Quick answer

A cyber libel case may arise when an identifiable person or organization is dishonored, discredited, or exposed to contempt through a defamatory online statement published with legally sufficient malice. The prosecution must prove the defamatory imputation, publication to another person, the complainant’s identity, malice, the accused’s authorship, and use of a computer system.

If you are filing, preserve the online evidence immediately and bring a properly supported complaint-affidavit to the appropriate prosecutor’s office. If you are accused, do not ignore a subpoena: obtain the complete complaint and attachments, preserve your own records, and submit a sworn, evidence-backed counter-affidavit within the deadline stated in the subpoena.

Time is critical. The Supreme Court now holds that cyber libel prescribes one year from its discovery, subject to the rules on interruption of prescription. Do not assume that an old post, later edit, repost, or continuing online availability automatically answers the prescription question; the publication history and procedural record must be examined.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the act is committed through a computer system or similar means. This can include a social-media post, online article, blog entry, email sent to third parties, public comment, digital image with text, or comparable electronic publication.

Under Articles 353 to 355 of the Revised Penal Code, the prosecution generally must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, or circumstance that tends to dishonor, discredit, or expose someone to contempt.
Publication. At least one person other than the complainant received, saw, or understood the statement. A private message sent only to the person criticized ordinarily lacks this element, although sending it to a group or copying another person may constitute publication.
Identifiability. The complainant was named or could reasonably be identified from the words, images, surrounding circumstances, or audience’s knowledge.
Malice. The applicable kind of malice depends on the nature of the statement, the occasion, and whether the complainant is a private person, public officer, or public figure.
Online publication by the accused. Evidence must connect the accused to the statement and show that a computer system or similar technology was used.

The statement is evaluated in its full context and in the meaning ordinary readers would reasonably give it. Labels such as “opinion,” “allegedly,” “for awareness,” or “forwarded only” do not automatically prevent liability when the post conveys a defamatory assertion of fact.

Important limits and defenses

The person must be identifiable

A complainant need not always be named, but vague criticism of a large, undefined group may not identify a particular person. Identification may nevertheless be established through a photograph, job title, initials, tagged account, location, prior discussion, or other contextual clues.

Publication must reach somebody else

The offense requires communication to a third person. The complainant’s own receipt of a one-to-one message is generally insufficient by itself. Preserve evidence showing who could access the post, who actually saw it, and whether the account or group was public or restricted.

Truth alone is not always enough

Article 354 generally presumes a defamatory imputation malicious when good intention and justifiable motive are not shown, even if the allegation is true. Article 361 allows proof of truth in the circumstances recognized by law, but a successful defense may also require good motives and justifiable ends. Anyone planning to publish an accusation should verify it, rely on primary records, separate fact from opinion, and avoid unnecessary personal attacks.

Privileged communications

The Revised Penal Code recognizes qualified privileges, including:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without added comments, of a non-confidential judicial, legislative, or other official proceeding or official act.

Fair comment on matters of public interest may also receive constitutional protection. Qualified privilege is not absolute: it can be defeated by proof of actual malice. Statements made in properly relevant judicial proceedings may receive stronger protection, but relevance, context, and the speaker’s role matter.

Public officers and public figures

For defamatory statements concerning a public officer’s official conduct or a public figure’s public activities, constitutional free-speech principles generally require proof of actual malice—knowledge that the statement was false or reckless disregard of whether it was false. Recklessness requires more than an ordinary mistake or inadequate investigation; it concerns a high degree of awareness of probable falsity.

This protection is not a license to fabricate accusations. It may also be narrower when the statement concerns a purely private matter unrelated to the person’s public role. The Supreme Court’s discussion of the elements and actual-malice standard appears in Disini v. Secretary of Justice.

Likes, shares, reactions, and comments

In Disini, the Supreme Court upheld cyber libel as to the original author but invalidated its application to people who merely receive and react to the post. The Court also invalidated aiding or abetting liability in relation to online libel.

That does not make every later action risk-free. A person who writes a new defamatory caption, accusation, or comment may become the original author of that separate content. A materially altered republication also requires its own factual and legal analysis.

No double prosecution for the same online libel

The same defamatory material cannot be punished both as traditional libel under the Revised Penal Code and as cyber libel under Republic Act No. 10175 when they are legally the same offense. Disini treated dual charging in that situation as contrary to the protection against double jeopardy.

How to file a complaint

1. Preserve the evidence before contacting the poster

Save more than a cropped screenshot. Preserve:

the complete post, article, comment, image, video, or message;
the full URL and account or profile address;
visible dates, times, usernames, captions, edits, and engagement;
screenshots showing the surrounding conversation and page identity;
a screen recording that opens the profile, URL, and content;
the original downloaded files, emails, message exports, or webpage copies;
the device on which the content was received or viewed;
names and sworn accounts of people who saw or received it;
records showing when you first discovered the publication;
evidence identifying the account holder or author; and
proof of falsity, reputational harm, good standing, or actual malice where relevant.

Keep original files unchanged. Make working copies, retain metadata, and record who collected each item and when. Electronic evidence normally must be authenticated; screenshots with no reliable connection to the account, author, date, or original source may be challenged.

If content may disappear or subscriber information is needed, consult counsel or a cybercrime investigator promptly. Republic Act No. 10175 contains preservation and disclosure mechanisms for computer data, but compulsory disclosure of protected data generally requires lawful process.

2. Evaluate every element before accusing anyone

Identify the exact words alleged to be defamatory. Explain:

what they mean in context;
why they concern you;
who received or saw them;
why they are false or unlawfully defamatory;
what evidence connects the respondent to the account or publication;
why malice or actual malice can be established; and
when and where the publication and resulting damage occurred.

A mere denial or a bare assertion that the post was “hurtful” is not enough. Insults may be offensive without satisfying every element of libel, while an indirect or sarcastic statement may still be actionable when its factual meaning is defamatory.

3. Determine the proper venue

Cybercrime cases are handled by designated cybercrime courts. Venue can depend on where an element occurred, where part of the computer system used was situated, or where legally cognizable damage took place. Traditional written-defamation venue rules and the complainant’s status or residence may also become relevant.

Online accessibility everywhere does not necessarily permit filing anywhere. Use concrete facts—residence at the time, place of authorship or upload, location of devices or systems, and place of damage—and have counsel confirm the proper city or provincial prosecution office before filing.

4. Prepare and file the complaint-affidavit

The complaint normally begins before the appropriate Office of the City Prosecutor, Office of the Provincial Prosecutor, or other prosecutor authorized by law. Investigation assistance may also be sought from the cybercrime units of the National Bureau of Investigation or Philippine National Police, which Republic Act No. 10175 identifies as cybercrime law-enforcement authorities.

The filing should ordinarily include:

the signed and sworn complaint-affidavit;
sworn witness affidavits;
properly marked documentary and electronic evidence;
proof relevant to identity, publication, falsity, malice, venue, and timeliness;
the required investigation data form; and
the original and required copies for the respondents, following the receiving office’s current instructions.

The DOJ’s official checklist is available on its Filing of Complaint for Preliminary Investigation page. Confirm office hours, copy requirements, accepted electronic media, and any e-filing procedure directly with the receiving office.

5. Participate in preliminary investigation

Under DOJ Department Circular No. 15, series of 2024, prosecutors apply the standard of prima facie evidence with reasonable certainty of conviction. The evidence should be admissible, credible, capable of preservation and presentation, and sufficient—if left uncontroverted—to establish every element and the respondent’s identity.

The prosecutor may require counter-affidavits and, when allowed, further affidavits or clarification. Follow every written deadline and service instruction. If the prosecutor finds the required evidentiary basis, an Information may be filed in the proper court; otherwise, the complaint may be dismissed. Available reconsideration or review remedies have short and rule-specific periods, so obtain the resolution and legal advice immediately.

How to defend a complaint or criminal case

1. Do not ignore the subpoena

Record the date and manner of receipt. Obtain a complete copy of the complaint-affidavit, witness affidavits, electronic evidence, and attachments. The subpoena or prosecutor’s order should state the deadline and filing requirements. Seek an extension before the deadline only when the governing rules and prosecutor permit it; never assume an informal request suspends the period.

2. Preserve your evidence and accounts

Do not delete, edit, deactivate, fabricate, or ask others to alter relevant content. Preserve:

original drafts and complete conversation threads;
account-access and security records;
devices and original files;
sources, official records, interview notes, and verification efforts;
timestamps and evidence of who controlled the account;
the unedited context of quoted words, images, or videos;
privacy settings and audience information; and
evidence supporting truth, good motive, privilege, fair comment, lack of identification, lack of publication, or lack of malice.

Deletion may destroy favorable context without preventing investigators from obtaining retained copies.

3. Build the counter-affidavit around the missing elements

A useful counter-affidavit answers the evidence specifically. Depending on the facts, defenses may include:

you did not author, upload, authorize, or control the disputed publication;
the complainant was not reasonably identifiable;
no third person received the communication;
the words are not defamatory when read in full context;
the statement is protected opinion or fair comment rather than a false factual assertion;
the factual allegation is supported by admissible records and was made with good motives and justifiable ends;
the communication was privileged;
actual malice cannot be proved where that standard applies;
the electronic material is incomplete, altered, unauthenticated, or not attributable to you;
venue is improper;
the charge has prescribed; or
the case duplicates a prosecution for the same libelous publication.

Avoid a purely argumentative response. Attach sworn witness statements and the underlying records while they are still available.

4. If an Information has already been filed

Obtain criminal-defense counsel immediately. Counsel should inspect the Information and record for jurisdiction, venue, prescription, sufficiency of allegations, duplicity, prior jeopardy, and the admissibility and integrity of electronic evidence. Some objections must be raised before arraignment or may be waived.

Do not miss arraignment, bail, pre-trial, or hearing dates. Do not contact the complainant, witnesses, judge, or prosecutor in a way that could be viewed as intimidation or interference.

Prescription: the one-year deadline

In its 2023 ruling and its April 8, 2026 resolution in Causing v. People, the Supreme Court held that cyber libel falls within the Revised Penal Code rule under which libel prescribes in one year. The Court affirmed that the period runs from discovery of the offense. See the Supreme Court’s official case announcement and the 2023 decision.

Calculating the deadline may require determining:

when the complainant or authorities first discovered the publication and its author;
whether a legally sufficient proceeding interrupted prescription;
whether the content was merely still accessible or was actually republished;
whether an edit created a materially new publication; and
whether the filing was made in the proper office and within the period.

Because a mistaken calculation can end a complaint or forfeit a defense, seek advice well before the apparent anniversary date.

Possible penalties and civil liability

Cyber libel carries a penalty one degree higher than traditional libel. Depending on the judgment and applicable rules, imprisonment can fall within prisión correccional maximum to prisión mayor minimum, or approximately four years, two months and one day to eight years.

Imprisonment is not automatic. The Supreme Court has confirmed that a court may impose a fine instead. Under its application of the amended Revised Penal Code, the statutory fine range for online libel is ₱40,000 to ₱1,500,000. See Penalosa v. Ocampo. The actual sentence depends on the charge proved, modifying circumstances, applicable sentencing rules, and judicial discretion.

A complainant may also pursue civil damages associated with the offense or, where legally available, an independent civil action. The timing, reservation, venue, and interaction of criminal and civil claims should be evaluated before either case is filed.

Common mistakes

Filing based only on cropped screenshots.
Waiting because the post remains online, despite the one-year prescription rule.
Suing everyone who liked or shared a post without identifying who authored the allegedly defamatory words.
Treating every insult, criticism, or negative review as criminal libel.
Assuming truth by itself always defeats the case.
Ignoring privilege, public-interest context, or the actual-malice requirement.
Filing wherever the post was accessible instead of establishing proper venue.
Naming an account holder without evidence connecting that person to the publication.
Deleting posts or messages after receiving a demand or subpoena.
Repeating the accusation publicly while discussing the case.
Missing a subpoena, affidavit, arraignment, appeal, or review deadline.
Using settlement discussions to threaten, extort, or demand something unrelated to legitimate relief.

When legal help is urgent

Contact a Philippine lawyer promptly if:

the one-year period may expire soon;
content or account data is disappearing;
the poster is anonymous and provider records may be needed;
you received a subpoena, warrant, prosecutor’s resolution, Information, arrest process, or court notice;
the complaint involves a journalist, public officer, public figure, whistleblower, workplace report, or official proceeding;
multiple posts, edits, reposts, jurisdictions, or respondents are involved;
the publication includes private sexual material, threats, stalking, identity theft, or unauthorized account access, which may involve other offenses; or
settlement communications contain threats or coercion.

The Public Attorney’s Office may be available to qualified indigent persons, subject to its governing rules and conflict checks.

Frequently asked questions

Is a demand letter required before filing?

Not generally as an element of cyber libel. A carefully drafted demand may help seek correction or removal, but it does not replace a timely complaint or automatically stop prescription.

Does deleting or apologizing erase criminal liability?

No. Removal, correction, or apology does not automatically extinguish an offense already completed. It may still be relevant to intent, damages, settlement, or sentencing, depending on the circumstances.

Can a private group chat support a case?

Yes, if the defamatory statement was communicated to at least one person other than the complainant and the other elements are present. A restricted audience affects the evidence and possible harm, but does not necessarily eliminate publication.

Can an anonymous account be charged?

A case requires identification of the responsible person, not merely the screen name. Investigators may use lawful preservation, disclosure, and cybercrime-warrant procedures, but attribution must still be supported by admissible evidence.

Is a screenshot enough?

Sometimes it can form part of the proof, but a screenshot alone may not establish authenticity, authorship, publication, date, completeness, or context. Preserve the URL, original files, device, metadata, witnesses, and account-identification evidence.

Are opinions protected?

Pure opinion and fair comment receive substantial protection, especially on public matters. Calling an accusation an “opinion,” however, does not protect an implied or express false assertion of fact.

Can sharing a post make me liable?

A bare like, reaction, or simple receipt is not treated as cyber libel under Disini. Writing your own defamatory caption or comment can create separate exposure because you may be the original author of that new statement.

Where can a cybercrime incident be reported?

The NBI and PNP maintain cybercrime units, while the DOJ Office of Cybercrime coordinates cybercrime matters. An investigative report is not necessarily the same as filing the complaint-affidavit required to begin prosecution, so confirm the correct next step and venue.

Official legal sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Cyber libel depends heavily on the exact words, publication history, parties, evidence, venue, and procedural record. Consult a Philippine lawyer about your specific matter. Sources checked as of September 15, 2026.