How to File or Defend a Cyber Libel Case

Quick answer

Cyber libel is libel committed through a computer system or a similar digital means. A Facebook post, public comment, blog entry, online article, video caption, email sent to other people, or comparable electronic publication may qualify—but an offensive or embarrassing statement is not automatically cyber libel.

The prosecution generally must establish beyond reasonable doubt:

  1. A defamatory imputation of a crime, vice, defect, real or imaginary act or omission, status, condition, or circumstance;
  2. Publication to at least one person other than the person defamed;
  3. Identification of the person defamed, even if that person was not expressly named;
  4. Malice; and
  5. Use of a computer system or similar digital means.

A complainant normally starts by filing a sworn complaint and supporting evidence with the proper city or provincial prosecutor’s office. The National Bureau of Investigation Cybercrime Division or the Philippine National Police Anti-Cybercrime Group may assist in investigating and preserving digital evidence, but a police report by itself does not replace the prosecutorial process.

A respondent who receives a subpoena should not ignore it. The counter-affidavit is the main opportunity to challenge the accusation before an Information is filed in court. The response period stated in the subpoena and the applicable current prosecution rules must be followed strictly.

Most importantly, the Supreme Court has ruled that cyber libel prescribes in one year from its discovery by the offended party, the authorities, or their agents. Questions about when discovery occurred and whether prescription was validly interrupted depend on evidence and should be assessed immediately.

What Philippine law treats as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 penalizes the unlawful acts of libel defined in Article 355 of the Revised Penal Code when committed through a computer system or any similar means that may later be devised.

Under Article 353, an imputation may be defamatory if it tends to cause dishonor, discredit, or contempt. Courts consider the words in their ordinary meaning and in their full context. Relevant circumstances include the entire post or conversation, accompanying images, the audience, the relationship of the parties, and whether a reasonable reader would understand the statement as referring to the complainant.

Cyber libel can arise even when:

  • The complainant is identified only by initials, a photograph, an office, a nickname, or circumstances recognizable to readers.
  • The material was posted in a group or sent only to a limited audience, provided a third person received it.
  • The post uses questions, insinuations, satire, or indirect language that conveys a defamatory factual accusation when read in context.
  • The account is anonymous or uses a false name, if admissible evidence can establish who authored or published the material.

On the other hand, vulgarity, anger, criticism, exaggeration, or an unfavorable opinion does not automatically establish every element of libel. Courts must examine what the communication actually asserts and whether the prosecution proved identification, publication, malice, and authorship.

Who may be held responsible

In Disini v. Secretary of Justice, the Supreme Court upheld the cyber-libel provision as applied to the original author of the online publication. It rejected criminal liability under the Cybercrime Prevention Act for people who merely receive a post and react to it or pass it along through actions such as liking, commenting on, or sharing it.

That ruling does not give blanket immunity for everything a person does after seeing another post. Someone who writes a new defamatory caption, materially adds to an accusation, creates a separate publication, or is shown to be an original or participating author may present a different factual situation. Liability should therefore be assessed from the person’s own words and conduct, not merely the platform label attached to the action.

A website owner, page administrator, editor, employee, company officer, or account holder is likewise not automatically criminally liable simply because of that position. The prosecution must connect the particular accused to the punishable publication and prove the required elements as to that person.

Malice, truth, privilege, and public officials

General presumption and good intention

Article 354 of the Revised Penal Code generally treats a defamatory imputation as malicious even if true, unless good intention and justifiable motive are shown. The same provision recognizes privileged communications, including:

  • A private communication made in the performance of a legal, moral, or social duty; and
  • A fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts.

Privilege is highly fact-dependent. A communication may lose protection if it is unnecessarily circulated, embellished, motivated by spite, or unrelated to the duty or legitimate interest that supposedly justified it.

Public officers, public figures, and matters of public concern

Speech about public officers and public figures receives greater constitutional protection. Where the actual-malice standard applies, the prosecution must prove that the accused made the statement knowing it was false or with reckless disregard of whether it was false.

Reckless disregard is more than ordinary carelessness, a failure to conduct perfect research, or the fact that another person disputes the statement. The evidence must address the accused’s state of mind and awareness of probable falsity.

In Tan v. People, G.R. No. 265929, the Supreme Court acquitted the accused after finding that actual malice had not been proved in connection with online accusations against a municipal mayor. Whether the standard applies in another case depends on the complainant’s status, the subject matter, the context, and the evidence.

Is truth a complete defense?

Not in every criminal-libel case. Article 361 permits proof of truth in specified circumstances and requires good motives and justifiable ends for acquittal on that ground. Where the imputation concerns a crime allegedly committed by a government employee in relation to official duties, the statutory treatment is different.

A respondent should therefore preserve both:

  • Evidence showing that the statement had a reliable factual basis; and
  • Evidence showing why, to whom, and for what legitimate purpose it was communicated.

Labels such as “opinion,” “allegedly,” or “for awareness only” do not cure a post that, in substance, asserts a defamatory fact without a sufficient legal defense.

The one-year prescriptive period

The controlling rule is that cyber libel prescribes in one year, not 12 or 15 years.

In Causing v. People, G.R. No. 258524, subsequently affirmed by the Court en banc in its April 8, 2026 resolution, the Supreme Court held that the specific one-year period for libel under Article 90 of the Revised Penal Code governs cyber libel.

Under Article 91, the period runs from discovery by the offended party, the authorities, or their agents—not invariably from the day the material was uploaded. Online publication does not conclusively establish immediate discovery because access may depend on privacy settings, group membership, connectivity, or other circumstances.

The filing of a proper complaint for preliminary investigation can interrupt prescription. Because the dates of publication, discovery, filing, withdrawal, dismissal, and refiling may all matter, do not wait until the anniversary of a post. Secure legal advice as soon as possible and document exactly how and when the material was first discovered.

A later edit, repost, or separate publication may raise distinct questions about authorship, publication, retroactivity, and prescription. It should not automatically be assumed that merely leaving an old post online restarts the period each day.

How to file a cyber-libel complaint

1. Preserve the publication before contacting the author

Save the evidence in a way that shows context and source:

  • Full-page screenshots, not only cropped words;
  • The complete URL or account address;
  • Account name, profile details, post identifier, date, time, and visible privacy setting;
  • The entire thread, article, video, caption, comments, and relevant preceding exchanges;
  • Original downloaded files, emails, messages, or recordings where lawfully obtained;
  • Names of people who saw the publication and how they recognized the complainant;
  • Notifications, platform correspondence, takedown responses, and account changes;
  • Documents showing falsity, reputational harm, lost work, medical treatment, or expenses; and
  • A written timeline stating the exact date and circumstances of discovery.

Keep untouched originals and working copies. Do not add annotations to the only copy. If a post is still accessible, consider having a neutral witness record the retrieval or obtaining professional forensic preservation.

Screenshots are useful but may be challenged as incomplete, altered, unauthenticated, or disconnected from the accused. Philippine rules on electronic evidence still require a proper basis for authenticity and admissibility.

2. Identify the correct accused

Do not accuse an account holder solely because a profile bears that person’s name or photograph. Consider whether evidence connects the person to the account and the particular publication.

Where identity is genuinely unknown, request investigative assistance promptly. Subscriber information, traffic data, or content held by a service provider may require lawful preservation measures, disclosure procedures, or a cybercrime warrant. A private person should not hack an account, impersonate another user, or unlawfully obtain protected data.

3. Check every legal element

The complaint-affidavit should explain, from personal knowledge where possible:

  • The exact words, images, or material complained of;
  • Why the material is defamatory;
  • How the complainant was named or recognizable;
  • Who received or viewed it;
  • Why the respondent is believed to be its author or publisher;
  • When and how the complainant discovered it;
  • What computer system or digital means was used;
  • Facts supporting malice, particularly where actual malice must be proved; and
  • The supporting documents or electronic evidence attached.

Separate firsthand facts from information supplied by witnesses. Each important witness should ordinarily execute an affidavit covering matters within that witness’s own knowledge.

4. File with the proper office

A criminal complaint may be filed with the prosecutor’s office having proper territorial authority. The precise office and eventual court venue should be checked before filing.

Under Section 2.1 of the Supreme Court’s Rule on Cybercrime Warrants, criminal actions for offenses under Sections 4 and 5 of the Cybercrime Prevention Act are filed before the designated cybercrime court of the province or city:

  • Where the offense or any of its elements was committed;
  • Where any part of the computer system used is situated; or
  • Where any part of the damage to a natural or juridical person took place.

The court where the criminal action is first filed acquires jurisdiction to the exclusion of the others. Venue is jurisdictional in criminal cases and should be supported by specific facts, not merely a convenient address selected by the complainant.

The DOJ’s preliminary-investigation filing guidance identifies commonly required documents, including an investigation data form, complaint-affidavit or sworn statement, witness affidavits, and supporting evidence. Confirm the current documentary, copy, notarization, and filing requirements directly with the particular prosecution office.

The DOJ Office of Cybercrime, NBI, and PNP Anti-Cybercrime Group may provide investigative assistance. Report submission does not guarantee that a prosecutor will find probable cause.

5. Participate in the preliminary investigation

The prosecutor determines whether the evidence establishes probable cause to file an Information in court. This is not yet a trial and does not require proof sufficient for conviction, but the complaint must still present admissible and credible evidence for every essential element.

If the complaint is dismissed or an Information is recommended, available review or reconsideration remedies carry short, technical deadlines. Obtain the complete resolution, note the actual date of receipt, and consult counsel immediately rather than relying on an informal explanation from court or office staff.

How to defend a cyber-libel complaint

Act immediately upon receiving a subpoena

Record when, where, and by whom the subpoena and attachments were received. Check whether the complaint, affidavits, and supporting evidence are complete. The counter-affidavit deadline stated in the subpoena must be treated as controlling unless the prosecutor lawfully grants an extension.

Do not ignore the proceeding merely because the post has been deleted, the complainant has blocked the account, or the accusation appears weak. Failure to respond may cause the prosecutor to resolve the complaint using only the complainant’s submissions.

Preserve—not erase—your own evidence

Keep the original device, account records, drafts, source documents, correspondence, research notes, and complete conversation. Preserve material showing:

  • Who controlled or had access to the account;
  • Whether the exhibit is genuine and complete;
  • The original date and content of the publication;
  • The source and verification undertaken;
  • Requests for comment and replies received;
  • Corrections, clarifications, or takedown history;
  • The intended and actual audience;
  • A legal, moral, social, professional, or public-interest duty;
  • Good faith and justifiable motive; and
  • The complainant’s status as a public officer or public figure.

Do not fabricate a backdated correction, coach witnesses, pressure the complainant, or remotely wipe a device. Those acts can damage credibility and may create separate legal problems.

Build the defense around the elements

Possible defenses, depending on the evidence, include:

  • The words are not defamatory when read in full context.
  • The statement is protected opinion, rhetorical criticism, or fair comment rather than a provably defamatory factual imputation.
  • The complainant was not named and was not reasonably identifiable to recipients.
  • No third person received the communication.
  • The respondent did not author, control, or publish the material.
  • The prosecution cannot authenticate the account, post, screenshot, or electronic record.
  • The communication was privileged and made in good faith within the proper audience.
  • Truth, good motives, and justifiable ends are established to the extent required by Articles 354 and 361.
  • Actual malice was not proved where the complainant is a public officer or public figure or the constitutional standard otherwise applies.
  • The complaint was filed after the one-year prescriptive period.
  • The alleged act occurred before the Cybercrime Prevention Act became effective, making an unfavorable retroactive application impermissible.
  • Venue is not supported by the allegations and evidence.
  • The respondent merely liked, reacted to, commented on, or shared another person’s publication without becoming its original author—subject to close examination of any new words added.

A counter-affidavit should respond to the actual evidence, not simply deny everything. Attach supporting records, identify evidentiary defects, and explain the context in a chronological, restrained manner.

If an Information has already been filed

Once the prosecutor files an Information, the designated Regional Trial Court independently evaluates probable cause for a warrant of arrest. The accused should obtain counsel immediately to address bail, arraignment, access to the record, and any timely motion.

A motion to quash, when legally available, generally must be raised before plea. Certain objections can be waived if not asserted at the proper stage. Do not skip a court date or assume that a pending request for prosecutorial review automatically suspends proceedings.

Possible penalties and civil liability

Article 355 of the Revised Penal Code, as amended by Republic Act No. 10951, provides imprisonment or a fine ranging from ₱40,000 to ₱1,200,000, or both, for ordinary written libel. Section 6 of the Cybercrime Prevention Act prescribes a penalty one degree higher when the offense is committed through information and communications technology. Applied to imprisonment, the cyber-libel range may extend from prisión correccional in its maximum period to prisión mayor in its minimum period.

The exact sentence depends on the charge, applicable penalty rules, modifying circumstances, and the court’s judgment. The Supreme Court has confirmed that a court may impose a fine instead of imprisonment in an appropriate cyber-libel case, consistent with its policy favoring fines in libel cases when circumstances warrant.

A criminal case may also carry civil liability. The civil action arising from the offense is generally deemed instituted with the criminal case unless it is waived, reserved, or filed earlier under the Rules of Criminal Procedure. Separate civil remedies for defamation or violations of rights may also be considered, but their legal basis, venue, damages, and prescriptive periods require an independent assessment.

Common mistakes to avoid

  • Waiting for platform action while the one-year prescriptive period continues to run.
  • Saving only a cropped screenshot without the URL, account, date, thread, or surrounding context.
  • Treating every insult, bad review, or harsh opinion as criminal libel.
  • Assuming truth alone automatically defeats a criminal-libel charge.
  • Naming the account owner without evidence of authorship or control.
  • Filing wherever the complainant prefers without establishing lawful venue.
  • Reposting the material publicly “as evidence” and spreading it further.
  • Deleting accounts, messages, devices, or source records after receiving a demand or subpoena.
  • Contacting witnesses to align their stories.
  • Missing the subpoena, reconsideration, review, arraignment, or appeal deadline.
  • Believing that a private apology or platform takedown automatically ends a criminal case.
  • Assuming a police or NBI report already constitutes a timely prosecutor’s complaint.

When legal help is urgent

Consult a Philippine lawyer immediately if:

  • The one-year anniversary of discovery is approaching;
  • You have received a prosecutor’s subpoena, resolution, Information, warrant, or court notice;
  • The complainant or respondent is a public official, journalist, company, minor, or person with competing legal protections;
  • The author uses an anonymous account or evidence must be obtained from a platform;
  • The material was edited, republished, deleted, or first posted before October 2012;
  • Several jurisdictions may claim venue;
  • Devices or accounts are being searched, seized, or demanded;
  • The post also involves threats, stalking, intimate images, personal data, child-protection issues, or gender-based online sexual harassment; or
  • Settlement communications could amount to intimidation, extortion, an admission, or unlawful suppression of evidence.

Frequently asked questions

Can I file because someone insulted me in a private message?

Only if all elements are present. A message seen solely by the complainant ordinarily lacks publication to a third person. A group message or a message forwarded by its author to others may be different.

Is naming the victim required?

No. Identification may be established if people familiar with the circumstances reasonably understood who was being discussed. The complaint should identify those readers and explain how they recognized the person.

Is a screenshot enough?

Sometimes it is important evidence, but it is not automatically sufficient. Authenticity, completeness, authorship, publication, and context can still be disputed. Preserve the original electronic source and corroborating evidence.

Can a person be charged merely for sharing or liking a post?

Under Disini, cyber-libel liability under the challenged provision applies to the original author, not people who merely react to or pass along a post. A person who adds a new defamatory accusation or creates a separate publication may require a different analysis.

Does deleting the post erase liability?

No. Deletion does not undo an already completed publication, although it may affect available evidence and later circumstances. Preserve evidence before requesting or making a takedown.

Does an apology automatically dismiss the complaint?

No. An apology, correction, or settlement may affect the parties’ decisions and possibly the assessment of good faith or damages, but it does not by itself compel the State to dismiss a criminal case.

Can the complainant file years after the post?

Cyber libel prescribes one year from discovery by the offended party, authorities, or their agents. A claimed late discovery must be evaluated against the evidence. Filing and interruption of prescription are technical issues; do not assume that an old publication is automatically prescribed or still actionable.

Where will the case be tried?

In a designated cybercrime Regional Trial Court with venue under the Rule on Cybercrime Warrants. The Information must allege facts establishing a lawful venue.

Can both ordinary libel and cyber libel be charged for the same online act?

The Supreme Court held in Disini that punishing the same online libel under both the Revised Penal Code and the Cybercrime Prevention Act would violate the protection against double jeopardy. Different publications or distinct acts require separate analysis.

Is imprisonment inevitable after conviction?

No. The statutory framework allows an alternative fine, and the Supreme Court has recognized that a fine alone may be imposed in an appropriate cyber-libel case. Sentencing remains for the court based on the law and the particular circumstances.

Official references

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Cyber-libel questions are highly dependent on the exact publication, evidence, dates, parties, and procedural history. Sources and current rules were checked as of September 15, 2026.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.