Quick answer

A cyber libel case in the Philippines generally arises when a person knowingly publishes a defamatory statement online through a computer system. The prosecution must establish a defamatory imputation, publication to another person, identification of the complainant, malice, and use of a computer system or similar information and communications technology.

If you are the complainant, preserve the post and its digital context immediately, identify the author, document reputational harm, and file a properly supported complaint-affidavit before the appropriate prosecutor’s office without delay. Cyber libel generally prescribes in one year, so merely reporting a post to a platform, the barangay, the police, or the NBI should not be assumed to protect the deadline.

If you are accused, do not ignore a prosecutor’s subpoena. Obtain the complete complaint and attachments, preserve your own records, and submit a sworn counter-affidavit within the stated period—ordinarily 10 days from receipt of the subpoena under Rule 112. Defenses may include lack of identification or publication, non-defamatory language, privileged communication, absence of the required malice, truth coupled with good motives and justifiable ends where the law allows that defense, mistaken authorship, improper venue, prescription, or conduct occurring before the cybercrime law became effective.

Whether a particular post is criminally libelous depends on its precise words, context, audience, publication history, authorship, supporting records, and the status of the person discussed.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the defamatory material is published through a computer system or a similar technological means.

Under Articles 353 to 355 of the Revised Penal Code, libel involves a public and malicious imputation of a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a natural or juridical person to contempt.

In practical terms, the prosecution must establish:

A defamatory imputation. The words, image, caption, video, or combined presentation must convey something that tends to dishonor, discredit, or expose the complainant to contempt.
Publication. At least one person other than the complainant must have received or seen the material.
Identification. The complainant must be identifiable, even if not expressly named. Identification may arise from photographs, initials, job descriptions, surrounding posts, or facts understood by readers.
Malice. The applicable kind and proof of malice depend on whether the communication is privileged and whether the complainant is a private person, public officer, or public figure.
Use of a computer system or ICT. Examples may include a social-media post, online article, website entry, email distributed to third persons, digital forum post, or similar online publication.
Authorship or legally attributable participation. The evidence must connect the accused to the publication.

The words are evaluated as a whole and in their actual context. A statement does not become lawful merely because it is phrased as a question, placed in quotation marks, accompanied by “allegedly,” or labeled an opinion. Conversely, harsh criticism, satire, rhetorical exaggeration, or an opinion that does not assert a defamatory fact is not automatically libel.

Important exceptions and limits

Mere reactions are not automatically cyber libel

In Disini v. Secretary of Justice, the Supreme Court sustained cyber libel as applied to the author of the defamatory statement but rejected criminal liability under the challenged provisions for people who merely receive and react to it. A simple “like,” reaction, or passive receipt should not be treated as equivalent to authorship.

That does not give blanket protection to someone who writes a new defamatory caption, adds accusations, republishes material as their own, or independently creates another defamatory post. Liability must be assessed from the person’s actual conduct and words.

Public officers and public figures require closer analysis

When the allegedly defamatory statement concerns a public officer or public figure and relates to a matter of legitimate public concern, the prosecution may have to prove actual malice—that the accused knew the statement was false or acted with reckless disregard of whether it was false. The Supreme Court has emphasized that this is the prosecution’s burden, including in Daquer v. People.

This is not a license to fabricate accusations against public officials. Courts examine the source-checking performed, the reliability of the information, contrary information known to the author, the urgency of publication, and whether the post was a good-faith discussion of public affairs or a personal attack.

Privileged communications may defeat presumed malice

Article 354 recognizes qualifiedly privileged communications, including:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without added comments, of specified official proceedings or acts.

The statutory list is not necessarily exhaustive. Certain statements in legislative, judicial, or official proceedings may also be absolutely privileged when made within the legally protected occasion and relevant scope.

Privilege is highly fact-dependent. Posting an accusation publicly when the duty required reporting it only to an employer, regulator, police office, or other proper recipient may undermine a claim of qualified privilege. Adding unsupported accusations or inflammatory commentary to an official report may do the same.

Truth alone is not always enough

Under Article 361, proof of truth must be considered together with the statutory requirements concerning good motives and justifiable ends. The rules also differ when the imputation does not concern a crime and when it involves a government employee’s official duties.

A respondent should therefore present not only documents supporting accuracy but also evidence explaining why, how, where, and to whom the information was published.

The one-year prescriptive period

The Supreme Court’s controlling ruling is that cyber libel prescribes in one year under Article 90 of the Revised Penal Code. In its April 8, 2026 resolution in Causing v. People, the Court maintained that cyber libel is the same libel defined by the Revised Penal Code when committed through a computer system, and therefore falls under the specific one-year rule for libel.

Prescription generally runs from discovery of the crime by the offended party, the authorities, or their agents, subject to Article 91 and the facts governing publication. It is interrupted by the filing of the complaint or information and may begin to run again if proceedings terminate without conviction or acquittal for reasons not constituting double jeopardy.

Do not assume that the following will interrupt prescription:

Sending a demand letter;
Reporting the account to Facebook, X, TikTok, YouTube, or another platform;
Requesting a takedown;
Making an informal police inquiry;
Obtaining a barangay blotter entry; or
Negotiating privately with the author.

Questions involving an edited, reposted, migrated, or newly captioned item require examination of the particular act alleged as publication. The fact that an old post remains accessible does not necessarily create a fresh criminal offense every day. Get case-specific advice before relying on either an original or later publication date.

How to file a cyber libel complaint

1. Preserve the complete online evidence

Before requesting removal, save:

Full-page screenshots showing the post, author or account name, date and time, URL, captions, photographs, comments, and surrounding context;
A screen recording showing how the post was accessed;
The direct URL and the profile or account URL;
The original digital files, not only cropped or forwarded screenshots;
Messages, emails, or notifications relating to authorship or publication;
Names and contact details of people who saw the material;
Records showing when you discovered it;
Any edits, corrections, reposts, or deletions; and
Evidence of resulting harm, such as lost work, cancelled transactions, inquiries from clients, threats, medical records, or reasonable mitigation expenses.

Keep an untouched copy. Record who collected each item, when it was collected, and from what device. Do not alter timestamps, annotate the only copy, or rely exclusively on a printed screenshot.

2. Identify the exact defamatory imputation

Quote or reproduce the specific words complained of and explain:

What they mean in context;
Why they are defamatory;
How readers could identify you;
Who received or saw them;
Why the named respondent is the author or publisher; and
Where the legally relevant acts, computer system, or damage occurred.

Avoid treating an entire comment thread as one accusation. Separate each material publication, its author, date, URL, and supporting proof.

3. Determine the proper place to file

A criminal action for an offense under Section 4 of Republic Act No. 10175 belongs in the designated cybercrime court of the province or city:

Where the offense or any of its elements was committed;
Where any part of the computer system used is situated; or
Where any of the damage to a natural or juridical person occurred.

The first court in which the criminal action is properly filed acquires jurisdiction to the exclusion of the others. The Supreme Court discussed this cybercrime venue rule in Henares v. Office of the Ombudsman.

The criminal complaint ordinarily begins with the prosecutor’s office having authority over the proper locality. Because online accessibility alone can make venue arguments dangerously broad, the complaint should allege concrete venue facts rather than simply asserting that the internet is available everywhere.

4. Prepare the complaint-affidavit and supporting affidavits

Under Rule 112 of the Rules of Criminal Procedure, the complaint should state the respondent’s known address and be supported by sworn affidavits and documents. The affidavits must be based on personal knowledge and should establish each element, authorship, venue, timeliness, and the digital evidence’s source.

Bring the required copies and comply with the prosecutor’s current filing, identification, oath, and service requirements. Local procedures may differ, so verify them directly with the relevant prosecutor’s office.

5. Consider technical investigation when authorship is uncertain

The NBI and PNP are the law-enforcement agencies expressly tasked under Republic Act No. 10175 with cybercrime enforcement. Their cybercrime units may assist with investigation and preservation requests. The DOJ Office of Cybercrime also coordinates cybercrime matters.

Do not access another person’s account, device, email, or private records without lawful authority. Subscriber information, content data, interception, and examination of computer data may require the procedures and judicial warrants prescribed by the Cybercrime Prevention Act and the Rule on Cybercrime Warrants. Evidence obtained unlawfully may be excluded and the method of obtaining it may create separate liability.

6. Address civil damages deliberately

Civil liability arising from the alleged offense is generally deemed instituted with the criminal case unless it is waived, reserved, or previously filed, subject to the Rules of Court. Article 33 of the Civil Code also recognizes an independent civil action for defamation based on a preponderance of evidence.

The correct approach depends on whether a criminal or civil case has already been filed, whether a reservation was made, and the special venue and consolidation rules for libel. Avoid pursuing overlapping recovery without legal advice.

How to defend a cyber libel complaint

1. Do not ignore the subpoena

Under Rule 112, a respondent ordinarily has 10 days from receipt of the subpoena to submit a counter-affidavit, witness affidavits, and supporting evidence. A motion to dismiss cannot substitute for the counter-affidavit. If the respondent cannot be subpoenaed or fails to respond, the prosecutor may resolve the case using the complainant’s evidence alone.

Read the subpoena itself. It may specify an exact date, office procedure, number of copies, and method of filing.

2. Obtain and examine the complete record

Confirm that you received the complaint, affidavits, screenshots, and other attachments. A respondent has the right to examine the evidence submitted by the complainant and copy it at the respondent’s expense, subject to the applicable rules.

Check whether the evidence establishes:

The complete, unedited statement;
Publication to a third person;
The complainant’s identity;
Your authorship or control of the account;
Use of a computer system;
Malice under the correct standard;
A concrete basis for venue; and
Filing within the one-year prescriptive period.

3. Preserve defense evidence

Keep drafts, source materials, messages with editors or administrators, research notes, public records, interview recordings lawfully obtained, account-security logs, device records, and evidence of hacking or impersonation. Preserve the entire conversation or thread because surrounding statements may change the meaning of an isolated screenshot.

Do not delete accounts, wipe devices, manufacture records, coach witnesses, or contact the complainant in a threatening or harassing manner.

4. Present factual and legal defenses in the counter-affidavit

Depending on the record, relevant defenses may include:

The words are not defamatory in their ordinary and contextual meaning;
The complainant is not reasonably identifiable;
No third person received the communication;
The respondent did not author, upload, or control the post;
The evidence is incomplete, altered, unauthenticated, or inconsistent;
The statement is protected opinion, fair comment, or rhetorical language rather than a false factual accusation;
The communication is absolutely or qualifiedly privileged;
Required actual malice is absent and cannot be proved;
The imputation was true and made with good motives and for justifiable ends, within Article 361;
Venue facts are missing or legally insufficient;
The offense has prescribed;
The alleged publication predates the effectivity of Republic Act No. 10175; or
The charge improperly attempts to punish a mere reaction or passive receipt.

A bare denial is rarely enough. Link each defense to admissible documents, personal knowledge, and the exact allegation it answers.

5. Respond appropriately if a case reaches court

If the prosecutor finds probable cause, an information may be filed in a designated Regional Trial Court acting as a cybercrime court. The judge independently determines judicial probable cause and whether a warrant of arrest should issue.

Do not evade service or assume that filing a DOJ review automatically suspends court proceedings. Once an information is filed, counsel should promptly check the case status, warrant and bail issues, arraignment schedule, and available remedies. Defects apparent on the information—such as prescription, improper venue, or failure to charge an offense—may need to be raised through the correct pleading and at the correct time or may be waived.

Possible penalties and financial exposure

Cyber libel carries a penalty one degree higher than traditional libel because of Section 6 of Republic Act No. 10175. The imprisonment range stated in the implementing rules is prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years.

Following Tulfo v. People, the alternative fine for online libel may range from ₱40,000 to ₱1,500,000 under the amended law and the Court’s computation. The precise sentence depends on the applicable penal rules and circumstances.

Administrative Circular No. 08-2008 recognizes a judicial preference for a fine rather than imprisonment in appropriate libel cases, but it did not remove imprisonment from the law. Courts retain discretion.

A conviction or civil judgment may also include damages and costs when supported by the evidence. There is no fixed automatic amount for reputational injury; courts assess the facts and proof in each case.

Retractions, apologies, takedowns, and settlements

Deleting a post, correcting it, or apologizing may reduce ongoing harm and may affect the parties’ decisions or the court’s assessment of circumstances. It does not automatically erase an already completed publication, stop prescription, dismiss a criminal case, or extinguish public prosecution.

A complainant’s affidavit of desistance is likewise not an automatic dismissal. Once a criminal case is underway, the State prosecutes the offense, although the complainant’s position and the remaining evidence may be material.

Before making a public apology or signing a settlement, consider whether its wording contains unnecessary admissions, releases unrelated claims, creates new defamatory statements, or conflicts with evidence already submitted.

Common mistakes to avoid

Waiting for a platform’s takedown process while the one-year period runs;
Filing based only on cropped screenshots without the URL, date, account, or context;
Naming an account holder without evidence connecting that person to the post;
Assuming every insult or negative review is criminal libel;
Believing truth is always a complete defense without addressing motive and legal context;
Treating public access anywhere in the Philippines as sufficient proof of venue;
Ignoring a prosecutor’s subpoena or filing only an unsworn letter;
Deleting evidence after receiving a demand, subpoena, or preservation request;
Illegally entering an account or device to obtain proof;
Reposting the accusation while publicly arguing about the case; and
Assuming an apology, desistance, or private agreement automatically ends criminal proceedings.

When legal help is urgent

Consult a Philippine lawyer promptly if:

The post or its discovery is approaching one year;
You received a prosecutor’s subpoena, court summons, warrant, or information;
The author is anonymous or account records may disappear;
The post was edited, reposted, or migrated and prescription is disputed;
Several people, companies, jurisdictions, or foreign platforms are involved;
The publication concerns a public officer, public figure, journalist, whistleblower, workplace investigation, or official proceeding;
Police seek access to a device or account;
There are threats, stalking, doxxing, intimate images, identity theft, extortion, or risks to physical safety; or
A related civil, administrative, employment, election, or data-privacy case is possible.

Cyber libel may not be the only applicable law. The same conduct can raise separate issues, but multiple charges cannot be assumed without examining each offense’s distinct elements and constitutional limits.

FAQ

Can I file a case over a private message?

A message seen only by the complainant ordinarily lacks publication to a third person. If it was sent to a group, copied to others, forwarded by the original sender, or otherwise communicated to another person, publication may be present. The exact transmission history matters.

Can a company be the victim of cyber libel?

Yes. Article 353 protects both natural and juridical persons, provided the entity is identifiable and the other elements are established.

Is an anonymous account immune?

No, but the complainant must still lawfully connect a person to the account and publication. Attribution may require technical investigation and court-authorized disclosure. A profile name or photograph alone may be insufficient.

Can I sue someone who shared another person’s post?

A mere reaction or passive receipt is not automatically punishable. A share accompanied by a newly written defamatory accusation or other affirmative republication requires separate analysis of the sharer’s own conduct, words, and intent.

Does deleting the post prevent a case?

No. Deletion does not undo a completed publication, although it may prevent further circulation. Preserve evidence before requesting removal.

Is a demand letter required before filing?

The elements of cyber libel do not generally include a prior demand. A demand may be useful in some circumstances, but it must not be allowed to consume the one-year prescriptive period.

Can the accused be charged with both ordinary libel and cyber libel for the same online publication?

The Supreme Court held in Disini that the same libelous online act cannot constitutionally be punished twice under the Revised Penal Code and the Cybercrime Prevention Act. Separate publications or distinct acts must be evaluated individually.

Will the prosecutor conduct a full trial?

No. Preliminary investigation determines whether there is sufficient ground to hold the respondent for trial. Guilt must later be proved in court beyond reasonable doubt. The prosecutor may call a clarificatory hearing, but parties do not have an ordinary right to cross-examine witnesses at that stage.

Where can a cybercrime incident be reported?

A report may be made to the cybercrime units of the NBI or PNP, and the DOJ publishes official cybercrime-reporting information. Confirm current contact and submission instructions directly with the agency. A report should not be assumed to replace the complaint required to interrupt prescription.

Official legal sources

This article provides general legal information, not legal advice or an attorney-client relationship. Cyber libel outcomes depend on the exact publication, evidence, dates, parties, and procedural history. Official legal sources and procedures were checked as of September 1, 2026.