A false accusation on Facebook, TikTok, X, Instagram, YouTube, a group chat, or another online platform can seriously damage a person’s reputation, employment, business, or family relationships. In the Philippines, the proper criminal complaint may be cyber libel when the post contains a defamatory accusation, identifies the victim, reaches another person, was made with legally actionable malice, and was published through a computer system. Filing successfully requires more than printing a screenshot: you must preserve admissible electronic evidence, establish who posted it, choose the correct venue, and file within the strict prescriptive period.

What Is Cyber Libel Under Philippine Law?

Cyber libel is libel committed through a computer system or a similar information and communications technology.

Its principal legal bases are:

Article 353 of the Revised Penal Code, which defines libel;
Article 355, which covers libel committed through writing or similar means;
Section 4(c)(4) of Republic Act No. 10175, the Cybercrime Prevention Act of 2012; and
Section 6 of RA 10175, which increases the penalty when an offense is committed through information and communications technology. (Lawphil)

The Supreme Court explained in Disini, Jr. v. Secretary of Justice that RA 10175 did not create an entirely different form of defamation. It recognized the use of a computer system as a means of committing libel and imposed a higher penalty because of the internet’s reach. The Court upheld cyber libel as applied to the person who authored the defamatory online statement. (Lawphil)

Elements that must be established

A cyber libel complaint generally needs evidence of the following:

Element	What it means in practice
Defamatory imputation	The statement accuses someone of a crime, vice, defect, dishonesty, misconduct, or another circumstance that tends to cause dishonor, discredit, or contempt.
Publication	At least one person other than the writer and the victim received, saw, or read it. A public post is not required; a private group chat may be enough.
Identification	The complainant was named or was reasonably identifiable from the photo, position, nickname, surrounding discussion, or other context.
Malice	The publication was legally malicious. Malice is generally presumed in defamatory publications unless the communication is privileged.
Use of a computer system	The accusation was posted, uploaded, messaged, emailed, streamed, or otherwise transmitted electronically.
Responsible author	There is competent evidence connecting the respondent to the account and the particular post or message.

A statement does not have to use profanity to be defamatory. Calling someone a “scammer,” “thief,” “adulterer,” “corrupt official,” “fake professional,” or “child abuser” may amount to a factual accusation of criminal or immoral conduct, depending on the wording and context.

What usually is not enough for cyber libel?

Not every rude, unfair, or false online statement is criminal cyber libel.

A case may be weak where:

The statement is merely an insult with no defamatory factual meaning.
It is obvious exaggeration, satire, or rhetorical hyperbole that a reasonable reader would not understand as a statement of fact.
The complainant cannot be identified.
The message was sent only to the complainant, with no third person receiving it.
The post is a fair comment on a matter of public interest and is based on disclosed or substantially true facts.
The statement is part of a qualifiedly privileged communication, such as a good-faith complaint made to a proper authority by someone with a legal, moral, or social duty to report it.
There is no reliable evidence that the respondent controlled the account or wrote the material.

When the complainant is a public official or public figure, constitutional protections for speech may require proof of actual malice—knowledge that the accusation was false or reckless disregard as to whether it was false—particularly when the statement concerns public conduct or a matter of public interest. (Lawphil)

Does the Accusation Have to Be False?

False accusations usually present the clearest factual basis for a cyber libel complaint. However, Philippine libel law is more nuanced than simply asking whether the statement was true or false.

Under Article 361 of the Revised Penal Code, proof of truth is not always an automatic defense. Where truth may be admitted, the accused may still have to show that the publication was made with good motives and for justifiable ends. Special rules apply to accusations involving public officers and acts connected with their official duties. (Lawphil)

For the complainant, it is still important to submit documents disproving the accusation. For example:

If accused of stealing company money, attach audit records, receipts, clearances, or findings showing no shortage.
If called an unlicensed professional, attach the relevant PRC license or government registration.
If accused of adultery or maintaining a second family, attach available civil records, correspondence, and witnesses that directly address the claim.
If accused of committing a crime, attach the relevant police, prosecutor, court, or agency certification where available.

The evidence should answer not only “Why was this hurtful?” but also “Why was this accusation factually wrong, irresponsibly made, or knowingly fabricated?”

The One-Year Deadline for Filing Cyber Libel

The deadline is one of the most important parts of a cyber libel case.

In Causing v. People, G.R. No. 258524, the Supreme Court ruled that cyber libel prescribes in one year under Articles 90 and 91 of the Revised Penal Code. In April 2026, the Court denied the motions for partial reconsideration with finality and confirmed that the one-year period is counted from the date the defamatory post was discovered by the offended party, the authorities, or their agents—not automatically from the date it was uploaded.

This does not mean a complainant can simply claim a recent discovery date without proof. Comments, reactions, messages, demand letters, earlier screenshots, or statements threatening to sue may show that the complainant knew about the post earlier. The discovery date is a factual question determined from the surrounding circumstances.

The filing of the proper criminal complaint or information interrupts prescription under Article 91. A private demand letter, a barangay report, or a complaint submitted only to the social media platform should not be relied upon to stop the one-year period.

Practical rule: preserve the post and begin preparing the complaint immediately. Do not wait until the last weeks of the one-year period.

What to Do Before Filing the Case

1. Preserve the complete post before asking for its removal

Do not start by publicly threatening the account owner. The post may be deleted, edited, hidden, or restricted.

Preserve:

Full-page screenshots, not just the defamatory sentence;
The exact profile name, username, account URL, profile photo, and account ID where visible;
The direct URL of each post, video, comment, story, or thread;
The date and time shown on the platform;
Captions, hashtags, photographs, videos, comments, replies, and quoted posts;
The privacy setting or apparent audience, such as “Public,” “Friends,” or group members;
The number of reactions, comments, shares, views, or group members;
Screen recordings showing how the account and post were accessed;
Notifications, messages, or emails directing people to the post;
Copies in their original electronic format where possible; and
The device on which the evidence was viewed or captured.

Screenshots are electronic evidence. Under the Rules on Electronic Evidence, the person offering an electronic document must establish its authenticity, integrity, and reliability. A cropped printout with no URL, account details, context, or authenticating witness can be challenged as incomplete or fabricated. (Lawphil)

2. Record when and how you discovered it

Write down:

The exact date and approximate time you first saw the material;
Who sent it to you;
Where you were when you accessed it;
Whether you reacted, replied, or contacted the poster;
Whether someone had shown it to you earlier; and
The names of people who saw it before or at the same time.

This information can determine whether the complaint was filed within the one-year prescriptive period.

3. Obtain affidavits from people who saw the accusation

Publication is established when a third person received or understood the defamatory statement. Useful witnesses include:

A coworker who saw the public post;
A customer who received a shared screenshot;
A family member added to the group chat;
A group administrator who can identify the members and account involved;
A person who recognizes the complainant despite the absence of a full name; or
Someone who heard the respondent admit that they controlled the account.

Each witness should explain what they personally saw, when they saw it, how they identified the complainant, and how they know the relevant account or respondent.

4. Gather proof of the respondent’s identity

A real name displayed on a profile does not by itself prove authorship.

Useful identifying evidence may include:

Previous messages from the same account;
Linked phone numbers, email addresses, websites, or business pages;
Photographs and information known to belong to the respondent;
Admissions made in messages or in person;
Witnesses who regularly communicated with the account;
Consistent usernames across platforms;
Payment, delivery, employment, or transaction records connecting the account to the person; and
Lawfully obtained subscriber or platform data.

For fake or anonymous accounts, early assistance from the NBI Cybercrime Division or the PNP Anti-Cybercrime Group may be necessary. Law enforcement can pursue preservation and disclosure processes under RA 10175 and the Rule on Cybercrime Warrants. Service providers may be directed to preserve specified traffic or subscriber data for the period allowed by law, but identification is not guaranteed, especially where the account used false registration information, foreign services, VPNs, or compromised devices. (National Bureau of Investigation)

5. Consider a demand or takedown request only after preservation

A written demand can request:

Immediate deletion;
A correction or retraction;
An apology;
An undertaking not to repost; and
Preservation of account and post data.

A demand may help establish notice and continued malice if the respondent knowingly repeats a demonstrably false accusation. It is not, however, a legal prerequisite to filing cyber libel, and it does not substitute for filing within the prescriptive period.

Where to File a Cyber Libel Complaint

The complaint is ordinarily filed for preliminary investigation with the Office of the City Prosecutor or Provincial Prosecutor that can bring the case before the proper Regional Trial Court designated as a cybercrime court.

Under Section 2.1 of the Rule on Cybercrime Warrants, a criminal action under Section 4 of RA 10175 may be filed in the designated cybercrime court of the province or city:

Where the offense or any of its elements occurred;
Where any part of the computer system used is situated; or
Where any of the damage to the natural or juridical person occurred.

The court where the action is first properly filed acquires jurisdiction to the exclusion of the others. Venue should not be based merely on the fact that an internet post could theoretically be viewed anywhere. The complaint-affidavit must state concrete facts connecting the chosen city or province to an element, computer system, or actual reputational damage. (Lawphil)

For example, if the complainant lived and worked in Quezon City when coworkers and customers there saw the accusation and the reputational harm occurred there, those facts should be expressly alleged and supported by witness affidavits.

Is barangay conciliation required?

Cyber libel generally does not require prior barangay conciliation. The Katarungang Pambarangay system excludes offenses punishable by imprisonment exceeding one year or a fine exceeding ₱5,000. DILG guidance also identifies violations of RA 10175 as outside barangay jurisdiction. (Lawphil)

Parties may voluntarily discuss settlement, retraction, or mediation, but a complainant should not delay filing while the one-year period continues to run.

Step-by-Step Process for Filing a Cyber Libel Case

1. Prepare a detailed complaint-affidavit

The complaint-affidavit should be chronological and based on personal knowledge. It should state:

The complainant’s full name, citizenship, address, occupation, and contact information;
The respondent’s known name, address, account details, and other identifying information;
The exact defamatory words, images, or statements;
The URL, platform, date, time, and manner of publication;
Why the statement referred to the complainant;
Who received, read, or understood it;
Why the accusation was false or malicious;
When and how the complainant discovered it;
Facts establishing venue;
Facts connecting the respondent to the account;
The harm caused; and
The specific offense being charged under Section 4(c)(4) of RA 10175 in relation to Articles 353 and 355 of the Revised Penal Code.

Do not simply state that the post “destroyed my reputation.” Identify actual consequences, such as customers cancelling orders, a suspension from work, lost employment opportunities, harassment from relatives, or community members treating the complainant as a criminal.

2. Attach affidavits and supporting evidence

The DOJ’s published preliminary-investigation filing checklist includes the Investigation Data Form, complaint-affidavit, witness affidavits, and supporting documents. It lists five copies plus one for each respondent for several submissions, although individual prosecution offices may issue updated local instructions or permit electronic filing. (Department of Justice)

The complaint and affidavits must be sworn. Depending on the prosecution office’s procedure, they may be subscribed before an authorized prosecutor or properly notarized before filing.

3. File with the proper prosecution office

Ask for:

A stamped receiving copy;
The investigation or NPS docket number;
The assigned prosecutor, when available;
Instructions concerning physical and electronic copies; and
The date and method by which notices will be served.

Keep the receiving copy securely. It is important evidence of when the criminal complaint was filed and whether prescription was interrupted.

4. Preliminary investigation

Because cyber libel carries a penalty exceeding six years at its maximum, it undergoes preliminary investigation before the prosecutor.

Under the 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings, the prosecutor evaluates whether there is prima facie evidence with reasonable certainty of conviction. This means the evidence must be admissible, credible, preservable, and capable—if left uncontroverted—of establishing the elements and the identity of the responsible person. The Supreme Court has recognized the validity of these DOJ rules for prosecution proceedings. (Department of Justice)

The usual sequence is:

The complaint is screened and assigned.
A subpoena and copies of the complaint are served on the respondent.
The respondent submits a counter-affidavit and supporting evidence.
The prosecutor may permit further affidavits or ask clarificatory questions.
The case is submitted for resolution.
The head of the prosecution office approves, modifies, or disapproves the recommended resolution.

The current rules target resolution within prescribed administrative periods, commonly 60 calendar days from assignment subject to allowable extensions. In practice, defective addresses, unsuccessful service, multiple respondents, voluminous electronic evidence, reassignment, or office congestion can extend the process for several months.

5. Filing of the Information in court

If the prosecution finds sufficient evidence, an Information—the formal criminal charge—is filed in the designated cybercrime Regional Trial Court.

The judge independently evaluates probable cause. The court may:

Dismiss the case if the record clearly fails to establish probable cause;
Require additional supporting evidence; or
Issue a warrant of arrest or the appropriate court process.

Cyber libel is bailable before conviction. The amount and conditions of bail are determined by the court under applicable rules and the circumstances of the accused.

6. Arraignment, pretrial, and trial

After the accused appears or posts bail:

The charge is read at arraignment.
The accused enters a plea.
The court conducts pretrial, including marking of evidence and stipulations.
The prosecution presents the complainant, publication witnesses, authenticating witnesses, investigators, and other evidence.
The defense presents its evidence.
The court renders judgment.

Court proceedings may take years where there are numerous witnesses, authentication disputes, postponements, motions, or appeals.

7. Challenge an unfavorable prosecutor’s resolution promptly

A dismissal or finding of probable cause may be challenged through the remedies allowed under the current DOJ rules, including a motion for reconsideration and, when available, a petition for review.

Deadlines are short—generally 15 calendar days for certain remedies under the 2024 DOJ-NPS framework. The specific resolution and governing rules should be checked immediately upon receipt; failure to act on time may make the resolution final at the prosecutorial level. (Department of Justice)

Documents and Evidence Checklist

Document or evidence	Purpose
Government-issued ID	Establishes the complainant’s identity.
Proof of residence at the time of publication	Helps establish venue and actual damage location.
Investigation Data Form	Required administrative information for the prosecutor’s office.
Notarized or properly subscribed complaint-affidavit	Sets out the charge and facts under oath.
Complete screenshots and printouts	Shows the defamatory material and its context.
URLs and account information	Identifies the source, platform, and specific electronic material.
Screen recording or electronic copy	Demonstrates how the material appeared and was accessed.
Affidavit authenticating electronic evidence	Explains who captured it, how it was captured, and why it accurately reflects the online content.
Witness affidavits	Establish publication, identification, authorship, and damage.
Documents disproving the accusation	Supports falsity and malice.
Proof of harm	Supports criminal context and claims for damages.
Demand, response, or admission	May show notice, authorship, repetition, or malice.
Certified translation	Useful when the post or evidence is in a language the prosecutor and court cannot readily evaluate.
Corporate authorization	Needed where a corporation or juridical entity is the offended party and a representative executes the complaint.

Penalties and Civil Damages

Section 6 of RA 10175 raises the penalty for libel committed through ICT by one degree. The imprisonment range associated with cyber libel is prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years. A fine may be imposed instead of or together with imprisonment, and Supreme Court rulings recognize that the maximum fine for cyber libel can reach ₱1.5 million under the adjusted penalty framework. (Lawphil)

A finding of liability may also result in civil damages, including:

Actual damages supported by receipts or reliable financial records;
Moral damages for mental suffering, humiliation, anxiety, or wounded feelings;
Exemplary damages in appropriate cases;
Attorney’s fees when legally justified; and
Costs of suit.

Claims should be supported by evidence. General statements of emotional distress may be less persuasive than testimony accompanied by medical records, employment documents, cancelled contracts, customer communications, or other proof of actual consequences.

Common Mistakes That Cause Cyber Libel Complaints to Fail

Filing only a cropped screenshot

A screenshot containing one sentence may conceal surrounding context or fail to show the account, date, audience, and URL. Preserve the entire thread and authenticate it.

Failing to prove who operated the account

The name and photograph displayed on a profile are not conclusive. Account ownership and authorship must be established through admissions, witnesses, linked details, technical investigation, or other competent evidence.

Treating every “share” or “like” as a separate cyber libel offense

In Disini, the Supreme Court limited cyber libel liability to the original author and rejected the broad application of aiding-and-abetting liability to ordinary recipients, reactions, or shares. A person who merely clicks “like” or shares an existing post is not automatically liable for cyber libel. However, someone who adds a new defamatory caption—such as “This thief stole from me too”—may be treated as the author of a separate defamatory statement. (Lawphil)

Assuming a private chat can never be libelous

A one-to-one message sent only to the victim ordinarily lacks publication to a third person. But a message in a family, workplace, condominium, school, or community group chat may satisfy publication because other members received it.

Ignoring privileged communication

A good-faith complaint sent only to the police, employer, regulatory body, school administrator, or other proper authority may be qualifiedly privileged. The complainant may then need strong evidence of actual malice, such as deliberate fabrication, excessive distribution, personal hostility, or publication to people who had no legitimate reason to receive it.

Filing in a convenient but unsupported location

The affidavit must allege particular venue facts. Saying “the internet is accessible here” is not enough. Explain where the complainant was harmed, where relevant witnesses received the post, or where an element or relevant computer system was situated.

Waiting for the poster to apologize

Negotiations, promises to delete, and platform reports can consume the one-year period. Preserve evidence and monitor the deadline independently.

Retaliating with another defamatory post

Publishing the respondent’s private information or accusing them of crimes in return may create a separate complaint against the original victim. Keep public responses factual and restrained.

Anonymous Accounts, Foreign Respondents, and Overseas Complainants

Filing against an anonymous account

A complaint may initially describe the respondent using the account name and available identifiers, but the case cannot proceed to conviction without establishing the identity of the responsible natural person.

Report the matter promptly to a cybercrime investigator where subscriber data, IP records, device evidence, or platform information may be needed. A private complainant ordinarily cannot compel a foreign platform to disclose protected user data without lawful government or court processes. (National Bureau of Investigation)

When the accused lives abroad

A Philippine case may have a jurisdictional and venue basis where an element or actual damage occurred in the Philippines, but enforcement becomes more difficult if the accused remains abroad. Locating the person, obtaining foreign platform records, serving court processes, and securing the accused’s appearance may require international cooperation. The DOJ Office of Cybercrime serves as the central authority for relevant international cybercrime assistance. (Department of Justice)

Can an OFW or foreigner file a cyber libel complaint?

Yes. Philippine cyber libel law protects natural and juridical persons; Philippine citizenship is not an element of the offense. The complainant must still establish Philippine jurisdiction, proper venue, publication, identification, malice, authorship, and timely filing.

An overseas complainant may execute the complaint-affidavit before a Philippine embassy or consulate. Another possible method is local notarization followed by an apostille where the country and document fall under the Apostille Convention. The receiving prosecution office should be consulted about original copies, consular notarization, apostille, translations, and whether personal appearance or remote proceedings will be required. DFA guidance recognizes consular notarization or apostille procedures for legal instruments executed abroad. (Philippine Embassy in New Delhi)

Frequently Asked Questions

Can I file cyber libel over a Facebook or TikTok post?

Yes, provided the material contains a defamatory imputation, refers to you, was communicated to at least one other person, is legally malicious, and can be attributed to the respondent. Videos, captions, livestream statements, comments, and text superimposed on images may all be examined together.

How long do I have to file a cyber libel case?

One year from discovery by you, the authorities, or your agent. Evidence may establish an earlier discovery date, so file promptly. The proper filing of the criminal complaint or Information interrupts prescription.

Are screenshots enough to win the case?

Not necessarily. Screenshots must be complete, relevant, and authenticated. You must also establish publication, identification, malice, authorship, venue, and timely filing. Original electronic files, URLs, screen recordings, witness affidavits, and the device used to access the material can strengthen the evidence.

Can I file even if the post did not mention my name?

Yes, if people who knew the circumstances reasonably understood that the post referred to you. Attach affidavits explaining how witnesses identified you from a photograph, job title, relationship, nickname, location, or surrounding discussion.

Can I sue everyone who shared the post?

Not automatically. A plain reaction or share does not by itself make every user criminally liable for cyber libel. A person who writes a new defamatory caption or independently republishes an accusation in their own words may present a different situation. (Lawphil)

Do I need to send a demand letter first?

No. A demand letter is optional. Preserve the evidence before sending one, and do not allow negotiations to consume the one-year filing period.

Must I go through the barangay first?

Generally, no. Cyber libel is outside the usual scope of Katarungang Pambarangay because of its prescribed penalty and its classification under RA 10175. (DILG CAR)

What happens if the account is fake?

Report it quickly to the NBI Cybercrime Division or PNP Anti-Cybercrime Group and preserve all available account identifiers. Investigators may pursue lawful data-preservation and disclosure measures, but identification may be difficult if records have expired or the offender concealed their identity effectively.

Can the post be removed while the case is pending?

You may report it to the platform or request voluntary removal. Filing a criminal complaint does not automatically delete online content. Preserve complete evidence first because removal may make later authentication and investigation harder.

Can I claim damages for lost customers or employment?

Yes, but the losses must be proved. Preserve cancellation messages, employment notices, sales records, contracts, medical records, and witness testimony linking the loss or distress to the defamatory publication.

Key Takeaways

Cyber libel covers defamatory accusations published through social media, messaging platforms, websites, email, and other computer systems.
Preserve the entire post, URL, account information, context, witnesses, and original electronic evidence before requesting deletion.
A screenshot alone may be insufficient without authentication and proof of authorship, publication, identification, malice, and venue.
Cyber libel prescribes in one year from discovery, and negotiations or platform reports should not be relied upon to stop the deadline.
File the sworn complaint and supporting evidence with the prosecutor’s office connected to the proper designated cybercrime court.
Barangay conciliation is generally not required.
Likes and ordinary shares are not automatically cyber libel, although a user who adds a new defamatory statement may incur separate liability.
Anonymous and foreign-based respondents create additional identification and enforcement problems, making early cybercrime investigation especially important.