Quick answer

To file a Philippine cyber libel case, act quickly: preserve the complete online publication, identify the author and witnesses, document when the post was discovered, and file a sworn complaint with supporting evidence before the proper prosecutor’s office. Cyber libel generally prescribes one year from discovery by the offended party, the authorities, or their agents—not automatically from the date of posting. Filing the complaint or Information interrupts prescription. Because the discovery date can become a disputed fact, waiting is risky.

To defend a case, do not ignore a prosecutor’s subpoena, court summons, warrant, or arraignment notice. Preserve the original post and its context, secure proof concerning authorship and account access, and submit a fact-specific counter-affidavit by the stated deadline. Possible defenses include lack of publication, lack of identification, absence of defamatory meaning, privileged communication, fair comment on matters of public interest, truth accompanied by good motives and justifiable ends where required, lack of actual malice in applicable public-official or public-figure cases, prescription, improper venue, or failure to connect the respondent to the account.

A complaint does not itself establish guilt. The prosecutor first determines whether the evidence meets the governing threshold for filing a case. If an Information is filed, the prosecution must still prove every element beyond reasonable doubt.

What cyber libel means

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on written libel to defamatory material published through a computer system or a similar digital means. This may include material posted through social-media platforms, websites, blogs, online forums, messaging services, or other internet-enabled systems.

Cyber libel is not every insult, harsh opinion, negative review, or false online statement. A prosecutable case ordinarily requires proof of:

A defamatory imputation. The statement attributes a crime, vice, defect, condition, status, or act or omission that tends to dishonor, discredit, or expose a person to contempt.
Publication. At least one person other than the person defamed received, saw, or understood the statement.
Identification. The complainant was named or was identifiable from the words, images, circumstances, or surrounding facts.
Malice. Malice may be presumed from a defamatory publication unless a recognized privilege or another applicable rule changes the analysis.
Use of a computer system. The allegedly libelous matter was published online or through comparable information and communications technology.
Responsibility of the accused. Admissible evidence links the respondent to the publication—not merely to a device, account name, personal dispute, or suspected motive.

Courts assess the publication as a whole and in its actual context. Meaning can depend on language, tone, images, captions, audience, surrounding posts, and facts known to readers. Whether a statement is an assertion of fact, rhetorical exaggeration, satire, or protected opinion may therefore require careful examination.

Who may be liable

The Supreme Court held in Disini v. Secretary of Justice that cyber libel constitutionally applies to the original author of the online post, while Section 5 on aiding or abetting was unconstitutional as applied to people who merely receive, react to, or share a libelous post.

That protection should not be misunderstood. A person who writes a new defamatory caption, adds an accusation, materially adopts the accusation as their own, or creates a separate defamatory publication may face liability for their own words and conduct. Administrators, editors, account owners, employees, and corporate officers are not automatically liable merely because of their title or relationship to a page; their actual participation and the applicable law must be proved.

An account name or screenshot alone may not establish authorship. Relevant evidence may include admissions, authenticated records, account-control information, testimony, device evidence lawfully obtained, consistent identifying details, and the circumstances of publication.

The one-year filing period

In Causing v. People, G.R. No. 258524, the Supreme Court ruled that cyber libel prescribes in one year under Articles 90 and 91 of the Revised Penal Code. The Court abandoned the longer period previously applied in Tolentino v. People.

The one-year period generally begins when the allegedly libelous publication is discovered by:

the offended party;
the authorities; or
their agents.

If publication and discovery occurred on the same day, that day ordinarily supplies the relevant starting point. If discovery was later, the actual discovery date must be supported by evidence. The accused may challenge a claimed late-discovery date, particularly where earlier messages, comments, reports, screenshots, demand letters, or public responses show prior knowledge.

The filing of the complaint or Information interrupts the prescriptive period under the applicable rules. Proceedings that terminate without conviction or acquittal, or that are unjustifiably stopped for a reason not attributable to the accused, may affect how the period runs again. Prescription is often a factual defense rather than something a court can decide from the face of the Information alone.

Do not treat the one-year period as permission to wait. Platforms delete content, accounts disappear, records are overwritten, and subscriber or traffic information may be retained only for limited periods. Obtain legal advice as soon as the publication is discovered.

Before filing: evaluate the statement carefully

A strong complaint should answer each of these questions with evidence:

What exact words, image, audio, or video are alleged to be defamatory?
What is the complete post—not merely the selected sentence?
Where and when was it published?
When and how was it first discovered?
Who other than the complainant saw, heard, or received it?
How would an ordinary reader identify the complainant?
What facts show that the respondent authored or controlled the publication?
Why is the imputation false or legally defamatory?
Does the statement concern a public officer, public figure, public controversy, official proceeding, or matter of public interest?
Could the communication be privileged?
What evidence establishes malice if actual malice must be proved?
What injury resulted, and what documents support it?
Why is the chosen prosecutor’s office and eventual court the proper venue?

Do not file merely because a post is embarrassing, offensive, or unfair. Conversely, do not assume that labeling an accusation “opinion,” adding “allegedly,” asking it as a question, or copying another source automatically prevents liability. Courts look at substance and context.

Evidence to preserve

Preserve evidence before asking the poster or platform to remove the material.

Take full-page screenshots showing the account name, complete text, images, comments, date and time, visible engagement, and URL.
Make a screen recording showing how the publication is accessed from the profile, page, group, website, or message thread.
Save the original webpage, post, photograph, video, audio, attachments, and downloadable files without editing them.
Record the exact URL, account identifier, publication date, discovery date, and access date.
Preserve the original phone or computer used to view or receive the material.
Keep messages notifying you about the post and identify the people who first sent or showed it to you.
Ask witnesses to retain their own copies and prepare truthful affidavits describing when and how they saw the publication.
Preserve communications that may prove authorship, admission, motive, prior verification, correction, retraction, or refusal to correct.
Keep documents refuting the accusation and records of actual harm, such as lost engagements, employer communications, client cancellations, or medical treatment.
Maintain an evidence log stating who collected each item, when it was collected, and whether it was altered or transferred.

Screenshots are useful but may be challenged as incomplete, fabricated, or unauthenticated. Originals, metadata, testimony, and properly obtained platform or service-provider records can be important. Do not hack an account, impersonate another person, secretly obtain protected data, or fabricate a conversation to “strengthen” the case.

How to file a criminal complaint

1. Identify the proper office and venue

Cybercrime offenses fall within the jurisdiction of Regional Trial Courts, including designated cybercrime courts. The complaint ordinarily begins with the prosecutor’s office that has territorial authority over the alleged offense. Venue is jurisdictional in criminal cases and depends on the legally relevant acts and allegations.

Online accessibility everywhere does not necessarily make every city or province a proper venue. The complainant should be prepared to show where an essential element occurred and why that location is legally sufficient. Special venue rules governing libel may also become relevant depending on whether the offended party is a private person or public officer and where that person resided or held office at the relevant time. Obtain case-specific advice before choosing a filing location.

2. Prepare a sworn complaint-affidavit

The complaint-affidavit should state facts personally known to the complainant, including:

the parties’ identities and addresses, if known;
the exact publication and its complete context;
the date and place of publication, so far as supported;
the date, manner, and circumstances of discovery;
how the complainant is identifiable;
who received or saw the publication;
the factual basis for attributing it to the respondent;
why it is defamatory and false or malicious;
facts relevant to privilege, public interest, or actual malice;
the resulting injury; and
the basis for venue.

Attach properly marked affidavits and supporting records. Do not exaggerate circulation, invent witnesses, or state speculation as personal knowledge. A knowingly false sworn statement may create separate legal exposure.

The DOJ’s published filing checklist for preliminary investigation calls for an Investigation Data Form, the complaint-affidavit, witness affidavits, and supporting documents in the required number of copies. Local offices may have additional administrative requirements, so confirm the current checklist directly with the receiving prosecutor’s office.

3. Consider law-enforcement assistance

The NBI and PNP are designated cybercrime law-enforcement authorities under Republic Act No. 10175. Their cybercrime units may assist in investigating account attribution, preserving evidence, and seeking appropriate judicial warrants.

A private complainant cannot compel a platform to disclose protected subscriber, traffic, or content data simply by sending a demand. Disclosure and examination of protected computer data are governed by the statute, constitutional safeguards, and the Supreme Court’s cybercrime-warrant rules. Law-enforcement authorities may seek judicial authority where the legal requirements are met.

4. Participate in preliminary investigation

The prosecutor may dismiss a facially insufficient complaint or issue a subpoena directing the respondent to submit a counter-affidavit and supporting evidence. The DOJ’s current National Prosecution Service rules require evidence sufficient to establish a prima facie case with reasonable certainty of conviction, including consideration of whether the evidence is admissible, credible, preservable, and capable of proving every element.

Follow the exact deadline and instructions in every subpoena or order. Extensions are not automatic. The investigating prosecutor may conduct a clarificatory hearing but preliminary investigation is principally affidavit-based; parties generally should not assume there will be a full trial or cross-examination at this stage.

If the prosecutor finds the required evidentiary basis, an Information may be filed in the proper RTC. The court independently determines whether probable cause exists for issuing a warrant of arrest.

How to respond or defend

1. Treat a subpoena as urgent

Record the date and manner of service. Consult a lawyer immediately and calendar the stated deadline. A failure to submit a counter-affidavit may cause the prosecutor to resolve the complaint on the complainant’s evidence alone.

Do not contact, threaten, shame, or pressure the complainant or witnesses. Do not ask anyone to delete evidence or coordinate a false account of events.

2. Secure the complete record

Preserve the accused post, drafts, links, source material, research notes, communications, access logs, and the device or account involved. Capture surrounding posts and the discussion that supplied context. If the content has been edited or removed, record what happened and when; do not invent a replacement.

If several people had access to the account, document who had credentials, roles, devices, and publishing authority. Do not alter logs or manufacture an “account hacked” story.

3. Build defenses around the required elements

A counter-affidavit should address the prosecution’s evidence element by element. Depending on the facts, defenses may include:

No authorship or participation. The evidence does not reliably connect the respondent to the account or publication.
No publication to a third person. The communication was not received or understood by anyone other than the complainant.
No identification. Readers could not reasonably identify the complainant.
No defamatory imputation. The words, read as a whole and in context, do not carry the alleged defamatory meaning.
Protected opinion or fair comment. The publication is recognizable commentary based on disclosed or established facts, particularly on a matter of public concern, rather than a knowingly or recklessly false factual accusation.
Privileged communication. The statement falls within an absolute or qualified privilege recognized by law.
Truth with the legally required justification. Under Article 361, proof of truth does not operate identically in every case. Where the imputation concerns an act or omission that is not a crime, truth must be accompanied by good motives and justifiable ends. Special rules apply to statements concerning government employees and matters related to official duties.
Absence of actual malice. Where constitutional protections for discussion of public officials, public figures, or public matters apply, the prosecution may have to establish knowledge of falsity or reckless disregard for truth—not merely ill will, mistake, or failure to satisfy an ideal standard of reporting.
Good-faith reporting and verification. Source records, requests for comment, corrections, and the basis available at publication may be relevant to malice, although “I relied on someone else” is not an automatic defense.
Prescription. More than one year elapsed from the legally supported discovery date without an interrupting filing.
Improper venue or defective Information. The charging document fails to allege facts establishing territorial jurisdiction or another legally required matter.
Protected reaction or sharing. The respondent merely received, reacted to, or shared another person’s post without becoming the author of a separate defamatory imputation, subject to the precise conduct proved.

Denial alone is rarely enough. Attach admissible documents, witness affidavits, original source material, and other records that directly answer the accusation.

4. Respond properly if an Information is filed

After filing in court, the accused may receive a summons, warrant, or notice. A person facing arrest should coordinate surrender and bail through counsel rather than evade authorities. Bail procedure and amount depend on the charge, court orders, and individual circumstances.

Before arraignment, counsel should assess whether a motion to quash or another remedy is available. Common issues may include prescription apparent from or provable beyond the Information, lack of jurisdiction, improper venue, double jeopardy, or failure to charge an offense. Filing the wrong motion or taking an improper appeal can delay the case without protecting the accused.

At arraignment, the accused enters a plea. Pre-trial then identifies admissions, issues, witnesses, and exhibits before trial. A conviction requires proof beyond reasonable doubt, and appeal periods are short.

Privilege, public interest, and actual malice

Some communications receive special protection because society benefits from candid reporting, petitioning, official proceedings, and fair discussion of public affairs.

Article 354 of the Revised Penal Code recognizes qualified privileges that include:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts, subject to statutory conditions.

Qualified privilege does not give unlimited permission to accuse. Excessive publication, irrelevant insults, fabrication, bad faith, or proof of actual malice can defeat it.

Public officials and public figures generally receive less protection from criticism concerning public conduct than private individuals. But freedom of expression does not protect knowingly or recklessly false factual accusations. “Actual malice” in this setting has a technical meaning: knowledge that the statement was false or reckless disregard of whether it was false. It should not be reduced to personal hostility alone.

Private accusations sent only to an employer, regulator, school, professional body, or other person with a legitimate duty or interest may be privileged, depending on necessity, relevance, audience, manner, and good faith. Posting the same accusation publicly to an unlimited audience may produce a different result.

Retractions, apologies, and settlement

A prompt, clear correction or retraction may reduce harm and may be relevant to good faith, malice, or damages. It does not automatically erase a completed offense or compel dismissal.

The parties may discuss an apology, correction, takedown, right of reply, or financial settlement through counsel. But a criminal case is prosecuted in the name of the People of the Philippines. A complainant’s affidavit of desistance does not automatically terminate it once filed; the prosecutor or court determines the legal effect.

Never offer money in exchange for false testimony, destruction of evidence, or evasion of lawful process. Put legitimate settlement terms in writing and address both criminal and civil consequences expressly.

Civil liability and damages

A cyber libel publication may produce civil liability as part of the criminal case. Under Rule 111, the civil action arising from the offense is generally deemed instituted with the criminal action unless it is waived, reserved when legally permitted, or previously filed.

Separate or independent civil remedies may also be considered under the Civil Code, including Article 33 on defamation and Articles 19, 20, 21, and 26 where their requirements are met. Different causes of action may have different elements, defenses, prescriptive periods, and evidentiary standards. Filing parallel proceedings without analyzing these rules can cause procedural complications.

Damages are not automatic. The claimant should preserve proof of reputational, emotional, professional, or financial injury. Courts assess the nature and reach of the publication, the parties’ conduct, the evidence of harm, and the governing law.

Common mistakes

Waiting because an old source says cyber libel prescribes in 12 or 15 years. The controlling Supreme Court rule is generally one year from discovery.
Saving only a cropped screenshot with no URL, date, context, or witness.
Assuming that a username proves who posted the content.
Filing where the complainant happens to prefer without establishing venue.
Quoting only the most offensive words while omitting context that changes their meaning.
Treating every insult or negative opinion as criminal libel.
Assuming that truth alone always ends the inquiry.
Assuming that adding “allegedly,” a question mark, or a disclaimer neutralizes a factual accusation.
Naming page administrators, employers, editors, or relatives without proof of their participation.
Ignoring a prosecutor’s subpoena or submitting an unsworn narrative instead of a supported counter-affidavit.
Deleting posts, messages, logs, or devices after learning of a complaint.
Publicly arguing the case online and creating new publications, admissions, threats, or harassment evidence.
Secretly accessing another person’s account or manufacturing screenshots.
Treating an apology or affidavit of desistance as an automatic dismissal.

When legal help is urgent

Consult a Philippine criminal-law or media-law practitioner immediately if:

the one-year period may expire soon;
the account is anonymous or evidence may disappear;
you received a prosecutor’s subpoena with a response deadline;
a warrant, hold-departure issue, or arrest is possible;
an Information has been filed or arraignment scheduled;
the publication concerns a public official, election, public funds, journalism, whistleblowing, or an official proceeding;
several people operated the account or publication;
the complainant or respondent is abroad;
platform records or forensic examination may be necessary;
the same facts may involve threats, identity theft, privacy violations, gender-based online harassment, child-protection laws, or other offenses; or
settlement discussions involve payment, takedown, retraction, or an affidavit of desistance.

Those who cannot afford private counsel may inquire with the Public Attorney’s Office about eligibility. Journalists and media organizations should consider counsel familiar with constitutional protections for speech and press.

Frequently asked questions

Is every false Facebook post cyber libel?

No. The prosecution must prove all required elements, including a defamatory imputation, publication, identification, use of a computer system, malice under the applicable standard, and the accused’s responsibility for the publication.

Does the one-year period begin when the post was uploaded?

Not necessarily. Under Causing v. People, it begins when the publication is discovered by the offended party, the authorities, or their agents. Publication and discovery may occur on the same date, but a claimed later discovery date is a factual matter that may be challenged.

Can a “like,” reaction, or simple share lead to conviction?

The Supreme Court’s Disini ruling protects people from liability under the Cybercrime Prevention Act’s aiding-or-abetting provision merely for receiving, reacting to, or sharing a libelous post. Liability may differ if the person wrote or adopted a separate defamatory accusation.

Is a private message cyber libel?

It may satisfy publication only if a third person other than the person defamed received or understood it. Depending on the recipient, purpose, audience, and good faith, privilege may also apply.

Can an anonymous account be charged?

A complaint may initiate investigation, but the prosecution must ultimately establish the responsible person through admissible evidence. Suspicion, motive, or ownership of a similarly named account is not enough for conviction.

Is truth a complete defense?

Not in every factual setting. Article 361 imposes additional requirements in certain cases, including good motives and justifiable ends. Statements involving government employees and official duties are subject to specific rules. Legal advice is important before relying solely on truth.

Does deleting the post prevent a case?

No. Publication may already have been completed and copies or witnesses may remain. Deletion can also complicate the defense if it destroys helpful context or appears to be evidence suppression. Preserve an accurate copy and obtain advice before changing content.

Can one publication support both ordinary libel and cyber libel charges?

The Supreme Court has said that online libel and ordinary written libel are essentially the same offense committed through different means. Punishing the same defamatory material under both provisions can raise double-jeopardy concerns. A genuinely separate print or online republication requires its own factual and legal analysis.

Will the accused automatically be jailed?

No. A complaint is followed by preliminary investigation, and any filed Information must proceed through court. The accused is presumed innocent and conviction requires proof beyond reasonable doubt. The possible sentence, availability and amount of bail, and whether a court may impose a fine instead of imprisonment depend on the law, the charge, the evidence, and the court’s judgment.

Can the complainant withdraw the case?

The complainant may execute an affidavit of desistance or enter a lawful settlement, but neither automatically binds the prosecutor or court. Criminal proceedings are brought in the name of the People, and dismissal remains subject to legal and judicial requirements.

Official legal sources

This article provides general legal information, not legal advice or an attorney-client relationship. Cyber libel outcomes depend on the exact words, complete context, evidence, discovery date, identity of the parties, venue, and procedural history. Official sources and current procedures were checked as of September 12, 2026.