Quick answer

Cyber libel is generally committed when a person unlawfully publishes a defamatory imputation online through a computer system. A viable complaint ordinarily requires proof of:

a defamatory allegation of a crime, vice, defect, act, omission, condition, or circumstance;
publication to at least one person other than the person defamed;
identification of the person targeted, even if not expressly named;
malice, unless the communication is privileged; and
use of a computer system or similar digital means.

The principal law is Section 4(c)(4) of the Cybercrime Prevention Act of 2012, which incorporates libel under Articles 353 and 355 of the Revised Penal Code.

A complainant should preserve the original post and its digital context, identify the author, and file a properly supported complaint-affidavit with the prosecutor’s office that has authority over the case. A respondent should not ignore a subpoena: the counter-affidavit is normally the first meaningful opportunity to challenge authorship, publication, identification, defamatory meaning, malice, venue, prescription, and the reliability of the electronic evidence.

Act quickly. The Supreme Court’s current rule is that cyber libel prescribes in one year from discovery of the offense. Filing close to the deadline is dangerous because the precise discovery date, the sufficiency of the filing, and any claimed republication may be disputed.

What counts as cyber libel?

Cyber libel is not every insulting, unfair, or embarrassing online statement. The prosecution must establish all the elements of criminal libel and show that the publication was made through a computer system or similar digital means.

Potentially covered publications include:

public social-media posts and captions;
blog articles and online news reports;
videos, livestreams, podcasts, or images containing defamatory material;
online comments and forum posts;
emails or group messages disclosed to someone other than the target; and
a later republication that amounts to a new publication under the circumstances.

The whole communication matters. Courts examine the language in its ordinary meaning, its context, the audience, and whether it tends to dishonor, discredit, or expose an identifiable person to contempt.

The required elements

Defamatory imputation

The statement must attribute something that can harm reputation—such as a crime, dishonesty, corruption, immorality, professional incompetence, or another discreditable condition or conduct.

A vague insult may not necessarily satisfy this element. Conversely, phrasing an accusation as a question, joke, meme, insinuation, or “opinion” does not automatically protect it if a reasonable reader would understand it as asserting or implying damaging facts.

Publication

Someone other than the person defamed must receive or perceive the statement. A purely private message sent only to the person discussed generally lacks publication, although the same message may implicate other laws depending on its content.

A post need not be viral. Proof that one third person saw it may be enough.

Identification

The complainant need not always be named. Identification may be established through a photograph, position, initials, surrounding details, tags, links, or circumstances that make the person recognizable to readers who know the context.

A statement attacking a large, undefined group may present identification problems. A small or clearly defined group can require a different analysis.

Malice

Article 354 of the Revised Penal Code generally presumes malice from a defamatory publication unless the communication is privileged. That presumption is not the end of the inquiry: the nature of the statement, its subject, its source, the publisher’s purpose, and any applicable constitutional protections remain important.

Where criticism concerns a public official’s official conduct or a public figure and a matter of public concern, the prosecution may have to establish actual malice—knowledge that the statement was false or reckless disregard of whether it was false. Mere error, harsh language, or hostility is not necessarily actual malice.

Online publication

The defamatory material must have been committed through a computer system or a similar digital means. Section 6 of Republic Act No. 10175 also increases the prescribed penalty for crimes committed through information and communications technology.

Who may be liable?

The person who authored or knowingly published the defamatory content is the primary potential accused. Liability is not established merely because an account bears someone’s name; authorship and control of the account must be supported by admissible evidence.

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author but rejected an indiscriminate application to people who merely receive a post and react to it. A simple “like,” reaction, or passive receipt should not automatically be treated as authorship of the defamatory statement.

That does not give blanket immunity to every share or repost. A person who adds a defamatory accusation, materially alters content, or deliberately republishes it in a manner that constitutes a new publication may face a different analysis. Administrators, editors, employees, account owners, and corporate officers are not automatically liable solely because of their titles; their actual participation, authority, knowledge, and conduct must be proved.

Important defenses and exceptions

No defamatory meaning

Read in full and in context, the post may be criticism, satire, rhetorical exaggeration, or non-defamatory commentary rather than an accusation of discreditable fact.

Courts do not decide the issue from an isolated phrase alone. Preserve the entire thread, linked material, preceding exchanges, and the original format.

No publication or no identification

A respondent may show that the statement was never communicated to a third person or that a reasonable reader could not identify the complainant.

No proof of authorship

Screenshots showing an account name are relevant but may not conclusively establish who created the post. Account access, device records, platform data, admissions, witness testimony, and surrounding circumstances may matter.

Do not fabricate account-compromise claims. If an account was genuinely hacked or impersonated, preserve login alerts, recovery emails, support tickets, device lists, and the date the compromise was reported.

Truth, good motives, and justifiable ends

Under Article 361 of the Revised Penal Code, truth can be a defense when the publication was made with good motives and for justifiable ends. Truth should therefore be supported with reliable documents and witnesses; simply repeating a rumor or saying “I believe it is true” is not equivalent to proving it.

The rule has particular applications when the accusation concerns the discharge of a public officer’s duties. Its scope depends on the exact words, subject, supporting proof, and purpose of the publication.

Privileged communication

Article 354 recognizes qualified privileges, including:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without added comments, of specified official proceedings or acts.

Privilege is fact-sensitive. Sending an accusation to people who have no legitimate interest in it, adding unsupported conclusions to an official report, or publishing beyond what the duty requires may defeat the defense. Qualified privilege can also be overcome by proof of actual malice.

Statements made in judicial proceedings may receive protection when relevant to the proceeding, but using a pleading merely as a vehicle to spread unrelated accusations can create separate issues.

Fair comment on matters of public interest

Good-faith criticism of public conduct and matters of legitimate public concern receives strong constitutional protection. The distinction is between comment based on disclosed or established facts and a damaging factual accusation presented as true without adequate basis.

Prescription

As reaffirmed by the Supreme Court in Causing v. People, cyber libel prescribes in one year from discovery. The Court rejected the theory that the offense carries a much longer prescriptive period merely because it is punished under Republic Act No. 10175. See the Supreme Court’s official summary, SC Affirms Cyber Libel Prescribes One Year from Discovery.

Prescription can turn on:

when the particular publication was discovered;
whether the complaint was filed within one year;
whether the filing legally interrupted the period;
whether a later act was merely continued online availability or a true republication; and
which specific post or edition is charged.

A page remaining accessible is not necessarily a fresh offense every day. Material modification or deliberate republication may present a different issue, but it should not be assumed without examining the actual online act.

How to file a cyber-libel complaint

1. Preserve the publication immediately

Capture more than a cropped screenshot. Preserve:

the complete post, article, video, or message;
the visible account name and profile;
the full URL or platform locator;
the date and time displayed;
the complete thread, caption, comments, and linked material;
the names of people who saw the publication;
screen recordings showing how the content was accessed;
downloaded copies in their original format, when lawfully available;
platform notifications, emails, and account identifiers; and
evidence showing when you first discovered the publication.

Keep the original device and unedited files. Store backup copies. Record who collected each item and when. Avoid repeatedly editing, converting, compressing, or forwarding the only copy.

Electronic evidence must still be authenticated under the Rules on Electronic Evidence. A screenshot is useful, but the person who captured it, the manner of capture, surrounding metadata, admissions, or properly obtained platform records may be needed to establish authenticity and authorship.

2. Identify the exact defamatory statements

Quote or reproduce the material accurately in the complaint-affidavit. Explain:

what the words mean in context;
why they are defamatory;
how they refer to you;
where and when they were published;
who encountered them;
why you believe the respondent authored or published them; and
why any claimed privilege, public-interest defense, or factual basis does not apply.

Do not substitute conclusions such as “the post ruined my life” for the underlying facts. Attach the documents and identify witnesses who can testify from personal knowledge.

3. Establish authorship and account connection

Collect lawful evidence connecting the respondent to the content, such as:

an admission;
a verified or consistently used account;
prior exchanges from the same account;
witnesses familiar with the account;
contact details or links controlled by the respondent;
contemporaneous messages acknowledging the post; or
platform or subscriber information lawfully obtained through investigators and appropriate judicial process.

Do not hack an account, impersonate someone, install spyware, or unlawfully record private communications to obtain proof.

4. Confirm venue and the proper prosecutor’s office

Cybercrime cases fall within the jurisdiction of the Regional Trial Court, with designated cybercrime courts handling the cases assigned to them. The complaint ordinarily begins with a preliminary investigation before the appropriate city, provincial, or state prosecutor rather than with a private party directly filing a criminal Information in court.

Venue is jurisdictional in criminal cases and can depend on the alleged place of publication, the offended party’s legally relevant residence or office, and the special venue provisions governing libel. Online accessibility everywhere does not automatically make every city or province a proper venue.

Before filing, have counsel or the receiving prosecutor’s office confirm venue from the complaint’s actual facts and documents.

5. Prepare the complaint-affidavit and attachments

The complaint-affidavit should be sworn, based on personal knowledge or properly identified records, and organized by date. Common supporting materials include:

authenticated copies of the online publication;
affidavits from people who read, viewed, or received it;
documents disproving the accusation;
records showing the complainant’s identity and relevant residence or office;
evidence connecting the respondent to the account;
proof of discovery date; and
any preservation requests, investigation reports, or platform responses.

Prosecutorial preliminary investigations are governed by the 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings. Prosecutors assess whether there is prima facie evidence with reasonable certainty of conviction—not merely whether an accusation was made. Filing and service requirements can vary with the office and the manner of submission, so confirm the current checklist directly with the receiving office.

6. Consider lawful investigative assistance

The NBI and PNP are the principal law-enforcement authorities designated under Republic Act No. 10175. Their cybercrime units may assist with technical investigation and preservation of evidence.

A report to law enforcement is not always the same as filing a complaint-affidavit that interrupts prescription. Confirm what has actually been docketed and by which office.

Subscriber information, traffic data, stored content, and device evidence may require preservation orders or court-issued cybercrime warrants. The governing framework includes the Supreme Court’s Rule on Cybercrime Warrants. Private parties should not assume that a platform will voluntarily disclose another user’s protected information.

7. Participate in preliminary investigation

The prosecutor may require additional affidavits, documents, or clarifications. If probable cause meeting the applicable DOJ standard is found, an Information may be filed in the proper Regional Trial Court. The court independently determines the next judicial steps, including whether probable cause exists for the issuance of a warrant.

A prosecutor’s resolution may be subject to a motion for reconsideration or a petition for review under applicable DOJ rules and deadlines. Obtain the actual resolution and record the date of receipt immediately.

How to defend against a complaint

Do not ignore the subpoena

Note the date and method of service and the deadline stated in the subpoena. Consult counsel promptly. Failure to submit a counter-affidavit can leave the prosecutor to resolve the complaint using only the complainant’s evidence.

Ask for a complete copy of the complaint and all attachments. A defense cannot be prepared reliably from a demand letter, social-media announcement, or partial screenshot.

Preserve—not delete—the relevant material

Deletion can destroy helpful context and create evidentiary disputes. Preserve:

the original post and drafts;
source documents and research notes;
messages with editors, sources, or recipients;
device and account-access records;
publication and revision histories;
the full conversation;
retractions, corrections, or clarifications; and
proof of hacking, impersonation, or unauthorized access, if genuine.

A platform takedown may reduce ongoing harm but does not automatically erase a completed publication or end a criminal case. Before changing content, preserve an exact copy and seek advice on whether a correction, retraction, or carefully worded response is appropriate.

Challenge each element separately

A counter-affidavit should address, where supported:

whether the words are defamatory in their full context;
whether the complainant was identifiable;
whether any third person received the communication;
whether the respondent authored or published it;
whether the evidence is authentic and complete;
whether the statement is true and was published with good motives and justifiable ends;
whether it is privileged or protected fair comment;
whether actual malice is required and proved;
whether the correct venue was chosen;
whether the complaint has prescribed; and
whether the post charged is distinct from an earlier publication.

Avoid general denials where records permit a specific explanation. Attach the documents on which the defense relies and have witnesses execute affidavits based on personal knowledge.

Treat arrest and bail issues as urgent

A demand letter or prosecutor’s subpoena is not an arrest warrant. Once an Information is filed, however, the court may evaluate probable cause and issue process. Anyone who learns that a warrant may have been issued should have counsel verify it with the court and arrange the legally proper response.

Do not rely on screenshots of supposed warrants or payment instructions sent by strangers. Verify the case number, court, branch, and official record. Bail and appearance requirements depend on the charge, the court’s orders, and the accused’s circumstances.

Criminal penalties and civil liability

Cyber libel can result in imprisonment, a fine, or both. Because the Cybercrime Prevention Act applies a penalty one degree higher when a Revised Penal Code offense is committed through information and communications technology, exposure can be more serious than traditional libel. The exact penalty depends on the charging provision, applicable amendments, and the court’s findings.

A criminal case can also include civil liability. Defamation may additionally support a separate civil action under Article 33 of the Civil Code, subject to rules on prescription, proof, damages, and avoiding double recovery. A dismissal for lack of probable cause does not automatically resolve every possible civil claim, and a private settlement does not automatically terminate a public criminal prosecution.

Practical evidence checklist

For a complainant

Full, uncropped screenshots and screen recordings
URL, account identifier, date, time, and platform
Original files and device used to capture them
Complete conversation or publication context
Affidavits of people who saw the material
Proof linking the account to the respondent
Documents showing falsity or correcting the accusation
Evidence of discovery date
Records of requests for correction or preservation
Proof of relevant residence or office for venue
Evidence of measurable harm, if damages are claimed

For a respondent

Original post, drafts, and edit history
Sources and documents supporting factual statements
Full context omitted from the complaint
Proof of limited or absent publication
Records concerning account ownership or unauthorized access
Official records supporting a fair-report defense
Evidence of good faith and verification efforts
Relevant correspondence with the complainant
Dates supporting prescription or improper venue
Copies of every subpoena, filing, and proof of service

Common mistakes

Filing based only on cropped or anonymous screenshots
Waiting while the one-year prescriptive period runs
Assuming a police blotter or informal report is already a filed prosecutor’s complaint
Naming every person who reacted to or received a post as an accused
Treating “opinion” as an automatic defense
Treating truth alone as sufficient without addressing motive, purpose, and proof
Filing in a convenient location without establishing criminal venue
Deleting the post or replacing the device before preserving evidence
Contacting witnesses with threats or instructions about what to say
Publishing the complaint, subpoena, or accusations repeatedly during the dispute
Ignoring a subpoena because the respondent believes the complaint is weak
Obtaining evidence through hacking, impersonation, or unlawful surveillance
Assuming an apology, retraction, or settlement automatically dismisses the criminal case

When legal help is urgent

Consult a Philippine lawyer immediately when:

the one-year period may expire soon;
a subpoena, complaint-affidavit, Information, or court order has been received;
the author used a fake or anonymous account;
a platform preservation request or cybercrime warrant may be necessary;
the publication involves a public official, journalist, whistleblower, employee, student, or regulated professional;
the accusation is mixed with threats, doxxing, identity theft, intimate images, or violence;
the content or account is outside the Philippines;
a warrant of arrest may have been issued;
several people or corporate accounts participated in publication; or
settlement communications might be used as admissions.

For people unable to afford private counsel, possible sources of assistance include the Public Attorney’s Office for qualified clients, the Integrated Bar of the Philippines through its legal-aid programs, and law-school legal-aid clinics. Eligibility and availability should be confirmed directly.

Frequently asked questions

Is a false Facebook post automatically cyber libel?

No. Falsity may be important, but the prosecution must still establish defamatory imputation, publication, identification, malice where legally required, authorship, online commission, proper venue, and timely filing.

Can I file if my name was not mentioned?

Possibly. You must show that readers familiar with the context could reasonably identify you from photographs, descriptions, tags, position, surrounding statements, or other details.

Is one screenshot enough?

It may help establish probable cause, but it is safer to preserve the complete post, URL, account information, context, original file, capture process, and witnesses. A disputed screenshot may require additional authentication.

Can a private message be cyber libel?

Only if it was published to at least one person other than the person defamed. A message sent solely to the target generally lacks the publication element, although threats, harassment, or other content may fall under different laws.

Can I be charged for liking or reacting to a post?

A mere reaction is not automatically cyber libel. Disini limited cyber-libel liability to the original author rather than people who simply receive and react to content. Liability may differ if a person adds a defamatory statement or makes a legally significant republication.

Does sharing a post create a new offense?

Not necessarily. A bare share and a share accompanied by a new defamatory accusation are not the same. Material alteration or deliberate republication may be treated differently depending on the evidence.

Does removing the post end the case?

No. Removal may limit continuing harm, but it does not undo a publication already completed. Preserve the evidence before deletion and obtain advice about corrections or retractions.

Can the complainant withdraw the case?

The complainant can execute an affidavit of desistance or enter a settlement, but criminal prosecution is brought in the name of the People of the Philippines. Desistance does not automatically require the prosecutor or court to dismiss the case.

How long does a complainant have to file?

Under the Supreme Court’s current rule, cyber libel prescribes in one year from discovery of the offense. Because the discovery date and legal effect of a particular filing may be contested, seek advice well before the anniversary date.

Is criticism of a government official cyber libel?

Not merely because it is severe or embarrassing. Speech about official conduct and public affairs receives strong constitutional protection. Liability may arise, however, from defamatory factual accusations made with the legally required level of malice. The exact statement, factual basis, public role, and context must be examined.

Official legal sources

This article provides general Philippine legal information, not legal advice or an assessment of any particular post or case. Cyber-libel outcomes depend heavily on the exact words, publication history, electronic evidence, parties, venue, and procedural record. Sources and current rules were checked as of September 17, 2026.