Yes. In the Philippines, you can report and start a criminal complaint even if the cyber bully is hiding behind a fake account, dummy profile, anonymous number, or unknown username. The case may initially be recorded against an unknown person, “John Doe,” “Jane Doe,” or the online alias used by the offender. But there is an important practical difference: you can begin the complaint while the person is unknown, yet the case usually becomes much stronger once law enforcement identifies the real person behind the account through digital evidence, platform records, subscriber information, witness statements, or other proof.
Philippine law does not require you to simply “accept” online harassment because the offender used a fake account. The law recognizes cybercrimes, online libel, threats, identity theft, gender-based online sexual harassment, data privacy violations, voyeurism, and child-related online abuse. The challenge is not whether you may report it. The challenge is proving three things: what happened, which law was violated, and who is legally responsible.
What “Cyber Bullying” Means Under Philippine Law
“Cyber bullying” is a common term, but it is not always the exact name of a criminal offense for adults in the Philippines.
In school settings, Republic Act No. 10627, or the Anti-Bullying Act of 2013, requires elementary and secondary schools to adopt policies against bullying, including acts done through electronic means or online platforms. This is especially relevant when both the victim and the bully are students. (Lawphil)
For criminal cases, the conduct is usually charged under a more specific law, depending on what the cyber bully actually did. For example:
| Online act | Possible legal basis |
|---|---|
| Posting false accusations, insults, or damaging statements about an identified person | Cyber libel under RA 10175, in relation to Articles 353 and 355 of the Revised Penal Code |
| Threatening to hurt, expose, shame, or harm someone | Grave threats, light threats, unjust vexation, or other Revised Penal Code offenses, possibly committed through ICT |
| Creating a fake account using another person’s name or photo | Computer-related identity theft under RA 10175 |
| Sending repeated sexual comments, requests, threats, or misogynistic/homophobic abuse online | Gender-based online sexual harassment under RA 11313, the Safe Spaces Act |
| Posting someone’s address, phone number, private data, or sensitive information without lawful basis | Possible Data Privacy Act violation under RA 10173 |
| Sharing intimate images or videos without consent | Anti-Photo and Video Voyeurism Act of 2009, RA 9995 |
| Online sexual exploitation, grooming, or sexualized abuse involving a child | RA 11930, the Anti-OSAEC and Anti-CSAEM Act; RA 7610 may also apply |
The correct charge matters. A complaint that simply says “cyber bullying” may be too vague. A better complaint explains the specific acts: what was posted, when, where, who saw it, how it harmed you, and why the account appears connected to a particular person or group.
Can a Criminal Complaint Be Filed If the Bully’s Real Name Is Unknown?
Yes. Philippine criminal procedure allows an accused whose true name cannot yet be ascertained to be described by a fictitious name, with a statement that the true name is unknown. If the true name later appears, the complaint, information, and court records may be amended to reflect the correct name. This is recognized under Rule 110, Section 7 of the Rules of Criminal Procedure. (Lawphil)
In real life, this usually works in stages:
- You file a report or complaint with the PNP Anti-Cybercrime Group, NBI Cybercrime Division, DOJ Office of Cybercrime, or prosecutor’s office.
- The case is initially treated as involving an unknown person or online alias.
- Investigators evaluate the screenshots, URLs, account names, phone numbers, emails, payment records, IP-related information, and other leads.
- Law enforcement may issue preservation requests or apply for cybercrime warrants when legally justified.
- If the person behind the account is identified, the complaint may proceed against that person.
This means you should not wait until you personally know the cyber bully’s real name before seeking help. Online evidence can disappear quickly, and platform records may be deleted or become harder to obtain over time.
Legal Bases Commonly Used Against an Unknown Cyber Bully
Cyber Libel Under RA 10175
Cyber libel is one of the most common complaints involving online attacks. Under Section 4(c)(4) of Republic Act No. 10175, the Cybercrime Prevention Act of 2012, libel under Article 355 of the Revised Penal Code is punishable when committed through a computer system or similar means. (Lawphil)
Libel under Article 353 of the Revised Penal Code generally involves a public and malicious imputation of a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or cause contempt against a person. (Lawphil)
For cyber libel, the usual elements are:
- There is a defamatory statement or imputation.
- It was published online or through a computer system.
- The victim is identifiable.
- Malice is present, either presumed by law or proven by facts.
- The accused is the author or legally responsible publisher.
A major limitation is that not every rude, offensive, or humiliating post is automatically cyber libel. The statement must meet the legal elements of libel. For example, “I hate this person” may be cruel, but it may not be libel. “This person stole company funds” or “this person is a scammer,” if false and publicly posted, may raise a more serious libel issue.
The Supreme Court has clarified that cyber libel is not a completely new crime separate from libel; it is libel committed through a computer system. In Causing v. People, the Court ruled that cyber libel prescribes in one year, and an April 2026 Supreme Court release states that the one-year period runs from discovery. (Lawphil)
Computer-Related Identity Theft
If the cyber bully uses your name, photo, profile, business identity, or personal information to impersonate you, the case may involve computer-related identity theft under Section 4(b)(3) of RA 10175. This is different from cyber libel. The issue is not only that the post is offensive, but that someone used identifying information without authority to cause harm, deceive others, or commit another offense. (Lawphil)
Examples include:
- A fake Facebook account using your name and photos to message people.
- A dummy account pretending to be you and posting sexual, defamatory, or fraudulent content.
- Someone using your identity to solicit money, spread rumors, or harass others.
Online Threats, Coercion, and Unjust Vexation
If the bully sends messages such as “I will hurt you,” “I will destroy your family,” “I will leak your photos,” or “I know where you live,” the case may involve threats under the Revised Penal Code. Article 282 covers grave threats, while other provisions may apply depending on the words used, the demand made, and the seriousness of the threat. (Supreme Court E-Library)
If the conduct is harassing, annoying, or distressing but does not fit neatly into libel or threats, authorities sometimes consider unjust vexation under Article 287 of the Revised Penal Code. This is fact-sensitive. The more specific and serious the acts are, the easier it is to identify the proper charge.
Gender-Based Online Sexual Harassment Under the Safe Spaces Act
Republic Act No. 11313, the Safe Spaces Act, covers gender-based sexual harassment in streets, public spaces, online spaces, workplaces, and educational institutions. It can apply to online conduct involving unwanted sexual remarks, misogynistic, transphobic, homophobic, or sexist attacks, repeated sexual messages, threats, or public sexual humiliation. (Lawphil)
This law is especially relevant when the bullying is sexual or gender-based, such as:
- Repeated obscene messages.
- Posting sexual rumors.
- Threatening to expose intimate details.
- Harassing someone because of sex, gender identity, or sexual orientation.
Data Privacy Complaints for Doxxing or Exposure of Personal Information
If the bully posted your address, contact number, government IDs, workplace, school, private photos, medical information, or other personal data, the Data Privacy Act of 2012, RA 10173, may be relevant. The National Privacy Commission accepts complaints from data subjects whose personal information has been misused, maliciously disclosed, improperly disposed of, or otherwise mishandled. (Lawphil)
For a privacy complaint, the key issue is not simply that the post embarrassed you. The stronger question is whether your personal or sensitive personal information was processed, disclosed, accessed, or used without a lawful basis.
Voyeurism, Intimate Images, and Deepfake-Style Abuse
If the bully shared, threatened to share, or manipulated intimate images or videos, RA 9995, the Anti-Photo and Video Voyeurism Act of 2009, may apply. The law penalizes taking, copying, reproducing, sharing, broadcasting, or showing certain sexual images or recordings without the required consent, including through the internet or mobile phones. (Lawphil)
If a minor is involved, the case becomes more urgent. RA 11930, the Anti-Online Sexual Abuse or Exploitation of Children and Anti-Child Sexual Abuse or Exploitation Materials Act, covers online sexual abuse or exploitation of children and child sexual abuse or exploitation materials. (Lawphil)
Where to File a Complaint Against an Unknown Cyber Bully
You may approach any of the following, depending on urgency, location, and the nature of the incident:
| Office | Best for | Practical notes |
|---|---|---|
| PNP Anti-Cybercrime Group (PNP-ACG) | Cybercrime reports, online harassment, fake accounts, threats, scams, identity-related cyber incidents | Often the first practical stop for victims who need police cybercrime assistance |
| NBI Cybercrime Division | More technical or serious cybercrime complaints, identity tracing, digital investigation | Useful when the case may require deeper investigation or coordination |
| DOJ Office of Cybercrime | Cybercrime coordination, preservation and production of data, international assistance concerns | The DOJ Office of Cybercrime is the central authority for cybercrime-related matters under RA 10175. (Department of Justice) |
| City or Provincial Prosecutor’s Office | Filing a complaint-affidavit for preliminary investigation once evidence is ready | Prosecutors determine whether a criminal case should be filed in court |
| National Privacy Commission | Doxxing, misuse, disclosure, or unauthorized processing of personal data | A notarized complaint in the NPC format is generally required. (National Privacy Commission) |
| School, DepEd, or university office | Student cyberbullying | Use this track together with criminal reporting if the conduct is serious |
| Barangay | Immediate safety documentation, local intervention, or known neighborhood offender | A barangay blotter can help document events, but it does not replace a cybercrime investigation |
For serious threats, sexual exploitation, stalking, child-related abuse, or risk of physical harm, go directly to law enforcement rather than relying only on platform reporting or barangay mediation.
Step-by-Step: How to File Against an Unknown Cyber Bully
1. Preserve the evidence before confronting the bully
Do not immediately delete messages, block the account, or argue publicly if doing so will cause evidence to disappear. First, preserve:
- Screenshots showing the post, comment, message, username, account URL, date, and time.
- Screen recordings showing how the post appears on the platform.
- Direct links or URLs to the profile, post, comment, group, page, video, or message thread.
- The account ID or handle, not just the display name.
- Names of people who saw the post.
- Copies of threats, emails, SMS, chat logs, or call logs.
- Proof of harm, such as employer messages, school reports, medical records, customer complaints, or witnesses.
- Any clue connecting the dummy account to a real person, such as writing style, phone number, mutual friends, payment accounts, email recovery hints, or repeated timing.
For screenshots, include the full screen when possible. Cropped screenshots can still help, but investigators and prosecutors prefer context: date, time, URL, username, and surrounding conversation.
2. Make a simple incident timeline
Write down events in order. This helps investigators understand the pattern.
Example:
| Date and time | What happened | Evidence |
|---|---|---|
| March 3, 2026, 9:15 PM | Fake account “Maria Truth” posted that I stole money from my employer | Screenshot, URL, witness |
| March 4, 2026, 8:10 AM | Same account sent me a message threatening to post my address | Messenger screenshot |
| March 5, 2026, 2:00 PM | My address was posted in a public group | Screenshot, group URL, witness |
A clear timeline is often more useful than a long emotional narrative. You can describe the fear, shame, anxiety, or damage caused, but anchor the complaint on concrete facts.
3. Report the content to the platform, but do not rely on that alone
Report the account to Facebook, Instagram, TikTok, X, YouTube, Telegram, Viber, or the relevant platform. Use the platform’s harassment, impersonation, privacy, or non-consensual intimate image reporting tool.
But remember: platform reporting is not the same as filing a criminal complaint. A platform may remove the content, suspend the account, or do nothing. It will usually not give you the real identity of the user without legal process.
4. File a report with PNP-ACG or NBI Cybercrime
Bring printed and digital copies of your evidence. Expect an initial interview. The investigator may ask:
- Who do you suspect and why?
- When did the harassment start?
- What accounts, numbers, emails, or usernames were used?
- Were there threats, sexual content, identity theft, or financial demands?
- Is the victim a minor?
- Did anyone else receive or see the posts?
- Has the content been deleted?
- Have you reported to the platform?
If the evidence is enough for further action, investigators may advise you to execute a sworn statement or complaint-affidavit.
5. Ask about preservation of computer data
Cyber evidence is time-sensitive. Under RA 10175, traffic data and subscriber information relating to communication services must be preserved for at least six months from the transaction, and content data must be preserved for six months from receipt of a preservation order from law enforcement authorities. (Lawphil)
A preservation request does not automatically mean the platform will immediately reveal the user’s identity to you. Preservation means the data should not be deleted while proper legal steps are pursued.
6. Understand when a cybercrime warrant may be needed
The Supreme Court’s Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC, governs applications for warrants and related orders involving preservation, disclosure, interception, search, seizure, examination, custody, and destruction of computer data in cybercrime investigations. (Office of the Court Administrator)
In practical terms, law enforcement may need court authority before obtaining certain data or examining devices. This is one reason cybercrime cases can take time. Investigators cannot simply hack, seize, or demand private content without following constitutional and procedural safeguards.
7. Prepare a complaint-affidavit for the prosecutor
A criminal complaint usually needs a sworn complaint-affidavit. For preliminary investigation, the DOJ lists requirements such as an Investigation Data Form, complaint-affidavit or sworn statement, and supporting evidence. (Department of Justice)
Your affidavit should clearly state:
- Your full name and personal details.
- The online accounts, numbers, or aliases used by the bully.
- A chronological narration of the acts.
- The exact words or posts complained of.
- Why the posts refer to you.
- How you preserved the evidence.
- Names of witnesses.
- The harm caused.
- Why you believe the unknown account is connected to a particular person, if you have a basis.
- A request for investigation and filing of appropriate charges.
If the offender is still unknown, identify the account as precisely as possible: “the person using the Facebook account named ___ with profile URL ___, whose true name is presently unknown.”
Evidence Checklist
| Evidence | Why it matters |
|---|---|
| Full screenshots with date, time, URL, and username | Shows publication, account identity, and context |
| Screen recordings | Helps prove the post existed on the platform |
| URLs and account links | Allows investigators to locate the exact post or account |
| Printed copies | Useful for filing and prosecutor review |
| Digital copies in USB/cloud | Helps preserve original quality |
| Witness affidavits | Proves others saw the post or received the messages |
| Proof of identity theft | Shows use of your name, photo, or personal data |
| Medical, employment, school, or business records | Shows actual damage or impact |
| Barangay blotter or police blotter | Supports timeline and urgency |
| Platform reports and responses | Shows you attempted to mitigate harm |
For electronic evidence, Philippine rules recognize electronic documents, but they must still be properly authenticated. The Rules on Electronic Evidence, A.M. No. 01-7-01-SC, apply when electronic documents or data messages are offered as evidence. (Lawphil)
Common Problems When the Cyber Bully Is Unknown
The account disappears before law enforcement acts
This is common. Preserve evidence early. Deleted posts may still be traceable in some cases, but it becomes harder. URLs, timestamps, screenshots, and screen recordings are important.
The platform is based abroad
Many major platforms are foreign companies. Philippine authorities may need to coordinate through proper channels, especially where subscriber data or content data is stored overseas. The DOJ Office of Cybercrime has a role in cybercrime-related coordination and international assistance. (Department of Justice)
The bully used a VPN, fake email, or prepaid number
This makes identification harder, not impossible. Investigators may look for other evidence: repeated language patterns, recovery numbers, linked accounts, payment trails, device evidence, witnesses, or mistakes made by the offender.
The victim only has cropped screenshots
Cropped screenshots are better than nothing, but they are often attacked as incomplete. Try to preserve the full post, URL, profile page, timestamp, and surrounding conversation.
The complaint is filed too late
Some offenses prescribe, meaning the legal time to file can expire. For cyber libel, the Supreme Court has affirmed a one-year prescriptive period from discovery. (Supreme Court of the Philippines) Other offenses may have different periods, so delay can seriously affect the case.
The post is offensive but not criminal
Not all cruel behavior becomes a criminal case. Some incidents may be better handled through platform takedown, school discipline, workplace HR processes, civil action for damages, barangay documentation, or privacy complaints.
The victim wants immediate takedown by the government
Government takedown is not automatic. In Disini v. Secretary of Justice, the Supreme Court struck down certain provisions of RA 10175 that violated constitutional rights, including Section 19 on restricting or blocking access to computer data without proper judicial safeguards. (Lawphil)
Practical Timeline: What to Expect
Timelines vary widely depending on the office, the evidence, the platform involved, and whether the suspect can be identified.
| Stage | Typical practical timeframe |
|---|---|
| Evidence gathering by victim | Same day to 1 week |
| Initial report to PNP-ACG or NBI | Same day to a few days, depending on availability |
| Initial assessment/interview | Same day or scheduled |
| Preservation request or technical case build-up | Days to weeks |
| Identification of unknown user | Weeks to months; longer if foreign platforms are involved |
| Prosecutor complaint and preliminary investigation | Several weeks to several months |
| Court case after filing of Information | Months to years, depending on docket and complexity |
The biggest bottlenecks are usually incomplete evidence, deleted content, foreign platform data, anonymous accounts, and the need to connect the online account to a real person beyond speculation.
Special Situations
If the victim is a minor
If the victim is a child, involve a parent, guardian, school child protection committee, Women and Children Protection Desk when appropriate, PNP-ACG, NBI, or local social welfare office. If there is sexual content, grooming, coercion, or exploitation, RA 11930 and RA 7610 may apply, and the matter should be treated as urgent. (Lawphil)
If the bully is also a minor
The case may involve school discipline under RA 10627, child protection procedures, and the juvenile justice system. The response is different from cases involving adult offenders. The goal may include protection, intervention, accountability, and rehabilitation, depending on the facts.
If you are a foreigner being cyberbullied in the Philippines
Foreigners may file complaints in the Philippines if the crime has sufficient connection to the Philippines, such as when the victim is in the Philippines, the offender is in the Philippines, the post targets someone in the Philippines, or essential elements occurred here. Bring your passport, visa or immigration documents if relevant, local address, and notarized or properly authenticated documents if evidence comes from abroad.
If affidavits or records are executed outside the Philippines, they may need consular notarization or an apostille, depending on the country and intended use.
If the cyber bully is abroad
A Philippine complaint may still be possible, but enforcement becomes more complicated. Authorities may need international cooperation, platform data requests, or coordination through proper legal channels. The more serious the offense, the more realistic it is for agencies to prioritize cross-border steps.
Fees and Documents
Government filing costs for criminal complaints are usually minimal compared with civil cases, but practical expenses may arise for printing, notarization, legal assistance, travel, certified records, forensic services, or document authentication.
| Item | Usually needed? | Notes |
|---|---|---|
| Valid government ID | Yes | Passport, driver’s license, UMID, national ID, etc. |
| Complaint-affidavit | Yes | Must be sworn; notarization is commonly required |
| Investigation Data Form | Often | Required in prosecutor filings |
| Screenshots and URLs | Yes | Bring printed and digital copies |
| Witness affidavits | Helpful | Especially for publication, harm, and identification |
| Proof of damages | Helpful | Employment, school, business, medical, or psychological impact |
| Special Power of Attorney | Sometimes | If a representative files for a victim, especially abroad |
| Apostilled documents | Sometimes | For foreign-executed affidavits or official documents |
| NPC complaint form | For privacy cases | NPC requires a formal complaint format and notarization. (National Privacy Commission) |
Frequently Asked Questions
Can I file cyber libel if I do not know who owns the fake account?
Yes, you may report the account and start the complaint process even if the real person is unknown. The account should be identified by username, profile URL, screenshots, and other available details. The case becomes stronger if investigators later identify the person behind it.
Can the police force Facebook or TikTok to reveal who posted about me?
Not casually or instantly. Law enforcement generally needs proper legal process, and foreign platforms may require formal procedures. Investigators may preserve data and, when justified, pursue cybercrime warrants or coordination through proper channels.
Is a screenshot enough to file a cybercrime complaint?
A screenshot may be enough to begin a report, but it is usually not enough by itself to win a case. Stronger evidence includes URLs, timestamps, screen recordings, witness affidavits, account details, proof of harm, and evidence connecting the account to a real person.
What if the cyber bully deleted the post?
You can still report it if you preserved screenshots, links, recordings, witnesses, or notifications. Deleted content may be harder to prove, so act quickly. Ask investigators about preservation of data as early as possible.
Can I sue someone for calling me names online?
It depends on the words used. Mere insults may not always amount to cyber libel. But false factual accusations that dishonor or discredit you, especially if publicly posted and identifiable as referring to you, may support a cyber libel complaint.
Can I file a case if the cyber bully is using my photos?
Yes. Depending on the facts, this may involve identity theft, data privacy violations, cyber libel, unjust vexation, or other offenses. If the photos are intimate or sexual, RA 9995 or child protection laws may apply.
Should I go to the barangay first?
For serious cybercrime, threats, sexual harassment, identity theft, or anonymous online attacks, go directly to PNP-ACG, NBI, DOJ, or the prosecutor. A barangay blotter may help document the incident, but the barangay usually cannot identify anonymous online users or compel platforms to disclose data.
How long do I have to file a cyber libel case?
The Supreme Court has affirmed that cyber libel prescribes in one year from discovery. Because prescription issues can defeat a case, do not wait. Other offenses may have different prescriptive periods.
Can I ask for damages aside from criminal charges?
Yes. Some criminal cases allow civil liability to be pursued with the criminal action, unless reserved or handled separately. Depending on the facts, a separate civil action for damages under the Civil Code may also be considered, especially where reputation, privacy, business, employment, or emotional harm is involved.
What if the cyber bully is my ex-partner?
If the conduct involves threats, harassment, sexual humiliation, stalking, or abuse, additional laws may be relevant, including RA 9262 for violence against women and their children, RA 11313 for gender-based online sexual harassment, RA 9995 for intimate images, and RA 10175 for cybercrime. Preserve messages and report urgent threats promptly.
Key Takeaways
- You can file a report or complaint even if the cyber bully’s real name is unknown.
- Use the online alias, username, profile URL, phone number, email, or account link to identify the unknown offender as precisely as possible.
- Philippine procedure allows an accused to be described by a fictitious name if the true name cannot yet be ascertained.
- The strongest cases are built on complete digital evidence: screenshots, URLs, timestamps, recordings, witness affidavits, and proof of harm.
- “Cyber bullying” is usually charged under a specific law, such as cyber libel, threats, identity theft, Safe Spaces Act violations, data privacy violations, voyeurism, or child protection laws.
- Act quickly because online evidence can disappear and some offenses, especially cyber libel, have strict prescriptive periods.
- PNP-ACG, NBI Cybercrime, DOJ Office of Cybercrime, prosecutors, schools, and the National Privacy Commission may all play different roles depending on the facts.
- Do not rely only on blocking, reporting to the platform, or barangay blotter. For serious online abuse, start proper evidence preservation and legal reporting early.