Quick answer

To file a cyber libel case in the Philippines, preserve the online publication and proof of authorship, identify when it was discovered, determine the proper venue, and file a sworn complaint with supporting evidence before the appropriate city or provincial prosecutor. Act quickly: under the Supreme Court’s controlling 2026 ruling, cyber libel generally prescribes one year from discovery of the allegedly defamatory material by the offended party, the authorities, or their agents.

To defend a case, do not ignore a subpoena, complaint, information, or warrant. Preserve the complete post and its context, secure account and device records, and submit a properly sworn counter-affidavit within the deadline stated in the subpoena. Possible defenses include failure to prove authorship, publication, identifiability, defamatory meaning, or malice; privileged communication; protected criticism involving public affairs; truth under the applicable legal conditions; improper venue; prescription; and non-retroactivity.

Cyber libel is not established merely because an online statement is insulting, embarrassing, inaccurate, or harmful. Every required element must be supported by admissible evidence.

What Philippine law treats as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the prohibited act is committed through a computer system or a similar technology. This may cover, depending on the evidence, material posted through social media, websites, blogs, online forums, messaging platforms, or other internet-based services.

The prosecution generally must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person to contempt.
Publication. The material was communicated to at least one person other than the person allegedly defamed.
Identifiability. The complainant was named or was reasonably identifiable from the words, images, circumstances, or other evidence.
Malice. The applicable form of malice must be established, taking account of any privilege and whether the subject is a public official or public figure.
Use of a computer system or information and communications technology.
Responsibility for the publication. The evidence must connect the respondent to the authorship, publication, or legally relevant conduct charged.

Courts examine the entire communication—not an isolated sentence alone—including its audience, tone, factual setting, accompanying images, thread, and surrounding posts.

Opinion, insult, and accusation are not automatically the same

Courts distinguish assertions of fact from rhetoric, satire, hyperbole, opinion, and fair comment. Calling someone unpleasant or expressing a harsh view does not automatically constitute cyber libel. An apparent “opinion,” however, may still be actionable if it reasonably implies undisclosed or false defamatory facts.

The question is not simply whether the complainant felt offended. It is whether the publication, read in context, satisfies every legal element of libel.

The complainant must be identifiable

Naming the complainant is the clearest form of identification, but it is not always necessary. Identification may be shown through descriptions, photographs, tags, workplace references, relationships, or testimony from readers who understood whom the post concerned.

A vague statement about a large or undefined group ordinarily presents an identification problem. The Supreme Court has explained that a person who is not named must still show an intrinsic reference, a sufficiently identifying description, or extrinsic evidence connecting the publication to that person. See Dela Cruz v. People.

Publication requires a third person

A private message sent only to the person criticized ordinarily lacks publication to a third person, although other offenses or civil claims may still be relevant. Publication may exist if the message was sent to a group, copied to another person, posted publicly, or intentionally communicated to someone else.

Who caused the third-party disclosure matters. If the complainant alone later showed a previously private message to others, that fact should be examined carefully rather than treated automatically as publication by the sender.

Malice, privilege, truth, and public-interest speech

Under Article 354 of the Revised Penal Code, defamatory imputations are generally presumed malicious unless good intention and justifiable motive are shown. That presumption does not operate in the same way when the communication is privileged or when constitutional protection for public-affairs speech applies.

Qualifiedly privileged communications

Examples recognized by Article 354 include:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without added comments or remarks, of a non-confidential judicial, legislative, or other official proceeding, official statement, or official act.

For a private duty-based communication, the speaker, recipient, purpose, audience, relevance, and good faith all matter. A complaint sent only to an employer, regulator, school official, professional body, or other person able to act may be treated differently from broadcasting the same accusation publicly.

Qualified privilege is not absolute immunity. It ordinarily removes the presumption of malice, leaving the complainant or prosecution to prove actual malice. Excessive publication, knowingly false assertions, irrelevant attacks, or evidence of spite may defeat the defense.

Statements relevant to judicial proceedings may receive stronger protection, but the scope of that protection depends on the proceeding and the statement’s relevance.

Truth is not always enough by itself

Article 361 permits proof of truth in criminal libel, but the general statutory rule also requires that the publication have been made with good motives and for justifiable ends. Special constitutional principles apply to criticism of public officials and matters of public concern.

A person relying on truth should preserve the source documents and witnesses that existed when the statement was made. Suspicion, hearsay, anonymous messages, or an unverified screenshot may not prove the truth of a serious accusation.

Public officials, public figures, and matters of public concern

Speech concerning public officers, public figures, official conduct, or public affairs receives greater constitutional protection. In criminal libel cases involving public figures—particularly public officers—the Supreme Court has required proof of actual malice, meaning knowledge that the statement was false or reckless disregard of whether it was false. The prosecution bears that burden. See Daquer v. People.

This protection is not a license to fabricate allegations. Recklessness may be inferred from evidence such as purposeful avoidance of obvious contrary facts, reliance on a source known to be unreliable, or publication of a grave accusation without a factual basis. Mere failure to conduct a perfect investigation is not automatically actual malice; the full record matters.

Original posts, shares, reactions, and comments

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author of an online statement. It invalidated the Cybercrime Prevention Act’s aiding-or-abetting provision as applied to people who merely receive a post and react through functions such as “Like,” “Comment,” or “Share.”

This does not mean every later user is immune. A person who writes a new defamatory caption, comment, or accusation may be treated as the author of that separate content. Liability therefore depends on the person’s own words and conduct—not merely on the platform button used.

Editing or materially changing an old publication may also raise republication issues. Preserve every available version and its timestamps.

Time limit: generally one year from discovery

The Supreme Court’s April 8, 2026 ruling in Causing v. People confirms that cyber libel generally prescribes in one year under Articles 90 and 91 of the Revised Penal Code.

The period runs from the day the alleged cyber libel was discovered by the offended party, the authorities, or their agents. Online publication does not create an automatic legal presumption that the offended party discovered the material on the date it was posted.

The filing of a complaint or information interrupts prescription as provided by Article 91. If the proceeding later terminates without conviction or acquittal, or is unjustifiably stopped for a reason not attributable to the accused, computation may resume. Absence of the offender from the Philippines may also affect the running of the period.

Because the discovery date and any interruption are evidentiary questions, preserve:

The first message, email, or conversation through which the complainant learned of the post;
The date the post was first viewed;
Reports made to the platform, police, NBI, employer, or lawyer;
Earlier screenshots or forwarded copies;
Complaint-filing receipts and docket details; and
Evidence bearing on whether the accused was outside the Philippines.

Do not assume that an old posting date automatically defeats the case—or that an allegation of late discovery automatically saves it. Prescription may require evidence and sometimes cannot be resolved from the face of the information alone.

How to file a cyber libel complaint

1. Preserve the evidence before seeking removal

Capture the complete page, not only the allegedly defamatory sentence. Preserve:

Full-page screenshots showing the account name, profile details, date, time, URL, caption, images, comments, and surrounding context;
A screen recording showing how the content is accessed;
The original URL and any platform-specific post or message identifier;
Original files rather than compressed copies forwarded through chat;
Emails or platform notifications;
Names and sworn statements of people who saw and understood the publication;
Evidence connecting the account to the suspected author;
Earlier and edited versions;
Proof of harm, such as cancelled engagements, employment records, client messages, or medical records; and
A written chronology of publication, discovery, reporting, and removal.

Keep the original device and do not alter files unnecessarily. Back up evidence securely. Screenshots can be challenged, so stronger corroboration—device records, admissions, witnesses, platform data, or properly obtained forensic evidence—may be necessary.

2. Avoid unlawful evidence-gathering

Do not hack an account, impersonate another person, secretly obtain protected credentials, fabricate a conversation, or publicly expose private personal information. Evidence gathered unlawfully may create separate criminal, civil, or data-privacy problems.

Platform or subscriber records may require lawful process. A lawyer, prosecutor, the National Bureau of Investigation, or the Philippine National Police Anti-Cybercrime Group can assess whether preservation requests, subpoenas, or cybercrime warrants are appropriate.

3. Evaluate every element before filing

Identify the exact words or media complained of and explain:

What they mean in context;
Why they are defamatory;
How third persons received them;
How the complainant was identified;
Why the respondent is believed to be responsible;
When and how the publication was discovered; and
Why privilege, fair report, public-interest commentary, or another defense does not apply.

A complaint that simply labels a post “fake,” “malicious,” or “cyber libel” without proving the elements is vulnerable to dismissal.

4. Determine the correct venue

Cybercrime venue is technical and fact-dependent. Under the Rule on Cybercrime Warrants, relevant connecting points can include where an element occurred, where a relevant computer system is situated, or where damage to a natural or juridical person took place. The resulting criminal case falls within the jurisdiction of the Regional Trial Court, with designated cybercrime courts handling covered cases.

Do not assume that a complaint may be filed wherever the post could be viewed. Before filing, establish the complainant’s residence or principal office, the place of publication or relevant system, the location of the alleged harm, and the respondent’s known address. Improper venue can be fatal.

5. Prepare and file the complaint-affidavit

The complaint ordinarily begins with the appropriate Office of the City Prosecutor or Office of the Provincial Prosecutor. A law-enforcement complaint with the NBI or PNP may assist with investigation and attribution, but it should not be assumed to replace filing with the proper prosecution office or to preserve the claim automatically.

The sworn complaint should contain facts within the affiant’s personal knowledge, identify the respondent and witnesses, attach the preserved publication and supporting records, and explain each element. Attachments should be organized, legible, authenticated where possible, and consistently labeled.

Cyber libel carries a maximum imprisonment exceeding six years because the Cybercrime Prevention Act raises the Revised Penal Code penalty by one degree. It therefore ordinarily undergoes a regular preliminary investigation under the 2024 DOJ–National Prosecution Service rules.

6. Participate in the preliminary investigation

The prosecutor evaluates whether the evidence establishes a prima facie case with reasonable certainty of conviction. The respondent is normally subpoenaed and given an opportunity to submit a counter-affidavit and evidence.

The prosecutor may dismiss the complaint or find sufficient basis to file an information in court. The applicable DOJ rules provide remedies and strict periods for challenging prosecutorial resolutions; the correct remedy and deadline depend on the type of resolution, the reviewing authority, receipt date, and governing circular. Obtain the resolution and proof of receipt immediately.

7. Consider the civil claim

Defamation may also create civil liability. Under Rule 111, civil liability arising from the offense is generally deemed instituted with the criminal action unless it is waived, reserved, or previously filed, subject to the rules. Article 33 of the Civil Code also recognizes an independent civil action for defamation.

Civil strategy affects filing fees, damages evidence, prescription, and coordination with the criminal case. Decide it with counsel rather than adding a damages demand mechanically.

How to defend against a complaint or charge

1. Preserve first; do not rewrite history

Save the original post, full thread, drafts, source material, private messages, account logs, and device records before deleting or editing anything. Removal may limit continuing harm, but unexplained deletion can create an evidentiary dispute. Obtain legal advice on preservation and takedown.

Do not ask witnesses to delete messages or coordinate stories. Do not retaliate against the complainant online.

2. Verify the document and deadline

Determine whether you received:

A demand letter;
A police or NBI invitation;
A prosecutor’s subpoena;
A prosecutorial resolution;
A court information and summons;
A warrant of arrest; or
A civil complaint.

These documents require different responses. A prosecutor’s subpoena under the regular 2024 DOJ-NPS process should give the respondent at least ten days from receipt to submit a counter-affidavit, but the stated hearing and filing date must be followed. Do not substitute an informal letter or unsupported motion for the required sworn response.

3. Build the defense around evidence

Possible issues include:

The respondent did not own or control the account;
The account was compromised or impersonated;
The exhibit is incomplete, edited, fabricated, or unauthenticated;
No third person received the communication;
The complainant was not reasonably identifiable;
The words are not defamatory in context;
The statement is protected opinion, rhetoric, satire, or fair comment;
The publication was a privileged communication;
The statement concerned a public official, public figure, or public matter and actual malice cannot be proved;
The factual imputation was true and the legal conditions for the truth defense are met;
The respondent merely reacted to or shared another person’s post without authoring a new defamatory imputation;
Venue is improper;
The law is being applied retroactively to conduct before the Cybercrime Prevention Act took effect;
The one-year prescriptive period expired; or
The evidence cannot establish responsibility or every element to the required standard.

A bare denial is rarely enough when stronger records are available. Attach documents, affidavits, source files, and other admissible proof to the counter-affidavit.

4. If an information or warrant already exists

Contact criminal-defense counsel immediately. Counsel should obtain the information, docket, court branch, and warrant details; assess bail; arrange lawful surrender if necessary; and review possible motions, including challenges based on the allegations, venue, prescription, or constitutional and evidentiary defects.

Do not evade service, ignore hearings, or negotiate directly with the complainant without advice. Cyber libel is generally bailable, but the court controls the amount and conditions.

Common mistakes

Waiting for the platform to answer before protecting the one-year filing period;
Saving only a cropped screenshot without the URL, account, timestamp, or context;
Assuming that a username proves the user’s legal identity;
Treating hurt feelings as proof of every element;
Assuming truth is always a complete defense regardless of motive, purpose, and context;
Publicly reposting the accusation while trying to denounce it;
Filing wherever the content was viewable without analyzing venue;
Ignoring a prosecutor’s subpoena because no court case has yet been filed;
Filing an unsworn narrative without organized supporting evidence;
Contacting, threatening, or publicly shaming witnesses;
Deleting devices, messages, or account records after learning of a complaint;
Believing that “Like,” “Share,” or “Comment” creates either automatic guilt or automatic immunity; and
Confusing cyber libel with identity theft, threats, harassment, data-privacy violations, gender-based online sexual harassment, or other offenses that may require separate analysis.

When legal help is urgent

Seek a Philippine lawyer promptly when:

The one-year period may expire soon;
The author is anonymous or platform records may disappear;
You received a prosecutor’s subpoena or must file a counter-affidavit;
A resolution, information, summons, or warrant has been issued;
The post concerns a public official, election, newsroom, workplace investigation, whistleblowing, or confidential proceeding;
Several jurisdictions or overseas parties are involved;
The material includes threats, intimate images, personal data, or allegations involving a child;
The account may have been hacked or impersonated;
Immediate removal or preservation relief is being considered; or
A settlement, apology, retraction, or waiver is proposed.

The Public Attorney’s Office may assist qualified indigent persons, subject to its mandate, means-and-merit requirements, and conflicts rules.

Frequently asked questions

Must the complainant send a demand letter first?

Generally, a demand letter is not an element of cyber libel and is not ordinarily required before filing. A carefully drafted request for correction, preservation, or removal may still be useful, but it should not consume the prescriptive period or provoke republication.

Is a false statement automatically cyber libel?

No. The prosecution must also prove defamatory meaning, publication to a third person, identification of the complainant, the applicable form of malice, use of a computer system, and the respondent’s responsibility.

Can a true post still create liability?

Possibly. Under the general criminal-libel rule, truth must ordinarily be accompanied by good motives and justifiable ends. Public-official and public-interest speech may involve additional constitutional protections.

Can a private group chat support a case?

Yes, if a defamatory statement was communicated to at least one person other than the person defamed. The limited audience may affect privilege, harm, motive, and damages, but “private group” does not necessarily mean “not published.”

Is sharing another person’s post cyber libel?

Not automatically. Disini rejected aiding-or-abetting liability for merely receiving and reacting to cyber libel. A sharer who adds a new defamatory statement, materially adopts or republishes content in a legally significant way, or independently participates in creating it may require separate analysis.

Does deleting the post end the case?

No. Deletion does not erase an already completed publication or preserved evidence. It may limit further circulation, but timing, intent, preservation duties, and possible mitigation remain fact-dependent.

Can a corporation be defamed?

Yes. Article 353 protects both natural and juridical persons, although a corporation must still prove that the publication referred to it and met the other elements.

How long does the respondent have to answer?

Follow the date in the prosecutor’s subpoena. Under the regular 2024 DOJ-NPS preliminary-investigation framework, the subpoena should provide at least ten days from receipt for the counter-affidavit. Court pleadings and challenges to prosecutorial resolutions have different deadlines.

What is the current prescriptive period?

Generally, one year from discovery by the offended party, authorities, or their agents, subject to interruption and other rules under Article 91. The controlling clarification is the Supreme Court’s April 8, 2026 decision in Causing v. People.

Official legal sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Cyber libel questions depend heavily on the exact words, audience, evidence, dates, venue, and status of the persons involved. Sources and current law were checked as of September 15, 2026.