Quick answer

A cyber libel case in the Philippines generally begins with a verified complaint-affidavit filed with the prosecutor’s office that has territorial authority over the offense. The complainant must present admissible evidence showing a defamatory online statement, publication to another person, identification of the complainant, malice, and the respondent’s responsibility for publishing it through a computer system or information and communications technology.

If you receive a subpoena, do not ignore it. Obtain the complete complaint and attachments, preserve your account and device records, and submit a properly sworn counter-affidavit within the deadline stated in the subpoena. Defenses may include lack of authorship, publication, identification, defamatory meaning, or malice; truth accompanied by good motives and justifiable ends; privileged communication; protected fair comment; prescription; or improper venue. The applicable defense depends heavily on the exact words, context, audience, account records, and supporting documents.

Cyber libel generally prescribes one year from discovery of the allegedly defamatory material by the offended party, the authorities, or their agents—not automatically from the posting date. Filing a complaint or information interrupts prescription. Because both discovery and interruption can involve disputed facts, anyone close to the one-year limit should obtain legal advice immediately.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the prohibited act is committed through a computer system or a similar future means.

Under Article 353 of the Revised Penal Code, libel is a public and malicious imputation of:

A crime;
A vice or defect, whether real or imaginary;
An act, omission, condition, status, or circumstance tending to cause dishonor, discredit, or contempt of a natural or juridical person; or
A matter tending to blacken the memory of a deceased person.

A prosecutor or court ordinarily examines whether the evidence establishes:

A defamatory imputation. The statement must be capable, in its ordinary meaning and context, of injuring reputation. Mere unpleasantness, criticism, or insult is not automatically libel.
Publication. At least one person other than the person defamed must have received or understood the statement.
Identification. The complainant must be named or sufficiently identifiable from the words and surrounding circumstances.
Malice. Malice may be presumed for defamatory imputations, but the presumption is subject to statutory privileges and constitutional protections.
Responsibility for the publication. The evidence must connect the respondent—not merely an account name—to the creation or publication of the material.
Use of a computer system or ICT. Examples may include a social-media post, website article, online forum entry, email sent to third persons, or internet-based message.

The complete post matters. Courts consider wording, images, captions, hashtags, hyperlinks, the surrounding discussion, the intended audience, and whether an apparent statement of opinion implies undisclosed defamatory facts.

Who may be prosecuted?

In Disini v. Secretary of Justice, the Supreme Court sustained cyber libel as applied to the original author of the online statement. It rejected application of the law’s aiding-and-abetting provision to people who merely receive a post or react to it through functions such as liking, sharing, or commenting, because applying that provision to online libel would create unconstitutional uncertainty.

That does not make every repost risk-free. A person who supplies a new defamatory caption, adopts the accusation as their own, materially changes the content, or independently republishes it may be evaluated as an author or publisher on the particular facts. Liability should not be assumed solely from a platform label such as “shared.”

An account holder is also not automatically the author. Impersonation, account compromise, shared access, scheduled posts, page administrators, and device access may all affect attribution.

The one-year prescription period

The Supreme Court’s controlling ruling in Causing v. People confirms that cyber libel prescribes in one year under Articles 90 and 91 of the Revised Penal Code.

The important rules are:

The period begins when the allegedly libelous material is actually discovered by the offended party, the authorities, or their agents.
The law does not presume that a person discovered a post on the day it appeared online merely because it was publicly accessible.
The filing of a complaint or information interrupts prescription.
The period may begin running again if proceedings terminate without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused.
Prescription does not run while the offender is absent from the Philippines.
A bare posting date may not establish the discovery date. Emails, messages, reports, screenshots, affidavits, and platform notifications may be relevant.

A defendant raising prescription must be prepared to prove the necessary dates. If those dates are disputed, the issue may require evidence at trial and may not be resolved solely through a motion to quash.

A separate civil action for injury to rights through defamation is also generally subject to a one-year period under Article 1147 of the Civil Code. Different rules may govern how a civil claim is joined with, reserved from, or filed separately from the criminal case.

How to file a cyber libel complaint

1. Preserve the online material before contacting the author

Save more than a cropped screenshot. Preserve:

The full post, article, thread, or message;
The complete URL and visible account or page name;
Date and time displayed by the platform, including the time zone if available;
The profile page and identifying information;
Comments, shares, quoted reposts, edits, and surrounding conversation;
Images, video, audio, attachments, and linked pages;
Notifications showing when you first learned of the publication;
Messages from people who received or understood the statement;
Any correction, retraction, admission, or threat;
Original electronic files and devices; and
A written timeline identifying who discovered what, when, and how.

Screenshots can be challenged as incomplete, altered, or unauthenticated. When practicable, make a screen recording showing navigation from the account or page to the content, export available platform data, and have a person with personal knowledge document how the copy was obtained. Do not edit the original files.

2. Identify the precise defamatory statement

Quote the exact words in the complaint-affidavit and attach the complete publication. Explain:

What the statement communicates;
Why it concerns you even if your name is omitted;
Who received or understood it;
Why it is false or otherwise unlawful;
What circumstances support malice; and
How the evidence connects the respondent to its publication.

Avoid treating an entire page or lengthy exchange as a single accusation. A prosecutor must be able to identify the specific actionable imputation.

3. Gather proof addressing foreseeable defenses

Depending on the accusation, useful records may include:

Government certificates or official records;
Contracts, receipts, correspondence, and transaction histories;
Employment, school, professional, or corporate records;
Statements from recipients who recognized you;
Prior demands, threats, or repeated publications;
Evidence that the publisher knew contrary facts; and
Documents showing the date of discovery.

Do not obtain private account data by hacking, impersonation, or unauthorized access. Investigators may need lawful process to obtain subscriber or traffic data from a platform or service provider.

4. Prepare a sworn complaint-affidavit

The affidavit should be based on personal knowledge and should ordinarily state:

The complainant’s and respondent’s identifying details, to the extent known;
The exact publication and relevant dates;
The discovery date and how discovery occurred;
The facts supporting every element;
The basis for the chosen venue;
The documents and witnesses relied upon; and
A clear request for investigation and prosecution.

Each attachment should be identified and explained. An affidavit that merely states conclusions such as “the respondent committed cyber libel” is weaker than one that lays out admissible facts.

5. File with the proper prosecution office

The complaint is ordinarily filed with the appropriate city or provincial prosecutor. Cybercrime complaints may also be investigated with assistance from the Philippine National Police Anti-Cybercrime Group or the National Bureau of Investigation Cybercrime Division, but an investigative report is not a substitute for satisfying the prosecutor’s evidentiary requirements.

Venue in criminal cases is jurisdictional. Under the Supreme Court’s Rule on Cybercrime Warrants, cybercrime actions generally belong in the Regional Trial Court with territorial jurisdiction over the place where the offense or an element occurred, or where part of the computer system used in committing the offense is situated. Libel also has special venue considerations under Article 360 of the Revised Penal Code.

Online accessibility in a city does not, by itself, necessarily make that city a proper venue. The complaint and eventual Information must allege facts supporting venue. Because the interaction between cybercrime venue rules and libel’s special venue provisions can be fact-sensitive, confirm the correct prosecution office before filing.

Filing practices—including paper copies, electronic filing, appointment systems, and required forms—may differ among prosecution offices. Verify the current local instructions directly with the office rather than relying on an unofficial online form.

6. Participate in preliminary investigation

The 2024 DOJ–National Prosecution Service Rules on Preliminary Investigations and Inquest Proceedings require prosecutors to determine whether the evidence establishes a prima facie case with reasonable certainty of conviction.

The respondent is normally served with a subpoena and copies of the complaint and supporting evidence. The parties may be allowed to submit counter-affidavits and further responsive affidavits. Follow every deadline and instruction in the subpoena or prosecutor’s order; do not assume that informal discussions extend a filing date.

The prosecutor may dismiss the complaint or find sufficient basis to file an Information in the proper Regional Trial Court. Available review or reconsideration procedures have short deadlines, so read the resolution and proof of service immediately.

How to defend against a complaint

Act as soon as you receive a subpoena

Record the date and method of service. Check that the packet includes the complaint-affidavit and its attachments. If anything is missing, promptly request a complete copy in writing and preserve proof of that request.

Do not contact or pressure the complainant or witnesses. Do not post a public “defense” that repeats the accusation, reveals confidential material, threatens retaliation, or creates additional evidence.

Preserve—not erase—the account and device records

Deleting a post may reduce continuing exposure but can also destroy evidence needed to establish context, authorship, editing history, unauthorized access, or the original publication date. Before altering anything, preserve:

Account login and security records;
Emails announcing logins or password changes;
Platform data exports;
Drafts and source materials;
Original images and metadata;
Devices used by possible account administrators;
Messages concerning who wrote, approved, or posted the content; and
The exact version originally published.

A correction or removal is not automatically an admission, but its wording and timing can matter. Obtain advice before issuing a retraction if a complaint or demand has already arrived.

Prepare a fact-specific counter-affidavit

Address each element and each exhibit. Possible defenses include the following.

The respondent did not author or publish the material

Present evidence of account compromise, impersonation, administrator roles, device access, or another author where genuinely applicable. A simple denial may carry little weight against platform records or admissions.

The complainant was not identifiable

Explain why an ordinary reader familiar with the circumstances could not reasonably identify the complainant. Omitting a name is not enough if the details clearly point to one person.

There was no publication to a third person

A communication delivered only to the person discussed may fail the publication element. Group messages, copied emails, shared accounts, and persons who saw a screen may still establish publication.

The statement was not defamatory in context

Humor, rhetorical exaggeration, criticism, or an opinion that does not assert or imply defamatory facts may be protected. Merely labeling a factual accusation as “opinion” does not control.

Truth, good motives, and justifiable ends

Article 361 of the Revised Penal Code makes truth relevant, but truth alone is not a universal defense in every criminal-libel setting. The accused generally must also show that the matter was published with good motives and for justifiable ends. Documentary support, verification efforts, sources, and the public or legitimate purpose of the publication may therefore be important.

Privileged communication

Article 354 recognizes exceptions to the presumption of malice, including:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts.

Qualified privilege is not absolute. It can be defeated by proof of actual malice, excessive publication, unnecessary defamatory language, or lack of good faith. The communication must remain reasonably connected to the duty or protected occasion.

Fair comment on matters of public interest

Constitutional protection for speech and press is especially important when criticism concerns public officials, public figures, or matters of public concern. Opinions based on true or substantially accurate facts may receive protection. False factual assertions and statements made with knowledge of falsity or reckless disregard may not.

A person’s public status does not erase their protection from defamation. The applicable standard depends on who the complainant is, what the publication concerns, and the evidence of actual malice.

Prescription

Identify evidence showing when the complainant, authorities, or their agents actually discovered the publication and when the complaint was filed. Do not rely only on the post’s timestamp. The Supreme Court’s 2026 resolution in Causing confirms that discovery is a factual matter and is not presumed to occur upon posting.

Improper venue

Examine the complaint and, if already filed in court, the Information. They should allege facts establishing that the offense belongs in that territorial jurisdiction. Being able to access a post in a particular city does not necessarily establish venue there.

Publication, editing, and later online activity

A single article should not automatically produce a new cyber libel offense every time another reader opens the same unchanged page. However, later activity may present a different question if it constitutes a genuine republication.

In Keng v. Ressa, the Supreme Court treated a substantial update to an online article after the Cybercrime Prevention Act took effect as republication. A purely technical correction may not have the same effect, but changing content, reviving an accusation for a new audience, or adding new defamatory matter can create material risk.

Before editing disputed content:

Preserve the original version and change history;
Identify exactly what will be changed;
Avoid adding a new accusatory caption or commentary;
Consider a clearly dated correction instead of silently rewriting history; and
Obtain legal advice if prescription or the law’s effective date is at issue.

Penalties and civil liability

Article 355, as amended by the Revised Penal Code amendments under Republic Act No. 10951, provides for ordinary written libel a penalty of prisión correccional in its minimum and medium periods, a fine of ₱40,000 to ₱1,200,000, or both, in addition to possible civil liability.

Section 6 of the Cybercrime Prevention Act generally requires a penalty one degree higher when a Revised Penal Code offense is committed through ICT. The penalty actually imposable in a cyber libel case depends on the charge, applicable penalty rules, modifying circumstances, and the court’s lawful choice between or combination of imprisonment and fine. It should not be computed from a social-media summary.

Damages are not automatic merely because a complaint is filed. The claimant must establish the legal and factual basis for the civil award. The civil action arising from the offense is generally deemed included in the criminal action unless it is waived, reserved when the rules permit, or previously instituted.

An accused is presumed innocent, and conviction requires proof beyond reasonable doubt. A prosecutor’s finding that an Information should be filed is not a conviction.

Evidence both sides should preserve

For the complainant

Complete copies of every relevant publication;
URLs, account details, timestamps, and time zones;
Proof of the date and manner of discovery;
Witnesses who saw the material and identified the person discussed;
Records disproving the imputation;
Messages or admissions connecting the respondent to the account;
Prior communications showing knowledge, hostility, or deliberate falsity; and
Proof of reputational or financial injury, if damages are claimed.

For the respondent

Full context, including preceding and following posts;
Drafts, research notes, sources, and fact-checking records;
Documents supporting truth or substantial accuracy;
Records supporting good motives, a duty to communicate, or public interest;
Account-administrator and device-access information;
Security alerts and evidence of unauthorized access;
Publication, editing, and takedown histories;
Evidence of the complainant’s discovery date; and
Proof relating to venue.

Keep originals. Work from duplicates, document how evidence was collected, and avoid changing metadata.

Common mistakes

Waiting because the post is “still online.” Prescription is tied to discovery, not continuing availability alone.
Filing in the most convenient city without establishing lawful venue.
Submitting isolated screenshots without URLs, context, authentication, or proof of publication.
Treating falsity or hurt feelings as substitutes for proving every element.
Assuming every criticism of a public official is automatically protected—or automatically criminal.
Assuming truth alone always ends a criminal-libel case.
Believing quotation marks, “allegedly,” emojis, or “in my opinion” automatically prevent liability.
Naming every liker, follower, group member, or page administrator without evidence of authorship or publication.
Ignoring a prosecutor’s subpoena because it is not yet a court case.
Filing an unsworn narrative instead of a properly executed affidavit with identified attachments.
Deleting posts, messages, accounts, or devices without first preserving potentially exculpatory evidence.
Repeating the accusation in a demand letter, public response, or press statement.
Missing a prosecutor’s deadline while waiting for settlement discussions.
Treating a platform takedown as proof of guilt or a refusal to remove content as proof of malice.

When legal help is urgent

Consult a Philippine lawyer promptly when:

The one-year prescription period may be close;
A subpoena, prosecutor’s resolution, Information, warrant, or court order has been received;
The respondent is unidentified and provider data may need lawful preservation;
The post has been deleted, edited, or republished;
The publication involves journalism, whistleblowing, workplace reporting, public officials, or confidential records;
Several people or jurisdictions are involved;
The account may have been compromised or impersonated;
There are threats, stalking, doxxing, or immediate safety concerns in addition to defamation;
A settlement demands an admission, public apology, payment, or broad confidentiality waiver; or
The contemplated response may itself repeat or expand the alleged defamation.

For immediate threats to life or safety, contact local law enforcement or emergency services. Cyber libel procedures should not delay reporting a separate threat, extortion attempt, unauthorized account access, or other urgent offense.

Frequently asked questions

Can I file because a post is false and embarrassing?

Not on those facts alone. The evidence must satisfy all elements of cyber libel, including defamatory imputation, publication, identification, malice where required, authorship or responsibility, and use of ICT. Privilege and constitutional protections may apply.

Must the post name me?

No. Identification may be established if people who know the surrounding circumstances reasonably understood that the statement referred to you. That usually requires evidence, not assumption.

Is a private message cyber libel?

A message sent only to the person discussed may lack publication to a third person. A group chat, copied message, forwarded email, or message shown to another person may be different.

Are likes and shares automatically criminal?

No. Disini rejected automatic aiding-and-abetting liability for ordinary online reactions to cyber libel. A person who adds and publishes their own defamatory accusation, however, may face separate scrutiny as an author or publisher.

Does deleting the post end the case?

No. Deletion does not erase a completed publication or necessarily prevent recovery of the evidence. Preserve the material and obtain advice before making changes.

Is sending a demand letter required?

No general rule makes a demand or takedown request an element of cyber libel. A carefully drafted demand may help preserve evidence or seek a correction, but it does not replace timely filing and may create problems if it contains threats or repeats defamatory matter.

Can the police decide that the respondent is guilty?

No. Investigators gather evidence, prosecutors decide whether the required basis exists to file an Information, and only a court may convict after due process and proof beyond reasonable doubt.

Is the deadline one year from posting?

Not necessarily. Under Causing, the one-year period begins upon discovery by the offended party, authorities, or their agents. The posting date and discovery date may coincide, but the law does not automatically presume that they do.

Can a case be filed anywhere the post was viewed?

Not automatically. Venue is jurisdictional. The complainant must establish a statutory and factual connection between the offense and the chosen prosecution office and court.

Can the parties settle?

They may discuss correction, retraction, apology, or compensation, but criminal prosecution is brought in the name of the People of the Philippines. Private settlement does not invariably compel dismissal once public prosecution is involved. Any settlement should be reviewed for its effect on criminal and civil claims.

Official legal sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Cyber libel disputes are highly dependent on the exact publication, evidence, dates, venue, and procedural record. Official sources were checked for currency on 15 September 2026.