How to File or Defend a Cyber Libel Case

Quick answer

Cyber libel remains a crime in the Philippines. It is committed when the essential elements of libel are present and the defamatory material is published through a computer system or similar information and communications technology. The governing provision is Section 4(c)(4) of the Cybercrime Prevention Act of 2012, read with Articles 353 to 362 of the Revised Penal Code.

To file a case, preserve the complete online evidence first, identify the original author, document when the post was discovered, and submit a sworn complaint-affidavit with supporting affidavits and evidence to the proper City or Provincial Prosecutor’s Office. An NBI or police report may help obtain platform or subscriber data, but it does not replace the prosecutor’s complaint.

To defend a case, do not ignore the subpoena. Preserve the full context, account and device records, source documents, proof of good-faith verification, evidence of privilege or lack of publication, and evidence showing when the complainant actually discovered the material. Submit a detailed counter-affidavit by the date in the subpoena.

The most urgent deadline is prescription. In its April 8, 2026 En Banc resolution in Causing v. People, the Supreme Court definitively held that cyber libel prescribes in one year from actual discovery by the offended party, authorities, or their agents—not automatically from the posting date. Filing the complaint or information interrupts the period. Discovery, interruption, prior proceedings, and the accused’s absence from the Philippines can make the computation fact-sensitive. Read the 2026 Supreme Court resolution.

What the prosecution must establish

A cyber libel charge generally requires proof of all these matters:

  1. A defamatory imputation. The statement imputes a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose a natural or juridical person to contempt.

  2. Publication. At least one person other than the person defamed received, saw, or understood the material. A private message sent only to the person criticized ordinarily lacks this element, but a group chat, copied message, public post, or message shown to another person may satisfy it.

  3. Identification. The complainant was named or was otherwise identifiable. If no name appears, the surrounding descriptions and circumstances must allow other readers to recognize the complainant. A statement against a large, indefinite group does not automatically give every member an individual case.

  4. Malice. Defamatory statements are generally presumed malicious unless they fall within a recognized privilege. Different rules apply to privileged communications and speech concerning public officials or public figures.

  5. Use of a computer system or ICT. The material was published online or through a computer system—for example, through social media, a website, email, an online forum, or a digitally transmitted article.

  6. Authorship and responsibility. The evidence must connect the respondent to the account and the defamatory material. A display name or screenshot of a profile alone may not reliably establish who controlled the account or wrote the post.

At preliminary investigation, the prosecutor applies the current DOJ standard of prima facie evidence with reasonable certainty of conviction. At trial, the prosecution must prove guilt beyond reasonable doubt.

Who may be liable

The Supreme Court upheld cyber libel as constitutional with respect to the original author of the online statement. It invalidated the application of aiding-or-abetting liability to people who merely receive a post and press “Like,” “Share,” or another routine reaction. Disini v. Secretary of Justice.

That protection is not a license to write a new defamatory caption or comment. A person who adds an independently defamatory accusation may become the original author of that new statement. Liability depends on the person’s own words and acts, not simply the platform button used.

A cyber libel prosecution cannot be used retroactively for an online post made before the Cybercrime Prevention Act took effect. The Supreme Court applied this principle in Peñalosa v. Ocampo.

The one-year deadline

Under the controlling 2026 ruling:

  • Cyber libel prescribes in one year.
  • The period begins when the allegedly defamatory material is actually discovered by the offended party, authorities, or their agents.
  • A public post is not presumed discovered on its posting date merely because it was publicly accessible.
  • Discovery may be proved through conduct such as commenting on the post, reacting to it, threatening legal action, sending a demand, or otherwise acknowledging it.
  • Filing the complaint or information interrupts prescription.
  • The period may run again if proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused.
  • The period does not run while the offender is absent from the Philippines.

A complainant should therefore record the exact discovery date and file promptly. A respondent disputing timeliness should preserve messages, reactions, prior demands, reports, and other evidence showing that the complainant or authorities learned of the material earlier than alleged.

Do not rely on a platform report, barangay discussion, demand letter, or informal police inquiry to interrupt prescription. File the proper complaint with the prosecution office within the safest possible computation.

A separate civil action for defamation is also generally subject to the Civil Code’s one-year period. Its accrual, interruption, and relationship with a criminal case require separate analysis.

Evidence to preserve immediately

Preserve evidence before requesting deletion or contacting the author. Keep:

  • Full-page screenshots showing the statement, account name, profile, date, time, surrounding posts, comments, and visible URL;
  • A screen recording showing how the live post was reached, including the address bar and surrounding thread;
  • The direct URL, post or message ID, account URL, username, and any prior username;
  • Original photos, videos, audio, email headers, message exports, and downloaded account data;
  • The original device used to view or receive the material;
  • Notes identifying who captured each item, when it was captured, and how;
  • Uncropped and unedited copies, backed up in more than one secure location;
  • Affidavits from people who personally saw the material and understood whom it referred to;
  • Messages or conduct showing who controlled the account;
  • Evidence establishing the date of discovery;
  • Records of lost work, cancelled contracts, medical treatment, threats, or other claimed harm.

Screenshots are useful but not self-authenticating. The party offering an electronic document must establish its authenticity, integrity, and reliability under the Rules on Electronic Evidence. Notarizing a screenshot does not, by itself, prove that the account was genuine, the image was complete, or the respondent wrote the post.

Where platform or subscriber data may disappear, ask a lawyer, the NBI Cybercrime Division, or another authorized law-enforcement unit about prompt preservation and lawful disclosure. Under Sections 13 and 14 of Republic Act No. 10175, preservation and disclosure of provider-held data follow specific law-enforcement and warrant procedures. Private parties should not attempt to access another person’s account or device without authority.

The NBI describes its official process for investigative assistance to victims of computer crimes. Such assistance can support evidence collection, but the prosecutor’s filing deadline must still be protected.

How to file the complaint

1. Confirm that the material is legally defamatory

Separate a damaging factual accusation from mere rudeness, criticism, exaggeration, or disagreement. Courts consider the ordinary meaning, complete context, audience, and surrounding circumstances. Not every insult or offensive post is cyber libel.

Also determine whether another law more directly addresses the conduct. Threats, extortion, unauthorized intimate images, identity theft, stalking, gender-based online harassment, or unlawful disclosure of personal data may involve different offenses and remedies.

2. Identify the proper venue

A cyber libel case cannot simply be filed in any convenient city. Under Section 2.1 of the Rule on Cybercrime Warrants, the criminal action belongs in the designated cybercrime court of the province or city where:

  • The offense or any element occurred;
  • Any part of the computer system used was situated; or
  • Damage to a natural or juridical person took place.

The first court in which the criminal action is properly filed acquires jurisdiction to the exclusion of the others. Venue allegations should identify concrete facts, not merely say that the post could be accessed everywhere. Because venue in defamation cases is unusually technical, confirm the appropriate prosecution office before filing.

3. Prepare the complaint-affidavit

Under DOJ Department Circular No. 015, series of 2024, the filing should include:

  • The original complaint-affidavit;
  • Two duplicate copies for the official file;
  • One additional copy for each respondent;
  • A completed NPS Investigation Data Form;
  • The parties’ names and addresses;
  • The date and place of the alleged offense;
  • A clear, chronological statement of facts;
  • Witness affidavits; and
  • Documentary, electronic, and other supporting evidence.

The affidavit must be sworn before a prosecutor or another government official authorized to administer oaths, or, if they are unavailable, before a notary public.

The narrative should state the exact words complained of, explain why they are defamatory, identify the complainant, show publication to third persons, connect the respondent to the post, establish the computer-system element, document discovery, and allege the facts supporting venue.

4. File with the proper prosecution office

File with the City or Provincial Prosecutor’s Office having territorial jurisdiction. Initial filing procedures and any authorized electronic option vary by office. Use only the official channel confirmed by that prosecution office; sending an affidavit to an unofficial email or social-media account is not a safe substitute.

5. Participate in preliminary investigation

After assignment, the investigating prosecutor generally has five calendar days to recommend dismissal or issue subpoenas. The scheduled preliminary-investigation hearing should ordinarily be no later than 30 days from receipt of the complete records by the prosecutor.

The respondent must receive the complaint and attachments and be given at least 10 days from receipt to submit a counter-affidavit. If clarification is needed, the prosecutor may hold a clarificatory hearing and may require a reply and rejoinder. A reply or rejoinder, when allowed, must be filed within the period directed, which cannot exceed 10 calendar days from receipt of the pleading answered.

Current DOJ rules generally require resolution within 60 calendar days from assignment, subject to a maximum 30-day extension in specified complex or related cases. These internal periods do not extend prescription or a party’s own deadline.

6. Understand what happens next

If the prosecutor dismisses the complaint, the aggrieved party may file a motion for reconsideration within 15 days from receipt. A qualifying resolution may also be challenged through a petition for review under the 2022 NPS Rule on Appeal, ordinarily within another strict 15-day period measured under that rule.

If the prosecutor finds sufficient evidence, an Information is filed in the proper designated Regional Trial Court. The judge independently determines whether judicial probable cause exists and whether to dismiss, require more evidence, issue summons when appropriate, or issue a warrant of arrest. Filing a complaint does not automatically mean immediate arrest or conviction.

How to defend the complaint

Act immediately on the subpoena

Record the date and manner of receipt and keep the envelope, delivery record, email, or acknowledgment. The subpoena must ordinarily give at least 10 days to respond, but follow the specific deadline stated.

Extensions are exceptional. They may be granted when justice requires—for example, to obtain counsel, inspect voluminous records, or address a genuinely technical issue—and cannot exceed 10 days. A motion for a bill of particulars cannot replace the counter-affidavit. A motion to dismiss filed instead may be treated as the counter-affidavit only if verified and containing the defenses.

Failure to respond can result in the case being resolved solely on the complainant’s evidence.

Build the defense around the actual elements

Possible defenses, depending on the evidence, include:

  • The statement was not defamatory when read in full context;
  • The complainant was not named or reasonably identifiable;
  • No third person received or understood the communication;
  • The respondent did not own or control the account or write the material;
  • The evidence does not reliably authenticate the account or post;
  • The respondent merely received or routinely reacted to another person’s post;
  • The statement was true and published with good motives and for justifiable ends;
  • The communication was privileged;
  • The speech concerned a public official or public figure and actual malice was not proved;
  • The post was made before the Cybercrime Prevention Act became effective;
  • The complaint was filed after prescription;
  • Venue was improperly laid; or
  • The same publication is being prosecuted in a manner prohibited by double jeopardy.

Do not include a defense merely because it sounds favorable. An affidavit is sworn evidence, and a false material statement may create additional legal exposure.

Preserve defense evidence

Keep:

  • The complete post, conversation, article, or thread—not just the complained-of sentence;
  • Drafts, source documents, official records, interviews, and research used before publication;
  • Communications showing efforts to verify the information or obtain the complainant’s side;
  • Account login history, security alerts, device records, and reports of hacking or impersonation;
  • Evidence identifying the actual author or account administrator;
  • The audience and privacy settings;
  • Documents showing a legal, moral, or social duty to communicate with the recipients;
  • Earlier reactions, messages, demands, or reports proving an earlier discovery date;
  • Proof of correction, deletion, retraction, apology, or efforts to limit harm; and
  • The subpoena, complaint, attachments, resolutions, and proof of every receipt date.

Do not hack an account, manufacture a conversation, delete device records, coach witnesses, or pressure the complainant to withdraw.

Truth, opinion, privilege, and public-interest speech

Truth is not always enough by itself

Article 361 states the general criminal-libel rule: the accused must show both that the imputation was true and that it was published with good motives and for justifiable ends.

For an imputation of an act or omission that is not itself a crime, Article 361 restricts proof of truth to statements against government employees concerning facts connected with their official duties. Constitutional protections for public-issue and public-figure speech may affect the analysis, so this issue should not be reduced to “true means automatically safe.”

“It was only my opinion” is not a complete defense

Courts examine substance and context. An opinion based on disclosed, substantially true facts—especially fair comment on a public matter—receives stronger protection. A statement phrased as an opinion may still be defamatory if an ordinary reader would understand it as asserting undisclosed or false facts.

Qualified privilege can remove the presumption of malice

Article 354 protects, subject to its requirements:

  • A private communication made in the performance of a legal, moral, or social duty; and
  • A fair and true report, made in good faith and without added comments, of a non-confidential judicial, legislative, or other official proceeding, or of official acts performed by public officers.

The communication must be made to proper recipients and for the protected purpose. Unnecessary public circulation, unrelated attacks, spite, knowledge of falsity, or reckless disregard for truth can defeat qualified privilege.

Public officials and public figures receive a different malice analysis

When the complainant is a public official or public figure and the statement concerns official conduct or a public issue, the prosecution must prove actual malice: knowledge that the statement was false or reckless disregard of whether it was false. The burden belongs to the prosecution. Mere mistake or negligence is not automatically actual malice, although fabricated accusations, deliberate avoidance of obvious truth, or serious doubts about accuracy can be important evidence. See Daquer v. People.

Penalties and civil exposure

For a current offense, cyber libel carries a penalty one degree higher than traditional written libel:

  • Imprisonment ranging from prisión correccional in its maximum period to prisión mayor in its minimum period—generally four years, two months and one day to eight years;
  • A fine of ₱40,000 to ₱1,500,000; or
  • Both, depending on the judgment.

The Supreme Court has ruled that imprisonment is not mandatory and that a court may impose a fine alone when legally justified. People v. Soliman. The exact sentence depends on the law in force on the offense date and the proven circumstances.

Civil damages may also be claimed. The civil action arising from the offense is generally deemed included in the criminal case unless waived, reserved when legally permitted, or previously filed. Article 33 of the Civil Code also recognizes an independent civil action for defamation. Filing separately can affect venue, prescription, costs, evidence, and coordination with the criminal case.

Retraction, apology, settlement, and desistance

A prior demand letter is not an element of cyber libel and is not required before filing.

Deletion, correction, apology, or retraction does not automatically erase a completed offense. It may nevertheless show good faith, reduce continuing harm, influence damages, or support a request for a fine rather than imprisonment.

An affidavit of desistance also does not automatically end the criminal case. Once the State prosecutes, the complainant is principally a witness on the criminal aspect. The prosecutor and, after an Information is filed, the court must independently determine the legal effect of any withdrawal or settlement.

Preserve the evidence and consult counsel before communicating a settlement proposal. Threatening, pressuring, or paying a witness to suppress truthful evidence can create separate problems.

Common mistakes

  • Waiting for a platform response while the one-year period runs;
  • Preserving only a cropped screenshot without the URL, context, or account details;
  • Assuming a username proves authorship;
  • Failing to obtain affidavits from third persons who saw the post;
  • Treating every insult as a defamatory factual imputation;
  • Filing in a city merely because the post could be accessed there;
  • Alleging the posting date but not the discovery date;
  • Ignoring public-figure, privilege, truth, identification, or publication issues;
  • Sending a demand before preserving a post that can be deleted;
  • Publicly arguing the case and creating new statements or admissions;
  • Missing the counter-affidavit, reconsideration, or review deadline;
  • Assuming a deletion, apology, or affidavit of desistance automatically dismisses the case;
  • Altering files, deleting logs, or accessing another person’s account without permission; and
  • Believing that a notarized screenshot is automatically admissible or conclusive.

When legal help is urgent

Contact a Philippine lawyer immediately when:

  • The discovery date is approaching one year;
  • The material is disappearing or the account is anonymous;
  • A subpoena, prosecutor’s resolution, Information, summons, or arrest warrant has been received;
  • The response or reconsideration period is already running;
  • The case involves a journalist, public official, election issue, whistleblower, workplace report, or privileged complaint;
  • Venue is disputed;
  • Platform or subscriber records require lawful preservation or disclosure;
  • There are multiple posts, complainants, jurisdictions, or related civil cases;
  • The account may have been hacked or impersonated;
  • A search, seizure, or examination of a phone or computer is requested; or
  • Settlement discussions involve money, retraction, confidentiality, or withdrawal of evidence.

Qualified indigent parties may seek assistance from the Public Attorney’s Office, subject to its indigency, merit, conflict, and service rules.

Frequently asked questions

Can someone file cyber libel over a private chat?

Only if the publication element is present. A message seen solely by the person criticized ordinarily is not published to a third person. A group chat, forwarded message, copied email, or message shown to someone else may qualify. A communication to proper recipients in the performance of a duty may also be privileged.

Is sharing or liking a defamatory post cyber libel?

A routine Like, Share, or reaction to another person’s post is not, by itself, punishable as aiding or abetting cyber libel under Disini. Writing a new defamatory caption, accusation, or comment is different and must be assessed on its own content.

Is a screenshot enough to win?

Not necessarily. It must be authenticated, placed in context, and linked to the alleged author. The prosecution must also prove identification, third-party publication, malice, and the other elements.

Does the one-year period start when the post was uploaded?

Not automatically. Under the Supreme Court’s final 2026 ruling, it starts upon actual discovery by the offended party, authorities, or their agents. Evidence can establish that discovery occurred earlier than claimed.

Does reporting the account to Facebook, TikTok, X, or another platform stop prescription?

Do not assume so. A platform report is not the prosecutor’s complaint contemplated by Article 91. Protect the deadline through the proper prosecution filing.

Can the accused be jailed immediately after a complaint is filed?

A prosecutor’s complaint alone does not automatically result in arrest. If an Information is later filed, the judge independently evaluates probable cause before issuing the appropriate process. Anyone who receives a warrant or learns that one was issued should obtain counsel promptly to arrange lawful surrender and bail rather than evade the court.

Can truth defeat the case?

Potentially, but the statutory defense ordinarily requires truth plus good motives and justifiable ends. Public-official, public-figure, and public-interest cases may also require the prosecution to prove actual malice.

Can the complainant recover damages without pursuing criminal prosecution?

A civil action may be available, including an independent civil action for defamation. It has its own one-year prescription and procedural requirements. Counsel should determine whether to file separately, reserve the claim, or pursue it with the criminal case.

Official sources

This article provides general legal information, not advice for a particular case. Outcomes depend on the exact words, audience, evidence, documents, dates, and procedural history. Philippine law and official procedures were checked through July 26, 2026.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.