How to File or Defend a Cyber Libel Case

Quick answer

A cyber libel case in the Philippines generally requires proof that a person publicly and maliciously made a defamatory statement identifying another person, and published it through a computer system or similar information-and-communications technology. The governing provisions are Article 353 in relation to Article 355 of the Revised Penal Code and Section 4(c)(4) of the Cybercrime Prevention Act of 2012.

If you are the person harmed, preserve the post and its electronic context immediately, identify the author and witnesses, document when you first discovered it, and promptly consult counsel about filing a sworn complaint with the prosecutor’s office having proper venue. The Supreme Court has now definitively ruled that cyber libel prescribes in one year from discovery by the offended party, the authorities, or their agents, subject to interruption and other rules under Article 91 of the Revised Penal Code. Do not assume that an old post is automatically prescribed.

If you have received a subpoena, complaint-affidavit, information, or warrant, do not ignore it or answer publicly. Preserve your account and source materials, note the exact date and manner of service, and obtain criminal-defense counsel immediately. A missed counter-affidavit, bail, arraignment, or appeal deadline can seriously prejudice the defense.

What counts as cyber libel?

Cyber libel is libel committed through a computer system or another similar technological means. It can involve a social-media post, online article, blog, email circulated to third persons, video caption, message in an online group, or another digital publication.

The prosecution ordinarily must establish:

  1. A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a natural or juridical person to contempt.
  2. Identification. The offended person is named or can reasonably be identified from the words and surrounding circumstances.
  3. Publication. At least one person other than the subject received, read, heard, or saw the statement.
  4. Malice. The applicable form of malice must be proved or lawfully presumed. Privileged communications and speech concerning public officials or public figures can change the required analysis.
  5. Use of a computer system or ICT. The defamatory material was published online or through covered technology.
  6. Participation by the accused. The evidence must connect the accused to the creation or actionable publication of the material.

Whether words are defamatory is assessed in context—not from an isolated screenshot alone. Courts may consider the entire post, accompanying images or links, the audience, ordinary meaning, and surrounding exchange.

A harsh opinion, insult, satire, criticism, or accusation is not automatically cyber libel. The precise language, whether it asserts a provable fact, the identity and status of the subject, the occasion of publication, and the available defenses all matter.

Who may be charged?

The principal target is ordinarily the person who authored and published the defamatory online material.

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author but invalidated the Cybercrime Prevention Act’s aiding-or-abetting provision insofar as it applied to cyber libel. A person should therefore not be charged with aiding cyber libel merely for an ordinary “like,” reaction, or similar interaction with someone else’s post.

That protection has limits. A user who adds a new defamatory accusation in a comment, caption, quote-post, or separate post may be treated as the author of that new publication. Deliberately reposting material may also raise fact-sensitive questions about authorship, republication, and intent. Do not assume that adding “shared only,” a question mark, or “allegedly” eliminates liability.

Editors, account administrators, employers, corporate officers, and media executives are not automatically criminally liable simply because of their title. Their actual participation, authority, knowledge, and conduct must be proved.

The one-year deadline

The controlling rule is now clear: cyber libel prescribes in one year.

In its April 8, 2026 en banc resolution in Causing v. People, G.R. No. 258524, the Supreme Court affirmed that cyber libel remains libel for purposes of Article 90 of the Revised Penal Code, notwithstanding its higher penalty. The Court rejected the argument that the offense generally carries a 15-year prescriptive period.

The one-year period ordinarily:

  • begins when the allegedly defamatory material is actually discovered by the offended party, the authorities, or their agents;
  • is interrupted by the filing of the complaint or information as provided by Article 91 and the applicable procedural rules;
  • may begin running again if proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused; and
  • does not run while the offender is absent from the Philippines under Article 91.

The Supreme Court also held that a person is not automatically presumed to have discovered a post on the day it was uploaded merely because it was placed on Facebook or another online platform. Privacy settings, audience restrictions, algorithms, deletion, and other circumstances may affect actual discovery.

The discovery date is therefore often disputed. A complainant should preserve evidence showing when and how the post was first found. An accused should examine earlier messages, comments, reports, responses, screenshots, or communications that may show earlier knowledge.

Because prescription can turn on evidence and interruption rules, calculate the deadline with a lawyer rather than waiting until the end of the year.

How to prepare and file a complaint

1. Preserve the complete electronic evidence

Before reporting or requesting removal, preserve:

  • the full post, article, comment, caption, image, audio, or video;
  • the account name, profile link, username, and visible account details;
  • the complete URL, not merely a cropped screenshot;
  • the publication date and time, including the displayed time zone if available;
  • comments, shares, reactions, edits, and surrounding conversation;
  • screen recordings showing how the material was accessed;
  • original files and their available metadata;
  • notification emails or messages from the platform;
  • names and contact details of people who received or viewed the material;
  • messages or events showing when you first discovered it;
  • prior demands, corrections, retractions, threats, or admissions; and
  • evidence connecting the account to the suspected author.

Keep the original device and unedited files. Back them up without altering filenames or metadata. Record who collected each item and how. Printed screenshots may help explain the complaint, but authentication and the original electronic context may still be contested under the Rules on Electronic Evidence.

Do not obtain evidence by hacking an account, impersonating another person, unlawfully recording private communications, or altering a file.

2. Evaluate every legal element

Identify the exact words alleged to be defamatory. Explain:

  • what they mean in context;
  • why they refer to you or your organization;
  • who received or saw them;
  • why they are false or otherwise unlawful;
  • what facts indicate malice, if required;
  • how the respondent is linked to the account or publication; and
  • when and how you discovered the publication.

Embarrassment or anger alone does not establish cyber libel. A complaint must be supported by admissible evidence covering the legal elements and reasonably anticipated defenses.

3. Confirm venue

Cybercrime cases fall within the jurisdiction of the Regional Trial Court, including designated cybercrime courts, under Section 21 of Republic Act No. 10175. Venue for libel is also governed by the special rules in Article 360 of the Revised Penal Code. Depending on the parties and circumstances, relevant places can include the place of first publication, the offended private person’s actual residence at the time, or the office held by an offended public officer.

Online access from a place does not necessarily prove that the material was first published there. Filing in the wrong locality can lead to dismissal or other serious delay. Have counsel determine the correct prosecutor’s office and eventual trial court from the evidence—not simply from where the complainant currently lives.

4. Execute and file a complete complaint-affidavit

A criminal case requiring preliminary investigation begins with a sworn complaint filed with the proper prosecution office. The filing should ordinarily include:

  • the complaint-affidavit;
  • affidavits of witnesses with personal knowledge;
  • properly organized electronic and documentary exhibits;
  • proof connecting the respondent to the publication;
  • evidence of discovery and timeliness;
  • proof of publication to a third person; and
  • available supporting records, certifications, or forensic findings.

The National Bureau of Investigation and Philippine National Police are the principal law-enforcement authorities under the Cybercrime Prevention Act. Their cybercrime units may assist with investigation, digital forensics, account attribution, and applications for appropriate cybercrime warrants. A private complainant cannot compel a platform to disclose protected subscriber or content data simply by sending a demand; compulsory disclosure generally requires lawful process.

5. Participate in the preliminary investigation

The prosecutor evaluates whether the evidence satisfies the governing standard for filing an information in court. The respondent must be given the prescribed opportunity to submit a counter-affidavit and supporting evidence.

The DOJ’s current rules and the subpoena should be checked carefully for the controlling response period, filing method, permitted extensions, number of copies, and service requirements. Do not rely on an old online form or an informal statement from the opposing party.

A finding supporting prosecution is not a conviction. At trial, guilt must still be proved beyond reasonable doubt.

How to respond if you are accused

Take service and deadlines seriously

Immediately record:

  • the date, time, and manner in which the subpoena or court process was received;
  • the prosecutor’s or court’s docket number;
  • the office, branch, and hearing dates;
  • the deadline stated in the subpoena; and
  • every document and attachment actually served.

Give counsel the complete set. Do not assume that deleting the post, blocking the complainant, or declining to collect the subpoena makes the case disappear.

Preserve, do not delete

Retain:

  • the complete post and discussion thread;
  • drafts and publication history;
  • source documents, interviews, recordings, and research notes;
  • communications with editors, administrators, or witnesses;
  • records showing who controlled the account;
  • device and login records lawfully available to you;
  • documents supporting truth, good motive, or public interest;
  • the platform’s privacy and audience settings; and
  • evidence bearing on the complainant’s discovery date.

Deletion may destroy helpful context and can generate allegations of concealment. Discuss any correction, takedown, or retraction with counsel first.

Prepare a factual counter-affidavit

A counter-affidavit is evidence under oath, not a casual answer or public-relations statement. It should address the elements of the charge and authenticate supporting exhibits. Potential issues may include:

  • the words are not defamatory when read in full context;
  • the complainant was not identifiable;
  • there was no publication to a third person;
  • the accused did not own, control, author, or publish through the account;
  • the material is substantially true and was published with good motives and for justifiable ends;
  • the statement is protected opinion, fair comment, or privileged communication;
  • the prosecution cannot establish the required malice;
  • venue is improper;
  • the offense had prescribed before the complaint was filed;
  • the post predates the effectivity of the Cybercrime Prevention Act and was not later actionably republished; or
  • the evidence is unauthenticated, incomplete, altered, or unlawfully obtained.

A motion to dismiss submitted instead of a counter-affidavit may not protect the respondent under the applicable preliminary-investigation rules. Follow the subpoena and obtain advice before choosing a procedural response.

Do not litigate the case on social media

Publicly attacking the complainant, witnesses, prosecutor, or judge can create new evidence or a separate defamatory publication. It may also undermine a claim of good faith. Route communications through counsel and avoid coaching witnesses or coordinating false accounts.

Important defenses and exceptions

Truth is not always enough by itself

Article 361 of the Revised Penal Code permits proof of truth in the circumstances specified by law. For a complete defense, the publication generally must also have been made with good motives and for justifiable ends.

Preserve reliable sources establishing the substantial truth of the material and the legitimate reason for publishing it. Rumor, anonymous messages, or “everyone knew it” are not substitutes for evidence.

Special limits apply when the imputation concerns certain matters involving public officers or private persons. The exact Article 361 requirements should be applied to the particular accusation.

Privileged communications

Article 354 recognizes qualifiedly privileged communications, including:

  • a private communication made in the performance of a legal, moral, or social duty; and
  • a fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts.

Privilege is not a blanket license to publish accusations to everyone online. The occasion, audience, relevance, accuracy, good faith, and presence or absence of actual malice matter. Excessive publication or unrelated personal attacks may defeat the protection.

Public officials, public figures, and matters of public concern

Criticism of government and discussion of public affairs receive strong constitutional protection. In cases involving public officials, public figures, or matters of public concern, the prosecution may have to establish actual malice—knowledge of falsity or reckless disregard of whether the statement was false—depending on the facts and the nature of the speech.

“Actual malice” in this constitutional sense does not merely mean anger, dislike, or ill will. The classification of a person as a public figure and the applicable level of protection are legal questions that should not be assumed.

Opinion, satire, and rhetorical language

Pure opinion that does not assert or imply a false defamatory fact may be protected. But labeling an accusation “opinion,” “satire,” “blind item,” or a question does not control. Courts consider what an ordinary reader would reasonably understand from the complete publication.

Retraction and correction

A prompt, sincere correction or retraction may affect the evidence of malice, damages, or sentencing considerations, but it does not automatically erase an already completed offense. A proposed retraction should be accurate and carefully drafted; a vague or combative “apology” can make matters worse.

Warrants, account data, and digital searches

Cybercrime investigators have specialized procedures for preserving, disclosing, intercepting, searching, seizing, and examining computer data. The Supreme Court’s Rule on Cybercrime Warrants governs applications for and execution of these warrants.

Republic Act No. 10175 provides, among other things, for preservation of specified computer data and court-authorized disclosure or examination. Evidence obtained without a valid warrant, or beyond the warrant’s authority, may be inadmissible under the Act’s exclusionary rule.

If investigators seek access to a phone, computer, account, or cloud data:

  • remain calm and do not physically obstruct them;
  • ask to see and obtain a copy of the warrant;
  • note the issuing court, authorized acts, devices, accounts, locations, and validity period;
  • do not volunteer passwords or consent without legal advice;
  • request the presence of counsel;
  • record, through lawful means, what was taken; and
  • preserve receipts, inventories, forensic copies, and return documents.

A warrant must be analyzed from its actual terms. General advice cannot determine whether a particular search or demand is valid.

Penalties and other consequences

Ordinary written libel under Article 355 is punishable by imprisonment, a fine of ₱40,000 to ₱1,200,000, or both, in addition to possible civil liability. These fine amounts reflect the amendments made by Republic Act No. 10951.

When libel is committed through ICT, Section 6 of the Cybercrime Prevention Act raises the applicable penalty by one degree. The precise indeterminate sentence, eligibility for bail or probation, and whether a court may impose a fine instead of imprisonment depend on the charge, circumstances, governing sentencing rules, and judicial findings.

A complainant may also pursue civil relief where legally available. Damages are not automatic: injury, causation, entitlement, and amount must be proved. A criminal acquittal does not answer every possible civil question in the same way, and the election or reservation of civil remedies can have procedural consequences.

Common mistakes

Mistakes by complainants

  • Filing close to the one-year deadline without accounting for venue or evidentiary defects.
  • Submitting only cropped screenshots without URLs, account details, context, or originals.
  • Failing to prove that a third person saw the material.
  • Assuming that account ownership proves who authored the post.
  • Treating every insult or negative review as a defamatory factual accusation.
  • Filing in the most convenient city without establishing legal venue.
  • Overlooking privilege, truth, public-interest speech, or actual-malice requirements.
  • Pressuring witnesses to adopt facts they did not personally observe.
  • Obtaining evidence through unauthorized account access.

Mistakes by respondents

  • Ignoring the subpoena or submitting an unsworn letter.
  • Using the counter-affidavit deadline to negotiate informally while filing nothing.
  • Deleting accounts, chats, drafts, source materials, or device data.
  • Posting new accusations against the complainant.
  • Assuming that “shared post,” “for awareness,” or “allegedly” is a complete defense.
  • Relying only on freedom of speech without addressing the elements and evidence.
  • Claiming prescription from the upload date without evidence of the discovery date.
  • Voluntarily surrendering devices, credentials, or statements without understanding the request or warrant.
  • Contacting witnesses in a way that may look like intimidation or coaching.

When legal help is urgent

Seek a Philippine lawyer immediately if:

  • the one-year prescriptive period may expire soon;
  • you received a subpoena with a counter-affidavit deadline;
  • an information has been filed in the Regional Trial Court;
  • a warrant of arrest, search warrant, or cybercrime warrant has been issued or executed;
  • investigators request devices, passwords, account data, or a formal interview;
  • the disputed publication concerns a public official, journalist, confidential source, minor, intimate material, or pending case;
  • the author is anonymous or located abroad;
  • there are threats, doxxing, stalking, or risks to physical safety;
  • multiple posts or alleged republications have different dates; or
  • the same facts may also involve privacy, data-protection, harassment, election, employment, or professional-disciplinary laws.

If arrest appears imminent, counsel should promptly verify the case and address bail and court appearance. Do not evade lawful process.

Frequently asked questions

Can I file over a Facebook post or group-chat message?

Yes, if the legal elements are present. A restricted audience does not necessarily prevent publication; communication to even one person other than the subject may be sufficient. Privacy settings remain relevant to publication, discovery, evidence, and context.

Is a private message cyber libel?

A message sent only to the person being criticized ordinarily lacks publication to a third person. If it is also sent to other recipients, publication may exist. Other offenses or civil remedies may still apply even when libel does not.

Is sharing someone else’s post automatically cyber libel?

Not automatically. Disini rejected aiding-and-abetting liability for ordinary online interactions in relation to cyber libel. But adding a new defamatory assertion or deliberately making a fresh actionable publication creates a different issue.

Does deleting the post end the case?

No. Deletion does not undo a completed publication and may destroy evidence. It may nevertheless limit continuing harm and can be relevant to good faith or damages. Get advice before changing the material.

Can an anonymous account be charged?

Potentially, but the author must be lawfully identified and connected to the publication. Investigators may need platform records, subscriber information, device evidence, witnesses, or cybercrime warrants. An IP address alone may not establish who wrote the post.

Does cyber libel prescribe one year after posting?

Not necessarily. Under Causing, the period begins upon discovery by the offended party, the authorities, or their agents—not automatically on the upload date. The filing of a complaint or information may interrupt the period, and Article 91 contains additional rules.

Can truth defeat the case?

Truth can be a defense, but Article 361 generally also requires good motives and justifiable ends. The nature of the imputation and the person concerned can affect how the defense operates.

Can the complainant simply withdraw the case?

A cyber libel prosecution is brought in the name of the People of the Philippines and remains under prosecutorial and judicial control. An affidavit of desistance may affect the evidence or practical viability of the prosecution, but it does not automatically compel dismissal.

Where can official legal texts be checked?

Primary references include the Cybercrime Prevention Act, the Revised Rules of Criminal Procedure, Disini v. Secretary of Justice, and the Supreme Court’s current ruling in Causing v. People.

Disclaimer

This article provides general Philippine legal information, not legal advice or an attorney-client relationship. Cyber libel outcomes depend on the exact words, full electronic record, parties, venue, discovery date, procedural history, and available evidence. Procedures and filing requirements should be confirmed with the proper prosecution office or court and qualified Philippine counsel.

Primary-law check completed: September 18, 2026.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.