Quick answer

Cyber libel is committed when a person publishes through a computer system an identifiable, defamatory, and malicious imputation covered by Articles 353 and 355 of the Revised Penal Code. A Facebook post, public comment, online article, video caption, email circulated to other people, or comparable digital publication may qualify. Hurtful language alone is not automatically cyber libel; every legal element must be proved beyond reasonable doubt.

If you are the complainant, preserve the original online evidence and file a sworn complaint with the prosecutor’s office having proper territorial authority. Act promptly: under the Supreme Court’s current ruling, cyber libel generally prescribes one year from discovery by the offended party, the authorities, or their agents, subject to interruption and other rules under Article 91 of the Revised Penal Code.

If you receive a subpoena, complaint-affidavit, or court process, do not ignore it or argue about the case online. Obtain counsel, preserve—not delete—the relevant account and records, and submit the required counter-affidavit and evidence within the deadline stated in the subpoena or order.

Cyber libel remains a criminal offense. However, criticism, satire, opinion, privileged communication, truthful reporting, and discussion of public affairs may be protected depending on their exact words, context, factual basis, audience, and purpose.

What the prosecution must prove

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel to publication through a computer system or similar means.

The prosecution must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person or juridical entity to contempt.
Publication. Someone other than the person defamed saw, heard, or received the material. A message sent only to the subject ordinarily lacks publication, although forwarding it to another person can supply that element.
Identification. The complainant was named or was reasonably identifiable to people familiar with the circumstances. Using initials, a photograph, workplace, relationship, nickname, or contextual clues may be enough even without a complete name.
Malice. Article 354 generally presumes malice from a defamatory imputation unless the communication is privileged or the circumstances require proof of actual malice. The applicable standard depends in part on whether the complainant is a private person, public official, or public figure and whether the statement concerns a matter of public interest.
Use of a computer system or information and communications technology. The allegedly libelous material was published online or through covered technology.
Identity and participation of the accused. The prosecution must connect the accused to the authorship or publication. A profile name, screenshot, or accusation by itself does not necessarily prove who controlled the account or made the post.

The Supreme Court summarized the traditional elements and the actual-malice standard in Disini Jr. v. Secretary of Justice. Each element remains a factual question; prosecutors and courts should evaluate the complete publication rather than isolated words.

Not every offensive online statement is cyber libel

Opinion versus an assertion of fact

A loose insult, rhetorical exaggeration, joke, or opinion that cannot reasonably be understood as asserting a defamatory fact may fall outside libel. Merely adding “in my opinion,” however, does not protect a statement that effectively asserts a provably defamatory fact.

Context matters. Courts may consider the whole post or thread, its ordinary meaning, the relationship of the parties, the audience, accompanying images and links, and whether readers would understand the words literally.

Truth is not automatically enough in every criminal case

Article 361 of the Revised Penal Code permits proof of truth but generally also requires good motives and justifiable ends. When the imputation does not involve a crime, proof of truth is restricted, subject to the statutory rule concerning government employees and facts related to their official duties.

A person preparing a truth-based defense should preserve the reliable records and sources available before publication, not merely look for support after being charged.

Privileged communications

Article 354 recognizes qualified privileges that include:

A private communication made to another person in the performance of a legal, moral, or social duty.
A fair and true report, made in good faith and without additional comments, of a non-confidential judicial, legislative, or other official proceeding, or of official statements and acts.

The privilege is not unlimited. Excessive distribution, irrelevant accusations, bad faith, unnecessary insults, embellishment, or proof of actual malice may defeat a qualified privilege.

Some statements made in legislative, judicial, or comparable official proceedings may be absolutely privileged when the legal requirements are met. Whether a particular post reproducing such a statement shares that protection requires careful analysis.

Public officials, public figures, and matters of public interest

Speech about public affairs receives wider constitutional protection. When the complainant is a public official or public figure and the statement relates to the relevant public matter, the prosecution may have to prove actual malice: knowledge of falsity or reckless disregard of whether the statement was false. Recklessness requires more than ordinary or even gross negligence; it concerns serious doubts or a high awareness of probable falsity.

Public status does not create permission to invent accusations. It changes the malice analysis, which remains highly fact-dependent.

Likes, reactions, shares, and comments

In Disini, the Supreme Court upheld cyber-libel liability as applied to the author of the defamatory online statement but declared Section 5 on aiding or abetting unconstitutional insofar as it applied to cyber libel. A person should therefore not be charged with aiding cyber libel merely because of an ordinary reaction to someone else’s post.

That does not protect a user who writes a new, independently defamatory allegation in a comment, caption, repost, quote-post, or edited publication. The user may then be treated as the author of that new statement.

One publication cannot be punished twice as the same libel

The Supreme Court also ruled that identical material cannot be punished separately as both traditional libel and cyber libel merely because it appeared in print and online. Charging the same offense twice raises double-jeopardy concerns. Distinct publications, authors, words, audiences, or dates may require a different analysis.

The filing deadline: generally one year from discovery

In Causing v. People, as affirmed on reconsideration in the Supreme Court’s April 8, 2026 resolution, the Court held that cyber libel prescribes in one year under Article 90 of the Revised Penal Code.

The period is generally counted from the day the allegedly libelous material was discovered by:

the offended party;
the authorities; or
their agents.

Publication and discovery may occur on the same day, but they are not legally identical in every case. A complainant claiming later discovery should be prepared to prove when and how discovery occurred. An accused invoking prescription should likewise gather evidence showing the relevant discovery date.

Article 91 also provides that prescription is interrupted by the filing of the complaint or information and may run again if the proceedings terminate without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused. The period does not run while the offender is absent from the Philippine archipelago.

Prescription may involve disputed facts. When it is not apparent from the information itself, the accused normally bears the burden of presenting evidence supporting that defense. Do not wait until the last day to file or respond.

A separate civil action for injury to rights arising from defamation may also be subject to a short prescriptive period, commonly one year under Article 1147 of the Civil Code. The proper starting point, interruption, and relationship between civil and criminal remedies should be assessed from the actual facts.

Where a complaint may be filed

Cybercrime venue is governed by the Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC. A criminal action covered by Sections 4 and 5 of the Cybercrime Prevention Act may be brought before the designated cybercrime court of the province or city:

where any element of the offense was committed;
where any part of the computer system used is situated; or
where damage to a natural or juridical person occurred.

The court where the criminal action is first filed acquires jurisdiction to the exclusion of other courts that might also qualify. This differs from relying automatically on the complainant’s residence, the respondent’s residence, or the location where a screenshot was printed.

The complaint ordinarily begins with the Office of the City Prosecutor, Office of the Provincial Prosecutor, or other authorized prosecution office for the proper venue. The NBI Cybercrime Division or the Philippine National Police Anti-Cybercrime Group may assist in investigating account ownership, obtaining records through lawful process, and preparing technical evidence. An investigative report does not replace the prosecutor’s independent determination of probable cause.

How to file a cyber-libel complaint

1. Preserve the publication immediately

Before requesting removal or blocking the account, preserve:

Full-page screenshots showing the exact words, images, account name, date, time, and surrounding context.
The complete URL or other unique identifier for the post, profile, video, message, or article.
A screen recording showing how the content is reached from the account or page.
The original electronic message, file, email headers, notification, or downloaded data—not only a cropped screenshot.
Comments or contextual material needed to understand whom the post identifies and what it means.
Names and contact details of people who independently saw the publication.
Records showing when you first discovered it.
Evidence connecting the account to the suspected author.
Evidence of actual harm, such as lost work, cancelled contracts, customer messages, medical records, or reasonable expenses.

Keep an untouched original copy and make separate working copies. Record the device, date, time, and method used to capture the material. Avoid editing, annotating, compressing, or repeatedly forwarding the only copy.

Online content may disappear, but deletion does not necessarily erase provider records. Sections 13 and 14 of the Cybercrime Prevention Act provide mechanisms for preservation and disclosure of computer data through law-enforcement and judicial process. A private complainant cannot simply demand confidential subscriber data from a platform; coordinate promptly with investigators or counsel if attribution is genuinely necessary.

2. Identify the exact defamatory imputation

Quote the precise language in the complaint-affidavit and attach the entire post or conversation. Explain:

what the statement asserts;
why it is defamatory rather than merely unpleasant;
how readers knew it referred to you;
who received or viewed it;
why the respondent is believed to be the author;
when you discovered it; and
where the legally relevant acts or damage occurred.

If the words are in Filipino, a regional language, slang, or coded language, provide an accurate translation and explain their ordinary contextual meaning. Do not improve, paraphrase, or exaggerate the accusation.

3. Prepare a sworn complaint and witness affidavits

The complaint-affidavit should contain personally known facts, identify and authenticate the attached records, and state the addresses needed for service. Supporting witnesses should execute their own affidavits rather than have the complainant speak for them.

Submit the number and form of copies required by the receiving office. The DOJ publishes a general preliminary-investigation filing guide, forms, and a requirements checklist, but local intake requirements should be confirmed directly because office procedures can change.

4. Participate in preliminary investigation

The prosecutor determines whether the evidence shows probable cause to charge the respondent in court. This is not yet the criminal trial, and probable cause requires less than proof beyond reasonable doubt.

The respondent is ordinarily served with the complaint and directed to submit a sworn counter-affidavit and supporting evidence. The complainant may be allowed or directed to answer new matters, depending on the applicable DOJ rules and the prosecutor’s orders. Every party should follow the specific deadline in the subpoena or written directive; assumptions based on an older rule can cause a filing to be rejected as late.

If probable cause is found, an information may be filed in the proper designated cybercrime court. The judge then independently determines judicial probable cause and the appropriate next process.

5. Consider proportionate non-criminal remedies

Depending on the goal and the risk of further publication, counsel may advise:

A carefully drafted correction, retraction, or takedown request.
A platform report supported by preserved evidence.
A civil action for damages or injunctive relief where legally available.
A right of reply or public correction that does not repeat unnecessary accusations.
A documented settlement discussion.

A retraction or affidavit of desistance does not automatically erase a public offense or compel prosecutors and courts to dismiss it. Any settlement should address preservation, correction, future publication, confidentiality, costs, and pending proceedings without concealing evidence or obstructing justice.

How to defend a cyber-libel complaint

1. Preserve everything and stop discussing the merits publicly

Do not delete the account, reset devices, alter timestamps, edit the post, fabricate conversations, or pressure witnesses. Preserve the full thread, drafts, sources, research, direct messages, account-access history, and documents available when the statement was published.

Taking material down may limit continuing harm but does not erase a completed publication. Discuss the timing and wording of a correction with counsel because an improvised apology or retaliatory post may be used as evidence or create a new claim.

2. Read the subpoena and attachments closely

Confirm:

the prosecutor’s office and docket number;
the date and permitted method of filing;
whether every annex is complete and legible;
the specific posts and criminal counts involved;
the alleged publication and discovery dates; and
the asserted basis for venue.

A counter-affidavit is evidence under oath, not an informal denial. It should answer the elements methodically and attach supporting records. False sworn statements may create separate liability.

If the allowed time is genuinely insufficient, counsel should request an extension immediately and in the required form. An extension is not effective merely because it was requested.

3. Test every element

Possible defenses or weaknesses may include:

The words are not defamatory when read as a whole.
They are protected opinion, satire, rhetorical hyperbole, or fair comment rather than a false factual assertion.
The complainant was not named or reasonably identifiable.
No third person received the communication.
The accused did not author, control, or publish the material.
The screenshot is incomplete, altered, unauthenticated, or stripped of exculpatory context.
The statement is covered by qualified or absolute privilege.
The imputation is true and was made with good motives and for justifiable ends, within Article 361.
Actual malice cannot be proved where that constitutional standard applies.
Venue is improper.
The charge has prescribed.
The prosecution duplicates the same alleged libel under both the Revised Penal Code and the Cybercrime Prevention Act.
The alleged act occurred before the relevant penal provision took effect.

A denial is stronger when supported by account logs, original files, contemporaneous correspondence, verified travel or device records, witnesses, research notes, and admissible source material.

4. Distinguish authorship from account appearance

An account bearing a person’s name does not conclusively establish authorship. But a bare claim of hacking may also be unpersuasive without supporting evidence.

If unauthorized access is real, preserve security alerts, login records, recovery emails, device history, reports to the platform, and any prompt report to law enforcement. Do not manufacture a hacking narrative or ask another person to accept blame.

5. Address prescription with evidence

Because the one-year period runs from discovery, relevant evidence may include:

the original publication date;
public engagement or messages involving the complainant;
an earlier demand letter or platform report;
prior screenshots furnished to the complainant;
the date authorities first received a report; and
the date the complaint was filed.

When prescription is not apparent on the face of the information, the court may need an evidentiary hearing. A motion to quash unsupported by proof of discovery may fail even if the post itself is old.

6. Prepare for court process and bail issues

Cyber libel carries a potential imprisonment term one degree higher than traditional libel. It is therefore not safe to assume that a pending complaint is minor or that court appearances can be ignored.

Once an information is filed, the court may issue a summons or warrant depending on its independent probable-cause determination and the governing procedure. Counsel should monitor the case, determine whether bail is required, and arrange a lawful response. Never evade service or rely on an unofficial assurance that the matter has been withdrawn.

Penalties and civil exposure

Article 355, as amended by Republic Act No. 10951, punishes traditional libel by imprisonment, a fine, or both. Section 6 of the Cybercrime Prevention Act raises the applicable penalty by one degree when information and communications technology is used.

For cyber libel, the potential imprisonment range is prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years, subject to the rules on penalties and the facts of the case.

In Tulfo v. People, the Supreme Court held that the authorized fine for online libel ranges from ₱40,000 to ₱1,500,000. The precise sentence depends on the governing law, modifying circumstances, and judicial findings. Courts may consider a fine instead of imprisonment in appropriate libel cases, but that is not an automatic entitlement.

Criminal proceedings may also carry civil liability. Recoverable damages are not presumed in every amount claimed; causation, proof, defenses, and the type of damages remain matters for adjudication.

Evidence that both sides should preserve

A reliable evidence file should contain:

The complete publication, not just the most damaging sentence.
URLs, account identifiers, page names, timestamps, and platform details.
Original image, audio, video, email, or message files.
Metadata and email headers where available.
A written capture log identifying who collected each item, when, and how.
Copies stored without alteration, with access limited and documented.
Communications showing discovery, notice, correction, or republication.
Evidence of identity, authorship, account control, or unauthorized access.
The sources and verification performed before publication.
Documents supporting truth, privilege, good faith, or actual malice.
Witnesses who saw the post independently or can explain identification and context.
Records of measurable harm or evidence contradicting that harm.

Authentication and admissibility are separate from relevance. Screenshots are useful but can be challenged; the person who captured them should be able to explain the process and identify what was displayed.

Common mistakes

Waiting because the post remains online. Continued availability does not necessarily restart prescription.
Counting one year only from publication without investigating the discovery date.
Filing where convenient without establishing cybercrime venue.
Submitting cropped screenshots that omit the thread, URL, timestamp, or account details.
Naming everyone who reacted to a post without identifying a new defamatory statement by each respondent.
Treating an insult, criticism, or unfavorable opinion as automatically criminal.
Assuming that truth alone always ends the case.
Assuming that a public official can never sue for libel.
Ignoring a prosecutor’s subpoena because no court case has yet been filed.
Posting the complaint, counter-affidavit, or private evidence online and creating further publication.
Deleting or altering data after receiving notice of a complaint.
Pressuring the other side, witnesses, investigators, or platform personnel.
Using a fake account to retaliate.
Assuming that an affidavit of desistance guarantees dismissal.
Filing technical account-owner accusations without requesting lawful investigation or provider records.

When legal help is urgent

Consult a Philippine lawyer immediately if:

the one-year prescriptive period may expire soon;
you have received a subpoena with a near deadline;
an information, summons, hold-departure order, or warrant may have been issued;
account ownership is disputed or platform records may soon become unavailable;
the publication involves a journalist, public official, public figure, election, or public controversy;
several posts, complainants, jurisdictions, or respondents are involved;
the statement came from confidential employment, medical, banking, government, or court records;
a child, threat, intimate image, stalking, hacking, or identity theft is involved;
either side is being pressured to delete evidence or execute a false affidavit; or
the dispute could expose a party to additional criminal, civil, employment, or regulatory proceedings.

Cyber libel may overlap with threats, unjust vexation, data-privacy violations, identity theft, illegal access, violence against women and children, or other offenses. Each possible charge has different elements and procedures.

Frequently asked questions

Can I file a case over a private message?

Usually, publication requires communication to someone other than the person defamed. A message sent only to you may lack that element. If it was copied, forwarded, posted to a group, or shown to another person, the result may differ. Threatening or harassing messages may also implicate laws other than libel.

Is a Facebook comment cyber libel?

It can be if the commenter creates an original defamatory imputation and the other elements are present. A mere like or routine reaction to someone else’s post is not the same as authoring a new defamatory allegation.

Does deleting the post prevent a case?

No. Deletion may reduce continuing exposure but does not undo publication already seen by another person. Preserve a complete copy before any removal and obtain advice about corrections or retractions.

Does every share or repost create a new criminal case?

Not automatically. Disini invalidated aiding-or-abetting liability as applied to cyber libel. Liability may still arise when the user adds or adopts a new defamatory statement as their own publication. The specific words and act of each proposed respondent must be examined separately.

Can an anonymous account be charged?

A real person must ultimately be identified and supported by evidence. Investigators may seek subscriber, traffic, or content data through the lawful preservation, disclosure, and warrant procedures in Republic Act No. 10175 and the Rule on Cybercrime Warrants. A complainant’s guess is not proof of account control.

Is an online accusation protected if it concerns corruption?

Discussion of official conduct and public affairs receives strong protection, and the actual-malice standard may apply. Protection does not extend automatically to knowingly false or recklessly fabricated factual accusations. Preserve official documents, source communications, verification efforts, and the public-interest basis for publication.

Can the complainant withdraw the case?

The complainant may execute an affidavit of desistance or enter a lawful settlement, but cyber libel is a public offense prosecuted in the name of the People. Prosecutors and courts are not invariably bound to dismiss solely because the complainant changes position.

Can both imprisonment and a fine be imposed?

The governing provisions allow imprisonment, a fine, or both. The actual sentence is determined by the court after conviction under the applicable penalty rules. Civil damages may be adjudicated separately or with the criminal action when properly instituted.

Where can I report the incident?

A complaint may be presented to the proper city or provincial prosecutor. For technical investigation, complainants may approach the NBI Cybercrime Division or PNP Anti-Cybercrime Group. Confirm territorial authority and intake requirements before filing; reporting to an investigative agency does not eliminate the need to observe prescription.

Official legal sources

This article provides general Philippine legal information, not legal advice or an attorney-client relationship. Cyber-libel outcomes depend on the exact publication, evidence, dates, parties, and procedural record. Official sources were checked through September 15, 2026.