Quick answer

To file a cyber libel case in the Philippines, preserve the online material and proof of authorship, confirm that every legal element is present, and file a sworn complaint with the proper Office of the City or Provincial Prosecutor before the case prescribes. A police, NBI, platform, or barangay report is not a safe substitute for timely filing with the prosecutor.

To defend one, do not ignore the prosecutor’s subpoena. Obtain the complete complaint and attachments, preserve your own digital evidence, and submit a sworn counter-affidavit addressing each element and any issue involving authorship, publication, identification, privilege, malice, prescription, or venue. Under the current DOJ rules, the hearing date must ordinarily give the respondent at least 10 days from receipt of the subpoena and complaint to submit the counter-affidavit.

Cyber libel generally prescribes in one year from discovery by the offended party, the authorities, or their agents. In April 2026, the Supreme Court denied with finality the motions challenging that rule. The actual date of discovery is a factual issue; publication online does not automatically create a presumption that the offended person discovered the post that same day.

What counts as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 covers libel committed through a computer system or similar technology. It applies the Revised Penal Code’s law on libel to material published through social media, websites, blogs, messaging platforms, email, and comparable digital means.

The prosecution must establish:

A defamatory imputation—such as an allegation of a crime, vice, defect, dishonorable act, condition, or circumstance;
Publication or communication of the imputation to at least one person other than the offended party;
Identification of the offended person, whether by name or through facts that make the person reasonably identifiable;
Malice, subject to the rules on presumed and actual malice; and
Use of a computer system or information and communications technology.

The alleged statement must be evaluated as a whole and in context. Not every insult, criticism, exaggeration, or harsh opinion is libelous. Conversely, putting “opinion,” “allegedly,” or a question mark beside an accusation does not automatically protect a statement that conveys or implies a defamatory assertion of fact.

A private message seen only by its sender and the offended person ordinarily lacks the publication required for libel. A group chat, copied email, forwarded message, or post shown to another person may satisfy publication.

Who may be held liable

The principal focus is the person who authored or published the defamatory online material. The prosecution must connect the accused to both the account and the particular post; an account name or profile photograph is relevant but is not always conclusive by itself.

In Disini v. Secretary of Justice, the Supreme Court upheld online libel as to the original author but rejected liability under the challenged provisions for people who merely received a post and reacted to it. A person who writes a new defamatory caption, adds a separate accusation, or independently republishes defamatory material may present a different situation and should not assume that calling the act a “share” provides immunity.

Authorship may be shown through direct or circumstantial evidence. In XXX v. People, the Supreme Court identified examples such as:

An admission of ownership, access, or authorship;
A witness who saw the person use the account or compose the post;
Information in the post known only to the person or a few people;
Distinctive language or conduct connecting the person to the account;
Platform, telecommunications, internet-service, geolocation, or device-forensic records; and
Other acts or circumstances consistent with authorship.

A natural person or a juridical person, such as a corporation, may be defamed. For a member of a group to complain individually, however, the material must reasonably identify that person rather than merely criticize an indefinite or very large class.

The deadline: one year from discovery

Under Causing v. People, as affirmed with finality in the Supreme Court’s April 8, 2026 resolution, cyber libel prescribes in one year. Article 91 of the Revised Penal Code starts the period when the alleged crime is discovered by the offended party, the authorities, or their agents.

There is no automatic rule that a public Facebook post, viral video, or widely accessible webpage was discovered on its publication date. Discovery is determined from evidence such as:

When the complainant first received a link or screenshot;
An earlier reaction, comment, or response by the complainant;
Messages discussing the post;
A demand for deletion or threat of legal action; or
Other conduct showing actual knowledge.

The filing of the proper complaint or information interrupts prescription. The period may resume if the proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused. Article 91 also provides that prescription does not run while the offender is absent from the Philippines.

Because the discovery date can be disputed, a complainant should not wait until the final days of the one-year period. A platform report, takedown request, demand letter, or informal request for police assistance should not be relied on as the act that interrupts prescription.

A separate civil action for defamation is also generally subject to a one-year period under Article 1147 of the Civil Code, but its accrual and the legal basis of the claim require separate analysis. Obtain advice promptly if damages are being considered independently of the criminal case.

Where the complaint should be filed

Venue in a criminal libel case is jurisdictional. Article 360 of the Revised Penal Code contains special venue rules intended to prevent complainants from forcing an accused to defend a case in an arbitrary or remote place.

For an online publication, merely showing that the material could be accessed—or was first opened—at a particular location does not necessarily establish that it was “printed and first published” there. Bonifacio v. RTC of Makati rejected an approach that would allow an internet author to be sued wherever an online article was accessed.

The offended person’s actual residence when the offense was committed is often the more practical venue basis for a private complainant. Different statutory rules apply when the offended party is a public officer, including rules connected to where the officer held office. The complaint must allege and support the facts establishing venue.

File with the Office of the City or Provincial Prosecutor corresponding to a legally permissible venue. Do not choose a prosecution office solely because it is convenient. Venue should be reviewed by counsel when the post was made abroad, the parties moved residences, the complainant is a public officer, or several locations are involved.

Evidence to preserve immediately

Preserve evidence before asking the author or platform to delete the material. A cropped screenshot alone may omit information needed to establish context, publication, authenticity, venue, or authorship.

Keep, where available:

Full-page screenshots showing the exact words, account name, profile, date, time, reactions, comments, and surrounding content;
The complete URL or post identifier, not merely a link to the platform’s home page;
A screen recording showing how the post was reached from the account;
The original image, audio, video, email, message export, or downloaded webpage;
Platform notifications, emails, direct messages, and takedown correspondence;
The post’s apparent privacy or audience setting;
Evidence of edits, reposts, forwarding, or deletion;
Names and contact details of people who personally saw the material;
Proof of when and how the complainant first discovered it;
Evidence connecting the account or device to the suspected author; and
Documents supporting or disproving the factual accusation.

Keep original files unchanged. Make working copies and record who collected each item, when it was collected, and from what device or account. Do not improve, annotate, compress, or edit the only copy.

The Rules on Electronic Evidence require electronic evidence to be authenticated. A witness with personal knowledge, authentic platform or business records, device evidence, and proof of integrity can be important. A screenshot is not automatically inadmissible, but someone must be able to explain reliably what it depicts and how it was obtained.

How to file the complaint

1. Test the facts against every element

Write down the exact statement rather than a paraphrase. Identify what factual accusation is supposedly defamatory, who understood it to refer to the complainant, who else received it, and what evidence connects the respondent to the publication.

Also examine possible privilege, public-interest, and truth issues before filing. A weak or retaliatory complaint can consume substantial time and expose the parties to further expense or liability.

2. Determine the discovery date and venue

Record the earliest provable date on which the complainant, an authority, or an agent discovered the material. Separately identify the facts supporting the chosen prosecution office’s territorial authority and venue.

3. Obtain investigative help if necessary

The NBI Cybercrime Division or another appropriate cybercrime law-enforcement unit may assist with an anonymous account, disappearing evidence, device examination, or records that require legal process. The NBI’s current citizen-service guidance calls for a complaint form, interview, sworn statements, supporting documents, and, where relevant, device examination.

Private individuals cannot compel a platform, telecommunications company, or internet-service provider to disclose protected records. Law-enforcement authorities may seek appropriate preservation, disclosure, interception, or search authority under the law and the Supreme Court’s cybercrime-warrant rules.

Investigative assistance should be pursued promptly and, when necessary, in parallel with preparation of the prosecutor’s complaint. Do not let an investigation consume the prescriptive period.

4. Prepare the sworn complaint

The complaint-affidavit should ordinarily state:

The parties’ complete identifying and address information;
The exact defamatory words or material;
When, where, and through what platform the material was published;
Why the material refers to the complainant;
Who saw or received it;
How the respondent’s authorship or participation is established;
When and how the material was discovered;
Facts establishing venue;
Facts supporting malice and answering any expected privilege; and
A chronological explanation of the attached evidence.

Attach witness affidavits and clearly marked copies of the electronic and documentary evidence. The complainant should use the current DOJ preliminary-investigation filing checklist, including the required Investigation Data Form, copies, sworn documents, and office-specific requirements. Filing methods and designated email addresses may differ among prosecution offices, so confirm the accepted channel directly with the proper office.

A demand letter, prior barangay proceeding, or platform takedown request is not generally a prerequisite to a cyber libel complaint.

5. Participate in the preliminary investigation

Under DOJ Department Circular No. 015, series of 2024, regular preliminary investigation applies to offenses carrying the applicable level of prescribed penalty, including cyber libel. The current prosecutorial standard is prima facie evidence with reasonable certainty of conviction.

If sufficient grounds appear, the prosecutor issues a subpoena with the complaint and supporting evidence. The respondent is directed to submit a counter-affidavit at the preliminary-investigation hearing, with at least 10 days from receipt of the subpoena and complaint.

The prosecutor may ask clarificatory questions or require further affidavits when necessary. Preliminary investigation is not a trial, and the parties do not have an automatic right to cross-examine each other’s witnesses at this stage.

6. Review the prosecutor’s resolution immediately

A finding of probable prosecutorial basis does not establish guilt. If an information is filed, the RTC independently determines whether probable cause exists for issuing a warrant of arrest.

An adverse prosecutor’s resolution may be subject to reconsideration or a petition for review. Under the generally applicable DOJ appeal rules, a petition for review is ordinarily taken within 15 days from receipt of the resolution or the denial of a motion for reconsideration or reinvestigation, subject to the proper reviewing authority, exceptions, documentary requirements, and any applicable special issuance. Obtain counsel immediately rather than assuming that reconsideration, review, or a pending petition automatically stops court proceedings.

How to defend the complaint

Act as soon as the subpoena arrives

Record the date and manner of receipt. Obtain every attachment and compare it with the subpoena’s inventory. The scheduled submission date should allow at least 10 days from receipt, but that is a minimum preparation period—not an invitation to wait.

If essential records or counsel cannot reasonably be obtained in time, request an extension in writing before the deadline and explain the specific reasons. An extension is discretionary. Failure to submit a counter-affidavit may cause the prosecutor to resolve the complaint from the complainant’s evidence alone.

Preserve rather than destroy

Keep the relevant account data, post history, devices, access records, conversations, drafts, and documents supporting the statement. Do not delete accounts, wipe devices, fabricate screenshots, coach witnesses, or pressure the complainant.

Leaving harmful material online may increase practical damage, while deleting it without preservation can create an evidentiary problem. Preserve an accurate copy first and obtain legal advice about correction, takedown, retraction, or apology.

Answer the elements, not merely the accusations

A counter-affidavit should be sworn and evidence-based. Depending on the facts, possible issues include:

No authorship or account control: The account was fake, compromised, shared, or not connected reliably to the respondent.
No publication: No third person received the communication.
No defamatory meaning: The words, fairly read in context, did not impute a discreditable fact.
No identification: Readers could not reasonably identify the complainant.
Prescription: The complainant, an agent, or the authorities discovered the material more than one year before proceedings were instituted.
Improper venue: The complaint does not allege or prove a venue permitted by Article 360.
Privilege: The statement was absolutely or qualifiedly privileged.
Public-interest comment: The material was fair comment or criticism based on true or substantially true facts concerning a matter of public interest.
Truth, good motives, and justifiable ends: Where legally admissible under Article 361, the evidence satisfies all required conditions—not merely truth in isolation.
Lack of actual malice: When privilege or constitutional public-interest protections apply, the complainant cannot prove knowledge of falsity or reckless disregard for whether the statement was false.

Attach the underlying records, not just conclusions. If the defense is that a statement came from an official document, include the complete authenticated document and explain why the wording fairly reflects it.

Important defenses and exceptions

Truth is not automatically a complete defense

Article 354 generally presumes a defamatory imputation malicious even if true, unless good intention and justifiable motive are shown. Article 361 also limits when proof of truth is admissible in a criminal libel prosecution.

Where the law permits the truth defense, acquittal requires proof of the truth together with good motives and justifiable ends. “It was true” should therefore never be treated as a complete defense without examining the subject, purpose, supporting evidence, and manner of publication.

Privileged communications

Some communications are absolutely privileged when made in a protected setting and relevant to the proceeding or official duty, such as qualifying statements in legislative or judicial proceedings. Qualified privilege may cover:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without added comments, of qualifying official proceedings not confidential in nature.

Qualified privilege removes the ordinary presumption of malice but does not provide automatic immunity. The complainant may still prevail by proving actual malice.

Public officials, public figures, and public issues

Public officials and public figures are open to wider criticism concerning official conduct and matters of legitimate public interest. Protected criticism is not a license to invent facts.

Where the applicable public-interest or qualified-privilege doctrine requires actual malice, the relevant question is whether the publisher knew the assertion was false or acted with reckless disregard for its truth or falsity. Personal hostility may be evidence, but it is not identical to constitutional “actual malice.”

Penalties and civil liability

Cyber libel carries a penalty one degree higher than traditional written libel. The possible imprisonment range is generally four years, two months and one day to eight years.

Under People v. Soliman, a court may impose a fine instead of imprisonment when legally and factually justified. The Supreme Court calculated the fine range for online libel as ₱40,000 to ₱1,500,000. Imprisonment remains legally available, and the court’s sentencing choice depends on the governing law and circumstances; a fine-only sentence is not guaranteed.

Civil damages may also be claimed. The civil action arising from the offense is generally deemed instituted with the criminal case unless it is waived, reserved, or previously filed in accordance with the Rules of Criminal Procedure.

Common mistakes

Waiting for the platform or police investigation until the one-year period is nearly over;
Filing in a convenient but legally improper venue;
Submitting cropped screenshots without URLs, context, witnesses, or authentication;
Assuming that a profile name alone conclusively proves authorship;
Treating truth, opinion, or the word “allegedly” as automatic protection;
Ignoring a subpoena or submitting only an unsworn denial;
Filing a bare motion to dismiss instead of a complete counter-affidavit;
Deleting accounts, posts, devices, or messages without preserving them;
Retaliating through new posts, threats, doxxing, or witness pressure;
Discussing the case publicly and creating admissions or additional publications;
Assuming an apology or affidavit of desistance automatically ends the prosecution; or
Treating cyber libel as the only possible remedy when the facts also involve threats, stalking, identity theft, intimate images, fraud, or violence.

When legal help is urgent

Consult a Philippine criminal-law lawyer immediately if:

The one-year period may expire within weeks;
A prosecutor’s subpoena, resolution, court notice, or warrant has been received;
The account is anonymous, compromised, or likely to disappear;
Subscriber, platform, or device-forensic evidence is needed;
The offended person is a public officer or public figure;
The post concerns an official proceeding, confidential complaint, workplace investigation, journalism, or whistleblowing;
The parties or relevant systems are in different countries;
Several people edited, reposted, or controlled the account; or
The material includes threats, sexual content, a child, private images, or an immediate safety risk.

If a warrant has been issued, coordinate surrender and bail through counsel rather than evading authorities. Cyber libel is ordinarily bailable before conviction, but the court controls the process and conditions.

Frequently asked questions

Can I file over a Facebook post that has already been deleted?

Yes, if admissible evidence preserves the post and the other elements can be proved. Deletion does not erase possible liability, but incomplete screenshots may make proof difficult.

Can I sue someone who merely liked or reacted to a post?

Mere receipt and reaction are not enough under Disini. Liability may be different if the person wrote a separate defamatory statement or independently republished the accusation.

Is a private message cyber libel?

Usually not if only the sender and offended person saw it, because libel requires publication to another person. A group message, copied recipient, or later forwarding may change the analysis.

Does an apology automatically dismiss the case?

No. Cyber libel is prosecuted in the name of the People of the Philippines. A retraction, apology, settlement, or affidavit of desistance may affect evidence, damages, or prosecutorial assessment, but it does not automatically terminate the criminal case.

Is a screenshot enough?

It can be part of the evidence, but authenticity, completeness, publication, authorship, and context still have to be established. Preserve the URL, original files, account details, and testimony of people with personal knowledge.

Does the one-year period always begin on the posting date?

No. The current rule begins the period on discovery by the offended party, authorities, or their agents. Publication and discovery may occur on different dates.

Can both ordinary libel and cyber libel be imposed for the same post?

The State cannot use the same online publication to punish a person twice for ordinary libel and cyber libel in violation of double-jeopardy protections. Other genuinely distinct acts or offenses require separate analysis.

Official sources

This article provides general Philippine legal information, not advice for a particular case. Outcomes depend on the exact words, context, parties, dates, venue, documents, and admissible evidence. Official sources were last checked on July 23, 2026.