Quick answer

Cyber libel is libel committed through a computer system—such as a social-media post, online article, video caption, blog, email, forum post, or similar digital publication. A complainant must present evidence establishing every element of libel, the respondent’s authorship, use of information and communications technology, proper venue, and timely filing. A respondent should not ignore a prosecutor’s subpoena: the defense must ordinarily be presented in a sworn counter-affidavit with supporting evidence.

The most important deadline is prescription. Under the Supreme Court’s April 8, 2026 en banc ruling in Causing v. People, cyber libel generally prescribes one year from discovery of the allegedly defamatory material by the offended party, the authorities, or their agents—not automatically from the date it was posted. Filing the criminal complaint with the prosecution office interrupts the prescriptive period. A police report, platform report, demand letter, or barangay blotter should not be assumed to have the same effect.

Because discovery, authorship, privilege, and venue are often disputed, both sides should obtain Philippine counsel promptly and preserve the complete digital record before anything is deleted or changed.

What the prosecution must prove

Cyber libel is based on Article 353, in relation to Article 355, of the Revised Penal Code and Section 4(c)(4) of the Cybercrime Prevention Act of 2012. The prosecution must ultimately prove beyond reasonable doubt:

A defamatory imputation. The statement must impute a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person to contempt.
Publication. The statement must have been communicated to at least one person other than the person allegedly defamed. A public post is not required; a group chat, restricted page, email copied to others, or limited-audience post may be enough. A message seen only by its sender and the person attacked ordinarily lacks the publication element of libel, although other laws may apply.
Identification. Readers must be able to identify the person allegedly defamed. Naming the person is not indispensable if the photograph, position, circumstances, nickname, or surrounding facts make the identity reasonably clear.
Malice. Article 354 generally presumes a defamatory imputation malicious unless good intention and justifiable motive are shown or the communication is privileged. Different, more speech-protective standards apply to privileged communications and statements involving public officials, public figures, official conduct, or matters of public interest.
Use of a computer system or similar ICT. The prosecution must show that the libel was committed through information and communications technology.
The accused’s identity and authorship. A profile name, photograph, or screenshot alone does not conclusively establish who controlled an account or wrote a post.

The words must be assessed in their full context, including the language used, audience, accompanying images, preceding discussion, and whether a reasonable reader would understand the statement as fact, satire, rhetorical exaggeration, insult, or opinion. Not every offensive, rude, or embarrassing remark is criminal libel.

The one-year deadline

The Supreme Court has definitively held that cyber libel prescribes in one year from discovery. The controlling ruling is the April 8, 2026 en banc resolution in Causing v. People, G.R. No. 258524.

“Discovery” means actual discovery by the offended party, the authorities, or their agents. Posting something online does not automatically prove that the complainant discovered it that same day. Conversely, a complainant cannot postpone prescription merely by asserting a late discovery if records show earlier knowledge.

Evidence relevant to discovery may include:

The first message or email alerting the complainant to the post
The complainant’s first reply, comment, takedown request, or public response
Earlier screenshots, demand letters, incident reports, or consultations
Statements from the person who first showed the content to the complainant
Police, NBI, employer, school, or platform records
Dates on which an authorized representative or agent learned of the publication

The accused ordinarily bears the burden of adequately establishing prescription as a defense. Both parties should therefore document the discovery date rather than relying solely on the visible posting date.

Under Article 91 of the Revised Penal Code and the Supreme Court’s ruling in People v. Consebido, G.R. No. 258563, filing the criminal complaint with the prosecution office interrupts prescription. To avoid a fatal dispute, file early and retain the stamped receiving copy, docket number, official receipt if applicable, and proof of the complete filing.

Do not assume that any of the following stops the one-year period:

Reporting the post to Facebook, TikTok, YouTube, X, or another platform
Sending a private demand or cease-and-desist letter
Making a barangay or workplace report
Asking the poster to apologize
Consulting a lawyer
Reporting to law enforcement without ensuring that a criminal complaint reaches the proper prosecution office

Evidence to preserve immediately

Capture the evidence before requesting deletion or confronting the poster. Preserve both what was said and the context in which it appeared.

Keep:

Full-page screenshots showing the exact words, account name, date, time, reactions, comments, and surrounding content
The complete URL or permalink, not only a cropped image
Screen recordings showing how the post is reached from the account or page
Original downloaded photos, videos, audio, emails, and attachments
The original phone or computer on which the content was received or viewed
Platform notification emails and account identifiers
The profile’s “About” information, prior posts, linked accounts, contact details, and username changes
Names and sworn statements of people who personally saw the publication
Messages showing admissions, threats, demands, motives, corrections, or refusals to correct
Documents proving truth or falsity, such as official records, contracts, receipts, correspondence, and certified government documents
Evidence of reputational or financial harm, including cancelled transactions, employer communications, client messages, and medical or counseling records where relevant
Evidence establishing the place connected to the offense, computer system, or resulting damage
A written record of when, how, and through whom the complainant first discovered the material

Do not crop away information that may later be important. Keep a working copy and an untouched master copy. Avoid editing files, altering metadata, accessing another person’s account without permission, impersonating anyone, or obtaining data through hacking.

Authentication and authorship require more than showing that an account carried the respondent’s name. The Supreme Court has explained that ownership, access, and authorship may be proved through admissions, eyewitness testimony, distinctive knowledge or writing patterns, linked contact information, provider records, device examinations, conduct consistent with the messages, and other direct or circumstantial evidence. See the Court’s 2025 guidance on proving the identity of a social-media perpetrator.

For an anonymous, fake, hacked, or deleted account, seek assistance quickly. The NBI Cybercrime Division can receive requests for investigative assistance. Investigators may use lawful preservation, disclosure, search, and examination procedures. A complainant should not try to obtain protected account data unlawfully.

How to file a criminal complaint

1. Confirm that the facts amount to cyber libel

Identify the exact statement relied upon. Explain:

What it means in its ordinary and contextual sense
Why it is defamatory rather than merely insulting or critical
Who understood it to refer to the complainant
Who other than the complainant received or viewed it
Why the respondent is believed to be the author
How a computer system was used
When discovery occurred
Why the selected place of filing is proper

If the same conduct may also involve threats, stalking, identity theft, non-consensual intimate images, gender-based sexual harassment, child abuse material, extortion, or unlawful access, obtain advice about those offenses separately. They have different elements and procedures.

2. Determine the proper venue before filing

Under Section 2.1 of the Rule on Cybercrime Warrants, a criminal action under Section 4 of Republic Act No. 10175 may be filed before the designated cybercrime court of the province or city:

Where the offense or any element was committed;
Where any part of the computer system used is situated; or
Where any damage to a natural or juridical person took place.

The first court in which the criminal action is properly filed acquires jurisdiction to the exclusion of the others. The Supreme Court discussed this rule in Tieng v. People, G.R. Nos. 164845, 181732 and 185315.

At the preliminary-investigation stage, the complaint is ordinarily filed with the city or provincial prosecution office corresponding to a legally supportable venue. Venue allegations should be specific and supported by evidence. Mere accessibility of an online post everywhere does not make every city or province an equally safe choice.

Cross-border publications, overseas respondents, multiple complainants, corporate complainants, and uncertain damage locations require individualized analysis under Sections 21 and 22 of Republic Act No. 10175.

3. Prepare a sworn complaint-affidavit

The complaint-affidavit should give a clear, chronological account based on personal knowledge. It should ordinarily identify:

The complainant and respondent, including usable addresses
The account, page, channel, website, email address, or group involved
The exact defamatory words, images, or video
An accurate translation if the material is in Filipino or another language
Publication date and discovery date
The persons who saw, received, or understood the material
Facts proving identification, authorship, malice, and use of ICT
Facts supporting venue
The harm caused
Each attached exhibit and what it proves

Attach witness affidavits and the documentary, electronic, and object evidence needed to establish every element. Affidavits must be properly sworn before an authorized officer.

The DOJ’s current central-office checklist includes an Investigation Data Form and complaint-affidavit or sworn statement. Required copies and local filing arrangements can vary, so confirm them with the receiving prosecution office using the DOJ’s official preliminary-investigation filing page.

4. File before prescription expires

Submit the complete complaint to the proper prosecution office and obtain proof of acceptance. If law enforcement is investigating an anonymous account, coordinate deadlines with counsel: an unfinished investigation does not justify allowing prescription to expire.

5. Participate in preliminary investigation

Cyber libel carries a prescribed maximum penalty exceeding six years, so it is handled under the regular preliminary-investigation procedure in DOJ Department Circular No. 015, the 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings.

The prosecutor applies the standard of prima facie evidence with reasonable certainty of conviction. The available evidence must appear credible, admissible, capable of preservation and presentation, and sufficient—if uncontroverted—to establish the offense and the respondent’s identity.

The respondent is served with a subpoena, complaint-affidavit, and attachments. The date set for the respondent’s counter-affidavit must provide at least 10 days from receipt of the subpoena and complaint. If the respondent does not answer despite proper service, the prosecutor may resolve the case on the existing record.

If the prosecutor finds the required evidence, an Information is filed in the proper Regional Trial Court designated to handle cybercrime cases. The judge then independently determines judicial probable cause and whether to dismiss, require additional evidence, or issue the appropriate process.

How to defend after receiving a subpoena

Act on the date of actual receipt

Keep the envelope, email headers, acknowledgment, and complete subpoena package. Write down the date and time of receipt. The filing date stated in the subpoena controls, subject to the minimum period required by the DOJ rules.

Do not assume that filing a motion instead of a counter-affidavit preserves all defenses. The current rules prohibit using a motion for bill of particulars in place of the counter-affidavit. Extensions are exceptional and require a justified request; obtain a written ruling rather than assuming additional time was granted.

Preserve the defense evidence

Do not delete the account, reset the device, destroy drafts, erase messages, or coordinate stories with witnesses. Preserve:

Account-login records and security alerts
Evidence that the account was hacked, spoofed, or operated by another person
Drafts, sources, research notes, recordings, and original documents
The entire conversation or publication, not only the complained-of passage
Privacy settings and the actual audience
Corrections, retractions, clarifications, and communications with the complainant
Records establishing truth, good motive, or public-interest purpose
Evidence of the complainant’s earlier discovery
Device-location, employment, travel, and access records relevant to authorship or venue

A public counterattack may create new evidence or a new alleged offense. Discuss any correction, apology, takedown, or response with counsel first. Removing content does not automatically erase liability, while leaving harmful content online may increase practical damage.

File a detailed sworn counter-affidavit

A bare denial is rarely enough. Address each element and authenticate the supporting exhibits. Depending on the facts, defenses may include:

The respondent did not own, control, or access the account.
The respondent did not author or publish the content.
The alleged victim was not identifiable.
No third person received the communication.
The words were not defamatory in context.
The statement was protected opinion or fair comment based on established facts.
The imputation was true and published with good motives and justifiable ends.
The communication was absolutely or qualifiedly privileged.
The complainant was a public official or public figure, the matter involved public interest or official conduct, and actual malice was not proved.
The prosecution cannot prove knowing falsity or reckless disregard for truth.
The charge prescribed before the complaint was filed.
Venue is unsupported.
The alleged act occurred before Republic Act No. 10175 could constitutionally be applied.
The same act is being prosecuted as both traditional libel and cyber libel in a manner barred by double jeopardy.
The allegations and evidence materially differ.
The electronic material is incomplete, altered, unauthenticated, or inadmissible.

If a counter-affidavit raises new material matters, the prosecutor may require further affidavits or conduct a physical or virtual clarificatory hearing.

Challenge an adverse resolution on time

Under DOJ Department Circular No. 015, an aggrieved party may file a motion for reconsideration within 15 days from receipt of the prosecutor’s resolution. A petition for review may also be available under the applicable DOJ review rules. If an Information has already been filed, a DOJ review does not by itself remove the case from the court; counsel may need to seek suspension or other appropriate relief separately.

Once the case is in court, obtain the case number, branch, Information, warrant status, and hearing schedule immediately. A subpoena from a prosecutor is not an arrest warrant. If the court issues a warrant, arrange lawful surrender and bail through counsel instead of evading service.

Important defenses and exceptions

Truth is not always enough by itself

Under Article 361 of the Revised Penal Code, proof of truth may be admitted under the conditions stated by law. Acquittal generally also requires that the publication was made with good motives and justifiable ends. A technically true statement disclosed solely to humiliate someone may therefore present a different problem from a good-faith warning or public-interest report.

Privileged communications

Article 354 recognizes qualified privileges that include:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without added comments or remarks, of qualifying official proceedings or acts of public officers.

The Supreme Court also recognizes fair comment on matters of public interest. If a communication is qualifiedly privileged, the prosecution must establish actual malice—knowledge of falsity or reckless disregard of whether the statement was false. Privilege can be lost through excessive publication, irrelevant attacks, bad faith, or actual malice.

Statements made in certain legislative and judicial settings may be absolutely privileged, but the protection depends on who made the statement, where it was made, and its relation to the proceeding.

Public officials, public figures, and public interest

Public officials and public figures receive less protection from criticism concerning their public conduct than private individuals. Criminal liability cannot rest merely on harsh, mistaken, or unpopular criticism where the Constitution requires proof of actual malice. The Supreme Court’s discussion in Borjal v. Court of Appeals and Tulfo v. People emphasizes the protection given to fair commentary and public debate.

Calling someone a public figure does not automatically defeat a complaint. Courts examine the person’s actual role, the subject of the publication, its factual basis, the author’s state of mind, and the surrounding circumstances.

Likes, shares, and added captions

In Disini v. Secretary of Justice, G.R. No. 203335, the Supreme Court upheld cyber libel as applied to the original author but invalidated the Cybercrime Act’s aiding-or-abetting provision as applied to online libel. A mere like, reaction, or unadorned share is therefore not automatically cyber libel under an aiding-and-abetting theory.

A person who adds an independently defamatory caption, comment, alteration, or accusation may become the author of a new publication. Liability depends on the person’s own words and conduct, not merely the platform’s “share” label.

One act should not produce duplicate libel punishment

Disini also held that prosecuting the same act under both the Revised Penal Code and the Cybercrime Prevention Act can violate the constitutional protection against double jeopardy. This does not prevent separate charges for genuinely distinct publications or different criminal acts, but the prosecution cannot obtain duplicate punishment simply by relabeling the same online libel.

Possible penalties and civil exposure

Article 355, as amended by Republic Act No. 10951, provides imprisonment, fine, or both for traditional libel. Section 6 of Republic Act No. 10175 raises the penalty for cyber libel by one degree.

If imprisonment is imposed, the prescribed cyber-libel range is prision correccional in its maximum period to prision mayor in its minimum period, or approximately four years, two months and one day to eight years, subject to the Indeterminate Sentence Law and circumstances affecting the penalty.

The Supreme Court has ruled that a court may impose a fine instead of imprisonment. Under People v. Hernan, G.R. No. 256700, the fine for online libel may range from ₱40,000 to ₱1,500,000. A fine-only sentence is permitted but not guaranteed; the court must consider the law, the circumstances, and applicable sentencing guidance.

Cyber libel is ordinarily bailable before conviction. The court determines the bail amount and conditions.

A complainant may also pursue civil damages. Defamation is among the wrongs for which an independent civil action may be brought under Article 33 of the Civil Code. The civil aspect may also be deemed instituted with the criminal case unless waived, reserved, or previously filed. Civil prescription can be short—often one year for injury to rights—so the choice between a separate civil case, reservation, and the civil aspect of the criminal prosecution requires timely advice.

An affidavit of desistance or private settlement does not automatically dismiss a criminal case. The offense is prosecuted in the name of the People of the Philippines, and the prosecutor or court retains authority over the case.

Common mistakes

Waiting for the post to go viral before preserving or filing
Assuming the one-year period always runs from posting
Filing in a convenient city without evidence supporting venue
Treating a platform report or police blotter as the prosecutor’s complaint
Submitting cropped screenshots without URLs, context, witnesses, or authorship evidence
Assuming an account name proves who wrote the post
Alleging that words are “malicious” without explaining their defamatory meaning
Treating every insult, opinion, bad review, or accusation as automatically criminal
Assuming truth alone always ends the case
Ignoring privilege, public-interest speech, or the actual-malice standard
Ignoring the prosecutor’s subpoena or filing only an unsworn denial
Missing the 15-day period to seek reconsideration of a prosecutor’s resolution
Deleting accounts, messages, source documents, or devices
Publishing threats or new accusations while the case is pending
Assuming an apology, takedown, or affidavit of desistance automatically closes the case

When legal help is urgent

Seek immediate assistance when:

The one-year prescription period is close to expiring.
The post, account, or platform data may disappear.
The poster is anonymous or claims the account was hacked.
A subpoena, prosecutor’s resolution, Information, warrant, or arraignment notice has been received.
Devices have been seized or law enforcement is requesting access to accounts.
The publication involves a journalist, public official, whistleblower, workplace investigation, or matter of public concern.
The parties or computer systems are in different countries.
The content includes threats, doxxing, intimate images, extortion, or material involving a child.
Several publications or several possible offenses are being combined.
A civil-damages claim or platform-takedown strategy must be coordinated with the criminal case.

Qualified indigent respondents may request assistance from the Public Attorney’s Office, including representation during preliminary investigation and trial.

Frequently asked questions

Can I file even if the post has already been deleted?

Yes, if admissible evidence of the publication, authorship, and other elements remains. Deletion may make proof more difficult, which is why URLs, witnesses, original files, devices, and lawful provider records matter.

Is a private message cyber libel?

Only if it was published to someone other than the person allegedly defamed. A message sent solely to that person generally lacks publication for libel, although threats, harassment, or other offenses may apply.

Is a screenshot enough?

Usually not by itself. It may show what appeared on a screen but not necessarily who created it, whether it is complete, when the complainant discovered it, or whether it was altered. Corroborating witnesses, account records, admissions, device evidence, and contextual material can be decisive.

Can an anonymous account be charged?

Yes, once the responsible person is identified with sufficient evidence. A complainant should seek prompt NBI or PNP cybercrime assistance because provider data may be retained only for limited periods and ordinarily requires lawful process.

Does correcting or removing a post prevent prosecution?

No. It may affect continuing harm, motive, mitigation, or settlement discussions, but it does not automatically erase a completed publication. Preserve the original record before making changes.

Is merely sharing someone else’s post cyber libel?

Not automatically. Disini rejected aiding-or-abetting liability for ordinary online interactions involving libel. A person who adds a separate defamatory accusation or materially republishes content as their own may face a different analysis.

Can the complainant withdraw the case after settlement?

The complainant may execute an affidavit and settle private civil claims, but withdrawal does not automatically terminate the criminal proceeding. The prosecutor or court decides the legal effect.

Will a complaint immediately result in arrest?

No. Preliminary investigation ordinarily begins with a subpoena and an opportunity to file a counter-affidavit. Arrest becomes an issue only if an Information is filed and the judge independently finds probable cause and issues a warrant or other lawful process.

Official sources

This article provides general legal information, not advice for a particular complaint, defense, or publication. Outcomes depend on the exact words, context, documents, discovery date, authorship evidence, venue, and procedural history. Philippine authorities and procedures were checked through July 23, 2026.