Quick answer

You may file a cyber libel complaint when a person uses Facebook, TikTok, X, Instagram, YouTube, a messaging platform, a website, or another computer system to publish a defamatory statement about you to at least one other person. The complaint must be supported by admissible evidence showing the statement, publication, your identity as the person defamed, malice where legally required, and the respondent’s responsibility for the post.

Act promptly. The Supreme Court has confirmed that cyber libel generally prescribes one year from the date the post was discovered by the offended party, the authorities, or their agents. The publication date and discovery date may be the same, but a claimed later discovery date is a factual matter that must be proved. Filing questions should therefore be taken to a prosecutor or lawyer immediately rather than left until the deadline is near.

A complaint may be submitted to the prosecutor’s office with territorial jurisdiction. You may first seek investigative assistance from the Philippine National Police Anti-Cybercrime Group or the National Bureau of Investigation, especially if the account owner is unknown or platform records must be preserved or obtained through lawful process.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel to defamatory material published through a computer system.

The prosecution generally must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person to contempt.
Publication. Someone other than the author and the person defamed saw, read, or received the statement.
Identification. The complainant was named or was otherwise identifiable from the words, image, tags, context, or surrounding circumstances.
Malice. The applicable kind of malice must be established, subject to the rules on privileged communications and speech involving public officials, public figures, or matters of public concern.
Use of a computer system. The defamatory material was published online or through information and communications technology.
Responsibility of the respondent. Reliable evidence connects the respondent to the account and publication.

The Supreme Court summarized these core elements in Disini v. Secretary of Justice.

An offensive, insulting, inaccurate, or embarrassing post is not automatically criminal libel. Its complete wording, ordinary meaning, context, audience, subject, factual basis, and tendency to damage reputation all matter. Pure opinion, satire, rhetorical exaggeration, fair criticism, and factual allegations are assessed differently, although labeling an accusation “opinion” does not necessarily protect it if it implies provably defamatory facts.

Important exceptions and defenses

Public officials, public figures, and public concerns

When the statement concerns a public official, public figure, or qualifying matter of public concern, constitutional protection for speech may require proof of actual malice: knowledge that the statement was false or reckless disregard of whether it was false.

Recklessness in this context is more than carelessness. The evidence must support a finding that the publisher had a high awareness of probable falsity or seriously doubted the truth of the statement. The rule is fact-sensitive; a person should not assume that every post about a government employee or public personality is protected.

Privileged communications

Article 354 of the Revised Penal Code recognizes qualifiedly privileged communications, including:

A private communication made in performing a legal, moral, or social duty; and
A fair and true report, made in good faith and without added comments, of a non-confidential judicial, legislative, or other official proceeding or an official act.

Privilege is not a blanket license to circulate accusations online. Excessive publication, unnecessary inflammatory language, lack of good faith, or proof of actual malice may defeat a qualified privilege.

Truth and good motive

Truth should not be treated as an automatic defense in every criminal libel case. Article 361 imposes specific rules on when truth may be proved, and acquittal may also depend on whether publication served good motives and justifiable ends. Preserve the records supporting any claimed factual allegation because the precise subject and circumstances determine how this defense applies.

Likes, reactions, and shares

In Disini, the Supreme Court upheld the cyber libel provision as applied to the original author but invalidated its application to people who merely receive and react to a post. It also invalidated aiding or abetting liability under Section 5 as applied to cyber libel.

This does not mean every later post is immune. A person who writes a new defamatory caption, adds an independent accusation, materially republishes content as their own, or creates a separate defamatory post may present a different factual situation. Liability cannot be decided solely from the platform button used.

The filing deadline

Cyber libel generally prescribes in one year from discovery by the offended party, the authorities, or their agents. The Supreme Court reaffirmed this rule in its 2026 resolution in Causing v. People, applying Articles 90 and 91 of the Revised Penal Code.

The following points are critical:

If you saw the post when it was published, that date will ordinarily be the discovery date.
If you discovered it later, preserve evidence showing when and how you first learned of it.
The filing of the complaint or information interrupts prescription under Article 91, but the legal effect of a particular filing can depend on the offense and the office where it was filed.
Prescription may begin running again if proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused.
The continued availability of an old post should not be assumed to restart the period each day.
Editing, updating, or publishing material again may raise a separate republication issue, but that depends on what was done and the applicable evidence.

Do not wait for a takedown request, settlement discussion, platform response, or account-identification effort to finish before obtaining deadline advice.

Preserve the social-media evidence first

Save evidence before confronting the poster or reporting the content to the platform. A post can be edited, deleted, hidden, or made private within minutes.

Preserve:

Full-screen screenshots showing the post, account name, profile image, date, time, URL, captions, attachments, comments, and visible engagement;
A screen recording showing how the post is reached from the account or page;
The complete post or thread, not merely the most offensive sentence;
The direct URL or unique post identifier;
Original downloaded images, videos, audio, and documents;
The account profile, “About” information, username, prior usernames, and public contact details;
Messages or admissions connecting the respondent to the account;
Notifications, emails, or messages showing when you discovered the post;
Names and sworn accounts of people who saw the material;
Evidence of reputational harm, such as lost clients, cancelled engagements, employment consequences, inquiries, messages, or contemporaneous records of distress;
Your original device and unedited files, with backups stored separately.

Avoid cropping away identifying information or adding marks to the only saved copy. Keep an untouched original and create a separate working copy. Note who collected each item, when it was collected, the device used, and where it has been stored.

Screenshots are useful but are not automatically conclusive. Electronic evidence must be authenticated under the applicable rules. A witness with personal knowledge, device records, account admissions, platform data, or a lawful forensic examination may be needed to establish authenticity and authorship.

If the account is anonymous or fake

Do not publicly accuse a suspected person without reliable evidence. Similar writing style, personal knowledge of events, or a familiar profile photograph may be relevant but may not establish authorship by itself.

Bring the available material promptly to the PNP Anti-Cybercrime Group, the NBI, or the appropriate prosecutor. Investigators may consider lawful preservation and disclosure procedures under the Cybercrime Prevention Act and the Supreme Court’s Rule on Cybercrime Warrants. Subscriber, traffic, or content data held by a service provider generally cannot be obtained merely through a private request; compulsory disclosure requires the prescribed legal process.

Speed matters because service-provider records are not necessarily retained forever. Section 13 of the Cybercrime Prevention Act provides statutory preservation periods for specified computer data after a proper preservation order.

Choose the proper place to file

Venue in a criminal case is legally important. Under Section 2.1 of the Supreme Court’s Rule on Cybercrime Warrants, a criminal action for an offense under Section 4 or 5 of the Cybercrime Prevention Act may be filed before the designated cybercrime court of the province or city:

Where the offense or any element occurred;
Where any part of the computer system used is situated; or
Where damage to a natural or juridical person took place.

The court where the criminal action is first filed acquires jurisdiction to the exclusion of the others. Merely asserting that an online post could be accessed everywhere is not a safe approach to venue. The complaint should identify and support the specific connection to the chosen city or province.

Because the prosecutor ordinarily files the Information in court, the complainant usually begins at the city or provincial prosecutor’s office corresponding to the proper venue. If venue is uncertain—particularly when the author, device, complainant, and affected business are in different places—obtain legal advice before filing.

Prepare the complaint-affidavit

The complaint-affidavit should present facts in chronological order and be based on personal knowledge or properly identified records. It should ordinarily state:

Your full identifying and contact information;
The respondent’s identity and last known address, if known;
The account, page, channel, group, or website involved;
The exact words, images, video, or audio complained of;
The publication date and your discovery date;
Who received or saw the material;
Why the statement refers to you, especially if you were not named;
Why the imputation is defamatory;
Facts and records showing falsity, bad faith, or the applicable form of malice;
Facts connecting the respondent to the account and post;
The facts establishing venue;
The harm caused; and
A clear identification of every attachment.

Attach the complete supporting evidence, not selected fragments. Witnesses who saw the post, can identify the account owner, or can testify to resulting harm should execute their own affidavits when appropriate.

The affidavit must be properly sworn before an authorized officer. False material statements in an affidavit may create separate liability.

File with the prosecutor’s office

The Department of Justice’s official preliminary-investigation filing guide lists an Investigation Data Form, a complaint-affidavit or sworn statement, supporting evidence, and the required number of copies. Its published checklist states five copies plus the number of respondents, but confirm the current local requirements before filing because intake procedures, office arrangements, and payment rules may change.

Bring:

The signed and sworn complaint-affidavit;
The NPS Investigation Data Form;
Witness affidavits;
Complete, labeled annexes;
The required copies;
Valid identification;
Available information for serving each respondent; and
Originals or devices that may later be needed for authentication, without surrendering them unless properly received and documented.

Ask for and preserve the receiving copy, docket number, official receipt if a fee applies, and the name of the receiving office. Do not assume that sending an email or making a police blotter entry alone constitutes filing a criminal complaint or interrupts prescription.

Under the 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings, prosecutors apply the standard of prima facie evidence with reasonable certainty of conviction. The available evidence must be admissible, credible, preservable, and capable of proving every element and the responsible person’s identity. An incomplete submission may be returned for case build-up or dismissed.

What happens after filing?

The prosecution office first checks the complaint’s form and evidentiary completeness. If it proceeds:

The case is docketed and assigned to an investigating prosecutor.
The respondent is generally subpoenaed and given the complaint and supporting evidence.
The respondent may submit a counter-affidavit and evidence.
The prosecutor may conduct a clarificatory hearing or require further authorized submissions.
The prosecutor decides whether the evidence meets the required standard.
If it does, the prosecutor recommends filing an Information in the proper designated cybercrime court. If it does not, the complaint is dismissed.

A preliminary investigation is not yet the criminal trial, and filing a complaint does not establish guilt. If an Information is filed, the court independently handles arraignment, bail where applicable, trial, and judgment.

A prosecutor’s resolution may be subject to a motion for reconsideration or a petition for review under applicable DOJ rules. These remedies have strict procedural and filing requirements. Read the resolution immediately and consult counsel rather than relying on an informal request for reconsideration.

Possible penalties and civil liability

Article 355 of the Revised Penal Code, as amended by Republic Act No. 10951, provides imprisonment, a fine, or both for traditional libel. Section 6 of the Cybercrime Prevention Act raises the applicable penalty by one degree when information and communications technology is used.

In People v. Soliman, the Supreme Court held that a court may impose a fine instead of imprisonment in an appropriate cyber libel case. It calculated the current statutory fine range for cyber libel as ₱40,000 to ₱1,500,000. Imprisonment remains legally available; the judiciary’s preference for a fine in suitable libel cases does not abolish that alternative.

Civil damages may also be claimed, subject to the rules governing whether the civil action is deemed included in the criminal case, separately filed, reserved, or waived. A separate civil action for defamation generally has its own one-year limitation under Article 1147 of the Civil Code. Obtain advice before making an election that could affect either proceeding.

Common mistakes to avoid

Waiting until the one-year period is almost over;
Saving only a cropped screenshot without the URL, account, date, or context;
Reporting the post to the platform before preserving it;
Treating insults or criticism as automatically libelous;
Omitting proof that another person saw the statement;
Failing to explain how an unnamed post identifies the complainant;
Naming a suspected anonymous poster without evidence connecting that person to the account;
Filing in a convenient place without establishing proper venue;
Relying only on hearsay or unauthenticated digital material;
Leaving out evidence relevant to privilege, public concern, truth, motive, or actual malice;
Posting retaliatory accusations that may create a separate complaint;
Assuming a demand letter, barangay report, police blotter, or platform complaint is the criminal complaint itself; and
Assuming deletion ends the case or permanently preserves platform records.

When legal help is urgent

Consult a Philippine lawyer or approach the prosecutor, PNP Anti-Cybercrime Group, or NBI without delay when:

The post is approaching one year from discovery;
The account is anonymous or appears fabricated;
The respondent or platform is outside the Philippines;
The post is being rapidly shared, edited, or deleted;
You are a public official, public figure, journalist, candidate, corporation, or person involved in a public controversy;
The material includes intimate images, threats, stalking, identity theft, doxxing, child sexual-abuse material, or extortion;
Police seek access to a device or account;
A preservation or disclosure order may be necessary;
Several possible venues or respondents are involved; or
A prosecutor has issued a dismissal or other resolution with a deadline for review.

Some conduct may fall under laws other than cyber libel. Threats, harassment, identity theft, unauthorized account access, non-consensual intimate-image distribution, violence against women or children, data-privacy violations, and extortion have different elements and procedures. Report immediate danger to law enforcement or emergency services.

Frequently asked questions

Must the post name me?

No. Identification may be established if readers familiar with the circumstances could reasonably understand that the post referred to you. The complaint should explain the identifying words, photographs, tags, relationships, events, or context.

Is a private message cyber libel?

Libel requires publication to a third person. A message seen only by its author and the person defamed ordinarily lacks that element. A group chat, copied message, forwarded message, or closed online group may satisfy publication if another person received the defamatory statement.

Is a Facebook comment covered?

It can be. A person who authors an independently defamatory comment may be treated differently from someone who merely clicks a reaction. The exact words and the person’s role in creating or publishing them control.

Is a demand letter required before filing?

Generally, no. A takedown or correction request may be useful in some cases, but it is not a substitute for timely filing and may alert the poster to delete evidence.

Can I still complain if the post was deleted?

Yes, if the offense was completed and sufficient admissible evidence remains. Deletion may make authentication and account identification harder, which is why original files, witnesses, URLs, and prompt investigation are important.

Can a company file a cyber libel complaint?

A juridical person may be defamed under Article 353. The company must still prove the defamatory imputation, publication, identification, malice where required, authorship, and proper authority for the representative who files.

Does an apology automatically dismiss the case?

No. An apology, correction, deletion, or affidavit of desistance does not automatically extinguish a public criminal prosecution. It may affect evidence, prosecutorial assessment, damages, or penalty depending on the circumstances.

Where can I verify the governing rules?

Consult the official texts of the Cybercrime Prevention Act, Disini v. Secretary of Justice, Causing v. People, People v. Soliman, the Rule on Cybercrime Warrants, and the DOJ’s 2024 preliminary-investigation rules.

This article provides general legal information, not advice for a particular case and not a substitute for consultation with a Philippine lawyer. Rules and outcomes depend on the complete post, evidence, parties, venue, dates, and procedural history. Sources last checked on September 5, 2026.