Quick answer

A cyber libel case in the Philippines begins with a sworn complaint and supporting evidence filed with the proper prosecutor’s office. The prosecutor—not the complainant—decides whether the evidence justifies filing an Information in a designated Regional Trial Court acting as a cybercrime court.

To succeed, the prosecution must establish a defamatory imputation, publication to at least one person other than the subject, identification of the person defamed, malice where legally required, authorship or responsibility, and use of a computer system. A harsh, offensive, or false post is not automatically cyber libel if one of these elements is missing or a constitutional or statutory privilege applies.

Act quickly. In Causing v. People, the Supreme Court sitting En Banc confirmed that cyber libel generally prescribes in one year from discovery of the offense by the offended party, the authorities, or their agents. Filing a proper complaint or Information interrupts prescription. Do not assume that every later view, reaction, or continued availability of the same post starts a new one-year period. The date of discovery, any later republication, and any interruption of prescription must be established from the actual record. Read the Supreme Court’s current ruling in Causing v. People.

Anyone who has received a subpoena, warrant, or prosecutor’s resolution should consult a Philippine criminal-law practitioner immediately. These documents carry short deadlines.

What counts as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act punishes libel, as defined in Article 355 of the Revised Penal Code, when committed through a computer system or a similar future means. A computer system includes internet-connected computers and devices such as smartphones. Read Republic Act No. 10175.

The prosecution ordinarily must prove:

A defamatory imputation. The content attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a natural or juridical person to contempt. Context, ordinary meaning, accompanying images, captions, and insinuations all matter.
Publication. At least one person other than the person defamed received, read, heard, or saw the material. A message sent only to its subject generally lacks this element, while a group chat, public post, email copied to others, video, blog, or similar communication may satisfy it.
Identification. The complainant need not always be named. It is enough if at least one third person could reasonably identify the complainant from the words, images, surrounding circumstances, or other clues.
Malice. Defamatory imputations are generally presumed malicious unless a privilege or another exception applies. In cases involving a public officer’s official conduct, a public figure, or a qualifiedly privileged communication, the prosecution may have to prove actual malice—knowledge of falsity or reckless disregard of whether the statement was false.
Responsibility for the publication. The evidence must connect the respondent to the account and the particular post, message, upload, or other publication. A profile name or screenshot alone may not reliably prove who controlled an account.
Use of a computer system. The defamatory material must have been published through information and communications technology.

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author but rejected its application to people who merely receive a post and react to it. A person who adds a new defamatory caption, allegation, edited image, or commentary may present a different issue because that person may have created a new publication. Liability depends on what that person actually communicated, not merely on the platform button used. Read Disini v. Secretary of Justice.

Statements that may be protected

Freedom of expression does not protect every defamatory statement, but neither does the cyber libel law make every criticism criminal.

Possible defenses or reasons for dismissal include:

The statement is not defamatory when read fairly and in context.
The complainant was not identified or identifiable.
Nobody other than the complainant received the communication.
The respondent did not create or publish the material and did not control the account.
The statement is protected opinion, fair comment, satire, or rhetorical hyperbole rather than a provably false factual allegation. Merely labeling a factual accusation “opinion” does not settle the issue.
The communication was made privately and in good faith in performing a legal, moral, or social duty, and only to persons with a corresponding interest or duty.
The material is a fair and true report, made in good faith and without improper comments, of a non-confidential official proceeding or an act performed by a public officer in an official capacity.
The subject is a public officer or public figure and the prosecution cannot prove actual malice where that standard applies.
The imputation was true and was published with good motives and for justifiable ends, subject to Article 361’s rules on when proof of truth is admissible.
The prosecution is time-barred.
Venue is improper.
The allegedly criminal publication occurred before the applicable law took effect, and no legally sufficient later republication occurred.
The State is attempting to punish the same online libel under both the Revised Penal Code and the Cybercrime Prevention Act despite the constitutional ruling in Disini.

Truth should not be treated as an automatic defense. Article 361 requires not only truth but also good motives and justifiable ends for acquittal. The admissibility and effect of proof of truth also depend on the nature of the accusation and the complainant’s position. See Articles 353–362 of the Revised Penal Code.

The one-year deadline

The Supreme Court’s April 8, 2026 En Banc resolution in Causing settled the controlling general rule: cyber libel prescribes in one year, applying the specific libel provision in Article 90 of the Revised Penal Code.

Under Article 91:

The period generally begins when the offense is discovered by the offended party, the authorities, or their agents.
Filing the complaint or Information interrupts the running of prescription.
The period may run again if proceedings terminate without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused.

The exact date of discovery can be disputed. Preserve the first message, email, report, screenshot, or witness account showing when the post was found. A complainant should not wait until the final month to file because venue, attribution, notarization, office closures, rejected submissions, and incomplete evidence can cause delay.

A respondent invoking prescription should submit competent evidence of the relevant dates. The date printed on a screenshot may show when content was posted but not necessarily when the complainant, authorities, or their agents discovered it.

Evidence to preserve immediately

Digital material can be deleted or altered, while platform records may be retained only for limited periods. Preserve evidence before reporting, requesting removal, answering publicly, or editing the content.

Keep:

Full-page screenshots showing the complete post, caption, account name, profile URL, post URL, date and time, and surrounding context.
A screen recording that starts from the account or platform page, opens the disputed material, displays its URL, and scrolls through the entire post and relevant comments.
The original photo, video, audio, email, direct message, or downloaded file—not only a cropped or forwarded copy.
Visible engagement information, including comments, shares, recipients, and group membership, where relevant.
The device on which the material was received, with its original files and messages intact.
Platform notifications and emails showing when the material was discovered.
Messages, admissions, prior drafts, or other evidence linking the respondent to the account.
Witness details for people who saw the publication and could identify the person defamed.
For a defense, research notes, source documents, interviews, official records, drafts, editorial review, and communications showing verification efforts and good faith.
For damages, records of lost work, cancelled contracts, medical or counseling expenses, takedown costs, and specific communications showing reputational harm.

Do not fabricate a recreation after a post disappears. Clearly label later reconstructions or annotations. Do not crop away material that changes the meaning.

Electronic evidence must be authenticated. The person offering it may need to explain how it was obtained, why it is accurate, and how its integrity was preserved. An NBI or PNP cybercrime investigation may be important when authorship is disputed or the account is anonymous.

Law-enforcement authorities can seek preservation and disclosure of subscriber information or computer data through the procedures in Republic Act No. 10175 and the Rule on Cybercrime Warrants. Private parties do not automatically have the same power to compel a platform to disclose account records.

How to file a complaint

1. Assess the complete publication

Save and review the exact words, images, audio, hyperlinks, and surrounding discussion. Identify separately each allegedly defamatory statement, who published it, when it was discovered, who saw it, and why it identifies and harms the complainant.

2. Determine the proper venue

Venue is jurisdictional in criminal cases. Under the Rule on Cybercrime Warrants, a cybercrime action may be filed in the designated cybercrime court of the province or city:

where the offense or any element occurred;
where any part of the computer system used is situated; or
where damage to the natural or juridical person occurred.

The court where the action is first properly filed acquires jurisdiction to the exclusion of other courts. The corresponding prosecutor’s office should ordinarily handle the preliminary investigation. Mere accessibility of a post in a location should not be used as a substitute for establishing a proper statutory venue. Venue should be checked against the complainant’s residence, the respondent’s acts, the devices and systems used, and the place where legally cognizable damage occurred. See the Supreme Court’s venue discussion in Tieng v. People.

3. Consider investigative assistance

A complainant may approach the NBI Cybercrime Division or an appropriate PNP cybercrime unit when technical investigation, account attribution, device examination, or lawful preservation requests may be needed. This investigative step is not a substitute for timely filing when prescription is close.

The NBI’s current citizen-service procedure allows victims of computer crimes to request investigation, undergo an interview, execute sworn statements, and submit devices and supporting documents for examination. See the NBI’s investigative-assistance procedure.

4. Prepare the complaint-affidavit

The sworn complaint should state facts within the affiant’s personal knowledge and ordinarily include:

the complainant’s and respondent’s identifying information and usable addresses;
the exact defamatory material;
the date of publication and date and manner of discovery;
facts showing publication to third persons;
facts showing how the complainant was identified;
facts linking the respondent to the account or publication;
the computer system or platform used;
facts supporting malice, including any applicable actual-malice standard;
the factual basis for venue; and
properly marked supporting documents and witness affidavits.

Avoid exaggeration, speculation about account ownership, or legal conclusions unsupported by facts. Knowingly making a false statement under oath can create separate liability.

The DOJ publishes a checklist that includes an Investigation Data Form, complaint-affidavit or sworn statement, witness affidavits, and supporting evidence. Required copies, fees, formats, and local filing arrangements should be confirmed directly with the particular prosecution office before submission. See the DOJ’s current preliminary-investigation filing checklist.

5. Participate in preliminary investigation

Under the 2024 DOJ–National Prosecution Service Rules, the prosecutor evaluates whether the available evidence establishes a prima facie case with reasonable certainty of conviction. The evidence must appear admissible, credible, capable of preservation, and sufficient—if uncontradicted—to establish every element and the responsible person’s identity.

If that standard is met, the prosecutor recommends filing an Information in court. If not, the complaint is dismissed at the prosecutorial level. The private complainant is principally a witness; prosecution of the criminal case belongs to the State.

How to respond to a cyber libel complaint

Preserve first, then seek advice

Keep the original post, source materials, device data, account records, drafts, and conversations. Do not alter evidence or ask witnesses to coordinate stories. If continuing publication is causing harm, obtain advice about preservation, correction, removal, or retraction before changing the material.

A demand letter is not a judgment, but it should not be ignored. A careful correction or removal may limit harm, while an impulsive admission, retaliatory post, or poorly worded apology may complicate the defense.

Treat the subpoena deadline as urgent

Under the 2024 DOJ–NPS Rules, a subpoena for regular preliminary investigation should set a hearing date and give the respondent at least 10 days from receipt to submit a counter-affidavit. Follow the exact date stated in the subpoena.

A motion to dismiss filed instead of a counter-affidavit is generally not allowed unless it is verified and contains the respondent’s factual and legal defenses, in which case it may be treated as the counter-affidavit. Failure to respond after proper service may cause the prosecutor to resolve the case using only the complainant’s evidence.

The counter-affidavit should address every element and attach the evidence supporting each defense. Possible issues include:

lack of authorship or account control;
absence of defamatory meaning;
lack of identification or publication;
privileged communication;
public-interest reporting or comment;
absence of actual malice;
truth, good motives, and justifiable ends;
fair context or omitted material;
prescription;
improper venue;
legally insufficient authentication; and
inconsistencies in the complainant’s dates, witnesses, or account-attribution evidence.

Do not rely only on a general denial. Explain the relevant facts under oath and preserve objections that may otherwise be lost.

Act promptly after the resolution

An aggrieved party may generally file a motion for reconsideration of a regular preliminary-investigation resolution within 15 days from receipt under the 2024 DOJ–NPS Rules. A qualifying resolution may also be reviewed through the applicable DOJ appeal procedure.

If an Information has already been filed in court, a DOJ appeal does not by itself stop the court proceedings. The appropriate request to suspend proceedings must be filed, and the court decides it. Counsel should calculate all prosecutor, DOJ, and court deadlines separately.

If an Information or warrant has been issued

Do not evade service or attempt to negotiate informally with arresting officers. Counsel can verify the case, assess voluntary surrender, arrange lawful posting of bail, and determine whether a motion to quash or another remedy is available.

Bail is generally a matter of right before conviction for an offense not punishable by reclusion perpetua or life imprisonment, but the court fixes the conditions and amount. A pending complaint at the prosecutor’s office does not automatically authorize arrest; an arrest must have a lawful basis, such as a court-issued warrant or a valid warrantless-arrest situation.

Possible penalties and civil liability

Cyber libel carries a penalty one degree higher than traditional libel. Imprisonment remains legally possible.

If the court chooses the alternative penalty of a fine, the Supreme Court held in People v. Soliman that the statutory range for online libel is ₱40,000 to ₱1,500,000, subject to the rules governing the actual sentence. Supreme Court guidance encouraging courts to consider a fine in appropriate libel cases does not abolish imprisonment. Read People v. Soliman.

A conviction may also carry civil liability. Separately, Article 33 of the Civil Code permits an independent civil action for defamation, subject to its own evidentiary and procedural rules. A criminal complaint generally includes the corresponding civil action unless it is waived, reserved when legally permitted, or previously instituted. Damages are not automatic in every amount claimed; the type and amount must have a legal and evidentiary basis.

A retraction, correction, apology, takedown, or affidavit of desistance does not automatically erase a completed offense or require the State to dismiss a criminal case. It may nevertheless affect the evidence, damages, mitigation, or a lawful settlement of the civil aspect.

Common mistakes

Waiting close to the one-year deadline.
Saving only a cropped screenshot without the URL, account, date, or context.
Treating a fake profile name as conclusive proof of authorship.
Filing wherever the post could be viewed instead of establishing proper venue.
Naming every person who liked, reacted to, or passively shared content without examining what each person actually published.
Assuming truth alone always defeats criminal libel.
Assuming a public official can never bring a libel case.
Responding with new accusations, threats, doxxing, or edited screenshots.
Deleting devices, messages, drafts, or source files after receiving a demand or subpoena.
Ignoring the prosecutor’s scheduled counter-affidavit date.
Filing an unsworn narrative instead of a complete complaint- or counter-affidavit.
Assuming a platform takedown either proves guilt or ends the case.
Assuming a DOJ appeal automatically suspends proceedings already pending in court.

When legal help is urgent

Seek immediate assistance if:

the one-year period may expire within weeks;
the account is anonymous or platform data may disappear;
a subpoena sets a counter-affidavit hearing;
an Information, warrant of arrest, hold-departure issue, or bail condition is involved;
police or investigators want to search a phone, computer, account, or premises;
the complainant is a public officer or public figure and actual malice is disputed;
the publication concerns confidential records, children, intimate images, threats, or personal data that may involve separate laws;
several people, reposts, jurisdictions, or corporate accounts are involved; or
the material is connected with journalism, whistleblowing, an official complaint, employment discipline, or pending litigation.

Qualified indigent parties may inquire with the Public Attorney’s Office about eligibility for representation. A respondent may also retain private counsel or seek an appropriate legal-aid program.

Frequently asked questions

Is every false Facebook post cyber libel?

No. Falsity may be important, but the prosecution must still establish defamatory meaning, publication, identification, the required malice, authorship or responsibility, and use of a computer system. Privilege and constitutional protections may also apply.

Can a private message be cyber libel?

It can be if it was communicated to someone other than the person defamed. A message sent only to the subject ordinarily lacks publication, while a group chat or copied email may satisfy that element.

Can someone be charged for merely liking or reacting to a post?

Under Disini, cyber libel cannot be imposed on people who merely receive and react to the original post. Adding a new defamatory statement, caption, edited image, or allegation may amount to a separate publication and requires its own analysis.

Can an anonymous account be charged?

An anonymous account does not prevent investigation, but the evidence must ultimately identify the responsible person. Contact cybercrime investigators promptly because lawful platform-record preservation and disclosure can take time.

Are screenshots enough?

They may be useful but are not automatically conclusive. Their completeness, accuracy, source, and integrity must be authenticated, and separate evidence may be needed to prove who controlled the account.

Does deleting the post end liability?

No. Deletion does not erase a publication already seen by third persons. It may reduce continuing harm, but the original evidence and platform records may remain available.

Can a complainant withdraw the case?

A complainant may execute an affidavit of desistance, but cyber libel is prosecuted in the name of the People of the Philippines. Desistance does not automatically compel dismissal, especially when other evidence can establish the offense.

Can the same online post be charged as both traditional libel and cyber libel?

The State may not impose duplicate punishment under both laws for the same libelous act in a manner prohibited by Disini. The precise charging issue should be raised promptly before the prosecutor or court.

Does a correction or apology guarantee dismissal?

No. It may reduce harm or support settlement of the civil aspect, but its legal effect depends on timing, wording, admissibility, and the remaining evidence.

How long does the entire case take?

There is no reliable universal duration. Preliminary investigation, review, warrant and bail proceedings, arraignment, trial, and appeals have separate stages and deadlines. The parties must comply with each deadline even when another part of the case is still pending.

Official legal sources

This article provides general legal information, not legal advice or an attorney-client relationship. Cyber libel outcomes depend heavily on the exact publication, evidence, dates, parties, and procedural history. Philippine authorities and procedures were checked through July 22, 2026.