Quick answer

Cyber libel is libel committed through a computer system—such as a social-media post, online article, email, group chat, video caption, or similar digital publication. A complainant ordinarily starts by filing a sworn complaint and supporting evidence with the proper prosecutor’s office. The respondent may submit a counter-affidavit and evidence showing that one or more legal elements are missing or that a recognized defense applies.

Not every offensive, unfair, or false online statement is cyber libel. The prosecution must establish a defamatory allegation, identification of the person allegedly defamed, publication to someone other than that person, malice, and use of information and communications technology. Context, wording, audience, authorship, privilege, truth, motive, and the status of the person discussed can change the result.

Act quickly. In Causing v. People, the Supreme Court held that cyber libel prescribes in one year from discovery of the offense by the offended party, the authorities, or their agents. When discovery occurred may require evidence; an online post is not automatically presumed discovered on its publication date. Filing the complaint for preliminary investigation interrupts prescription. Do not wait until the last days of the period. See the Supreme Court’s 2026 ruling in Causing v. People, G.R. No. 258524.

What counts as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the publication is made through a computer system or a similar technological means.

A viable criminal case generally requires proof of all these matters:

A defamatory allegation. The communication attributes a crime, vice, defect, dishonorable conduct, or another circumstance tending to cause dishonor, discredit, or contempt.
An identifiable person. The complainant must be named or sufficiently identifiable from the statement and its surrounding circumstances. It is not always necessary to state the person’s full name, but readers must reasonably be able to determine who was meant.
Publication. At least one person other than the complainant must receive or access the statement. A purely private message sent only to the person criticized generally lacks this element, although forwarding it to others may constitute publication.
Malice. Article 354 of the Revised Penal Code generally presumes malice from a defamatory imputation, even if the allegation is true, unless the communication is privileged. That presumption can be overcome by evidence and does not eliminate constitutional protections for speech on public issues.
Use of a computer system or ICT. The allegedly libelous material must have been published online or through another covered computer-based medium.

The words are assessed as a whole and in context. Courts consider their ordinary meaning, the surrounding conversation, the intended and actual audience, accompanying images or links, and whether the statement asserts a fact or instead expresses protected comment, rhetoric, satire, or opinion. Merely labeling an accusation “opinion” does not protect a statement that reasonably implies a provably false fact.

Important limits and exceptions

The law ordinarily targets the author of the unlawful online publication

In Disini v. Secretary of Justice, the Supreme Court sustained cyber libel but limited its application to the person who authors the libelous statement. It struck down the application of the Cybercrime Prevention Act’s provisions on aiding, abetting, and attempt insofar as they were used against cyber libel.

A person should therefore not be charged merely for passively receiving a post or using a platform reaction. A person who writes a new defamatory caption, comment, or accusation may, however, be treated as the author of that separate publication. Liability for reposting or editing depends on what the person actually added or republished and on the available proof.

Pre-Act publications require special analysis

The Cybercrime Prevention Act cannot be applied retroactively to an online publication made before the law took effect. A later material update or republication may create a different issue, but merely keeping an old article accessible online is not automatically a new publication. The publication history and the nature and date of any changes must be examined.

Privileged communications may defeat the presumption of malice

Article 354 recognizes qualifiedly privileged communications, including:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts of public officers.

Qualified privilege is not absolute. It may be lost through proof of actual malice, unnecessary circulation, inflammatory additions, or publication beyond those who have a legitimate interest.

Statements made in proceedings enjoying absolute privilege—such as relevant statements in judicial proceedings or legislative speech protected by the Constitution—are governed by distinct rules. The precise setting and relevance of the statement matter.

Public officials and public figures receive less protection from criticism

Speech about official conduct and matters of public concern receives strong constitutional protection. Where the complainant is a public official or public figure and the statement concerns that public role, liability generally requires proof of actual malice: knowledge that the statement was false or reckless disregard of whether it was false. Harsh language, error, or failure to investigate does not necessarily establish actual malice by itself.

This rule does not grant a license to fabricate accusations. Records showing that the publisher knew contrary facts, deliberately avoided obvious verification, relied on a source known to be unreliable, or materially distorted documents may be relevant.

Truth is not always enough by itself

Under Article 361 of the Revised Penal Code, proof of truth may be admitted under the conditions stated there. For truth to support an acquittal, the publication must also have been made with good motives and for justifiable ends. When the allegation concerns an offense allegedly committed by a private person, the statutory restrictions on proving truth must be considered. Statements about a government employee’s official duties are treated differently.

Group criticism may not identify an individual

A generalized criticism of a large or indefinite group will not necessarily identify each member. A case becomes more plausible when the group is so small, or the surrounding facts so specific, that readers would reasonably understand the accusation to refer to the complainant.

How to file a cyber-libel complaint

1. Preserve the original evidence immediately

Before demanding deletion or reporting the content to the platform, preserve:

full-page screenshots showing the complete post, account name, date, time, URL, captions, comments, and surrounding thread;
screen recordings showing how the content was reached;
the exact URL and account or profile identifier;
downloaded copies of images, videos, emails, chat exports, and attachments;
visible engagement data and the identities of people who actually saw the material;
notices, messages, admissions, or replies connecting the account and publication to the suspected author;
platform notifications and available metadata;
proof of when and how the complainant first discovered the publication;
records showing falsity, reputational harm, lost work, cancelled transactions, medical treatment, or other claimed damage; and
names and contact details of witnesses.

Keep untouched originals. Do not crop, annotate, rename, repeatedly convert, or edit the only copy. Record how each item was obtained and who handled it. Screenshots are useful but can be challenged; corroborating testimony, URLs, platform data, device records, and properly authenticated electronic evidence make the case stronger.

2. Identify the correct respondent

An account name alone does not conclusively establish authorship. Gather lawful evidence connecting the post to a person, such as prior admissions, consistent contact details, recognizable activity, witness testimony, or platform records obtained through proper legal process.

Do not hack an account, impersonate anyone, install spyware, or publish private identifying information in an effort to discover the author. Evidence obtained unlawfully may be excluded and may expose the complainant to a separate case.

If the author is unknown, promptly consult the NBI Cybercrime Division, the PNP Anti-Cybercrime Group, or counsel. Subscriber, traffic, and content data are subject to preservation periods, privacy protections, and warrant procedures. Private complainants cannot compel a platform or telecommunications provider to disclose protected data simply by sending a demand.

3. Prepare a detailed complaint-affidavit

The complaint-affidavit should state facts within the complainant’s personal knowledge, including:

the exact allegedly defamatory words or material;
where, when, and how they were published and discovered;
why the statement referred to the complainant;
who received or saw it;
why it was false or otherwise unlawful;
the facts supporting malice;
the basis for identifying the respondent as the author; and
the harm caused.

Attach clearly marked exhibits and affidavits from witnesses. If a screenshot contains a long conversation, include enough context to prevent a misleading presentation. Statements under oath must be truthful; exaggerating audience size, authorship, discovery dates, or losses can damage the case and create separate legal risk.

4. File with the proper prosecution office

A criminal complaint is ordinarily filed for preliminary investigation with the prosecutor’s office having proper territorial authority. Cybercrime cases ultimately fall within Regional Trial Court jurisdiction, including designated cybercrime courts, but the proper filing location depends on the place of commission, the location of relevant computer systems, the occurrence of legally recognized damage, and applicable procedural rules.

Venue is not simply wherever the complainant prefers. Online publication, residence, server location, discovery, and injury do not always have the same legal effect. Where the parties or digital systems are in different cities or countries, obtain advice before filing.

The NBI and PNP are the principal law-enforcement authorities under Section 10 of the Cybercrime Prevention Act. A complainant may seek their investigative assistance, especially where the author is unknown or provider-held data may be needed. That investigation does not replace the prosecutor’s determination of probable cause.

5. Participate in preliminary investigation

If the complaint is sufficient in form and substance, the prosecutor may require the respondent to answer. The respondent generally receives the complaint and supporting evidence and is given an opportunity to submit a sworn counter-affidavit and exhibits under the applicable preliminary-investigation rules and the prosecutor’s directive.

The prosecutor does not decide guilt beyond reasonable doubt at this stage. The question is whether probable cause exists to believe that a crime was committed and that the respondent probably committed it. If probable cause is found, an information may be filed in the proper RTC. If the complaint is dismissed, the available review remedy and deadline depend on the issuing office and the governing DOJ rules; the resolution and notice of receipt should be reviewed immediately.

How to defend against a complaint

Do not ignore a subpoena or court process

Note the actual date and manner of receipt. Give counsel the complete envelope, email, attachments, and subpoena. The response deadline is governed by the applicable rules and the prosecutor’s directive; extensions are not automatic.

A person who has been arrested or who learns that an information or warrant may already exist should obtain criminal counsel urgently. Do not evade service or attempt to negotiate surrender informally without confirming the case and court.

Preserve the defense evidence

Keep:

the complete, unedited thread and drafts;
source documents and interview notes;
messages with editors, sources, administrators, or moderators;
records showing when the material was first posted and later changed;
account-security logs and evidence of unauthorized access;
research showing why the statement was believed true;
the full official record on which a report was based;
proof of limited or intended recipients;
evidence that the complainant was not identifiable; and
documents supporting privilege, good faith, good motive, or a justifiable purpose.

Do not delete the account, alter timestamps, manufacture supporting material, contact witnesses with a suggested story, or pressure the complainant to withdraw. Deletion may destroy helpful context and can be portrayed as consciousness of wrongdoing. A correction or apology may be appropriate, but it should be considered with counsel because it can affect admissions, settlement, damages, and public exposure.

Test every required element

A counter-affidavit should address the actual charge rather than merely assert freedom of speech. Depending on the evidence, the defense may include:

the respondent did not author or publish the material;
no third person received it;
the complainant was not identified or identifiable;
the words were not defamatory in their full context;
the material was protected opinion, satire, or fair comment rather than a false assertion of fact;
the statement was true and published with good motives and for justifiable ends;
the communication was absolutely or qualifiedly privileged;
actual malice cannot be shown where constitutionally required;
the electronic evidence is incomplete, altered, unauthenticated, or improperly attributed;
the prosecution was filed in the wrong venue;
the publication occurred before the Cybercrime Prevention Act became effective and there was no legally material later republication;
the offense had already prescribed; or
the facts alleged do not establish cyber libel even if assumed true.

Alternative defenses must remain factually consistent. A denial of authorship, for example, should not be casually combined with admissions that the respondent intentionally published the statement.

Prescription and other time-sensitive issues

The controlling rule as of the source-check date is that cyber libel prescribes in one year from discovery, not 12 or 15 years. The Supreme Court’s 2026 Causing resolution reaffirmed that cyber libel remains libel under Articles 353 and 355 of the Revised Penal Code; use of ICT increases the penalty but does not replace the specific one-year prescriptive period for libel.

Important qualifications include:

Discovery is a factual issue. The relevant date may be disputed and must be supported by evidence.
There is no automatic presumption that an online post was discovered on the day it appeared.
Filing a complaint with the prosecutor for preliminary investigation interrupts prescription.
A later edit, repost, or new statement must be analyzed on its own facts; the continued online availability of an old publication should not automatically be treated as perpetual republication.
A separate civil claim may have a different prescriptive period and accrual rule.

Because a mistaken date can end an otherwise valid criminal claim, both sides should construct a documented timeline at once.

Penalties and civil exposure

Ordinary written libel under Article 355 is punishable by imprisonment, a fine, or both. Section 6 of the Cybercrime Prevention Act raises the applicable imprisonment by one degree when the offense is committed through ICT. The resulting sentencing range, application of the Indeterminate Sentence Law, availability of a fine instead of imprisonment, and consequences for bail or probation depend on the charge, judgment, and circumstances.

A cyber-libel prosecution may also carry civil liability. The offended party may seek damages within the criminal case, unless the civil action is waived, reserved, or previously filed separately under the applicable rules. A separate action may also be considered under Article 33 and other provisions of the Civil Code. Actual, moral, nominal, or exemplary damages are not automatic; the claimant must establish the legal basis and supporting facts for the relief sought.

A dismissal at preliminary investigation is not always a ruling that the statement was true, and an acquittal does not necessarily resolve every possible civil claim. Conversely, reputational injury alone does not excuse the complainant from proving the required elements and damages.

Common mistakes to avoid

Filing based only on a cropped screenshot.
Treating insults, criticism, or negative reviews as automatically libelous.
Assuming account ownership conclusively proves authorship.
Omitting the exact words and the full context from the affidavit.
Failing to identify a third person who saw or received the statement.
Waiting because the post remains online.
Using an incorrect venue without examining where the relevant acts and damage occurred.
Claiming that truth is always an absolute defense.
Assuming an apology or deletion automatically ends criminal liability.
Publicly reposting the accusation while announcing a planned case.
Responding to a complaint by attacking or threatening the complainant online.
Deleting devices, messages, drafts, or account logs after receiving notice of a dispute.
Paying a supposed “settlement” without verifying the complainant, authority, written terms, and effect on the pending case.
Confusing platform moderation with a legal finding. A platform may remove lawful speech or retain unlawful content under its own rules.

When legal help is urgent

Speak with a Philippine lawyer immediately when:

the one-year period may be close to expiring;
a subpoena, prosecutor’s resolution, information, summons, or warrant has been received;
the respondent is unknown and provider data may need preservation;
the publication or parties are in different countries or judicial regions;
the material involves a journalist, public official, public figure, whistleblower, election, or matter of public concern;
an account may have been hacked or impersonated;
the post includes threats, sexual material, doxxing, identity theft, or violence that may involve other offenses;
a child is involved;
law enforcement seeks access to a device, account, or data;
settlement, retraction, or public correction is being considered; or
the same facts have produced both criminal and civil proceedings.

A person who cannot afford private counsel may inquire with the Public Attorney’s Office, subject to its eligibility and merit requirements. The Integrated Bar of the Philippines and law-school legal-aid programs may also have assistance or referral services.

Frequently asked questions

Is a false Facebook post automatically cyber libel?

No. Falsity is important, but the prosecution must still prove defamatory meaning, identification, publication, malice, authorship, and use of ICT. Privilege and constitutional protections may apply.

Can a private message be cyber libel?

It can satisfy publication only if someone other than the person allegedly defamed received it. A message sent solely to that person ordinarily lacks publication. Group chats, copied emails, and forwarded private messages may be different.

Can someone be charged for sharing or liking a post?

A passive reaction or mere receipt should not be treated as authorship under Disini. A person who creates a new defamatory caption, comment, or accusation may face liability for that separate content. The exact act and wording matter.

Does deleting the post prevent a case?

No. Deletion does not erase a completed publication or extend an expired prescriptive period. It may limit continuing harm, but preserved copies, testimony, and provider data may remain available.

Does an apology automatically dismiss the complaint?

No. An apology or correction may affect settlement, perceived malice, or damages, but it does not automatically extinguish criminal liability. Any settlement should be documented with legal advice, and the public prosecutor retains authority over the criminal case.

Can the complainant demand the poster’s identity from the platform?

A complainant may report the account or request voluntary preservation, but protected subscriber, traffic, or content data generally requires lawful process. The Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC governs warrants for disclosure, interception, search, seizure, and examination of computer data.

Must the complainant first send a demand letter?

No general rule makes a demand letter an element of cyber libel. A carefully drafted notice may secure preservation, correction, or settlement, but it can also prompt deletion or further publication. Evidence should be preserved first.

Where is the case tried?

Violations of the Cybercrime Prevention Act fall within RTC jurisdiction, including designated cybercrime courts. The proper venue depends on statutory and procedural connections to the offense, computer system, parties, and damage. It should be assessed from the actual evidence, not selected solely for convenience.

How long does the complainant have to file?

Under the Supreme Court’s current ruling, one year from discovery by the offended party, the authorities, or their agents. Because discovery and interruption of prescription can be contested, obtain advice and file well before the apparent deadline.

Official legal sources

This article provides general legal information, not advice for a particular case and not an attorney-client relationship. Cyber-libel outcomes are highly dependent on the exact words, context, publication history, evidence, parties, venue, and procedural dates. Sources and current law were checked on September 19, 2026.