A Legal Article in the Philippine Context

Online threats from dummy accounts have become common in the Philippines. A person may receive threatening messages from a fake Facebook profile, anonymous Instagram account, throwaway email address, newly created TikTok account, unknown mobile number, or messaging app account using a false name and photo. The threat may involve physical harm, death, rape, kidnapping, exposure of private information, damage to reputation, hacking, extortion, or harassment.

The anonymity of a dummy account does not make the act harmless. It also does not automatically prevent legal action. Philippine law recognizes that threats, harassment, identity concealment, cyberstalking, blackmail, and defamatory or abusive online conduct may give rise to criminal, civil, and administrative remedies depending on the facts.

This article explains the legal issues, possible offenses, evidence, remedies, and practical steps when a person receives online threats from a dummy account in the Philippines.

I. What Is a Dummy Account?

A dummy account is an online account created or used under a false identity. It may use:

A fake name;
A stolen photograph;
No profile picture;
A celebrity or cartoon image;
A false location;
Recently created account details;
Minimal or suspicious activity;
A throwaway email address or phone number;
A VPN, proxy, or cybercafé connection;
A fake identity meant to hide the real user.

A dummy account may be used for legitimate privacy reasons in some cases, but when it is used to threaten, harass, defame, extort, impersonate, or intimidate another person, legal consequences may follow.

II. What Counts as an Online Threat?

An online threat is any communication made through the internet or digital means that expresses an intention to cause harm, injury, damage, exposure, or unlawful pressure.

Examples include:

“Papatayin kita.”
“Abangan kita sa labas.”
“Gagawan kita ng masama.”
“I will post your private photos.”
“I know where you live.”
“I will hurt your family.”
“I will burn your house.”
“I will ruin your reputation.”
“Pay me or I will expose you.”
“I will hack your account.”
“I will send your photos to your employer.”
“Hindi ka na aabot bukas.”

The exact words matter, but the context also matters. Courts and investigators may consider the relationship of the parties, previous disputes, repeated messages, accompanying photos, location references, weapons shown, doxxing, stalking behavior, and whether the recipient had reason to fear that the threat could be carried out.

III. Why the Dummy Account Matters Legally

The use of a dummy account is relevant because it may show:

Intent to hide identity;
Consciousness of wrongdoing;
Premeditation;
Harassment or stalking pattern;
Use of digital means;
Possible violation of cybercrime laws;
Need for digital forensic investigation;
Need to preserve electronic evidence quickly.

However, the use of a dummy account also creates a practical challenge: proving who is behind the account.

The legal issue is not only whether a threat was made, but whether the complainant can establish the identity of the person responsible through admissible evidence.

IV. Possible Criminal Offenses

Online threats from a dummy account may fall under several Philippine laws depending on the content and circumstances.

V. Grave Threats

A threat may constitute grave threats if a person threatens another with a wrong amounting to a crime, such as killing, physical injury, rape, kidnapping, arson, or serious property damage.

A threat may be grave even if made online. The medium does not erase the threatening nature of the statement.

Examples:

Threatening to kill the victim;
Threatening to stab, shoot, or beat the victim;
Threatening to burn the victim’s house;
Threatening to kidnap a child;
Threatening sexual violence.

The seriousness of the threat depends on the words used and surrounding circumstances. A vague insult may not be enough. But a specific, direct, and frightening threat may support a complaint.

VI. Light Threats and Other Threat-Related Offenses

Not every threat reaches the level of grave threats. Some threats may be classified as lighter forms depending on the nature of the threatened act.

For example, a person may threaten harm that does not clearly amount to a serious crime, or may use intimidation to force another person to do something.

The classification depends on the exact message, the threatened act, whether a condition was imposed, and the penalty attached to the threatened wrong.

VII. Grave Coercion

If the dummy account uses threats to force the victim to do something against their will, stop doing something lawful, or comply with an unlawful demand, the act may involve grave coercion.

Examples:

“Delete your post or I will hurt you.”
“Withdraw your complaint or I will expose your family.”
“Break up with him or I will publish your photos.”
“Pay me or I will send this to your school.”
“Resign from your job or we will attack you.”

The key idea is compulsion through violence, intimidation, or threats.

VIII. Unjust Vexation

Some online conduct may not clearly qualify as grave threats or coercion but may still be punishable as unjust vexation if it causes annoyance, irritation, distress, torment, or disturbance without lawful justification.

Examples may include repeated anonymous messages, insults, creepy warnings, harassment, or persistent unwanted contact.

Unjust vexation is often raised when the conduct is abusive but does not neatly fit a more specific offense. However, where the conduct is more serious, other offenses may be more appropriate.

IX. Cybercrime Prevention Act

The Cybercrime Prevention Act of 2012 is important because many traditional crimes may carry higher consequences when committed through information and communications technology.

If threats, coercion, libel, unjust vexation-related conduct, identity misuse, or other punishable acts are committed through a computer system, social media, messaging app, email, or other ICT platform, cybercrime provisions may become relevant.

Online threats from a dummy account may therefore be investigated as cyber-related offenses, especially when the act is committed through Facebook, Messenger, Instagram, TikTok, X, email, SMS over internet-based services, messaging apps, or similar digital platforms.

X. Cyber Libel

If the dummy account posts or sends defamatory statements that attack the victim’s reputation, the issue may involve cyber libel.

Cyber libel may arise when the account publicly posts or circulates statements accusing the victim of a crime, immorality, dishonesty, sexual misconduct, corruption, fraud, or other shameful conduct, and the statement is false and malicious.

Examples:

Calling someone a scammer without basis;
Posting that someone committed adultery or sexual misconduct;
Claiming someone stole money;
Accusing someone of drug use or criminal activity;
Sharing edited screenshots to destroy reputation.

A private threat message is not automatically libel unless it contains defamatory imputations communicated to a third person. Publication to others is usually important in defamation.

XI. Cyberstalking and Online Harassment

Philippine law does not use the term “cyberstalking” in the same broad way some other jurisdictions do, but stalking-like conduct may be covered by different laws depending on the circumstances.

Examples of online stalking or harassment include:

Repeatedly messaging the victim from new dummy accounts;
Monitoring the victim’s posts and location;
Sending threats whenever the victim uploads content;
Contacting the victim’s friends, family, school, or employer;
Creating fake accounts to follow, intimidate, or shame the victim;
Posting the victim’s address or workplace;
Sending photos of the victim’s home or street;
Threatening to appear in person.

Possible legal classifications include threats, coercion, unjust vexation, cyber libel, privacy violations, violence against women and children, child protection offenses, anti-photo and video voyeurism violations, or other offenses.

XII. Doxxing

Doxxing refers to revealing or threatening to reveal someone’s private information, such as address, phone number, workplace, school, family members, private photos, government IDs, or personal records.

Doxxing may support complaints for threats, coercion, harassment, privacy violations, data privacy violations, or other offenses depending on how the information was obtained and used.

A message such as “I know your address” may be more alarming if accompanied by:

A photo of the victim’s house;
A map pin;
A family member’s name;
A school or workplace reference;
A threat of physical harm;
A demand for money or silence.

XIII. Sextortion and Threats to Leak Intimate Content

A common form of online threat is sextortion, where a dummy account threatens to release intimate photos, videos, chats, or edited sexual images unless the victim pays money, sends more explicit material, agrees to meet, or obeys instructions.

This may involve several legal issues:

Grave threats;
Grave coercion;
Robbery or extortion-related offenses, depending on facts;
Cybercrime;
Photo or video voyeurism;
Violence against women;
Child sexual exploitation material if a minor is involved;
Data privacy violations;
Blackmail-type conduct.

Victims should not send more photos, pay repeatedly, or negotiate endlessly. Payment often encourages further demands. Evidence should be preserved and reported.

XIV. Threats Involving Minors

If the victim is a minor, the matter becomes more serious. Online threats involving children may implicate child protection laws, online sexual abuse or exploitation, anti-child pornography laws, cybercrime laws, and special procedures for child victims.

Examples:

Threatening to expose a minor’s private photos;
Grooming or coercing a minor;
Asking a minor for sexual images;
Threatening a student through a dummy account;
Blackmailing a child using screenshots;
Impersonating a minor online.

Parents or guardians should preserve evidence and report promptly to the appropriate authorities.

XV. Violence Against Women and Their Children

Online threats may also fall under laws protecting women and children if the offender is a spouse, former spouse, person with whom the woman has or had a sexual or dating relationship, or a person with whom she has a common child.

Threats, harassment, humiliation, stalking, control, intimidation, and psychological abuse through online means may support a complaint depending on the relationship and facts.

Examples:

An ex-partner uses a dummy account to threaten a woman;
A former boyfriend threatens to release intimate photos;
A partner threatens harm if the victim leaves;
A dummy account sends abusive messages after a breakup;
The offender uses anonymous accounts to continue harassment after being blocked.

Protective remedies may be available in addition to criminal complaints.

XVI. Identity Theft, Impersonation, and Fake Profiles

A dummy account may use another person’s name, photo, school, workplace, or identity. This may involve identity misuse or impersonation.

Examples:

Creating a fake profile using the victim’s face;
Pretending to be the victim and sending threats to others;
Using another person’s photo to hide the offender’s identity;
Creating a fake account to make the victim appear immoral, violent, or dishonest;
Using a real person’s identity to frame them.

Impersonation may support reports to the social media platform, cybercrime authorities, and, depending on facts, criminal or civil claims.

XVII. Hacking Threats

A dummy account may threaten to hack, leak, access, delete, or take over the victim’s accounts.

Examples:

“I will hack your Facebook.”
“I already have your password.”
“I will leak your private messages.”
“I will access your GCash.”
“I will delete your business page.”

If the offender actually accesses accounts, changes passwords, steals data, or takes over systems, this may involve cybercrime offenses such as illegal access, data interference, system interference, misuse of devices, fraud, identity theft, or related violations.

The victim should immediately secure accounts, change passwords, enable two-factor authentication, revoke suspicious sessions, and preserve logs.

XVIII. Extortion Through a Dummy Account

Threats become more serious when tied to a demand.

Examples:

“Send money or I will expose you.”
“Pay me ₱10,000 or I will post your photos.”
“Give me your account password or I will hurt your sibling.”
“Meet me or I will send this to your employer.”
“Withdraw your case or I will attack you.”

Extortion-type conduct may support complaints for coercion, threats, robbery/extortion-related offenses, cybercrime, or special law violations depending on the specific facts.

XIX. Threats Against Public Officials, Employees, Teachers, or Professionals

Online threats may be directed against a person because of their work. This may happen to public officials, teachers, journalists, lawyers, doctors, business owners, influencers, employees, and students.

Legal issues may include:

Personal threats;
Defamation;
harassment;
workplace safety;
administrative reporting;
professional reputation damage;
cyber libel;
data privacy concerns;
security planning.

If threats relate to official duties, the victim may also report to their agency, school, employer, legal office, or security personnel.

XX. Anonymous Does Not Mean Untraceable

A dummy account may appear anonymous, but it can sometimes be traced through:

Platform records;
Login IP addresses;
Phone numbers;
Email recovery details;
Device identifiers;
Account activity;
Payment trails;
Linked accounts;
Mutual contacts;
Writing style;
Timing patterns;
Screenshots showing profile history;
Admissions or slips;
Witnesses;
Cyber forensic examination.

However, private individuals usually cannot compel social media platforms to reveal account information on their own. Law enforcement, court processes, preservation requests, subpoenas, and proper procedures may be needed.

XXI. The Importance of Evidence Preservation

Evidence is critical. Online threats can be deleted, accounts can be renamed, posts can disappear, and profiles can be deactivated.

A victim should preserve:

Screenshots of messages;
Screen recordings showing the account, URL, and message thread;
Profile link or username;
Date and time of messages;
Full conversation history;
Photos, videos, comments, reactions, and shares;
Message requests and deleted-message notices;
Account creation clues;
Common friends or followers;
Threatening posts and captions;
URLs of posts and profiles;
Email headers, if email was used;
Phone numbers or payment accounts used;
GCash, bank, or remittance details if money was demanded;
Prior related communications;
Names of suspected persons and basis for suspicion;
Barangay blotter or police reports;
Medical or psychological records if harm resulted.

Screenshots alone may be challenged. Stronger evidence includes screen recordings, device preservation, notarized printouts, forensic extraction, or direct presentation of the device during investigation or court proceedings.

XXII. How to Take Better Screenshots and Recordings

When documenting online threats, the victim should capture:

The sender’s username and display name;
The profile photo;
The profile URL;
The exact message;
The date and time;
The full conversation context;
The platform interface;
The victim’s account name;
Any attachments, images, videos, or voice notes;
Any threats made in comments or public posts;
The browser address bar if using a computer;
The phone’s date and time if possible.

Avoid cropping too tightly. Cropped screenshots may lose important context. Save originals in multiple secure locations.

XXIII. Do Not Delete the Conversation

Many victims delete messages out of fear or disgust. This can weaken the case. It is usually better to:

Keep the conversation intact;
Avoid replying emotionally;
Avoid threatening back;
Avoid deleting the thread;
Avoid blocking before evidence is saved;
Preserve the device used to receive the messages;
Export data if the platform allows it.

Blocking may be appropriate for safety, but evidence should be preserved first when possible.

XXIV. Should the Victim Reply?

Usually, the victim should avoid engaging in lengthy exchanges. Replies may escalate the situation or create statements that can be used against the victim.

If a reply is necessary, it should be short and non-threatening, such as:

“Do not contact me again. I am preserving these messages and will report them to the proper authorities.”

After that, avoid further argument.

XXV. Reporting to the Platform

The victim should report the dummy account to the platform. Platforms often have reporting tools for:

Threats of violence;
Harassment;
Impersonation;
Hate speech;
Non-consensual intimate images;
Child exploitation;
Spam;
fake accounts;
blackmail;
privacy violations.

Reporting may lead to takedown, account suspension, or preservation of platform records. But platform reporting is not a substitute for legal reporting when the threat is serious.

Before reporting, preserve evidence, because the account or messages may become inaccessible after takedown.

XXVI. Reporting to Authorities

Depending on the seriousness of the threat, the victim may report to:

Local police station;
PNP Anti-Cybercrime Group;
NBI Cybercrime Division;
Barangay, especially for immediate community-related concerns;
Prosecutor’s office;
School or employer, if relevant;
Women and Children Protection Desk, if the victim is a woman or child and the circumstances require it.

For serious threats of physical harm, the victim should prioritize safety and immediate reporting.

XXVII. Barangay Blotter and Barangay Protection

A barangay blotter may help document the incident, especially if the suspected offender is known or lives nearby. Barangay officials may assist with mediation in appropriate cases, but serious cyber threats, threats of violence, sexual exploitation, extortion, or threats involving minors should not be treated as mere neighborhood misunderstandings.

Barangay conciliation may be required for some disputes between individuals residing in the same city or municipality, but many cybercrime-related, serious criminal, urgent, or special-law matters may need direct law enforcement or prosecutorial action.

XXVIII. Filing a Criminal Complaint

A criminal complaint may require:

Complaint-affidavit;
Screenshots and printouts;
Device evidence;
Sworn statements of witnesses;
Profile links and usernames;
Platform URLs;
Identification of the suspected offender, if known;
Explanation of how the victim knows or suspects the offender;
Police or cybercrime report;
Other supporting documents.

If the offender’s identity is unknown, the complaint may initially be against an unidentified person, subject to investigation. Law enforcement may need to gather digital evidence to identify the person behind the dummy account.

XXIX. Proving the Identity of the Person Behind the Dummy Account

This is often the hardest part.

Evidence pointing to identity may include:

The account uses private information known only to the suspect;
Threats refer to recent personal interactions;
The wording matches the suspect’s style;
The account was created immediately after a dispute;
The account contacts only people connected to the suspect;
The offender accidentally reveals details;
The account uses the suspect’s phone number or email;
Payment demands use accounts traceable to the suspect;
A witness saw the suspect using the account;
The suspect admits it in chat or conversation;
Digital forensic evidence links the account to the suspect.

Suspicion alone is not enough. The stronger the identity evidence, the better the case.

XXX. The Role of Cyber Forensics

Cyber forensic work may involve:

Preserving the victim’s device;
Extracting message metadata;
Verifying screenshots;
Tracing URLs and account identifiers;
Examining email headers;
Checking login notices;
Identifying malware or phishing links;
Preserving files in admissible form;
Correlating timestamps.

For serious cases, professional assistance may be useful.

XXXI. Chain of Custody and Admissibility

Electronic evidence must be properly authenticated. Courts may require proof that:

The screenshots are accurate;
The messages came from the account shown;
The account existed at the time;
The evidence was not altered;
The device or file was preserved;
The person presenting the evidence can explain how it was obtained;
The electronic document complies with evidentiary rules.

A victim should avoid editing screenshots, adding markings to originals, or relying only on forwarded images. Keep original files and make separate annotated copies if needed.

XXXII. Data Privacy Issues

Online threats may involve misuse of personal information. If the dummy account posts or threatens to post personal data, the matter may raise privacy concerns.

Personal information may include:

Full name;
Home address;
Contact number;
School or workplace;
Government IDs;
Financial details;
Health information;
Family information;
Private photos;
Screenshots of private conversations.

The wrongful collection, use, disclosure, or posting of personal data may lead to possible remedies depending on the facts and the persons involved.

XXXIII. Civil Liability

Aside from criminal liability, the victim may consider civil remedies for damages. Civil liability may arise from:

Defamation;
Invasion of privacy;
Abuse of rights;
Intentional infliction of emotional distress-type conduct under civil law principles;
Damage to reputation;
Business losses;
Psychological harm;
Violation of rights;
Expenses incurred for security, counseling, or legal assistance.

The victim may claim actual damages if proven, and in proper cases moral damages, exemplary damages, attorney’s fees, and costs.

XXXIV. Protective Measures and Safety Planning

Legal action is important, but personal safety comes first.

A victim should consider:

Informing trusted family or friends;
Avoiding predictable routines if physical harm is threatened;
Alerting building security, school, workplace, or barangay;
Not meeting the anonymous sender;
Not sending money or private material;
Preserving evidence before blocking;
Strengthening privacy settings;
Removing public address and phone details;
Reviewing tagged photos and public posts;
Using two-factor authentication;
Changing passwords;
Checking account recovery emails and phone numbers;
Watching for phishing links.

If the threat is specific, immediate, or credible, urgent police assistance may be necessary.

XXXV. Red Flags That Require Immediate Action

Immediate reporting is advisable when the dummy account:

Threatens death or serious physical harm;
Mentions the victim’s home, school, office, or family;
Sends photos of the victim’s location;
Shows weapons;
Demands money;
Threatens to release intimate images;
Targets a child;
Claims to have hacked accounts;
Sends repeated threats from multiple accounts;
Encourages others to attack the victim;
Threatens self-harm and blames the victim;
Appears connected to a known violent person;
Gives a specific date, time, or place for harm.

XXXVI. Online Threats in Group Chats and Public Posts

Threats may be made privately or publicly. A public threat can be more damaging because it may encourage others to participate.

Examples:

Posting “bugbugin natin siya” in a group;
Sharing the victim’s photo with threats;
Tagging the victim in violent posts;
Inviting others to harass or attack;
Posting the victim’s address;
Creating group chats to coordinate harassment.

Public posts may support claims for threats, harassment, defamation, privacy violations, or incitement-like behavior depending on wording and context.

XXXVII. Threats Through Memes, Emojis, and Images

Threats are not always written plainly. They may be communicated through:

Gun emojis;
Knife emojis;
Coffin images;
Edited photos showing harm;
Countdown posts;
Location pins;
Photos of weapons;
Images of the victim’s house;
Memes implying violence.

The legal meaning depends on context. A single emoji may be ambiguous, but repeated threatening images combined with personal details may be serious evidence.

XXXVIII. Voice Notes, Calls, and Video Threats

Threats may be sent through voice notes, calls, or videos. The victim should preserve:

Audio files;
Call logs;
Screen recordings;
Caller ID;
Platform username;
Date and time;
Any transcript;
Any recognizable voice or background clue.

If local law or platform rules affect recording, legal advice may be needed. But a victim who receives a threatening voice message should preserve it.

XXXIX. Threats From Overseas or Unknown Locations

The offender may be outside the Philippines or may pretend to be abroad. This complicates enforcement but does not always prevent reporting.

Relevant considerations include:

Where the victim is located;
Where the harm was felt;
Whether the platform can preserve records;
Whether the offender can be identified;
Whether the offender has Philippine contacts or accounts;
Whether money was demanded through Philippine payment channels;
Whether local law enforcement can coordinate with foreign authorities.

XL. When the Dummy Account Is Actually a Known Person

Often, victims suspect an ex-partner, neighbor, classmate, co-worker, competitor, or relative. The victim should be careful in publicly naming the suspected person without sufficient proof, because doing so may create defamation risk.

Instead, preserve the basis of suspicion and submit it to investigators. Useful details include:

Recent conflict;
Similar language;
Knowledge of private facts;
Timing;
Motive;
Prior threats from real accounts;
Common contacts;
Screenshots of related conversations;
Any admission.

XLI. False Accusations and Retaliation Risks

Accusing someone of being behind a dummy account is serious. If the accusation is false or unsupported and publicly posted, the accuser may face complaints for defamation or harassment.

Victims should distinguish between:

“This account threatened me” — supported by screenshots; and
“This specific person is behind the account” — requires proof.

It is safer to state facts and let authorities investigate identity.

XLII. Employer, School, and Community Reporting

If the threat affects work, school, or community safety, the victim may report to:

Human resources;
School administration;
Guidance office;
Security office;
Legal department;
Homeowners’ association;
Building administrator;
Barangay officials.

This is especially relevant when the threat involves classmates, co-workers, residents, tenants, or community members.

Administrative action may proceed separately from criminal action.

XLIII. Remedies Against the Platform

The victim may request the platform to:

Remove threatening content;
Disable the dummy account;
Preserve evidence;
Act on impersonation;
Remove non-consensual intimate images;
Remove private personal information;
Restrict harassment;
Review dangerous content.

Platforms may not reveal the offender’s identity directly to the victim. Formal legal process is usually needed for account information.

XLIV. Demand Letters: Are They Useful?

A demand letter may be useful if the suspected offender is known or reasonably identifiable. It may demand that the person:

Stop contacting the victim;
Stop using dummy accounts;
Take down posts;
Preserve evidence;
Apologize or retract statements;
Pay damages, if appropriate;
Refrain from further threats.

However, if the threat is serious, anonymous, or urgent, a demand letter should not replace immediate reporting to law enforcement.

XLV. Protection Orders

In cases involving domestic or dating relationships, threats against women or children, harassment by a former partner, or family violence, protection orders may be available depending on the facts.

A protection order may prohibit contact, harassment, threats, stalking, or other abusive conduct. It may also include other protective measures.

This remedy is especially important when online threats are part of a larger pattern of abuse.

XLVI. What If the Threat Was “Only a Joke”?

A common defense is that the message was a joke, prank, meme, or emotional outburst.

Whether this defense works depends on context. Relevant factors include:

Exact words used;
Prior relationship;
History of conflict;
Specificity of threat;
Whether weapons or locations were mentioned;
Whether the victim reasonably feared harm;
Whether the sender repeated the conduct;
Whether a demand was made;
Whether the sender hid behind a dummy account.

A threat does not automatically become harmless just because the sender later says it was a joke.

XLVII. What If the Dummy Account Was Hacked?

Another possible defense is that the account was hacked or used by someone else. Investigators may examine:

Login records;
Device access;
Account recovery history;
IP logs;
Timing;
Prior account behavior;
Admissions;
Whether the account owner had control;
Whether the alleged hacking was reported.

Mere denial may not be enough if other evidence links the person to the account.

XLVIII. What If the Victim Threatened Back?

If the victim responds with threats, insults, or defamatory statements, the situation becomes more complicated. The other side may use those replies as evidence.

Victims should avoid retaliatory threats. Preserve evidence, report, and communicate calmly if necessary.

XLIX. Psychological Harm and Documentation

Online threats can cause anxiety, fear, sleeplessness, panic, reputational damage, and emotional distress. If the victim suffers serious psychological effects, it may help to document:

Medical consultations;
Counseling records;
Prescriptions;
Work or school absences;
Security expenses;
Witnesses who observed distress;
Changes in routine due to fear.

These may support claims for damages or show the seriousness of the threat.

L. Business and Professional Reputation Harm

If the dummy account threatens a business owner, professional, influencer, or employee, there may be additional consequences:

Lost clients;
Negative reviews;
False accusations;
Public shaming;
Brand damage;
Workplace complaints;
Employer investigation;
Loss of contracts;
Safety concerns for staff.

Evidence of actual business damage should be preserved through screenshots, client messages, sales records, inquiries, cancellations, and public posts.

LI. Special Concern: Non-Consensual Intimate Images

Threats to release intimate images are serious even before actual posting. If images are released, the victim should act quickly to:

Save evidence;
Report the post to the platform;
Request urgent takedown;
Report to cybercrime authorities;
Notify trusted persons if needed;
Avoid paying blackmailers repeatedly;
Preserve payment demands;
Seek legal and psychological support.

If the victim is a minor, urgent reporting is especially important.

LII. Common Mistakes Victims Make

Victims often weaken their case by:

Deleting messages;
Only taking cropped screenshots;
Publicly accusing someone without proof;
Threatening the suspect back;
Paying extortion demands repeatedly;
Waiting too long to report serious threats;
Failing to save profile links;
Blocking before preserving evidence;
Editing screenshots;
Losing the device used to receive messages;
Ignoring threats that include specific personal information.

LIII. Common Mistakes Offenders Make

People using dummy accounts often leave traces, such as:

Reusing usernames;
Using the same writing style;
Mentioning private details;
Logging in from traceable devices;
Linking recovery numbers;
Demanding payment through identifiable accounts;
Contacting the same circle of friends;
Creating the account immediately after conflict;
Accidentally revealing identity;
Using photos, phrases, or timing connected to themselves.

A dummy account may hide a face, but it may not hide behavior.

LIV. Practical Step-by-Step Guide for Victims

Step 1: Assess urgency

If there is an immediate threat to life, safety, home, school, or workplace, seek urgent help from police, security, barangay, or trusted people.

Step 2: Preserve evidence

Take screenshots, screen recordings, profile links, timestamps, and full conversation context.

Step 3: Do not retaliate

Avoid threats, insults, or public accusations.

Step 4: Secure accounts

Change passwords, enable two-factor authentication, check recovery information, and log out suspicious sessions.

Step 5: Report to the platform

Use platform tools for threats, harassment, impersonation, extortion, or intimate-image abuse.

Step 6: Report to authorities

For serious threats, extortion, doxxing, hacking, sexual threats, or threats involving minors, report to cybercrime authorities or police.

Step 7: Identify possible suspects carefully

Write down facts supporting suspicion but avoid public accusations without evidence.

Step 8: Consider legal counsel

A lawyer can help prepare affidavits, demand letters, complaints, and evidence packages.

Step 9: Protect your physical safety

Inform trusted people, adjust routines, and coordinate with workplace, school, or building security if necessary.

Step 10: Continue documenting

If the dummy account creates new accounts, preserve each incident.

LV. Practical Step-by-Step Guide for Parents of Minor Victims

Parents or guardians should:

Stay calm and reassure the child;
Preserve evidence before deleting anything;
Do not shame or blame the child;
Avoid direct confrontation with the anonymous account;
Report serious threats to authorities;
Notify the school if student safety is involved;
Secure the child’s accounts;
Check for grooming, extortion, or intimate-image threats;
Seek counseling if needed;
Keep the child away from further contact with the offender.

If sexual content, coercion, or exploitation is involved, immediate reporting is important.

LVI. Practical Step-by-Step Guide for the Accused

A person accused of sending threats from a dummy account should take the matter seriously.

They should:

Avoid contacting the complainant;
Preserve their own account records;
Do not delete relevant evidence;
Avoid posting about the dispute;
Consult a lawyer;
Prepare evidence showing they did not control the account, if true;
Avoid retaliatory accusations;
Cooperate through counsel if contacted by authorities.

If the accused actually sent the threats, deleting the account may not solve the problem and may worsen the impression of guilt.

LVII. Sample Evidence Checklist

A useful evidence folder may include:

PDF or image copies of screenshots;
Screen recordings;
Links to profiles and posts;
Notes on date and time received;
Exported chat data, if available;
Copies of threatening images, videos, or voice notes;
Device details;
Police or barangay report;
Platform report confirmation;
Witness statements;
Proof of damages;
Medical or counseling records;
Work or school reports;
Suspect information and basis for suspicion;
List of related accounts used by the offender.

Organize files chronologically.

LVIII. Sample Complaint-Affidavit Outline

A complaint-affidavit may include:

Personal details of the complainant;
Description of the dummy account;
Date, time, and platform of the threats;
Exact words or screenshots of the threats;
Explanation of why the complainant felt fear or harm;
Any demand made by the offender;
Any suspected identity and basis;
Steps taken to preserve evidence;
Reports made to platform, barangay, police, or cybercrime authorities;
Request for investigation and prosecution.

The affidavit should be factual, organized, and supported by attachments.

LIX. Sample Cease-and-Desist Letter Structure

A cease-and-desist letter may contain:

1. Identification of the sender and recipient Use only if the suspected offender is known.

2. Statement of facts Describe the threatening messages, platform, and dates.

3. Legal notice State that threats, harassment, defamation, or extortion may expose the sender to legal liability.

4. Demands Demand that the person stop contacting, threatening, posting, impersonating, or harassing the victim.

5. Preservation notice Demand preservation of accounts, messages, devices, and related records.

6. Reservation of rights State that the victim reserves all civil, criminal, and administrative remedies.

This letter should be carefully worded to avoid unnecessary escalation.

LX. Defenses Commonly Raised

A respondent may argue:

They did not own or control the account;
The screenshots are fake or edited;
The messages were jokes;
The words were not threats;
The complainant provoked the exchange;
The account was hacked;
Someone else used their device;
There is no proof of identity;
The statements were opinions;
The complainant suffered no damage.

The strength of these defenses depends on evidence.

LXI. Evaluating Whether a Threat Is Credible

Authorities and courts may consider:

Specificity of the threat;
Repetition;
Ability to carry it out;
Access to the victim;
Mention of private details;
History of violence;
Use of weapons or photos;
Demands or conditions;
Attempts to locate the victim;
Contact with family or employer;
Prior disputes;
Victim’s reasonable fear.

A threat can be serious even if made from a newly created account.

LXII. Online Threats and Free Speech

Freedom of expression does not protect true threats, harassment, extortion, defamation, privacy violations, or abuse. A person may criticize, complain, or express opinions, but they may not unlawfully threaten harm, blackmail, impersonate, or harass others.

The line between criticism and unlawful conduct depends on words, context, intent, and effect.

LXIII. Time Limits and Delay

Victims should act promptly. Online accounts can disappear, platform records may be overwritten, and memory fades. Delay can make tracing harder.

Even if the victim is unsure about filing a full case, preserving evidence and reporting early may help maintain options.

LXIV. When Settlement Is Appropriate

Some cases may be resolved through apology, takedown, written undertaking, no-contact agreement, damages, or barangay settlement.

Settlement may be appropriate for less severe harassment where the offender is known and the victim wants closure.

However, settlement may not be appropriate where there are serious threats of violence, extortion, sexual exploitation, threats involving minors, repeated stalking, or credible danger.

LXV. When Not to Settle Privately

Private settlement is risky when:

The offender demands sexual favors or money;
The offender has intimate images;
The victim is a minor;
The threat involves physical harm;
The offender is unknown;
The offender has repeatedly created new accounts;
The offender has shown the victim’s address;
The offender is part of a larger group;
The offender continues harassment after promises to stop.

In these cases, formal reporting is usually safer.

LXVI. Preventive Measures

To reduce risk:

Keep personal information private;
Limit public posts showing address, school, workplace, or routine;
Review friend lists and followers;
Use strong passwords;
Enable two-factor authentication;
Avoid sharing intimate images;
Be cautious with strangers online;
Check privacy settings regularly;
Avoid clicking suspicious links;
Use separate emails for important accounts;
Keep recovery information updated;
Teach minors about online safety;
Save suspicious messages early.

Prevention does not eliminate liability of offenders, but it reduces exposure.

LXVII. Key Takeaways

A threat made through a dummy account can still be legally actionable.
The main challenge is proving who controls the account.
Serious online threats may involve crimes such as threats, coercion, cybercrime, cyber libel, extortion, privacy violations, or special-law offenses.
Evidence preservation is crucial.
Screenshots should include full context, profile links, dates, and usernames.
Victims should avoid retaliatory threats or public accusations without proof.
Threats involving death, physical harm, minors, sexual images, extortion, or doxxing should be reported promptly.
Platform reporting is useful but does not replace legal reporting.
A dummy account is not always untraceable.
Safety planning is as important as legal action.

LXVIII. Conclusion

Online threats from a dummy account are not merely “internet drama.” In the Philippine context, they can create criminal, civil, administrative, and personal safety issues. The anonymity of the account may complicate the case, but it does not make the conduct lawful.

The victim’s strongest response is calm, documented, and lawful action: preserve evidence, secure accounts, avoid retaliation, report serious threats, and seek legal assistance when necessary. The focus should be on proving the threat, preserving the digital trail, identifying the person behind the account, and protecting the victim from further harm.

A dummy account may be fake, but the fear, damage, and legal consequences can be very real.