Quick answer

Cyber libel is committed when a person publicly and maliciously makes a defamatory imputation through a computer system or similar digital means. A Facebook post, online article, public video, blog entry, email circulated to others, or comparable online publication may qualify—but an offensive statement is not automatically cyber libel.

The prosecution must prove beyond reasonable doubt:

A defamatory imputation of a crime, vice, defect, act, omission, condition, status, or circumstance;
Publication or communication to at least one person other than the person defamed;
Identification of the person allegedly defamed;
Malice; and
Use of a computer system or information and communications technology.

A complainant should preserve the original online material and act quickly. The Supreme Court has definitively held that cyber libel prescribes in one year from discovery by the offended party, the authorities, or their agents, subject to the rules on interruption and resumption of prescription. The posting date alone does not automatically establish the discovery date.

A respondent should not ignore a subpoena from the prosecutor. The usual opportunity to contest the accusation comes during preliminary investigation, through a sworn counter-affidavit and supporting evidence. Depending on the facts, possible defenses include lack of authorship, lack of publication, failure to identify the complainant, absence of a defamatory imputation, privileged communication, good intention and justifiable motive, fair comment, truth in circumstances recognized by law, lack of actual malice where that standard applies, prescription, or unconstitutional retroactive application.

Cyber libel is a criminal case with potentially serious penalties and civil liability. Both sides should obtain Philippine counsel promptly, especially when a filing deadline, subpoena, warrant, arrest, workplace investigation, press publication, or threat to personal safety is involved.

What Philippine law treats as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, covers the unlawful acts of libel defined under the Revised Penal Code when committed through a computer system or a similar means that may be developed in the future.

Article 353 of the Revised Penal Code defines libel as a public and malicious imputation tending to dishonor, discredit, or bring into contempt a natural or juridical person, or to blacken the memory of a deceased person. Articles 354 to 362 contain important rules on malice, privileged communications, proof of truth, responsibility, venue, and damages.

The Supreme Court explained in Disini v. Secretary of Justice that Republic Act No. 10175 recognizes a computer system as a means of publishing defamatory material. It upheld the cyber-libel provision as applied to the original author of the online statement, while invalidating the application of the law’s broad aiding-or-abetting provision to cyber libel.

This means that liability cannot be assumed merely because someone received, “liked,” reacted to, or otherwise encountered a post. Authorship, participation, the person’s own words or conduct, and the particular charge alleged must be proved. A person who creates a new defamatory publication, however, may face a different factual and legal analysis from someone who merely reacts to existing content.

The prosecution must prove every element

A defamatory imputation

The challenged statement must attribute something that tends to cause dishonor, discredit, or contempt. Courts examine the language in its full context, including its ordinary meaning, surrounding statements, audience, medium, and circumstances.

Harsh criticism, sarcasm, satire, insults, opinion, or political disagreement is not automatically actionable. The question is whether the communication, reasonably understood as a whole, makes a defamatory factual imputation or otherwise falls within the statutory definition.

Even when no name appears, identification may exist if readers who know the surrounding facts can reasonably determine who was being discussed. Conversely, resemblance, suspicion, or the complainant’s personal belief is not enough without evidence connecting the statement to that person.

Publication to another person

Publication means communication to someone other than the person allegedly defamed. A private message sent only to the subject generally lacks this element, although forwarding it, copying another recipient, posting it in a group, or otherwise allowing another person to receive it can change the analysis.

The prosecution must prove the actual publication alleged in the charge. Screenshots without adequate proof of source, authenticity, authorship, recipients, or context may be challenged.

Identifiable complainant

The allegedly defamed natural or juridical person must be identifiable. In statements about a group, the group’s size, the words used, and whether the statement can reasonably be understood to refer to the particular complainant matter.

A juridical person, such as a corporation, may fall within Article 353, but the statement must still meet the statutory requirements. Whether an individual connected with an organization was personally defamed is a separate question.

Malice

Article 354 generally presumes malice from a defamatory imputation even if it is true, unless the communication is privileged and made with proper motives and justifiable ends. This presumption is not the end of the inquiry: constitutional protections, statutory privileges, the complainant’s public or private status, the subject matter, and the evidence may affect what must be proved.

Where the constitutional actual-malice standard applies, the complainant must establish that the statement was made with knowledge of its falsity or reckless disregard of whether it was false. Actual malice is a legal standard; it does not merely mean hostility, anger, spite, or the use of strong language. Its application depends heavily on who the complainant is and whether the statement concerns a matter of public interest.

Use of a computer system or ICT

The prosecution must connect the publication to a computer system or information and communications technology. The online account, device, platform, upload, message, or other digital act should be established through admissible evidence—not simply assumed from a printed screenshot.

Statements and situations that may be protected

No single defense applies automatically. Context and evidence remain critical.

Privileged communications

Article 354 recognizes qualified privileges, including:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts that are not confidential.

The privilege may be lost through unnecessary publicity, excessive language, improper motive, inaccurate reporting, or proof of malice. For example, a good-faith report to the proper officer may be treated differently from publishing the same accusation to the entire internet.

Statements made in judicial proceedings may receive broader protection when relevant or pertinent to the proceeding. The precise scope of any privilege should be assessed from the document, forum, recipients, relevance, and governing law.

Fair comment and matters of public interest

Fair criticism on matters of public interest receives constitutional protection, particularly when it is identifiable as comment or opinion based on disclosed or established facts. Fabricating facts, materially misrepresenting sources, or asserting an accusation as fact without adequate basis may fall outside that protection.

Calling a statement “opinion” does not conclusively protect it. A court may examine whether it implies undisclosed, provably false facts.

Truth and good motives

Truth is not an unlimited defense under the Revised Penal Code. Article 361 governs when proof of truth may be admitted and requires, where applicable, good motives and justifiable ends. Special rules apply when the imputation concerns a crime or a public officer’s discharge of official duties.

Keep the source documents that existed when the statement was published. Material gathered only after publication may not establish the publisher’s original state of mind, although it may still have other evidentiary uses.

Lack of authorship or control

An account name, profile photograph, or screenshot does not by itself conclusively prove who wrote or uploaded the material. Relevant questions include:

Who controlled the account or device?
Was the account compromised, impersonated, or shared?
Who drafted, approved, uploaded, or republished the statement?
Are platform records, access logs, device records, admissions, or witnesses available?
Was the content altered or taken out of context?

A bare denial may be weak when reliable contrary evidence exists. Equally, attribution should not rest on speculation.

No publication, no identification, or no defamatory meaning

A respondent may show that the communication never reached a third person, did not refer to the complainant, was materially altered, or could not reasonably carry the alleged defamatory meaning when read in context.

Prescription

In Causing v. People, G.R. No. 258524, the Supreme Court affirmed that cyber libel prescribes in one year from discovery, under Articles 90 and 91 of the Revised Penal Code. It rejected the theory that online publication automatically gives the complainant constructive notice.

Prescription is often evidence-dependent. The parties may dispute:

When the complainant, authorities, or their agents actually discovered the publication;
Whether the relevant complaint was filed within one year;
Whether prescription was interrupted by filing a complaint or information;
Whether proceedings ended without conviction or acquittal and caused the period to run again;
Whether the accused was absent from the Philippines; and
Whether a later act was a genuine republication rather than the continued accessibility of an old post.

Do not assume that leaving a post online continuously creates a new offense every day. Conversely, materially editing, reposting, re-uploading, or deliberately presenting the statement to a new audience may require a separate republication analysis.

The law did not yet apply

Penal laws generally cannot be applied retroactively to conduct that occurred before they took effect unless the later law is favorable to the accused. A pre-effectivity publication cannot be converted automatically into cyber libel merely because it remained accessible online. A distinct later republication, however, must be assessed on its own facts.

How to file a cyber-libel complaint

1. Record the discovery date immediately

Write down:

The exact date, time, and manner in which you first discovered the material;
Who showed or sent it to you;
When the police, NBI, prosecutor, employer, or another authorized agent learned of it;
Any earlier message suggesting that you already knew about it; and
The dates of any repost, edit, re-upload, or new distribution.

Because the prescriptive period is one year from discovery, delay can defeat an otherwise valid complaint. Do not wait for informal negotiations to finish before obtaining advice about prescription.

2. Preserve the publication properly

Save more than a cropped screenshot. Preserve, where available:

Full-screen screenshots showing the account, page, URL, date, time, and surrounding context;
The original URL and exact profile or account identifier;
The complete post, article, video, caption, comments, message thread, or group conversation;
Screen recordings showing how the content was accessed;
Original downloaded files and their metadata;
Notification emails or messages;
Names and sworn accounts of people who received or read the publication;
Evidence connecting the account to its operator;
Evidence of edits, reposts, deletion, or changed privacy settings;
Any admission, apology, correction, threat, or demand; and
Evidence of actual harm, such as lost work, cancelled transactions, customer messages, or medical records where genuinely relevant.

Keep original files untouched. Work from copies, record how each item was obtained, and maintain a simple evidence log. Do not fabricate engagement figures, recreate missing messages, or alter timestamps.

Electronic evidence must satisfy the applicable Rules on Evidence and the Rules on Electronic Evidence. Authentication and integrity may be contested, so professional forensic preservation may be appropriate when content is disappearing or authorship is disputed.

3. Identify the correct respondent

Do not name a person solely because their photo or display name appears on an account. Gather lawful evidence of authorship, account control, publication, approval, or other direct participation.

If the author is unknown, prompt legal advice may be necessary regarding lawful investigation and preservation or disclosure of computer data. Platforms and service providers may retain different categories of data for limited periods. Disclosure, interception, search, or seizure of protected computer data generally requires the legal process provided by Republic Act No. 10175 and the Supreme Court’s Rule on Cybercrime Warrants.

Do not hack an account, secretly seize a device, impersonate another person, or obtain records through unlawful access.

4. Determine the proper place of filing

Cybercrime venue is technical and should be confirmed before filing. Under the Rule on Cybercrime Warrants, criminal actions involving cybercrime offenses are generally filed before a Regional Trial Court designated as a special cybercrime court in the city or province where:

The offense or any of its elements occurred;
Any part of the computer system used is situated; or
Damage to a natural or juridical person took place.

Other venue provisions and the specific allegations may affect the result. Venue is jurisdictional in criminal cases; choosing an office merely for convenience can lead to dismissal or delay.

5. Prepare the complaint-affidavit

A complaint usually begins with the proper prosecution office, supported by a complaint-affidavit and evidence. An NBI or PNP cybercrime unit may assist with investigation, but an investigative report does not replace the prosecutor’s independent determination.

The affidavit should state facts within the complainant’s personal knowledge, including:

The identities and addresses of the parties, as far as known;
The exact words, images, audio, or video complained of;
Where and how the material was published;
Why it refers to the complainant;
Who received or viewed it;
Why the respondent is believed to be the author or publisher;
The discovery date;
Relevant context showing falsity or malice;
The harm caused; and
A clear description of every attachment.

The affidavit must be properly sworn. Attach legible, organized copies and preserve the originals. The number of copies, accepted filing methods, office hours, and local administrative requirements should be confirmed directly with the relevant prosecution office. Do not assume that an email, social-media report, barangay blotter, or police blotter alone validly commences the criminal action or interrupts prescription.

6. Participate in preliminary investigation

Because of the potential penalty, cyber-libel charges ordinarily undergo preliminary investigation. The prosecutor determines whether the evidence supports filing an Information in court; this is not yet a trial and does not determine guilt beyond reasonable doubt.

The respondent is ordinarily served with the complaint and supporting evidence and directed to submit a counter-affidavit. Under Rule 112 of the Rules of Criminal Procedure, the standard period is 10 days from receipt of the subpoena, although the actual subpoena and any valid current prosecution rules or orders must be followed. A motion to dismiss is generally not a substitute for the required counter-affidavit.

The prosecutor may require clarificatory proceedings. Parties ordinarily rely on affidavits and documents rather than conducting a full trial or cross-examination at this stage.

7. Address the prosecutor’s resolution promptly

If the prosecutor dismisses the complaint or finds sufficient basis to file an Information, available review or reconsideration procedures are governed by current Department of Justice rules and, later, court remedies. Periods can be short and the proper remedy depends on which prosecution office issued the resolution and whether an Information has already been filed.

A request for review does not automatically suspend every court proceeding. Obtain the signed resolution, record the date of receipt, and seek counsel immediately.

How to defend against a cyber-libel complaint

Do not ignore the subpoena

Record when and how it was received. Read the subpoena, complaint-affidavit, attachments, docket number, filing office, and deadline. If the attachments are incomplete or unreadable, request complete copies promptly and document the request.

Missing the deadline may cause the prosecutor to resolve the complaint from the complainant’s evidence. Ask for an extension before the deadline only when justified; approval is not automatic.

Preserve your own evidence

Keep:

Original drafts and source materials;
Research notes and records consulted before publication;
Messages with editors, administrators, witnesses, or sources;
The complete conversation or post, not selected extracts;
Device, account, and access information relevant to authorship;
Evidence of hacking or impersonation;
Publication and edit history;
Privacy or audience settings;
Records showing when and why changes were made;
Corrections, clarifications, or retractions; and
Documents supporting privilege, truth, reasonable reliance, good motives, or public interest.

Do not delete the account, wipe the device, coach witnesses, alter a post to conceal its history, or create backdated documents. Deletion may destroy evidence without eliminating copies already preserved by others.

Prepare a fact-specific counter-affidavit

A useful counter-affidavit answers the accusation element by element. It should identify evidentiary gaps and attach affirmative proof rather than relying only on conclusions such as “freedom of speech” or “it was true.”

Potential issues include:

The respondent did not write, approve, or publish the content;
No third person received it;
The complainant was not identifiable;
The quoted material is incomplete or altered;
The words do not make the alleged defamatory imputation;
The statement was fair comment or protected opinion;
The communication was privileged;
The publication was made with proper motives and justifiable ends;
The applicable actual-malice standard was not met;
The electronic evidence was not authenticated;
Venue is improper;
The law is being applied retroactively; or
The offense had already prescribed.

Avoid unsupported counter-accusations. Statements in a counter-affidavit are sworn and can have consequences in this or another proceeding.

Deal carefully with demands for apology, deletion, or payment

A correction, apology, or removal may reduce harm and sometimes help resolve a conflict, but it does not automatically erase criminal liability. The wording may also be offered as an admission.

Before signing a settlement, undertaking, affidavit of desistance, or public statement, understand:

Whether it admits authorship, falsity, or malice;
Whether it covers criminal and civil claims;
Whether confidentiality or non-disparagement terms are lawful and workable;
Whether other complainants or publications remain;
Whether the case is already under prosecutorial or court control; and
Whether dismissal still requires government or judicial action.

Cyber libel is prosecuted in the name of the People of the Philippines. An affidavit of desistance may be considered, but it does not automatically compel dismissal.

What happens if an Information is filed in court

The criminal case proceeds in the designated Regional Trial Court. Depending on the circumstances, the accused may receive a summons or face a warrant of arrest after the judge personally evaluates the prosecutor’s resolution and supporting evidence.

The accused should arrange counsel and address bail through lawful court procedures. Bail requirements and amounts depend on the court’s order and the circumstances; do not rely on unofficial quotations or intermediaries.

Important stages may include:

Arraignment and plea;
Pre-trial stipulations and marking of evidence;
Motions permitted by the Rules of Criminal Procedure;
Prosecution evidence;
Defense evidence;
Judgment; and
Available post-judgment remedies or appeal.

At arraignment, the accused must be informed of the precise charge. Defects involving prescription, jurisdiction, or failure to charge an offense may require timely procedural action. Some objections can be waived if not raised at the proper stage.

The prosecution bears the burden of proving guilt beyond reasonable doubt. The respondent’s failure to prove a defense does not relieve the prosecution of that burden.

Penalties and civil liability

Under Section 6 of Republic Act No. 10175, the penalty for a Revised Penal Code offense committed through ICT is generally one degree higher than the penalty otherwise provided. Cyber libel can therefore expose a convicted person to imprisonment, a fine, or both, subject to the applicable sentencing laws and the court’s judgment.

The Supreme Court has issued guidelines expressing a preference for a fine rather than imprisonment in appropriate libel cases, but this is not an automatic entitlement and does not decriminalize libel. The court must evaluate the facts and applicable law.

Civil liability may accompany the criminal case. Under Rule 111, the civil action arising from the offense is generally deemed instituted with the criminal action unless it is waived, reserved when legally permitted, or filed separately beforehand. Independent civil remedies may also require separate analysis.

Complainants should document real harm instead of assuming that large damages will be awarded. Courts require a legal and evidentiary basis for actual, moral, exemplary, or other claimed damages.

Practical evidence checklist

For either side, preserve:

The full publication and its context;
URL, account identifier, platform, date, and time;
Original electronic files and metadata;
Publication, edit, and deletion history;
Names of readers or recipients;
Proof relating to account ownership or control;
Source documents available before publication;
Communications concerning drafting, approval, or posting;
Discovery-date evidence;
Records of any demand, correction, apology, or settlement;
Proof of claimed loss or reputational harm; and
Copies of every complaint, subpoena, affidavit, resolution, and proof of receipt.

Maintain a chronology. Clearly distinguish publication date, discovery date, complaint filing date, subpoena receipt date, and court filing date.

Common mistakes to avoid

Waiting because an old online post is still accessible and assuming there is no deadline;
Counting one year only from the posting date without examining discovery;
Treating a screenshot as conclusive proof of authorship;
Submitting cropped images that omit context;
Naming every administrator, employee, editor, reactor, or group member without evidence of personal participation;
Assuming truth alone always defeats criminal libel;
Assuming every criticism of a public officer is automatically protected;
Filing in a convenient but legally improper venue;
Believing a platform report or police blotter is necessarily the required prosecutorial filing;
Ignoring a prosecutor’s subpoena;
Filing only a motion to dismiss instead of a counter-affidavit;
Deleting evidence after receiving a demand or subpoena;
Contacting or threatening witnesses;
Publishing new accusations while the dispute is pending;
Assuming an apology or affidavit of desistance automatically ends the case; and
Missing a review, arraignment, bail, motion, or appeal deadline.

When legal help is urgent

Seek immediate assistance from a Philippine lawyer if:

The one-year period may expire soon;
You received a prosecutor’s subpoena or court process;
A warrant of arrest may have been issued;
Police or investigators want access to a phone, computer, account, or cloud data;
A platform says it received a preservation or disclosure request;
The post has been deleted or is rapidly spreading;
The account may have been hacked or impersonated;
The case involves a journalist, source, public officer, election, workplace, school, or public-interest investigation;
Several people or jurisdictions are involved;
A minor, threat, intimate image, stalking, identity theft, or personal-data breach is involved; or
The same conduct may constitute another offense.

People who cannot afford private counsel may ask the Public Attorney’s Office about eligibility. Complainants may also inquire with the appropriate prosecution office, the NBI, or the PNP Anti-Cybercrime Group. Immediate danger should be reported to emergency or local law-enforcement services.

Frequently asked questions

Is every false Facebook post cyber libel?

No. The prosecution must prove all legal elements, including a defamatory imputation, publication, identification, malice under the applicable standard, authorship or responsibility, and use of ICT. Other defenses or privileges may apply.

Can a true statement still lead to a case?

Yes. Under the Revised Penal Code, truth is not an unlimited defense. Its admissibility and effect may depend on Article 361, good motives, justifiable ends, privilege, public interest, and the identity and conduct of the person discussed.

Is a private message cyber libel?

A message sent only to the person concerned ordinarily lacks publication to a third person. If another recipient was included or the message was forwarded, displayed, or circulated, publication may exist.

Are likes, reactions, and shares automatically criminal?

No. In Disini, the Supreme Court rejected the application of the Cybercrime Prevention Act’s general aiding-or-abetting provision to cyber libel and distinguished the original author from people who merely receive or react to a post. A person’s own added statement or separate republication must be evaluated independently.

Does the one-year period start when the post was uploaded?

Not necessarily. Under Causing v. People, it starts upon discovery by the offended party, the authorities, or their agents. Posting online does not by itself create a legal presumption of immediate discovery.

Does an online post remain a continuing offense forever?

Continued online accessibility should not automatically be treated as a fresh offense each day. A later edit, repost, re-upload, or communication to a new audience may raise a separate republication issue, depending on the evidence.

Must the complainant first demand deletion or an apology?

No general rule makes a demand letter an element of cyber libel. A demand may be useful for correction, preservation, or settlement, but it must not cause the complainant to miss the prescriptive period.

Is barangay conciliation required first?

Cyber libel carries a penalty beyond the category ordinarily subject to mandatory barangay conciliation. Venue, party residence, and any accompanying claims should nevertheless be checked rather than relying on a barangay certificate as the criminal filing.

Can the complainant withdraw the case?

A complainant may execute an affidavit of desistance or support a dismissal, but a criminal case belongs to the State. The prosecutor or court determines its legal effect.

Can the accused be jailed immediately after a complaint is filed?

A complaint at preliminary investigation does not itself establish guilt. If an Information is later filed, the judge independently determines whether to issue a warrant. Questions about surrender, bail, and appearance should be handled promptly through counsel and the proper court.

Official legal sources

This article provides general legal information, not legal advice or an attorney-client relationship. Cyber-libel outcomes depend on the exact words, context, parties, evidence, venue, dates, and procedural history. Law and agency procedures were checked against official sources as of September 15, 2026.