Quick answer

A Philippine cyber libel complaint is generally filed through a sworn complaint-affidavit with the proper Office of the City or Provincial Prosecutor—not directly as a criminal case in court. File promptly: the Supreme Court has definitively ruled that cyber libel prescribes in one year from discovery by the offended party, the authorities, or their agents. A demand letter, platform report, barangay blotter, or informal police report should not be assumed to stop that period. The safer course is to file a legally sufficient complaint with the prosecution office within the year. Causing v. People, G.R. No. 258524, April 8, 2026.

A person defending a complaint should not ignore the prosecutor’s subpoena. Submit a sworn, evidence-backed counter-affidavit on the date stated in the subpoena, challenge every missing element, and raise authorship, prescription, venue, privilege, truth, lack of publication, lack of identification, and absence of malice when the facts support them.

Cyber libel is not established merely because an online statement was harsh, embarrassing, mistaken, or offensive. The prosecution must prove the legal elements of libel, use of a computer system, and the respondent’s responsibility as the original author.

What counts as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s rules on libel to unlawful defamatory material published through a computer system or similar technology.

The prosecution must establish:

A defamatory imputation. The post attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a natural or juridical person to contempt. Meaning is assessed from the whole post and its context—not from isolated words alone.
Publication. At least one person other than the person defamed received, read, saw, or heard the material. A message sent only to its subject ordinarily lacks this element, although other laws may apply. A group chat, public post, email copied to others, video, podcast, or shared online document may satisfy publication.
Identification. The complainant must be the person referred to. Naming the person is unnecessary if readers familiar with the circumstances could reasonably identify that person. A complainant cannot rely only on a private belief that an unnamed character refers to them.
Malice. Defamatory imputations are generally presumed malicious unless they fall within a recognized privilege. Different and stricter rules apply when the complainant is a public officer or public figure.
Use of a computer system or information and communications technology. This includes material posted or transmitted through social media, websites, messaging applications, email, and comparable digital systems.
Responsibility of the accused. The evidence must connect the respondent to the authorship and publication of the material. A display name, profile photograph, or screenshot of an account does not necessarily prove who operated it.

The Supreme Court upheld cyber libel only as applied to the original author. A person who merely receives a post and uses an ordinary “like,” “share,” or similar reaction is not liable for aiding or abetting cyber libel under the provisions invalidated in Disini v. Secretary of Justice. However, a separate comment that introduces a new defamatory accusation may itself be treated as an original publication.

The same publication cannot be punished twice as both ordinary libel and cyber libel. Disini held that charging both for the identical material would violate the protection against double jeopardy.

Statements that are not automatically cyber libel

Not every damaging online statement is criminal:

Truth is not always a complete defense by itself. Under Article 361 of the Revised Penal Code, acquittal generally requires proof that the imputation was true and was published with good motives and for justifiable ends.
Fair comment on matters of public interest may be protected. The analysis depends on whether the statement was genuine comment based on disclosed facts or an unsupported factual accusation presented as true.
Qualifiedly privileged communications may defeat the presumption of malice. Examples under Article 354 include a private communication made in performing a legal, moral, or social duty to someone with a corresponding interest, and a fair and true report made in good faith of qualifying official proceedings. The prosecution may still overcome a qualified privilege by proving actual malice.
Public officers and public figures receive less protection concerning matters of legitimate public concern. In criminal libel cases involving public figures—particularly public officers—the prosecution must prove actual malice: knowledge that the statement was false or reckless disregard of whether it was false. Daquer v. People.
Pure insult or abuse does not invariably contain a defamatory factual imputation. Context, ordinary meaning, accompanying images, hashtags, and prior exchanges matter.

Calling a statement “opinion,” adding “allegedly,” or framing it as a question is not conclusive. A court may still treat it as a factual accusation if that is how an ordinary reader would understand it.

The one-year deadline

Cyber libel prescribes in one year from the date the allegedly defamatory material is discovered by the offended party, the authorities, or their agents. Publication and discovery may occur on the same day, but the law does not presume that a person discovered a Facebook post merely because it was publicly available. The Supreme Court rejected that proposed presumption and denied reconsideration with finality in its April 8, 2026 resolution in Causing v. People.

Important qualifications include:

Discovery by the authorities or an authorized agent can start the period even before the offended party personally reads the post.
The filing of a complaint or information interrupts prescription under Article 91 of the Revised Penal Code.
Prescription does not run while the offender is absent from the Philippines.
If the discovery date is disputed, prescription becomes a factual issue requiring evidence. The accused normally bears the burden of establishing prescription unless it is apparent from the face of the charge.
Do not assume that a demand for deletion, a platform complaint, mediation, or an informal law-enforcement inquiry interrupts the period.
A separate civil action for defamation is also generally subject to a one-year period under Article 1147 of the Civil Code.

Record exactly when, how, and from whom the post was first discovered. Preserve the message, email, screenshot, or witness testimony proving that date.

Evidence to preserve immediately

Online evidence can disappear or be altered. Preserve it before asking the author or platform to delete it.

Keep:

Full-page screenshots showing the post, account name, date and time, reactions, comments, and surrounding context
The complete URL or other unique post identifier
A screen recording showing how the post is reached from the account or page
The original image, audio, video, email, message export, or downloaded webpage when available
The entire conversation or thread, including statements that may change the meaning
The device used to view or receive the post
Names and sworn statements of people who saw the publication
Evidence identifying the author, such as admissions, consistent contact information, earlier messages, account-control evidence, or witnesses
Proof of falsity and reputational harm, such as official records, employment communications, lost contracts, customer messages, or testimony
For the defense, the sources consulted before publication, interview notes, official records, requests for comment, drafts, corrections, and evidence of good faith
Proof of the discovery date and any later demand, response, deletion, correction, or apology

Do not crop away important context, edit filenames, add annotations to the only copy, or rely solely on printouts. Keep untouched originals and working copies. Electronic evidence must be authenticated; organized records showing source, integrity, and chain of custody are much more useful than isolated screenshots.

If the account is anonymous or platform records are needed, approach the NBI Cybercrime Division or the PNP Anti-Cybercrime Group promptly. Private parties generally cannot compel a platform or telecommunications provider to disclose protected subscriber or content data on their own. Law enforcement may seek preservation and the appropriate cybercrime warrant. The DOJ’s Rule on Cybercrime Warrants guidance explains the relevant preservation, disclosure, interception, search, and examination processes.

How to file a criminal complaint

1. Confirm that the facts fit cyber libel

Identify the exact defamatory words or images, the person defamed, every third person who received them, the likely original author, the digital system used, and the evidence of malice.

Other online harms—threats, extortion, harassment, impersonation, privacy violations, non-consensual intimate images, or identity theft—may fall under different laws. Do not force every harmful online act into a cyber libel complaint.

2. Determine the correct place to file

Cybercrime venue is technical. Under Section 2.1 of the Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC, criminal actions under Sections 4 and 5 of Republic Act No. 10175 are filed before the designated cybercrime court of the province or city:

where the offense or any element was committed;
where any part of the computer system used was situated; or
where damage to a natural or juridical person took place.

The corresponding prosecution office handles the preliminary investigation before an information is filed in court. State the concrete facts supporting venue. Do not assume that a case may be filed anywhere the material was theoretically viewable. An incorrect venue can defeat or delay an otherwise substantial complaint.

3. Prepare the complaint-affidavit

The complaint-affidavit should be sworn and should clearly state:

The complete names and addresses of the complainant and respondent, if known
The date and place of the offense
The date and circumstances of discovery
The exact words, images, audio, or video complained of
An accurate translation where necessary
Why the material is defamatory and how the complainant is identifiable
Who received or viewed it
Why the respondent is believed to be the original author
The computer system or online service used
Facts and documents showing falsity, malice, and absence of privilege
The factual basis for filing in that prosecution office
A numbered list of supporting annexes

Attach witness affidavits and all supporting evidence. Conclusions such as “the post is malicious” are not substitutes for facts.

4. File the required copies and form

Under the 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings, Department Circular No. 015, regular preliminary investigation begins with:

the original complaint-affidavit;
two duplicate copies for the official file;
one additional set for each respondent; and
a completed NPS Investigation Data Form.

The DOJ forms page provides the NPS Investigation Data Form. Verify the receiving office’s current filing hours, payment requirements, and permitted electronic-filing arrangements before submission. Electronic filing or virtual proceedings are available only under the applicable rules and instructions; emailing documents to an unofficial or unconfirmed address is not a safe substitute for proper filing.

Barangay conciliation is generally not a prerequisite because cyber libel carries a maximum imprisonment and fine above the Katarungang Pambarangay jurisdictional limits.

5. Participate in the preliminary investigation

The prosecutor checks the complaint’s form and evidentiary completeness before docketing it. Under the 2024 rules:

Within five calendar days after receiving the complete records, the investigating prosecutor should recommend dismissal or issue subpoenas.
The hearing date should not exceed 30 days from the prosecutor’s receipt of the complete records.
The respondent’s submission date must be at least 10 days after receipt of the subpoena, complaint-affidavit, and attachments.
A reply-affidavit and rejoinder-affidavit, when required, must each be filed no later than 10 calendar days from receipt of the pleading answered.
Preliminary-investigation complaints should generally be resolved within 60 calendar days from assignment, subject to a maximum 30-day extension for specified circumstances.

These are procedural targets and do not guarantee that the entire matter, including approval and service of the resolution, will finish within that period.

The current prosecution standard is prima facie evidence with reasonable certainty of conviction. The evidence must be admissible, credible, preservable, and capable of proving every element and the identity of the responsible person. The Supreme Court upheld this standard in Meking v. Remulla.

If the prosecutor finds the required evidence, an information is filed in the designated Regional Trial Court handling cybercrime cases. The judge then independently determines whether judicial probable cause exists and whether a warrant of arrest should issue.

How to defend a complaint

Act on the subpoena immediately

The subpoena’s stated date controls. It must ordinarily give the respondent at least 10 days from receipt to submit a counter-affidavit, but waiting until the last day can make it impossible to collect platform records, witnesses, or certified documents.

An extension is exceptional, must be justified by grounds recognized in the DOJ rules, and may not exceed 10 days. If the respondent fails to submit a counter-affidavit despite proper notice, the prosecutor may resolve the complaint using the complainant’s evidence alone.

File a complete counter-affidavit

The respondent or authorized representative should file the original counter-affidavit, two duplicate copies, and copies for every complainant. It must be sworn and should attach all available defense evidence.

A motion to dismiss generally cannot replace a counter-affidavit. If a verified motion contains the defenses, the prosecutor may treat it as the counter-affidavit. The safer practice is to answer the allegations directly and preserve every supported defense.

Possible defenses include:

The statement is not defamatory when read in full context.
The complainant was not named or reasonably identifiable.
No third person received the statement.
The respondent did not write, post, or control the material.
The evidence does not reliably connect the account to the respondent.
The respondent only received or reacted to another person’s post.
The statement was true and published with good motives and for justifiable ends.
The communication was privileged.
The material was fair comment based on disclosed facts concerning a legitimate public issue.
The complainant is a public officer or public figure and actual malice cannot be proved.
The complaint was filed after the one-year prescriptive period.
Venue is unsupported or improperly laid.
The alleged conduct occurred before Republic Act No. 10175 became effective and cannot be punished retroactively as cyber libel.
The identical material is being charged impermissibly under both ordinary and cyber libel provisions.

Support prescription with evidence of when the complainant, an authority, or an agent actually discovered the material. Merely citing the date shown on the post may be insufficient.

Protect devices and accounts lawfully

Preserve relevant data, but do not surrender an unlocked device or provide passwords casually. Ask to see the legal basis and any warrant or court order, and obtain counsel before consenting to a forensic search. Do not obstruct the implementation of a valid warrant, destroy evidence, alter account history, fabricate messages, or pressure witnesses.

Respond quickly if a case reaches court

A prosecutor’s resolution is not yet a conviction, but an information filed in the RTC can lead to a warrant of arrest, bail proceedings, arraignment, pretrial, and trial. Bail is generally a matter of right before conviction for this offense, although the court determines the conditions and amount.

Obtain counsel immediately to assess surrender and bail arrangements, judicial venue, the sufficiency of the information, prescription, a motion to quash, and available remedies. Do not skip hearings or assume that a pending DOJ review automatically suspends the court case.

Reconsideration, review, and settlement

An aggrieved party may file a motion for reconsideration of the prosecutor’s resolution within 15 days from receipt under Department Circular No. 015. Further review follows the applicable DOJ appeal rules and depends on the issuing prosecution office and the court that would hear the charge. A petition for review does not by itself stop court proceedings; the required motion to suspend proceedings must also be addressed to the court.

A deletion, correction, apology, settlement, or affidavit of desistance does not automatically extinguish criminal liability because the offense is prosecuted in the name of the People of the Philippines. These actions may nevertheless affect the evidence of malice, civil damages, prosecutorial assessment, or the court’s choice of penalty.

When negotiating, put terms in writing and address preservation, deletion, correction, publication of an apology, confidentiality, releases, pending cases, and costs. Neither side should demand money through threats that could create separate criminal exposure.

Possible penalties and civil liability

Traditional written libel carries imprisonment, a fine of ₱40,000 to ₱1.2 million, or both under Article 355 as amended by Republic Act No. 10951. Because Republic Act No. 10175 raises the penalty by one degree when ICT is used, the imprisonment range for cyber libel is prisión correccional in its maximum period to prisión mayor in its minimum period—four years, two months and one day to eight years.

If a fine is imposed, the Supreme Court has fixed the cyber libel range at ₱40,000 to ₱1.5 million. The law allows imprisonment, a fine, or both. A court may choose a fine alone depending on the circumstances, but this is not guaranteed. People v. Soliman.

Civil liability may include proven actual, moral, and, when legally justified, exemplary damages. The civil action arising from the offense is generally deemed instituted with the criminal action unless it is waived, reserved, or filed beforehand. Whether to reserve or separately pursue damages should be decided early because prescription, venue, filing fees, and evidentiary standards differ.

Common mistakes

Waiting for negotiations or platform action while the one-year period runs
Counting automatically from publication without proving the actual discovery date
Filing in a convenient but legally unsupported venue
Naming every person who liked or shared a post despite Disini
Submitting cropped screenshots without the URL, date, thread, or original file
Assuming a profile name conclusively proves authorship
Omitting witness affidavits proving publication to third persons
Treating truth as an automatic defense without addressing motive and purpose
Ignoring the public-figure and actual-malice rules
Responding to a subpoena with an unsworn denial or a bare motion to dismiss
Deleting accounts, messages, drafts, or source materials after learning of a complaint
Assuming an apology or affidavit of desistance automatically ends the case
Posting new accusations about the dispute while it is pending
Missing the 15-day reconsideration deadline
Assuming a DOJ appeal automatically suspends arraignment or trial

When legal help is urgent

Consult a Philippine lawyer experienced in criminal and cybercrime procedure immediately when:

The one-year prescriptive period is close to expiring
The post or account may soon disappear
The author is anonymous and platform data must be preserved
A subpoena, prosecutor’s resolution, information, warrant, or court order has been received
Police request access to a phone, computer, account, or password
The complainant is a public officer, journalist, corporation, or public figure
Several posts, respondents, jurisdictions, or foreign platforms are involved
The dispute also includes threats, extortion, stalking, privacy violations, or intimate images
Settlement discussions involve payment, retraction, or withdrawal of pending proceedings
The respondent is a child, is abroad, or may be arrested

Those unable to afford private counsel may ask the Public Attorney’s Office, an Integrated Bar of the Philippines legal-aid office, or an accredited law-school legal clinic whether they qualify for assistance.

Frequently asked questions

Can I file cyber libel over a private message?

Only if it was published to at least one person other than the person defamed. A message sent solely to its subject ordinarily lacks publication, although its contents may violate a different law.

Is sharing a defamatory post cyber libel?

A simple receipt, reaction, or ordinary share of another person’s post is not punishable as aiding or abetting cyber libel under Disini. A new caption or comment that makes its own defamatory accusation may be treated differently.

Must the complainant be named?

No. Identification exists if people who know the surrounding facts could reasonably understand that the material refers to the complainant. The prosecution must prove that connection.

Is a screenshot enough?

Sometimes it may help establish the complaint, but an isolated screenshot can be challenged as incomplete, altered, unauthenticated, or insufficient to prove authorship. Preserve the URL, context, original files, device, witnesses, and any platform or forensic records.

Does deleting the post erase liability?

No. Deletion does not undo an already completed publication. It may preserve evidence of corrective action or mitigation, but it can also create evidentiary issues if the material was destroyed after a dispute arose.

Will filing a complaint cause an immediate arrest?

Ordinarily, no. The prosecutor first conducts a preliminary investigation. If an information is later filed, the judge independently determines probable cause for a warrant. A lawful warrantless arrest requires separate legal grounds and should not be assumed merely because an online post exists.

Can the complainant have the post automatically taken down?

No. A cyber libel complaint does not itself create an automatic government takedown order. Preserve the evidence first, then consider platform remedies and any legally available court relief.

Can the parties settle?

They may negotiate civil and practical terms, but settlement, apology, deletion, or desistance does not automatically terminate the State’s criminal case. Any agreement should be reviewed by counsel.

What is the controlling prescription rule now?

As of the Supreme Court’s April 8, 2026 final resolution in Causing v. People, cyber libel prescribes in one year from actual discovery by the offended party, the authorities, or their agents. There is no automatic presumption that discovery occurred on the date a social-media post went online.

Primary and official materials

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Cyber libel depends heavily on the exact words, context, authorship evidence, discovery date, venue, and parties’ status. Sources and procedures were checked as of August 10, 2026.