Quick answer
A cyber libel case in the Philippines is filed and defended much like a criminal libel case, but with additional rules for online publication, electronic evidence, cybercrime venue, data preservation, and authorship. Section 4(c)(4) of Republic Act No. 10175 covers libel committed through a computer system or similar information and communications technology. The Supreme Court has upheld the offense as constitutional as applied to the original author of the defamatory online statement. (Lawphil)
For a complainant, the practical priorities are to preserve reliable evidence, establish who authored the post, determine when the defamatory material was discovered, identify a proper venue, and file a sufficiently supported complaint with the proper prosecution office before prescription. If the account is anonymous or important platform data may disappear, early assistance from the NBI Cybercrime Division or PNP Anti-Cybercrime Group may be necessary.
For a respondent, do not treat a prosecutor's subpoena as an informal demand letter. Preserve the entire online context and prepare a counter-affidavit addressing authorship, authenticity, defamatory meaning, publication, identification of the complainant, malice, privilege, truth and good motive where applicable, prescription, venue, and constitutional protections for speech about public officials or public figures.
Most importantly, cyber libel presently prescribes in one year from discovery of the alleged defamatory material by the offended party, the authorities, or their agents. In its April 8, 2026 final resolution in Causing v. People, the Supreme Court rejected the argument that cyber libel carries a 15-year prescriptive period and denied the motions for reconsideration with finality. The Court also ruled that a social-media post is not automatically presumed discovered on the day it was uploaded merely because it was publicly accessible. (Lawphil)
What must be proved in a cyber libel case?
Cyber libel does not arise simply because an online statement is insulting, embarrassing, offensive, or false. The prosecution must establish the elements of libel under the Revised Penal Code, together with the online means contemplated by the Cybercrime Prevention Act.
Article 353 defines libel as a public and malicious imputation of a crime, vice or defect, whether real or imaginary, or of an act, omission, condition, status, or circumstance tending to dishonor, discredit, or bring a natural or juridical person into contempt. The Supreme Court summarizes the traditional elements as a discreditable allegation concerning another person, publication, identification of the person defamed, and malice. Cyber libel additionally requires that the defamatory publication be made through a computer system or similar ICT. (Lawphil)
The statement must be defamatory
The exact words, images, captions, videos, hashtags, surrounding discussion, and ordinary meaning in context matter. A court or prosecutor should examine what the publication actually communicates rather than relying only on a complainant's characterization that it was "libelous."
Statements accusing someone of stealing, committing fraud, engaging in a serious vice, or committing other dishonorable conduct can potentially satisfy the defamatory-imputation element. On the other hand, context may show that a statement was rhetorical criticism, opinion, satire, fair comment, or otherwise outside criminal libel. The distinction can be highly fact-dependent.
There must be publication
Libel requires publication to a third person. An online post, public comment, group message, article, video caption, or similar communication can satisfy publication when it is communicated to someone other than the person allegedly defamed.
A private exchange sent only to the person criticized raises a materially different issue because the prosecution still has to establish publication as understood in libel law.
The complainant must be identifiable
The prosecution must establish that the allegedly defamatory statement concerned the complainant. Naming the person directly is the clearest case, but identification may also be argued from surrounding facts and context. Where the statement is vague or could apply to many people, identification can become an important defense issue.
Malice must be analyzed correctly
Article 354 generally presumes a defamatory imputation malicious unless good intention and justifiable motive are shown, subject to recognized privileged communications. The Revised Penal Code expressly recognizes, among others, certain private communications made in the performance of a legal, moral, or social duty and fair and true reports made in good faith of nonconfidential official proceedings. (Lawphil)
The rule becomes more protective of speech where public officials or public figures are involved. In Disini v. Secretary of Justice, the Supreme Court explained that when actual malice is required, the prosecution must establish that the speaker knew the statement was false or acted with reckless disregard of whether it was false. Reckless disregard requires a high degree of awareness of probable falsity; gross or even extreme negligence alone does not necessarily establish actual malice. (Lawphil)
This is not a blanket license to make false accusations against politicians, celebrities, or other public figures. Whether the public-figure doctrine applies, whether the statement concerns a matter of public interest, and whether actual malice has been proved depend on the circumstances.
Who can be liable for a Facebook post, comment, share, repost, or reaction?
This is one of the most important limits on cyber libel.
In Disini, the Supreme Court declared Section 4(c)(4) valid with respect to the original author of the online post, but unconstitutional as applied to people who merely receive the post and react to it. The Court specifically discussed ordinary "Like," "Comment," and "Share" reactions and rejected criminal liability merely on that theory. It also invalidated Section 5 on aiding or abetting insofar as it applied to online libel. (Lawphil)
That rule should not be misunderstood. A person who writes a new defamatory statement in a comment, caption, quote-post, or accompanying text may become the original author of that new statement. The Supreme Court itself distinguished mere reactions from a comment that creates an altogether new defamatory story. (Lawphil)
Accordingly, a complaint should identify precisely what the respondent personally authored rather than simply attaching a chain of shares and reactions.
The filing deadline: cyber libel prescribes in one year
The one-year rule is now especially important because older discussions online may still refer to much longer periods.
In its April 8, 2026 en banc resolution in Berteni Cataluña Causing v. People of the Philippines, the Supreme Court reaffirmed that cyber libel is essentially libel under Articles 353 and 355 committed through ICT and therefore falls within the one-year prescriptive period for libel under Article 90 of the Revised Penal Code. The Court denied the motions for partial reconsideration with finality. (Lawphil)
The starting point is not automatically the posting date. Article 91 provides that prescription begins when the offense is discovered by the offended party, the authorities, or their agents. The Supreme Court expressly rejected a presumption that a Facebook post was discovered immediately upon publication simply because it was publicly viewable. (Lawphil)
This makes evidence of the discovery date crucial. A message forwarding the post to the complainant, the complainant's first response to it, an earlier demand letter, a contemporaneous comment, a public statement threatening suit, or similar evidence may become relevant to whether the case was filed on time.
The filing of the complaint or information interrupts prescription under Article 91. A person approaching the one-year deadline should not assume that sending a demand letter, making a platform report, or merely asking an investigating agency for advice necessarily has the same legal effect as timely filing the proper criminal complaint. (Lawphil)
Preserve the evidence before the post disappears
Screenshots are useful, but a screenshot is not automatically conclusive proof that a particular person owned an account or authored a post. In a 2024 Supreme Court decision involving Facebook evidence, the Court emphasized that screenshots are documentary and electronic evidence whose authenticity and due execution may still have to be established. It also rejected an assumption of account ownership where adequate proof was lacking. (Lawphil)
Before requesting deletion, blocking an account, changing devices, or losing access to the material, preserve as much of the original context as reasonably possible:
- Capture the complete post, comment, image, video, caption, username, account or page name, visible date and time, URL, surrounding thread, and relevant comments or reactions; make a screen recording showing how the material is reached from the account or page; preserve messages, notifications, admissions, emails, source files, and other evidence connecting the respondent to the account; keep evidence showing when the complainant first discovered the material; identify witnesses who actually saw the publication; retain the original device or files where authenticity may later matter; and preserve documents supporting the truth or falsity of the accusation, the author's research and factual basis, and any claimed financial or reputational consequences.
Do not crop away information that may later be needed to authenticate or contextualize the publication. Both sides should preserve the entire conversation rather than only the sentences most favorable to them.
What if the account is fake or anonymous?
A screenshot showing an account name does not necessarily establish the human being behind that account. Where authorship is genuinely unknown, technical investigation may be necessary.
Republic Act No. 10175 requires service providers to preserve certain traffic data and subscriber information for at least six months from the relevant transaction, while content data may be preserved for six months upon a law-enforcement preservation order. Law-enforcement authorities may order one additional six-month extension. Disclosure of subscriber, traffic, or relevant data generally requires the processes specified by the Act, including a court warrant for disclosure under Section 14. (Lawphil)
For this reason, a complainant dealing with an anonymous account should act promptly rather than expecting Meta, Google, an ISP, a telecommunications company, or another provider to retain every useful record indefinitely.
The NBI's current Citizen's Charter expressly provides investigative assistance through its CyberCrime Division for victims of computer crimes, including receiving complaints, interviewing complainants and witnesses, obtaining sworn statements and supporting documents, and examining relevant devices. (National Bureau of Investigation) The Cybercrime Prevention Act's implementing rules likewise assign cybercrime-investigation functions to the NBI and PNP cybercrime units. (Cybercrime Division)
How to file a cyber libel complaint
Step 1: Screen the statement against every legal element
Before filing, identify the exact publication that allegedly constitutes cyber libel. Quote or reproduce the specific words accurately and explain the surrounding context.
The complaint should establish why the words concern the complainant, why they are defamatory, how they were published to another person, why the respondent is the author, how malice is established under the applicable standard, and how the publication was made through a computer system.
A complaint based merely on "this post ruined my reputation" without reliable evidence of authorship and the actual publication is vulnerable at preliminary investigation.
Step 2: Establish the discovery date and compute prescription immediately
Document when the complainant first learned of the post. Do not simply use the upload date unless that was also the actual discovery date.
Because prescription is only one year, the issue should be checked at the beginning of the case rather than after months of demands or negotiations. The Supreme Court's 2026 ruling makes the actual discovery date an evidentiary question when disputed. (Lawphil)
Step 3: Determine proper venue
Cyber libel cannot safely be filed in any city merely because an internet connection could access the post there.
Section 2.1 of the Supreme Court's Rule on Cybercrime Warrants states that criminal actions for Section 4 or Section 5 cybercrime offenses are filed before the designated cybercrime court of the province or city where the offense or any element was committed, where any part of the computer system used was situated, or where damage to the natural or juridical person took place. The first court in which the criminal action is properly filed acquires jurisdiction to the exclusion of the others. (Office of the Court Administrator)
Venue should therefore be analyzed from concrete facts before choosing the prosecution office that will handle the complaint and the eventual court filing. When locations, servers, residences, or alleged damage span several places, legal advice is particularly useful.
Step 4: Prepare the complaint-affidavit and supporting evidence
The complaint-affidavit should be fact-specific and chronological. Attach the electronic evidence, documents supporting authenticity and authorship, witness affidavits where useful, proof relevant to discovery, and documents bearing on the alleged falsity, malice, or resulting damages.
The current prosecutorial framework is Department Circular No. 015, series of 2024, the DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings. In November 2025, the Supreme Court upheld those rules as a valid exercise of DOJ authority.
Under the current rule, the prosecution standard at preliminary investigation is prima facie evidence with reasonable certainty of conviction. The prosecutor examines whether the evidence, if left uncontradicted, could establish all elements and warrant conviction beyond reasonable doubt, and whether the evidence is admissible, credible, and capable of being preserved and presented. The respondent's counter-affidavit and evidence are also evaluated.
Cyber libel falls within the regular preliminary-investigation framework because its statutory imprisonment exposure, after the Cybercrime Prevention Act's one-degree increase, extends beyond the six-year threshold used by the DOJ to distinguish regular preliminary investigation from the expedited process for lower-penalty offenses. (Lawphil)
Step 5: Use cybercrime investigators when technical evidence is necessary
A complainant may proceed to the appropriate prosecution office with an adequately established case, but NBI or PNP assistance can be important when the offender is anonymous, technical attribution is disputed, a device requires forensic examination, or service-provider records need preservation or lawful production.
An investigative report does not substitute for proving the elements of cyber libel. The prosecutor still evaluates whether the evidence meets the DOJ-NPS standard.
How to defend against a cyber libel complaint
Respond to the prosecutor, not just to the complainant
Once a subpoena or formal prosecutorial process is received, calendar the stated deadline immediately. The operative DOJ-NPS rules are no longer simply the old Rule 112 framework that many online templates still reproduce. The Supreme Court has confirmed DOJ's authority to govern preliminary investigations through Department Circular No. 015.
A respondent should ordinarily use the counter-affidavit to present legal defenses and evidence, because the prosecutor now expressly evaluates the respondent's evidence when deciding whether there is reasonable certainty of conviction.
Challenge authorship where it is genuinely disputed
A profile name, photograph, or screenshot does not by itself conclusively establish who created a post.
Evidence may show that the respondent did not own the account, did not control it at the relevant time, was impersonated, was hacked, or did not author the particular statement. Such a defense should be supported by evidence rather than a bare denial.
The Supreme Court's 2024 discussion of Facebook screenshots underscores that ownership and participation cannot simply be assumed and that authenticity remains material. (Lawphil)
Distinguish a mere reaction from a new defamatory publication
If the accusation rests on a Like, Share, repost, or short reaction to someone else's publication, Disini must be examined closely. The constitutional ruling protects persons who simply receive and react to another's post from being treated as liable for cyber libel on that basis. (Lawphil)
But where the respondent added a new defamatory accusation, the prosecution may contend that the new text itself is an original defamatory publication. The precise words written by the respondent therefore matter.
Test whether the statement is actually defamatory
A respondent may argue that the words, read in full context, do not impute a crime, vice, defect, dishonorable act, or comparable circumstance contemplated by Article 353.
This can matter where the complaint isolates a phrase from a longer discussion, converts an obvious opinion into an assertion of fact, ignores satire or rhetorical language, or fails to explain why the complainant was identifiable.
Examine privilege, public interest, and actual malice
Article 354 contains statutory privileged situations. Philippine jurisprudence also affords wider constitutional protection to discussion of public affairs and criticism of public officials and public figures.
Where the higher actual-malice standard applies, the issue is not simply whether a statement eventually proved false. The prosecution must prove knowledge of falsity or reckless disregard meeting the constitutional standard described in Disini. (Lawphil)
A respondent relying on responsible investigation should preserve records showing the sources consulted, documents reviewed, verification undertaken, communications made to obtain the other side, and the factual basis for the publication. Such evidence can be far stronger than merely asserting "I thought it was true."
Understand the truth defense correctly
"Everything I posted was true" is not automatically the end of a criminal libel case.
Article 361 provides that where the allegedly libelous matter is proved true and was published with good motives and for justifiable ends, the defendant shall be acquitted. It also contains a special limitation concerning proof of truth for imputations of acts or omissions not constituting crimes when made against government employees. (Lawphil)
The factual truth of an allegation is therefore highly important, but the statutory requirements should be addressed rather than assuming truth is an unlimited defense in every context.
Raise prescription when the evidence supports it
Because the period is only one year, determine when the complainant actually discovered the material and when the proper complaint was filed.
A defendant should look for contemporaneous evidence showing earlier discovery: earlier replies, messages, public responses, requests for removal, threats of litigation, conversations with witnesses, or other records inconsistent with the discovery date later alleged.
The Supreme Court specifically recognized that the discovery date may require evidence and may be tested through witnesses and other proof. (Lawphil)
Check venue
Venue is not a technical afterthought in criminal cases. A respondent should examine the allegations connecting the case to the place where it was filed and compare them with Section 2.1 of the Rule on Cybercrime Warrants. (Supreme Court of the Philippines)
Watch for duplicate ordinary-libell and cyber-libell charges
The same online defamatory publication cannot simply be punished once as ordinary libel under the Revised Penal Code and again as cyber libel under Republic Act No. 10175.
In Disini, the Supreme Court held that charging the offender under both provisions for the same online libel violates the constitutional protection against double jeopardy. (Lawphil)
This does not mean every case involving several posts necessarily constitutes only one offense. Separate publications and separate statements require their own factual and legal analysis.
What penalties can cyber libel carry?
Article 355, as amended by Republic Act No. 10951, sets the penalty for ordinary written libel at prisión correccional in its minimum and medium periods, or a fine from ₱40,000 to ₱1,200,000, or both, in addition to the civil action that may be brought by the offended party. (Lawphil)
Republic Act No. 10175 provides that where the relevant Revised Penal Code offense is committed through ICT, the penalty to be imposed is one degree higher. The Supreme Court's 2026 Causing resolution expressly reaffirmed that this one-degree increase applies to libel committed through a computer system or ICT. (Lawphil)
The exact sentence in an actual conviction depends on the applicable penalty rules, the charge, circumstances, and the court's judgment. It is safer to analyze the actual case than to assume that every cyber libel conviction necessarily results in imprisonment.
Common mistakes that weaken a case
A complainant can seriously weaken an otherwise valid case by waiting because an outdated article says cyber libel prescribes in 12 or 15 years; preserving only cropped screenshots; failing to prove who operated the account; overlooking the date of actual discovery; treating every share or reaction as a separate cyber libel; filing in a location without adequately analyzing venue; or alleging falsity and malice only in conclusions.
A respondent can make equally serious errors by ignoring a prosecutor's subpoena; deleting the entire account and losing favorable evidence; relying only on a denial; assuming truth alone automatically defeats libel; failing to preserve proof of sources and verification; overlooking prescription; or failing to distinguish a mere reaction from words personally authored.
Both sides should avoid editing screenshots, creating reconstructed conversations, or presenting evidence without preserving originals. Credibility problems in electronic evidence can affect the entire case.
When legal help is urgent
Legal assistance should be obtained promptly when the one-year prescriptive period is approaching; the allegedly defamatory account is anonymous and provider data may need preservation; a prosecutor's subpoena has been received; several possible venues are involved; the case concerns a public official, journalist, lawyer, business, or public controversy where privilege and actual malice may be central; forensic attribution is disputed; multiple posts or respondents are involved; or an Information, warrant, or court process has already been issued.
If an Information has already been filed, the matter has moved beyond preliminary investigation. Republic Act No. 10175 gives the Regional Trial Court jurisdiction over offenses under the Act, with designated cybercrime courts handling cybercrime cases. (Lawphil) A person facing a warrant should obtain counsel and address surrender, bail, and court proceedings through lawful procedures rather than attempting to evade process.
Frequently asked questions
Can I file cyber libel because somebody shared a defamatory Facebook post?
Not automatically. Disini held cyber libel constitutional as to the original author but not as to persons who simply receive and react to the post. A share accompanied by a new defamatory accusation is different because the added statement may itself constitute an original publication. (Lawphil)
Is cyber libel still subject to a 12-year or 15-year prescriptive period?
No under the Supreme Court's current controlling ruling. As of April 8, 2026, the Court has reaffirmed with finality that cyber libel prescribes in one year, reckoned from discovery under Article 91. (Lawphil)
Does the one year always start when the post was uploaded?
No. The Supreme Court rejected automatic discovery on publication. The period starts when the defamatory material is discovered by the offended party, authorities, or their agents. The actual date may have to be proved. (Lawphil)
If the statement is true, can there still be libel?
Potentially. Article 361 expressly couples truth with good motives and justifiable ends for the statutory truth defense, subject to its specific rules. (Lawphil)
Are screenshots enough to win a cyber libel case?
Not necessarily. Screenshots are useful electronic evidence, but authenticity, account ownership, authorship, completeness, and context may all be challenged. The Supreme Court has specifically emphasized the need to prove authenticity and participation in cases relying on Facebook screenshots. (Lawphil)
Can I file the case anywhere because the post can be viewed everywhere?
No. Cybercrime venue is governed by Section 2.1 of the Rule on Cybercrime Warrants. Proper venue must be connected to one of the legally recognized grounds; mere theoretical internet accessibility should not be treated as unlimited nationwide venue. (Office of the Court Administrator)
Where can I seek help if I do not know who owns the account?
The NBI Cybercrime Division and PNP Anti-Cybercrime Group are the principal law-enforcement cybercrime units. They may investigate cybercrime, assist with electronic evidence, and pursue lawful processes for data preservation or production when warranted. (National Bureau of Investigation)
Can the same online post be charged as both ordinary libel and cyber libel?
Not as separate criminal liability for the same online libel. The Supreme Court held in Disini that charging the same offender under both Section 4(c)(4) of Republic Act No. 10175 and Article 353 of the Revised Penal Code for the same online libel violates double jeopardy. (Lawphil)
Official sources
The principal statutory text is the Cybercrime Prevention Act of 2012 (Republic Act No. 10175), read together with the Revised Penal Code provisions on libel and Republic Act No. 10951, which updated the Article 355 fine. The leading constitutional ruling is Disini v. Secretary of Justice, G.R. No. 203335, February 11, 2014. The current prescription ruling is the Supreme Court's April 8, 2026 resolution in Causing v. People, G.R. No. 258524. Current preliminary-investigation procedure is governed by DOJ Department Circular No. 015, series of 2024, whose validity was upheld in Meking v. Remulla, G.R. No. 280455, November 11, 2025. For investigative assistance, see the NBI CyberCrime Division Citizen's Charter service and the Supreme Court's Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC.
Disclaimer
This article provides general legal information, not legal advice for a particular dispute. Cyber libel cases turn heavily on the exact words used, authorship, electronic evidence, the complainant's status, privilege, actual discovery date, venue, and procedural history. The law and official sources above were checked as of August 23, 2026.