Quick answer

A cyber libel complaint should be filed promptly with the prosecution office that can bring the case before the proper designated cybercrime Regional Trial Court (RTC). The complainant must present admissible evidence showing a defamatory imputation, publication to at least one third person, an identifiable victim, malice, use of a computer system, and the respondent’s authorship. The NBI Cybercrime Division or a PNP cybercrime unit can first investigate when the account owner is unknown or technical evidence must be obtained.

A respondent should not ignore a prosecutor’s subpoena. Engage counsel, obtain the complete complaint and attachments, and submit a sworn, evidence-supported counter-affidavit on the date stated in the subpoena. Under the current DOJ rules, that date must be at least 10 days after receipt of the subpoena and complaint. Possible defenses include lack of authorship, publication, identification, defamatory meaning, or malice; privileged communication; protected fair comment; truth coupled with the legal requirements for that defense; prescription; improper venue; and double jeopardy.

The most important current deadline is this: cyber libel prescribes in one year from its discovery by the offended party, the authorities, or their agents. The Supreme Court affirmed that rule with finality on April 8, 2026. A demand letter, platform report, or informal law-enforcement inquiry should not be assumed to stop the clock. A properly filed complaint or information does.

Cyber libel is serious but bailable before conviction. The possible penalty is imprisonment from four years, two months and one day to eight years, a fine from ₱40,000 to ₱1.5 million, or both, plus possible civil liability. Courts generally prefer a fine in appropriate libel cases, but that preference is not an entitlement.

What must be proved

Cyber libel is libel under Articles 353 and 355 of the Revised Penal Code committed through a computer system or another similar means covered by Section 4(c)(4) of Republic Act No. 10175.

The prosecution must establish every essential component:

A defamatory imputation. The statement must attribute a crime, vice, defect, act, omission, condition, status, or circumstance that tends to expose a natural or juridical person to dishonor, discredit, or contempt. The whole publication, its ordinary meaning, language, images, tone, and context matter. An unpleasant opinion, criticism, insult, or disagreement is not automatically defamatory.
Publication. At least one person other than the person defamed must receive, read, hear, or see the statement. A message sent only to the person criticized ordinarily lacks this element, although group chats and messages copied to others may constitute publication.
Identification. The complainant need not always be expressly named, but the words and surrounding circumstances must allow readers to identify the person being referred to. A broad statement about a large group ordinarily does not give every member an individual case unless the particular member was a recognizable target.
Malice. For a private complainant, Article 354 generally presumes malice from a defamatory imputation unless the communication is privileged or good intention and justifiable motive are shown. Different constitutional rules apply to statements concerning public officials, public figures, and matters of public interest.
Use of a computer system. This includes internet-connected computers, mobile phones, social-media platforms, websites, email, messaging applications, and similar technologies.
Authorship or responsibility for the publication. The prosecution must connect the accused—not merely an account name—to the statement. Account registration alone may not resolve authorship when hacking, impersonation, shared access, or fabricated screenshots is credibly raised.

The prosecution must ultimately prove guilt beyond reasonable doubt. At the preliminary-investigation stage, the current DOJ standard is prima facie evidence with reasonable certainty of conviction: evidence that is admissible, credible, preservable, and capable, if left uncontradicted, of proving the crime and the responsible person.

Who may be liable online

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel only with respect to the original author of the defamatory online statement. It also invalidated the application of aiding or abetting liability to cyber libel.

Merely receiving a post or pressing “Like,” “Share,” or another reaction does not by itself make a person liable for the original post. But a user who adds a new defamatory caption, accusation, edited image, or comment may be evaluated as the author of that new content. Whether a repost, edit, quotation, administrator action, or collaboratively operated account creates responsibility depends on what the person actually authored or caused to be published.

A post made before Republic Act No. 10175 took effect in 2012 cannot be punished retroactively as cyber libel. Later editing, re-uploading, or independently republishing old content requires a fact-specific analysis; do not assume that an old publication is either automatically chargeable or automatically immune.

The same online publication should not result in separate convictions for both ordinary libel and cyber libel. The Supreme Court held in Disini that punishing the same act under both provisions would violate the protection against double jeopardy.

The one-year deadline

The Supreme Court’s controlling ruling in Causing v. People, as finalized on April 8, 2026, is that cyber libel prescribes in one year under Articles 90 and 91 of the Revised Penal Code—not 12 or 15 years.

The period runs from actual discovery of the alleged defamatory material by the offended party, the authorities, or their agents. The Court rejected a blanket presumption that a person discovered a social-media post on the date it was uploaded, even if it was public. Privacy settings, account access, internet access, and the actual circumstances of discovery are evidentiary questions.

Accordingly:

Record the exact date, time, and manner of discovery.
Preserve the message, email, notification, or witness account through which the post was first learned.
Consider whether authorities or an authorized agent discovered it earlier.
File well before the anniversary date; do not calculate to the last hour.
Do not assume that a demand letter, barangay proceeding, platform report, or investigative interview interrupts prescription.
A properly filed complaint or information interrupts the period.
If proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused, the period may begin running again.
The period does not run while the offender is absent from the Philippines.

Prescription can depend on disputed evidence and may have to be proved at trial. A screenshot showing only the posting date may not establish when the complainant or authorities discovered it.

A separate civil action for defamation is also generally subject to a one-year period. Obtain advice early if damages will be claimed because the civil and criminal remedies, their venue, and their procedural coordination are not identical.

Evidence to preserve immediately

Screenshots are useful, but screenshots alone may leave serious gaps in authenticity, authorship, context, publication, and discovery.

Preserve, where lawfully available:

The full URL, profile URL, username, display name, account identifier, and platform.
Uncropped screenshots showing the complete page, date, time, audience or privacy setting, surrounding conversation, comments, and reactions.
A continuous screen recording that begins at the account profile and navigates to the disputed content.
The original image, audio, video, email, or message file and its available metadata.
The device on which the material was received or viewed. Do not factory-reset, modify, or discard it.
Downloaded account data, message exports, notification emails, and platform-generated records.
The names and contact details of people who personally saw the publication and understood whom it concerned.
Proof of when and how the complainant or authorities first discovered it.
Evidence linking the respondent to the account or post, such as admissions, consistent contact details, earlier communications, or lawful account records.
For the defense, drafts, source materials, research notes, official records, correspondence, access logs, proof of hacking or shared access, and documents showing the basis and purpose of the statement.
Proof of actual consequences, such as client cancellations, employment communications, or messages from people who saw the publication, if damages are claimed.

Keep original files untouched and make separate working copies. Record who collected each item, when it was collected, and how it was stored. Electronic evidence must be authenticated; the party offering it carries the burden of showing integrity and reliability.

Do not hack an account, impersonate another person, secretly seize a device, or unlawfully record private communications to obtain proof. Evidence obtained without a required cybercrime warrant may be inadmissible.

If platform or subscriber data may be needed, approach cybercrime investigators quickly. Under Republic Act No. 10175, service providers must preserve traffic data and subscriber information for at least six months from the transaction. Content data is preserved for six months after a lawful preservation order, which law enforcement may extend once for another six months. Disclosure of subscriber, traffic, or relevant content data requires the legal process and, where required, a court-issued cybercrime warrant. A private complainant cannot simply compel a platform to disclose another user’s records.

How to file a complaint

1. Determine the proper venue

Cyber libel cases fall within RTC jurisdiction and must be handled by a designated cybercrime court.

Under the Rule on Cybercrime Warrants, a criminal action under Section 4 of Republic Act No. 10175 may be filed in the province or city:

where the offense or any element occurred;
where any part of the computer system used was situated; or
where damage to a natural or juridical person took place.

The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of the other qualifying courts.

Libel also has special venue principles intended to prevent distant, harassing lawsuits. Venue should therefore be evaluated carefully under both the cybercrime rule and applicable libel jurisprudence. The fact that a post could be viewed anywhere does not make every city a proper venue. State concrete facts connecting the chosen place to an element, computer system, or damage.

Republic Act No. 10175 can also apply when a Filipino commits the violation abroad, when an element occurs in the Philippines, when a computer system used is wholly or partly situated here, or when the act causes damage to a person who was in the Philippines at the time. Actual investigation and enforcement against someone abroad may still require international cooperation.

2. Prepare a sworn complaint-affidavit

The complaint-affidavit should set out facts, not conclusions alone. Include:

The complainant’s identity and contact details.
The respondent’s known name, address, account details, and other identifiers.
The exact words, images, audio, or video complained of, with an accurate translation where necessary.
The complete context rather than selected phrases alone.
The platform, URL, account, posting date, discovery date, and method of discovery.
Why the statement was defamatory.
How the complainant was identified.
Who other than the complainant saw or received it.
Facts indicating authorship or account control.
Facts supporting malice, or actual malice where that standard applies.
The computer system or device involved.
Specific facts establishing venue.
The harm caused and the civil relief sought, if any.
A numbered list of attachments and witnesses.

Affidavits must be sworn before a prosecutor or another government officer authorized to administer oaths, or, when they are unavailable, before a notary public. False sworn statements can create separate legal consequences.

3. Choose the filing channel

A complainant may proceed through either or both of these routes:

Direct filing for preliminary investigation. File with the Office of the City or Provincial Prosecutor, or other proper NPS prosecution office, that can bring the case before the designated cybercrime RTC with lawful venue.
Cybercrime investigation first. Seek assistance from the NBI Cybercrime Division, an NBI regional cybercrime center, or the PNP cybercrime unit when authorship is unknown, an account is anonymous, forensic examination is needed, or provider records must be preserved and lawfully obtained.

An NBI investigation can produce sworn statements and technical evidence and may culminate in referral to the prosecutor. Because prescription is only one year, however, confirm with counsel when a prosecutor’s complaint must be filed instead of relying solely on an ongoing investigation.

Barangay conciliation is not a prerequisite to a cyber libel prosecution because the prescribed penalty exceeds the Katarungang Pambarangay limits.

Check the receiving office’s current checklist before filing. Required copies, data forms, annex formats, and legal fees can differ. The DOJ main-office checklist currently calls for five copies of the complaint and witness affidavits plus one copy for each respondent, but a local prosecution office may impose a different administrative requirement.

4. Participate in preliminary investigation

The prosecutor may dismiss a facially insufficient complaint or issue a subpoena attaching the complaint and supporting evidence.

The respondent is directed to submit a counter-affidavit and witness affidavits on the date stated in the subpoena, which must be at least 10 days after receipt. The respondent must be allowed to examine the complainant’s evidence; special arrangements may be made for voluminous records or object evidence.

The prosecutor may permit reply and rejoinder affidavits or conduct clarificatory proceedings when appropriate. Preliminary investigation is not a full trial, but the affidavits and attachments must already address admissibility, credibility, preservation, every element of the offense, and the accused’s identity.

If the prosecutor finds the required evidence, an Information is filed in the designated cybercrime RTC. The judge then independently evaluates judicial probable cause and may dismiss the case, require more evidence, issue a summons, or issue a warrant of arrest.

5. Consider the civil claim

Civil liability arising from the alleged offense is generally included with the criminal case unless it is waived, reserved when legally required, or pursued through a permissible independent action. Article 33 of the Civil Code recognizes an independent civil action for defamation based on preponderance of evidence.

There can be no double recovery for the same injury. Because libel has special rules on venue and the civil period is short, decide the civil strategy before filing either case.

How to respond and defend

Act immediately on a subpoena

Note the actual date of receipt and the submission date. Send the complete subpoena, complaint, affidavits, annexes, and envelope or proof of electronic service to counsel. Do not assume that an extension will be granted; extensions are exceptional under the current DOJ rules.

Failure to submit a counter-affidavit allows the prosecutor to resolve the complaint using the complainant’s evidence. A motion to dismiss or bill of particulars generally cannot replace the required counter-affidavit.

Build an element-by-element counter-affidavit

A useful counter-affidavit should:

Admit only facts that are accurate and necessary.
Identify each allegation that is denied or requires qualification.
Address the entire context and ordinary meaning of the statement.
Explain whether any third person actually received it.
Show why the complainant was not identifiable, if applicable.
Contest authorship with concrete evidence—not a bare denial.
Explain the factual basis, sources, verification, purpose, and intended audience.
Identify any legal, moral, or social duty behind a limited communication.
Establish the public-official, public-figure, or public-interest context where relevant.
Set out publication, discovery, interruption, and absence dates if prescription is raised.
Identify defects in venue or in the allegations of the Information.
Attach authenticated documents and sworn witness accounts.

Never fabricate a source, alter a screenshot, backdate a document, pressure a witness, or submit a false affidavit.

Evaluate the principal defenses

No defamatory imputation

Read the words as a whole and in their natural context. Satire, rhetorical exaggeration, criticism, or a value judgment may not assert a defamatory fact. Merely adding “I think,” “allegedly,” a question mark, or a disclaimer will not protect what is substantively a factual accusation.

No publication

A statement communicated only to the complainant lacks publication to a third person. This defense usually fails if another participant received it, the message was posted to an audience, or the sender copied another person.

No identification

The prosecution must show that recipients reasonably understood the statement to concern the complainant. A person cannot rely solely on a private belief that the words were about them.

No authorship

Require evidence connecting the accused to the post. Relevant questions include who controlled the account, whether access was shared, whether the account was hacked or impersonated, whether the screenshot is genuine, and whether the accused admitted publication. Preserve devices and security notices before changing or deleting data.

Privileged communication

Article 354 recognizes qualified privilege for:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without added comments, of non-confidential official proceedings, official statements, or acts performed by public officers in their functions.

For the private-duty privilege, the maker must have a duty or protected interest, the recipient must have a corresponding interest or authority, and the communication must be made in good faith without malice. Broadcasting the accusation beyond those who need to receive it can defeat the privilege.

Relevant statements in legislative proceedings, official communications, pleadings, hearings, and responsive testimony may be absolutely privileged in defined circumstances. Reposting a court pleading to the general public does not automatically inherit the privilege that protected its relevant use inside the proceeding.

Fair comment and public-interest speech

Fair commentary on a matter of public interest is qualifiedly privileged. An opinion reasonably inferred from established facts may remain protected even if others consider the opinion mistaken.

When the statement concerns a public official’s official conduct, or a public figure in a matter legitimately involving that status, the prosecution must establish actual malice—knowledge of falsity or reckless disregard of whether the statement was false. Negligence, anger, or harsh language is not automatically the constitutional form of actual malice, although failure to verify, reliance on obviously unreliable material, fabrication, and contrary information may be relevant.

Public status is not a license to make knowingly false accusations about unrelated private matters. Whether a person is a public figure, whether the subject is of public concern, and whether the statement concerns official conduct are fact-dependent.

Truth, good motive, and justifiable ends

Truth is not an automatic defense to every Philippine libel charge. Article 361 generally requires proof both that the matter was true and that it was published with good motives and for justifiable ends.

Proof of the truth of an imputation involving an act or omission that is not a crime is restricted, unless the statement concerns a government employee and facts related to the discharge of official duties. Public-official cases must also be considered under the constitutional actual-malice standard.

Prescription

Establish when the offended party, authorities, or their agents actually discovered the material, when the complaint was properly filed, whether proceedings were interrupted or terminated, and whether the accused was absent from the Philippines. Prescription is an extinction of criminal liability, but factual disputes may require evidence and trial.

Improper venue or a deficient Information

The Information must allege facts supporting every element, use of ICT, identity of the offended party, authorship, and lawful venue. Venue in criminal cases is jurisdictional. Raise defects promptly and, where required, before plea.

Mere reaction rather than original authorship

A person who merely received, liked, shared, or reacted to someone else’s post is not automatically the original author. If the accused added a new defamatory caption or comment, the defense must address that new content separately.

Double jeopardy or prior final disposition

The State cannot obtain separate punishment for both ordinary libel and cyber libel based on the same online act. A prior case creates double-jeopardy protection only when its legal requisites—including valid jurisdiction, a sufficient charge, arraignment and plea, and a qualifying termination—are present.

Protect court remedies before arraignment

Once an Information is filed, counsel should immediately:

Verify whether a warrant or summons has been issued.
Arrange a lawful surrender and bail application when necessary.
Examine the Information and records supporting judicial probable cause.
Raise lack or irregularity of preliminary investigation and challenges to arrest or warrant before entering a plea where the rules require.
Assess a motion to quash for failure to charge an offense, prescription, lack of jurisdiction or venue, double jeopardy, or another applicable ground.
Request appropriate suspension if a timely prosecutorial review remains pending; filing a review does not automatically stop the court case.

Applying for bail does not by itself waive a timely challenge to an illegal arrest, an unlawful warrant, or the absence or irregularity of preliminary investigation. Cyber libel is bailable as a matter of right before RTC conviction because it is not punishable by death, reclusion perpetua, or life imprisonment. The judge fixes a reasonable amount based on the accused’s financial ability, the charge, penalty, evidence, flight risk, and other circumstances; there is no single mandatory bail amount for every cyber libel case.

Prosecutorial remedies and short deadlines

Under the 2024 DOJ-NPS rules, an aggrieved party may file a motion for reconsideration of a regular preliminary-investigation resolution within 15 days from receipt. Only rely on the actual written rule and notice governing the case; do not assume an extension.

A petition for review under the applicable NPS appeal rules is generally due within 15 days from receipt of the resolution, or from receipt of the denial of a timely motion for reconsideration. The correct reviewing office and documentary requirements depend on which prosecution office issued the resolution and the court that would hear the offense.

A prosecutorial appeal does not automatically suspend a case already filed in court. File the appropriate court motion immediately and avoid arraignment before counsel evaluates the effect on the available review.

Possible penalties and outcomes

A complaint may be dismissed during preliminary investigation, result in further case build-up, or lead to an Information in the RTC. Filing an Information is not a conviction; the prosecution must still prove every element beyond reasonable doubt.

For cyber libel, the prescribed alternatives are:

imprisonment from four years, two months and one day to eight years;
a fine from ₱40,000 to ₱1.5 million; or
both imprisonment and fine,

in addition to civil liability when properly established.

Supreme Court Administrative Circular No. 08-2008 expresses a preference for a fine rather than imprisonment in appropriate libel cases. The court may nevertheless impose imprisonment when a fine alone would depreciate the seriousness of the offense, harm the social order, or conflict with the demands of justice. The circumstances of the publication, mitigating or aggravating circumstances, the applicable sentencing laws, and the evidence will affect the final penalty.

An apology, correction, takedown, settlement, or affidavit of desistance may affect malice, damages, or prosecutorial judgment, but none automatically erases a public offense or requires dismissal. Once an Information is in court, the private complainant cannot unilaterally control the criminal prosecution.

Common mistakes

Waiting for a platform investigation or demand-letter response until the one-year period nearly expires.
Assuming the clock always starts on the posting date—or always starts on the date claimed by the complainant.
Filing wherever the post was viewed without specific venue facts.
Treating every insult, criticism, or negative opinion as libel.
Relying on cropped screenshots without a URL, context, original file, witness, or proof of authorship.
Reposting the material widely “for evidence,” thereby increasing circulation and creating new legal risks.
Assuming truth alone is always a complete defense.
Assuming a public official can never sue, or that criticism of a public official is always criminal.
Ignoring a subpoena because no arrest warrant has been issued.
Submitting an unsworn online explanation instead of a proper counter-affidavit.
Deleting posts, devices, drafts, account logs, or messages before evidence is preserved.
Contacting, threatening, paying, or pressuring a complainant or witness without counsel.
Assuming a platform takedown proves guilt—or that leaving a post online proves innocence.
Believing an affidavit of desistance automatically ends the case.
Treating a Like or Share as equivalent to writing the original accusation, or assuming that a newly written defamatory caption is protected merely because it accompanied a Share.

When legal help is urgent

Obtain immediate criminal-law assistance when:

the one-year anniversary of discovery is approaching;
a subpoena gives a counter-affidavit date;
a resolution, motion-for-reconsideration, or petition-for-review deadline is running;
an Information, summons, hold-departure issue, or arrest warrant has surfaced;
the account is anonymous or critical provider data may disappear;
a device, account, or original post is about to be deleted;
the accused claims hacking, impersonation, or shared account access;
the statement concerns a public official, journalist, election, government transaction, or other public-interest subject;
the post originated abroad or the author is overseas;
the incident also involves threats, extortion, stalking, doxxing, intimate images, identity theft, child abuse material, or gender-based sexual harassment; or
several posts, authors, complainants, or parallel civil and criminal cases are involved.

An eligible accused may inquire with the Public Attorney’s Office. Other parties may seek private counsel, an Integrated Bar of the Philippines legal-aid program, or the DOJ Action Center, subject to their respective qualifications and scope of assistance.

FAQ

Is a demand letter required before filing?

No. A demand, correction request, or takedown request may be strategically useful, but it is not an element of cyber libel and should not be assumed to interrupt prescription.

Must the parties first go to the barangay?

No. Cyber libel exceeds the imprisonment and fine limits for mandatory Katarungang Pambarangay conciliation.

Can a private Messenger message be cyber libel?

Only if it was published to someone other than the person defamed. A one-to-one message sent solely to that person ordinarily lacks publication. A group message may satisfy the element. Other criminal or civil laws may apply even when publication is absent.

Can an anonymous account be charged?

Investigators must first develop evidence identifying a responsible person. Report promptly to a cybercrime unit so lawful preservation and disclosure procedures can be considered. An account name or screenshot alone may not prove who authored the post.

Is sharing another person’s post cyber libel?

A bare Share or reaction is not automatically liability for the original statement under Disini. A person who supplies a new defamatory caption, edit, or comment may be treated as the author of that new material.

Should an accused delete the post?

Preserve a complete, authentic copy and obtain legal advice first. Deletion may prevent further circulation, but it can also destroy evidence or complicate authentication. It does not automatically end liability. Do not alter or fabricate records.

Does an apology end the case?

No. It may be relevant to motive, damages, mitigation, or settlement, but dismissal remains subject to the prosecutor or court and the governing criminal procedure.

Can a corporation be defamed?

Yes. Article 353 protects both natural and juridical persons, but the corporation must still be identifiable and the other elements must be established.

How long does the complainant have?

The current criminal prescriptive period is one year from discovery by the offended party, authorities, or their agents, subject to interruption, resumption, and the rule concerning an offender’s absence from the Philippines. A separate civil claim generally also has a one-year period, but its reckoning and procedural treatment should be reviewed independently.

Can the case continue after the post is removed?

Yes. Removal does not erase an already completed publication or automatically destroy preserved evidence.

Official primary sources and government guidance

This article provides general Philippine legal information, not advice for a particular complaint, defense, deadline, or document. Cyber libel outcomes depend heavily on the exact words, context, authorship evidence, discovery date, venue, and procedural record. Sources and current rules were checked through August 4, 2026.