Quick answer

A Philippine cyber libel case is filed by submitting a sworn complaint and supporting evidence to the proper city or provincial prosecutor. The complainant must show that the respondent authored and published through a computer system an identifiable, defamatory imputation with the legally required malice. If probable cause is found, the prosecutor files an Information in the designated cybercrime Regional Trial Court.

Act quickly. The Supreme Court has definitively ruled that cyber libel prescribes in one year from its actual discovery by the offended party, the authorities, or their agents. Online publication alone does not create presumed or constructive discovery. Filing the proper complaint interrupts the criminal prescriptive period. Record the discovery date and do not assume that a platform report, barangay complaint, demand letter, or informal police inquiry is enough to protect the deadline. Causing v. People, G.R. No. 258524, April 8, 2026.

If you receive a prosecutor’s subpoena, do not ignore it. The filing date stated in the subpoena controls, and the current rules require that it give the respondent at least 10 days from receipt of the subpoena and complaint-affidavit to submit a counter-affidavit. Preserve the complete online material, consult counsel promptly, and avoid posting a public response that could become additional evidence.

What counts as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the prohibited statement is published through a computer system or a similar technology.

The prosecution must establish beyond reasonable doubt:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to cause dishonor, discredit, or contempt.
Publication. The statement was communicated to at least one person other than the person defamed. A public Facebook post is not required; a group chat, restricted post, email, or other online communication may satisfy publication if a third person received it.
Identification. The complainant was named or was sufficiently identifiable from the statement and its context. A nickname, photograph, position, workplace, or surrounding facts may identify someone even if the full name was omitted.
Malice. The applicable kind of malice depends on the complainant, the subject, and whether the communication is privileged.
Use of a computer system or similar means. This includes online publication through computers, mobile phones, social-media platforms, websites, messaging services, and comparable information and communications technology.
Authorship or legally attributable publication by the accused. A screenshot showing an account name does not always prove who controlled the account or made the post. Attribution may require admissions, witnesses, account records, device evidence, surrounding messages, or lawfully obtained subscriber or traffic data.

The Supreme Court identifies the traditional elements as defamatory imputation, publication, identification, and malice. Disini v. Secretary of Justice, G.R. No. 203335, February 11, 2014.

Cyber libel is not established merely because a post is rude, embarrassing, inaccurate, satirical, or hurtful. The exact words, their ordinary meaning, the full conversation, the intended and actual audience, the identity of the subject, and the surrounding circumstances all matter.

General rules on malice, truth, and protected communications

For a private complainant, Article 354 generally presumes malice from a defamatory imputation unless the communication falls within a recognized privilege. That presumption is rebuttable.

The Revised Penal Code expressly recognizes qualified privilege for:

a private communication made to another person in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without added comments, of a nonconfidential judicial, legislative, or other official proceeding, an official statement or speech, or an act performed by a public officer in the exercise of official functions.

Qualified privilege is not automatic immunity. The occasion, recipients, relevance, good faith, unnecessary circulation, and presence of actual malice remain important.

Different constitutional safeguards apply when a statement concerns a public officer’s official conduct, a public figure, or a legitimate matter of public interest. In those situations, the prosecution may have to prove actual malice—knowledge that the statement was false or reckless disregard of whether it was false. Reckless disregard requires more than carelessness; the evidence must support a finding that the speaker entertained serious doubts about the statement’s truth or had a high awareness of probable falsity. Tulfo v. People, G.R. Nos. 187113 and 187230, January 11, 2021.

Truth is not a universal, stand-alone defense. Under Article 361:

truth may be proved when the imputation alleges a crime;
a noncriminal imputation against a government employee may be proved when it concerns the discharge of official duties; and
where Article 361 requires it, the accused must also establish good motives and justifiable ends.

Calling a statement “opinion” does not automatically protect it. Courts examine whether it asserts or implies a provably defamatory fact. Fair comment or an opinion reasonably drawn from established facts on a public matter receives greater constitutional protection, but invented facts do not become protected merely because they are presented as commentary.

Who may be liable for a post, comment, like, or share

The cyber libel provision applies to the original author of the defamatory online statement. In Disini, the Supreme Court invalidated Section 5’s aiding-or-abetting provision as applied to online libel because imposing criminal liability on people who merely like, share, link to, or react to a post would unduly chill expression.

That ruling should not be stretched too far. A person who writes a separate defamatory caption, adds a new accusation, creates a misleading edited image, or makes an independently defamatory comment may become the author of that new material. Liability then depends on the content and evidence, not simply on the platform’s label for the action.

The one-year deadline

Cyber libel prescribes in one year, despite its heavier penalty. The period begins when the allegedly defamatory material is actually discovered by:

the offended party;
the authorities; or
their agents.

The Supreme Court rejected a rule that would automatically treat publication of a public online post as discovery. Actual knowledge is determined from evidence such as a reaction, reply, message, demand letter, threat to sue, report to authorities, or another act showing awareness of the post. Causing v. People, final resolution dated April 8, 2026.

The filing of the criminal complaint or Information interrupts prescription. Cyber libel is not governed by the Rule on Summary Procedure, so a timely complaint for preliminary investigation before the proper prosecutor ordinarily interrupts the period. If proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused, the period may begin running again under Article 91.

A civil action for defamation also has a one-year limitation under Article 1147 of the Civil Code, but its accrual and interruption must be analyzed separately. A criminal filing should not be assumed to preserve every possible civil remedy.

Because one day can decide the issue, obtain legal advice immediately if the discovery date or any interruption of prescription is disputed.

Where to file

A cyber libel criminal action belongs in a designated cybercrime Regional Trial Court in a province or city where:

the offense or any element occurred;
any part of the computer system used was situated; or
any damage to the natural or juridical person took place.

The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of the others. Venue is jurisdictional in criminal cases and must be supported by specific facts, not merely by an allegation that an internet post could be accessed anywhere.

In the usual case, the complainant first files the complaint-affidavit with the city or provincial prosecution office corresponding to a legally supportable venue. If the prosecutor finds sufficient evidence, the Information is filed in the designated cybercrime RTC for that locality.

A complainant may also seek investigative assistance from the PNP Anti-Cybercrime Group, the NBI Cybercrime Division, or the DOJ Office of Cybercrime, particularly when the author is anonymous or platform records must be preserved. Do not assume that making an incident report alone interrupts prescription; confirm that the proper prosecutorial complaint has been filed.

Prior barangay conciliation is generally not required for the criminal cyber libel charge because its prescribed maximum imprisonment and fine exceed the limits in Section 408 of the Local Government Code.

How to file the complaint

1. Preserve the complete online evidence

Before requesting deletion or confronting the author, preserve:

screenshots showing the entire post, comment, caption, image, or video;
the account name, profile details, account or channel URL, and direct post URL;
visible dates, times, privacy settings, reactions, shares, and comments;
a screen recording that opens the profile and post from the platform;
the full conversation or thread, including statements before and after the disputed words;
the original message, email, audio, image, video, or downloaded file;
the device on which the material was received or viewed;
platform notifications, emails, and message headers;
the names and contact details of people who saw the material;
proof of the date and manner of discovery;
evidence connecting the account to the proposed respondent; and
evidence of reputational or financial harm, such as lost clients, employment communications, or witness statements.

Keep unedited originals. Store working copies separately and record who collected each item, when it was collected, and from which device or account. Screenshots can be evidence, but private electronic documents must still be authenticated through proof of their integrity and reliability. The Rules on Electronic Evidence place that burden on the party offering them.

If the post may disappear or the account is anonymous, contact counsel or a cybercrime law-enforcement unit promptly. Service providers retain different data for different periods, and disclosure normally requires lawful process under the Cybercrime Prevention Act and the Rule on Cybercrime Warrants.

2. Prepare a fact-specific complaint-affidavit

The affidavit should state, in chronological order:

the complainant’s and respondent’s names and addresses, if known;
the exact defamatory words or material;
where, when, and through what platform the material was published;
how the complainant is identifiable;
who received or saw it;
why the imputation is defamatory;
facts supporting authorship;
the discovery date;
facts establishing venue;
why any claimed privilege does not apply; and
the supporting evidence attached to each material allegation.

Do not exaggerate circulation, invent witnesses, omit unfavorable context, or describe an inference as a confirmed fact. A knowingly false sworn statement can create separate legal exposure.

3. Follow the current DOJ-NPS filing requirements

Under DOJ Department Circular No. 15, series of 2024, a regular preliminary-investigation complaint is initiated by filing:

the original complaint-affidavit;
two duplicate copies for the official file;
one additional copy for each respondent;
a completed NPS Investigation Data Form;
witness affidavits; and
documentary and other evidence intended to establish prima facie evidence with reasonable certainty of conviction.

Confirm the receiving office’s current filing hours, oath administration, electronic-filing options, and local documentary requirements. Electronic filing is an available alternative under the rules, but availability and implementation should be verified with the particular prosecution office.

4. Attend the preliminary investigation

After screening for form and completeness, the investigating prosecutor may recommend outright dismissal or issue a subpoena. The respondent is given the complaint and attachments and directed to file a counter-affidavit on a stated date that must be at least 10 days after receipt.

The prosecutor may allow a short extension only when the interests of justice require it, such as to obtain counsel, examine voluminous records, or research a novel or technical issue. An allowed extension to submit a responsive pleading may not exceed 10 days.

The respondent may file a countercharge where supported. A reply and rejoinder may be permitted under the circular’s timetable, with the rejoinder as the last pleading. The prosecutor may call a clarificatory hearing, but preliminary investigation is primarily affidavit-based and is not a full trial with ordinary cross-examination.

If the complaint is dismissed or an Information is recommended, an aggrieved party may file a motion for reconsideration within 15 days from receipt of the resolution. A petition for review may be available under the applicable DOJ rules. Once an Information is in court, an administrative appeal does not automatically suspend the criminal proceedings; appropriate relief must also be sought from the trial court.

How to defend a cyber libel complaint

1. Record the subpoena date immediately

Keep the envelope, delivery record, email, and every attachment. Calculate the filing date from the actual subpoena and current DOJ rules, not from an online template. If documents referred to in the complaint are missing or illegible, raise that promptly and in writing.

Failure to submit a counter-affidavit allows the prosecutor to resolve the complaint from the complainant’s evidence. A prosecutor’s subpoena is not itself an arrest warrant, but ignoring it can forfeit the most useful opportunity to answer the case before an Information is filed.

2. Preserve evidence before changing anything

Keep the complete post, drafts, sources, messages with editors or administrators, account-security records, device logs, and the surrounding discussion. Preserve material that supports good faith, truth, privilege, lack of authorship, or a different discovery date.

Do not delete or modify evidence after receiving notice of a dispute. Deletion does not erase an already completed publication and may complicate the defense. Also avoid contacting witnesses to influence their accounts.

3. Test every required element

A counter-affidavit should address the prosecution’s evidence rather than merely deny the accusation. Depending on the facts, issues may include:

the statement was not defamatory in its full context;
no third person received it;
the complainant was not identifiable;
the respondent did not own, control, or use the account;
the screenshot is incomplete, altered, unauthenticated, or attributed to the wrong person;
the statement was privileged;
the statement concerned official conduct or a public matter and actual malice is not proved;
admissible documents establish truth, good motive, and justifiable purpose;
the statement was fair comment based on disclosed or established facts;
the complaint was filed after prescription;
venue is unsupported or improperly laid;
the post predates the effectivity of the Cybercrime Prevention Act;
the respondent merely reacted to or shared another person’s post without authoring the disputed statement; or
the same publication is being impermissibly charged as both ordinary libel and cyber libel.

Do not assume that a bare denial, “freedom of speech,” “I was angry,” “it was only a joke,” or “it is true” is enough. Each defense has factual and legal requirements.

4. Review the Information and court process carefully

If an Information is filed, the judge independently determines whether probable cause exists for issuing a warrant. An arrest warrant is not an automatic consequence of the original complaint.

Counsel should promptly examine:

whether the Information alleges every element;
whether the court is a designated cybercrime court with territorial jurisdiction;
prescription and the alleged discovery date;
duplicative charges or double jeopardy;
the legality of digital searches, seizures, or disclosures;
bail and voluntary-surrender options; and
any ground for a motion to quash before plea.

Cyber libel is bailable before conviction. If a warrant has already been issued, arrange a lawful surrender and bail through counsel rather than evading authorities.

Possible penalties and civil liability

For offenses committed after Republic Act No. 10951 took effect, online libel may be punished by:

imprisonment of prisión correccional in its maximum period to prisión mayor in its minimum period—four years, two months and one day to eight years;
a fine from ₱40,000 to ₱1,500,000; or
both imprisonment and fine.

The penalty applicable to older conduct must be determined from the law in force when the offense was committed.

A court may, in its discretion and after considering the circumstances, impose a fine alone. This is not guaranteed, and imprisonment remains legally available. The Supreme Court confirmed both the fine-only option and the present fine range in People v. Soliman, G.R. No. 256700, April 25, 2023. The underlying adjustment to Article 355 appears in Republic Act No. 10951.

The offended party may also seek civil damages. Under Rule 111, the civil action arising from the offense is ordinarily deemed instituted with the criminal case unless it is waived, reserved when legally permitted, or filed beforehand. Article 33 of the Civil Code also recognizes an independent civil action for defamation. The proper remedy, venue, reservation, proof, and prescriptive period require separate analysis.

Common mistakes

Waiting for the platform to answer before protecting the one-year deadline.
Treating the upload date as automatically identical to the discovery date.
Filing in a convenient city without facts establishing venue.
Submitting cropped screenshots without the URL, account details, date, context, or authenticating witness.
Naming a respondent solely because a profile used that person’s name.
Suing everyone who liked or shared the post despite Disini.
Assuming truth automatically defeats every libel charge.
Assuming all criticism of a public official is criminal.
Publicly threatening, insulting, or doxxing the other side after the dispute begins.
Ignoring a subpoena while waiting for settlement discussions.
Copying an old counter-affidavit template that uses superseded preliminary-investigation deadlines.
Believing an affidavit of desistance automatically ends the criminal case. The prosecutor or court, not the private complainant alone, controls the prosecution.

When legal help is urgent

Contact a Philippine criminal-law or cybercrime practitioner immediately when:

the one-year period may expire soon;
the account is anonymous or evidence is being deleted;
a prosecutor’s filing date is approaching;
the complaint concerns a journalist, public official, public figure, whistleblower, or confidential source;
law enforcement seeks access to a phone, computer, account, or password;
an Information, hold-departure issue, or arrest warrant already exists;
several cases have been filed over the same publication;
the post contains separate threats, sexual material, personal data, impersonation, or extortion; or
either side is considering a settlement that includes admissions, retraction, payment, or withdrawal of claims.

A qualified person who cannot afford private counsel may ask the Public Attorney’s Office about assistance, subject to its governing eligibility and merit requirements.

Frequently asked questions

Is a demand letter required before filing?

No. A demand, correction request, or takedown request may be useful, but it is not an element or universal prerequisite of criminal cyber libel. It can also become evidence of the discovery date. Preserve the material first and do not let negotiations consume the prescriptive period.

Does deleting the post prevent a case?

No. Publication is complete once the material reaches a third person. Prompt deletion, correction, or apology may be relevant to good faith, damages, or penalty, but it does not automatically extinguish criminal liability.

Can a private message be cyber libel?

A message sent only to the person defamed ordinarily lacks publication to a third person. A group message, copied email, forwarded chat, or message sent to someone else may satisfy publication. Other offenses may apply even when libel’s publication element is absent.

Can an anonymous account be charged?

Potentially, but the author must be identified through admissible evidence. Report the matter promptly so authorized investigators can seek preservation and, where legally justified, court-authorized disclosure of computer data. Do not publicly accuse a suspected person without reliable proof.

Can someone be charged for a like or share?

A bare like, reaction, link, or share is not punishable as aiding or abetting online libel under the provision invalidated in Disini. A user who adds a separately defamatory accusation or materially creates new defamatory content may face liability as the author of that new statement.

Can the complainant withdraw the case after settlement?

The parties may settle civil claims, and a complainant may execute an affidavit of desistance where allowed. Criminal prosecution, however, is brought in the name of the People of the Philippines. Desistance does not automatically require the prosecutor or court to dismiss a case supported by independent evidence.

Can the government simply order the post removed?

The broad administrative takedown authority originally found in Section 19 of Republic Act No. 10175 was declared unconstitutional in Disini. A platform may remove content under its own rules, while disclosure, search, seizure, preservation, or judicial relief must follow the applicable legal process.

Official sources

This article provides general legal information, not legal advice or an assessment of any particular post, complaint, or defense. Cyber libel outcomes depend heavily on the exact words, complete context, identity and status of the parties, evidence of authorship, discovery date, venue, and procedural record. Laws and official sources were checked through July 27, 2026.