How to File or Defend a Cyber Libel Case

Quick answer

A cyber libel case may be filed when someone publishes an identifiable person’s defamatory imputation through a computer system or similar digital means, with the legally required malice. The prosecution must prove every element and that the respondent was the original author—not merely someone who received, liked, shared, or briefly reacted to another person’s post.

Act quickly. The Supreme Court has definitively ruled that cyber libel prescribes in one year from its actual discovery by the offended party, the authorities, or their agents. A public post does not automatically create presumed or constructive discovery. Filing the criminal complaint with the proper prosecution office interrupts prescription, but the discovery date and filing date should be documented carefully. See Causing v. People and Article 91 of the Revised Penal Code.

A complaint normally begins with a sworn complaint-affidavit and supporting evidence filed with the proper City or Provincial Prosecutor’s Office. If you receive a subpoena, do not ignore it: under the current DOJ rules, the hearing date for submission of the counter-affidavit must give the respondent at least 10 calendar days from receipt of the subpoena and complaint. Extensions are exceptional, not automatic.

What counts as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the publication is made through a computer system or similar technology.

The prosecution must establish:

  1. A defamatory imputation. The statement attributes a crime, vice, defect, discreditable act, condition, status, or circumstance tending to dishonor, discredit, or expose a natural or juridical person to contempt.

  2. Publication. The statement was communicated to at least one person other than the person defamed. A message sent only to the subject ordinarily lacks publication; a post, group chat, email copied to others, public video, or similar communication may satisfy it.

  3. Identification. The offended person must be named or sufficiently identifiable from the words and surrounding circumstances. Naming no one is not necessarily a defense if readers could reasonably determine who was being discussed.

  4. Malice. For a private offended party, a defamatory imputation is generally presumed malicious unless good intention and a justifiable motive are shown. Different constitutional standards apply to statements about public officials or public figures.

  5. Use of a computer system or similar digital means.

  6. Authorship and responsibility. The evidence must connect the respondent to the particular post or digital publication.

The entire statement and its context matter. A harsh insult, exaggeration, joke, opinion, criticism, or satire is not automatically libelous, but simply labeling an accusation “opinion” will not protect it if it reasonably communicates a false, defamatory assertion of fact.

Who can be held liable

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author, but declared it unconstitutional as applied to people who merely receive a post and react to it. The Court also invalidated aiding or abetting liability in relation to cyber libel.

Accordingly:

  • Merely liking, sharing, reposting, or expressing agreement with someone else’s defamatory post does not, by itself, make a person the original author of that post.
  • A person who adds a new defamatory accusation in a comment, caption, quote-post, video, or message may be treated as the original author of that new publication.
  • Responsibility involving editors, publishers, business managers, employers, or organizations can raise separate questions under Article 360 of the Revised Penal Code and must be assessed from the actual editorial role, publication process, and evidence. Do not assume that a job title alone proves or defeats liability.

The one-year deadline

Cyber libel prescribes in one year, not 12 or 15 years. The Supreme Court abandoned the contrary doctrine in its 2023 Causing decision and denied reconsideration with finality in April 2026.

The one-year period runs from the day the allegedly libelous material was actually discovered by the offended party, the authorities, or their agents. The mere fact that a post was publicly accessible does not create an automatic presumption that the offended party saw it immediately.

The discovery date is a factual question. Evidence may include:

  • The date someone sent the post to the offended party;
  • The offended party’s first screenshot, reply, reaction, or report;
  • A demand letter or message referring to the post;
  • A witness who informed the offended party;
  • A platform notification or email; and
  • Earlier conduct showing knowledge of the publication.

The filing of a complaint with the prosecution office interrupts prescription. The Supreme Court has confirmed that filing before the prosecutor is sufficient for this purpose in People v. Consebido. Do not wait until the final days: questions about the proper venue, incomplete affidavits, rejected electronic submissions, holidays, or filing defects can become decisive.

A separate civil action for defamation is also generally subject to a one-year period under Article 1147 of the Civil Code. Its exact starting point, interruption, and relationship with a criminal case require case-specific advice.

Where the case should be filed

Cyber libel cases are tried by a designated Regional Trial Court acting as a cybercrime court. Under Section 2.1 of the Supreme Court’s Rule on Cybercrime Warrants, venue may lie in the province or city:

  • Where the offense or any of its elements was committed;
  • Where any part of the computer system used was situated; or
  • Where any of the damage to a natural or juridical person occurred.

The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of the others. The complaint should allege concrete venue facts—not merely state a conclusion that the complainant “suffered damage” somewhere.

Because digital publications can involve several locations, determine venue with counsel before filing. Filing in the wrong place can delay the case and may create prescription problems.

How to file a complaint

1. Test the facts against every element

Write down the exact words or images complained of and examine them in full context. Identify:

  • What precise accusation is allegedly defamatory;
  • Who understood it to refer to the complainant;
  • Who other than the complainant received or saw it;
  • Why the respondent is believed to be the original author;
  • When and how the publication was discovered;
  • What computer system or platform was used; and
  • Which facts establish the proposed venue.

A complaint based only on hurt feelings, disagreement, embarrassment, or criticism will not necessarily establish cyber libel.

2. Preserve the publication properly

Before asking for removal or blocking the account, preserve:

  • Full-page screenshots showing the complete post, URL, account name, date, time, captions, images, and relevant comments;
  • A screen recording showing how the post is accessed from the account or page;
  • The full conversation or thread, not selected excerpts;
  • Original downloaded files, photographs, audio, or video and their available metadata;
  • The account’s profile page, unique account or page identifier, and public details;
  • Any visible privacy or audience setting;
  • Messages or notifications showing when the post was discovered;
  • Names and contact details of people who independently saw it; and
  • Copies stored in at least two secure locations.

Keep the original device and do not edit the files. Record who captured each item, when, on what device, and how. Under the Rules on Electronic Evidence, the party offering an electronic document must prove its authenticity, integrity, and reliability. A cropped screenshot without context, a typed transcript, or an unidentified printout may carry little weight.

Do not hack an account, impersonate another person, obtain passwords without authority, or secretly intercept private communications. Illegally obtained material may be excluded and may expose the collector to separate liability.

3. Seek investigative assistance if attribution is uncertain

A username, photograph, or display name does not conclusively establish who controlled an account when the post was made. Where necessary, approach the appropriate cybercrime law-enforcement unit for lawful case build-up.

Service-provider information can disappear. Under the Cybercrime Prevention Act and the Rule on Cybercrime Warrants, law enforcement may require preservation and may seek judicial authority for disclosure, interception, search, seizure, or examination of computer data. A private complainant cannot compel a platform to disclose protected subscriber or content data merely by sending a demand.

4. Prepare a complete complaint-affidavit

The sworn complaint should state facts within the complainant’s personal knowledge and ordinarily include:

  • The parties’ complete names and known addresses;
  • The exact defamatory words, images, or recording;
  • The full context and an accurate translation where necessary;
  • The date and manner of publication;
  • The date and circumstances of discovery;
  • The identity of third persons who saw or received it;
  • The basis for identifying the respondent as the original author;
  • The facts establishing malice or, where required, actual malice;
  • The computer system or digital platform used;
  • Specific facts establishing venue; and
  • A numbered list of attached evidence.

Attach sworn witness affidavits and properly marked exhibits. Include source documents proving or disproving the underlying accusation where relevant. Follow the receiving office’s current checklist for the investigation data form, copies, electronic media, service on other parties, and filing fees. Do not assume that emailing documents, submitting a platform report, or filing a police blotter alone institutes the criminal complaint.

5. File with the proper prosecution office

File with the City or Provincial Prosecutor’s Office corresponding to the legally supportable venue. Obtain a stamped receiving copy, official docket number, receipt, and written confirmation of any accepted electronic filing.

The current 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings require prima facie evidence with reasonable certainty of conviction. The evidence, if uncontroverted, must be admissible, credible, preservable, and capable of establishing every element and the respondent’s identity. The Supreme Court upheld this standard in Meking v. Remulla.

6. Participate in the preliminary investigation

If the prosecutor finds grounds to proceed, the respondent receives a subpoena with the complaint and attachments. The respondent is directed to submit a sworn counter-affidavit and supporting evidence on the scheduled date, which must be at least 10 calendar days after receipt.

The prosecutor may:

  • Consider the case submitted for resolution;
  • Conduct an in-person or virtual clarificatory hearing; or
  • Require limited further affidavits when necessary.

The prosecutor does not determine guilt beyond reasonable doubt. The question is whether the evidence meets the DOJ’s threshold for filing an Information in court.

7. Address civil damages deliberately

Civil liability arising from the alleged offense is generally deemed included in the criminal action unless the offended party waives it, reserves the right to file separately, or filed a civil action first. A separate civil case can affect venue, prescription, costs, and case strategy. Moral, exemplary, or actual damages are not automatic; they must have a legal and evidentiary basis.

How to defend a complaint

Act immediately upon receiving a subpoena

Record the exact date and manner of receipt. Obtain and review the complete complaint, every attachment, and any object or digital evidence identified by the complainant.

Under the 2024 DOJ-NPS Rules:

  • The submission date must be at least 10 calendar days after receipt of the subpoena and complaint.
  • A motion to dismiss generally cannot replace the counter-affidavit. A verified motion containing the defenses may instead be treated as the counter-affidavit.
  • An extension may be granted only when the interests of justice require it, such as the need to obtain counsel or examine voluminous or technical records, and an allowed extension may not exceed 10 days.
  • Failure to respond without justification may cause the case to be resolved on the complainant’s evidence alone.

A counter-affidavit is sworn evidence, not an informal letter. Avoid unsupported denials. Address the elements, attach admissible proof, and provide affidavits from witnesses with personal knowledge.

Preserve defense evidence

Keep:

  • The original device and account data;
  • Drafts, version history, and the complete post or conversation;
  • Source documents, interview notes, official records, and links used;
  • Communications showing verification efforts;
  • Evidence of the intended audience and privacy settings;
  • Proof that someone else controlled or accessed the account, if genuinely applicable;
  • Records showing the complainant’s earlier discovery;
  • Material establishing good faith, duty, public interest, or justifiable motive; and
  • Any correction, clarification, or retraction, including its date and reach.

Do not delete the account, wipe the device, fabricate messages, coach witnesses, or edit old posts to change their apparent meaning. Do not retaliate against or pressure the complainant.

Defenses that may apply

The available defenses depend on the exact words, audience, subject, documents, and manner of publication.

No defamatory imputation

Read in full context and according to its ordinary meaning, the statement may be criticism, rhetorical exaggeration, satire, or opinion rather than an accusation tending to dishonor or discredit. Context is essential.

No publication

A statement communicated only to the person concerned ordinarily lacks the required publication to a third person. This defense fails if someone else received, read, heard, or was copied on the communication.

The complainant was not identifiable

The prosecution must show that readers could identify the complainant. A vague statement about an undefined group may be insufficient, depending on the group’s size, language, and circumstances.

The respondent was not the original author

The complainant must reliably connect the respondent to the publication. A profile name or screenshot alone may not prove account control and authorship. Under Disini, merely receiving, liking, sharing, or reacting to another person’s post is not enough—but a new defamatory accusation added by the respondent may be treated as an original publication.

Privileged communication

Article 354 recognizes qualified privilege for:

  • A private communication made in the performance of a legal, moral, or social duty; and
  • A fair and true report, made in good faith and without comments or remarks, of non-confidential judicial, legislative, or other official proceedings, official statements, or acts of public officers in the exercise of their functions.

The privilege is not a license for unnecessary publication, personal attacks, exaggeration, or knowingly false claims. The communication’s audience, purpose, scope, wording, and good faith matter.

Public official, public figure, or public-interest speech

When the offended party is a public official or public figure, the prosecution must prove actual malice: knowledge that the statement was false or reckless disregard of whether it was false. Recklessness requires more than ordinary or even gross negligence; evidence must support a high degree of awareness of probable falsity or serious doubts about the statement’s truth.

The public status of the person and the connection between the statement and a matter of public concern are fact-sensitive. Not everything said about a public employee, celebrity, candidate, or businessperson automatically receives heightened protection.

Truth, good motives, and justifiable ends

Truth alone is not always a complete defense. Under Article 361, acquittal requires that the matter be true and that it was published with good motives and for justifiable ends.

Proof of truth is admissible when the imputation concerns a crime. For non-criminal acts or omissions, the Code limits proof of truth to imputations against government employees concerning the discharge of official duties. This technical rule should be applied with counsel to the precise charge.

Absence of malice

For qualifiedly privileged communications, public-figure cases, and other protected contexts, the prosecution may have to prove actual malice. For a private offended party, malice is generally presumed from a defamatory imputation, but the respondent may present good intention and a justifiable motive.

Prescription

Cyber libel prescribes one year from actual discovery. The defense may challenge the complainant’s claimed discovery date through earlier reactions, messages, reports, demands, witness testimony, or other conduct showing prior knowledge.

Defective venue or insufficient allegations

The Information must allege facts showing a valid cybercrime venue and every essential element. A venue objection should be raised promptly. After an Information is filed, certain objections—including prescription, lack of jurisdiction, or failure to charge an offense—may be raised through appropriate court remedies, often before arraignment.

No retroactive application or impermissible duplicate prosecution

Penal laws cannot generally be applied retroactively to conduct that was not criminal when performed. Whether a later edit, upload, or republication constitutes a new publication depends on the proven facts and applicable doctrine.

The same defamatory material cannot be charged simultaneously as ordinary libel and cyber libel as though they were separate offenses. Disini held that doing so for the same act violates the prohibition against double jeopardy.

After the prosecutor issues a resolution

An aggrieved party may file a motion for reconsideration within 15 days from receipt of the resolution. A petition for review may also be available under the applicable DOJ appeal rules; for an RTC-cognizable cyber libel case, review is generally directed to the Secretary of Justice. The appeal period is ordinarily short, and the filing requirements are strict.

If an Information has already been filed in court, a DOJ appeal does not automatically stop the court proceedings. The required motion to suspend proceedings must be filed with the trial court. Counsel should also calendar arraignment, bail, and any deadline for a motion to quash or other remedy.

Once the Information is filed:

  • The RTC judge independently evaluates probable cause for issuing a warrant of arrest;
  • An arrest warrant is not an automatic consequence of merely filing a prosecutor’s complaint;
  • Cyber libel is ordinarily bailable before conviction;
  • The accused must be arraigned and given the opportunity to plead;
  • The prosecution must ultimately prove guilt beyond reasonable doubt; and
  • The accused may present defenses, cross-examine witnesses, and challenge the authenticity and admissibility of electronic evidence.

Possible penalties

For offenses committed after the relevant amendment under Republic Act No. 10951, Section 6 of the Cybercrime Prevention Act raises the penalty for online libel by one degree.

The possible imprisonment range is generally prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years, subject to sentencing rules, modifying circumstances, and the Indeterminate Sentence Law.

In People v. Soliman, the Supreme Court held that the alternative fine for online libel ranges from ₱40,000 to ₱1,500,000. The court may impose imprisonment, a fine, or both. The Supreme Court’s rule of preference for a fine in appropriate libel cases does not abolish imprisonment; the sentencing court retains discretion based on the circumstances.

Civil damages may be awarded in addition to the criminal penalty if properly pleaded and proved.

Common mistakes

  • Waiting because the post remains online, despite the one-year period running from discovery;
  • Treating a police report, platform report, or demand letter as the criminal complaint that interrupts prescription;
  • Filing in a convenient but legally unsupported venue;
  • Submitting cropped screenshots without the URL, date, account details, full context, or authenticating witness;
  • Assuming a display name proves who operated the account;
  • Charging everyone who liked or shared a post despite the Disini ruling;
  • Assuming truth alone always defeats libel;
  • Assuming “opinion,” “allegedly,” a question mark, or a disclaimer automatically prevents liability;
  • Ignoring public-figure, privilege, or actual-malice rules;
  • Filing a motion to dismiss instead of a sworn counter-affidavit;
  • Missing the subpoena date or the 15-day reconsideration period;
  • Deleting evidence, wiping devices, or editing the disputed publication;
  • Posting attacks or admissions about the pending case; and
  • Assuming an affidavit of desistance automatically ends the prosecution. A criminal case is prosecuted in the name of the People, although a settlement, correction, apology, or desistance may affect the case in legally limited ways.

When legal help is urgent

Consult a Philippine lawyer immediately if:

  • The one-year prescription deadline is approaching;
  • The author is anonymous and service-provider data may disappear;
  • You received a prosecutor’s subpoena, summons, warrant, or court notice;
  • Law enforcement asks to search, seize, unlock, or examine a device;
  • The publication concerns a journalist, public official, election, official proceeding, whistleblower report, workplace complaint, or confidential communication;
  • Several people, companies, editors, or administrators are being accused;
  • The post was edited, deleted, mirrored, or republished;
  • The publication or platform involves another country;
  • There are related threats, stalking, doxxing, sexual material, extortion, or identity theft; or
  • A civil case, injunction, employment case, administrative complaint, or data-privacy issue is also being considered.

A person being questioned by law enforcement has constitutional rights to remain silent and to competent, independent counsel. Do not give passwords, sign a statement, consent to a search, or surrender a device without understanding the legal basis and consequences.

FAQ

Is a demand letter required before filing?

No general rule makes a demand, retraction request, or cease-and-desist letter an element of cyber libel. A demand may be useful for correction or settlement, but it can also become evidence of discovery and affect strategy.

Can I file against an anonymous account?

A complaint may be possible, but the evidence must ultimately identify the responsible person. Prompt lawful preservation and investigative assistance are important because private parties cannot compel platforms to disclose protected data on demand.

Is sharing a defamatory post cyber libel?

Not automatically. Disini protects people who merely receive and react to another person’s post. Liability may arise if the sharer adds a new defamatory accusation and becomes the original author of that new content.

Is a private group chat covered?

It can be. Publication requires communication to someone other than the person defamed; it does not require an audience of thousands. Privilege may still apply if the message was made in good faith, to proper recipients, and in the performance of a legal, moral, or social duty.

Can a true accusation still be libelous?

Yes. Under Article 361, truth must generally be accompanied by good motives and justifiable ends, and the admissibility of proof of truth is subject to statutory limits.

Does deleting or apologizing erase liability?

No. Deletion, correction, or apology does not automatically extinguish a completed offense. It may preserve relationships, limit further harm, or affect damages and sentencing, but deleting before preserving evidence can damage either side’s case.

Will a complaint automatically produce an arrest warrant?

No. The prosecutor first evaluates whether an Information should be filed. If it is filed, the judge independently determines probable cause for a warrant. The accused should nevertheless address bail and court appearance requirements promptly.

Can the complainant recover damages without a conviction?

Potential civil remedies may exist, but the legal basis, prescription period, venue, burden of proof, and effect of the criminal case differ. A civil claim is not automatically successful merely because the publication was offensive or harmful.

Key official sources

This article provides general Philippine legal information, not legal advice or an attorney-client relationship. Outcomes depend on the exact publication, evidence, dates, venue, parties, and procedural history. Authorities and procedures were checked through July 30, 2026.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.