Quick answer

Cyber libel is libel committed through a computer system or information and communications technology—for example, through a social-media post, website, online article, email sent to third persons, or comparable digital publication. A complainant generally must prove a defamatory imputation, publication to someone other than the person defamed, identification of the offended person, malice, use of a computer system, and the accused’s responsibility for the publication.

A complaint is ordinarily filed with the proper city or provincial prosecutor’s office, supported by a sworn complaint-affidavit and evidence identifying the post, its author, its audience, and the date it was discovered. Under the Supreme Court’s April 8, 2026 en banc resolution in Causing v. People, cyber libel prescribes in one year from discovery by the offended party, the authorities, or their agents, subject to interruption and other rules under Article 91 of the Revised Penal Code. Do not assume that the year automatically runs from the posting date.

Anyone who receives a subpoena, complaint-affidavit, prosecutor’s resolution, information, or warrant should consult a Philippine criminal lawyer immediately. Deadlines are short, and deleting posts, surrendering a device, contacting witnesses, or publishing a public response without advice can damage either side’s case.

What Philippine law treats as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, covers the acts of libel defined under Article 355 of the Revised Penal Code when committed through a computer system or a similar future technology.

Article 353 of the Revised Penal Code defines libel as a public and malicious imputation of:

A crime;
A vice or defect, whether real or imaginary;
An act, omission, condition, status, or circumstance; or
Something tending to dishonor, discredit, or bring a natural or juridical person into contempt.

The Supreme Court has explained that the Cybercrime Prevention Act did not create a wholly unrelated offense. It recognized a computer system or ICT as another means of publishing libel and made the use of that technology a qualifying circumstance. Section 6 of Republic Act No. 10175 generally imposes a penalty one degree higher when an offense under the Revised Penal Code or a special law is committed through ICT.

Not every insulting, harsh, false, or offensive online statement is automatically cyber libel. The exact words, images, context, audience, identity of the person discussed, authorship, privileges, and surrounding facts all matter.

What the prosecution must establish

Although the wording of an information and the evidence required will depend on the case, the prosecution generally must prove the following beyond reasonable doubt at trial.

There was a defamatory imputation

The material must convey an accusation or characterization capable of harming reputation. Courts assess the publication as a whole and according to its ordinary meaning in context—not merely by isolating one word.

Statements that are plainly rhetorical, satirical, or opinion may receive constitutional protection, but adding “in my opinion” does not automatically protect a factual accusation. A statement implying undisclosed defamatory facts may still create liability.

The offended person was identifiable

The publication need not always state the person’s complete legal name. Identification may be shown through a photograph, username, position, surrounding facts, references understood by readers, or other evidence.

A broad statement about a large group ordinarily presents identification problems. A statement about a small or clearly defined group may be different if readers could reasonably understand it as referring to a particular member.

The material was published to a third person

For libel, publication means communication to at least one person other than the person defamed. A message sent only to the subject may hurt that person’s feelings but ordinarily does not injure reputation in the legal sense required for libel.

Relevant evidence may include:

A public post or webpage;
A group chat with other members;
An email copied to third persons;
A screenshot received by another person;
Comments, shares, views, or witness testimony showing that someone else accessed the material; or
Platform, server, or device records, when properly obtained and authenticated.

A screenshot alone may not conclusively prove authorship, publication, or authenticity. Those matters must be supported by admissible evidence.

The accused was responsible for the publication

Account ownership does not invariably prove authorship. A hacked, impersonated, shared, spoofed, or abandoned account can create a genuine attribution issue.

In Disini v. Secretary of Justice, the Supreme Court sustained cyber-libel liability as applied to the original author but rejected the challenged application of aiding-or-abetting liability to people who merely received, reacted to, or shared a post. That ruling does not give blanket immunity to a person who writes a new defamatory caption, comment, or accusation. The person may be treated as the author of that separate content.

The publication was made through a computer system or ICT

The prosecution must connect the allegedly libelous publication to the use of a computer system or comparable digital technology. The relevant records may include devices, account information, IP or subscriber data, platform records, and witness testimony.

Access to private data is governed by constitutional protections and applicable cybercrime-warrant rules. A complainant should not hack an account, secretly seize a device, impersonate another person, or unlawfully obtain private communications in an effort to collect evidence.

Malice was present or legally presumed

Article 354 generally treats defamatory imputations as malicious even if true unless the publication falls within a recognized privileged category. The presumption is not conclusive and may be rebutted.

Different standards may apply when the publication concerns a public official, public figure, public conduct, or a matter of legitimate public concern. In those settings, constitutional free-speech rules and the requirement of actual malice may become decisive. “Actual malice” in this context is not simply ill will; it concerns knowledge of falsity or reckless disregard for whether the statement was false. Whether that standard applies is highly fact-specific.

Communications that may be privileged

Article 354 recognizes two principal categories of qualified privilege:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments or remarks, of judicial, legislative, or other official proceedings that are not confidential, or of statements made in those proceedings.

Qualified privilege is not automatic immunity. It may be defeated by proof of actual malice, excessive publication, unnecessary inflammatory language, lack of good faith, or publication beyond the people who had a legitimate interest in receiving it.

Examples requiring careful analysis include:

A good-faith workplace complaint sent only to authorized officers;
A report to police, regulators, or another proper authority;
A parent’s complaint to school officials;
A consumer complaint sent to the business or relevant agency;
A fair report of a public court hearing or official record; and
Good-faith commentary on the conduct of public officials or matters of public concern.

Posting an accusation publicly when it could have been directed to the responsible authority may weaken a claim that the communication was limited to the performance of a duty.

Truth is important, but not always enough by itself

Philippine criminal-libel law does not support the simple rule that “truth is always a complete defense.”

Under Article 361, the admissibility and effect of proof of truth depend on the nature of the imputation. If the accused proves the truth of the matter and also shows that it was published with good motives and for justifiable ends, acquittal may follow. Special rules apply to imputations of crimes and to statements concerning public officers in relation to the discharge of their official duties.

Accordingly, preserve both:

Evidence establishing the factual basis of the statement; and
Evidence explaining why, to whom, and in what manner it was published.

A truthful accusation circulated primarily to humiliate someone can present different issues from a documented complaint delivered in good faith to an authority empowered to act.

The one-year prescription period

The Supreme Court’s en banc resolution in Causing v. People, G.R. No. 258524, April 8, 2026 confirms that cyber libel prescribes in one year under Article 90 of the Revised Penal Code.

The Court also held that the year is reckoned from discovery of the allegedly defamatory material by the offended party, the authorities, or their agents, not automatically from the date it was uploaded. Merely making a Facebook post public does not create a legal presumption that the offended person discovered it immediately.

Evidence of discovery may include:

The date the complainant received the link or screenshot;
A contemporaneous message discussing the post;
The complainant’s reaction or comment;
A demand for deletion or apology;
A report to an employer, platform, police unit, or lawyer;
A witness who showed the material to the complainant; or
Metadata or records establishing when the material was accessed.

Under Article 91, prescription is interrupted by the filing of the complaint or information. It may run again when proceedings end without conviction or acquittal, or when they are unjustifiably stopped for a reason not attributable to the accused. The period also does not run while the offender is absent from the Philippines.

Prescription can therefore turn on disputed evidence. A complainant should file well before the apparent deadline. A respondent should preserve proof of an earlier discovery date rather than relying solely on the original posting date.

A separate civil action for injury to rights generally has its own limitation issues. Article 1147 of the Civil Code provides a one-year period for actions based on defamation, but the starting point, interruption, and relationship to a criminal case should be assessed from the actual record.

How to prepare and file a complaint

1. Preserve the publication before requesting removal

Capture the material without altering it. Preserve:

Full-screen screenshots showing the account name, date, time, URL, caption, comments, and surrounding context;
A screen recording showing how the page or thread was reached;
The original URL and account or profile URL;
Downloaded copies in their original format;
Emails with complete headers;
Original chat exports rather than cropped images alone;
The device on which the material was received;
Names and contact details of people who saw it;
Notifications, messages, or platform reports;
Proof connecting the account to the suspected author; and
Documents disproving the accusation or establishing reputational harm.

Keep an untouched master copy and make separate working copies. Record who collected each item, when it was collected, and where it has been stored. Do not edit timestamps, add annotations to the only copy, or repeatedly forward files through apps that strip metadata.

2. Write down the discovery timeline

Document the exact date, time, and circumstances in which the complainant—or an authorized agent or authority—first discovered the material. Identify who found it, who showed it to the complainant, and whether any earlier reaction or communication exists.

Because the prescriptive period runs from discovery, an unsupported or inconsistent date can become a central issue.

3. Identify the proper respondent

Do not name someone solely because that person’s photograph or display name appeared on an account. Collect lawful evidence of control or authorship, such as:

Admissions;
Consistent use of the account;
Linked contact information;
Witnesses who communicated with the account holder;
Distinctive facts known to the suspected author;
Related posts or messages; or
Lawfully obtained platform or subscriber records.

If the author is unknown, prompt assistance from counsel and a qualified cybercrime investigator may be necessary because service providers do not preserve all data indefinitely.

4. Assess whether the statement is actually actionable

Before filing, examine:

The precise words or image;
Whether the statement asserts fact or expresses protected opinion;
Whether the complainant is identifiable;
Whether a third person received it;
Whether it is privileged;
Whether the subject is a public official or public figure;
Whether actual malice must be shown;
Whether the author has documentary support;
Whether the material was published after Republic Act No. 10175 took effect; and
Whether prescription has run.

Online defamation published before the Cybercrime Prevention Act became effective cannot be retroactively punished as cyber libel. The Supreme Court addressed this point in Peñalosa v. Ocampo, G.R. No. 230299, April 26, 2023.

5. Prepare a sworn complaint-affidavit and supporting affidavits

The complaint-affidavit should state facts within the affiant’s personal knowledge, including:

The identities and addresses of the parties, if known;
The precise publication complained of;
Where and how it appeared online;
Why it refers to the complainant;
Who received or viewed it;
The basis for attributing it to the respondent;
When and how it was discovered;
Why the imputation is defamatory and allegedly false or malicious;
Relevant demands, responses, or admissions; and
A clear list of attached evidence.

Witnesses with material personal knowledge should execute their own affidavits. Avoid hearsay, exaggeration, legal conclusions presented as facts, and statements that cannot be supported.

6. File with the office having proper territorial authority

Cyber libel falls within the jurisdiction of the Regional Trial Court under Republic Act No. 10175, but the case ordinarily begins with a preliminary investigation before the proper prosecutor.

Venue must be evaluated under Article 360 of the Revised Penal Code and applicable procedural rules. Depending on the facts, legally relevant places may include where the defamatory material was printed and first published, where a private complainant actually resided when the offense was committed, or—if the complainant was a public officer—where the officer held office when the offense occurred.

Do not assume that a case may be filed wherever the post was read, where the complainant later moved, or wherever filing is most convenient. Venue is jurisdictional in criminal cases and should be confirmed from documents such as proof of residence, employment or office records, and evidence of first publication.

The complainant may seek assistance from the local prosecutor’s office, the Philippine National Police Anti-Cybercrime Group, or the National Bureau of Investigation’s cybercrime unit. A police or NBI report can assist evidence gathering, but it does not replace the need for a sufficient complaint and timely institution of proceedings.

7. Follow the prosecutor’s current filing requirements

Under the 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings, the prosecutor evaluates whether the evidence establishes a prima facie case with reasonable certainty of conviction. Filing practices, required copies, oath administration, service arrangements, and electronic channels can vary by office and may be changed by later issuances.

Before the deadline, confirm directly with the proper prosecutor’s office:

Its accepted filing channel;
Office hours and cut-off rules;
Number and form of copies;
Requirements for electronic evidence;
Procedures for notarization or administration of the oath;
Proof-of-service requirements; and
Applicable local or DOJ forms.

Obtain and retain a stamped receiving copy or official electronic acknowledgment.

What happens during preliminary investigation

If the complaint is sufficient in form and substance, the prosecutor may issue a subpoena requiring the respondent to submit a counter-affidavit and evidence. The precise deadline stated in the subpoena or prosecutor’s order must be followed.

The respondent generally has the opportunity to:

Examine the complaint and attachments;
Submit a sworn counter-affidavit;
Attach documents and affidavits;
Challenge authorship, publication, identification, malice, venue, or prescription;
Invoke privilege or constitutional protections;
Explain the factual basis, motives, and intended audience; and
Identify evidence requiring lawful preservation or production.

A preliminary investigation is not the criminal trial, and credibility is not always tested through full cross-examination at that stage. Nevertheless, omissions and admissions in an affidavit can have serious consequences later.

The prosecutor may dismiss the complaint or find sufficient grounds to file an information in the Regional Trial Court. Available review or reconsideration procedures are governed by DOJ rules and the particular resolution. Deadlines should be taken directly from the resolution and applicable current issuance.

How to respond if you are accused

Do not ignore a subpoena

Record the date and manner of service and immediately provide the complete packet to counsel. Missing the stated deadline may cause the prosecutor to resolve the complaint without your evidence. Do not assume that an informal settlement discussion, a promise to withdraw, or a platform takedown suspends the proceedings.

Preserve the account and devices

Do not delete or reset accounts, chats, drafts, backups, emails, or devices. Preserve:

Login and security history;
Evidence of hacking or impersonation;
Original drafts and source documents;
Messages showing who had access to the account;
The full thread and not merely the selected screenshot;
Privacy and audience settings;
Publication and deletion dates;
Communications with editors or administrators; and
Records establishing what you knew when you published.

Preservation does not mean voluntarily surrendering a device or password without understanding the legal basis and scope of the request. Ask counsel to review any consent form, subpoena, warrant, or extraction request.

Build the defense around evidence, not denial alone

Potential issues or defenses may include:

The respondent did not create or publish the material;
The account was hacked, spoofed, or impersonated;
No third person received the communication;
The complainant was not identifiable;
The words were not defamatory in context;
The material was a protected opinion rather than a false factual assertion;
The statement was privileged;
The imputation was true and published with good motives and justifiable ends;
A public official or public figure cannot establish actual malice;
The prosecution cannot authenticate the digital evidence;
Venue is improper;
The case was filed after prescription had run;
The conduct occurred before the cyber-libel provision became effective; or
The information or complaint fails to allege or support an essential element.

These defenses are fact-dependent and sometimes inconsistent. For example, claiming both “I did not post it” and “I posted it because it was true” requires careful explanation and supporting evidence.

Avoid retaliatory publication

Do not post the complaint, threaten the complainant, reveal private information, coach witnesses, or invite followers to attack anyone involved. A new post can become separate evidence or a separate cause of action.

If a public statement is necessary, have counsel review it. A concise statement acknowledging the process without repeating the disputed accusation is usually safer than trying the case online.

After an information is filed in court

Once an information is filed, the Regional Trial Court determines whether probable cause exists for issuing a warrant of arrest. The judicial determination is separate from the prosecutor’s earlier assessment.

The accused should obtain counsel immediately to address:

The information and supporting record;
Voluntary surrender, bail, and warrant concerns;
Arraignment;
Motions permitted before plea;
Preservation or suppression of digital evidence;
Improper venue or lack of jurisdiction;
Prescription;
Defects in the charge;
Pretrial stipulations;
Witnesses and expert evidence; and
Possible civil liability.

Do not assume that every defect may be raised at any time. Some objections can be waived if not asserted before arraignment or at the procedurally proper stage.

Cyber libel can carry imprisonment, a substantial fine, civil liability, or a combination allowed by law. Article 355’s fine range was increased by Republic Act No. 10951, and Section 6 of Republic Act No. 10175 increases the penalty for libel committed through ICT by one degree. The exact sentencing exposure depends on the charge, the applicable penalty rules, and the court’s findings.

Civil damages and separate remedies

A cyber-libel prosecution may include civil liability arising from the alleged offense unless the civil action is waived, reserved when legally permitted, or previously instituted. The offended party may seek actual, moral, exemplary, or other damages when supported by law and evidence.

Possible noncriminal measures may include:

A narrowly written demand for correction, retraction, or removal;
A platform preservation or abuse report;
A right-of-reply request;
A workplace, school, professional, or regulatory complaint;
A civil action for defamation or abuse of rights; or
A negotiated correction, apology, or settlement.

A private settlement does not invariably and automatically terminate a criminal prosecution, because the criminal action is brought in the name of the People of the Philippines. Any affidavit of desistance is evidence for the prosecutor or court to evaluate, not a guaranteed dismissal.

Evidence both sides should preserve

For a complainant

Preserve:

The complete publication and its context;
Proof that third persons saw or received it;
The original discovery message or notification;
Proof of the discovery date;
Account-attribution evidence;
Documents disproving the imputation;
Messages showing malice or prior threats;
Corrections requested and responses received;
Employment, business, medical, or other lawful proof of actual harm; and
Proof of residence or official station relevant to venue.

For a respondent

Preserve:

The complete thread and source material;
Research notes and records relied upon;
Communications with sources;
Evidence of verification efforts;
Proof of good-faith purpose and intended audience;
Account-access and device-security records;
Evidence of hacking or unauthorized use;
Earlier communications showing when the complainant discovered the post;
Documents supporting privilege, truth, or fair comment; and
Copies of every subpoena, affidavit, resolution, filing receipt, and service record.

Source protection, privacy law, legal privilege, and professional confidentiality may restrict disclosure. A journalist, employee, professional, or whistleblower should obtain specific advice before identifying a confidential source or producing protected material.

Common mistakes

Waiting until the last days of the one-year prescriptive period;
Assuming prescription always begins on the upload date;
Filing in a convenient but legally improper venue;
Submitting only cropped screenshots without URLs, context, or witnesses;
Treating an account name as conclusive proof of authorship;
Altering, annotating, or repeatedly recompressing the only evidence copy;
Illegally accessing an account or device to obtain evidence;
Believing that every insult or negative review is criminal libel;
Assuming that truth alone always ends the case;
Assuming that “opinion” is a complete defense to an implied factual accusation;
Naming every person who liked or shared a post without analyzing their own conduct;
Ignoring a prosecutor’s subpoena or court notice;
Publishing new accusations while the dispute is pending;
Pressuring witnesses or coordinating affidavits;
Treating a takedown, apology, or desistance as an automatic dismissal; and
Relying on an old online discussion stating that cyber libel prescribes in 12 or 15 years. The controlling April 8, 2026 en banc ruling states one year from discovery.

When legal help is urgent

Seek immediate assistance if:

The apparent one-year deadline is approaching;
The author is anonymous or platform records may disappear;
A subpoena or order sets a counter-affidavit deadline;
An information has been filed in court;
A warrant may have been issued;
Police or investigators request a device, password, consent search, or interview;
The material involves a child, sexual content, intimate images, threats, stalking, or personal data;
The publication concerns a public official, election, journalist, whistleblower, or matter of public concern;
The accused is outside the Philippines;
Multiple reposts or publications occurred on different dates;
There is uncertainty about the complainant’s residence or the place of first publication; or
A party is considering deleting evidence or issuing a public response.

Conduct involving threats, nonconsensual intimate images, identity theft, unlawful data processing, harassment, or child sexual abuse material may implicate laws other than cyber libel and may require an urgent safety or law-enforcement response.

Frequently asked questions

Is a private message cyber libel?

It may be, if it was sent through a computer system and communicated to at least one third person. A message sent only to the person discussed ordinarily lacks the publication to a third person required for libel, although it may raise other legal issues.

Can a group-chat message lead to a case?

Yes. A closed or private group is still composed of third persons. Privacy settings affect the evidence and reach of publication but do not automatically prevent liability.

Is sharing a defamatory post automatically cyber libel?

No. Disini rejected the challenged use of aiding-or-abetting liability against people who merely received, reacted to, or shared content. But a person who adds a new defamatory caption, accusation, or comment may be responsible for that person’s own publication.

Can deleting the post prevent a case?

No. Deletion does not erase a completed publication or copies held by readers and platforms. It may affect continuing harm, but it can also complicate evidence issues. Preserve the material and obtain advice before taking action.

Does an apology end the criminal case?

Not automatically. It may help resolve the dispute or affect the parties’ positions, but prosecution is undertaken in the name of the People. The prosecutor or court must act on any dismissal or disposition.

Must the accusation be false?

Falsity, truth, malice, privilege, and constitutional protection interact differently depending on the imputation and the people involved. Even when the underlying facts are true, the accused may need to establish good motives and justifiable ends under Article 361. A case concerning public conduct may also involve the actual-malice standard.

What if the complainant is not named?

The identification element may still be satisfied if readers familiar with the circumstances could reasonably recognize the person from a photograph, description, position, nickname, tag, or contextual clues.

Does a public post mean discovery occurred on the posting date?

No. The Supreme Court held in Causing that public posting does not create a presumption of immediate discovery. The actual discovery date must be determined from evidence and surrounding conduct.

Is barangay conciliation always required?

No. The Katarungang Pambarangay system contains territorial and subject-matter limitations and excludes offenses beyond specified penalty limits. Given cyber libel’s statutory penalty, parties should not assume that barangay conciliation is a prerequisite. The prosecutor’s office or counsel should confirm the rule for the actual charge and circumstances.

Can a company be defamed?

Article 353 recognizes that a juridical person may be the subject of libel. Criminal responsibility, however, must still be attributed to the natural person or persons responsible for the unlawful publication.

Where can cybercrime assistance be requested?

Potential official points of contact include the proper city or provincial prosecutor, the Philippine National Police Anti-Cybercrime Group, the National Bureau of Investigation, and the Department of Justice Office of Cybercrime. Confirm current contact details and filing procedures directly with the agency.

Official legal sources

This article provides general Philippine legal information, not advice for a particular case and not a substitute for review by a Philippine lawyer. Facts, documents, procedural posture, venue, and later legal developments can change the result. Sources and current law were checked as of September 19, 2026.