Quick answer

To file a cyber libel case in the Philippines, preserve the online publication and proof of when it was discovered, identify the person responsible, and submit a sworn complaint-affidavit with supporting evidence to the proper city or provincial prosecution office. Reporting first to the National Bureau of Investigation Cybercrime Division or the Philippine National Police Anti-Cybercrime Group may help when the author is anonymous or technical evidence must be secured.

To defend a case, do not ignore a prosecutor’s subpoena. Obtain the complete complaint and attachments, preserve the original post and its context, and submit a detailed counter-affidavit by the date stated in the subpoena. Possible defenses include prescription, lack of identification or publication, absence of a defamatory imputation, privileged communication, fair comment, truth accompanied by good motives and justifiable ends where legally applicable, lack of participation, and failure to prove authorship or electronic evidence properly.

Time is critical. The Supreme Court has ruled that cyber libel prescribes in one year from discovery of the offense by the offended party, authorities, or their agents. The date of discovery is a factual matter that may require evidence; it is not automatically the date the post was uploaded.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012, or Republic Act No. 10175, covers libel as defined in the Revised Penal Code when committed through a computer system or a similar technological means.

A prosecution generally must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person to contempt.
Identification. The complainant must be the person referred to. Naming the person is not always necessary if readers who know the surrounding facts can reasonably identify them.
Publication. The statement was communicated to at least one person other than the person allegedly defamed. A private message sent only to the complainant ordinarily presents a publication problem, although forwarding it to others may change the analysis.
Malice. Article 354 generally presumes malice from a defamatory publication unless the communication falls within a recognized privilege. The circumstances, subject, audience, language, and purpose remain important.
Use of a computer system. The publication was made online or through information and communications technology—for example, through a social-media post, website article, blog, email, online forum, or messaging group.
The accused’s responsible participation. The prosecution must connect the accused to the publication through admissible evidence. Ownership of a device, page, company, or account does not by itself answer every question about authorship, authorization, or participation.

The Supreme Court explained in Disini v. Secretary of Justice that the cyber-libel provision constitutionally applies to the original author of the post, not automatically to people who merely receive it or react to it. The Court invalidated the application of the Cybercrime Act’s general aiding-or-abetting provision to cyber libel. A share, caption, repost, or later alteration may nevertheless involve a new publication if the person adds or independently republishes defamatory content; that conclusion depends on what the person actually did.

Opinion, criticism, and reporting are not automatically libel

Calling a statement an “opinion” does not settle the issue. Courts examine whether it communicates a provably defamatory factual assertion and how an ordinary reader would understand it in context. Exaggeration, satire, rhetorical language, and evaluative criticism may be treated differently from a concrete accusation of criminal or dishonest conduct.

The Constitution protects speech, press freedom, and discussion of public affairs. Fair comment on matters of public interest may be privileged when it is based on true or substantially established facts and represents an honest opinion rather than a knowingly false factual accusation. Public officials and public figures generally receive less protection from criticism concerning matters of legitimate public concern, but this is not a license to fabricate facts.

Certain communications are qualifiedly privileged under Article 354 of the Revised Penal Code, including:

A private communication made in the performance of a legal, moral, or social duty to a person with a corresponding interest or duty; and
A fair and true report, made in good faith and without added comments or remarks, of specified official proceedings or acts.

Qualified privilege does not create absolute immunity. It may be defeated by proof of actual malice, improper motive, excessive publication, unnecessary defamatory language, or lack of a legitimate duty or interest.

Truth is also not a universal one-word defense. Under Article 361, the admissibility and effect of proof of truth depend on the nature of the imputation and, in relevant cases, whether publication was made with good motives and for justifiable ends. A lawyer should evaluate this defense against the precise words, subject, and evidence.

Filing a cyber libel complaint

1. Preserve the publication immediately

Before asking for deletion or responding publicly, preserve:

Full-page screenshots showing the post, account name, date, time, reactions, comments, and surrounding conversation;
The exact URL or permalink;
Screen recordings showing how the content is accessed;
Original messages, emails, attachments, notifications, and downloaded files;
The device on which the publication was received or viewed;
Account identifiers, profile links, usernames, telephone numbers, and email addresses;
Names and affidavits of people who saw and understood the publication;
Proof connecting the account or publication to the suspected author;
Records showing the date and circumstances in which the complainant or authorities first discovered it;
Evidence of harm, such as lost work, cancelled contracts, inquiries from clients, or messages from people who saw the accusation; and
Any request for correction, response, apology, retraction, or takedown, together with the reply.

Keep the original files. Do not crop, annotate, rename, or repeatedly re-save the only copy. Screenshots are useful but can be challenged as incomplete or manipulated. Original electronic records, metadata, witness testimony, and a clear chain of custody make authentication easier under the Rules on Electronic Evidence.

2. Identify the correct respondent

Do not assume that the visible profile name proves who posted the material. Determine, as far as reasonably possible:

Who created the content;
Who controlled the account at the relevant time;
Whether the account was fake, compromised, shared, or impersonating someone;
Who supplied, approved, edited, or separately republished the words; and
Whether a corporate officer or page administrator personally participated.

A corporation or its officer is not automatically criminally liable merely because content appeared on a company page. Criminal liability is personal and must be supported by evidence of the individual’s act or legally relevant participation.

If the author is unknown, promptly consult the NBI Cybercrime Division, PNP Anti-Cybercrime Group, or counsel. Subscriber and traffic data generally cannot be obtained merely by sending a private demand to a platform. Law-enforcement authorities may seek preservation, disclosure, or search orders under Republic Act No. 10175 and the Supreme Court’s Rule on Cybercrime Warrants, subject to legal requirements.

3. Check prescription before filing

In Causing v. People, G.R. No. 258524, the Supreme Court En Banc affirmed that cyber libel prescribes in one year from discovery, under Articles 90 and 91 of the Revised Penal Code.

Do not assume that an old post is necessarily prescribed or that continued online availability restarts the period every day. The controlling questions include when the offense was actually discovered, whether there was a legally distinct republication, and what proceeding interrupted prescription. These are fact-sensitive issues.

A complainant should file well before the one-year anniversary of discovery and preserve proof of the discovery date. A respondent asserting prescription should produce evidence rather than rely only on the upload date; in Causing, the Court held that prescription could not be resolved in the accused’s favor on an unsupported motion to quash.

A separate civil action for injury to rights or defamation may also be subject to a one-year period under Article 1147 of the Civil Code. The starting point and any interruption should be assessed separately.

4. Choose the proper office and venue

A complaint is ordinarily filed with the city or provincial prosecution office having territorial authority over the offense. The Rule on Cybercrime Warrants provides special venue rules for criminal actions involving cybercrime offenses. Depending on the evidence, relevant places may include where an element of the offense occurred or where the computer system or data involved was situated.

Venue should not be selected merely for convenience. Online publication can involve several locations, but the complaint must allege and ultimately establish a legally sufficient connection to the chosen venue. Ask the receiving prosecution office or counsel to confirm venue before the prescriptive period expires.

5. Prepare the complaint-affidavit and evidence

The complaint-affidavit should state, in chronological and specific terms:

The complainant’s and respondent’s identities and addresses, if known;
The exact words, images, video, or other material complained of;
When, where, and how it was published and discovered;
Why the complainant is identifiable;
Why the publication is defamatory;
Who received or saw it;
Facts connecting the respondent to the publication;
Why any claimed privilege, public-interest justification, or fair-comment defense does not apply;
The harm caused; and
The documents and witness affidavits supporting each material allegation.

Quote only what is necessary, but attach a complete and legible copy so context is not hidden. The affidavit must be properly sworn before an authorized officer. Follow the receiving office’s current requirements on copies, electronic submissions, file formats, and personal appearance; filing channels and local implementation can change.

Under the 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings, a prosecutor evaluates whether the evidence establishes prima facie evidence with reasonable certainty of conviction. Filing a complaint does not itself mean that a criminal case has been filed in court. The prosecutor may require additional evidence, dismiss the complaint, or recommend filing an Information in the Regional Trial Court.

What happens after filing?

If the complaint is sufficient to proceed, the prosecutor ordinarily issues a subpoena directing the respondent to submit a counter-affidavit and supporting evidence on the scheduled date. The subpoena should include the complaint and its attachments and ordinarily provide at least ten days from receipt for the response under the regular preliminary-investigation process.

The investigating prosecutor may resolve the matter on the affidavits, require permitted responsive submissions, or conduct clarificatory questioning. If the required evidentiary standard is met and the resolution is approved, an Information is filed in the proper court. The court—not the complainant or prosecutor—ultimately determines guilt beyond reasonable doubt.

The precise procedure may differ if a special prosecution office has jurisdiction, if another offense is included, or if the DOJ’s expedited or summary procedures apply. The subpoena or written order received in the particular case should be followed exactly.

How to defend a cyber libel complaint

Act as soon as a subpoena or court process arrives

Record the date, time, manner, and recipient of service. Obtain every attachment. The submission date written in the subpoena is the operative deadline. If documents are missing or unreadable, request complete copies and appropriate relief in writing immediately; do not simply let the deadline pass.

Failure to submit a counter-affidavit may allow the prosecutor to resolve the complaint using the complainant’s evidence alone. A counter-affidavit is evidence under oath, not an informal denial. Inconsistent statements may later be used against the respondent.

If an Information has already been filed, obtain counsel promptly for bail, arraignment, possible motions, pretrial, and preservation of defenses. Do not assume that appearing at the prosecutor’s office satisfies a court order.

Preserve the defense evidence

Keep:

The complete original post, thread, article, or conversation;
Drafts, source documents, recordings, interview notes, and editorial communications;
Research showing the factual basis for the statement;
Records of verification attempts and requests for comment;
Proof of the audience, privacy setting, and actual recipients;
Login history and security alerts if impersonation or account compromise is claimed;
Employment records or access controls showing who managed the account;
Evidence of deletion, correction, clarification, or retraction;
The subpoena envelope, email headers, and proof of the date received; and
Evidence bearing on when the complainant or authorities discovered the publication.

Do not delete accounts, wipe devices, alter messages, coach witnesses, or manufacture a later “context.” Deletion can destroy favorable evidence and may create separate legal problems.

Evaluate every element and defense

A defense should address the prosecution’s proof element by element:

No defamatory meaning: Read fairly and in context, the words do not impute a discreditable fact.
No identification: The complainant was not named and the audience could not reasonably identify them.
No publication: No third person received or understood the material.
No authorship or participation: The prosecution cannot reliably connect the accused to the post or republication.
Account compromise or impersonation: Supported by technical and contemporaneous evidence, not merely asserted.
Privileged communication: The statement was made on a proper occasion, to an appropriate recipient, in performance of a duty or protection of a legitimate interest, and without abuse.
Fair report or fair comment: The publication accurately reported an official proceeding or honestly commented on adequately established facts involving public interest.
Truth, good motives, and justifiable ends: Applied only within the requirements of Article 361 and the particular jurisprudence.
Absence of actual malice: Especially important when qualified privilege, a public official, public figure, or public controversy is involved.
Prescription: More than one year elapsed after legally relevant discovery before a proceeding capable of interrupting prescription, supported by evidence.
No retroactive application: A publication made before Republic Act No. 10175 became effective cannot be punished as cyber libel solely because it remained accessible online. Whether a later edit or repost amounts to a new publication depends on the proven act.
Constitutional and procedural defects: These may include improper venue, legally insufficient allegations, inadmissible electronic evidence, unlawful search or disclosure, or denial of a meaningful opportunity to respond.

Do not combine incompatible factual defenses carelessly—for example, “I did not write it” and “everything I wrote was true”—without explaining the alternative basis. A counter-affidavit should be accurate, coherent, and supported by attachments.

Penalties and civil exposure

Article 355 of the Revised Penal Code, as amended by Republic Act No. 10951, punishes traditional written libel with imprisonment, a fine of ₱40,000 to ₱1,200,000, or both. Because Republic Act No. 10175 increases by one degree the penalty for crimes committed through information and communications technologies, cyber libel carries potentially more serious imprisonment exposure than traditional libel.

The precise sentencing range depends on the governing penalty provisions, modifying circumstances, and applicable jurisprudence. Courts have been encouraged to consider fines instead of imprisonment in appropriate libel cases, but a fine-only sentence is not guaranteed.

A criminal prosecution may also carry civil liability for proven injury. Damages are not automatic in whatever amount the complainant demands; causation, legal basis, and the nature and amount of damages must be established.

For the same defamatory act, the government cannot obtain separate punishments for both ordinary libel and cyber libel merely by relying on Section 7 of the Cybercrime Act. In Disini, the Supreme Court invalidated Section 7 to that extent because of double-jeopardy concerns.

Common mistakes

Waiting for the post to “go viral” before preserving it or filing;
Treating the upload date as conclusive proof of the discovery date;
Filing against everyone who liked, followed, or received the post;
Using only cropped screenshots without a URL, context, source file, or authenticating witness;
Assuming anonymity prevents identification;
Believing that deleting a post erases criminal or civil exposure;
Repeating the accusation publicly while announcing an intended lawsuit;
Treating truth alone as an automatic defense;
Assuming every criticism of a public official is protected;
Ignoring a subpoena because it came by email, courier, or through another person;
Missing the response date while waiting for a lawyer;
Contacting witnesses or the opposing party in a threatening manner;
Filing in a convenient but legally unsupported venue; and
Confusing an NBI or PNP report, a prosecutor’s complaint, and a court Information—they are different procedural stages.

When legal help is urgent

Seek a Philippine lawyer immediately if:

The one-year period from discovery is approaching;
The author is anonymous or platform data may disappear;
A subpoena gives a near deadline for a counter-affidavit;
An Information, arrest warrant, hold-departure order, or bail issue is involved;
Police ask to search a device or obtain passwords, account access, or consent;
The publication involves a journalist, public official, election, company, school, workplace, or ongoing court proceeding;
Several people shared or edited the content;
The post also contains threats, intimate images, personal data, harassment, fraud allegations, or accusations involving a child; or
A settlement, apology, or retraction is being discussed while criminal or civil periods continue to run.

Persons who cannot afford private counsel may ask the Public Attorney’s Office about eligibility. Cybercrime reports may be brought to the PNP Anti-Cybercrime Group or the NBI, but confirm the appropriate unit and filing requirements directly.

Frequently asked questions

Can I file a case because somebody insulted me online?

Not every insult is cyber libel. The words must satisfy the legal elements of libel, including a defamatory imputation, identification, publication to a third person, and the required malice. Depending on the words and manner, another offense—or no criminal offense—may be involved.

Is a screenshot enough?

It may help establish a case, but its authenticity, completeness, source, and connection to the accused can be challenged. Preserve the original electronic record, URL, context, metadata, device, and witnesses whenever possible.

Can a private chat be cyber libel?

It can be only if the publication requirement is met. A message sent solely to the person allegedly defamed ordinarily has not been communicated to a third person. A group chat, copied email, or forwarded message may satisfy publication, depending on the evidence.

Are likes and reactions punishable as cyber libel?

Not automatically. Disini rejected cyber-libel liability based merely on the Cybercrime Act’s general aiding-or-abetting provision. Liability must rest on the person’s own legally punishable conduct, such as authoring or independently republishing defamatory material.

Does sharing a post make me liable?

A bare platform action and an independent republication are not necessarily the same. Added captions, endorsements, edits, or repetition of the accusation may materially change the analysis. Preserve exactly what was shared and what, if anything, was added.

Does deleting or apologizing end the case?

No. Deletion, correction, apology, or retraction may affect harm, malice, damages, settlement discussions, or sentencing, but it does not automatically extinguish criminal liability. Do not issue an admission or settlement document without understanding its consequences.

Can the complainant file years after the post appeared?

The controlling period is one year from discovery by the offended party, authorities, or their agents—not automatically from upload. The claimed discovery date may be contested with evidence. A distinct later republication can also require separate analysis.

Can I be charged with both libel and cyber libel for the same post?

Separate punishment for both offenses based on the same act is constitutionally prohibited under Disini. Different publications or distinct acts may present a different question.

Where will the case be tried?

Cyber libel is prosecuted in the Regional Trial Court with proper territorial jurisdiction, subject to the Rule on Cybercrime Warrants and the judiciary’s designation of cybercrime courts. The alleged facts must support venue; nationwide internet availability alone should not be treated as a substitute for proper venue analysis.

Official legal sources

This article provides general legal information, not advice for a particular case. Cyber libel outcomes depend heavily on the exact words, publication history, parties, evidence, venue, and procedural record. Consult a Philippine lawyer promptly for advice based on the actual documents. Law and official sources were checked as of September 11, 2026.