Quick answer

A cyber libel case in the Philippines generally concerns a defamatory statement published through Facebook, Messenger, TikTok, YouTube, X, a website, email, or another computer system. To file a criminal complaint, the complainant must preserve the online evidence, identify the author and the person defamed, show publication to at least one third person, and submit a sworn complaint and supporting evidence to the proper prosecutor’s office. The NBI Cybercrime Division or the PNP Anti-Cybercrime Group may assist with attribution and digital evidence.

If you are accused, do not ignore a prosecutor’s subpoena. Secure counsel immediately, preserve the complete post and its context, and submit a sworn counter-affidavit and supporting evidence within the stated period—ordinarily 10 days from receipt under Rule 112. Deleting the post, arguing online, or contacting witnesses can make the situation worse.

Time is critical. The Supreme Court has now confirmed that cyber libel prescribes in one year from its discovery by the offended party, the authorities, or their agents, subject to the rules on interruption of prescription. Posting something publicly does not automatically mean the offended party is legally presumed to have discovered it on the posting date. The actual discovery date may therefore require evidence. See Causing v. People, G.R. No. 258524, April 8, 2026.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the publication is made through a computer system or similar technology.

A prosecution ordinarily must establish:

A discreditable imputation against another person—such as an accusation of a crime, vice, defect, misconduct, or condition tending to cause dishonor, discredit, or contempt;
Publication, meaning communication to at least one person other than the person defamed;
Identification of the person allegedly defamed, whether named directly or recognizable from the circumstances;
Malice, either presumed under the general rule or proved as actual malice when the applicable constitutional and jurisprudential standards require it;
Use of a computer system or information and communications technology; and
The accused’s responsibility as the author of the defamatory online publication.

The words are evaluated in their full context, including the language used, accompanying images, audience, surrounding discussion, and ordinary meaning to readers. A person need not be expressly named if people familiar with the circumstances could reasonably identify that person. Conversely, hurtful, insulting, vague, or unpopular speech is not automatically cyber libel if an essential element is missing.

Cyber libel applies only to punishable online conduct after the Cybercrime Prevention Act took effect. The Supreme Court has ruled that an online post made before the law’s effectivity cannot be punished retroactively as cyber libel. See Peñalosa v. Ocampo, G.R. No. 230299, April 26, 2023.

Who may be held responsible?

The principal focus is the person who authored the allegedly libelous statement or created a new defamatory publication.

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author but struck down the application of the Cybercrime Prevention Act’s aiding-or-abetting provision to cyber libel. A person is therefore not automatically criminally liable merely for clicking “Like,” reacting, sharing a link, or making a comment that only expresses agreement.

That protection has limits. Someone who writes a new defamatory accusation in a comment, caption, repost, edited video, or quote-post may become the author of a separate publication. Liability depends on what that person independently communicated, not simply on the platform button used.

Account ownership alone may not conclusively prove authorship. Where identity is disputed, investigators may need lawful evidence connecting the account or device to the person accused. Subscriber, traffic, or content data held by a platform or service provider may require preservation processes, lawful disclosure orders, or cybercrime warrants.

Important defenses and exceptions

A defense must be matched to the exact words, context, subject, audience, and available proof. Common issues include the following.

No defamatory imputation

The statement, read as a whole, may not accuse the complainant of any crime, vice, defect, or discreditable circumstance. Mere annoyance, criticism, exaggeration, or an unpleasant description does not by itself establish every element of libel.

The complainant was not identifiable

A statement about an unnamed or broadly described group may fail the identification element if readers could not reasonably understand it as referring to the complainant. Evidence that acquaintances actually recognized the complainant may, however, support identification.

No publication to a third person

A message sent only to the person concerned generally lacks the publication required for libel. Group chats, copied emails, shared direct messages, or posts visible to other users can satisfy publication even when the audience is small or restricted.

Lack of authorship or an inauthentic post

An accused person may dispute having created the post, account, image, or message. Possible issues include hacking, impersonation, fabrication, manipulated screenshots, missing metadata, or use of a shared device. A bare denial may be weak; preserve account-security alerts, device records, login history, recovery emails, travel or location evidence, and reports made to the platform or authorities.

Privileged communication

Article 354 of the Revised Penal Code recognizes limited exceptions to the presumption of malice, including:

A private communication made by a person to another in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts of public officers.

Privilege is not a blanket exemption for anything labelled a “complaint,” “warning,” or “public service.” Excessive publication, unrelated accusations, unnecessary insulting language, bad faith, or lack of a corresponding duty or interest may defeat the defense.

Truth, good motives, and justifiable ends

Truth is not always a complete defense by itself. Article 361 generally requires proof of the truth of a qualifying imputation together with good motives and justifiable ends. Special rules apply to imputations against government employees concerning the discharge of their official duties.

A defendant should therefore preserve not only proof supporting factual accuracy, but also records showing responsible verification, legitimate purpose, requests for comment, reliance on authentic documents, and why publication to that audience was appropriate.

Fair comment and speech on public affairs

Honest opinion based on disclosed or established facts is different from inventing damaging facts. Criticism concerning public officials, public figures, and matters of public concern receives stronger constitutional protection. Where the actual-malice standard applies, the prosecution must prove that the defamatory statement was made knowing it was false or with reckless disregard of whether it was false. The Supreme Court describes reckless disregard as involving a high degree of awareness of probable falsity; even serious negligence is not automatically enough. See Disini.

Calling an assertion “opinion,” adding “allegedly,” or phrasing it as a question will not necessarily protect it if the communication still conveys a provably false factual accusation.

Prescription

Cyber libel has a one-year prescriptive period. Under the controlling 2026 Causing ruling, the period begins upon actual discovery of the alleged cyber libel by the offended party, the authorities, or their agents—not automatically on the date the material was uploaded.

The filing of the proper complaint may interrupt prescription under the applicable procedural and penal rules. Disputes may arise over:

The true date of discovery;
Who discovered the post and in what capacity;
Whether the complaint was properly instituted;
Whether prescription was validly interrupted;
Later edits or alleged republication; and
Whether separate posts constitute separate publications.

Do not calculate the deadline informally. Preserve messages showing when the post was first reported or forwarded, affidavits from the first people who saw it, platform timestamps, emails to counsel or investigators, and official filing receipts.

How to file a cyber libel complaint

1. Preserve the publication before seeking its removal

Capture the entire post or message, not just the offending sentence. Save:

The visible account name, username, profile URL, and profile details;
The exact post URL or message thread;
Date and time shown by the platform;
Full text, captions, images, audio, and video;
Comments, edits, shares, audience or privacy settings, and engagement;
Screen recordings showing how the content was accessed;
Original downloaded files, where available;
Notifications and messages through which you first learned of the post; and
The device on which the material was received.

Keep original files unchanged. Make working copies rather than cropping, annotating, converting, or repeatedly forwarding the only copy. Record who captured each item, when, on what device, and how it has been stored.

2. Document the effect and identification

Identify witnesses who saw the publication and understood it to refer to you. Preserve messages, calls, lost engagements, workplace communications, customer inquiries, medical records, or other lawful evidence of reputational, financial, or emotional harm.

Avoid asking witnesses to use identical wording. Each witness should describe only what they personally saw, understood, or experienced.

3. Establish authorship and context

Collect lawful evidence linking the respondent to the account or post, such as prior communications, admissions, consistent account history, verified profile details, or witnesses with personal knowledge. Do not hack an account, secretly obtain passwords, impersonate someone, or manufacture a conversation.

If technical attribution is necessary, consider reporting promptly to the NBI or PNP Anti-Cybercrime Group. The Cybercrime Prevention Act gives the NBI and PNP responsibility for cybercrime enforcement. A police or NBI report can assist an investigation, but it is not a substitute for properly instituting the criminal complaint before the appropriate prosecutorial authority.

4. Prepare the sworn complaint

The complaint-affidavit should clearly state:

The complainant’s and respondent’s identifying information and addresses, if known;
The exact defamatory words or material;
Where and how the material was published;
Why it referred to the complainant;
Who else received or viewed it;
Why it was defamatory and malicious;
The date and circumstances of discovery;
Facts connecting the respondent to the publication; and
A numbered list of supporting documents and witness affidavits.

Rule 112 requires supporting affidavits and documents sufficient to establish probable cause. Affidavits must be properly sworn before an authorized officer. The required number of copies depends partly on the number of respondents. See the Revised Rules of Criminal Procedure.

5. File in the proper place

Cybercrime cases fall within Regional Trial Court jurisdiction and are handled by designated cybercrime courts. Territorial jurisdiction and venue may depend on where an element occurred, where a relevant computer system was situated, or where legally cognizable damage occurred.

Venue in a criminal case is jurisdictional. Online availability everywhere does not make every prosecutor’s office or court an equally safe filing choice. Before filing, have counsel examine the complainant’s residence, respondent’s acts, device and system locations, discovery evidence, and the location of the alleged damage.

Keep the receiving copy, docket number, official receipt, and proof of the filing date.

How to defend against a complaint

1. Read the subpoena and attachments immediately

Note the exact date and method of receipt. Under Rule 112, a respondent ordinarily has 10 days from receipt of the subpoena and supporting papers to submit a counter-affidavit, witness affidavits, and supporting documents. A motion to dismiss generally cannot replace the counter-affidavit. If no response is submitted on time, the prosecutor may resolve the complaint using only the complainant’s evidence.

Confirm the deadline with the prosecutor’s office and counsel; do not assume weekends, holidays, or a request for extension automatically changes it.

2. Preserve everything, including unfavorable material

Keep the full thread, drafts, sources, private messages, raw recordings, documents reviewed before posting, requests for comment, corrections, and platform records. Context omitted from the complaint may be central to the defense.

Do not delete or alter accounts, wipe devices, fabricate supporting records, coach witnesses, or ask another person to claim authorship falsely.

3. Test every required element

A counter-affidavit should address the evidence, not merely say “I am innocent.” Counsel should examine:

Whether the statement was actually defamatory;
Whether it was communicated to a third person;
Whether the complainant was identifiable;
Whether the respondent authored the publication;
Whether the electronic material is complete and authentic;
Whether privilege, truth, good motives, fair comment, or public-interest protections apply;
Whether actual malice had to be proved;
Whether the correct venue was chosen; and
Whether the offense had prescribed.

Any prescription defense should be supported with evidence of discovery and filing dates. The Supreme Court has cautioned that prescription may require a factual hearing rather than resolution from the posting date alone.

4. Avoid a second publication

A defensive social-media post can create a new problem. Do not repeat the accusation, publish the complaint-affidavit indiscriminately, threaten the complainant, or mobilize followers against witnesses. Give documents privately to counsel.

5. Prepare for the next stage

The prosecutor decides only whether probable cause exists to hold the respondent for trial; this is not yet a finding of guilt. If probable cause is found, an information may be filed in the designated Regional Trial Court. The court independently determines whether judicial probable cause exists for further process.

If the complaint is dismissed or an information is filed, obtain the complete resolution promptly. Remedies and periods for seeking review depend on the issuing office, the procedural posture, and the relief sought.

Possible penalties and civil liability

Article 355, as amended by Republic Act No. 10951, provides for ordinary written libel a penalty of prisión correccional in its minimum and medium periods, a fine from ₱40,000 to ₱1,200,000, or both, in addition to possible civil liability. Section 6 of the Cybercrime Prevention Act raises the applicable penalty by one degree when libel is committed through information and communications technology.

The sentence in a particular case depends on the charge, proven circumstances, the Indeterminate Sentence Law where applicable, and the court’s judgment. Do not assume that cyber libel is “fine only” or that imprisonment is automatic.

A complainant may also pursue damages. Defamation is among the matters for which Article 33 of the Civil Code permits an independent civil action, subject to procedural rules and the prohibition against double recovery for the same injury. Civil claims have their own pleading, proof, and prescription issues and should be assessed separately.

Common mistakes

Waiting for the post to disappear before preserving it;
Saving only a cropped screenshot without the URL, account, date, or context;
Assuming the one-year period always begins on the upload date;
Filing wherever the post happened to be viewed without checking venue;
Naming every person who liked or shared a post as an offender;
Treating truth as an automatic defense without proving motive and purpose;
Assuming “private group” or “group chat” means there was no publication;
Ignoring a subpoena or submitting an unsworn narrative;
Filing a motion to dismiss instead of the required counter-affidavit;
Repeating the accusation in a demand letter or public rebuttal;
Editing, deleting, or resetting devices that may contain evidence; and
Relying on anonymous screenshots when authorship is disputed.

When legal help is urgent

Consult a Philippine lawyer immediately if:

The one-year period may expire soon;
You received a subpoena, summons, warrant, or court order;
The account is anonymous, hacked, or located abroad;
A platform may soon delete relevant data;
The publication involves a public official, journalist, election, workplace dispute, sexual accusation, child, or confidential record;
Several posts, edited videos, livestreams, or different respondents are involved;
Arrest, bail, travel, employment, or professional-license consequences are possible;
Someone is threatening violence, doxxing, extortion, or release of intimate material; or
You are considering settlement, retraction, or an admission that could affect criminal or civil liability.

If there is an immediate threat to safety, contact local law enforcement rather than treating the matter solely as a reputation dispute.

FAQ

Is a Facebook or group-chat post automatically cyber libel?

No. Use of a computer system satisfies only part of the inquiry. The prosecution must still establish a defamatory imputation, publication, identification, malice, authorship, and the other applicable legal requirements.

Must the post be public?

Not necessarily. Publication requires communication to a third person. A restricted group, private chat with several members, copied email, or forwarded direct message may qualify.

Can I sue if my name was not mentioned?

Possibly, but you must show that the words and surrounding circumstances reasonably identified you. Witnesses who understood the post as referring to you may be important.

Is a screenshot enough?

A screenshot may be relevant, but its weight depends on authenticity, completeness, source, and context. Preserve the URL, full thread, original files, device records, and testimony from people with personal knowledge.

Is sharing or liking someone else’s post cyber libel?

Not automatically. Disini protected ordinary reactions and struck down aiding-or-abetting liability as applied to cyber libel. A person who adds a new defamatory assertion may nevertheless be treated as the author of that new statement.

Does deleting or apologizing end the case?

No. Deletion, correction, retraction, or apology may affect practical resolution, damages, or the assessment of conduct, but it does not automatically erase an offense already completed. Preserve evidence before changing content and obtain legal advice about the wording of any response.

Can the same publication support both ordinary libel and cyber libel?

The State cannot impose double punishment for what is essentially the same libelous publication merely by charging it under both the Revised Penal Code and the Cybercrime Prevention Act. Disini recognized the double-jeopardy concern. Different publications or independently authored accusations require separate factual analysis.

How long do I have to file?

The controlling rule is one year from discovery by the offended party, the authorities, or their agents, subject to interruption and other prescription rules. Because the discovery date and proper institution of the complaint may be disputed, seek advice well before the apparent deadline.

Official legal sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Cyber libel disputes are highly fact- and document-specific. The law and official sources were checked as of September 12, 2026.