Quick answer

A cyber libel case in the Philippines is usually started by filing a sworn complaint and supporting evidence with the proper City or Provincial Prosecutor’s Office. If the poster is anonymous or important platform data may disappear, first seek prompt investigative assistance from the NBI Cybercrime Division or another authorized cybercrime unit.

To succeed, the prosecution must prove beyond reasonable doubt that the accused authored a defamatory imputation, published it to at least one person other than the offended party, clearly or sufficiently identified the offended party, acted with the legally required malice, and used a computer system or similar technology.

For the defense, do not ignore a prosecutor’s subpoena, court summons, or warrant. Preserve the complete online context, secure counsel immediately, and raise factual and legal defenses through a properly supported counter-affidavit. Possible defenses include lack of authorship, publication, identification, defamatory meaning, or malice; privileged communication; fair comment on a matter of public interest; truth under the conditions imposed by law; prescription; and improper venue.

The most important deadline is short: the Supreme Court has confirmed that criminal cyber libel prescribes in one year from discovery by the offended party, the authorities, or their agents. A separate civil action for defamation is also generally subject to a one-year period, although its precise accrual and tolling must be evaluated independently.

What counts as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the prohibited act is committed through a computer system or a similar future technology. It can cover defamatory material in social-media posts, blogs, websites, online articles, emails, group chats, digital images, videos, captions, or comparable electronic communications.

Under Articles 353 to 355 of the Revised Penal Code, the prosecution generally must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose a person or juridical entity to contempt, or to blacken the memory of a deceased person.
Publication. The statement was communicated to at least one person other than the person defamed. A message seen only by its subject ordinarily lacks this element; a post, group message, forwarded email, or shared image seen by another person may satisfy it.
Identification. The offended party was named or was identifiable from the words, image, surrounding facts, or circumstances. Omitting a name does not prevent liability if readers could reasonably determine who was meant.
Malice. The applicable kind of malice must be shown or legally presumed. The rules differ when the communication is privileged or concerns a public official, public figure, or matter of public interest.
Use of a computer system or similar means. The defamatory material was published through information and communications technology.
Authorship and identity of the accused. The prosecution must connect the accused—not merely an account name or screenshot—to the publication.

The entire statement and its context matter. Insults, exaggeration, rhetorical language, satire, opinion, and factual accusations are not automatically treated alike. An opinion may still create risk if it carries or implies a defamatory assertion of fact.

The one-year criminal deadline

In Causing v. People, the Supreme Court ruled that cyber libel prescribes in one year, abandoning the earlier 15-year approach. Its April 8, 2026 resolution reaffirmed that the period runs from actual discovery by the offended party, the authorities, or their agents—not automatically from the upload date. There is no general legal presumption that a person discovered a Facebook post merely because it was posted publicly. See the 2023 decision and 2026 resolution.

Article 91 of the Revised Penal Code provides that:

The period begins when the offense is discovered by the offended party, the authorities, or their agents.
Filing the proper complaint or information interrupts prescription.
The period may run again if the proceedings terminate without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused.
Prescription does not run while the offender is absent from the Philippines.

The discovery date is therefore a critical fact. A complainant should record when, how, and from whom the post was first learned. A respondent may contest that account using prior messages, screenshots, comments, platform notifications, demand letters, or other evidence showing earlier discovery.

Do not wait until the anniversary date. Questions about the correct venue, sufficiency of filing, prior proceedings, absence from the Philippines, or competing discovery dates can change the computation. File well before the deadline through the proper office.

A separate civil action for defamation generally prescribes in one year under Article 1147 of the Civil Code. Its accrual, interruption, and relationship to the criminal case require separate analysis.

What to preserve before filing or responding

Preserve the evidence before asking the author or platform to remove the material. Save more than a cropped screenshot.

Keep:

The complete post, article, message, image, audio, or video.
The full URL and the account’s profile URL, username, handle, and displayed name.
Visible publication dates, times, edits, privacy or audience settings, and engagement information.
Screenshots showing the entire screen, including the browser address bar where possible.
A screen recording that opens the account, post, comments, and surrounding thread.
The original downloaded files without editing, recompression, annotation, or conversion.
The complete conversation before and after the disputed statement.
Notifications, emails, direct messages, admissions, apologies, retractions, or deletion notices.
The date and circumstances of discovery.
The names and affidavits of people who saw the material and understood whom it concerned.
Evidence connecting the account to the alleged author, such as prior communications, admissions, consistent account activity, or lawfully obtained account records.
For a complainant, proof of resulting harm, including lost work, cancelled contracts, customer communications, medical records, or other documented consequences.
For a respondent, drafts, source documents, research notes, official records, access logs, security alerts, and evidence of verification or good faith.

Retain the original device when practicable. Do not access another person’s account, guess passwords, impersonate anyone, or use unlawful surveillance to obtain evidence. Do not delete, alter, backdate, fabricate, or selectively edit relevant material after a dispute begins.

Screenshots are useful but may be challenged. The person offering electronic evidence must be able to explain where it came from and why it is authentic and reliable. Where identity or metadata is disputed, an official digital-forensic investigation may be important.

How to file a complaint

1. Check every legal element first

Identify the exact words, image, or segment alleged to be defamatory. Explain:

What defamatory meaning it conveyed.
Who published it.
How the offended party was identified.
Who else received or viewed it.
Why the communication was malicious or why no privilege applies.
How it was published through a computer system.
When and how it was discovered.
Which facts establish the chosen venue.

A complaint based only on hurt feelings, criticism, an account name, or a cropped screenshot may fail to establish all the required elements.

2. Determine the proper venue

Under Section 2.1 of the Rule on Cybercrime Warrants, a criminal action under Section 4 of Republic Act No. 10175 is filed before the designated cybercrime court of the province or city:

Where the offense or any element was committed;
Where any part of the computer system used was situated; or
Where damage to a natural or juridical person took place.

The first court in which the criminal action is properly filed acquires jurisdiction to the exclusion of the others. The Supreme Court has emphasized that internet accessibility alone should not become a license to sue anywhere. Venue facts must be alleged and supported, not assumed. See Tieng v. People and its discussion of the cybercrime venue rule.

Before going to court, the complaint is ordinarily filed with the prosecution office corresponding to the legally supportable venue. When several possible venues exist, obtain advice before choosing one.

3. Decide whether law-enforcement investigation is needed

A complainant may proceed through the proper prosecutor’s office, but investigative assistance is especially useful when:

The poster is anonymous or uses a false identity.
Account ownership is disputed.
Subscriber information or traffic data is needed.
Content may be deleted.
A device or account requires forensic examination.
The platform or relevant data is outside the Philippines.

Republic Act No. 10175 designates the NBI and PNP as cybercrime law-enforcement authorities. The NBI provides investigative assistance for victims of computer crimes and an online complaint page. A law-enforcement complaint does not guarantee that an anonymous user will be identified; disclosure, search, seizure, and examination of protected data generally require the proper legal process and, where required, a court warrant.

Data preservation is time-sensitive. Section 13 of Republic Act No. 10175 sets a minimum six-month preservation period for specified traffic data and subscriber information from the relevant transaction and provides for preservation of content data following a law-enforcement order. A complainant cannot personally compel a platform to disclose protected subscriber data merely by sending a demand letter.

4. Prepare the complaint-affidavit

The complaint-affidavit should be chronological, specific, sworn, and supported by properly labeled attachments. Include the respondent’s address if known and attach witness affidavits and other evidence establishing each element.

State the discovery date truthfully. Identify the exact publication rather than describing it generally. If a statement is in Filipino, a regional language, slang, or coded wording, explain its meaning and context. If only part of a long video or thread is challenged, preserve and disclose the complete context.

Ask the prosecution office about its current filing checklist, required copies, accepted electronic-filing procedure, and fees. If filing electronically is allowed, obtain confirmation that the complaint was formally received and docketed; sending an ordinary email is not necessarily the same as making a legally sufficient filing.

5. Participate in preliminary investigation

DOJ prosecution offices now apply the 2024 DOJ–NPS Rules on Preliminary Investigations and Inquest Proceedings. The Supreme Court upheld the DOJ’s authority to adopt these procedures in Meking v. Secretary of Justice.

The prosecutor evaluates whether the evidence establishes a prima facie case with reasonable certainty of conviction. This requires evidence considered admissible, credible, capable of preservation, and capable of presentation to prove every element and identify the responsible person.

If the case proceeds:

The respondent receives a subpoena with the complaint and supporting evidence.
The schedule should give the respondent at least 10 days from receipt to prepare for the initial preliminary-investigation hearing and submit a counter-affidavit.
A meritorious extension may be granted, generally for no more than 10 days.
Reply and rejoinder affidavits may be required when necessary.
The prosecutor may conduct a clarificatory hearing, but preliminary investigation is not a full trial and the parties do not conduct ordinary cross-examination.
The prosecutor issues a resolution either recommending dismissal or the filing of an Information in court.

An aggrieved party may file a motion for reconsideration within 15 days from receipt of the resolution under the 2024 rules. A petition for review may be available under the applicable DOJ appeal rules, ordinarily within a similarly short period, but the reviewing office, appealability, required attachments, and effect of an Information already filed depend on the case. A petition for review does not automatically stop court proceedings; counsel should consider a proper motion to suspend proceedings.

How to defend at preliminary investigation

A person who receives a prosecutor’s subpoena is a respondent, not yet an accused in court. This is often the best opportunity to prevent an unsupported charge from becoming a criminal case.

Take these steps immediately:

Record the exact date and manner in which the subpoena was received.
Obtain the complete complaint and every attachment.
Retain counsel and calendar the counter-affidavit deadline.
Preserve the complete account, thread, device, access records, and source materials.
Do not contact or threaten the complainant, witnesses, or investigators.
Do not post a public “defense” that repeats the disputed accusation.
Prepare a sworn, evidence-backed counter-affidavit addressing every element.
Raise prescription, venue, privilege, authorship, and constitutional issues expressly rather than relying on a general denial.

Under the older Rule 112 framework and the current DOJ procedure, a respondent should not substitute an informal letter or unsupported motion for the required counter-affidavit. If the respondent fails to participate, the prosecutor may resolve the complaint on the complainant’s evidence.

Common defenses and what they require

Defense or issue	What must be examined
No authorship	Whether the accused actually controlled and used the account; evidence of hacking, cloning, impersonation, shared access, security alerts, device history, or another author
No publication	Whether anyone other than the offended party received or perceived the statement
No identification	Whether reasonable recipients could identify the complainant from the words and surrounding circumstances
No defamatory imputation	The ordinary meaning, complete context, audience, tone, figures of speech, and whether the material asserts a discreditable fact
No malice	Good-faith investigation, source materials, efforts to verify, requests for comment, absence of ill will, and the applicable burden of proof
Privileged communication	Whether the communication was made in the performance of a legal, moral, or social duty and was limited to persons with a corresponding interest
Fair and true official report	Whether the report concerned a nonconfidential official proceeding, was fair and accurate, made in good faith, and did not add defamatory comments
Fair comment or public-interest speech	Whether the subject was a public official, public figure, or genuine matter of public interest; whether opinions were based on established facts; and whether actual malice can be proved
Truth	Whether Article 361 permits the proof, whether the imputation is true, and whether good motives and justifiable ends are also established where required
Prescription	The real discovery date, any earlier discovery by authorities or agents, the interrupting filing, prior terminated proceedings, and absence from the Philippines
Improper venue	Whether the complaint and eventual Information establish one of the authorized cybercrime venues with particular facts
Mere reaction or sharing	Whether the person authored an independent defamatory statement or merely received, liked, commented on, or shared someone else’s post

Truth is not an automatic defense

Article 354 states that a defamatory imputation may be presumed malicious even if true when good intention and justifiable motive are not shown. Article 361 allows truth to be presented under its conditions and generally requires both truth and good motives or justifiable ends for acquittal. It contains a distinct rule for imputations against government employees concerning the discharge of official duties.

A respondent should therefore present the underlying admissible records, witnesses, verification work, and public or legitimate purpose—not merely assert, “It is true.”

Public officials and public figures

When the disputed publication concerns a public official’s official conduct, a public figure, or protected commentary on a matter of public interest, the prosecution may have to prove actual malice: knowledge of falsity or reckless disregard of whether the statement was false.

This protection is not unlimited. Personal attacks unrelated to public conduct, accusations resting on knowingly false facts, serious departures from verification, or evidence of reckless disregard may defeat it. The Supreme Court’s discussion in Borjal v. Court of Appeals and later public-figure cases makes the facts and subject matter decisive.

Likes, comments, and shares

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author but invalidated its application to persons who merely received and reacted to the post. It also invalidated aiding or abetting liability under Section 5 as applied to cyber libel.

That ruling does not immunize a person who writes a new and independently defamatory caption, accusation, or comment. The issue is whether the person merely reacted or became the author of a separate defamatory publication.

What happens after an Information is filed

If the prosecutor approves the charge, an Information is filed in the designated Regional Trial Court acting as a cybercrime court. The judge independently evaluates probable cause and may:

Dismiss the case if the record clearly fails to establish probable cause;
Require additional evidence;
Issue a summons when custody is unnecessary; or
Issue a warrant of arrest.

At this point, the respondent becomes an accused. The accused should obtain counsel before arraignment because certain objections—including defects that appear on the face of the Information and improper venue—may need to be raised through a motion to quash before entering a plea.

Bail is generally a matter of right before conviction in a cyber libel case, but the amount and process are determined by the court. If a warrant has issued, coordinate a lawful surrender and bail application through counsel rather than evading service.

At trial, the prosecution must prove guilt beyond reasonable doubt. A finding of probable cause during preliminary investigation does not establish guilt.

Possible penalties and civil liability

Ordinary written libel under Article 355, as amended by Republic Act No. 10951, is punishable by imprisonment, a fine of ₱40,000 to ₱1,200,000, or both. Section 6 of Republic Act No. 10175 increases the penalty by one degree when information and communications technology is used.

For cyber libel, this produces:

A possible imprisonment range of four years, two months and one day to eight years; or
A fine within the cyber-libel range of ₱40,000 to ₱1,500,000; or
Both, in the court’s lawful discretion.

The Supreme Court confirmed the computation of the cyber-libel fine and explained that imprisonment is not mandatory in Simbajon v. People. Administrative Circular No. 08-2008 recognizes a judicial preference for a fine in appropriate libel cases, but it does not abolish imprisonment or guarantee a fine-only sentence.

Civil damages may also be awarded. Under Rule 111 of the Rules of Criminal Procedure, civil liability arising from the offense is generally deemed included in the criminal action unless it is waived, reserved, or previously instituted. Article 33 of the Civil Code also recognizes an independent civil action for defamation, subject to the prohibition against double recovery.

A criminal complaint does not automatically remove the post. Disini invalidated the provision that would have allowed the DOJ to block content based solely on its own finding. Platform reporting, negotiated removal, and any judicial relief are separate matters.

Common mistakes

Waiting for a demand letter, apology, or platform decision until the one-year period expires.
Assuming the period always begins on the upload date—or, conversely, that an old post can never prescribe.
Filing in any city merely because the post could be viewed there.
Submitting only cropped screenshots without the URL, profile, thread, or authentication evidence.
Naming every person who liked or shared the post without determining whether each authored a defamatory statement.
Assuming a pseudonym makes the poster immune or assuming an account name proves the poster’s identity.
Treating truth as a complete defense without addressing motive, purpose, admissibility, and Article 361.
Believing that deleting a post erases publication or that leaving it online necessarily creates a new offense every day.
Reposting the accusation while complaining about it.
Publicly attacking the complainant, respondent, prosecutor, or witnesses.
Ignoring a subpoena because the case is “only at the prosecutor’s office.”
Filing a motion for reconsideration or petition for review without checking the 15-day deadline and whether court proceedings must separately be suspended.
Deleting messages, source files, account data, or devices after receiving notice of a dispute.
Assuming barangay conciliation is required. Cyber libel exceeds the penalty limits for disputes subject to mandatory Katarungang Pambarangay proceedings under Section 408 of the Local Government Code.

When legal help is urgent

Obtain immediate legal assistance when:

The one-year anniversary of discovery is approaching.
The post or account is anonymous, deleted, ephemeral, or likely to lose platform data.
A prosecutor’s subpoena has been received.
A motion-for-reconsideration or review deadline is running.
An Information, summons, hold-departure issue, or arrest warrant has arisen.
Investigators request access to, surrender of, or examination of a device or account.
The case involves a journalist, public official, public figure, or confidential official proceeding.
The alleged author or relevant platform is abroad.
The same conduct also includes threats, stalking, doxxing, identity theft, intimate-image abuse, child sexual-abuse material, extortion, or unlawful access. These may involve separate offenses and require immediate safety and law-enforcement measures.

Those unable to afford private counsel may apply for assistance from the Public Attorney’s Office, subject to its qualification rules, or contact the Integrated Bar of the Philippines National Center for Legal Aid.

Frequently asked questions

Can I file even if the post has been deleted?

Yes, if the offense has not prescribed and admissible evidence can establish the publication, content, authorship, and other elements. Deleted platform data may be difficult to recover, so preservation and investigative assistance should be sought promptly.

Is a private message cyber libel?

Only if it was published to someone other than the person allegedly defamed. A direct message sent solely to that person ordinarily lacks publication. A group chat or forwarded message may be different.

Does the complainant have to be named?

No. Identification may arise from photographs, job titles, relationships, surrounding posts, or other circumstances understood by readers.

Can an anonymous account be charged?

Potentially, but the prosecution must identify the natural person responsible. Screenshots of the account alone may not establish who operated it. Lawfully obtained subscriber information, admissions, witnesses, access records, or forensic evidence may be needed.

Is sharing someone else’s post automatically cyber libel?

No. Disini protects persons who merely receive and react to an original post from cyber-libel liability on that basis alone. A person who adds a new defamatory accusation may be treated as the author of that separate statement.

Does an apology or retraction end the case?

Not automatically. It may affect the evidence of motive, damages, settlement, or sentencing, but publication is not erased. Any settlement or withdrawal must comply with criminal-procedure rules because the criminal case is prosecuted in the name of the People of the Philippines.

Can both ordinary libel and cyber libel be charged for the same online publication?

The Supreme Court held in Disini that the same defamatory material cannot be punished twice as ordinary libel and cyber libel merely because the computer system supplies the means of publication. A distinct print publication or a separate online statement requires fact-specific analysis.

Must I pass through the barangay first?

Generally no. Cyber libel carries penalties well above the Local Government Code’s ceiling for mandatory barangay conciliation. Voluntary settlement discussions remain possible, but they do not suspend the one-year criminal deadline unless the law recognizes an effective interrupting proceeding.

Does filing a complaint guarantee that the post will be removed?

No. Criminal prosecution, platform moderation, and judicial relief are separate processes. Preserve the evidence before requesting removal.

Can a Philippine case proceed if the poster is overseas?

Possibly. Republic Act No. 10175 contains jurisdiction provisions covering specified Philippine elements, computer systems, damage, and certain conduct by Filipino nationals abroad. Jurisdiction, venue, service, evidence gathering, and enforcement may nevertheless be difficult and must be assessed individually.

Official sources

This article provides general legal information, not advice for a particular case and not an attorney-client relationship. Cyber libel outcomes depend heavily on the exact publication, authorship evidence, status of the parties, venue, discovery date, and procedural record. Primary legal sources and procedures were checked through July 26, 2026.