Quick answer

Cyber libel is generally committed when a person publicly communicates a defamatory allegation through a computer system—such as a social-media post, message visible to third persons, website article, email blast, or online video—with the legal requirements for libel present.

To file a case, preserve the online evidence immediately, identify the publisher, prepare a sworn complaint supported by admissible evidence, and file it with the prosecutor’s office that has proper territorial jurisdiction. To defend one, do not ignore the subpoena: obtain counsel, preserve the complete context, and submit a sworn counter-affidavit and supporting evidence within the period stated in the subpoena.

Act quickly. The Supreme Court has ruled that cyber libel prescribes in one year, counted under the applicable rules from discovery of the offense by the offended party or the authorities. Determining the exact starting date—and whether prescription was interrupted—can be fact-sensitive. See the Supreme Court’s official summary of Causing v. People on the one-year prescriptive period for cyber libel.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012, or Republic Act No. 10175, covers libel committed through a computer system or a similar future technology. The underlying definition and rules come from Articles 353 to 355 of the Revised Penal Code.

The prosecution ordinarily must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, dishonorable conduct, or another condition or circumstance that tends to dishonor, discredit, or expose a person to contempt.
Publication. At least one person other than the person defamed received or understood the statement. A public Facebook post clearly involves publication, but a private message sent only to the person concerned ordinarily does not satisfy this element unless someone else received or saw it.
Identification. The complainant must be identifiable from the statement and its surrounding circumstances. Naming the person is not always necessary, but readers must reasonably be able to determine who was meant.
Malice. Article 354 generally presumes malice from a defamatory imputation, even if the allegation is true, unless the communication is privileged or the accused proves good intention and justifiable motive. In some cases involving public officials, public figures, or matters of public concern, constitutional protections require proof of actual malice—knowledge that the statement was false or reckless disregard of whether it was false.
Use of a computer system. The allegedly libelous material must have been communicated through information and communications technology.
Responsibility for the publication. The evidence must connect the respondent to the creation or publication of the offending material. Ownership of an account, page, device, or organization does not by itself resolve who authored, approved, or published a particular statement.

The Supreme Court upheld cyber libel, subject to constitutional limitations, in Disini v. Secretary of Justice. The decision also limited liability under the provision to the original author of the libelous online statement. A mere “like,” reaction, or unaltered sharing of another person’s content is not automatically punishable as cyber libel under that ruling. A person who adds a new defamatory statement, however, may be responsible for that person’s own words.

Not every offensive or false online statement is cyber libel

Cyber libel does not punish every insult, disagreement, bad review, parody, or inaccurate statement. The exact words, audience, context, identity of the speaker and subject, and purpose of the communication all matter.

Opinion versus assertion of fact

A loose insult or unmistakable expression of opinion may not assert a fact capable of proof. Calling service “terrible,” for example, is different from falsely alleging that a named business owner stole customers’ money.

Labels do not control. Writing “in my opinion” will not protect a statement that reasonably asserts an undisclosed and defamatory fact.

Truth is important but not always sufficient by itself

Under Article 361 of the Revised Penal Code, proof of truth may support an acquittal when the matter was published with good motives and for justifiable ends. Special restrictions apply when the imputation concerns matters that do not constitute a crime and when the offended person is a public officer.

A respondent should therefore preserve not only proof that an allegation was accurate, but also evidence showing why it was communicated, what verification was performed, whom it was sent to, and why the audience and wording were reasonably necessary.

Privileged communications

Article 354 recognizes qualified privileges, including:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments or remarks, of certain official proceedings or acts.

Privilege is not a license to publish accusations to everyone. Excessive circulation, unnecessary insulting language, fabricated details, or proof of actual malice can defeat a qualified privilege.

Statements made in judicial proceedings may receive broader protection when relevant to the proceeding. Whether a statement is pertinent and privileged depends on its setting and content.

Public officials, public figures, and matters of public concern

Criticism of government and discussion of public affairs receive strong constitutional protection. When the applicable actual-malice rule governs, the complainant must prove that the defendant knew the defamatory statement was false or acted with reckless disregard for its truth.

“Reckless disregard” is more than an ordinary mistake or incomplete investigation. Its application is highly fact-specific. Private accusations unrelated to public duties do not automatically become protected merely because the subject works for the government.

Group statements and unnamed subjects

A person generally needs to show that readers understood the statement as referring to that person. A broad criticism of a large, undefined group may not identify an individual complainant. A post may nevertheless be actionable if photographs, job titles, tags, prior posts, or local knowledge make the person unmistakable.

Penalty and related exposure

Ordinary written libel is punished under Article 355 of the Revised Penal Code. For cyber libel, Section 6 of Republic Act No. 10175 raises the penalty by one degree because information and communications technology was used.

The precise imposable sentence depends on the charging language, applicable penalty rules, modifying circumstances, and the court’s findings. A conviction may also carry civil liability for proven injury. Because imprisonment is possible, both complainants and respondents should treat the case as a serious criminal proceeding.

A person should not be punished twice for the same libelous act under both ordinary libel and cyber libel. In Disini, the Supreme Court invalidated Section 7 of Republic Act No. 10175 insofar as it would permit double prosecution under both provisions for the same conduct.

Before filing: preserve evidence properly

A screenshot alone may be challenged as incomplete, altered, unauthenticated, or disconnected from the respondent. Preserve as much of the following as lawfully available:

Full screenshots showing the post, account name, profile information, date, time, reactions, comments, and surrounding thread;
The exact URL or permalink;
Screen recordings showing how the page was reached;
Original downloaded images, videos, audio, emails, or message exports;
The device on which the material was received or viewed;
Names and contact details of people who personally saw the publication;
Records linking the account to the suspected publisher;
Earlier and later posts that explain the context or identify the complainant;
Proof of falsity, such as official records, contracts, receipts, correspondence, or certified documents;
Proof of harm, including lost engagements, terminated contracts, customer communications, medical records, or other contemporaneous evidence;
Requests for correction or removal and the responses received; and
A written chronology recording when and how the publication was first discovered.

Keep original files unchanged. Make working copies and backups. Do not crop away dates, account identifiers, URLs, or surrounding language. Record who collected each item and when.

A lawyer may recommend forensic examination or a lawful request for account or subscriber information. Platforms do not retain every category of data indefinitely, and private parties cannot compel disclosure simply by sending a demand letter.

How to file a cyber libel complaint

1. Confirm that the publication is within the one-year period

Identify the earliest provable date when the offended party or the authorities discovered the offending publication and its author. Do not assume that continued online availability restarts the period every day.

A later material republication may raise a separate issue, but routine continued accessibility, automated display, or a minor technical change should not be treated automatically as a new offense. Obtain case-specific advice before relying on republication.

2. Identify the correct respondent

Do not name a page administrator, business owner, editor, employee, or relative based only on suspicion. Gather lawful evidence showing who wrote, approved, uploaded, or knowingly issued the specific statement.

If the author is unknown, prompt assistance from the National Bureau of Investigation or Philippine National Police may be useful. Investigators may seek appropriate court orders, but identification is not guaranteed—especially when records are no longer retained or the account information is false.

3. Determine the proper place of filing

Venue is jurisdictional in criminal cases. It cannot be selected merely for convenience.

Cybercrime venue may depend on where an essential element occurred, where a relevant computer system was situated, or where the damage occurred, subject to the governing rules and the specific offense. Libel also has special venue provisions under Article 360 of the Revised Penal Code, including rules tied to first publication and the offended party’s actual residence, with additional distinctions for public officers.

Because online material can be created, hosted, and viewed in different places, venue must be supported by facts stated in the complaint and evidence—not just by the complainant’s present address. Confirm the proper prosecutor’s office before filing. The Rule on Cybercrime Warrants also contains venue and warrant rules relevant to cybercrime investigations.

4. Prepare the complaint-affidavit

The complaint-affidavit should clearly state:

The complainant’s and respondent’s identities and addresses, if known;
The exact words, images, audio, or video alleged to be defamatory;
Where, when, and how they were published and discovered;
Why the complainant was identifiable;
Why the imputation was defamatory and false;
Facts supporting authorship and malice;
Facts establishing venue;
The persons who received or saw the publication;
The harm caused; and
A properly organized list of attachments.

The affidavit and supporting witness affidavits must be sworn before an authorized officer. Each witness should testify only to matters personally known to that witness. Attach legible, properly marked evidence and bring originals or authenticated copies when required.

5. File with the proper prosecutor’s office

A criminal complaint is ordinarily filed with the Office of the City Prosecutor or Office of the Provincial Prosecutor having jurisdiction. A complainant may first seek investigative assistance from the NBI Cybercrime Division or the PNP Anti-Cybercrime Group, but a police or NBI investigation is not a substitute for the prosecutor’s determination.

Ask the receiving office about its current requirements, number of copies, accepted filing method, oath administration, and any local electronic-filing procedure. Do not assume that emailing documents to an investigator or sending a demand letter interrupts prescription.

6. Participate in the preliminary investigation

Cyber libel carries a penalty that entitles the respondent to preliminary investigation. The prosecutor evaluates whether the evidence meets the standard required by the current 2024 DOJ–NPS Rules on Preliminary Investigations and Inquest Proceedings.

The respondent should receive a subpoena with the complaint and supporting evidence and will be directed to submit a sworn counter-affidavit within the stated period. Further submissions or a clarificatory hearing may be allowed when the prosecutor considers them necessary.

If the prosecutor dismisses the complaint or directs the filing of an Information, the adversely affected party may have administrative or judicial remedies subject to short and technical deadlines. Obtain the resolution promptly and seek advice immediately.

7. If an Information is filed in court

The court independently determines whether probable cause exists for issuing a warrant of arrest. Filing a complaint with the prosecutor does not itself mean that the respondent will be arrested.

Once the case is in court, the accused must be arraigned and enter a plea. Bail is generally a matter of right before conviction for an offense not punishable by reclusion perpetua, life imprisonment, or death, but the amount and conditions are set by the court. The case then proceeds under the Rules of Criminal Procedure, including pre-trial and trial.

How to defend a cyber libel complaint

Do not ignore the subpoena

Note the date and manner of service and the deadline printed on the subpoena. Immediately obtain the complete complaint and every attachment. Under preliminary-investigation rules, failing to submit a counter-affidavit may allow the prosecutor to resolve the case using only the complainant’s evidence.

A counter-affidavit is sworn testimony. Unsupported denials are rarely enough.

Test each required element

A defense review should ask:

Is the statement actually defamatory when read as a whole?
Was it fact, opinion, satire, rhetorical exaggeration, or fair criticism?
Was it communicated to anyone other than the complainant?
Could readers identify the complainant?
Did the respondent actually author or publish it?
Was a computer system used for the charged publication?
Is the allegation true, and was it communicated with good motives and for justifiable ends?
Was the communication privileged?
Does the actual-malice standard apply?
Is the prosecution time-barred?
Does the prosecutor or court have proper territorial jurisdiction?
Is the evidence authentic, complete, admissible, and connected to the respondent?
Is the charge improperly based only on a like, reaction, tag, or unaltered sharing?
Is the same act being prosecuted twice?

Preserve the complete context

Save drafts, source materials, interview notes, messages with sources, official records, fact-checking communications, editorial discussions, and the full conversation thread. These may establish truth, reasonable verification, lack of malice, privilege, mistaken identity, or a materially different meaning from a cropped screenshot.

Do not fabricate or backdate records. Do not coach witnesses to adopt facts they did not personally observe.

Consider a careful correction—but do not assume it ends the case

A prompt, accurate correction or apology may reduce harm and help demonstrate good faith. It does not automatically erase a completed offense or force the complainant or prosecutor to withdraw the case.

Before posting a public response, consider whether it would repeat the allegation, create a new publication, admit disputed facts, intimidate a witness, or prejudice the defense. Legal advice is especially important once a complaint or demand has been received.

Civil damages and settlement

The offended party may seek civil liability arising from the alleged offense. Under the Rules of Criminal Procedure, the related civil action is generally deemed instituted with the criminal case unless it is waived, reserved when legally permitted, or filed ahead of the criminal case.

A separate civil action for damages may involve different causes of action, defenses, prescriptive periods, and standards of proof. Filing several overlapping cases without a sound procedural basis can create complications.

The parties may discuss correction, apology, removal, right of reply, confidentiality, or compensation. However:

Private settlement does not always compel the State to terminate a criminal prosecution;
An affidavit of desistance is not automatically controlling;
Payment should not be made in response to unlawful threats or extortion; and
No one should pressure a witness to lie, suppress evidence, or disobey a subpoena.

Put any settlement in a properly reviewed written agreement.

Common mistakes to avoid

Waiting for the post to disappear before saving the URL, context, and metadata;
Assuming every false or insulting statement is criminal libel;
Filing in the complainant’s preferred city without proving venue;
Treating continued online availability as an unlimited extension of prescription;
Naming everyone connected with a page or company without proof of participation;
Relying only on cropped screenshots;
Reposting the accusation while trying to deny it;
Deleting accounts, messages, devices, drafts, or source files after learning of a complaint;
Ignoring a prosecutor’s subpoena because no arrest warrant has been issued;
Submitting an unsworn narrative instead of the required affidavit and evidence;
Contacting the complainant, respondent, or witnesses in a threatening manner;
Assuming truth alone always defeats criminal libel; and
Assuming an apology, deletion, or affidavit of desistance automatically closes the case.

When legal help is urgent

Consult a Philippine lawyer promptly if:

The one-year prescriptive period may expire soon;
You cannot identify the anonymous publisher;
You received a prosecutor’s subpoena, court notice, hold-departure-related order, or warrant;
The post concerns a public official, journalist, election, workplace investigation, sexual misconduct, corruption, or another sensitive public-interest issue;
Several people, accounts, or jurisdictions are involved;
Police or investigators request access to a device or account;
A platform’s records may need urgent preservation;
The same publication has produced both civil and criminal claims;
The complainant is demanding money under threat of prosecution; or
There is a risk of violence, stalking, doxxing, or retaliation.

If authorities seek to search or seize a device, ask to see the warrant and contact counsel. Do not obstruct lawful officers, but do not volunteer passwords, consent, or statements without understanding your rights and the scope of the order.

Frequently asked questions

Can I file because someone insulted me in a private chat?

Only if the legal elements are present. If the message was sent solely to you and no third person received it, the publication element may be absent. A group chat, forwarded message, or message shown to another person may produce a different result.

Is a screenshot enough?

It may be evidence, but it is not automatically conclusive. Its authenticity, completeness, source, context, and connection to the respondent can be disputed. Preserve the URL, original device, full thread, files, witnesses, and account-identification evidence.

Can an anonymous or fake account be sued?

A complaint may be investigated even if the real operator is initially unknown, but the prosecution ultimately needs evidence identifying the responsible person. Seek assistance quickly because service providers may retain relevant records only for limited periods.

Is sharing or liking a defamatory post cyber libel?

Not automatically. Disini limited the cyber-libel provision to the original author and rejected automatic criminal liability for ordinary recipients who merely react to or pass along a post. A person who adds a new defamatory caption, edits the material, or makes a separate accusation may be evaluated as the author of that new publication.

Does deleting the post prevent a case?

No. Deletion does not undo a publication already seen by another person. It may limit further harm, but it can also destroy relevant evidence if no reliable copy was preserved. Seek advice before altering material after a dispute begins.

Can a truthful post still create legal risk?

Yes. Truth must be proved with admissible evidence, and the Revised Penal Code may also require good motives and justifiable ends. Privacy, data-protection, harassment, contempt, confidentiality, and other laws may apply even when a statement is accurate.

Must the complainant first send a demand letter?

No general rule makes a prior demand, takedown request, or barangay confrontation an element of cyber libel. Whether barangay conciliation applies depends on the parties, residence, offense, and statutory exceptions; cyber libel’s penalty and cross-border facts commonly require individualized analysis.

Will I be arrested as soon as the complaint is filed?

Not merely because a complaint-affidavit was filed. The prosecutor first conducts the appropriate investigation. If an Information is later filed, the judge independently evaluates probable cause and decides whether to issue a warrant.

How long do I have to file?

The Supreme Court has held that cyber libel prescribes in one year from discovery by the offended party or the authorities, subject to the legal rules on commencement and interruption. Do not wait until the final days: authorship, venue, records, and the discovery date may all require proof.

Where can I find the governing rules?

Primary official references include:

General-information disclaimer

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Cyber-libel liability, defenses, venue, prescription, procedure, and remedies depend on the exact publication, evidence, dates, parties, and documents. Consult a qualified Philippine lawyer about a specific matter. Laws and official sources were checked as of September 15, 2026.