Quick answer

To file a cyber libel case in the Philippines, act immediately: preserve the online publication and proof of who posted it, identify the defamatory statements, and file a properly sworn complaint-affidavit with the prosecutor’s office that has territorial authority. A criminal complaint must establish every element of libel and show that the defamatory matter was committed through a computer system.

To defend a case, do not ignore a subpoena, demand letter, or warrant. Preserve the complete publication and its context, note when it was discovered, and obtain counsel before submitting a counter-affidavit or making public statements. Possible defenses include failure to prove an element, lack of authorship, privileged communication, protected opinion or fair comment, truth made with good motives and justifiable ends, lack of actual malice where that standard applies, improper venue, prescription, and constitutional or procedural defects.

Timing is especially important. The Supreme Court’s current rule is that cyber libel prescribes in one year from discovery of the allegedly defamatory publication by the offended party, the authorities, or their agents. Filing a complaint for preliminary investigation interrupts prescription. Because the discovery date, interruption, republication, and procedural history may be disputed, neither side should calculate the deadline informally.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 covers libel, as defined in Article 355 of the Revised Penal Code, when committed through a computer system or a similar future means.

Ordinary libel is a public and malicious imputation of a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or bring a person into contempt. For cyber libel, the prosecution generally must prove:

There was an allegation or imputation capable of being defamatory.
It referred to an identifiable natural or juridical person, or to someone who could be identified from the surrounding facts.
It was published or communicated to at least one person other than the person defamed.
The accused was responsible for publishing it.
Malice existed in law or, where required, malice in fact.
A computer system was used.

The entire publication matters. Courts examine the words in their ordinary meaning and in context, not merely the complainant’s interpretation of an isolated phrase.

A harsh, offensive, or embarrassing statement is not automatically criminal libel. Pure opinion, rhetorical criticism, satire, or a statement that cannot reasonably be understood as asserting a defamatory fact may fall outside the offense. However, labeling an accusation “opinion” will not protect it if the statement implies undisclosed defamatory facts.

Who may be charged?

The Supreme Court held in Disini v. Secretary of Justice that criminal liability for cyber libel under Section 4(c)(4) applies to the original author or publisher of the defamatory online statement.

The Court invalidated the application of the Cybercrime Prevention Act’s general provisions on aiding, abetting, and attempt to online libel. A person should therefore not be charged with cyber libel merely for receiving a post or, without more, reacting to it, commenting on it, or sharing it. But a person who adds a new defamatory statement, substantially republishes an accusation as their own, or is proven to have participated in creating the publication may present a different factual question.

Account ownership alone does not always prove authorship. The prosecution must connect the accused to the publication through admissible evidence.

Malice, public officials, and matters of public concern

Under Article 354 of the Revised Penal Code, every defamatory imputation is generally presumed malicious even if true, unless it falls within a recognized privileged communication.

That presumption is not absolute. Constitutional protection for speech is stronger when the publication concerns a public official, public figure, or matter of public interest. In such cases, liability may require proof of actual malice—that the accused knew the statement was false or acted with reckless disregard of whether it was false.

Actual malice is not the same as personal dislike, anger, or ill will. It concerns the publisher’s state of mind regarding truth or falsity. Relevant evidence may include whether the author invented facts, ignored obvious contrary records, relied on an inherently unreliable source, deliberately avoided verification, or published despite knowing that the accusation was false. Failure to investigate, standing alone, does not necessarily establish actual malice.

Private disputes and attacks on private persons generally receive less constitutional protection than good-faith discussion of public affairs.

Important defenses and exceptions

No defamatory factual imputation

The statement may be criticism, hyperbole, humor, a value judgment, or an opinion based on disclosed facts rather than a factual accusation. Context, audience, wording, and surrounding posts are critical.

The complainant was not identifiable

The prosecution must show that readers could reasonably identify the complainant. Naming the person is not always necessary, but a vague statement about a large group may be insufficient unless circumstances point to a particular person.

No publication to a third person

A statement communicated only to the person concerned ordinarily lacks the publication element. A private message sent to additional recipients, however, may satisfy publication.

Lack of authorship or control

The accused may dispute creating, uploading, approving, or controlling the publication. Account compromise, impersonation, shared-device access, automated posting, or manipulated screenshots must be supported by evidence—not merely asserted.

Privileged communication

Article 354 recognizes qualified privilege for:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts.

Privilege can be lost through actual malice, unnecessary publicity, excessive language, or circulation beyond those who have a legitimate interest. Complaints to employers, schools, professional bodies, or government offices are therefore not automatically immune; their purpose, recipients, factual basis, and wording matter.

Certain statements made in legislative, judicial, or other protected proceedings may also enjoy privilege under constitutional law or jurisprudence.

Truth, good motives, and justifiable ends

Truth is not always a complete defense by itself. Under Article 361, acquittal generally requires proof both that the defamatory matter was true and that it was published with good motives and for justifiable ends.

If the imputation does not concern a crime, proof of truth is subject to additional statutory limits, except when the statement concerns a government employee’s discharge of official duties. Documentary support and the reason for publication are therefore crucial.

Fair comment on matters of public interest

Fair comment based on true or substantially established facts may be protected, particularly when public conduct is involved. A fabricated factual premise, undisclosed false accusation, or statement made with actual malice may defeat the defense.

Prescription

The current Supreme Court ruling is that cyber libel prescribes in one year from discovery, not 12 or 15 years. The relevant discovery may be by the offended party, law-enforcement authorities, or their agents.

A complaint filed for preliminary investigation interrupts the period. The exact computation may depend on:

when the publication was discovered;
who discovered it and in what capacity;
when a sufficient complaint was filed;
whether the proceeding was dismissed or terminated;
whether a later online act was merely continued availability or a legally significant new publication; and
whether procedural events restarted or suspended the period.

Do not assume that an old post remains chargeable simply because it is still accessible. Conversely, do not assume that deleting and reposting, materially editing, or newly publishing the accusation has no legal effect.

Improper venue or lack of territorial connection

Venue in a criminal case is jurisdictional. Libel has special venue rules under Article 360 of the Revised Penal Code, while cybercrime cases also involve the jurisdictional provisions of Republic Act No. 10175 and the Rules of Criminal Procedure.

For online publications, the legally relevant place may depend on where the publication was authored, uploaded, first published, accessed, or produced its essential elements, together with the complainant’s status and residence. A bare allegation that a post was available everywhere does not eliminate the need to establish proper venue. This issue should be examined before filing and raised promptly by the defense when appropriate.

How to file a cyber libel complaint

1. Preserve the publication immediately

Before requesting deletion or confronting the author, preserve:

full-page screenshots showing the account name, complete text, date, time, URL, and surrounding context;
the original URL and any post, comment, video, or profile identifiers;
screen recordings showing how the publication was accessed;
copies of images, audio, or video in their original available format;
comments, shares, messages, notifications, and visible engagement;
the account’s profile details and identifying information;
messages or admissions linking the respondent to the account;
witness details for people who saw the publication;
records showing when you first learned of it; and
evidence of reputational, professional, emotional, or financial harm.

Do not crop away material that may change the meaning. Retain the original files and devices. If authenticity or deletion is likely to be contested, ask counsel about a forensic examination, an affidavit from a person who personally accessed the post, or lawful requests for preservation of platform and subscriber data.

A notarized screenshot does not automatically prove who created a post or that every statement in it is true. Authentication, authorship, and admissibility remain separate questions.

2. Assess every element and possible defense

Prepare the exact words alleged to be defamatory, not merely a summary. Identify:

why the words refer to the complainant;
what defamatory fact they convey;
who received or viewed them;
why the proposed respondent is believed to be the author;
how a computer system was used;
when and where publication and discovery occurred; and
why privilege, fair comment, truth, or other defenses do not apply.

A weak complaint should not be filed simply to force a retraction or punish criticism. Knowingly making false allegations in a sworn statement may expose the affiant to separate liability.

3. Determine the proper prosecutor’s office

A criminal case ordinarily begins with a complaint-affidavit filed for preliminary investigation before the prosecutor with territorial authority. Depending on the facts and local arrangements, evidence may first be brought to the NBI Cybercrime Division or the PNP Anti-Cybercrime Group for investigation, but an investigative report is not a substitute for the prosecutor’s determination of probable cause.

Venue is fact-sensitive. Before filing, verify the appropriate city or provincial prosecutor’s office and its current requirements. Filing in the wrong place can cause delay and may become fatal if prescription expires.

4. Prepare a sworn complaint-affidavit

The complaint-affidavit should be based on the complainant’s personal knowledge and supported by admissible documents. It should ordinarily include:

the parties’ names and addresses;
a chronological statement of facts;
the exact publication and its complete context;
the date and manner of discovery;
facts supporting identification, publication, authorship, malice, and computer use;
facts establishing venue;
a clear explanation of each attached exhibit; and
a request for appropriate action.

Affidavits of witnesses with personal knowledge should be attached. Number or label exhibits consistently. Bring the original or best available copies for comparison if required.

The prosecutor’s office may require multiple copies, proof of identity, a verification or certification, and compliance with local filing procedures. Confirm these directly with the office before the deadline; do not rely on an unofficial social-media checklist.

5. Participate in preliminary investigation

If the prosecutor finds sufficient basis to proceed, the respondent is ordinarily served with a subpoena and copies of the complaint and supporting evidence. Under Rule 112, the respondent generally has 10 days from receipt of the subpoena to submit a sworn counter-affidavit, witness affidavits, and supporting documents.

The prosecutor may call a clarificatory hearing, but the parties do not have an automatic right to cross-examine each other at preliminary investigation. If the respondent cannot be subpoenaed or fails to submit a counter-affidavit within the prescribed period, the prosecutor may resolve the complaint on the evidence presented.

The applicable DOJ rules, the subpoena itself, or a valid office directive may control specific filing methods and dates. Follow the written deadline stated in the official notice and seek clarification promptly if it conflicts with the record.

6. Review the prosecutor’s resolution promptly

The prosecutor may dismiss the complaint or find probable cause and file an information in court. Available review or reconsideration procedures have short, technical deadlines and do not necessarily stop every other period. Obtain the signed resolution, proof of receipt, and the complete records immediately.

How to defend a cyber libel complaint

Do not ignore service

Record the exact date, time, and manner you received the subpoena, complaint, resolution, information, or warrant. Keep the envelope, email headers, registry receipt, and all attachments. A deadline usually runs from legally effective receipt, not from when you decide to consult a lawyer.

Obtain the complete complaint and exhibits

Check whether every referenced post, screenshot, affidavit, link, and attachment was actually supplied. A defense cannot be prepared reliably from the subpoena alone.

Preserve rather than alter evidence

Do not delete accounts, wipe devices, fabricate messages, contact witnesses to change their accounts, or pressure the complainant. Preserve:

the original post and drafts;
source materials and research notes;
conversations with sources;
editorial records;
device and account-access logs;
proof of account compromise or impersonation;
documents supporting truth or good-faith belief;
the complete thread and surrounding discussion; and
records showing where and when the content was created or uploaded.

Deletion may not end the case and can make an innocent explanation harder to prove.

Build the counter-affidavit element by element

A useful counter-affidavit should address the prosecution’s actual evidence, including:

whether the accused authored or approved the publication;
whether the words assert a defamatory fact;
whether the complainant was identifiable;
whether anyone other than the complainant received it;
whether the publication was privileged;
the sources and verification performed;
the factual basis for an opinion or fair comment;
truth, good motives, and justifiable ends, where applicable;
the complainant’s public status and whether actual malice must be proved;
discovery and filing dates for prescription;
venue and territorial jurisdiction; and
defects in authentication or chain of custody.

General denials are usually less useful than specific facts supported by records and witness affidavits.

Be careful with retractions and settlement discussions

A prompt correction, apology, or retraction may reduce harm and may affect damages or prosecutorial assessment, but it does not automatically erase completed criminal liability. An unplanned apology may also be treated as an admission.

Have counsel review any proposed public statement or settlement. Criminal prosecution is brought in the name of the People of the Philippines; a private agreement or affidavit of desistance does not automatically compel dismissal.

Respond correctly if an information or warrant has been issued

Once a case is in court, preliminary-investigation arguments, motions, arraignment, bail, and trial deadlines require coordinated handling. Do not evade a warrant. Counsel should verify the case directly with the court, determine whether a warrant exists, and arrange the legally proper response.

Cyber libel is bailable before conviction, but bail procedure and amount depend on the court’s order and the circumstances. Posting bail secures provisional liberty; it is not an admission of guilt and does not end the case.

Penalties and civil liability

Section 6 of Republic Act No. 10175 provides a penalty one degree higher when an offense defined by the Revised Penal Code is committed through information and communications technology. Cyber libel therefore carries greater imprisonment exposure than ordinary libel.

The exact sentencing range depends on the applicable statutory penalty, amendments to the Revised Penal Code, the court’s findings, and rules on indeterminate sentences and modifying circumstances. A court may also address fines where legally authorized.

The offended party may seek civil damages arising from the offense. Possible awards depend on proof and may include actual, moral, exemplary, or other damages allowed by law. Damages are not automatic merely because a publication was offensive; causation, injury, and the legal basis for each award must be established.

A separate civil action for defamation may involve different procedural choices, prescription questions, standards of proof, and defenses. Filing both criminal and civil proceedings without examining their interaction can create avoidable problems.

Evidence checklist

For a complainant

Preserve:

the complete post, thread, page, or recording;
URLs, timestamps, post IDs, and profile information;
original digital files and metadata where available;
proof that third persons viewed or received it;
witness affidavits based on personal knowledge;
proof connecting the respondent to the account;
the date and circumstances of discovery;
communications requesting clarification or showing admissions;
employment, business, medical, or other records relevant to claimed harm; and
proof supporting venue.

For a respondent

Preserve:

drafts, research, notes, sources, and supporting documents;
the full context and material preceding or following the challenged words;
proof of verification and good-faith efforts;
records showing the statement was opinion or based on disclosed facts;
communications showing a legal, moral, or social duty and limited circulation;
account-access and security records;
evidence of hacking, impersonation, or lack of control;
the complainant’s public statements or official records relevant to the issue;
publication, discovery, and complaint-filing dates; and
documents bearing on venue and jurisdiction.

Common mistakes

Waiting for the post to disappear while the one-year period runs.
Preserving only cropped screenshots without URLs, timestamps, or context.
Assuming account ownership conclusively proves authorship.
Treating every insult or negative review as criminal libel.
Assuming that truth alone always defeats the charge.
Confusing personal hostility with the constitutional concept of actual malice.
Filing wherever the complainant happens to be, without establishing venue.
Charging people merely for liking, reacting to, or passively receiving a post.
Ignoring a subpoena because the respondent believes the accusation is baseless.
Filing an unsupported counter-affidavit consisting only of denials.
Deleting posts, devices, messages, or account records after learning of a complaint.
Posting new accusations about the other party while proceedings are pending.
Assuming that an apology, takedown, settlement, or affidavit of desistance automatically ends the criminal case.
Relying on outdated advice that cyber libel prescribes in 12 or 15 years.

When legal help is urgent

Seek a Philippine lawyer immediately if:

the publication was discovered nearly a year ago;
a subpoena gives a deadline to submit a counter-affidavit;
an information has been filed or a warrant may exist;
the author or account holder is uncertain;
the parties or servers are in different cities or countries;
the publication concerns a public official, journalist, whistleblower, employee complaint, or official proceeding;
investigators request access to a phone, computer, account, or private messages;
a search, disclosure, interception, or preservation order is involved;
the case includes threats, doxxing, intimate images, stalking, identity theft, or data-privacy violations; or
significant employment, business, safety, or reputational harm is continuing.

Cybercrime searches and collection of computer data are governed by specialized rules, including the Rule on Cybercrime Warrants. A request for “cooperation” should not be treated casually when it involves surrendering a device, credentials, or private communications.

Frequently asked questions

Can I file a case over a Facebook post, group message, email, blog, or video?

Potentially, yes. The medium can satisfy the computer-system requirement, but all elements of libel must still be proved. A private message sent only to the complainant ordinarily lacks publication; a group message or email copied to others may be different.

Is a negative online review cyber libel?

Not automatically. A good-faith account of personal experience, clearly expressed opinion, or criticism based on disclosed facts may be protected. Knowingly false factual accusations—especially accusations of crime, fraud, or professional misconduct—create greater risk.

Is sharing a defamatory post automatically cyber libel?

No. In Disini, the Supreme Court rejected cyber-libel liability based merely on aiding, abetting, or attempting online libel. Liability may still be examined if the person adds a new defamatory accusation or adopts and republishes the statement as their own.

Does deleting the post prevent a case?

No. Deletion does not undo an already completed publication, although it may limit further harm. It may also remove evidence needed by either party.

Does each day that a post remains online restart the deadline?

Not automatically. Continued accessibility is not necessarily a new publication. A repost, substantial edit, or new dissemination may raise a separate issue, but the result depends on the precise act and evidence.

Can the complainant withdraw the case?

The complainant may execute an affidavit of desistance or enter a lawful settlement, but the prosecutor or court is not automatically bound to dismiss a criminal case. The prosecution represents the People.

Must the parties first undergo barangay conciliation?

Do not assume so. Katarungang Pambarangay coverage depends on the parties’ residences, the nature and penalty of the offense, and statutory exceptions. Cyber libel’s penalty and cross-locality facts may place it outside barangay authority. Have counsel or the proper prosecutor determine applicability before relying on conciliation to protect a deadline.

Can the NBI or PNP order a platform to identify an anonymous account?

Investigators may seek subscriber, traffic, or content data only through the procedures and legal authority applicable to the type of data requested. Platforms may hold limited information, and data may be lost with time. Early preservation and properly obtained court process can be important.

Can I secretly access the other person’s account to obtain proof?

No. Unauthorized access may itself constitute a cybercrime and may compromise the evidence. Preserve what is lawfully visible and use lawful investigative and court procedures.

Can a company or organization be defamed?

A juridical person may, in appropriate circumstances, have a protectable reputation. Whether the words identify and legally defame the entity—or particular officers and employees—depends on the publication and evidence.

Official legal sources

This article provides general legal information, not advice for a particular case. Cyber libel outcomes depend heavily on the exact words, complete context, parties’ status, authorship evidence, discovery date, venue, and procedural record. Consult a Philippine lawyer promptly. Sources and current law checked as of September 21, 2026.