Quick answer

Cyber libel is committed when a person makes a defamatory imputation through a computer system—such as a social-media post, online article, email, message, video caption, or similar electronic publication—and the prosecution proves the elements of libel, including publication, identification of the offended person, and malice.

If you intend to complain, preserve the post and its digital context immediately, identify the author and witnesses, and file a sworn complaint with the proper prosecutor’s office before prescription becomes an issue. The Supreme Court has ruled that cyber libel generally prescribes in one year from discovery by the offended party, the authorities, or their agents, subject to statutory rules on interruption and the accused’s absence from the Philippines.

If you are accused, do not ignore a subpoena, summons, warrant, or court notice. Preserve the complete conversation and the sources you relied on, stop discussing the dispute publicly, and obtain counsel promptly. Defenses may include failure to prove authorship, publication, identification, defamatory meaning, or malice; privileged communication; truth published with good motives and for justifiable ends; lack of actual malice where the complainant is a public official or public figure; prescription; improper venue; or constitutional and evidentiary objections.

Cyber libel remains a criminal offense. Retraction, apology, deletion, or settlement may help practically or affect damages, but none automatically erases criminal liability or guarantees dismissal.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s rules on libel when the publication is made through a computer system or a similar technological means.

The prosecution generally must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or place another person in contempt.
Publication. At least one person other than the person defamed received, read, heard, or viewed the statement.
Identification. The complainant was named or was identifiable from the words, images, circumstances, or context.
Malice. The applicable form of malice must be established or legally presumed.
Use of a computer system or similar means. The defamatory material was published through information and communications technology.
Responsibility of the accused. Evidence connects the accused—not merely an account name or screenshot—to the creation or legally relevant publication.

The whole publication matters. Courts examine the language, images, captions, links, surrounding discussion, audience, and ordinary meaning—not simply an isolated word.

Cyber libel is not established merely because a post is insulting, embarrassing, harsh, or false. The prosecution must prove every element beyond reasonable doubt at trial.

Who may be held liable?

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author of the online post. It declared the provision unconstitutional as applied to people who merely receive and react to the post. The Court also invalidated the Cybercrime Prevention Act’s general aiding-or-abetting provision as applied to cyber libel.

This does not mean every later online act is automatically protected. A person who adds a new defamatory accusation, deliberately republishes content as their own, or makes a fresh publication may face a fact-specific claim based on that conduct. Republishing or materially updating an old online article can also raise a new-publication issue. Merely pressing “like,” “share,” or another reaction must not be treated as legally identical to authoring a new defamatory statement without examining what the person actually did and said.

Account ownership alone may not conclusively prove authorship. Relevant evidence may include admissions, device records, subscriber information obtained through lawful process, login history, testimony, account control, writing patterns, and the circumstances of publication.

Opinions, accusations, and factual claims

Calling a statement an “opinion” does not settle the issue. A court may ask whether an ordinary reader would understand it as asserting or implying a provable and defamatory fact.

Expressions of taste, rhetorical criticism, satire, or value judgment may receive greater protection when they cannot reasonably be understood as factual accusations. Statements such as “I disagree with this policy” differ materially from an unsupported claim that a named person stole money or committed fraud.

Questions, memes, edited videos, emojis, insinuations, and quotations can still convey a defamatory factual meaning. Adding “allegedly,” “in my opinion,” or a question mark is not a complete defense if the publication as a whole communicates an accusation as fact.

Malice, public figures, and privileged communications

Private individuals

Article 354 of the Revised Penal Code generally presumes malice from a defamatory imputation unless the communication is privileged. That presumption does not remove the prosecution’s duty to prove the other elements, and the accused may present evidence negating malice or establishing a recognized defense.

Public officials and public figures

Where the statement concerns a public official or public figure and relates to a matter of public concern, the prosecution may have to prove actual malice: knowledge that the statement was false or reckless disregard of whether it was false.

Actual malice is a demanding standard. It requires proof that the publisher had a high degree of awareness of probable falsity or seriously doubted the statement’s truth. Mere mistake, ordinary negligence, or even serious carelessness is not automatically actual malice. Deliberately ignoring obvious contrary evidence, fabricating a source, or publishing despite serious doubts may support such a finding.

A public position does not make every aspect of a person’s private life fair game. The person’s status, the subject of the publication, and its connection to public affairs remain important.

Privileged communications

Article 354 recognizes qualified privileges, including:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without comments or remarks, of qualifying official proceedings or acts of public officers, subject to the statutory conditions.

Qualified privilege does not necessarily protect excessive publication, irrelevant accusations, bad-faith embellishment, or proof of actual malice. A complaint sent privately to the official who can act on it may be treated differently from posting the same accusations publicly to shame the subject.

Statements made in judicial proceedings may receive broader protection when relevant to the case, but the precise scope depends on the proceeding and the statement’s relevance.

Is truth a complete defense?

Not always. Under Article 361 of the Revised Penal Code, an accused who proves that the charge was true must also show that it was published with good motives and for justifiable ends to obtain acquittal on that basis.

Preserve the documents, recordings, official records, interviews, and source communications that existed when the publication was made. A source’s later claim that “everyone knew it” is much weaker than contemporaneous, verifiable support.

The law also places limits on proving certain imputations involving matters that do not constitute a crime. A lawyer should assess Article 361 against the exact accusation and the complainant’s position.

Criminal penalties and civil exposure

Ordinary written libel under Article 355 is punishable by prisión correccional in its minimum and medium periods, a fine, or both. Republic Act No. 10951 adjusted the statutory fine for ordinary libel to ₱40,000 to ₱1,200,000.

Section 6 of the Cybercrime Prevention Act raises the imprisonment penalty by one degree when the crime is committed through information and communications technology. For cyber libel, this is generally described as prisión correccional in its maximum period to prisión mayor in its minimum period—approximately four years, two months and one day to eight years, subject to the Indeterminate Sentence Law, modifying circumstances, and the court’s sentencing determination.

The offended party may also seek civil damages. Civil liability may be pursued with the criminal case unless it is waived, reserved when legally permitted, or pursued beforehand. A separate civil action has its own procedural and prescription questions; do not assume that the deadline for every civil remedy is identical to the criminal deadline.

A person should not be punished twice for ordinary libel and cyber libel based on the same online publication. The Supreme Court has explained that online libel is essentially the same libel offense, with use of a computer system as the qualifying circumstance.

The one-year prescription period

In Causing v. People, the Supreme Court ruled that cyber libel prescribes in one year, abandoning earlier reasoning that applied a much longer period.

Under Articles 90 and 91 of the Revised Penal Code:

the period generally begins when the offense is discovered by the offended party, the authorities, or their agents;
filing the complaint or information interrupts prescription;
the period may begin running again if proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused; and
prescription does not run while the offender is absent from the Philippines.

The discovery date must be proved; it should not be treated as whatever date is most convenient. A complainant should retain evidence showing when and how the publication was first discovered. An accused raising prescription should examine the original post date, alleged discovery date, access records, complaint-filing date, interruptions, any claimed republication, and any period of absence from the Philippines.

Because one year can pass quickly—and factual disputes over discovery or republication can be decisive—seek legal advice well before the anniversary date.

How to preserve online evidence

Do this before demanding deletion or reporting the account to the platform:

Capture the entire post, not only the offensive sentence.
Record the full URL, account name, profile URL, post identifier, date, displayed time, and access date.
Save images, videos, audio, captions, comments, quoted posts, edits, and surrounding conversation in their original formats when possible.
Make a screen recording showing how the content is reached from the account or page.
Preserve emails, message headers, notifications, and platform download archives.
Identify people who personally saw the publication and can execute affidavits.
Save documents showing why the complainant is identifiable and how the publication affected them.
Keep the original phone or computer unchanged where practical. Do not crop, annotate, enhance, or repeatedly resave the only copy.
Record the date and method of every download or capture and who handled each copy.
Ask counsel or investigators whether urgent lawful preservation steps should be directed to the platform or service provider.

Screenshots are useful but may be challenged as incomplete, altered, unauthenticated, or disconnected from the accused. Electronic evidence must be authenticated under the Rules on Electronic Evidence. Investigators may need judicial authorization to obtain subscriber, traffic, content, search, seizure, or interception data.

The Cybercrime Prevention Act provides for preservation of specified service-provider data and court-supervised disclosure. Private parties should not attempt to hack an account, impersonate another user, secretly access protected data, or seize a device themselves.

How to file a cyber libel complaint

1. Have the elements and deadline assessed

Before filing, identify:

the exact words, images, or audiovisual material alleged to be defamatory;
the original author and evidence connecting that person to the account;
every relevant publication date;
when the complainant or authorities discovered the material;
who else received or viewed it;
why the complainant is identifiable;
whether the complainant is a private person, public official, or public figure;
whether the statement concerns public affairs;
whether privilege, truth, fair report, or good-faith reliance may apply; and
the place of the alleged acts and computer-system connections relevant to jurisdiction and venue.

Do not assume that a case may be filed anywhere merely because online material can be viewed nationwide. Jurisdiction under Section 21 of the Cybercrime Prevention Act is broad, but the proper territorial venue must still be supported by the alleged and provable facts.

2. Prepare a detailed complaint-affidavit

The complaint-affidavit should be sworn and based on personal knowledge. It should set out the relevant events chronologically and attach properly marked evidence. Include the identities and addresses of the parties when known, the exact publication, authorship evidence, third-party publication, identification, defamatory meaning, discovery date, and facts bearing on malice and damages.

Witness affidavits should state what each witness personally saw, heard, received, or did. Avoid copied, conclusory affidavits.

3. File with the proper prosecutor or investigating authority

A criminal complaint may be filed with the prosecutor’s office having proper authority over the offense. The NBI and PNP are the law-enforcement authorities designated by Republic Act No. 10175 and maintain cybercrime units that can investigate and seek appropriate cybercrime warrants.

Investigative assistance can be especially important when the author is anonymous, account records may disappear, or forensic examination is required. Confirm the receiving office, current documentary requirements, number of copies, and accepted filing method directly with that office. Do not rely solely on an unofficial online form or social-media message.

4. Participate in preliminary investigation

The prosecutor evaluates whether the evidence justifies filing an information in court. The respondent is ordinarily given the complaint and supporting evidence and an opportunity to submit a counter-affidavit within the deadline in the subpoena or governing rules.

A preliminary investigation is not yet the criminal trial. The prosecutor may dismiss the complaint or file an information in the proper Regional Trial Court. Republic Act No. 10175 gives Regional Trial Courts jurisdiction over cybercrime offenses and provides for designated special cybercrime courts.

5. Prepare for both criminal and civil issues

Decide with counsel whether civil damages will be pursued with the criminal case or through another legally available route. Keep records of medical treatment, lost business, employment consequences, corrective expenses, threats, and other claimed injury. Damages must be supported, not merely asserted.

How to respond if you are accused

Preserve first; do not conduct a public counterattack

Keep the original post, drafts, full threads, source material, direct messages, research notes, devices, and account records. Do not falsify, backdate, selectively alter, or destroy evidence. Deleting the public post may reduce continuing harm, but deletion does not erase copies or necessarily eliminate liability. Discuss preservation and removal with counsel.

Do not publish the complaint, attack the complainant or witnesses, coach others, or pressure anyone to withdraw. New posts can create additional evidence or separate legal problems.

Read every notice carefully

Confirm:

which office or court issued it;
the case or docket number;
the exact offense and publication charged;
the deadline and manner for filing;
whether personal appearance is required; and
whether the document is authentic.

A prosecutor’s subpoena should not be ignored. Missing the stated counter-affidavit deadline may allow the matter to be resolved on the complainant’s evidence. If additional time is genuinely necessary, request it promptly and properly; an extension is not automatic.

Build the defense around evidence

Depending on the facts, a counter-affidavit may address:

lack of authorship or account control;
absence of publication to a third person;
inability to identify the complainant;
words that are not defamatory in their full context;
protected opinion, satire, or rhetorical criticism;
truth, good motives, and justifiable ends;
fair and accurate reliance on official records;
qualified or absolute privilege;
lack of actual malice in a public-official or public-figure case;
good-faith verification and reliable contemporaneous sources;
prescription;
improper venue or lack of territorial facts;
unlawful acquisition or inadequate authentication of electronic evidence;
duplicative charges for the same publication; or
material defects in the complaint or information.

General denials are rarely as useful as records, neutral witnesses, original files, and a clear chronology.

If an information has already been filed

Once the prosecutor files an information, the RTC proceedings may involve judicial determination of probable cause, issuance of process, bail, arraignment, pre-trial, trial, and possible motions or remedies. Do not enter a plea, waive counsel, or file a motion based on an internet template without understanding its consequences.

If a warrant has issued, arrange a lawful response through counsel immediately. Do not hide, evade service, contact the judge privately, or attempt to negotiate directly with court personnel.

Retraction, apology, and settlement

A prompt correction, takedown, clarification, or sincere apology may reduce harm and may matter when courts assess intent or damages. It is not an automatic statutory defense to a completed cyber libel offense.

Settlement also does not invariably terminate a criminal case, because a crime is prosecuted in the name of the People of the Philippines. An affidavit of desistance may be considered but does not compel the prosecutor or court to dismiss a case.

Any resolution should be voluntary, lawful, accurately documented, and reviewed for effects on criminal liability, civil claims, confidentiality, future speech, and preservation of evidence. Do not demand money or concessions through threats of public exposure or criminal prosecution.

Common mistakes

Waiting months before preserving evidence or consulting counsel.
Treating a profile name as conclusive proof of authorship.
Filing in a convenient city without facts establishing proper venue.
Submitting cropped screenshots without URLs, dates, context, or authentication.
Assuming truth alone always defeats criminal libel.
Assuming “allegedly,” “for awareness,” or “in my opinion” prevents liability.
Confusing criticism of policy with an accusation of criminal conduct.
Ignoring the higher actual-malice standard in an appropriate public-figure case.
Claiming privilege after broadcasting a private grievance to an unnecessarily wide audience.
Treating every like, share, or reaction as authorship without examining the user’s added words and conduct.
Reposting the accusation during the dispute.
Missing a prosecutor’s or court’s deadline.
Deleting devices, messages, drafts, or source files after learning of a complaint.
Believing an apology, deletion, or affidavit of desistance automatically ends the case.
Charging ordinary libel and cyber libel twice for the same publication without addressing double jeopardy.

When legal help is urgent

Consult a Philippine lawyer immediately if:

the one-year period may expire soon;
the author is anonymous or platform data may be lost;
you received a subpoena, resolution, information, summons, or warrant;
police or investigators seek access to a device or account;
a search, seizure, disclosure, or examination warrant is being executed;
the post accuses someone of a serious crime or corruption;
the complainant is a journalist, public official, public figure, employer, or business;
multiple posts, republications, jurisdictions, or respondents are involved;
the case includes threats, harassment, intimate images, identity theft, or unlawful access;
the accused or a key service provider is abroad; or
employment, professional licensing, immigration, or personal safety may be affected.

Persons who cannot afford private counsel may inquire with the Public Attorney’s Office about eligibility. Victims and respondents should obtain independent advice; investigators and prosecutors do not act as private counsel for either side.

Frequently asked questions

Can I file a case over a private message?

Possibly. Publication requires communication to someone other than the person defamed. A message sent only to the subject ordinarily presents a publication problem. A message sent to a group, employer, relative, client, or another third person may satisfy publication, subject to privilege and the other elements.

Is a group chat covered?

It can be. A group chat uses a computer system, and receipt by another participant may constitute publication. Privacy settings do not automatically prevent criminal liability, although the audience and purpose may matter to privilege, malice, and damages.

Can an anonymous account be sued immediately?

A complaint may be investigated, but identifying the responsible person requires admissible evidence and lawful process. A display name, photograph, or unverified IP-address allegation is not necessarily enough. Prompt preservation is important because providers do not retain every category of data indefinitely.

Is sharing someone else’s post automatically cyber libel?

No. Disini protects persons who merely receive and react to a post from liability under the challenged provisions. But added defamatory commentary, deliberate republication as one’s own assertion, or a materially new publication requires separate analysis.

Does deleting the post prevent a case?

No. The offense may already have been completed when a third person received the publication. Deletion may limit further harm but can also complicate preservation. Save an authentic copy and obtain advice before altering relevant evidence.

Can a true post still lead to liability?

Yes. In a criminal libel case, Article 361 generally requires not only truth but also good motives and justifiable ends. Privilege, public concern, and actual malice may independently affect the analysis.

Does the complainant have to prove financial loss?

Not to establish every criminal element of cyber libel. Financial records may matter to claimed damages, but reputational injury is not limited to provable lost income.

When does the one-year period start?

Under Causing v. People, it starts when the alleged cyber libel is discovered by the offended party, the authorities, or their agents. The discovery date, any interruption, later publication, and absence of the accused may be disputed and must be supported by evidence.

Where is the case tried?

Cybercrime cases fall within RTC jurisdiction, generally through a designated special cybercrime court. The correct territorial venue depends on the alleged acts and jurisdictional facts. Nationwide internet availability alone should not be used as a substitute for a venue analysis.

Can both ordinary libel and cyber libel be charged for the same post?

Punishing the same person for both offenses based on the identical publication raises double-jeopardy concerns. The Supreme Court has treated online libel as the existing crime of libel committed through a computer system, not as an entirely separate offense.

Official legal sources

This article provides general legal information, not legal advice or an attorney-client relationship. Outcomes depend on the complete publication, evidence, dates, parties, and procedural history. The cited law and official guidance were checked as of September 12, 2026.