Quick answer

Cyber libel is committed when a person publishes a defamatory statement through a computer system—such as a social-media post, website article, online comment, email, or digital message—and the prosecution can prove all the elements of libel, the accused’s authorship or participation, and the use of information and communications technology.

If you are filing, preserve the complete online material and proof of when you discovered it, then promptly file a sworn complaint with the prosecution office that has proper venue. The Supreme Court has definitively ruled that cyber libel prescribes one year from discovery of the alleged offense, subject to the rules on interruption of prescription. A platform report, demand letter, police blotter, or informal NBI inquiry should not be assumed to stop that period.

If you are defending, do not ignore a prosecutor’s subpoena, NBI summons, court notice, or warrant. Record the date you received it, obtain the complete complaint and attachments, preserve your account and source materials, and consult a criminal-law lawyer immediately. Under the current DOJ rules, the subpoena in a regular preliminary investigation must give the respondent at least 10 calendar days to submit a verified counter-affidavit, but the specific date stated in the subpoena controls your immediate response.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 punishes libel, as defined in Article 355 of the Revised Penal Code, when committed through a computer system or similar means.

The prosecution generally must establish:

A defamatory imputation. The statement imputes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person or juridical entity to contempt.
Publication. A person other than the one defamed received, saw, or understood the statement. A private one-to-one message sent only to the subject ordinarily lacks publication, although forwarding it to another person may change the analysis.
Identifiability. The offended person is named or can reasonably be identified from the words, images, surrounding facts, or context.
Malice. Article 354 generally presumes malice in a defamatory imputation unless an applicable privilege or other rule removes that presumption. Different standards apply when the statement concerns a public official, public figure, or matter of legitimate public interest.
Use of a computer system. The defamatory material was published using information and communications technology.
Authorship or legally attributable publication. It must be shown that the respondent wrote, posted, or caused the publication. Proof that a page bears a person’s name is relevant but does not automatically establish who controlled the account at the material time.

The governing definitions and statutory privileges appear in Articles 353 to 362 of the Revised Penal Code.

Not every offensive post is cyber libel

Insults, satire, rhetorical exaggeration, criticism, or an honestly expressed opinion are not automatically libelous. Courts consider the words in their full context, their ordinary meaning, the audience, whether they imply verifiable facts, and whether the surrounding circumstances show malice.

Labeling an accusation as “opinion” is not conclusive. A statement such as “in my opinion, he stole the funds” still communicates a factual accusation capable of proof or disproof.

Who may be liable for a post, share, reaction, or comment?

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author but declared the Cybercrime Prevention Act’s general aiding-and-abetting provision unconstitutional as applied to online libel. A bare “like,” reaction, or simple sharing of another person’s post therefore should not automatically be treated as aiding or abetting cyber libel.

That does not give blanket immunity to every sharer or commenter. A person who adds a new defamatory caption, repeats the accusation as their own, creates a separate post, or materially republishes the accusation may be investigated as an author or publisher of that new statement. Liability depends on exactly what the person contributed and what the evidence proves.

For the same act, Section 7 of the Cybercrime Prevention Act cannot be used to impose separate punishments for both ordinary libel and cyber libel in a manner prohibited by the constitutional ruling in Disini.

Possible penalties and civil liability

Ordinary written libel under Article 355, as amended by Republic Act No. 10951, is punishable by imprisonment, a fine, or both. Section 6 of the Cybercrime Prevention Act raises the penalty by one degree when information and communications technology is used.

For cyber libel, the statutory exposure is generally:

Imprisonment: prisión correccional in its maximum period to prisión mayor in its minimum period—four years, two months and one day to eight years; or
Fine: ₱40,000 to ₱1,500,000; or
Both imprisonment and fine, depending on the judgment.

The Supreme Court has held that courts may impose a fine instead of imprisonment in an appropriate online-libel case, but this is a discretionary rule of preference—not a guarantee that imprisonment will never be imposed. See People v. Soliman, G.R. No. 256700 and the Supreme Court’s official explanation.

The offended party may also pursue civil damages, either with the criminal case or, when procedurally permitted, through a separate action. A civil action for defamation generally has a one-year prescriptive period under Article 1147 of the Civil Code. The applicable starting date, venue, reservation of the civil action, and effect of an existing criminal case require document-specific advice.

The one-year deadline

In its April 8, 2026 En Banc resolution in Causing v. People, G.R. No. 258524, the Supreme Court affirmed that cyber libel prescribes in one year from the day the alleged offense is discovered by the offended party, the authorities, or their agents.

Important qualifications:

The relevant date may be disputed and must be supported by evidence.
Filing the proper complaint or Information interrupts prescription under Article 91 of the Revised Penal Code.
Do not assume that reporting a post to the platform, sending a demand letter, obtaining a barangay or police blotter, or merely consulting an investigator interrupts prescription.
Do not assume that leaving a post online continuously renews the deadline.
An edit, update, repost, share, or new caption may raise a separate publication question, but it does not automatically restart prescription in every case.
A respondent invoking prescription must support the alleged discovery and filing dates. In Causing, the Court maintained the denial of the motion to quash because prescription had not been adequately established on the record.

Because a mistaken date can defeat a complaint or defense, obtain legal advice well before the apparent deadline.

How to file a cyber-libel complaint

1. Preserve the complete publication immediately

Before requesting removal, preserve:

Full-page screenshots showing the complete statement and surrounding context;
The profile or account name, handle, profile URL, and identifying information;
The post’s direct URL or unique identifier;
Visible publication date and time;
Images, videos, captions, edits, comments, and replies;
Audience or privacy settings, if visible;
Reactions, shares, or comments demonstrating that third persons saw it;
A screen recording showing how the post is reached from the account or page;
Downloaded copies or platform exports in their original formats;
Messages, notifications, or witness accounts showing when the post was discovered;
The device on which the material was viewed, if it may be needed for authentication; and
Proof of actual harm, such as lost work, cancelled contracts, customer messages, medical records, or reasonable expenses.

Do not rely only on a cropped image. Cropping may remove the URL, account identity, date, context, or material needed to authenticate the evidence. Keep an untouched master copy and work from duplicates.

Electronic material must still be authenticated. The person offering it may need to explain how it was obtained and why it accurately represents what appeared online. The Rules on Electronic Evidence govern questions of originality, integrity, reliability, and authentication.

2. Establish who operated the account

Collect lawful evidence connecting the respondent to the publication, such as:

Admissions in messages or recorded public statements;
Consistent account details, photographs, contact information, or links to verified pages;
Witnesses who saw the respondent create or control the account;
Earlier communications showing control;
Platform notices or account records obtained through lawful process; and
Evidence distinguishing the real account from an impersonation or compromised account.

Do not hack, guess passwords, impersonate another person, or unlawfully obtain private data. If the author is anonymous, seek investigative help promptly. Investigators may pursue subscriber or traffic information through preservation orders and appropriate cybercrime warrants.

3. Determine the correct venue

Venue in a criminal cyber-libel case is jurisdictional and should not be guessed. Under Section 2.1 of the Rule on Cybercrime Warrants, the criminal action is filed before the designated cybercrime court of the province or city:

Where the offense or any element was committed;
Where any part of the computer system used was situated; or
Where any damage to a natural or juridical person took place.

The first court in which the action is properly filed acquires jurisdiction to the exclusion of the others. Merely asserting that an online post could be accessed anywhere is not a safe basis for venue. The complaint and eventual Information should state concrete venue facts.

The criminal complaint for preliminary investigation is ordinarily lodged with the city or provincial prosecutor corresponding to the proper court venue. An NBI investigation may help establish identity and digital evidence, but it does not replace filing with the proper prosecution office for purposes of prosecuting the case.

4. Prepare a complete complaint-affidavit

The sworn complaint should state, in chronological and factual form:

The complainant’s and respondent’s identities and addresses, if known;
The exact defamatory words, image, video, or material;
Why the material refers to the complainant;
Where, when, and how it was published;
Who saw or received it;
Why the statement is defamatory;
Facts showing authorship and use of a computer system;
When and how the complainant or authorities discovered it;
Facts establishing venue;
Facts relevant to falsity, malice, and the absence of privilege; and
The supporting evidence and witnesses for every material allegation.

Attach properly marked copies of the electronic evidence, witness affidavits, proof of identity, and other supporting documents. Follow the receiving office’s current checklist for copies, verification, file format, service, and any authorized electronic filing. The DOJ rules recognize e-filing and virtual proceedings as alternatives, but do not assume that an ordinary email is accepted unless the particular prosecution office confirms it.

The DOJ publishes a filing checklist for complaints for preliminary investigation.

5. Consider investigative assistance

A complainant may seek assistance from:

The NBI Cybercrime Division;
An appropriate NBI regional cybercrime center;
The PNP Anti-Cybercrime Group; or
The DOJ Office of Cybercrime.

The NBI’s official process includes an initial interview, a sworn complaint sheet or affidavit, submission of supporting documents, and examination of a relevant device when necessary. Ask investigators promptly whether service-provider or platform data should be preserved under Section 13 of the Cybercrime Prevention Act. Preservation is not the same as disclosure: access to content or subscriber data may still require the appropriate legal process.

6. Participate in the preliminary investigation

Cyber libel’s prescribed maximum imprisonment places it within regular preliminary investigation under the 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings.

The prosecutor now determines whether there is prima facie evidence with reasonable certainty of conviction. This means the complainant should submit evidence capable, if uncontroverted, of establishing every element—not merely a general accusation or a screenshot of uncertain origin.

If the complaint is sufficient, the prosecutor issues a subpoena to the respondent. The prosecutor may require counter-affidavits, reply or rejoinder affidavits, additional evidence, or clarificatory questioning before resolving the case.

7. Act promptly on the prosecutor’s resolution

Under the current DOJ rules, an aggrieved party may generally file one motion for reconsideration within 15 days from receipt of the resolution.

A qualifying petition for review under the 2000 NPS Rules on Appeal must generally be filed within 15 days from receipt of the resolution, or from receipt of the denial of a timely motion for reconsideration. Follow the current rule and the instructions in the resolution because the proper reviewing office and documentary requirements may vary.

A petition for review does not automatically erase court proceedings or a warrant after an Information has been filed. Counsel should coordinate relief before both the DOJ and the trial court where necessary.

How to defend a cyber-libel complaint

1. Treat every subpoena or notice as time-sensitive

Record:

The actual date and method of receipt;
The investigation or case number;
The submission and hearing dates;
The prosecutor, agency, or court that issued it; and
Every attachment received.

Verify suspicious notices directly with the named government office, using its official contact information. Do not ignore a genuine subpoena because you believe the complaint is weak.

2. Obtain the complete case record

The subpoena should come with the complaint-affidavit and supporting evidence. If pages, links, exhibits, or media files are missing or inaccessible, make an immediate written request for complete copies and appropriate time to respond. Do not wait until the filing date before raising the problem.

3. Preserve defense evidence

Keep:

The original post, drafts, edit history, and account export;
The sources reviewed before publication;
Research notes, official records, interview recordings, and messages;
Communications showing attempts to verify the information;
The complete context, including earlier statements in the same conversation;
Evidence of the intended and actual audience;
Evidence supporting good motive or a legal, moral, or social duty;
Account-login alerts, device logs, and security reports if hacking or impersonation is claimed;
Retractions, corrections, or apologies, with dates; and
Evidence relevant to venue, publication, discovery, and prescription.

Do not delete or secretly alter evidence after receiving notice of a dispute. If an account was compromised, secure it, change credentials, preserve available login records, and report the compromise to the platform without destroying evidence.

4. File a verified counter-affidavit

The subpoena should give at least 10 calendar days from receipt before the scheduled preliminary-investigation hearing. File on or before the specific date stated unless the prosecutor grants written relief.

A counter-affidavit should answer the elements and evidence directly. It may raise, when supported:

Lack of defamatory meaning;
Lack of publication to a third person;
Failure to identify the complainant;
Lack of authorship or account control;
Absence of the required computer-system connection;
Privilege;
Truth together with the statutory requirements of good motives and justifiable ends;
Protected comment on a matter of public interest;
Failure to prove actual malice where required;
Improper venue;
Prescription;
Unauthenticated, incomplete, altered, or misleading electronic evidence;
Constitutional protection against duplicative prosecution; or
Other facts showing that the evidence cannot establish all elements with reasonable certainty of conviction.

Do not submit only a motion to dismiss in place of the counter-affidavit. The prosecutor may resolve the complaint on the complainant’s evidence if the respondent fails to submit a proper answer or appear as directed.

5. Understand the principal defenses

Truth is not automatically enough

Article 361 provides that an accused may be acquitted when the defamatory matter is true and was published with good motives and for justifiable ends. Proof of the truth of a non-criminal imputation is subject to additional statutory limits, particularly where it concerns a government employee’s official duties.

A defense based on truth should therefore include the underlying records, reliable sources, verification performed before publication, and evidence explaining why public disclosure was justified.

Privileged communication

Article 354 recognizes qualified privileges for:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments or remarks, of a non-confidential judicial, legislative, or other official proceeding or an official act.

Privilege depends on purpose, audience, relevance, good faith, and manner of publication. A communication that might be privileged when sent privately to the proper authority can lose protection when unnecessarily posted to the public. Malicious remarks added to an otherwise privileged report are not protected.

Statements made in judicial or legislative proceedings may also receive stronger protection when relevant to the proceeding, but the exact scope depends on context.

Public officials, public figures, and public concerns

Where the complainant is a public official or public figure and the statement concerns official conduct or a legitimate public issue, liability requires proof of actual malice—knowledge of falsity or reckless disregard of whether the statement was false. Actual malice cannot simply be presumed in such cases.

This protection is not a license to fabricate accusations. Failure to investigate, standing alone, is not always actual malice, but invented facts, reliance on obviously unreliable material, deliberate avoidance of contrary evidence, or publication despite known falsity may support it.

No authorship or publication

The prosecution must connect the accused to the publication. A hacked, spoofed, or impersonated account can be a genuine defense if supported by timely security reports, platform correspondence, device records, and other credible evidence. A bare denial is less persuasive where account control is otherwise established.

6. Prepare for the court stage

If the prosecutor finds sufficient evidence, an Information is filed in the designated Regional Trial Court. The judge independently evaluates whether to dismiss, require further evidence, or issue a warrant.

Cyber libel is generally bailable before conviction. If a warrant has issued, arrange lawful surrender and bail through counsel rather than evading authorities. Bail conditions and documentary requirements are determined by the court; the Supreme Court publishes a general bail requirements guide.

At trial, the prosecution must prove guilt beyond reasonable doubt, including authorship, publication, identifiability, malice, and admissibility of the electronic evidence.

Settlement, takedown, apology, and retraction

A demand letter is not a legal prerequisite to filing a cyber-libel complaint. Removing a post, correcting it, apologizing, or offering a fair retraction may reduce continuing harm and may matter to motive, damages, settlement, or sentencing. It does not automatically erase an offense already completed.

Likewise, an affidavit of desistance does not automatically terminate a criminal case. Once a public offense is being prosecuted, the prosecutor and court decide whether the evidence and law still justify continuing the case.

Any settlement should clearly address:

Removal or correction of specific content;
The exact wording and placement of any retraction;
Preservation of evidence;
Civil claims and releases;
Confidentiality that does not obstruct lawful proceedings;
Pending prosecutor or court filings; and
Who will take the necessary procedural steps.

Do not offer money, threaten further publication, intimidate witnesses, or make unlawful conditions. Have counsel review any settlement before signing.

Common mistakes

Waiting for a platform response while the one-year period runs;
Treating a blotter, demand letter, or investigative interview as the formal criminal complaint;
Filing in a convenient but legally unsupported venue;
Submitting only cropped screenshots without URLs, dates, context, or authentication;
Naming an account owner without evidence of who operated it;
Assuming a false or hurtful statement is automatically criminal;
Assuming truth alone is a complete defense;
Publicly reposting the accusation while trying to complain about it;
Deleting posts, drafts, messages, or login records after receiving notice;
Ignoring a subpoena or filing only a motion to dismiss;
Missing the 10-day response opportunity, 15-day review periods, or one-year prescription;
Contacting the opposing party or witnesses in a threatening manner;
Assuming an apology or affidavit of desistance automatically ends the case; and
Arguing the case on social media, creating admissions or a new defamatory publication.

When legal help is urgent

Seek a Philippine criminal-law lawyer immediately if:

The apparent one-year deadline is approaching;
You received a prosecutor’s subpoena, NBI summons, Information, or warrant;
Platform data, account logs, or an anonymous account may soon disappear;
The case involves a journalist, whistleblower, public official, public figure, or confidential source;
Authorship, hacking, impersonation, or venue is disputed;
The post alleges a serious crime or contains private records;
There are threats, stalking, doxxing, extortion, or an immediate safety risk;
The complainant or respondent is abroad; or
A civil damages case or employment, professional, or administrative proceeding is also threatened.

Qualified indigent persons may seek assistance from the Public Attorney’s Office, which may represent indigent accused during preliminary investigation and trial, subject to its eligibility, merit, and conflict rules.

Frequently asked questions

Is a screenshot enough to win a cyber-libel case?

Not necessarily. A screenshot may be admissible, but its accuracy, completeness, source, authorship, integrity, and context may be challenged. Preserve the URL, account details, original files, device or platform records, and testimony from a person who saw and captured the publication.

Can I file if the post has already been deleted?

Yes, if the publication and its author can still be proved with admissible evidence. Deletion can make proof and platform tracing more difficult, so preserve the material and seek lawful data preservation promptly.

Can I be charged merely for liking or sharing a post?

A bare reaction or simple share is not automatically aiding or abetting cyber libel under Disini. Liability remains possible if you add your own defamatory accusation or create a new publication. The precise content and manner of sharing matter.

Is a true statement immune from cyber libel?

No. Article 361 generally requires both truth and publication with good motives and for justifiable ends, and it limits proof of certain non-criminal imputations. Privilege, public interest, and the surrounding facts must also be considered.

Does a private group chat count as publication?

It can. Publication requires communication to at least one person other than the person defamed. A limited audience may matter to privilege, malice, and damages, but “private group” does not necessarily mean “no publication.”

Can an anonymous account be charged?

An investigation may begin even when the user’s identity is unknown, but prosecution ultimately requires sufficient evidence identifying a responsible person. Seek prompt assistance because subscriber information and logs may be retained only for limited periods and can be obtained only through lawful process.

Does taking down the post prevent a case?

No. Cyber libel may already be complete once the material is published to a third person. Takedown may limit further harm and may help in settlement or mitigation, but it does not automatically extinguish criminal or civil liability.

Does an apology end the case?

No. An apology may be relevant to good faith, damages, settlement, or penalty, but only the proper prosecutor or court can terminate an existing criminal proceeding.

Is barangay conciliation required first?

Generally, no. Cyber libel carries a penalty beyond the jurisdictional threshold for mandatory Katarungang Pambarangay conciliation and is handled through the prosecutor and designated cybercrime court. Related civil or interpersonal disputes may be treated differently.

Can the complainant file ordinary libel and cyber libel for the same post?

The prosecution should not impose duplicative criminal liability for ordinary libel and cyber libel based on the same act in violation of Disini. Distinct statements or publications may require a separate analysis.

Does filing a DOJ petition for review stop a warrant or court case?

Not automatically. Once an Information is filed, court proceedings continue unless the court or an authorized reviewing official grants appropriate relief. Coordinate the DOJ review and trial-court remedies through counsel.

Key official sources

This article provides general Philippine legal information, not legal advice or an attorney-client relationship. Cyber-libel outcomes depend heavily on the exact words, audience, account records, source documents, discovery date, venue, and procedural history. Law and official procedures checked through July 23, 2026.