CyberCode.ph · Philippines

Cybercrime Offenses and Higher Penalties: RA 10175 Sections 4 and 6

Last updated September 28, 2026 · Practical privacy, cybersecurity and technology-law guidance

Sections 4 and 6 of Republic Act No. 10175 perform different jobs. Section 4 defines the Act’s principal cybercrime offenses. Section 6 covers crimes already punished under the Revised Penal Code or special laws when committed by, through, or with information and communications technology, generally prescribing a penalty one degree higher.

Quick answer

Section 4 covers attacks on computer data and systems, computer-related forgery, fraud and identity theft, and specified content-related offenses. Section 6 is an ICT-qualifying provision for existing crimes. A phone, computer, or online post does not erase the elements of the underlying offense.

Use Cybercode’s Cybercrime Philippines authority hub to move from the offense map into reporting, evidence and victim procedures.

Section 4 offense map

Category Offenses in the enacted text
Data and system offenses Illegal access, illegal interception, data interference, system interference, misuse of devices, and cybersquatting
Computer-related offenses Computer-related forgery, fraud, and identity theft
Content-related offenses Cybersex, child pornography as then defined, unsolicited commercial communications, and online libel—subject to later law and constitutional rulings

System and data offenses

Illegal access means access to all or part of a computer system without right. Illegal interception concerns technical interception of non-public transmissions without right. Data interference covers intentional or reckless alteration, damage, deletion, or deterioration of computer data without right. System interference targets conduct that hinders a computer or network’s functioning. Misuse of devices and cybersquatting have additional purpose, intent, and subject-matter requirements.

Forgery, fraud, and identity theft

These are not interchangeable. Forgery concerns inauthentic computer data intended to be acted upon as authentic. Fraud involves unauthorized data or system conduct, fraudulent intent, and the statute’s damage rule. Identity theft concerns intentional dealings in identifying information belonging to another person or entity without right. See the related guide to online estafa and computer-related fraud.

Constitutional limits after Disini

The enacted text must be read with Disini v. Secretary of Justice. The Supreme Court declared the unsolicited-commercial-communications offense unconstitutional and limited how aiding, abetting, attempt, and online libel can operate. For online libel, the ruling did not impose automatic liability on people who merely receive and react to a post; the conduct and role of each accused must be established.

How Section 6 works

  1. Identify an offense already defined by the Revised Penal Code or a special law.
  2. Prove every element of that offense.
  3. Establish the legally relevant use of ICT.
  4. Determine the base statutory penalty.
  5. Apply Section 6 only when its requirements and controlling jurisprudence permit it.
Question Section 4 Section 6
Source of offense RA 10175 Another penal statute
Role of ICT Part of the cybercrime definition Qualifies an existing crime
Penalty source Section 8 and related law Generally one degree above the underlying penalty

Evidence to preserve

  • Original messages, emails, files, and account records
  • URLs, timestamps, headers, and transaction references
  • Device, access, and system logs
  • Proof of authorization or lack of authorization
  • Records of identity, control, loss, or damage

Use the electronic-evidence checklist and avoid altering originals.

Frequently asked questions

Is every crime involving a phone covered by Section 6?

No automatic rule should be assumed. The underlying offense and legally relevant ICT component must be proven.

What does “one degree higher” mean?

It refers to the graduated penalties recognized by Philippine penal law, not simply adding one year.

Is hacking required?

No. The Act covers system offenses, computer-related offenses, specified content offenses, and qualifying existing crimes under Section 6.

Can merely sharing a post create online-libel liability?

Disini rejected automatic liability for people who merely receive and react to a post. The specific conduct remains decisive.

Primary legal authorities

Read the complete RA 10175 guide for the broader law.

General legal information only, not legal advice.

CyberCode updates

Get practical updates on Philippine technology law, data privacy, cybersecurity, and AI.

Email activity tracking

Unsubscribe any time. See our privacy policy below.