Quick answer

Cyber libel is not established merely because an online statement is offensive, embarrassing, or false. The prosecution must prove a defamatory imputation, publication to at least one person other than the complainant, identification of the person defamed, malice, use of a computer system, and the accused’s responsibility as the original author.

A complainant ordinarily starts by filing a sworn complaint and supporting evidence with the proper City or Provincial Prosecution Office. The prosecutor—not the complainant—decides whether to file an Information in the Regional Trial Court. A respondent who receives a subpoena should immediately prepare a sworn counter-affidavit; missing the stated deadline can result in the complaint being resolved on the complainant’s evidence alone.

Most importantly, cyber libel generally prescribes in one year from its discovery by the offended party, the authorities, or their agents. The Supreme Court reaffirmed this rule with finality on April 8, 2026. A demand letter, barangay complaint, platform report, or informal police report should not be assumed to stop the one-year period.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the publication is made through a computer system or similar technology. This includes posts or messages made through smartphones, computers, websites, social-media services, email, and comparable digital systems.

The prosecution must establish the following:

Requirement	What must be shown
Defamatory imputation	The statement imputes a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose a person to contempt.
Publication	At least one person other than the person defamed received, read, or saw the statement. A public post is not required; a group chat, email, or restricted post may be enough.
Identification	The complainant was named or was identifiable from the words, images, context, relationships, or surrounding circumstances.
Malice	The applicable form of malice must be proved or legally presumed, subject to constitutional protections and recognized privileges.
Use of ICT	The publication was made through a computer system or information and communications technology.
Original authorship	The respondent authored or caused the publication of the particular defamatory content charged. Account ownership cannot simply be assumed from a username or profile photograph.

The statement must be assessed as a whole and in its actual context. Quotation marks, emojis, memes, edited photographs, insinuations, questions, and captions can carry defamatory meaning, but not every harsh opinion, joke, criticism, or insult necessarily satisfies all the legal elements.

Who can be held liable?

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as constitutional with respect to the original author, but declared the provision unconstitutional as applied to people who merely receive a post and react to it. The Court also invalidated the Cybercrime Prevention Act’s general provisions on aiding or abetting insofar as they apply to cyber libel.

This does not give blanket immunity to everyone who shares or comments. A person who adds a new defamatory caption, accusation, comment, or altered image may become the original author of that new content. Whether a repost is merely passive or constitutes a new defamatory publication depends on exactly what the person added or caused to be published.

The same online publication cannot constitutionally be charged both as ordinary libel under the Revised Penal Code and as cyber libel under Section 4(c)(4) when the two charges punish the same act. Disini treated that double charging as contrary to the protection against double jeopardy.

Statements that may be protected or defensible

Privileged communications

Article 354 of the Revised Penal Code recognizes two categories of qualifiedly privileged communication:

A private communication made in the performance of a legal, moral, or social duty.
A fair and true report, made in good faith and without added comments or remarks, of a non-confidential official proceeding, official statement, or act performed by a public officer in the exercise of official duties.

Privilege is not automatic merely because a post concerns a complaint, court case, government document, workplace issue, or public controversy. Excessive circulation, inaccurate reporting, unrelated personal attacks, or proof of actual malice may defeat a qualified privilege.

Public officials, public figures, and public issues

When the complainant is a public official or public figure and the statement concerns a matter to which the heightened constitutional protection applies, the prosecution must prove actual malice: knowledge that the statement was false or reckless disregard of whether it was false.

Reckless disregard requires more than ordinary carelessness. The evidence must support a finding that the author was highly aware of probable falsity or entertained serious doubts about the statement’s truth. The complainant’s status and the connection between the statement and the public issue are fact-sensitive questions.

Opinion and fair comment

A pure opinion that does not assert or imply a provably defamatory fact may be protected. Calling a factual accusation an “opinion,” however, does not make it immune. Courts consider whether an ordinary reader would understand the statement as reporting facts, implying undisclosed facts, or merely expressing evaluative comment based on disclosed information.

Truth, good motives, and justifiable ends

Truth is not invariably a complete defense by itself. Under Article 361 of the Revised Penal Code, acquittal generally requires proof both that the defamatory matter was true and that it was published with good motives and for justifiable ends. Special rules apply to imputations involving government employees and the discharge of their official duties.

A respondent relying on truth should preserve the source documents and witnesses that existed when the publication was made. Unsupported reliance on rumor, anonymous screenshots, or “everyone already knew” is dangerous.

The one-year deadline

The controlling rule is now clear: cyber libel prescribes in one year from discovery by the offended party, the authorities, or their agents.

In Causing v. People, the Supreme Court held that cyber libel remains libel for purposes of Articles 90 and 91 of the Revised Penal Code. Its heavier penalty does not extend prescription to 12 or 15 years. On April 8, 2026, the Court denied the motions for partial reconsideration with finality.

The important points are:

The period begins upon actual discovery, not automatically on the date the content was posted.
A public privacy setting does not create a legal presumption that the complainant immediately saw the post.
Discovery may be proved through a reaction, comment, message, demand letter, threat to sue, report, witness testimony, or other conduct showing knowledge.
Filing the complaint or Information interrupts prescription. Use the proper prosecution channel and obtain a dated receiving copy.
If proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused, the period may begin running again under Article 91.
The period does not run while the offender is absent from the Philippines, subject to the application of Article 91.

Because the discovery date and interruption of prescription can be contested, both sides should preserve messages, emails, letters, platform activity, and other evidence showing when the publication was first discovered.

How to preserve online evidence

Screenshots are useful, but screenshots alone may not prove authorship, integrity, publication, or context. The Rules on Electronic Evidence place the burden of authenticating a private electronic document on the party offering it.

Before requesting removal or responding publicly, preserve:

The complete post, message, article, video, or image—not only the allegedly defamatory sentence.
The visible account name, unique account or profile link, username, and available account identifiers.
The full URL, date, time, time zone, privacy or audience setting, and visible reaction, comment, and share counts.
The surrounding thread, earlier posts, replies, quoted material, and later edits or corrections.
Screen recordings showing how the content was accessed.
Downloaded copies of images, videos, audio, attachments, and available metadata.
The device and account through which the content was viewed.
Names and sworn accounts of people who independently saw the publication.
Messages showing when the complainant or authorities first learned of it.
Records proving harm, such as lost work, cancelled transactions, customer messages, medical expenses, or other measurable consequences.
More than one backup, with the original files kept unchanged.

Do not crop away context, alter filenames or timestamps, recreate a deleted page, access another person’s account without authority, or pretend to be someone else to obtain private data.

Platform subscriber information and non-public account records ordinarily require lawful investigative or judicial process. Under Republic Act No. 10175, law-enforcement authorities may require specified data to be preserved for six months, with a possible extension, while disclosure and examination generally require the appropriate warrant or court authority. If an account is anonymous or likely to disappear, contact a cybercrime investigator promptly.

How to file a complaint

1. Check prescription and venue first

Write down:

The exact date and time of publication.
The date and circumstances of discovery.
The author’s known location and the device or computer system involved.
Where the complainant was located and where the reputational damage occurred.
Whether the complainant was a private person or public officer at the time.

Cybercrime venue can be based on where the offense or an element occurred, where a part of the computer system used was situated, or where damage occurred, under the Rule on Cybercrime Warrants. Libel-specific venue rules under Article 360, as amended by Republic Act No. 4363, may also affect the proper place of filing.

Venue is jurisdictional in a criminal case. A complaint or Information must allege the facts supporting the chosen venue with particularity. Mere accessibility of a webpage in a city is not always sufficient. Obtain legal advice before filing if the post, author, server, complainant, and alleged damage are in different places.

2. Prepare a sworn complaint-affidavit

The affidavit should state facts within the complainant’s personal knowledge, including:

The parties’ full names and known addresses.
The exact words, images, or material complained of.
Where and how the content was published.
Why the material referred to or identified the complainant.
Who else saw or received it.
Why the imputation was defamatory.
The facts supporting malice, where relevant.
The date and manner of discovery.
Facts establishing proper venue.
The evidence linking the respondent to the account and publication.
The harm suffered and the relief requested.

Attach the electronic evidence, witness affidavits, source records, and an organized index of annexes. The complaint and supporting affidavits must be properly sworn before an authorized officer.

The DOJ’s current filing checklist for preliminary-investigation complaints includes an Investigation Data Form, complaint-affidavit or sworn statement, witness affidavits, and supporting documents. Confirm the current number of copies, identification requirements, office hours, and accepted filing method with the particular prosecution office.

3. File with the proper prosecution office

File with the City or Provincial Prosecution Office that has territorial authority over the case. Obtain a stamped receiving copy showing the date and time of filing.

The 2024 DOJ-NPS rules permit electronic filing and virtual proceedings as alternatives, but availability and implementation may differ by office. Do not assume that sending an ordinary email completes filing unless the prosecution office has confirmed the authorized address and requirements.

An NBI or DOJ cybercrime report can assist investigation, especially when authorship is disputed or the account is anonymous. The NBI provides investigative assistance for victims of computer crimes and an online complaint page. The DOJ Office of Cybercrime also receives cybercrime complaints and referrals.

A law-enforcement report is not a substitute for ensuring that a formal, timely complaint reaches the proper prosecution office.

4. Participate in the preliminary investigation

Under DOJ Department Circular No. 15, series of 2024, the prosecutor determines whether the evidence establishes a prima facie case with reasonable certainty of conviction. The evidence should be admissible, credible, capable of preservation, and sufficient to establish every element and the identity of the responsible person if left uncontradicted.

The prosecutor may:

Dismiss the complaint after evaluation.
Issue a subpoena and require a counter-affidavit.
Conduct a physical or virtual clarificatory hearing.
Require reply or rejoinder affidavits when clarification is necessary.
Recommend filing an Information in the Regional Trial Court.

The Supreme Court upheld these DOJ rules in Meking v. Remulla.

5. Act promptly on the resolution

An aggrieved party may file a motion for reconsideration within 15 days from receipt of the prosecutor’s resolution under Department Circular No. 15. A further petition for review is governed by the applicable DOJ appeal rules.

If an Information has already been filed in court, a DOJ review does not automatically suspend the criminal proceedings. Immediate legal assistance is necessary to determine whether a motion to suspend or defer court proceedings should also be filed.

Is barangay conciliation required?

Ordinarily, no. Section 408 of the Local Government Code excludes offenses punishable by imprisonment exceeding one year or a fine exceeding ₱5,000 from mandatory Katarungang Pambarangay proceedings. Cyber libel exceeds both thresholds.

The parties may still discuss settlement voluntarily, but a barangay complaint should not be treated as a substitute for a timely filing with the proper prosecution office.

How to respond if you are accused

Preserve first; do not fight online

Save the demand letter, subpoena, complaint, annexes, envelope, delivery record, and the exact date of receipt. Preserve the complete online content and account records before changing or deleting anything.

Do not publish an angry rebuttal, threaten the complainant, contact witnesses to influence their accounts, fabricate documents, or ask someone to alter platform data. Any correction, apology, clarification, or takedown should be considered with counsel because it may reduce harm but may also be characterized as an admission if poorly drafted.

Calendar the subpoena deadline

The current DOJ procedure directs the respondent to submit the counter-affidavit on the date stated in the subpoena, which must ordinarily allow at least 10 days from receipt. Extensions are exceptional and generally require an interest-of-justice ground, such as obtaining counsel, examining voluminous records, or researching a genuinely technical issue. Never assume an extension will be granted.

If the respondent does not file despite proper service, the prosecutor may resolve the complaint using the complainant’s evidence alone.

Prepare a complete counter-affidavit

The counter-affidavit should respond to each alleged element and attach the evidence supporting the defense. Possible issues include:

The respondent did not own or control the account.
The account was hacked, cloned, spoofed, or impersonated.
The screenshot is altered, incomplete, unauthenticated, or missing context.
The respondent was not the original author of the charged content.
No third person received the statement.
The complainant was not reasonably identifiable.
The words did not make a defamatory factual imputation when read in context.
The communication was privileged.
The complainant was a public official or public figure and actual malice is not supported.
The statement was true and published with good motives and for justifiable ends.
The offense had already prescribed.
Venue was improperly laid.
The same act was impermissibly charged as both ordinary and cyber libel.

Preserve research notes, source documents, drafts, communications with sources, account-security alerts, login histories, device records, privacy settings, and contemporaneous messages showing purpose and state of mind. Do not rely on a bare denial when objective evidence is available.

A motion to dismiss generally cannot replace a counter-affidavit. Under the current DOJ rules, a verified motion containing the respondent’s defenses may instead be treated as the counter-affidavit. A comprehensive sworn response is usually safer than a technical pleading that leaves factual allegations unanswered.

If an Information or warrant has been issued

Once an Information is filed, the Regional Trial Court independently determines probable cause for an arrest warrant. If there is a warrant, do not evade it. A lawyer can verify the warrant, coordinate lawful surrender when appropriate, and arrange an application for bail.

Cyber libel is not punishable by reclusion perpetua or life imprisonment, so bail is generally a matter of right before conviction, although the court sets the amount and conditions. Exercise the right to remain silent and the right to competent, independent counsel during custodial questioning.

Penalties and civil exposure

The prescribed imprisonment for cyber libel is one degree higher than ordinary written libel: prisión correccional in its maximum period to prisión mayor in its minimum period, or four years, two months and one day to eight years.

The Supreme Court held in People v. Soliman that a court may impose a fine instead of imprisonment when justified. Following Republic Act No. 10951 and the rule on increasing fines by one degree, the prescribed fine for cyber libel is ₱40,000 to ₱1,500,000. The court may impose imprisonment, a fine, or both, depending on the circumstances.

A fine-only sentence is not guaranteed. The Supreme Court’s policy favoring consideration of fines in appropriate libel cases does not remove imprisonment as a lawful option.

Civil damages may also be pursued. Under Rule 111, the civil action arising from the offense is generally deemed instituted with the criminal case unless it is waived, reserved, or filed earlier. Defamation may also support an independent civil action under Article 33 of the Civil Code. Separate civil filing, reservation, consolidation, venue, and prescription should be assessed before taking action because the choices can affect later proceedings.

An apology, settlement, or affidavit of desistance may influence the complainant, prosecutor, or court but does not automatically erase a public criminal case once instituted.

Common mistakes

Assuming every false or insulting online statement is automatically cyber libel.
Waiting for a demand letter before checking the one-year prescriptive period.
Treating a barangay complaint, platform report, or informal police blotter as sufficient filing.
Filing in a convenient city without facts establishing proper venue.
Submitting cropped screenshots with no URL, date, context, or authentication evidence.
Naming an account holder without reliable proof of authorship or control.
Assuming that truth alone always defeats criminal liability.
Assuming a “private” group chat cannot amount to publication.
Believing that every liker, passive sharer, or recipient is criminally liable.
Ignoring a prosecutor’s subpoena or using a motion to dismiss as a substitute for a sworn factual response.
Posting accusations, admissions, threats, or settlement discussions while the case is pending.
Deleting or altering material before preserving an accurate copy.
Assuming that deleting a post automatically ends criminal or civil exposure.

When legal help is urgent

Consult a Philippine lawyer immediately when:

The one-year period is close to expiring.
The author is anonymous or platform data may soon disappear.
A subpoena sets a counter-affidavit or hearing date.
A prosecutor’s resolution has been received and the 15-day reconsideration period is running.
An Information, summons, hold-departure order, search warrant, or arrest warrant has been issued.
The case involves a journalist, public official, public figure, confidential source, corporate account, or publication managed by several people.
The online material also involves threats, stalking, doxxing, intimate images, child sexual-abuse material, extortion, identity theft, or unlawful account access, which may constitute separate and more urgent offenses.

Frequently asked questions

Is a demand or request for retraction required before filing?

No. A prior demand, notice, or request for retraction is not an element of cyber libel. It may be useful for stopping further harm or proving discovery, but it can also establish the date from which prescription is measured.

Does deleting the post prevent a case?

No. Deletion does not erase a completed publication or copies already preserved. Prompt deletion, correction, or apology may be relevant to damages, malice, or sentencing, but its effect depends on the facts.

Can a person be charged merely for liking or reacting?

Not for merely receiving and reacting to another person’s post. Disini declared cyber-libel liability unconstitutional as applied to such passive recipients. A new defamatory comment, caption, or altered repost may be treated differently.

Can a private message be cyber libel?

A message seen only by the person defamed lacks publication to a third person. A message sent to another person, a group chat, or several recipients may satisfy publication. A private communication may also be qualifiedly privileged when made in the performance of a legal, moral, or social duty, unless the privilege is abused.

Is an old post automatically prescribed?

No. The controlling one-year period generally runs from discovery, not necessarily publication. The actual discovery date must be proved from the surrounding evidence.

What if the account is fake or anonymous?

Preserve the profile, URL, account identifiers, full content, and all communications. Report promptly to the NBI Cybercrime Division or another authorized cybercrime investigator. Subscriber, traffic, and content data must be obtained through lawful preservation, disclosure, or warrant procedures.

Can the complainant file directly in court?

The complainant ordinarily files a complaint-affidavit for preliminary investigation with the proper prosecution office. If the evidence meets the required standard, the prosecutor prepares and files the Information in the Regional Trial Court.

Is a lawyer legally required?

A person may execute and file a complaint-affidavit without private counsel, but legal assistance is strongly advisable. Cyber libel carries possible imprisonment, has a short prescriptive period, and involves technical rules on venue, privilege, authorship, electronic evidence, and preliminary investigation.

Official legal sources

This article provides general legal information, not legal advice or an assessment of any particular post, complaint, or defense. Outcomes depend on the exact words, audience, authorship evidence, dates, venue facts, documents, and procedural history. Philippine law and official procedures were checked through July 30, 2026.