Quick answer

Cyber libel is committed when a person uses a computer system—such as Facebook, Messenger, X, TikTok, YouTube, a website, email, or another online platform—to publish a defamatory allegation covered by the Revised Penal Code’s law on libel.

To file a case, the complainant should promptly preserve the original post and its electronic context, identify the person responsible, document reputational harm, and submit a properly supported complaint-affidavit to the appropriate prosecution office. Assistance may first be sought from the National Bureau of Investigation or the Philippine National Police Anti-Cybercrime Group when authorship, account ownership, or electronic evidence requires investigation.

To defend a case, the respondent should preserve—not alter or delete—the relevant accounts, messages, drafts, source materials, and publication history; obtain the complete complaint and attachments; and answer every legal element through a verified counter-affidavit and admissible supporting evidence. Possible defenses include lack of authorship or publication, failure to identify the complainant, absence of defamatory meaning, privileged communication, fair comment, truth accompanied by good motives and justifiable ends, lack of the required malice, prescription, improper venue, and constitutional protections for speech on public affairs.

Act quickly. Under the Supreme Court’s current ruling, cyber libel generally prescribes in one year from discovery by the offended party or the authorities, subject to rules on interruption and the facts proved. Do not assume that deleting a post erases liability or that an old post necessarily remains prosecutable.

What makes an online statement cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the libel provisions of the Revised Penal Code when libel is committed through a computer system or a similar future means.

A prosecution generally must establish:

A defamatory allegation. The statement attributes a crime, vice, defect, act, omission, condition, or circumstance that tends to dishonor, discredit, or expose a person to contempt.
Identification. The complainant is named or is reasonably identifiable from the words, images, surrounding circumstances, or information known to readers. An express name is not always necessary.
Publication to another person. Someone other than the person allegedly defamed received, saw, or could access the communication. A purely private message sent only to the person discussed ordinarily lacks this element, although forwarding it to someone else may constitute publication.
Use of a computer system. The publication was made online or through electronic or digital technology covered by the Cybercrime Prevention Act.
Malice. The law may presume malice from a defamatory publication unless it falls within a recognized privileged category. In cases involving public officials, public figures, or matters of public concern, constitutional standards may require proof of actual malice—knowledge that the statement was false or reckless disregard of whether it was false.

The words are assessed in their full context, not through isolated phrases alone. Captions, hashtags, memes, edited images, video narration, comments, and surrounding exchanges may affect how an ordinary reader would understand the publication.

Insults or harsh criticism are not automatically cyber libel. The question is whether the communication, viewed as a whole, makes or conveys an actionable defamatory allegation about an identifiable person.

Who can be prosecuted?

In Disini v. Secretary of Justice, the Supreme Court sustained cyber libel as applied to the person who authored the allegedly libelous online material. It rejected an interpretation that would automatically punish people who merely receive a post or react to it through functions such as a “like,” comment, or share.

That does not make every later participant immune. A person who adds a new defamatory accusation, substantially republishes material as their own, or otherwise becomes an author of a new publication may face a fact-specific inquiry. Administrators, editors, employers, account owners, or platform users are not criminally liable merely because of their title or connection; the prosecution must establish the particular person’s legally relevant participation.

Anonymous and pseudonymous accounts are not beyond investigation. Investigators may seek preservation, disclosure, search, or other orders under the Supreme Court’s Rule on Cybercrime Warrants. Such orders remain subject to statutory, constitutional, territorial, and service-provider limitations.

Before filing: assess the publication carefully

A complainant should answer these questions before initiating a criminal case:

What exact words, image, recording, or implication is alleged to be defamatory?
Is the statement presented as a verifiable fact, or is it recognizable opinion, satire, rhetorical exaggeration, or criticism?
How would an ordinary reader understand it in its complete context?
Who saw or received it?
How is the complainant identifiable?
What evidence connects the respondent to the account or publication?
When and how did the complainant or the authorities discover it?
Does the statement concern a public official, public figure, official conduct, or a matter of public interest?
Was it made in a private, official, judicial, legislative, employment, or other potentially privileged setting?
If the statement is claimed to be true, what reliable records establish the facts and the speaker’s motives?

A criminal complaint should not be used simply to suppress criticism, force the removal of an unfavorable review, or punish an opinion. Conversely, labeling a factual accusation “opinion” does not protect it when the words and context imply undisclosed defamatory facts.

Evidence to preserve

Electronic evidence is often lost through deletion, account suspension, editing, device replacement, or routine platform retention practices. Preserve it immediately and lawfully.

Useful material may include:

Full-page screenshots showing the account name, profile details, exact text, date, time, URL, reactions, comments, and surrounding context
Screen recordings showing how the content was reached and what appeared before and after it
The original URL, post or message identifier, email headers, and platform notification
The original image, video, audio file, message export, or downloaded webpage
Copies from more than one device or witness
Affidavits from people who personally saw, received, or understood the publication
Records connecting the account to the alleged author, without resorting to hacking or unlawful surveillance
Earlier and later versions of an edited post
Evidence of when the complainant or authorities first discovered the publication
Source documents, interview notes, drafts, fact-checking records, and communications relevant to truth, good faith, or editorial process
Evidence of harm, such as lost clients, cancelled contracts, workplace action, inquiries from relatives or colleagues, or medical records where legally relevant

Keep the original files. Avoid cropping the only copy, adding annotations to the original, changing file metadata, or relying solely on printed screenshots. Make working copies for highlighting.

Electronic evidence must satisfy the Rules on Electronic Evidence, including requirements concerning authenticity and reliability. A screenshot may help, but it does not automatically prove who controlled an account, who typed the statement, whether the display was complete, or whether the content was altered.

Do not obtain evidence by guessing passwords, impersonating someone, accessing a private account without authority, secretly installing monitoring software, or violating a warrant or privacy law. Illegally obtained material can create separate legal problems.

How to file a cyber libel complaint

1. Preserve the publication and establish the timeline

Record the first known publication, any later material change or republication, when the complainant discovered it, and when authorities were informed. These dates may determine prescription and jurisdiction.

A minor technical edit is not automatically a new publication. Whether an update, repost, or alteration creates a new actionable publication depends on what was changed, how it was made available, and the governing case law.

2. Identify the proper respondent

Collect lawful evidence linking the person to the account, device, page, or publication. A profile name or photograph alone may be insufficient, particularly when impersonation, hacking, shared access, or account compromise is possible.

If technical investigation is needed, a complainant may approach:

The NBI Cybercrime Division
The PNP Anti-Cybercrime Group
The prosecutor’s office with territorial authority over the case

These agencies can investigate, but they do not guarantee that a prosecutor will file an Information in court.

3. Determine venue before filing

Cybercrime venue is governed by the applicable criminal-procedure rules, the Rule on Cybercrime Warrants, and libel-specific venue principles. Depending on the facts, relevant places may include where an essential element occurred, where the computer system or data was located, where legally cognizable damage occurred, or a location authorized under the special venue rules for libel.

Online accessibility everywhere does not necessarily make every Philippine court a proper venue. Venue is jurisdictional in criminal cases and should be established with specific facts, not conclusions. A lawyer or the receiving prosecutor should confirm the correct office before the prescriptive period expires.

4. Prepare the complaint-affidavit

The complaint-affidavit should be sworn and based on personal knowledge or authentic records. It should clearly state:

The identities and addresses of the parties, if known
The exact allegedly defamatory content
The electronic medium and account used
Why the complainant was identifiable
When, where, and by whom the publication was seen
Why the respondent is believed to be responsible
When the complainant or authorities discovered the publication
Facts supporting venue
The harm and surrounding circumstances
The specific offense alleged
A numbered list of annexes

Attach legible, organized evidence. If a statement is in Filipino or another language and the filing requires an English translation, provide an accurate translation while retaining the original.

5. Participate in the prosecutor’s investigation

The prosecutor determines whether the evidence meets the governing standard for filing a criminal Information. The respondent must be given the opportunity required by the applicable preliminary-investigation rules to submit a counter-affidavit and evidence.

Deadlines and procedures may be stated in the subpoena or prosecutor’s order. Follow those directions exactly. Do not assume that settlement discussions, a pending takedown request, or informal communication with an investigator extends the prescriptive period or a filing deadline.

If the prosecutor dismisses the complaint or files an Information, the available review or court remedies depend on the procedural posture and must be pursued within the applicable period.

The one-year prescriptive period

In Causing v. People, G.R. No. 258524, the Supreme Court ruled that the specific Revised Penal Code provision for libel controls: cyber libel generally prescribes in one year, rather than under the longer periods previously applied in some cases. The Court also applied the statutory discovery rule, under which the period begins upon discovery of the offense by the offended party, the authorities, or their agents. See the Supreme Court decision.

Prescription may be interrupted by the institution of proceedings specified by law and may run again when proceedings end without conviction or acquittal for reasons recognized by law. The correct computation can depend on:

The date and circumstances of discovery
Whether the online material was concealed or already known
The filing date and nature of the complaint
Whether the receiving office had authority
Interruptions or dismissals
Whether a later act was a true republication rather than continued online availability

Because a mistaken computation can permanently defeat a complaint—or permit an invalid prosecution—seek legal advice well before the apparent anniversary date.

How to respond if you are accused

Do not ignore the subpoena

Read the subpoena immediately and record the date and manner of receipt. Confirm the deadline, required number and form of copies, place or channel for filing, and any scheduled hearing.

A failure to submit a counter-affidavit can allow the prosecutor to resolve the complaint using the complainant’s evidence alone. A counter-affidavit is not casual correspondence: admissions, inconsistent explanations, and attached records may later be used in court.

Preserve everything

Do not delete the post, account, device contents, drafts, private messages, or source materials merely because a complaint has been threatened or filed. Deletion may remove helpful context and can generate allegations of concealment.

Preservation is different from leaving material publicly accessible. Obtain legal advice on whether and how to restrict access, correct a statement, publish an apology, or request platform action while retaining forensic copies.

Demand and study the complete accusation

The defense should obtain the complaint-affidavit and all annexes. Check whether the evidence actually establishes:

The exact publication
Identification of the complainant
Communication to a third person
Authorship or account control
A computer-system element
Defamatory meaning
The applicable form of malice
Timely filing
Proper venue

Account ownership is not always the same as authorship. Devices and pages may be shared, spoofed, compromised, or operated by teams. Any such explanation should be supported by records rather than bare denial.

Prepare a focused counter-affidavit

Answer the factual allegations paragraph by paragraph. Attach authentic records supporting the defense and explain their relevance. Avoid unnecessary attacks, new accusations, speculation about the complainant, or altered screenshots.

Possible defense evidence includes platform security notices, login records, account-management logs, complete message threads, contemporaneous source documents, government records, interview notes, corrections, editorial communications, and witnesses with personal knowledge.

Assert procedural objections promptly

Prescription, lack of jurisdiction, improper venue, defective identification, denial of due process, inadmissible evidence, and an unconstitutional or overbroad application should be raised at the legally appropriate stage. Some objections can be waived or become harder to establish if raised late.

If an Information has already been filed, obtain counsel before entering a plea or filing a motion. The permitted remedy depends on the charge, record, timing, and rules of criminal procedure.

Important defenses and exceptions

No defamatory allegation

A statement is not actionable merely because it is embarrassing, rude, unpopular, or offensive. Courts consider the natural and ordinary meaning of the entire communication and its circumstances.

Pure opinion ordinarily cannot be proven true or false. But an “opinion” may still be actionable when it implies that the speaker knows defamatory facts not disclosed to the audience.

The complainant was not identifiable

The prosecution must show that readers could identify the person allegedly defamed. When a statement refers to a broad group, an individual member is not automatically entitled to sue. Group size, wording, context, and the audience’s prior knowledge matter.

No publication

There must be communication to at least one person other than the subject. Publication can occur in a group chat, private page, email chain, or limited online community; public virality is unnecessary.

A person’s own later circulation of material does not automatically establish that the accused originally published it to someone else.

Lack of authorship or participation

The prosecution must connect the respondent to the publication through admissible evidence. A display name, shared device, administrator role, or unsupported assumption may not be enough.

Privileged communication

Article 354 of the Revised Penal Code recognizes qualifiedly privileged communications, including a private communication made in the performance of a legal, moral, or social duty and a fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts.

Privilege has conditions. Excessive distribution, irrelevant accusations, inflammatory additions, bad faith, or proof of actual malice may defeat a qualified privilege. Posting publicly what should have been sent only to a responsible officer may undermine a claim that the communication was confined to a duty.

Statements made in judicial or legislative proceedings may receive stronger protection when relevant to the proceeding, but privilege is not a general license to repeat the allegation elsewhere.

Truth, good motives, and justifiable ends

Truth is not always a complete defense by itself. Under Article 361, acquittal generally requires proof that the matter charged as libelous is true and that it was published with good motives and for justifiable ends. The admissibility and effect of proof of truth also depend on whether the allegation concerns a crime or the official acts of a public officer.

Use primary documents and witnesses with personal knowledge. Rumor, anonymous screenshots, or “someone told me” may not establish truth or reasonable verification.

Fair comment and public-interest speech

Fair comment on matters of public interest receives constitutional protection. Criticism of official performance, public policy, candidates, public figures, businesses affecting the public, and other public matters may be forceful.

Protection does not automatically extend to knowingly false factual claims or reckless publication without regard for truth. The line between protected comment and a defamatory factual assertion depends on wording, disclosed facts, context, the subject’s status, and the evidence of malice.

Absence of actual malice

For speech involving a public official, public figure, or public concern, the prosecution may need to prove actual malice: knowledge of falsity or reckless disregard for truth. Recklessness is more than ordinary negligence or failure to conduct an ideal investigation.

Actual malice may be inferred from evidence, but it is not established solely because a statement was harsh, inaccurate, or motivated by dislike.

Prescription

A complaint filed beyond the controlling period may be barred. Establish the discovery date and any interruption through records, not assumptions. Continued accessibility of the same post should not automatically be treated as endless new publication.

Good-faith mistake and corrective action

A correction, takedown, clarification, or apology does not automatically erase an already completed offense. It may nevertheless be relevant to good faith, malice, damages, credibility, or sentencing. Obtain advice before wording a correction because it may also contain admissions or repeat the defamatory claim.

Criminal penalties and civil liability

Cyber libel carries the penalty for traditional libel one degree higher, as provided by Section 6 of the Cybercrime Prevention Act. Article 355 of the Revised Penal Code, as amended by Republic Act No. 10951, provides imprisonment, a fine, or both for libel; the exact lawful range in a cyber-libel judgment depends on the penalty-graduation rules and the circumstances of the case.

Courts are guided by Administrative Circular No. 08-2008, which encourages careful consideration of fines instead of imprisonment in appropriate libel cases. It does not decriminalize libel, guarantee a fine-only sentence, or prevent imprisonment when warranted.

A complainant may also pursue civil damages through the civil liability arising from the offense or, when legally available, through a separate civil action under Article 33 of the Civil Code. Filing, reservation, waiver, consolidation, and prescription rules must be considered carefully to avoid losing or duplicating remedies.

An acquittal does not invariably dispose of every possible civil claim. The result depends on the ground for acquittal, the pleadings, applicable burden of proof, and whether civil liability was properly reserved or pursued.

Common mistakes by complainants

Waiting because the post remains online and assuming prescription has not begun
Submitting only cropped screenshots with no URL, date, context, or witness
Treating criticism, opinion, or an unfavorable review as automatically criminal
Filing in a convenient place without establishing lawful venue
Accusing the visible account owner without proof of authorship or control
Omitting the date and circumstances of discovery
Relying on popularity, reactions, or emotional harm instead of proving every element
Altering files, captions, or metadata while preparing evidence
Posting retaliatory accusations that create a second dispute
Assuming an NBI or PNP report is identical to filing the legally necessary complaint

Common mistakes by respondents

Ignoring a subpoena or missing the counter-affidavit deadline
Deleting the account, post, drafts, or messages
Contacting or threatening the complainant or witnesses
Repeating the accusation while defending it publicly
Submitting a blanket denial despite available records
Calling a factual accusation “opinion” without addressing its context
Relying on truth without evidence of good motives and justifiable ends
Assuming a share, repost, or account-administrator role can never matter
Giving investigators unrestricted access to devices without understanding the legal basis and scope
Signing an affidavit containing guesses, hearsay, or statements not personally verified

When legal help is urgent

Consult a Philippine lawyer promptly if:

The one-year period may expire soon
You received a prosecutor’s subpoena, warrant, summons, or court notice
Investigators want to search, seize, inspect, or copy a device or account
The allegedly defamatory content concerns a public official, journalist, election, whistleblower, workplace report, or pending case
The author is anonymous or the account may be fake, shared, or compromised
The publication occurred abroad or involves foreign platforms
The content includes confidential records, intimate images, personal data, threats, or allegations of sexual or other serious misconduct
A criminal Information has already been filed
Settlement, apology, correction, or takedown terms are being proposed
A related civil, administrative, employment, protection-order, or data-privacy case exists

If officers present a warrant, remain calm, ask to read it, note the issuing court and precise scope, request counsel, and do not obstruct lawful implementation. Do not voluntarily disclose passwords or consent to a broader search without understanding your rights and the consequences.

Frequently asked questions

Can a Facebook post or group-chat message be cyber libel?

Yes, if it satisfies all elements. A post need not be public or viral. Publication to even one third person may be sufficient.

Is a private message sent only to the person criticized cyber libel?

Ordinarily, libel requires publication to someone other than the person defamed. If the message was also sent or forwarded to another person, the analysis changes.

Are likes, reactions, and shares automatically criminal?

No. Disini rejected automatic liability for people who merely receive or react to another person’s post. A user who adds a new defamatory allegation or creates a new publication may be evaluated differently.

Can I be charged for an anonymous account?

An anonymous name does not prevent a case, but investigators and prosecutors must still obtain admissible evidence connecting a particular person to the publication.

Does deleting the post end the case?

No. Deletion does not undo an earlier publication and may destroy evidence. Preserve a complete copy and seek advice before altering public access.

Is truth always a complete defense?

No. Philippine criminal-libel law generally requires truth together with good motives and justifiable ends, subject to the precise rules in Article 361 and constitutional doctrines applicable to public-interest speech.

Is an apology an admission of guilt?

Not automatically, but its wording and circumstances can be used as evidence. An apology may also affect damages, malice, settlement, or sentencing. Have counsel review it when a case is threatened or pending.

Can the complainant demand jail and damages immediately?

The complainant may request prosecution and civil relief, but only the proper authorities and courts can determine probable cause, guilt, sentence, and damages. Guilt must be proved beyond reasonable doubt.

How long does the complainant have to file?

Cyber libel generally prescribes in one year from discovery by the offended party or the authorities, subject to interruption and other fact-dependent rules. Because the computation can be disputed, both sides should obtain advice immediately.

Can the parties settle?

They may discuss apology, correction, takedown, retraction, or compensation, but private settlement does not automatically terminate every criminal proceeding. The legal effect depends on the case’s stage, the prosecutor or court’s authority, and the documents signed.

Official legal references

This article provides general legal information, not legal advice or an attorney-client relationship. Cyber-libel outcomes depend on the exact words, audience, evidence, dates, venue, status of the persons involved, and procedural history. Consult a Philippine lawyer about a specific case. Primary sources were checked as of September 15, 2026.