Quick answer

A cyber libel case in the Philippines usually begins with a sworn complaint filed with the proper city or provincial prosecutor’s office, supported by evidence identifying the online statement, its author, the person defamed, its publication to another person, and its allegedly malicious and defamatory meaning. The matter may first be reported to the Philippine National Police Anti-Cybercrime Group or the National Bureau of Investigation Cybercrime Division for technical investigation.

A respondent should not ignore a subpoena. Obtain the complete complaint and attachments, preserve the relevant account and device evidence, and file a detailed counter-affidavit by the deadline stated in the subpoena. Possible defenses include failure to prove authorship or publication, lack of identification, absence of defamatory meaning or malice, privileged communication, fair comment on a matter of public interest, truth accompanied by good motives and justifiable ends, improper venue, prescription, or constitutionally protected expression.

Cyber libel generally prescribes in one year from its discovery by the offended party, the authorities, or their agents, not automatically from the posting date. Discovery and interruption of prescription can be fact-sensitive, so neither side should wait.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies libel under Articles 353 and 355 of the Revised Penal Code when it is committed through a computer system or similar technology.

The prosecution must establish:

A defamatory imputation. The statement imputes a crime, vice, defect, or another act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose a natural or juridical person to contempt.
Publication. The statement was communicated online to at least one person other than the person allegedly defamed.
Identification. The complainant was named or was sufficiently identifiable from the words and surrounding circumstances.
Malice. The applicable form of malice must be shown. Malice is generally presumed from a defamatory imputation unless the communication is privileged, but actual malice must be proved in situations involving protected commentary about public officials, public figures, or matters of public interest.
Use of a computer system. The publication occurred through social media, a website, email, messaging technology, or another qualifying computer system.
Identity and participation of the accused. The evidence must connect the respondent—not merely an account bearing a similar name—to the creation or publication of the statement.

The Supreme Court summarized the traditional elements and the actual-malice standard in Disini v. Secretary of Justice. A criminal conviction requires proof beyond reasonable doubt; a prosecutor deciding whether to file an Information applies the governing preliminary-investigation standard.

Statements that are insulting are not automatically cyber libel

Courts examine the statement as a whole and in its actual context. Relevant questions include:

Does it assert or reasonably imply a discreditable fact, or is it recognizable opinion, rhetoric, satire, or hyperbole?
Would an ordinary reader understand it as referring to the complainant?
Was it communicated to someone else?
Was it a fair and relevant response to a matter of public concern?
Was the language unnecessarily abusive or unrelated to the occasion?
What did the publisher know, and what sources were checked before publication?

Calling a statement an “opinion” does not conclusively protect it if it implies undisclosed defamatory facts. Conversely, harsh criticism does not become criminal solely because it causes embarrassment or offense. The constitutional protection for speech is particularly important when the discussion concerns government conduct or a genuine matter of public interest.

Who may be held responsible?

The principal focus is the person who authored or published the allegedly defamatory online statement. Article 360 of the Revised Penal Code also contains rules concerning persons responsible for publication in traditional media, but liability must still be proved as to each accused.

In Disini, the Supreme Court upheld cyber libel as applied to the original author but invalidated Section 5 of the Cybercrime Prevention Act insofar as it punished aiding or abetting cyber libel. A mere “like,” reaction, or passive association with a post should therefore not be treated automatically as aiding or abetting cyber libel.

Important distinctions remain:

A person who writes a new defamatory comment may be treated as the author of that separate statement.
Reposting with newly added defamatory words may create a separate factual issue.
Editing or updating old material can amount to republication when the change effectively republishes it. In Keng v. Ressa, the Court treated a post-enactment update as republication.
Account ownership alone does not necessarily prove who made a particular post. Device access, account activity, admissions, platform records, witnesses, and surrounding circumstances may matter.

The same act cannot result in separate punishments for both ordinary libel and cyber libel merely because Section 7 of the Cybercrime Prevention Act mentions liability under other laws. Disini held that double punishment for the same libelous act would violate the protection against double jeopardy.

Filing a complaint

1. Preserve the online material immediately

Before asking for deletion or publicly responding, preserve the best available evidence:

Full-page screenshots showing the post, account name, date, time, reactions, comments, and surrounding discussion
The complete URL or other unique content identifier
A screen recording showing how the content was reached
The original image, video, email, or message file, if lawfully available
Visible account details and profile URL
Copies of earlier and later versions of an edited post
Messages showing when and how the complainant first discovered it
Names and affidavits of people who saw the publication
Evidence of resulting harm, such as lost engagements, client communications, employment records, or medical records, where relevant
The original device and unaltered files

Do not crop away context, alter metadata, impersonate another person, enter an account without authority, or obtain evidence through hacking. Record the time and method of collection. A lawyer or investigator can assess whether technical examination, platform preservation, or a cybercrime warrant is necessary.

2. Identify the exact defamatory statements

Quote or reproduce the precise words complained of and explain:

where they appeared;
when they were published and discovered;
why they refer to the complainant;
what defamatory meaning they conveyed in context;
who received or viewed them; and
why the evidence connects the respondent to their publication.

A general allegation that an entire account, video, or thread is “libelous” may be insufficient. Each allegedly criminal statement should be identified.

3. Choose the proper place of filing

Venue is not simply any place where internet content could be opened. Under Section 2.1 of the Rule on Cybercrime Warrants, a criminal action for a Section 4 cybercrime is filed in the designated cybercrime court of the province or city:

where the offense or any element occurred;
where any part of the computer system used is situated; or
where damage to a natural or juridical person occurred.

The first properly seized court acquires jurisdiction to the exclusion of the others. The complaint and eventual Information should contain concrete facts supporting the selected venue. Mere nationwide accessibility should not be assumed to make every location a proper venue.

A complainant ordinarily files a complaint-affidavit and supporting evidence with the corresponding Office of the City Prosecutor or Office of the Provincial Prosecutor. Technical assistance may also be requested from the cybercrime units of the NBI or PNP, which are designated enforcement authorities under Sections 10 and 11 of Republic Act No. 10175.

Confirm the current filing arrangements directly with the particular prosecutor’s office. Local receiving procedures, required copies, appointment systems, and accepted electronic channels can change.

4. Prepare the sworn complaint properly

The filing generally includes:

A complaint-affidavit based on personal knowledge
Witness affidavits
Legible, labeled documentary and electronic exhibits
Proof connecting the respondent to the account or publication
Evidence supporting venue
Evidence establishing the discovery date
A certification or other forms required by the receiving office

The affidavit should present facts rather than conclusions. It should also disclose context that materially affects the meaning of the statement. Concealing the rest of a conversation can weaken credibility and may prevent a fair assessment of privilege or malice.

Under the 2024 DOJ-NPS rules, prosecutors file an Information only when the evidence meets the governing standard of prima facie evidence with reasonable certainty of conviction. The official rules are in DOJ Department Circular No. 15, series of 2024.

The one-year prescriptive period

The Supreme Court’s current ruling is that cyber libel prescribes in one year under Article 90 of the Revised Penal Code. The Court rejected earlier views that applied 12- or 15-year periods.

Under Article 91, the period begins when the offense is discovered by the offended party, the authorities, or their agents. Posting on a public social-media page does not, by itself, create a legal presumption that the offended party discovered it on the posting date. The discovery date must be proved.

The controlling ruling is Causing v. People, G.R. No. 258524, April 8, 2026, which reaffirmed the one-year period and its discovery-based reckoning. The filing of the proper complaint may interrupt prescription, but the effect of a particular filing, later termination, unjustified delay, republication, or multiple posts depends on the records and applicable procedural law.

Separately, a civil action for injury to rights arising from defamation generally has a one-year period under Article 1147 of the Civil Code. Criminal and civil claims also interact with Article 360’s special rules. Seek advice promptly instead of calculating the last day informally.

How to answer a cyber libel complaint

1. Do not ignore the subpoena

Read the subpoena, complaint-affidavit, and every exhibit immediately. Note:

the date and method of receipt;
the deadline and hearing date;
the docket number and prosecutor’s office;
whether all attachments were actually included; and
whether the office and alleged facts support venue.

The 2024 DOJ-NPS rules generally require the subpoena to give the respondent at least 10 days from receipt to submit a counter-affidavit in a regular preliminary investigation. Follow the exact date in the subpoena. Ask counsel promptly about a justified extension if essential evidence cannot reasonably be obtained in time; an extension is not automatic.

Failure to submit may cause the prosecutor to resolve the complaint from the complainant’s evidence.

2. Preserve evidence; do not “clean up” the account

Save the complete thread, drafts, source materials, correspondence, device records, and account-security information. Preserve evidence showing:

who controlled the account;
whether the account was compromised;
who had access to the relevant device;
the complete context of the statement;
the sources consulted before publication;
corrections or clarifications and when they were made;
the public-interest basis for the discussion; and
the actual date of the complainant’s discovery, if prescription is disputed.

Do not fabricate an explanation, pressure witnesses, backdate a correction, delete messages selectively, or ask someone else to assume responsibility. Deletion does not erase copies or platform records and can damage credibility.

3. File a fact-specific counter-affidavit

A counter-affidavit should answer the charge element by element and attach admissible supporting evidence. Depending on the facts, it may raise:

No authorship: The respondent did not create or publish the statement.
No publication: No third person received the communication.
No identification: Reasonable readers could not identify the complainant.
No defamatory imputation: The words, read fairly and in context, do not convey a punishable imputation.
Privilege: The communication falls within a recognized absolute or qualified privilege.
Lack of actual malice: The publication concerned a public official, public figure, or matter of public interest and was not made with knowledge of falsity or reckless disregard for truth.
Truth with good motives and justifiable ends: Where Article 361 applies, truth alone is not always enough; motive and purpose matter.
Good-faith fair comment or report: The statement was a fair, relevant discussion based on established or accurately reported facts.
Prescription: More than one year elapsed after legally provable discovery without a timely interrupting proceeding.
Improper venue: The alleged facts do not connect the case to the selected locality.
No retroactive application: The relevant online publication occurred before the Cybercrime Prevention Act took effect on October 3, 2012, unless a legally sufficient later republication is proved.
Constitutional protection: The charge impermissibly treats protected criticism or opinion as a crime.

A bare denial is rarely enough. Attach the complete source documents rather than selected passages.

Privilege, truth, and public-interest speech

Article 354 recognizes privileged communications, including:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without comments or remarks, of qualifying official proceedings or acts.

Privilege is not a blanket license. A qualified privilege may be defeated by actual malice, excessive publication, irrelevant accusations, or abuse of the occasion.

For speech involving a public official, public figure, or protected matter of public interest, actual malice means knowledge that the statement was false or reckless disregard of whether it was false. It requires more than ordinary or even gross negligence. The prosecution must prove actual malice when that heightened standard applies.

Truth should not be pleaded casually. Under Article 361, truth may be admitted as evidence, but acquittal generally requires proof that the matter charged as libelous is true and that it was published with good motives and for justifiable ends. Special statutory wording applies when the imputation concerns a crime committed by a government employee or relates to the discharge of official duties.

What happens after preliminary investigation?

The prosecutor may dismiss the complaint or find sufficient basis to file an Information. Cyber libel is tried in the appropriate Regional Trial Court designated as a cybercrime court.

If an Information is filed:

the judge independently evaluates probable cause;
the court may dismiss if the record clearly fails to establish probable cause or may issue the appropriate process;
the accused must address arraignment, bail, pretrial, and trial with counsel; and
the prosecution retains the burden of proving guilt beyond reasonable doubt.

A party dissatisfied with a prosecutorial resolution may have remedies under the applicable DOJ rules, including reconsideration or review in proper cases. The remedy, reviewing office, permissible grounds, and deadline depend on the resolution and where it was issued. Use the deadline stated in the notice and obtain advice immediately; an attempted review does not necessarily stop court proceedings or automatically suspend other deadlines.

Possible penalties and civil exposure

Article 355, as amended by Republic Act No. 10951, punishes ordinary written libel by imprisonment, a fine of ₱40,000 to ₱1,200,000, or both. Section 6 of the Cybercrime Prevention Act raises the applicable penalty by one degree when libel is committed through information and communications technology.

For cyber libel:

the corresponding imprisonment range is generally prisión correccional in its maximum period to prisión mayor in its minimum period, or four years, two months and one day to eight years, subject to the Indeterminate Sentence Law and the facts of the case; and
if the alternative penalty of fine is imposed, the Supreme Court has held that the range is ₱40,000 to ₱1,500,000 in Hernan v. Sandiganbayan.

The Supreme Court’s Administrative Circular No. 08-2008 recognizes a preference for a fine rather than imprisonment in appropriate libel cases, but it does not remove judicial discretion or guarantee that imprisonment will not be imposed.

A conviction can also carry civil liability. A separate or impliedly instituted civil claim may seek damages, but liability and the amount must be supported by law and evidence.

Common mistakes

Waiting because the post is “still online,” despite the one-year discovery-based period
Treating every insulting remark as legally defamatory
Filing wherever the post happened to be viewed
Naming an account holder without evidence of actual authorship
Submitting cropped screenshots without URLs, dates, or context
Assuming truth alone is always a complete defense
Assuming “opinion” automatically protects an implied factual accusation
Treating likes or reactions as automatic criminal participation
Ignoring a subpoena or filing only an unsworn letter
Deleting the account or selectively deleting evidence after receiving notice
Publicly escalating the dispute while a case is pending
Filing both ordinary libel and cyber libel to obtain two punishments for the same act
Relying on outdated claims that cyber libel prescribes in 12 or 15 years

When legal help is urgent

Consult a Philippine lawyer promptly if:

the one-year period may expire soon;
a subpoena, prosecutor’s resolution, warrant, or court order has been received;
the respondent’s identity requires platform or telecommunications records;
account compromise or impersonation is claimed;
the post was edited, reposted, or repeatedly published;
the complainant is a public officer or public figure;
confidential, intimate, or unlawfully obtained material is involved;
threats, doxxing, stalking, sexual harassment, identity theft, or unauthorized account access accompany the publication;
the complainant wants both criminal and separate civil relief; or
the accused faces arrest, arraignment, or a deadline for review.

The Public Attorney’s Office may assist qualified indigent persons. Law-enforcement cybercrime units can investigate technical evidence, but they do not replace independent legal advice.

Frequently asked questions

Can I file over a defamatory Facebook post or private group message?

Potentially. A Facebook post, comment, group publication, email, or message can satisfy the technological element. Publication still requires communication to someone other than the person allegedly defamed, and all other elements must be proved.

Is a private message sent only to me cyber libel?

Ordinarily, a message seen only by the sender and the person allegedly defamed lacks publication to a third person. Forwarding, group recipients, or evidence that another person saw it may change the analysis.

Does deleting the post end the case?

No. Deletion may limit further circulation but does not erase an already completed publication or preserved evidence. A prompt correction or apology may affect the surrounding facts, settlement discussions, damages, or sentencing, but it is not an automatic defense.

Is a demand letter required before filing?

Cyber libel law does not generally make a prior demand letter an element of the crime. A carefully drafted request for correction, preservation, or removal may be useful, but it can also affect evidence and strategy.

Can the complainant simply withdraw the case?

An affidavit of desistance does not automatically extinguish a public offense. Once filed, the prosecution is brought in the name of the People of the Philippines, and the prosecutor or court determines the legal effect of a withdrawal.

Can I be charged merely for sharing someone else’s post?

A bare share is not automatically punishable as aiding or abetting cyber libel after Disini. Liability may still be examined if the person added a new defamatory statement, materially republished content, or otherwise became an original author of a distinct imputation.

Does the one-year period run from posting?

Not necessarily. Under the Supreme Court’s current ruling, it runs from discovery by the offended party, authorities, or their agents. The posting date, discovery date, later republication, and interrupting filing must be established with evidence.

Is cyber libel bailable?

Yes. The constitutional right to bail before conviction applies, subject to the governing rules and the court’s determination of the amount and conditions. Do not assume that a prosecutor’s subpoena is already a warrant of arrest.

Where are the principal official rules?

The main authorities are the Cybercrime Prevention Act, the relevant Revised Penal Code provisions, the Rule on Cybercrime Warrants, the 2024 DOJ-NPS preliminary-investigation rules, Disini, and the Supreme Court’s 2026 decision in Causing.

This article provides general Philippine legal information, not advice for any specific case. Cyber libel outcomes depend heavily on the exact words, publication history, evidence, parties, venue, and procedural record. Official sources were checked as of August 31, 2026.