Quick answer

Cyber libel is committed when a person authors and publishes through a computer system a malicious, defamatory imputation that identifies another person or entity and reaches at least one third person. It is punishable under Section 4(c)(4) of the Cybercrime Prevention Act of 2012, applying the libel rules in Articles 353–355 of the Revised Penal Code.

To file a case, preserve the complete electronic evidence, document when the material was discovered, identify the author and proper venue, and file a sworn complaint with the appropriate prosecution office. Do not wait for a platform takedown or demand-letter response: under the Supreme Court’s final April 8, 2026 ruling in Causing v. People, cyber libel generally prescribes one year from discovery by the offended party, the authorities, or their agents. Filing the proper complaint or Information interrupts prescription. A later discovery date must be proved; it is not automatically presumed merely because a post remained online. Read the final Supreme Court resolution.

To defend a case, do not ignore a prosecutor’s subpoena or court process. Immediately preserve your account, device, drafts, source materials, and communications; examine authorship, publication, identification, defamatory meaning, malice, privilege, truth and motive, prescription, venue, and the integrity of the complainant’s electronic evidence. A complaint before a prosecutor is not yet a conviction or an arrest warrant.

What the prosecution must establish

The prosecution must ultimately prove every element beyond reasonable doubt. At the preliminary-investigation stage, the prosecutor applies the current standard of prima facie evidence with reasonable certainty of conviction.

1. There was a defamatory imputation

The statement must impute a crime, vice, defect, act, omission, condition, status, or circumstance tending to expose a person or juridical entity to dishonor, discredit, or contempt.

Context matters. The statement is read as a whole and according to how ordinary readers would understand it. Hurt feelings, criticism, rudeness, satire, or general abuse do not automatically amount to libel. Conversely, adding “allegedly,” using a question mark, or calling an assertion “my opinion” does not protect a statement that reasonably conveys a defamatory factual accusation.

2. The complainant was identified or identifiable

The post need not state the complainant’s full name. Identification may arise from the wording, descriptions, surrounding facts, photographs, tags, prior posts, or testimony from readers who understood whom the author meant.

A vague statement about a large, undefined group ordinarily cannot support a personal libel claim unless the evidence connects it to a particular person. The Supreme Court explains the identification requirement in Lastimosa v. People. Read the decision.

3. The material was published to a third person

“Publication” means communication to someone other than the person defamed. A public post clearly may satisfy this requirement, but publication can also occur in a group chat, email thread, private online group, or direct message copied to another person.

A message seen only by its author and the person criticized ordinarily lacks third-person publication. The complainant should identify people who actually saw, heard, or received the material whenever possible.

4. The publication was malicious

Article 354 generally presumes a defamatory imputation to be malicious, even if true, unless good intention and justifiable motive are shown or the communication is privileged.

Different rules apply to qualifiedly privileged communications and, in appropriate cases, statements involving public officials, public figures, or matters of legitimate public concern. There, the prosecution or claimant may have to establish actual malice—knowledge that the statement was false or reckless disregard of whether it was false. Mere disagreement, honest error, or ordinary negligence is not automatically actual malice. The classification of the complainant and the public relevance of the statement are fact-dependent. See the Supreme Court’s discussion of actual malice and public figures.

5. A computer system or information and communications technology was used

The defamatory material must have been published through a computer system or similar technology. This includes ordinary internet-based publication such as social-media posts, website articles, online videos, emails, and digital messages, provided the other elements are present.

6. The respondent was the author responsible for the statement

An account name or screenshot alone does not necessarily prove who authored a post. The prosecution must connect the accused to the account and publication through admissible evidence such as admissions, account records lawfully obtained, linked communications, device evidence, witnesses, or reliable surrounding circumstances.

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as to the original author, but declared it unconstitutional as applied to people who merely received the post and reacted to it. Merely pressing “Like,” receiving, or reacting to another person’s defamatory post does not make someone criminally liable for that original statement. However, a person who adds a new defamatory caption or comment may be treated as the author of that separate content. Read Disini.

The same defamatory material should not be used to punish an accused separately for both traditional libel and cyber libel when the charges concern one and the same offense.

Important defenses and exceptions

A defense should address the particular element or legal rule that the evidence fails to satisfy. Common defenses include the following.

No authorship or unreliable attribution

The accused did not create or publish the material, the account was impersonated or compromised, another authorized user made the post, or the evidence does not reliably connect the accused to it.

This defense should be supported by preserved login notices, device records, account-recovery messages, security alerts, work assignments, witness statements, or a lawful forensic examination—not merely a bare denial.

No defamatory meaning

The words, read in full context, did not impute a discreditable fact. They may have been non-defamatory criticism, parody, rhetorical exaggeration, or commentary whose meaning would not reasonably injure reputation.

No identification

Readers could not reasonably determine that the statement referred to the complainant. If the name was omitted, examine whether the complainant has competent witnesses or other evidence connecting the description to them.

No third-person publication

No person other than the complainant received or understood the communication. This is different from a public or group post that was later deleted; deletion does not prove that no third party saw it.

Privileged communication

Relevant statements made in judicial proceedings may be absolutely privileged. Certain private communications made in the performance of a legal, moral, or social duty, and fair and true reports of non-confidential official proceedings made in good faith and without improper comments, may be qualifiedly privileged.

Qualified privilege is not a blanket license to publish an accusation to the whole internet. The recipient, purpose, relevance, scope of circulation, good faith, and presence or absence of actual malice all matter. Republishing a court allegation outside the proceeding may require a separate privilege analysis.

Fair comment on public affairs

Fair commentary on matters of legitimate public interest may be qualifiedly privileged. It is safer when the underlying facts are true, accurately stated or disclosed, and the comment is recognizable as opinion. Fabricated facts, reckless accusations, and personal attacks unrelated to the public issue may fall outside the protection.

Truth, good motives, and justifiable ends

Truth is not automatically a complete defense to criminal libel. Article 361 limits when proof of truth is admissible and requires both truth and publication with good motives and justifiable ends for acquittal.

A respondent relying on truth should preserve the original records, public documents, interviews, messages, research notes, and source chronology supporting the specific imputation. A later effort to find support for an accusation is not equivalent to having a reliable basis when it was published.

Prescription

Cyber libel prescribes in one year from discovery by the offended party, authorities, or their agents. Publication and discovery may occur on the same date, but they need not.

Evidence of earlier discovery can include the complainant’s reaction, comment, reply, demand, public statement, report, or communication showing awareness. Whether a case has prescribed may require evidence and cannot always be resolved from the face of the complaint.

A platform report, police blotter, demand letter, or informal request for investigation should not be assumed to interrupt the period. The safest course is timely filing of a proper complaint for preliminary investigation with the proper office. The period does not run while the offender is absent from the Philippines, and it may run again if proceedings terminate without conviction or acquittal or are unjustifiably stopped for a reason not attributable to the accused.

Improper venue or lack of Philippine jurisdiction

Under the Rule on Cybercrime Warrants, a cybercrime prosecution is filed before the designated cybercrime court of the province or city where:

The offense or any element was committed;
Any part of the computer system used was situated; or
Damage to the natural or juridical person occurred.

The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of the others. Venue facts must be specifically established; the mere nationwide accessibility of a post should not be treated as an unlimited choice of forum.

Philippine jurisdiction may also exist when an element occurred in the country, a computer system used was wholly or partly situated here, damage was caused to a person in the Philippines, or the violation was committed by a Filipino national abroad, subject to the statutory and procedural requirements.

Evidence to preserve immediately

Electronic content can be edited, restricted, deleted, or detached from the account that published it. Preserve evidence before asking the author or platform to remove it.

Keep:

Full-page screenshots showing the complete post, caption, images, comments, account name, date, time, and surrounding context;
The exact URL, username, profile URL, post or video identifier, platform, access date, time, and time zone;
A screen recording that begins at the account profile and navigates to the post, showing that the capture was not assembled from unrelated images;
Original downloaded images, audio, video, documents, and available metadata;
The unedited source file and a separate working copy for annotations or translations;
Evidence showing when the complainant, authorities, or their agents first discovered the material;
Names and sworn accounts of third persons who saw the content and understood whom it referred to;
Messages, tags, prior posts, admissions, or linked accounts relevant to authorship and identification;
Records supporting truth, good-faith investigation, privilege, or fair comment;
Proof of harm, such as lost engagements, customer messages, employment records, medical records, and reasonable corrective expenses;
The device and account in their existing condition, including login alerts, backups, drafts, and account-recovery records.

Do not rely solely on a cropped screenshot. Under the Rules on Electronic Evidence, the party presenting a private electronic document has the burden of proving its authenticity and integrity. Audio, video, photographs, and ephemeral messages likewise require competent identification or authentication.

Do not hack an account, use another person’s password, impersonate anyone, or obtain private records unlawfully. If subscriber information or preserved platform data is needed, seek help from law enforcement so the appropriate preservation process or cybercrime warrant can be used.

How to file a criminal complaint

Step 1: Calculate the deadline before doing anything else

Write down:

The publication date;
The earliest provable discovery date;
Who discovered it;
Any period when the alleged offender was outside the Philippines; and
The date of any formal complaint already filed.

Because the current prescriptive period is only one year, obtain legal advice immediately if several months have passed. Do not allow negotiations, promises of deletion, or a pending platform report to consume the deadline.

Step 2: Determine the correct respondent and venue

Identify the author rather than naming every page administrator, follower, sharer, or employer without evidence. If the account is anonymous, seek investigative assistance promptly from the NBI Cybercrime Division or another authorized cybercrime law-enforcement unit.

Map the facts supporting venue: where the author acted, where the relevant device or computer system was situated, and where legally cognizable damage occurred. The appropriate city or provincial prosecution office should correspond to a proper court venue.

Step 3: Prepare a complete complaint-affidavit

The sworn complaint should clearly state:

The complainant’s and respondent’s identifying details, as far as known;
The exact words, images, audio, or video alleged to be defamatory;
The original language and an accurate translation when necessary;
The platform, account, URL, publication date, and discovery date;
Why the statement refers to the complainant;
Who received, read, watched, or heard it;
Facts supporting authorship;
Why the imputation is defamatory and, where material, false;
Facts showing malice or actual malice;
The particular basis for venue and Philippine jurisdiction; and
The harm and relief sought.

Attach witness affidavits and properly organized documentary and electronic evidence. Avoid unsupported conclusions such as “the account obviously belongs to the respondent.” State the underlying facts.

Current local requirements on copies, forms, filing arrangements, and electronic submission should be confirmed directly with the prosecution office. The DOJ’s filing guidance and applicable Citizen’s Charter should be checked before submission.

Step 4: File with the proper prosecution office

Because cyber libel carries a possible maximum imprisonment exceeding six years, it undergoes preliminary investigation under the 2024 DOJ-NPS Rules.

A prosecutor evaluates whether the evidence is admissible, credible, capable of preservation and presentation at trial, and sufficient—if uncontroverted—to establish all elements and the responsible person with reasonable certainty of conviction.

Step 5: Participate in the preliminary investigation

If the complaint is sufficient to proceed, the prosecutor issues a subpoena with the complaint and attachments. The date set for the respondent’s counter-affidavit must give at least 10 days from receipt of the subpoena and complaint.

After the counter-affidavit, the prosecutor may:

Treat the case as submitted for resolution;
Conduct a physical or virtual clarificatory hearing; or
Require a reply-affidavit and permit a rejoinder when substantial new matters require them.

The prosecutor may dismiss the complaint or approve the filing of an Information in court. An aggrieved party may generally move for reconsideration within 15 days from receipt of the resolution. Further DOJ review depends on the office, location, court jurisdiction, and applicable appeal rules, so obtain advice immediately rather than assuming that review automatically suspends court proceedings.

Step 6: Prepare for court proceedings

If an Information is filed, the designated Regional Trial Court independently determines probable cause. The judge—not the complainant or investigating prosecutor—decides whether to issue a warrant of arrest, a summons when custody is unnecessary, or another proper order.

Cyber libel is bailable before conviction as a matter of right. After an RTC conviction, bail pending appeal is discretionary and subject to additional rules. The criminal case then proceeds through arraignment, pre-trial, trial, judgment, and any appeal.

How to respond to a complaint or subpoena

Do not miss the stated deadline

Record the date and manner by which the subpoena and attachments were received. The subpoena should allow at least 10 days, but the controlling deadline is the date stated in it unless lawfully changed. Immediately request any missing annexes through proper channels.

Failure to submit a counter-affidavit without justifiable reason may result in resolution based on the complainant’s evidence.

Preserve first; do not delete or rewrite history

Keep the post, account data, devices, drafts, source material, and related communications. If material has already been removed, preserve records showing when, why, and by whom it was removed. Do not fabricate a hacking claim, alter screenshots, coach witnesses, or ask others to delete messages.

Avoid posting new attacks about the complainant or discussing confidential defense strategy online. New content can create additional evidence or a separate controversy.

Build the counter-affidavit around the elements

A useful counter-affidavit does more than deny the accusation. It should identify the precise factual and legal failures in the complaint and attach admissible supporting evidence.

Consider:

Who actually authored the material;
Whether the account attribution is reliable;
Whether a third person received it;
Whether the complainant was identifiable;
The reasonable meaning of the entire publication;
Whether it reported facts, expressed fair comment, or used obvious parody or hyperbole;
The factual basis and records available before publication;
Whether the communication was privileged;
Whether actual malice must be proved;
The discovery date and prescription;
Venue and jurisdiction; and
Defects in authentication, completeness, or integrity of the electronic evidence.

Have the counter-affidavit and witness affidavits properly sworn. Follow the prosecutor’s directions on service and copies.

If an Information has already been filed

Obtain criminal counsel immediately. Counsel should inspect the Information, resolution, record, assigned court, and any warrant. Defenses such as failure to charge an offense, prescription, double jeopardy, and lack of jurisdiction or venue may require specific motions and timing, sometimes before plea.

If a warrant exists, do not evade it. Arrange a lawful voluntary surrender and bail application through counsel. If you cannot afford private representation, check eligibility with the Public Attorney’s Office or contact the Integrated Bar of the Philippines National Center for Legal Aid.

Penalties and civil exposure

For present-day cyber libel, the possible imprisonment range is prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years.

A court may instead impose a fine, currently ranging from ₱40,000 to ₱1,500,000, or impose both imprisonment and a fine. The Supreme Court has confirmed that a fine remains an alternative penalty and that Administrative Circular No. 08-2008’s preference for a fine may apply to online libel depending on the circumstances. It does not guarantee that imprisonment will be avoided. See People v. Soliman.

The offended party may also pursue civil liability arising from the offense or an independent civil action for defamation under Article 33 of the Civil Code. An independent action uses the civil standard of preponderance of evidence, but damages must still be legally and factually supported. There can be no double recovery for the same act.

A retraction, correction, apology, takedown, or settlement may affect damages, motive, credibility, or penalty. It does not automatically extinguish a criminal case once filed. The prosecution is brought in the name of the People of the Philippines, and a complainant’s affidavit of desistance does not by itself compel dismissal.

Common mistakes

Waiting for a demand letter, apology, or platform decision until the one-year period expires;
Treating the original posting date as the discovery date without examining the evidence;
Filing in a convenient city without facts establishing venue;
Naming page owners, employers, or people who merely liked or shared content without proof of authorship;
Submitting cropped screenshots without URLs, context, witnesses, or authentication;
Assuming an anonymous account makes a case impossible—or assuming a display name conclusively proves identity;
Believing truth alone is always a complete defense;
Believing every criticism of a public official is automatically protected;
Reposting the accusation while trying to deny or “explain” it;
Deleting devices, messages, drafts, or source files after receiving notice of a complaint;
Ignoring a subpoena because it is “not yet a court case”;
Assuming an apology or private settlement automatically ends the public prosecution; and
Threatening “pay me or I will have you jailed,” which may create a separate legal problem.

When legal help is urgent

Seek a Philippine lawyer immediately when:

The one-year period is close to expiring;
A subpoena, prosecutor’s resolution, Information, summons, or warrant has been received;
The account is anonymous or platform records may soon disappear;
The post was edited, deleted, livestreamed, or sent through disappearing messages;
The accusation involves a journalist, whistleblower, public official, public figure, or significant public-interest issue;
Several posts, authors, platforms, or possible venues are involved;
The author or complainant is abroad;
The material also contains threats, stalking, doxxing, intimate images, child exploitation, identity theft, or unlawfully disclosed private data; or
A proposed settlement includes payment, admissions, confidentiality, or deletion of evidence.

Frequently asked questions

Is a screenshot enough to win a cyber libel case?

Not automatically. It may help preserve what appeared on screen, but the proponent must still establish authenticity, completeness, authorship, publication, identification, and the other elements. Preserve the URL, account context, original files, device, and witnesses.

Can I file even if the post did not name me?

Possibly. You must show that readers could identify you through the wording, description, images, surrounding circumstances, or extrinsic evidence. A witness who understood the post to refer to you may be important.

Can someone be charged merely for liking or sharing a post?

Under Disini, a person who merely receives and reacts to the original post cannot be punished as its author. A person who writes an additional defamatory caption, comment, or other new content may face a separate authorship analysis.

Does deleting the post end the case?

No. Deletion does not erase a completed publication or evidence already preserved. Prompt removal, correction, and apology may nevertheless affect proof of motive, damages, settlement, or sentencing.

Will a criminal complaint cause immediate arrest?

Ordinarily, filing a complaint for preliminary investigation does not itself authorize arrest. If an Information is later filed, the judge independently evaluates probable cause and decides whether to issue a warrant or summons. Valid warrantless-arrest situations are governed by separate rules.

Can the parties settle?

They may settle civil claims and agree on correction, apology, or other lawful terms. But the criminal prosecution is controlled by the State, so settlement or desistance does not guarantee dismissal.

Is cyber libel always punishable by imprisonment?

No. The court may impose imprisonment, a fine, or both. A fine-only sentence is legally possible, but it depends on judicial discretion and the circumstances; it should never be assumed in advance.

Where can an anonymous-post case be reported?

Investigative assistance may be requested from the NBI Cybercrime Division or another authorized cybercrime law-enforcement unit. This should be coordinated with timely filing before the proper prosecution office because an investigative request should not be assumed to stop prescription.

This article provides general Philippine legal information, not advice for a particular case or a substitute for reviewing the complete post, records, dates, and court papers with a lawyer. Laws and procedures were checked against official sources current to July 27, 2026.