Quick answer

A cyber libel case may arise when a person publishes an allegedly defamatory statement through Facebook, X, TikTok, YouTube, a blog, email, a group chat, or another computer system. The prosecution must establish a defamatory imputation, publication to at least one person other than the subject, identification of the person defamed, malice, and the accused’s responsibility for the online publication.

If you are the complainant, preserve the post and surrounding digital evidence immediately, identify when and how you discovered it, and file a properly supported complaint before the one-year prescriptive period expires. If you are the respondent, do not ignore a subpoena, delete evidence, contact witnesses improperly, or assume that truth alone automatically defeats the charge. Obtain counsel promptly and address every element, the evidence’s authenticity, venue, prescription, privilege, and malice.

Cyber libel is punishable more severely than ordinary written libel because information and communications technology was used. A conviction is not automatic merely because a post is insulting, false, viral, or damaging. Context, wording, audience, identity, authorship, public interest, privilege, and proof of malice can determine the outcome.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the publication is made through a computer system or a similar technological means.

The prosecution generally must prove:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, or circumstance that tends to dishonor, discredit, or expose a person to contempt.
Publication. Someone other than the person defamed received, read, heard, or saw the statement. A message sent only to its subject ordinarily lacks publication, but a group chat, copied email, public post, video, comment, or message forwarded to another person may satisfy this element.
Identification. The complainant must be named or reasonably identifiable from the words and surrounding circumstances. A vague statement about a large or undefined group may not sufficiently identify an individual.
Malice. The applicable form and proof of malice depend on the circumstances, including whether the communication is privileged and whether the complainant is a private person, public officer, or public figure.
Use of a computer system or ICT. The allegedly libelous material must have been published through the internet, social media, electronic messaging, or another covered computer system.
Responsibility of the accused. The evidence must connect the respondent to the authorship or publication. A profile name, screenshot, or allegation that “only this person could have posted it” may not, by itself, settle identity or account control.

The Supreme Court upheld cyber libel’s constitutionality in Disini v. Secretary of Justice, but invalidated the application of “aiding or abetting” and “attempt” provisions to cyber libel. Merely reacting to an existing post is not automatically criminal assistance to cyber libel. A person who writes a new, independently defamatory comment or caption, however, may be treated as the author of that separate publication.

Not every harsh or embarrassing online statement is cyber libel

The entire post must be read in context. Courts distinguish potentially actionable assertions of fact from rhetoric, satire, exaggeration, opinion, and fair comment. Calling something “opinion” does not make it immune when it implies concrete, provably false facts. Conversely, offensive language is not automatically libel if it does not make a defamatory imputation or cannot reasonably be understood as referring to the complainant.

A case may also fail when:

no third person received the statement;
the complainant was not named and cannot reasonably be identified;
the respondent did not create or publish the material;
the evidence does not reliably authenticate the account, post, or message;
the communication was privileged and actual malice is not proved;
the statement concerned protected comment on official conduct or a matter of public interest;
prescription had already run before the proper proceedings interrupted it; or
the publication occurred before the Cybercrime Prevention Act became effective and cannot lawfully be punished retroactively as cyber libel.

Truth, good motive, and privileged communications

Truth is important, but “it is true” is not always a complete answer by itself.

Under Article 361 of the Revised Penal Code, the admissibility and effect of proof of truth depend on what was imputed and whom it concerned. Where proof of truth is permitted, acquittal generally requires both truth and publication with good motives and for justifiable ends. Accusing someone of a crime based only on rumor, for revenge, or without checking available records can create serious difficulty even if the publisher later locates some supporting material.

Article 354 recognizes qualifiedly privileged communications, including:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without added remarks, of qualifying official proceedings or acts of public officers.

Other constitutional and jurisprudential protections may apply to fair comment and reporting on matters of public concern. When a communication is qualifiedly privileged, the ordinary presumption of malice does not control; the complainant must prove actual malice. Actual malice means publication with knowledge of falsity or reckless disregard of whether the statement was false. Mere error, incomplete investigation, or even serious negligence does not invariably establish that demanding standard.

Privilege is fact-sensitive. Unnecessary circulation, inflammatory additions, knowing distortion, personal spite, or publication beyond the audience connected to the duty may defeat the defense.

Some communications are absolutely privileged, such as statements protected by legislative immunity and relevant statements made in judicial proceedings. Whether absolute privilege applies depends on the speaker, setting, and relationship of the statement to the protected proceeding.

The one-year deadline is critical

In its April 8, 2026 resolution in Causing v. People, the Supreme Court confirmed that cyber libel prescribes in one year, not 12 or 15 years.

The one-year period generally begins when the allegedly defamatory material is discovered by the offended party, the authorities, or their agents—not automatically on the date it was posted. The Court rejected a blanket presumption that everyone discovers a social-media post upon publication.

This makes the discovery date an evidentiary issue. Preserve proof showing:

the date and time the complainant first saw or received the post;
who sent or showed it to the complainant;
earlier messages, notifications, replies, or public responses suggesting prior knowledge;
when police, the NBI, prosecutors, employers, or authorized representatives learned of it; and
when the complaint or other proceeding capable of interrupting prescription was instituted.

A complainant should not wait until the end of the year. A respondent raising prescription should present evidence; the posting date alone may not prove when discovery occurred. Republication, edits, reposts, and later comments require individual analysis and should not automatically be treated as restarting the period.

A separate civil action for injury to rights or defamation may also be subject to a one-year limitation under Article 1147 of the Civil Code. The precise cause of action, accrual date, parties, and effect of any criminal proceeding should be reviewed by counsel.

How to preserve online evidence

Screenshots are useful but should not be the only evidence preserved. Online material can be edited, deleted, restricted, or falsely attributed.

As soon as possible:

Capture the entire post, not merely the allegedly defamatory sentence.
Include the account name, profile details, date, time, URL, caption, images, video, comments, and visible audience or privacy setting.
Make a screen recording showing how the content is reached from the account or conversation.
Save the original webpage, message export, email with full headers, media file, and unedited screenshots.
Copy the direct link and record the device, application, and account used to view it.
Preserve messages from the person who first sent or showed the content to you.
List witnesses who personally saw the publication and what each witness can authenticate.
Keep records showing authorship or account control, such as admissions, prior exchanges, recovery details, or platform notices, if lawfully obtained.
Record reputational harm with specific documents: lost contracts, disciplinary notices, client messages, medical records, or other admissible proof.
Keep the original files unchanged. Work from copies and maintain a dated evidence log.

Do not access another person’s account without permission, impersonate someone, intercept private communications unlawfully, or fabricate engagement data. Evidence obtained illegally may be excluded and may expose the collector to a separate complaint.

The Rules on Electronic Evidence govern authentication and admissibility. Law-enforcement officers may seek preservation, disclosure, search, examination, or interception orders under the Rule on Cybercrime Warrants. A private complainant cannot compel a platform to disclose protected subscriber or content data merely by sending a demand.

How to file a cyber libel complaint

1. Have the words and context legally assessed

Identify the exact words alleged to be defamatory. Do not submit only conclusions such as “the post ruined my reputation.” Explain what the statement communicates, why it refers to you, who received it, and why it was malicious.

Counsel should examine possible privilege, public-interest issues, truth, opinion, identification, publication, authorship, venue, and prescription before filing. A weak or retaliatory complaint can consume time and may expose the complainant to other legal consequences.

2. Prepare a complaint-affidavit

The sworn complaint should ordinarily state:

the parties’ full identifying and contact information, if known;
the exact online statement and its context;
the platform, account, URL, date, and manner of publication;
how the respondent is connected to the account or material;
why the complainant was identifiable;
the persons who saw or received the statement;
the date and circumstances of discovery;
the specific facts showing falsity and malice;
the location facts supporting venue; and
a chronological account supported by numbered annexes.

Each material witness should execute a separate affidavit based on personal knowledge. Attach legible, properly labeled evidence rather than a disorganized collection of screenshots.

The DOJ publishes an official preliminary-investigation filing checklist and National Prosecution Service forms. Confirm the current local requirements, number of copies, notarization rules, and accepted filing method with the particular prosecution office before submission.

3. File with the proper office

A complaint may be brought to an appropriate law-enforcement cybercrime unit for investigation, such as the NBI or PNP Anti-Cybercrime Group, or filed for preliminary investigation with the prosecutor’s office having proper authority and venue.

Cybercrime venue is not simply “anywhere the post can be opened.” Under Section 2.1 of the Rule on Cybercrime Warrants, criminal actions under Sections 4 and 5 of the Cybercrime Prevention Act are filed before a designated cybercrime court in the province or city:

where the offense or any element occurred;
where any part of the computer system used is situated; or
where damage to a natural or juridical person took place.

The first court in which the criminal action is properly filed acquires jurisdiction to the exclusion of the others. Because online accessibility alone can produce an overbroad venue theory, the complaint and eventual Information should allege concrete venue facts. Filing in the wrong place can delay or defeat a case.

4. Participate in the preliminary investigation

The prosecutor evaluates whether the admissible and credible evidence establishes a prima facie case with reasonable certainty of conviction under the DOJ-NPS rules.

If the complaint is sufficient to proceed, the respondent will be subpoenaed and required to submit a counter-affidavit and supporting evidence. The parties must follow the deadline stated in the subpoena or prosecutor’s order. Preliminary investigation is generally document-driven; it is not yet the criminal trial, and parties do not ordinarily cross-examine each other as they would in court.

If the prosecutor finds the required basis, an Information is filed in the designated Regional Trial Court. The judge then independently determines probable cause for issuing an arrest warrant. Filing a complaint with police or a prosecutor does not by itself mean that the respondent will immediately be arrested.

5. Consider lawful noncriminal remedies

Depending on the facts, the complainant may consider:

a carefully drafted correction or retraction demand;
a platform report that accurately identifies the violated policy;
a civil action for damages;
workplace, professional, or administrative remedies; or
a negotiated correction, apology, or removal.

An affidavit of desistance does not automatically dismiss a criminal case because the offense is prosecuted in the name of the People of the Philippines. Any settlement must be voluntary, lawful, and reviewed for its effect on both criminal and civil claims.

How to defend against a cyber libel complaint

Act immediately upon receiving a subpoena

Record the date, time, and manner of service. Obtain a complete copy of the complaint and every annex. Calendar the response deadline exactly as stated. Failure to submit a counter-affidavit may allow the prosecutor to resolve the complaint from the complainant’s evidence alone.

Do not substitute a bare motion to dismiss for the required counter-affidavit unless counsel confirms that the governing prosecutor’s rules and order permit the requested procedure.

Preserve—do not alter—the defense evidence

Save:

the complete post and conversation;
drafts and source materials;
records relied upon before publication;
messages with editors, sources, or recipients;
proof of the intended and actual audience;
account-access and device records;
reports of hacking, impersonation, or unauthorized access;
earlier versions and timestamps; and
evidence concerning the complainant’s actual discovery date.

Deleting a post may limit further harm, but deletion can also destroy context or evidence. Preserve a forensically reliable copy first and obtain advice about takedown, correction, or retraction.

Answer each required element

A useful counter-affidavit should address, where supported by facts:

Defamatory meaning: What would an ordinary reader understand in full context?
Publication: Did anyone other than the complainant receive it?
Identification: Could readers reasonably identify the complainant?
Authorship and account control: Is there reliable proof that the respondent created or published it?
Malice: What checks were made, what records were reviewed, and why was the statement believed?
Privilege or public interest: Was the communication made pursuant to a duty, as a fair report, or as protected comment?
Truth and justifiable purpose: What admissible documents and witnesses establish the factual basis?
Venue: What specific act, system, or damage connects the case to the chosen locality?
Prescription: When did the complainant, authorities, or their agents actually discover the material, and when were proceedings instituted?
Authenticity: Are the screenshots complete, untampered, and attributable to the respondent?

General denials are rarely enough. Attach admissible documents and affidavits from witnesses with personal knowledge.

Do not contact the complainant recklessly

Threats, repeated messages, pressure on witnesses, or a new public attack can create additional evidence or separate criminal exposure. Any proposal for correction, apology, settlement, or takedown should be communicated through counsel when tensions are high.

If an Information has already been filed

Retain criminal-defense counsel immediately. Counsel should check the Information, court designation, venue allegations, prescription, duplicity, sufficiency of the charged facts, and the record supporting probable cause.

A respondent should not evade court process. Counsel can coordinate surrender if necessary, determine bail requirements, and seek appropriate relief. Bail is generally available as a matter of right before conviction for an offense not punishable by death, reclusion perpetua, or life imprisonment, but the amount and procedure are set by the court.

Grounds apparent from the Information may sometimes be raised through a motion to quash before plea. Other defenses—especially prescription or account identity when dependent on disputed facts—may require evidence at trial. Entering a plea without first reviewing available objections can waive certain grounds.

Possible penalties and civil liability

Ordinary written libel under Article 355, as amended by Republic Act No. 10951, carries prisión correccional in its minimum and medium periods, a fine of ₱40,000 to ₱1,200,000, or both, in addition to possible civil liability.

For cyber libel, Section 6 of the Cybercrime Prevention Act raises the applicable penalty by one degree because ICT was used. For imprisonment, the resulting statutory range is generally prisión correccional in its maximum period to prisión mayor in its minimum period—approximately four years, two months and one day to eight years—subject to the rules on modifying circumstances and the Indeterminate Sentence Law. The proper fine calculation and final sentence depend on the charge, applicable law at the time of publication, and case-specific circumstances.

Administrative Circular No. 08-2008 recognizes a judicial preference, in appropriate libel cases, for a fine rather than imprisonment. It does not abolish imprisonment. Courts retain discretion when a fine alone would depreciate the offense’s seriousness or be contrary to justice.

A conviction may also result in damages, costs, and accessory consequences. An acquittal does not invariably resolve every possible civil claim because the basis and standard of proof for civil liability may differ.

The same defamatory online publication should not be punished cumulatively as both ordinary libel and cyber libel when that would violate the constitutional protection against double jeopardy, as discussed in Disini.

Common mistakes by complainants

Waiting too long despite the one-year prescriptive period.
Treating the posting date and discovery date as automatically identical.
Filing where the post was merely accessible without concrete venue facts.
Submitting cropped screenshots without URLs, context, witnesses, or original files.
Failing to prove who controlled or used the account.
Assuming an unnamed person is necessarily identifiable.
Treating criticism, satire, or opinion as automatically defamatory.
Ignoring privilege, public-interest protections, or the actual-malice requirement.
Exaggerating views, shares, financial loss, or other harm.
Demanding money in exchange for silence or threatening publication, which can create separate legal problems.

Common mistakes by respondents

Ignoring a subpoena or missing the counter-affidavit deadline.
Deleting the account, post, messages, or source files before preserving them.
Posting further accusations about the complainant or prosecutor.
Relying on “freedom of speech” without addressing the statutory elements.
Claiming truth without admissible proof, good motive, or a justifiable purpose.
Assuming a disclaimer such as “allegedly,” “for awareness,” or “just my opinion” is a complete defense.
Submitting an unsupported hacking or impersonation claim.
Contacting witnesses in a way that may appear coercive.
Assuming the case prescribed merely because the post is more than one year old.
Waiting until arraignment to examine venue, prescription, or defects apparent from the Information.

When legal help is urgent

Consult a Philippine lawyer immediately if:

the one-year deadline is approaching;
you received a prosecutor’s subpoena, court summons, or arrest warrant;
the account is anonymous, hacked, impersonated, or located abroad;
a platform must preserve or disclose subscriber or content data;
the post concerns a public officer, election, criminal accusation, sexual conduct, a child, or confidential records;
the publication was made by a journalist, employee, union member, lawyer, public officer, or regulated professional;
there are threats, stalking, extortion demands, doxxing, or risks to physical safety;
the same facts may also involve the Data Privacy Act, anti-photo and video voyeurism laws, violence against women and children, grave threats, unjust vexation, contempt, or administrative liability; or
an Information has already been filed in court.

Persons unable to afford private counsel may inquire with the Public Attorney’s Office, subject to its indigency, merit, conflict, and service rules.

Frequently asked questions

Can I file a case over a private message?

Only if the publication element can be proved. A message seen solely by the person defamed ordinarily is not “published” for libel purposes. A group chat, copied email, forwarded message, or post viewed by another person may qualify.

Is sharing or liking a defamatory post automatically cyber libel?

No. Disini invalidated the application of aiding-or-abetting liability to cyber libel because of its chilling effect on online expression. But adding a new defamatory caption, comment, or accusation may constitute a separate original publication.

Does deleting the post end the case?

No. Deletion does not erase an already completed publication or automatically eliminate preserved evidence. It may limit continuing harm, but preserve an accurate copy and obtain advice before altering evidence.

Is a screenshot enough?

Not necessarily. A screenshot may be challenged as incomplete, altered, or falsely attributed. Its weight improves when supported by original files, URLs, metadata, account records, witnesses, admissions, and proper authentication.

Must the complainant prove financial loss?

Financial loss is not an element of criminal cyber libel. It may matter when claiming actual damages. Reputational harm and other damages still require competent proof appropriate to the relief requested.

Can a true statement still cause liability?

Possibly. The Revised Penal Code’s treatment of truth is qualified. Depending on the imputation and the person concerned, the defense may also require good motives and justifiable ends. Privacy, data-protection, or other laws may apply even when information is true.

Can criticism of a public official be cyber libel?

It can be, but criticism of official conduct and speech on matters of public concern receive strong constitutional protection. Where actual malice is required, the prosecution must prove knowledge of falsity or reckless disregard of probable falsity—not merely an inaccurate or strongly worded criticism.

When does the one-year period start?

Under Causing, it begins upon discovery by the offended party, the authorities, or their agents. Publication and discovery may occur on different dates. The claimed discovery date can be contested with evidence.

Will filing a complaint cause immediate arrest?

Ordinarily, no. Cyber libel undergoes preliminary investigation. If the prosecutor files an Information, the judge independently evaluates probable cause before issuing an arrest warrant.

Can an apology or affidavit of desistance automatically dismiss the case?

No. It may influence settlement, damages, or prosecutorial and judicial assessment, but a criminal case belongs to the State and is not automatically terminated by the complainant’s change of mind.

Official legal references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Cyber libel disputes turn heavily on the exact words, complete context, evidence, parties, dates, and procedural history. Sources and current law were checked as of September 1, 2026.