Quick answer

Cyber libel is committed when the original author publishes a malicious, defamatory statement through a computer system or similar technology and the statement identifies a person, corporation, or deceased person whose memory is attacked.

If you are the complainant, preserve the complete online evidence and file a sworn complaint promptly with the proper City or Provincial Prosecutor. The NBI Cybercrime Division or PNP Anti-Cybercrime Group can assist with identifying an anonymous author and preserving digital evidence.

If you are the respondent, do not ignore a prosecutor’s subpoena, delete evidence, pressure the complainant, or answer through another public post. Obtain counsel, preserve the complete context, and submit a sworn counter-affidavit with supporting evidence by the stated deadline.

The most urgent rule is prescription. As definitively affirmed in Causing v. People in April 2026, cyber libel generally prescribes one year from discovery of the alleged offense by the offended party, the authorities, or their agents—not necessarily from the posting date. Filing the complaint with the proper prosecution office interrupts the period. The date of discovery is a factual issue that may require evidence; it is not automatically presumed to be the publication date. Read the Supreme Court’s final ruling in Causing v. People.

Do not assume that a demand letter, platform report, barangay blotter, police inquiry, or informal NBI consultation stops the one-year period. Counsel should ensure that a legally sufficient complaint reaches the proper prosecution office in time.

What the prosecution must prove

Cyber libel is governed by Section 4(c)(4) of the Cybercrime Prevention Act, read with Articles 353, 354, and 355 of the Revised Penal Code. The prosecution must ultimately prove beyond reasonable doubt:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose someone to contempt.
Publication. The statement was communicated to at least one person other than the person defamed. A public Facebook post plainly may qualify, but a members-only group, group chat, email thread, or limited-audience post may also satisfy publication if a third person received it.
Identification. The complainant was named or was identifiable from the words, images, surrounding circumstances, or information known to readers. Naming the person is not indispensable.
Malice. Ordinarily, a defamatory imputation is presumed malicious unless it falls within a recognized privilege. Different rules apply to privileged communications and speech about public officials or public figures.
Use of a computer system or similar means. This includes online posts, websites, social-media content, emails, digital publications, and comparable electronic communications.
Identity of the author. The prosecution must connect the accused—not merely a profile name or photograph—to the account and the particular statement.

A criminal complaint must address every element. Showing that a post was offensive, embarrassing, or viral is not enough by itself.

Statements that are not automatically cyber libel

Not every unpleasant online statement is criminal:

A message sent only to the person criticized ordinarily lacks publication, although a group message or later communication to another person may change the analysis.
Insults, rhetorical exaggeration, satire, or opinion may not contain a provable defamatory assertion of fact. Calling a statement “opinion,” however, does not protect a disguised factual accusation.
Fair comment on a matter of public interest may be qualifiedly privileged when it is an opinion reasonably based on established facts.
A fair and true report, made in good faith and without added defamatory commentary, of a non-confidential judicial, legislative, or official proceeding may be privileged.
A private communication made in the performance of a legal, moral, or social duty may be qualifiedly privileged if directed to a person with a corresponding interest or authority.
Mere receipt of a post or a simple reaction is not treated the same as authorship.

The meaning of a statement is assessed in context. Screenshots of isolated sentences can be misleading; the language, audience, preceding exchange, accompanying images, and entire publication matter.

Important exceptions and defenses

Truth alone may not be enough

Philippine criminal-libel law does not treat truth as an automatic defense. Where proof of truth is legally admissible, acquittal under Article 361 requires both:

proof that the imputation is true; and
proof that it was published with good motives and for justifiable ends.

Article 361 also limits when proof of truth may be admitted, including rules concerning imputations of crimes and statements about government employees in relation to their official duties. A respondent relying on truth should preserve the competent source documents and evidence of the legitimate reason for publication.

Public officials and public figures

Criticism of public officials and public figures receives greater constitutional protection, particularly when it concerns official conduct or a genuine matter of public interest. In that setting, the prosecution may have to prove actual malice—knowledge that the accusation was false or reckless disregard of whether it was false.

This protection is not unlimited. Unsupported personal accusations, attacks unrelated to public conduct, fabricated records, or statements published despite obvious reasons to doubt them may still create liability. The status of the complainant, the subject of the publication, and the author’s verification efforts are all material.

Privileged communications

Qualified privilege removes the ordinary presumption of malice, but it does not necessarily end the case. The prosecution may overcome the privilege by proving actual malice or abuse of the occasion.

For example, a good-faith complaint sent to an employer, regulator, professional body, or public authority with power to act may be privileged. Broadcasting the same accusation unnecessarily to the general public may not be.

Reactions, shares, and new comments

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as to the original author, but struck down liability for people who merely receive and react to the post. It also invalidated aiding-or-abetting liability in relation to cyber libel. Read the official Disini decision.

That does not grant immunity for a person’s own words. Someone who adds a new defamatory caption, creates a separate accusation in the comments, materially republishes content as their own, or produces a new post may become the original author of that separate publication. The precise act—not simply the platform’s “share” label—must be examined.

The same defamatory material cannot be used to punish a person separately for ordinary libel and cyber libel when the charges concern one and the same offense. Disini held that doing so would violate double jeopardy.

Posts made before the cybercrime law

A post made before Republic Act No. 10175 took effect cannot be punished retroactively as cyber libel. Whether a later edit, repost, or new publication created a separate post-law offense is highly fact-sensitive. Preserve version histories and do not assume that an old page remaining accessible automatically proves a new publication.

The filing deadline

Cyber libel generally prescribes one year from discovery by:

the offended party;
the authorities; or
their agents.

The Supreme Court has rejected a blanket presumption that everyone discovers an online post when it is uploaded. Publication and discovery may occur on the same date, but they need not.

Evidence relevant to discovery includes:

the first message or email alerting the complainant;
the date a witness sent the link or screenshot;
platform notifications;
prior replies showing that the complainant already knew of the post;
correspondence demanding deletion or correction;
police, NBI, employer, or administrative reports; and
admissions in affidavits or pleadings.

Filing a complaint with the proper prosecution office interrupts prescription. If proceedings later terminate without conviction or acquittal, Article 91 may cause the period to run again, depending on why the proceedings ended. Prescription should be calculated by counsel from the actual documents; an unsupported allegation of an earlier discovery date may not be enough to dismiss a case.

How to file a cyber libel complaint

1. Preserve the evidence before requesting deletion

Capture more than a cropped screenshot. Preserve, where available:

the complete post, caption, photographs, video, comments, and surrounding thread;
the account name, profile URL, account identifier, and visible profile history;
the post’s direct URL;
publication date and time, including the displayed time zone;
audience or privacy setting;
reactions and comments showing third-party publication;
a screen recording that opens the profile and navigates to the post;
original downloaded files and their metadata;
messages showing when and how the complainant discovered the publication;
witness names and their unedited copies;
evidence identifying the author; and
evidence of reputational or financial harm, such as lost contracts, client messages, employer correspondence, or medical records where relevant.

Keep the original device and unaltered files. Make working copies and backups. Record who collected each item and when. Do not crop, annotate, enhance, or rename the only copy.

Electronic documents must be authenticated. A printout or screenshot does not prove itself; the proponent must establish its integrity and reliability under the Rules on Electronic Evidence.

2. Establish authorship

A display name or profile photograph alone may be insufficient because accounts can be impersonated or shared. The Supreme Court’s current guideposts allow ownership, access, or authorship to be shown through direct or circumstantial evidence, including:

an admission of ownership, access, or authorship;
a witness who saw the person use the account or compose the post;
information in the post known only to the suspected author or a small group;
distinctive language or writing patterns;
prior conduct or communications consistent with the disputed post;
platform, internet-service-provider, or telecommunications records; and
device-forensic, location, or account-access evidence.

Technical records are useful but not always indispensable. The totality of the evidence controls. See XXX v. People, G.R. No. 274842.

Never hack an account or obtain private data through deception or unauthorized access. Investigators may seek lawful preservation, disclosure, search, or examination orders under the Rule on Cybercrime Warrants.

3. Choose the proper place of filing

Under the Rule on Cybercrime Warrants, a criminal action under Section 4 may be filed before the designated cybercrime court of the province or city:

where the offense or any element was committed;
where any part of the computer system used is situated; or
where any of the damage to a natural or juridical person occurred.

The first court in which the criminal action is properly filed acquires jurisdiction to the exclusion of the others. Because online content can be accessed almost anywhere, venue must be supported by specific facts rather than a bare statement that the post was viewable in the chosen city.

The preliminary-investigation complaint should generally be filed with the City or Provincial Prosecutor corresponding to the proper venue. Venue involving foreign authors, overseas systems, several residences, corporate complainants, or uncertain damage locations requires careful legal assessment.

4. Prepare the complaint-affidavit

The sworn complaint should clearly state:

the complainant’s and respondent’s identifying information;
the exact words, images, or video complained of;
their translation, if written in a local language, slang, or coded terms;
when, where, and how they were published and discovered;
why the complainant was identifiable;
who received or viewed the publication;
facts connecting the respondent to the account and post;
why the imputation was defamatory and malicious;
facts establishing venue and timeliness;
the harm caused; and
a numbered list of annexes and witnesses.

Attach witness affidavits and properly organized evidence. Avoid broad accusations against every person who liked, viewed, or received the content.

The DOJ’s filing checklist calls for an Investigation Data Form, complaint-affidavit or sworn statement, witness affidavits, and supporting documents. Local offices may have additional copy, identification, payment, or electronic-submission requirements. The 2024 DOJ-NPS Rules permit e-filing and virtual proceedings as alternatives, but do not assume that an ordinary email is a valid filing; obtain and follow the particular office’s instructions.

5. Consider investigative assistance

The complainant may approach the NBI Cybercrime Division or an appropriate PNP Anti-Cybercrime Group unit, especially when:

the account is anonymous or impersonating another person;
provider records may be needed;
a device requires forensic examination;
the content is disappearing; or
the publication is part of hacking, extortion, threats, stalking, or another cybercrime.

The NBI publishes its procedure for investigative assistance to victims of computer crimes and maintains an online complaint page.

Investigative assistance does not replace timely filing with the proper prosecutor when prescription is approaching.

How to defend a cyber libel complaint

1. Act immediately on the subpoena

A prosecutor’s subpoena normally includes the complaint and supporting evidence and sets the counter-affidavit deadline. Under the current DOJ-NPS rules, the respondent should ordinarily be given at least 10 calendar days to submit the counter-affidavit, but the exact date in the subpoena and any lawful extension granted by the prosecutor control.

Do not substitute an ordinary motion to dismiss for the required counter-affidavit. Failure to respond may allow the prosecutor to resolve the case using only the complainant’s evidence.

2. Preserve—not erase—the defense evidence

Save the complete conversation, drafts, source documents, publication history, account logs, devices, and messages. Evidence that may matter includes:

the full context omitted from the complaint;
proof that the statement was never sent to a third person;
evidence that the complainant was not identifiable;
account-compromise reports or access logs;
proof another authorized user controlled a shared account;
public records and reliable sources consulted before publication;
communications showing verification or requests for comment;
evidence of good motive and justifiable purpose;
documents supporting a privilege;
evidence of the complainant’s actual discovery date;
facts disproving venue; and
the original date of a pre-RA 10175 post.

A bare denial that “the account was fake” is usually weaker than specific technical or circumstantial evidence.

3. Answer every element under oath

The counter-affidavit should directly address:

whether the accused authored the statement;
whether it contained a defamatory factual imputation;
whether it was published to a third person;
whether the complainant was identifiable;
whether malice existed or a privilege applied;
whether the speech concerned a public official, public figure, or public issue;
whether the prosecution is timely;
whether venue is proper; and
whether the electronic evidence is authentic, complete, and lawfully obtained.

Attach witness affidavits and admissible supporting records. Do not merely argue that the complainant is “too sensitive” or that online speech is always protected.

4. Review the prosecutor’s resolution promptly

Under the 2024 DOJ-NPS rules, an aggrieved party may generally move for reconsideration within 15 days from receipt of the resolution. A petition for review may also be available, but its proper reviewing office and requirements depend on who issued the resolution and the court that would hear the case.

These remedies do not necessarily prevent the filing of an Information or suspend court proceedings automatically. If a case has reached court, counsel must separately monitor arraignment and other court deadlines.

5. If an Information or warrant has been issued

Once an Information is filed, the RTC judge independently determines probable cause. The judge may dismiss the charge, require additional evidence, or issue a warrant of arrest.

A cyber libel complaint does not itself cause automatic arrest. If a warrant is issued, do not evade it. Arrange through counsel for an orderly surrender and bail. Before conviction, bail is generally a matter of right for this offense, although the court sets the amount and conditions.

Possible grounds for a motion to quash or other pretrial relief include prescription, improper venue or jurisdiction, double jeopardy, or failure of the Information to allege an offense. Whether a ground can be raised after arraignment depends on the Rules of Criminal Procedure, so it should be examined before entering a plea.

Possible penalties and civil liability

Cyber libel carries a penalty one degree higher than traditional written libel. The imprisonment range is four years, two months, and one day to eight years.

A court may instead impose a fine, or impose both imprisonment and a fine. Following Republic Act No. 10951 and the Supreme Court’s ruling in People v. Soliman, the fine for online libel ranges from ₱40,000 to ₱1,500,000. A fine-only sentence is legally possible, but it is discretionary and not guaranteed. The court considers the circumstances and whether avoiding imprisonment would depreciate the seriousness of the offense. Read the official Soliman decision.

Civil damages may be pursued with the criminal action. An independent civil action for defamation may also be available under Article 33 of the Civil Code, subject to procedural rules, prescription, and the prohibition against double recovery. Civil and criminal strategies should be coordinated before filing or reserving a separate action.

Practical alternatives and settlement

Before demanding removal, preserve the evidence. A complainant may then consider:

requesting a correction, retraction, or apology;
sending a carefully worded demand through counsel;
using the platform’s reporting process;
requesting removal of impersonating or unlawfully disclosed material; or
negotiating a settlement of the civil claims.

Deletion, apology, or settlement does not automatically erase a completed offense. Cyber libel is prosecuted in the name of the People of the Philippines, and an affidavit of desistance does not by itself compel the prosecutor or court to dismiss the criminal case. It may nevertheless affect the evidence, damages, or exercise of prosecutorial and judicial discretion.

The DOJ cannot unilaterally block allegedly libelous content under Section 19 of Republic Act No. 10175; the Supreme Court struck that provision down in Disini. Other court or platform remedies depend on the facts and applicable law.

Common mistakes to avoid

Waiting for negotiations while the one-year prescriptive period runs.
Keeping only a cropped screenshot without the URL, account details, date, audience, or surrounding conversation.
Assuming a profile name or photograph proves authorship.
Deleting posts, messages, devices, or account histories after receiving notice of a complaint.
Believing that truth, public-interest language, or the word “opinion” automatically defeats liability.
Treating every critic, liker, or recipient as a proper respondent.
Filing in a convenient city without evidence supporting venue.
Responding to a complaint with more accusations online.
Ignoring a subpoena because the preliminary investigation is “not yet a court case.”
Filing an unsworn narrative without witness affidavits or authenticated evidence.
Assuming that an apology or affidavit of desistance automatically ends the prosecution.
Obtaining evidence by hacking, impersonation, or unauthorized access.

When legal help is urgent

Seek a Philippine lawyer immediately if:

the one-year period may expire soon;
you received a subpoena, prosecutor’s resolution, Information, warrant, or arraignment notice;
the author uses an anonymous or disappearing account;
the disputed content is being edited or deleted;
several posts or respondents may create multiple counts;
the publication involves a journalist, public official, election, or significant public controversy;
the author, complainant, server, or damage is outside the Philippines;
the case includes threats, extortion, hacking, doxxing, intimate images, stalking, or a minor; or
law enforcement wants to search, seize, or examine a device.

Those additional acts may fall under other laws and may require faster protective or investigative measures than a cyber libel complaint alone.

Frequently asked questions

Can I file even if the post has been deleted?

Yes, but you must prove what was published, its authenticity, authorship, and communication to a third person. Preserved originals, witness testimony, account records, and forensic evidence may become critical.

Must the post state my name?

No. It is enough if readers familiar with the circumstances could identify you. A vague statement that cannot reasonably be connected to a particular person may fail the identification element.

Is a private message cyber libel?

A message seen only by its sender and the person criticized ordinarily lacks publication to a third person. A group chat, copied email, or message shown or sent to someone else may qualify.

Can I sue everyone who liked or shared the post?

Not merely because they received or reacted to it. Disini protects people who simply receive and react. A person who creates their own defamatory statement or separate publication presents a different issue.

Is an accurate accusation always protected?

No. Truth must be paired with good motives and justifiable ends where Article 361 permits proof of truth. Privilege, public interest, verification, audience, and manner of publication also matter.

Does being a public official prevent a cyber libel case?

No. It ordinarily raises the prosecution’s burden concerning actual malice when the speech relates to official conduct or a public issue. It does not protect knowingly false or recklessly published accusations.

Does filing a complaint mean the respondent will be arrested?

No. The prosecutor first determines whether the evidence warrants an Information. If one is filed, the judge independently evaluates probable cause before deciding whether to issue a warrant.

Can the parties settle?

They may settle civil claims and agree on a correction, apology, or retraction. The criminal prosecution, however, belongs to the State and is not automatically terminated by private agreement or desistance.

How long do I have to file?

Generally, one year from discovery by the offended party, authorities, or their agents. The discovery date and any interruption of prescription must be established from the record. File promptly rather than testing the final day.

Official legal references

This article provides general Philippine legal information, not advice for a specific case. Cyber libel outcomes depend heavily on the exact publication, evidence, dates, parties, and procedural history. The authorities and procedures were checked as of 1 August 2026.