Quick answer

Cyber libel is committed when a person authors and publishes defamatory material through a computer system or similar digital means. A Facebook post, tweet, blog entry, online article, video caption, email or group-chat message may qualify if it identifies a person, reaches at least one third party, carries a defamatory imputation and is legally malicious.

If you are filing a complaint, preserve the original post and technical evidence immediately, identify the author and audience, and bring a sworn complaint with supporting documents to the proper prosecutor’s office. Assistance may also be requested from the NBI or PNP cybercrime unit when attribution, preservation orders or forensic work is needed.

If you are accused, do not ignore a subpoena or delete, alter or fabricate evidence. Obtain the complete complaint and attachments, preserve your own records, and submit a fact-specific counter-affidavit within the deadline stated in the subpoena or prosecutor’s order.

Time is critical. In Causing v. People, the Supreme Court held that cyber libel prescribes in one year. When that period begins and whether it was interrupted can depend on publication, discovery and procedural events, so both complainants and respondents should obtain legal advice immediately.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel to defamatory material committed through a computer system or similar means.

A prosecutable case generally requires proof of all the following:

Defamatory imputation. The material attributes a crime, vice, defect, act, omission, condition, status or circumstance that tends to dishonor, discredit or expose a person to contempt.
Identification. The complainant is named or is identifiable from the words, images and surrounding circumstances. A nickname, photograph, job title or contextual clue may be enough even if the full name is absent.
Publication. A person other than the author and the person defamed received or understood the statement. A public post is not required; publication may occur in a limited group chat, email thread or restricted account. A message seen only by the person allegedly defamed may lack this element.
Use of a computer system or similar digital means. The publication occurred online or through information and communications technology.
Authorship and participation. The prosecution must connect the accused to the particular publication. An account name or screenshot alone does not automatically prove who controlled the account or made the post.
Malice, when legally required. Article 354 generally presumes malice from a defamatory imputation unless the communication is privileged. That presumption may be defeated by applicable privilege, good faith or constitutional protections, depending on the subject and circumstances.

The whole publication matters. Prosecutors and courts examine the ordinary meaning, context, tone, audience and surrounding facts—not merely an isolated word or sentence.

Who can be liable?

The Supreme Court upheld cyber libel as constitutional with respect to the original author. It invalidated its application to people who merely receive and react to a post and also invalidated aiding-or-abetting liability as applied to cyber libel.

Accordingly, merely pressing “Like,” receiving a post or making a reflexive reaction is not automatically cyber libel. Liability may still arise, however, when a person creates a new defamatory publication in their own words or deliberately republishes material in a manner that amounts to a new authored statement. The legal effect of captions, quote-posts, edited screenshots and added commentary depends on their contents.

Editors, business officers or account administrators are not automatically criminally liable merely because of their position. The evidence must establish their legally relevant participation and the required state of mind.

General defenses and exceptions

The statement was not defamatory

Criticism, disagreement, satire, rhetorical exaggeration or an unpleasant opinion is not necessarily libel. The question is whether, in context, the communication conveys a defamatory factual imputation.

Calling something an “opinion” is not conclusive. A statement framed as an opinion may still imply undisclosed defamatory facts. Conversely, language incapable of being reasonably understood as a factual accusation may be protected.

The complainant was not identifiable

A case may fail if readers could not reasonably determine who was being discussed. Identification may nevertheless be proved through photographs, initials, workplace details, relationships or other contextual information.

There was no publication to a third person

A communication sent solely to the person allegedly defamed ordinarily lacks publication. Copying another recipient, posting in a group or allowing a third person to read it may change the result.

The accused did not author or publish it

Account ownership and authorship are separate questions. Relevant evidence may include device records, admissions, platform information, access logs, recovery details, IP or subscriber evidence, message history and witness testimony.

Claims that an account was hacked, cloned or operated by another person should be supported by contemporaneous records—not raised for the first time without proof.

Privileged communication

Article 354 recognizes qualified privileges, including:

a private communication made in the performance of a legal, moral or social duty; and
a fair and true report, made in good faith and without added comments or remarks, of specified official proceedings or acts.

Qualified privilege is not a blanket exemption. The communication must remain within the purpose, audience and conditions of the privilege, and proof of actual malice may defeat it.

Statements made in judicial proceedings may receive broader protection when they are relevant to the proceeding. Republishing the same accusation publicly or online is a separate act and may not share that protection.

Truth, good motives and justifiable ends

Under Article 361, truth is not always a complete defense by itself. Acquittal generally requires proof both that the imputation was true and that publication was prompted by good motives and justifiable ends. Special rules apply to imputations against government employees concerning the discharge of official duties.

Preserve the reliable source documents available before publication. A later effort to find support does not necessarily prove that the author acted responsibly at the time.

Public officials, public figures and matters of public concern

Speech about official conduct and public issues receives stronger constitutional protection. Depending on the complainant and subject, liability may require proof of actual malice—knowledge that the statement was false or reckless disregard of whether it was false.

This is a demanding, fact-dependent standard. Personal hostility alone does not necessarily establish constitutional actual malice, while deliberately avoiding obvious contrary evidence may be relevant. Not every government employee, viral personality or person mentioned in news becomes a public figure for every purpose.

The case was filed too late

In Causing v. People, G.R. No. 258524, October 11, 2023, the Supreme Court ruled that cyber libel prescribes in one year, applying Article 90’s specific period for libel.

Do not calculate the deadline casually. Article 91 addresses when prescription begins and what interrupts it. Discovery, the date of publication, republication and the filing of a complaint or information can raise legal and factual questions. A lawyer should examine the complete timeline.

The law did not yet apply

The Cybercrime Prevention Act cannot be applied retroactively to punish an online publication made before the law took effect. Later material changes or a genuinely new publication require separate analysis; the continued availability of old material should not automatically be treated as a new offense.

Double jeopardy or duplicative charging

The Supreme Court held in Disini v. Secretary of Justice that the same online libel cannot be punished separately as both ordinary libel and cyber libel. The constitutional prohibition against double jeopardy applies.

How to file a cyber-libel complaint

1. Preserve the publication before contacting the author

Save more than a cropped screenshot. Preserve, when available:

the complete post, article, message, video or comment thread;
the visible account name, handle, profile and account URL;
the direct URL of the publication;
publication date and time, including the time zone;
surrounding text, images, replies and quoted material;
audience indicators, such as whether the post was public or sent to a group;
names and contact details of people who saw it;
screen recordings showing how the page was reached;
original downloaded files and their metadata;
platform notices, emails or messages concerning the post; and
documents showing why readers would identify the complainant.

Keep the original files unchanged. Work from copies, record when and how each item was obtained, and back everything up securely. Printing a screenshot may be useful, but it should not be the only preserved evidence.

2. Record the harm without exaggeration

Keep contemporaneous records of relevant consequences, such as lost clients, cancelled engagements, employment action, threats, messages from readers, medical treatment or expenses. Criminal liability does not depend solely on proving financial loss, but reliable evidence may matter to credibility, damages and related civil claims.

3. Identify the proper respondent

Do not name everyone who liked, shared, hosted or received the material. Focus on the person for whom there is evidence of authorship or legally relevant publication.

If the author is unknown, an NBI or PNP cybercrime investigation may be necessary. Private individuals generally cannot compel a platform or telecommunications company to disclose protected subscriber or traffic data on demand.

4. Consider prompt data preservation

Online records may disappear through deletion, account closure or routine retention practices. Republic Act No. 10175 and the Rules on Cybercrime Warrants provide formal procedures for preservation and court-authorized disclosure, search, seizure and examination of computer data.

A preservation request is not the same as an order compelling disclosure. Access to subscriber information, traffic data or content may require the proper law-enforcement process and judicial warrant. Do not attempt to hack an account, impersonate another person or obtain private data unlawfully.

5. Prepare a sworn, evidence-based complaint

The complaint-affidavit should clearly state:

the identities and addresses of the parties, insofar as known;
the exact words, images or material complained of;
where and when it was published;
how a computer system was used;
why the complainant was identifiable;
who received or saw the material;
why the imputation was defamatory;
the evidence connecting the respondent to the account or publication;
relevant surrounding events; and
the attached supporting documents and witness affidavits.

Quote accurately. Do not paraphrase the alleged accusation in a way that makes it appear worse. Separate personal knowledge from information supplied by witnesses or records.

6. File with the proper office

A complaint may be filed with the Office of the City Prosecutor or Office of the Provincial Prosecutor having territorial authority over the offense. Cybercrime jurisdiction and venue can be complex because publication, the computer system, the author, the complainant and the harm may be in different places.

Republic Act No. 10175 gives Regional Trial Courts jurisdiction over violations of the Act when the statutory Philippine connections are present. That provision does not make every prosecutor’s office or every RTC interchangeable. Confirm territorial filing requirements before submitting the complaint.

The complainant may first seek investigative assistance from:

the National Bureau of Investigation, which is designated by the Act as a cybercrime law-enforcement authority; or
the Philippine National Police Anti-Cybercrime Group.

An investigative report can support a complaint, but law enforcement does not decide guilt. The prosecutor evaluates whether the evidence meets the governing standard for filing a criminal case.

7. Participate in the preliminary investigation

Cyber libel carries a potential maximum imprisonment exceeding six years and is ordinarily subject to preliminary investigation under the current DOJ-NPS framework.

The respondent should receive the complaint and supporting evidence and be allowed to answer through a counter-affidavit. The prosecutor may require clarificatory proceedings or additional evidence. Witnesses are not ordinarily subjected to a full trial-style cross-examination at this stage.

Procedural deadlines and filing arrangements appear in the subpoena or prosecutor’s orders and may also be affected by current DOJ rules and local office practice. Follow the stated deadline exactly and request any necessary extension before it expires.

If the prosecutor dismisses the complaint or directs the filing of an information, the available review or reconsideration remedy has its own deadline. Obtain the resolution and proof of receipt immediately.

How to defend against a cyber-libel complaint

1. Treat every official notice as urgent

Verify the subpoena with the issuing prosecutor’s office, note the date and manner of receipt, and obtain a complete copy of:

the complaint-affidavit;
witness affidavits;
screenshots and digital attachments;
investigative reports; and
the subpoena or order fixing the response deadline.

Do not rely on an informal assurance that the case will be withdrawn.

2. Preserve—not delete—your records

Deleting a post may reduce continuing harm, but deletion can also destroy material needed to show context, authorship, audience, edits or good faith. Before changing anything, preserve a defensible copy and obtain legal advice.

Retain devices, account records, login alerts, drafts, source documents, research notes, messages with editors or administrators, and proof of unauthorized access. Do not manufacture backdated documents or ask witnesses to align their stories.

3. Build the counter-affidavit around the actual elements

A useful counter-affidavit does more than deny liability. It should address, where supported:

whether the accused authored or controlled the publication;
whether the complainant was identifiable;
whether a third person received it;
whether the words were defamatory in context;
whether the statement was substantially true;
the sources checked before publication;
good motives and justifiable ends;
applicable privilege;
public-interest or actual-malice standards;
the complete publication rather than selected screenshots;
prescription;
territorial jurisdiction or venue;
retroactivity;
unlawful or unreliable collection of digital evidence; and
material inconsistencies in the complaint.

Affidavits are sworn statements. Unsupported explanations or blanket denials can be less persuasive than a short account supported by authentic records.

4. Challenge digital evidence carefully

Questions worth examining include:

Is the screenshot complete?
Can the witness identify when and how it was captured?
Does it show the direct URL and account?
Was the post edited?
Is the account genuine?
Who had access to it?
Is the timestamp reliable?
Does the exhibit omit replies or context?
Was private data obtained through a lawful process?
Can the electronic record be authenticated?

A screenshot is not automatically worthless, but neither is it automatically conclusive. Admissibility and evidentiary weight depend on authentication, integrity, relevance and the manner in which the data was obtained.

5. Prepare for court if an information is filed

If the prosecutor files an information, the case proceeds in the proper Regional Trial Court, ordinarily a designated cybercrime court where available. The court independently determines whether probable cause exists for issuing process against the accused.

Do not disregard a court order or warrant. Cyber libel is generally bailable, but the amount and conditions are determined under applicable rules and court orders. Counsel can also evaluate any proper motion, arraignment issues, pretrial stipulations and defenses for trial.

The prosecution retains the burden of proving guilt beyond reasonable doubt. A finding during preliminary investigation is not a conviction.

Possible penalties and civil liability

Article 355 of the Revised Penal Code, as amended by Republic Act No. 10951, provides for imprisonment, a fine, or both for ordinary written libel. Section 6 of Republic Act No. 10175 raises the penalty by one degree when the offense is committed through information and communications technology.

For cyber libel, the imprisonment range resulting from that enhancement is generally prisión correccional in its maximum period to prisión mayor in its minimum period—four years, two months and one day to eight years. The actual sentence, availability of a fine instead of imprisonment, application of the Indeterminate Sentence Law and other sentencing consequences require case-specific legal analysis.

A criminal case may also carry civil liability. Under Rule 111, the civil action arising from the offense is generally deemed instituted with the criminal action unless it is waived, reserved when permitted or previously filed. Separate civil remedies may also arise under the Civil Code, including Article 33, but their elements, deadlines and interaction with the criminal case should be assessed before filing parallel proceedings.

An apology, correction or takedown does not automatically erase a completed offense. It may nevertheless affect harm, credibility, settlement discussions or damages. A private settlement also does not invariably require the State to dismiss a criminal prosecution once filed.

Common mistakes to avoid

Waiting for the post to disappear before preserving it.
Saving only cropped screenshots without URLs, timestamps or context.
Assuming that every insult is cyber libel.
Naming everyone who liked or received a post as a respondent.
Filing in a convenient city without checking territorial authority.
Assuming the one-year period always runs from the same event.
Treating truth alone as an automatic defense.
Reposting the accusation while announcing plans to sue.
Contacting witnesses with threats or instructions about what to say.
Hacking an account or unlawfully obtaining private records.
Ignoring a subpoena because the respondent believes the complaint is weak.
Deleting devices, messages or account records after receiving notice.
Submitting affidavits based on rumor rather than personal knowledge or authenticated records.
Missing a prosecutor’s review, reconsideration, arraignment or bail deadline.

When legal help is urgent

Seek a Philippine lawyer immediately if:

the publication or discovery date is approaching one year;
the author is anonymous or platform data may soon disappear;
you received a prosecutor’s subpoena, court order or warrant;
law enforcement wants to search a device or obtain account access;
the post concerns a public official, journalist, workplace accusation or pending court case;
several people or jurisdictions are involved;
the complainant is also considering civil, administrative, employment or data-privacy proceedings;
there are threats, stalking, doxxing or risks to physical safety; or
the accused is outside the Philippines or the data is held abroad.

Eligible persons who cannot afford private counsel may ask the Public Attorney’s Office about assistance, subject to its qualification and conflict-of-interest rules.

Frequently asked questions

Is every false Facebook post cyber libel?

No. The prosecution must establish all the required elements, including a defamatory imputation, identification, publication, use of a computer system and the accused’s authorship or legally relevant participation. Privilege and constitutional protections may also apply.

Can a private group-chat message be cyber libel?

Potentially. “Publication” requires communication to at least one person other than the person defamed. A restricted audience does not automatically prevent liability, although the limited audience and purpose may matter to privilege, malice and damages.

Can I sue someone who only liked or shared a post?

A mere like or reflexive reaction is not enough under Disini. A share without more is not automatically criminal. A person who adds a new defamatory accusation or creates a distinct publication may require different analysis.

Is an anonymous account immune?

No, but the complainant must lawfully obtain evidence connecting a person to the account and publication. A display name alone may be insufficient. Disclosure of protected platform or subscriber data ordinarily requires formal legal process.

Is a screenshot enough?

It can be relevant evidence, but its authenticity, completeness, source and connection to the accused may be disputed. Preserve the direct URL, full page, account details, timestamps, original files and witness evidence whenever possible.

Does deleting the post end the case?

No. Deletion does not necessarily undo an already completed publication. Preserve evidence and obtain advice before deleting or editing material.

Does an apology automatically dismiss the complaint?

No. An apology may support settlement or mitigation, but the criminal action is prosecuted in the name of the People of the Philippines. The legal effect of a complainant’s withdrawal depends on the stage of the case and the remaining evidence.

How long do I have to file?

The Supreme Court has held that cyber libel prescribes in one year. Determining the starting point and interruption of prescription can be complicated, so do not wait until the anniversary date.

Can the same post be charged as both libel and cyber libel?

Not as two punishments for the identical online publication. Disini held that doing so would violate the prohibition against double jeopardy.

Where will the case be tried?

Violations of Republic Act No. 10175 fall within Regional Trial Court jurisdiction, subject to the Act’s jurisdictional connections and the rules governing territorial venue. The facts of publication, computer use, location and injury must be reviewed before choosing a prosecutor’s office or court.

Official legal sources

This article provides general legal information, not legal advice or a prediction of any case. Cyber-libel outcomes depend on the exact publication, evidence, parties, dates, jurisdiction and procedural history. Official legal sources and current procedures were checked as of September 19, 2026.