Quick answer

A cyber libel case in the Philippines normally begins with a sworn complaint filed with the proper city or provincial prosecutor. The complainant must present evidence that the respondent originally authored or published an identifiable, defamatory, malicious statement through a computer system and communicated it to at least one person other than the person defamed.

A respondent should immediately preserve the complete post and its context, obtain counsel, and answer the prosecutor’s subpoena with a detailed counter-affidavit and supporting evidence. Possible defenses include lack of authorship or publication, failure to identify the complainant, absence of defamatory meaning or malice, qualified privilege, constitutionally protected criticism, truth under the conditions set by law, improper venue, and prescription.

Time is critical. As definitively confirmed by the Supreme Court En Banc in April 2026, cyber libel prescribes in one year from discovery of the allegedly defamatory material by the offended party, the authorities, or their agents—not automatically from the date it was posted. Filing the proper complaint or information interrupts prescription. A demand letter, platform report, police blotter, or informal negotiation should not be assumed to stop the criminal deadline. Causing v. People, G.R. No. 258524, April 8, 2026

What the prosecution must establish

Section 4(c)(4) of the Cybercrime Prevention Act applies the Revised Penal Code’s law on libel when the publication is made through a computer system or a similar technological means. The prosecution must establish, with the required degree of proof at each stage, that:

There was an imputation of a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose a natural or juridical person to contempt.
The person or entity allegedly defamed was identifiable, even if not expressly named.
The statement was published—meaning it was communicated to at least one third person.
The publication was malicious under the applicable rules.
The defamatory material was published through a computer system or information and communications technology.
The accused was responsible as the original author or publisher of the particular defamatory statement.

The words must be read as a whole and in their actual setting. Captions, images, hashtags, hyperlinks, emojis, earlier exchanges, translations, audience, and surrounding events may change what an ordinary reader would understand.

The governing provisions are Articles 353 to 362 of the Revised Penal Code and Sections 4(c)(4) and 6 of Republic Act No. 10175.

Likes, shares, and comments are treated differently

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as to the original author of the post, but declared it unconstitutional as applied to people who merely receive the post and react by liking, sharing, or making a simple responsive comment. The Court also invalidated liability for merely aiding or abetting cyber libel.

That protection is not unlimited. A comment, quote-post, caption, edited repost, or accompanying message that introduces a new defamatory accusation may itself be treated as an original publication. Liability therefore depends on what the person actually added, not merely on which platform button was used. Disini v. Secretary of Justice, G.R. No. 203335, February 11, 2014

Malice, privilege, truth, and public-interest speech

General rule on malice

Article 354 generally presumes malice from a defamatory imputation unless good intention and justifiable motive are shown. The presumption does not apply in the same way when the publication is privileged or when constitutional protections require proof of actual malice.

Qualifiedly privileged communications

Potentially privileged communications include:

A private communication made in the performance of a legal, moral, or social duty.
A fair and true report, made in good faith and without improper comments, of a nonconfidential judicial, legislative, or other official proceeding or of an official act.
Fair comment on matters of legitimate public interest, depending on its factual foundation and the circumstances.

Privilege is

Quick answer

To file a cyber libel case, preserve the complete online publication and evidence identifying its author, then file a sworn criminal complaint with the proper city or provincial prosecutor before the offense prescribes. Reporting to the NBI or PNP cybercrime unit can help identify an anonymous account and preserve provider data, but it does not necessarily replace filing the proper complaint.

To defend a case, do not ignore the prosecutor’s subpoena. Preserve the complete context, obtain counsel, and submit a detailed counter-affidavit by the date stated in the subpoena. Possible defenses include failure to prove authorship, publication, identifiability, defamatory meaning or malice; privileged communication; truth under the conditions provided by law; improper venue; and prescription.

Cyber libel currently prescribes in one year from discovery by the offended party, the authorities or their agents—not automatically from the posting date. In April 2026, the Supreme Court sitting en banc affirmed this rule with finality. Filing the proper complaint or information interrupts prescription. A demand letter, platform report or police blotter should not be assumed to do so. Causing v. People, G.R. No. 258524, April 8, 2026

Because both prescription and venue can turn on disputed facts, anyone close to the one-year deadline—or already served with a subpoena, warrant or court notice—should obtain Philippine counsel immediately.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act applies the Revised Penal Code’s law on libel to defamatory material published through a computer system or similar technology. A smartphone and an internet-connected social-media account fall within the law’s broad definitions of computers and computer systems. Republic Act No. 10175

The prosecution generally must establish:

A defamatory imputation. The statement imputes a crime, vice, defect, act, omission, condition, status or circumstance tending to dishonor, discredit or expose a natural or juridical person to contempt.
Publication. The statement was communicated to at least one person other than the person defamed.
Identifiability. The complainant was named or was sufficiently identifiable from the words, images, context or surrounding circumstances.
Malice. The applicable form of malice must be established. The rules differ when the communication is privileged or concerns a public official or public figure.
Use of a computer system or ICT. The publication was made online or through covered information and communications technology.
Responsibility of the accused. The evidence must connect the respondent to the original defamatory publication.

The entire post matters. Courts consider ordinary meaning, language, images, captions, hashtags, hyperlinks, surrounding discussion and the relationship of the parties. A statement does not become lawful merely because it is introduced with “allegedly,” “in my opinion” or a question mark. Conversely, criticism, satire, rhetorical exaggeration and an opinion that does not assert or imply a false defamatory fact may be constitutionally protected, depending on context.

Likes, shares and comments are treated differently

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as to the original author, but declared it unconstitutional as applied to people who merely receive a post and react through ordinary likes, comments or shares. The Court also invalidated liability for aiding or abetting cyber libel under Section 5 of the Act. Disini v. Secretary of Justice, G.R. No. 203335, February 11, 2014

That protection is not a license to write a new accusation. A comment, quote-post, edited repost or caption that creates an independently defamatory assertion may itself be treated as an original publication. Liability therefore depends on the exact words and what the person actually authored, not simply the platform button used.

The filing deadline

Criminal case

Cyber libel prescribes in one year from the date the alleged crime is actually discovered by the offended party, the authorities or their agents. A public post is not legally presumed to have been discovered on the day it was uploaded. Discovery is a factual matter that may be shown by messages, reactions, comments, complaints, threats of suit or other conduct demonstrating knowledge.

The period is interrupted by filing the complaint or information. It may run again if the proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused. Under Article 91 of the Revised Penal Code, prescription also does not run while the offender is absent from the Philippines. Revised Penal Code, Articles 90–91

Do not delay because:

The date of discovery may be disputed.
A report to a platform, barangay, employer, police desk or private organization may not interrupt criminal prescription.
An old post can present difficult questions about discovery, later edits and republication.
Identifying an anonymous author or securing provider data can take time.

Civil case

A separate civil action for defamation may be brought under Article 33 of the Civil Code and is proved by a preponderance of evidence rather than proof beyond reasonable doubt. Civil actions for defamation generally must be filed within one year from accrual, subject to rules on interruption and the particular cause of action. A written extrajudicial demand may interrupt civil prescription under Article 1155, but it should not be confused with interruption of criminal prescription. Civil Code, Articles 33, 1147 and 1155

The criminal and civil remedies must be coordinated carefully to avoid procedural conflicts or double recovery.

How to file a criminal complaint

1. Preserve the evidence before requesting deletion

Save more than a cropped screenshot. Preserve:

The exact URL or platform link.
Full-page screenshots showing the post, account name, date, time and surrounding thread.
The account’s profile page, username, unique handle and available profile details.
Images, videos, audio, captions, comments and linked material in their original quality.
Screen recordings showing how the post was accessed.
The post’s privacy or audience setting, if visible.
Messages or notifications showing when you first discovered it.
Names and affidavits of people who saw or received the post.
Prior communications relevant to motive, truth, privilege or identity.
Documents disproving the accusation and records of resulting harm.
Original devices and files, without editing their contents or metadata.

Keep at least two secure copies. Record who collected each item, when and how. Do not log into another person’s account, obtain passwords without authority or impersonate someone to gather evidence; unauthorized access can create separate criminal and evidentiary problems.

2. Determine whether all elements are supportable

Identify the precise words or images complained of. Explain:

What accusation they communicate.
Why it is defamatory in context.
How readers knew the statement referred to you.
Who other than you saw it.
Why the named respondent is the original author.
When and how you discovered it.
Why the communication is not protected or privileged.

If the material is in Filipino or another Philippine language, include the original text and an accurate translation while preserving idiom and context.

3. Seek investigative help when necessary

The NBI and PNP are the law-enforcement agencies responsible for cybercrime investigations. Their cybercrime units can document evidence, examine devices and seek lawful preservation or disclosure of subscriber and traffic data. Provider disclosure generally requires legal process; a screenshot alone may not establish who controlled an account.

Provider data can disappear. Republic Act No. 10175 establishes specific preservation periods and permits law enforcement to obtain relevant data through the required warrants and orders. Contact investigators promptly if the account is anonymous, deleted, compromised or apparently operated from abroad. NBI investigative assistance for victims of computer crimes

4. File in the proper place

Cybercrime cases are within the jurisdiction of the Regional Trial Court, including designated cybercrime courts. The criminal complaint normally begins with the appropriate city or provincial prosecutor, not by filing an information directly in court.

Article 360’s special venue rules for libel must also be observed:

For a private complainant, the action may generally be brought where the complainant actually resided when the offense was committed or where the material was printed and first published.
For a public officer holding office in Manila, the permitted venues are generally Manila or the place of printing and first publication.
For a public officer holding office outside Manila, venue may generally be where the officer held office or where the material was printed and first published.

For an internet publication, merely opening or reading the post in a particular city does not make that city the place of first publication. If first publication is relied upon, it must be alleged and supported with particularity. Improper venue can deprive the court of jurisdiction. Bonifacio v. RTC of Makati, G.R. No. 184800, May 5, 2010

Cross-border cases require special analysis. Republic Act No. 10175 provides Philippine jurisdiction in specified circumstances, including certain offenses by Filipino nationals, cases where an element occurred in the Philippines, use of a computer system wholly or partly situated here, or damage to a person who was in the Philippines. Jurisdiction does not eliminate the need to establish proper venue.

5. Prepare the complaint package

The prosecution office will ordinarily require:

Its investigation data form.
A notarized complaint-affidavit or sworn statement.
Witness affidavits.
Properly marked documentary and digital exhibits.
Valid identification and proof relevant to residence or official station.
Copies for the office and each respondent.
Applicable filing fees or proof supporting an exemption.

The complaint-affidavit should state facts based on personal knowledge, not conclusions or hearsay alone. It should identify the respondent, quote or reproduce the complete publication, establish every element, state the discovery date and explain venue. Confirm the current number of copies, accepted electronic formats, fees and filing method directly with the receiving prosecution office. The DOJ publishes a general preliminary-investigation filing checklist.

6. Participate in the preliminary investigation

Because cyber libel carries an imprisonment range extending to at least six years and one day, it is handled under the DOJ’s regular preliminary-investigation rules. The governing standard is prima facie evidence with reasonable certainty of conviction.

If the complaint is sufficient to proceed, the prosecutor issues a subpoena with the complaint and attachments. The respondent must be given at least ten days from receipt to prepare a counter-affidavit, although the actual filing date stated in the subpoena controls. The prosecutor may hold clarificatory proceedings and eventually recommend dismissal or filing of an information.

An aggrieved party may file a motion for reconsideration of the prosecutor’s resolution within 15 days from receipt. Appeals or petitions for review are governed by separate DOJ rules and strict requirements. Filing one does not automatically suspend a court case unless the proper relief is obtained. DOJ Department Circular No. 15, series of 2024

How to defend against a complaint

Act immediately upon receiving a subpoena

Note the date and manner of service. Obtain the complete complaint and every attachment. The hearing or filing date in the subpoena is not merely an invitation; missing it can cause the case to be resolved without your evidence.

A counter-affidavit must be sworn and supported by admissible evidence. General denials, social-media arguments and personal attacks on the complainant are poor substitutes for a point-by-point response.

Test each element

A defense should examine:

Authorship: Does reliable evidence connect you to the account and specific publication? Was the account hacked, spoofed or shared?
Original publication: Did you write the accusation, or merely receive or react to someone else’s post?
Publication: Was the communication seen by anyone other than the complainant?
Identifiability: Would a reasonable third person understand that the statement referred to the complainant?
Defamatory meaning: What does the complete text communicate in context?
Use of ICT: Was the alleged publication actually made through a covered computer system?
Malice: Is malice presumed, rebutted or required to be affirmatively proved?
Privilege: Was the communication made in the performance of a legal, moral or social duty, or as a fair and true good-faith report of a non-confidential official proceeding?
Truth and justification: Can the material facts be proved through competent evidence, and were the motives and ends legally justifiable?
Prescription: When did the complainant, authorities or their agents actually discover the post, and when was the proper complaint filed?
Venue: Does the complaint establish a venue permitted by Article 360?
Duplicative prosecution: Cyber libel and traditional libel cannot both be charged for the same identical publication in violation of double jeopardy principles.

Preserve drafts, source records, interview notes, official documents, messages, access logs and complete unedited context. Do not fabricate supporting records or ask witnesses to coordinate stories.

Understand malice and privilege

Ordinarily, Article 354 presumes a defamatory imputation malicious unless good intention and justifiable motive are shown. That presumption does not apply in the same way to qualifiedly privileged communications.

A private communication made in the performance of a legal, moral or social duty may be privileged if sent only to people with a corresponding interest. A fair and true report, made in good faith and without added defamatory comments, of a non-confidential judicial, legislative or official proceeding may also be privileged.

Statements concerning the official conduct of a public official, and protected commentary involving public figures or matters of public interest, may require proof of actual malice: knowledge of falsity or reckless disregard of whether the statement was false. Recklessness requires more than ordinary negligence; it can involve publishing despite serious doubts about truth. Privilege is generally qualified, not absolute, and can be defeated by proof of actual malice. Vasquez v. Court of Appeals, G.R. No. 118971, September 15, 1999

Truth is a qualified defense

Truth is important, but it is not automatically a complete defense to every criminal libel charge. Article 361 generally requires proof that the defamatory matter was true and published with good motives and for justifiable ends. It also limits when truth may be proved for imputations that do not constitute crimes, except for imputations against government employees concerning the discharge of official duties.

Use primary records and witnesses. Rumor, anonymous messages, “everyone knows,” or an unverified post usually does not prove truth.

If an information is filed in court

The RTC independently determines judicial probable cause and may issue a warrant or other process. Cyber libel is bailable before conviction, but the court determines the applicable bail and conditions.

Counsel should promptly assess:

Voluntary surrender and bail arrangements.
Whether a motion to quash is available and must be filed before plea.
Defects in the information, jurisdiction or venue.
Prescription and the evidence needed to establish discovery.
Pretrial admissions and stipulations.
Authentication and admissibility of digital evidence.
Witnesses and compulsory process for platform, device or discovery records.

A notice of appeal from a conviction generally must be filed within 15 days from promulgation or notice of judgment, subject to interruption by a timely motion for new trial or reconsideration. Do not wait for that period to expire while pursuing an informal settlement.

Possible penalties and civil exposure

Cyber libel is punishable one degree higher than traditional written libel. The statutory imprisonment range is prisión correccional in its maximum period to prisión mayor in its minimum period—four years, two months and one day to eight years.

A court may instead impose a fine. The Supreme Court has held that the current fine range for online libel is ₱40,000 to ₱1,500,000, or the court may impose both fine and imprisonment. The judiciary’s policy expresses a preference for a fine in appropriate libel cases, but imprisonment remains legally available and the result depends on the circumstances. People v. Soliman, G.R. No. 256700, April 25, 2023

A conviction can also carry civil liability. Even without a conviction, a separate civil defamation action may succeed under the lower civil standard of preponderance of evidence.

Common mistakes

Saving only a cropped screenshot with no URL, date, account or context.
Waiting for a platform investigation while the one-year criminal period runs.
Assuming a police report or demand letter interrupts criminal prescription.
Filing wherever the post happened to be read.
Naming every person who liked or shared the post without identifying an original defamatory statement.
Treating an anonymous account name as conclusive proof of the user’s identity.
Deleting or editing evidence before making reliable copies.
Replying publicly with new accusations.
Ignoring a subpoena because no court case has yet been filed.
Filing a counter-affidavit consisting only of denials.
Assuming that “opinion,” “allegedly” or truth alone guarantees acquittal.
Assuming an apology or deletion automatically ends criminal liability.
Attempting to access another person’s account without authority.

When legal help is urgent

Seek a Philippine criminal lawyer immediately if:

The one-year period is close to expiring.
The author is anonymous or provider data may be lost.
You have received a prosecutor’s subpoena, court summons or warrant.
The post accuses someone of a serious crime, sexual misconduct or corruption.
The complainant is a public official, public figure, journalist or corporation.
The publication was edited, reposted or distributed across several platforms.
Either party was abroad or the account, server or device has foreign connections.
A separate civil case, employment proceeding or administrative complaint is pending.
Police request access to a device, account or private messages.
There are threats, stalking, doxxing, intimate images or danger to personal safety in addition to defamation.

Qualified persons may inquire about representation through the Public Attorney’s Office or an Integrated Bar of the Philippines legal-aid office.

Frequently asked questions

Must the complainant first demand deletion or an apology?

No general demand is required before filing criminal cyber libel. A demand may support settlement or civil remedies, but it should be sent only after the evidence has been preserved and should not be allowed to consume the prescriptive period.

Does deleting the post erase liability?

No. Deletion does not undo an already completed publication. It may limit further harm and can be relevant to motive, damages or penalty, but it does not automatically dismiss a case.

Does an apology or retraction end the case?

Not automatically. The State prosecutes the criminal case once an information is filed. A sincere and prompt correction may affect the complainant’s position, damages or the court’s treatment of the case, but legal dismissal requires the proper prosecutorial or judicial action.

Is a like or ordinary share cyber libel?

Under Disini, people who merely receive and react to a post through ordinary likes, comments or shares cannot be punished as aiders or abettors of cyber libel. A person who adds a new defamatory accusation may become the original author of that separate statement.

Is a private group chat covered?

Potentially. Publication requires communication to a third person, not publication to the entire public. A message sent only to the person allegedly defamed lacks that element, but a group chat ordinarily includes third parties. Privilege and malice still depend on the purpose, recipients and content.

Is barangay conciliation required?

Generally no for the criminal cyber libel charge. The Katarungang Pambarangay system excludes offenses whose prescribed imprisonment exceeds one year or whose fine exceeds ₱5,000. Cyber libel exceeds both thresholds. Separate civil claims and other disputes should still be assessed individually. Local Government Code, Section 408

Can a case proceed against an anonymous account?

Investigation can begin, but the prosecution ultimately needs competent evidence identifying the responsible person. The NBI or PNP may seek lawful preservation and disclosure of subscriber, traffic or device evidence. Private parties should not attempt to obtain it through hacking, impersonation or coercion.

Can criminal and civil cases both be filed?

Yes, but their timing, venue and relationship are governed by special rules. Article 360 generally requires the criminal and civil libel actions to be handled by the court that first acquires jurisdiction, while Article 33 recognizes an independent civil action. Counsel should coordinate the remedies before filing either case.

Official legal sources

This article provides general Philippine legal information, not legal advice or an assessment of any particular post, complaint or defense. Applicable results depend on the exact publication, evidence, parties, discovery date and procedural history. Sources and current rules were checked as of August 3, 2026.