Quick answer
A cyber libel case in the Philippines is not established merely because an online post is offensive, embarrassing, harsh, or false. The prosecution must establish the elements of libel—defamatory imputation, publication to a third person, identifiability of the person defamed, and malice—and must also show that the libel was committed through a computer system or similar means. Cyber libel is punishable under Section 4(c)(4) of Republic Act No. 10175, the Cybercrime Prevention Act of 2012, in relation to the Revised Penal Code. (Lawphil)
For someone filing a case, the most important early tasks are to preserve admissible electronic evidence, establish who authored the material, document when the defamatory material was discovered, identify a legally proper venue, and file the proper complaint before prescription becomes an issue. For someone defending a case, receiving a subpoena should trigger an immediate review of authorship, the exact words and context, publication and identification, privilege, truth and motive where legally relevant, actual malice where a public official or public figure is involved, electronic-evidence defects, venue, and prescription.
A particularly important current rule is that cyber libel prescribes in one year from discovery of the alleged defamatory material by the offended party, the authorities, or their agents. On April 8, 2026, the Supreme Court sitting En Banc reaffirmed this rule in Causing v. People. There is no automatic legal presumption that a Facebook or other social-media post was discovered on the day it was posted; the actual date of discovery can become a factual issue requiring evidence. (Lawphil)
What counts as cyber libel?
Article 353 of the Revised Penal Code defines libel as a public and malicious imputation of a crime, vice or defect, or an act, omission, condition, status, or circumstance tending to dishonor, discredit, or bring a natural or juridical person into contempt, or to blacken the memory of a deceased person. Section 4(c)(4) of RA 10175 applies the law on libel when the unlawful act is committed through a computer system or similar means. (Lawphil)
Typical online settings can include Facebook posts, X posts, blogs, websites, online articles, videos with defamatory statements, online comments, and comparable internet communications. Liability, however, depends on the content and evidence—not simply on the platform used.
Courts consider the publication as a whole and according to the natural and ordinary meaning that readers would understand. Insults or embarrassing statements do not automatically amount to criminal libel. The question remains whether the material, viewed in context, carries the kind of defamatory imputation covered by law. (Lawphil)
What must the prosecution prove?
Four basic elements must be established: a defamatory imputation concerning another person, publication, identifiability of the person allegedly defamed, and malice. For cyber libel, the prosecution must additionally connect the unlawful libel to the use of a computer system or similar technological means. (Lawphil)
The statement must be defamatory
The material must impute something that legally tends to dishonor, discredit, or expose the person to contempt. Context matters. A court does not decide the case merely by isolating an unpleasant word from the rest of the post. (Lawphil)
Someone other than the person defamed must receive it
“Publication” in libel means communication of the defamatory matter to a third person. The complainant need not personally have read the post before someone else saw it. Even communication to a limited audience can potentially satisfy publication if a third person received the defamatory matter. (Lawphil)
The complainant must be identifiable
A post need not expressly state the complainant's name. But there must be enough information for at least one third person to identify the complainant as the person being attacked. The complainant's own belief that the post referred to him or her is not enough. (Lawphil)
Malice must be addressed
Article 354 generally presumes a defamatory imputation malicious unless good intention and justifiable motive are shown, subject to recognized privileged communications. Different constitutional rules apply, however, when the speech concerns public officials, public figures, or matters of public interest. (Lawphil)
Public officials, public figures, and matters of public interest
Cyber libel law cannot be applied without considering freedom of speech and the constitutional protection afforded to discussion of public affairs.
The Supreme Court has held that in criminal libel cases involving public figures, particularly public officers, the prosecution must prove actual malice—that the accused knew the defamatory statement was false or acted with reckless disregard of whether it was false. The burden is on the prosecution; it is not the accused's burden to disprove actual malice. (Lawphil)
Fair comment on matters of public interest is also recognized as qualifiedly privileged. An opinion that can reasonably be inferred from established facts receives substantially different treatment from a fabricated factual accusation. Calling something an “opinion,” however, does not automatically make it immune from liability if the statement actually asserts false facts or rests on false factual assumptions. (Lawphil)
Whether a complainant is genuinely a public official or public figure, whether the statement concerns official conduct or a matter of legitimate public interest, and whether actual malice has been proved are fact-sensitive questions.
Are likes, shares, reactions, and comments automatically cyber libel?
No.
In Disini v. Secretary of Justice, the Supreme Court upheld the cyber-libel provision as constitutional with respect to the original author of the post, while declaring it unconstitutional as applied to persons who simply receive the post and react to it. The Court likewise invalidated the Cybercrime Prevention Act's aiding-or-abetting provision insofar as it was applied to online libel. (Chief 5)
That ruling should not be read as a blanket license to write new defamatory material in a comment or repost. A person who independently authors a new allegedly defamatory statement presents a different issue from someone who merely clicks a platform's reaction or redistribution function. The actual words and conduct must therefore be examined.
How to file a cyber libel complaint
Step 1: Preserve the online material before confronting the author
Do not assume the post will remain online. Capture the material before requesting deletion, sending a demand, or publicly confronting the account owner.
Screenshots are useful, but they should not be treated as self-proving. The Rules on Electronic Evidence place the burden of authenticating a private electronic document on the party offering it. Authentication may be established through appropriate evidence showing the document's integrity and reliability. (Lawphil)
Whenever possible, preserve the complete post rather than a cropped image that removes context.
Step 2: Record when the material was discovered
This is now critical because of the Supreme Court's 2026 ruling in Causing.
Cyber libel prescribes in one year from discovery, not under the formerly asserted 12- or 15-year theories. The Court also rejected a blanket rule that an online post is deemed discovered on its publication date. Discovery can instead be established from surrounding facts—for example, a complainant's reaction to the post, comments, threats to sue, communications about it, or other conduct showing knowledge. (Lawphil)
A complainant should therefore preserve evidence showing when and how the post was first discovered. A respondent should likewise preserve evidence showing that the complainant, the authorities, or their agents actually knew of the material earlier than claimed.
Do not wait until the end of the one-year period. Questions about interruption of prescription and the legal sufficiency of a particular filing can be consequential. A social-media report, private demand letter, or informal inquiry should not be treated as a substitute for timely filing of the appropriate legal complaint.
Step 3: Determine whether the evidence identifies the author
An account name and profile photograph do not necessarily prove who operated an account at the relevant time.
Look for admissions, associated messages, account information, witnesses familiar with the account, linked contact information, original electronic records, or other competent evidence connecting the respondent to the publication.
Where the account is anonymous, fictitious, compromised, or otherwise difficult to attribute, early technical investigation may be important. RA 10175 requires service providers to preserve specified traffic data and subscriber information for minimum periods and permits law-enforcement preservation orders for content data. Disclosure of subscriber, traffic, or relevant data under Section 14 requires the procedures prescribed by law, including a court warrant. (Lawphil)
The DOJ Office of Cybercrime may act on cybercrime complaints and referrals and facilitate preservation, production of data, evidence collection, and investigation. The NBI Cybercrime Division and PNP Anti-Cybercrime Group also perform cybercrime investigative functions. (Department of Justice)
Step 4: Review the post for every legal element and possible privilege
Before filing, ask more than “Is this false?”
Determine what the statement actually imputes, who received it, how a third person identified the complainant, why it is defamatory, whether it was privileged, whether the subject concerns public affairs, and what evidence exists of the author's state of mind.
A criminal complaint that ignores an obvious privilege, public-interest issue, attribution problem, or prescription defense may fail even though the complainant genuinely feels defamed.
Step 5: Select the proper venue
Venue in cyber libel should not be chosen simply because the internet post could theoretically be viewed everywhere.
Under Section 2.1 of the Rule on Cybercrime Warrants, criminal actions involving offenses under Sections 4 and 5 of RA 10175 are filed before the designated cybercrime court of the province or city where the offense or an element was committed, where any part of the computer system used is situated, or where damage to the natural or juridical person took place. The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of the others. (Lawphil)
The complaint at the prosecution stage should therefore be anchored to a legally sustainable venue for the eventual criminal case. Venue problems can be fatal or cause substantial delay, so unusual facts—especially posts made abroad, anonymous accounts, companies, or complainants living in different places—deserve careful review.
Step 6: Prepare the complaint-affidavit and supporting evidence
A complaint should identify the respondent, reproduce or accurately identify the allegedly defamatory material, explain the circumstances of publication and discovery, establish the complainant's identifiability, identify third persons who received or understood the publication, and attach the supporting electronic and testimonial evidence.
The complaint should be factual. Avoid turning the affidavit into another round of public accusations.
Cyber libel carries an imprisonment range above six years at its upper end, so it ordinarily falls under the DOJ's regular preliminary-investigation procedure rather than the expedited procedure for offenses punishable by six years or below. The governing DOJ-NPS rules are Department Circular No. 015, series of 2024. The Supreme Court expressly upheld those rules in Meking v. Remulla on November 11, 2025. (Department of Justice)
Step 7: Prove a case strong enough for the current prosecutorial standard
The current DOJ-NPS standard for preliminary investigation is prima facie evidence with reasonable certainty of conviction. The prosecutor evaluates whether the evidence is admissible, credible, capable of preservation and presentation, and sufficient—if left uncontradicted—to establish the elements of the crime, while also considering the respondent's evidence. (Lawphil)
That makes evidence quality particularly important. A complaint should not depend solely on assumptions about account ownership, unauthenticated fragments, or conclusory claims that the words were “malicious.”
How to defend a cyber libel complaint
Act immediately upon receiving a subpoena
Do not ignore a subpoena from the prosecutor.
Under the 2024 DOJ-NPS rules, the subpoena in a regular preliminary investigation is structured to give the respondent at least 10 days from receipt of the subpoena and complaint-affidavit to submit the counter-affidavit. Extensions are not automatic and are allowed only on recognized grounds. The written subpoena and prosecutor's order should be followed exactly.
Because the counter-affidavit may determine whether an Information is filed in court, it should normally present the factual and legal defenses together with the supporting evidence rather than merely deny the accusations.
Check whether the accused actually authored the statement
The complainant must prove the identity of the responsible person. If the defense is that the account was fake, hacked, shared, impersonated, or operated by someone else, preserve the evidence supporting that position immediately.
Do not delete accounts, messages, devices, login records, or other relevant data after learning of the case. Deletion can destroy material that might have assisted the defense and may create additional evidentiary disputes.
Analyze the precise words and their full context
Determine whether the publication actually contains a defamatory factual imputation when read as a whole. Preserve surrounding posts, conversation threads, links, quotations, photographs, source materials, and earlier exchanges that explain how an ordinary reader would understand the statement.
A cropped screenshot supplied by the complainant may omit qualifications, sarcasm, source attribution, questions, prior statements, or other context relevant to meaning.
Challenge publication or identifiability when the evidence is lacking
If no third person received the allegedly defamatory statement, publication may be absent. If a complainant was unnamed and no competent evidence connects the description to that person in the mind of a third party, identifiability may fail. (Lawphil)
Raise privilege where supported by the facts
Article 354 recognizes qualifiedly privileged communications, including certain private communications made in the performance of a legal, moral, or social duty and fair and true good-faith reports of nonconfidential official proceedings, subject to the statutory requirements. Jurisprudence additionally protects fair commentary on matters of public interest. (Lawphil)
Privilege is highly fact-dependent. Posting an accusation publicly does not become privileged merely because the author says there was a “duty to warn everyone.”
Apply the actual-malice rule where appropriate
Where the complainant is a public figure or public officer and the statement concerns public or official matters, examine whether the prosecution can establish knowledge of falsity or reckless disregard for truth.
Evidence that the accused relied on documents, requested explanations, checked official records, interviewed sources, accurately quoted proceedings, or otherwise investigated the matter may be relevant. Conversely, deliberately fabricating facts or consciously disregarding clear contrary information can substantially weaken the defense. (Lawphil)
Do not assume that “it was true” ends the case
Truth is important, but Philippine criminal libel law is more nuanced than the statement “truth is always a complete defense.”
Article 361 provides that truth may be offered in a criminal libel prosecution and that where the matter is true and was published with good motives and for justifiable ends, the accused shall be acquitted. It also contains a specific limitation concerning proof of truth for imputations of acts or omissions not constituting crimes, except when made against government employees regarding facts related to their official duties. (Lawphil)
A defense based on truth should therefore be supported with the underlying records and analyzed together with motive, privilege, public-interest doctrines, and the precise nature of the imputation.
Examine prescription closely
After Causing, a cyber libel prosecution is subject to the one-year prescriptive period reckoned from discovery by the offended party, authorities, or their agents. The Supreme Court emphasized that determining actual discovery can require evidence and may not be suitable for resolution simply through assumptions about when the post appeared online. (Lawphil)
Relevant defense evidence may include the complainant's earlier replies, screenshots showing reactions, direct messages mentioning the post, correspondence from representatives, demand letters, public statements about the post, or other proof establishing prior knowledge.
Examine the electronic evidence
A screenshot establishes only what it can competently prove after the applicable evidentiary requirements are met. Authentication, integrity, authorship, completeness, and relevance remain separate questions.
The Rules on Electronic Evidence expressly place the burden of proving authenticity on the person seeking to introduce a private electronic document. (Lawphil)
Evidence worth preserving
Whether filing or defending, preserve evidence in its original form whenever possible:
- Full-page screenshots showing the statement, account, date and time information, surrounding content, comments, and other relevant context; the exact URL or other locator; downloadable copies, PDFs, videos, photographs, and original electronic files; account identifiers and profile information; messages or admissions relating to authorship; evidence showing who first saw the material and when; affidavits or contact details of third persons who can identify the complainant or publication; documents supporting or contradicting the factual allegations; evidence relevant to good faith, investigation, sources, or motive; correspondence, demands, replies, and takedown communications; and unaltered devices, files, metadata, backups, or other technical evidence where authorship is disputed.
Avoid editing screenshots to highlight only selected portions while discarding the originals. Preserve both the readable working copy and the underlying source material.
Common mistakes when filing
Waiting because the post is still online
The continued availability of an old post does not mean the one-year period automatically restarts every day. The controlling issue under Causing is discovery, and delay can create a prescription defense. (Lawphil)
Filing based only on screenshots with no attribution evidence
Proving that words appeared on a screen is not necessarily the same as proving who authored them.
Treating every criticism as criminal libel
Harsh criticism, opinions, fair comment, privileged communications, and constitutionally protected discussion of public affairs require careful separation from punishable defamatory factual accusations.
Assuming truth alone automatically defeats liability
Article 361 must be applied according to its actual terms, including good motives, justifiable ends, and its rules on what truth may be proved. (Lawphil)
Choosing venue solely because the post was accessible there
Cybercrime venue is governed by specific rules. Accessibility everywhere does not give unlimited freedom to choose any court in the Philippines. (Lawphil)
Common mistakes when defending
Ignoring the prosecutor's subpoena
Failing to submit a proper counter-affidavit can allow the case to be evaluated without the respondent's evidence.
Answering the complaint through another public post
A new online attack can generate additional evidence or even a separate alleged publication. Address the legal complaint in the proper proceeding rather than conducting the defense through social media.
Deleting everything
Deletion may destroy exculpatory evidence such as context, source materials, login history, private exchanges, and proof of good-faith investigation.
Assuming that a share or reaction and a newly written accusation are legally identical
Disini protects persons who merely receive and react to an online libelous post, but independently authored defamatory content requires separate analysis. (Chief 5)
Possible penalties
RA 10175 requires a penalty one degree higher when the relevant Revised Penal Code offense is committed through information and communications technology. For online libel, the imprisonment penalty is prisión correccional in its maximum period to prisión mayor in its minimum period—roughly four years, two months and one day up to eight years. (Lawphil)
Imprisonment is not inevitable. In People v. Soliman, the Supreme Court confirmed that a fine may be imposed instead of imprisonment, depending on the circumstances and the court's lawful exercise of discretion. Applying RA 10951 and RA 10175, the Court fixed the current statutory fine range for online libel at ₱40,000 to ₱1,500,000. The Supreme Court's policy favoring a fine rather than imprisonment in appropriate libel cases does not abolish imprisonment as an available penalty. (Lawphil)
Civil liability may also arise in connection with defamatory publications, and the amount of any damages depends on the evidence and circumstances rather than on an automatic statutory award.
When legal help is urgent
Prompt legal assistance is especially important if the one-year prescription period may be close; a prosecutor's subpoena has already been received; an anonymous or fake account requires preservation of provider records; authorship is disputed; a cybercrime warrant, search, or seizure has been served; the publication involves a public officer, journalist, media organization, business, or matter of substantial public interest; the material was posted from outside the Philippines; multiple posts or respondents are involved; or a criminal Information has already been filed in court.
For complainants, early assistance can prevent the loss of electronic evidence and prescription problems. For respondents, early assistance can protect the opportunity to present evidence during preliminary investigation and identify defenses before positions become locked in by affidavits.
Frequently asked questions
Can I file cyber libel because someone posted a lie about me on Facebook?
Possibly, but falsity by itself does not establish the offense. The statement must satisfy the elements of libel, publication and identifiability must be proved, authorship must be established, and privilege, malice, public-interest rules, prescription, and electronic-evidence issues must be considered.
How long do I have to file?
As of August 2026, the controlling Supreme Court ruling is that cyber libel prescribes in one year from discovery of the defamatory material by the offended party, authorities, or their agents. There is no automatic presumption that discovery occurred on the date of online publication. (Lawphil)
Can I sue over an old Facebook post that I discovered only recently?
Potentially, because Causing holds that discovery—not automatically the posting date—is the statutory starting point. But the claimed date of discovery can be challenged through evidence, and other legal issues may affect the case. Obtain advice promptly rather than assuming an old post remains actionable indefinitely. (Lawphil)
Is sharing a libelous Facebook post automatically a crime?
No. Disini held the cyber-libel provision valid as to the original author but unconstitutional as applied to those who simply receive and react to the post. A person who adds newly authored defamatory material, however, presents a different factual question. (Chief 5)
Is a private group chat exempt from libel law?
Not automatically. Publication can exist once defamatory material is communicated to a third person. Whether a communication is protected by a qualified privilege—for example, because it was made in the performance of a legal, moral, or social duty—is a separate, fact-specific inquiry. (Lawphil)
Can a public official file cyber libel?
Yes, but constitutional protections are especially important. Where the allegedly defamatory speech concerns public or official matters, the prosecution must establish actual malice under the applicable Supreme Court jurisprudence. (Lawphil)
Is a screenshot enough to win a cyber libel case?
Not necessarily. Screenshots can be evidence, but electronic evidence remains subject to authentication and the ordinary rules on admissibility. The party offering a private electronic document bears the burden of establishing its authenticity. (Lawphil)
Where does the criminal case go if the prosecutor finds sufficient evidence?
RA 10175 gives Regional Trial Courts jurisdiction over violations of the Cybercrime Prevention Act and provides for designated special cybercrime courts. The applicable cybercrime venue rules determine which designated court may hear the case. (Lawphil)
Can the NBI or PNP help identify an anonymous account?
They can provide cybercrime investigative assistance within their legal authority. The DOJ Office of Cybercrime can also act on complaints and facilitate preservation and production of data. Access to protected subscriber or computer data must follow RA 10175 and applicable warrant procedures. (Department of Justice)
Official sources
Republic Act No. 10175 — Cybercrime Prevention Act of 2012
Revised Penal Code — Articles 353 to 362
Disini v. Secretary of Justice, G.R. No. 203335, February 11, 2014
People v. Soliman, G.R. No. 256700, April 25, 2023
Causing v. People, G.R. No. 258524, April 8, 2026 Resolution
Meking v. Remulla, G.R. No. 280455, November 11, 2025
Supreme Court Rules on Electronic Evidence
NBI Cybercrime Division — Investigative Assistance
PNP Anti-Cybercrime Group — Official Contact Information
General-information disclaimer
This article provides general information about Philippine law and is not a substitute for legal advice on a particular cyber libel complaint or defense. Cyber libel cases are highly dependent on the exact publication, evidence of authorship and discovery, the status of the complainant, venue, electronic evidence, and procedural history. Rules and authorities cited here were checked for currency on 23 August 2026.