Sections 4 and 6 of Republic Act No. 10175 perform different jobs. Section 4 defines the Act’s principal cybercrime offenses. Section 6 covers crimes already punished under the Revised Penal Code or special laws when committed by, through, or with information and communications technology, generally prescribing a penalty one degree higher.
Quick answer
Section 4 covers attacks on computer data and systems, computer-related forgery, fraud and identity theft, and specified content-related offenses. Section 6 is an ICT-qualifying provision for existing crimes. A phone, computer, or online post does not erase the elements of the underlying offense.
Use Cybercode’s Cybercrime Philippines authority hub to move from the offense map into reporting, evidence and victim procedures.
Section 4 offense map
| Category | Offenses in the enacted text |
|---|---|
| Data and system offenses | Illegal access, illegal interception, data interference, system interference, misuse of devices, and cybersquatting |
| Computer-related offenses | Computer-related forgery, fraud, and identity theft |
| Content-related offenses | Cybersex, child pornography as then defined, unsolicited commercial communications, and online libel—subject to later law and constitutional rulings |
System and data offenses
Illegal access means access to all or part of a computer system without right. Illegal interception concerns technical interception of non-public transmissions without right. Data interference covers intentional or reckless alteration, damage, deletion, or deterioration of computer data without right. System interference targets conduct that hinders a computer or network’s functioning. Misuse of devices and cybersquatting have additional purpose, intent, and subject-matter requirements.
Forgery, fraud, and identity theft
These are not interchangeable. Forgery concerns inauthentic computer data intended to be acted upon as authentic. Fraud involves unauthorized data or system conduct, fraudulent intent, and the statute’s damage rule. Identity theft concerns intentional dealings in identifying information belonging to another person or entity without right. See the related guide to online estafa and computer-related fraud.
Constitutional limits after Disini
The enacted text must be read with Disini v. Secretary of Justice. The Supreme Court declared the unsolicited-commercial-communications offense unconstitutional and limited how aiding, abetting, attempt, and online libel can operate. For online libel, the ruling did not impose automatic liability on people who merely receive and react to a post; the conduct and role of each accused must be established.
How Section 6 works
- Identify an offense already defined by the Revised Penal Code or a special law.
- Prove every element of that offense.
- Establish the legally relevant use of ICT.
- Determine the base statutory penalty.
- Apply Section 6 only when its requirements and controlling jurisprudence permit it.
| Question | Section 4 | Section 6 |
|---|---|---|
| Source of offense | RA 10175 | Another penal statute |
| Role of ICT | Part of the cybercrime definition | Qualifies an existing crime |
| Penalty source | Section 8 and related law | Generally one degree above the underlying penalty |
Evidence to preserve
- Original messages, emails, files, and account records
- URLs, timestamps, headers, and transaction references
- Device, access, and system logs
- Proof of authorization or lack of authorization
- Records of identity, control, loss, or damage
Use the electronic-evidence checklist and avoid altering originals.
Frequently asked questions
Is every crime involving a phone covered by Section 6?
No automatic rule should be assumed. The underlying offense and legally relevant ICT component must be proven.
What does “one degree higher” mean?
It refers to the graduated penalties recognized by Philippine penal law, not simply adding one year.
Is hacking required?
No. The Act covers system offenses, computer-related offenses, specified content offenses, and qualifying existing crimes under Section 6.
Can merely sharing a post create online-libel liability?
Disini rejected automatic liability for people who merely receive and react to a post. The specific conduct remains decisive.
Primary legal authorities
Read the complete RA 10175 guide for the broader law.
General legal information only, not legal advice.

