Quick answer

To file a cyber libel case in the Philippines, preserve the online material and its technical context, identify the original author, prepare a sworn complaint supported by admissible evidence, and file it promptly with the proper prosecution office. As a rule, the criminal complaint must show a defamatory imputation, publication to another person, identification of the complainant, malice, and use of a computer system or information and communications technology.

To defend a case, do not ignore a subpoena, warrant, or court notice. Secure the complete post and surrounding conversation, determine who actually authored it, examine whether every element is supported, and raise applicable defenses such as lack of identification or publication, absence of malice, privileged communication, fair comment, truth accompanied by good motives and justifiable ends where the law requires them, prescription, or improper venue.

A critical current rule is that cyber libel prescribes in one year from discovery of the alleged defamatory material by the offended party, the authorities, or their agents. Publication online does not automatically create a presumption that the offended party discovered the post that day. Because the discovery date is often disputed and must be proved, neither side should rely on publication date alone. The Supreme Court confirmed these rules in its April 8, 2026 resolution in Causing v. People.

What cyber libel means

Cyber libel is libel committed through a computer system or another similar technological means. Section 4(c)(4) of the Cybercrime Prevention Act of 2012 incorporates the law on libel under Articles 353 and 355 of the Revised Penal Code.

The Supreme Court has explained that cyber libel is not an entirely separate defamatory act invented by Republic Act No. 10175. It is libel committed through information and communications technology, with a higher possible penalty because of the means used.

A post is not criminal merely because it is insulting, embarrassing, inaccurate, harsh, or unpopular. The prosecution must establish every element of the offense beyond reasonable doubt at trial.

What must be proved

A cyber libel complaint generally requires evidence of all the following:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a natural or juridical person to contempt.
Publication. At least one person other than the person defamed received, read, viewed, or otherwise perceived the statement. A purely private message sent only to the person concerned may lack publication, although forwarding it to others can change the analysis.
Identification. The complainant must be identifiable from the words, images, context, or surrounding circumstances. A name is not always necessary, but readers must reasonably be able to understand who was being referred to. A vague criticism of an unidentifiable group may not satisfy this element.
Malice. Malice is generally presumed from a defamatory imputation unless the communication is privileged or another rule applies. In cases involving public officials, public figures, matters of public concern, or privileged communications, the prosecution may have to prove actual malice—that the speaker knew the statement was false or acted with reckless disregard for whether it was false.
Authorship and participation. The evidence must connect the respondent to the creation or publication of the material. Account ownership alone may not conclusively prove who made a particular post, especially where hacking, impersonation, shared access, or fabricated screenshots is credibly raised.
Use of a computer system or ICT. The publication must have been made through the internet, social media, email, a website, messaging technology, or another computer-based system covered by the law.

The exact words matter. So do the full thread, audience, privacy setting, date, platform, attached media, and events surrounding the publication.

Who can be held liable

The Supreme Court upheld cyber-libel liability as applying to the original author of the online post, not merely to people who receive it and react to it. A simple “like,” emoji reaction, or similar passive response should not automatically make the user an author of the libelous statement. This limitation appears in Disini v. Secretary of Justice and the implementing rules of Republic Act No. 10175.

That does not give blanket immunity to someone who writes a new defamatory caption, deliberately republishes the accusation as their own, edits it, or otherwise creates a separate actionable publication. Liability depends on the person’s actual words and conduct, not the platform’s label for the action.

Editors, page administrators, employers, website operators, and account owners are not automatically criminally liable solely because of their position. The evidence must establish their legally relevant personal participation and the required state of mind.

Before filing: preserve reliable evidence

Online material can be deleted, edited, made private, or stripped of context. Preserve it before demanding removal, but obtain evidence lawfully.

Keep:

Full-page screenshots showing the account name, complete text, date and time, reactions, comments, and visible URL
A screen recording showing how the content is reached from the account or page
The direct URL, username, account identifier, page name, group name, and platform
The complete thread and preceding or following posts—not only the most damaging sentence
Original downloaded photographs, videos, audio, emails, or messages
The device on which the material was received, where practicable
Names and affidavits of people who independently saw or received the material
Messages showing when and how the complainant or authorities first discovered the post
Evidence connecting the account and publication to the suspected author
Evidence of harm, such as lost work, cancelled contracts, client messages, medical records, or business records
Any correction, apology, takedown request, response, or refusal
Platform acknowledgments, data-download records, and preservation-request confirmations

Do not crop away information that may affect meaning. Do not edit files, add annotations to the only copy, log into another person’s account without authority, guess passwords, or impersonate someone to obtain evidence. Keep an untouched original and work from duplicates.

A screenshot is useful but may be challenged as incomplete, altered, or unauthenticated. The Rules on Electronic Evidence require a proper basis for treating an electronic document as authentic. A lawyer may recommend affidavits, metadata, witness testimony, a forensic examination, or lawful requests for provider data depending on the dispute.

How to file a criminal complaint

1. Have the legal elements assessed

Before accusing someone under oath, separate provable facts from conclusions. Ask:

What exact words are allegedly defamatory?
What do those words mean in their full context?
Who is identified?
Who received or viewed them?
Who created the post?
What evidence connects that person to it?
When did the complainant, authorities, or their agents first discover it?
Is the communication privileged?
Does it involve a public official, public figure, or matter of public concern?
Is there reliable proof of falsity and malice?
Where did an element occur, where was the computer system situated, and where did the damage take place?

Cyber libel carries serious criminal and civil consequences. Legal review before filing can prevent a defective complaint or a sworn statement that overclaims what the evidence proves.

2. Prepare the complaint-affidavit and supporting affidavits

The complaint-affidavit should ordinarily state facts based on personal knowledge, including:

The identities and addresses of the parties, if known
The exact publication complained of
Its platform, URL, date, audience, and context
How the complainant is identifiable
How and when third persons received it
Why the respondent is believed to be the author
When and how the material was discovered
Why the imputation is allegedly false or malicious
The place or places relevant to venue
The evidence attached to each material allegation

Witnesses with personal knowledge should execute their own affidavits. Attach legible, organized exhibits and identify each one in the affidavit. Sworn submissions must be truthful; suppressing context or making knowingly false statements can create separate legal problems.

3. File with the proper prosecution office

A criminal complaint ordinarily begins with the Office of the City or Provincial Prosecutor that has authority over the proper venue. The NBI Cybercrime Division or the PNP Anti-Cybercrime Group may assist with investigation and preservation of digital evidence, but reporting to an investigative agency is not always the same as properly instituting the complaint for preliminary investigation.

Under the venue rule applied to offenses in Sections 4 and 5 of Republic Act No. 10175, the criminal action belongs in the designated cybercrime court of the province or city:

Where the offense or any of its elements was committed;
Where any part of the computer system used was situated; or
Where damage to a natural or juridical person took place.

The court in which the criminal action is first properly filed acquires jurisdiction to the exclusion of the others. Venue is a jurisdictional matter in criminal cases and should be supported by facts, not merely selected for convenience. The Supreme Court discussed this rule in Lee v. People.

Ask the prosecution office for its current filing checklist, number of copies, accepted submission method, and requirements under the current DOJ-NPS rules. Do not assume that sending an email, making a police report, submitting a platform complaint, or executing a barangay blotter preserves the criminal case.

4. Participate in preliminary investigation

The prosecutor evaluates whether the governing evidentiary threshold is met for filing an Information in court. The respondent must be given an opportunity to answer through a counter-affidavit and evidence in accordance with the applicable rules and lawful notices.

The prosecutor may dismiss the complaint or find a sufficient basis to file an Information. Available review or reconsideration procedures are deadline-sensitive and depend on the issuing office and the governing DOJ rules. Read the resolution and notice of service immediately.

5. Prepare for the court case

Once an Information is filed in the proper Regional Trial Court designated to hear cybercrime cases, the court independently evaluates matters within its authority. Proceedings may include judicial determination of probable cause, issuance of process, arraignment, pre-trial, trial, and judgment.

The civil action for damages arising from the offense is generally deemed instituted with the criminal case unless it is waived, reserved, or previously filed, subject to the Rules of Criminal Procedure. Separate civil claims have their own requirements and prescription issues, so obtain advice before choosing a route.

The one-year prescriptive period

The Supreme Court’s controlling 2026 ruling in Causing v. People holds that cyber libel prescribes in one year under Articles 90 and 91 of the Revised Penal Code.

The period begins when the alleged crime is discovered by the offended party, the authorities, or their agents, not automatically when the material was uploaded. The Court rejected a general presumption that a public Facebook post is discovered upon posting. Social-media access varies with privacy settings, account access, internet access, and other facts.

This produces two important practical rules:

A complainant should document the actual date and circumstances of discovery and file without delay.
A respondent may contest the alleged discovery date with evidence showing earlier actual discovery by the complainant, authorities, or their agents.

Article 91 also governs interruption and resumption of prescription. Whether a particular filing interrupted the period can depend on the nature, date, office, and legal sufficiency of the proceeding. Do not wait until the last day or assume that a demand letter, police report, barangay record, or platform report stopped the clock.

Deleting a post does not necessarily erase liability or preserved copies. Conversely, leaving an old post accessible does not automatically prove a fresh offense every day. Any alleged republication must be analyzed from the specific later act, content, authorship, and applicable law.

How to respond if you are accused

Do not ignore the notice

Record when and how you received the subpoena, complaint, prosecutor’s resolution, warrant, Information, or court order. The deadline stated in the official notice and current governing rules matters. Engage Philippine criminal counsel promptly, especially if an Information has been filed or arrest is possible.

Verify suspicious messages directly with the named government office. Scammers sometimes imitate investigators or lawyers and demand immediate payment.

Preserve the complete record

Do not delete the account, reset devices, erase conversations, coach witnesses, or fabricate explanations. Preserve:

The original post and drafts
The whole conversation or thread
Source documents used in preparing the statement
Research notes and communications with sources
Account-login and security records
Evidence of hacking, impersonation, or shared access
The original file and metadata
Privacy and audience settings
Corrections, clarifications, or apologies
Evidence showing when the complainant or authorities knew about the material
Communications showing the purpose and intended recipient of a private statement

A voluntary correction or apology may be relevant to strategy or damages, but it is not an automatic dismissal. Obtain advice before making new public statements that may be treated as admissions or republication.

Prepare a fact-based counter-affidavit

Answer each essential allegation with admissible evidence. Potential issues include:

The statement is not defamatory when read as a whole.
It is rhetorical hyperbole, an opinion, or fair comment rather than a provably false assertion of fact.
The complainant is not identifiable.
No third person received the statement.
The respondent did not author or publish it.
The account or material was fabricated, altered, hacked, or impersonated.
The communication is privileged.
The prosecution cannot prove the required malice.
The statement is true and was made with good motives and for justifiable ends where those conditions apply.
The complaint was filed after prescription had run.
The chosen venue is not supported by the facts.
The evidence is unauthenticated, incomplete, unlawfully obtained, or lacks necessary context.

Do not submit a bare denial if records can support the defense. Equally, do not attach private or sensitive material indiscriminately; disclosure may create privacy, confidentiality, or safety issues.

Important defenses and exceptions

Privileged communications

Article 354 of the Revised Penal Code recognizes qualifiedly privileged communications, including:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments or remarks, of qualifying official proceedings or acts described by the law.

Privilege is fact-specific. A duty to report misconduct to an employer, school, professional body, regulator, or government office may support privilege when the communication is made to appropriate recipients and stays reasonably connected to the duty. Broadcasting the same accusation to an unnecessary public audience may fall outside that purpose.

Qualified privilege ordinarily removes the presumption of malice; the complainant must then prove actual malice. It is not absolute immunity for knowingly false or recklessly made accusations.

Truth, good motives, and justifiable ends

Truth is important but should not be treated as a universal, stand-alone defense. Article 361 governs when proof of truth may lead to acquittal and generally requires proof that the matter was published with good motives and for justifiable ends. Special treatment applies to accusations against government employees concerning the discharge of official duties.

Preserve the sources that existed when the statement was published. A later-discovered justification does not necessarily establish the author’s state of mind at publication.

Fair comment and matters of public concern

Honest criticism of official conduct and matters of legitimate public concern receives strong constitutional protection. But labeling an accusation “opinion” does not control. Courts look at whether the words, context, and supporting facts convey a verifiable factual assertion.

For public officials and public figures, the constitutional actual-malice standard can become decisive. Mere error, harsh language, or failure to investigate perfectly is not automatically knowledge of falsity or reckless disregard. The precise status of the complainant, subject of the speech, factual basis, and publisher’s state of mind must be established.

Lack of authorship

A profile name or screenshot may not establish who operated an account at the relevant time. Evidence may show impersonation, unauthorized access, a cloned page, compromised credentials, shared administration, or manipulation.

This defense should be supported by records where available: security alerts, login histories, device records, reports to the platform, password-reset notices, forensic findings, and contemporaneous messages.

No liability for merely receiving or reacting

Under Disini v. Secretary of Justice, the cyber-libel provision applies to the original author and not simply to recipients who react to the post. Whether a later user became an author through a new caption, edited accusation, or independent republication remains a factual and legal question.

Prescription

Prescription is not established merely by presenting the posting date. The relevant starting point is discovery by the offended party, authorities, or their agents. Evidence such as earlier messages, replies, reports, meetings, demand letters, or witness testimony may establish an earlier discovery date.

Because prescription can depend on contested facts, a court may require evidence rather than resolve the issue solely from the face of the Information.

Possible penalties and civil liability

Article 355 of the Revised Penal Code, as amended by Republic Act No. 10951, permits imprisonment, a fine, or both for traditional libel. Section 6 of Republic Act No. 10175 raises the applicable penalty by one degree when ICT is used.

In People v. Soliman, the Supreme Court held that imprisonment and fine remain alternative penalties and calculated the statutory fine range for online libel at ₱40,000 to ₱1,500,000, subject to the circumstances and applicable rules on modifying penalties. A court may impose a fine alone, but imprisonment remains legally available. The Court’s Administrative Circular No. 08-2008 guides judicial discretion without abolishing imprisonment.

A conviction may also carry civil liability. Even without a criminal conviction, a separate civil claim may be considered under the Civil Code, subject to its distinct elements, defenses, procedures, and deadlines. Damages are not automatic merely because a person felt offended; the legal basis and claimed loss must be proved.

The law in effect when the alleged act occurred can affect the applicable penalty. No later, harsher penal rule may simply be applied retroactively.

Common mistakes

Filing based only on a cropped screenshot
Failing to preserve the URL, complete thread, account details, and discovery evidence
Treating every insult or negative opinion as criminal libel
Assuming falsity or reputational harm alone proves all elements
Accusing the account owner without evidence of actual authorship
Naming everyone who liked, shared, followed, or administered a page
Assuming a police, barangay, or platform report automatically interrupts prescription
Selecting a venue only because it is convenient
Waiting for negotiations while the one-year period runs
Posting threats, counter-accusations, or the complaint itself on social media
Deleting accounts or devices after receiving notice
Ignoring the subpoena and trying to submit a motion or letter instead of the required sworn response
Treating privilege, truth, or “opinion” as automatic defenses without proving their factual requirements
Paying someone who promises a guaranteed dismissal, arrest, or conviction

When legal help is urgent

Seek a Philippine lawyer immediately if:

The one-year period may expire soon
You have received a prosecutor’s subpoena or resolution
An Information has been filed in court
A warrant of arrest may have been issued
Police or investigators request access to a device or account
A search, disclosure, preservation, or cybercrime warrant is involved
The author is anonymous or account records may soon be lost
The post involves a journalist, public official, election issue, whistleblower, workplace investigation, or confidential source
The parties are in different cities or countries
The accusation also involves threats, stalking, intimate images, identity theft, child-related material, or data-privacy violations
A demand seeks money in exchange for withdrawing or suppressing a case

The Public Attorney’s Office may assist qualified indigent persons, subject to its eligibility rules and conflict checks. Private counsel can also assess criminal exposure, civil claims, evidence preservation, venue, prescription, and immediate court remedies.

Frequently asked questions

Can I file because someone insulted me online?

Not automatically. The words must amount to a legally defamatory imputation, refer to an identifiable person, be published to someone else, carry the required malice, and be attributable to the respondent. Context matters.

Is a private message cyber libel?

A message sent only to the person allegedly defamed may lack the element of publication. If it was also sent or forwarded to another person, publication may exist. Other offenses or civil remedies could apply even when libel does not.

Is a Facebook post presumed discovered on the date it was posted?

No. The Supreme Court ruled in 2026 that online publication does not create an automatic presumption of discovery. Actual discovery by the offended party, authorities, or their agents must be determined from evidence.

How long do I have to file?

Cyber libel prescribes in one year from discovery by the offended party, authorities, or their agents. Questions about interruption, prior proceedings, republication, and proof of discovery require case-specific advice. File well before the apparent deadline.

Can everyone who liked or shared a post be charged?

A mere recipient or person who simply reacts is not treated as the original author under Disini. A person who adds a new defamatory statement or independently republishes the accusation may present a different issue.

Does deleting the post end the case?

No. Deletion may limit further circulation, but it does not erase an allegedly completed publication or evidence already preserved. It may also make proof and defense more difficult if done without retaining the full record.

Is truth enough to win?

Not in every situation. Article 361 may require both truth and proof of good motives and justifiable ends. The rules vary where the imputation concerns a government employee’s official duties.

Can I file where I live?

Residence alone is not the universal test. Venue must be tied to where an element occurred, where part of the computer system used was situated, or where damage took place, under the applicable cybercrime venue rule.

Can the accused be imprisoned?

Yes. The law permits imprisonment, a fine, or both, although courts may impose a fine alone after considering the circumstances and Supreme Court guidance.

Can the parties settle?

They may discuss correction, apology, takedown, damages, or other lawful terms, but settlement does not automatically terminate every stage of a criminal proceeding. Once the State is prosecuting the case, dismissal is not solely within the private complainant’s control. Any agreement should be reviewed by counsel and must not involve coercion or unlawful demands.

Official legal sources

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Cyber-libel issues are highly dependent on the exact words, documents, dates, authorship evidence, audience, venue, and procedural history. Official sources were last checked on September 15, 2026.