How to File or Defend a Cyber Libel Case

Quick answer

To file a cyber libel case, preserve the online evidence immediately and file a sworn complaint with the prosecutor’s office corresponding to a legally proper venue. The prosecution must establish libel’s elements, that the statement was published through a computer system, and that the respondent was the author—not merely someone who received, liked, or shared the post without adding a defamatory statement.

Act quickly. The Supreme Court has definitively ruled that cyber libel generally prescribes one year from discovery by the offended party, the authorities, or their agents. Filing the proper complaint or information interrupts prescription. A demand letter, platform report, barangay complaint, or informal police report should not be assumed to stop the one-year period.

If you are defending a case, do not ignore a subpoena. Preserve the entire post and its context, note the exact date of service, and submit a sworn, evidence-supported counter-affidavit by the deadline stated in the subpoena. Possible defenses depend on the facts and may include lack of authorship, identification, publication, defamatory meaning, or malice; privilege; truth published with good motives and justifiable ends; prescription; improper venue; or unconstitutional retroactive application.

What qualifies as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the publication is made through a computer system or similar technology, including a mobile phone.

The prosecution must establish:

  1. A defamatory imputation. The statement attributes a crime, vice, defect, discreditable act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose a person or juridical entity to contempt.

  2. Publication. At least one person other than the person defamed received, read, heard, or saw the statement.

  3. Identifiability. The complainant was named or was sufficiently identifiable from the words, images, surrounding facts, or context.

  4. Malice. The statement was legally malicious. Malice is ordinarily presumed from a defamatory imputation, subject to constitutional and statutory exceptions.

  5. Use of a computer system. The publication was made online or through information and communications technology.

  6. Authorship attributable to the accused. The evidence must connect the respondent—not merely an account name—to the defamatory publication.

Context controls. A court considers the entire post, including images, captions, threads, linked material, audience, and the ordinary meaning understood by readers. Not every insult, criticism, mistake, parody, or unfavorable opinion is automatically criminal libel.

Who may be liable?

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel only as applied to the original author and invalidated liability for people who merely receive and react to the post. It also struck down aiding or abetting liability as applied to cyber libel.

Accordingly:

  • Merely receiving, liking, or sharing another person’s post does not by itself establish cyber libel under the Disini ruling.
  • A person who adds a new defamatory caption, comment, accusation, or altered content may become the author of a separate publication. Liability then depends on that person’s own words and conduct.
  • An account name or screenshot alone does not necessarily prove who controlled the account or authored the material.
  • Criminal liability is personal. A company officer, page administrator, editor, or employee is not automatically liable solely because of a title or position.

The one-year deadline

The controlling rule is now clear. In its April 8, 2026 Resolution in Causing v. People, the Supreme Court affirmed that cyber libel prescribes in one year, despite its heavier penalty.

The period generally runs from the day the allegedly libelous material is discovered by the offended party, the authorities, or their agents. Publication and discovery may occur on the same day, but a genuinely later discovery date can present a factual issue requiring proof.

Under Articles 90 and 91 of the Revised Penal Code:

  • Filing the complaint or information interrupts prescription.
  • The period may run again if proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused.
  • The period does not run while the offender is absent from the Philippines.

Do not wait until the anniversary date. Disputes over the true discovery date, filing location, completeness of the complaint, or legal effect of an earlier report can cause an otherwise viable case to prescribe. Continued online availability should not be treated as automatically restarting the period every day.

A publication made before Republic Act No. 10175 took effect cannot be punished retroactively merely because it remains accessible online. Whether a later edit, update, or independent republication constitutes a new punishable act is document- and fact-sensitive.

How to file a criminal complaint

1. Preserve the publication before requesting removal

Save more than a cropped screenshot. Preserve:

  • The full post, article, video, image, caption, or message;
  • The complete URL and, where available, the post or content ID;
  • The profile or page name, username, account URL, and visible account details;
  • The date and time shown, including the device’s time zone;
  • The complete thread, preceding discussion, replies, edits, and linked material;
  • A screen recording showing navigation from the account or page to the post;
  • Original downloaded files and their file information;
  • Platform notifications, emails, direct messages, and takedown responses;
  • Names and contact details of people who independently saw the publication;
  • Proof of when and how you first discovered it;
  • Documents showing why the imputation is false or misleading; and
  • Proof of actual harm, such as lost contracts, canceled engagements, workplace action, or messages from readers.

Keep the original device and files unchanged when practicable. Make working copies and backups. Record who collected each item and when. Electronic evidence still has to be shown to be authentic, accurate, relevant, and attributable to the respondent.

Do not enter another person’s account without authority, impersonate anyone, install spyware, or obtain evidence through hacking or coercion.

2. Test the evidence against every element

Before filing, identify:

  • The exact words or images alleged to be defamatory;
  • Their ordinary meaning and why they refer to the complainant;
  • Who received or saw them;
  • The evidence identifying the author;
  • The computer system or online platform used;
  • The facts showing malice or rebutting a claim of privilege;
  • The date of publication and date of discovery; and
  • The facts establishing venue.

A complaint built only on conclusions such as “the post ruined my reputation” may be insufficient. Attach the publication itself and evidence supporting every material allegation.

3. Determine the proper venue

Cyber libel cases fall within Regional Trial Court jurisdiction and are tried by designated cybercrime courts. Under Section 2.1 of the Rule on Cybercrime Warrants, a criminal action under Section 4 of Republic Act No. 10175 may be filed in the province or city:

  • Where the offense or any element occurred;
  • Where any part of the computer system used was situated; or
  • Where damage to the natural or juridical person took place.

The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of the others. Venue in a criminal case is jurisdictional and must be alleged and supported by facts. Do not assume that the case may be filed anywhere the post could theoretically be viewed.

The complaint for preliminary investigation is ordinarily filed with the city or provincial prosecution office corresponding to the intended lawful court venue. If the venue facts are unclear—particularly where the author, complainant, server, and readers are in different places—obtain legal advice before filing.

4. Prepare and swear to the complaint

The filing normally includes:

  • The completed NPS Investigation Data Form;
  • A complaint-affidavit stating the parties’ details and the specific facts showing each element;
  • Affidavits of witnesses with personal knowledge;
  • Legible copies or printouts of the electronic evidence;
  • Documents establishing authorship, falsity, malice, injury, discovery date, and venue; and
  • An original and sufficient copies for every respondent and the receiving office.

The complaint and supporting affidavits must be properly sworn before an authorized officer. Follow the receiving prosecution office’s current instructions on copies, electronic submission, file format, proof of service, and lawful fees. The DOJ publishes a current preliminary-investigation filing checklist and NPS forms.

A complaint may also be investigated with assistance from the NBI Cybercrime Division or PNP Anti-Cybercrime Group, particularly where the author is anonymous or platform records must be lawfully obtained. The DOJ Office of Cybercrime provides official referral and contact information. Reporting to an investigative agency, however, should not be assumed to interrupt prescription in place of filing the proper prosecutorial complaint.

5. Participate in the preliminary investigation

Cyber libel carries a prescribed maximum exceeding six years, so it is covered by regular preliminary investigation under the 2024 DOJ-NPS Rules.

The prosecutor determines whether the evidence establishes prima facie evidence with reasonable certainty of conviction. The evidence should appear admissible, credible, capable of preservation, and sufficient—if left uncontroverted—to establish all the elements and the responsible person’s identity.

If the complaint is sufficient, the prosecutor issues a subpoena directing the respondent to submit a counter-affidavit. Under the current rules, the subpoena should provide the respondent at least 10 days from receipt to respond. The date stated in the subpoena must be followed.

The prosecutor may consider the case submitted after the counter-affidavit, require clarification, conduct a physical or virtual clarificatory hearing, or permit further affidavits when necessary. There is no automatic right to unlimited replies or additional evidence.

If probable cause under the governing DOJ standard is found, the prosecutor prepares an Information for filing in court. Otherwise, the complaint is dismissed at the prosecutorial level.

6. Consider the civil claim separately

Civil liability arising from the offense is generally deemed included when the criminal action is instituted unless it is waived, reserved, or was filed earlier. Defamation may also support an independent civil action under Article 33 of the Civil Code, subject to procedural rules and the prohibition against double recovery.

A civil action for libel or slander generally has a one-year prescriptive period under Article 1147 of the Civil Code. The correct cause of action, accrual date, venue, filing fees, and interaction with a criminal case should be assessed before choosing a remedy.

A demand for correction, apology, preservation, or takedown may be useful, but it is not a required first step and does not stop the criminal or civil deadline.

Barangay conciliation is generally not a prerequisite because cyber libel’s prescribed imprisonment and fine exceed the Lupon’s statutory limits.

How to defend a cyber libel complaint

Act immediately upon receiving a subpoena

Record the date, time, and manner of service. Obtain the complete complaint, attachments, and subpoena. The respondent ordinarily has at least 10 days from receipt, but the specific deadline in the subpoena controls.

Do not substitute an informal letter, unsupported denial, or unverified motion for a proper counter-affidavit. If more time is genuinely necessary, request an extension promptly and explain the reason; approval is not automatic.

Preserve your own evidence

Keep:

  • The complete original post and surrounding conversation;
  • Drafts, sources, research, interviews, records, and fact-checking notes;
  • Messages showing who created, approved, or controlled the publication;
  • Account-security logs and notices of unauthorized access;
  • Evidence of the intended and actual audience;
  • Documents supporting truth, good motives, and a legitimate purpose;
  • The official record underlying a report or commentary;
  • Corrections, clarifications, apologies, or takedown dates; and
  • Evidence concerning publication, discovery, prescription, and venue.

Do not delete the account, wipe devices, fabricate supporting documents, coach witnesses, or pressure the complainant. A later correction or apology may be relevant, but it does not automatically erase criminal liability.

Address every element and defense with evidence

Depending on the record, defenses may include:

  • No authorship or attribution. The respondent did not create or publish the material, the account was compromised, or the evidence does not reliably identify its user.

  • No defamatory imputation. The statement, read as a whole, does not attribute a discreditable fact or condition.

  • No publication. No person other than the complainant received the communication.

  • No identification. Readers could not reasonably identify the complainant.

  • Protected private communication. Article 354 recognizes a qualified privilege for a private communication made in performing a legal, moral, or social duty. The communication must be made in good faith to a person with a corresponding interest; excessive publication can defeat the privilege.

  • Fair and true official report. A fair and true report, made in good faith and without added comments, of a nonconfidential judicial, legislative, or official proceeding may be privileged.

  • Fair comment on a matter of public interest. Constitutional protection may apply to fair commentary concerning public affairs, public officials, public figures, or participants in public controversies. Where qualified privilege applies, the presumption of malice is removed and actual malice must be proved—knowledge of falsity or reckless disregard of whether the assertion was false. Mere inaccuracy does not invariably prove actual malice.

  • Truth, good motives, and justifiable ends. Under Article 361, truth is not an unlimited defense. Acquittal requires the applicable evidentiary rules to be satisfied and the publication to have been made with good motives and for justifiable ends.

  • Mere reception or reaction. A person who merely received, liked, or shared the original content without authoring a defamatory addition may invoke Disini.

  • Prescription. The complaint was filed more than one year after discovery, subject to any lawful interruption or suspension.

  • Improper venue. The Information does not allege or the evidence does not establish a statutory venue fact.

  • Retroactivity. The charged publication predates the Cybercrime Prevention Act and no independently punishable later act is established.

Privilege is usually qualified, not absolute. It can be lost through actual malice, unnecessary circulation, material distortion, or comments going beyond the privileged occasion.

After the prosecutor’s resolution

An aggrieved party may file a motion for reconsideration within 15 days from receipt under the 2024 DOJ-NPS Rules. A petition for review may also be available, but it has separate, strict procedural requirements. If an Information has already been filed, the party seeking review must also address the court proceedings; an administrative appeal does not automatically suspend the criminal case.

Once an Information is filed, the RTC independently determines judicial probable cause. It may dismiss the case, issue a summons when legally appropriate, or issue a warrant. Cyber libel is generally bailable before conviction, but the court fixes the amount and conditions.

If convicted, the accused may face:

  • Imprisonment of prisión correccional in its maximum period to prisión mayor in its minimum period—generally four years, two months and one day to eight years;
  • A fine from ₱40,000 to ₱1,500,000 under the Supreme Court’s en banc ruling in People v. Soliman; or
  • Both imprisonment and a fine, plus civil liability.

A court may impose a fine alone when justified by the circumstances, but this is discretionary. Imprisonment remains legally available. A notice of appeal from an RTC conviction generally must be filed within 15 days from promulgation or notice of judgment, subject to any timely motion that interrupts the appeal period.

Common mistakes

  • Waiting for a platform response, apology, or settlement while the one-year period runs;
  • Treating a cropped screenshot as complete proof of authorship and context;
  • Filing where the post was merely accessible without establishing a lawful venue fact;
  • Suing everyone who liked, reacted to, or shared the post despite Disini;
  • Assuming that truth alone always defeats liability;
  • Assuming that criticism of a public official is always protected—or always libelous;
  • Omitting the exact words, URL, discovery date, witnesses, or evidence identifying the author;
  • Publicly accusing or threatening the opposing party while the dispute is pending;
  • Ignoring a subpoena or filing an unsworn response;
  • Deleting evidence after receiving notice of a complaint;
  • Believing an affidavit of desistance automatically ends a criminal case; and
  • Assuming a prosecutor’s dismissal or finding of probable cause is already a final judgment on guilt.

When legal help is urgent

Contact a Philippine lawyer immediately if:

  • The one-year anniversary of discovery is approaching;
  • The account is anonymous or the evidence may soon be deleted;
  • A subpoena, Information, summons, warrant, or court order has been served;
  • The case involves several posts, jurisdictions, or possible authors;
  • The complainant is a public official, journalist, business, or public figure;
  • The publication concerns confidential proceedings, workplace reports, abuse allegations, or whistleblowing;
  • Police ask to search, seize, or examine a device;
  • Settlement discussions include money, threats, or demands for silence;
  • A prosecutor’s resolution was received and the 15-day reconsideration period is running; or
  • Judgment has been promulgated and the appeal period has begun.

A qualified indigent accused may ask the Public Attorney’s Office about eligibility for representation. If arrested or facing a warrant, obtain counsel and arrange lawful surrender and bail rather than attempting to evade the court.

Frequently asked questions

Is a demand letter required before filing?

No. A demand, correction request, or takedown notice may be strategically useful, but it is not an element of cyber libel and does not pause prescription.

Can I file over a private message?

Only if publication to someone other than the person defamed can be proved. A message sent solely to the complainant ordinarily lacks the publication element. A group chat or forwarded message may satisfy publication, subject to privilege and other defenses.

Is sharing a defamatory post cyber libel?

Not automatically. Disini protects those who merely receive and react to the original post. Adding a new defamatory accusation or caption may constitute a separate authored publication.

Can an anonymous account be charged?

The responsible person must ultimately be identified and linked to the account and publication. Preserve the evidence and promptly seek lawful investigative assistance; do not attempt unauthorized access or public doxxing.

Does deleting the post end the case?

No. Deletion does not erase a completed publication or automatically defeat preserved evidence. It may affect continuing harm or sentencing considerations, depending on the circumstances.

Does an apology or affidavit of desistance dismiss the case?

Not automatically. Cyber libel is a public offense prosecuted in the name of the People. A retraction, apology, settlement, or desistance may influence the evidence, damages, prosecutorial assessment, or penalty, but the prosecutor or court retains legal authority over the case.

Is every false Facebook post cyber libel?

No. The prosecution must prove all elements, including defamatory meaning, publication, identification, malice, computer-system use, and authorship. Other laws may apply to threats, harassment, impersonation, privacy violations, or intimate images.

Can the complainant recover damages without a conviction?

Potentially. An independent civil action for defamation may proceed under Article 33 of the Civil Code using the civil standard of preponderance of evidence, subject to prescription, procedure, and the rule against double recovery.

Official legal sources

This article provides general legal information, not advice for a particular case. Cyber libel outcomes depend on the exact publication, evidence, dates, parties, venue, and procedural history. The cited law and official guidance were checked as of August 4, 2026.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.