Quick answer

A cyber libel case in the Philippines generally requires proof that a person originally authored and published through a computer system a malicious and defamatory statement identifying another person or entity. The statement must have reached at least one person other than the person defamed.

To file a case, preserve the online material immediately, document when and how it was discovered, identify the original author, and submit a sworn complaint with supporting evidence to the prosecution office that has territorial authority. Police or cybercrime investigators may assist with attribution and digital evidence, but the criminal complaint is evaluated by a prosecutor.

To defend a case, do not ignore a subpoena or court process. Preserve the account, device, source materials, publication context, and proof supporting defenses such as mistaken identity, lack of authorship, absence of publication or identification, privileged communication, good motives and justifiable ends, truth where legally available, lack of actual malice in public-interest cases, or prescription.

Cyber libel ordinarily prescribes one year from its discovery by the offended party, the authorities, or their agents—not automatically from the posting date. Filing and prescription are highly fact-sensitive, so anyone close to the deadline or already served with process should consult a Philippine criminal-law practitioner promptly.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the publication is made through a computer system or a similar technological means. This may cover, depending on the evidence:

Social-media posts, captions, comments, and original uploads;
Blog posts and online articles;
Emails or electronic messages sent to third persons;
Online videos, livestreams, graphics, or memes containing defamatory imputations; and
Other internet-based publications.

The prosecution generally must establish:

A defamatory imputation. The material attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a natural or juridical person to contempt.
Publication. At least one person other than the person defamed received, viewed, heard, or read it.
Identification. The complainant is named or is reasonably identifiable from the words, images, surrounding facts, or context.
Malice. The applicable form of malice must be shown or legally presumed, subject to constitutional and statutory protections.
Use of a computer system or ICT.
Responsibility of the accused. Competent evidence connects the respondent to the original authorship and publication.

The Supreme Court has explained that cyber libel is essentially libel under Articles 353 and 355 of the Revised Penal Code committed through ICT. See Disini Jr. v. Secretary of Justice and Causing v. People.

Insulting or offensive language is not automatically criminal. Courts examine the statement’s ordinary meaning, complete context, audience, surrounding circumstances, and whether it makes or conveys a defamatory factual imputation.

Who may be liable?

The cyber-libel provision constitutionally applies to the original author of the online libel. In Disini, the Supreme Court rejected criminal liability under the cybercrime law’s aiding-or-abetting provision for people who merely press “Like,” “Share,” or similar reaction buttons in response to an existing defamatory post.

That does not give complete immunity to someone who adds a new defamatory statement. A person who writes an independently defamatory caption, accusation, or comment may be treated as the author of that new content. Liability still requires proof of all elements and personal participation; ownership of an account alone should not substitute for reliable proof of authorship.

For publications operated by organizations or media entities, responsibility may involve additional rules under Article 360 of the Revised Penal Code. Titles and job positions alone should not be treated as conclusive proof of criminal participation.

Important defenses and exceptions

The complainant was not identified

The prosecution must show that readers could identify the complainant. A post does not become actionable merely because someone personally believes it refers to them. Identification may nevertheless arise from a nickname, photograph, workplace, relationship, prior exchange, or other contextual details even if no full name appears.

There was no publication to a third person

A defamatory message communicated only to the person concerned ordinarily lacks publication. A group chat, copied email, forwarded direct message, or restricted post may satisfy publication if another person received it. A limited audience may affect the evidence and damages, but does not necessarily defeat the element.

The respondent did not author or publish the material

A screenshot showing an account name is not always enough to prove who operated the account at the relevant time. Evidence may show hacking, impersonation, fabrication, unauthorized access, a shared device, or incorrect attribution.

A denial is stronger when supported by account-access records, device history, security alerts, platform correspondence, witnesses, travel or work records, or a prompt report of account compromise. Do not fabricate or alter digital records.

The statement was not defamatory

Hyperbole, parody, rhetorical abuse, satire, or opinion may fall outside criminal libel when a reasonable reader would not understand the statement as asserting a defamatory fact. Merely labeling an accusation “opinion” does not protect it if the words imply undisclosed defamatory facts.

Privileged communication

Article 354 recognizes qualifiedly privileged communications, including:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts.

The communication must remain connected to its duty or legitimate purpose. Broadcasting a complaint indiscriminately online may exceed the audience or occasion that justified the communication.

Certain communications are absolutely privileged, including statements protected by legislative privilege and properly relevant statements in judicial proceedings. The scope of absolute privilege depends on the speaker, occasion, and relevance; it should not be assumed merely because a lawsuit or government office is mentioned.

Public officials, public figures, and matters of public interest

When defamatory speech concerns a public official’s official conduct or a qualifying public figure or public-interest matter, the prosecution may have to prove actual malice: knowledge that the statement was false or reckless disregard of whether it was false.

Reckless disregard is more than poor research or ordinary negligence. It concerns evidence that the publisher actually entertained serious doubts about the statement’s truth or had a high awareness of probable falsity. The rule does not protect knowingly false accusations, fabricated evidence, or attacks unrelated to a legitimate public concern. See Daquer v. People.

Truth, good motives, and justifiable ends

Truth is not an automatic defense to every Philippine criminal-libel charge. Under Article 361, acquittal generally requires proof both that the charge was true and that it was published with good motives and for justifiable ends.

Proof of the truth of a noncriminal act or omission is restricted, except where the imputation concerns a government employee and facts related to official duties. Documents, firsthand sources, verification efforts, and the reason for publication can therefore be as important as literal truth.

The case has prescribed

The Supreme Court has held that cyber libel prescribes in one year from discovery by the offended party, the authorities, or their agents. An online post does not create an automatic presumption that the complainant discovered it on the upload date.

Discovery may be proved through messages, reactions, comments, demand letters, reports to an employer or platform, screenshots, witness testimony, or other conduct showing knowledge. The prescriptive period is interrupted by the filing of the complaint or information as provided by Article 91 of the Revised Penal Code. If the discovery date or interruption is disputed, evidence may be required rather than dismissal based only on the face of the charge.

A separate civil action for injury to rights, including defamation, generally has its own one-year limitation under Article 1147 of the Civil Code. The precise civil remedy and reckoning date should be evaluated separately.

Penalties and court jurisdiction

Under Section 6 of Republic Act No. 10175, the penalty for libel committed through ICT is one degree higher than for conventional written libel. The recognized imprisonment range is prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years, subject to the rules on applying and computing penalties.

After the amendments made by Republic Act No. 10951, the Supreme Court held that the alternative fine for online libel ranges from ₱40,000 to ₱1,500,000. Depending on the circumstances, the court may impose imprisonment, a fine, or both. A fine-only sentence is legally possible, but it is discretionary rather than guaranteed. Civil damages may also be awarded. See People v. Soliman.

Cyber-libel prosecutions are handled by designated cybercrime Regional Trial Courts. The prosecutor and court must still determine the proper territorial venue.

How to file a cyber libel complaint

1. Preserve the publication before asking for its removal

Capture and preserve:

The full post, article, video, image, caption, comment thread, or message;
The complete URL and account or profile URL;
The account name, username, profile identifier, and visible profile details;
The date and time displayed, including the time zone if available;
The audience or privacy setting;
Comments, shares, reactions, view counts, and related posts where relevant;
The device screen showing the surrounding interface—not only a cropped quotation;
A screen recording showing how the material was accessed;
Original downloaded files and their metadata;
Messages or statements indicating authorship;
Names and contact information of persons who independently saw the material; and
Evidence of the exact date the complainant or an authorized agent first discovered it.

Keep the original device and files unchanged. Make backup copies, but do not rely solely on edited screenshots or printouts. If the content is likely to disappear or authorship is contested, ask counsel or a qualified forensic examiner about legally sound preservation.

2. Document why the statement is defamatory and false

For each challenged statement, identify:

The exact words, image, gesture, or audiovisual portion complained of;
What factual accusation it conveys;
Why readers would understand it as referring to the complainant;
Who received or viewed it;
Why it is false, misleading, or unsupported;
The surrounding statements needed to understand its context; and
Any reputational, professional, emotional, or financial harm.

Do not omit surrounding material that may change the meaning. Selective screenshots can undermine credibility and may prevent an accurate legal assessment.

3. Identify the original author using lawful evidence

Useful evidence may include admissions, prior exchanges, linked telephone numbers or email addresses, distinctive account information, witnesses, business records, and properly obtained technical records.

Do not hack an account, impersonate another person, unlawfully record private communications, or obtain subscriber information through deception. Investigators may seek preservation, disclosure, or cybercrime warrants when the legal requirements are met.

4. Determine the proper venue

Under Section 2.1 of the Rule on Cybercrime Warrants, a criminal action for a Section 4 or 5 cybercrime may be filed in the designated cybercrime court of the province or city:

Where the offense or any element occurred;
Where any part of the computer system used is situated; or
Where damage to the natural or juridical person took place.

The first court in which the criminal action is properly filed acquires jurisdiction to the exclusion of the others. A complainant should not assume that the post was published everywhere for venue purposes. The complaint must contain concrete facts supporting the chosen place.

At the complaint stage, consult the city or provincial prosecution office corresponding to a legally supportable venue. Venue mistakes can delay or defeat a case.

5. Prepare the complaint-affidavit

The affidavit should set out, in chronological order:

The parties’ names and usable addresses;
The respondent’s connection to the account or publication;
The exact defamatory material;
The date, place, manner, and audience of publication;
How the complainant was identifiable;
When and how the material was discovered;
Facts showing malice or actual malice when required;
Facts supporting venue;
The evidence authenticating each attachment; and
The relief requested.

Attach the affidavits of witnesses and properly marked documentary or digital evidence. The affidavit must be sworn before a prosecutor or another officer authorized under the applicable rules. Current forms and office requirements should be confirmed with the receiving prosecution office; the DOJ provides an official Investigation Data Form and other forms.

6. File with the proper prosecution office

A report may first be made to the National Bureau of Investigation or the Philippine National Police Anti-Cybercrime Group when technical investigation, account attribution, or urgent evidence preservation is needed. A police or NBI report does not necessarily replace the sworn complaint required for prosecutorial action.

Because cyber libel carries a maximum imprisonment exceeding six years, it ordinarily undergoes preliminary investigation under the 2024 DOJ–National Prosecution Service Rules on Preliminary Investigations and Inquest Proceedings.

The prosecutor applies the standard of prima facie evidence with reasonable certainty of conviction. This requires evidence that appears admissible, credible, capable of preservation and presentation at trial, and sufficient—if left uncontroverted—to establish every element and the responsible person’s identity.

7. Participate in the preliminary investigation

If the complaint is sufficient to proceed, the prosecutor ordinarily issues a subpoena directing the respondent to submit a counter-affidavit and evidence. Under the 2024 rules, the scheduled filing date must generally give the respondent at least ten days after receipt of the subpoena and complete complaint papers. A prosecutor may allow only a limited extension for a meritorious reason under the applicable rule.

The complainant may be directed to clarify evidence, answer defenses, or participate in case build-up. The prosecutor then resolves whether to dismiss the complaint or file an Information in court. That determination is not yet a finding of guilt.

Any motion for reconsideration or petition for review must comply with the period and forum stated in the resolution and the current DOJ rules. Do not assume that an administrative review automatically suspends court proceedings or prescription.

How to respond if you are accused

1. Record the date and manner of service

Keep the envelope, receiving stamp, email headers, acknowledgment, subpoena, complaint-affidavit, and all attachments. The response period is short and is normally measured from receipt of a complete set of papers.

If attachments are missing or unreadable, document the problem and raise it immediately with the prosecutor. Do not simply wait for a corrected copy.

2. Preserve—not delete—the relevant evidence

Secure:

The original account and its access history;
The device allegedly used;
Drafts and unedited files;
The full conversation or thread;
Source documents and research notes;
Communications with editors, administrators, or other users;
Security notices or proof of account compromise;
Privacy and audience settings;
Evidence of corrections, retractions, or apologies; and
Records showing the publication and discovery dates.

Deleting a post may limit further harm, but deletion can also destroy evidence. Obtain advice first where practicable, preserve a complete forensic-quality copy, and never erase material to obstruct an investigation.

3. Do not retaliate online

Avoid threatening the complainant, recruiting followers to attack them, publishing their private information, or repeating the accusation. A later post may become separate evidence or a separate offense. Route necessary communication through counsel where possible.

4. Examine every element separately

A counter-affidavit should address, with supporting evidence:

Whether the words were defamatory in their full context;
Whether anyone other than the complainant received them;
Whether the complainant was identifiable;
Whether the respondent was the original author or publisher;
Whether the account or material was authenticated;
Whether the communication was privileged;
Whether truth, good motives, and justifiable ends can be proved;
Whether the complainant is a public officer or public figure and actual malice is required;
Whether the prosecution can prove venue; and
Whether the one-year period had expired before it was interrupted.

A bare denial is usually less useful than a specific, documented explanation. Conversely, do not submit speculative defenses or altered evidence.

5. Submit a sworn counter-affidavit on time

The counter-affidavit is the respondent’s principal opportunity to present the defense before a criminal Information is filed. It should respond paragraph by paragraph where appropriate and attach witness affidavits and authenticated records.

A motion to dismiss should not be used as a substitute for the required counter-affidavit unless the applicable rules and prosecutor permit it. Failure to respond may allow resolution on the complainant’s evidence alone.

6. Act promptly if an Information is filed

Once the prosecutor files an Information, the judge independently determines probable cause and may dismiss the case, issue a warrant, or issue other appropriate process. The accused should promptly:

Verify the case number, court, and charge;
Obtain counsel;
Determine whether a warrant has issued;
Arrange lawful bail when available and required;
Attend arraignment and all scheduled proceedings; and
Evaluate appropriate motions without delaying plea or trial deadlines.

Do not surrender money, personal data, or account credentials to anyone claiming that a case or warrant exists without verifying the information through the court or counsel.

Criminal and civil claims

A cyber-libel prosecution is brought in the name of the People of the Philippines. The complainant is an important witness and may seek civil liability arising from the offense, but does not personally control every prosecutorial or court decision.

When a criminal action is filed, the civil action arising from the offense is generally deemed instituted with it unless it was waived, reserved when legally allowed, or filed earlier. Article 33 of the Civil Code may also permit an independent civil action for defamation. The relationship among criminal liability, civil damages, reservation, prior filing, and prescription should be assessed before starting parallel cases.

Platform reporting, a demand for correction, or a request for removal may reduce ongoing harm, but these steps do not automatically commence a criminal action or stop prescription.

Common mistakes

Waiting for a platform to act while the one-year criminal period continues to run;
Keeping only a cropped screenshot without the URL, account details, context, or discovery evidence;
Treating every insult, criticism, or unfavorable review as libel;
Assuming truth alone always defeats criminal liability;
Suing a person merely because their name appears on an account;
Naming everyone who liked or shared a post without proof that they authored a new defamatory statement;
Filing in the complainant’s preferred city without facts establishing cybercrime venue;
Reposting the accusation while demanding that the original author remove it;
Editing files, deleting accounts, or factory-resetting devices;
Ignoring a prosecutor’s subpoena because no court case has yet been filed;
Filing a generic counter-affidavit without addressing publication, identification, malice, authorship, venue, and prescription; and
Assuming an apology, retraction, or deletion automatically ends criminal or civil exposure.

When legal help is urgent

Seek immediate assistance if:

The one-year period may expire soon;
Content or account records are being deleted;
The author used a fake or compromised account;
You received a subpoena, prosecutor’s resolution, Information, summons, or warrant;
The accusation concerns a public official, journalist, activist, business, or matter of public interest;
Several posts, authors, platforms, or jurisdictions are involved;
The publication also contains threats, intimate images, personal data, child-related material, or alleged gender-based online abuse;
Law enforcement wants access to a device or account;
A search, disclosure, interception, or cybercrime warrant is involved; or
Settlement discussions include payment, retraction, confidentiality, or withdrawal of complaints.

Other laws may apply alongside—or instead of—cyber libel. The exact words, relationship of the parties, medium, audience, and evidence determine the correct legal response.

FAQ

Is a Facebook post automatically cyber libel?

No. The prosecution must prove a defamatory imputation, publication, identification, the applicable form of malice, use of ICT, and the accused’s responsibility as author or publisher.

Can a private group-chat message qualify?

Yes, potentially. Publication may exist if at least one third person received the defamatory material. Privacy restrictions and the limited audience remain relevant to context, evidence, motive, and damages.

Can I be charged merely for sharing a post?

A bare Like or Share of another person’s post is not, by itself, punishable as aiding or abetting cyber libel under Disini. Adding a new defamatory caption or accusation may create a separate publication for which the writer could be treated as the original author.

Is a screenshot sufficient?

It may be evidence, but its weight depends on authenticity, completeness, and connection to the accused. Preserve the URL, profile information, surrounding thread, date and time, original device, and testimony of persons who saw the content.

Does deleting the post erase liability?

No. Prior publication may be proved through preserved copies and witnesses. Deletion, correction, retraction, and apology may be relevant to intent, mitigation, damages, or resolution, but do not automatically extinguish liability.

Does cyber libel prescribe after one year from posting?

Not necessarily. The current Supreme Court rule is one year from discovery by the offended party, authorities, or their agents. The posting date and discovery date may differ, and filing of the complaint or Information may interrupt prescription.

Can the accused go to prison?

Yes. The law allows imprisonment, a fine, or both. Courts may choose a fine alone in appropriate circumstances, but no accused should assume that imprisonment is unavailable.

Can the parties settle?

They may discuss apology, correction, removal, damages, or other lawful terms. However, cyber libel is a public offense, so a private settlement or affidavit of desistance does not automatically require the prosecutor or court to dismiss an existing criminal case. Any agreement should be reviewed carefully and must not involve coercion or unlawful consideration.

Official sources

This article provides general legal information, not legal advice or an attorney-client relationship. Outcomes depend on the precise words, documents, dates, parties, venue, and admissible evidence. Laws and procedures were checked against official sources current to September 16, 2026.