Quick answer

A Philippine cyber libel case usually begins with a sworn complaint filed with the proper City or Provincial Prosecutor’s Office. The complainant must present admissible evidence showing a defamatory online statement, publication to at least one third person, identification of the person defamed, malice, use of a computer system, and the respondent’s authorship or responsibility for the post.

Act quickly. Under the Supreme Court’s April 2026 ruling in Causing v. People, criminal cyber libel generally prescribes one year from the date the alleged defamatory material is actually discovered by the offended party, authorities, or their agents. Posting something publicly does not, by itself, create presumed or constructive discovery. Filing the criminal complaint with the prosecution office interrupts prescription.

A respondent who receives a prosecutor’s subpoena should not ignore it. The subpoena should allow at least 10 days from receipt before the counter-affidavit is due. The defense should preserve its own evidence, challenge every missing element, and submit a complete sworn response on time.

What counts as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act applies the Revised Penal Code’s law on libel when the prohibited act is committed through a computer system or similar technology. This can include posts, articles, captions, messages, images, videos, and other online content.

The prosecution must establish:

A defamatory imputation. The statement must impute a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose a natural or juridical person to contempt—or blacken the memory of a deceased person.
Publication. At least one person other than the person defamed must have seen, read, or otherwise received the statement. A message sent only to the person concerned ordinarily lacks this element.
Identification. The complainant must be named or sufficiently identifiable from the words, images, surrounding facts, or context. Feeling alluded to is not enough if reasonable readers could not identify the person.
Malice. Article 354 generally presumes malice from a defamatory imputation, subject to privileged communications and constitutional protections. In cases involving public officers, public figures, or legitimate matters of public interest, the prosecution may have to prove actual malice—knowledge of falsity or reckless disregard of whether the statement was false.
Use of a computer system or similar means.
Responsibility of the accused. The evidence must connect the respondent to the creation or publication of the material. A profile bearing someone’s name is not always conclusive if hacking, impersonation, shared access, automation, or fabricated screenshots is credibly raised.

The words must be read in their complete context and ordinary meaning. Offensive language, criticism, sarcasm, a poor review, or general abuse is not automatically libelous. At the same time, calling something “opinion” does not protect a statement that reasonably communicates a damaging factual accusation.

Who may be held liable

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author, but invalidated liability for people who merely receive and react to the post. The Court also invalidated the general “aiding or abetting” provision as applied to cyber libel.

A simple like, reaction, or unelaborated share should therefore not be treated automatically as cyber libel. However, a person who adds an independently defamatory caption, comment, edited image, or fresh accusation may become the author of a separate publication. Administrators, editors, employers, page owners, and account holders are not automatically criminally liable merely because of their position; their actual participation must be proved.

The same online statement should not be prosecuted twice as both traditional libel and cyber libel. The Supreme Court has treated them as the same offense committed through different means, making dual prosecution for the identical publication a double-jeopardy problem.

Possible penalties and civil liability

Cyber libel carries a penalty one degree higher than traditional libel. The statutory imprisonment range is prisión correccional in its maximum period to prisión mayor in its minimum period—four years, two months and one day to eight years.

A fine may be imposed instead of imprisonment, or together with it. After the adjustments under Republic Act No. 10951 and the Supreme Court’s ruling in People v. Soliman, the fine for online libel ranges from ₱40,000 to ₱1,500,000. Imprisonment remains legally available, although judges may consider whether a fine alone best serves justice under the circumstances.

Criminal liability may also carry civil liability for proven harm. The civil action arising from the offense is ordinarily deemed included in the criminal case unless waived, reserved for separate filing, or filed earlier. Independent civil claims may also exist under the Civil Code, including Article 33. Their prescriptive periods and procedural effects are different from criminal prescription, so they should be assessed separately and promptly.

Critical deadlines

Matter	General rule
Criminal prescription	One year from actual discovery of the online defamatory material
Interruption of prescription	Filing the complaint with the prosecution office interrupts the period
Respondent’s counter-affidavit	Due on the date in the subpoena, which should give at least 10 days from receipt
Motion for reconsideration of prosecutor’s resolution	Generally within 15 days from receipt under the 2024 DOJ-NPS Rules
Civil claims	Separate rules apply; do not assume the criminal deadline controls them

Under Article 91 of the Revised Penal Code, prescription may begin running again if proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused. The period also does not run while the offender is absent from the Philippines.

Do not assume that a platform report, demand letter, barangay complaint, police blotter, or informal inquiry stops prescription. Make sure the proper sworn criminal complaint reaches the prosecution office before the deadline.

What to preserve before filing or responding

Preserve evidence before requesting deletion or takedown. Keep:

Full-page screenshots showing the exact words, images, account name, profile details, date, time, reactions, comments, and surrounding conversation.
The complete URL or other direct identifier for every post, profile, video, message, or article.
A screen recording showing how the material was accessed and its relationship to the account or page.
Original downloaded files, message exports, notification emails, attachments, metadata, and unedited copies.
The device on which the material was received or viewed, with its relevant data intact.
Names and contact details of people who personally saw the publication.
Records showing when and how the complainant or authorities first discovered it.
Evidence connecting the account to its alleged author, such as admissions, prior messages, associated contact details, account history, or consistent identifying information.
For the defense, login alerts, security emails, account-recovery records, device histories, travel records, workplace access records, or other evidence supporting hacking, impersonation, or lack of authorship.
Proof of loss or harm, such as cancelled contracts, employment records, customer messages, medical records, and reasonable mitigation expenses.
Source documents supporting truth, responsible verification, good motives, or public interest.

Screenshots are useful but may be disputed or require authentication. Preserve native electronic evidence and consider assistance from the NBI Cybercrime Division or a qualified digital-forensics professional. Do not crop, annotate, alter, or overwrite the only copy.

If a platform’s subscriber, traffic, or content data may be needed, seek legal and law-enforcement help immediately. Valid preservation and disclosure demands are governed by the Cybercrime Prevention Act and the Rule on Cybercrime Warrants; a private demand to a platform is not a substitute for lawful process.

How to file a complaint

1. Test the facts against every element

Identify the exact statement complained of—not merely the general tone of the page. Record:

What was posted.
Who allegedly posted it.
Who was defamed and how readers could identify that person.
Which third persons viewed it.
Why the words are defamatory in context.
What supports falsity or malice.
How authorship can be proved.
When discovery occurred.
Which facts establish the chosen venue.

If the content concerns a public officer’s official conduct or a matter of legitimate public interest, address actual malice directly. Mere inaccuracy or failure to investigate, without more, may not meet that standard.

2. Select the proper venue

Cyber libel criminal actions belong in a designated cybercrime Regional Trial Court. Under Section 2.1 of the Rule on Cybercrime Warrants, venue may lie in the province or city:

Where the offense or any element was committed;
Where any part of the computer system used was situated; or
Where damage to the natural or juridical person occurred.

Jurisdiction also exists under Republic Act No. 10175 when an element occurred in the Philippines, a computer system used was wholly or partly situated here, or the offense caused damage to a person who was in the Philippines when it occurred.

Venue is jurisdictional in criminal cases. The complaint and eventual Information should allege concrete venue facts, not merely say that an internet post could be accessed anywhere. File with the prosecution office corresponding to a legally supportable venue.

3. Prepare the complaint-affidavit

The affidavit should be chronological, specific, based on personal knowledge, and sworn before an authorized officer. It should include:

Complete identifying and contact information for the parties, if known.
The exact defamatory material, with any necessary Filipino or English translation.
The URL, platform, account, date, time, and manner of publication.
Facts establishing identification, publication, authorship, malice, computer use, discovery, and venue.
A numbered list of attachments.
Affidavits of witnesses who actually viewed the publication or can prove authorship, falsity, harm, or discovery.
Authentic copies of supporting electronic and documentary evidence.

Complete the current National Prosecution Service Investigation Data Form and bring the original and the required copies for each respondent. Check the receiving prosecution office’s current filing checklist because local administrative requirements may differ.

4. File with the prosecutor—or obtain investigative help first

A complainant may file directly with the proper City or Provincial Prosecutor’s Office. The NBI Cybercrime Division or PNP Anti-Cybercrime Group may assist where the author is anonymous, an account may be fake, technical attribution is required, or court-authorized platform data is needed.

Do not hack an account, impersonate someone, buy unlawfully obtained data, or publish private information to identify a suspect. Attribution must be obtained lawfully.

5. Participate in preliminary investigation

Cyber libel’s prescribed penalty requires regular preliminary investigation. Under the 2024 DOJ-NPS Rules, the prosecution office first checks the complaint’s form and evidence. The investigating prosecutor then determines whether there is prima facie evidence with reasonable certainty of conviction—evidence considered admissible, credible, preservable, and sufficient to establish the elements and the responsible person if left uncontroverted.

The respondent normally receives a subpoena, the complaint-affidavit, and its attachments, and is directed to submit a counter-affidavit. The prosecutor may hold a physical or virtual clarificatory hearing and, when necessary, permit a reply and rejoinder or require additional evidence.

If the prosecutor dismisses or approves the complaint, an aggrieved party generally has 15 days from receipt to move for reconsideration. Petitions for review and motions to suspend court proceedings have additional technical requirements; use counsel because seeking DOJ review does not automatically halt a case already filed in court.

6. If an Information is filed

The Information is filed in the designated cybercrime RTC. The judge independently examines probable cause and may dismiss the charge, require additional evidence, or issue a warrant of arrest.

Cyber libel is bailable. Before conviction by the RTC, bail is generally a matter of right because the offense is not punishable by death, reclusion perpetua, or life imprisonment. The accused must still follow the court’s process for surrender, custody, and posting bail.

How to defend a complaint

Act as soon as the subpoena arrives

Record the exact date and manner of receipt. Obtain a complete copy of the complaint and every attachment. Calendar the counter-affidavit deadline, hearing date, and any electronic-filing instructions.

If important attachments are missing or more time is genuinely needed, seek appropriate relief before the deadline. An extension is not automatic. Under the current DOJ-NPS rules, a motion to dismiss ordinarily cannot replace a counter-affidavit unless it is verified and contains the respondent’s defenses.

Build the counter-affidavit around the missing elements

Possible defenses include:

No authorship: The respondent did not create, upload, or cause publication of the material.
Compromised or fake account: Supported by security alerts, recovery records, device evidence, reports to the platform, or other contemporaneous proof.
No publication: Nobody other than the complainant received the statement.
No identification: The complainant was neither named nor reasonably identifiable.
No defamatory imputation: The words, viewed as a whole and in context, were criticism, rhetoric, satire, hyperbole, or general abuse rather than an accusation tending to dishonor.
Privileged communication: For example, a private communication made in performing a legal, moral, or social duty, or a fair and true good-faith report—without added comments—of a non-confidential official proceeding.
Public-interest speech: If the statement concerned official conduct or a legitimate public issue, the prosecution must prove actual malice where the constitutional standard applies.
Truth with good motives and justifiable ends: Truth alone is not always a complete criminal defense. Article 361 also requires good motives and justifiable ends, and limits when truth may be proved for imputations that do not constitute crimes.
Mere reaction: The respondent only liked, received, or reacted to another person’s post and did not author a separate defamatory statement.
Prescription: The complaint was filed more than one year after actual discovery, subject to interruption, absence from the Philippines, and other Article 91 rules.
Improper venue or insufficient venue allegations.
Material variance or unreliable evidence: The accusation, screenshots, witnesses, or account attribution do not match or cannot be authenticated.

A counter-affidavit should answer the material allegations paragraph by paragraph and attach all available supporting evidence. Avoid vague denials when objective records exist.

Do not destroy or manufacture evidence

Deleting content after learning of a complaint can remove exculpatory context and create damaging inferences. Do not edit screenshots, reset devices, fabricate account-compromise claims, coach witnesses, or ask another person to assume authorship.

A voluntary correction, takedown, or sincere apology may help limit harm and may be considered in damages or sentencing, but it does not automatically erase an already completed offense. Obtain advice before communicating because an improvised apology may contain admissions.

Prepare for the court stage

If an Information has been filed:

Verify the exact charge, court, branch, and case number.
Coordinate voluntary surrender and bail through counsel if a warrant exists.
Do not evade court process or leave the country to avoid the case.
Review whether a motion to quash is legally available for prescription, lack of jurisdiction, defective allegations, double jeopardy, or another recognized ground.
Preserve objections to electronic evidence, authorship, venue, privilege, and constitutional actual malice.
Attend arraignment and all hearings required by the court.

Common mistakes

Waiting while the one-year criminal period is running.
Treating a platform report or demand letter as a filed criminal complaint.
Filing where it is convenient without establishing lawful venue.
Submitting only a cropped screenshot with no URL, context, viewer, or authorship evidence.
Assuming that an account name conclusively identifies the author.
Assuming every false or insulting statement is cyber libel.
Assuming truth is always enough, without addressing good motives and justifiable ends.
Treating criticism of government conduct as though malice were automatically presumed.
Naming everyone who liked or shared a post without proof of an independently defamatory publication.
Publicly retaliating, reposting the accusation, threatening witnesses, or exposing personal data.
Ignoring a subpoena or submitting an unsworn social-media explanation instead of a proper counter-affidavit.
Believing a takedown, apology, settlement, or affidavit of desistance automatically ends a criminal prosecution. The criminal action is prosecuted in the name of the People, and dismissal remains subject to prosecutorial and judicial action.

When legal help is urgent

Seek a Philippine lawyer immediately if:

The one-year period is close to expiring.
You have received a prosecutor’s subpoena, an Information, a warrant, or a court notice.
Police or investigators ask for a statement, device, password, consent to search, or account access.
The account is anonymous, foreign-hosted, fake, or allegedly hacked.
Subscriber or traffic data may soon be unavailable.
The publication involves a journalist, whistleblower, public officer, public-interest controversy, or confidential source.
The content includes threats, stalking, doxxing, intimate images, extortion, or a child; other, more urgent offenses and protective remedies may apply.
Several posts, authors, victims, or jurisdictions are involved.
A separate civil suit, injunction, employment case, or administrative proceeding is contemplated.

If a search or disclosure warrant is presented, ask for a copy and contact counsel. Do not obstruct lawful implementation, but do not destroy data or casually consent beyond the warrant’s stated scope.

Qualified indigent persons may seek assistance from the Public Attorney’s Office. The NBI’s official online complaint page and Cybercrime Division service information are available for investigative assistance.

Frequently asked questions

Is a demand letter required before filing?

No general rule makes a demand letter a prerequisite to a cyber libel complaint. It may be useful for requesting preservation, correction, takedown, or settlement, but preserve the evidence first and do not let correspondence consume the prescriptive period.

Can I file because a post is untrue and embarrassing?

Not on those facts alone. The statement must satisfy every element of cyber libel, including defamatory meaning, publication, identification, malice, computer use, and provable responsibility of the accused.

Is truth a complete defense?

Not automatically. Article 361 requires both truth and publication with good motives and for justifiable ends. Proof of truth is also restricted when the imputed act or omission is not a crime, except where the imputation concerns a government employee’s discharge of official duties.

Can someone be charged for liking or sharing a post?

A mere recipient’s like, reaction, or unelaborated share is protected by the Disini ruling from cyber-libel liability. A fresh caption, comment, edit, or accusation may be treated as a separate publication authored by that person.

Can I file against an anonymous account?

Yes, but identifying the responsible person may require lawful preservation, disclosure, search, or examination orders. Report promptly to cybercrime investigators and avoid naming a suspected person without reliable evidence.

Does deleting the post end the case?

No. If a third person already received the defamatory material, deletion does not undo publication. It can limit continuing harm and may affect damages or penalty, but the preserved evidence and circumstances still matter.

Can the complainant simply withdraw the case?

A complainant may express desistance or enter a lawful settlement over civil interests, but that does not automatically extinguish a public criminal action. The prosecutor or court determines the legal effect.

Can cyber libel result in imprisonment?

Yes. The law permits imprisonment, a fine, or both. A court may choose a fine alone in appropriate circumstances, but no respondent should assume imprisonment is unavailable.

Official legal sources

This article provides general Philippine legal information, not legal advice or an attorney-client relationship. Outcomes depend on the exact words, context, evidence, dates, parties, and procedural history. Laws and primary sources were checked as of 27 July 2026.