How Can You File Cyber Libel Charges Against Anonymous Trolls?

Introduction

Anonymous social media accounts do not automatically shield their operators from criminal liability. When an online post publicly imputes a crime, vice, defect, or other circumstance that tends to dishonor, discredit, or expose another person to contempt, the publication may constitute libel if the required elements are present.

Philippine law recognizes the use of a computer system as a means of committing libel. The principal difficulty in cases involving anonymous “trolls” is usually not the legal classification of the post, but the identification of the person who created or controlled the account. This requires the preservation of digital evidence and coordination with the appropriate law-enforcement agencies, including the National Bureau of Investigation Cybercrime Division.

What Is Cyber Libel?

Cyber libel is libel committed through a computer system or similar technology. Section 4(c)(4) of R.A. No. 10175, in relation to Articles 353 and 355 of the Revised Penal Code, applies when defamatory material is published online.

In Disini, Jr., et al. v. The Secretary of Justice, et al., G.R. No. 203335, 2014, the Supreme Court held that online libel is constitutionally valid as to the original author of the post. The Court invalidated its application to persons who merely receive and react to the post. The Court also emphasized that cyber libel is not an entirely new crime; it is ordinary libel committed through a computer system.

The usual elements of libel are:

• An allegation of a discreditable act or condition concerning another person;
• Publication of the allegation to a third person;
• Identifiability of the person defamed; and
• Malice, unless an applicable exception is established.

A post may be actionable even if the victim is not named expressly, provided that readers can reasonably identify the person being referred to from the post and its surrounding circumstances.

When Does an Anonymous Post Become Criminally Actionable?

Not every offensive, inaccurate, or unpleasant online statement is cyber libel. The post must contain an imputation that tends to cause dishonor, discredit, contempt, hatred, or ridicule, and the prosecution must establish the other elements of libel beyond reasonable doubt.

For example, an accusation that a named business owner stole client funds, committed fraud, or engaged in a specific criminal act may be defamatory if published to other users and made with the required malice. A mere expression of opinion, ordinary criticism, or a statement that does not identify the victim may not satisfy the elements.

The context is important. Investigators and prosecutors will ordinarily examine the exact words used, the audience that received the post, the account’s privacy settings, the identity of the person referred to, and evidence showing that the post was authored or controlled by the respondent.

Why Identification of the Anonymous Account Matters

A criminal complaint cannot ordinarily prosper against an unidentified “troll” without evidence linking the online account to a real person. A profile name, display photograph, or telephone number appearing on the account may be useful, but these details are not necessarily sufficient to prove the operator’s identity.

Digital evidence may include the account URL, username, profile information, screenshots, original post links, timestamps, comments, direct messages, email addresses, telephone numbers, payment records, device information, and statements from persons who saw the post or communicated with the account operator.

Evidence should be preserved before the material is deleted, edited, or placed behind privacy restrictions. Screenshots should not be the only evidence where the original post, account link, platform records, or witness testimony can still be obtained.

How to Coordinate with the NBI Cybercrime Division

The complainant may report the incident to the NBI Cybercrime Division and request assistance in documenting and investigating the anonymous account. The report should be supported by a complete and organized evidence package.

The complainant should prepare:

• A chronological narrative identifying when the post was discovered and how it spread;
• Clear screenshots showing the complete post, account name, account URL, date, time, comments, and shares;
• The original links to the account and the defamatory material;
• Information identifying the victim and explaining why reasonable readers understood the post to refer to that person;
• Names and contact details of witnesses who viewed the material or can explain its publication; and
• Copies of prior demands, platform reports, police reports, or other relevant communications.

The complainant should specifically ask the NBI to determine whether available platform, subscriber, registration, traffic, or other digital records can identify the account operator. Disclosure of protected subscriber or registration information generally requires compliance with the applicable legal process and privacy safeguards.

Under the Anti-Online Sexual Abuse or Exploitation of Children and Anti-Child Sexual Abuse or Exploitation Materials Act, internet intermediaries may be required to provide subscriber or registration information and traffic data pursuant to a subpoena issued by the PNP, NBI, or prosecutor, subject to the conditions stated in the law. That provision concerns OSAEC and CSAEM investigations and should not be treated as a general shortcut for obtaining records in every cyber libel case.

What Can the NBI Investigation Establish?

A cybercrime investigation may seek to connect the anonymous account with a particular person through available digital and documentary evidence. Possible investigative leads may include account-registration information, login or access records, IP addresses, associated email accounts, telephone numbers, devices, payment information, and communications.

These records do not automatically establish guilt. They must be authenticated and connected to the creation, control, or publication of the defamatory material. An IP address, for example, may identify a connection or location but may not by itself prove which individual used the device.

The investigation may also determine whether the account was hacked, shared by multiple persons, operated through a proxy, or created using false registration details. The final complaint should therefore identify the evidence that links the respondent to the original publication, not merely to the existence of the account.

Filing the Complaint-Affidavit

Once sufficient identifying evidence is available, the complainant may file a complaint-affidavit with the appropriate city or provincial prosecutor’s office. The complaint should state the exact defamatory words, the date and place of discovery or publication, the manner of publication, the persons who saw the material, and the evidence linking the respondent to the account.

The complaint should attach the original digital materials where available, authenticated screenshots, affidavits of witnesses, certifications or reports concerning the electronic evidence, and records obtained through lawful investigative process.

The prosecutor will determine whether probable cause exists. The complainant must show more than that an offensive post appeared on an anonymous account. The evidence should reasonably support all material elements of libel and provide a basis for identifying the person who authored or controlled the post.

Prescription of Cyber Libel

In Causing v. People of the Philippines, et al., G.R. No. 258524, 2023, the Supreme Court held that cyber libel is governed by the prescriptive periods under Articles 90 and 91 of the Revised Penal Code, rather than by the general rule under Act No. 3326.

The Court ruled that the one-year prescriptive period for libel under paragraph 4 of Article 90 of the Revised Penal Code applies. The period is reckoned from discovery by the offended party, the authorities, or their agents—not necessarily from the original date of online publication.

This rule makes prompt reporting important. A complainant should preserve the evidence and begin coordination with law enforcement as soon as the defamatory material is discovered.

Penalty and Prosecutorial Considerations

Section 6 of R.A. No. 10175 provides that crimes under the Revised Penal Code committed through information and communications technologies are subject to a penalty one degree higher than that imposed under the Revised Penal Code, subject to the governing law and jurisprudence.

In People of the Philippines v. Soliman, G.R. No. 256700, 2023, the Supreme Court recognized that the court may impose a fine alone, instead of imprisonment, for online libel when the fine is within the legally prescribed range and the circumstances justify that penalty.

The penalty does not eliminate the need to prove the offense. The prosecution must still establish the defamatory imputation, publication, identifiability, malice, authorship, and other applicable requirements.

Important Limits on Liability for Sharing or Reacting

In Disini, the Supreme Court declared the cyber libel provision valid as to the original author of the post but unconstitutional as applied to persons who merely receive and react to it. Accordingly, a person should not be treated as criminally liable for cyber libel solely because that person viewed or reacted to another person’s post.

The situation may differ when the person creates an independent defamatory publication, republishes the material in a manner constituting a separate publication, or performs acts that independently satisfy the elements of another offense. The precise conduct and the applicable charging theory must be examined carefully.

Cyber Libel and Data Privacy Claims

The same incident may also raise data privacy concerns if the post discloses personal or sensitive personal information without a lawful basis. The National Privacy Commission has held in recent decisions that unauthorized online disclosure may result in liability under the Data Privacy Act, even when the disclosure is made by a private individual.

In NPC 20-287, the National Privacy Commission addressed an online post containing personal information and treated unauthorized processing and unauthorized disclosure as distinct issues. In NPC 21-085, it likewise distinguished malicious disclosure from unauthorized disclosure, finding that a disclosure may be unlawful even when malicious intent is not sufficiently established.

These administrative privacy proceedings are separate from a cyber libel prosecution. A complainant should avoid publicly releasing additional personal information while attempting to expose the anonymous account, because doing so may create independent legal risks.

Common Mistakes to Avoid

• Editing or cropping the evidence. Preserve complete copies showing the account, URL, date, time, and surrounding context.
• Publicly doxxing the suspected author. Do not publish a suspected person’s address, identification documents, telephone number, or other personal data without a lawful basis.
• Assuming that an IP address proves authorship. Additional evidence is usually needed to establish who actually controlled the account.
• Waiting until the post disappears. Promptly preserve evidence and report the matter to law enforcement and the platform.
• Charging every person who shared or reacted. The original author and persons who merely received or reacted to a post are treated differently under Disini.

Recommended Steps for Victims

First, preserve the post and related account information through screenshots, downloaded copies, web archives where lawful, witness affidavits, and other reliable means. Second, report the material to the social media platform without deleting or altering the original evidence.

Third, consult counsel and submit a detailed report to the NBI Cybercrime Division or other appropriate law-enforcement agency. The report should request assistance in identifying the account operator through lawful investigative and evidentiary procedures.

Fourth, file the complaint-affidavit promptly with the appropriate prosecutor’s office once the evidence sufficiently identifies the suspected author. The complaint should focus on the original publication and should attach evidence supporting each element of cyber libel.

Conclusion

Anonymous social media accounts are not beyond the reach of Philippine law, but a successful cyber libel case requires more than an offensive screenshot. The complainant must preserve reliable digital evidence, establish that the post was defamatory and published, identify the person defamed, and obtain evidence linking the anonymous account to the accused.

Coordination with the NBI Cybercrime Division may assist in identifying the account operator, but investigative records must be obtained and presented according to law. Victims should act promptly because cyber libel is subject to a one-year prescriptive period reckoned from discovery under Causing v. People.

About Nicolas and De Vega Law Offices

 Nicolas and de Vega Law Offices is a full-service law firm in the Philippines.  You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines.  You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com.