Cybercrime Criminal Defense
Most people accused of a cybercrime learn about it secondhand: a mention of a case, a rumor of a warrant, a message from someone who heard something. What you do in the gap between hearing and knowing decides a great deal, and panic decides it badly.
STLAF defends the accused in cybercrime matters beyond libel: hacking and illegal access, computer-related fraud, identity theft, and the offenses that grow out of access disputes. If the accusation against you is cyber libel, your page is Cyber Libel: Filing and Defense, where the firm’s full libel practice lives; this page covers the rest of the law. One more thing before anything else: you will get no judgment here. Our job is your defense.
What we defend
STLAF defends the accused in RA 10175 matters beyond libel: illegal access, computer-related fraud, identity theft, data and system interference, and the offenses that grow out of access disputes.
These cases have recognizable shapes. The former employee accused of accessing systems they used every day until last month. The account dispute between people who once shared passwords, recast as hacking when the relationship soured. The fraud accusation assembled from transaction records that have another explanation. The professional or foreigner with a Philippine connection who discovers the law’s jurisdiction reaches further than expected. Our guide to RA 10175 explains the offenses themselves; this page is what we do when one of them carries your name.
What happens first, and what to do
If you have heard of a case against you, the first steps are to verify what actually exists, identify any document you received, and involve counsel before responding to anything.
Hearing about a case is not the same as a case existing. Whether a complaint has been filed, where, and at what stage can be verified, and that answer drives everything that follows. If a document has reached you, what it is matters more than what it threatens: a demand letter, a subpoena, and a warrant are different instruments requiring different responses, and the wrong response to the right document is how manageable situations become unmanageable. (Our cyber libel guide carries a plain-language triage table that applies here too.)
Two facts usually shrink the panic. A complaint passes through preliminary investigation, where you answer through a counter-affidavit and where weak cases end, before anything reaches a court. And the common offenses are bailable, with managed voluntary surrender available if a warrant ever issues, which means even the worst document on the list is a process, not a trapdoor.
How these cases come apart
Cybercrime cases are built on digital evidence and the element of acting without right, and both are places a defense is won: authorship, authority, intent, and how the evidence was gathered.
STLAF prosecutes cybercrime cases as well as defending them, which is exactly why it knows how they are built, and where they come apart. The element defenses are real: authorship and account attribution are genuinely contestable in a world of shared devices, compromised accounts, and impersonation; “without right” is the contested heart of access cases between parties who once had rights; and intent separates crime from conduct in fraud matters. The evidence defenses are just as real: digital evidence must be authenticated and intact, and evidence gathered outside the cybercrime warrant rules or in violation of other laws can be challenged. Our digital evidence practice carries that work.
Why STLAF
The defense practice is led by Atty. Gabriel D. Adora, a criminal law practitioner who has handled cybercrime cases, in a firm recognized by Legal 500, Mondaq, the International Bar Association, and as a Finalist at the ALB Philippine Law Awards 2025.
The firm’s natural strength is prosecution, and that is precisely the point: a defense built by people who know how the other side constructs these cases starts ahead. The practice sits inside STLAF’s wider International Cybercrime group, with the digital evidence and financial-records capability of a combined law and accountancy firm behind it.
Frequently asked questions
I heard there is a cybercrime case against me but received nothing. What do I do?
Verify before you panic. Whether a case exists, where, and at what stage can be established, and that answer, not the rumor, determines your next move.
Will I be arrested immediately?
No. Complaints pass through preliminary investigation first, the common offenses are bailable, and managed voluntary surrender exists if a warrant ever issues.
I am a foreigner. Can a Philippine cybercrime case reach me?
In defined circumstances, yes. Philippine cybercrime law can apply where part of the offense happened here, a Philippine computer system was used, or the harm fell on someone in the Philippines. In practice the reach is sharpest if you are in the country, travel here, or hold assets or a business here, because a Philippine criminal trial generally requires your presence for arraignment and cannot proceed in absentia, and reaching someone abroad depends on extradition, which is far from automatic. That is exactly why early Philippine counsel matters more, not less, when you are not from here.
I accessed an account or system I used to have rights to. Is that hacking?
“Without right” is the contested heart of these cases. Access disputes between former employers and employees, or between people who once shared access, are genuinely defensible, and the facts decide them.
Talk to us
An accusation is not a verdict, and the distance between the two is where defense work happens. If a cybercrime case has reached you, or you have reason to believe one is coming, talk to us before you respond to anything.