Quick answer

A cyber libel complaint is normally filed with the City or Provincial Prosecutor’s Office that has proper venue. The complainant may first ask the NBI Cybercrime Division or PNP Anti-Cybercrime Group to identify an anonymous account, preserve platform data, or conduct digital forensics. The complaint must be supported by sworn statements and evidence establishing every element of libel, online publication, and the respondent’s authorship.

Act quickly. Under the Supreme Court’s final April 8, 2026 ruling in Causing v. People, cyber libel prescribes in one year from discovery by the offended party, the authorities, or their agents—not 12 or 15 years. Filing the proper criminal complaint or Information interrupts prescription. A demand letter, platform report, barangay blotter, or informal police inquiry should not be assumed to stop the clock.

A respondent who receives a prosecutor’s subpoena should not ignore it. Under the current DOJ preliminary-investigation rules, the subpoena sets the filing date for the counter-affidavit and must ordinarily provide at least 10 days from receipt of the complaint papers. Preserve the post, account records, devices, and surrounding conversation; obtain counsel before deleting content, contacting witnesses, or making admissions.

What cyber libel means

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the publication is made through a computer system or comparable information and communications technology.

The prosecution must establish:

A defamatory imputation—such as an accusation of a crime, vice, defect, misconduct, status, or circumstance tending to cause dishonor, discredit, or contempt;
Publication to at least one person other than the person defamed;
Identification of the person allegedly defamed;
Malice, subject to the rules on privileged communications, public officials, and public figures;
Use of a computer system or ICT; and
The accused’s identity as the legally responsible author or publisher.

The words are evaluated in their complete context and ordinary meaning. A post need not expressly name the complainant if readers familiar with the circumstances could identify that person. Conversely, a vague attack on a large, undefined group may fail the identification requirement.

Publication can occur through a public post, website, blog, email, online article, video caption, or group chat. A message sent only to the person being insulted generally lacks publication to a third person, although another offense or civil claim may still apply. Restrictive privacy settings do not automatically defeat publication if another person actually received or viewed the material.

Who can be held liable online

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author but invalidated its application to people who merely receive and react to the post. A simple Like, Comment, or Share reaction is therefore not automatically criminal cyber libel.

That protection should not be overstated. A person who writes a new defamatory caption, creates a separate post, materially alters the allegation, or independently republishes it may become the author of new content. “I only copied it” is not a reliable defense to a separately authored republication. Responsibility involving editors, page administrators, shared corporate accounts, material updates, or several people who drafted and approved a post is highly fact-dependent.

An online post made before the Cybercrime Prevention Act became effective cannot be punished retroactively as cyber libel. Later republication or material modification may raise a separate issue, so the exact upload, edit, and publication history must be preserved.

The one-year deadline

Article 90 of the Revised Penal Code gives libel a one-year prescriptive period. The Supreme Court confirmed in the April 8, 2026 Causing Resolution that this same period governs cyber libel.

The period begins when the alleged crime is actually discovered by:

The offended party;
The authorities; or
Their agents.

A public social-media post is not automatically deemed discovered on its upload date. The Supreme Court rejected a blanket rule that public posting creates constructive notice. Discovery is proved from the circumstances—for example, when the complainant received the link, reacted to the post, demanded its removal, threatened legal action, or otherwise showed knowledge of it.

The period is interrupted by filing the complaint or Information. It may run again if proceedings end without conviction or acquittal or are unjustifiably stopped for a reason not attributable to the accused. Article 91 also states that prescription does not run while the offender is absent from the Philippines.

Because the calculation can depend on disputed evidence and procedural events, both sides should document:

The upload and edit dates;
The first date the complainant or an authorized representative saw the content;
Earlier comments, reactions, messages, or public responses showing knowledge;
The filing date and receiving stamp of the prosecutor’s office; and
Any dismissal, refiling, or interruption in the proceedings.

How to file a complaint

1. Preserve the complete publication

Before requesting deletion or takedown, preserve an accurate copy of the material:

Full-page screenshots showing the post, account name, handle, date, time, URL, audience setting, and surrounding comments;
A screen recording showing how the post is accessed;
The original image, video, audio, email, or message file where available;
The account profile, account ID or URL, previous relevant posts, and public information connecting the account to its user;
Notifications, direct messages, admissions, and platform correspondence;
The device on which the post was received, with its original files and metadata intact; and
The names of witnesses who personally saw the content.

Do not crop, annotate, enhance, or overwrite the only copy. Retain an untouched version and record who collected each item, when, and from what device or account.

Screenshots are useful but not automatically conclusive. Under the Rules on Electronic Evidence, the party offering an electronic document must establish its authenticity, integrity, and reliability.

2. Preserve proof of identity and authorship

A username, photograph, or display name alone may not prove who controlled an account. Useful evidence can include:

An admission of ownership, access, or authorship;
A witness who saw the person use the account or compose the post;
Details in the post known only to the suspected author;
Consistent writing style, expressions, conduct, and prior posts;
Account-recovery messages, linked email addresses, or telephone numbers obtained lawfully;
Platform, ISP, telecommunications, geolocation, or forensic-device records; and
A consistent chain of circumstantial evidence excluding another reasonable author.

Do not hack the account, impersonate anyone, secretly obtain passwords, or unlawfully access a device. Platform and subscriber records may require law-enforcement action and a court-issued cybercrime warrant.

3. Document harm and context

Actual financial loss is not an element of criminal cyber libel, but evidence of harm may support civil damages. Preserve:

Customer cancellations or lost contracts;
Employer, school, or professional communications;
Messages showing how readers understood the accusation;
Reasonable medical or counseling records, when relevant and lawfully disclosed;
Takedown requests and the author’s response; and
The full factual background—not merely the most offensive sentence.

Also retain official documents showing why the allegation is false or misleading. If the statement relates to a pending complaint, investigation, or court case, obtain certified records showing its actual status.

4. Determine the proper venue

Venue in libel cases is jurisdictional. For a private offended party, Article 360 generally permits filing where that person actually resided when the offense was committed or where the material was printed and first published. Different rules apply when the offended party is a public officer, depending on where the officer held office and whether that office was in Manila.

For internet publications, merely alleging that the complainant first accessed the article in a particular city does not necessarily establish that it was first published there. The complaint and eventual Information must allege sufficient venue facts. Bonifacio v. RTC of Makati illustrates why venue must be addressed carefully.

The criminal case itself falls within Regional Trial Court jurisdiction, ordinarily before a designated cybercrime court. File through the prosecution office corresponding to a legally supportable venue rather than whichever office is most convenient.

5. Choose the filing route

A complainant may:

File the complaint-affidavit and supporting evidence directly with the proper City or Provincial Prosecutor’s Office; or
Seek investigation and case build-up from the NBI Cybercrime Division or PNP Anti-Cybercrime Group, especially when the account is anonymous, platform data may disappear, or forensic examination is necessary.

The NBI’s official cybercrime-assistance procedure provides for complaint intake, sworn statements, supporting documents, and examination of relevant devices. The DOJ Office of Cybercrime also publishes official cybercrime information and contact details.

Do not assume that approaching an investigator alone interrupts prescription. Obtain advice on filing the formal prosecutor’s complaint before the one-year period expires.

6. Prepare the complaint-affidavit

The sworn complaint should state, in chronological and factual form:

The complainant’s identity and actual residence or public office when the offense occurred;
The respondent’s identity, if known;
The exact words, images, captions, or statements complained of;
An accurate translation if material is in Filipino or another Philippine language;
Where, when, and how it was published;
Who saw or received it;
Why readers understood it to refer to the complainant;
Why it is defamatory;
Evidence connecting the respondent to the account and post;
The date and circumstances of discovery;
The facts supporting proper venue; and
A list and explanation of every attachment.

Include witness affidavits, electronic evidence, certified public records, and other supporting documents. The DOJ’s intake office may require an investigation data form, identification, originals for comparison, filing fees, and multiple copies based on the number of respondents. Confirm the current checklist with the specific prosecution office.

What happens during preliminary investigation

Cyber libel carries a possible maximum imprisonment exceeding six years, so it undergoes regular preliminary investigation under the 2024 DOJ-NPS Rules.

The prosecutor first assesses whether the complaint and available evidence establish a prima facie case with reasonable certainty of conviction. If the case proceeds, the respondent receives a subpoena with the complaint and attachments.

The respondent’s counter-affidavit is due on the date specified in the subpoena. That date must ordinarily provide at least 10 days from receipt of the papers. A short extension may be granted for a meritorious reason, but it is discretionary and limited. The prosecutor may resolve the complaint if a properly served respondent fails to answer.

A clarificatory hearing, reply-affidavit, or rejoinder is not automatic. The prosecutor determines whether these are necessary. If the evidence meets the governing standard, the prosecutor prepares an Information for filing in the RTC; otherwise, the complaint is dismissed.

An aggrieved party may generally seek DOJ review of a prosecutor’s resolution through a verified petition for review within 15 days from receipt of the resolution or denial of a timely motion for reconsideration. The correct reviewing office, documentary requirements, and effect on a filed Information depend on where the case originated and its procedural status. Do not let the review period expire while attempting informal reconsideration.

How to defend the complaint

Preserve first; do not react impulsively

Save an untouched copy of the alleged post and its complete context. Preserve:

Drafts, source materials, research notes, and official records relied upon;
Requests for comment and the responses received;
Login history, security alerts, access logs, and proof of account compromise;
Devices used by authorized account managers;
Messages showing who drafted, approved, uploaded, edited, or removed the post; and
Evidence showing when the complainant actually discovered it.

Consult counsel before deleting, editing, correcting, or retracting the content. Leaving it online may prolong harm, but immediate deletion can destroy metadata and context needed for the defense. A careful approach is to preserve the evidence first, then decide whether a correction, retraction, or takedown is appropriate.

Do not pressure the complainant or witnesses, publish attacks about the case, fabricate supporting documents, coordinate false stories, or access another person’s account.

File a complete counter-affidavit

A bare denial or unverified motion to dismiss is usually inadequate. The counter-affidavit should answer each material allegation, identify every factual and legal defense, and attach supporting affidavits and evidence.

Potential defenses include:

The words are not defamatory when read in full context;
The statement is protected opinion, fair comment, or rhetorical criticism rather than a false assertion of fact;
The complainant was not named or reasonably identifiable;
There was no publication to a third person;
The respondent did not own, control, or use the account;
The electronic evidence is incomplete, altered, unauthenticated, or attributed to the wrong account;
The respondent merely received or reacted to another person’s post and did not author new defamatory content;
The communication was privileged;
The statement was true and published with good motives and for justifiable ends, within Article 361;
The prosecution cannot prove actual malice where the statement concerns a public official’s official conduct or an applicable public figure or public-interest matter;
Venue is improper or inadequately alleged;
The one-year period had expired before the complaint was filed; or
The online publication occurred before the Cybercrime Prevention Act became applicable.

Do not omit a defense on the assumption that another pleading can automatically be filed later. Additional affidavits are allowed only when the prosecutor requires or permits them.

Malice, privilege, truth, and public criticism

Presumed malice is the general rule

Article 354 generally presumes malice from a defamatory imputation, even if it is true, when the author cannot show good intention and a justifiable motive.

The Code recognizes qualified privileges, including:

A private communication made in performing a legal, moral, or social duty; and
A fair and true, good-faith report—without added defamatory comments—of a nonconfidential judicial, legislative, or other official proceeding or an official act.

Qualified privilege removes the automatic presumption of malice, but it is not absolute immunity. Liability may still arise if the prosecution proves actual malice.

Public officials and public figures

When a statement concerns a public official’s official conduct, the prosecution must prove actual malice: knowledge of falsity or reckless disregard of whether the statement was false. The doctrine also applies in appropriate cases involving public figures. Mere inaccuracy or failure to prove every detail does not by itself establish actual malice.

This protection is narrower when the attack concerns purely private life rather than official conduct or a legitimate matter of public concern. Being a government employee also does not make every personal accusation privileged.

Truth is not always enough

Under Article 361:

When the imputation concerns a crime, the accused may prove truth, but acquittal also requires good motives and justifiable ends.
For an imputation that is not a crime, proof of truth is generally not admitted unless the statement concerns a government employee and facts related to official duties.

A truthful allegation posted mainly to humiliate, threaten, or expose irrelevant private matters can therefore remain legally problematic.

Court proceedings, arrest, and bail

If an Information is filed, the RTC judge independently evaluates probable cause. Depending on that evaluation and whether custody is necessary, the court may dismiss the case, require additional support, issue a summons, or issue an arrest warrant.

The filing of a complaint with the NBI, police, or prosecutor does not by itself authorize an immediate arrest for an old online post. An arrest ordinarily requires a judicial warrant unless a recognized ground for warrantless arrest exists.

Before conviction, bail is a matter of right in a cyber libel prosecution. There is no single universal bail amount for every case; the court’s applicable bail schedule and the accused’s circumstances control. Anyone who learns of a warrant should have counsel verify it directly with the issuing court and arrange lawful surrender and bail. Do not evade service or rely on screenshots of an alleged warrant circulating online.

Grounds such as prescription, lack of jurisdiction, or defective venue may support a motion to quash before plea. Some objections can be waived if not raised at the proper time, while other matters require evidence at trial. Counsel should review the Information before arraignment.

At trial, the prosecution must prove guilt beyond reasonable doubt. A preliminary-investigation finding does not establish guilt.

Possible penalties and civil liability

Section 6 of the Cybercrime Prevention Act raises the penalty for online libel by one degree over traditional libel. The possible imprisonment range is prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years.

Imprisonment is not automatic. In People v. Soliman, the Supreme Court confirmed that a court may impose a fine instead. Under the current statutory amounts and the Court’s computation, the fine for online libel ranges from ₱40,000 to ₱1,500,000. The court may impose imprisonment, a fine, or both, depending on the lawful sentencing rules and circumstances.

The offended party may also pursue civil damages. Civil liability arising from the offense is ordinarily addressed with the criminal case unless waived, reserved, or previously filed, while Article 33 of the Civil Code recognizes an independent civil action for defamation. Separate claims must be coordinated carefully because procedural rules and the prohibition against double recovery apply.

Retraction, apology, and settlement

Deleting a post, apologizing, correcting the record, or signing an affidavit of desistance does not automatically erase a completed offense. These steps may reduce harm, support good faith, affect civil claims, or influence prosecutorial and sentencing considerations, but criminal prosecution is brought in the name of the People of the Philippines.

The complainant cannot guarantee dismissal after the Information is filed. Any compromise should be documented through counsel, should not involve intimidation or payment for false testimony, and should address takedown, correction, confidentiality, civil damages, and preservation of evidence separately.

Common mistakes

Waiting because an older article says cyber libel prescribes in 12 or 15 years;
Treating a demand letter or platform report as a formal criminal filing;
Filing in a convenient city without establishing statutory venue;
Submitting cropped screenshots without URLs, dates, context, or authentication;
Assuming the account’s display name conclusively proves authorship;
Deleting the only copy of the post or resetting the relevant device;
Quoting only one line while omitting the conversation that changes its meaning;
Claiming “truth” without evidence of good motive and a justifiable purpose;
Assuming all criticism of a public official is automatically protected;
Assuming every Like, Share, or Comment is punishable—or that adding a new defamatory caption is merely a reaction;
Ignoring a prosecutor’s subpoena or missing its stated counter-affidavit date;
Contacting witnesses to influence their accounts;
Posting new accusations about the complainant, prosecutor, or judge; and
Believing an apology or affidavit of desistance automatically terminates the case.

When legal help is urgent

Seek a Philippine criminal-law or cybercrime lawyer immediately when:

The one-year prescriptive period is close;
The post or account may soon be deleted;
The suspected author is anonymous and platform records are needed;
A prosecutor, NBI, or PNP subpoena has arrived;
The complaint attachments are incomplete or the response date is near;
An Information, summons, hold-departure issue, or arrest warrant has surfaced;
Arraignment is scheduled and venue, prescription, or the sufficiency of the Information may be challenged;
A prosecutor’s resolution was received and the review period is running;
Judgment has been promulgated—the ordinary criminal-appeal period is generally 15 days, subject to applicable motions and rules; or
The incident also involves threats, stalking, doxxing, intimate images, minors, account hacking, or immediate physical danger.

FAQ

Is a screenshot enough to win a cyber libel case?

Not necessarily. It may show what appeared on a screen, but the proponent must still establish authenticity, completeness, publication, authorship, and connection to the accused. Original files, witness testimony, platform records, and forensic evidence can be critical.

Does the one-year period begin when the post was uploaded?

Not automatically. It begins upon discovery by the offended party, authorities, or their agents. Upload date and discovery date may be different and must be proved from the circumstances.

Does filing with the prosecutor stop prescription?

A properly filed criminal complaint or Information interrupts prescription. Do not assume that a demand letter, barangay record, platform report, or informal investigative request has the same effect.

Can someone be liable for sharing another person’s post?

A simple Share or reaction, without authorship of new defamatory material, is not automatically cyber libel under Disini. A separate caption, altered content, or independent republication can create a different factual and legal situation.

Is a private group chat covered?

It can satisfy publication if at least one person other than the person defamed received the allegation. A message sent only to the person targeted generally lacks the third-person publication required for libel.

Is an insulting opinion automatically libel?

No. The court considers whether the statement reasonably asserts a defamatory fact, the language used, the entire context, and whether it is protected criticism or fair comment. Labeling a factual accusation “opinion” does not automatically protect it.

Can the accused simply prove that the statement was true?

Truth has special rules under Article 361 and generally must be accompanied by good motives and justifiable ends. For noncriminal imputations, proof of truth is restricted unless the statement concerns a government employee’s official duties.

Can the complainant withdraw the case?

The complainant may execute a desistance or settle the civil aspect, but that does not bind the prosecutor or court automatically. Once criminal proceedings begin, the State controls the prosecution.

Will a correction or apology prevent charges?

Not by itself. It may reduce harm and support an argument of good faith, but it does not erase publication that already occurred.

Can the case proceed if the account was fake?

Yes, if admissible direct or circumstantial evidence establishes who controlled the account or authored the post. A display name alone is weak proof, but admissions, witnesses, private knowledge, writing patterns, account history, platform records, and device forensics may establish identity together.

Official legal references

This article provides general Philippine legal information, not legal advice for a particular case. Venue, prescription, privilege, authorship, admissibility, and available remedies depend on the complete facts and records. Laws and official procedures were checked through August 4, 2026.