Quick answer

Cyber libel is committed when a person authors and publishes through a computer system a malicious and defamatory imputation that identifies another person and is communicated to at least one third party. It is punishable under Section 4(c)(4) of the Cybercrime Prevention Act of 2012, in relation to Articles 353 and 355 of the Revised Penal Code.

To file a case, preserve the post and its electronic context immediately, identify the author and witnesses, and file a properly supported complaint-affidavit with the prosecutor’s office that has territorial authority over the case. Assistance may also be requested from the cybercrime units of the National Bureau of Investigation or Philippine National Police.

To defend a case, do not ignore a prosecutor’s subpoena or court process. Preserve the account and original records, obtain the complete complaint and attachments, and timely submit a counter-affidavit addressing every legal element and the reliability of the electronic evidence.

The most urgent deadline is prescription: the Supreme Court has ruled that cyber libel generally prescribes one year from its discovery by the offended party, the authorities, or their agents. Publication and discovery may occur on the same date, but that should not be assumed. The filing that interrupts prescription and the evidence proving discovery can be contested, so neither side should wait until the deadline is near. See Causing v. People, G.R. No. 258524, October 11, 2023.

What must be proved

A cyber-libel prosecution ordinarily requires proof of all the following:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person to contempt.
Publication. Someone other than the person defamed received, saw, or understood the statement. A message communicated only to its subject ordinarily lacks this element, although group chats, emails copied to others, public posts, and direct messages sent to third persons may qualify.
Identifiability. The complainant was named or was identifiable from the words, images, circumstances, or information known to readers. Naming the person is not always necessary, but a vague statement about an unidentifiable group may be insufficient.
Malice. Article 354 generally presumes malice from a defamatory publication unless a recognized privileged-communication rule applies. In cases involving public officials, public figures, matters of public concern, or qualified privilege, the prosecution may have to prove actual malice—knowledge of falsity or reckless disregard of whether the statement was false—depending on the facts.
Authorship and identity of the accused. The evidence must reliably connect the respondent to the creation and publication of the statement. An account name, profile photograph, or screenshot alone does not invariably prove who controlled the account at the relevant time.
Use of a computer system or similar technology. This includes online publications such as social-media posts, website articles, emails, and comparable digital communications.

The prosecution ultimately carries the burden of proving guilt beyond reasonable doubt. At the prosecutor stage, current DOJ-NPS rules require prima facie evidence with reasonable certainty of conviction, including evidence that appears admissible, credible, preservable, and capable of establishing every element and the responsible person’s identity.

Who may be liable

In Disini v. Secretary of Justice, G.R. No. 203335, February 11, 2014, the Supreme Court sustained cyber libel as applied to the original author of the defamatory online statement. It declared unconstitutional the application of the Cybercrime Prevention Act’s aiding-or-abetting and attempt provisions to cyber libel.

A person is therefore not automatically criminally liable merely for receiving a post or using a platform’s ordinary “like,” reaction, or sharing function. However, a person who adds a separate defamatory caption or comment may become the author of that new statement. Liability depends on the precise words and conduct, not merely the label attached to the online action.

Editors, business owners, page administrators, employees, and account holders should not be treated as authors without evidence of their own legally relevant participation. Conversely, denying ownership of an account will not succeed if other admissible evidence reliably proves authorship or control.

Before filing: test the statement against the law

Not every offensive, unfair, inaccurate, or embarrassing online statement is cyber libel. Before filing, identify:

the exact words, images, captions, hashtags, or linked material alleged to be defamatory;
what factual accusation those words communicate in context;
who understood the statement to refer to the complainant;
who other than the complainant received it;
why the statement is defamatory rather than rhetorical abuse, satire, opinion, or criticism;
who authored and published it;
when and how the complainant or authorities first discovered it; and
the specific connection between the case and the proposed city or province of filing.

A complaint that merely attaches many screenshots without identifying the actionable passages can obscure rather than prove the offense.

Evidence to preserve immediately

Preserve evidence before requesting deletion or blocking the account. Save:

full-page screenshots showing the exact post, account name, date and time, reactions, comments, URL, and surrounding discussion;
the direct URL and unique post, video, or message identifier, if visible;
screen recordings showing how the post was reached and what appeared when opened;
the original webpage, email, chat export, photograph, audio, or video file in its native format;
message headers and available metadata;
copies of the complainant’s and relevant witnesses’ devices and account records;
names and affidavits of people who personally saw or received the publication;
evidence connecting the account to its alleged user, such as prior admissions, linked contact details, consistent communications, or lawfully obtained records;
records showing the date and circumstances of discovery;
evidence of reputational or financial harm, such as lost work, cancelled transactions, messages from clients, or medical records where genuinely relevant; and
documents bearing on truth, falsity, privilege, motive, verification efforts, corrections, or apologies.

Keep an untouched master copy and make working copies. Record who collected each item, when it was collected, from what device or account, and how it was stored. Do not crop away context, alter files, impersonate another person, guess passwords, or enter an account without authority. Evidence obtained unlawfully may create separate legal problems.

Screenshots are useful but can be challenged as incomplete, altered, or unauthenticated. The Rules on Electronic Evidence require electronic evidence to be authenticated through competent proof of its integrity, reliability, or other circumstances establishing genuineness.

How to file a criminal complaint

1. Confirm prescription first

Under Articles 90 and 91 of the Revised Penal Code, as applied in Causing, cyber libel generally prescribes in one year from discovery by the offended party, authorities, or their agents. The period is interrupted by the filing of the complaint or Information and may run again if proceedings terminate without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused.

Document the discovery date carefully. If timeliness is close, obtain legal assistance immediately and file through the proper prosecutor’s office rather than assuming that a platform report, barangay complaint, demand letter, or private takedown request stops prescription.

An independent civil action for defamation is also generally subject to a one-year limitation under Article 1147 of the Civil Code. The computation and interaction between civil and criminal remedies can depend on the pleadings and procedural history.

2. Select the proper place of filing

Venue in a criminal case is jurisdictional. Section 2.1 of the Supreme Court’s Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC provides that criminal actions under Sections 4 and 5 of the Cybercrime Prevention Act are filed before the designated cybercrime court of the province or city:

where the offense or any element was committed;
where any part of the computer system used was situated; or
where damage to a natural or juridical person took place.

The first court in which the criminal action is validly filed acquires jurisdiction to the exclusion of the others. Mere nationwide accessibility of a webpage should not be treated as an unlimited license to file anywhere. The complaint should state concrete facts supporting the chosen venue.

Because the prosecutor generally conducts the preliminary investigation before an Information is filed in court, confirm territorial assignment and local filing requirements with the corresponding Office of the City or Provincial Prosecutor.

3. Prepare a detailed complaint-affidavit

The affidavit should be based on personal knowledge and should clearly state:

the identities and addresses of the parties, insofar as known;
the exact defamatory material;
the account, page, website, or system used;
when and where it was published and discovered;
how the complainant was identifiable;
who received or saw it;
facts connecting the respondent to authorship;
facts showing falsity or malice where relevant;
the basis for venue; and
the resulting harm.

Attach properly marked copies of the electronic records, witness affidavits, and other supporting documents. Follow the prosecutor’s requirements for oath administration, paper or electronic copies, file formats, and service. Filing arrangements can vary by office; do not assume that sending an ordinary email completes filing.

4. Consider technical investigation where necessary

The NBI and PNP are the principal law-enforcement authorities identified by Section 10 of Republic Act No. 10175. Their cybercrime units may assist where the author is unknown, the account is impersonating someone, records may disappear, or technical attribution is required.

A complainant cannot personally compel a platform or telecommunications provider to release protected subscriber or content data. Preservation, disclosure, search, seizure, interception, and examination of computer data are governed by statute and the Rule on Cybercrime Warrants. Prompt referral matters because providers do not retain every category of data indefinitely.

5. Participate in the preliminary investigation

If the complaint is sufficient, the prosecutor may issue a subpoena requiring the respondent to submit a sworn counter-affidavit and evidence. Under the 2024 DOJ-NPS regular preliminary-investigation rules, the subpoena should give the respondent at least 10 days from receipt to submit the counter-affidavit. The date stated in the subpoena and any lawful order or extension should be followed exactly.

The prosecutor may require additional evidence or conduct a clarificatory hearing. This is not yet a criminal trial: the prosecutor decides whether the evidence meets the governing standard for filing an Information in court.

If the complaint is dismissed or an Information is recommended, available reconsideration or review remedies have short periods and depend on the issuing office and governing DOJ rules. Obtain the complete resolution, note the actual date of receipt, and consult counsel immediately.

How to defend a complaint at the prosecutor stage

Do not ignore the subpoena

A subpoena from a prosecutor is not itself a conviction or arrest warrant, but failure to answer can cause the complaint to be evaluated from the complainant’s evidence alone. Record the date, time, and manner of receipt. Secure a complete copy of the complaint, affidavits, and attachments.

If the response deadline is impracticable, promptly seek an extension on documented grounds. Do not assume that an informal request suspends the stated deadline.

Prepare a fact-specific counter-affidavit

Address each element separately. Depending on the evidence, legitimate issues may include:

the words are not defamatory when read in full context;
the statement is opinion, rhetorical hyperbole, satire, or fair criticism rather than a provably false factual accusation;
the complainant was not identifiable;
no third person received the communication;
the respondent did not author or publish it;
the account or device attribution is unreliable;
the screenshot is incomplete, altered, unauthenticated, or inconsistent with the native record;
the publication falls within an absolute or qualified privilege;
truth, good motives, and justifiable ends are established within Article 361;
actual malice is not shown where that standard applies;
venue is unsupported;
the charge has prescribed; or
the same act is being impermissibly punished twice.

Do not rely on blanket statements such as “freedom of speech,” “it was only my opinion,” or “the post was true.” Free speech is not absolute, labels do not control the meaning of a statement, and the statutory truth defense has additional requirements.

Preserve favorable evidence

Do not delete the account, wipe the device, edit messages, coach witnesses, or fabricate explanations. Preserve drafts, source documents, conversations, research notes, access logs, and the complete thread. These may establish context, lack of authorship, reasonable verification, privilege, or the meaning understood by readers.

Taking down a post or apologizing may reduce continuing harm and may later be relevant to discretion or damages, but it does not automatically erase a completed offense. Preserve the evidence first and obtain advice before making admissions or contacting the complainant.

Principal defenses and exceptions

Privileged communications

Article 354 recognizes qualified privileges that include:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without comments or remarks, of certain official proceedings or acts of public officers.

Privilege is highly fact-sensitive. The communication’s recipients, purpose, wording, source, accuracy, and any unnecessary circulation matter. A qualified privilege may be defeated by proof of actual malice.

Statements made during judicial proceedings may receive broader protection when relevant to the proceeding, but reposting them outside that setting can raise a separate issue.

Truth

Under Article 361, truth may be given in evidence in a criminal prosecution for libel. Acquittal generally requires that the defamatory matter be true and published with good motives and for justifiable ends. The article contains specific limitations where the imputation concerns an act or omission that is not a crime.

Accordingly, “but it is true” is not a complete defense without admissible proof and the other statutory conditions.

Public officials, public figures, and public concerns

Criticism of official conduct and discussion of public affairs receive strong constitutional protection. Depending on the complainant and subject, liability may require proof that the author knew a factual accusation was false or recklessly disregarded whether it was false.

This does not protect knowingly or recklessly false factual accusations merely because the subject holds public office. Courts examine the full context, whether the statement asserts fact or opinion, the public interest involved, the sources consulted, and the author’s state of mind.

Fair comment and opinion

Courts consider how an ordinary reader would understand the whole statement. An evaluative opinion based on disclosed or established facts may be protected, particularly on a matter of public interest. A statement phrased as an “opinion” may still be actionable if it implies undisclosed, false, and defamatory facts.

Lack of authorship

Cyber libel, as sustained in Disini, applies to the original author. The prosecution must connect the accused to the statement. Relevant questions include who controlled the account, who had device access, whether credentials were compromised, whether the post was automated or fabricated, and whether reliable provider or forensic evidence exists.

What happens if an Information is filed

The criminal case is tried in the proper Regional Trial Court designated to handle cybercrime cases. The judge independently determines whether probable cause exists for issuing process against the accused.

If a warrant is issued or arrest is imminent, obtain criminal-defense counsel at once. Cyber libel is not punishable by death, reclusion perpetua, or life imprisonment, so bail is generally a matter of right before conviction, subject to the court’s lawful conditions and determination of the amount. Do not evade service or rely on unofficial promises that the case will be withdrawn.

At arraignment, the accused enters a plea. Pre-trial and trial follow, and the prosecution must prove every element beyond reasonable doubt using admissible evidence. The accused has the rights to counsel, silence, confrontation of witnesses, compulsory process, and due process.

Possible penalties and civil liability

Article 355, as amended by Republic Act No. 10951, provides for traditional libel imprisonment, a fine, or both. Section 6 of Republic Act No. 10175 raises the penalty by one degree when the offense is committed through information and communications technology.

For cyber libel, the imprisonment range is prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years, subject to the rules governing the actual sentence. In People v. Soliman, G.R. No. 256700, April 25, 2023, the Supreme Court held that a fine may be imposed instead of imprisonment and calculated the statutory fine range at ₱40,000 to ₱1,500,000, depending on the applicable law and circumstances. Imprisonment remains legally available; a fine-only sentence is not guaranteed.

The offended party may also seek civil damages. Under Rule 111 of the Rules of Criminal Procedure, the civil action arising from the offense is generally deemed instituted with the criminal case unless it is waived, reserved for separate filing, or previously filed. A distinct civil action for defamation may also be available under Article 33 of the Civil Code. The appropriate route affects prescription, evidence, filing fees, and control of the case and should be chosen with counsel.

A single defamatory act should not result in duplicate punishment as both ordinary libel and cyber libel. In Disini, the Supreme Court held Section 7 of Republic Act No. 10175 unconstitutional insofar as it permits prosecution under both laws for the same libelous act.

Common mistakes to avoid

Waiting for platform action while the one-year prescriptive period runs.
Treating a demand letter, barangay filing, or social-media report as automatically interrupting prescription.
Filing wherever the post can be viewed without establishing a lawful venue connection.
Submitting cropped screenshots without URLs, dates, context, witnesses, or authentication evidence.
Assuming the account name alone establishes authorship.
Naming every person who liked or shared a post without evidence that each authored a defamatory statement.
Omitting the date and circumstances of discovery.
Secretly accessing another person’s account or device.
Deleting favorable records after receiving a demand, subpoena, or notice of investigation.
Contacting witnesses to align their stories.
Missing the counter-affidavit deadline stated in the subpoena.
Treating truth, opinion, privilege, or free speech as automatic defenses.
Assuming deletion, correction, settlement, or an affidavit of desistance automatically ends a public criminal prosecution.

When legal help is urgent

Seek a Philippine lawyer immediately if:

the one-year period is close or the discovery date is disputed;
a subpoena, prosecutor’s resolution, Information, summons, or arrest warrant has been received;
law-enforcement officers request a device, password, interview, or consent to search;
the account is anonymous, compromised, or operated from abroad;
a platform’s data may soon disappear;
the proposed defendant is a journalist, public official, business, organization, or person outside the Philippines;
minors, intimate material, threats, identity theft, or unauthorized account access are involved;
multiple posts or several possible jurisdictions are involved; or
settlement discussions may require admissions, deletion, payment, or waiver of claims.

Eligible accused persons may inquire with the Public Attorney’s Office. Other parties may seek assistance from private counsel or an appropriate legal-aid organization.

Frequently asked questions

Is every false Facebook post cyber libel?

No. The prosecution must still establish a defamatory imputation, publication, identifiability, malice under the applicable standard, authorship, and use of a computer system. Falsity may be important, but it is not the only issue.

Can I sue someone merely for liking or sharing the post?

Not automatically. Disini limited cyber-libel liability to the original author and invalidated aiding-or-abetting liability as applied to cyber libel. A person who writes a new defamatory caption or comment may nevertheless be responsible as the author of that separate statement.

Does a private group chat count as publication?

It can. Publication ordinarily exists if at least one person other than the subject receives the defamatory statement. The group’s limited membership may affect context, privilege, malice, and damages, but it does not necessarily eliminate publication.

Can an anonymous account be charged?

Potentially, but the responsible person must be identified and linked to the publication through admissible evidence. Law enforcement may need court-authorized disclosure or examination procedures. A display name or photograph alone may not be enough.

Does deleting the post prevent a case?

No. Deletion does not undo an earlier publication witnessed or preserved by others. It may stop further circulation and may be relevant to damages, remorse, or sentencing, but it is not an automatic defense.

Is an affidavit of desistance enough to dismiss the case?

Not necessarily. Cyber libel is prosecuted in the name of the People of the Philippines. A complainant’s withdrawal may affect the evidence or prosecutorial assessment, but it does not by itself compel dismissal once the State has sufficient evidence.

Must the parties undergo barangay conciliation?

Generally no. The Katarungang Pambarangay law excludes offenses punishable by imprisonment exceeding one year or a fine exceeding ₱5,000. Cyber libel carries penalties above those limits. Related private disputes may raise different questions.

When does the one-year period begin?

From discovery of the cyber libel by the offended party, the authorities, or their agents—not automatically from the upload date. If publication and discovery occurred together, the dates coincide. The party invoking prescription may need evidence of the actual discovery date.

Can I file both criminal and civil cases?

Possibly, but the civil action arising from the offense is ordinarily deemed included in the criminal case unless waived, reserved, or previously filed. An independent civil action may also be available. Avoid duplicate recovery and observe the separate one-year limitation applicable to defamation claims.

Can the court impose only a fine?

Yes, the Supreme Court has confirmed that a fine alone is legally possible, but it is discretionary and depends on the circumstances. Imprisonment remains an available penalty.

Official legal sources

This article provides general legal information, not legal advice or an assessment of any particular post, complaint, or defense. Cyber-libel outcomes depend heavily on the exact words, electronic records, identities, dates, venue facts, and procedural history. Sources and current rules were checked as of September 14, 2026.