Quick answer

Cyber libel is committed when a person publicly makes a defamatory imputation through a computer system—such as a social-media post, online article, email, website, or messaging platform—and the prosecution proves the elements of libel, the accused’s authorship or legally relevant participation, and the required malice.

If you are the complainant, preserve the post and account evidence immediately, identify when and where it was discovered, and file a properly supported complaint-affidavit with the appropriate prosecution office without waiting for the post to disappear. Cyber libel generally prescribes in one year from discovery, although prescription and its interruption can depend on the dates, evidence, and procedural history.

If you are accused, do not ignore a subpoena or casually answer the allegations online. Secure the complete complaint and attachments, preserve your own records, and submit a sworn, evidence-supported counter-affidavit within the period and manner stated in the subpoena. A complaint does not itself mean that an arrest warrant will issue or that guilt has been established.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies libel under Article 355 of the Revised Penal Code when it is committed through a computer system or a similar future means.

The prosecution generally must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person or juridical entity to contempt.
Publication. At least one person other than the person defamed received, read, saw, or heard the statement.
Identifiability. The complainant was named or was sufficiently identifiable from the words and surrounding circumstances.
Malice. The applicable form of malice must be proved or legally presumed, subject to constitutional and statutory protections.
Use of a computer system. The publication occurred through information and communications technology.
Responsibility of the accused. Evidence connects the respondent to the authorship or publication being charged.

A harsh, insulting, or embarrassing message is not automatically cyber libel. Its actual words, context, audience, target, authorship, truth or falsity, purpose, and any applicable privilege must be examined together.

A private message sent only to the person criticized ordinarily lacks publication to a third person. A post or message sent to a group, copied to another recipient, or made accessible to others may satisfy publication.

Likes, shares, comments, and reposts

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author but rejected extending liability under the Cybercrime Prevention Act’s aiding-or-abetting provision to people who merely receive, react to, or express agreement with a defamatory online post.

This does not make every repost safe. A person who creates a new post, adds their own defamatory caption, materially adopts an accusation, or independently republishes defamatory content may face a different authorship analysis. Liability depends on what that person actually wrote or published—not simply on the platform button used.

Criminal penalties and civil exposure

Traditional libel under Article 355 is punishable by imprisonment, a fine, or both. Section 6 of the Cybercrime Prevention Act raises the applicable penalty by one degree when information and communications technology is used.

The Supreme Court has held that courts may impose a fine instead of imprisonment in an appropriate online-libel case. Under People v. Soliman, the statutory fine for online libel ranges from ₱40,000 to ₱1,500,000, subject to the rules governing the offense and penalty.

Conviction is not automatic imprisonment, but neither is a fine-only sentence guaranteed. Sentencing depends on the law, the circumstances, and the court’s findings. Civil damages and costs may also be claimed. In a criminal case, the civil action arising from the offense is generally deemed instituted unless it is waived, reserved, or separately filed in accordance with the Rules of Court.

The one-year prescription period

The Supreme Court’s controlling ruling in Causing v. People is that cyber libel prescribes in one year, counted from the day the offense is discovered by the offended party, the authorities, or their agents.

Do not treat that as permission to wait until the last day. Disputes can arise over:

when the post was first discovered;
who discovered it and in what capacity;
whether the charged publication is the original post or a separate republication;
whether the evidence proves the discovery date;
which filing interrupted prescription; and
whether a later procedural ruling applies prospectively to the case.

The Supreme Court has also ruled that filing a complaint with the prosecution office can interrupt prescription, with the announced rule’s application depending on the relevant decision and dates. An informal report, demand letter, platform complaint, police blotter, or request to take down a post should not be assumed to stop the clock.

Because a prescription mistake can permanently defeat prosecution, obtain case-specific advice and file a complete complaint well before one year has elapsed.

How to file a cyber libel complaint

1. Preserve the publication before contacting the poster

Keep the evidence in its original form as far as possible. Preserve:

full-page screenshots showing the post, account name, date, time, captions, comments, and visible URL;
the direct URL or permalink;
screen recordings showing how the post is accessed;
the original electronic message, email, image, video, or audio file;
message headers, metadata, download information, and file properties;
the profile page and other details connecting the account to its operator;
the names and contact details of people who saw the publication;
notifications, shares, comments, and other evidence of third-party access;
evidence of the discovery date;
platform reports and acknowledgment emails;
relevant communications with the respondent; and
documents proving the accusation false or showing resulting harm.

Do not crop away context. Keep an untouched copy and make working copies for annotation. Record the date, time, device, account, and steps used to capture each item. If possible, have a witness independently view and preserve the live content.

A screenshot can be challenged as incomplete, altered, taken from an impersonation account, or disconnected from the respondent. Strong evidence should establish authenticity, authorship, publication, identity, and context—not merely display offensive words.

2. Assess the complete statement and possible privilege

Read the entire thread, article, video, or conversation. Identify the exact words alleged to be defamatory instead of describing them only as “fake news,” “paninira,” or “cyberbullying.”

Before filing, consider whether the statement was:

a protected opinion rather than a provably defamatory factual accusation;
part of a fair report of an official proceeding;
made in the performance of a legal, moral, or social duty;
a good-faith complaint sent only to people with a legitimate interest;
directed at a public officer’s official conduct;
substantially true and made with good motives and a justifiable purpose; or
not reasonably understood as referring to the complainant.

Privilege is highly fact-dependent. Excessive publication, irrelevant personal attacks, lack of verification, misleading presentation, or proof of spite may defeat a claim of qualified privilege.

3. Identify the proper venue

Under the Supreme Court’s Rule on Cybercrime Warrants, a criminal action for an offense under Section 4 or 5 of the Cybercrime Prevention Act is filed in the designated cybercrime court of the province or city:

where the offense or any element was committed;
where any part of the computer system used is situated; or
where damage to a natural or juridical person took place.

The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of the others. The Information must support venue with concrete facts; the mere worldwide accessibility of an online post should not be treated as unlimited freedom to choose any court.

The complaint for prosecutorial investigation should be filed with the prosecution office corresponding to a legally supportable venue. If the author, server, device, complainant, and place of access are in different locations—or any relevant event occurred abroad—obtain legal advice before filing.

4. Prepare a complete complaint-affidavit

The complaint-affidavit should be sworn and based on personal knowledge or properly identified records. It should clearly state:

the complainant’s and respondent’s identifying information and addresses, if known;
the exact publication complained of;
when, where, and how it was discovered;
who else accessed it;
why the complainant is identifiable;
why the statement is defamatory;
facts connecting the respondent to the account and publication;
facts showing malice when required;
the basis for venue and Philippine jurisdiction;
the dates relevant to prescription; and
an indexed list of supporting evidence.

Attach witness affidavits and legible, properly marked annexes. Avoid unsupported conclusions, exaggerated damages, selective screenshots, and speculation about who controlled an account.

The DOJ’s published preliminary-investigation filing checklist lists the current documentary requirements, including the investigation data form, complaint-affidavit or sworn statement, witness affidavits, and supporting documents. Confirm the required number of copies, accepted filing method, and local office requirements immediately before submission.

5. Consider investigative assistance

The NBI Cybercrime Division or an appropriate cybercrime law-enforcement unit may assist where the account operator is unknown, evidence requires lawful preservation or forensic examination, or attribution cannot be established from public records.

The NBI provides an online complaint page and official guidance on investigative assistance for victims of computer crimes. An investigation request is not a substitute for timely filing with the proper prosecution office when prescription is approaching.

Do not attempt to hack an account, impersonate another person, secretly obtain protected credentials, or manufacture attribution evidence.

6. Participate in the preliminary investigation

Cyber libel carries a prescribed imprisonment range that places it within the DOJ’s regular preliminary-investigation process. Under the 2024 DOJ-NPS rules recognized by the Supreme Court, the prosecutor determines whether there is prima facie evidence with reasonable certainty of conviction.

The respondent is ordinarily served a subpoena with the complaint and supporting evidence and is given an opportunity to file a counter-affidavit. The prosecutor may require clarificatory submissions or proceedings and will then issue a resolution. If an Information is filed, the designated Regional Trial Court independently determines whether probable cause exists for issuing a warrant of arrest.

A prosecutor’s finding is not a conviction. At trial, guilt must still be proved beyond reasonable doubt.

How to defend a cyber libel complaint

1. Do not ignore the subpoena

Note the exact date and manner of receipt. Read the deadline, hearing date, service instructions, and electronic-filing requirements stated in the subpoena or prosecution-office notice.

Engage counsel immediately. Do not assume that deleting the post, deactivating the account, apologizing privately, or refusing to attend will end the case. Failure to submit a counter-affidavit can cause the complaint to be resolved on the complainant’s evidence.

2. Obtain and audit the complete record

Verify that you received:

the complaint-affidavit;
all witness affidavits;
complete screenshots and URLs;
the allegedly defamatory words in full context;
account-attribution evidence;
proof of publication to a third person;
evidence of the complainant’s identity;
the claimed discovery date; and
the factual basis for venue.

List missing pages, cropped screenshots, inconsistent timestamps, hearsay statements, and unsupported assumptions. The defense should address the evidence actually submitted, not merely deny the accusation.

3. Preserve defense evidence

Keep devices, account records, drafts, source material, research notes, communications, login alerts, security reports, and platform records. Preserve evidence of hacking, impersonation, shared-account access, scheduled posting, edits, corrections, limited audience settings, or removal dates where relevant.

Do not alter files, delete conversations, pressure witnesses, or ask anyone to fabricate an explanation. Deletion can destroy helpful evidence and may be portrayed as consciousness of wrongdoing, even though it does not by itself prove guilt.

4. Identify the defenses supported by evidence

Depending on the facts, a counter-affidavit may show:

No defamatory imputation. The statement, read as a whole, did not attribute a discreditable fact or condition.
No publication. No third person received or accessed it.
No identification. A reasonable reader could not identify the complainant.
No authorship or attribution. The respondent did not create or control the charged publication.
Mere reaction or receipt. The conduct falls within the constitutional limitation recognized in Disini rather than original authorship.
Qualified privilege. The communication was made in good faith in the performance of a duty or to persons with a corresponding legitimate interest.
Fair and true report. The publication fairly and accurately reported an official proceeding or matter covered by Article 354, without disqualifying comments and in good faith.
Truth with proper legal requisites. Truth is not an automatic defense to every defamatory statement. Article 361 requires the applicable proof and, where required, good motives and a justifiable purpose.
Constitutional actual-malice protection. For statements concerning a public officer’s official conduct or other constitutionally protected public-interest speech, the prosecution may have to prove knowledge of falsity or reckless disregard of truth.
Prescription. More than one year elapsed under the legally applicable reckoning and interruption rules.
Improper venue or lack of jurisdiction. The complaint or Information does not establish a location authorized by law.
Non-retroactivity. The charged online publication occurred before the Cybercrime Prevention Act became effective.
Insufficient evidence. The submissions do not reach the DOJ standard for filing an Information.

Calling a statement “opinion” is not enough if it implies undisclosed defamatory facts. Likewise, attaching documents or repeating another person’s accusation does not automatically establish good faith or truth.

5. Use the correct remedy after the resolution

An aggrieved party may have remedies such as a timely motion for reconsideration or a petition for review within the DOJ-NPS system, depending on the issuing office and governing rules. Once an Information is filed, court remedies and deadlines become separate matters.

Calendar the date the resolution was received and consult counsel immediately. Do not rely on an appeal or reconsideration period remembered from an older rule; the current DOJ rules and the notice accompanying the resolution must be checked.

Malice, privilege, and public-interest speech

Article 354 of the Revised Penal Code generally presumes malice from a defamatory imputation, even if true, unless good intention and justifiable motive are shown. It also recognizes qualifiedly privileged communications, including certain private communications made in the performance of a legal, moral, or social duty and fair, true, good-faith reports of official proceedings.

A qualified privilege removes the ordinary presumption of malice, but it does not create blanket immunity. The prosecution may overcome it with proof of actual malice.

For criticism involving a public officer’s performance of official duties, constitutional free-speech protections are especially important. In Tulfo v. People, the Supreme Court stressed that criminal libel laws must not be broadly applied to deter discussion of public affairs and required proof of actual malice—knowledge of falsity or reckless disregard of whether the statement was false.

This protection is not a license to invent accusations. Courts examine the sources consulted, opportunities to verify, urgency, wording, context, corrections, and evidence of hostility or reckless disregard.

Common mistakes

Mistakes by complainants

Waiting for a platform response while the one-year period runs.
Saving only cropped screenshots without URLs, timestamps, or context.
Failing to prove that another person saw the publication.
Assuming the profile name alone proves who operated the account.
Filing wherever convenient without establishing statutory venue.
Naming everyone who liked or received a post as an author.
Treating truth as irrelevant or ignoring a possible privilege.
Omitting the discovery date or giving inconsistent dates.
Exaggerating facts that can be disproved by the original thread.
Assuming a takedown request interrupts prescription.

Mistakes by respondents

Ignoring the subpoena or missing the stated deadline.
Posting threats, insults, or “explanations” that repeat the accusation.
Deleting accounts or messages before preserving them.
Filing a bare denial without affidavits or supporting records.
Assuming “shared only” or “opinion only” automatically ends liability.
Claiming truth without admissible proof and a legally sufficient purpose.
Contacting or pressuring the complainant or witnesses.
Surrendering a device or credentials informally without understanding the request’s legal basis and scope.
Assuming no warrant can issue because the respondent skipped the preliminary investigation.

When legal help is urgent

Seek a Philippine lawyer experienced in criminal and cybercrime procedure immediately if:

the one-year anniversary of discovery is near;
you received a subpoena, resolution, Information, summons, or warrant;
the poster’s identity is unknown or the account may be fake or hacked;
evidence may soon be deleted or platform records may be lost;
the publication involves a public officer, journalist, whistleblower, workplace report, or official proceeding;
several posts, reposts, respondents, or jurisdictions are involved;
the publication originated abroad or used foreign-hosted services;
law enforcement requests access to a device, account, or password;
there are related threats, stalking, identity theft, intimate-image abuse, or violence; or
a settlement, retraction, affidavit of desistance, or public apology is being proposed.

An affidavit of desistance does not automatically terminate a criminal case because the State prosecutes the offense. Any settlement or retraction should be reviewed for its exact criminal, civil, evidentiary, and reputational consequences.

Frequently asked questions

Can I file a case if the post has been deleted?

Yes, potentially. Deletion does not erase an offense already completed, but you still need reliable proof of the publication, authorship, content, audience, identity, venue, and relevant dates. A screenshot standing alone may not establish all of these.

Must the complainant be named?

No. Identification may be established through descriptions, photographs, initials, tags, surrounding posts, or facts known to readers. The question is whether the complainant was reasonably identifiable.

Is a group-chat message cyber libel?

It can be. Publication may exist when a defamatory message is communicated to at least one person other than the person defamed. Privilege, context, membership, purpose, and authorship still matter.

Is a true statement automatically protected?

No. Under Articles 354 and 361, truth interacts with malice, good motives, justifiable purpose, the nature of the imputation, and whether the subject is a government employee acting in an official capacity. The precise defense depends on the facts.

Can a person be charged merely for liking a defamatory post?

Mere receipt, reaction, or expression of agreement is not treated as authorship under the limitation recognized in Disini. A separate comment or new publication containing the person’s own defamatory imputation may be assessed differently.

Does filing a complaint cause immediate arrest?

No. The prosecutor first evaluates the evidence. If an Information is filed, the judge independently determines probable cause for a warrant. Arrest without a warrant is governed by separate, narrow rules.

Can cyber libel result only in a fine?

A court may impose a fine instead of imprisonment in an appropriate case, but a fine-only sentence is not guaranteed. Criminal conviction may also carry civil liability and other legal consequences.

Can the parties settle?

They may resolve private and civil aspects, seek correction or retraction, or execute an agreement, but the complainant cannot guarantee dismissal of the criminal action. Once authorities are involved, the prosecutor or court applies the law independently.

Where should official requirements be checked?

Consult the Department of Justice, its preliminary-investigation filing guidance, the NBI Cybercrime Division, and the relevant city or provincial prosecution office. Local submission procedures should be confirmed before filing.

Official legal sources

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Cyber libel depends heavily on the exact publication, evidence, dates, parties, and venue. Official sources and current procedures were checked as of 31 August 2026.