Quick answer

A cyber libel case in the Philippines is generally filed through a sworn complaint with the proper city or provincial prosecutor’s office. The complainant must present admissible evidence showing that the respondent authored and published a defamatory statement through a computer system, that the statement referred to an identifiable person, and that it was malicious. The prosecutor—not the complainant—decides whether the evidence justifies filing an Information in a designated cybercrime Regional Trial Court.

If you receive a subpoena, do not ignore it or answer publicly. Preserve the post and surrounding records, note the deadline stated in the subpoena, and submit a properly sworn counter-affidavit with all available defenses and supporting evidence. Possible defenses include failure to prove authorship, identity, publication, defamatory meaning or malice; privileged communication; truth accompanied by good motives and justifiable ends; prescription; improper venue; and constitutional protections applicable to speech about public officers or public figures.

Cyber libel generally prescribes in one year from discovery of the alleged defamatory material by the offended party, the authorities or their agents. Filing the complaint or Information interrupts prescription, subject to the rules in Article 91 of the Revised Penal Code. Because the date of discovery can be disputed, neither side should assume that the date appearing on a post automatically settles prescription.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012, or Republic Act No. 10175, covers libel as defined under the Revised Penal Code when committed through a computer system or a similar future technology.

The prosecution must establish the traditional elements of libel:

There was an allegation of a crime, vice, defect, act, omission, condition, status or circumstance tending to dishonor, discredit or bring another person into contempt.
The allegation was published or communicated to at least one person other than the person allegedly defamed.
The person defamed was identified or was identifiable from the statement and its context.
The statement was malicious.
For cyber libel, the prohibited publication was made through a computer system or information and communications technology.

These elements were reiterated by the Supreme Court in Disini Jr. v. Secretary of Justice. Whether words are defamatory depends on their ordinary meaning and the complete context—not merely on an isolated phrase or on the complainant’s personal reaction.

Online publication may include a social-media post, blog entry, webpage, email sent to third persons, online article, uploaded image or video, or another digital communication. A private message seen only by the person discussed ordinarily raises a serious publication issue, although forwarding the message to another person may change the analysis.

Who may be charged?

The Supreme Court sustained Section 4(c)(4) as applied to the original author of the online libel, while rejecting its application merely to people who receive a post and react to it. A person should not be charged simply for clicking “like,” selecting an emoji, or receiving content.

This does not give blanket immunity to everyone other than the first poster. Someone who writes a new defamatory caption, comment or accusation may become the author of that separate material. Administrators, editors, account owners and employers are not automatically liable merely because of their position; their actual authorship, participation and legally attributable conduct must be proved.

Account ownership alone may also be insufficient to prove who composed and uploaded a particular post. Evidence concerning access to the account, device records, admissions, witnesses and platform information can become important.

Opinion, criticism and factual accusations

Not every harsh, insulting or unpopular online statement is cyber libel.

A court considers whether a reasonable reader would understand the words as asserting a defamatory fact. Rhetorical exaggeration, satire, figurative speech and opinions that do not imply undisclosed false facts may receive constitutional protection. Merely placing “in my opinion” before a factual accusation does not necessarily turn it into protected opinion.

Criticism of public conduct receives greater protection than an unsupported accusation about private wrongdoing. In criminal libel cases involving public figures—particularly public officers acting in relation to public affairs—the prosecution must prove actual malice: knowledge that the statement was false or reckless disregard of whether it was false. The Supreme Court explained this burden in Daquer Jr. v. People.

Recklessness is more than ordinary carelessness or failure to investigate perfectly. The evidence must support a high degree of awareness of probable falsity. The speaker’s sources, verification efforts, documents, wording, corrections and reason for publishing may therefore matter.

Malice and privileged communications

As a general rule, a defamatory imputation is presumed malicious even if it is true. Article 354 of the Revised Penal Code recognizes exceptions for privileged communications.

A communication may be qualifiedly privileged when a person makes it:

in the performance of a legal, moral or social duty;
to someone who has a corresponding interest or duty; and
in good faith, without unnecessary publication.

A fair and true report made in good faith, without added comments, concerning a non-confidential judicial, legislative or other official proceeding may also be privileged.

Privilege is highly fact-dependent. A complaint sent in good faith to the proper agency may be privileged, while posting the same accusation publicly to an audience with no corresponding duty or interest may not be. Excessive language, wide circulation, spite, lack of belief in the accusation or deliberate falsehood can support actual malice and defeat qualified privilege.

When a communication is privileged, the presumption of malice falls away and actual malice must be proved. The Supreme Court discusses this effect in Enrile v. Manapat.

Is truth a complete defense?

Not always. Under Article 361 of the Revised Penal Code, an accused seeking acquittal through truth must generally prove both:

that the defamatory matter was true; and
that it was published with good motives and for justifiable ends.

For an imputation that does not constitute a crime, proof of truth is generally restricted unless the statement concerns a government employee and facts related to the discharge of official duties. The precise operation of Article 361 depends on the accusation and the status of the person concerned.

“Everyone knows it,” an anonymous tip or an unverified screenshot is not proof of truth. Preserve the original records, official documents, recordings, correspondence and witnesses supporting the statement, together with evidence showing why publication served a legitimate purpose.

The one-year deadline

In its April 8, 2026 resolution in Causing v. People, the Supreme Court confirmed that cyber libel prescribes in one year, applying Article 90 of the Revised Penal Code.

Under Article 91, the period begins when the crime is discovered by the offended party, the authorities or their agents. The Court rejected an automatic presumption that an online post was discovered on the day it was uploaded. The actual discovery date is a factual matter that may require evidence.

The period is interrupted by filing the complaint or Information and begins to run again when proceedings terminate without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused. Special circumstances—including an accused’s absence from the Philippines and the procedural history of the complaint—require individual analysis.

A separate civil action for injury to rights arising from defamation is also generally subject to a one-year limitation under Article 1147 of the Civil Code. Filing a criminal case and filing or reserving a civil action involve additional procedural rules. Obtain advice before pursuing separate proceedings, because civil and criminal libel actions may have to be handled by the same court and double recovery is not allowed.

How to file a cyber libel complaint

1. Preserve the publication before contacting the author

Save more than a cropped screenshot. Preserve:

the complete post, article, comment, image or video;
the account name, profile page and visible account identifier;
the exact URL or permalink;
the date and time displayed, including the time zone if available;
the complete thread and surrounding conversation;
visible reactions, shares and comments where relevant;
screen recordings showing how the content was accessed;
downloaded files in their original format;
emails, notifications and messages showing when you discovered it;
names and contact details of people who saw it;
documents showing why the statement is false;
evidence connecting the respondent to the account or publication; and
evidence of resulting harm, such as lost contracts, client messages or employment records.

Keep the original device and unedited files. Do not annotate, rename, repeatedly resave or alter the only copy. Make working copies and record when, where and how each item was obtained. Electronic evidence must still be authenticated under the applicable evidentiary rules; a screenshot is not automatically conclusive simply because it looks genuine.

2. Identify the exact defamatory statements

Quote or reproduce the particular words, images or audiovisual portions complained of. Explain their context, why they refer to you, who received or viewed them, why they are defamatory, and why they are false or malicious.

Avoid treating an entire page, video or conversation as libelous without identifying the particular imputations. If the statement does not name you, explain the facts that made readers understand that it concerned you.

3. Establish authorship and publication

State the facts—not assumptions—connecting the respondent to the material. Useful evidence may include an admission, verified account information, prior exchanges, witnesses who observed the posting, consistent control of the account, or lawfully obtained subscriber or device records.

If necessary, a complainant may first seek investigative assistance from the NBI or PNP cybercrime unit. Republic Act No. 10175 designates the NBI and PNP as the principal law-enforcement authorities for cybercrime cases. Private parties generally cannot compel a platform or service provider to disclose protected subscriber or traffic data on their own; investigators may need the appropriate cybercrime warrant or court order.

4. Prepare the complaint-affidavit

The complaint-affidavit should ordinarily contain:

the complainant’s and respondent’s identifying details and addresses, if known;
a chronological, first-person account based on personal knowledge;
the exact publication and its URL, date and relevant context;
facts supporting every element of cyber libel;
the date and manner of discovery;
facts supporting the chosen venue;
an explanation of each attachment; and
a proper oath and certification.

Witnesses with relevant personal knowledge should execute their own affidavits. Organize attachments clearly and retain identical copies.

The DOJ’s published filing checklist for preliminary-investigation complaints calls for an Investigation Data Form, sworn complaint or statement, witness affidavits and supporting documents, with the required number of copies. Requirements, office practices, fees and accepted filing channels should be confirmed directly with the prosecution office before filing.

5. File in the proper place

The complaint is ordinarily filed with the city or provincial prosecutor’s office that can institute the case in the proper designated cybercrime court. Under Section 2.1 of the Rule on Cybercrime Warrants, the criminal action may be filed in the designated cybercrime court of the province or city:

where the offense or any element occurred;
where any part of the computer system used is situated; or
where any damage to a natural or juridical person took place.

The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of the others. Venue is jurisdictional in a criminal case and must be supported by concrete allegations and evidence. The mere fact that a webpage could be viewed anywhere should not be treated as permission to file anywhere.

6. Participate in preliminary investigation

Cyber libel carries a prescribed imprisonment range that makes an ordinary preliminary investigation applicable under the 2024 DOJ–National Prosecution Service Rules.

The prosecution office first assesses the complaint’s form and evidentiary completeness. Under the current DOJ framework, the required prosecutorial standard is prima facie evidence with reasonable certainty of conviction—evidence that is admissible, credible, preservable and, if left uncontradicted, sufficient to establish all elements and the responsible person.

If the matter proceeds, the respondent receives a subpoena with the complaint and attachments. The scheduled date for the counter-affidavit must be at least 10 days from receipt. A prosecutor may thereafter consider the matter submitted or hold a physical or virtual clarificatory hearing when necessary. A preliminary investigation is generally affidavit-based; it is not yet a trial with ordinary cross-examination.

Complainants should monitor notices, promptly disclose requested evidence and avoid approaching the prosecutor privately about the merits.

How to defend a cyber libel complaint

1. Treat the subpoena as urgent

Record the date, time and manner of service. Read the subpoena and attachments completely. The filing date stated by the prosecution office controls your immediate response.

Under the 2024 DOJ–NPS Rules, the scheduled submission must ordinarily allow at least 10 days from receipt of the subpoena. Do not assume that informal negotiations, a takedown, an apology or difficulty finding a lawyer automatically extends the deadline. Seek a written extension before the deadline when genuinely necessary and permitted.

Failure to appear or file a counter-affidavit without adequate justification may cause the prosecutor to resolve the case using the complainant’s evidence alone.

2. Do not litigate on social media

Do not repost the accusation, attack the complainant, solicit fabricated witnesses or encourage followers to harass anyone. New statements can create new evidence or separate legal exposure.

A voluntary correction, clarification or apology may be relevant to good faith or penalty, but it can also be framed as an admission. Obtain advice on wording and timing.

3. Preserve your own records

Keep:

the complete original post and drafts;
the full conversation, not selected excerpts;
account-access and security records;
the device used;
source materials and research notes;
messages with editors, sources or recipients;
documents supporting truth or reasonable belief;
records showing the intended and actual audience;
evidence of hacking, impersonation or unauthorized access;
records of corrections, takedowns or apologies; and
travel, location or network records relevant to venue or authorship.

Do not delete accounts, wipe devices, alter metadata or instruct others to remove evidence. A takedown may reduce continuing harm, but first preserve a reliable copy and obtain advice if a complaint or investigation is already expected.

4. Answer every element with evidence

A useful counter-affidavit does more than deny liability. It should address, where applicable:

Authorship: Did you actually compose or upload the content?
Publication: Was it communicated to anyone other than the complainant?
Identification: Would a reasonable reader identify the complainant?
Defamatory meaning: Was it a factual imputation, or protected criticism, rhetoric or opinion?
Falsity and truth: What reliable records support the statement?
Malice: What verification, sources and legitimate purpose existed?
Privilege: Was the communication made in the performance of a duty to a person with a corresponding interest?
Public status: Was the statement about a public officer or public figure and a matter of public concern?
Prescription: When was the material discovered, and when was the complaint filed?
Venue: What facts connect the alleged offense, computer system or damage to the chosen locality?
Retroactivity: Was the alleged online publication made before the cyber libel law could validly apply?
Evidence: Can the complainant’s screenshots and account attribution be authenticated?

State defenses under oath and attach the supporting records immediately. Preliminary investigation is a critical evidentiary stage; withholding a decisive document for “surprise” at trial may be counterproductive.

5. Challenge unlawful digital searches properly

Police generally need the appropriate judicial authority to compel disclosure of protected computer data or to search, seize and examine devices, subject to recognized constitutional exceptions. Do not physically resist an officer, destroy data or obstruct an investigation.

Ask for a copy of the warrant, record the officers and items taken, and contact counsel. The Rule on Cybercrime Warrants governs preservation, disclosure, interception, search, seizure and examination of computer data. Evidence obtained in violation of constitutional and statutory requirements may be challenged through the proper procedure.

6. Follow the case after the prosecutor’s resolution

If the complaint is dismissed or an Information is recommended, obtain the complete resolution and note the date of receipt. Administrative reconsideration or review remedies have short, technical deadlines and do not always stop court proceedings. The correct remedy depends on the issuing office, whether an Information has already been filed and the current DOJ rules.

Once an Information is filed, the judge independently evaluates probable cause for a warrant of arrest. An Information does not itself mean guilt, and arrest is not an automatic consequence of merely receiving a prosecutor’s subpoena. If a warrant is issued, counsel should address surrender, bail and arraignment promptly rather than waiting for an unexpected arrest.

Possible penalties and civil liability

Article 355 of the Revised Penal Code, as amended by Republic Act No. 10951, sets the penalty for traditional written libel at prisión correccional in its minimum and medium periods, a fine from ₱40,000 to ₱1,200,000, or both.

Section 6 of Republic Act No. 10175 requires a penalty one degree higher when the offense is committed through information and communications technology. The Supreme Court held in People v. Soliman that imprisonment is not mandatory in every cyber libel conviction: a court may impose a fine instead when legally and factually justified. For cyber libel governed by the amended fine levels, the Court identified the applicable fine range as ₱40,000 to ₱1,500,000.

The precise penalty depends on the law in force when the offense was committed, mitigating or aggravating circumstances, and the court’s findings. A conviction may also include civil liability. Damages are not automatic in whatever amount a complainant demands; they must have a legal and evidentiary basis.

Evidence-preservation requests

Computer data can disappear quickly because of deletion, account closure or routine retention policies. Under Section 13 of Republic Act No. 10175:

service providers must preserve the integrity of traffic data and subscriber information for at least six months from the transaction; and
content data must be preserved for six months from receipt of a lawful preservation order from law enforcement.

Law enforcement may order one extension for another six months. Preservation does not automatically authorize disclosure: access to protected data remains subject to the applicable warrant and disclosure rules.

If platform-held information is important, consult the NBI, PNP cybercrime unit or counsel promptly. Sending an ordinary private demand to a social-media company is not a substitute for the process required by Philippine law and the provider’s rules.

Common mistakes

Waiting because the post is still online and overlooking the one-year period from discovery.
Saving only a cropped screenshot without the URL, account, date, context or original file.
Naming every person who liked or received a post as a respondent.
Assuming account ownership conclusively proves authorship.
Filing wherever the post could be viewed without establishing statutory venue.
Treating every insult or negative review as a defamatory factual accusation.
Assuming truth alone always guarantees acquittal.
Publishing a complaint to the whole internet when it could have been sent to the proper authority.
Ignoring a prosecutor’s subpoena or filing an unsworn narrative instead of a counter-affidavit.
Submitting documents without explaining their authenticity and relevance.
Deleting posts, messages, accounts or devices after learning of an investigation.
Threatening witnesses or pressuring them to change statements.
Assuming an apology automatically ends the criminal case.
Treating a prosecutor’s finding as a final determination of guilt.
Using criminal complaints primarily to silence criticism without first testing every legal element.

When legal help is urgent

Contact a Philippine criminal-law or media-law practitioner immediately if:

the one-year prescriptive period may expire soon;
you received a subpoena, resolution, Information, warrant or court notice;
the respondent or complainant is abroad;
the account is anonymous, hacked or impersonated;
evidence must be obtained from a platform or telecommunications provider;
police seek access to a phone, computer, cloud account or private messages;
several posts, authors, jurisdictions or discovery dates are involved;
the statement concerns a public officer, journalist, whistleblower or public controversy;
a separate civil action has been or may be filed;
there are threats, stalking, doxxing or sexual content in addition to defamation; or
the dispute involves confidential employment, medical, banking or government records.

Other laws may apply alongside—or instead of—cyber libel. Examples include laws on threats, unjust vexation, identity theft, unlawful access, data privacy, violence against women and children, and non-consensual intimate images. Each offense has different elements and procedures.

Frequently asked questions

Can I file because someone insulted me in a private chat?

Only if the required elements exist. Libel requires publication to a third person. A message received exclusively by the person discussed ordinarily lacks that element, although forwarding, group-chat distribution or another person’s access may establish publication.

Is a Facebook like or emoji reaction cyber libel?

Not by itself. The Supreme Court limited cyber libel liability under Section 4(c)(4) to the original author, not people who simply receive and react to a post. A separate written comment or caption must be assessed on its own facts.

Can sharing someone else’s post create liability?

A bare platform share is not automatically treated the same as authorship under Disini. However, adding a new defamatory caption, materially adopting an accusation, or creating a separate defamatory publication can present a different case. The precise content and conduct matter.

Does deleting the post prevent a case?

No. Deletion does not erase an already completed publication, and copies may remain. It may reduce continuing harm and can sometimes be relevant to good faith or penalty, but it does not automatically extinguish criminal or civil liability.

Does an apology dismiss the case?

No. An apology may support settlement efforts or mitigation, but the criminal case is prosecuted in the name of the People of the Philippines. An affidavit of desistance does not automatically require the prosecutor or court to dismiss a case supported by sufficient evidence.

Can a company be defamed?

A juridical person may suffer reputational damage, and the cybercrime venue rule expressly refers to damage caused to a natural or juridical person. Whether a particular accusation supports criminal and civil relief depends on the statement, identification, complainant’s legal personality and evidence.

Can I be arrested immediately after someone complains?

Ordinarily, filing a complaint begins prosecutorial investigation; it does not itself authorize arrest. If an Information is later filed, the judge independently determines probable cause for a warrant. Warrantless arrest is lawful only within recognized constitutional and procedural grounds.

Where can I report the incident?

A complaint may be brought to the appropriate city or provincial prosecutor’s office. Investigative assistance may also be requested from the NBI or PNP cybercrime unit. The DOJ maintains official information on reporting cybercrime incidents.

Can I demand that the platform reveal an anonymous account?

You may report the account through the platform’s procedures, but protected subscriber or traffic information is generally obtained by law enforcement through the process required by Republic Act No. 10175 and the Rule on Cybercrime Warrants. A private demand does not compel disclosure.

Does the complainant have to prove actual financial loss?

Not to establish every cyber libel prosecution. The offense focuses on defamatory publication and the other criminal elements. Financial records become important when actual damages are claimed or when they help prove where and how damage occurred.

Official legal sources

This article provides general legal information, not legal advice or an attorney-client relationship. Cyber libel outcomes depend on the exact words, audience, authorship, evidence, dates, venue and procedural record. Official sources were checked for current law and procedure as of September 14, 2026.