Quick answer

To file a cyber libel case in the Philippines, preserve the online material immediately, identify the original author, and submit a sworn complaint supported by admissible evidence to the proper city or provincial prosecutor’s office. The prosecution must establish every element of libel and show that it was committed through a computer system.

To defend a case, do not ignore a subpoena. Obtain the complete complaint, preserve the post and its context, and submit a sworn counter-affidavit by the deadline stated in the subpoena. Possible defenses include lack of authorship, identification, publication, defamatory meaning, or malice; privileged communication; truth published with good motives and justifiable ends; protected fair comment; prescription; and improper venue.

Time is critical. The Supreme Court has affirmed that cyber libel generally prescribes in one year from discovery by the offended party, the authorities, or their agents. The claimed discovery date—and the evidence proving or disputing it—can decide whether the case was filed on time.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 covers libel, as defined and penalized under the Revised Penal Code, when committed through a computer system or similar means.

A prosecutor ordinarily must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person to contempt.
Publication. At least one person other than the person defamed received or understood the statement.
Identification. The complainant was named or was reasonably identifiable from the words, images, context, or surrounding facts.
Malice. Malice may be presumed in an actionable defamatory publication unless a recognized privilege or other rule applies. In some cases—particularly speech involving public officials, public figures, or matters of public concern—the prosecution may have to prove actual malice.
Use of a computer system. The publication was made online or through information and communications technology.
Responsibility of the accused. Reliable evidence connects the respondent to the authorship or publication of the statement.

Cyber libel can arise from a Facebook post, public comment, blog, online article, video caption, email sent to third persons, group-chat message, or another digital publication. The medium alone does not make a statement libelous; the words, context, audience, identity of the speaker, identity of the subject, and available defenses all matter.

Pure insults, criticism, opinion, satire, rhetorical exaggeration, and factual allegations are not automatically treated alike. Courts examine the entire communication and how an ordinary reader would understand it. Merely labeling a factual accusation “opinion” does not necessarily protect it.

Who may be liable?

The principal target is ordinarily the original author of the defamatory online statement. In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the author but struck down the law’s aiding-or-abetting provision insofar as it applied to cyber libel.

A person is therefore not automatically criminally liable merely for:

liking or reacting to a post;
sharing or forwarding another person’s post;
agreeing with it; or
making a comment that does not itself create a new defamatory accusation.

However, a person who adds an original defamatory statement may be treated as the author of that new publication. Editors, account administrators, corporate officers, employees, page owners, and device owners are not automatically liable solely because of their title, access, or ownership. The evidence must connect the particular respondent to the actionable publication and the required mental element.

A cyber libel prosecution cannot lawfully punish an online statement made before the statute became effective. The date of the alleged publication should therefore be verified carefully.

The one-year deadline

In its 2023 decision and April 8, 2026 resolution in Causing v. People, G.R. No. 258524, the Supreme Court ruled that cyber libel prescribes in one year, applying Articles 90 and 91 of the Revised Penal Code.

The period is generally counted from discovery of the alleged cyber libel by:

the offended party;
the authorities; or
their agents.

Discovery is a factual issue. A complainant should be ready to prove when and how the publication was first discovered. A respondent may contest that date using earlier messages, notifications, replies, prior demands, screenshots, public engagement, or other records showing earlier knowledge.

The filing of the complaint with the prosecutor’s office generally interrupts the running of prescription. Do not assume that reporting a post to the platform, sending a demand letter, making a barangay report, or informally approaching a police officer has the same effect.

Deletion or continued online availability does not automatically restart the period every day. Reposts, edits, or later publications require fact-specific analysis; do not rely on them to revive an otherwise late complaint.

A separate civil action for defamation is also generally subject to a one-year prescriptive period under Article 1147 of the Civil Code. Because prescription issues are technical and potentially case-ending, obtain legal advice immediately if the first publication or discovery was close to a year ago.

Before filing: preserve reliable evidence

Online material can disappear within minutes. Preserve it before contacting the author or asking the platform to remove it.

Keep:

full-page screenshots showing the complete post, account name, profile link, date, time, reactions, comments, and surrounding context;
the exact URL or permalink;
a screen recording showing how the post was accessed;
the original electronic file, message, email, image, audio, or video;
visible account identifiers and relevant profile information;
copies of comments or messages showing that third persons saw and understood the post;
evidence identifying the complainant even if not expressly named;
prior exchanges that explain the context;
evidence of the date of discovery;
records connecting the respondent to the account;
demand letters, replies, corrections, apologies, or refusals;
evidence of harm, such as lost engagements, client communications, employment records, or treatment records; and
witness affidavits from people with personal knowledge.

Preserve original files and devices when possible. Do not crop away material that may change the meaning. Keep an untouched copy and make working copies for annotation. Note who captured each item, when it was captured, and from what device or account.

Screenshots can be challenged as altered, incomplete, or unauthenticated. The Rules on Electronic Evidence require electronic material to be authenticated through competent evidence. A witness who personally saw, received, downloaded, or captured the material should explain that process in a sworn affidavit.

Do not hack an account, guess passwords, impersonate another person, install spyware, or unlawfully record private communications to obtain proof. Evidence gathering can itself create criminal, civil, or privacy problems.

How to file a criminal complaint

1. Confirm that the statement satisfies every element

Write down the exact words complained of. Identify:

what specific accusation is defamatory;
why it refers to the complainant;
who received it;
when and where it was published;
when it was discovered;
why the respondent is believed to be the author; and
what evidence supports each point.

A complaint built only on conclusions such as “the post ruined my reputation” may be insufficient.

2. Determine the proper place of filing

Venue in criminal cases is jurisdictional. A complaint should ordinarily be filed with the prosecution office for a place where the offense or an essential element occurred. Online publication can create difficult questions involving the author’s location, the place of upload, the complainant’s residence or business, and the place where third persons accessed the material.

Do not choose a city solely because the post could theoretically be viewed there. State concrete venue facts in the complaint and support them with evidence. If the parties or relevant events are in different provinces—or the author is abroad—ask a lawyer or the prosecutor’s office to confirm the proper venue before filing.

3. Prepare the complaint-affidavit

The complaint-affidavit should be based on personal knowledge and should normally include:

the complete identities and available addresses of the parties;
the exact publication and its full context;
the account, platform, URL, date, and time;
facts showing identification and publication to third persons;
facts linking the respondent to the publication;
the discovery date and how discovery occurred;
venue facts;
the harm caused;
an explanation of each attachment; and
a certification that the statements are true based on personal knowledge or authentic records.

Attach sworn witness statements and properly marked supporting documents. Follow the current checklist, copy requirements, oath procedure, and filing instructions of the particular prosecution office. The DOJ publishes a general preliminary-investigation filing page, but local offices may issue additional administrative requirements.

4. File with the proper prosecution office

Cyber libel ordinarily undergoes preliminary investigation because its prescribed imprisonment exceeds six years at the upper end. Under the DOJ’s current rules, the prosecutor determines whether there is prima facie evidence with reasonable certainty of conviction before an Information is filed in court.

The complainant may first seek investigative help from:

the National Bureau of Investigation’s cybercrime investigators;
the Philippine National Police Anti-Cybercrime Group; or
the DOJ Office of Cybercrime.

An investigative report is useful, particularly when account attribution or preservation of platform data is required, but it does not replace the prosecutor’s determination.

Official contact details and reporting channels can change. Confirm them through the agencies’ official websites instead of sending sensitive evidence to an address copied from social media.

5. Participate in the preliminary investigation

If the complaint is sufficient, the prosecutor may issue a subpoena requiring the respondent to submit a counter-affidavit. The parties may be directed to provide additional evidence or attend a clarificatory hearing.

The prosecutor may:

dismiss the complaint;
require further case build-up;
find sufficient evidence and file an Information in court; or
take another action permitted by the applicable DOJ rules.

An adverse resolution may be subject to reconsideration or review, but the available remedy and deadline depend on the governing issuance and the wording and service date of the resolution. Act immediately upon receipt.

How to defend against a complaint

Do not ignore the subpoena

A subpoena from the prosecutor is not a conviction and does not by itself mean that a warrant of arrest has been issued. It is the respondent’s opportunity to answer under oath.

Under the regular 2024 DOJ-NPS preliminary-investigation rules, the subpoena should allow at least 10 days from receipt to submit a counter-affidavit. The exact due date stated in the subpoena controls unless lawfully changed. Seek an extension before the deadline if truly necessary; never assume it will be granted.

Obtain and examine the complete record

Confirm that you received:

the complaint-affidavit;
all witness affidavits;
every screenshot and electronic attachment;
the alleged URL and publication date;
evidence of authorship;
evidence of discovery; and
evidence supporting venue.

If material attachments are missing or unreadable, promptly place that fact on record.

Preserve the complete context

Do not delete, edit, deactivate, or fabricate material after receiving notice of a complaint. Preserve:

the complete conversation or thread;
drafts and source materials;
research notes and documents relied upon;
account-access logs and security alerts;
records of compromised access;
communications with editors or administrators;
the original publication date and any edit history;
the identities of people who had account access; and
evidence supporting truth, verification, public interest, or good faith.

Deleting a post is not an admission by itself, but deletion can destroy evidence needed for the defense. If immediate removal is appropriate to limit harm, first preserve a complete, verifiable copy and obtain legal advice.

Submit a fact-specific counter-affidavit

A counter-affidavit should answer the accusation paragraph by paragraph and attach admissible supporting proof. It may raise one or more of the following defenses where supported by the facts.

No authorship or reliable attribution

A profile name, photograph, device, IP address, or page-admin status may not by itself prove who authored a specific statement. Explain any hacked, cloned, spoofed, shared, or impersonated account with supporting reports, login records, device records, witnesses, and platform notices.

No defamatory imputation

The words may not accuse the complainant of a crime, vice, defect, or dishonorable conduct when read fairly and in full context. Quotation, satire, rhetorical language, questions, and criticism still require careful analysis; their labels are not conclusive.

The complainant was not identifiable

It is not enough that the complainant personally believes the post referred to them. The question includes whether recipients could reasonably identify the complainant from the words and surrounding circumstances.

No publication to a third person

A statement communicated only to the person allegedly defamed ordinarily lacks the publication element. Group messages, copied emails, public posts, or communications shown to another person may satisfy it.

Privileged communication

Article 354 of the Revised Penal Code recognizes qualified privileges, including a private communication made in the performance of a legal, moral, or social duty and a fair and true report of specified official proceedings or acts, made in good faith and without comments or remarks.

Privilege is not a blanket shield. Excessive publication, irrelevant accusations, knowledge of falsity, reckless disregard, or improper motive may defeat a qualified privilege.

Truth, good motives, and justifiable ends

Truth is not always a complete defense by itself. Article 361 generally requires proof of both the truth of the imputation and publication with good motives and for justifiable ends. Special statutory limits apply to proof concerning imputations that do not involve crimes, subject to the provision concerning government employees and their official duties.

Retain the original documents, recordings, public records, witnesses, and verification trail supporting the statement. Rumor, anonymous messages, and unsupported screenshots are weak substitutes for reliable proof.

Protected fair comment or criticism

Honest criticism on matters of public interest receives constitutional protection, particularly where it is based on true or privileged facts. But knowingly false factual accusations and statements made with reckless disregard for truth may fall outside that protection.

When the complainant is a public official or public figure and the statement concerns public conduct or a matter of public concern, the applicable actual-malice standard can be decisive. “Actual malice” in this setting concerns knowledge of falsity or reckless disregard for whether the statement was false; it is not merely anger, hostility, or harsh language.

Lack of malice

Evidence of careful verification, reliance on credible records, a request for comment, accurate quotation, prompt correction, limited distribution, or a legitimate duty may rebut malice. These facts should be documented, not merely asserted.

Prescription

Identify the earliest provable discovery by the complainant, authorities, or their agents. Compare it with the date the complaint was filed with the proper office. Attach messages, reactions, demands, prior reports, or other records showing earlier knowledge.

Improper venue or lack of jurisdictional facts

Challenge vague or unsupported claims that an essential element occurred in the chosen locality. Venue objections should be raised promptly and supported by facts.

What happens after an Information is filed?

If the prosecutor finds the required evidentiary basis, an Information may be filed in the proper Regional Trial Court. Courts designated to handle cybercrime matters may hear the case.

The judge independently determines probable cause for issuing a warrant of arrest. A prosecutor’s resolution does not compel the judge to issue one. Cyber libel is ordinarily bailable, but the amount and conditions are set by the court.

At trial, guilt must be proved beyond reasonable doubt. The prosecution must present admissible evidence establishing the publication, its meaning, the complainant’s identity, authorship, malice where required, the online medium, venue, and timely institution of the case.

Article 355 of the Revised Penal Code, as amended by Republic Act No. 10951, provides alternative penalties for traditional libel. Section 6 of the Cybercrime Prevention Act raises the prescribed penalty by one degree when the offense is committed through information and communications technology. Sentencing can depend on the charge, applicable penalty rules, mitigating or aggravating circumstances, and current jurisprudence. A court may also award civil damages if properly pleaded and proved.

The civil action arising from the offense is generally deemed instituted with the criminal case unless it was waived, reserved, or previously filed separately under Rule 111 of the Rules of Criminal Procedure.

Practical options short of trial

Depending on the facts and without surrendering legal rights, the parties may consider:

preserving the evidence followed by removal or correction;
a clear retraction or clarification;
an undertaking against republication;
a private settlement of civil claims; or
court-annexed processes if available and legally appropriate.

A private settlement does not automatically terminate a criminal prosecution once the State is involved. It also cannot erase evidence or require unlawful conduct. Any agreement should clearly address the publication, correction, confidentiality, releases, costs, and pending proceedings.

Avoid retaliatory posts, threats, coordinated harassment, publication of private information, or pressure on witnesses. These actions may weaken the case and create separate liability.

Common mistakes

Waiting for the one-year period to nearly expire.
Saving only a cropped screenshot without the URL, date, account, or context.
Naming every page administrator without evidence of personal participation.
Treating criticism or an offensive opinion as automatically criminal.
Assuming truth alone always defeats libel.
Assuming a public official can never sue.
Believing every like, share, or reaction is cyber libel.
Sending a demand before preserving the original publication.
Filing in a convenient city without facts supporting venue.
Ignoring a subpoena or relying on an informal denial.
Deleting the account or altering evidence after learning of the complaint.
Posting the complaint, subpoena, or counter-affidavit online and creating further defamatory publications.
Contacting or intimidating witnesses.
Assuming a platform report or barangay complaint stops prescription.
Relying on unofficial templates instead of the current requirements of the prosecution office.

When legal help is urgent

Consult a Philippine lawyer immediately if:

the alleged publication or discovery is approaching one year;
you received a subpoena, prosecutor’s resolution, Information, or warrant;
the account is anonymous, hacked, cloned, or based abroad;
several localities may claim venue;
the post concerns a public official, journalist, whistleblower, election, or government transaction;
confidential, intimate, or personal data was published;
there are related threats, stalking, extortion, identity theft, or unauthorized account access;
a child is involved;
the same statement has produced several complaints;
law-enforcement officers seek access to a device or account; or
removal, apology, or settlement is being proposed while evidence remains unpreserved.

A person who cannot afford private counsel may ask the Public Attorney’s Office about eligibility. Private respondents should seek counsel before surrendering devices, signing statements, or consenting to account searches.

Frequently asked questions

Can I file because a post is false and insulting?

Possibly, but falsity and offensiveness alone do not complete a cyber libel case. The publication must satisfy all legal elements, and privileges or constitutional protections may apply.

Is a private message cyber libel?

A message sent only to the person allegedly defamed generally lacks publication to a third person. A message sent to a group, copied to others, or later shown to another person may be different.

Is sharing a defamatory post automatically cyber libel?

No. Disini rejected aiding-or-abetting liability for ordinary likes, comments, and shares in relation to cyber libel. A user who adds a new defamatory accusation may nevertheless be liable as the author of that separate statement.

Can an anonymous account be charged?

Yes, if investigators obtain lawful and reliable evidence identifying the author. A username or screenshot alone may not prove identity.

Does deleting the post end the case?

No. Deletion does not erase a completed publication or automatically defeat preserved evidence. It may, however, limit further harm. Preserve the complete record before removing anything.

Does an apology prevent prosecution?

Not automatically. An apology, correction, or retraction may affect motive, damages, settlement, or sentencing, but it does not necessarily extinguish criminal liability.

Can both ordinary libel and cyber libel be charged for the same online statement?

The State cannot impose unconstitutional double punishment for the same libelous act. Disini invalidated Section 7 of the Cybercrime Prevention Act insofar as it allowed prosecution under both the cybercrime law and the Revised Penal Code for the same libel. Separate publications or distinct statements require separate analysis.

When does the one-year period begin?

Generally, from discovery by the offended party, the authorities, or their agents—not automatically from the publication date. The claimed discovery date must be supported by evidence and may be contested.

Can I file a civil case instead?

A person may consider an independent civil action for defamation, ordinarily subject to a one-year period, or civil liability associated with the criminal case. The appropriate remedy depends on timing, evidence, desired relief, and any prior filing or reservation.

Will filing a complaint immediately produce an arrest warrant?

No. A prosecutor first evaluates the complaint. If an Information is filed, the judge independently determines probable cause and whether to issue a warrant.

Official sources

This article provides general legal information, not legal advice or an attorney-client relationship. Cyber libel outcomes depend on the precise words, context, evidence, dates, venue, and procedural history. Official sources and current procedures were checked as of September 15, 2026.