Quick answer

To file a cyber libel case in the Philippines, preserve the online material and its digital context, identify the person responsible, prepare a sworn complaint supported by admissible evidence, and file it with the proper prosecutor’s office before the offense prescribes. A prosecutor—not the complainant—decides whether the evidence is sufficient to file an Information in court.

To defend a case, do not ignore the subpoena. Obtain the complete complaint and attachments, preserve your own evidence, and submit a sworn counter-affidavit by the date stated in the subpoena. Possible defenses include failure to prove authorship, publication, identifiability, defamatory meaning, or malice; privileged communication; truthful statements made with good motives and justifiable ends; prescription; improper venue; and constitutional protections applicable to speech about public officials or matters of public interest.

Cyber libel generally prescribes one year from discovery of the alleged defamatory publication by the offended party, the authorities, or their agents. Filing a complaint or Information interrupts prescription. Determining the discovery date is fact-sensitive, so neither side should wait. The Supreme Court reaffirmed this rule in Causing v. People in April 2026. (lawphil.net)

What cyber libel means

Section 4(c)(4) of Republic Act No. 10175 covers libel, as defined under the Revised Penal Code, when committed through a computer system or a similar future means. It may apply to material published through social media, websites, messaging platforms, email, online forums, or other digital systems, depending on the evidence and circumstances.

The prosecution generally must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person to contempt.
Publication. The statement was communicated to at least one person other than the person allegedly defamed.
Identifiability. The offended person was named or was identifiable to readers from the words, images, context, or surrounding circumstances.
Malice. The applicable form of malice must be proved or may arise from law, subject to recognized privileges and constitutional rules.
Use of a computer system or information and communications technology.
Identity and participation of the accused. The evidence must reliably connect the respondent to the creation or publication charged.

These elements come from Articles 353 to 355 of the Revised Penal Code and controlling Supreme Court decisions. (Lawphil)

A harsh, offensive, or embarrassing post is not automatically criminal libel. The exact words, their ordinary and contextual meaning, the audience, the identity of the speaker, the subject’s status, the public interest involved, and the available proof all matter.

Who may be liable

The prosecution must prove the respondent’s own legally punishable participation. A profile name, screenshot, or allegation that an account “belongs” to someone may not by itself prove who authored or posted the content. Account records, admissions, device evidence, witnesses, surrounding communications, and other authentication evidence may become important.

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author of the post but invalidated the application of the Cybercrime Prevention Act’s general aiding-or-abetting provision to online libel. A person does not automatically become criminally liable merely by receiving, reacting to, or sharing another person’s post. A user who adds a new defamatory statement, however, may face potential liability for that user’s own publication. (lawphil.net)

Editors, business owners, page administrators, employees, and officers are not automatically liable solely because of their title or access. Their authorship, participation, knowledge, or responsibility must be established under the applicable law.

Statements, opinions, and context

Calling a statement an “opinion” does not end the inquiry. A statement framed as an opinion can still imply undisclosed defamatory facts. Conversely, rhetorical exaggeration, satire, criticism, or value judgments that cannot reasonably be understood as asserting a provable fact may receive stronger constitutional protection.

Courts examine the entire publication, not isolated words. Relevant context can include:

The complete post, thread, article, recording, or conversation
Images, links, captions, hashtags, and comments
The relationship between the parties
The intended and actual audience
Events known to readers at the time
Whether the statement concerned private conduct, official duties, or a matter of public concern
Whether the publication fairly reported an official proceeding or document

Malice, privilege, and matters of public interest

Article 354 generally presumes malice from a defamatory imputation, even if the statement is true, unless good intention and justifiable motive are shown. The same article recognizes qualifiedly privileged communications, including:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts of public officers.

A qualified privilege is not an automatic victory. It may be defeated by proof of actual malice, bad faith, excessive publication, irrelevant accusations, knowingly false statements, or reckless disregard of whether the accusation was true.

Speech about public officials, public figures, or matters of public concern receives greater constitutional protection. Depending on the case, the prosecution or claimant may have to prove actual malice—knowledge of falsity or reckless disregard for truth. Ordinary mistakes, failure to investigate, hostility, or strong language do not necessarily establish actual malice, although they may be considered with the complete evidence.

Is truth a complete defense?

Not always.

Under Article 361 of the Revised Penal Code, truth may be offered in evidence, but acquittal generally also requires proof that the publication was made with good motives and for justifiable ends. When the accusation concerns a private matter unrelated to a public officer’s official duties, the statutory restrictions on proving truth must be considered carefully.

A person relying on truth should preserve the underlying records, not merely repeat what another person said. Documents should be authenticated, and confidential or unlawfully obtained material can create separate legal problems.

Penalties and civil exposure

Written libel under Article 355 may be punished by imprisonment, a fine, or both, in addition to potential civil liability. Sections 4(c)(4) and 6 of Republic Act No. 10175 apply a penalty one degree higher when libel is committed through information and communications technology. The imprisonment range ordinarily associated with that one-degree increase is prisión correccional in its maximum period to prisión mayor in its minimum period—four years, two months and one day to eight years.

The actual sentence or fine depends on the charged act, publication date, applicable amendments, modifying circumstances, and the court’s lawful discretion. Republic Act No. 10951 adjusted numerous fine amounts in the Revised Penal Code, while Supreme Court decisions address how the cybercrime enhancement operates when a fine is imposed. (lawphil.net)

The offended party may also seek civil damages. Civil liability may be pursued with the criminal action or, where legally available and properly reserved or filed, through a separate civil action. Damages are not automatic merely because a person felt offended; liability and the claimed injury must be proved.

The same publication ordinarily should not be punished twice as both conventional libel and cyber libel when the charges concern the same act. The Supreme Court invalidated Section 7 of Republic Act No. 10175 to the extent that it would permit double prosecution or punishment for online libel under both laws.

The filing deadline

Cyber libel prescribes in one year. Under Articles 90 and 91 of the Revised Penal Code, the period begins when the alleged crime is discovered by the offended party, the authorities, or their agents—not automatically on the day the content was uploaded. There is no general presumption that a person discovered a social-media post immediately upon publication.

The filing of a complaint or Information interrupts prescription. The period may run again if proceedings end without conviction or acquittal or are unjustifiably stopped for a reason not attributable to the accused. Prescription also does not run while the offender is absent from the Philippines under Article 91.

The discovery date can require evidence. Preserve messages showing when the post was first sent to or seen by the complainant, affidavits of the person who found it, platform notifications, email headers, and other contemporaneous records. A bare assertion of late discovery may be challenged.

Do not rely on older material stating that cyber libel prescribes in 12 or 15 years. The Supreme Court’s current ruling is one year from discovery. (sc.judiciary.gov.ph)

Before filing: preserve reliable evidence

Screenshots are useful but can be incomplete or disputed. Preserve as much of the original digital context as possible:

The exact words, photographs, audio, or video
The full page and surrounding thread, not only a cropped excerpt
The account name, profile details, and visible account identifier
The complete URL or message link
The publication date and time, including the time zone if relevant
Comments, reactions, shares, edits, and later deletions
The names of people who received or viewed the material
Messages showing when and how the complainant discovered it
Original files with available metadata
Emails in their native format with full headers
Lawfully obtained platform notices, download archives, or account records
Records supporting falsity, injury, good faith, privilege, or truth
Demand letters, responses, retractions, corrections, and apologies
A written chronology identifying each event and its source

Do not alter original files. Keep read-only or backed-up copies, record when and how each item was obtained, and retain the device containing the original evidence when practicable. A lawyer or trained investigator can advise whether forensic imaging, a preservation request, or a cybercrime warrant may be necessary.

Do not obtain evidence by hacking an account, impersonating another person, secretly accessing a device without authority, or unlawfully disclosing private data. Evidence-gathering misconduct can create separate criminal, civil, or privacy exposure.

How to file a complaint

1. Evaluate the exact publication

Transcribe the precise words and identify every image, link, or recording relied upon. Explain what the statement would mean to an ordinary reader in context, why it is defamatory, and how readers could identify the offended person.

Separate provably false factual claims from insults, opinions, satire, or legitimate criticism. A complaint built around vague conclusions is easier to challenge.

2. Identify the respondent and the act charged

State the respondent’s known name and address and explain the evidence connecting that person to the account and publication. If the author is unknown, consult counsel or the PNP Anti-Cybercrime Group or NBI Cybercrime Division promptly about lawful identification and preservation measures. Do not assume that a displayed profile name proves identity.

3. Determine the proper venue

Venue in criminal libel cases is jurisdictional and is governed by special rules under Article 360 of the Revised Penal Code, together with the Cybercrime Prevention Act and relevant decisions. For a private offended party, Article 360 generally refers to the place where the person actually resided when the offense was committed or where the defamatory matter was printed and first published. Different provisions apply when the offended party is a public officer.

Online publication creates additional venue questions. The mere fact that content could be accessed anywhere should not be treated as unlimited permission to file anywhere. Have counsel determine the proper city or province before filing; an incorrect venue can defeat the case.

Cybercrime cases are tried in Regional Trial Courts designated to handle cybercrime matters. The initial complaint is ordinarily lodged for prosecutorial investigation rather than filed by the complainant directly as a criminal case in the trial court.

4. Prepare the complaint-affidavit

The complaint-affidavit should be based on personal knowledge and should clearly state:

The identities and addresses of the parties
The exact publication and its date
How it used a computer system
How and when the complainant discovered it
Who received or viewed it
Why the complainant was identifiable
Why the statement was defamatory and false or malicious
The evidence identifying the respondent as author or publisher
The harm and relevant surrounding circumstances
A complete list and explanation of attached evidence

Witnesses with personal knowledge should execute their own affidavits. Avoid hearsay where direct evidence is available. Attach legible, organized exhibits and identify each one in the affidavit.

5. File with the proper prosecution office

Current DOJ guidance lists an Investigation Data Form, a sworn complaint or statement, witness affidavits, and supporting documents among the filing requirements. Required copies, filing methods, and local office practices may change, so confirm them directly with the proper prosecution office before submission. The DOJ’s official filing page provides the current checklist. (DOJ)

The PNP Anti-Cybercrime Group or NBI Cybercrime Division may assist in investigation and digital evidence collection. Reporting to an investigative agency is not necessarily the same as properly filing the complaint that interrupts prescription; confirm the filing date and receiving office with counsel.

What happens during preliminary investigation

The prosecutor evaluates whether the evidence establishes the current DOJ standard for filing an Information: prima facie evidence with reasonable certainty of conviction.

If the complaint proceeds, the respondent receives a subpoena with the complaint and supporting materials. Under the 2024 DOJ–National Prosecution Service rules, the scheduled submission of the counter-affidavit in a regular preliminary investigation must generally allow at least 10 days from receipt of the subpoena and complaint. A limited extension may be available on meritorious grounds, but it should never be assumed.

The prosecutor may:

Dismiss the complaint on the evidence submitted;
Require a counter-affidavit and supporting affidavits;
Allow or require responsive affidavits;
Hold a physical or virtual clarificatory hearing;
Require production of material evidence; or
Find sufficient evidence and file an Information in the proper court.

A preliminary investigation is not a full trial. The parties generally submit sworn evidence rather than conduct ordinary cross-examination. If an Information is filed, guilt must still be proved in court beyond reasonable doubt.

The official governing issuance is DOJ Department Circular No. 15, series of 2024. Follow the actual subpoena and current prosecution-office instructions because the applicable procedure can differ for expedited proceedings or special circumstances.

How to defend the complaint

Act immediately on the subpoena

Record when, where, and how it was received. The filing date in the subpoena controls day-to-day planning. Send the entire package—not selected pages—to counsel.

Do not file only a motion to dismiss in place of a counter-affidavit unless a presently applicable rule clearly permits the particular filing. The safer course is to state procedural and substantive objections in a properly sworn counter-affidavit while preserving all defenses.

Demand and review the complete record

Check whether the subpoena includes the complaint, witness affidavits, screenshots, URLs, recordings, and other attachments. Document anything missing or illegible and promptly request access according to the prosecutor’s instructions.

Preserve—not manufacture—your evidence

Save the original post, account records, drafts, messages, research, source documents, publication settings, access logs available to you, and communications showing your intent or good faith. Preserve the full context even when parts appear unfavorable. Deletion after receiving notice can complicate authentication and may appear suspicious.

Address every element and exhibit

A useful counter-affidavit may address:

Authorship: Is there admissible evidence that you controlled the account or created the publication?
Publication: Was the material communicated to another person?
Identifiability: Would readers actually know who was being discussed?
Defamatory meaning: What does the complete statement mean in context?
Malice: Was the statement privileged, researched, made in good faith, or based on reliable official material?
Truth and justification: What admissible records support the statement, and why was publication justified?
Public interest: Did the speech concern official conduct or a matter of legitimate public concern?
Prescription: When did the complainant, authorities, or their agents first discover it?
Venue: Was the complaint filed in a place authorized by law?
Participation: Are you accused only because you liked, received, administered, or passively shared another person’s content?
Duplicative charges: Are ordinary libel and cyber libel being pursued for the same publication?

General denials rarely answer documentary evidence effectively. Explain what happened chronologically and attach authenticated supporting material.

Do not contact or threaten the complainant

Do not pressure witnesses, publish new accusations, destroy evidence, or encourage online supporters to attack the complainant. Settlement discussions, demands for correction, and apologies should be handled carefully through counsel because poorly worded communications may be used as admissions.

Retractions, corrections, and settlement

A prompt, prominent correction or retraction may reduce harm and can be relevant to good faith, malice, damages, or settlement. It does not automatically erase a completed offense.

An affidavit of desistance also does not necessarily compel dismissal. Cyber libel is a public offense once prosecuted, and the prosecutor or court must still apply the law and evaluate the evidence. Any settlement should address both criminal and civil consequences and should never involve coercion, false testimony, or suppression of evidence.

Common mistakes

Waiting because the post remains online and assuming the deadline has not begun
Treating a report to a platform, barangay, police desk, or investigative agency as automatically equivalent to filing the legal complaint
Filing in a convenient but legally improper venue
Submitting cropped screenshots without URLs, dates, context, or authentication
Assuming that an anonymous or pseudonymous account proves who posted
Claiming that every insult is libel or that every “opinion” is protected
Assuming truth alone always ends the case
Treating a like, reaction, tag, or passive share as automatic criminal authorship
Ignoring the subpoena or missing the counter-affidavit date
Filing an unsworn narrative instead of the required affidavit
Deleting posts, messages, accounts, or devices after a dispute begins
Reposting the accusation while discussing the case
Using hacked, stolen, or unlawfully accessed material
Pressuring the other party or witnesses
Relying on outdated references to a 12- or 15-year prescriptive period

When legal help is urgent

Seek a Philippine lawyer immediately if:

The one-year period may expire soon;
You received a subpoena, summons, warrant, or court notice;
The content or account has been deleted or may disappear;
The author is unknown and platform or subscriber records may be lost;
A device has been seized or investigators request access, passwords, or consent to search;
The publication concerns a public official, journalist, whistleblower, workplace investigation, sexual misconduct allegation, or pending case;
The parties or servers are in different countries;
The complaint includes threats, stalking, identity theft, unauthorized account access, intimate images, child-related content, or data-privacy violations;
Several posts, complainants, respondents, or venues are involved; or
Settlement communications could affect criminal and civil rights.

During arrest or custodial questioning, ask for counsel and exercise the constitutional right to remain silent. Do not consent to a device search or disclose credentials without understanding the legal basis and consequences.

Frequently asked questions

Can a private message be cyber libel?

Possibly. Publication requires communication to someone other than the person allegedly defamed. A message sent only to the subject ordinarily lacks that element, but a group message or a message sent to a third person may satisfy it. A private communication made in the performance of a legal, moral, or social duty may also be qualifiedly privileged.

Can a deleted post still support a case?

Yes, if its contents, publication, authorship, and integrity can be proved through admissible evidence. Deletion does not necessarily erase liability. It can, however, make authentication and context more difficult.

Does one share create a new case?

Not automatically. Liability depends on the user’s own conduct and words. Passive sharing is not the same as authoring a new defamatory statement, particularly after Disini. Adding a defamatory caption or materially adopting and republishing the accusation may present a different issue.

Can a business or organization be defamed?

Article 353 refers to both natural and juridical persons. The organization must still be identifiable, and all other elements must be proved.

Is a demand letter required before filing?

No general rule makes a prior demand or takedown request an element of cyber libel. A demand may help document notice, seek correction, or explore settlement, but it should not delay filing beyond the prescriptive period.

Must the complainant prove financial loss?

Not to establish every criminal element. Evidence of reputational, emotional, professional, or financial harm may nevertheless be important to damages and case evaluation.

Will an apology automatically dismiss the case?

No. An apology, correction, or retraction may support settlement or mitigate consequences, but it does not automatically terminate criminal proceedings.

Can the case be filed wherever the post was viewed?

Do not assume so. Criminal venue is jurisdictional, and libel has special venue rules. The proper venue should be evaluated under Article 360, the Cybercrime Prevention Act, and the facts of the publication and the parties.

Is cyber libel bailable?

As ordinarily charged, it is generally a bailable offense. The amount and conditions are set by the court under the Constitution, the Rules of Criminal Procedure, and the circumstances of the case. A respondent should obtain case-specific advice rather than relying on an estimated bail amount.

Official legal sources

This article provides general legal information, not legal advice and not an attorney-client relationship. Cyber libel outcomes depend heavily on the exact publication, evidence, dates, parties, and venue. Consult a Philippine lawyer for advice on a specific matter. Laws and official sources were checked as of September 22, 2026.