Quick answer

To file a cyber libel case in the Philippines, act quickly: preserve the online material and proof of authorship, prepare a sworn complaint supported by admissible evidence, and file it with the proper prosecutor’s office. A police or National Bureau of Investigation cybercrime unit may help investigate or identify an anonymous account, but the prosecutor determines whether probable cause exists and whether an Information should be filed in court.

To defend a cyber libel complaint, do not ignore the subpoena. Obtain the complete complaint and attachments, preserve your own records, and submit a sworn counter-affidavit within the stated period—ordinarily 10 days from receipt under Rule 112. Address every legal element, authorship, context, applicable privilege, prescription, venue, and any defect in the electronic evidence.

Cyber libel is not established merely because an online statement is insulting, embarrassing, critical, or false. The prosecution must prove the elements of libel, publication through a computer system, and the accused’s responsibility for the publication. Defenses and procedural issues depend heavily on the exact words, their context, the identity and status of the complainant, how the material was published, and the available evidence.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, covers the unlawful acts of libel defined in Article 355 of the Revised Penal Code when committed through a computer system or a similar means.

A cyber libel prosecution generally must establish:

A defamatory imputation of a crime, vice, defect, act, omission, condition, status, or circumstance;
Publication or communication of the statement to at least one person other than the person defamed;
Identification of the person allegedly defamed, either expressly or through facts that make the person reasonably identifiable;
Malice, whether presumed by law or required to be proved as actual malice in the circumstances;
Use of a computer system or information and communications technology; and
That the accused was the person legally responsible for the publication.

The statement must be assessed as a whole and in its actual setting. Words that look damaging in isolation may have a different meaning when the full post, thread, video, conversation, satire, quotation, or surrounding events are considered.

The Supreme Court has explained that cyber libel is essentially the Revised Penal Code offense of libel committed through a computer system, with the use of information and communications technology affecting the penalty. See Causing v. People, G.R. No. 258524 and the Court’s April 8, 2026 Resolution.

What online communications may be covered?

Potentially covered material includes an original defamatory publication made through:

Facebook, X, Instagram, TikTok, YouTube, or another social platform;
A blog, website, online forum, or electronic publication;
Email, group chat, messaging application, or another computer-based channel, if communicated to a third person;
An image, meme, caption, recording, livestream, or video containing a defamatory imputation; or
Another electronic method that qualifies as publication through a computer system.

A private message sent only to the person discussed ordinarily presents a publication problem because libel requires communication to a third person. If the message was sent to a group, copied to others, forwarded, or made visible to another person, publication may exist.

Original authors, commenters, likers, and sharers

The Supreme Court in Disini v. Secretary of Justice, G.R. No. 203335 sustained cyber libel as applied to the original author but rejected the law’s application to people who merely receive a post and react to it. A mere “like,” reaction, or passive receipt should not automatically be treated as cyber libel.

That does not give blanket immunity to every later user. A person who adds a new defamatory accusation, creates a materially new publication, or independently authors defamatory content may be evaluated on that person’s own words and conduct. Liability should not be assumed solely from a share or reaction; the exact act and controlling rulings must be examined.

The one-year deadline is critical

Cyber libel prescribes in one year. In Causing, as reaffirmed by the Supreme Court in 2026, the Court held that Articles 90 and 91 of the Revised Penal Code govern and that the period is counted from the day the alleged offense is discovered by the offended party, the authorities, or their agents.

Filing the complaint or Information interrupts prescription. The period may begin to run again if the proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused. Article 91 also states that prescription does not run while the offender is absent from the Philippines.

Do not automatically count one year only from the date displayed on the post. The legally relevant discovery date may be disputed and must be supported by evidence. Complainants should document when and how they first discovered the material. Respondents should examine whether the claimed discovery date is credible, whether others acting for the complainant knew earlier, and when the complaint was actually instituted.

Because prescription can decide the entire case, consult counsel immediately if the one-year period is approaching or disputed.

Before filing: preserve the evidence properly

Online material can be edited, deleted, hidden, renamed, or stripped of context. Preserve it before asking the author or platform to remove it.

Keep, where available:

Full-page screenshots showing the post, account name, date, time, reactions, comments, and surrounding context;
The complete URL or direct link, not only a cropped image;
A screen recording showing navigation from the account or webpage to the publication;
The original image, video, audio, email, or message file;
The entire conversation or thread, including material favorable to the other side;
Account profile pages, usernames, identifying details, and previous name changes;
Emails, notifications, platform messages, or witness accounts showing when the publication was discovered;
Records connecting the account to the suspected author;
Proof that a third person saw, received, or understood the publication;
Documents showing falsity or contradicting the imputation;
Evidence of actual harm, such as lost work, cancelled transactions, customer communications, or medical records, if damages are claimed; and
Demand letters, replies, corrections, retractions, apologies, or refusals to remove the material.

Preserve original files and devices where practical. Do not edit screenshots, add annotations to the only copy, or rely entirely on printed images. Maintain a separate working copy for highlighting.

Screenshots are not automatically conclusive. The opposing party may dispute authenticity, completeness, authorship, date, context, or alteration. Electronic evidence must still comply with the Rules on Electronic Evidence and other applicable evidentiary rules. A witness with personal knowledge may be needed to identify how the evidence was obtained and what it accurately represents.

How to file a cyber libel complaint

1. Assess the exact statement

Identify the precise words, images, or conduct alleged to be defamatory. Explain:

What the statement means in context;
Why it refers to the complainant;
Who received or viewed it;
Why it tends to cause dishonor, discredit, or contempt;
Why it is unlawful rather than protected opinion, fair comment, or privileged communication; and
Why the respondent is the author or person responsible for the publication.

A complaint that merely labels an entire page, video, or conversation “libelous” without identifying the actionable portions may be difficult to evaluate.

2. Establish authorship

A profile name or screenshot alone may not prove who controlled an account. Gather lawful evidence such as:

Admissions by the respondent;
Messages or emails connecting the respondent to the account;
Consistent account details known to witnesses;
Testimony from a person who observed the publication or account use;
Platform or subscriber information lawfully obtained through investigators and appropriate court process; and
Device or forensic evidence obtained and handled according to law.

Do not hack an account, impersonate another person, steal a device, or unlawfully obtain private data. Evidence-gathering methods can create separate criminal, civil, or data-privacy problems.

3. Prepare the complaint-affidavit

Under Rule 112 of the Rules of Criminal Procedure, the complaint should state the respondent’s address and be accompanied by the affidavits of the complainant and witnesses and the supporting documents needed to establish probable cause.

The affidavit should clearly cover:

The identities and addresses of the parties;
The exact publication and its URL or electronic location;
The date of publication, if known;
The date, place, and manner of discovery;
The people who received, viewed, or understood it;
The facts identifying the complainant;
The evidence linking the respondent to the publication;
The complete context;
The factual basis for alleging falsity and malice;
The location relevant to venue; and
A numbered list of authenticated or identifiable attachments.

Affidavits must be sworn before an authorized officer and should be based on personal knowledge. Do not exaggerate, omit material context, or present assumptions as witnessed facts.

4. File with the proper prosecutor’s office

A cyber libel complaint ordinarily undergoes preliminary investigation because of the imposable penalty. File the sworn complaint and supporting evidence with the provincial, city, or appropriate state prosecutor having authority over the proper venue.

The Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC provides that criminal actions under Sections 4 and 5 of RA 10175 are filed before the designated cybercrime court of the province or city:

Where the offense or any element occurred;
Where any part of the computer system used is situated; or
Where any of the damage to a natural or juridical person took place.

The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of other courts. Mere nationwide accessibility should not be treated casually as permission to choose any venue. The Information must allege facts supporting venue, and the prosecutor’s office selected should correspond to a legally supportable place.

Confirm the receiving office’s current filing requirements before submission. Requirements for copies, electronic media, forms, and personal or authorized filing may differ by office.

5. Consider a lawful cybercrime investigation

Where authorship is unknown or technical records are needed, assistance may be sought from the:

Department of Justice Office of Cybercrime;
National Bureau of Investigation cybercrime unit; or
Philippine National Police Anti-Cybercrime Group.

These agencies can investigate, but they do not replace the prosecutor’s probable-cause determination. Disclosure, preservation, interception, search, seizure, or examination of computer data may require the process specified by RA 10175 and the Rule on Cybercrime Warrants. A private complainant cannot compel a platform or internet service provider to disclose protected subscriber or content data simply by sending a demand.

6. Participate in the preliminary investigation

The investigating prosecutor may dismiss the complaint at the outset if there is no ground to continue. Otherwise, the prosecutor issues a subpoena to the respondent with the complaint and supporting material.

The respondent ordinarily has 10 days from receipt to submit counter-affidavits and supporting evidence. If the respondent cannot be subpoenaed or fails to respond in time, the prosecutor may resolve the matter using the complainant’s evidence.

A clarification hearing is discretionary. Preliminary investigation is generally affidavit-based; it is not yet the criminal trial, and the parties do not have an automatic right to cross-examine each other.

If probable cause is found and approved, the prosecutor files an Information. The designated Regional Trial Court then independently evaluates probable cause for the issuance of a warrant of arrest or other appropriate process. A prosecutor’s finding of probable cause is not a conviction. At trial, guilt must be proved beyond reasonable doubt.

How to defend a cyber libel complaint

1. Do not ignore the subpoena

Record the exact date and manner of receipt. The ordinary Rule 112 period for a counter-affidavit is 10 days from receipt of the subpoena and attachments. Check the subpoena itself and any current rules or orders governing the proceeding.

A motion to dismiss cannot simply replace the counter-affidavit at preliminary investigation. If more time is genuinely necessary, counsel should promptly seek the appropriate relief before the deadline rather than assume an extension will be granted.

2. Obtain and review all the evidence

The respondent has the right to examine evidence submitted by the complainant that was not furnished with the subpoena and to copy it at the respondent’s expense. Check for:

Missing pages or attachments;
Cropped or altered screenshots;
Incomplete threads;
Inconsistent publication and discovery dates;
Lack of proof that anyone other than the complainant received the statement;
Lack of proof connecting the respondent to the account;
Anonymous hearsay;
A false or unsupported venue allegation; and
Evidence that actually contradicts the complaint’s theory.

3. Preserve your own evidence

Do not destroy posts, accounts, messages, or devices after learning of a complaint. Deletion may remove context helpful to the defense and can create damaging inferences or separate legal issues.

Preserve drafts, source documents, research, communications, access records, account-security notices, evidence of impersonation or hacking, the full conversation, and information identifying other account administrators. If the material has been removed, preserve proof of when and why it was removed.

4. Answer each element, not just the accusation

Possible defenses or grounds for dismissal may include:

No defamatory imputation. The words, fairly read, do not accuse the complainant of a crime, vice, defect, or discreditable act or condition.
Opinion rather than a provably defamatory factual assertion. Context matters; calling something “opinion” does not protect a disguised factual accusation.
The complainant was not identifiable. No reasonable recipient could connect the statement to the complainant.
No publication to a third person. The communication was seen only by the person discussed.
No proof of authorship or control. The evidence does not reliably link the respondent to the account or publication.
Material alteration, impersonation, or unauthorized access. The content was fabricated, changed, or posted without the respondent’s authority.
Privileged communication. Article 354 recognizes specified privileged communications, including a private communication made in the performance of a legal, moral, or social duty and a fair and true report, made in good faith and without comments or remarks, of qualifying official proceedings or acts.
Truth with the legally required purpose. Truth is not a universal one-word defense. Article 361 requires proof of truth and, where applicable, publication with good motives and for justifiable ends. The governing standard depends on what was imputed and whom it concerned.
Fair comment or constitutional protection involving public matters. Criticism of public officials and public figures may receive greater protection. Where the law requires actual malice, the complainant must show the statement was made with knowledge of falsity or reckless disregard for whether it was false. Honest error is not automatically actual malice.
Lack of malice. Malice may be presumed in an apparently defamatory publication unless good intention and justifiable motive are shown, but privilege or the public character of the controversy may change the required proof.
Prescription. The complaint was instituted more than one year after legally relevant discovery, subject to Article 91 and the evidence.
Improper venue. The allegations and evidence do not connect the case to a venue permitted by the applicable cybercrime rule.
The accused merely reacted to or received another person’s post. Disini limits cyber libel liability to the original author in the circumstances addressed by the Court.
Prohibited double charging for the same publication. The Supreme Court has held that ordinary libel and cyber libel based on the identical publication are the same offense for double-jeopardy purposes; the same act should not produce separate convictions under both provisions.

No single defense applies automatically. For example, documents establishing that a statement is true may still leave questions about motive, unnecessary accusations, misleading omissions, publication, or applicable privilege.

5. Prepare a complete counter-affidavit

The counter-affidavit should:

Respond paragraph by paragraph where practical;
State only facts within the affiant’s personal knowledge;
Reproduce the complete context, not another selective excerpt;
Identify each supporting attachment;
Explain any challenged date, account, device, or witness;
Raise prescription and venue expressly if supported;
Address privilege, truth, motive, public concern, and actual malice with evidence; and
Avoid fresh attacks on the complainant.

A rushed public rebuttal is not a substitute for a sworn defense. Discuss with counsel whether any public statement could become a new alleged publication or an admission.

Penalties and civil liability

Section 6 of RA 10175 makes the penalty for libel committed through information and communications technology one degree higher than the Revised Penal Code penalty.

In People v. Soliman, G.R. No. 256700, the Supreme Court clarified that cyber libel may be punished by imprisonment or a fine, or both, depending on the judgment and circumstances. The imprisonment range corresponding to the one-degree increase is prisión correccional in its maximum period to prisión mayor in its minimum period. The Court calculated the statutory fine range for online libel as ₱40,000 to ₱1,500,000.

These are possible statutory penalties, not an automatic sentence. The court determines the proper penalty after conviction, taking account of the governing law, applicable circumstances, and the facts proved. Supreme Court Administrative Circular No. 08-2008 allows judges to consider whether a fine alone best serves the interests of justice, but it does not abolish imprisonment.

Criminal proceedings may also include civil liability. A person considering a separate civil action should obtain advice promptly because civil claims for defamation have their own prescriptive and procedural rules. Avoid assuming that a demand letter, platform report, or private negotiation necessarily preserves a criminal or civil deadline.

Retraction, apology, deletion, and settlement

Removing a publication, correcting it, or apologizing may reduce continuing harm and can be relevant to motive, damages, or penalty. It does not automatically erase an offense already completed.

Before sending a demand, apology, admission, settlement proposal, or public response, consider legal advice. Poorly drafted communications can:

Admit authorship or essential facts;
Repeat the defamatory material;
Create a new publication;
Demand unlawful payment or threaten unrelated criminal exposure;
Waive useful defenses; or
Escalate a dispute that could otherwise be corrected.

Private settlement may resolve civil interests, but crimes are prosecuted in the name of the People of the Philippines. A complainant’s withdrawal or affidavit of desistance does not automatically require dismissal after the State has acquired an interest in the prosecution.

Common mistakes to avoid

For complainants

Waiting while the one-year period runs;
Preserving only a cropped screenshot;
Failing to record the date and manner of discovery;
Naming an account owner without evidence of authorship or control;
Treating harsh criticism or insult as automatically libelous;
Omitting the full conversation or material context;
Filing in a convenient but unsupported venue;
Alleging damages without records or witnesses;
Using an unlawful method to obtain account or device data; and
Assuming a police blotter, platform report, or demand letter is necessarily the filing that interrupts prescription.

For respondents

Ignoring the subpoena or missing the counter-affidavit deadline;
Posting angry replies or repeating the accusation;
Deleting the only complete copy of the thread;
Assuming that “it was true” ends the legal analysis;
Assuming that adding “allegedly,” a question mark, or “in my opinion” provides immunity;
Failing to contest authorship, venue, discovery date, or authenticity promptly;
Submitting unsupported denials instead of documents and witness affidavits;
Contacting or intimidating the complainant or witnesses; and
Discussing strategy publicly while the case is pending.

When legal help is urgent

Seek a Philippine lawyer immediately if:

The one-year prescriptive period is close;
You received a prosecutor’s subpoena or court process;
A warrant of arrest may have been issued;
The account is anonymous and provider data may disappear;
A device has been seized or investigators request access to an account;
The publication concerns a journalist, public official, public figure, election, or matter of public concern;
The same material is charged as both ordinary and cyber libel;
Several people managed the account;
The publication occurred partly outside the Philippines;
The complainant or respondent is a corporation, media organization, government employee, or minor;
There are threats, stalking, extortion demands, doxxing, or unauthorized access in addition to alleged defamation; or
A retraction, settlement, or affidavit of desistance is being proposed.

If arrested or subjected to custodial investigation, ask for counsel and exercise the constitutional right to remain silent. Do not consent casually to a device search or disclose passwords without understanding the legal basis and consequences.

People who cannot afford private counsel may inquire with the Public Attorney’s Office, subject to its indigency, merit, and conflict-of-interest requirements.

Frequently asked questions

Can I file because a post is false and embarrassing?

Not necessarily. Falsity and embarrassment alone do not establish every element of cyber libel. The post must contain a legally defamatory imputation, refer to an identifiable person, be published to another person through a computer system, and satisfy the applicable rules on malice and authorship.

Is a screenshot enough?

Sometimes it is useful, but it is not automatically sufficient. Its authenticity, completeness, source, date, context, and connection to the accused may be disputed. Preserve the URL, original files, full thread, witness testimony, and other corroborating evidence.

Can an anonymous account be charged?

An investigation may begin even when the author’s identity is unknown, but a criminal case ultimately requires reliable evidence identifying the responsible person. Subscriber or account data generally must be obtained through lawful investigative and court processes.

Am I liable for sharing someone else’s post?

A mere share, like, or reaction does not automatically create cyber libel liability under Disini. Liability may be different if you add your own defamatory accusation or create a distinct publication. The exact content and action must be examined.

Is a group-chat message cyber libel?

It can be. If a defamatory statement is communicated through a computer system to at least one person other than the person defamed, the publication element may be present. Privacy settings do not necessarily prevent publication.

Does deleting the post end the case?

No. Libel may already have been completed upon publication. Deletion may limit further circulation and may be relevant to the circumstances, but preserved evidence can still support a complaint or defense.

Does an apology prove guilt?

Not automatically. Its wording and context matter. An apology can be a humanitarian or practical response, but it may also contain admissions. Obtain advice before signing a detailed admission or settlement document.

Can truth defeat the complaint?

Truth can be a major defense, but the Revised Penal Code may also require good motives and justifiable ends. Public-official, public-figure, privileged-communication, and private-person cases can involve different standards. Preserve the sources and records relied upon when the statement was made.

When does the one-year period begin?

Under the Supreme Court’s current ruling in Causing, it begins when the alleged cyber libel is discovered by the offended party, the authorities, or their agents—not necessarily when the post was first uploaded. The discovery date is a factual matter that should be documented and may be contested.

Will the respondent be arrested as soon as the complaint is filed?

Not merely because a complaint-affidavit was submitted to a prosecutor. If the prosecutor finds probable cause and files an Information, the judge independently evaluates probable cause and determines whether to dismiss, seek additional evidence, issue a warrant, or take other lawful action.

Can the same post support both ordinary libel and cyber libel convictions?

The Supreme Court has held that identical material cannot produce separate ordinary-libel and cyber-libel convictions because the provisions concern the same offense when based on the same publication. Different publications or independently authored material require separate factual analysis.

Official legal sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Cyber libel issues are highly fact-specific, and procedural requirements may vary with the office, court, evidence, and stage of proceedings. Consult a Philippine lawyer about an actual complaint or subpoena. Sources and current law checked as of September 15, 2026.