Quick answer

To file a cyber libel case in the Philippines, preserve the online publication and proof linking it to the author, prepare a sworn complaint-affidavit with supporting evidence, and file it with the proper Office of the City or Provincial Prosecutor. The NBI Cybercrime Division or the PNP Anti-Cybercrime Group may investigate and help secure electronic evidence, but a police or NBI report is not always required before filing with the prosecutor.

To defend a case, do not ignore the subpoena. Obtain the complete complaint and attachments, preserve your own records, and submit a timely counter-affidavit addressing every element of cyber libel and any applicable defense. Do not contact or threaten the complainant, fabricate evidence, delete relevant records, or post further accusations about the dispute.

Time is critical. Under the Supreme Court’s current ruling, cyber libel generally prescribes one year from discovery of the offense. Determining the discovery date, whether prescription was interrupted, whether an edit or repost was a new publication, and where the case may properly be filed can require close review of the posts and procedural record.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 punishes libel, as defined under the Revised Penal Code, when committed through a computer system or similar means. It may involve a social-media post, blog entry, online article, video caption, comment, email distributed to third persons, or another internet-based publication.

A cyber libel complaint generally must establish:

A defamatory imputation. The material attributes a crime, vice, defect, dishonorable act, condition, status, or circumstance tending to dishonor, discredit, or expose a person to contempt.
Publication. Someone other than the person defamed received, viewed, or understood the material. A message sent only to the person concerned ordinarily lacks this element, although forwarding it to another person may constitute publication.
Identification. The complainant is named or is sufficiently identifiable from the words, images, context, or surrounding circumstances. A nickname, photograph, job title, relationship, or contextual clue may be enough even when the full name is omitted.
Malice. Malice is generally presumed from a defamatory publication unless the material falls within a recognized privileged occasion. In cases involving public officials, public figures, or matters of public concern, constitutional standards may require proof of actual malice—that the publisher knew the statement was false or acted with reckless disregard of whether it was false.
Use of a computer system. The allegedly libelous material was communicated through a computer, mobile phone, online platform, network, or comparable information-and-communications technology.
Responsibility of the respondent. There must be competent evidence that the respondent authored, posted, uploaded, or was otherwise legally responsible for the publication. A screenshot displaying a name or profile picture does not automatically prove who controlled the account.

Cyber libel is not a separate offense that may be charged together with ordinary libel for the identical publication. In Disini v. Secretary of Justice, the Supreme Court held that online libel is essentially the same libel offense, with the computer system serving as the means of publication. Punishing the same publication under both provisions would raise double-jeopardy concerns.

Not every offensive online statement is cyber libel

The law protects reputation, but it does not make every insult, harsh criticism, mistake, or unpopular opinion criminal.

Important distinctions include:

Fact versus opinion. A statement that can reasonably be understood as asserting a provably false fact is more likely to be actionable. Rhetorical exaggeration, satire, or value judgment may be protected when a reasonable reader would not treat it as a factual accusation. Merely adding “in my opinion” does not protect a disguised factual allegation.
Defamatory meaning versus hurt feelings. The question is not simply whether the complainant felt offended. The words must objectively tend to dishonor, discredit, or expose an identifiable person to contempt.
Private message versus publication. A message communicated only to the person discussed usually lacks publication. Group chats, copied emails, public comments, and messages forwarded to third persons are different.
Reaction versus authorship. In Disini, the Supreme Court rejected criminal liability for aiding or abetting cyber libel as applied to people who merely receive and react to a post. A person who writes a new defamatory caption, adds an accusation, or independently republishes material may present a different case.
The account name versus the real user. The prosecution must connect the accused to the actual publication through admissible evidence, not assumption alone.

Truth is important, but it is not always enough by itself

Philippine criminal libel law does not treat truth as an automatic defense in every situation. Under Article 361 of the Revised Penal Code, proof of truth must generally be accompanied by proof that the publication was made with good motives and for justifiable ends.

A respondent relying on truth should preserve the reliable records that existed when the statement was published: official documents, contracts, messages, photographs, recordings lawfully obtained, firsthand witness testimony, audit records, or other authentic evidence. Material found or created only after publication may not establish the publisher’s state of mind at the time.

Repeating an accusation from an anonymous post, rumor, private message, or unverified “source” is risky. Phrases such as “allegedly,” “I heard,” or “for awareness only” do not cure a publication that effectively communicates an unsupported factual accusation.

Privileged communications and fair reporting

Certain publications may be privileged, although privilege is highly dependent on purpose, audience, accuracy, and context.

Article 354 of the Revised Penal Code recognizes, among others:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without added comments or remarks, of qualifying official proceedings or acts of public officers.

A complaint made in good faith to the proper employer, regulator, school authority, law-enforcement agency, or other person with a legitimate duty to act may be conditionally privileged. Broadcasting the same allegations to an unrelated online audience may fall outside the privilege.

Fair-report privilege does not authorize a publisher to distort an official record, present allegations as established guilt, omit material qualifications, or add defamatory commentary. Posting a complaint or charge without accurately explaining its unresolved status can be particularly dangerous.

Privilege may be defeated by proof of actual malice, excessive publication, irrelevance, bad faith, or use of the occasion for an improper purpose.

Public officials, public figures, and matters of public concern

Criticism of government and discussion of public affairs receive strong constitutional protection. Public officers are subject to legitimate scrutiny concerning their official conduct. That protection, however, is not a license to invent facts or knowingly circulate false accusations.

Where the complainant is a public official or public figure and the publication concerns official conduct or a matter of public concern, the prosecution may need to prove actual malice. Actual malice has a technical meaning: knowledge that the statement was false or reckless disregard for whether it was false. Personal hostility, standing alone, is not necessarily the same thing.

Whether a person is a public figure, whether the publication concerns a public issue, and whether the evidence proves actual malice are fact-sensitive questions.

The one-year prescriptive period

The Supreme Court has affirmed that cyber libel generally prescribes one year from discovery, consistent with the specific prescriptive period for libel under the Revised Penal Code. The Court rejected the view that the higher cybercrime penalty automatically creates a much longer prescriptive period. See the Supreme Court’s 2026 guidance in Causing v. People.

Prescription is not always calculated simply from the date printed on a post. Relevant questions may include:

when the complainant actually discovered the publication;
whether an earlier discovery can be proved;
when a proper complaint was filed;
whether that filing interrupted prescription;
whether the material was merely left online or was actually republished; and
whether later editing, re-uploading, or circulation constituted a new publication.

Do not wait until the final days of the period. A filing in the wrong office, a defective complaint, or a dispute about the discovery date can jeopardize the case. A respondent should likewise raise prescription promptly and support it with dated records.

Evidence to preserve immediately

Electronic material can be deleted, edited, hidden, or detached from its context. Preserve evidence before reporting the post or requesting its removal.

For a complainant

Keep:

full-page screenshots showing the post, account name, date, time, URL, captions, comments, and surrounding context;
a screen recording showing how the page or post was reached;
the exact URL and account or profile URL;
the original image, video, audio, or downloaded webpage where lawfully available;
evidence of the date you first discovered the publication;
messages showing that other people saw and understood the post as referring to you;
names and contact details of witnesses who viewed it;
earlier versions, edits, reposts, and related publications;
correspondence with the platform, employer, school, or website administrator;
documents showing falsity, reputational harm, lost work, business loss, treatment expenses, or other claimed damages; and
evidence connecting the account to the suspected author.

For a respondent

Keep:

the complete post and thread, not just the disputed sentence;
drafts, source materials, research notes, interviews, and official records consulted before publication;
messages showing how information was obtained and checked;
account-security logs and evidence of unauthorized access, if account control is disputed;
documents supporting truth, good motives, public interest, or privileged communication;
proof of the actual audience and privacy settings;
evidence showing that the complainant was not identified or that no third person received the communication;
the original subpoena, envelope, email headers, and proof of the date it was received; and
records establishing when the complainant discovered the publication.

Preserve originals and make working copies. Do not crop away dates, usernames, URLs, or context. Do not alter metadata or ask a witness to change a statement. For disputed or high-value electronic evidence, a lawyer may recommend forensic imaging, an independent preservation service, or court-authorized disclosure.

How to file a cyber libel complaint

1. Confirm the elements and deadline

Identify the exact words, images, or statements alleged to be defamatory. Record when and how they were published, when you discovered them, who saw them, and why they refer to you.

A complaint should not simply attach hundreds of screenshots and declare them defamatory. Quote or identify each challenged publication and explain its meaning, falsity, context, audience, and connection to the respondent.

2. Identify the proper filing place

Cybercrime violations fall within Regional Trial Court jurisdiction under Section 21 of the Cybercrime Prevention Act. The criminal complaint ordinarily begins with preliminary investigation before the appropriate prosecution office. Venue may depend on where an element occurred, where the relevant computer system was situated, where legally cognizable damage occurred, and the applicable cybercrime and libel venue rules.

The complainant’s ability to view a post in a chosen location does not necessarily permit filing anywhere. Improper venue can defeat a criminal case, so have the intended filing office confirmed before the deadline.

3. Prepare a sworn complaint-affidavit

The complaint-affidavit should ordinarily state:

the complainant’s and respondent’s identifying information, if known;
the material facts in chronological order;
the precise publication complained of;
how the complainant is identifiable;
who received or viewed the publication;
why the statement is defamatory and false;
the facts supporting malice or actual malice when required;
how the respondent is linked to the account or publication;
the discovery date and relevant prescription facts; and
the relief requested.

Attach clearly labeled supporting affidavits and documents. Affidavits must be based on personal knowledge and properly sworn before an authorized officer. Foreign-language or regional-language material should be accompanied by an accurate translation when required.

4. Consider technical investigation

The NBI and PNP are the principal law-enforcement authorities identified in Sections 10 and 11 of the Cybercrime Prevention Act. Their cybercrime units may document the incident, investigate account attribution, and seek appropriate preservation, disclosure, or search warrants.

A private person generally cannot compel a platform or telecommunications provider to reveal protected subscriber or content data merely by sending a demand. Government access to such data is governed by the Cybercrime Prevention Act and the Supreme Court’s warrant requirements. Do not impersonate another person, hack an account, install spyware, or unlawfully record communications to obtain evidence.

5. File before the proper prosecutor

File the complaint and required copies with the appropriate Office of the City Prosecutor, Office of the Provincial Prosecutor, or other authorized DOJ prosecution office. Obtain a stamped receiving copy or official electronic acknowledgment showing the date and docket details.

Filing practices and accepted electronic channels may vary by office. Confirm the current requirements directly with the receiving prosecution office instead of relying on an unofficial online form or social-media account.

6. Participate in preliminary investigation

If the complaint is sufficient, the prosecutor may issue a subpoena requiring the respondent to submit a counter-affidavit and supporting evidence. The proceedings are generally affidavit-based, although the prosecutor may require clarification or additional submissions under the applicable 2024 DOJ–National Prosecution Service rules.

The prosecutor decides whether the evidence meets the governing threshold for filing an Information in court. Preliminary investigation is not yet a trial and does not determine guilt beyond reasonable doubt.

7. Understand the civil claim

The criminal action ordinarily carries the civil liability arising from the alleged offense unless the civil action is validly waived, reserved, or separately filed under the Rules of Criminal Procedure. Possible damages must be proved; they are not automatic merely because a post was offensive.

A separate civil action for defamation may involve different procedures, proof standards, filing fees, defenses, and prescriptive questions. Double recovery for the same injury is not permitted.

How to defend a cyber libel complaint

1. Read the subpoena and record the deadline

Note the date and method of service. Obtain the complete complaint-affidavit and every attachment. If something is missing, document the omission and promptly request a complete copy through the proper office.

Deadlines may be short. Follow the period written in the subpoena and the current DOJ-NPS rules. Do not assume that informal settlement talks, a platform appeal, or a request for reconsideration automatically extends the deadline. Any request for additional time should be filed before expiration and is subject to approval.

2. Engage counsel early

Cyber libel carries possible imprisonment, fines, civil damages, and collateral consequences. A lawyer can assess venue, prescription, defects in the complaint, constitutional protection, privilege, authorship, electronic authentication, and the risks of making admissions.

A respondent who cannot afford private counsel may inquire with the Public Attorney’s Office, subject to its eligibility and merit requirements.

3. Test every element

A counter-affidavit should address the prosecution’s evidence, not merely insist that the respondent is innocent. Possible issues include:

the words are not defamatory when read in full context;
the statement is protected opinion, satire, or rhetorical hyperbole;
the complainant is not identifiable;
no third person received the communication;
the respondent did not control the account or make the publication;
the electronic evidence is incomplete, altered, unauthenticated, or taken out of context;
the statement is true and was made with good motives and for justifiable ends;
the communication was privileged;
actual malice cannot be proved where that standard applies;
venue is improper;
the complaint was filed after the one-year period; or
the same publication is being impermissibly prosecuted twice.

Not every defense should be raised in every case. Inconsistent or unsupported defenses can damage credibility.

4. Prepare a careful counter-affidavit

State the facts from personal knowledge, attach authentic supporting documents, and answer the specific allegations. Avoid unnecessary admissions about account ownership, authorship, intent, devices, or location without legal advice.

A respondent generally should not rely solely on a motion to dismiss or a letter denying liability if the subpoena requires a counter-affidavit. Failure to submit the required response may allow the prosecutor to resolve the complaint using only the complainant’s evidence.

5. Avoid worsening the case

While the matter is pending:

do not publish new accusations or repost the disputed material;
do not encourage followers to attack the complainant;
do not threaten a witness or pressure anyone to withdraw an affidavit;
do not manufacture screenshots, messages, or supporting documents;
do not erase relevant material after receiving notice of the dispute; and
do not discuss defense strategy in public posts or group chats.

Deleting a post does not erase copies, platform records, or potential liability. It may also create an avoidable evidence-preservation dispute. Seek advice about removal, correction, or retraction while preserving an exact copy.

Retraction, correction, apology, and settlement

A prompt and sincere correction or retraction may reduce harm and can be relevant to damages, penalty, or settlement. It does not automatically erase a completed offense or compel dismissal.

Before sending an apology or public statement, consider whether it:

admits authorship or falsity;
creates a new publication;
contradicts a planned defense;
identifies a person who was previously unidentifiable; or
breaches a confidentiality or settlement term.

Settlement discussions should be handled carefully and preferably through counsel. The prosecutor and, once a case is in court, the judge retain responsibilities that private agreement alone may not displace. Civil claims may be compromised more readily than the State’s criminal prosecution.

Possible penalties and court consequences

Article 355 of the Revised Penal Code, as amended by Republic Act No. 10951, provides for ordinary libel:

prisión correccional in its minimum and medium periods—six months and one day to four years and two months;
a fine from ₱40,000 to ₱1,200,000; or
both imprisonment and fine, in addition to potential civil liability.

Section 6 of the Cybercrime Prevention Act provides a penalty one degree higher when a Revised Penal Code offense is committed through information and communications technology. For cyber libel, the potential imprisonment range commonly associated with that one-degree increase is prisión correccional maximum to prisión mayor minimum—four years, two months and one day to eight years—subject to the court’s correct application of the Indeterminate Sentence Law, modifying circumstances, and other relevant rules.

The Supreme Court’s policy favoring fines over imprisonment in appropriate libel cases does not abolish imprisonment or guarantee a fine-only sentence. Conviction may also produce civil damages, accessory consequences, litigation costs, and reputational or employment effects.

Common mistakes by complainants

Waiting while trying to negotiate, then missing the one-year period.
Saving only cropped screenshots with no URL, date, account, or context.
Assuming a profile name conclusively identifies the account user.
Filing wherever the post happened to be viewed without checking venue.
Treating every insult or negative review as a criminal accusation.
Alleging damages without receipts, witnesses, business records, or other proof.
Publicly repeating the disputed accusation while announcing the case.
Asking police or a private investigator to obtain account data through unlawful access.
Filing ordinary libel and cyber libel charges for the same online publication.
Omitting the real discovery date or facts showing earlier knowledge.

Common mistakes by respondents

Ignoring a prosecutor’s subpoena.
Posting a longer “explanation” that repeats or intensifies the accusation.
Deleting accounts, devices, messages, or drafts after receiving notice.
Claiming “freedom of speech” without addressing the specific elements.
Assuming that truth alone always ends the case.
Treating “allegedly,” a disclaimer, or a question mark as automatic protection.
Submitting a bare denial instead of authenticated evidence.
Contacting the complainant or witnesses in a way that can be viewed as intimidation.
Missing objections based on prescription, venue, identification, or authorship.
Discussing confidential strategy with supporters online.

When legal help is urgent

Contact a Philippine criminal-law or media-law practitioner immediately if:

the one-year filing period is close;
you received a subpoena, warrant, court summons, or notice of arraignment;
investigators want to inspect, copy, or seize a device;
the account is anonymous, hacked, impersonated, or controlled from abroad;
the publication concerns a public official, election, news report, whistleblowing complaint, or confidential record;
a minor, intimate image, threat, stalking allegation, or personal data is involved;
several posts, edits, reposts, platforms, or jurisdictions are involved;
the complainant demands payment or threatens publication in exchange for money;
an employer or platform holds evidence that may soon be deleted; or
there is an immediate risk of arrest, retaliation, violence, or evidence loss.

If investigators present a warrant, remain calm, request a copy, note the issuing court and stated scope, and contact counsel. Do not physically obstruct lawful execution, but do not consent to access beyond what the warrant or law authorizes without advice.

Frequently asked questions

Can I file because someone insulted me on Facebook?

Possibly, but an insult alone does not automatically establish cyber libel. The post must satisfy the legal requirements of defamatory imputation, identification, publication, malice, use of a computer system, and responsibility of the accused.

Is a screenshot enough?

A screenshot can be evidence, but it may not prove authenticity, authorship, account control, the complete context, or when the material was published or discovered. Preserve the URL, full thread, device records, witnesses, and other corroborating evidence.

Can an anonymous account be charged?

Yes, if investigators can lawfully identify the person responsible and the evidence establishes the elements. Account attribution may require preservation and disclosure processes or cybercrime warrants. A complainant should not attempt to hack or deceive the account holder.

Can I be liable for sharing someone else’s post?

A bare reaction or passive receipt is not automatically cyber libel. A share accompanied by a new accusation, endorsement, defamatory caption, or independent republication may create exposure. The exact act and context matter.

Does deleting the post end the case?

No. Publication may already have been completed, and copies or platform records may remain. Removal may reduce continuing harm, but preserve an exact record and obtain advice before altering evidence.

Is a group-chat message covered?

It can be. A message sent to a group is published to persons other than the subject. Whether it is defamatory or privileged depends on its content, purpose, audience, and context.

Can a business or organization complain?

Defamation may concern a juridical person where the publication attacks its reputation or credit, but the allegations and proof must fit the applicable law. Statements aimed only at unnamed members may raise identification issues.

Must I send a demand letter first?

A demand, takedown request, or request for correction can be useful but is not generally an element of cyber libel. Do not let correspondence consume the prescriptive period.

Will the respondent be arrested as soon as I file?

Ordinarily, filing a complaint starts preliminary investigation; it is not itself a conviction or automatic arrest. If an Information is later filed, the judge independently determines probable cause and whether to issue a warrant or another appropriate process.

Can the losing party automatically be jailed or ordered to pay damages?

No. Criminal guilt must be proved beyond reasonable doubt at trial. Civil damages also require a legal and evidentiary basis. Filing a complaint or receiving a subpoena does not establish guilt.

Official legal sources

This article provides general legal information, not advice for a particular case and not an attorney-client relationship. Cyber libel outcomes depend on the exact words, audience, evidence, dates, account attribution, venue, and procedural history. Current law and official sources were checked on September 18, 2026.