Quick answer

Yes. You may file a complaint when online conduct amounts to a specific offense—such as a credible threat, cyber libel, gender-based online sexual harassment, stalking or harassment covered by a special law, non-consensual sharing of intimate images, identity theft, or another crime committed through information and communications technology.

But “online harassment” is not a single, all-purpose criminal charge. Investigators and prosecutors must match the exact posts, messages, images, conduct, relationship between the parties, and resulting harm to the elements of an existing law. Rude comments, criticism, arguments, or isolated insults are not automatically criminal.

If anyone appears to be in immediate danger, prioritize physical safety: move to a secure place, alert trusted people and building or workplace security, and contact the nearest police or emergency service. Do not wait for the threat to be carried out before seeking help.

What conduct may support a case?

Threats of violence or other serious harm

The Revised Penal Code punishes several forms of threats. Grave threats may arise when someone threatens another person or that person’s family with a wrong amounting to a crime against a person, honor, or property. The applicable provision and penalty can depend on matters such as:

What harm was threatened
Whether a demand or condition was imposed
Whether the offender achieved the demanded purpose
The surrounding circumstances showing whether the statement was a genuine threat rather than mere anger, exaggeration, or an ambiguous remark

For example, a direct message threatening to kill, assault, abduct, sexually harm, or burn another person’s property may warrant an urgent criminal investigation. Less serious threats may fall under other Revised Penal Code provisions. The exact words and context matter.

When a Revised Penal Code offense is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act of 2012 may apply and can raise the prescribed penalty by one degree. The classification should be made by the prosecutor based on the evidence; a complainant does not need to choose the final charge alone.

Cyber libel

Cyber libel is the public and malicious imputation, through a computer system, of a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose an identifiable person or juridical entity to contempt. It is governed by Section 4(c)(4) of the Cybercrime Prevention Act together with Articles 353 to 355 of the Revised Penal Code.

A viable complaint ordinarily requires more than hurt feelings. Important questions include:

Was the complainant identifiable, even if not expressly named?
Was the statement communicated to at least one person other than the complainant?
Was it presented as a defamatory factual imputation, rather than protected opinion, fair comment, or criticism?
Can publication and authorship be proved?
Does a recognized privileged-communication rule apply?
Can malice be established, or is the communication one in which malice is not presumed?

A private message sent only to the person being criticized may lack the required publication to a third person. Truth is also not an automatic defense in every criminal-libel situation; the Revised Penal Code imposes additional requirements, including good motives and justifiable ends in the circumstances covered by Article 361.

The Supreme Court upheld cyber libel but limited liability under that provision to the person who authored the allegedly libelous online statement. Merely receiving, reacting to, or sharing material does not automatically create the same criminal liability, although adding a new defamatory statement can require a separate assessment. See Disini v. Secretary of Justice.

Cyber libel has an especially short deadline. The Supreme Court has ruled that it prescribes in one year from discovery by the offended party, the authorities, or their agents. The discovery date can become a disputed factual issue, so obtain advice and act promptly. See the Supreme Court’s decision in Causing v. People and its official case summary.

Gender-based online sexual harassment

The Safe Spaces Act covers gender-based online sexual harassment—not every unpleasant online interaction. Covered conduct can include:

Unwanted sexual remarks or comments
Threats involving a person’s physical safety
Uploading or sharing photos, videos, or information without consent when done as part of gender-based sexual harassment
Cyberstalking and incessant messaging
Impersonation or posting lies to damage a victim’s reputation
Unauthorized recording or sharing of a person’s images, voice, or video
Online conduct causing or likely to cause mental, emotional, or psychological distress or fear for personal safety

The sexual or gender-based character of the conduct must be shown. The law applies regardless of the harasser’s stated romantic interest and can cover anonymous or pseudonymous accounts if the responsible person can be identified through lawful investigation.

Schools and employers also have statutory duties to prevent and address gender-based sexual harassment in educational institutions and workplaces. A victim may therefore have an internal administrative remedy in addition to possible criminal proceedings.

Harassment or threats by a partner or former partner

The Anti-Violence Against Women and Their Children Act, or Republic Act No. 9262, may apply when the victim is a woman and the offender is or was her husband, dating partner, sexual partner, or a person with whom she has a common child. Covered violence can include threats, harassment, stalking, coercion, public humiliation, and acts causing mental or emotional anguish.

The required intimate or family relationship is essential. Ordinary disputes between people who never had a relationship covered by the Act do not become VAWC cases merely because one party is a woman.

A qualified victim may seek a protection order. Barangay protection orders have a narrower statutory reach, while courts may issue temporary or permanent protection orders with broader relief. If online conduct is accompanied by surveillance, attempts to enter the home or workplace, threats involving children, weapons, or escalating violence, seek legal and police assistance immediately.

Non-consensual intimate images

Republic Act No. 9995, the Anti-Photo and Video Voyeurism Act, may apply to the recording, copying, selling, distributing, publishing, or broadcasting of covered sexual images or videos without the required consent.

Consent to being photographed or recorded does not necessarily mean consent to publication or sharing. Threatening to release intimate material may also support a threats, coercion, VAWC, or Safe Spaces Act complaint depending on the facts.

If a child is depicted or sexually exploited, the case may fall under the stronger protections of the Anti-OSAEC and Anti-CSAEM Act. Do not forward suspected child sexual abuse material to friends or other private persons “for proof.” Preserve the source and report it directly to law enforcement.

Fake accounts, account intrusion, and misuse of personal data

Creating a parody or pseudonymous account is not automatically illegal. Liability may arise, however, when someone intentionally acquires, uses, transfers, possesses, alters, or deletes another person’s identifying information without right. That conduct may constitute computer-related identity theft under Section 4(b)(3) of the Cybercrime Prevention Act.

Unauthorized access to an account, interception of non-public data, or interference with computer data may constitute separate cybercrime offenses. Change compromised passwords, enable multi-factor authentication, terminate unfamiliar sessions, and retain security-alert emails and access logs.

“Doxxing” is likewise not the name of one universal offense. Publishing personal information may fall under the Data Privacy Act of 2012 when its elements are present, but the Act contains qualifications, lawful-processing grounds, and exclusions. The source of the information, the person or organization processing it, its purpose, and the nature of the data all matter.

Persistent conduct that causes distress

Depending on its nature and seriousness, repeated unwanted messages or other targeted behavior may be evaluated as unjust vexation, coercion, a threat, gender-based online sexual harassment, VAWC, or another offense. Unjust vexation is intended to address conduct that unjustifiably annoys, irritates, torments, distresses, or disturbs another person, but it should not be treated as a substitute whenever the elements of a more specific offense are absent.

The prosecutor must consider the accused’s conduct and intent, the victim’s reaction, the context, and constitutional protections for lawful expression.

What evidence should you preserve?

Preserve evidence before blocking the account or asking the platform to remove the content. Save:

Full-page screenshots showing the post, account name, profile address, date, time, comments, and surrounding context
The exact URL of each post, profile, image, video, or message thread
Original emails, messages, audio files, videos, and attachments—not only edited screenshots
Screen recordings showing how the content was accessed
Account identifiers, phone numbers, email addresses, payment details, and prior usernames
Notifications and messages from witnesses who saw the content
A chronological log of incidents, discovery dates, reports, and safety measures
Platform reports, acknowledgment emails, takedown notices, and account-security alerts
Evidence connecting an anonymous account to a person, but only if obtained lawfully
Medical records, counseling records, security reports, employment records, or receipts relevant to the resulting harm

Keep at least two secure backups. Avoid cropping, annotating, enhancing, or repeatedly converting the only copy. Record who collected each item, when it was collected, and from what device or account.

Electronic material is not self-proving simply because it appears in a screenshot. Authentication and integrity can be contested. The Rules on Electronic Evidence and the ordinary Rules on Evidence govern how electronic records are proved. The Supreme Court has rejected screenshots that were not properly authenticated, illustrating why original data and a witness with personal knowledge can matter. See G.R. No. 258888.

Do not hack an account, impersonate another person, install spyware, or secretly intercept private communications to obtain evidence. Unlawfully collected material can create separate legal problems.

How to file a complaint

1.

Quick answer

Yes. You may file a complaint when online conduct amounts to an offense under Philippine law—such as a credible threat, cyber libel, gender-based online sexual harassment, harassment by an intimate partner, identity theft, or the nonconsensual sharing of intimate images.

But “online harassment” is not a single, all-purpose crime. Rudeness, criticism, an isolated insult, or an unpleasant argument does not automatically create a criminal case. The exact remedy depends on what was said or done, whether other people saw it, the relationship between the parties, the victim’s age, and the available evidence.

If the messages suggest immediate physical danger, stalking, an attempt to locate you, or harm to a child, prioritize safety and contact the nearest police station or emergency service. Do not wait for the harasser to act.

What cases may apply?

Grave or other threats

A threat may fall under Articles 282 to 285 of the Revised Penal Code when someone threatens to inflict a legally punishable wrong against you, your family, your honor, or your property. Examples may include threats to kill, injure, sexually assault, abduct, burn property, or falsely accuse someone of a crime.

The correct charge depends on matters such as:

The specific harm threatened
Whether the threat was subject to a demand or condition
Whether the threatened act would itself be a crime
The words used and the surrounding circumstances
Whether the sender appeared able and willing to carry it out

A vague expression of anger is not necessarily a criminal threat. Conversely, a threat need not be made face-to-face: a private message, email, post, voice note, or group-chat message can be evidence. If an offense under the Revised Penal Code is committed through information and communications technology, Section 6 of the Cybercrime Prevention Act of 2012 may affect the applicable penalty.

Cyber libel

Cyber libel may apply when a person uses a computer system to publish a malicious imputation of a crime, vice, defect, act, omission, condition, or circumstance that tends to dishonor or discredit an identifiable person. It is governed by Section 4(c)(4) of the Cybercrime Prevention Act together with Articles 353 to 355 of the Revised Penal Code.

The prosecution generally must establish:

A defamatory imputation
Publication to at least one person other than the victim
Identification of the person defamed
Malice, subject to statutory and constitutional exceptions
Use of a computer system or similar technology

A purely private message seen only by its sender and recipient may lack the required publication, although its contents could support another offense, such as threats or harassment. Truth is also not an automatic defense in every situation; the legal rules on privileged communications, good intention, justifiable motive, public figures, and matters of public concern are fact-sensitive.

The Supreme Court has upheld cyber libel but ruled that liability under the challenged provision attaches to the original author of the online post. Merely receiving, reacting to, or sharing an existing post is not automatically cyber libel under the provisions reviewed in Disini v. Secretary of Justice. A person who adds a new defamatory statement may face a different analysis.

Act quickly. The Supreme Court has confirmed that cyber libel prescribes in one year from discovery by the offended party, the authorities, or their agents. The date of discovery can itself become a disputed factual issue. See Causing v. People and the Supreme Court’s official case summary.

Gender-based online sexual harassment

The Safe Spaces Act specifically prohibits gender-based online sexual harassment. Depending on the facts, this can include:

Unwanted sexual remarks or comments
Threats involving sexual violence
Uploading or sharing a person’s photo with sexual remarks
Incessant messaging or cyberstalking with a sexual or gender-based character
Unauthorized recording or sharing of sexual content
Impersonation or posting lies to damage a person’s reputation
Online conduct that causes or is likely to cause mental, emotional, or psychological distress or fear for personal safety

The law is not limited to conduct by strangers and protects people regardless of sex or gender. However, the conduct must fit the law’s gender-based or sexual character; not every hostile online exchange falls under the Safe Spaces Act.

Harassment by a husband, partner, former partner, or co-parent

The Anti-Violence Against Women and Their Children Act, or RA 9262, may apply when the victim is a woman and the offender is or was her husband, sexual or dating partner, or a person with whom she has a common child.

Repeated messages, surveillance, public humiliation, threats, controlling conduct, or other harassment may constitute psychological violence when the statutory relationship and required harm are established. Evidence of mental or emotional anguish is important; the precise proof required depends on the charge and circumstances.

RA 9262 also provides protective remedies. A victim may ask about a barangay protection order where legally applicable or seek a temporary or permanent protection order from the proper court. The scope and availability of a particular order should be checked against the acts complained of. Police officers, social workers, and counsel can help a victim pursue urgent protection.

Nonconsensual intimate images

The Anti-Photo and Video Voyeurism Act of 2009 may apply when intimate images or recordings are captured, copied, sold, distributed, published, or broadcast without the consent required by law.

Consent to the original recording does not necessarily mean consent to its later publication or distribution. Threatening to release an intimate image may also support a threats, coercion, Safe Spaces Act, or RA 9262 complaint, depending on the facts.

If a child is depicted or sexually exploited, the much more serious protections and offenses under the Anti-OSAEC and Anti-CSAEM Act may apply. Do not forward the material, even to explain what happened. Preserve its location and report it promptly to law enforcement.

Fake accounts, account intrusion, and misuse of identity

The Cybercrime Prevention Act separately covers conduct such as:

Illegal access to an account or computer system
Computer-related identity theft
Computer-related forgery or fraud
Interference with computer data or systems

A parody, anonymous account, or use of a similar name is not automatically identity theft. Investigators must examine whether identifying information was intentionally acquired, used, transferred, possessed, altered, or deleted without right and whether all elements of the relevant offense are present.

Doxxing and disclosure of personal information

Posting a person’s address, telephone number, identification records, medical details, or other personal information may create liability under the Data Privacy Act of 2012, particularly when personal or sensitive personal information is processed or disclosed without lawful authority.

Doxxing is not automatically a Data Privacy Act offense in every case. The type of information, its source, the purpose of disclosure, applicable exemptions, and whether the person responsible is covered by the particular provision all matter. The disclosure may also form part of threats, stalking, gender-based harassment, or another offense.

Unjust vexation and civil claims

Persistent conduct intended to annoy, irritate, torment, distress, or disturb another person may, in suitable cases, be evaluated as unjust vexation under Article 287 of the Revised Penal Code. This is highly fact-dependent and should not be treated as a fallback charge for every offensive message.

Separate from criminal liability, Articles 19, 20, 21, and 26 of the Civil Code may support a civil action for damages when online conduct unlawfully or abusively harms another person’s dignity, privacy, peace of mind, or reputation. A civil claim requires proof of the wrongful act, legally recognized injury, causation, and damages.

What evidence should you preserve?

Preserve evidence before blocking the account or requesting removal. Keep:

Full screenshots showing the post or message, account name, date, time, and surrounding conversation
The exact profile, post, comment, or video URL
Screen recordings showing how the content was accessed
Original emails, including available header information
Original photos, videos, audio files, and voice notes
Exported chat histories or downloaded account data
Copies of platform notifications and reports
The username, profile ID, phone number, email address, and any known identity of the sender
Names and contact details of people who saw the material
A chronological log of incidents, including when you first discovered each item
Proof of resulting harm, such as security expenses, medical records, missed work, or messages from concerned relatives or employers
Copies of police reports, platform acknowledgments, and takedown notices

Do not rely only on cropped screenshots. Keep the original device and files whenever possible, and back up copies securely without changing filenames or metadata. Electronic evidence must still be authenticated. The Rules on Electronic Evidence and Supreme Court decisions recognize electronic records, but unexplained or unauthenticated screenshots can be rejected.

Do not hack the sender’s account, install spyware, impersonate investigators, or publicly repost unlawful intimate material to “preserve” it. Those actions can create new legal and safety problems.

How to file a complaint

1. Address immediate safety

Move to a secure location if necessary. Tell trusted people, building security, your school, or your employer when the threat concerns a place the offender may visit. Avoid arranging a personal confrontation.

If a threat includes a location, weapon, timetable, surveillance photo, or evidence that the sender is nearby, report those details immediately.

2. Secure your accounts

Change compromised passwords, enable multi-factor authentication, review active sessions, and preserve access logs before signing out unknown devices. Check recovery email addresses and phone numbers. Do not delete the affected account until investigators advise whether its data is needed.

3. Report the content to the platform

Use the platform’s reporting process for threats, impersonation, stalking, privacy violations, or intimate images. Request removal where appropriate, but save the evidence first.

A platform report is not a substitute for a criminal complaint. Platforms may remove content under their own rules even when the evidence is insufficient for prosecution, while law enforcement may still investigate content that a platform leaves online.

4. Approach a cybercrime investigator

You may bring the evidence to the Philippine National Police’s cybercrime unit, the National Bureau of Investigation’s cybercrime investigators, or the appropriate local police office. RA 10175 expressly assigns cybercrime investigative functions to the NBI and PNP.

Provide a clear timeline rather than only a folder of screenshots. Identify what made you fear harm, who else saw the content, when you discovered it, and how you connect the account to the suspected person. Investigators may need to seek preservation, disclosure, or warrant-based access to subscriber and traffic data. A complainant generally cannot compel a platform or telecommunications provider to disclose another user’s protected account information directly.

5. Prepare a complaint-affidavit

A criminal case usually begins with a sworn complaint and supporting affidavits and evidence filed for prosecutorial evaluation. The complaint-affidavit should state facts within the affiant’s personal knowledge, identify the respondent where possible, specify dates and places, and attach properly marked evidence.

The prosecutor—not the complainant—determines whether the evidence meets the applicable standard and what offense, if any, should be charged. Filing a complaint does not guarantee an arrest, prosecution, or conviction.

Current documentary requirements should be confirmed with the receiving prosecution office. The Department of Justice publishes guidance on filing a complaint for preliminary investigation and its 2024 National Prosecution Service rules.

6. File in the proper place

Venue can be technical in cybercrime cases. Under the Rule on Cybercrime Warrants, a criminal action for an RA 10175 offense may be filed before the designated cybercrime court where the offense or any element occurred, where part of the computer system used is situated, or where damage to the victim took place. Special venue rules can apply when the accused or relevant computer systems are outside the Philippines.

Do not assume that any prosecutor’s office is proper simply because the content was accessible there. The facts and the specific charge determine venue.

Common mistakes to avoid

Waiting until a post disappears or an account is deleted
Saving only cropped images without URLs, dates, or context
Deleting the original conversation after taking screenshots
Editing, annotating, or recompressing the only copy of a file
Publicly accusing an unverified person behind an anonymous account
Responding with threats, hacking, or unlawful disclosure
Forwarding intimate images or child sexual-abuse material
Assuming that blocking the account also preserves its data
Treating every insult as cyber libel
Missing the one-year cyber-libel period while negotiating privately
Filing in a convenient but legally improper venue
Exaggerating facts in an affidavit instead of separating direct knowledge from suspicion

When legal help is urgent

Consult a lawyer or seek immediate assistance when:

The sender threatens death, serious injury, sexual violence, abduction, or arson
The offender knows your address, schedule, workplace, or child’s school
Harassment is escalating from online contact to physical surveillance
An intimate image has been posted or is being used for blackmail
A child is targeted, depicted, groomed, or sexually exploited
The suspected offender is a current or former intimate partner
Your account was accessed or money or identity records were taken
You need a protection order
The account is anonymous and provider data may need prompt preservation
A cyber-libel deadline may be approaching
Police decline to receive the complaint or you are uncertain about venue

The Public Attorney’s Office may assist qualified indigent clients. A private lawyer can also assess overlapping criminal, civil, privacy, employment, school, or family-law remedies.

Frequently asked questions

Can I file even if I do not know the real person behind the account?

You can report the incident and provide all available identifiers. However, a case ultimately requires sufficient evidence connecting a person to the account and the unlawful act. A username or profile photo alone may not prove authorship.

Is one threatening message enough?

Possibly. A single specific and serious threat can be actionable. Repetition is not always required, although repeated conduct may strengthen proof of intent, fear, stalking, or psychological harm.

Can I file over a private message?

Yes, if the private message contains a threat, sexual harassment, coercion, fraud, or another punishable act. For cyber libel, however, proof that the defamatory statement was communicated to a third person is ordinarily necessary.

Is a screenshot enough?

It may help establish a complaint, but its weight depends on authenticity, completeness, context, and connection to the sender. Preserve the original message, device, URL, account details, and corroborating evidence.

Can the offender escape liability by deleting the post?

Deletion does not automatically erase liability, but it can make proof and data recovery harder. Preserve the material and report promptly.

Can I demand that the platform reveal the account owner?

Ordinarily, a private complainant cannot compel disclosure simply by asking. Subscriber, traffic, and content data are subject to legal process and privacy safeguards. Investigators and courts use the procedures authorized by RA 10175 and the Rule on Cybercrime Warrants.

Can I ask for damages as well as file a criminal complaint?

Potentially. Civil liability may arise from the offense, and an independent civil action may sometimes be available. The proper route, deadlines, filing fees, and effect of pursuing parallel remedies should be assessed by counsel.

What if the statement is true?

Truth does not resolve every criminal or civil issue by itself. The purpose, manner, context, public interest, privilege, and other elements still matter. Do not assume that possessing embarrassing information gives you an unrestricted right to publish it.

Should I reply or send a demand letter first?

There is no universal requirement to warn the offender before reporting a crime. A carefully drafted demand may be useful in some disputes, but direct contact can escalate danger, compromise evidence, or consume a short filing period. Obtain legal advice before negotiating in a serious or time-sensitive case.

Official legal sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Application of Philippine law depends on the exact messages, relationships, evidence, dates, and procedural history. Sources and current legal developments were checked as of July 24, 2026.