Quick answer

Cyber libel is committed when the author publishes through a computer system a malicious and defamatory imputation that identifies a person and is communicated to someone else. It is punishable under Section 4(c)(4) of the Cybercrime Prevention Act of 2012, together with Articles 353 and 355 of the Revised Penal Code.

To file a case, preserve the online evidence immediately, establish every element—including authorship, publication, identification and malice—and file a sworn complaint with the proper City or Provincial Prosecutor’s Office. Assistance from the NBI Cybercrime Division or PNP Anti-Cybercrime Group may be essential when the account holder is unknown or platform records must be obtained.

To defend a case, do not ignore the subpoena. Calendar its receipt, obtain the complete complaint and attachments, and submit a sworn counter-affidavit with all available defenses and supporting evidence on the date stated in the subpoena. Under the current DOJ rules, that date must give the respondent at least 10 calendar days from receipt.

Most importantly, cyber libel now prescribes in one year from discovery of the allegedly defamatory publication by the offended party, the authorities or their agents. The Supreme Court affirmed this rule and denied reconsideration with finality on April 8, 2026 in Causing v. People. Do not assume that merely reporting the post to a platform, the barangay or an investigative agency necessarily protects the deadline. Have a lawyer determine promptly where and how the complaint must be instituted.

What must be proved

A cyber-libel complaint should not be filed merely because a post is insulting, unfair or embarrassing. The prosecution must ultimately prove guilt beyond reasonable doubt. At the preliminary-investigation stage, the prosecutor applies the current DOJ standard of prima facie evidence with reasonable certainty of conviction.

The required matters generally include:

A defamatory imputation. The words, images, captions or other content must impute a crime, vice, defect, act, omission, condition, status or circumstance tending to cause dishonor, discredit or contempt.
Publication. At least one person other than the person defamed must have received, read, viewed or heard the material. A direct message seen only by the sender and the person criticized ordinarily lacks this element; a group chat or restricted post may still qualify if third persons received it.
Identification. The offended person must be named or reasonably identifiable from the words, images and surrounding circumstances. Naming a large, undefined group may not identify a particular member, while initials, a photograph, job title or contextual clues may be sufficient.
Malice. For a private complainant, a defamatory imputation is generally presumed malicious unless it falls within a recognized privilege or the circumstances show good intention and justifiable motive. Different constitutional standards apply to speech concerning public officials, public figures and public issues.
Use of a computer system or similar technology. The publication must have been made online or through information and communications technology.
Authorship or responsibility for the publication. Evidence must connect the respondent—not merely a display name or photograph—to the account and the particular post.

The Supreme Court summarized the traditional elements and the stricter “actual malice” rule for public figures in Disini v. Secretary of Justice.

Likes, shares and comments

In Disini, the Supreme Court upheld cyber libel as applied to the original author but invalidated aiding or abetting and attempted cyber libel because of their chilling effect on online speech. A person who merely receives a post and reacts to it is not automatically liable for cyber libel.

That does not make every repost or comment safe. Someone who writes a fresh defamatory caption, makes an independent defamatory accusation or presents another person’s allegation as their own may become the author of new content. Liability depends on the exact act and words, not the platform’s label for the action.

The one-year deadline

The governing period is one year from the date the offended party, the authorities or their agents discovered the allegedly libelous publication. Publication and discovery may occur on the same date, but they are not legally presumed to coincide merely because the post was public.

Article 91 of the Revised Penal Code provides that prescription is interrupted by the filing of the complaint or information. It may run again if the proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused. The period also does not run while the offender is absent from the Philippines. These details can be fact-sensitive.

Preserve proof of the discovery date, such as:

The message through which someone first sent the post to the offended person
The original email or notification, including metadata
A dated affidavit from the person who discovered and reported it
The complainant’s first reaction, reply, demand or platform report
Access logs or other records showing when the content was first viewed

Do not rely on the post remaining online to create a new one-year period. Whether an edit, repost or later publication constitutes a separate offense depends on the particular act and evidence.

How to file a cyber-libel complaint

1. Preserve the publication before seeking its removal

Capture the entire post and enough surrounding material to show its meaning. Preserve:

The full text, image, video or audio
The complete URL or other unique content identifier
The account name, username, profile URL and profile details
The date and time displayed, including the device’s time zone
Comments, captions, replies and linked material supplying context
Privacy or audience settings, if visible
A screen recording showing how the content was accessed
The original downloaded files, not only cropped screenshots
The device used to view or save the material
Messages, admissions or other evidence connecting the account to its operator
Names of people who personally saw the publication
Records of concrete harm, such as cancelled contracts, employment action or messages from customers

Keep an untouched master copy. Work from duplicates and record who collected, copied or transferred each file. Screenshots are useful, but a screenshot containing only selected words may not establish the URL, account, context, integrity or identity of the author.

Electronic evidence must be authenticated. The Rules on Electronic Evidence, whose coverage was extended to criminal cases, place importance on integrity, reliability and proof identifying the originator. The Supreme Court confirmed their application to criminal proceedings in People v. Enojas.

2. Identify the author lawfully

A profile photograph or account name alone may be inadequate. Useful evidence may include:

Admissions by the account holder
Messages sent from the same account
Consistent personal details known only to the respondent
Witness testimony about who operated the account
Linked telephone numbers, email addresses or other accounts obtained lawfully
Subscriber, traffic or device evidence obtained through lawful investigative processes

Do not hack an account, impersonate someone, steal a password or secretly access a private device. Subscriber and non-public platform records may require law-enforcement action and an appropriate cybercrime warrant.

The NBI and PNP are the law-enforcement agencies specifically tasked by Republic Act No. 10175 to investigate cybercrime. The NBI’s official procedure for computer-crime complaints includes complaint forms, sworn statements and submission or examination of relevant devices. The DOJ Office of Cybercrime also acts on cybercrime complaints and referrals.

An investigative report is not necessarily the same as instituting the criminal complaint for prescription purposes. Tell the investigator and your lawyer immediately when the one-year period may expire.

3. Check whether the statement is legally actionable

Before filing, evaluate:

The exact words, not a paraphrase
Their ordinary meaning and meaning in context
Whether they assert facts or recognizable opinion, satire or rhetorical exaggeration
Whether the complainant is actually identifiable
Who received the publication
Whether the content concerns a public official, public figure or public issue
Whether the statement came from an official proceeding or a good-faith report
Whether the respondent had a legal, moral or social duty to communicate privately
Whether the evidence proves who created the post
The discovery date, venue and prescriptive period

4. Prepare the sworn complaint and attachments

The complaint-affidavit should clearly state:

The complainant’s and respondent’s identifying information and addresses, insofar as known
The exact publication and its translation where necessary
When and how it was published
When and how it was discovered
Who saw or received it
Why it refers to the complainant
Why it is defamatory
Facts showing authorship and malice
Facts establishing the selected venue
The harm caused
A numbered list of supporting exhibits

Attach sworn affidavits from witnesses with personal knowledge and the electronic, documentary and other evidence needed to establish every element. The current 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings require evidence that is admissible, credible, capable of preservation and capable of presentation at trial. The Supreme Court upheld those rules in Meking v. Remulla.

Use the prosecution office’s current filing checklist, including its Investigation Data Form. Confirm required copies, accepted oath-taking arrangements and any authorized electronic-filing method directly with that office.

5. File in the proper place

Cybercrime cases fall within the jurisdiction of designated cybercrime Regional Trial Courts. Under Section 2.1 of the Rule on Cybercrime Warrants, the criminal action may be filed in the designated cybercrime court of the province or city:

Where the offense or any element was committed
Where any part of the computer system used was situated
Where damage to a natural or juridical person took place

The court where the action is first properly filed acquires jurisdiction to the exclusion of the others. The Supreme Court discussed this venue rule in Tieng v. People.

The complaint-affidavit is ordinarily filed first with the City or Provincial Prosecutor’s Office corresponding to a proper venue. Do not assume that the complainant may select any city where the post could be opened. The complaint should state concrete facts connecting the offense, computer system or damage to the chosen place.

Cyber libel’s penalty exceeds the limits of barangay authority, so prior Katarungang Pambarangay conciliation is generally not a prerequisite. A demand letter is also not a statutory prerequisite to filing, although a carefully drafted request for correction or takedown may sometimes be useful.

6. Participate in the preliminary investigation

If the complaint is sufficient, the investigating prosecutor issues a subpoena with the complaint and attachments. The respondent is directed to submit a sworn counter-affidavit and supporting evidence on the date set for the preliminary-investigation hearing.

The prosecutor may conduct a clarificatory hearing or require further affidavits when necessary. If the evidence meets the DOJ standard, an Information is filed in the proper court. A judge then independently determines whether probable cause exists for a warrant of arrest. Filing a complaint does not itself mean that the respondent is already guilty or will automatically be arrested.

A party adversely affected by the prosecutor’s resolution generally has 15 days from receipt to file a motion for reconsideration under the 2024 DOJ-NPS Rules. Because cyber libel is cognizable by the RTC, the applicable prosecutorial appeal is ordinarily to the Secretary of Justice. An appeal or motion at the DOJ does not automatically control court proceedings once an Information has been filed.

How to defend a cyber-libel complaint

Act immediately upon receiving a subpoena

Record the date, time and manner of service. Obtain every page of the complaint and its attachments. Under the 2024 DOJ-NPS Rules, the hearing date for submission of the counter-affidavit must allow at least 10 calendar days from receipt of the subpoena.

Extensions are not automatic and may be allowed only when the interests of justice require them, such as when counsel needs reasonable time to examine or verify material evidence. Do not depend on an extension request.

The counter-affidavit must be sworn before a prosecutor or another government official authorized to administer oaths, or, when they are unavailable, a notary public. Include witness affidavits and supporting documents. A bare motion to dismiss is not a substitute for the counter-affidavit; a verified motion containing the complete defenses may be treated as one. A motion for a bill of particulars is not allowed at this stage.

Address every element and procedural issue

Depending on the facts, defenses may include:

No defamatory imputation: The words do not reasonably accuse the complainant of a crime, vice, defect or discreditable condition.
No publication: No third person received the communication.
No identification: A reasonable reader could not identify the complainant.
No authorship: The prosecution cannot reliably connect the respondent to the account or post.
Altered or incomplete evidence: Cropping, missing context, inconsistent timestamps or unreliable collection undermines the exhibit’s integrity.
Privilege: The communication was made in the performance of a legal, moral or social duty, or was a fair and true good-faith report of a non-confidential official proceeding without improper commentary.
Public-interest speech: If the complainant is a public official or public figure, or the speech concerns a public issue, the prosecution may have to prove actual malice—knowledge of falsity or reckless disregard of whether the statement was false.
Fair comment: An opinion reasonably drawn from established facts concerning a matter of public interest may be protected. Merely labeling an accusation “opinion” does not protect an implied false factual claim.
Truth, good motives and justifiable ends: Truth is not automatically a complete defense. Article 361 generally also requires good motives and justifiable ends. Proof of a true imputation that is not a crime is subject to an additional statutory limitation, except when it concerns a government employee’s discharge of official duties.
Prescription: The complaint was instituted more than one year after discovery, subject to Article 91’s interruption and suspension rules.
Improper venue or lack of Philippine jurisdiction: The alleged conduct, system and damage lack the required territorial connection.
Non-retroactivity: A publication made before the Cybercrime Prevention Act became effective cannot be punished retroactively as cyber libel. The Supreme Court applied this rule to a 2011 Facebook post in Peñalosa v. Ocampo.

Privilege is usually qualified, not absolute. Excessive distribution, irrelevant personal attacks or proof of actual malice may defeat it.

Preserve the defense evidence

Before editing or deleting anything, preserve:

The complete post and account export
Drafts and source materials
Research notes and records of verification
Messages with sources
The complete conversation or thread
Audience and privacy settings
Account-security notices and login history
Evidence of hacking, impersonation or unauthorized access
Earlier publications showing when the complainant or authorities discovered the material
Proof of retraction, correction, apology or takedown
Documents supporting the truth of factual statements and the publisher’s good motives

A deletion, apology or correction does not automatically erase criminal liability, but it may matter when assessing intent, damages and the appropriate penalty. Do not fabricate records, pressure witnesses or ask anyone to delete evidence.

If an Information or warrant already exists

Obtain the case number and a certified or official copy of the Information and court orders. Engage counsel before making statements about the facts. Counsel can evaluate arraignment, bail, a motion to quash, reinvestigation, suppression of unlawfully obtained evidence and other remedies.

Cyber libel is bailable before conviction as a matter of right. If a warrant has issued, coordinate a lawful voluntary surrender and bail application through counsel instead of evading service. Prescription may be raised even after arraignment, but when the discovery date is disputed it normally requires evidence and cannot be resolved through unsupported assertions.

Possible penalties and civil liability

Section 6 of Republic Act No. 10175 raises the penalty for libel committed through information and communications technology by one degree. The possible imprisonment is prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years.

The Supreme Court held in People v. Soliman that the court may instead impose a fine ranging from ₱40,000 to ₱1,500,000, or impose both imprisonment and a fine, depending on the case. The Court also confirmed that Administrative Circular No. 08-2008, which expresses a preference for a fine in appropriate libel cases, applies to online libel. It does not abolish imprisonment or guarantee a fine-only sentence.

Civil liability arising from the offense is generally deemed included in the criminal case unless properly waived, reserved or previously filed separately. A separate civil action for defamation may also be available under Article 33 of the Civil Code. Damages are not automatic in a fixed amount; entitlement and amount depend on the pleadings and proof.

A withdrawal, settlement or affidavit of desistance may affect the civil dispute or the evidence available, but cyber libel is a public offense prosecuted in the name of the People. The complainant alone cannot guarantee dismissal after the State has taken over the prosecution.

Common mistakes

Filing because a post is offensive without proving all legal elements
Waiting because the post is still online
Treating a platform report, police blotter or demand letter as automatically interrupting prescription
Using cropped screenshots without URLs, account details or surrounding context
Assuming a profile name proves who operated the account
Failing to preserve proof of the discovery date
Filing wherever convenient without facts establishing venue
Publicly retaliating and creating a second potentially defamatory publication
Claiming that truth alone always defeats libel
Assuming “opinion,” “allegedly” or “according to my source” automatically provides immunity
Assuming every like or share is criminal, despite Disini
Ignoring a subpoena or filing only an unsworn denial
Omitting defenses and evidence from the counter-affidavit
Deleting an account before preserving potentially exculpatory records
Contacting the opposing party with threats, pressure or payment demands
Assuming a prosecutor’s dismissal, DOJ appeal or settlement automatically ends a court case already under judicial control

When legal help is urgent

Seek a Philippine lawyer immediately if:

The one-year period may expire within the next several weeks
The author uses an anonymous, fake or hacked account
Subscriber or platform data may soon be deleted
You received a subpoena, prosecutor’s resolution, Information or warrant
The post involves a public official, journalist, whistleblower or matter of public concern
Several people or publications may be charged
The publication was made outside the Philippines
Private messages, seized devices or platform records were obtained without consent or a warrant
The dispute also involves threats, extortion, doxxing, intimate images, child-safety concerns or physical danger
A settlement, retraction or public statement is being proposed

Qualified indigent accused may request assistance from the Public Attorney’s Office. The Integrated Bar of the Philippines also maintains legal-aid contacts.

Frequently asked questions

Is criticism of a government official cyber libel?

Not automatically. Public officials remain protected from defamatory falsehoods, but criticism concerning their official conduct receives wider constitutional protection. The prosecution must prove actual malice when that stricter standard applies. Personal accusations unrelated to public duties may be treated differently.

Is a private Facebook post or group-chat message covered?

It can be. “Publication” does not require a public setting or thousands of viewers; communication to at least one third person may be enough. Privacy settings remain relevant to who actually received the content, venue, discovery and proof.

Can I file against an anonymous account?

Possibly, but the person responsible must eventually be identified and linked to the publication through admissible evidence. Seek NBI or PNP cybercrime assistance quickly because non-public subscriber and traffic records may require legal process and may be retained only for limited periods.

Must I send a demand letter first?

No. A demand letter, request for correction or takedown may be strategically useful, but it is not a statutory prerequisite to a criminal cyber-libel complaint and should not be allowed to consume the one-year period.

Must the parties first go to the barangay?

Generally no. Section 408 of the Local Government Code excludes offenses punishable by imprisonment exceeding one year or a fine exceeding ₱5,000 from mandatory barangay conciliation. Cyber libel exceeds both limits.

Does deleting the post end the case?

No. Deletion may limit continuing exposure and may be relevant to mitigation, but it does not erase a publication that already occurred. Preserve the evidence before requesting or making any change.

Is truth always a defense?

No. For criminal libel, Article 361 generally requires both truth and proof that publication was made with good motives and for justifiable ends. Additional limits apply when the imputation concerns a non-criminal act or omission.

Can someone be charged under both ordinary libel and cyber libel for the same online publication?

The Supreme Court held in Disini that ordinary libel and cyber libel involving the identical publication are essentially the same offense; charging both for that same act would violate the prohibition against double jeopardy. Distinct publications or independently authored statements require separate factual analysis.

Does a complaint automatically result in arrest?

No. The prosecutor first determines whether the evidence warrants filing an Information. If an Information is filed, the judge independently evaluates probable cause before issuing a warrant or taking another action allowed by the Rules of Criminal Procedure.

How long does the respondent have to answer?

The subpoena must give the respondent at least 10 calendar days from receipt before the date set for submission of the counter-affidavit. Follow the actual subpoena and seek counsel immediately; an extension is discretionary, not automatic.

Official legal sources

This article provides general Philippine legal information, not legal advice or an attorney-client relationship. Outcomes depend on the exact words, context, parties, dates, documents, electronic evidence and procedural history. Sources and current rules were checked as of August 3, 2026.