Quick answer

To file a cyber libel case in the Philippines, preserve the online material and its context, confirm that the respondent authored the allegedly defamatory statement, and file a sworn complaint with supporting evidence before the proper prosecution office. Act quickly: the Supreme Court has definitively ruled that cyber libel generally prescribes one year from discovery of the publication by the offended party, the authorities, or their agents.

To defend a case, do not ignore a subpoena or court notice. Preserve the account, device, post, and surrounding communications; obtain counsel; and submit a detailed counter-affidavit by the deadline stated in the subpoena. Common defenses include failure to prove authorship, publication, identification, defamatory meaning, or malice; privileged communication; truth published with good motives and for justifiable ends; lack of actual malice where constitutionally required; prescription; improper venue; and unreliable or unauthenticated electronic evidence.

Cyber libel is a criminal offense under Section 4(c)(4) of the Cybercrime Prevention Act of 2012, applying the Revised Penal Code’s law on libel to publication through a computer system or similar technology.

What must be proved

Cyber libel is not established merely because a post is insulting, harsh, embarrassing, or false. The prosecution must establish the elements of libel and prove that the publication was made through a computer system or information and communications technology.

The usual elements are:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to cause dishonor, discredit, or contempt.
Publication. The statement was communicated to at least one person other than the person allegedly defamed. A message seen only by its subject ordinarily presents a publication problem; a public post, group chat, email copied to others, or similar communication may satisfy this element.
Identification. The offended person is named or is sufficiently identifiable from the words and surrounding circumstances. Omitting a name does not necessarily prevent liability if readers familiar with the situation can identify the person.
Malice. Depending on the circumstances, malice may be presumed from a defamatory statement or may have to be proved as actual malice.
Use of a computer system or ICT. The publication occurred through Facebook, X, TikTok, YouTube, a website, email, an online forum, messaging service, or another computer-based medium.

These elements appear in Articles 353 to 355 of the Revised Penal Code and are discussed in the Supreme Court’s decisions in Disini v. Secretary of Justice and Enrile v. Manapat.

The statement must be assessed as a whole, in its actual language and context. Courts consider how ordinary readers would understand it, not merely how the complainant describes it. Satire, rhetorical exaggeration, or opinion may receive constitutional protection, but calling something an “opinion” does not automatically protect an assertion that implies false, verifiable facts.

Who may be liable

The Supreme Court upheld cyber libel as applied to the original author of the online statement. It declared the provision unconstitutional as applied to people who merely receive a post and react to it, and it invalidated aiding or abetting liability in relation to cyber libel. A simple like, reaction, or passive receipt therefore is not the same as authorship.

That protection is not a license to add new defamatory material. A person who republishes content with an independently defamatory caption, accusation, edited image, or commentary may be treated as the author of that new material. Authorship and participation remain factual questions requiring examination of the exact post and account activity. See Disini.

Malice, truth, and privileged communications

Private persons

When the offended party is a private person, Article 354 generally presumes malice from a defamatory imputation unless the communication is privileged or the surrounding evidence overcomes that presumption.

Truth is important, but in criminal libel it is not always a complete defense by itself. Article 361 generally requires proof both that the charge was true and that it was published with good motives and for justifiable ends. The article contains additional restrictions when the imputation is not a crime, subject to the rule concerning government employees and facts related to their official duties.

Keep the records that supported the statement at the time it was published. A belief based only on rumor, an anonymous message, or an unverified screenshot may not establish truth or responsible publication.

Public officials and public figures

When the statement concerns a public official’s official conduct, or a public figure and a matter of legitimate public interest, constitutional free-speech principles may require proof of actual malice: knowledge that the statement was false or reckless disregard of whether it was false.

Reckless disregard is more than ordinary carelessness. It involves a high awareness of probable falsity or serious doubts about the truth. Whether someone is a public figure—and whether the statement concerns the public aspect of that person’s life—is fact-dependent. The rule does not automatically cover every statement about a well-known person. The Supreme Court explains this distinction in Tulfo v. People and Disini.

Privileged communications

Article 354 recognizes qualified privileges, including:

A private communication made in performing a legal, moral, or social duty to a person with a corresponding interest or duty; and
A fair and true report, made in good faith and without comments or remarks, of qualifying official proceedings or acts that are not confidential.

Qualified privilege can be defeated by proof of actual malice. It also has limits: broadcasting an accusation to thousands of unrelated readers is materially different from reporting it privately to an employer, regulator, board, or other person with a duty to act.

Some communications are absolutely privileged, such as protected legislative speech, but these categories are narrow and should not be assumed without legal advice.

The one-year filing deadline

The Supreme Court’s controlling rule is that cyber libel prescribes one year from the day the alleged publication is discovered by the offended party, the authorities, or their agents. Publication and discovery may occur on the same date, but they are not legally identical in every case.

The period is interrupted by the filing of a legally effective complaint or Information. It may run again if the proceedings end without conviction or acquittal or are unjustifiably stopped for a reason not attributable to the accused. Under Article 91, prescription does not run while the offender is absent from the Philippines.

The date of discovery is a question of fact. A complainant should document it carefully; an accused invoking prescription must ordinarily produce evidence when prescription is not apparent from the Information. The en banc Supreme Court affirmed these rules in Causing v. People, G.R. No. 258524, April 8, 2026.

Do not wait until the last week. A demand letter, barangay appearance, platform report, or informal police inquiry should not be assumed to interrupt prescription. Venue problems, incomplete affidavits, holidays, and rejected filings can also consume valuable time.

How to file a criminal complaint

1. Preserve the complete publication

Before asking for deletion or responding publicly, preserve:

The full post, article, video, caption, image, comment, or message;
The exact URL and any post or account identifier;
The profile or page showing the account name, username, and available identifying details;
The date and time displayed, including the relevant time zone;
The surrounding thread, earlier posts, replies, links, and context;
Visible reactions, comments, shares, or audience information;
A screen recording showing navigation from the account or page to the publication;
Original downloaded files, emails, message exports, and metadata where available; and
The device on which the material was received or viewed.

Keep unedited originals. Do not rely solely on cropped screenshots or images forwarded through another app. Maintain at least two secure backups and record who collected each item, when, and how.

2. Document discovery, publication, identity, and harm

Prepare a chronology that identifies:

When and how you first discovered the material;
Who else saw or received it;
Why the words refer to you if you were not named;
Why the statement is defamatory rather than merely unpleasant;
Facts connecting the account to the respondent;
Requests for correction or responses, if any; and
Concrete consequences such as lost work, cancelled contracts, disciplinary inquiries, or messages from readers.

Ask witnesses to preserve what they personally saw. Publication should ordinarily be supported by someone other than the complainant if possible.

3. Assess authorship before naming a respondent

A display name or profile photograph does not conclusively prove who controlled an account. Look for admissions, linked contact information, consistent account history, direct messages, witnesses, business records, or other lawful evidence.

If the author is unknown or the account may be fake, seek help promptly from the PNP Anti-Cybercrime Group, the NBI cybercrime unit, or the DOJ Office of Cybercrime. Service-provider data can disappear under retention policies. Law-enforcement preservation and disclosure procedures are governed by the Cybercrime Prevention Act and the Rule on Cybercrime Warrants; disclosure of protected computer data generally requires judicial authorization.

Do not hack an account, impersonate another person, secretly obtain passwords, or induce someone to access private data without authority.

4. Choose the proper venue

The eventual criminal action must be filed before a designated cybercrime court in the city or province where:

The offense or any element occurred;
Any part of the computer system used is situated; or
Damage to the natural or juridical person occurred.

The first court in which the criminal action is properly filed acquires jurisdiction to the exclusion of the others. Because online material can be accessed almost anywhere, damage or access alone should not be used as an excuse for arbitrary forum shopping. Have counsel establish a concrete factual connection to the chosen venue and file through the corresponding prosecution office. The governing venue rule is discussed in Henares v. People.

5. Prepare and file the complaint-affidavit

The filing normally includes:

The current National Prosecution Service investigation data form;
A sworn complaint-affidavit containing the complete facts;
Sworn witness affidavits;
Properly marked documentary and electronic annexes;
Evidence of identity, publication, authorship, falsity or malice, and discovery;
The respondent’s known address or contact information for service; and
The copies and other requirements imposed by the receiving prosecution office.

The affidavit should quote or reproduce the exact words complained of and explain their context. Avoid vague statements that the post was simply “libelous.” Each required element should be supported by admissible, credible evidence.

The DOJ publishes a general preliminary-investigation filing checklist and the official NPS investigation form. Local requirements and authorized electronic-filing channels should be confirmed directly with the receiving office before submission.

A law-enforcement complaint may help identify an unknown author or secure digital evidence, but the prosecutor determines whether the evidence meets the standard for filing an Information in court.

6. Participate in the preliminary investigation

Cyber libel ordinarily undergoes regular preliminary investigation. Under DOJ Department Circular No. 15, series of 2024, prosecutors apply the standard of prima facie evidence with reasonable certainty of conviction. The Supreme Court has upheld the DOJ’s authority to use that standard in prosecutor-led preliminary investigations while distinguishing it from the judiciary’s own probable-cause determination. See G.R. No. 280455, March 11, 2026.

If the complaint is sufficient to proceed, the prosecutor issues a subpoena with the complaint and supporting evidence. The hearing date must ordinarily allow the respondent at least 10 days from receipt to prepare and submit a counter-affidavit. The prosecutor may require further evidence or conduct clarificatory proceedings.

If the prosecutor dismisses the complaint or approves the filing of an Information, an aggrieved party generally has 15 days from receipt of the resolution to file a motion for reconsideration under the 2024 DOJ-NPS Rules. A petition for review is governed by separate DOJ appeal rules and does not automatically stop court proceedings; if an Information has already been filed, the appropriate motion to suspend must also be addressed.

7. Address civil damages deliberately

When a criminal action is instituted, the civil action arising from the offense is generally deemed included unless it is waived, reserved for separate filing, or filed earlier. Independent civil remedies may also exist, but double recovery for the same injury is not allowed. Rule 111 of the Rules of Criminal Procedure governs these choices.

A separate civil action for defamation is generally subject to a one-year prescriptive period under Article 1147 of the Civil Code. Because the source of the claimed liability, the date prescription began, prior filings, and the effect of a criminal case can change the analysis, obtain advice before reserving, waiving, or separately filing a damages claim.

How to defend a cyber libel complaint

Respond immediately to a prosecutor’s subpoena

Note the actual date and manner of receipt. The deadline printed in the subpoena controls unless the prosecutor grants proper relief. Do not assume that an informal request for more time has been approved.

Obtain copies of the complete complaint and annexes. A counter-affidavit should answer the material allegations paragraph by paragraph and attach all supporting affidavits and documents. A bare denial is rarely persuasive.

Failure to submit a counter-affidavit can allow the prosecutor to resolve the complaint using the complainant’s evidence alone.

Preserve first; do not erase the record impulsively

Preserve the post, account history, drafts, device, source materials, and relevant communications. Deleting or editing evidence after receiving notice of a dispute can make authentication harder and may be portrayed adversely. After preservation, obtain advice on whether removing public access is appropriate to limit continuing harm.

Do not fabricate screenshots, alter timestamps, coach witnesses, contact the complainant with threats, or pressure anyone to withdraw testimony.

Test every element

A focused defense may examine:

Authorship: Was the account actually controlled by the respondent? Was it compromised, impersonated, or operated by several people?
Exact words and context: Did the complaint omit qualifying language, a linked source, an earlier exchange, satire, or the rest of the thread?
Defamatory meaning: Does the statement make a factual, discreditable imputation, or is it nonactionable opinion, criticism, or rhetorical language?
Identification: Could ordinary readers identify the complainant?
Publication: Did any third person receive or see the statement?
Malice: Is malice presumed, rebutted, or required to be proved as actual malice?
Privilege: Was the communication made in good faith to a person with a duty or legitimate interest, or was it a fair and true report of an official proceeding?
Truth and purpose: Can the material facts, good motives, and justifiable ends be proved with admissible records?
Prescription: When did the offended party, authorities, or their agents actually discover the publication, and when was the complaint effectively filed?
Venue: What specific facts connect the case to the chosen city or province?
Electronic evidence: Are the screenshots complete, reliable, and authenticated? Is there competent evidence linking them to the respondent and showing that they accurately reflect the original data?
Duplicate prosecution: The same online publication should not be punished separately as both traditional libel and cyber libel.

Electronic documents must satisfy the ordinary rules on admissibility and be authenticated. Printouts and screenshots are not automatically conclusive merely because they look genuine. The Rules on Electronic Evidence, as extended to criminal cases, permit authentication through evidence showing integrity and reliability. The Supreme Court has also recognized that messages may be proved through a participant or another person with personal knowledge. See People v. Enojas.

If an Information is filed in court

The prosecutor’s resolution is not a conviction. The trial judge must independently determine judicial probable cause. Depending on that determination, the court may dismiss, require additional evidence, or issue a warrant of arrest.

Cyber libel is generally bailable before conviction. If a warrant has been issued, coordinate lawful surrender and bail through counsel rather than evading service. The amount and conditions of bail are set by the court.

At arraignment, the accused enters a plea. The prosecution must then prove guilt beyond reasonable doubt at trial. The defense may challenge the Information, evidence, venue, or prescription through the procedurally proper remedy, but timing matters: some objections can be waived if not raised when required.

A criminal appeal generally must be taken within 15 days from promulgation of judgment or notice of the final order. A timely motion for new trial or reconsideration affects the computation under Rule 122. Seek appellate advice immediately; do not wait for the written deadline to expire.

Possible penalties and civil liability

For online libel committed while the current fine provisions are in force, the Supreme Court has held that the permissible fine ranges from ₱40,000 to ₱1,500,000. A court may impose a fine instead of imprisonment, but imprisonment remains legally available. The imprisonment range ordinarily associated with cyber libel is prisión correccional in its maximum period to prisión mayor in its minimum period—approximately four years, two months and one day to eight years—because Section 6 of the Cybercrime Prevention Act raises the applicable penalty by one degree.

The precise sentence depends on the governing law at the time of the offense, mitigating or aggravating circumstances, and the court’s findings. The Supreme Court’s controlling explanation appears in People v. Soliman. The underlying fine for traditional libel was amended by Republic Act No. 10951.

A conviction may also carry civil liability. Even without a conviction, a separate civil action may sometimes proceed under a lower civil standard of proof, depending on its legal basis and procedural history.

Common mistakes

Waiting because the post remains online and assuming the one-year period restarts each day;
Counting only from publication without investigating when discovery occurred;
Sending a demand letter but failing to file a timely legal complaint;
Naming an account owner without evidence of actual authorship or control;
Filing in a convenient location with no defensible venue connection;
Submitting only cropped or edited screenshots;
Failing to preserve the URL, context, original files, metadata, and device;
Assuming falsity alone proves cyber libel;
Assuming truth alone always guarantees acquittal;
Treating every insult, criticism, bad review, or negative opinion as defamatory;
Assuming a public official or celebrity can never be defamed;
Assuming a like or share is always criminal—or, conversely, assuming an added defamatory caption carries no risk;
Posting accusations, defenses, or admissions online while the case is pending;
Ignoring a prosecutor’s subpoena because it is not yet a court case;
Believing a DOJ appeal automatically stops proceedings after an Information has been filed; and
Deleting accounts or messages before preserving them and consulting counsel.

When legal help is urgent

Consult a Philippine lawyer immediately if:

The one-year prescriptive deadline is near or the discovery date is disputed;
The author is anonymous and provider data may need urgent preservation;
You received a prosecutor’s subpoena, especially if the counter-affidavit date is approaching;
An Information, hold-departure application, search warrant, or arrest warrant is involved;
Police or investigators want to search a device or obtain account credentials;
The publication concerns a public official, journalist, election, workplace investigation, or matter of public interest;
The accusation involves confidential records, minors, sexual images, threats, stalking, identity theft, or extortion, which may trigger other laws;
Several people, accounts, platforms, or countries are involved;
A civil damages claim or separate lawsuit is being considered; or
Judgment has been promulgated and the 15-day appeal period may be running.

If investigators execute a lawful warrant, do not obstruct them. Ask to see the warrant, note its stated scope, request an inventory or receipt for seized property, and contact counsel. Protected computer data generally cannot be compelled merely through an informal demand; the Cybercrime Prevention Act and the Rule on Cybercrime Warrants require the applicable judicial process.

Frequently asked questions

Is a false Facebook post automatically cyber libel?

No. The prosecution must still prove a defamatory imputation, publication to a third person, identification, the legally required form of malice, authorship, and use of a computer system. Defenses and privileges may apply.

Can I file if the post did not mention my name?

Possibly. Identification can be established through descriptions and surrounding circumstances if readers familiar with the situation could reasonably understand that the post referred to you.

Is sharing or reacting to a libelous post a crime?

Mere receipt or reaction is not punishable as cyber libel under Disini. A person who adds a new defamatory caption, accusation, alteration, or commentary may face liability for that person’s own publication.

Does deleting the post end the case?

No. Deletion does not erase a completed publication or automatically remove criminal or civil liability. It may limit further circulation, but evidence of the earlier publication may remain. Preserve the record before making changes.

Does an apology or retraction automatically dismiss the complaint?

No. It may affect the parties’ decisions, the assessment of malice, damages, or sentencing, but it does not automatically extinguish criminal liability. Only the prosecutor or court can dispose of the criminal proceedings through the proper process.

Can the parties simply settle?

They may discuss retraction, correction, apology, or civil compensation, but cyber libel is a public offense prosecuted in the name of the People of the Philippines. A private settlement or affidavit of desistance does not automatically require dismissal, although prosecutors and courts may consider it together with all the evidence.

When does the one-year period begin?

From discovery of the alleged cyber libel by the offended party, the authorities, or their agents. If publication and discovery occurred on the same day, that date usually controls. A later claimed discovery date must be supported by credible evidence.

Where can a cybercrime incident be reported?

Cybercrime incidents may be referred to the PNP Anti-Cybercrime Group, the NBI cybercrime unit, or the DOJ Office of Cybercrime. A report for investigation should not be confused with filing the proper criminal complaint needed to protect the prescriptive period.

Official legal sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Cyber libel questions depend heavily on the exact words, audience, authorship evidence, dates, documents, and procedural history. Sources and procedures were checked as of August 3, 2026.