Quick answer

Cyber libel is generally committed when a person publishes online a defamatory allegation that identifies another person and is malicious under Philippine libel law. The offense is punished under Section 4(c)(4) of the Cybercrime Prevention Act of 2012, read with Articles 353, 354 and 355 of the Revised Penal Code.

If you intend to complain, preserve the post and its electronic context immediately, identify the author and publication date, and bring the evidence to a lawyer, the appropriate prosecution office, the NBI Cybercrime Division or the PNP Anti-Cybercrime Group. Do not rely on a screenshot alone if the original URL, account data or device may still be preserved.

If you receive a subpoena, complaint, information, warrant or court notice, speak to a criminal-defense lawyer at once. Do not ignore the deadline, contact the complainant to pressure a withdrawal, delete evidence, or post a public “explanation” without legal advice.

The present Supreme Court rule is especially important: cyber libel prescribes in one year from discovery of the allegedly defamatory publication by the offended party or the authorities or their agents. This was affirmed by the Supreme Court En Banc in Causing v. People, G.R. No. 258524, April 8, 2026. Because prescription, republication and interruption of the period can depend on exact dates and procedural acts, obtain case-specific advice well before the year expires.

What the prosecution must prove

Cyber libel is not established merely because an online statement is insulting, embarrassing, inaccurate or damaging. The prosecution must prove every element beyond reasonable doubt, including:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status or circumstance tending to dishonor, discredit or place a person in contempt.
Publication. The statement was communicated to at least one person other than the person allegedly defamed. A public Facebook post, online article, group-chat message, email copied to others, video, podcast or comparable computer-mediated communication may satisfy this requirement, depending on the evidence.
Identification. The complainant was named or was sufficiently identifiable to people who saw the publication. A nickname, photograph, position, contextual clues or a combination of details may be enough even without a complete name.
Malice. Article 354 generally presumes a defamatory imputation malicious, even if true, unless it falls within a recognized privileged occasion. The presumption is not conclusive and may be overcome by the evidence. When constitutional protections for speech concerning public officials, public figures or matters of public interest apply, the prosecution may have to establish actual malice—knowledge of falsity or reckless disregard of whether the statement was false.
Use of a computer system or similar means. The libelous publication must have been made through information and communications technology within Section 4(c)(4) of Republic Act No. 10175.
The accused’s responsibility for the publication. The prosecution must connect the accused to the account, device and actual act of publication with admissible evidence. Ownership of a name or profile does not automatically prove who authored a particular post.

The Supreme Court sustained cyber libel’s constitutionality but limited liability to the person who authors the libelous statement. It did not treat people who merely receive and react to it as authors under the challenged provision. Whether a person who adds a defamatory caption, independently republishes material or participates in creating it may be liable depends on what that person actually did and what can be proved. See Disini v. Secretary of Justice.

Statements that may be protected

Freedom of expression does not create a blanket right to defame, but neither does every harsh statement create criminal liability. Important distinctions include the following.

Opinion versus an assertion of fact

Courts examine the words in their full setting, not merely the label “opinion.” Rhetorical criticism, satire or value judgment may be protected, while an “opinion” that implies undisclosed, false and defamatory facts may still be actionable.

Truth is not always enough by itself

Under Article 361 of the Revised Penal Code, proof of truth may support acquittal when the matter charged as a crime was true and the publication was made with good motives and for justifiable ends. The statutory requirements and constitutional rules must be applied to the particular publication; “it was true” should not be treated as an automatic defense in every case.

Privileged communications

Article 354 recognizes qualifiedly privileged occasions, including:

a private communication made in the performance of a legal, moral or social duty; and
a fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts of public officers.

The privilege may be defeated by proof of actual malice. Its protection also depends on necessity, relevance, proper recipients, good faith and the publication’s actual wording and circulation.

Some communications are absolutely privileged under constitutional or other controlling rules, such as statements made in protected legislative proceedings. The scope of any privilege should be assessed by counsel rather than assumed.

Fair criticism and public-interest speech

Public officials and public figures are open to robust criticism concerning their conduct and matters of legitimate public concern. Constitutional protection is strongest where speech contributes to public discussion. It does not protect knowingly false factual accusations or reckless publication in every circumstance.

Private messages can still be published

Sending a statement privately to the person concerned generally does not satisfy publication unless someone else receives or learns of it. A message sent to coworkers, relatives, clients or group-chat members may constitute publication. A limited audience can affect context and damages, but does not necessarily eliminate the offense.

The one-year deadline

In its April 8, 2026 En Banc action in Causing v. People, the Supreme Court affirmed that cyber libel prescribes in one year, rather than 12 or 15 years. The period runs from discovery by the offended party, the authorities or their agents.

Treat the earliest provable discovery date as critical. Record:

when the complainant first saw or was informed of the post;
when a witness, police officer or other authority discovered it;
the original publication date and time;
whether the content was later edited, reposted or published through another account; and
the date a formal complaint was filed.

A later screenshot does not necessarily mean later discovery. Continued online availability does not automatically restart prescription every day. A later edit or republication may present a separate issue, but only after examining what changed, who republished it and whether the act legally constitutes a new publication.

Filing close to the deadline is dangerous. Questions about which proceeding interrupts prescription, whether it was filed in the proper office, and whether the complaint sufficiently charges the offense can be decisive.

How to prepare and file a complaint

1. Preserve the complete online evidence

Before reporting, collect the best available evidence without hacking, impersonating anyone or unlawfully accessing an account:

full-page screenshots showing the post, account name, date, time, comments and surrounding context;
screen recordings showing how the page or message is reached;
the exact URL or post identifier;
the original electronic file, not only a forwarded or compressed copy;
emails, message exports, notifications and platform download data;
the device on which the publication was received;
proof linking the account to the suspected author;
prior or later statements relevant to identity, meaning or malice;
names and contact details of people who saw the publication;
records showing when the complainant and witnesses first discovered it; and
documents disproving factual allegations and showing resulting harm.

Keep untouched originals and working copies. Note who collected each item, when and how. Do not crop away identifying information or alter metadata. Electronic evidence must be authenticated and must satisfy the Rules on Electronic Evidence.

A private preservation request to a platform is not a substitute for a lawful government preservation order, disclosure warrant or other compulsory process. Service providers may retain different categories of data for limited periods, so prompt action matters.

2. Analyze every element before accusing anyone

Prepare a chronology and identify:

the exact words alleged to be defamatory;
why those words refer to the complainant;
who other than the complainant received them;
why they assert a defamatory fact rather than protected criticism;
why the evidence identifies the respondent as the author;
the applicable discovery date; and
facts relevant to malice, privilege, truth and public interest.

Include the whole conversation or publication where context changes the meaning. Selective excerpts can weaken credibility and may conceal a valid defense.

3. Choose the proper office and venue

A complaint may be submitted for investigation to the appropriate Office of the City or Provincial Prosecutor. The NBI and PNP are the principal law-enforcement authorities under Section 10 of Republic Act No. 10175 and may assist in identifying an account holder, preserving evidence and conducting a forensic investigation.

Cybercrime cases fall within Regional Trial Court jurisdiction under Section 21 of the Act, including designated cybercrime courts. That jurisdictional provision does not make every RTC or prosecution office a proper venue. Venue can depend on where legally significant acts or elements occurred and on the special venue rules governing libel. The complainant’s residence, the place of publication and the pleading’s allegations may matter. Have venue checked before filing, particularly when the parties live in different cities or countries.

4. Execute a complete complaint-affidavit

The complaint-affidavit should be sworn before an authorized officer and supported by witness affidavits and properly identified documents or electronic evidence. It should state facts within the affiant’s personal knowledge, not speculation or legal conclusions presented as facts.

Requirements for copies, attachments, electronic submission and identification may vary by prosecution office. Confirm the current filing instructions directly with the office that will receive the complaint. The governing prosecution framework includes the DOJ’s 2024 DOJ–National Prosecution Service Rules on Preliminary Investigations and Inquest Proceedings.

5. Participate in the prosecutor’s investigation

The prosecutor evaluates whether the admissible, credible and preservable evidence establishes a prima facie case with reasonable certainty of conviction. The respondent must be given the prescribed opportunity to answer. Clarificatory proceedings may be held when necessary.

A prosecutor’s finding is not a conviction. If an information is filed, the court separately determines probable cause for issuing process, and guilt must still be proved beyond reasonable doubt at trial.

How to respond if you are accused

Do not ignore a subpoena

Read the subpoena, complaint and attachments immediately. Record the date and method of receipt. The available time to submit a counter-affidavit may be short and is controlled by the applicable DOJ rules and the instructions in the subpoena. Ask counsel to confirm the exact deadline instead of assuming that weekends, holidays or a request for extension will protect you.

Preserve, rather than delete, evidence

Save the full post, drafts, source material, research notes, recordings, messages with editors or administrators, account-access history and original devices. Preserve documents supporting truth, good faith, verification efforts, privilege, lack of publication, lack of identification or mistaken attribution.

Deleting a post may limit further circulation, but it does not erase copies already made and may destroy evidence needed for the defense. Obtain advice about takedown, correction or preservation before acting.

Build the counter-affidavit around the elements

Depending on the facts, possible defenses or objections may include:

the words are not defamatory when read in context;
the statement is protected opinion, criticism, satire or rhetorical language;
the complainant was not identifiable;
no third person received the communication;
the respondent did not author or publish it;
the account was compromised or evidence of authorship is unreliable;
the allegation was true and was published with good motives and justifiable ends;
the communication was privileged;
required actual malice cannot be proved;
the evidence is unauthenticated, inadmissible or unlawfully obtained;
the case was filed after prescription had run;
the chosen venue lacks the required factual basis;
the publication occurred before Republic Act No. 10175 took effect and no legally distinct later publication is proved; or
prosecution would punish the same libelous act twice under cyber-libel and ordinary-libel provisions.

Not every defense is compatible with every other defense. For example, denying authorship while affirmatively justifying the publication requires careful factual pleading. A counter-affidavit should respond specifically to the evidence rather than offer a general denial.

Avoid damaging contact and public commentary

Do not threaten the complainant, recruit witnesses to change their accounts, fabricate records or ask someone to access an account without authority. Do not post the complaint, repeat the disputed allegation or attack the complainant online. Such conduct may create new evidence or separate liability.

A private settlement, apology or withdrawal does not automatically terminate a criminal prosecution once the State has taken control of the case. Any communication or proposed resolution should be handled through counsel.

Search, disclosure and seizure of electronic data

Republic Act No. 10175 and the Supreme Court’s Rule on Cybercrime Warrants regulate preservation, disclosure, interception, search, seizure and examination of computer data. Different warrants apply to different investigative objectives.

A request from an investigator is not necessarily the same as a court-issued warrant. Before giving passwords, devices or account content, determine:

who issued the demand;
the warrant or order’s exact scope and validity;
which account, device, data category and period it covers;
whether privileged or unrelated material is included; and
whether forensic copying and chain-of-custody safeguards will be followed.

Do not obstruct a lawful search or destroy evidence. If officers arrive with a warrant, remain calm, request a copy, note the executing officers and seized items, and contact counsel. Challenges to the warrant or to evidence obtained beyond its authority should be made through proper legal proceedings.

Possible consequences

Cyber libel is a criminal offense. Section 6 of Republic Act No. 10175 provides a penalty one degree higher when a Revised Penal Code offense is committed through information and communications technology. The exact imprisonment range and any fine require application of the current Revised Penal Code provisions, amendments, mitigating or aggravating circumstances, and sentencing rules.

A convicted person may also face civil liability. The offended party may pursue damages within the criminal case, subject to the rules on institution, reservation, waiver and prior filing of civil actions. Article 33 of the Civil Code also recognizes an independent civil action for defamation. Criminal and civil claims have different elements, standards and procedural consequences; dismissal of one proceeding does not invariably resolve every possible civil claim.

The Supreme Court declared Section 7 of Republic Act No. 10175 unconstitutional insofar as it would allow prosecution for both cyber libel and ordinary libel based on the same act. That protection does not prevent prosecution for a genuinely distinct act or a different offense with different elements.

Common mistakes

Waiting for the platform to remove the post while the one-year period runs.
Treating a screenshot date as the date of first discovery.
Filing against everyone who liked, received or reacted to a post without evidence that each person authored a punishable publication.
Naming an account holder without proving who actually controlled the account when the post was made.
Cropping screenshots so severely that the URL, date, account or context disappears.
Editing, annotating or recompressing the only copy of the evidence.
Assuming truth alone resolves malice, motive and justifiable purpose.
Assuming “private group” means there was no publication.
Repeating the disputed accusation in a demand letter, press release or new post.
Filing in the most convenient city without establishing proper venue.
Ignoring a subpoena or submitting an unsworn narrative instead of the required affidavits and evidence.
Assuming deletion, apology or the complainant’s affidavit of desistance automatically ends the criminal case.

When legal help is urgent

Seek immediate assistance if:

the alleged publication may be approaching one year from discovery;
a platform may soon delete identifying or traffic data;
you have received a prosecutor’s subpoena or court process;
police request access to a device or account;
officers serve a search or arrest warrant;
the author used a false, hacked or anonymous account;
the publication involves a journalist, public official, public figure or matter of public concern;
several posts, edits, reposts or possible authors are involved;
the complainant or respondent is abroad;
threats, stalking, intimate material or personal-data exposure accompany the defamation; or
a related employment, administrative, professional-discipline or civil case is pending.

The Public Attorney’s Office may assist qualified indigent persons, subject to its mandate, eligibility rules and conflict checks. A private lawyer experienced in criminal litigation, media law or digital evidence may be necessary in factually complex cases.

Frequently asked questions

Is every false Facebook post cyber libel?

No. The prosecution must prove a defamatory imputation, publication to another person, identification, malice, use of a computer system and the accused’s responsibility for the publication. Constitutional and statutory defenses may apply.

Can a group-chat message be cyber libel?

Potentially. If a defamatory statement identifying someone is sent through a computer system to at least one other person, publication may exist. The group’s purpose, recipients, context and any privilege remain important.

Can I sue someone who only liked or reacted to a post?

A mere receiver or reactor is not automatically treated as the original author of cyber libel. Liability must be based on the person’s own proven conduct. Adding a defamatory statement or independently publishing material may require a different analysis.

Is an anonymous account beyond legal reach?

Not necessarily. Investigators may seek preservation and, with the required judicial authority, disclosure of relevant subscriber, traffic or content data. Identification is not guaranteed; records may be unavailable, foreign-held, false or shared.

Should I send a demand letter first?

A demand letter is not invariably required before filing a cyber-libel complaint. It may help request preservation, correction or removal, but it can also affect strategy and timing. It does not by itself guarantee interruption of prescription.

Does taking down the post erase liability?

No. Removal may reduce continuing harm, but it does not erase an already completed publication. Preserve a forensic-quality copy before any advised takedown.

Does an apology end the case?

Not automatically. An apology may affect settlement discussions, damages, credibility or sentencing considerations, but criminal prosecution belongs to the State. Its effect depends on timing, wording and procedural posture.

Can the complainant file both ordinary libel and cyber libel for the same post?

The same single act cannot constitutionally be punished under both provisions merely because it is online. Distinct publications or other distinct conduct require separate analysis.

Can I be arrested as soon as a complaint is filed?

Filing a complaint with a prosecutor does not itself establish guilt or automatically produce an arrest warrant. If an information is later filed, the judge independently determines probable cause and the appropriate process. An actual warrant or court order must never be ignored.

Official legal references

This article provides general Philippine legal information, not legal advice and not an attorney-client opinion on any specific post or case. Outcomes depend on the exact words, audience, dates, evidence and procedural history. Sources were checked as of September 14, 2026.