Quick answer

Cyber libel is committed when a person unlawfully publishes a defamatory statement through a computer system or similar digital technology. It is governed by Article 355 of the Revised Penal Code together with Section 4(c)(4) of the Cybercrime Prevention Act of 2012.

To file a case, preserve the online evidence immediately, identify the author and publication circumstances, and submit a sworn complaint with supporting evidence to the prosecutor’s office that has territorial jurisdiction. To defend a case, do not ignore a subpoena: obtain the complete record, preserve—not alter—your accounts and devices, and submit a fact-specific counter-affidavit on time.

Not every insulting, critical, mistaken, or damaging online statement is cyber libel. The prosecution must establish every required element, including a defamatory imputation, publication to another person, identification of the offended party, malice when legally required, and use of information and communications technology. Privilege, truth under the conditions set by law, good faith, fair comment, lack of identification, lack of publication, mistaken attribution, prescription, and improper venue may be material defenses.

Cyber libel presently prescribes in one year from discovery of the offense by the offended party, authorities, or their agents. Do not wait for the anniversary: questions about discovery and interruption of prescription are evidence-dependent.

What counts as cyber libel?

Section 4(c)(4) of Republic Act No. 10175 covers libel under Article 355 of the Revised Penal Code when committed through a computer system or similar future technology. Common examples may include an original:

Facebook, X, TikTok, Instagram, forum, or community-group post;
blog or online news article;
public caption, graphic, meme, video, or digitally transmitted message;
website publication; or
email or group-chat message seen by someone other than the person discussed.

The medium alone does not establish guilt. Prosecutors must still prove the underlying elements of libel beyond reasonable doubt.

The essential elements

A cyber-libel charge ordinarily requires proof of:

A defamatory imputation. The communication attributes a crime, vice, defect, act, omission, status, or circumstance that tends to dishonor, discredit, or expose a person to contempt.
Publication. At least one person other than the offended party received or understood the statement. A message sent only to the person being criticized generally lacks publication, although other offenses may apply.
Identifiability. The offended person must be named or sufficiently identifiable from the words and surrounding circumstances. Naming someone is not indispensable, but guesswork is insufficient.
Malice. Article 354 generally presumes malice from a defamatory imputation even if it is true, subject to statutory privileges and constitutional rules. In privileged-speech and public-interest cases, the complainant may have to prove actual malice—knowledge of falsity or reckless disregard of whether the statement was false.
Use of ICT. The publication was made through a computer system or comparable digital means.
Responsibility for the publication. Evidence must reliably connect the respondent to the creation or publication of the material.

The post must be read as a whole and in context. Courts consider the actual words, language, audience, accompanying image or video, conversational setting, and circumstances—not merely the complainant’s interpretation.

Who may be held responsible?

The person who authored and originally published the defamatory online material may be prosecuted if all elements are present.

In Disini v. Secretary of Justice, the Supreme Court sustained the cyber-libel provision as applied to the original author but invalidated the application of aiding-or-abetting liability to cyber libel. A person does not automatically become criminally liable merely by receiving, reacting to, or sharing online material.

That does not give blanket protection to later users. Someone who adds a new defamatory accusation, creates a materially new publication, or falsely presents another person’s allegation as their own may face liability for their own conduct. Whether a repost, quotation, caption, comment, edited video, or screenshot is a new publication depends on what the person actually communicated.

Page administrators, editors, employees, officers, and account owners are not automatically guilty solely because of their position. The evidence must establish the legally required participation and mental state of each accused. A juridical entity may also face the corporate consequences specified in Section 9 of Republic Act No. 10175 when its statutory conditions are met.

The deadline to file

The Supreme Court’s controlling ruling in Causing v. People holds that cyber libel prescribes in one year, counted from discovery by the offended party, the authorities, or their agents. The Court reaffirmed that rule in 2026. The current decision and opinions are available through the Supreme Court’s official repositories, including the Causing case materials.

Article 91 of the Revised Penal Code governs commencement and interruption of prescription. Filing the proper complaint for preliminary investigation may interrupt the period, but the result can depend on where, when, and how it was filed and whether proceedings later terminated or were unjustifiably stopped.

Practical consequences:

Record when the offended party first discovered both the publication and its allegedly defamatory character.
Preserve evidence of that discovery date, such as messages forwarding the post, emails, notifications, or affidavits from the first witnesses.
Do not assume that continued online availability restarts the period every day.
Do not rely on an old article stating that cyber libel prescribes in 12 or 15 years.
Obtain legal advice immediately if the first-discovery date is near or beyond one year.

Penalties and related exposure

Article 355, as amended by Republic Act No. 10951, provides imprisonment or a fine for traditional libel. Section 6 of Republic Act No. 10175 raises the prescribed penalty by one degree when the crime is committed through ICT. The resulting imprisonment range generally associated with consummated cyber libel is prisión correccional in its maximum period to prisión mayor in its minimum period—four years, two months and one day to eight years—subject to the Indeterminate Sentence Law and the circumstances proved in the particular case.

The court may impose a fine instead of imprisonment where permitted by Article 355. The exact sentence, fine, civil damages, and subsidiary consequences cannot be predicted from the post alone.

A cyber-libel prosecution may also carry civil liability. Under the Rules of Criminal Procedure, the civil action arising from the offense is generally deemed instituted with the criminal case unless it is waived, reserved when legally permitted, or previously filed. A separate civil action for defamation may also involve Articles 19, 20, 21, 26, and 33 of the Civil Code. Criminal and civil claims have different elements, burdens, remedies, and limitation issues.

The Supreme Court has prohibited imposing separate punishments for both ordinary libel and cyber libel based on the same publication where doing so would violate the protection against double jeopardy.

How to file a cyber-libel complaint

1. Preserve the publication before requesting its removal

Save more than a cropped screenshot. Preserve:

the complete post, article, message, image, audio, or video;
the visible account name, profile, group, page, and platform;
the full URL or other unique content identifier;
the date and time displayed, including the time zone if relevant;
comments, captions, edits, reposts, and surrounding conversation;
the number and identity of recipients or viewers, where available;
the original notification, email, or message through which you discovered it;
your own device copy and an exported or downloaded copy;
evidence connecting the account to the suspected author; and
evidence showing why readers understood the post to refer to you.

Record the screen from the profile or conversation to the disputed content so its location is clear. Keep the original files with their metadata. Make read-only backups. Do not alter the image, rename original files unnecessarily, or rely solely on printouts forwarded by someone else.

A notarized affidavit from a person who personally saw the post can help establish publication and identification. Authentication and admissibility remain for the prosecutor and court to assess under the Rules on Electronic Evidence.

2. Document the complete context

Preserve material that may appear unfavorable as well as favorable. Include:

the exchanges immediately before and after the publication;
earlier communications between the parties;
any demand, correction, apology, or takedown;
documents showing that an accusation was false;
records of actual reputational, professional, or financial harm; and
the exact date and manner of discovery.

Selective screenshots may be challenged as misleading. A prosecutor must assess context, possible privilege, and defenses—not merely isolated words.

3. Identify the correct respondent

Do not name a person simply because their name or photograph appears on an account. Consider:

who created the account;
who controlled it at the relevant time;
whether the account was compromised or impersonated;
whether several people had administrator access;
whether the content was quoted from another source; and
whether there is platform, witness, device, or admission evidence linking the respondent to publication.

Subscriber information and nonpublic platform records ordinarily require lawful investigative process. Under Republic Act No. 10175 and the Rule on Cybercrime Warrants, access to or disclosure of protected computer data may require an appropriate court warrant. A private complainant should not obtain evidence through hacking, password theft, impersonation, or unlawful surveillance.

4. Check jurisdiction and venue

Republic Act No. 10175 places cybercrime prosecutions within the jurisdiction of Regional Trial Courts, including designated cybercrime courts. Philippine jurisdiction may exist when an element occurred in the country, a computer system used was wholly or partly situated here, or the statutory Philippine-damage requirement is met.

Territorial venue must still be established. It is not safe to assume that a complaint can be filed wherever the complainant happens to be. The proper place may depend on the location of relevant computer use, publication, legally cognizable damage, the parties, and the evidence. Overseas authors, servers, or complainants can raise additional jurisdiction, service, preservation, and international-cooperation issues.

Before filing, ask the receiving prosecutor’s office to confirm its requirements and territorial basis. A filing in the wrong office can consume valuable time without necessarily protecting the prescriptive period.

5. Prepare the complaint-affidavit and annexes

The complaint should clearly and truthfully state:

the complainant’s and respondent’s identifying information, if known;
the exact words or content complained of;
when and where it was posted, transmitted, discovered, and viewed;
how it used a computer system;
why the statement was defamatory;
why readers could identify the complainant;
who other than the complainant saw or received it;
the evidence connecting the respondent to publication;
facts supporting malice when it must be independently proved;
any demand, response, correction, or republication; and
the legal and factual basis for venue and timely filing.

Attach legible, consistently labeled evidence and sworn witness statements. The affidavit must be based on personal knowledge or clearly identify the source of other information. Exaggeration, omitted context, and unsupported conclusions can undermine the complaint.

6. File with the proper prosecutor

A criminal complaint is ordinarily filed for preliminary investigation with the Office of the City Prosecutor, Office of the Provincial Prosecutor, or other DOJ prosecution office having authority over the alleged offense. Complaints may also be investigated with assistance from the NBI Cybercrime Division or the PNP Anti-Cybercrime Group, but a police report by itself is not necessarily the same as filing the complaint that commences preliminary investigation.

The DOJ’s 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings, issued through Department Circular No. 15, govern prosecutor-level proceedings. They permit prosecutors to take a more active role in developing the evidence and use the prosecution standard prescribed by those rules. Follow the current filing, oath, service, format, and copy requirements of the particular office; do not rely on an unofficial online checklist.

After evaluating the evidence, the prosecutor may dismiss the complaint or find sufficient basis to file an information in the proper Regional Trial Court. The investigating prosecutor’s resolution remains subject to the available DOJ review procedures and applicable deadlines.

How to respond if you are accused

Do not delete, edit, or fabricate evidence

Preserve the exact state of the account, post, devices, access records, drafts, messages, and source materials. Deleting a post does not erase a completed publication and may destroy evidence needed for the defense. Never create a backdated correction, altered screenshot, fake conversation, or false witness statement.

You may take reasonable steps to prevent further harm after preservation and legal advice, but distinguish evidence preservation from continued publication.

Read the subpoena and attachments immediately

Record:

the date and method of receipt;
the prosecutor’s office and docket number;
the deadline stated in the subpoena;
whether the full complaint and annexes were included; and
the place and permitted method of filing.

Under preliminary-investigation procedure, the respondent is given an opportunity to submit a sworn counter-affidavit and supporting evidence. Failure to participate can allow the prosecutor to resolve the complaint using the complainant’s evidence alone. Do not assume that an informal denial, private message, or social-media explanation counts as a counter-affidavit.

If essential annexes are missing or the deadline cannot reasonably be met, promptly seek the appropriate relief from the prosecutor through counsel. An extension is not automatic.

Build the defense element by element

Potential defenses include:

No defamatory imputation

The words may be unpleasant, sarcastic, exaggerated, or critical without attributing a discreditable fact. Courts distinguish actionable factual imputations from protected opinion, rhetoric, and commentary by examining context. Merely adding “in my opinion” does not protect a disguised factual accusation.

The complainant was not identifiable

If reasonable recipients could not determine who was being discussed, identification may be absent. Preserve audience evidence rather than relying only on the absence of a name.

No publication to a third person

A private communication seen only by its subject may lack the publication element. Confirm whether anyone else actually received it and whether the platform, group, or shared-device settings made third-party access possible.

The respondent was not the author or publisher

Account ownership is not always authorship. Device records, login alerts, administrator lists, travel records, recovery emails, compromise reports, platform notices, and witness evidence may show impersonation, unauthorized access, or lack of control.

Privileged communication

Article 354 recognizes qualified privileges, including:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts.

Privilege is not established merely because a post concerns a public issue or was copied from a complaint. Excessive publication, irrelevant insults, added accusations, bad faith, or proof of actual malice may defeat qualified privilege.

Truth, good motives, and justifiable ends

Truth is not an automatic complete defense in every Philippine criminal-libel case. Article 361 controls when proof of truth is admissible and requires good motives and justifiable ends for acquittal. When the imputation concerns a public officer’s discharge of official duties, truth has particular significance. Preserve reliable source documents and proof of the steps taken to verify the claim.

Rumor, anonymous messages, and “someone told me” are not substitutes for verification.

Fair comment and constitutional protection

Honest comment on matters of public interest may be protected, especially where it is recognizable as opinion based on disclosed or established facts. Public officials and public figures receive less protection from criticism concerning public conduct, and actual malice may have to be proved in constitutionally protected settings.

These doctrines do not authorize knowingly false factual accusations or reckless publication without regard to truth.

Lack of malice or good-faith mistake

Research notes, source documents, requests for comment, correction efforts, wording choices, and publication chronology may show responsible conduct. An apology or correction is not necessarily an admission of guilt; Article 360 allows evidence of a timely retraction to mitigate damages in appropriate cases. Its effect depends on timing, scope, sincerity, and the surrounding facts.

Prescription, jurisdiction, or improper venue

Establish the first provable discovery date, complaint-filing date, alleged place of publication, relevant computer location, and venue allegations. Prescription and venue should be raised promptly and supported by evidence, not merely asserted.

Avoid trying the case on social media

Publicly attacking the complainant, reposting the disputed accusation, threatening witnesses, or revealing confidential records can create new evidence and possibly new liability. Direct necessary communications through counsel and comply with lawful preservation requests and court orders.

Electronic evidence that both sides should preserve

Keep the following in their original form where available:

phones, computers, and storage media used for the account;
unedited screenshots and screen recordings;
downloaded account archives;
URLs, post IDs, message IDs, and timestamps;
native photos, videos, and audio files;
metadata and file hashes generated through competent forensic handling;
login history and security alerts;
administrator and device-access lists;
emails from the platform;
original drafts and source documents;
witness contact details and sworn statements;
takedown, correction, and demand communications; and
records establishing discovery, audience, harm, or lack of authorship.

Maintain a simple evidence log identifying who collected each item, when, from which device or page, and what was done with it. Give forensic copies—not casually handled original devices—to investigators or experts when possible.

A screenshot can be useful, but authenticity, completeness, authorship, and context may still be contested. The Rules on Electronic Evidence govern the treatment of electronic documents and communications in court.

Common mistakes

Waiting because the post remains online, despite the one-year prescriptive period.
Filing in a convenient office without establishing territorial venue.
Saving only a cropped screenshot with no URL, timestamp, context, or witness.
Assuming an offensive statement is automatically defamatory.
Treating every share, reaction, administrator, or employer as a criminal publisher.
Believing truth alone always defeats criminal libel.
Naming an account holder without evidence of authorship or control.
Obtaining private data through unauthorized account access.
Deleting posts, messages, devices, or account logs after receiving notice.
Ignoring a prosecutor’s subpoena.
Repeating the disputed accusation in a demand letter or public response.
Using the criminal process primarily to silence criticism, force payment, or gain leverage in an unrelated dispute.
Assuming a platform takedown decides criminal liability.
Filing ordinary libel and cyber libel charges for the same act without addressing double-jeopardy concerns.

When legal help is urgent

Consult a Philippine lawyer immediately if:

the one-year period is close to expiring;
you received a subpoena, warrant, information, or arrest-related notice;
investigators want to search, seize, or examine a device;
the author, platform, or relevant data is abroad;
an anonymous or impersonated account must be identified;
the publication concerns journalism, elections, public officials, whistleblowing, workplace reports, or official proceedings;
several people managed the account;
the post contains private, medical, sexual, or child-related material;
there are threats, stalking, doxxing, extortion, or immediate safety risks; or
criminal and civil cases are being pursued at the same time.

For those unable to afford private counsel, eligibility-based assistance may be available from the Public Attorney’s Office or the Integrated Bar of the Philippines National Center for Legal Aid.

Frequently asked questions

Is a false Facebook post automatically cyber libel?

No. Falsity may be important, but all elements must be established, including defamatory meaning, identification, third-party publication, responsibility for the post, the applicable form of malice, and use of ICT.

Can a true post still result in a case?

Yes. Philippine criminal-libel law does not treat truth as an automatic defense in every situation. Article 361 governs admissibility and generally also requires good motives and justifiable ends for acquittal.

Can I be charged for sharing someone else’s post?

A bare share or reaction does not automatically create criminal liability. Disini invalidated aiding-or-abetting liability as applied to cyber libel. But added accusations, captions, edits, or a materially new defamatory publication must be evaluated separately.

Is a private group chat covered?

Potentially. Publication can exist once a defamatory message is communicated to someone other than the person discussed. The size of the audience affects context and possible harm but is not necessarily decisive.

Does deleting the post end the case?

No. Deletion does not undo an already completed publication. It may reduce continuing harm, but deleting before properly preserving evidence can hurt either side’s case.

Must I send a demand letter first?

A demand letter is not generally an element of cyber libel. It may help request correction, preservation, or removal, but it does not replace timely filing and does not necessarily interrupt prescription.

Do I have to go through the barangay?

Cyber libel carries a penalty beyond the offenses ordinarily subject to mandatory Katarungang Pambarangay conciliation. The parties’ residences and any other claims may still affect the analysis, so confirm the correct procedure before filing.

Can the police access my private messages without a warrant?

Not simply because a complaint was made. Republic Act No. 10175 and the Rule on Cybercrime Warrants regulate preservation, disclosure, interception, search, seizure, and examination of computer data. The required legal process depends on the type of data and investigative act.

Where will the criminal case be tried?

Cybercrime violations fall within Regional Trial Court jurisdiction and are generally assigned to a designated cybercrime court where available. The correct territorial venue depends on the pleaded and provable facts; the complainant’s preferred location alone does not control.

Can the parties settle?

The parties may discuss retraction, apology, removal, or civil settlement, but private agreement does not always terminate a criminal prosecution automatically once public proceedings have begun. Any settlement should be documented with independent legal advice and without threats or unlawful consideration.

Official legal sources

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Cyber-libel questions are highly dependent on the precise words, context, evidence, dates, parties, and place of publication. Sources and current law were checked as of September 21, 2026.