How to File or Defend a Cyber Libel Case

Quick answer

A cyber libel case in the Philippines is generally based on Section 4(c)(4) of Republic Act No. 10175 (Cybercrime Prevention Act of 2012), which applies the law on libel to defamatory publications made through a computer system, such as social-media posts, online articles, messages published to other people, and similar online content. The underlying rules on libel come principally from Articles 353 to 355 of the Revised Penal Code. (Lawphil)

If you are the complainant, act quickly. The Supreme Court has now definitively ruled that cyber libel prescribes in one year from discovery of the alleged offense by the offended party, the authorities, or their agents. The Court reaffirmed that rule in April 2026 and denied reconsideration with finality. A complainant should therefore preserve the online evidence and obtain advice on filing without delay. (Lawphil)

If you are the respondent or accused, do not assume that an offensive or embarrassing online statement automatically constitutes cyber libel. The prosecution must establish the elements of libel, the respondent's responsibility for the publication, the use of a computer system, proper venue, and compliance with the applicable prescriptive period. Defenses may also arise from truth, good motives and justifiable ends, privileged communication, fair comment on matters of public interest, lack of identifiability, lack of publication, lack of authorship, or—in cases involving public officials or public figures—failure to prove actual malice. (Lawphil)

A mere "like," reaction, or passive receipt of another person's defamatory post is not enough for cyber-libel liability. In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel against the original author but declared it unconstitutional as applied to persons who simply receive and react to the post. A person who adds a new defamatory accusation in a comment or separate post, however, may become the author of a new publication. (Lawphil)

What must be proved in a cyber libel case?

Philippine jurisprudence identifies four basic elements of libel:

  1. a defamatory allegation concerning another person;
  2. publication of the allegation;
  3. identification of the person defamed; and
  4. malice.

For cyber libel, the defamatory publication must additionally be made through a computer system or another similar technological means covered by RA 10175. (Lawphil)

1. There must be a defamatory imputation

Article 353 of the Revised Penal Code covers a public and malicious imputation of a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or bring a person into contempt.

Courts do not normally decide whether words are defamatory by isolating one expression. The publication is read as a whole and the words are understood in their ordinary meaning and context.

Strong criticism, disagreement, sarcasm, political commentary, or an unpleasant opinion is therefore not automatically criminal libel. The particular words, surrounding discussion, target, factual assertions, context, and purpose matter. (Lawphil)

2. The statement must have been published to somebody else

For libel, "publication" means communication of the defamatory matter to at least one person other than the person being defamed. It is not necessary that thousands of people saw the post.

A private message sent only to the person supposedly defamed can therefore raise a different issue from a Facebook post, group-chat message sent to several people, public comment, online article, or similar third-party communication. (Lawphil)

3. The complainant must be identifiable

The person's full name does not always have to appear. The question is whether at least a third person could reasonably identify the complainant as the subject of the defamatory statement.

Nicknames, photographs, job descriptions, locations, surrounding posts, tags, previous discussions, or other contextual details may therefore become important evidence.

Conversely, a vague statement about an unidentified person may fail this element if nobody could reasonably determine who was being discussed. (Lawphil)

4. Malice must be established under the applicable rule

Article 354 generally presumes malice from a defamatory imputation, subject to important exceptions and constitutional limitations.

Among the statutory privileged communications are:

  • a private communication made in the performance of a legal, moral, or social duty; and
  • a fair and true report, made in good faith and without comments or remarks, concerning qualifying official proceedings or official acts.

Jurisprudence also recognizes qualified privilege for fair commentary on matters of public interest. (Lawphil)

The rules become particularly important when the complainant is a public official or public figure and the speech concerns a matter of public interest or official conduct. The Supreme Court has held that in criminal libel cases involving public figures, particularly public officers, the prosecution must prove actual malice—knowledge that the defamatory statement was false or reckless disregard of whether it was false. (Lawphil)

This protection does not give anyone a license knowingly to invent accusations against public officials. It does mean that legitimate discussion and criticism of public affairs receive substantial constitutional protection.

Is truth a complete defense?

Not automatically in every case.

Article 361 allows proof of truth in a criminal libel prosecution. As a general rule, acquittal based on truth also requires a showing that the publication was made with good motives and for justifiable ends.

The rules differ in some respects where the imputation concerns a government employee and facts relating to the performance of official duties, and constitutional doctrines concerning public officials and public figures may also impose the higher actual-malice standard on the prosecution. (Lawphil)

A respondent should therefore avoid relying on the simplistic argument that "it was true." The evidence should establish what was true, how the information was obtained, why it was published, what verification was performed, and whether the publication served a legitimate purpose.

What is the deadline for filing cyber libel?

This is one of the most important recent developments in Philippine cyber-libel law.

In Causing v. People, the Supreme Court ruled that cyber libel prescribes in one year under Article 90 of the Revised Penal Code. In its April 8, 2026 Resolution, the Court reaffirmed that ruling and held that the one-year period begins from discovery by the offended party, the authorities, or their agents, as required by Article 91. The motions for reconsideration were denied with finality. (Chief)

This makes the date of discovery critical.

A complainant should document, as accurately as possible:

  • when the post was first discovered;
  • who discovered it;
  • how it was discovered;
  • whether someone sent a link or screenshot;
  • when the complainant personally became aware of it; and
  • any earlier communications showing prior knowledge.

A respondent asserting prescription should likewise gather evidence showing that the complainant, authorities, or their agents actually discovered the publication more than one year before the complaint was filed.

Do not assume that the one-year period necessarily begins on the date the material was uploaded. The Supreme Court expressly rejected publication as the automatic starting point and applied the statutory discovery rule. (Lawphil)

Because prescription can turn on disputed facts, it should be analyzed from the actual records rather than calculated solely from the visible date of the post.

How to file a cyber libel complaint

Step 1: Preserve the online evidence immediately

Do this before demanding that the author delete the post.

Keep, where available:

  • full screenshots showing the entire publication;
  • the account name and username or handle;
  • profile information;
  • the complete URL or link;
  • date and time displayed;
  • comments and surrounding conversation;
  • photographs, videos, or attachments included in the post;
  • screenshots showing shares or third-party recipients;
  • messages through which another person sent you the publication;
  • screen recordings showing navigation from the profile or page to the publication;
  • downloaded copies of relevant webpages or files;
  • the original device on which the material was received or viewed; and
  • names of people who actually saw the publication.

Avoid relying only on a cropped screenshot containing the offending sentence. Context, publication, identifiability, authorship, date, and authenticity can all become disputed.

Electronic documents are admissible, but the party presenting them bears the burden of authenticating them. The Rules on Electronic Evidence require proof demonstrating the integrity and reliability of private electronic evidence. (Lawphil)

Step 2: Record the date of discovery

Because the one-year prescriptive period runs from discovery, prepare a contemporaneous record of when and how the publication came to your attention.

If another person first showed or forwarded it to you, preserve that communication and consider obtaining that person's sworn statement.

Step 3: Identify the author as far as reasonably possible

Save information connecting the account to the respondent, such as:

  • admissions that the account belongs to the person;
  • photographs and personal information;
  • prior messages from the same account;
  • links to other known accounts;
  • phone numbers or email addresses;
  • witnesses who communicated with the account owner; and
  • statements acknowledging authorship of the disputed post.

A screenshot showing an account name does not necessarily prove who actually controlled the account at the relevant time.

If the account is anonymous, fictitious, hacked, or disputed, assistance from law-enforcement cybercrime investigators may be necessary.

Step 4: Prepare a complaint-affidavit and supporting evidence

Cyber libel carries an imprisonment range reaching beyond six years, so cases within the National Prosecution Service are subject to the 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings, issued through DOJ Department Circular No. 015, series of 2024.

The DOJ's current prosecution standard is prima facie evidence with reasonable certainty of conviction. Prosecutors assess whether the available evidence is admissible, credible, capable of preservation and presentation at trial, and sufficient to establish all elements of the offense if left uncontradicted. (Lawphil)

The complaint-affidavit should ordinarily address, with supporting evidence:

  • the exact defamatory statement;
  • the identity of the complainant;
  • why the statement refers to the complainant;
  • where and how it was published;
  • who saw or received it;
  • the alleged author's identity;
  • the circumstances showing authorship or account control;
  • the computer or online medium used;
  • the date of publication, if known;
  • the date and circumstances of discovery;
  • facts bearing on malice;
  • the basis for venue; and
  • the supporting electronic and testimonial evidence.

Step 5: File with the proper prosecution office

Venue in cybercrime cases is broader than ordinary physical-location crimes, but it is not unlimited.

Under the Rule on Cybercrime Warrants, criminal actions under Section 4 of RA 10175 are filed before the designated cybercrime court of the province or city:

  • where the offense or any element was committed;
  • where any part of the computer system used is situated; or
  • where any of the damage to the natural or juridical person occurred.

The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of the others. (Supreme Court of the Philippines)

Because internet publications can create difficult venue questions, the prosecution office selected should have a defensible territorial connection to the offense. Do not simply assume that a complaint can be filed anywhere the post happened to be viewable.

Step 6: Consider cybercrime-investigation assistance when necessary

A private complainant may approach the NBI Cybercrime Division or the PNP Anti-Cybercrime Group, particularly where identification of an anonymous account, preservation of provider data, forensic examination, or other technical investigation is required.

The NBI's current Citizens' Charter specifically provides investigative assistance to victims of computer crimes, including execution of sworn statements and examination of devices relevant to an investigation, without a service fee. (National Bureau of Investigation)

The DOJ Office of Cybercrime may likewise act on cybercrime complaints and referrals and facilitate investigation, preservation, production of data, and related assistance. (Department of Justice)

Under RA 10175, traffic data and subscriber information are subject to statutory preservation rules, while law-enforcement authorities may require preservation of content data and seek appropriate cybercrime warrants for disclosure or examination. This is another reason not to delay when important provider-held evidence may be needed. (Lawphil)

What happens during preliminary investigation?

Under the 2024 DOJ-NPS rules, the prosecution office initially evaluates the complaint-affidavit for sufficiency in form and completeness of evidence.

Once the complete records reach the investigating prosecutor, the rules provide that the prosecutor should, within five calendar days, either recommend dismissal if there is no ground to continue or issue the appropriate subpoena.

The preliminary-investigation hearing stated in the subpoena should not exceed 30 days from the prosecutor's receipt of the complete records. The respondent must be given at least 10 days from receipt of the subpoena and complaint-affidavit before the date on which the counter-affidavit is required. (Scribd)

The prosecutor may thereafter:

  • consider the case submitted for resolution;
  • conduct a physical or virtual clarificatory hearing when necessary;
  • require a reply-affidavit and rejoinder-affidavit where appropriate; or
  • obtain material evidence through authorized process.

If probable cause meeting the DOJ's prosecution standard is found and approved as required by the applicable rules, the Information may be filed in court.

Filing a complaint with the prosecutor does not itself mean the respondent is guilty, and it does not automatically mean an arrest warrant will immediately issue. Once an Information reaches the RTC, the judge performs the judicial determination required by the Rules of Criminal Procedure.

How to defend a cyber libel complaint

Do not ignore the subpoena

A respondent who receives a subpoena should immediately note:

  • the date it was received;
  • the scheduled preliminary-investigation date;
  • the deadline for the counter-affidavit;
  • all attachments actually received; and
  • any missing evidence referred to in the complaint.

Under the DOJ rules, a respondent who receives a subpoena at the last known address and then unjustifiably fails to appear or submit a counter-affidavit risks having the case resolved on the evidence already on record. (Scribd)

Do not assume that filing an ordinary motion to dismiss will substitute for a counter-affidavit. Under the current DOJ rules, a motion to dismiss in lieu of a counter-affidavit is generally not allowed unless it is verified and contains the respondent's defenses, in which event it is treated as a counter-affidavit. (Scribd)

Examine every element separately

A useful defense analysis asks:

Was the statement actually defamatory? Read the entire conversation and not merely the complainant's selected quotation.

Was it published to a third person? A statement communicated only to the complainant may not satisfy ordinary libel publication.

Was the complainant identifiable? Determine whether a third person could actually identify the complainant from the words and context.

Did the respondent write or publish it? An account name is not necessarily proof of authorship or account control.

Was a computer system used? The prosecution must establish the statutory cyber component.

Was the communication privileged? Consider legal, moral, or social duty; official proceedings; fair reporting; and fair commentary on matters of legitimate public interest.

Was the statement true and made for a legitimate purpose? Gather the underlying records and sources, not merely an assertion that the allegation was true.

Is the complainant a public official or public figure? If the statement concerns official conduct or a legitimate matter of public interest, actual malice may have to be proved by the prosecution.

Has the offense prescribed? Determine the earliest provable date of discovery by the complainant, authorities, or their agents and compare it with the filing date.

Is venue proper? Identify the actual territorial basis alleged by the complainant.

Evidence that may help the defense

Depending on the facts, preserve:

  • the complete thread rather than isolated screenshots;
  • earlier posts to which you were responding;
  • source documents supporting factual assertions;
  • official records;
  • correspondence with sources;
  • evidence of fact-checking or verification;
  • messages showing the purpose for communicating the information;
  • proof that the post was restricted or not communicated to third persons, when applicable;
  • account-login or security information relevant to disputed authorship;
  • evidence of hacking or unauthorized account access;
  • evidence showing that another person created the post;
  • records showing when the complainant already knew about the publication; and
  • documents establishing residence, location, or other facts relevant to venue.

Do not delete, alter, fabricate, or manipulate evidence after learning of a complaint. Preservation is usually safer than trying to "clean up" the account.

Special rule for likes, shares, reactions, and comments

The Supreme Court's Disini ruling is frequently misunderstood.

A person who merely receives and reacts to another person's defamatory online post cannot be convicted of cyber libel simply on that basis. The Court also invalidated the provisions on aiding or abetting cyber libel because of their potential chilling effect on ordinary online interaction. (Lawphil)

But this protection does not necessarily cover someone who writes a new defamatory accusation.

For example, a comment merely expressing a reaction to the original post is different from a comment that independently states a new factual accusation against the complainant. The Supreme Court specifically recognized that a new defamatory story introduced in a comment can itself constitute an original online publication. (Lawphil)

Each person's actual words and conduct therefore need separate analysis.

What penalties can cyber libel carry?

Cyber libel is penalized more severely than traditional written libel because Section 6 of RA 10175 raises the applicable penalty by one degree.

The imprisonment range for cyber libel is prisión correccional in its maximum period to prisión mayor in its minimum period, corresponding to four years, two months and one day to eight years.

Following the amendment of Article 355 by RA 10951 and the Supreme Court's ruling in People v. Soliman, the alternative fine for online libel ranges from ₱40,000 to ₱1,500,000.

Importantly, the Supreme Court held that imprisonment is not mandatory in every conviction. The law permits imprisonment, a fine, or both, and a court may impose a fine alone when justified under the circumstances and applicable sentencing principles. (Lawphil)

Civil liability may also arise from the defamatory publication.

Common mistakes when filing a cyber libel case

Waiting too long

The one-year period from discovery can defeat an otherwise substantial complaint. Do not treat cyber libel as having a 12-year or 15-year filing period; the Supreme Court rejected those longer periods and reaffirmed the one-year rule in 2026. (Supreme Court of the Philippines)

Saving only one cropped screenshot

A cropped image may omit the account identity, URL, date, context, audience, or other evidence necessary to authenticate and understand the publication.

Assuming every insult is libel

The law punishes defamatory imputations meeting the required elements. Context, ordinary meaning, identifiable factual allegations, privilege, and constitutional protection for speech all matter.

Treating truth as an automatic defense

For private-person libel, Article 361 generally requires not only truth but also good motives and justifiable ends. Public-official and public-interest cases may involve a different constitutional analysis.

Filing against everyone who reacted to the post

Disini protects persons who simply receive and react to the original publication. Liability must be analyzed based on what each respondent actually authored or published. (Lawphil)

Choosing venue solely because the internet is accessible there

Cybercrime venue is governed by specific rules. The complaint should identify the factual and legal connection between the chosen place and the offense.

Common mistakes when defending a cyber libel case

Ignoring the prosecutor's subpoena

Failure to participate can result in the complaint being resolved without your evidence.

Filing only denials

A strong counter-affidavit should connect each defense to documents, electronic evidence, witnesses, context, or governing legal rules.

Deleting the post and assuming the problem disappears

Deletion does not retroactively eliminate a publication that already occurred. It may also destroy evidence relevant to context or the defense.

Continuing the online fight

Additional posts, insults, threats, accusations, or disclosures can create new disputes or potentially new causes of action. Once a case exists, public commentary should be approached carefully.

Assuming a fake account defeats the case

An anonymous username can make attribution harder, but investigators may seek subscriber information and other computer data through the procedures authorized by RA 10175 and the Rule on Cybercrime Warrants.

When legal help is urgent

Prompt legal advice is particularly important when:

  • the one-year prescriptive period is close to expiring;
  • the allegedly defamatory post has been deleted or may soon disappear;
  • the account owner is anonymous;
  • platform or subscriber data must be preserved;
  • the respondent has received a prosecutor's subpoena;
  • a criminal Information has already been filed in the RTC;
  • a warrant of arrest has been issued;
  • authorship of the account is disputed;
  • the publication concerns a public official, election, government controversy, or matter of public interest;
  • multiple publications or respondents are involved;
  • the complainant's date of discovery is disputed;
  • venue is questionable; or
  • the same facts may involve other offenses, privacy claims, threats, harassment, or civil damages.

Cyber-libel cases often turn less on the offensiveness of the words than on technical questions of authorship, publication, context, privilege, electronic evidence, venue, and prescription. Those issues are best addressed before evidence disappears or procedural deadlines pass.

Frequently asked questions

How long do I have to file cyber libel?

The current Supreme Court rule is one year from discovery of the offense by the offended party, the authorities, or their agents. The exact discovery date can be a factual issue and should be documented carefully. (Chief)

Is a screenshot enough to win a cyber libel case?

Not necessarily. Screenshots can be important evidence, but authenticity, accuracy, authorship, context, publication, and identification may still have to be established. Electronic evidence must satisfy the applicable evidentiary rules. (Lawphil)

Can I file against an anonymous Facebook or social-media account?

Potentially, yes, but the person responsible for the publication must ultimately be identified and connected to the account. NBI or PNP cybercrime assistance may be useful when provider or forensic evidence is necessary.

Can someone be charged just for liking a defamatory post?

Not merely for receiving and reacting to the post. Disini specifically protects such conduct from cyber-libel liability. A person who creates a new defamatory statement in a comment or separate post presents a different situation. (Lawphil)

Does deleting the post prevent prosecution?

No. If publication had already occurred, later deletion does not erase the alleged offense. The practical question becomes whether admissible evidence of the original publication can still be preserved and authenticated.

What if the accusation was true?

Truth can be a major defense, but Article 361 generally also considers good motives and justifiable ends. Where public officials, public figures, official conduct, or matters of public interest are involved, constitutional protections and the actual-malice doctrine may significantly affect the analysis. (Lawphil)

Can a public official file cyber libel?

Yes. Public officials retain protection against genuinely defamatory falsehoods. But when the publication concerns their official conduct or a legitimate matter of public interest, the prosecution bears a substantially higher burden and must prove actual malice where the doctrine applies. (Lawphil)

Where will a cyber libel case be tried?

RA 10175 places jurisdiction in the Regional Trial Court, with designated cybercrime courts handling cybercrime cases. Venue is governed by the Rule on Cybercrime Warrants and may be based on where an element occurred, where part of the relevant computer system was situated, or where qualifying damage occurred. (Lawphil)

Can cyber libel result only in a fine?

Yes. The Supreme Court has confirmed that a court may impose a fine instead of imprisonment in an appropriate online-libel case. The current statutory range identified by the Court for the cyber-libel fine is ₱40,000 to ₱1,500,000. (Lawphil)

Official sources

Disclaimer

This article provides general Philippine legal information and is not a substitute for advice based on the specific post, account records, affidavits, procedural history, dates, and evidence in a particular case. Cyber-libel outcomes are highly fact-dependent, especially on authorship, context, privilege, actual malice, authentication, venue, and the date of discovery for prescription.

Law and official sources checked as of August 23, 2026.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.

Privacy Policy

Terms of Use

Lawyer Login

 
 
Privacy Policy         Terms of Use         Lawyer Login