Quick answer

Cyber libel is committed when a person authors and publishes through a computer system an identifiable, defamatory imputation with the legally required malice. A complainant ordinarily starts by filing a sworn complaint and supporting evidence with the proper city or provincial prosecutor’s office, either directly or after seeking investigation by the National Bureau of Investigation or Philippine National Police cybercrime unit. The prosecutor conducts a preliminary investigation before any criminal case may proceed in a designated Regional Trial Court cybercrime court.

If you are accused, do not ignore a subpoena. Secure counsel immediately, preserve the complete online context, and submit a sworn counter-affidavit and supporting evidence within the deadline stated in the subpoena. Do not contact or threaten the complainant, delete evidence, fabricate screenshots, or argue about the case online.

A hurtful or false online statement is not automatically cyber libel. Liability depends on the precise words or images used, authorship, publication to another person, identification of the complainant, defamatory meaning, malice, applicable privileges or defenses, venue, and timely filing. The prosecution must ultimately prove every element beyond reasonable doubt.

What qualifies as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel to publication through a computer system or similar means. This may include an original social-media post, blog entry, online article, public comment, email sent to third persons, video caption, digital image, or other internet-based publication.

The prosecution generally must establish:

A defamatory imputation. The material imputes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to cause dishonor, discredit, or contempt.
Identification. The complainant is named or is identifiable from the words, images, circumstances, or information known to readers. A person need not always be expressly named, but identification cannot rest on speculation.
Publication. At least one person other than the author and the person defamed received, viewed, or understood the material. A message sent only to the person concerned ordinarily lacks the third-person publication required for libel, although another offense may apply.
Authorship and use of a computer system. Evidence must connect the respondent to the creation and online publication of the statement. Ownership of an account, standing alone, may not settle who actually authored a post.
Malice. Article 354 generally presumes malice from a defamatory imputation unless the communication is privileged or the circumstances establish good intention and a justifiable motive. Different constitutional standards apply when speech concerns public officials, public figures, or matters of public interest.

The material is assessed as a whole and in its actual context. Courts consider the ordinary meaning conveyed to reasonable readers—not merely the label attached by either party.

Who can be held liable?

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as to the original author but ruled that people who merely receive and react to a post cannot be punished for aiding or abetting cyber libel under Section 5 of Republic Act No. 10175.

Accordingly:

Merely liking, receiving, or reacting to another person’s defamatory post does not by itself create criminal liability for cyber libel.
A simple share or reaction must not automatically be treated as authorship.
A person who adds a new defamatory accusation in a comment, caption, repost, or separate post may become the original author of that new statement.
Editors, publishers, account administrators, employers, page owners, and corporate officers are not automatically liable merely because of their position. The evidence must establish the participation and state of mind required by law.

Authorship is frequently the central factual dispute. Account records, device evidence, admissions, witnesses, platform data, and the circumstances of publication may matter.

Statements that may be protected

Truth is important, but context and motive still matter

Under Article 361 of the Revised Penal Code, proof of truth may support acquittal when the imputation concerns a crime and the accused also proves that publication was made with good motives and for justifiable ends. For an imputation of an act or omission that is not a crime, the Code restricts when proof of truth may be admitted, including statements about government employees concerning the discharge of official duties.

Do not assume that “it is true” ends the analysis. Preserve reliable proof of both accuracy and the legitimate reason for publication.

Private communications made in the performance of a duty

Article 354 recognizes a qualified privilege for a private communication made to another person in the performance of a legal, moral, or social duty. The privilege is not a license to publish an accusation indiscriminately. The recipient, purpose, scope, language, and absence or presence of actual malice remain important.

A focused complaint sent in good faith to an employer, regulator, school, association, or public authority may be treated differently from broadcasting the same accusation to the general public.

Fair and true reports of official proceedings

A fair and true report, made in good faith and without comments or remarks, of qualifying official proceedings or acts performed by public officers may be privileged under Article 354. Material inaccuracies, embellishment, misleading omissions, or personal accusations outside the official record can defeat the protection.

Public officials, public figures, and public-interest speech

When the offended party is a public official or public figure and the statement concerns a public matter, the prosecution may have to prove actual malice: knowledge of falsity or reckless disregard of whether the statement was false. Reckless disregard requires more than ordinary or even gross negligence; it involves serious doubts about truth or a high awareness of probable falsity.

Not every employee, professional, business owner, influencer, or locally known person is automatically a public figure. The person’s role and the subject of the statement require a fact-specific constitutional analysis.

Opinion, criticism, satire, and rhetorical language

An opinion is not protected merely because it begins with “I think.” A supposed opinion may still imply undisclosed, provably false facts. Conversely, criticism, parody, satire, exaggeration, or rhetorical language that a reasonable reader would not understand as stating an actual fact may be protected.

The court examines the exact language, surrounding discussion, audience, medium, and factual assertions implied.

Time limit for filing

The Supreme Court’s current position is that criminal cyber libel prescribes one year from discovery of the offense, not 12 years. Because prescription can turn on when the publication was actually discovered, when a valid complaint was filed, whether the period was legally interrupted, and whether a later online act constitutes a genuinely new publication, obtain legal advice well before the year expires. Do not wait for takedown negotiations to conclude.

Editing or updating an old post does not automatically create a new offense. Whether an alteration amounts to a new publication depends on what changed and the surrounding facts.

A separate civil action may have its own one-year prescriptive period under Article 1146 of the Civil Code. Criminal and civil deadlines should be evaluated independently.

How to file a cyber-libel complaint

1. Preserve the evidence before requesting removal

Capture and retain:

The complete post, article, comment, video, or message—not only the allegedly defamatory sentence
The account name, profile page, username, and visible account identifiers
The full URL and any post or content identifier
The date and time displayed, with the applicable time zone if known
Images, captions, hashtags, comments, edits, and surrounding conversation
Proof that third persons saw or received the material
Messages or admissions connecting the respondent to the account or publication
Earlier communications showing knowledge of falsity, hostility, correction requests, or motive
Documents and witnesses showing why the imputation is false
Evidence of reputational or financial harm, if damages will be claimed
The original files and device on which the material was received or captured

Take screenshots and, where possible, screen recordings showing navigation from the profile or page to the publication. Keep the original files unchanged and backed up. Record who collected each item, when, from which device, and how it was stored.

A screenshot can be challenged. Electronic evidence must still be authenticated under the Rules on Electronic Evidence. A lawyer or cybercrime investigator can assess whether platform records, device examination, witness testimony, or other corroboration is needed.

2. Identify the correct respondent

Do not name a person solely because an account displays that person’s name or photograph. Accounts can be impersonated, shared, compromised, or operated by staff. Record the facts connecting the suspected author to the post.

If the author is anonymous, consult the NBI or PNP promptly. Subscriber, traffic, and content data generally cannot simply be demanded by a private complainant. Preservation, disclosure, search, and examination of computer data are governed by Republic Act No. 10175 and the Rule on Cybercrime Warrants. Court authority is required for protected data, and providers may retain different categories of data only for limited periods.

3. Determine proper venue

Cyber-libel venue is jurisdictional and should not be chosen merely for convenience. Under Section 2.1 of the Rule on Cybercrime Warrants, a criminal action under Sections 4 or 5 of Republic Act No. 10175 is filed in the designated cybercrime court of the province or city:

where the offense or any element was committed;
where any part of the computer system used is situated; or
where damage to a natural or juridical person took place.

The first court properly acquiring jurisdiction excludes the others. A bare claim that online content could be accessed anywhere is not necessarily enough. The complaint should state concrete venue facts, including the relevant residence, location, computer system, act, or damage. The governing approach is discussed in Henares v. Hon. Villarama.

4. Prepare a sworn complaint

The complaint-affidavit should clearly state:

The complainant’s and respondent’s identifying details and addresses, if known
The exact statement or content complained of
When and where it was posted and discovered
How the complainant is identifiable
Who saw or received it
Why it is defamatory and false or unsupported
Facts showing authorship and malice
Facts establishing Philippine jurisdiction and proper venue
The relief sought
A numbered list of attached evidence and witness affidavits

Avoid conclusions unsupported by personal knowledge. Separate what the complainant personally saw from what another witness must establish.

The DOJ publishes its requirements for filing a complaint for preliminary investigation and the necessary National Prosecution Service forms. Local offices may have administrative requirements concerning copies, data forms, identification, oath administration, and filing fees; confirm these directly with the proper prosecutor’s office before filing.

5. File with the proper office

A complainant may ordinarily:

File the complaint directly with the proper city or provincial prosecutor’s office; or
First request investigation from the NBI Cybercrime Division or an appropriate PNP Anti-Cybercrime Group office, which may gather evidence and endorse the case for prosecution.

NBI or PNP investigation can be especially important when authorship is disputed, the account is anonymous, forensic examination is necessary, or provider-held information must be preserved through lawful process. Their involvement does not guarantee that the prosecutor will find sufficient basis to file a case.

6. Participate in the preliminary investigation

The prosecutor assesses whether the evidence meets the governing standard for filing an information in court. The respondent must be furnished the complaint and supporting evidence and given an opportunity to submit counter-evidence.

The investigating prosecutor may resolve the matter on affidavits and documents or call a clarificatory hearing. This is not yet a criminal trial, and there is ordinarily no right to conduct a trial-style cross-examination at this stage.

If the prosecutor dismisses the complaint or directs the filing of an information, the available motion for reconsideration or petition for review—and its deadline—depends on the applicable DOJ rules and the procedural posture. Act immediately upon receiving the resolution because these periods are short and late remedies may be rejected.

7. Understand what happens in court

If the prosecutor finds the required basis and the reviewing prosecutor approves, an information may be filed in the proper designated Regional Trial Court. The judge independently evaluates probable cause and may dismiss the case, require additional evidence, issue a summons where legally appropriate, or issue a warrant of arrest.

The accused is presumed innocent. A prosecutor’s finding is not a conviction. The case proceeds through arraignment, pre-trial, trial, judgment, and any timely post-judgment remedies.

Cyber libel carries a higher penalty than conventional libel because Section 6 of Republic Act No. 10175 raises by one degree the penalty for crimes committed through information and communications technology. Depending on the applicable sentencing rules, the exposure may reach imprisonment from four years, two months and one day to eight years, apart from a possible fine, civil liability, and costs. The actual sentence, if any, depends on the charge, evidence, circumstances, governing amendments, and the court’s judgment.

How to defend against a cyber-libel complaint

1. Treat a subpoena or warrant as urgent

Note the date and manner of service immediately. Under Rule 112’s general preliminary-investigation procedure, a respondent is ordinarily directed to submit counter-affidavits and supporting documents within 10 days from receipt of the subpoena. Follow the actual subpoena and current prosecution rules; never assume that an extension will be granted.

If a warrant has been issued, do not evade arrest or attempt to negotiate privately with the arresting officer. Have counsel verify the case, court, warrant, and available bail arrangements.

2. Obtain the complete record

Review the complaint-affidavit, annexes, screenshots, witness statements, and technical evidence. A respondent has the right to examine evidence submitted by the complainant that was not furnished and may copy it at the respondent’s expense, subject to applicable procedures.

Build a chronology covering authorship, creation, posting, edits, discovery, complaints, takedown, and service of process.

3. Prepare a sworn, evidence-based counter-affidavit

A counter-affidavit is not the place for a bare denial or an online argument. Address each required element and attach admissible supporting proof. Potential issues may include:

The respondent did not author or publish the material
The account was impersonated, compromised, or operated by someone else
No third person received the communication
The complainant was not identified or identifiable
The words are not defamatory when read in full context
The statement was protected opinion, criticism, satire, or rhetorical language
The publication was privileged
The imputation was true and made with good motives and for justifiable ends, where Article 361 applies
Actual malice was not proved where constitutionally required
The evidence is unauthenticated, incomplete, altered, or fails to establish authorship
Venue is improper
The complaint was filed after prescription
The challenged conduct was merely receipt or reaction rather than authorship
The same online publication is being impermissibly charged as both ordinary and cyber libel

Affidavits should be based on personal knowledge. Preserve favorable evidence even if it is embarrassing or appears inconsistent; counsel must know the complete record to avoid a defense contradicted later by platform or device evidence.

4. Exercise the right to counsel and the right against self-incrimination

Do not give an informal “explanation” to investigators, sign an affidavit, surrender a device, disclose passwords, or consent to a search without understanding the legal consequences. Ask whether the officer has a warrant and obtain a copy. Do not physically obstruct a lawful search.

Evidence obtained without the required warrant or beyond its lawful authority may be inadmissible under Section 18 of Republic Act No. 10175. The validity, scope, execution, chain of custody, and return of a cybercrime warrant should be reviewed carefully.

5. Prepare for bail without assuming arrest is automatic

Bail and custody depend on whether an information has been filed, whether the judge finds probable cause, the process issued by the court, and the accused’s circumstances. A subpoena from a prosecutor is not itself a warrant of arrest.

Once a court case exists, counsel can verify the branch, case number, charge, process issued, and approved bail. Never pay an unofficial intermediary or rely on a screenshot of an alleged warrant.

6. Consider lawful correction or settlement carefully

A prompt correction, apology, or takedown may reduce harm and can be relevant to motive or damages, but it does not automatically erase criminal liability or end a filed case. An affidavit of desistance also does not automatically compel dismissal because a criminal prosecution is brought in the name of the People of the Philippines.

Any settlement should be voluntary, accurately documented, and reviewed by counsel. Do not demand money through threats of arrest or publication, and do not pressure witnesses.

Civil remedies and platform action

Cyber libel may carry civil liability for injury caused by the offense. Depending on the facts, an offended party may pursue the civil aspect with the criminal case, reserve an authorized separate civil action, or consider an independent civil action under Article 33 of the Civil Code.

The choice affects pleadings, proof, prescription, and the risk of duplicative recovery. Obtain advice before filing parallel proceedings or accepting a settlement.

A person may also use a platform’s reporting or preservation process. Platform removal can limit continuing harm but is not a substitute for preserving evidence. Obtain complete records first, unless immediate removal is necessary for safety or privacy.

Cyber libel may not be the only—or the correct—legal issue. Threats, stalking, unauthorized access, identity theft, intimate-image abuse, data-privacy violations, violence against women and children, or harassment may fall under different laws with different agencies and remedies.

Evidence checklist

For either side, preserve:

Original devices, files, messages, and account notices
Full-page screenshots and screen recordings
URLs, usernames, post identifiers, dates, and timestamps
Downloaded copies with available metadata
Original photographs or videos used in the publication
Drafts, source documents, research notes, and editorial records
Communications about authorship, verification, correction, or removal
Login alerts and security records if compromise or impersonation is claimed
Names and contact details of people who saw the publication
Documents establishing residence and venue
Records showing when the content was first discovered
Proof of accuracy, falsity, good motive, privilege, or actual harm
Copies of every filing, annex, receipt, subpoena, order, and proof of service

Keep an unedited master copy. Work from duplicates and document every transfer of potentially relevant electronic evidence.

Common mistakes

Filing against an account owner without proving authorship
Submitting cropped screenshots that hide context, dates, or account details
Assuming every insult or negative review is a defamatory factual imputation
Assuming truth alone always defeats criminal libel
Treating criticism of official conduct as equivalent to a private accusation
Choosing venue solely because a post was viewable there
Waiting for the platform or the other party to respond while prescription runs
Ignoring a prosecutor’s subpoena or missing the counter-affidavit deadline
Filing a motion to dismiss instead of the required counter-affidavit during preliminary investigation
Deleting posts, chats, accounts, or devices after learning of a complaint
Posting new accusations about the complainant, witnesses, investigators, or judge
Publishing confidential affidavits or personal information
Paying a fixer or relying on an unofficial “case dismissal”
Assuming a takedown, apology, or affidavit of desistance automatically closes the case

When legal help is urgent

Seek a Philippine lawyer immediately if:

A prosecutor’s subpoena, court summons, information, or warrant has been received
The one-year prescriptive period may be approaching
The author is anonymous or platform data may soon be lost
Police or NBI officers request an interview, passwords, device access, or surrender of equipment
A search or cybercrime warrant has been served
The dispute involves a journalist, public official, public figure, election, or public-interest reporting
Several posts, authors, jurisdictions, or foreign service providers are involved
The material includes threats, intimate images, a child, stalking, or personal-data exposure
Settlement demands include threats of arrest, exposure, or further publication
A prosecutor’s resolution has been received and a review remedy is being considered

Those who cannot afford private counsel may inquire with the Public Attorney’s Office, subject to its eligibility, merit, conflict, and service rules.

Frequently asked questions

Can I file cyber libel because a Facebook post is false?

Possibly, but falsity alone is insufficient. The evidence must also establish a defamatory imputation, identification, publication to a third person, authorship through a computer system, and the legally required malice. Privilege and constitutional protection for public-interest speech may apply.

Is a private message cyber libel?

A message sent only to the person criticized ordinarily lacks publication to a third person. A group chat, copied email, forwarded message, or message shown to others may satisfy publication, depending on proof. Other offenses may apply even when libel does not.

Is sharing or liking a defamatory post a crime?

Not by itself. Disini protects people who simply receive and react to a post from liability for aiding or abetting cyber libel. A person who adds a new defamatory accusation may be treated as the author of that new material.

Can an anonymous account be charged?

Yes, if lawful evidence identifies the author and proves the other elements. Private parties cannot compel protected provider data on their own; prompt NBI or PNP assistance and court-authorized process may be necessary.

Does deleting the post prevent a case?

No. Deletion does not erase a completed publication, and copies or provider records may remain. Deleting evidence after learning of a dispute can also damage credibility. Preserve the material before any takedown.

Does an apology end the case?

No. An apology may affect motive, damages, settlement, or prosecutorial assessment, but it does not automatically extinguish criminal liability.

Can both ordinary libel and cyber libel be charged for the same online post?

The Supreme Court held in Disini that the same online libel cannot be punished under both the Revised Penal Code and Section 4(c)(4) of Republic Act No. 10175 for the identical publication because that would violate double jeopardy.

Where is the case filed?

The criminal action belongs in a designated Regional Trial Court cybercrime court with a legally sufficient connection to an element, the computer system used, or the damage. The complaint must allege concrete venue facts; nationwide online accessibility alone should not be assumed sufficient.

How long do I have to file?

Under the Supreme Court’s current ruling, criminal cyber libel prescribes in one year from discovery. The exact computation and any interruption of the period are fact-sensitive, so obtain advice promptly.

Can I represent myself?

A complainant may execute and file a complaint-affidavit, but cyber-libel cases involve criminal exposure, constitutional speech protections, electronic evidence, venue, and short deadlines. An accused facing possible imprisonment should not proceed without counsel.

Official legal sources

This article provides general legal information, not advice for a particular case and not an attorney-client relationship. Cyber-libel outcomes depend heavily on the exact publication, evidence, parties, venue, and procedural history. Laws and procedures were checked against official sources through September 15, 2026.