Quick answer

To file a Philippine cyber libel case, you must generally show that an identifiable person was subjected to a defamatory allegation, the allegation was communicated to someone else through a computer system, and the accused was responsible for the original online publication. Preserve the post and its technical context immediately, identify the proper venue, and file a sworn complaint with supporting affidavits and authenticated electronic evidence before the one-year prescriptive period expires.

To defend a case, do not ignore a prosecutor’s subpoena, warrant, or court notice. Obtain the complete complaint and attachments, preserve the unedited evidence, and promptly assess prescription, venue, authorship, publication, identification, defamatory meaning, malice, privilege, truth, and constitutional protections. Deleting a post may limit further circulation, but it does not erase evidence or automatically end liability.

Cyber libel is a criminal charge with possible imprisonment, fine, and civil damages. Both sides should consult a Philippine lawyer early, especially when the deadline is near, the account owner is disputed, the post has been edited or deleted, or law enforcement seeks access to a device or account.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 punishes the unlawful acts of libel defined in Article 355 of the Revised Penal Code when committed through a computer system or similar means.

A cyber libel prosecution ordinarily requires proof beyond reasonable doubt of these matters:

There was an allegation of a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose a person to contempt.
The allegation concerned an identifiable natural or juridical person, or a dead person.
It was published or communicated to at least one person other than the person defamed.
The publication was malicious, either because malice is presumed under the general rule or because actual malice must be proved in the circumstances.
The accused was legally responsible for the publication.
The libel was committed through a computer system or a comparable digital means.

Online articles, public posts, captions, videos, photographs, graphics, emails, group messages, and other electronic communications may qualify depending on their content, audience, and proof of publication. A private message sent only to the person discussed normally lacks publication to a third person, although other offenses or civil claims may still apply.

The entire communication matters. Courts examine the ordinary meaning, context, audience, surrounding statements, and whether the target can reasonably be identified. Avoid assuming that adding “allegedly,” “for awareness only,” an emoji, or “just my opinion” automatically prevents liability.

Who may be prosecuted?

In Disini v. Secretary of Justice, the Supreme Court sustained the cyber libel provision as applied to the original author of the online post. It did not extend criminal liability under that provision to people who merely receive the post and react to it or express approval through a like, comment, or similar response.

That does not mean every act of reposting is automatically immune. A person who republishes material as their own, adds a new defamatory accusation, edits it materially, or creates a fresh publication presents a different factual question. Liability must be assessed from the person’s actual conduct and the evidence, not merely from the label used by a platform.

Ownership of a social-media account is not necessarily proof that its owner authored a particular post. Prosecutors must still establish the accused’s participation and identity with competent evidence. Conversely, using a pseudonym, dummy account, shared device, or later-deleted account does not guarantee anonymity.

Speech that may be protected or defensible

Truth is important, but it must be proved

Truth can be a defense subject to Article 361 of the Revised Penal Code. Where the allegation concerns a crime, the accused must generally prove the truth of the allegation and show that it was published with good motives and for justifiable ends. Proof of truth concerning the official duties of a government employee or officer is treated differently under the same provision.

A sincere belief, rumor, anonymous tip, or screenshot of another person repeating the accusation is not necessarily proof that the underlying allegation is true. Preserve the primary records and witnesses supporting each material statement.

Fair comment and opinion

A pure opinion that cannot reasonably be understood as asserting a false fact may be protected. Fair comment on matters of public interest also receives constitutional protection, particularly when based on true or substantially true facts disclosed to the audience.

Calling a factual accusation an “opinion” does not control. “I think X stole the money,” for example, may still communicate an accusation of fact. The court considers what an ordinary reader would understand.

Privileged communications

Article 354 recognizes qualifiedly privileged communications, including:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts of public officers.

Privilege depends on purpose, audience, relevance, good faith, and the manner of publication. Broadcasting a complaint indiscriminately online may exceed the audience reasonably required by the duty.

Some communications are absolutely privileged, such as relevant statements made in the course of judicial proceedings. The privilege is not a license to republish the accusation unnecessarily outside the protected proceeding.

Public officials, public figures, and matters of public concern

When the challenged statement concerns a public official, public figure, or privileged communication, the complainant may need to prove actual malice: knowledge that the statement was false or reckless disregard of whether it was false.

Actual malice is not simply anger, hostility, or insulting language. It concerns the publisher’s state of mind regarding truth or falsity. Fabricating a source, deliberately avoiding obvious verification, or publishing despite reliable contrary records may be relevant, but the result always depends on the evidence.

Identification must be reasonably established

The person need not always be named. A photograph, position, workplace, family relationship, initials, unique event, or other details may make someone identifiable to readers who know the circumstances. But a vague statement about a large group may not reasonably identify a particular complainant.

No retroactive criminal liability

A publication made before the Cybercrime Prevention Act took effect cannot be punished retroactively as cyber libel. Whether an edit, update, or later repost constitutes a new publication is fact-sensitive and should not be assumed without reviewing precisely what changed and when.

The filing deadline

The Supreme Court held in Causing v. People that cyber libel prescribes in one year, rather than 12 or 15 years.

The period generally runs from the discovery of the offense by the offended party, authorities, or their agents. If the complainant knew of the publication when it occurred, the dates of publication and discovery may coincide. Filing the complaint for preliminary investigation interrupts prescription under Article 91 of the Revised Penal Code.

Do not treat one year as a safe waiting period. Disputes may arise over the true publication date, discovery, republication, the sufficiency of the filing, and whether it was lodged with the proper authority. Obtain legal advice immediately if the anniversary is approaching.

How to preserve online evidence

Electronic evidence can disappear or change quickly. Preserve it before demanding deletion or publicly confronting the account holder.

Keep:

full-page screenshots showing the account name, text, images, date, time, reactions, comments, and surrounding context;
the exact URL or platform link, account profile link, post or message identifier, and access date and time;
screen recordings showing how the content and profile were reached;
copies of the original files, emails, message exports, attachments, and available metadata;
the device on which the content was received or viewed;
records showing who received, read, shared, or responded to the communication;
earlier and later versions of an edited post;
messages showing admissions, instructions, threats, corrections, demands, or account control;
records supporting truth or falsity, including official documents and firsthand witnesses;
evidence of harm, such as cancelled contracts, employment records, client messages, medical records, and reasonably documented expenses; and
a written timeline identifying publication, discovery, preservation, takedown, and communications between the parties.

Do not crop away information that provides context. Retain an untouched original and work from copies. Do not alter metadata, fabricate conversations, impersonate anyone, unlawfully access an account, or obtain evidence through hacking.

Screenshots are useful but may be challenged as incomplete or manipulated. The Rules on Electronic Evidence govern authentication and admissibility. Testimony from someone with personal knowledge, the original device or file, metadata, platform or service-provider records, and forensic examination may become important.

Under Section 13 of Republic Act No. 10175, service providers ordinarily preserve traffic data and subscriber information for at least six months from the transaction. Content data is preserved for six months from receipt of a lawful preservation order, with a possible one-time extension by law enforcement. A private request to a platform is not necessarily the statutory preservation order. Report promptly to the NBI or PNP if provider-held evidence may be lost.

How to file a criminal complaint

1. Have the elements and defenses evaluated

Before filing, ask whether the statement is defamatory in context, whether the complainant is identifiable, whether anyone else received it, and whether the proposed respondent authored or originally published it. Address obvious claims of truth, privilege, fair comment, or lack of malice honestly.

A criminal complaint should not be used merely to suppress criticism, force payment, or punish a negative review that does not satisfy the legal elements.

2. Confirm the publication and discovery dates

Record the earliest date the complainant or an authorized agent learned of the publication. Preserve proof of that date. Because prescription is only one year, calculate conservatively and allow time to prepare and file a legally sufficient complaint.

3. Identify the proper venue and office

Cyber libel cases fall within the jurisdiction of Regional Trial Courts, with designated cybercrime courts handling cases where applicable. Venue is a legal issue, not simply a matter of convenience.

The applicable venue may depend on the place where an element occurred, the location of a relevant computer system, the complainant’s qualifying residence, and the special venue requirements for libel under Article 360. The information must contain facts establishing venue. For online publications accessible everywhere, mere access in a preferred city should not automatically be assumed sufficient.

Have counsel evaluate venue before filing, particularly when:

the complainant and respondent live in different cities;
the publisher is a media organization;
the complainant is a public officer;
the account, device, or server is abroad;
the post was created while the author was outside the Philippines; or
the complainant moved after publication.

4. Prepare the complaint-affidavit and supporting affidavits

A complaint for preliminary investigation ordinarily includes a sworn complaint-affidavit stating the material facts from personal knowledge, together with witness affidavits and supporting documents. It should clearly explain:

the exact words, image, recording, or accusation complained of;
why the statement refers to the complainant;
when and how it was published;
who received or viewed it;
why the respondent is believed to be the author or publisher;
when and how the complainant discovered it;
why the selected office has venue;
why the allegation is false or actionable;
facts bearing on malice; and
the harm and relief sought.

Attach complete and legible exhibits. Mark them consistently and explain what each exhibit proves. A bare screenshot with no account, date, URL, witness, or authentication foundation may be insufficient.

5. File with the proper prosecution office

A criminal complaint may be filed for preliminary investigation with the Office of the City or Provincial Prosecutor having proper venue. A complainant may also seek investigation and technical assistance from the NBI Cybercrime Division or the PNP Anti-Cybercrime Group, which are designated law-enforcement authorities under Republic Act No. 10175.

Agency investigation and prosecutorial preliminary investigation are related but distinct. Reporting to a help desk, platform, barangay, or private lawyer does not necessarily interrupt prescription. Obtain a stamped receiving copy, docket number, official electronic acknowledgment, or other proof that the complaint was formally filed with the authorized office.

Filing methods and documentary requirements may differ among prosecution offices. Confirm the current official requirements directly with the office where the complaint will be lodged.

6. Participate in preliminary investigation

Under Rule 112 of the Rules of Criminal Procedure, the prosecutor determines whether there is sufficient ground to hold the respondent for trial.

If subpoenaed, a respondent ordinarily has 10 days from receipt to submit a counter-affidavit and supporting documents. The prosecutor may clarify factual issues in a hearing, but preliminary investigation is generally affidavit-based; the parties do not have an automatic right to cross-examine each other at that stage.

If probable cause is found, the prosecutor may file an information in the proper Regional Trial Court. If the complaint is dismissed, the available review or reconsideration remedy and deadline depend on the governing prosecution rules and the circumstances. Act immediately upon receiving the resolution.

What happens after an information is filed?

The judge independently evaluates probable cause. Depending on the record, the court may dismiss the case, require additional evidence, or issue a warrant of arrest or another appropriate process.

Cyber libel is generally bailable. The amount and conditions are determined by the court under the Rules of Criminal Procedure and applicable bail guidelines. Do not rely on informal estimates or pay anyone without an official order and receipt.

At arraignment, the accused is informed of the charge and enters a plea. Pretrial follows, including the marking of evidence, stipulations, identification of issues, and scheduling of trial. The prosecution must prove guilt beyond reasonable doubt. The accused has the constitutional rights to counsel, silence, confrontation of witnesses, compulsory process, and a speedy and impartial trial.

The civil claim arising from the alleged offense is generally deemed included in the criminal case unless it was waived, reserved when legally permitted, or previously filed. Defamation may also support a separate civil action under Article 33 of the Civil Code, subject to procedural rules against double recovery.

Penalties and civil exposure

Article 355 of the Revised Penal Code, as amended by Republic Act No. 10951, provides for imprisonment, a fine ranging from ₱40,000 to ₱1,200,000, or both for ordinary libel. Section 6 of Republic Act No. 10175 provides that when a Revised Penal Code offense is committed through information and communications technology, the penalty is one degree higher.

The precise imposable penalty depends on the charge, the applicable penalty framework, modifying circumstances, and the court’s judgment. Courts must also consider Administrative Circular No. 08-2008, which encourages courts in appropriate libel cases to consider imposing a fine instead of imprisonment but does not remove imprisonment from the law.

A conviction may include civil liability. Even without a criminal conviction, a separate civil defamation claim may succeed under a different burden of proof if its elements are established. Damages are not automatic in every amount requested; they must have a lawful and evidentiary basis.

How to defend a cyber libel complaint

Respond immediately to official papers

Note the exact date and manner of service. Give the subpoena, complaint, resolution, information, warrant, and every attachment to counsel. A deadline generally continues to run while the parties negotiate privately.

Do not contact or pressure the complainant or witnesses. Do not post attacks about the case, coach witnesses, manufacture supporting messages, or coordinate false accounts.

Preserve the defense evidence

Retain the complete post, drafts, research, source records, communications with editors or administrators, access logs, account-security notices, and devices. Preserve evidence even if it appears unfavorable; selective deletion can damage credibility and may raise separate legal problems.

If the defense is truth, collect primary proof for each material allegation. If relying on privilege or public interest, preserve the circumstances showing duty, audience, relevance, verification, source reliability, and good faith.

Examine every required element

A defense review should ask:

Is the accused actually the author or original publisher?
Was the target named or reasonably identifiable?
Was the statement shown to anyone other than the target?
Is it an assertion of fact, rhetorical language, satire, or pure opinion?
Is the ordinary meaning defamatory when read in full context?
Is the accusation true or substantially true?
Was the communication privileged?
Was the subject a public official or public figure, requiring proof of actual malice?
Did the publisher know the statement was false or recklessly disregard its probable falsity?
Was the case filed within one year?
Does the complaint or information allege facts establishing proper venue?
Was the alleged publication made only before the cyber libel law took effect?
Is the electronic evidence authentic, complete, and lawfully obtained?
Does the information charge the offense with sufficient factual detail?
Would prosecution under overlapping libel provisions create a double-jeopardy problem under the limits recognized in Disini?

Submit a fact-specific counter-affidavit

A counter-affidavit should answer the accusation directly and attach admissible supporting material. General denials may be weak where account records, messages, or witnesses connect the respondent to the publication. At the same time, a respondent should not make unnecessary admissions without understanding their legal effect.

Statements made in affidavits are under oath. Do not guess about dates, deny genuine records, or adopt a defense that contradicts preserved evidence.

Consider lawful corrective measures carefully

A prompt correction, clarification, apology, or removal may reduce harm and support a good-faith position, but it is not an automatic defense and may be characterized as an admission if poorly worded. Have counsel review any proposed statement or settlement.

Settlement may address civil interests, but cyber libel is a public offense prosecuted in the name of the People. A private withdrawal or affidavit of desistance does not automatically require the prosecutor or court to dismiss the criminal case.

Takedown requests and platform reports

A complainant may report content through a platform’s impersonation, harassment, privacy, or defamation process and may send a carefully drafted request to the publisher. Preserve the evidence first.

A platform’s removal decision does not determine criminal liability. Likewise, a platform’s refusal to remove content does not establish that the content is lawful.

The government cannot simply block allegedly libelous content without lawful authority. In Disini, the Supreme Court declared unconstitutional the original Section 19 power allowing the Department of Justice to restrict or block access based only on a prima facie finding.

Common mistakes

Mistakes by complainants

Filing after the one-year period because an old post remains searchable.
Treating continuing online availability as a new publication every day.
Filing wherever the post happened to be viewed without proving proper venue.
Submitting cropped screenshots without URLs, dates, account details, or authentication.
Naming every person who liked, reacted to, or commented on the post as a cyber libel author.
Assuming offensive, embarrassing, or false speech is automatically criminally defamatory.
Ignoring privilege, public-interest commentary, or the actual-malice requirement.
Exaggerating damages or submitting documents that do not connect the loss to the publication.
Sending threats or demanding money in terms that could create separate legal exposure.
Believing a platform report, barangay proceeding, or informal police inquiry necessarily interrupts prescription.

Mistakes by respondents

Ignoring a subpoena because no court case has yet been filed.
Deleting accounts, chats, drafts, or devices after receiving notice of a complaint.
Arguing only that the statement was “an opinion” while it plainly alleges verifiable facts.
Relying on rumor, another post, or a pending accusation as proof of truth.
Repeating the accusation while defending it online.
Assuming account hacking without preserving security alerts or requesting relevant records.
Contacting the complainant or witnesses in a threatening or manipulative way.
Missing the counter-affidavit, reconsideration, review, arraignment, bail, or appeal deadline.
Turning over a device or password informally without asking about the legal authority, scope, and documentation for the request.

When legal help is urgent

Seek a Philippine criminal-law or cybercrime lawyer immediately when:

the one-year filing deadline may expire soon;
a prosecutor’s subpoena has been received;
law enforcement wants to search, seize, copy, or examine a device or account;
a warrant of arrest or information has been issued;
the account is anonymous, hacked, shared, or controlled from abroad;
provider records or deleted content must be preserved;
the statement concerns a public official, journalist, media organization, whistleblower, or matter of public concern;
the communication was made in a workplace, professional, disciplinary, or judicial setting;
a settlement demand includes money, silence, retraction, or withdrawal of another complaint;
related threats, stalking, identity theft, doxxing, privacy violations, or intimate images are involved; or
the same publication has generated cases in several cities.

Those unable to afford private counsel may inquire with the Public Attorney’s Office about eligibility and available assistance. Cybercrime incidents may be reported through the official channels of the NBI or PNP Anti-Cybercrime Group, but confirm the current filing instructions directly with the relevant office.

Frequently asked questions

Is a false Facebook post automatically cyber libel?

No. The prosecution must establish all elements, including defamatory imputation, identification, publication to a third person, malice where required, authorship or legal responsibility, and use of a computer system. Privilege and constitutional protections may apply.

Can I file if my name was not mentioned?

Possibly. You must show that readers familiar with the circumstances could reasonably identify you. Initials, photographs, job titles, relationships, or unique events may be sufficient in context.

Is a group chat “public” enough?

Publication for libel does not require access by the general public. Communication to at least one third person may suffice. However, a limited group may be relevant to privilege, audience, damages, and proof.

Can someone be charged for sharing or liking a post?

A mere like, reaction, or similar response is not treated as authorship of cyber libel under Disini. A fresh repost, added accusation, or material republication requires a fact-specific analysis.

Does deleting the post end the case?

No. Deletion may limit continuing harm, but evidence already preserved or obtained from witnesses, devices, or providers may remain usable. Deletion also does not restart or erase prescription.

Does an apology prevent prosecution?

Not automatically. An apology or correction may affect the parties’ decisions, damages, or the court’s assessment of circumstances, but it does not by itself erase a completed offense.

Can the complainant withdraw the case after settlement?

The complainant may execute an affidavit of desistance or address the civil claim, but the prosecutor or court is not automatically bound to dismiss a criminal case prosecuted in the name of the People.

How long do I have to file?

Generally one year from discovery, subject to Article 91 and the facts identified in Causing v. People. Because discovery and interruption can be disputed, do not wait until the final days.

Can I sue for damages without pursuing a criminal conviction?

Potentially. Article 33 of the Civil Code permits an independent civil action for defamation. The proper claim, deadline, damages, and relationship to any criminal case should be reviewed by counsel.

Can police search my phone because someone filed a complaint?

A complaint alone does not create unlimited authority to search a device. Republic Act No. 10175 and the Constitution impose warrant and scope requirements for obtaining or examining protected computer data, subject to recognized exceptions. Do not obstruct officers, but ask for the warrant or legal basis and contact counsel promptly.

Official legal sources

This article provides general legal information, not legal advice or an assessment of any particular post, complaint, or defense. Cyber libel outcomes depend heavily on the exact words, context, dates, parties, documents, electronic evidence, and procedural history. Official sources and current procedures were checked as of September 14, 2026.