Quick answer

A Philippine cyber libel case usually begins with a sworn complaint filed before the proper prosecutor’s office, supported by evidence identifying the online statement, its author, its publication to another person, and its defamatory and malicious character. The prosecutor conducts a preliminary investigation before any criminal Information may be filed in the Regional Trial Court.

A person accused of cyber libel should not ignore a subpoena, demand letter, or court notice. Preserve the complete post and surrounding conversation, identify possible defenses, and submit a properly supported counter-affidavit within the period stated in the subpoena. Deleting content, contacting witnesses improperly, or posting retaliatory accusations can make the situation worse.

The Supreme Court has affirmed that cyber libel generally prescribes in one year from discovery of the alleged offense by the offended party, the authorities, or their agents. When discovery occurred, whether prescription was interrupted, and whether the filing was made in the proper place can involve disputed facts. Act promptly.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on written libel when the unlawful statement is committed through a computer system or similar technology.

A prosecution generally must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a natural or juridical person to contempt.
Publication. At least one person other than the person defamed received, read, or understood the statement.
Identification. The complainant was named or was identifiable from the words and surrounding circumstances.
Malice. Malice may be presumed in an unprivileged defamatory publication, but constitutional and statutory protections can require proof of actual malice in particular cases.
Use of a computer system. The publication occurred through social media, a website, messaging service, email, or another covered digital system.
Responsibility of the accused. The evidence must reliably connect the accused to the publication.

The entire communication matters. Prosecutors and courts consider the words used, images or links included, audience, context, language, tone, and surrounding exchanges—not merely an isolated phrase.

An insulting or upsetting statement is not automatically cyber libel. The prosecution must establish every element beyond reasonable doubt at trial.

Who may be liable?

The principal focus is ordinarily the person responsible for authoring or publishing the allegedly defamatory online material.

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author but rejected an interpretation that would automatically punish people who merely receive a post and react to it. A person who creates a separate defamatory caption, adds a new accusation, or independently republishes material may present a different factual situation. Liability cannot safely be decided from the platform’s “share,” “repost,” “like,” or comment label alone.

Administrators, employees, editors, page owners, and account holders are not automatically criminally liable solely because of their title or access. The evidence must establish their legally relevant participation and the required state of mind.

Statements that require special analysis

Opinion versus an assertion of fact

Calling something an “opinion” does not automatically protect it. A court may examine whether an ordinary reader would understand the statement as:

rhetorical criticism or value judgment;
satire, parody, or exaggeration;
an assertion of an objectively verifiable fact; or
an opinion implying undisclosed, defamatory facts.

Context is decisive. “I think he stole the money” may still communicate a factual accusation of theft.

Truth

Truth is not an unlimited license to shame another person. Under Article 361 of the Revised Penal Code, proof of the truth may support an acquittal only under the conditions specified by law, including publication with good motives and for justifiable ends. Where the imputation concerns a crime committed by a government employee in connection with official duties, the statutory treatment is different.

A defendant relying on truth should preserve the records and witnesses that existed when the statement was made. Speculation, rumor, anonymous tips, or documents that do not actually support the accusation may be insufficient.

Public officials, public figures, and matters of public concern

Public officials and public figures are subject to legitimate scrutiny, especially regarding official conduct and issues of public concern. In applicable cases, the complainant may need to prove actual malice—that the accused knew the statement was false or acted with reckless disregard of whether it was false.

Actual malice does not merely mean anger, hostility, or ill will. It concerns the publisher’s attitude toward the statement’s truth or falsity. Fabricated sources, deliberate alteration of documents, or obvious reasons to doubt a claim can be important. So can evidence showing verification, reliable sourcing, requests for comment, corrections, and good-faith reporting.

Criticism of government remains protected, but knowingly or recklessly publishing a false factual accusation is not immunized simply because the target holds public office.

Privileged communications

Article 354 of the Revised Penal Code recognizes qualified privileges, including:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts.

The privilege can be lost through actual malice, excessive publication, unnecessary defamatory language, or failure to satisfy the privilege’s requirements. Posting an accusation publicly when the asserted duty required communication only to a limited recipient may undermine the defense.

Certain statements made in legislative, judicial, or other protected proceedings may carry stronger privileges. Their scope depends on the speaker, forum, relevance, and governing law.

The filing deadline is short

In Causing v. People, G.R. No. 258524, the Supreme Court ruled that cyber libel is libel committed through a computer system—not a wholly separate offense with a longer limitation period. It therefore generally prescribes in one year under Articles 90 and 91 of the Revised Penal Code.

The Court subsequently affirmed that:

the period runs from discovery by the offended party, the authorities, or their agents;
online publication does not automatically prove that the offended party discovered the post on its upload date;
the date of discovery may require evidence; and
an accused may still prove prescription at trial when the existing record does not establish it.

See the Supreme Court’s official summary of the April 8, 2026 resolution in Causing v. People and the 2023 decision.

Do not assume that deleting, editing, reposting, or leaving an old post accessible restarts—or does not restart—the period. Those issues depend on the particular act charged and the evidence. Record the upload date, discovery date, any later edits or republications, and every potentially interruptive filing.

A civil action for injury to rights or defamation may also be subject to a one-year period under Article 1147 of the Civil Code. The proper cause of action and starting date require separate analysis.

How to file a cyber libel complaint

1. Preserve the publication immediately

Before requesting removal, save evidence showing:

the complete post, message, article, video, or image;
the full URL and account or page name;
visible timestamps and edit history;
comments, captions, attachments, and surrounding conversation;
the number and identity of recipients, where available;
the device and account through which you accessed it;
the date, time, and manner in which you first discovered it; and
later edits, reposts, deletion, or changes in privacy settings.

Take full-page screenshots or screen recordings rather than cropped images alone. Keep the original files and devices. Export the conversation or webpage where the service permits it. Do not alter filenames, metadata, or message content.

Ask witnesses who personally saw the publication to record what they saw, when they saw it, and how they recognized the person being referred to. Their testimony may help prove publication, identification, and discovery.

2. Assess the elements and possible defenses

Identify the exact words alleged to be defamatory. Explain:

what accusation they convey;
why the statement refers to you;
who else received it;
why it is false or legally defamatory;
why any asserted privilege does not apply; and
what evidence connects the respondent to the account or publication.

If the account is anonymous or impersonated, avoid guessing who operated it. Account ownership, authorship, and device attribution may require platform records or a lawful investigation.

3. Identify the proper filing office and venue

A criminal complaint is ordinarily initiated with the prosecutor’s office that has territorial authority over the offense. Cyber libel venue is legally significant and can be contested. Relevant considerations may include where an essential element occurred, where the online material was first published, where the complainant resided or held office at the relevant time, and the special venue provisions governing libel.

Mere online accessibility in a city does not necessarily prove first publication there. The complaint should allege concrete venue facts, not simply state that the post could be viewed nationwide.

Because the proper place may change with the complainant’s status, residence, office, publication history, and technical evidence, confirm venue with a Philippine lawyer or the receiving prosecutor before the one-year period expires.

4. Prepare the complaint-affidavit

The complaint-affidavit should be based on personal knowledge and should normally set out:

the identities and addresses of the parties, if known;
the exact publication complained of;
when and how it was discovered;
where the relevant acts occurred;
how the complainant was identified;
who received or viewed the material;
why it was defamatory and malicious;
why the respondent is believed to have authored or published it; and
an organized list of annexes and witnesses.

Attach legible, properly marked evidence. Electronic evidence must eventually satisfy the Rules on Electronic Evidence, including requirements concerning authenticity and reliability. A screenshot can be useful, but a screenshot alone does not necessarily establish who controlled an account or created the post.

The affidavit must be sworn before an authorized officer. False statements in an affidavit can carry serious consequences.

5. File and retain proof

File through the channel currently accepted by the proper prosecutor’s office. Local offices may have particular requirements for copies, electronic submissions, identification, affidavits, annex markings, and contact information.

Obtain and preserve:

the docket or case number;
the date-stamped receiving copy or electronic acknowledgment;
the official receipt, if any authorized fee was paid;
the complete filed set of documents; and
all orders, subpoenas, notices, and proof of service.

A report to the PNP Anti-Cybercrime Group or NBI Cybercrime Division may assist an investigation, particularly when the account is anonymous or technical evidence is needed. A report to investigators is not necessarily a substitute for the filing required to interrupt prescription. Confirm the legal effect of every filing.

6. Participate in preliminary investigation

Under Rule 112 of the Rules of Criminal Procedure, the prosecutor determines whether there is sufficient ground to believe that a crime was committed and that the respondent is probably guilty and should stand trial.

The respondent is generally served with the complaint and supporting evidence and directed to submit counter-affidavits and evidence. The investigating prosecutor may seek clarification or conduct a limited hearing but does not ordinarily hold a full trial at this stage.

If probable cause is found, an Information may be filed in the proper Regional Trial Court. The judge independently evaluates the case for the judicial action required by the Rules. A prosecutor’s finding of probable cause is not a conviction.

How to defend against a cyber libel complaint

1. Treat every deadline as urgent

Read the subpoena and all attachments immediately. Note:

the date and manner of service;
the deadline for the counter-affidavit;
the prosecutor’s office and docket number;
whether the complete complaint and annexes were supplied; and
any scheduled conference or clarification hearing.

Rule 112 generally gives a respondent 10 days from receipt of the subpoena, complaint, and supporting documents to submit counter-affidavits and evidence. Follow the specific order served on you. Seek an extension before the deadline if legally available; never assume it will be granted.

A motion to dismiss generally does not replace the counter-affidavit during preliminary investigation.

2. Preserve—do not manipulate—the evidence

Save the entire thread and account history, including material favorable and unfavorable to you. Preserve:

drafts and source documents;
private messages and emails;
links opened before publication;
interviews, recordings, and notes;
requests for comment and responses;
account-access and security records;
evidence of hacking, impersonation, or unauthorized access;
correction, clarification, or retraction history; and
witnesses who can authenticate the records.

Do not fabricate a backdated draft, modify metadata, pressure a witness, or access another person’s account without authority. Those acts can create additional legal problems.

Deleting the post may reduce ongoing harm, but it normally does not erase an already completed publication. Before changing anything, preserve an accurate copy and obtain advice about takedown, correction, or retraction.

3. Test every element

A counter-affidavit may address, where supported:

the words are not defamatory in their complete context;
the complainant was not identified or identifiable;
there was no publication to a third person;
the accused did not author, control, or publish the material;
the evidence does not reliably authenticate the account or screenshot;
the statement was substantially true and made with good motives and justifiable ends;
the communication was privileged;
the statement was protected opinion, criticism, satire, or rhetorical hyperbole;
actual malice is required and unsupported;
venue is improper;
the offense had prescribed before the legally interruptive filing; or
the facts alleged do not constitute cyber libel.

Avoid inconsistent blanket denials. For example, claiming both that you never made the post and that every statement in it was true may damage credibility unless the alternative positions are clearly and properly explained.

4. Respond with evidence, not a social-media campaign

Do not debate the complainant online, identify witnesses publicly, or repost the disputed accusation to defend yourself. A new publication may create a new controversy. Communications about settlement, correction, or retraction should be carefully drafted and should not include unnecessary admissions.

5. Challenge irregularities at the proper stage

Possible issues include incomplete service, lack of venue allegations, prescription, defective affidavits, unreliable electronic evidence, absence of probable cause, or denial of an opportunity to respond. The correct remedy and deadline depend on whether the case is before the prosecutor, DOJ, trial court, Court of Appeals, or Supreme Court.

Once an Information is filed, court rules on arraignment, bail, motions, pretrial, trial, and appeal apply. Do not skip arraignment or a hearing because you believe the complaint is baseless.

Penalties and other consequences

Cyber libel carries a penalty one degree higher than conventional written libel under Section 6 of Republic Act No. 10175. Criminal exposure can include imprisonment, a fine, or both, depending on the governing penalty provisions and the court’s judgment.

The precise sentencing range, eligibility for probation, bail, mitigating or aggravating circumstances, and the effect of later statutory amendments require case-specific computation. A conviction may also include civil liability or damages. Separately, the affected person may pursue an appropriate civil action.

The Supreme Court in Disini ruled that a person should not be punished twice for the same libelous online act under both the Cybercrime Prevention Act and the Revised Penal Code. Other distinct unlawful acts arising from the same incident may nevertheless be charged when their separate elements are present.

Evidence checklist

For a complainant

Original URLs and unedited screenshots
Screen recording showing how the content was accessed
Date and manner of discovery
Full context, comments, captions, and attachments
Witness affidavits from people who received or read it
Proof that readers identified you
Evidence that the statement was false
Evidence connecting the respondent to the account
Records of demands, replies, corrections, and reposts
Proof of residence or office and other venue facts
Evidence of actual harm, if claiming damages

For a respondent

Complete original thread—not selected excerpts
Source materials and verification notes
Evidence supporting truth or substantial truth
Proof of good motives and justifiable ends
Communications showing performance of a duty
Official records supporting fair reporting
Requests for comment and the complainant’s response
Account-access logs or evidence of compromise
Dates relevant to discovery and prescription
Evidence concerning proper venue
Copies of every subpoena, filing, and proof of service

Keep a read-only master copy and a separate working copy. Document who collected each item, when it was collected, and how it was stored.

Common mistakes

Waiting for the post to “go viral” before preserving or reporting it
Counting the one-year period without investigating the discovery date
Filing wherever the complainant happens to be when venue facts point elsewhere
Submitting cropped screenshots without URLs, dates, context, or authentication
Assuming an account name conclusively proves authorship
Treating truth as an automatic and complete defense
Assuming every opinion is protected merely because it begins with “I think”
Naming multiple respondents without evidence of each person’s participation
Ignoring a prosecutor’s subpoena or submitting only an unsworn letter
Using a motion to dismiss instead of a required counter-affidavit
Deleting or editing evidence before preserving it
Reposting the accusation in a demand letter, public response, or fundraising appeal
Pressuring the platform, witnesses, employer, or family of the opposing party
Assuming a takedown, apology, or settlement automatically terminates a criminal case
Paying an unofficial “filing,” “fixing,” or “dismissal” fee

When legal help is urgent

Consult a Philippine criminal-law or cybercrime lawyer immediately if:

the one-year period may expire soon;
you received a subpoena, warrant, Information, or arraignment notice;
police or NBI personnel request access to a device or account;
the account is anonymous, hacked, or located abroad;
the complainant is a public official, journalist, company, or public figure;
several people reposted or edited the content;
the case involves confidential records, children, sexual content, threats, or another possible offense;
you need urgent preservation or disclosure of platform data;
there is uncertainty about venue or the discovery date; or
arrest, detention, search, or seizure appears imminent.

If officers present a warrant, remain calm, ask to read it, note its court, scope, and validity period, and contact counsel. Do not obstruct its lawful execution, but do not consent to a broader search merely because a narrower warrant exists. Cybercrime searches, disclosure orders, interceptions, and examination of computer data are governed by the Constitution, Republic Act No. 10175, and the Supreme Court’s Rule on Cybercrime Warrants.

Frequently asked questions

Can I file because someone insulted me online?

Possibly, but insult alone is not enough. The statement must meet all elements of libel, including a defamatory imputation, identification, publication, malice where required, and use of a computer system.

Is a private message cyber libel?

It may lack publication if it was sent only to the person allegedly defamed. If it was sent to a group chat or copied to another person, publication may exist. Privilege and context must still be considered.

Is a screenshot enough?

Not necessarily. It may show what appeared on a screen, but authorship, authenticity, completeness, publication, and timing may still need proof.

Can a deleted post still support a case?

Yes. Deletion does not necessarily undo prior publication. Copies, witnesses, platform data, cached material, or authenticated records may establish what existed.

Does sharing a post automatically make me liable?

No. Disini rejected automatic cyber-libel liability for people who merely receive and react to online content. A separate caption, new accusation, or independent republication requires its own factual and legal assessment.

Does an apology end the case?

Not automatically. An apology, correction, or retraction may affect the parties’ decisions, damages, or evaluation of good faith, but it does not by itself erase the offense or compel prosecutors or courts to terminate proceedings.

Can the complainant file both criminal and civil claims?

Potentially. Libel may result in criminal and civil liability, but the appropriate remedy, deadlines, and procedural relationship between the actions must be assessed carefully.

How long does the complainant have?

Cyber libel generally prescribes one year from discovery by the offended party, authorities, or their agents. Determining discovery and interruption can be fact-sensitive, so neither side should rely on a rough date calculation.

Which court hears cyber libel?

Republic Act No. 10175 places cybercrime prosecutions within Regional Trial Court jurisdiction, with designated cybercrime courts where applicable. The correct territorial venue remains a separate requirement.

Official legal sources

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Cyber libel depends heavily on the exact words, evidence, parties, dates, and venue. The controlling sources and procedures were checked as of September 11, 2026.