Quick answer

To file a cyber libel case in the Philippines, the complainant must submit a sworn complaint and supporting evidence to the proper prosecutor’s office before the crime prescribes. Cyber libel generally prescribes one year from discovery of the allegedly defamatory publication by the offended party, the authorities, or their agents—not necessarily from the original posting date. Filing the complaint or Information interrupts prescription, subject to the rules in Article 91 of the Revised Penal Code.

To defend a case, do not ignore the prosecutor’s subpoena. A respondent ordinarily has 10 days from receipt of the subpoena, complaint, affidavits, and supporting documents to submit a sworn counter-affidavit and defense evidence. The prosecutor may otherwise resolve the complaint using only the complainant’s evidence.

A case does not succeed merely because an online statement was insulting, harsh, embarrassing, or false. The prosecution must establish every element of libel, including a defamatory imputation, publication to a third person, identification of the complainant, and malice under the applicable standard. Defenses may include lack of publication or identification, truth coupled with good motives and justifiable ends where required, privileged communication, fair comment, lack of actual malice, prescription, mistaken attribution, or failure to prove who authored or published the material.

Because venue, prescription, privilege, and malice often depend on specific evidence, both sides should consult a Philippine lawyer promptly.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, covers libel under Article 355 of the Revised Penal Code when committed through a computer system or similar technology.

Cyber libel may involve material published through websites, social-media accounts, blogs, online publications, email, messaging services, or other computer systems. The platform is not decisive. What matters is whether the prosecution can establish the legal elements and connect the accused to the publication.

Under Articles 353 to 355 of the Revised Penal Code, the prosecution generally must prove:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person or juridical entity to contempt.
Publication. The statement was communicated to at least one person other than the person defamed.
Identification. The complainant was named or was otherwise identifiable to people who knew the surrounding circumstances.
Malice. The statement was made with the legally required form of malice. The applicable burden can change when the communication is privileged or concerns a public officer, public figure, or matter of public interest.
Use of a computer system. The allegedly libelous material was published online or through information and communications technology.

Each element must be supported by admissible evidence. A screenshot alone does not automatically prove who controlled an account, who authored the statement, whether anyone else saw it, or whether the image accurately represents the original publication.

Not every offensive online statement is cyber libel

The law protects reputation, but it must also be applied consistently with constitutional protections for speech, the press, criticism, and discussion of public affairs.

A statement may fall outside cyber libel when, for example:

it is not reasonably defamatory when read in its complete context;
it is rhetorical exaggeration, satire, or an opinion that does not imply provably false facts;
the complainant cannot be identified;
nobody other than the complainant received or saw it;
the accused did not author, post, or cause its publication;
it is a privileged communication;
it is a fair comment on a matter of public interest, supported by sufficient factual basis and made without actual malice;
the prosecution cannot prove the applicable form of malice; or
the criminal action has prescribed.

Simply adding “allegedly,” “in my opinion,” or a disclaimer does not automatically prevent liability. Courts examine the whole publication, its factual implications, audience, context, and surrounding circumstances.

Who may be held liable?

The primary focus is ordinarily the person who authored or directly published the defamatory online material. Liability cannot rest on assumption merely because a name, photograph, device, or account appears connected to a post. Authorship and participation must be proved.

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author but invalidated Section 5 of Republic Act No. 10175 insofar as it punished merely aiding or abetting cyber libel. The decision addressed the danger of automatically treating ordinary online reactions as criminal participation.

Accordingly, a person should not be charged solely for passively receiving material or merely reacting to it. A person who writes a new defamatory caption, adds a separate accusation, republishes material as their own, or otherwise directly participates in a fresh publication presents a different factual question.

Editors, business owners, page administrators, employers, and account holders are not automatically criminally liable merely because of their position. The prosecution must establish the legal and factual basis for holding each respondent responsible.

Reposting, sharing, and updating material

A repost or share should not automatically be treated as criminal cyber libel without examining what the person actually did. Relevant questions include:

Did the person add a new defamatory assertion?
Did the person adopt the accusation as their own?
Was the content sent to a new audience?
Was the accused the original author or an active publisher?
Can the prosecution prove intentional participation rather than automated or unauthorized activity?

Editing or updating an older online article may create a disputed issue of republication. A purely technical change is not necessarily equivalent to deliberately publishing the defamatory matter anew. Preserve the article’s complete revision history, publication timestamps, content-management logs, and evidence showing exactly what changed.

The one-year prescriptive period

The Supreme Court’s controlling ruling in Causing v. People holds that cyber libel prescribes in one year from discovery of the allegedly defamatory material by the offended party, the authorities, or their agents.

Important qualifications apply:

Publication and discovery may occur on the same date, but they are not legally identical in every case.
A complainant relying on a later discovery date should preserve proof showing when and how the material was first discovered.
An accused invoking prescription generally needs evidence if prescription is not apparent from the face of the Information.
Under Article 91, filing the complaint or Information interrupts prescription.
The period may begin running again if the proceedings terminate without conviction or acquittal or are unjustifiably stopped for a reason not attributable to the accused.
Article 91 also states that prescription does not run while the offender is absent from the Philippine Archipelago.

Do not wait until the final days. Disputes may arise over the discovery date, the filing date, the proper office, or whether a submission was legally sufficient to interrupt prescription.

A separate civil action for injury to rights or defamation may also be subject to a short prescriptive period, commonly one year depending on the cause of action. Obtain advice before assuming that a criminal deadline and a civil deadline are interchangeable.

How to file a cyber libel complaint

1. Preserve the publication before contacting the poster

Save the evidence before requesting deletion or issuing a public response. Preserve:

full-page screenshots showing the account, post, date, time, URL, and surrounding context;
the direct link and profile or account link;
the complete thread, including preceding and following posts;
images, video, audio, captions, hashtags, and attached files;
comments or messages showing that third persons saw or understood the material;
screen recordings showing how the post was accessed;
downloaded copies in their original formats;
notifications, emails, and platform-generated records;
names and contact details of witnesses who saw the original material;
evidence of the date and manner of discovery; and
evidence connecting the account or publication to the proposed respondent.

Keep the original device and unedited files. Do not crop away timestamps, URLs, account details, or contextual statements. Record the time zone where timestamps may matter.

2. Identify the exact defamatory assertion

Quote the precise words complained of and explain their ordinary meaning in context. If the statement uses a nickname, photograph, coded reference, or indirect description, identify witnesses who can explain why readers understood it to refer to the complainant.

Avoid treating an entire lengthy article or thread as defamatory without identifying the particular imputations at issue.

3. Gather proof of falsity, malice, and injury

Depending on the case, relevant evidence may include:

official records contradicting the accusation;
contracts, receipts, correspondence, or employment records;
prior messages showing knowledge of the true facts;
proof that the respondent was given reliable corrections but persisted;
threats or demands connected to publication;
evidence of deliberate fabrication or manipulation;
witness affidavits;
lost-business or employment records; and
medical or other records relevant to claimed damages.

Damage evidence may support a civil claim, but reputational harm alone does not replace proof of the criminal elements.

4. Determine the proper venue

Under Section 2.1 of the Rule on Cybercrime Warrants, criminal actions involving Section 4 offenses of Republic Act No. 10175 are filed before the designated cybercrime court of the province or city:

where the offense or any of its elements was committed;
where any part of the computer system used is situated; or
where any part of the damage to a natural or juridical person took place.

The court where the action is first properly filed acquires jurisdiction to the exclusion of the others. Online accessibility everywhere does not make every location a proper venue. The complaint and eventual Information should contain concrete venue facts.

A criminal complaint for preliminary investigation is generally lodged with the prosecutor’s office serving the proper locality. The NBI and PNP cybercrime units may investigate and preserve or obtain digital evidence, but reporting an incident to an investigative agency should not be assumed, without legal confirmation, to be the same as properly instituting the prosecutor’s case for prescription purposes.

5. Prepare the sworn complaint

The complaint should clearly state:

the complainant’s and respondent’s identities and addresses, if known;
the exact defamatory statement;
when and where it was published and discovered;
how the complainant was identified;
who received or saw it;
why it was defamatory;
facts supporting the applicable form of malice;
why the chosen venue is proper; and
the role of each respondent.

Attach properly marked affidavits and supporting documents. The complaint and witness affidavits must be sworn in the manner required by the applicable procedural rules. Follow the receiving prosecutor’s current documentary, copy, identification, and filing requirements. The DOJ publishes a general preliminary-investigation filing guide, but local procedures should be confirmed before filing.

6. Participate in the preliminary investigation

If the prosecutor finds sufficient basis to proceed, the respondent will be directed to answer. The prosecutor may permit responsive submissions or set a clarificatory hearing. A preliminary investigation is generally document-based; it is not yet the full criminal trial.

If probable cause is found and approved, an Information is filed in the proper Regional Trial Court designated to handle cybercrime cases. The judge independently determines the judicial probable cause required for the next steps, including whether a warrant of arrest should issue.

How to defend a cyber libel complaint

1. Treat the subpoena as urgent

Record the date and method of receipt. Under Section 3 of Rule 112 of the Rules of Criminal Procedure, the counter-affidavit is ordinarily due within 10 days from receipt of the subpoena and the complaint’s supporting materials.

Do not substitute an ordinary motion to dismiss for the required counter-affidavit. Rule 112 expressly states that a respondent may not file a motion to dismiss in lieu of a counter-affidavit. If additional time is genuinely necessary, counsel should promptly seek appropriate relief from the prosecutor rather than assume that an extension is automatic.

2. Obtain the complete complaint record

Confirm that you received the complaint, affidavits, and supporting documents. The respondent has the right to examine evidence submitted by the complainant that was not furnished and to copy it at the respondent’s expense, subject to the applicable rules.

Do not answer only selected screenshots if the complaint relies on a longer thread, video, article, or exchange. Context may be central to meaning, identification, privilege, and malice.

3. Preserve defense evidence

Keep:

the original device and account data;
drafts and complete versions of the post;
account-security and login notices;
access and administrator records;
source materials used in preparing the statement;
interview notes and recordings lawfully obtained;
communications with editors, researchers, or sources;
corrections, retractions, or clarifications;
evidence of unauthorized access, impersonation, or account compromise;
proof of publication and discovery dates; and
facts supporting privilege, public interest, good faith, or reasonable verification.

Do not delete the post, account, messages, or device data after receiving notice of a complaint without first preserving them and obtaining advice. Deletion can destroy helpful context and may create an evidentiary dispute. Preservation does not mean the material must remain publicly accessible indefinitely; counsel can advise on a defensible approach.

4. Address every element separately

A useful defense analysis asks:

Defamatory meaning: What did the words mean in their full context?
Identification: Could readers reasonably identify the complainant?
Publication: Is there proof a third person received or saw the statement?
Authorship: Is there reliable proof the respondent wrote or published it?
Computer system: Was the charged publication actually made through ICT?
Malice: What standard applies, and what evidence meets or defeats it?
Privilege: Was the statement part of a protected communication or fair and true official report?
Truth and motive: What records substantiate the factual assertion, and was its publication justified?
Venue: What specific fact connects the alleged offense, computer system, or damage to the chosen locality?
Prescription: When was the material discovered, when was the complaint filed, and what proves those dates?

A counter-affidavit should present affirmative evidence, not merely denials or legal conclusions.

5. Do not contact or pressure witnesses

Avoid threats, inducements, coordinated deletion, fabricated screenshots, or attempts to influence testimony. Communicate through counsel where direct contact could be misconstrued. Preserve relevant material even if it is unfavorable.

Malice, public officials, and matters of public interest

Article 354 generally presumes malice from a defamatory imputation, even if true, unless good intention and justifiable motive are shown. The article also recognizes qualifiedly privileged communications, including:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without comments or remarks, of qualifying nonconfidential official proceedings or official acts.

Privilege is not a license to publish unrelated accusations or knowingly false material. The statement must remain connected to the duty, occasion, proceeding, or public interest that supports the privilege.

Different constitutional standards apply when criticism concerns public officers, public figures, or public affairs. In Daquer v. People, the Supreme Court explained that when a public figure—particularly a public officer—is the complainant in criminal libel, the prosecution must prove actual malice: knowledge that the statement was false or reckless disregard of whether it was false.

Reckless disregard is more than ordinary error or failure to investigate perfectly. But publishing serious accusations while consciously avoiding obvious contrary facts may support an actual-malice finding. The outcome depends on the evidence available to the speaker and their state of mind at the time of publication.

Truth is important but not always enough by itself

Article 361 of the Revised Penal Code governs proof of truth in libel cases. Where the imputation concerns a crime allegedly committed by the complainant, truth may be admitted as a defense. In other situations, the provision limits when truth may be proved. An acquittal generally requires not only proof that the matter charged as libelous is true, but also that it was published with good motives and for justifiable ends.

When the statement concerns a public officer’s conduct in office, the law gives particular room for evidence concerning the truth of that conduct. Even then, accuracy, relevance, motive, privilege, and the applicable constitutional standard should all be addressed.

The safest practical rule is to retain the records supporting every serious factual accusation before publishing it.

Electronic evidence must be authenticated

Digital material is not automatically admissible merely because it is printed or shown on a phone. Under the Rules on Electronic Evidence, an electronic document must satisfy the ordinary rules of admissibility and be authenticated.

Authentication may involve testimony or circumstances showing that the exhibit is what it claims to be. Relevant indicators can include:

a witness who personally saw the original post;
distinctive account details or communications;
metadata or platform records;
device or access records;
admissions by the account holder;
linked conduct demonstrating control of the account; and
a reliable explanation of how the evidence was captured and preserved.

A readable printout may qualify as the equivalent of an original if it is shown to reflect the electronic data accurately. Maintain unedited originals and a clear record of collection, transfer, and storage.

Law-enforcement access to private computer data may require the appropriate cybercrime warrant or other lawful authority. A private party should not hack an account, secretly intercept communications, or obtain evidence through unlawful access.

Possible penalties and civil liability

Cyber libel carries a penalty one degree higher than traditional written libel under Section 6 of Republic Act No. 10175. The imprisonment range is generally prisión correccional in its maximum period to prisión mayor in its minimum period, or four years, two months and one day to eight years, subject to the rules on the proper imposable penalty.

Following People v. Soliman and the amended Article 355 under Republic Act No. 10951, the statutory fine for consummated online libel ranges from ₱40,000 to ₱1,500,000. The actual sentence depends on the charge, evidence, modifying circumstances, applicable sentencing rules, and judicial discretion.

Courts have recognized a policy favoring fines instead of imprisonment in appropriate libel cases, but this is not an automatic right to a fine-only sentence.

A criminal case may also carry civil liability. Under the Rules of Criminal Procedure, the civil action to recover civil liability arising from the offense is generally deemed instituted with the criminal action unless it was waived, reserved for separate filing, or filed earlier. Independent civil remedies may also be available under the Civil Code, subject to their own elements, defenses, and deadlines.

Common mistakes by complainants

Waiting too long and losing the case to prescription.
Saving only cropped screenshots without URLs, dates, or context.
Failing to document the date of discovery.
Naming every page administrator, employee, or sharer without proof of participation.
Filing in a convenient locality without specific facts establishing venue.
Treating criticism, opinion, or satire as automatically defamatory.
Failing to identify the exact words complained of.
Assuming falsity alone proves criminal liability.
Sending threats or making payment demands that create separate legal problems.
Believing that an NBI, PNP, or platform report necessarily completes the prosecutor filing.

Common mistakes by respondents

Ignoring the subpoena or missing the 10-day counter-affidavit period.
Filing only a motion to dismiss instead of a counter-affidavit.
Deleting devices, messages, posts, or account history.
Relying on “freedom of speech” without addressing the statutory elements.
Assuming “opinion” is a complete defense when the statement implies undisclosed false facts.
Producing altered or incomplete screenshots.
Contacting witnesses aggressively.
Admitting account control without examining possible impersonation or unauthorized access.
Assuming the posting date alone proves prescription without evidence of discovery.
Repeating the accusation publicly while the case is pending.

When legal help is urgent

Seek counsel immediately if:

the one-year prescriptive period may expire soon;
you received a prosecutor’s subpoena;
police or NBI agents request access to a device or account;
a cybercrime warrant, search warrant, or warrant of arrest has been issued;
the account is anonymous, compromised, or hosted abroad;
the publication concerns a public officer, journalist, election, court proceeding, or confidential record;
several people or business entities may be charged;
the material contains personal data, intimate images, threats, or accusations involving children;
the complainant demands money in exchange for silence or withdrawal;
the prosecutor has issued a resolution; or
an Information has already been filed in court.

Deadlines for motions, petitions for review, arraignment-related remedies, and appeals can be short and depend on the particular order and governing rules.

Frequently asked questions

Can I file a case if the post has been deleted?

Yes, potentially. Deletion does not erase a completed publication, but the complainant must still prove the post’s contents, authorship, publication, identification, malice, and other elements through admissible evidence.

Is a private group chat covered?

Possibly. Publication may exist when a defamatory message is communicated to even one person other than the person defamed. Privacy settings affect the facts and expected audience but do not automatically prevent liability.

Can a company be the victim of cyber libel?

Yes. Article 353 protects both natural and juridical persons from imputations tending to cause dishonor, discredit, or contempt. The company must nevertheless be identifiable and prove the other required elements.

Is a demand letter required before filing?

No general rule makes a prior demand or takedown request an element of cyber libel. A carefully prepared request may sometimes resolve the dispute or preserve evidence of notice, but it can also trigger deletion or escalation. Obtain advice before sending one.

Does a correction or apology end the criminal case?

Not automatically. It may affect the parties’ decisions, evidence of good faith, or the assessment of damages, but it does not by itself erase an offense already completed. Once a criminal case is under prosecution, dismissal is not entirely controlled by the private complainant.

Can the complainant withdraw the case?

The complainant may execute an affidavit of desistance, but it does not automatically require dismissal. Criminal actions are prosecuted in the name of the People of the Philippines, and the prosecutor and court retain their respective authority.

Is an anonymous account immune?

No. Investigators may seek lawful preservation, disclosure, or examination of computer data through the procedures permitted by Republic Act No. 10175 and the Rule on Cybercrime Warrants. Identification is not guaranteed, however, and providers may hold limited data or be outside Philippine jurisdiction.

Can one publication produce both ordinary libel and cyber libel charges?

Section 7 of Republic Act No. 10175 cannot be used to impose double punishment for the same defamatory publication under both the Revised Penal Code and the Cybercrime Prevention Act. In Disini, the Supreme Court invalidated Section 7 insofar as it would permit prosecution under both laws for the same online libelous act. Distinct publications or distinct conduct require separate analysis.

Does staying abroad stop prescription?

Article 91 states that prescription does not run while the offender is absent from the Philippine Archipelago. How that provision applies to the particular dates and circumstances should be assessed by counsel.

Official legal sources

Disclaimer

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Cyber libel disputes are highly fact-sensitive, and procedures may vary with the forum and case status. Consult a Philippine lawyer about the actual publication, evidence, dates, and documents. Sources and current law were checked as of August 31, 2026.