Someone Used Your Wi-Fi for a Crime: Who Is Liable in the Philippines?

Photo: dlxmedia.hu on Unsplash.

Key Takeaways

• The user is the one who is liable. A crime committed through a computer system is punished one degree higher than the ordinary crime (RA 10175, Section 6), whoever owned the connection.
• Owning the network is not a crime. No Philippine law makes you criminally liable only because someone else misused your Wi-Fi. Aiding or abetting requires willful help.
• Being investigated is not the same as being liable. Your connection can still be the starting point of an investigation, and your devices can be examined under a cybercrime warrant.
• Piggybacking can itself be a crime. Using a network you have no permission to use may amount to illegal access, which the law defines as access to a computer system “without right”.
• Public Wi-Fi businesses have real duties. Under RA 11930, internet hotspots — which the law says include hotels, malls, restaurants and internet cafés — must report child sexual exploitation on their premises within 24 hours and install blocking software.
• The telco is a record-keeper, not a co-accused. It must preserve records, disclose them within 72 hours of a warranted order, and cooperate. Refusing an order is punishable; merely carrying traffic is not.
• Government free Wi-Fi is a blind spot. RA 10929 forbids the free public internet program from collecting user data, including anonymous traffic data — which can make tracing a crime committed on it much harder.
• A pocket Wi-Fi SIM is registered to you. Selling or transferring a registered SIM without complying with the SIM Registration Act is a crime of its own.

Jump to a Section

• Who is liable: the decision snapshot
• How a crime gets traced back to a Wi-Fi connection
• The person who used the Wi-Fi
• The home or personal Wi-Fi owner
• Public Wi-Fi: cafés, hotels, malls and piso Wi-Fi
• Government free Wi-Fi
• Is the telco or internet provider liable?
• How far liability goes, and to whom
• Your options and what to do next
• Evidence to keep
• How to make Wi-Fi safer for everyone
• Six worked scenarios
• Frequently asked questions
• Verification log
• Official sources

Who Is Liable: The Decision Snapshot

Four different parties can be pulled into a case that started on a Wi-Fi connection. Their exposure is very different. Each row is explained in its own section below.

Party	Criminal exposure	Civil or other exposure	Main law
Person who used the Wi-Fi	Yes. Full liability for the crime, penalty one degree higher if committed through ICT.	Damages to the victim.	RA 10175, Sections 4 to 8
Home Wi-Fi owner	No, unless they willfully aided, conspired or knowingly benefited.	Possible negligence claim, untested; parents answer for minor children.	RA 10175, Section 5; Civil Code, Articles 2176 and 2180
Public Wi-Fi business	No for the user’s crime, but yes if it breaks its own RA 11930 duties.	Data Privacy Act duties if it collects user data; liability for its employees.	RA 11930, Section 9(d); RA 10173
Telco or internet provider	No for merely providing access; yes for ignoring lawful orders.	Contract with its subscriber; data privacy duties.	RA 8792, Section 30; RA 10175, Sections 13, 14 and 20
Government free Wi-Fi program	Not liable for users’ crimes on the same access principle.	Barred from collecting user data.	RA 10929, Section 9

The pattern is simple: liability follows knowledge, intent and duty, not ownership of the router. The rest of this guide explains where each of those lines sits.

How a Crime Gets Traced Back to a Wi-Fi Connection

Understanding the trail explains why an innocent Wi-Fi owner is usually the first person contacted, and why the investigation should not end there.

1. The platform or victim records an IP address. A bank, a social media platform or an email server logs the address the activity came from, with a date and time.
2. The IP address points to a provider. Public IP ranges are assigned to telcos and internet providers, so investigators know which provider to ask.
3. The provider matches the address to a subscriber. RA 11930 requires internet service providers to maintain logs of each and every subscriber and the IP address assigned to each and every subscriber at a given date and time (Section 9(b)(3)). RA 10175 requires service providers to preserve traffic data and subscriber information for at least six months (Section 13).
4. Disclosure needs a court warrant. Under Section 14 of RA 10175, law enforcement, after securing a court warrant, can order a service provider to disclose subscriber information and traffic data within 72 hours, in relation to a complaint officially docketed and assigned for investigation. The Supreme Court’s Rule on Cybercrime Warrants (A.M. No. 17-11-03-SC, effective 15 August 2018) governs how these warrants are applied for and issued.
5. The subscriber is not necessarily the user. The provider can only say which account had that address. Everyone connected to that account’s router shares it. Identifying the actual person takes device evidence, router records, account activity and witnesses.

That last step is where a Wi-Fi owner’s own records matter most. Our guide on whether an IP address can be used as evidence explains why an IP address alone usually does not prove who committed an online act.

Two limits protect the subscriber along the way. The Supreme Court in Disini v. Secretary of Justice (G.R. No. 203335, 2014) struck down Section 12 of RA 10175, which had allowed real-time collection of traffic data without a court warrant. And Section 18 of the same law makes evidence procured without a valid warrant, or beyond its authority, inadmissible.

The Person Who Used the Wi-Fi

The person who actually commits the crime bears the full criminal liability, wherever the connection came from. Borrowing, buying or stealing someone else’s connection does not transfer that liability to the owner.

• Crimes under the Revised Penal Code or special laws committed through ICT — estafa, threats, and others — are covered by RA 10175 and punished one degree higher than the ordinary penalty (Section 6).
• Cybercrimes proper — illegal access, data interference, computer-related fraud, identity theft, cyber libel — carry their own penalties. For the offenses in Sections 4(a) and 4(b), Section 8 provides prision mayor, or a fine of at least ₱200,000 up to an amount matching the damage, or both.
• Prosecution under RA 10175 does not bar prosecution under other laws (Section 7), subject to the double-prosecution limits the Supreme Court drew in Disini for libel and child pornography.

Using someone’s Wi-Fi without permission can itself be a crime

Section 4(a)(1) of RA 10175 punishes the access to the whole or any part of a computer system without right. The law defines a computer system broadly enough to cover networked devices, and defines “without right” as conduct undertaken without or in excess of authority. Cracking a neighbor’s password, or getting onto a network you were never allowed to use, fits that language on its face. Section 4(a)(5) separately punishes using or distributing a password or access code, without right, with intent to commit a cybercrime.

Qualification: Cybercode found no Philippine decision applying illegal access to someone who simply joined an open home network. Treat this as a real legal risk, not a settled rule.

The Home or Personal Wi-Fi Owner

Direct answer: a home Wi-Fi owner is not criminally liable merely because someone else used the connection to commit a crime. The owner’s exposure depends on what they knew and did, not on whose name is on the internet bill.

Criminal liability needs willfulness

Section 5(a) of RA 10175 punishes any person who willfully abets or aids a cybercrime. In Disini, the Supreme Court held that Section 5 is void as applied to online libel, child pornography and unsolicited commercial communications, and valid as applied to illegal access, illegal interception, data and system interference, misuse of devices, cyber-squatting, computer-related forgery, fraud and identity theft, and cybersex (dispositive portion of the decision). Where it applies, Section 8 punishes aiding or abetting with imprisonment one degree lower than the penalty for the offense itself, or a fine of ₱100,000 to ₱500,000, or both. Even then, the word “willfully” does the work: lending your Wi-Fi password to a guest is not willful help with a crime the guest never told you about.

The picture changes if the owner:

• knew what the connection would be used for and provided it anyway;
• shared in the proceeds, for example renting out access to a known scam operation;
• deleted records or reset devices after learning of an investigation; or
• refused to comply with a lawful order — Section 20 of RA 10175 punishes noncompliance with orders issued under its enforcement chapter.

The home-as-venue rule for child exploitation

Section 4(l) of RA 11930 makes it unlawful to provide a venue for online sexual abuse or exploitation of children, and lists “houses, private homes” among the places covered. Its natural reading targets a place where abuse is carried out, and the Supreme Court has not applied it to an owner whose Wi-Fi was used remotely without their knowledge. Anyone who suspects this is happening in their home or on their network should report it immediately, not investigate it themselves.

Civil liability: possible, but untested

Article 2176 of the Civil Code makes a person who, by act or omission, causes damage to another through fault or negligence liable to pay for it. A victim could try to argue that an owner who left a network open, or handed out the password freely, was negligent. To succeed they would have to prove fault, actual damage, and that the owner’s omission — rather than the criminal’s own act — caused the loss. Cybercode found no Supreme Court decision holding a Wi-Fi owner liable on this theory.

Article 2180 is more concrete. It makes parents responsible for damage caused by minor children who live with them, and that responsibility ends only if the parents prove they observed all the diligence of a good father of a family to prevent the damage. If the person misusing the family Wi-Fi is your own minor child, civil liability to the victim can reach you.

Contract and SIM registration

• Your subscription contract. Your agreement with your provider is a contract, and Section 30 of RA 8792 expressly leaves contractual obligations untouched. Read your terms before reselling access to neighbors or running a paid hotspot from a home plan.
• Pocket Wi-Fi and SIM-based modems. The SIM Registration Act (Republic Act No. 11934) covers SIMs used in broadband and Wi-Fi devices. Under its implementing rules, selling or transferring a registered SIM without complying with the registration requirements is punishable by six months to six years of imprisonment, a fine of ₱100,000 to ₱300,000, or both. If you hand your pocket Wi-Fi to someone else for good, re-register it first. Our SIM Registration Act guide explains the process.

Public Wi-Fi: Cafés, Hotels, Malls and Piso Wi-Fi

A business that offers Wi-Fi to the public is not criminally liable for a customer’s crime, but it carries duties of its own, and breaking them is a separate offense.

RA 11930: the duties of every internet hotspot

RA 11930 defines an internet hotspot as any establishment or place that offers access to the internet, and names hotels or motels, malls, restaurants, internet cafés or kiosks, and public spaces. It also treats non-formal businesses that provide internet services as internet cafés or kiosks. Under Section 9(d), every internet hotspot, café or kiosk must:

1. notify the National Coordination Center against OSAEC and CSAEM within 24 hours of obtaining facts and circumstances of any violation of the Act committed within its premises;
2. install and update programs and software designed to detect sexually explicit activities involving children, and make sure such material is blocked or filtered; and
3. post clear, visible signs against OSAEC and CSAEM, in English and the local language, with local and national hotlines.

Section 10 sets the penalty for violating Section 9: prision mayor in its medium period and a fine of ₱1,200,000 to ₱2,000,000 for a first offense. A repeat offense carries a fine of ₱2,000,000 to ₱3,000,000, revocation of the license or franchise, and closure of the establishment where applicable. When the offender is a company, Section 11 reaches the owner, manager, directors or officers who participated in, knowingly permitted, or failed to prevent the offense.

Is a café a “service provider” under the Cybercrime Act?

RA 10175 defines a service provider as any public or private entity that provides to users of its service the ability to communicate by means of a computer system. On its face, that can include a business offering Wi-Fi. Section 14’s disclosure orders are addressed to any person or service provider holding the data. The practical point for owners: if your system keeps logs, treat them as potential evidence, and respond to warrants through counsel.

Data privacy duties for captive portals

A login page that asks for a name, mobile number, email or social media account is collecting personal information. The business then becomes a personal information controller under the Data Privacy Act (Republic Act No. 10173, Section 3(h)) and must implement reasonable and appropriate security measures (Section 20). Collect only what you need, say why, keep it only as long as needed, and protect it. Our Data Privacy Act compliance guide covers the steps.

Employees

Article 2180 of the Civil Code also makes owners and managers of an establishment responsible for damage caused by their employees in the service of the business. A staff member who misuses customer data from the Wi-Fi system can expose the business civilly.

If you sell internet access as a business, also check whether the Konektadong Pinoy Act registration rules reach your operation.

Government Free Wi-Fi

The Free Internet Access in Public Places Act (Republic Act No. 10929) created a free public internet program covering government offices, public schools, state universities, public hospitals and health centers, parks, plazas, libraries, airports, seaports and transport terminals. Section 9 contains a rule that matters for this topic:

The government shall respect the privacy of program users, and the administrator or manager of the program may not engage in the collection, use or disclosure of user data, including the collection of anonymous traffic data.

That is a strong privacy protection. It also sits uneasily with Section 13 of RA 10175, which requires service providers to preserve traffic data and subscriber information for six months. Cybercode found no issuance reconciling the two. In practice, a crime committed over a government free Wi-Fi hotspot may be traceable to the hotspot and no further, unless the platform or device evidence identifies the user.

Section 10 of RA 10929 also prohibits access to pornographic websites under the program, and Section 11 directs the Department of Information and Communications Technology to develop child-protection standards.

Is the Telco or Internet Provider Liable?

Direct answer: generally no, not for a customer’s crime committed over its network. But a telco has firm duties, and it can be liable for failing them.

The access shield

Section 30 of the Electronic Commerce Act (RA 8792) provides that a service provider that merely provides access is not subject to civil or criminal liability founded on the content of the electronic data or its publication, as long as it:

• does not have actual knowledge, and is not aware of facts making it apparent, that the material is unlawful;
• does not knowingly receive a financial benefit directly attributable to the unlawful activity; and
• does not directly commit, induce or cause the unlawful act.

The same section preserves obligations founded on contract, obligations under the provider’s license or regulatory regime, obligations imposed by any other law, and court-ordered injunctions to remove, block or preserve evidence.

What the telco must do

Duty	What the law requires	Source
Preserve records	Traffic data and subscriber information for at least six months from the transaction; one six-month extension on order.	RA 10175, Section 13
Keep the case data	Once the data is used in a case, the prosecutor’s transmittal notice requires preservation until the case ends.	RA 10175, Section 13
Disclose on warrant	Subscriber information and traffic data within 72 hours of an order issued under a court warrant.	RA 10175, Section 14
Log IP assignments	Keep logs of each subscriber and the IP address assigned at a given date and time.	RA 11930, Section 9(b)(3)
Report child exploitation	Notify the PNP or NBI within 48 hours of information that abuse is being committed using its facility.	RA 11930, Section 9(b)(1)
Block abuse material	Block child sexual abuse material within 24 hours of a sufficient notice.	RA 11930, Section 9(b)(2)
Protect SIM data	Disclose SIM registration data only on a subpoena based on a sworn complaint; keep it ten years after deactivation.	SIM Registration Act IRR, Sections 10(i) and 12

Failure to comply with orders under RA 10175’s enforcement chapter is punished as obstruction of justice under Presidential Decree No. 1829, with prision correccional in its maximum period, a fine of ₱100,000, or both, for each noncompliance (Section 20). Under RA 11930, an internet service provider’s failure to block abuse material within 24 hours of notice is prima facie evidence of knowledge, and violating Section 9 carries the penalty described in the public Wi-Fi section above.

What the telco owes you

A telco is also a personal information controller under the Data Privacy Act. It must protect your subscriber data and disclose it only on a lawful basis. If it hands your records to someone without legal process, you may file a complaint with the National Privacy Commission; our guide on filing a data privacy complaint explains how.

How Far Liability Goes, and to Whom

A single misuse of Wi-Fi can create four different kinds of liability, owed to different people. Mixing them up is the most common source of panic.

Kind of liability	Owed to	Who can face it	Where it is decided
Criminal	The State	The user; anyone who willfully aided, conspired or knowingly benefited	Prosecutor, then the Regional Trial Court designated as a cybercrime court
Civil	The victim	The user; possibly a negligent owner; parents or employers for others	Civil action, or with the criminal case
Regulatory	The State, through regulators	Public Wi-Fi businesses, telcos, personal information controllers	Prosecutor for RA 11930; National Privacy Commission for data privacy
Contractual	The provider or the other party	The subscriber who broke the service terms	The provider’s own process, then the courts

The chain stops where knowledge and fault stop. A guest who secretly runs a scam from your living room does not make you a scammer. A café that ignores obvious child exploitation on its premises is liable for its own failure, not for the abuser’s crime. A telco that ignores a warrant is liable for obstruction, not for the underlying fraud.

Section 21 of RA 10175 gives Regional Trial Courts jurisdiction over violations of the Act, including when any element was committed in the Philippines or when damage was caused to a person in the Philippines. Cases under RA 11930 go to the Family Court with territorial jurisdiction (Section 19).

Your Options and What to Do Next

1. Investigators say a crime came from your connection

1. Stay calm and do not destroy anything. Do not factory-reset the router, delete messages, or wipe devices. Destroying evidence can create liability you did not have.
2. Screenshot the router’s connected-device list and logs from its admin page, with the date and time visible. Many routers keep only recent history.
3. Write down everyone who had your Wi-Fi password during the relevant period: household members, guests, tenants, workers, neighbors.
4. Ask what document you received. A subpoena, a warrant and an informal invitation to the station are different things. You may ask for a copy.
5. Get counsel before giving a statement. If you cannot afford a lawyer, the Public Attorney’s Office and IBP legal aid chapters may help.
6. Use the preliminary investigation. If a complaint is filed, you can submit a counter-affidavit with your router records and witness list to show someone else used the connection.

Our guide on what happens after a cybercrime is reported walks through preservation, warrants and preliminary investigation.

2. You found out someone used your Wi-Fi without permission

1. Screenshot the unknown devices on the router’s device list before removing them.
2. Change the router admin password first, then the Wi-Fi password, and turn off WPS.
3. If there was harm — hacked accounts, stolen data, a crime traced to you — report it as possible illegal access to the PNP Anti-Cybercrime Group or the NBI Cybercrime Division (see where to report below). Our guide on where and how to report cybercrime lists the routes.
4. Keep a written note of when you discovered it and what you did. That record protects you if the connection is later linked to a crime.

3. You run public Wi-Fi

1. Install and keep updated filtering software that blocks child sexual abuse material, as RA 11930 Section 9(d) requires.
2. Post the required OSAEC and CSAEM signs with hotlines, in English and the local language.
3. Train staff to report suspected child exploitation to the National Coordination Center against OSAEC and CSAEM within 24 hours.
4. Separate the customer network from your business systems and point-of-sale.
5. If your login page collects personal data, publish a privacy notice and secure the data.
6. Decide your log policy with counsel, and route every law-enforcement request through a warrant check.

4. You are the victim of a crime committed over someone’s Wi-Fi

1. Report quickly. Provider records must be preserved for six months from the transaction, and investigators can extend that once — but only if someone asks in time.
2. Preserve your evidence: screenshots with visible URLs and timestamps, account IDs, transaction references, and any login alerts showing IP addresses. Our online scam evidence checklist covers the list.
3. File with the PNP Anti-Cybercrime Group or the NBI Cybercrime Division so a docketed complaint exists. Section 14 of RA 10175 ties disclosure orders to a valid complaint officially docketed and assigned for investigation, so this step is what lets investigators reach the provider’s records.
4. Consider civil recovery against the perpetrator once identified, and against anyone whose own fault or negligence contributed to the loss. A separate civil action based on quasi-delict (Article 2176) must be filed within four years (Civil Code, Article 1146).

Where to report, and why that office

Office	Use it when	Why it fits
PNP Anti-Cybercrime Group	You want a criminal complaint investigated and a case built.	RA 10175, Section 10 makes the PNP a lead enforcement agency with a dedicated cybercrime unit.
NBI Cybercrime Division	You want a criminal complaint investigated, especially a complex or multi-account case.	RA 10175, Section 10 gives the NBI the same mandate and its own cybercrime unit.
CICC hotline 1326	You need urgent help with a scam or unauthorised e-wallet or bank transfer.	The CICC’s Inter-Agency Response Center runs 1326, reported as toll-free and 24/7.
National Coordination Center against OSAEC and CSAEM	You suspect child sexual exploitation on a network or premises.	RA 11930, Section 9(d) names it as the office hotspots must notify within 24 hours.

Bring the same file to whichever office you choose: a written timeline, screenshots with URLs and timestamps, transaction references, login alerts showing IP addresses, router device lists if the connection is yours, and a valid ID. The CICC hotline details come from Philstar’s reporting on the CICC; see our CICC guide for what the center handles. No single filing deadline applies to every cybercrime complaint; the practical deadline is the provider’s six-month preservation period under Section 13 of RA 10175.

Not sure which situation you are in? Our free Scam or Hack Triage tool builds a step-by-step plan.

Evidence to Keep

The records below decide whether a Wi-Fi owner stays a witness or becomes a suspect, and whether a victim’s case can reach the actual user.

Evidence	Why it matters	Who keeps it
Router device list	Shows which devices were connected, often with names and hardware addresses.	Wi-Fi owner
Router or system logs	Can tie a device to a time window.	Wi-Fi owner or business
List of password holders	Identifies who else could have used the connection.	Wi-Fi owner
Subscriber and IP records	Links a public IP address to an account at a date and time.	Telco, released only on warrant
Platform login records	Show the IP address and device used for the account activity.	The platform, bank or e-wallet
Captive portal records	May identify the customer using public Wi-Fi.	Public Wi-Fi business
Victim’s screenshots and receipts	Prove what happened and when.	Victim

Screenshots and logs are not automatically admissible or conclusive. See our guides on computer logs as evidence and preserving electronic evidence.

How to Make Wi-Fi Safer for Everyone

The law assigns liability after something goes wrong. These steps make it less likely to happen. They are labelled by type, because a best practice is not a legal requirement.

At home (best practice)

The U.S. Cybersecurity and Infrastructure Security Agency (CISA, “Securing Your Home Wi-Fi”) recommends the following for home networks. They are not Philippine legal requirements, but they are the simplest protection against being wrongly linked to someone else’s crime.

• Change the router’s default admin password. Default passwords are easy to find online.
• Use the strongest encryption available, WPA3 where your devices support it.
• Turn off WPS, which lets devices join without the Wi-Fi password.
• Use a guest network with its own password for visitors, so your main password is never shared.
• Keep the router’s firmware updated, and replace routers that no longer receive updates.
• Change the Wi-Fi password when people leave — a tenant, a worker, a housemate.

For businesses (legal minimum plus best practice)

• Legal minimum: the three RA 11930 hotspot duties, and Data Privacy Act compliance if you collect customer data.
• Recommended: short terms of use on the login page stating that illegal use is prohibited; a separate network for customers; and a written procedure for law-enforcement requests.

For Wi-Fi users on public networks (best practice)

• Assume public Wi-Fi traffic can be seen by others on the network. Avoid banking on unfamiliar networks.
• Check the network name with staff, because fake hotspots copy real names.
• Turn on multi-factor authentication for important accounts; see our password security guide.

For regulators (editorial recommendation)

Two gaps would benefit from official guidance: how the no-data-collection rule for government free Wi-Fi under RA 10929 works alongside the preservation duty in RA 10175, and what records, if any, private hotspots are expected to keep. Both questions are open today, and victims, businesses and investigators are left to guess. Our overview of gaps in Philippine cybercrime law covers related issues.

Six Worked Scenarios

1. The tenant scammer

A boarder uses the landlord’s Wi-Fi to run an online selling scam. The platform’s records lead police to the landlord’s account. The boarder is liable for the fraud. The landlord, who had no knowledge, is a witness, and should hand over the router records and the boarder’s details through counsel.

2. The teenager

A 16-year-old uses the family Wi-Fi to harass a classmate. The parents are not criminally liable for their child’s act. The victim’s family may seek damages from the parents under Article 2180 unless the parents prove they exercised due diligence. The child’s own case follows the Juvenile Justice and Welfare Act.

3. The neighbor who cracked the password

A neighbor breaks into a household’s secured network and uses it to access other people’s accounts. The neighbor faces illegal access and possibly misuse of devices, on top of whatever was done with the accounts. The household is a victim.

4. The coffee shop

A customer on a café’s Wi-Fi commits online fraud. The café is not liable for the fraud. If staff saw a customer accessing child sexual abuse material and did nothing for days, the café faces its own RA 11930 liability for failing to report within 24 hours.

5. The piso Wi-Fi vendo

A sari-sari store runs a coin-operated Wi-Fi machine. RA 11930 treats non-formal businesses that provide internet services as internet cafés or kiosks, so the owner has hotspot duties: filtering, signage and reporting. The owner is not liable for users’ crimes it did not know about.

6. The plaza hotspot

A threat is sent from a municipal plaza’s free Wi-Fi. The program is barred from collecting user data, so the trail may end at the hotspot. Investigators will turn to the platform’s records, CCTV and device evidence instead. This is why victims should preserve every detail they can.

Frequently Asked Questions

Can I go to jail if someone used my Wi-Fi to commit a crime in the Philippines?

Not merely for owning the connection. Philippine law punishes the person who committed the crime and anyone who willfully aided it. You can still be investigated, so keep your router records and get counsel if contacted.

Is the telco liable if its internet was used for a crime?

Generally no. Section 30 of the Electronic Commerce Act shields a provider that merely provides access, unless it knew of the unlawful act, profited from it or induced it. A telco can be liable for ignoring lawful preservation or disclosure orders.

Is using my neighbor’s Wi-Fi without permission illegal?

It can be. Section 4(a)(1) of the Cybercrime Prevention Act punishes access to a computer system without right. No Philippine decision has applied it to an open home network, but using a network you were not allowed to use is a real legal risk.

Can police get my details from my internet provider?

Yes, with a court warrant. Under Section 14 of RA 10175, law enforcement can order a provider to disclose subscriber information and traffic data within 72 hours, in relation to a docketed complaint. SIM registration data is released only on a subpoena based on a sworn complaint.

How long do telcos keep records of who used an IP address?

At least six months from the transaction under Section 13 of RA 10175, with one six-month extension on order, and until the case ends once the data is used as evidence. RA 11930 also requires providers to log which IP address each subscriber had at a given date and time.

Does a café or hotel have to report crimes on its Wi-Fi?

For online sexual abuse or exploitation of children, yes. RA 11930 requires internet hotspots, including hotels, malls and restaurants, to notify the national coordination center within 24 hours, install blocking software and post signage. There is no general duty to monitor customers for every crime.

Is it legal to share my Wi-Fi password with neighbors?

No law prohibits it, but your provider’s contract may restrict reselling or sharing, and anyone you share with can be traced to your account. Use a guest network and change the password when people move out.

Can free government Wi-Fi be traced?

Less easily. RA 10929 bars the free public internet program from collecting user data, including anonymous traffic data. Investigators may have to rely on platform records, device evidence and CCTV instead.

Verification Log

What this guide checked, and what it could not confirm.

Claim	Source checked	Result
Offenses, penalties, preservation, disclosure, noncompliance, jurisdiction	RA 10175, full text	Verified, Sections 3 to 8, 13, 14, 18, 20 and 21
Aiding or abetting scope; Section 12 struck down	Disini v. Secretary of Justice, G.R. No. 203335	Verified from the decision text
Access-provider shield and its exceptions	RA 8792, Section 30	Verified
Hotspot and ISP duties, penalties	RA 11930, Sections 3, 4, 9 to 11 and 19	Verified from the full text
No data collection on government free Wi-Fi	RA 10929, Section 9	Verified
SIM transfer penalty; SIM data disclosure	SIM Registration Act IRR, Sections 12 and 14	Verified from the NTC circular
Supreme Court ruling on Wi-Fi owner negligence	Searched	None found; stated as untested
Official hotline numbers	Not verified this run	None published here; see our reporting guide

Official Sources

• Republic Act No. 10175, Cybercrime Prevention Act of 2012 — Senate Legislative Digital Resources
• Disini v. Secretary of Justice, G.R. No. 203335, 11 February 2014 — Supreme Court decision (National Library of the Philippines digital collection)
• Republic Act No. 8792, Electronic Commerce Act of 2000 — full text (Government Procurement Policy Board)
• Republic Act No. 11930, Anti-OSAEC and Anti-CSAEM Act — full text
• Republic Act No. 10929, Free Internet Access in Public Places Act — Senate Legislative Digital Resources
• Republic Act No. 10173, Data Privacy Act of 2012 — National Privacy Commission
• Republic Act No. 386, Civil Code of the Philippines (Articles 1146, 2176 and 2180) — Senate Legislative Digital Resources
• NTC Memorandum Circular No. 001-12-2022, Implementing Rules and Regulations of the SIM Registration Act (Republic Act No. 11934), Sections 10(i), 12 and 14
• Rule on Cybercrime Warrants (A.M. No. 17-11-03-SC), effective 15 August 2018 — WIPO Lex record
• Report scams to hotline 1326 — Philstar (CICC Inter-Agency Response Center)
• Securing Your Home Wi-Fi — U.S. Cybersecurity and Infrastructure Security Agency (technical best practice, not Philippine law)

Related Guides

• Can an IP address be used as evidence? — why an IP address does not identify a person by itself
• RA 10175 Cybercrime Prevention Act guide — every offense and penalty
• Where and how to report cybercrime — PNP-ACG, NBI and other routes
• What happens after you report cybercrime — preservation, warrants and investigation
• Unauthorized account access — what to do after a hacked login
• OSAEC and CSAEM Act guide — the full RA 11930 framework
• Electronic Commerce Act guide — RA 8792 and service providers
• Data Privacy Act guide — duties of anyone collecting personal data
• SIM Registration Act guide — pocket Wi-Fi and SIM transfers
• Cybersecurity checklist for Philippine businesses — network basics for shops and offices
• Hacked or scammed help directory — banks, wallets, telcos and platforms

About This Guide

Author: Cybercode.ph Editorial Team.

Reviewer: this page has not been reviewed by a named external legal reviewer. Instead of a reviewer credit, the page publishes the verification log above, which records what was checked and what could not be confirmed.

Sources rechecked as of: 2 October 2026

Cybercode.ph provides general educational information about technology, cybersecurity, privacy, and related legal issues. It is not a substitute for legal, cybersecurity, or professional advice for a specific situation.