Quick answer

Cyber libel is libel committed through a computer system—such as a social-media post, online article, email, group message, video caption, or similar digital publication. A criminal complaint is ordinarily started by filing a sworn complaint-affidavit and supporting evidence with the proper City or Provincial Prosecutor’s Office. Reporting the post to the NBI, PNP, CICC, or the platform may help with investigation or preservation, but it does not necessarily start the criminal case or stop the prescriptive period.

If you receive a prosecutor’s subpoena, do not ignore it. The subpoena must give you at least 10 days from receipt to submit a sworn counter-affidavit, but the stated filing date controls. An extension is discretionary, requires a meritorious reason, and cannot exceed 10 additional days.

Time is critical. The Supreme Court has ruled that cyber libel prescribes in one year from discovery by the offended party, the authorities, or their agents. Public availability does not automatically prove discovery on the posting date. Filing the proper complaint or information interrupts prescription; a demand letter, platform report, takedown request, or informal law-enforcement report should not be assumed to do so.

What must be proved

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the publication is made through a computer system. The prosecution must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose a person or juridical entity to contempt.
Publication. At least one person other than the person defamed received, read, watched, or heard the statement. A message sent only to the person being criticized ordinarily lacks this element, although forwarding it to another person may constitute publication.
Identifiability. The complainant was named or was sufficiently recognizable to readers who knew the surrounding facts. A nickname, photograph, job title, location, or contextual clues may be enough.
Malice. The applicable rule depends on the complainant, the subject, the occasion, and any privilege. For a private person, Article 354 generally presumes malice in a defamatory imputation unless good intention, justifiable motive, or a recognized privilege is shown. Where criticism concerns a public officer’s official conduct or another public matter, the prosecution may have to prove actual malice—knowledge of falsity or reckless disregard of whether the statement was false.
Use of a computer system or similar technology. This includes computers, smartphones, online platforms, messaging applications, websites, and other devices capable of processing or communicating data.
The respondent’s responsibility for the publication. A screenshot showing a display name is not always enough to prove who controlled the account or authored the statement.

The words are assessed as a whole, in their plain and ordinary meaning and in context. Offensive language, ridicule, profanity, exaggeration, or general abuse is not automatically libel if it does not make a defamatory factual imputation. Conversely, adding “allegedly,” “in my opinion,” or a question mark does not automatically protect a statement that conveys a concrete, defamatory accusation.

Reactions, shares, and comments

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as to the original author but ruled that people who merely receive and react to a post cannot be punished under the law’s vague aiding-and-abetting provision for cyber libel. A like, simple reaction, or bare share is therefore not automatically cyber libel.

That protection is not a license to create a new accusation. A person who writes a separate defamatory caption, comment, post, or story may become the original author of that new publication. Liability depends on what that person actually added and communicated.

The one-year deadline

The controlling rule, reaffirmed with finality by the Supreme Court in April 2026 in Causing v. People, is:

Cyber libel prescribes in one year.
The period begins when the post is discovered by the offended party, the authorities, or their agents—not automatically when it was uploaded.
Discovery is a factual question. A comment, reaction, message, threat to sue, or other contemporaneous act may show when a person learned of the post.
Filing the complaint or information interrupts the period.
The period may run again if the proceeding ends without conviction or acquittal, or is unjustifiably stopped for a reason not attributable to the accused.
Under Article 91, prescription does not run while the offender is absent from the Philippine archipelago.

Record the exact discovery date and how discovery occurred. Do not assume that a continuously accessible post creates a fresh one-year period every day. Whether an edit, repost, or materially renewed publication constitutes a separate publication is fact-sensitive.

A civil action for defamation is also generally subject to a one-year period under Article 1147 of the Civil Code. Its accrual, venue, and interaction with the criminal case require separate analysis.

Where to file

Venue in a criminal libel case is jurisdictional. Filing in the wrong locality can defeat the case even if the statement appears defamatory.

Article 360’s special rules generally provide:

If the offended party is a private person, the case may be brought where that person actually resided when the offense was committed, or where the material was printed and first published.
If the offended party is a public officer with an office in Manila, venue may lie in Manila or where the material was first published.
If the public officer held office outside Manila, venue may lie where the officer held office at the time or where the material was first published.

For internet content, simply proving that the complainant first accessed the post in a city does not necessarily prove that it was first published there. Because the place of first online publication can be difficult to establish, a private complainant’s actual residence at the time of the offense is often the more readily provable basis. A public officer must use the rule applicable to the location of the office.

File with the prosecution office serving the proper RTC locality. Cybercrime cases are tried by Regional Trial Courts, including designated cybercrime branches. Verify venue before filing, especially if the complainant moved, the author posted from abroad, a corporation is involved, or a civil case has already been filed.

How to prepare and file a complaint

1. Preserve the publication before requesting removal

Save the evidence without engaging the poster or changing the account:

Full screenshots showing the complete statement, username, profile photograph, post date and time, URL, audience setting, comments, and surrounding context
A screen recording showing navigation from the account profile to the post
The original URL and any platform-specific post or account identifier
Native copies of photographs, audio, or video at their original quality
Emails, message exports, notifications, and platform download archives
The profile’s “About” information, prior posts, linked accounts, and other facts connecting the account to its operator
The names and contact details of people who personally saw the publication
Evidence showing when and how the complainant first discovered it
Messages, admissions, or demands made by the suspected author
Proof of resulting harm, such as lost work, cancelled contracts, client messages, employer notices, or treatment records

Keep untouched originals and separate working copies. Do not crop, annotate, enhance, or repeatedly resave the only copy. Record who collected each item, from what device, and when. Electronic documents must eventually be authenticated; the Rules on Electronic Evidence require proof of authenticity, integrity, and reliability.

2. Identify the exact accusation

Quote the allegedly libelous words accurately. Explain:

What the words ordinarily mean
Which crime, vice, defect, or discreditable conduct they impute
Why readers understood them to refer to the complainant
Who received or saw them
Why the publication was malicious
How the evidence connects the respondent to the account or post
When the complainant discovered the publication

Do not rely on conclusions such as “the post ruined my reputation” without setting out the words, context, witnesses, and supporting documents.

3. Prepare the required submissions

Under the 2024 DOJ–National Prosecution Service Rules, a regular preliminary investigation begins with:

The original sworn complaint-affidavit
Two duplicate copies for the prosecution office
An additional copy for every respondent
A completed NPS Investigation Data Form
Sworn affidavits of witnesses
Supporting documentary and electronic evidence

The complaint-affidavit should state the parties’ names and addresses, the date and place of the alleged offense, and a complete factual account. Affidavits must be subscribed and sworn before a prosecutor or another official authorized to administer oaths, or, when unavailable, a notary public. Check the receiving office’s current documentary and fee requirements before filing.

4. Seek investigative assistance when needed

If the poster used a dummy account or deleted the content, prompt investigation may be essential. Law-enforcement authorities can seek court-authorized disclosure or examination of relevant computer data, subject to the Cybercrime Prevention Act and the Rule on Cybercrime Warrants.

Available official channels include:

NBI online complaint portal
NBI investigative assistance for victims of computer crimes
DOJ guidance for reporting cybercrime incidents
The PNP Anti-Cybercrime Group or its local cybercrime unit

A law-enforcement report can support identification and evidence preservation, but confirm separately that the proper prosecutor’s complaint is filed within the one-year period.

What happens during preliminary investigation

The prosecutor does not determine guilt. The question is whether the evidence establishes a prima facie case with reasonable certainty of conviction—evidence appearing admissible, credible, capable of preservation, and sufficient to prove all elements and the responsible person if left uncontroverted.

The current regular procedure includes these deadlines:

Within five calendar days after receiving the complete record, the investigating prosecutor either recommends dismissal or issues subpoenas.
The preliminary-investigation hearing must be set no later than 30 days from the prosecutor’s receipt of the complete record.
The respondent’s filing date must be at least 10 days after receipt of the subpoena, complaint-affidavit, and attachments.
Any extension for a responsive pleading is discretionary, must rest on meritorious grounds, and cannot exceed 10 days.
A clarificatory hearing, if needed, may be set within 10 calendar days after receipt of the counter-affidavit.
If authorized, a reply-affidavit and rejoinder-affidavit must each be filed within no more than 10 calendar days after receipt of the pleading being answered.
The investigating prosecutor generally has 60 calendar days from assignment to resolve the complaint, subject to a maximum 30-day extension in specified complex cases.
An aggrieved party may move for reconsideration within 15 days from receipt of the resolution.

A petition for review may be available under the applicable DOJ rules. If an Information has already been filed in court, a DOJ review does not automatically stop the criminal proceedings; the proper motion to suspend must also be filed with the court.

An affidavit of desistance does not automatically terminate a criminal case. Cyber libel is prosecuted in the name of the People of the Philippines, and the prosecutor or court must still determine the legal effect of the complainant’s withdrawal.

How to defend against a complaint

Act on the subpoena immediately

Note the date, time, and manner of receipt. Obtain the complete complaint and every attachment. The deadline stated in the subpoena controls, and failure to file without justification may cause the prosecutor to resolve the case using only the complainant’s evidence.

The counter-affidavit should be sworn, supported by witness affidavits and documents, filed in the required number of copies, and furnished to the complainant. A bare denial is rarely enough. Address every element and every exhibit.

Preserve defense evidence

Keep:

The complete post, thread, article, or conversation—not isolated extracts
Drafts, source documents, official records, interview notes, and research
Messages showing the purpose and intended audience of the communication
Records showing attempts to verify the information
Evidence of a legal, moral, or social duty to communicate
Account-login history, security alerts, hacking reports, and device records if authorship is disputed
Evidence of the complainant’s discovery date
Proof of the complainant’s residence or public office at the relevant time
The original publication date and edit history
Corrections, deletion records, apologies, or offers to clarify

Do not destroy devices, delete accounts, fabricate sources, pressure witnesses, or ask others to alter their statements. If continuing publication may cause further harm, preserve an accurate copy and obtain advice about removal or correction.

Examine each possible defense

Depending on the evidence, defenses may include:

No defamatory imputation. The words, viewed in context, were criticism, satire, hyperbole, or abuse that did not impute discreditable facts.
No publication. No third person received the statement.
No identifiability. Readers could not reasonably connect the statement to the complainant.
No authorship or control. The prosecution cannot reliably connect the accused to the account or publication.
Lack of malice. The evidence shows good faith, reasonable verification, or a proper purpose.
Qualified privilege. Article 354 protects a private communication made in the performance of a legal, moral, or social duty and a fair and true good-faith report, without comments, of non-confidential official proceedings. Fair comment on matters of public interest may also be privileged. Excessive distribution or actual malice can defeat qualified privilege.
Public-official or public-figure standard. For statements concerning official conduct or a public matter, the prosecution may have to prove actual malice beyond reasonable doubt. Mere error is not necessarily reckless disregard; the inquiry is whether the speaker knew the statement was false, entertained serious doubts, or had a high awareness of probable falsity.
Truth with the legally required purpose. For private-person libel, truth alone is not automatically a complete defense. Article 361 generally requires both truth and publication with good motives and for justifiable ends, and restricts proof of a non-criminal imputation unless it concerns a government employee’s official duties.
Prescription. More than one year elapsed from provable discovery before the proper complaint or information was filed.
Improper venue. The complaint or Information does not establish a venue permitted by Article 360.
Pre-law publication. Cyber libel cannot be applied retroactively to an online publication made before the Cybercrime Prevention Act took effect.

These defenses are document- and context-dependent. A claim of “opinion,” “public interest,” “truth,” or “freedom of speech” should not be asserted as a slogan; it must be connected to the evidence and controlling legal test.

If an Information is filed in court

The prosecutor’s approval does not itself establish guilt. After the Information is filed in the proper RTC, the judge independently evaluates probable cause and may dismiss the case, require more evidence, or issue a warrant of arrest.

If a warrant is issued:

Contact counsel immediately and arrange an orderly surrender and bail application.
Do not resist a lawful arrest or obstruct a valid search warrant.
Exercise the right to remain silent and to have competent and independent counsel.
If devices are searched or seized, request a copy of the warrant, inventory, and related documents. Do not make statements or volunteer passwords without legal advice.
Cyber libel is generally bailable as a matter of right before conviction, but the court determines the conditions and amount.

The prosecution must prove guilt beyond reasonable doubt at trial. The accused may challenge the sufficiency, admissibility, authenticity, and chain of custody of electronic evidence and cross-examine witnesses about publication, authorship, context, discovery, and malice.

Possible penalties and civil exposure

Under Section 6 of the Cybercrime Prevention Act, cyber libel carries a penalty one degree higher than traditional libel. The Supreme Court clarified in People v. Soliman that the possible penalties are:

Imprisonment from prisión correccional maximum to prisión mayor minimum, or approximately four years, two months and one day to eight years
A fine from ₱40,000 to ₱1,500,000
Both imprisonment and a fine

Courts may, in appropriate circumstances, impose a fine instead of imprisonment under the Supreme Court’s guidelines favoring fines in suitable libel cases. This is discretionary; imprisonment remains authorized.

The offended party may also pursue civil damages. In a criminal case, the civil action arising from the offense is generally deemed included unless it is waived, reserved, or previously filed, subject to the Rules of Court and Article 360. An independent civil action for defamation may also be available under Article 33 of the Civil Code. Filing a separate civil case without analyzing prescription, venue, and its relationship with the criminal proceeding can create serious procedural problems.

Common mistakes

Waiting for a platform response while the one-year criminal deadline runs
Treating an NBI, PNP, CICC, or barangay report as automatically equivalent to a prosecutor’s complaint
Filing where the post was merely viewed, rather than establishing a legally valid venue
Saving only cropped screenshots with no URL, date, context, or account information
Failing to identify a witness who personally saw the publication
Assuming that a display name proves who authored the post
Quoting selected words while omitting the surrounding thread
Claiming “truth” without evidence of good motive and justifiable purpose
Assuming every insult, criticism, or negative review is libel
Ignoring a prosecutor’s subpoena or relying on an unapproved extension request
Filing a motion to dismiss instead of a complete sworn counter-affidavit; under the current rules, such a motion is ordinarily treated as a counter-affidavit only if verified and containing the defenses
Deleting evidence, coaching witnesses, or publicly attacking the other party while the case is pending
Assuming that an apology, correction, deletion, settlement, or affidavit of desistance automatically ends criminal liability

When legal help is urgent

Seek a Philippine lawyer experienced in criminal and cybercrime procedure immediately when:

The one-year period may expire within weeks
The accused account is anonymous, compromised, or rapidly deleting content
You have received a subpoena, prosecutor’s resolution, Information, warrant, or court notice
Venue or the discovery date is disputed
The complainant is a public officer, public figure, corporation, or deceased person
The publication relied on confidential sources, leaked records, or pending official proceedings
A device has been seized or law enforcement is requesting access
A separate civil case, employment case, administrative complaint, or data-privacy issue is involved
The author, server, complainant, or evidence is outside the Philippines
The publication also contains threats, intimate images, personal data, impersonation, stalking, or harassment that may fall under other laws

Frequently asked questions

Is a screenshot enough to win a cyber libel case?

Not necessarily. It may show what appeared on a screen, but authorship, publication, authenticity, completeness, and integrity must still be established. Preserve the URL, account details, native files, context, and testimony of people who personally viewed the post.

Can a private message be cyber libel?

It can be if it was sent to someone other than the person defamed. A message communicated only to the person criticized ordinarily lacks publication to a third party.

Is a negative review cyber libel?

Not automatically. Honest descriptions of personal experience, fair comment, and non-defamatory opinion may be protected. False factual accusations of crimes, fraud, disease, dishonesty, or professional misconduct present greater risk.

Does deleting the post erase liability?

No. Publication may already have occurred. Deletion, correction, or apology may affect damages, motive, settlement, or sentencing, but does not automatically extinguish the offense.

Can an anonymous account be charged?

The responsible person must be reliably identified. Report promptly because subscriber information, logs, and content may be retained only for limited periods and normally require proper legal process.

Can the same post support both ordinary libel and cyber libel charges?

The Supreme Court held in Disini that charging the same offender under both Article 353 of the Revised Penal Code and Section 4(c)(4) of the Cybercrime Prevention Act for the same online libel would violate the protection against double jeopardy.

Is truth always a complete defense?

No. For private-person criminal libel, Article 361 generally also requires good motives and justifiable ends. Different constitutional standards apply when the publication concerns public officers, public figures, official conduct, or matters of public interest.

Do I need to send a demand letter first?

No demand letter is generally required before filing a criminal cyber libel complaint. A demand may help obtain a correction or settlement, but it does not safely interrupt the one-year prescriptive period.

Can the complainant withdraw the case?

The complainant may submit an affidavit of desistance, but dismissal is not automatic. Once a criminal complaint is filed, the State has an independent interest in prosecution.

Official legal sources

This article provides general Philippine legal information, not legal advice or an assessment of any particular post, complaint, or defense. Outcomes depend on the exact words, audience, authorship evidence, documents, dates, and procedural history. Law and official procedures were checked as of 4 August 2026.