Online threats and fake orders can feel frightening because they invade ordinary life: your phone keeps receiving hostile messages, your home address is being used without permission, riders keep arriving with cash-on-delivery packages or food orders, or someone is using online platforms to embarrass, pressure, or scare you. In the Philippines, these acts may lead to criminal complaints, cybercrime investigation, barangay action, protection orders, civil damages, or platform takedown requests, depending on the facts. The key is to preserve evidence early, identify the correct offense, and file in the right office instead of relying only on screenshots posted on social media.

What Counts as an Online Threat or Fake Order?

An online threat is any message, post, comment, call, chat, email, or other digital communication that threatens harm to your person, reputation, family, property, business, or livelihood. It may be direct, such as “I will kill you,” or indirect, such as sending photos of your house, your child’s school, or your workplace with a threatening caption.

A fake order usually means someone uses another person’s name, mobile number, address, business page, or delivery details to place bogus orders through online shops, food apps, courier services, Facebook Marketplace, TikTok Shop, Shopee, Lazada, Grab, Lalamove, or similar platforms. In real life, fake orders are often used to:

harass an ex-partner, neighbor, employee, customer, seller, influencer, or business competitor;
embarrass someone at home or work;
make a person pay for items they never ordered;
waste a rider’s time and money;
damage an online seller’s ratings or operations;
expose a person’s address, number, or identity.

A single prank order may not always become a major criminal case. But repeated fake orders, use of another person’s identity, threats, extortion, sexual harassment, stalking-like conduct, or financial loss can make the situation legally serious.

Main Legal Actions Available in the Philippines

Situation	Possible legal action	Where it usually starts
“I will hurt you,” “I will burn your shop,” “I will harm your family”	Complaint for grave threats, light threats, coercion, or related offenses	Police station, prosecutor’s office, NBI, PNP Anti-Cybercrime Group
Someone uses your name, address, phone number, or account to place fake COD orders	Cybercrime complaint for computer-related identity theft, computer-related fraud, or related offenses; civil claim for damages	NBI Cybercrime Division, PNP ACG, prosecutor’s office
Fake orders caused actual business loss	Criminal complaint plus civil action for actual damages	Prosecutor’s office; first-level court or RTC depending on amount and relief
Threats posted publicly on Facebook, TikTok, X, Instagram, YouTube, or group chats	Criminal complaint; cyber libel if defamatory; report to platform	NBI/PNP/prosecutor; platform safety tools
Threats from a spouse, former partner, dating partner, or person with whom a woman has or had a sexual relationship	Possible Anti-VAWC case and protection order	Barangay, PNP Women and Children Protection Desk, prosecutor, Family Court/RTC
Sexual, gender-based, or misogynistic online harassment	Possible Safe Spaces Act complaint	PNP, prosecutor, local authorities, school or workplace mechanisms if applicable
Someone exposes or misuses your personal data	Data Privacy complaint, cybercrime complaint, or civil action	National Privacy Commission, NBI/PNP, prosecutor

Legal Basis for Online Threats in the Philippines

Threats under the Revised Penal Code

The starting point is the Revised Penal Code, particularly Articles 282, 283, 285, 286, and 287.

Article 282 on grave threats applies when a person threatens another with a wrong amounting to a crime against the person, honor, property, or family of the victim. For example, threatening to kill, seriously injure, burn a house, or destroy property can fall under grave threats. If the threat is made in writing or through an intermediary, the penalty may be imposed in its maximum period. RA 10951, enacted in 2017, updated many fines under the Revised Penal Code, including those relating to threats and coercion. (Lawphil)

Article 283 on light threats may apply when the threatened wrong does not amount to a crime but is still made in a conditional or intimidating way. Article 285 on other light threats covers acts such as threatening with a weapon, drawing a weapon in a quarrel without lawful self-defense, or orally threatening harm not constituting a felony. (Lawphil)

Article 286 on grave coercions may apply when someone uses violence, threats, or intimidation to force a person to do something against their will or stop them from doing something lawful. In online cases, this can appear as “Pay me or I will post your photos,” “Stop selling or I will destroy your page,” or “Give me money or I will send fake orders to your house every day.” (Supreme Court E-Library)

Article 287 on unjust vexation is sometimes raised in lower-level harassment cases where the act annoys, irritates, disturbs, or causes distress without fitting neatly into a more specific offense. It is often considered when the conduct is petty but malicious, repeated, and unsupported by lawful purpose. (Lawphil)

Cybercrime Prevention Act: RA 10175

The Cybercrime Prevention Act of 2012, or Republic Act No. 10175, is important because many threats and fake orders are committed through phones, computers, apps, websites, or social media accounts. The law covers cybercrime offenses and provides mechanisms for investigation and prosecution. Its implementing rules identify the DOJ Office of Cybercrime as the central authority and recognize the role of agencies such as the Cybercrime Investigation and Coordinating Center. (Lawphil)

For fake orders, the most relevant cybercrime concepts are often:

Computer-related identity theft — when someone intentionally acquires, uses, misuses, transfers, possesses, alters, or deletes identifying information belonging to another person without right.
Computer-related fraud — when fraudulent computer data input, alteration, deletion, or interference causes damage.
Computer-related forgery — when data is input, altered, or deleted so that it appears authentic when it is not.
Cyber libel — when defamatory statements punishable as libel under the Revised Penal Code are committed through a computer system.

A fake order using your name, number, or address is not automatically a conviction for identity theft or fraud. Prosecutors still look at evidence of identity use, intent, damage, repetition, platform records, transaction logs, and connection to the suspect. But RA 10175 gives complainants a legal route when the abuse was done through digital systems.

Civil Code remedies for damages

Even if the incident is not prosecuted or the criminal case moves slowly, the victim may have a civil claim for damages. Under the Civil Code, Article 19 requires everyone to act with justice, give everyone their due, and observe honesty and good faith. Article 20 makes a person liable for damage caused contrary to law, while Article 21 covers willful injury contrary to morals, good customs, or public policy. (Lawphil)

This matters in fake order cases because the harm is often practical and measurable:

delivery fees paid by the victim;
spoiled food or products;
rider compensation;
cancelled legitimate orders;
loss of sales;
damage to business reputation;
emotional distress from repeated harassment;
cost of changing phone numbers, addresses, locks, or security measures.

Moral damages may also be considered where the law allows it and the evidence supports mental anguish, fright, serious anxiety, besmirched reputation, wounded feelings, or social humiliation as a proximate result of the wrongful act. (Lawphil)

What to Do First: Preserve Evidence Properly

Many online harassment cases fail not because nothing happened, but because the evidence is incomplete, altered, deleted, or impossible to connect to the suspect. Treat the first 24 to 72 hours as evidence-preservation time.

Do not delete messages, order confirmations, rider chats, call logs, emails, or notifications. Screenshots help, but originals are better.
Take full screenshots, not cropped screenshots. Include the username, profile URL, date, time, phone number, order number, delivery address, and visible platform details.
Screen-record the account or conversation. Show the profile, URL, message thread, order history, and transitions between pages.
Save transaction records. Keep receipts, delivery slips, order IDs, payment requests, rider details, and customer service replies.
Ask riders or sellers for written statements. A rider can state when the order was made, what name and number appeared, and what happened upon delivery.
Request platform preservation. Report the account or order to the platform and ask that logs be preserved. Platforms may not give private account data directly to you, but law enforcement may request data through proper legal process.
Prepare a timeline. List each threat or fake order by date, time, platform, account name, order number, and effect.
Avoid online retaliation. Publicly posting the suspect’s alleged identity without enough proof can create a separate defamation or privacy issue.

The Supreme Court has recognized that electronic documents and online materials can be used as evidence if properly presented and authenticated. The Rules on Electronic Evidence apply when electronic documents or data messages are offered in evidence. (Lawphil)

The Court has also ruled in cases involving Facebook Messenger and chat logs that online messages, photos, videos, and similar digital evidence may be admissible, especially when used to determine whether a crime was committed. In Cadajas v. People, the Court rejected a broad privacy objection where the materials were obtained by private individuals rather than state agents, and the accused had allowed another person access to the account. (Supreme Court E-Library)

Step-by-Step: How to File a Complaint for Online Threats or Fake Orders

1. Assess if there is immediate danger

If the message threatens physical harm, mentions your address, sends photos of your home, refers to your child’s school, or says the person is on the way, treat it as urgent. Go to the nearest police station or barangay, especially if the suspect is nearby or known to you.

Bring:

valid ID;
phone containing the original messages;
screenshots and printouts;
names of possible witnesses;
the suspect’s known name, alias, account link, phone number, or address;
details of prior incidents.

For women and children threatened by a spouse, ex-spouse, dating partner, former dating partner, or person with whom there is or was a sexual relationship, the incident may fall under RA 9262, the Anti-Violence Against Women and Their Children Act. The law is liberally construed to promote victim safety and recognizes protection measures and support services. (Supreme Court E-Library)

2. File with the barangay only when appropriate

Barangay conciliation is useful for neighbor disputes, minor harassment, or situations where the parties live in the same city or municipality and the matter is within barangay authority. But not every online threat must go through the barangay.

Under the Katarungang Pambarangay rules, prior barangay conciliation is generally a precondition for court or government action in covered disputes, but there are important exceptions, including disputes involving parties from different cities or municipalities, corporations or juridical entities, urgent legal action, and offenses punishable by imprisonment exceeding one year or a fine over ₱5,000. (Lawphil)

This means serious threats, cybercrime, VAWC, cases needing urgent protection, or incidents involving unknown online suspects are often better handled directly by police, NBI, PNP ACG, or the prosecutor.

3. Report to the NBI Cybercrime Division or PNP Anti-Cybercrime Group

For online threats and fake orders involving apps, social media, phone numbers, fake accounts, or identity misuse, a cybercrime-focused office is usually more practical than an ordinary blotter alone.

The NBI Cybercrime Division provides investigative assistance to victims of computer crimes. Its Citizen’s Charter describes an initial process where complainants proceed to the Cybercrime Division, undergo preliminary interview and investigation, execute sworn statements or submit affidavits, and submit supporting documents; the listed initial assistance has no fee. (nbi.gov.ph)

The PNP Anti-Cybercrime Group also handles cybercrime reports. For scams and cybercrime reports, the Cybercrime Investigation and Coordinating Center has promoted the government’s 1326 reporting hotline through the Inter-Agency Response Center, with public advisories describing it as a channel for reporting scams and cybercrimes. (Philippine News Agency)

4. Prepare a complaint-affidavit

A complaint-affidavit is a sworn written statement explaining what happened, who did it if known, what evidence supports the complaint, and what law may have been violated. It is usually notarized.

A strong complaint-affidavit for online threats or fake orders should include:

your full name, address, contact details, and relationship to the suspect, if any;
a chronological timeline;
exact words of threats, preferably quoted from the original messages;
screenshots, links, order IDs, phone numbers, emails, delivery addresses, and account URLs;
proof of damage, such as receipts, spoiled goods, payments, lost orders, or rider statements;
explanation of how you identified the suspect;
names and affidavits of witnesses;
a statement that the attached evidence is authentic and came from your account, phone, email, or records.

For preliminary investigation, the DOJ checklist for private complainants includes documents such as the investigation data form and complaint-affidavit or sworn statement of the complainant. (Department of Justice Philippines)

5. File with the prosecutor when you want a criminal case to proceed

Law enforcement can investigate, but criminal prosecution generally moves through the Office of the City or Provincial Prosecutor. The prosecutor evaluates whether there is probable cause to charge the respondent in court.

Typical stages are:

Filing of complaint-affidavit and evidence.
Assignment to an investigating prosecutor.
Issuance of subpoena to the respondent, if identified.
Submission of counter-affidavit by respondent.
Reply-affidavit by complainant, if allowed or required.
Resolution finding probable cause or dismissing the complaint.
Filing of information in court if probable cause exists.

Timelines vary widely. Simple cases may move in a few months; cases involving anonymous accounts, foreign platforms, subpoenas, telecom data, or multiple incidents may take longer.

6. Consider civil action for damages

If your main loss is money, business disruption, spoiled goods, rider fees, or reputational harm, a civil claim may be appropriate.

For purely monetary claims within the small claims limit, the Supreme Court’s Rules on Expedited Procedures increased the small claims threshold to ₱1,000,000, and small claims can cover certain money claims arising from contracts, services, sale of personal property, and enforcement of barangay settlements within the limit. Lawyers are generally not allowed to appear for parties in small claims hearings, making the process simpler for ordinary litigants. (Supreme Court of the Philippines)

Small claims may not fit every fake order case. If you need injunctions, platform data, moral damages, complex proof, or claims beyond the small claims framework, the case may require a different civil action.

Documents to Prepare

Document	Why it matters
Valid government ID	Establishes identity of complainant
Complaint-affidavit	Main sworn narrative of the case
Screenshots with date/time	Shows the threat, order, profile, or transaction
Screen recordings	Helps prove the account, URL, and full conversation flow
Original device	Allows investigators to inspect original messages or app records
Order confirmations and receipts	Proves fake order details and financial loss
Rider or seller statements	Supports that the order was not made by you
Platform reports or customer service replies	Shows you attempted to report and preserve records
Medical, psychological, or security records	Supports fear, anxiety, injury, or safety measures
Barangay blotter or police blotter	Creates an early official record
Prior incident list	Proves repetition or pattern
Notarized affidavits of witnesses	Strengthens preliminary investigation

For Filipinos abroad or foreigners outside the Philippines, affidavits and supporting documents signed overseas may need notarization and, when required, apostille or consular authentication. The DFA notes that the Philippines became a party to the Apostille Convention on May 14, 2019, which affects how public documents are authenticated for cross-border use. (Apostille Government of the Philippines)

Common Scenarios and Practical Legal Analysis

Someone keeps sending food deliveries to my house. Is that a crime?

It can be, especially if the person used your name, phone number, address, or account without permission, or if the fake orders were repeated and intended to harass or cause loss.

Possible angles include:

computer-related identity theft under RA 10175;
computer-related fraud if there was fraudulent data input and damage;
unjust vexation or coercion if the purpose was harassment or pressure;
civil damages for actual losses.

Evidence is crucial. One rider saying “someone ordered” may not be enough. Gather order numbers, platform details, phone numbers used, delivery timestamps, and statements from riders or merchants.

My ex threatened me online and also sends fake orders. What case can I file?

If you are a woman and the person is a spouse, former spouse, person with whom you have or had a sexual or dating relationship, or person with whom you have a common child, RA 9262 may apply. Online threats, humiliation, intimidation, repeated harassment, or acts causing emotional and psychological suffering may support a VAWC complaint depending on the facts. (Supreme Court E-Library)

You may also have separate complaints for threats, coercion, cybercrime, or data misuse. If there is immediate safety risk, protection measures should be prioritized.

A customer is threatening to destroy my online shop unless I refund them

This may be a legitimate consumer complaint if the customer is simply asserting rights. But it may become unlawful if the person threatens violence, false accusations, fake orders, account takedowns based on lies, or reputational attacks unless money is paid.

Save the entire conversation. Do not answer with insults. Respond factually about order records, refund policy, and delivery proof. If threats continue, preserve the evidence and file a complaint.

Someone posted my address and told people to send fake orders

This is more serious than a private prank. It may involve doxing, identity misuse, harassment, threats, or data privacy violations. The Data Privacy Act protects personal information and recognizes rights relating to inaccurate, unlawfully obtained, or unauthorized use of personal information. (National Privacy Commission)

If the post also invites harm, humiliation, sexual harassment, or mob harassment, additional laws may apply.

The account is fake. Can I still file?

Yes. Many cybercrime complaints start with unknown or fake accounts. You can name the respondent as “John Doe,” “Jane Doe,” or the account name if the real identity is not yet known, depending on the office’s practice.

Investigators may need platform logs, IP logs, subscriber data, phone number records, payment details, device identifiers, or delivery app data. These are not usually available to private persons on request, so formal investigation matters.

Where to File and What to Expect

Office or route	Best for	Practical notes
Barangay	Minor disputes between residents of the same city/municipality; early record; mediation	Not ideal for anonymous cybercrime or urgent threats
Police station	Immediate threats, safety risk, blotter, referral	Bring original phone and screenshots
PNP Anti-Cybercrime Group	Threats, fake accounts, fake orders, online scams, identity misuse	Useful for cyber investigation and coordination
NBI Cybercrime Division	Computer crimes, fake accounts, serious online harassment, identity misuse	Initial assistance process includes interview, sworn statements, and evidence submission
City or Provincial Prosecutor	Filing a criminal complaint for preliminary investigation	Requires complaint-affidavit and supporting evidence
National Privacy Commission	Misuse or unauthorized processing of personal data	Best when a company, platform, employer, or organization mishandled personal data
First-level court small claims	Clear money claims within the small claims limit	Works best for simple, documented monetary claims
RTC or appropriate court	Complex damages, injunctions, serious criminal cases	Procedure and timing depend on the relief and offense

Mistakes That Can Weaken Your Case

Deleting the original messages after taking screenshots.
Cropping screenshots so the court cannot see the account, date, time, or URL.
Posting accusations online before filing, especially if you are not completely sure of the suspect’s identity.
Threatening the suspect back, which can create a counter-complaint.
Failing to record actual losses, such as rider payments, spoiled items, or cancelled orders.
Relying only on a barangay blotter for a serious cybercrime.
Waiting too long to report, giving the suspect time to delete accounts, messages, or platform records.
Not asking riders or sellers for written statements while the incident is fresh.
Assuming the platform will voluntarily disclose user data without legal process.

Frequently Asked Questions

Can I file a cybercrime case for fake orders in the Philippines?

Yes, if the fake orders involved unauthorized use of your identity, fraudulent use of a platform, fake accounts, repeated harassment, or actual damage. Possible legal bases include RA 10175 provisions on computer-related identity theft, computer-related fraud, or related offenses, depending on the evidence.

Is an online death threat punishable even if it was sent by private message?

Yes. A threat does not have to be public to be legally serious. A private chat, text message, email, or direct message may support a complaint if it shows a real threat to your person, honor, property, or family.

Do I need to know the real name of the person behind the fake account?

No. You can still report the account, phone number, profile link, or other identifiers. However, a criminal case becomes stronger when investigators can connect the account to a real person through platform records, phone numbers, payment details, witnesses, admissions, or device data.

Are screenshots enough as evidence?

Screenshots are helpful but usually better when supported by original messages, screen recordings, URLs, device inspection, platform reports, witness affidavits, and transaction records. Courts may admit electronic evidence, but authenticity and connection to the suspect still matter.

Should I go to the barangay first?

For minor disputes between individuals living in the same city or municipality, barangay conciliation may be required before court action. For serious threats, cybercrime, urgent safety issues, VAWC, anonymous suspects, or cases involving parties from different cities, direct reporting to police, NBI, PNP ACG, or the prosecutor may be more appropriate.

Can a fake order sender be forced to pay for the damage?

Yes, if liability is proven. The victim may seek actual damages such as delivery costs, spoiled products, lost sales, and other documented losses. In proper cases, moral or other damages may also be pursued under the Civil Code.

What if the fake orders were made by a minor?

The case is handled differently because minors are covered by juvenile justice rules. The complainant can still report the incident, preserve evidence, and seek restitution or intervention, but the process will consider the child’s age, discernment, and applicable diversion procedures.

Can foreigners file complaints for online threats or fake orders in the Philippines?

Yes, foreigners may file complaints in the Philippines when they are victims of conduct connected to the Philippines, such as threats from a person in the Philippines, fake orders sent to a Philippine address, or misuse of Philippine delivery platforms. If documents are signed abroad, notarization, apostille, or consular authentication may be required depending on where the document was executed.

Can I report the account to Facebook, TikTok, Shopee, Lazada, Grab, or other platforms?

Yes. Platform reporting is useful for takedown, suspension, refund review, and preservation of records. But platform reporting is not the same as filing a criminal complaint. For serious threats, repeated fake orders, identity misuse, or financial loss, keep copies of your platform reports and file with the proper law enforcement or prosecutorial office.

What if the threat includes sexual insults, explicit photos, or gender-based harassment?

The Safe Spaces Act, RA 11313, may apply to gender-based sexual harassment committed online. If the offender is a spouse, former spouse, dating partner, former dating partner, or person with whom the victim has or had a sexual relationship, RA 9262 may also be relevant depending on the facts. (Lawphil)

Key Takeaways

Online threats and fake orders in the Philippines can lead to criminal, cybercrime, civil, barangay, data privacy, VAWC, or Safe Spaces Act remedies.
Preserve original messages, full screenshots, screen recordings, order IDs, rider statements, platform reports, and proof of loss.
Serious threats should not be treated as mere “online drama,” especially when they mention your home, family, workplace, school, or business.
Fake orders may become legally actionable when they involve identity misuse, fraud, repeated harassment, or actual financial damage.
Barangay conciliation is useful for some local disputes, but serious cybercrime, urgent threats, anonymous suspects, and many special-law cases should go directly to police, NBI, PNP ACG, or the prosecutor.
A strong complaint-affidavit tells the story chronologically, attaches evidence clearly, and explains the connection between the online act, the suspect, and the damage suffered.