How to File or Defend a Cyber Libel Case

Quick answer

To file a cyber libel case in the Philippines, act quickly: preserve the online material and proof of when it was discovered, identify the person responsible, and file a sworn complaint with the proper city or provincial prosecutor—or first seek technical investigation from the National Bureau of Investigation or Philippine National Police. Under the Supreme Court’s current ruling, cyber libel generally prescribes one year from discovery of the offense by the offended party, the authorities, or their agents. Filing location and interruption of prescription require careful legal assessment.

To defend against a complaint, do not ignore a subpoena, summons, warrant, or court notice. Preserve the complete conversation and surrounding context, obtain the complaint and attachments, and submit a fact-specific counter-affidavit within the deadline stated in the subpoena. Possible defenses include lack of authorship, identification, publication, defamatory meaning, or malice; truth published with good motives and justifiable ends; privileged communication; prescription; improper venue; and constitutional protection for fair comment or speech on matters of public interest.

Deleting a post does not erase possible criminal liability or evidence. Conversely, an offensive, false, or damaging post is not automatically cyber libel: every legal element must be proved, and protected speech cannot be punished merely because it is harsh or embarrassing.

What qualifies as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 punishes libel under the Revised Penal Code when committed through a computer system or a similar technological means. This may cover material posted or transmitted through social media, websites, blogs, online publications, messaging platforms, email, or other computer-based channels.

A prosecution generally must establish:

  1. A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person or juridical entity to contempt.
  2. Identification. The offended person is named or is identifiable from the words, images, surrounding facts, or audience’s knowledge. A person need not always be expressly named, but identification cannot rest on pure speculation.
  3. Publication. The material was communicated to at least one person other than the person allegedly defamed.
  4. Malice. The prosecution must establish the legally required form of malice. Malice may be presumed in an ordinary defamatory publication, but the presumption does not apply in the same way to privileged communications. Where constitutional protections apply—particularly speech involving public officials, public figures, or matters of public concern—the prosecution may have to establish actual malice.
  5. Use of a computer system. The alleged libel was committed through a computer, mobile phone, network, online platform, or comparable technology.
  6. Responsibility of the accused. Evidence must connect the respondent to the creation or publication of the specific statement.

Context matters. Prosecutors and courts should consider the entire post or exchange, not an isolated phrase stripped of surrounding text, images, links, audience, tone, and circumstances.

Who may be held responsible?

The Supreme Court upheld cyber libel principally as applied to the original author of the defamatory online statement. In Disini v. Secretary of Justice, the Court declined to extend liability automatically to people who merely receive and react to a post.

A like, reaction, or bare share should therefore not automatically be treated as authorship. The analysis may change if a person adds a new defamatory caption, edits or adopts an accusation as their own, or independently republishes it in circumstances satisfying all the elements. Administrators, editors, account owners, corporate officers, and employees are not criminally liable solely because of their title or access; their personal participation and the applicable statutory basis must be proved.

An account name or screenshot alone may not reliably identify the human author. Hacked, impersonated, shared, automated, or fictitious accounts require technical and testimonial evidence linking the publication to a particular person.

Statements that are not automatically cyber libel

Cyber libel does not arise merely because a statement is rude, insulting, unpopular, mistaken, or harmful to someone’s feelings or reputation. Depending on the facts, the following may defeat one or more elements:

  • A statement that is not defamatory when read in its full context
  • Pure opinion, rhetorical exaggeration, satire, or hyperbole that a reasonable audience would not understand as asserting a provable fact
  • A statement that does not identify the complainant
  • A private communication that was never shown to a third person
  • A publication that cannot be attributed to the respondent
  • A true allegation published with good motives and for justifiable ends
  • A privileged communication
  • Fair comment on a matter of public interest, especially when based on disclosed or substantially true facts
  • A fair and true report, made in good faith and without added defamatory comment, of specified official proceedings or acts
  • A complaint filed after the offense had prescribed
  • Material first published before the Cybercrime Prevention Act became effective, if prosecution would apply the criminal law retroactively to the accused’s disadvantage

“Truth” is not a shortcut. Article 361 of the Revised Penal Code generally requires both truth and good motives and justifiable ends, subject to the particular imputation and circumstances. A respondent should be prepared to prove the factual basis of the publication through admissible evidence.

The one-year deadline

In Causing v. People, G.R. No. 258524, April 8, 2026, the Supreme Court en banc affirmed that cyber libel prescribes in one year, consistent with the special period for libel under Article 90 of the Revised Penal Code. The period is generally counted from discovery of the offense by the offended party, the authorities, or their agents. The decision is available through the Supreme Court E-Library, together with the Court’s official summary.

Do not wait until the final weeks. Disputes can arise over:

  • When the complainant actually discovered the post
  • Whether someone else’s discovery is legally attributable to the complainant
  • Which filing interrupts prescription
  • Whether proceedings were later terminated or unjustifiably stopped
  • Whether a later edit, repost, or separate publication constitutes a new offense
  • Whether the complaint was filed with the proper office

Keep evidence of the discovery date, such as the original message forwarding the post, an email alert, a witness affidavit, platform notification, incident report, or dated request for legal or technical assistance. A self-serving statement about discovery may be challenged.

How to preserve online evidence

Preserve evidence before confronting the account owner or requesting removal. Online material can be edited, restricted, renamed, or deleted within minutes.

Save, where available:

  • Full-page screenshots showing the account name, exact wording, images, date, time, reactions, comments, and surrounding context
  • The complete URL or platform-specific link
  • A screen recording showing how the post was located and opened
  • Original downloaded files, emails, messages, attachments, and platform data exports
  • The account’s profile page, username, user ID, contact details, and prior name changes
  • Proof that another person saw or received the material
  • The device containing the original message, notification, or browsing history
  • Communications showing authorship, motive, admission, correction, apology, or refusal to remove
  • Evidence of falsity or truth, such as public records, contracts, receipts, official correspondence, recordings, and knowledgeable witnesses
  • Proof of when the material was first discovered
  • Evidence of reputational or financial harm, if damages will be claimed

Keep the originals. Do not crop, annotate, enhance, or overwrite the only copy. Record who collected each item, when it was collected, from what device or account, and whether it was transferred. Consider having an independent witness observe the live page.

Screenshots are useful but must still be authenticated. Notarization does not automatically prove that a screenshot is genuine, complete, attributable to the respondent, or admissible. Investigators may need lawful preservation or disclosure orders directed to a platform or service provider. Under Sections 13 and 14 of Republic Act No. 10175, preservation and compelled disclosure of computer data follow specific statutory and warrant requirements.

Do not obtain evidence by hacking an account, using stolen credentials, impersonating another person, unlawfully recording private communications, or taking someone’s device without authority.

How to file a complaint

1. Have the publication assessed before filing

Ask a lawyer to examine the exact words, full context, publication date, discovery date, identities involved, audience, venue, privileges, and available evidence. A demand to remove or correct the material may be useful in some cases, but it is not a universal legal prerequisite and does not stop the prescriptive period by itself.

A retraction or apology can affect practical resolution, intent, damages, or mitigation, but it does not necessarily extinguish an offense already committed.

2. Identify the correct respondent

Use evidence, not assumption. If the publisher is anonymous or using a false identity, seek assistance from the NBI Cybercrime Division or the PNP Anti-Cybercrime Group promptly. Subscriber, traffic, and content data may require preservation orders, warrants, international cooperation, or requests to foreign service providers.

Republic Act No. 10175 designates the NBI and PNP as the principal law-enforcement authorities for cybercrime investigations. Filing with investigators may help develop technical evidence, but it does not excuse delay in protecting the one-year deadline.

3. Determine the proper filing place

Cyber libel falls within the jurisdiction of the Regional Trial Court, including designated cybercrime courts. The proper territorial venue is a separate question and must be supported by allegations and evidence connecting the offense or a legally relevant element to that place.

Do not assume that a complaint may be filed anywhere the internet is accessible. Possible connecting facts include where a relevant act of publication occurred, where a computer system was situated, where the complainant was located when legally cognizable damage occurred, and the special venue provisions applicable to libel. Because the interaction between the Cybercrime Prevention Act, Article 360 of the Revised Penal Code, and the Rules of Criminal Procedure can be case-specific, confirm venue with the prosecutor or counsel before filing.

4. Prepare the complaint-affidavit

The sworn complaint should clearly state:

  • The complainant’s and respondent’s identifying and contact information, to the extent known
  • The exact allegedly defamatory words or material
  • The language used and an accurate translation where necessary
  • Where, when, and how the material was published and discovered
  • Why the statement refers to the complainant
  • Who received or saw it
  • Why it is defamatory and false, if falsity is asserted
  • Facts supporting authorship or control of the account
  • Facts relevant to malice
  • The basis for venue and timeliness
  • A chronological account without exaggeration or legal conclusions unsupported by facts

Attach properly marked copies of the electronic evidence, witness affidavits, records supporting falsity and identification, and proof of discovery. Follow the prosecutor’s current requirements for copies, electronic media, identification, certification, and filing.

5. File with the proper prosecutor or seek investigation

A complaint may be filed with the appropriate Office of the City or Provincial Prosecutor. A complainant who needs technical investigation may first approach the NBI or PNP cybercrime unit, which can investigate and endorse an appropriate complaint.

The prosecutor conducts a preliminary investigation under the applicable Rules of Criminal Procedure and the current DOJ–National Prosecution Service rules. The issue is not yet guilt beyond reasonable doubt. The prosecutor determines whether the evidence meets the governing standard for filing an Information in court, currently framed by the DOJ rules as prima facie evidence with reasonable certainty of conviction.

6. Follow the case and preserve evidence continuously

Keep stamped copies, docket numbers, official receipts if any, subpoenas, orders, and proof of every filing and service. Inform the prosecutor promptly if a platform responds to a preservation request, an account is renamed, or the material is altered or removed.

If the prosecutor dismisses or approves the complaint, remedies and deadlines may include a motion for reconsideration, petition for review within the DOJ, or an appropriate court remedy. The correct remedy and period depend on the issuing office, mode of service, and procedural history; obtain the written resolution and seek advice immediately.

How to respond if you are accused

1. Do not ignore the subpoena

A preliminary-investigation subpoena is not a conviction, but failing to answer may allow the prosecutor to resolve the complaint using only the complainant’s evidence. Note the date and manner of receipt and comply with the deadline printed in the subpoena or order. Do not assume that informal discussions, settlement talks, travel, or inability to hire a preferred lawyer automatically extends it.

If additional time is genuinely necessary, make a supported written request before the deadline. Approval is not automatic.

2. Obtain the complete record

Secure copies of:

  • The complaint-affidavit and all annexes
  • Witness affidavits
  • Screenshots, links, files, and translations
  • The subpoena and proof of service
  • Any investigator’s report
  • The exact charge and legal provision invoked

A defense cannot be prepared responsibly from a cropped screenshot or a social-media summary of the accusation.

3. Preserve your own evidence

Do not wipe devices, delete accounts, alter timestamps, fabricate conversations, or ask witnesses to change their accounts. Preserve drafts, source documents, research notes, private-message threads, login alerts, account histories, editorial records, and evidence showing who had access to the account.

If the account was hacked, impersonated, or shared, preserve security emails, IP alerts, recovery messages, device lists, authentication logs, reports to the platform, and police or incident reports.

4. Prepare a specific counter-affidavit

Address each legal element and each factual allegation. Depending on the evidence, defenses may include:

  • The respondent did not create or publish the material
  • The complainant is not identifiable
  • No third person received the communication
  • The words are not defamatory in context
  • The material is opinion, satire, or rhetorical expression rather than a provably false factual accusation
  • The factual imputation is true and was published with good motives and justifiable ends
  • The communication is absolutely or qualifiedly privileged
  • The statement concerns public conduct or a matter of public interest and the required actual malice is absent
  • The quoted material is incomplete, mistranslated, edited, or fabricated
  • Venue is improper
  • The charge prescribed before proceedings were commenced
  • The alleged act occurred before the cyber libel provision became effective
  • The evidence was unlawfully obtained or cannot be authenticated

Attach the documents and witness affidavits that support the defense. A bare denial is usually weaker than a denial supported by account records, source material, witnesses, contemporaneous communications, and the complete publication.

5. Act immediately if an Information has been filed

Once a court case exists, counsel should review the Information, probable-cause findings, venue, prescription, warrant or summons, bail, and possible motions. Do not evade service or assume that deleting the post will end the case.

If a warrant has been issued, obtain legal assistance before appearing or surrendering so counsel can verify the case, coordinate the lawful process, and address bail. Do not pay unofficial “fixers” or send money based solely on a call, text, or social-media message claiming that a warrant exists.

Malice, privilege, and public-interest speech

Presumed malice

Article 354 generally treats a defamatory imputation as malicious even if true, unless good intention and justifiable motive are shown, subject to the law’s privileged-communication exceptions. This presumption does not relieve the prosecution of proving the other elements.

Qualified privilege

Certain communications may be qualifiedly privileged, including a private communication made in the performance of a legal, moral, or social duty and a fair and true report made in good faith of qualifying official proceedings or acts, without additional defamatory comment.

Qualified privilege is not absolute. It may be defeated by proof of actual malice, excessive publication, lack of good faith, or use of the occasion for an improper purpose.

Public officials, public figures, and public concerns

People may criticize public conduct, government action, and matters affecting the community. Robust criticism does not become criminal merely because it is severe. When constitutional protections apply, actual malice generally means publication with knowledge of falsity or reckless disregard of whether the statement was false—not simply anger, ill will, carelessness, or an intent to criticize.

The status of the person, the nature of the controversy, whether the statement asserts fact or opinion, the publisher’s sources, and the steps taken to verify the accusation are fact-sensitive questions.

Possible penalties and civil liability

Traditional written libel under Article 355 is punishable by imprisonment, a fine, or both. Republic Act No. 10951 adjusted the statutory fine for Article 355 to ₱40,000 to ₱1,200,000. Section 6 of Republic Act No. 10175 provides for a penalty one degree higher when a Revised Penal Code offense is committed through information and communications technology. The precise imposable sentence depends on the charge, applicable penalty rules, modifying circumstances, and the Indeterminate Sentence Law.

Imprisonment remains legally possible. Supreme Court guidance favoring a fine in appropriate libel cases does not abolish imprisonment or guarantee that a particular accused will receive only a fine.

A criminal case may also carry civil liability. Depending on how the civil claim is pleaded or reserved, a complainant may seek actual, moral, exemplary, or other legally recoverable damages. Awards are not automatic: the claimant must establish the legal basis and, where required, competent proof of injury and amount.

Separate civil remedies may also arise under the Civil Code, but they can involve different elements, prescriptive periods, venue rules, and procedural choices. Filing a criminal complaint without considering the accompanying civil action can unintentionally affect later options.

Common mistakes by complainants

  • Waiting for a platform response, apology, or private negotiation while the one-year period runs
  • Saving only a cropped screenshot without the URL, date, account details, or surrounding thread
  • Assuming the account owner is necessarily the author
  • Filing in a convenient location without establishing proper venue
  • Quoting a statement without its full context
  • Naming everyone who liked, shared, administered, or followed an account without evidence of personal publication
  • Treating every insult or adverse opinion as a false assertion of fact
  • Overlooking privilege, public-interest speech, or proof supporting the statement
  • Exaggerating harm or making allegations not supported by the attachments
  • Accessing private accounts or devices unlawfully
  • Assuming that a demand letter, barangay complaint, or platform report necessarily interrupts prescription

Common mistakes by respondents

  • Ignoring the subpoena because no court case has yet been filed
  • Posting threats, counter-accusations, or details about the complainant and witnesses
  • Deleting the only available copy of the full context
  • Submitting a bare denial without documentary or technical support
  • Claiming “freedom of speech” as if it protected knowingly false defamatory factual accusations
  • Relying on truth without proving good motives and justifiable ends where the law requires them
  • Assuming that anonymity, a disclaimer, a question mark, or the words “allegedly” eliminate liability
  • Contacting witnesses in a manner that could be understood as intimidation
  • Missing the deadline for a counter-affidavit, reconsideration, DOJ review, court appearance, or bail
  • Treating an apology or removal as an automatic dismissal

When legal help is urgent

Seek a Philippine lawyer promptly if:

  • The alleged publication was discovered close to one year ago
  • A subpoena, prosecutor’s resolution, Information, summons, or warrant has been received
  • The publisher is anonymous or located abroad
  • Platform records may soon be deleted
  • A child, intimate image, threat, stalking, identity theft, or unauthorized access is involved
  • The post concerns a public official, journalist, election, government project, or public controversy
  • Multiple people or corporate accounts participated
  • The complaint involves several reposts, edits, or jurisdictions
  • Police seek access to a device, account, password, or private messages
  • A search, seizure, disclosure, or cybercrime warrant is being executed
  • Settlement terms require payment, admission, retraction, confidentiality, or surrender of devices
  • There is a genuine risk of violence, self-harm, witness intimidation, or retaliation

For immediate physical danger or threats, contact law enforcement rather than treating the matter solely as a reputation dispute.

Frequently asked questions

Must I send a demand letter before filing?

Not generally as an element of cyber libel. A demand may help establish notice, request correction, or explore settlement, but it can consume valuable time and does not by itself stop prescription.

Is a private message cyber libel?

Only if there is publication to a third person. A message sent solely to the person criticized normally lacks that element, although threats, harassment, extortion, or other offenses may still be relevant. A group chat or copied email may satisfy publication because other recipients received it.

Is a screenshot enough?

Not necessarily. It must be authenticated and connected to the alleged author. Preserve the live link, full context, original device or file, account identifiers, metadata where available, and testimony from someone who personally accessed or received the material.

Can a person be charged for sharing someone else’s post?

A bare share or reaction is not automatically cyber libel under the Supreme Court’s treatment of secondary online activity. Liability depends on what the person actually added, adopted, or independently published and whether every element is proved.

Does deleting the post end the case?

No. Deletion may stop further visibility and may be relevant to mitigation or settlement, but it does not necessarily erase an offense or civil claim. Deletion after notice may also create an evidence dispute.

Does an apology prevent prosecution?

No. An apology may assist settlement or mitigation, but only the proper prosecutor or court can dispose of a pending criminal matter according to law. Cyber libel is a public offense; private forgiveness does not automatically compel dismissal.

Can the complainant withdraw the case?

The complainant may execute an affidavit of desistance, but it does not automatically bind the prosecutor or court. Its effect depends on the stage of the case and the remaining evidence.

Is criticism of a government official cyber libel?

Not merely because it is harsh. Criticism of official conduct and matters of public concern receives strong constitutional protection. Knowingly false factual accusations or statements made with reckless disregard of truth may fall outside that protection. The exact words, factual basis, subject, and evidence of actual malice matter.

Does the one-year period always run from the posting date?

Not necessarily. Under Causing v. People, it generally runs from discovery by the offended party, authorities, or their agents. The discovery date and any interruption of prescription must be proved. Do not assume that every later view, share, or platform reminder restarts the period.

Can a foreign post be prosecuted in the Philippines?

Possibly. Section 21 of Republic Act No. 10175 recognizes Philippine jurisdiction in specified situations involving Philippine elements, computer systems, Filipino nationals, or damage to a person in the Philippines. Jurisdiction, territorial venue, service, extradition, and access to foreign platform evidence remain separate issues.

Can the parties settle?

They may discuss retraction, correction, apology, removal, confidentiality, or civil compensation. Any agreement should be reviewed carefully because a private settlement does not necessarily terminate the State’s criminal case. Never use threats of criminal prosecution solely to obtain money or an unrelated advantage.

Official legal references

This article provides general legal information, not advice for a particular complaint or defense. Cyber libel outcomes depend heavily on the exact words, full publication, evidence, discovery date, venue, procedural history, and status of the people involved. Consult a Philippine lawyer promptly for case-specific advice. Laws and primary sources were checked as of September 19, 2026.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.