Quick answer

Cyber libel is committed when a person authors and publishes through a computer system a defamatory and malicious imputation that identifies another person and reaches at least one third party. It is punishable under Section 4(c)(4) of the Cybercrime Prevention Act of 2012, in relation to Articles 353 and 355 of the Revised Penal Code.

If you are filing, preserve the complete online evidence first, identify facts establishing every element and the proper venue, and file a sworn complaint-affidavit with the appropriate prosecution office. Do not assume that a demand letter, platform report, barangay blotter, or informal police inquiry stops the filing deadline.

If you are defending, do not ignore a subpoena. Secure the complete complaint and attachments, preserve your own account and devices, and submit a sworn counter-affidavit on time. Possible defenses include lack of authorship, publication, identification, defamatory meaning, or malice; privileged communication; truth under the conditions set by law; prescription; and improper venue. Their availability depends on the exact words, context, parties, dates, and evidence.

The Supreme Court has now ruled with finality that cyber libel prescribes in one year from its discovery by the offended party, the authorities, or their agents. Filing the proper complaint or information interrupts prescription. The date of posting is the starting date only when it coincides with discovery. This rule was confirmed in the Court’s April 8, 2026 final resolution in Causing v. People.

What must be proved

A rude, unfair, or embarrassing online statement is not automatically cyber libel. The prosecution ultimately has to prove guilt beyond reasonable doubt. During preliminary investigation, current DOJ rules require prima facie evidence with reasonable certainty of conviction.

The essential questions are:

Requirement	What it generally means
Defamatory imputation	An accusation of a crime, vice, defect, act, omission, condition, or status tending to cause dishonor, discredit, or contempt
Publication	The material was communicated to someone other than the person defamed
Identification	The complainant was named or was otherwise reasonably identifiable
Malice	The applicable form of malice is established and no controlling privilege or constitutional protection defeats it
Use of a computer system	The publication was made online or through information and communications technology
Authorship	The respondent was the author or publisher legally responsible for the challenged material

Courts examine the publication as a whole, including its language, images, captions, audience, surrounding discussion, and ordinary meaning. A cropped sentence should not be evaluated in isolation from context.

Publication does not require a public post

A public Facebook post, website article, video, group-chat message, email, or other online material may satisfy publication if at least one third person received it. A message sent only to the person being discussed ordinarily lacks the required third-party publication. A restricted privacy setting does not automatically prevent publication if other people could and did see the material.

Identification can be indirect

The complainant need not always be named. Identification may be established through a photograph, position, nickname, surrounding facts, tagged account, or other details that allowed readers to recognize the person. But a complainant cannot rely only on a private belief that an otherwise unidentifiable post was about them.

“Opinion” is not an automatic defense

Expressions of opinion and fair comment may receive protection, particularly on matters of public concern. Labels do not control, however. “In my opinion, he is a thief” may still convey a factual accusation. Courts consider whether the words assert provable facts, disclose their factual basis, or instead amount to commentary, criticism, satire, or rhetorical exaggeration.

Malice, privilege, truth, and public-interest speech

Article 354 generally presumes a defamatory imputation to be malicious even when true if good intention and justifiable motive are not shown. It recognizes two statutory exceptions:

A private communication made in the performance of a legal, moral, or social duty.
A fair and true report, made in good faith and without comments or remarks, of a non-confidential judicial, legislative, or other official proceeding, specified statements made in it, or acts performed by public officers in their functions.

A communication is not privileged merely because the author calls it a “complaint,” “warning,” or “public service.” The recipients, purpose, relevance, language, and extent of distribution matter. Sending a legitimate workplace complaint to responsible officers is different from publishing the same accusation indiscriminately online.

Public officials, public figures, and matters of public concern

When the challenged speech concerns the official conduct of a public officer or a public figure, the stricter actual-malice standard may apply. Actual malice means knowledge of falsity or reckless disregard of whether the statement was false. Reckless disregard requires more than ordinary negligence; it involves a high degree of awareness of probable falsity or serious doubts about the publication’s truth.

The prosecution bears the burden of proving actual malice when that heightened standard applies. The Supreme Court explained these protections in Disini v. Secretary of Justice and later decisions discussing public officials, public figures, and public issues.

Protection for public-interest criticism is not permission to fabricate facts. Evidence that the author possessed contradictory records, ignored obvious indications of falsity, invented a source, or deliberately altered material can be important.

Truth is not always enough by itself

Article 361 imposes specific conditions on proof of truth in a criminal libel case:

If the imputation concerns a crime, proof of truth may be admitted whether the offended party is a private person or a public officer.
If the imputation does not concern a crime, proof of truth is generally admissible only when the offended party is a government employee and the matter relates to the discharge of official duties.
Acquittal on this statutory defense requires not only truth but also good motives and justifiable ends.

Because constitutional protections, privilege, and Article 361 can interact differently depending on the parties and subject matter, “but it was true” should be supported by admissible records and a precise legal theory.

Who may be liable for reactions, comments, and shares

In Disini, the Supreme Court sustained cyber-libel liability only insofar as the law penalizes the author of the defamatory statement or article. It invalidated Section 5’s provisions on aiding, abetting, or attempting cyber libel because their uncertain application to online reactions could chill protected expression.

Accordingly, merely receiving a post or reacting through an ordinary like, comment, or share is not automatically punishable as aiding or abetting cyber libel. But a person who adds a new defamatory caption, writes a defamatory comment, or republishes material in a way that makes them the author of a distinct defamatory assertion may face a separate, fact-dependent claim. “I only shared it” is therefore not a safe universal defense.

The possible penalties

Under Section 6 of Republic Act No. 10175, use of information and communications technology raises the penalty for libel by one degree. The statutory imprisonment range for online libel is prisión correccional in its maximum period to prisión mayor in its minimum period—four years, two months, and one day to eight years.

Following the amendment of Article 355 by Republic Act No. 10951, the Supreme Court held in People v. Soliman that the fine for online libel ranges from ₱40,000 to ₱1,500,000.

The law permits imprisonment, a fine, or both. Imprisonment is not mandatory in every conviction, but neither is a fine-only sentence guaranteed. Courts may consider the circumstances under Administrative Circular No. 08-2008 when deciding whether a fine alone serves the interests of justice.

A criminal conviction may also carry civil liability. The offended party may seek damages, subject to the Rules of Court, Article 360, the Civil Code, applicable prescription periods, and the rules governing whether a civil action is deemed instituted with the criminal case.

The one-year deadline

The current controlling rule is:

Cyber libel prescribes in one year.
The period begins when the post is actually discovered by the offended party, the authorities, or their agents.
There is no automatic presumption that a person discovered a post on its publication date merely because it was public.
Discovery may be proved through a reaction, comment, message, demand, threat to sue, forwarding of the post, or other conduct showing knowledge.
Filing the complaint or information interrupts the period.
The period may run again if the proceeding ends without conviction or acquittal, or is unjustifiably stopped for a reason not attributable to the accused.
Under Article 91, prescription does not run while the offender is absent from the Philippines.

The accused may contest the claimed discovery date through documents, witnesses, compulsory process, and cross-examination. Because prescription often turns on disputed facts, it is not enough merely to point to an old posting date.

For safety, a complainant should file well before one year from the earliest provable discovery by the complainant, law-enforcement authorities, or an authorized agent. A platform complaint, takedown request, private demand, or informal report should not be treated as a substitute for a formally docketed complaint with the proper prosecution office.

How to preserve online evidence

Preserve evidence before asking the author or platform to remove the material. Take these steps without accessing another person’s account unlawfully:

Capture the complete post, not only the allegedly defamatory sentence.
Include the visible account name, username or profile identifier, URL, date and time, audience or privacy setting, captions, images, and surrounding thread.
Make a continuous screen recording showing how the post is reached from the account or page.
Save the original image, audio, or video at its available quality. Preserve metadata and do not overwrite the file.
Record the date, time, time zone, device, and account used to view it.
Preserve comments, shares, reactions, edits, reposts, and any visible engagement data.
Save earlier and later communications that establish context, motive, authorship, discovery, retraction, or knowledge of falsity.
Identify people who personally saw the material and can describe when and how they saw it.
Keep the original device and make a secure backup. Do not edit the original files.
Preserve proof linking the account to the alleged author—admissions, known contact details, prior messages, account history, or other lawful identifying evidence.
Keep proof of harm, such as lost-client messages, employment records, medical or counseling expenses, and communications from people who reacted to the post.

Screenshots are useful but not self-proving. The Rules on Electronic Evidence require electronic documents and recordings to be authenticated. A witness who personally viewed or recorded the material, reliable account information, metadata, platform records, and proof of integrity can be important.

If the author is anonymous or the post may disappear, promptly seek help from the NBI’s cybercrime investigation service or the PNP Anti-Cybercrime Group. Law-enforcement officers may seek lawful preservation, disclosure, search, or examination orders. A private person should not impersonate someone, hack an account, secretly install software, or seize a device.

How to file

1. Evaluate every element before accusing anyone

Write down:

The exact words, images, or video challenged.
Why they are defamatory in context.
How the complainant is identified.
Who other than the complainant received the material.
Why the proposed respondent is the author.
When and how the material was discovered.
The facts showing malice or actual malice, when required.
Why privilege, fair comment, or another protection does not apply.
The facts supporting venue and Philippine jurisdiction.

If the dispute involves a report to an employer, regulator, court, police, or government office, have counsel assess privilege before filing.

2. Choose the proper venue

Cybercrime cases under Sections 4 and 5 of Republic Act No. 10175 are filed before the designated cybercrime Regional Trial Court of the province or city:

Where the offense or any element occurred;
Where any part of the computer system used is situated; or
Where any damage to a natural or juridical person took place.

The first court in which the criminal action is properly filed acquires jurisdiction to the exclusion of the others. Venue facts must be stated and supported; merely asserting that an internet post could be accessed everywhere is unsafe. The Supreme Court discusses online venue in Bonifacio v. RTC of Makati and Tieng v. People.

Republic Act No. 10175 also provides Philippine jurisdiction in specified cross-border cases, including when an element occurred in the Philippines, a relevant computer system was wholly or partly situated here, or damage was caused to a person who was in the Philippines at the time. Cross-border authorship and service issues require early legal assistance.

3. Prepare a sworn complaint-affidavit

The offended party should execute a detailed complaint-affidavit that:

Identifies the complainant and respondent as completely as possible;
Quotes or accurately describes each challenged publication;
States the relevant dates, including discovery;
Narrates personal knowledge in chronological order;
Explains publication, identification, authorship, malice, and use of ICT;
Establishes venue through concrete facts;
Identifies and attaches each exhibit;
Includes supporting witness affidavits;
States the requested charge; and
Is properly subscribed and sworn before an authorized officer.

Translate material written in a language that the prosecutor cannot readily evaluate, while retaining the original. Mark exhibits clearly and keep an identical complete copy.

4. File with the appropriate prosecution office

File with the Office of the City or Provincial Prosecutor corresponding to the proper cybercrime venue. The offended party may first request investigative and forensic assistance from the NBI or PNP, but should confirm whether and when a complaint has actually been docketed for preliminary investigation.

The DOJ’s published fee schedule currently lists separate preliminary-investigation and libel fees, with exemptions for qualified parties. Verify the exact assessment, number of copies, forms, filing hours, and accepted electronic channel directly with the receiving office before filing. The DOJ filing page and official fee schedule should be checked for current office requirements.

5. Participate in preliminary investigation

Because cyber libel carries a prescribed maximum exceeding six years, it falls under the regular preliminary-investigation process governed by DOJ Department Circular No. 015, series of 2024. The Supreme Court has upheld these rules as a valid regulation of prosecutorial investigations.

The prosecutor examines whether the evidence is admissible, credible, capable of preservation and presentation, and sufficient to establish prima facie evidence with reasonable certainty of conviction. After receiving the counter-affidavit, the prosecutor may resolve the case or hold a physical or virtual clarificatory hearing. A reply and rejoinder are not automatic; the prosecutor may require them when necessary.

If the complaint is dismissed or an information is recommended, an aggrieved party may file a motion for reconsideration within 15 days from receipt of the resolution. Further review is governed by DOJ Department Circular No. 027, series of 2022. These remedies have strict form, service, and suspension requirements, so obtain counsel immediately upon receiving an adverse resolution.

How to defend

1. Treat the subpoena as urgent

Record the exact date and manner of receipt. Under the regular DOJ-NPS procedure, the subpoena should allow at least ten days from receipt for submission of the counter-affidavit, but the date written in the subpoena must be followed.

Do not substitute an informal letter or an unsupported motion to dismiss for the counter-affidavit. Extensions are restricted and depend on the interests of justice. If time is needed to retain counsel or verify voluminous electronic evidence, request relief promptly and explain the concrete reason.

2. Obtain and inventory the complete record

Check that you received:

The complaint-affidavit;
Witness affidavits;
Every screenshot and electronic exhibit;
The complete post or conversation;
Proof of authorship;
Evidence of third-party publication;
Evidence of discovery and venue; and
Any translation or transcript relied upon.

List missing, cropped, illegible, or unauthenticated items. Compare the alleged publication with your account records and original files.

3. Preserve—do not wipe—your evidence

Do not delete the account, reset the device, alter messages, manufacture a replacement screenshot, or ask witnesses to change their accounts. Preserve drafts, source documents, research, messages, account-security notices, login history, and the full thread.

Deletion after receiving a complaint can destroy helpful context and create additional evidentiary problems. It also does not erase a completed publication already captured by others.

4. Build the counter-affidavit around the missing elements

Possible defenses include:

No authorship: The account was not yours, was compromised, or the complainant lacks reliable proof connecting you to it.
No publication: No third person received or saw the material.
No identification: An ordinary reader could not reasonably identify the complainant.
No defamatory meaning: The words, viewed as a whole and in context, did not impute a discreditable fact or condition.
Privilege: The communication was made in good faith to proper recipients in the performance of a legal, moral, or social duty, or was a fair and true official-proceedings report within Article 354.
Public-interest or fair-comment protection: The statement involved protected criticism and the required actual malice cannot be proved.
Truth, good motive, and justifiable end: The statutory conditions under Article 361 are satisfied and supported by admissible evidence.
No malice: The evidence does not establish the applicable form of malice; a mistake or inaccuracy alone does not necessarily establish actual malice.
Prescription: More than one year elapsed from provable discovery before the proper complaint or information interrupted the period.
Improper venue or lack of territorial jurisdiction: The complaint does not establish a legally permissible location.
Not the original author: The conduct consisted only of receiving or reacting to another person’s post and did not create a distinct defamatory statement.
Non-retroactivity: The charged online act occurred before the Cybercrime Prevention Act became effective.
Duplicative prosecution: Identical material cannot simply be treated as separate traditional and cyber libel offenses in disregard of the constitutional protection against double jeopardy.

State facts from personal knowledge, attach supporting documents and witness affidavits, and answer each material allegation. Avoid attacking the complainant with new unsupported accusations.

5. Attend any required clarificatory hearing

After the counter-affidavit, the prosecutor may set a clarificatory hearing within the period provided by the rules. Attendance is mandatory when ordered. If a reply or rejoinder is required, the filing period must not exceed ten calendar days from receipt of the document being answered.

6. Act immediately if an information is filed

Once an information is filed in the designated RTC, the judge independently determines probable cause for a warrant. Cyber libel is generally bailable as a matter of right before conviction, but bail is not automatic and the amount and conditions are set by the court.

If a warrant may exist:

Have counsel verify the court docket;
Arrange a lawful surrender and bail rather than evading service;
Do not resist or obstruct officers;
Secure copies of the information, resolution, and warrant; and
Calendar arraignment and all court deadlines.

A pending motion for reconsideration or DOJ petition for review does not by itself guarantee suspension of the court case. Any request to suspend proceedings must be properly filed with the court.

Civil liability and non-criminal options

A criminal complaint is not the only possible remedy. Depending on the facts, a person may seek:

Correction, clarification, or retraction;
Platform removal under applicable terms and policies;
A carefully drafted cease-and-desist demand;
Civil damages for defamation or violation of rights;
Workplace, professional, or regulatory remedies; or
Relief under another law when the conduct includes threats, stalking, identity theft, privacy violations, intimate-image abuse, or harassment.

A retraction, deletion, or apology does not automatically extinguish a completed criminal offense. It may nevertheless affect proof of malice, damages, mitigation, settlement discussions, or sentencing.

The civil action arising from libel is generally deemed instituted with the criminal case unless it is waived, reserved, or previously filed, subject to Rule 111 and the special rules in Article 360. Separate civil claims may have their own one-year deadline. Filing a separate case without first resolving venue, reservation, consolidation, and prescription can create serious procedural problems.

An affidavit of desistance also does not automatically end a criminal case. Once instituted, prosecution is in the name of the People of the Philippines, and the prosecutor or court determines the legal effect of the complainant’s change of position.

Common mistakes

Waiting for the post to go viral before preserving it.
Cropping out the URL, username, date, privacy setting, or context.
Assuming a screenshot alone proves who controlled the account.
Counting one year only from publication without examining discovery.
Sending repeated demands while allowing prescription to expire.
Filing wherever the post was viewed without establishing valid venue.
Naming every person who liked or shared the post as an accused.
Treating truth alone as a universal defense.
Calling an accusation “opinion” without analyzing what an ordinary reader would understand.
Ignoring the distinction between a private person and a public official or public figure.
Filing a motion instead of a complete sworn counter-affidavit.
Deleting the account or device after receiving notice.
Repeating the accusation publicly while the case is pending.
Assuming an apology, deletion, or desistance automatically dismisses the case.
Missing the 15-day period to seek reconsideration of a prosecutor’s resolution.

When legal help is urgent

Consult a Philippine criminal-law practitioner immediately if:

The earliest possible one-year deadline is approaching;
A prosecutor’s subpoena, resolution, warrant, or arraignment notice has been received;
The account is anonymous or platform data may soon disappear;
Police or NBI officers request access to, seizure of, or examination of a device;
The publication concerns a public official, public figure, confidential proceeding, or privileged complaint;
Several posts, reposts, authors, jurisdictions, or countries are involved;
A civil case and criminal complaint are both being considered;
The online conduct also involves threats, doxxing, extortion, stalking, intimate images, or danger to a person; or
The accused is outside the Philippines.

For immediate threats or physical danger, contact local police or emergency services rather than relying only on a cyber-libel complaint.

Frequently asked questions

Can I file if the post has been deleted?

Yes, potentially. Deletion does not erase an already completed publication, but you still need reliable evidence of the content, authorship, publication, discovery, and other elements.

Is one screenshot enough?

Sometimes it may support a complaint, but it is rarely ideal. Preserve the URL, complete context, account details, original files, witness testimony, and other evidence authenticating the material.

Does a private group chat count?

It can. Publication exists if the defamatory material reached at least one person other than the person defamed. Privacy settings affect the facts and audience, not necessarily the existence of publication.

Can someone be charged merely for liking or sharing a post?

Not automatically. Disini invalidated aiding-or-abetting liability for online libel and focused liability on the author. A person who adds or adopts a new defamatory assertion may, however, be treated as the author of that distinct content.

Does deleting the post or apologizing prevent filing?

No. It may help show remorse, reduce continuing harm, or affect damages and penalty, but it does not automatically extinguish criminal liability.

Is cyber libel bailable?

Generally, yes, as a matter of right before conviction. The court determines the bail amount and conditions. A respondent should not wait for arrest before seeking advice if an information may already have been filed.

When does the one-year period begin?

From actual discovery by the offended party, authorities, or their agents—not automatically from posting. Publication is the starting date only when publication and discovery coincide.

Does filing with Facebook, a barangay, or a police help desk stop prescription?

Do not assume so. To protect the claim, ensure that the proper complaint is formally filed and docketed with the authorized prosecution office or court within the prescriptive period.

Official sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Cyber-libel liability and procedure depend on the exact publication, parties, evidence, dates, and documents. Sources and current rules were checked as of July 30, 2026.