Quick answer

Cyber libel is generally committed when a person authors and publishes through a computer system an identifiable, defamatory and malicious imputation that tends to dishonor, discredit or expose another person to contempt. It is punishable under Section 4(c)(4) of the Cybercrime Prevention Act of 2012 in relation to the Revised Penal Code.

To file a case, preserve the online evidence immediately, identify the author and publication circumstances, and submit a properly supported complaint-affidavit to the appropriate prosecutor’s office. The NBI or PNP cybercrime unit may assist where account attribution, subscriber information or forensic examination is needed.

To defend a case, do not ignore a subpoena, summons or warrant. Preserve the complete post and its context, obtain counsel promptly, and assess whether the prosecution can prove authorship, publication to a third person, identification, defamatory meaning, malice, use of a computer system, proper venue and timely filing.

A charge does not automatically mean conviction. Truth accompanied by good motives and justifiable ends, privileged communication, fair comment on matters of public interest, lack of identification, lack of authorship, absence of malice and prescription may apply—but each depends on the exact words, context, evidence and status of the person concerned.

What counts as cyber libel?

Section 4(c)(4) of Republic Act No. 10175 covers the acts of libel defined in Article 355 of the Revised Penal Code when committed through a computer system or another similar means.

The prosecution ordinarily must establish:

A defamatory imputation. The statement attributes a crime, vice, defect—real or imaginary—or another act, omission, condition or circumstance that tends to dishonor, discredit or expose a person to contempt.
Publication. At least one person other than the person defamed received, read, heard or saw the statement.
Identification. The offended person was named or was sufficiently identifiable to at least one third person. A nickname, photograph, workplace, family relationship or combination of details may be enough even when no full name appears.
Malice. The prosecution must establish the legally required form of malice, subject to the rules on presumed malice, privileged communications, public figures and matters of public interest.
Authorship or legally attributable publication. There must be competent evidence connecting the accused to the offending statement. Ownership of a profile, job title or access to a shared account does not necessarily prove who authored the post.
Use of a computer system. This includes publication through social media, websites, messaging platforms, email or other computer-assisted communications.

The words are assessed as a whole and in their actual context. Courts may consider language, tone, accompanying images, audience, surrounding discussion and how ordinary readers would understand the publication. Insults, opinions, satire and rhetorical exaggeration are not automatically libel—but calling something an “opinion” does not protect a statement that reasonably asserts a defamatory fact.

Original posts, comments, shares and reactions

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as to the original author but declared it unconstitutional as applied to people who merely receive and react to a post. A bare like, share or similar reaction is therefore not automatically cyber libel.

Important exceptions remain:

A person who writes a new comment containing a separate defamatory accusation may become the original author of that new statement.
Copying defamatory text into a new post, adding a defamatory caption, or presenting the accusation as one’s own may require a different analysis from merely using a platform’s reaction button.
Evidence that several people deliberately created or issued the publication may support liability based on their own proven participation, not merely their association with an account or organization.

When criticism may be protected

Freedom of expression protects criticism, disagreement and discussion of public affairs. It does not create a blanket right to publish knowingly false factual accusations.

Truth, good motives and justifiable ends

Truth can be an important defense, but “it is true” should not be treated as a complete answer in every situation. Under Article 361 of the Revised Penal Code, acquittal based on truth also requires good motives and justifiable ends. The admissibility and effect of proof concerning private conduct may depend on the nature of the imputation and the person’s public duties.

Preserve the primary records supporting the statement—not rumors, anonymous messages or screenshots whose source cannot be verified.

Privileged communication

Article 354 recognizes qualified privileges, including:

a private communication made in the performance of a legal, moral or social duty; and
a fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts.

Privilege is not automatic merely because a statement concerns a complaint, court case or public controversy. Excessive publication, unnecessary personal attacks, material inaccuracies or proof of actual malice may defeat a qualified privilege.

Statements made in judicial proceedings may receive broader protection when relevant to the proceeding, but reposting them to social media is a separate publication and may not carry the same protection.

Public officials, public figures and public-interest issues

When a publication concerns the official conduct of a public official, a public figure or a matter of legitimate public concern, constitutional protections can require proof of actual malice—knowledge of falsity or reckless disregard of whether the statement was false.

As explained in Borjal v. Court of Appeals, falsity, inaccuracy or an honest mistake does not by itself establish actual malice. The evidence may include the author’s sources, verification efforts, awareness of contradictory facts and serious doubts entertained before publication.

“Public figure” is a legal classification, not simply a label for anyone discussed online. Whether the rule applies depends on the person and the subject of the publication.

The deadline to file

Cyber libel generally prescribes in one year from its discovery by the offended party, the authorities or their agents, under the Supreme Court’s ruling in Causing v. People. The Supreme Court reaffirmed that rule in 2026 and clarified that a post’s mere availability on the internet does not, by itself, establish when the offended person actually discovered it: Supreme Court announcement on cyber-libel prescription.

Filing the complaint with the proper prosecutorial authority may interrupt prescription under Article 91 of the Revised Penal Code. However, disputes can arise over:

the actual discovery date;
who discovered the publication;
whether a later edit or post was a new publication;
whether the complaint was filed with the proper authority;
whether the questioned act occurred before the cybercrime law took effect; and
whether any legally recognized interruption or resumption applies.

Do not assume that an old post is actionable indefinitely simply because it remains searchable. Conversely, do not wait until the end of the one-year period. Evidence and platform records may disappear much sooner.

How to preserve the evidence

Preserve evidence before requesting deletion or confronting the author. Save:

full-page screenshots showing the complete post, account name, date, time and surrounding context;
the exact URL or message-thread location;
the account’s username, numeric user ID if visible, profile link and profile information;
photographs, videos, captions, comments and attachments;
a screen recording showing how the post was accessed;
the device used to view or receive it;
original emails, including headers, and original message exports where available;
notifications and messages showing when the publication was first discovered;
names and contact details of people who saw the publication;
documents proving why readers could identify the offended person;
evidence of reach, such as public comments or recipients, without inflating or guessing audience numbers;
records supporting falsity, reputational harm or the author’s knowledge; and
any demand, correction, apology, deletion, threat or admission.

Keep originals unchanged. Make working copies and record who collected each item, when and how. Do not crop away context, alter filenames, annotate the only copy or rely solely on forwarded screenshots. Where authenticity or authorship will be contested, a lawyer may recommend forensic imaging, an independent witness, platform records or other authentication under the Rules on Electronic Evidence.

Do not hack an account, guess passwords, impersonate another person or secretly access private data without lawful authority. Subscriber, traffic and content data may require a preservation direction, disclosure warrant or other cybercrime warrant. The Rule on Cybercrime Warrants governs these compulsory processes.

How to file a criminal complaint

1. Have the exact publication evaluated

A lawyer should review the precise words, the full thread, the identity and status of the offended person, the audience, supporting documents, discovery date and possible defenses. A hurtful or false post is not necessarily criminal libel.

2. Identify the proper place of filing

Republic Act No. 10175 gives Regional Trial Courts jurisdiction over cybercrime offenses, with designated cybercrime courts handling cases where applicable. Territorial venue is a separate question and must be supported by facts showing where the offense or an essential element occurred under the governing rules.

Do not choose a prosecutor’s office simply because it is convenient. Online accessibility everywhere does not automatically make every city or province a proper venue.

3. Consider cybercrime investigation

Where the author is unknown, an account may be fake, or technical evidence is needed, report the matter promptly to an authorized cybercrime unit of the:

Bring the original device and preserved links and files. Investigators cannot guarantee that a platform still holds the needed data. Republic Act No. 10175 provides limited preservation periods for certain service-provider data, while compulsory disclosure generally requires lawful process.

4. Prepare the complaint-affidavit and attachments

The complaint-affidavit should state facts from the complainant’s personal knowledge, including:

the exact statement complained of;
when, where and how it was discovered;
why the complainant is identifiable;
who received or viewed it;
facts connecting the respondent to the publication;
why the statement is defamatory and false or unsupported;
facts relevant to malice;
the basis for venue; and
a chronological list of authenticated or authenticatable exhibits.

Affidavits should be sworn in the form required by the applicable DOJ-NPS rules. False statements in an affidavit can create separate legal consequences.

5. Participate in preliminary investigation

The prosecutor ordinarily issues a subpoena requiring the respondent to submit a counter-affidavit and supporting evidence within the period stated. The prosecutor then determines whether the evidence meets the standard for filing an information in court.

A preliminary investigation is not a full trial. It decides whether a court charge should be filed; guilt must still be proved beyond reasonable doubt at trial. Either side should obtain the current local filing instructions and comply with the deadlines in official notices because procedures and permitted filing channels may vary.

6. Prepare for the court case

If an information is filed, the RTC judge independently evaluates probable cause and determines whether to issue a warrant of arrest or take another permitted action. The accused is entitled to counsel, due process, bail when available as a matter of right, arraignment, disclosure under applicable rules, trial and appeal.

Cyber libel may result in imprisonment, a fine, or both, plus civil liability. Article 355, as amended by Republic Act No. 10951, sets the underlying libel penalties; Section 6 of Republic Act No. 10175 prescribes a penalty one degree higher when the offense is committed through information and communications technology. The actual sentence depends on the charge, applicable penalty rules, mitigating or aggravating circumstances and the court’s judgment.

Civil remedies and platform action

The offended person may also consider:

civil liability deemed instituted with the criminal case, unless validly waived, reserved or previously filed;
an independent civil action for defamation under Article 33 of the Civil Code;
a narrowly drafted correction, retraction or demand to cease further publication; and
reporting the content through the platform’s impersonation, harassment or defamation process.

Civil claims have separate rules on venue, prescription, proof and filing fees. A complainant should coordinate criminal and civil strategies before filing because prior cases, reservations and inconsistent allegations can affect later proceedings.

A private demand letter or platform takedown request does not necessarily stop the criminal prescriptive period. A retraction or apology may affect strategy or damages but does not automatically erase a completed offense.

How to defend against a complaint

Act immediately upon receiving official papers

Record the date and manner of service. Send the complete subpoena, complaint and attachments to counsel. The response period may be short, and an unsupported request for extension may be denied.

If a warrant has been issued, coordinate lawful surrender and bail through counsel. Do not evade authorities or attempt to erase evidence.

Require proof of every element

A defense should test:

whether the accused actually authored or published the statement;
whether anyone other than the complainant received it;
whether the complainant was identifiable to a third person;
whether the words, read in context, carry a defamatory factual meaning;
whether the statement was made through a computer system;
whether the evidence is authentic and admissible;
whether the required form of malice exists;
whether a privilege, fair-comment rule or truth defense applies;
whether the prosecutor and court have proper territorial authority;
whether the complaint was filed within one year from discovery; and
whether the charge improperly treats a mere like, reaction or share as authorship.

Do not rely on a single slogan such as “freedom of speech,” “truth is always a defense” or “my account was hacked.” Each position needs evidence.

Preserve helpful context

Keep drafts, source documents, research notes, messages with editors, verification requests, replies from sources, timestamps, access logs and the complete conversation. If an account was compromised, promptly preserve security alerts, login records, device history and reports made to the platform or authorities.

Evidence of correction or responsible verification may be relevant, but altering or deleting material after learning of a complaint can damage credibility and may destroy exculpatory context.

Respond factually

A counter-affidavit should answer the allegations with admissible evidence and clearly identify legal defects. Avoid repeating the accusation unnecessarily, threatening the complainant or trying the case through social media. New posts can create new disputes and become evidence of motive or malice.

Common mistakes

Waiting for the post to “go viral” before preserving it or filing.
Treating a screenshot as conclusive proof of authorship.
Saving only the defamatory sentence and omitting the thread.
Assuming a fake name makes the author impossible to identify.
Filing in an improper locality.
Confusing the one-year criminal deadline with a platform’s retention period or the deadline for a civil action.
Naming company officers or page administrators without evidence of their personal participation.
Charging people merely because they liked or shared an original post.
Publicly reposting the accusation while announcing the complaint.
Editing, deleting or replacing evidence on the original device.
Ignoring a prosecutorial subpoena because it is not yet a court summons.
Contacting witnesses to dictate what they should say.
Assuming deletion, retraction or settlement automatically terminates a criminal case.
Obtaining account information through unauthorized access.

When legal help is urgent

Consult a Philippine lawyer immediately when:

the one-year period may be close to expiring;
the account is anonymous or platform records may soon be lost;
a prosecutor’s subpoena, court summons or warrant has been received;
police seek access to a device or account;
the publication involves a journalist, whistleblower, public official or election-related issue;
the same facts may involve threats, stalking, intimate images, identity theft or violence;
the complainant or respondent is outside the Philippines;
a child or other vulnerable person is involved;
several related posts or publishers are being considered; or
settlement discussions could affect criminal and civil rights.

FAQ

Is every false Facebook post cyber libel?

No. The prosecution must prove all required elements, including defamatory imputation, publication, identification, malice, authorship and use of a computer system. Context and applicable defenses matter.

Can I sue someone for a private message sent only to me?

Libel ordinarily requires publication to a third person. A message seen only by the person allegedly defamed may lack that element, although threats, harassment or other offenses may still be relevant.

Can a group or company be defamed?

A juridical person may have a protectable reputation, but identification, the nature of the imputation and the proper complainant must be established. Statements about a large or indefinite group do not automatically identify every member.

Is sharing a defamatory post automatically cyber libel?

No. Disini protects people who merely receive and react to the original post. A person who adds a new defamatory allegation or independently republishes content as their own may present a different issue.

Does deleting the post prevent a case?

No. Publication may already have occurred. Deletion can limit continued exposure, but it does not necessarily extinguish criminal or civil liability. Preserve a complete copy and obtain advice before changing evidence.

Can an anonymous account be charged?

Potentially, but the author must be identified through competent evidence. Platform data, device evidence, admissions and circumstantial evidence may be relevant. Compulsory disclosure usually requires lawful investigative and judicial process.

Can I file directly in court?

A cyber-libel charge ordinarily undergoes preliminary investigation before the prosecutor. If the prosecutor finds sufficient basis, an information is filed in the proper Regional Trial Court. Civil relief follows a different filing process.

Is barangay conciliation required?

Cyber libel carries a penalty beyond the category of offenses ordinarily covered by barangay conciliation. Other related civil disputes may require a separate assessment, so do not assume the same answer applies to every accompanying claim.

Can the parties settle?

They may discuss retraction, apology, takedown or civil compensation with counsel. However, cyber libel is prosecuted in the name of the People of the Philippines, so a complainant’s withdrawal or private settlement does not by itself guarantee dismissal.

How long does the case take?

There is no reliable universal timetable. Duration depends on investigation, service, technical evidence, prosecutorial review, court workload, motions, trial and appeal. Any promised result or fixed completion date should be treated cautiously.

Official legal sources

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Cyber-libel issues are highly dependent on the exact publication, evidence, dates and procedural history. Authorities were checked as of September 15, 2026.