Quick answer

To file a cyber libel case in the Philippines, the offended person must promptly submit a sworn complaint and supporting evidence to the proper prosecutor’s office. The evidence must show that the respondent made a defamatory statement, identified or clearly referred to the complainant, communicated it to at least one other person, acted with the legally required malice, and used a computer system or similar digital means.

To defend one, do not ignore a subpoena, demand letter, arrest warrant, or court notice. Preserve the complete post and its context, obtain counsel, and examine whether the complaint was filed within the one-year prescriptive period, in the correct place, and against the person legally responsible. Other important defenses may include lack of authorship, lack of publication, failure to identify the complainant, absence of a defamatory imputation, truth and good motives, privileged communication, fair comment, or failure to prove actual malice when that standard applies.

Cyber libel is a criminal case. Removing or apologizing for a post may reduce harm and may affect damages or settlement discussions, but it does not automatically erase criminal liability. Conversely, an offensive, harsh, or embarrassing online statement is not automatically cyber libel. Every required element must be supported by admissible evidence.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 punishes the acts of libel defined in Article 355 of the Revised Penal Code when committed through a computer system or a similar digital means.

Cyber libel generally requires proof of all these elements:

A defamatory imputation. The statement attributes a crime, vice, defect, dishonorable conduct, condition, status, or circumstance that tends to dishonor, discredit, or expose a person to contempt.
Publication. Someone other than the person defamed received, read, heard, or viewed the statement. A purely private message sent only to the person concerned ordinarily lacks this element, although forwarding it to another person may constitute publication.
Identification. The complainant was named or was sufficiently identifiable from the words, images, surrounding facts, or audience’s knowledge. A person need not always be named, but a vague allegation about an undefined group may be insufficient.
Malice. Malice is generally presumed from a defamatory publication unless the communication is privileged or another rule requires proof of actual malice. The applicable standard depends on the subject, context, speaker, and nature of the issue.
Use of a computer system or similar means. Examples include an original social-media post, online article, blog entry, email, group chat, digital image, video caption, or other internet-based publication.

The statement must be evaluated as a whole and in its real context—not by isolating one word or sentence. Courts may consider the ordinary meaning understood by the intended audience, the language used, accompanying images, the relationship of the parties, and the surrounding discussion.

Who may be charged?

The principal focus is normally the person who authored or intentionally published the allegedly libelous online material. Liability cannot be based merely on ownership of a device, page, business, or internet connection without competent proof tying the accused to the publication.

In Disini v. Secretary of Justice, the Supreme Court sustained the cyber-libel provision as applied to the original author of the post. It did not permit the provision to be indiscriminately applied to people who merely receive a post or react to it through ordinary online actions such as liking or sharing. The facts still matter: a person who adds a new defamatory statement, republishes content as their own, or participates in creating the publication may present a different issue.

A corporation’s involvement also requires careful analysis. Criminal responsibility is personal unless a statute and the evidence establish the required participation. The Cybercrime Prevention Act separately provides rules for corporate liability when an offense is knowingly committed for a juridical person’s benefit under the conditions stated in Section 9.

General rule on malice—and the important exceptions

Under Article 354 of the Revised Penal Code, every defamatory imputation is generally presumed malicious even if true, unless good intention and justifiable motive are shown. Two statutory categories are treated as privileged:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments or remarks, of qualifying official proceedings or acts.

A qualifiedly privileged communication is not automatically immune. The complainant may overcome the privilege by proving actual malice—generally, knowledge that the statement was false or reckless disregard of whether it was false.

Public-interest speech also receives greater constitutional protection. Criticism of public officers, public figures, candidates, and matters of legitimate public concern cannot be assessed in the same way as a purely private personal attack. Depending on the circumstances, the prosecution may have to prove actual malice beyond reasonable doubt. Mere error, an unpopular opinion, strong language, or failure to satisfy an official is not by itself actual malice.

Privilege is highly fact-dependent. Posting an accusation to the whole internet is not necessarily a “private communication” simply because the writer believed there was a duty to speak. Likewise, copying an official document does not automatically qualify as a fair report if the post materially distorts it or adds defamatory commentary.

Truth is important, but it is not always enough by itself

In Philippine criminal libel law, truth is not an unlimited defense. Article 361 generally requires the accused to establish the truth of the imputation and that the publication was made with good motives and for justifiable ends.

There are special statutory rules when the imputation concerns a crime committed by a government employee or relates to the discharge of official duties. Constitutional protections for speech on public affairs may also affect the analysis.

Preserve the source material supporting the statement: public records, official reports, messages, recordings lawfully obtained, receipts, photographs, witness accounts, research notes, interview files, and the chronology showing what the writer knew before publication. Material collected only after the post may not prove the writer’s state of mind when it was published.

Opinions, insults, questions, and satire

Calling a statement an “opinion” does not automatically protect it. A court may treat it as defamatory if an ordinary reader would understand it as asserting undisclosed and verifiable facts. For example, presenting a serious criminal accusation as “just my opinion” does not necessarily change its substance.

On the other hand, obvious rhetorical exaggeration, satire, or value judgment may not communicate a provably false factual assertion. The court will consider the audience, platform, wording, context, and whether the speaker implied possession of supporting facts.

Questions can also carry defamatory meaning. A question framed to insinuate that an identifiable person committed a crime may be evaluated by its substance rather than its punctuation.

The one-year filing deadline

Cyber libel prescribes in one year, generally counted from the date the allegedly libelous publication was discovered by the offended person or the authorities. In Causing v. People, G.R. No. 258524, the Supreme Court rejected the use of the much longer prescriptive period for offenses under special laws and applied the one-year rule for libel. The Court maintained that position in its April 8, 2026 resolution.

Do not wait until the last week. Disputes may arise over:

When the complainant actually discovered the publication;
Whether a later edit or upload was a new publication;
Whether the filing made was legally sufficient to interrupt prescription;
Whether the correct respondent and offense were identified; and
Whether an old post merely remained accessible or was affirmatively republished.

Mere continued availability of an old post should not automatically be treated as a fresh offense every day. A material alteration or deliberate new publication, however, requires separate factual and legal analysis.

Because prescription can end the criminal case, both sides should document the original posting date, discovery date, edits, reposts, and filing date.

Where to file

Cyber libel cases fall within the jurisdiction of the Regional Trial Court, ordinarily a designated cybercrime court.

Under Section 2.1 of the Supreme Court’s Rule on Cybercrime Warrants, a criminal action under Sections 4 or 5 of the Cybercrime Prevention Act may be filed before the designated cybercrime court of the province or city:

Where the offense or any element was committed;
Where any part of the computer system used was situated; or
Where damage to a natural or juridical person took place.

The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of the others.

Venue must be supported by concrete allegations and evidence. The mere fact that an online article could be accessed anywhere does not necessarily make every court in the country a proper venue. Before filing, identify where the author acted, where the relevant device or computer system was situated, where the complainant was located when legally cognizable damage occurred, and which designated cybercrime court covers that place.

A venue defect should be raised promptly by the defense. Some objections may be waived if not asserted at the proper procedural stage.

How to file a cyber libel complaint

1. Preserve the publication immediately

Capture more than a cropped screenshot. Preserve:

The complete post, article, message, video, or image;
The account name, profile page, and available account identifiers;
The complete URL or permalink;
The visible publication date and time;
Comments, captions, attachments, hashtags, and linked material;
The surrounding thread or conversation;
Evidence showing that other people saw or received it;
Notifications, direct messages, or admissions concerning authorship;
Earlier and later versions, including edits;
The device or original file used to access the material; and
The date and manner in which the complainant first discovered it.

Record the screen if necessary to show navigation from the account or page to the publication. Keep the original files and avoid editing, annotating, compressing, or repeatedly resaving them. Make working copies instead.

2. Identify the respondent carefully

A display name or photograph may be fake. Collect lawful evidence linking the publication to the respondent, such as acknowledged account ownership, prior communications, consistent contact details, witness testimony, business-page administration records, or admissions.

Do not hack an account, secretly obtain passwords, impersonate another person, or publish private identifying information in an effort to discover the author. Subscriber, traffic, and content data may require formal preservation procedures and judicial warrants.

The Cybercrime Prevention Act provides that service providers ordinarily preserve traffic data and subscriber information for at least six months from the transaction. Content data may be preserved after a lawful preservation order. Since platforms may retain different records for different periods, prompt coordination with counsel, the NBI, or the PNP cybercrime unit is important.

3. Prepare a sworn complaint-affidavit

The affidavit should state facts from the complainant’s personal knowledge, including:

Who published the material and how that person is identified;
The exact words, image, audio, or video complained of;
When and where it was published and discovered;
Why the publication refers to the complainant;
Who else saw, heard, or received it;
Why it is defamatory;
Facts supporting malice or actual malice, when required;
The digital means used;
Facts establishing the selected venue; and
The harm and relevant surrounding events.

Attach properly marked supporting documents and affidavits from witnesses. A conclusory statement that a post is “malicious” or “viral” is not a substitute for evidence.

4. File with the proper prosecutor’s office

A cyber libel charge ordinarily undergoes preliminary investigation before any information is filed in the Regional Trial Court. Complaints may be filed directly with the territorially proper prosecution office or may first be investigated with assistance from the NBI Cybercrime Division or the PNP Anti-Cybercrime Group.

The DOJ’s 2024 National Prosecution Service rules require prosecutors to assess whether there is prima facie evidence with reasonable certainty of conviction, not merely an unsupported accusation. Those rules also allow electronic filing and remote proceedings when authorized and available, but actual filing arrangements differ among prosecution offices. Confirm the accepted channel, office hours, required copies, and local procedures directly with the office concerned.

5. Follow the preliminary-investigation process

If the prosecutor finds the complaint sufficient to proceed, the respondent is served with a subpoena and copies of the supporting evidence. The respondent may submit a counter-affidavit and supporting documents within the period stated in the subpoena and applicable DOJ rules.

The prosecutor may dismiss the complaint or find sufficient evidence to file an information in court. Available remedies after the resolution—including reconsideration or review—have short and technical deadlines. Filing a motion does not justify ignoring a court case that has already begun.

How to respond if you are accused

Do not ignore the subpoena

A preliminary investigation is the first major opportunity to prevent an unsupported charge from reaching court. Note the date, time, and manner of service. Obtain a complete copy of the complaint and every attachment. If material is missing or unreadable, request access through the proper procedure.

A counter-affidavit should respond to the evidence rather than rely on a bare denial. Depending on the facts, it may address:

Whether you created or controlled the account;
Whether you wrote, approved, or published the material;
Whether any third person received it;
Whether the complainant was identifiable;
Whether the words are actually defamatory in context;
Whether the statement is true and supported by contemporaneous records;
Whether it was a privileged communication or protected fair comment;
Whether actual malice must be proved and is absent;
Whether the evidence is authentic and admissible;
Whether the case prescribed;
Whether venue is proper; and
Whether the same act is being impermissibly punished twice.

Do not fabricate explanations, delete contrary evidence, coach witnesses, or ask someone to claim ownership of your account.

If an information has been filed in court

Once the prosecutor files an information, the judge independently determines probable cause for issuing a warrant of arrest. A subpoena from a prosecutor is not the same as an arrest warrant.

If a warrant has been issued, coordinate surrender and bail through counsel instead of evading authorities. Before conviction, bail is generally a matter of right for an RTC offense not punishable by death, reclusion perpetua, or life imprisonment. The court sets the amount and conditions.

Before entering a plea, counsel should check whether a motion to quash or another pre-arraignment remedy is warranted. Grounds that are not timely raised may be waived. Possible issues include prescription, improper venue, lack of jurisdiction, failure of the information to charge an offense, double jeopardy, or the extinction of criminal liability.

Electronic evidence: screenshots are useful but not self-proving

Electronic documents may be admitted under the Rules on Electronic Evidence, but the party offering them must establish authenticity and satisfy the ordinary rules on relevance, hearsay, and the best evidence available.

Evidence may be authenticated through:

A witness who personally viewed or captured the material;
Testimony from a participant in the conversation;
Distinctive account, message, or file characteristics;
Admissions by the account owner;
Metadata or device records;
Business or platform records obtained through lawful process; or
Forensic examination and expert testimony when genuinely necessary.

A screenshot may show what appeared on a screen, but it may not by itself prove who controlled the account, whether the image was altered, when it was published, or whether another person saw it.

Preserve originals. Maintain a simple evidence log recording who collected each item, when it was collected, from what device or URL, where the original is stored, and whether copies were made. If a device may be forensically examined, avoid resetting, replacing, or modifying it without advice.

Removing the post, replying online, and settlement

A complainant may ask the platform to remove content while separately preserving evidence and pursuing legal remedies. Platform removal does not decide whether a crime occurred.

An accused person should avoid publishing a running commentary about the complainant, witnesses, prosecutor, or judge. New posts may create additional evidence, affect bail or court orders, expose confidential information, or lead to separate complaints.

Retraction, correction, apology, mediation, and settlement may be useful, but their legal effect depends on timing and wording. A criminal complaint is prosecuted in the name of the People of the Philippines; a private agreement or affidavit of desistance does not automatically require the prosecutor or court to dismiss it. Civil damages may be settled separately, subject to lawful terms.

Have counsel review any proposed apology or settlement. A poorly drafted statement may be treated as an admission or may repeat the defamatory accusation.

Penalties and civil exposure

Article 355, as amended by the adjusted-penalty law, Republic Act No. 10951, provides for imprisonment, a fine from ₱40,000 to ₱1,200,000, or both for ordinary written libel. Section 6 of the Cybercrime Prevention Act provides a penalty one degree higher when a Revised Penal Code crime is committed through information and communications technology.

The precise sentence depends on the charge, applicable penalty rules, modifying circumstances, and the court’s findings. The Supreme Court has emphasized that courts may impose the statutory alternative of a fine rather than imprisonment when justified; this is a sentencing matter, not a guarantee of fine-only punishment.

A criminal case may also include civil liability. Damages are not presumed in whatever amount the complainant demands. The court considers the evidence, causal connection, applicable civil-law rules, and whether damages were adequately alleged and proved.

Charging both traditional libel and cyber libel for the identical online act also raises constitutional concerns. In Disini, the Supreme Court invalidated Section 7 of the Cybercrime Prevention Act insofar as it would permit punishment under both provisions for the same act.

Common mistakes by complainants

Filing after the one-year period without analyzing discovery and interruption of prescription;
Using only cropped screenshots with no URL, date, context, or authenticating witness;
Assuming a display name proves authorship;
Failing to identify a third person who saw or received the statement;
Treating every insult, opinion, or disagreement as a defamatory factual imputation;
Ignoring the higher protection given to speech on public issues;
Filing in a convenient but unsupported venue;
Omitting facts showing how the complainant was identifiable;
Demanding platform data informally when a warrant or lawful process is required; and
Threatening or publicly shaming the respondent while the case is being prepared.

Common mistakes by respondents

Ignoring the subpoena or waiting until after the deadline to consult counsel;
Deleting the post, account, messages, or device data after learning of the complaint;
Posting new attacks or contacting witnesses aggressively;
Assuming that “it was true” ends the legal analysis;
Claiming “opinion” while asserting specific criminal conduct as fact;
Submitting an unverified denial without supporting records;
Giving investigators passwords or unrestricted device access without understanding the legal basis and scope;
Missing pre-arraignment objections;
Evading a warrant instead of arranging lawful surrender and bail; and
Signing an apology, undertaking, or settlement without advice.

When legal help is urgent

Consult a Philippine criminal-law or cybercrime lawyer immediately if:

The one-year period may expire soon;
A prosecutor’s subpoena has been served;
Police or NBI investigators request a device, password, account access, or interview;
You learn that a preservation, disclosure, search, or examination warrant is being sought or executed;
An information or arrest warrant has been issued;
The post concerns a public officer, election, journalist, whistleblower, workplace investigation, or pending court case;
The author is anonymous or outside the Philippines;
A child, intimate image, threat, doxxing, identity theft, or hacked account is involved;
Several people or companies are being accused from the same publication; or
The dispute may involve other offenses under the Cybercrime Prevention Act, the Data Privacy Act, the Safe Spaces Act, or laws protecting children.

If officers arrive with a warrant, remain calm, ask to read it, note the issuing court and exact devices, accounts, data, and time period covered, and contact counsel. Do not obstruct a lawful search, but do not consent to an expansion beyond the warrant merely because an officer requests it.

Frequently asked questions

Can I file because someone insulted me on Facebook?

Possibly, but an insult alone does not automatically establish cyber libel. The post must satisfy every legal element, including a defamatory imputation, identification, publication to another person, malice, and use of a computer system. Context and the distinction between fact and opinion are critical.

Is a private group chat covered?

It can be. Publication exists if the defamatory message was communicated to at least one person other than the person defamed. The limited audience may affect privilege, malice, harm, and damages, but it does not necessarily eliminate publication.

Can an anonymous account be charged?

A case may be investigated, but the State must lawfully identify and connect a real person to the account and publication. A screenshot of an alias is not enough by itself. Platform or subscriber records may require preservation measures and a court-issued warrant.

Does sharing someone else’s post automatically make me liable?

No. Disini prevents indiscriminate cyber-libel liability for ordinary reactions and sharing by people who are not the original author. Liability may still require separate analysis if the person added their own defamatory assertion, adopted the material as a new publication, or actively participated in creating it.

Does deleting the post end the case?

No. Deletion may limit continuing harm but does not erase a completed publication or copies already preserved. After receiving notice of a dispute, deletion may also create an evidentiary problem.

Can I sue for damages without pursuing a criminal case?

Philippine law permits civil remedies for defamation in appropriate circumstances, including an independent civil action under Article 33 of the Civil Code. The correct theory, venue, limitation period, and relationship to any criminal case should be assessed by counsel. Double recovery for the same injury is not allowed.

Is a barangay proceeding required first?

Do not assume so. Cyber libel is prosecuted through the proper prosecution office and ultimately falls within RTC jurisdiction. Whether the Katarungang Pambarangay rules affect a related dispute depends on the parties, residence requirements, offense, and relief sought. Because the criminal prescriptive period is only one year, obtain advice before relying on barangay proceedings.

Can the complainant withdraw the charge?

The complainant may execute an affidavit of desistance or enter a settlement, but that does not automatically dismiss a criminal case. The prosecutor or court must determine its legal effect.

Will the accused be arrested as soon as a complaint is filed?

Not ordinarily. Filing a complaint for preliminary investigation is different from filing an information in court. A judge—not the complainant or prosecutor—determines whether a warrant of arrest should issue after the information is filed, subject to the rules on lawful warrantless arrest.

Official legal sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Cyber libel depends heavily on the exact words, audience, evidence, dates, venue, and status of the persons involved. Procedures may also vary by prosecution office and court. Sources and current law were checked as of September 14, 2026.