How to File or Defend a Cyber Libel Case

Quick answer

A cyber libel case in the Philippines usually involves a defamatory statement published through Facebook, Messenger, X, TikTok, YouTube, a website, email, or another computer system. To file a case, the complainant must promptly preserve the online evidence and submit a properly supported complaint-affidavit for preliminary investigation, usually to the appropriate city or provincial prosecutor’s office. The National Bureau of Investigation or Philippine National Police may first investigate when account identification, data preservation, or digital forensics is needed.

To defend a case, do not ignore a subpoena. Obtain the complete complaint and attachments, preserve the original post and its context, and submit a sworn counter-affidavit within the period stated in the subpoena. Possible defenses include failure to prove authorship, identification, publication, defamatory meaning, or malice; truth combined with good motives and justifiable ends; privileged communication; fair comment on matters of public interest; prescription; improper venue; and constitutional protections for speech about public officials or public figures.

Cyber libel is a criminal charge carrying possible imprisonment, a fine, and civil damages. Both sides should obtain Philippine counsel early, particularly when the one-year prescriptive period may be close, a subpoena has arrived, the author is anonymous, or an information or arrest warrant has already been issued.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 punishes libel, as defined in Article 355 of the Revised Penal Code, when committed through a computer system or similar means.

In practical terms, the prosecution must establish all of the following beyond reasonable doubt:

1. A defamatory imputation. The statement attributes to a person a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose that person to contempt.

2. Publication to another person. Someone other than the person defamed received, read, watched, or heard the material. A private message sent only to the person concerned may lack this element, although other offenses may apply.

3. Identification of the offended person. The person need not always be named. It is enough if readers familiar with the circumstances could reasonably identify that person.

4. Malice. Article 354 generally presumes malice from a defamatory imputation, even if the statement is true, unless the communication is privileged. Different constitutional rules apply when the statement concerns a public official, public figure, or matter of public concern.

5. Use of a computer system or similar technology. This distinguishes cyber libel from conventional printed or broadcast libel.

6. Responsibility for the publication. The prosecution must connect the accused to the account and the actual publication. A profile name, screenshot, or allegation that “only the accused could have posted it” does not automatically prove authorship.

The words must be assessed in their full setting, including the language used, images, captions, surrounding conversation, audience, and ordinary meaning. Insults, criticism, satire, opinion, and harsh language are not automatically criminal libel. The decisive question is whether the communication, taken as a whole, makes a defamatory factual imputation and satisfies every other element.

Who may be liable?

The principal focus is the person who authored or directly published the defamatory online material. In Disini v. Secretary of Justice, the Supreme Court upheld the basic cyber-libel provision but limited its application to the original author. It rejected automatic criminal liability for people who merely receive a post or react to, comment on, or share it.

That ruling is not permission to add new defamatory accusations while sharing another person’s content. A person who writes a separate defamatory caption, comment, video, or post may be treated as the author of that new publication, depending on the evidence.

A website owner, page administrator, editor, employer, organization officer, or person whose device was used is not automatically criminally liable. The prosecution must prove the individual’s participation and the applicable basis of responsibility. Corporate liability under Section 9 of Republic Act No. 10175 also requires its own statutory conditions.

Filing a cyber libel complaint

1. Act promptly

The Supreme Court has ruled that cyber libel prescribes in one year from its discovery by the offended party or the authorities, unless the publication was already known earlier. The controlling facts may include when the complainant actually discovered the post, when authorities learned of it, whether the complaint was filed within the period, and whether a legally sufficient proceeding interrupted prescription. See the Supreme Court’s decision in Causing v. People, G.R. No. 258524 and its official explanation of the one-year rule.

Do not assume that a post’s continued availability restarts the period every day. Likewise, do not assume that an edit, repost, or later upload is legally a new publication without examining exactly what was done and by whom. Prescription and republication are fact-sensitive issues requiring prompt legal review.

2. Preserve the evidence before requesting removal

Save more than a cropped screenshot. Preserve:

• the complete post, video, article, comment, or message;
• the URL or direct link;
• the account name, profile URL, user ID if visible, and profile information;
• the date and time displayed, including the device’s time zone;
• the entire thread and surrounding posts;
• reactions, comments, shares, view information, and other signs that third persons received it;
• screen recordings showing how the material was accessed;
• downloaded files in their original format;
• notification emails and platform messages;
• names and contact details of people who saw the publication;
• messages or records relevant to motive, truth, falsity, privilege, or identity;
• records showing when the complainant first discovered the material; and
• proof of resulting harm, such as lost work, cancelled transactions, medical records, or relevant communications.

Keep the original device and unedited files. Do not annotate or overwrite the only copy. Create backups and record who collected each item, when it was collected, and how it was stored. A lawyer or investigator may recommend notarized affidavits, metadata collection, forensic imaging, or other authentication measures.

3. Identify the proper respondent

Use the person’s full name and address if known. If the account is anonymous or fake, preserve all available identifiers and consult the NBI Cybercrime Division or PNP Anti-Cybercrime Group. Account ownership may require lawful investigation and court-authorized disclosure; a private person ordinarily cannot compel a platform or telecommunications provider to disclose protected subscriber or traffic data.

Republic Act No. 10175 establishes specific preservation, disclosure, search, seizure, and examination procedures. Disclosure of protected computer data generally requires lawful process, and evidence obtained outside the authority of a valid warrant may be inadmissible. A complainant should not hack an account, impersonate another person, install spyware, or unlawfully record private communications to obtain evidence.

4. Prepare the complaint-affidavit

The complaint-affidavit should state facts based on personal knowledge, in chronological order. It should ordinarily identify:

• the complainant and respondent;
• the exact words, images, audio, or video alleged to be defamatory;
• the post’s URL, account, platform, and publication date;
• why the material refers to the complainant;
• who other than the complainant saw or received it;
• how the respondent is connected to the account and publication;
• why the imputation is false, malicious, or unprivileged;
• when and how the complainant discovered it;
• facts establishing the proper place of filing; and
• the supporting documents and witnesses.

Attach legible, organized exhibits and sworn witness statements where appropriate. Translate material written in a language the investigating office may require to be translated, while preserving the original. Do not exaggerate, omit material context, or describe a disputed inference as an established fact.

Under Rule 112 of the Rules of Criminal Procedure, complaints for preliminary investigation are supported by the complainant’s and witnesses’ affidavits and other evidence, with sufficient copies for the respondents and the investigating office. Local filing requirements and current prosecution-service procedures should be confirmed with the receiving prosecutor’s office.

5. File with the proper office

A complaint may generally be filed for preliminary investigation with the appropriate Office of the City Prosecutor or Office of the Provincial Prosecutor. A complainant may instead first seek technical investigation from the NBI or PNP, which are the law-enforcement authorities designated by Section 10 of Republic Act No. 10175.

Because cyber libel is within Regional Trial Court jurisdiction, venue must be carefully established. Section 21 of Republic Act No. 10175 addresses Philippine jurisdiction, including cases in which an element occurred in the Philippines, a Philippine computer system was used wholly or partly, or damage was caused to a person in the Philippines. That broad jurisdictional provision does not eliminate the need to prove venue in the particular criminal case. Article 360 of the Revised Penal Code and relevant Supreme Court rulings may also affect where the case may be instituted.

Do not select an office merely because it is convenient. The complaint should allege concrete facts connecting the offense to the place of filing. Improper venue can be fatal because venue in a criminal case is jurisdictional.

6. Participate in the preliminary investigation

If the prosecutor finds the complaint sufficient in form and substance, the respondent is ordinarily subpoenaed and given copies of the complaint and evidence. The respondent may file a counter-affidavit and supporting evidence within the period specified in the subpoena. The prosecutor may call a clarificatory hearing but a full trial is not conducted at this stage.

The prosecutor determines whether the evidence meets the governing standard for filing an information in court. A finding favorable to either party may be subject to the available review procedures and deadlines. The applicable remedy depends on which prosecution office acted and the nature of the resolution, so legal advice should be obtained immediately upon receipt.

How to defend against a cyber libel complaint

1. Do not ignore the subpoena

Record the date and manner of service. Read the subpoena and all attachments immediately. The deadline stated in it is critical. Failure to submit a counter-affidavit can cause the prosecutor to resolve the case on the complainant’s evidence.

Do not contact, threaten, shame, or pressure the complainant or witnesses. Do not post a running commentary about the case. New statements may become evidence or create separate legal problems.

2. Preserve your own evidence

Do not delete the post, account, chat history, device data, or drafts merely because a complaint has been threatened. Deletion may destroy favorable context and may be portrayed as concealment. Preserve:

• the complete post and thread;
• drafts and source materials;
• links, records, and documents relied upon;
• communications with editors, sources, clients, or page administrators;
• account-access and security records;
• evidence that another person controlled or compromised the account;
• the exact publication and editing history;
• facts supporting truth, public interest, good faith, or privilege; and
• evidence showing when the complainant discovered the material.

A lawyer can advise whether content should later be removed or corrected without compromising evidence or making an unnecessary admission.

3. Require proof of every element

A sound defense examines each element separately:

No defamatory imputation. The words may be rhetorical exaggeration, satire, criticism, or opinion rather than an accusation of fact. Context matters.

No identification. The complainant may not have been named or reasonably identifiable to readers.

No publication. The material may not have reached anyone other than the complainant, or the prosecution may lack competent proof that another person received it.

No authorship or account attribution. Ownership of a device or appearance of a name on a profile does not conclusively prove who created the post. Account compromise, shared access, impersonation, automated posting, or unreliable screenshots may create substantial evidentiary issues.

No malice or constitutionally required actual malice. Privileged communications are not subject to the ordinary presumption of malice. When speech concerns a public official’s conduct, a public figure, or a matter of public concern, the prosecution may need to prove actual malice—knowledge of falsity or reckless disregard of whether the statement was false—under the applicable constitutional doctrine.

Truth, good motives, and justifiable ends. Article 361 permits proof of truth in the circumstances recognized by law, but truth alone should not be treated as an automatic defense in every criminal-libel case. The defendant may also need to establish good motives and justifiable ends.

Privileged communication. Article 354 recognizes qualified privileges, including a private communication made in the performance of a legal, moral, or social duty and a fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts. Publication beyond the people who have a corresponding interest may defeat a claim of qualified privilege.

Fair comment. Good-faith criticism or commentary on matters of public interest may be protected, particularly when the underlying facts are disclosed or established. Fabricated factual accusations are not converted into protected opinion merely by adding “I think,” “allegedly,” or a question mark.

Prescription. If more than one year passed from discovery before the legally relevant filing or interruption, prescription may be decisive under Causing. The precise dates and procedural acts must be documented.

Improper venue or lack of jurisdictional facts. The complaint and evidence must establish why the selected prosecutor and eventual court are proper.

Material was published before the law took effect. The cyber-libel provision cannot constitutionally punish an online publication made before Republic Act No. 10175 took effect. A later, legally distinct republication may present a different issue, but continued online availability by itself should not be casually equated with a new criminal act.

4. Submit a focused counter-affidavit

The counter-affidavit should answer the complaint paragraph by paragraph where practical. It should identify legal and factual defects without unnecessary admissions. Attach authenticated documents and sworn statements supporting the defense.

Do not submit fabricated screenshots, backdated records, edited conversations presented as complete, or affidavits containing matters the witness does not personally know. False sworn statements can create additional criminal exposure.

5. Prepare for court proceedings

If the prosecutor files an information, the RTC independently evaluates probable cause for issuing an arrest warrant. The accused should coordinate immediately with counsel regarding bail, voluntary appearance where appropriate, arraignment, pretrial, and preservation or examination of digital evidence.

Before conviction, bail is generally a matter of right for an offense not punishable by death, reclusion perpetua, or life imprisonment, but the court sets the amount and conditions. Do not rely on informal assurances that no warrant will issue.

Penalties and civil liability

Article 355 of the Revised Penal Code, as amended by Republic Act No. 10951, punishes conventional written libel with imprisonment, a fine ranging from ₱40,000 to ₱1,200,000, or both, in addition to any civil action.

For cyber libel, Section 6 of Republic Act No. 10175 raises the penalty by one degree. The corresponding imprisonment range may extend from prisión correccional maximum to prisión mayor minimum—four years, two months and one day to eight years—subject to the Indeterminate Sentence Law and the circumstances proved in the particular case. A court may also impose a fine and civil damages.

The Supreme Court held in Disini that the same defamatory act cannot be punished separately as both ordinary libel and cyber libel in a manner violating the constitutional protection against double jeopardy.

The civil claim arising from the alleged offense is generally deemed included in the criminal case unless it is waived, reserved, or previously filed under the Rules of Criminal Procedure. A separate civil action may also raise issues under Article 33 and other provisions of the Civil Code. The correct route, recoverable damages, filing fees, and effect of a reservation should be assessed with counsel before filing.

Corrections, apologies, and takedown requests

A prompt correction, apology, clarification, or removal may reduce harm and help resolve a dispute, but it does not automatically erase a completed offense or stop prescription. Its legal effect depends on timing, wording, sincerity, and the surrounding evidence.

A complainant considering a demand letter should avoid threatening unlawful exposure, violence, or unrelated criminal accusations. A respondent should avoid publishing an “apology” that repeats the accusation or admits disputed elements without advice.

If immediate removal is important, report the content through the platform’s official process while preserving evidence first. A private takedown request, platform report, and criminal complaint serve different purposes. Neither the DOJ nor a private complainant may simply bypass the statutory and constitutional requirements governing restriction of online content and disclosure of user data.

Common mistakes

• Filing close to the prescriptive deadline without resolving the discovery date.
• Submitting cropped screenshots with no URL, context, date, or authentication.
• Assuming the account name alone proves authorship.
• Naming everyone who reacted to or shared a post despite Disini.
• Filing wherever the complainant prefers without proving venue.
• Treating every insult, negative review, or false statement as cyber libel.
• Assuming truth is always sufficient without addressing good motives, justifiable ends, and privilege.
• Deleting posts, devices, or account records after learning of a complaint.
• Missing the deadline in a prosecutor’s subpoena or resolution.
• Contacting witnesses to influence their accounts.
• Illegally accessing an account or obtaining private data.
• Posting new accusations about the dispute while proceedings are pending.
• Assuming a prosecutor’s dismissal or finding of probable cause is already a final court judgment.

When legal help is urgent

Seek a Philippine lawyer immediately if:

• the one-year prescriptive period is approaching;
• the accused or account holder is unknown;
• the content is being rapidly deleted, altered, or widely redistributed;
• a prosecutor’s subpoena or resolution has been received;
• police or NBI investigators request a device, password, statement, or consent to a search;
• a search warrant, cybercrime warrant, information, or arrest warrant has been issued;
• the publication concerns a journalist, public official, public figure, whistleblower, confidential source, or pending government proceeding;
• the post was made, hosted, or viewed across different countries or Philippine localities;
• a child, intimate image, threat, identity theft, doxxing, or personal-data breach is involved; or
• the dispute may involve other offenses or remedies besides cyber libel.

The Public Attorney’s Office may assist qualified indigent clients, subject to its governing rules, means-and-merit tests, and conflicts restrictions.

Frequently asked questions

Is a false Facebook post automatically cyber libel?

No. The prosecution must prove a defamatory imputation, identification, publication to a third person, the required malice, use of a computer system, and the accused’s responsibility for the publication. Venue and timely filing must also be established.

Can a true statement still result in liability?

Potentially. Philippine criminal-libel law does not treat truth as an unrestricted defense in every situation. Article 361 must be considered together with good motives, justifiable ends, privilege, privacy, and the particular subject of the accusation.

Is sharing or liking a defamatory post a crime?

Not automatically. Disini limited cyber-libel liability to the original author and rejected automatic liability for merely receiving, reacting to, commenting on, or sharing content. A person who adds a new defamatory accusation may face liability for that separate publication.

Can someone be charged over a private group chat?

Possibly. Publication can exist when a defamatory message reaches even one person other than the person defamed. The size or privacy setting of the group affects the evidence and context but does not by itself eliminate publication.

Can an anonymous account be sued or prosecuted?

Yes, if lawful investigation can identify the responsible person and the evidence proves the required elements. Platforms and service providers generally disclose protected data only through the appropriate legal process.

Does deleting the post end the case?

No. Deletion may limit further harm, but it does not necessarily undo an earlier publication. Preserve the evidence before making changes and obtain advice about takedown, correction, or settlement.

How long does a complainant have to file?

Under the Supreme Court’s current ruling in Causing, cyber libel prescribes in one year from discovery by the offended party or the authorities. Determining the discovery date and whether prescription was interrupted requires examination of the actual records.

Where is the case filed?

Ordinarily, the criminal complaint begins with the proper city or provincial prosecutor for preliminary investigation, while the RTC has jurisdiction over the offense. The correct locality depends on specific jurisdiction and venue facts, not convenience alone.

Can the parties settle?

They may discuss retraction, apology, correction, damages, or other terms. However, cyber libel is a public offense, so a private settlement or affidavit of desistance does not automatically require the prosecutor or court to dismiss the case. Any settlement should be documented with counsel and should not involve coercion or unlawful consideration.

Official legal sources

• Republic Act No. 10175—the Cybercrime Prevention Act of 2012
• Revised Penal Code, particularly Articles 353–362
• Republic Act No. 10951, which adjusted fines under the Revised Penal Code
• Disini v. Secretary of Justice, G.R. No. 203335, February 18, 2014
• Causing v. People, G.R. No. 258524
• Rules on Cybercrime Warrants, A.M. No. 17-11-03-SC
• Rules of Criminal Procedure, particularly Rules 110–114

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Cyber-libel questions depend heavily on the exact words, audience, evidence, dates, account records, status of the parties, and place of publication. Official sources were checked for current law and procedure as of September 19, 2026.