Quick answer

Cyber libel is committed when a person publishes through a computer system a defamatory imputation that identifies another person or entity, reaches at least one third person, and is accompanied by the malice required by law. An offensive, critical, or embarrassing post is not automatically cyber libel; all elements must be supported by admissible evidence.

If you are filing a case, preserve the post and account data immediately, record when you first discovered it, identify the author with evidence, and file a sworn complaint with the proper prosecution office before prescription expires. You may first seek investigative assistance from the National Bureau of Investigation Cybercrime Division or the Philippine National Police Anti-Cybercrime Group, especially if the account is anonymous or platform records are needed.

If you are defending a case, do not ignore a prosecutor’s subpoena. Under the current DOJ rules, the counter-affidavit and supporting evidence are generally due within 10 calendar days from receipt of the subpoena and complaint. Examine prescription, venue, authorship, identification, publication, defamatory meaning, privilege, truth and good motive, and—when a public official or public figure is involved—whether actual malice can be proved.

Cyber libel currently prescribes in one year from discovery by the offended party, authorities, or their agents, not automatically from the date of posting. Filing the complaint with the prosecution office interrupts prescription. Because the discovery date can be disputed, act well before the anniversary and preserve objective proof of when the material was found. The Supreme Court confirmed the one-year rule in Causing v. People, including its April 8, 2026 resolution on reconsideration.

What the prosecution must establish

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the publication is made through a computer system or similar technology. The usual elements are:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to cause dishonor, discredit, or contempt. Courts consider the words in their full context and their ordinary meaning to the intended audience. Mere vulgar abuse, irritation, opinion, parody, or criticism does not necessarily satisfy this element.
Publication. At least one person other than the person defamed must have received, read, or seen the imputation. A message sent only to its subject ordinarily lacks publication, although forwarding it to another person may supply the element.
Identification. The complainant must be named or reasonably identifiable from the words and surrounding circumstances. A nickname, photograph, job description, relationship, location, or prior discussion may be enough. A statement about an indefinite or very large group may fail this element if no particular member is reasonably identifiable.
Malice. Article 354 generally presumes malice from a defamatory imputation unless the communication is privileged. Different constitutional rules apply when the complainant is a public officer or public figure or when the speech is protected commentary on a public matter.
Use of a computer system or information and communications technology. This may include a social-media post, website article, blog, email, group chat, online video caption, digital image, or comparable electronic publication.
The respondent’s responsibility for the publication. An account name or screenshot alone does not necessarily prove who controlled the account or authored the content. Admissions, platform records, device evidence, account-recovery information, consistent identifiers, witnesses, and surrounding conduct may be relevant.

The Supreme Court’s decision in Disini v. Secretary of Justice sustained online libel as applied to the author but invalidated “aiding or abetting” liability for cyber libel because of its uncertain reach over likes, comments, and similar online reactions. A person who writes a new defamatory accusation or affirmatively causes its publication may still face liability based on that person’s own act. A simple reaction should not be treated as automatically equivalent to authoring a libelous post.

Malice, public figures, and privileged communications

The general rule for private complainants

A defamatory imputation is generally presumed malicious even if it is true when no good intention and justifiable motive are shown. This makes context and purpose important. “I was only telling the truth” is not, by itself, a complete answer in every criminal libel case.

Under Article 361, proof of truth may result in acquittal when the defendant also proves that the publication was made with good motives and for justifiable ends. Proof of a noncriminal act or omission is generally restricted unless the imputation concerned a government employee’s performance of official duties.

Public officials, public figures, and public concerns

When a statement concerns a public official’s official conduct or a public figure in a matter of legitimate public interest, the prosecution generally must establish actual malice: knowledge that the statement was false or reckless disregard of whether it was false. Recklessness means more than poor research or ordinary negligence; it involves a high degree of awareness of probable falsity or serious doubts about the truth.

Public status does not provide unlimited permission to invent facts or launch unrelated personal attacks. Whether a person is a public figure, whether the publication concerns a public matter, and whether actual malice was present depend on the evidence and the publication’s complete context.

Privileged communications

Article 354 recognizes, among others:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without added comments, of nonconfidential judicial, legislative, or other official proceedings, official statements, or acts performed by public officers in their functions.

Qualified privilege removes the automatic presumption of malice, but it can be defeated by proof of malice in fact. Excessive circulation, irrelevant insults, fabrication, selective distortion, or publication beyond the people who have a legitimate interest may undermine a claimed privilege.

The filing deadline: one year from discovery

Article 90 of the Revised Penal Code expressly gives libel and similar offenses a one-year prescriptive period. In Causing v. People, the Supreme Court confirmed that cyber libel also prescribes in one year despite its higher penalty.

The period is counted from the day the allegedly libelous material was discovered by the offended party, the authorities, or their agents. Publication and discovery may occur on the same day, but that cannot simply be assumed in every case.

Important consequences include:

The complainant should state the discovery date and explain how the material was discovered.
The respondent may challenge an implausible or unsupported discovery date.
If prescription is not apparent from the complaint or Information, the accused generally bears the burden of proving it.
Filing a criminal complaint with the proper prosecution office interrupts the period. The Supreme Court’s current rule treats commencement of proceedings before the prosecution office as sufficient to toll prescription.
The continued accessibility of an old post should not be casually treated as a new offense every day. A later edit, re-upload, or republication requires separate analysis of what affirmative act occurred and when.
Posts made before the cybercrime law became effective cannot be punished retroactively under that law. A genuinely later publication may present a different issue.

Do not wait until the last day. Venue errors, incomplete affidavits, holidays, rejected submissions, or uncertainty over the discovery date can jeopardize the case.

Evidence to preserve immediately

A screenshot is useful but may be insufficient by itself. Electronic evidence must be authenticated, and its integrity and reliability may be challenged. Preserve enough information to prove the content, publication, identity, date, and chain of custody.

Keep the following where available:

Full-page screenshots showing the statement, account name, profile photograph, date and time, reactions, comments, and surrounding conversation;
The exact URL or permanent link to the post, profile, page, group, video, or article;
A screen recording that starts from the account or page and navigates to the post;
The original electronic file, message export, email with full headers, downloaded webpage, photograph, audio, or video;
Platform notification emails or messages;
The account’s username, user ID, profile URL, linked pages, previous names, and other stable identifiers;
Names and affidavits of people who personally saw the publication;
Proof connecting the account to the respondent, such as admissions, prior messages, recovery details lawfully obtained, or witnesses familiar with the account;
Proof of the complainant’s identity and why readers understood the post to refer to that person;
The date, time, and circumstances of discovery;
Corrections, demands, responses, apologies, deletions, reposts, and later edits;
Evidence relevant to truth, source verification, privilege, motive, damages, and actual malice;
The original device, if it may later be examined. Avoid resetting, replacing, or altering it.

Store at least two unedited copies. Record who collected each item, when it was collected, and whether it was modified or converted. Do not crop away context from the only preserved copy. Do not enter another person’s account, intercept communications, impersonate someone, or obtain passwords without lawful authority.

Under the Rules on Electronic Evidence as applied by the Supreme Court, the party offering a private electronic document must establish its authenticity. Investigators may seek preservation, disclosure, search, seizure, or examination orders under the Cybercrime Prevention Act and the Rule on Cybercrime Warrants. Private individuals should not attempt to obtain protected subscriber or traffic data themselves.

How to file a cyber libel complaint

1. Assess the statement before filing

Write down the precise words, images, audio, or video claimed to be defamatory. For each item, identify:

What fact or condition was imputed;
Why it is defamatory in context;
Who received or viewed it;
How the complainant was identified;
Why the respondent is believed to be the author or publisher;
The discovery date;
Whether the complainant is a public official, public figure, private person, or juridical entity;
Whether the communication may be privileged; and
What evidence is available to satisfy every element.

Avoid treating an entire page of harsh criticism as one undifferentiated accusation. Quote or reproduce the relevant material accurately and attach its full context.

2. Choose an investigation or direct prosecution route

A complainant may seek assistance from:

The NBI Cybercrime Division or a regional cybercrime center;
The PNP Anti-Cybercrime Group or its appropriate regional unit; or
The city, provincial, regional, or state prosecution office with territorial authority over the case.

The NBI also maintains an official online complaint page. An online report or platform report should not be assumed to replace the sworn complaint required to commence the prosecutor’s preliminary investigation.

Use law enforcement early when the publisher is anonymous, account ownership is disputed, platform data may disappear, or a forensic examination or cybercrime warrant may be necessary.

3. Confirm the correct venue

Under Section 2.1 of the Rule on Cybercrime Warrants, a criminal action under Section 4 or 5 of Republic Act No. 10175 is filed before the designated cybercrime court of the province or city:

Where the offense or any element was committed;
Where any part of the computer system used was situated; or
Where any damage to the natural or juridical person occurred.

The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of the others. Venue facts must be specifically alleged and supported; the mere fact that online material can be read anywhere should not be used as a substitute for a defensible venue theory. The Supreme Court discusses this rule in Tieng v. People.

Because prosecutors ordinarily act within defined territorial jurisdictions, confirm the correct prosecution office before filing.

4. Prepare the complaint-affidavit and attachments

Under DOJ Department Circular No. 015, series of 2024, a regular preliminary investigation is initiated by filing:

The original complaint-affidavit;
Two duplicate copies for the official file;
An additional copy for each respondent;
A completed NPS Investigation Data Form; and
Witness affidavits and other supporting evidence.

The affidavit should state the parties’ names and addresses, date and place of the alleged offense, material facts, discovery date, venue facts, and evidence supporting each element. It must be properly sworn. Confirm the receiving office’s current administrative checklist because it may require identification, labeled annexes, digital copies, or additional routing copies.

Cyber libel is subject to regular preliminary investigation because its prescribed imprisonment reaches at least six years and one day. The prosecutor applies the current DOJ standard of prima facie evidence with reasonable certainty of conviction—evidence that is admissible, credible, preservable, and capable, if left uncontroverted, of establishing every element and the responsible person.

5. Participate in the preliminary investigation

The prosecutor will evaluate the complaint, issue a subpoena if the case proceeds, receive counter-affidavits, and may conduct clarificatory questioning. Reply- and rejoinder-affidavits may be allowed; the rejoinder is the last pleading under the regular process, and the period for a reply or rejoinder must not exceed 10 calendar days from receipt of the pleading answered.

The investigating prosecutor generally has 60 calendar days from assignment to resolve the case, with a maximum 30-day extension for specified matters such as complex issues, counter-charges, consolidated complaints, or reassignment. Approval and promulgation periods follow. These are official processing periods, not a guarantee that every office will release a resolution on the same date.

If the prosecutor finds the required evidence, an Information is prepared for filing in the designated Regional Trial Court. Otherwise, dismissal is recommended.

6. Use the correct remedy after the prosecutor’s resolution

Either aggrieved party may file a motion for reconsideration within 15 days from receipt of the resolution. The motion is assigned within three days and should be resolved within 30 days from assignment.

A qualifying resolution may also be reviewed under the DOJ’s 2022 NPS Rule on Appeal. For an RTC-cognizable cyber libel case, review generally lies within the DOJ structure specified by that rule. If an Information has already been filed, a petition for review does not automatically stop the court case; DOJ rules require an accompanying motion to suspend proceedings filed in court. Obtain counsel immediately because filing, service, verification, annex, and material-date requirements are strict.

How to defend a cyber libel complaint

1. Calendar the subpoena deadline immediately

Record the date and manner of service. Obtain the complete complaint, affidavits, and attachments. The counter-affidavit and defense evidence are generally due within 10 calendar days from receipt.

Failure to respond allows the prosecutor to resolve the complaint using the complainant’s evidence. Under the current DOJ procedure, a respondent should present the substantive defenses in the counter-affidavit rather than rely on a motion to dismiss; a preliminary motion to dismiss is allowed only for lack of jurisdiction.

2. Preserve—not destroy—the relevant records

Keep the account data, drafts, source materials, messages, research notes, publication history, device, and original files. Preserve exculpatory information, including the complete conversation and evidence of source-checking or limited distribution.

Do not delete an account, wipe a device, ask witnesses to change their statements, fabricate screenshots, or contact the complainant in a threatening manner. Taking a post down may reduce continuing harm, but it does not erase an already completed publication. Discuss preservation and takedown with counsel.

3. Test every required element

A strong counter-affidavit should address the evidence, not simply deny liability. Possible issues include:

The words are not defamatory when read in full context;
They are rhetorical opinion, satire, criticism, or general abuse rather than a provably defamatory imputation;
The complainant was neither named nor reasonably identifiable;
No third person received the communication;
The respondent did not own, control, author, upload, or cause the publication;
The screenshot or electronic record is incomplete, altered, unauthenticated, or disconnected from the respondent;
The communication was privileged and made in good faith;
The imputation was true and published with good motives and for justifiable ends, within Article 361’s limits;
The complainant is a public official or public figure and actual malice cannot be established;
The complaint was filed after the one-year prescriptive period;
The chosen venue lacks a supported connection to an element, computer system, or legally cognizable damage;
The act occurred before the cybercrime law became applicable;
The charge duplicates ordinary libel for the same online act; or
The Information, if already filed, omits an essential element or adequate venue allegation.

Attach the records supporting each position. If relying on sources, show what was actually reviewed before publication and why it was considered reliable. A bare assertion of “good faith” is weaker than contemporaneous documentation.

4. Protect constitutional and custodial rights

A respondent may obtain counsel before answering investigators or submitting an affidavit. If questioned while under custodial investigation, the rights to remain silent and to competent and independent counsel apply.

Do not voluntarily surrender a device, password, or private account merely because someone informally requests it without first understanding the scope and legal basis. At the same time, do not obstruct a valid subpoena, preservation directive, or court warrant. Have counsel review the document and seek the proper remedy when necessary.

5. Prepare for the court stage

Once an Information is filed, the judge independently evaluates probable cause and may issue a warrant, require additional evidence, or dismiss for lack of probable cause. Cyber libel is bailable before conviction because it is not punishable by reclusion perpetua. The court fixes the conditions and amount of bail.

Before arraignment, counsel should evaluate any proper motion to quash, challenge to the warrant, request for reinvestigation, or motion to suspend proceedings. Entering a plea can waive certain objections that must be raised beforehand.

At trial, the prosecution must prove guilt beyond reasonable doubt. Authentication, admissibility, authorship, context, publication, identification, malice, privilege, and prescription remain trial issues when genuinely disputed.

An appeal from an RTC judgment in its original jurisdiction is generally taken to the Court of Appeals by filing a notice of appeal with the trial court. Under Rule 122, the ordinary appeal period is 15 days from promulgation of judgment or notice of the final order. A timely motion for new trial or reconsideration suspends the running of that period until notice of denial, after which only the remaining balance runs.

Penalties and civil liability

Traditional written libel under Article 355, as amended by Republic Act No. 10951, carries prisión correccional in its minimum and medium periods, a fine of ₱40,000 to ₱1,200,000, or both. Section 6 of Republic Act No. 10175 raises the penalty by one degree when libel is committed through ICT.

For cyber libel, the imprisonment range is therefore prisión correccional in its maximum period to prisión mayor in its minimum period—four years, two months and one day to eight years. The Supreme Court held in People v. Montierro that the corresponding fine may range from ₱40,000 to ₱1,500,000. The court may impose imprisonment, a fine, or both, subject to the facts and applicable sentencing rules.

Administrative Circular No. 08-2008 expresses a judicial preference for a fine rather than imprisonment in appropriate libel cases. It does not abolish imprisonment or guarantee a fine-only sentence.

Civil liability may be pursued with the criminal case. An independent civil action for defamation may also be available under Article 33 of the Civil Code, subject to the special rules governing libel actions, proper venue, avoidance of double recovery, and coordination with any criminal case. Damages must be supported; reputational harm should not simply be assumed at any amount.

The Supreme Court has also ruled that charging the same online publication as both ordinary libel and cyber libel would violate double jeopardy because the two charges concern the same offense committed through an online medium. Distinct publications or distinct defamatory statements may require separate analysis.

Practical ways to reduce harm without weakening the case

A complainant may:

Preserve complete evidence before reporting the post;
Use the platform’s defamation, impersonation, privacy, or harassment process;
Send a carefully drafted demand for correction, retraction, or takedown;
Ask recipients not to redistribute the material;
Secure witness statements while memories are fresh; and
Seek urgent protective remedies if the conduct also involves threats, stalking, sexual harassment, intimate images, child exploitation, or disclosure of sensitive personal information.

A demand letter is not generally a prerequisite to a criminal complaint and does not by itself stop the one-year prescriptive period. Avoid public retaliation: reposting the accusation while denouncing it may expand its audience, complicate damages, and expose both sides to further claims.

An apology, correction, settlement, or affidavit of desistance may affect prosecutorial discretion, damages, or sentence, but cyber libel is a public offense prosecuted in the name of the People of the Philippines. Desistance does not automatically require the prosecutor or court to dismiss the case.

Common mistakes

Waiting because the post remains online;
Counting one year only from publication without examining the discovery evidence;
Filing in a convenient place without establishing proper venue;
Submitting cropped screenshots without URLs, dates, context, or authentication evidence;
Naming an account holder without evidence that the person authored or controlled the post;
Treating every insult, bad review, or criticism as defamatory fact;
Assuming truth alone always defeats criminal libel;
Ignoring the actual-malice standard in public-official or public-figure cases;
Missing the 10-day counter-affidavit period or 15-day reconsideration and appeal periods;
Filing ordinary libel and cyber libel charges for the same online act;
Deleting devices, chats, drafts, or source materials after a dispute begins;
Hacking, impersonating, or privately tracing an account through unlawful methods;
Believing a platform report, police blotter, or demand letter automatically commences the prosecutor’s case; and
Assuming an affidavit of desistance guarantees dismissal.

When legal help is urgent

Consult a Philippine criminal-law lawyer immediately when:

The one-year anniversary of discovery is approaching;
A prosecutor’s subpoena, NBI subpoena, warrant, arrest notice, or court order has been received;
The account is anonymous and provider data may need urgent preservation;
A phone, computer, or storage device may be searched or seized;
The complainant is a public official, candidate, journalist, corporation, or other possible public figure;
The publication concerns government conduct or another matter of public interest;
Multiple people, posts, platforms, or jurisdictions are involved;
The content contains intimate images, threats, extortion, stalking, or information about a child;
An Information has already been filed in court;
A warrant of arrest has issued; or
A prosecutor’s resolution or court judgment has been received and a 15-day remedy period may be running.

Frequently asked questions

Is a false statement required?

Article 353 covers imputations that are real or imaginary. For a private complainant, the prosecution does not always have to frame falsity as a separate statutory element. Truth, good motive, privilege, and constitutional protections remain highly important. When a public official or public figure is involved, actual malice requires proof relating to falsity and the publisher’s state of mind.

Is a private message cyber libel?

It can be only if it was published to someone other than the person defamed. A one-to-one message sent solely to its subject ordinarily lacks publication. A group chat or a message copied or forwarded to another person may satisfy the element.

Can a like, reaction, or ordinary comment make me liable?

Not automatically. Disini invalidated aiding-or-abetting liability for cyber libel. A comment that creates its own defamatory accusation, however, may be evaluated as a new original publication.

Can an anonymous account be sued or prosecuted?

Potentially, but the responsible person must be identified with admissible evidence. Report promptly to the NBI or PNP Anti-Cybercrime Group so investigators can evaluate preservation and warrant procedures. An IP address or subscriber name may be relevant but does not always prove who authored a particular post.

Will deleting the post end the case?

No. Publication may already have been completed. Preserve an accurate copy before takedown. A prompt correction or removal may still reduce harm and may become relevant to motive, damages, or sentence.

Is a demand letter required?

No. It may help secure a correction, retraction, preservation, or settlement, but it is not a substitute for timely filing with the prosecution office and does not necessarily interrupt prescription.

Can the case be settled?

The parties may discuss retraction, apology, damages, or desistance, but the prosecutor or court controls the criminal case. Settlement does not automatically erase criminal liability.

Where can official help be requested?

Investigative assistance is available from the NBI Cybercrime Division, the PNP Anti-Cybercrime Group and its regional units, and the DOJ Office of Cybercrime. Formal preliminary investigation is conducted through the prosecution office with proper territorial authority.

Official legal sources

This article provides general Philippine legal information, not legal advice for a specific dispute. The result of a cyber libel case depends on the exact words, audience, publication history, account evidence, status of the complainant, venue, dates, and admissible documents. Laws and official procedures were checked through August 25, 2026.