Quick answer
To file a cyber libel case in the Philippines, preserve the online material and proof of authorship, determine the proper venue, and file a sworn complaint with the appropriate Office of the City or Provincial Prosecutor. Do this promptly: the Supreme Court has definitively ruled that cyber libel prescribes in one year from discovery by the offended party, the authorities, or their agents. Filing and reckoning dates can become factual disputes, so do not wait until the last day.
To defend a case, do not ignore the prosecutor’s subpoena. Obtain the complete complaint, preserve your own records, and submit a detailed counter-affidavit addressing authorship, publication, identifiability, defamatory meaning, malice, privilege, venue, prescription, and electronic-evidence defects. A respondent ordinarily receives at least 10 days from receipt of the subpoena before the preliminary-investigation hearing.
Cyber libel remains a crime under Section 4(c)(4) of the Cybercrime Prevention Act of 2012. It carries possible imprisonment, a fine, or both, plus possible civil liability. Whether a particular post is criminally libelous depends on its complete wording, context, audience, subject, authorship, and supporting evidence—not merely on whether it was offensive or embarrassing.
What the prosecution must prove
Cyber libel applies when libel under Articles 353 and 355 of the Revised Penal Code is committed through a computer system or information and communications technology. The prosecution must prove beyond reasonable doubt:
A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, status, or circumstance tending to dishonor, discredit, or expose another to contempt.
Publication. At least one person other than the person defamed received, saw, or understood the statement. A message sent only to the subject ordinarily lacks this element, while a group chat, public post, email copied to others, video, blog, or online article may satisfy it.
Identifiability. The person defamed must be identifiable by name, photograph, position, description, surrounding facts, or other circumstances. Naming the person is not always necessary, but at least one third person must have understood who was being referred to.
Malice. Under the general rule, a defamatory imputation is presumed malicious unless it falls within a recognized privilege or good intention and justifiable motive are shown. Different constitutional standards apply when the complainant is a public officer or public figure.
Use of a computer system or ICT. The publication must have been made online or through a comparable computer-based means.
Courts read the entire statement in its ordinary meaning and context. Merely calling something an “opinion,” framing it as a question, using initials, or beginning with “I think” does not automatically protect an accusation that readers would reasonably understand as an assertion of fact. Conversely, insulting or harsh words are not automatically defamatory in every context.
Special protection for speech about public officers and public figures
When a criminal libel complaint concerns a public officer, public figure, official conduct, or a qualifying matter of public interest, the prosecution may have to prove actual malice: that the accused knew the statement was false or published it with reckless disregard of whether it was false.
Reckless disregard requires more than carelessness. In its July 2026 decision in Tan v. People, the Supreme Court reiterated that failure to verify, negligence, personal dislike, or even gross negligence does not by itself establish actual malice. The evidence must show a high awareness of probable falsity or that the author actually entertained serious doubts about the statement’s truth. The Court acquitted the accused because actual malice was not proved beyond reasonable doubt. See the official Supreme Court decision in G.R. No. 265929.
This rule protects robust criticism of government, but it is not permission to fabricate accusations. The status of the complainant, the subject of the post, the author’s knowledge at publication, and the available sources all matter.
Who may be charged
The Supreme Court upheld cyber libel with respect to the original author of the defamatory online statement. It declared the provision unconstitutional as applied to people who merely received the post and reacted through an ordinary like, comment, or share. It also invalidated “aiding or abetting” liability under Section 5 insofar as cyber libel is concerned. See Disini v. Secretary of Justice.
That protection has an important limit: a commenter who writes a new and independently defamatory accusation may become the original author of that new statement. Authorship must therefore be assessed post by post and comment by comment.
An online post made before the Cybercrime Prevention Act took effect cannot be punished retroactively as cyber libel. A single publication also cannot be prosecuted both as ordinary libel and cyber libel when the charges concern the same identical material; the Supreme Court has treated them as the same offense for double-jeopardy purposes.
The one-year deadline
In its April 8, 2026 en banc resolution in Causing v. People, the Supreme Court affirmed that cyber libel prescribes in one year, applying Articles 90 and 91 of the Revised Penal Code. The period begins when the alleged cyber libel is discovered by the offended party, the authorities, or their agents—not automatically on the date of posting. See the 2026 Supreme Court resolution.
The date of discovery must be proved when disputed. Save evidence showing:
- when and how the post was first found;
- who found it;
- when the complainant or authorities were informed;
- the posting, editing, and deletion dates; and
- when the complaint was actually filed and received.
Article 91 provides that prescription is interrupted by the filing of the complaint or information and may run again if proceedings end without conviction or acquittal or are unjustifiably stopped for a reason not attributable to the accused. The period does not run while the offender is absent from the Philippines.
Do not assume that a demand letter, platform report, barangay complaint, workplace grievance, or informal police consultation interrupts prescription. File the proper criminal complaint with the prosecution office well before the deadline and retain a stamped or electronically acknowledged copy.
A civil defamation claim may also be subject to a short one-year period, although its accrual and interruption can raise separate issues. Anyone considering criminal and civil remedies should obtain advice immediately.
Where to file
The criminal complaint normally begins with the Office of the City or Provincial Prosecutor corresponding to a legally proper venue. Under Section 2.1 of the Supreme Court’s Rule on Cybercrime Warrants, a criminal action under Section 4 of Republic Act No. 10175 is filed before the designated cybercrime court of the province or city:
- where the offense or any element occurred;
- where any part of the computer system used is situated; or
- where any damage to a natural or juridical person took place.
The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of other courts. Review the Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC.
Venue facts must be alleged and supported; merely opening a webpage in a preferred city does not necessarily establish proper venue. Special venue rules and consolidation requirements may also affect a separate civil action arising from the same publication. Have counsel verify venue before filing, especially when the parties, devices, servers, workplace, and alleged damage are in different locations.
How to file a complaint
1. Preserve the publication before seeking removal
Capture the material while it remains accessible. Preserve:
- full-page screenshots showing the statement, profile or account name, date, time, reactions, comments, and surrounding context;
- the complete URL, account identifier, post identifier, group or channel name, and privacy setting;
- a screen recording showing navigation from the account or page to the post;
- original image, audio, video, email, or message files, not only forwarded or compressed copies;
- downloads or exports provided by the platform;
- notices of edits, deletion, correction, or republication;
- the device used to access the material; and
- the names and contact details of people who saw and understood the publication.
Do not crop away context, annotate the only copy, alter metadata, or rely exclusively on a screenshot sent by an unknown person. Keep an untouched master copy and use duplicates for marking or explanation.
Electronic documents must be authenticated. Under the Rules on Electronic Evidence, the person offering a private electronic document has the burden of proving its authenticity, including through evidence establishing its integrity and reliability. Screenshots can be admitted when properly supported by testimony, admissions, account evidence, or other authentication, but a screenshot alone does not necessarily prove who controlled the account.
2. Establish authorship and publication
Collect lawful evidence connecting the respondent to the account and statement, such as:
- admissions in messages, interviews, testimony, or prior communications;
- consistent usernames, photographs, contact details, or linked accounts;
- witnesses who saw the respondent create or acknowledge the post;
- account-recovery information or lawfully obtained platform records;
- replies showing control of the account; and
- evidence that third persons actually saw and identified the complainant.
Do not access another person’s account or device without authority. Unauthorized access may itself be a crime and may compromise the evidence.
For anonymous or impersonating accounts, prompt assistance from the NBI Cybercrime Division or PNP Anti-Cybercrime Group may be necessary. Subscriber and traffic records may require preservation orders, warrants, or lawful disclosure processes. A private complainant cannot compel a platform or service provider to disclose protected data simply by sending a demand.
3. Prepare the sworn complaint
The filing ordinarily includes:
- an accomplished and sworn NPS Investigation Data Form;
- the complaint-affidavit and the required number of copies;
- witness affidavits based on personal knowledge;
- authenticated or properly identified electronic evidence;
- proof of the respondent’s last known address;
- proof supporting venue and the date of discovery; and
- any authority to act for a company or other juridical complainant.
The complaint-affidavit should reproduce or accurately attach the exact statement, identify each accused and each challenged publication, explain why the complainant was identifiable, name the people who saw it, and state the relevant discovery and venue facts. Follow the DOJ’s current filing requirements for preliminary investigation.
4. File with the proper prosecution office
File personally or through a method expressly accepted by that office. Electronic filing is permitted for certain later submissions under the 2024 DOJ rules, but do not assume that an emailed initial complaint is sufficient unless the prosecution office confirms it. Obtain proof showing the date, time, office, and docket or reference number.
5. Participate in preliminary investigation
Cyber libel’s prescribed imprisonment reaches eight years, so it falls under the regular preliminary-investigation process in DOJ Department Circular No. 015. The governing threshold is an offense carrying a prescribed penalty of at least six years and one day, without regard to the fine.
The prosecution office initially evaluates whether the complaint is sufficient in form and supported by complete evidence. The investigating prosecutor then determines whether to recommend dismissal or issue subpoenas. The DOJ’s standard is prima facie evidence with reasonable certainty of conviction, including evidence considered admissible, credible, preservable, and sufficient to establish every element if left uncontroverted. Consult the 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings.
If the resolution is adverse, an aggrieved party may generally move for reconsideration within 15 days from receipt. A petition for review may also be available through the route specified by the DOJ rules. Read the resolution immediately because the proper reviewing office, filing requirements, and deadline depend on the case’s procedural posture.
How to defend a complaint
1. Do not ignore the subpoena
A prosecutor’s subpoena is not a conviction and does not by itself mean that a warrant of arrest has been issued. It is, however, a formal opportunity to answer the charge. Failure to participate may cause the case to be resolved using only the complainant’s evidence once proper service and the respondent’s last known address are established.
The subpoena should provide the complaint and attachments and set a hearing within the DOJ timetable. The date for the counter-affidavit must give the respondent at least 10 days from receipt. Seek any justified extension before the deadline; do not assume it will be granted.
2. Obtain and audit the complete record
Check whether the copies include:
- the exact allegedly defamatory words;
- the full post or conversation rather than selected excerpts;
- URLs, dates, and account information;
- all witness affidavits and attachments;
- evidence of authorship and third-party publication;
- the asserted discovery date; and
- facts supporting venue.
Document missing, illegible, inconsistent, or altered materials.
3. Preserve the defense evidence
Keep the original post, drafts, source documents, research notes, correspondence, interview records, public records, account-access history, and any request for comment or correction. Preserve evidence of hacking, impersonation, shared account access, or unauthorized posting if genuinely relevant.
Do not wipe a device, delete messages, manufacture a “clean” screenshot, pressure a witness, or ask someone to give a false account. Before changing or deleting an active post, preserve the complete record and obtain advice about takedown, correction, and evidentiary consequences.
4. Address every element in a sworn counter-affidavit
Possible defenses, depending on the evidence, include:
- the respondent did not author or publish the statement;
- the account was fake, compromised, or controlled by another person;
- no third person received the communication;
- the complainant was not reasonably identifiable;
- the complete statement was not defamatory;
- the words were protected opinion, rhetorical criticism, satire, or nonactionable insult in context;
- the statement was true and published with good motives and for justifiable ends;
- the publication was privileged;
- the complainant was a public officer or public figure and actual malice was not proved;
- the prosecution cannot authenticate the electronic material;
- venue was improperly laid;
- the offense had prescribed;
- the post preceded the Cybercrime Prevention Act; or
- the respondent merely received or reacted to another person’s post and did not create a new defamatory accusation.
Under Article 361, truth is not always a complete defense by itself. The statute generally requires truth together with good motives and justifiable ends. It also limits proof of a true imputation concerning a noncriminal act unless it concerns a government employee’s official duties. Constitutional doctrines protecting criticism of public officials must be considered alongside this text.
A motion to dismiss ordinarily cannot substitute for the counter-affidavit under the 2024 DOJ rules unless it is verified and contains the respondent’s defenses, in which case it is treated as a counter-affidavit. A bare procedural motion can therefore leave important factual defenses unanswered.
5. Identify privileged communications
Article 354 recognizes qualified privilege for:
- a private communication made in the performance of a legal, moral, or social duty; and
- a fair and true report, made in good faith and without comments or remarks, of a nonconfidential judicial, legislative, or other official proceeding or an act performed by public officers in their functions.
Supreme Court jurisprudence also recognizes fair comment on matters of public interest. Qualified privilege removes the ordinary presumption of malice, but it can be defeated by proof of actual malice, unnecessary publication, excessive language, or departure from the occasion and purpose of the privilege.
6. Act promptly if an information is filed in court
Once the prosecutor files an information, the designated RTC independently evaluates judicial probable cause and may dismiss the case, require additional evidence, or issue a warrant of arrest. Counsel should immediately check:
- whether a warrant exists;
- eligibility and arrangements for bail;
- whether the information sufficiently alleges the offense and proper venue;
- whether a motion to quash must be filed before plea;
- arraignment and pretrial dates; and
- any pending motion for reconsideration or DOJ petition for review.
Do not evade a warrant. Arrange a lawful surrender and bail application through counsel where appropriate.
Penalties and civil liability
Cyber libel is punishable by imprisonment one degree higher than ordinary libel: prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years.
A fine may be imposed instead of imprisonment, or together with it. Following Article 355 as amended by Republic Act No. 10951 and the Supreme Court’s ruling in People v. Soliman, the current statutory fine range for cyber libel is ₱40,000 to ₱1,500,000. A fine-only sentence is within the court’s discretion; it is not automatic, and imprisonment remains legally available.
The criminal case may also carry civil liability. A person harmed by defamation may consider an independent civil action under Article 33 of the Civil Code or the civil action arising from the offense. Moral, actual, nominal, or exemplary damages require their own factual and legal bases. Separate filing, reservation, docket fees, prescription, venue, and consolidation rules should be assessed before choosing a civil route.
An apology, correction, takedown, settlement, affidavit of desistance, or compromise of damages does not automatically extinguish criminal liability. The offense is prosecuted in the name of the People, and the public prosecutor controls the criminal case. These steps may still affect the civil aspect, proof of malice, mitigation, prosecutorial evaluation, or the court’s choice of penalty.
Common mistakes
- Waiting for a platform response or demand-letter deadline while the one-year period runs.
- Saving only a cropped screenshot without the URL, account, date, context, or witness testimony.
- Assuming that the account name alone proves who authored the post.
- Filing wherever the complainant happened to read the material without establishing lawful venue.
- Treating every insult or negative review as criminal libel.
- Assuming that truth alone is always sufficient.
- Calling an accusation “opinion” while presenting it as verifiable fact.
- Ignoring the higher actual-malice standard for public officers and public figures.
- Replying publicly to the accusation and repeating it, thereby increasing the audience and potential harm.
- Deleting or altering evidence after receiving a demand, subpoena, or notice of investigation.
- Using a bare motion to dismiss instead of a fact-supported counter-affidavit.
- Believing that an apology or private settlement automatically ends the criminal case.
- Contacting witnesses in a threatening, coercive, or misleading manner.
- Missing the 15-day period for reconsideration or the separate deadline for review.
When legal help is urgent
Seek a Philippine lawyer immediately if:
- the one-year deadline is approaching;
- you received a prosecutor’s subpoena, court notice, or warrant;
- an anonymous account must be identified before records disappear;
- several posts, reposts, edits, or jurisdictions are involved;
- the complainant is a public officer or public figure;
- a company, newsroom, administrator, or multiple account managers are implicated;
- police seek access to a device, account, or computer data;
- the publication is accompanied by threats, stalking, doxxing, sexual material, or identity theft; or
- the contemplated civil and criminal cases may compete for venue or affect each other.
People who cannot afford private counsel may inquire with the Public Attorney’s Office, subject to its eligibility and merit requirements, or with an available IBP legal-aid office.
Frequently asked questions
Is a demand letter required before filing?
No. A prior demand, takedown request, or request for apology is not an element of cyber libel. It may be useful in some cases, but it should not be allowed to consume the one-year filing period.
Can I file if the post has already been deleted?
Possibly. Deletion does not erase an offense that was already published, but the remaining evidence must establish the statement, authorship, publication, identifiability, and malice. Witness testimony, preserved files, admissions, platform records, and properly authenticated screenshots may be important.
Is a private message cyber libel?
It depends on publication. A message sent only to the person being discussed ordinarily is not published to a third person. A message sent to someone else—or to a group containing third persons—may satisfy publication.
Can I be charged merely for liking or sharing a post?
Under Disini, the cyber-libel provision is unconstitutional as applied to people who simply receive and react to another person’s post. But if your comment, caption, or repost adds a new defamatory accusation, you may be treated as the original author of that new statement.
Does proving that the post was true automatically end the case?
Not always. Article 361 generally requires both truth and proof that publication was made with good motives and for justifiable ends. The rules differ when the statement concerns official conduct, privileged communication, or constitutionally protected discussion of a public officer or public figure.
Does failure to fact-check prove actual malice?
Not by itself. For a public-officer or public-figure complainant, actual malice requires knowledge of falsity or reckless disregard involving a high awareness of probable falsity or serious doubts about the truth. Mere negligence, error, personal hostility, or failure to investigate is ordinarily insufficient without more.
Can the complainant withdraw the case after settlement?
The complainant may communicate a settlement or loss of interest, but cannot unilaterally control or terminate the criminal prosecution. The prosecutor or court determines its legal effect. A settlement may resolve the civil aspect without extinguishing the criminal case.
Is imprisonment mandatory after conviction?
No. The statute permits imprisonment, a fine, or both, and the Supreme Court has confirmed that a court may impose a fine only when justified by the circumstances. Fine-only treatment remains discretionary rather than guaranteed.
Key official and primary sources
- Cybercrime Prevention Act of 2012, Republic Act No. 10175
- Revised Penal Code, including Articles 90–91 and 353–362
- Republic Act No. 10951, amending the fine for libel
- Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC
- Rules on Electronic Evidence, A.M. No. 01-7-01-SC
- 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings
- Disini v. Secretary of Justice, G.R. No. 203335
- Causing v. People, G.R. No. 258524, April 8, 2026 Resolution
- People v. Soliman, G.R. No. 256700
- Tan v. People, G.R. No. 265929
This article provides general legal information, not advice for a specific case and not an attorney-client relationship. Cyber-libel outcomes depend heavily on the exact words, documents, electronic evidence, parties, dates, and venue. Sources and current rules were checked through August 1, 2026.