including cyberbullying. A school cannot simply say that “it happened online” if the online act affects the learner’s school environment, safety, dignity, or ability to study.

A proper school response should include:

receiving the complaint;
protecting the victim from retaliation;
preserving confidentiality;
notifying parents or guardians when appropriate;
investigating promptly;
documenting findings;
imposing disciplinary or corrective measures;
providing counseling or psychosocial support;
referring serious cases to law enforcement.

If the school does not act, the complainant may escalate to the school division office, DepEd channels, or appropriate authorities, especially if the inaction exposes the child to continued harm.

X. Cyberbullying in the Workplace

In the workplace, online harassment may be reported to:

Human Resources;
the company’s grievance machinery;
the Committee on Decorum and Investigation, if sexual harassment is involved;
management;
DOLE-related mechanisms, depending on the employment issue;
law enforcement, if criminal conduct is present.

Cyberbullying at work may include group chat humiliation, online sexual remarks, threats, defamatory posts by coworkers, or harassment using work communication platforms.

If the harassment is gender-based or sexual in nature, the Safe Spaces Act may apply. RA 11313 covers gender-based sexual harassment in workplaces and online spaces. (Lawphil)

XI. Cyberbullying Involving Intimate Images

This is one of the most serious forms of cyberbullying. It should be handled urgently.

The victim should:

Preserve evidence without further distributing the image.
Report the content to the platform as non-consensual intimate imagery.
File a complaint with PNP-ACG or NBI.
Consider RA 9995 if intimate photos or videos were taken, copied, distributed, published, shown, or broadcast without proper consent.
If the victim is a minor, treat the case as a child protection emergency.

RA 9995 penalizes prohibited acts involving sexual photos, videos, and images of private areas, including distribution or publication through internet or similar means. (Lawphil)

Victims should not repost the image to “explain” what happened. That may unintentionally spread the material further.

XII. Cyberbullying Through Fake Accounts

Fake accounts may involve impersonation, identity misuse, fraud, defamation, or harassment. The victim should preserve:

profile URL;
screenshots of the fake account;
posts made by the account;
messages sent by the account;
evidence showing the account is pretending to be the victim;
reports submitted to the platform.

The victim may report to the platform for impersonation and to PNP-ACG or NBI if the account is used for harassment, threats, scams, defamation, or privacy violations.

XIII. Cyberbullying Through Doxxing

Doxxing means exposing private personal information to invite harassment or intimidation. Examples include posting someone’s address, phone number, school, workplace, family details, private photos, or identification documents.

Possible remedies include:

platform takedown request;
police or cybercrime complaint if threats or harassment are involved;
privacy complaint with the National Privacy Commission;
school or workplace complaint if connected to those environments.

The NPC’s formal complaint process requires a specific complaint format and submission through its stated channels. (National Privacy Commission)

XIV. Cyberbullying Through Defamatory Posts

For defamatory posts, the victim should preserve:

the full post;
comments and shares;
public visibility settings;
identity of the poster;
screenshots showing the victim was identified;
evidence of reputational damage;
link to the post.

A cyber libel complaint requires careful legal review because not every insult is libel. Statements such as “I dislike this person” may be opinion, while a false factual accusation such as “she stole money” may be defamatory if the other elements are present.

XV. What Not to Do

A victim should avoid:

Threatening the offender back.
Posting the offender’s private information.
Editing or fabricating screenshots.
Deleting original messages before saving copies.
Paying blackmailers.
Meeting the offender alone.
Sharing intimate images again as “proof.”
Creating a fake account to retaliate.
Publicly accusing someone without evidence.
Waiting too long if there are threats, sexual content, or minors involved.

Retaliation can weaken the victim’s case or create a separate complaint against the victim.

XVI. Possible Outcomes After Reporting

Depending on the forum, outcomes may include:

takedown of content;
suspension or deletion of account;
school discipline;
counseling or restorative measures;
protection from retaliation;
police investigation;
subpoena or preservation requests, where legally available;
filing of a criminal complaint with the prosecutor;
civil action for damages;
privacy enforcement action;
workplace sanctions;
settlement, mediation, or diversion in appropriate minor-related cases.

Not every report leads to immediate identification of an anonymous offender. Platforms may require legal process before releasing account information.

XVII. Time Limits and Urgency

Victims should act quickly. Online evidence can disappear. Accounts may be deleted. Platforms may not preserve data indefinitely. Legal periods for filing cases also vary depending on the offense.

Cyber libel has been the subject of Supreme Court rulings concerning prescriptive periods, and victims should consult counsel promptly to avoid missing deadlines. (Lawphil)

Even when unsure of the exact offense, the safest approach is to preserve evidence immediately and report early.

XVIII. Practical Checklist

Before reporting, prepare:

valid ID of complainant;
birth certificate or proof of guardianship if filing for a minor, when needed;
screenshots and screen recordings;
URLs and usernames;
printed copies of posts or messages;
written timeline;
witness names;
school records or prior reports;
medical or counseling notes, if any;
platform report confirmations;
notarized affidavit, if requested.

For minors, a parent, guardian, or authorized school official should usually assist.

XIX. Recommended Reporting Path by Scenario

Scenario	Recommended First Step
Student bullying by classmates	Report to school, guidance office, Child Protection Committee
Public defamatory Facebook/TikTok post	Preserve evidence; report to PNP-ACG/NBI; consider cyber libel counsel
Anonymous threats	Report to PNP-ACG or NBI immediately
Fake account impersonation	Report to platform and PNP-ACG/NBI
Doxxing	Report to platform, NPC, and law enforcement if threats exist
Leaked intimate images	Report to platform and PNP-ACG/NBI immediately
Gender-based sexual harassment online	Report under Safe Spaces Act channels, school/workplace, and law enforcement
Workplace group chat harassment	Report to HR/CODI and law enforcement if criminal
Hacked account used for harassment	Report to platform and cybercrime authorities
Minor victim with sexual content	Treat as urgent; report to law enforcement and child protection authorities

XX. Conclusion

Reporting cyberbullying in the Philippines requires matching the facts to the correct remedy. For students, the Anti-Bullying Act and school child protection mechanisms are often the first line of response. For criminal conduct, the PNP Anti-Cybercrime Group, NBI, and DOJ Office of Cybercrime are key reporting channels. For gender-based online harassment, the Safe Spaces Act may apply. For intimate image abuse, RA 9995 is critical. For doxxing and misuse of personal data, the National Privacy Commission may provide an additional remedy.

The most important practical rule is simple: preserve evidence first, report promptly, and choose the reporting channel based on the specific harm. Cyberbullying can be school misconduct, a privacy violation, a civil wrong, a criminal offense, or all of these at the same time.