Quick answer

To file a cyber libel case in the Philippines, preserve the online material and its surrounding digital evidence, identify the author and a legally proper venue, then file a sworn complaint-affidavit with the appropriate prosecution office before the offense prescribes. To defend one, do not ignore the prosecutor’s subpoena or a court process: preserve your own records, obtain counsel, and submit a sworn, evidence-backed response addressing every element of the charge.

Cyber libel is not established merely because an online post is insulting, embarrassing, or false. The prosecution must prove a defamatory imputation, publication to another person, identification of the complainant, malice under the applicable standard, authorship or responsibility, and use of a computer system. Privilege, protected opinion, lack of identification, lack of authorship, truth accompanied by the legally required good motives and justifiable ends, prescription, improper venue, and constitutional protections may apply—but the result depends on the exact words, context, parties, documents, and dates.

Act promptly. The Supreme Court has ruled that cyber libel prescribes in one year from its discovery by the offended party, the authorities, or their agents. Do not assume that an old post’s continued availability, a new screenshot, or later rediscovery restarts the period.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 covers libel, as defined in Article 355 of the Revised Penal Code, when committed through a computer system or a similar future means.

A viable charge ordinarily requires proof of all the following:

A defamatory imputation. The statement attributes a crime, vice, defect, dishonorable act or condition, or something that tends to dishonor, discredit, or expose a person to contempt.
Publication. At least one person other than the subject received or saw the statement. A private message sent only to the person being criticized ordinarily lacks this element, although forwarding it to others may change the analysis.
Identification. The complainant must be named or be identifiable from a photograph, nickname, workplace, surrounding facts, or other context. Naming no one is not automatically a defense if readers could still identify the person.
Malice under the applicable legal standard. Article 354 generally presumes malice in a defamatory imputation unless the communication is privileged or good intention and justifiable motive are shown. Constitutional protections impose a higher “actual malice” requirement in certain cases involving public officials, public figures, official conduct, or matters of public concern. Actual malice means knowledge that the statement was false or reckless disregard of whether it was false—not merely hostility, anger, or ordinary carelessness.
Authorship or legal responsibility. The evidence must connect the accused to the account and the particular post. A profile name or screenshot, standing alone, may not reliably establish who controlled the account when the material was published.
Use of a computer system. This includes publication through social media, websites, email, messaging platforms, or comparable information and communications technology.

The whole publication matters. Courts consider the ordinary meaning, tone, surrounding discussion, images, captions, and circumstances—not merely one isolated word.

Opinion, criticism, and privilege

The right to free expression protects robust criticism, especially on public affairs, but it does not create a blanket right to make defamatory factual accusations.

A statement framed as “my opinion” can still be actionable if it implies a provably false and undisclosed fact. Conversely, obvious exaggeration, rhetorical abuse, satire, or a value judgment that cannot reasonably be proved true or false may not constitute a defamatory factual imputation. Context decides the issue.

Article 354 recognizes qualifiedly privileged communications, including:

A private communication made in the performance of a legal, moral, or social duty to a person with a corresponding interest or duty; and
A fair and true report, made in good faith and without added comments or remarks, of qualifying official proceedings or acts.

Privilege is not a license for unnecessary mass publication. A report to an employer, regulator, school, professional body, or other proper recipient may be treated differently from posting the same accusation publicly to thousands of users. Qualified privilege may also be defeated by proof of actual malice.

Is truth a complete defense?

Not always. Under Article 361 of the Revised Penal Code, the admissibility and effect of proof of truth depend on the nature of the accusation and the person concerned. Even where the imputation is shown to be true, acquittal generally requires proof that the publication was made with good motives and for justifiable ends.

For an accusation against a government employee concerning the discharge of official duties, truth is particularly relevant. In other situations, the statutory limits on proving truth must still be considered.

A respondent should therefore avoid relying on “but it was true” without presenting reliable source documents, witnesses, the reason for publication, the steps taken to verify the accusation, and why the audience needed the information.

Who can be liable for likes, shares, and comments?

In Disini v. Secretary of Justice, the Supreme Court sustained cyber libel as applied to the original author but rejected the law’s application to people who merely receive a post and react to it. A simple “like” or similar reaction is therefore not automatically cyber libel.

That protection does not cover separately authored defamatory material. A user who writes a new defamatory comment, adds a defamatory caption to a shared post, or republishes an accusation as their own may be assessed as an author of that new material. Liability must be proved individually; membership in a group, friendship with the poster, or mere access to a page is not enough.

The filing deadline

The controlling rule is now one year from discovery. In Causing v. People, the Supreme Court treated cyber libel as the Revised Penal Code offense of libel committed through a computer system and applied Article 90’s one-year prescriptive period.

Under Article 91, prescription generally begins upon discovery by the offended party, the authorities, or their agents and is interrupted by the filing of the complaint or information. It may run again if proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused.

Prescription can turn on disputed facts, including:

The original publication date;
When and how the complainant first learned of the post;
Whether an alleged later post was a genuinely new publication;
When a legally sufficient complaint was filed; and
Whether earlier proceedings interrupted the period.

Do not wait until the anniversary date. Weekends, holidays, questions over venue, incomplete affidavits, and evidence authentication can make a last-minute filing unsafe.

Evidence to preserve immediately

Whether filing or defending, preserve evidence before asking the platform or author to remove anything.

Keep:

Full-page screenshots showing the complete post, account name, profile URL, post URL, date, time, reactions, comments, and surrounding thread;
A screen recording showing how the account and publication were reached;
The original message, email, file, photograph, audio, or video—not only a forwarded or edited copy;
Platform download data, notification emails, message headers, and available account or device logs;
The device on which the material was received or created;
The date and circumstances of discovery;
Names and contact details of people who personally saw the publication;
Documents supporting or disproving the accusation;
Prior drafts, source materials, verification efforts, and communications with editors or page administrators;
Proof connecting—or failing to connect—the respondent to the account; and
Evidence of actual harm, such as lost work, cancelled transactions, client communications, or medical records, if damages are claimed.

Create working copies but retain the originals unchanged. Record who collected each item and when. Do not crop away identifying information, alter metadata, impersonate another person, break into an account, or obtain private data unlawfully.

Under the Rules on Electronic Evidence, electronic documents must satisfy the ordinary rules of admissibility and be properly authenticated. A screenshot can be evidence, but its weight improves when a witness can explain how it was obtained and when the original device, URL, account data, or other corroboration is available.

How to file the complaint

1. Identify the correct venue

Under Section 2.1 of the Rule on Cybercrime Warrants, a cybercrime action may be filed before the designated cybercrime court of the province or city where:

The offense or any element occurred;
Any part of the computer system used is situated; or
Any damage to a natural or juridical person took place.

The first court in which the criminal action is properly filed acquires jurisdiction to the exclusion of the others. Venue must rest on real, supportable facts; the mere ability to access a post from a chosen city should not be used to manufacture a convenient or harassing venue.

The complaint is normally submitted first to the prosecution office corresponding to the intended court venue. Confirm local intake and filing arrangements before the deadline.

2. Prepare a detailed complaint-affidavit

The affidavit should state, from personal knowledge where possible:

The complainant’s and respondent’s identities and addresses;
The exact words, images, or recording complained of;
The URL, platform, account, publication date, and discovery date;
Why the material referred to the complainant;
Who else saw or received it;
Facts connecting the respondent to the account or publication;
Why the statement was defamatory and false, if falsity is asserted;
Facts showing malice under the applicable standard;
The basis for venue;
The timeliness of the complaint; and
The supporting evidence attached to each material allegation.

Avoid exaggeration and legal conclusions unsupported by facts. If a paragraph depends on hearsay, identify the person with direct knowledge and obtain a separate sworn witness affidavit.

Under the 2024 DOJ–National Prosecution Service Rules, the standard filing set for a complaint-affidavit is one original, two duplicate copies, and an additional copy for each respondent, together with the supporting evidence. Local prosecution offices may have administrative forms, intake procedures, or authorized electronic-filing arrangements.

3. Seek investigative help where necessary

The NBI Cybercrime Division or another authorized law-enforcement cybercrime unit may assist with account attribution, preservation, and lawful digital-forensic collection. The DOJ Office of Cybercrime also acts on cybercrime complaints and referrals.

Private complainants cannot compel a platform or telecommunications provider to disclose protected subscriber or content data simply by sending a demand. Disclosure, interception, search, seizure, and examination of computer data are governed by statutory requirements and judicial warrants or orders. Report anonymous or disappearing accounts promptly so investigators can assess lawful preservation measures.

4. Participate in preliminary investigation

Because cyber libel’s prescribed imprisonment may exceed six years, it ordinarily proceeds under the regular preliminary-investigation track in DOJ Department Circular No. 15.

The prosecutor determines whether the evidence establishes prima facie evidence with reasonable certainty of conviction. This requires evidence that appears admissible, credible, capable of preservation and presentation at trial, and sufficient—if left uncontroverted—to establish every element and the offender’s identity.

If the investigation continues, the respondent receives a subpoena with the complaint and attachments. The hearing date must give the respondent at least 10 calendar days from receipt to prepare a counter-affidavit. Reply and rejoinder affidavits are permitted when the investigating prosecutor finds them necessary, subject to the circular’s deadlines.

The prosecutor may recommend dismissal or the filing of an Information. An aggrieved party may generally file a motion for reconsideration within 15 days from receipt of the resolution. Any petition for review, request to suspend court proceedings, or further remedy must comply with the applicable DOJ rules; filing a review does not automatically stop a court case.

5. Court proceedings

If an Information is filed, the case is assigned to the proper designated Regional Trial Court. The judge independently determines whether probable cause exists and whether to dismiss the case, issue a warrant of arrest, or take another action allowed by the Rules of Criminal Procedure.

Cyber libel is ordinarily bailable before conviction, but the court determines the conditions and amount based on the applicable rules and circumstances. A respondent should not assume that filing a counter-affidavit or seeking DOJ review automatically prevents a warrant.

How to defend the complaint

Act on the subpoena immediately

Record the date and manner of receipt. Obtain the complete complaint and attachments, calculate the response deadline, and consult a lawyer experienced in criminal procedure and electronic evidence. A respondent who does not participate may lose the opportunity to present defenses before the prosecutor decides the case.

A counter-affidavit must be sworn and supported by documents and witness affidavits. A bare denial is rarely enough where the complainant has account records, admissions, or witnesses. Conversely, the respondent is not required to prove innocence; the prosecution retains the burden of establishing every element.

Test each element separately

A sound defense should examine:

Authorship: Who actually controlled the account at the relevant time? Is the attribution based only on a display name?
Exact content: Is the complete post presented, or only a cropped excerpt?
Publication: Was it communicated to a third person?
Identification: Would an ordinary reader know the complainant was the subject?
Defamatory meaning: Was it a factual accusation, or protected opinion, satire, or rhetorical criticism?
Privilege: Was it a good-faith communication to a person with a corresponding duty or interest, or a fair and true official report?
Truth and purpose: What competent evidence supports the assertion, and were the motives and ends justifiable?
Actual malice: If the higher constitutional standard applies, is there proof of knowing falsity or reckless disregard?
Timeliness: When did discovery occur, and was the complaint filed within one year?
Venue: Do the complaint and evidence establish a venue allowed by the cybercrime rules?
Retroactivity: Was the alleged publication made before the cybercrime law became effective? A later edit or republication requires its own factual analysis.
Evidence integrity: Can the electronic material and account attribution be authenticated?

Avoid conduct that worsens the case

Do not:

Delete or alter evidence after receiving notice of a complaint, subpoena, preservation request, or warrant;
Contact or threaten the complainant or witnesses;
Publish retaliatory accusations;
Coach witnesses or create backdated records;
Ignore a prosecutor’s subpoena or court order;
Surrender passwords informally without understanding the legal authority and scope of the request; or
Obstruct a lawfully issued warrant.

Taking a post down does not erase a completed publication, although it may limit continuing harm. A correction, retraction, or apology can sometimes help resolve a dispute or mitigate damages, but its wording and timing may also affect admissions and defenses. Obtain advice before issuing one.

Possible penalties and civil liability

Article 355, as amended, provides alternative imprisonment or fine for traditional libel. Because Section 6 of Republic Act No. 10175 raises the penalty by one degree when the offense is committed through information and communications technology, the imprisonment range for cyber libel is generally prisión correccional in its maximum period to prisión mayor in its minimum period—four years, two months and one day to eight years, subject to the rules on modifying circumstances and indeterminate sentencing.

In People v. Soliman, the Supreme Court confirmed that a court may impose a fine instead of imprisonment. The statutory fine range for online libel is ₱40,000 to ₱1,500,000. A fine-only sentence is permitted, not guaranteed; the court must exercise judgment based on the law and circumstances.

A conviction may also carry civil damages. The civil action arising from the offense is generally deemed included in the criminal action unless waived, reserved, or previously filed separately. Defamation can also support an independent civil action under Article 33 of the Civil Code. Different procedural rules and limitation periods may apply, so civil claims should be assessed separately.

Common mistakes

Waiting until the last days of the one-year period;
Saving only a cropped screenshot without the URL, account, date, or context;
Treating account ownership as automatic proof of who published the post;
Filing where the complainant merely opened the webpage, without a sound venue basis;
Suing every liker, group member, page follower, or person tagged in the post;
Assuming truth alone always ends the case;
Mistaking harsh criticism for an automatically criminal statement;
Omitting facts showing publication to a third person;
Filing an affidavit filled with argument but lacking admissible evidence;
Ignoring public-official, public-figure, privilege, and actual-malice issues;
Responding through another angry social-media post;
Missing the subpoena, counter-affidavit, reconsideration, or review deadline; and
Assuming a platform report, demand letter, or barangay complaint automatically interrupts prescription.

When legal help is urgent

Seek immediate legal assistance if:

The one-year prescriptive period is approaching;
You received a subpoena, prosecutor’s resolution, Information, warrant, or notice of arraignment;
The post or account is disappearing or anonymous and provider data may need lawful preservation;
Police or investigators want to search a device, obtain passwords, or copy account data;
The dispute concerns a journalist, public official, public figure, whistleblower, confidential source, or privileged report;
Several posts, authors, locations, or complainants are involved;
A retraction, settlement, or public response is being demanded;
The same facts may also involve threats, harassment, identity theft, privacy violations, intimate images, child-protection laws, or another offense; or
The complainant is seeking substantial business, employment, or reputational damages.

Frequently asked questions

Is a screenshot enough to file a case?

It may support a complaint, but it does not automatically prove authenticity, authorship, publication date, or account control. Preserve the original device, URL, complete thread, witnesses, and corroborating platform or account evidence.

Can I file against an anonymous account?

You may report the matter and present the evidence you have, but identifying the responsible person may require authorized investigation and a cybercrime warrant or other lawful process. Do not attempt to hack or deceive the account holder.

Does deleting the post prevent a case?

No. Deletion does not undo a publication already seen by another person or necessarily eliminate preserved copies. It may, however, reduce further circulation.

Is sharing someone else’s post automatically cyber libel?

No. A passive reaction or bare receipt is not automatically liability under Disini. A person who adds and publishes a new defamatory caption, endorsement, or accusation may face separate scrutiny as an author.

Must the parties first undergo barangay conciliation?

Cyber libel ordinarily falls outside mandatory barangay conciliation because its prescribed penalty exceeds the statutory limits for offenses covered by the Katarungang Pambarangay process. A barangay appearance or settlement effort should not be assumed to suspend the one-year prescriptive period.

Can someone be arrested immediately for an old online post?

An old post alone does not ordinarily justify a warrantless arrest. After an Information is filed, however, a judge may issue a warrant upon an independent finding of probable cause. The narrow grounds for warrantless arrest under Rule 113 remain applicable.

Can the dispute be settled?

The parties may discuss correction, retraction, apology, damages, or other terms, but criminal proceedings do not necessarily end solely because the complainant withdraws interest. The prosecutor or court determines the legal effect. Any settlement should address pending cases, civil claims, confidentiality, preservation of evidence, and implementation without requiring unlawful conduct.

Official legal sources

This article provides general Philippine legal information, not legal advice or a prediction of any case. Cyber libel outcomes depend on the precise publication, evidence, parties, dates, venue, and procedural record. Official sources and procedures were checked as of July 23, 2026.