Quick answer

Cyber libel is committed when a person publishes a defamatory statement through a computer system—such as a social-media post, online article, message, video, or similar digital communication—and the prosecution can establish all legal elements of libel, including identification of the person defamed, publication to someone else, and malice.

If you intend to complain, preserve the original digital evidence and act immediately. The Supreme Court has ruled that cyber libel generally prescribes one year from discovery by the offended party, the authorities, or their agents. Filing the proper complaint or information interrupts prescription, but disputes about the discovery date often require evidence.

If you receive a subpoena, do not ignore it or answer publicly. Obtain the complete complaint and attachments, preserve your accounts and devices, and submit a sworn counter-affidavit with all available defenses and supporting evidence by the date stated in the subpoena. A prosecutor’s investigation is not yet a conviction, but an incomplete or late response can seriously weaken the defense.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on written libel when the publication is made through a computer system or a similar technological means.

A prosecutable case ordinarily requires proof of the following:

A defamatory imputation. The statement attributes a crime, vice, defect, dishonorable act or condition, or another matter capable of bringing a person into discredit, contempt, or ridicule.
Publication. Someone other than the person defamed received, read, heard, or viewed the statement. A purely private message seen only by its subject generally lacks this element, although sending it to another person may constitute publication.
Identification. The complainant must be identifiable from the words, images, context, or surrounding circumstances. Naming the person is not always necessary, but a statement about an undefined group may be insufficient to identify a particular member.
Malice. Malice is generally presumed from a defamatory publication unless the communication is privileged. In cases involving privileged speech, public officials, public figures, or matters of public concern, the prosecution may have to prove actual malice—knowledge of falsity or reckless disregard for whether the statement was false.
Use of a computer system. The defamatory matter was published using a computer, mobile phone, online platform, network, or comparable technology.
Responsibility of the accused. Evidence must connect the respondent to the publication. A profile name, photograph, or screenshot alone may not conclusively prove who controlled an account or made a particular post.

Context matters. Courts assess the entire publication, its ordinary meaning, its audience, and the surrounding circumstances—not merely an isolated word or sentence.

What may not be cyber libel?

Not every insulting, critical, inaccurate, or unpleasant online statement is criminal libel. Depending on the facts, liability may be defeated where:

the complainant cannot be identified;
nobody other than the complainant received the communication;
the words are not defamatory when read in context;
the accused did not create or publish the material;
the account was fake, compromised, impersonated, or controlled by someone else;
the publication occurred before the Cybercrime Prevention Act became effective and was not validly republished afterward;
the statement is covered by an absolute or qualified privilege;
the requirements for proving actual malice are not met;
truth, good motives, and justifiable ends are properly established where the Revised Penal Code permits that defense; or
the criminal action has prescribed.

Truth is important, but it is not automatically a complete defense in every private dispute. Article 361 of the Revised Penal Code generally requires proof not only that the imputation was true but also that it was published with good motives and for justifiable ends. The application of this rule depends on the subject, the person involved, and the purpose of the publication.

Statements of opinion are also evaluated carefully. Merely labeling an accusation “opinion” does not protect it if it implies undisclosed, defamatory facts. Conversely, criticism, rhetorical language, satire, or a value judgment that cannot reasonably be understood as asserting a defamatory fact may be constitutionally protected.

Privileged communications and public-interest speech

Article 354 of the Revised Penal Code recognizes qualified privileges, including:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without comments or remarks, of qualifying official proceedings or acts of public officers.

A qualified privilege does not give blanket immunity. It generally removes the presumption of malice, requiring proof of actual malice. The privilege may be lost through unnecessary circulation, irrelevant accusations, excessive language, fabrication, or proof that the publisher knew the charge was false or recklessly disregarded its probable falsity.

Statements made during judicial proceedings may receive broader protection when relevant to the proceeding. Whether a communication is privileged is a legal question that should be assessed using the exact statement, audience, purpose, and circumstances.

The constitutional protection of speech and the press is especially important when a publication concerns public officials, public figures, official conduct, or matters of legitimate public interest. It does not, however, protect deliberate falsehoods or reckless factual accusations in every situation.

Are likes, shares, comments, and reposts automatically punishable?

No. In Disini v. Secretary of Justice, the Supreme Court sustained cyber libel as applied to the original author of an online publication but rejected the law’s application, on the provisions challenged there, to people who merely receive and react to it.

That ruling should not be read as permission to republish defamatory material. A person who adds a new defamatory caption, edits and republishes an accusation, or independently adopts and disseminates it may become an original publisher of a new statement. Liability depends on the precise act—not simply on the platform’s label for “share,” “repost,” or “comment.”

Editing an older online article can also create a republication issue if the change is substantial enough to amount to a new publication. Minor technical changes and material editorial changes are not necessarily treated alike.

The one-year deadline

Cyber libel generally prescribes in one year under Articles 90 and 91 of the Revised Penal Code. The Supreme Court confirmed this rule in Causing v. People, abandoning earlier rulings that had applied much longer periods.

The year ordinarily begins when the alleged cyber libel is discovered by the offended party, the authorities, or their agents. Publication and discovery may occur on the same date, but they are not legally identical in every case.

The period is interrupted by filing the complaint or information. It may begin running again if the proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused. Prescription generally does not run while the offender is absent from the Philippines.

Because the discovery date and the effect of a particular filing may be disputed, do not wait until the last days of the period. Preserve evidence showing:

when the publication first appeared;
when the complainant or authorities first learned of it;
when it was reported, forwarded, quoted, or discussed;
when any complaint was actually filed and officially docketed; and
whether the content was later materially edited or republished.

Prescription is often a factual defense. Unless it is apparent from the face of the charging document, the accused may have to prove it with admissible evidence.

How to file a cyber libel complaint

1. Preserve the publication properly

Before requesting deletion or confronting the publisher, preserve:

full-page screenshots showing the account name, text, images, date, time, and visible URL;
the direct link to the post, article, video, profile, or message;
screen recordings showing how the content was accessed;
downloaded copies in their original format, where lawfully available;
the device, browser history, emails, notifications, and message threads;
names and affidavits of people who received or saw the publication;
evidence identifying the account operator;
earlier versions and later edits;
proof of the discovery date; and
records of concrete harm, such as cancelled contracts, employer communications, lost customers, or medical treatment.

Do not crop out information needed to understand or authenticate the evidence. Keep untouched originals and create working copies. Record who collected each item, when, and from what device or account.

A printout or screenshot can be evidence, but authenticity and integrity may be challenged. Electronic evidence must comply with the Rules on Electronic Evidence and other applicable evidentiary rules.

2. Identify the correct respondent and publication

Separate suspicion from proof. Document why a particular person is believed to control the account or to have authored, approved, or published the material. Consider account admissions, linked contact details, consistent identifiers, witness testimony, metadata obtained lawfully, and the surrounding conversation.

Do not obtain evidence by hacking an account, secretly accessing a device without authority, impersonating another person, or unlawfully recording private communications.

3. Determine the proper prosecution office

A criminal complaint is generally initiated by filing a sworn complaint-affidavit and supporting evidence with the prosecution office having territorial authority. The NBI and PNP have specialized cybercrime units that may investigate and assist in preserving or lawfully obtaining technical evidence.

Venue is fact-sensitive. Republic Act No. 10175 gives Regional Trial Courts jurisdiction when, among other circumstances, an element occurred in the Philippines, a relevant computer system was wholly or partly situated here, or the offense caused damage to a person who was in the Philippines. This does not necessarily permit filing in any city preferred by the complainant.

Before filing, confirm venue with the relevant prosecutor’s office or counsel based on where the publication, computer use, receipt, discovery, and alleged injury occurred. Filing in the wrong office can cause delay and may endanger the one-year period.

4. Prepare the complaint-affidavit

The affidavit should state facts within the affiant’s personal knowledge, including:

the complainant’s and respondent’s identities;
the exact words, images, or recording complained of;
where and how the material was published;
how the complainant is identified;
who else received or viewed it;
why it is defamatory;
facts supporting malice, where required;
why the respondent is responsible;
when and how the publication was discovered;
facts establishing territorial authority and venue; and
the injury or damage claimed.

Attach and clearly label the evidence. Witnesses with relevant personal knowledge should execute their own affidavits. Avoid exaggeration, speculation, and unsupported conclusions.

5. Follow the prosecutor’s filing instructions

The National Prosecution Service’s current preliminary-investigation rules permit electronic and virtual processes in appropriate cases, but implementation and accepted filing methods can differ among offices. Confirm the current requirements directly with the proper prosecution office. Do not assume that an email, online report, police blotter, platform report, or demand letter by itself constitutes the filing that interrupts prescription.

After evaluating the complaint, the prosecutor may dismiss it outright or issue a subpoena requiring the respondent to submit a counter-affidavit. The present standard is prima facie evidence with reasonable certainty of conviction.

6. Address civil relief separately and carefully

Civil liability arising from the alleged offense may be included with the criminal action unless it is waived, reserved, or previously instituted separately under the Rules of Criminal Procedure. A separate civil action for defamation is also subject to strict prescriptive and procedural rules.

If damages are requested, preserve reliable proof of the nature, amount, and causal connection of the loss. Emotional distress or reputational injury should not be supported by invented figures or general assertions.

How to defend after receiving a subpoena

1. Record the date and method of service

Keep the envelope, email headers, acknowledgment, subpoena, complaint-affidavit, annexes, and proof of the date received. The subpoena should specify the deadline or hearing date and ordinarily provide at least ten days from receipt for the counter-affidavit in a regular preliminary investigation.

Follow the actual date in the subpoena. Shorter procedures may apply to cases assigned to an expedited process, and extensions are not automatic.

2. Obtain the complete record

Check whether all referenced posts, attachments, witness affidavits, links, and media files were supplied. Promptly request access to omitted or voluminous records through the investigating prosecutor. Do not rely on a social-media summary of the accusation.

3. Preserve—not delete—your evidence

Retain the original device, account data, drafts, messages, source documents, access logs, and full conversation. Deletion after learning of a complaint can destroy exculpatory context and create credibility or evidence-preservation problems.

You may take reasonable steps to prevent continuing harm, but first secure an authentic copy and obtain advice on whether removal, correction, or a platform request could affect the case.

4. Build the defense element by element

A counter-affidavit may address:

whether the words are actually defamatory in context;
whether the complainant is identifiable;
whether publication to a third person occurred;
whether the respondent authored or controlled the account;
whether the account or device was compromised;
whether the post was altered, fabricated, or incompletely captured;
whether a privilege applies;
whether actual malice can be proved;
the sources and verification performed before publication;
truth, good motives, and justifiable ends where applicable;
whether the alleged act occurred before the law took effect;
whether there was a legally significant republication;
territorial authority and venue;
prescription and the true discovery date; and
constitutional protection for speech on public affairs.

Support each factual defense with sworn witness statements and documents. A bare denial is usually less persuasive than a detailed account supported by objective records.

5. Submit a sworn counter-affidavit on time

Under the current DOJ-NPS framework, a motion to dismiss ordinarily should not be used as a substitute for a counter-affidavit. Put the factual and legal defenses, witness affidavits, and supporting documents into the proper sworn submission.

Extensions require a justified request and are discretionary. A respondent who fails to file may lose the opportunity to present evidence at this stage, allowing the prosecutor to resolve the complaint from the available record.

6. Treat a resolution and a court case as different stages

The prosecutor decides whether the evidence meets the standard for filing an information. If an information is filed, the Regional Trial Court independently determines whether probable cause exists for purposes of issuing a warrant or other appropriate process.

A subpoena from a prosecutor is not a conviction and is not itself an arrest warrant. If a warrant is issued, obtain counsel immediately to assess bail, surrender, recall or lifting of the warrant, and other lawful remedies. Do not evade service or make informal arrangements with anyone claiming they can “fix” the case.

Penalties and possible consequences

Article 355, as amended by the Revised Penal Code adjustment law, provides for ordinary written libel a penalty of prisión correccional in its minimum and medium periods, a fine from ₱40,000 to ₱1,200,000, or both, in addition to possible civil liability.

Section 6 of Republic Act No. 10175 provides that when a Revised Penal Code offense is committed through information and communications technology, the penalty is one degree higher. The proper penalty in a particular cyber-libel judgment must be computed by the court under the applicable penalty rules; it should not be reduced to a simple fixed number without examining the charge, circumstances, and chosen form of penalty.

The Supreme Court also ruled in Disini that the same publication cannot constitutionally be punished twice as both ordinary libel and cyber libel under the overlapping provisions considered there.

Apart from imprisonment, a fine, and damages, a case may involve arrest, bail, court appearances, preservation or lawful disclosure of account data, and long-term professional and reputational consequences.

Evidence both sides should preserve

Both complainant and respondent should retain:

exact URLs, account identifiers, usernames, and profile details;
uncropped screenshots and screen recordings;
original photographs, audio, video, and files;
creation, upload, modification, and access dates;
the complete thread and surrounding posts;
messages showing authorship, purpose, audience, or discovery;
drafts, source notes, interview records, and fact-checking materials;
platform notices, takedown requests, and responses;
device and account-security alerts;
witness names and contact details;
proof of account ownership or unauthorized access;
relevant business, employment, or medical records; and
copies of every affidavit, filing, receipt, subpoena, and resolution.

Do not coach witnesses, fabricate context, edit source files, backdate documents, or ask another person to delete evidence.

Common mistakes

Waiting because the post remains searchable, while overlooking the one-year period from discovery.
Assuming every offensive post is cyber libel without testing all legal elements.
Filing against the visible profile name without evidence of the actual operator.
Treating a cropped screenshot as the entire case.
Sending threats or retaliatory accusations that create a second dispute.
Publicly debating the complaint and making admissions.
Assuming a police report, barangay complaint, demand letter, or platform report automatically interrupts prescription.
Filing in a convenient but legally improper location.
Ignoring the subpoena or submitting an unsworn narrative.
Filing only a motion to dismiss instead of a complete counter-affidavit.
Relying on “truth” without addressing good motives, justifiable ends, privilege, or actual malice.
Deleting a post, account, device, or conversation before preserving it.
Obtaining passwords, private messages, subscriber data, or metadata through unlawful access.
Assuming every like, share, tag, or reaction creates—or can never create—criminal liability.
Believing an apology or takedown automatically ends a criminal complaint. It may affect settlement discussions or damages, but it does not erase liability by itself.

When legal help is urgent

Consult a Philippine lawyer promptly when:

discovery or publication may have occurred nearly one year ago;
you are uncertain which filing interrupts prescription;
the publisher is anonymous or account records may soon disappear;
subscriber, traffic, or content data may require lawful preservation or a court warrant;
the publication involves a journalist, public official, public figure, election, or matter of public concern;
the complainant or respondent is outside the Philippines;
you received a subpoena with a near deadline;
the annexes are incomplete or technically complex;
an information, hold-departure order, or arrest warrant may have been issued;
the account was hacked or impersonated;
several people edited, approved, or republished the material;
a related civil, administrative, employment, data-privacy, or harassment case is possible; or
a child, intimate image, threat, extortion demand, or personal-data breach is involved.

The Public Attorney’s Office may assist qualified indigent persons, subject to its governing requirements and conflict rules.

Frequently asked questions

Can I file because someone insulted me in a private chat?

Only if the legal requirements are present. Libel requires publication to a third person. A message sent solely to the person insulted ordinarily lacks publication, although other offenses or civil remedies may apply depending on its content.

Must the post name me?

No. It is enough if people familiar with the circumstances can reasonably identify you. The complainant must still present evidence of identifiability rather than merely assert it.

Is a false statement automatically cyber libel?

No. Falsity alone does not establish every element. The statement must be defamatory, published, identifiable, malicious under the applicable standard, attributable to the accused, and made through a computer system.

Can a company be defamed?

Article 353 protects natural and juridical persons. A company may complain if the imputation is capable of damaging its reputation and the other elements are present. Responsibility of individual officers or employees must still be established separately.

Does deleting the post prevent a case?

No. A completed publication is not undone by deletion. Removal, correction, or apology may be relevant to continuing harm, credibility, damages, or settlement, but is not an automatic defense.

Can I be charged for sharing another person’s post?

A passive platform reaction is not automatically cyber libel. Liability may arise, however, if your conduct constitutes a distinct defamatory publication—for example, adding and publishing your own defamatory factual accusation. The exact text and action must be examined.

Does every cyber libel case prescribe one year after posting?

Not necessarily. The current rule is one year from discovery by the offended party, the authorities, or their agents. Posting and discovery may coincide, but a later discovery date may be alleged and must be assessed from the evidence.

Can I file both ordinary libel and cyber libel for the same post?

The same online publication cannot be used to impose duplicate punishment under both overlapping offenses. Other genuinely distinct acts or publications require separate legal analysis.

Is a lawyer required during preliminary investigation?

A party may submit affidavits without counsel, but cyber-libel cases involve strict prescription, venue, constitutional, and electronic-evidence issues. Professional assistance is strongly advisable, particularly for the counter-affidavit or when a deadline is close.

Can the prosecutor order a platform to reveal an anonymous user?

Private subscriber or content information is not obtained simply by asking the platform. Republic Act No. 10175 and the Rules on Cybercrime Warrants impose legal requirements for preservation, disclosure, search, seizure, and examination of computer data. Coordinate with authorized investigators and counsel; do not attempt unauthorized access.

Official legal references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Cyber-libel liability depends on the exact words, context, evidence, dates, parties, and procedural history. Official sources and current procedures were checked as of September 11, 2026.