Quick answer

To file a criminal cyber libel case, submit a sworn complaint-affidavit and supporting evidence to the proper city or provincial prosecutor within one year from discovery of the alleged cyber libel. The prosecutor—not the complainant—decides whether the evidence justifies filing an Information in a designated cybercrime Regional Trial Court.

To defend, do not ignore a prosecutor’s subpoena. Obtain counsel, preserve the complete online material, and submit a sworn counter-affidavit on the date stated in the subpoena. Under the current DOJ rules, that date must give the respondent at least 10 days from receipt of the subpoena and complaint. Possible defenses include failure to prove authorship, publication, identifiability, defamatory meaning or malice; privilege; truth published with good motives and justifiable ends; prescription; and improper venue.

A rude, false or damaging online statement is not automatically cyber libel. Every required element—and the accused’s identity as the responsible author—must be supported by admissible evidence.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the prohibited act is committed through a computer system or a similar technological means.

Generally, the prosecution must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status or circumstance tending to dishonor, discredit or expose a person or juridical entity to contempt.
Publication. At least one person other than the author and the person defamed received, read, heard or saw the statement.
Identifiability. The complainant was named or could be identified by at least one third person from the words, images and surrounding circumstances.
Malice. Malice may be presumed in an ordinarily defamatory statement about a private person, subject to defenses and exceptions. In cases involving protected criticism of public officials or public figures, actual malice may have to be proved.
Use of a computer system or comparable means. Examples include social-media posts, online articles, emails and electronic messages.
Responsibility for the statement. The evidence must connect the respondent to the authorship or legally relevant publication of the exact material charged.

These principles come from Articles 353 to 361 of the Revised Penal Code and the Supreme Court’s decision in Disini v. Secretary of Justice.

Context matters. Courts examine the statement as a whole, including its language, images, audience, surrounding exchange and ordinary meaning. Mere annoyance, criticism, satire or harsh opinion is not necessarily a defamatory factual imputation. Labeling a factual accusation “opinion” does not automatically protect it.

Original posts, shares and reactions

In Disini, the Supreme Court held the cyber-libel provision valid as to the original author, but unconstitutional as applied to people who merely receive a post and react through functions such as “Like,” “Comment” or “Share.” The Court also invalidated aiding or abetting liability in relation to cyber libel.

That ruling should not be stretched too far. A person who writes a new defamatory caption, adds a separate accusation, creates a fresh post or adopts material as their own presents different facts from someone who merely clicks a platform reaction. Editors, page administrators, employers and organizational publishers may also present fact-specific questions requiring individual legal analysis.

Private messages can still be published

“Publication” does not mean that a statement must be public to the whole internet. A defamatory private message about Ana sent only to Ana ordinarily lacks publication to a third person. The same accusation sent to Ana’s employer, relatives or group chat may satisfy publication because another person received it.

The one-year deadline is critical

Cyber libel prescribes in one year from the day it is discovered by the offended party, the authorities or their agents. Publication and discovery may occur on the same day, but the Supreme Court has ruled that online publication does not create an automatic presumption that the offended party immediately saw the post.

The Court confirmed this rule in Causing v. People and denied reconsideration with finality on April 8, 2026. Discovery is a factual question that may be proved through messages forwarding the post, comments, reactions, demand letters, prior threats to sue or other conduct showing when the material became known. See the 2023 decision and 2026 final resolution.

Filing the complaint or Information interrupts prescription under Article 91. A platform report, takedown request, demand letter, barangay complaint, police blotter or informal request for assistance should not be assumed to stop the one-year period. If the deadline is approaching, ensure that the proper criminal complaint is filed with the prosecution office and obtain a stamped or electronically acknowledged copy.

Cyber libel is outside mandatory Katarungang Pambarangay conciliation because its prescribed maximum imprisonment and fine exceed the limits in Section 408 of the Local Government Code.

Evidence to preserve immediately

Preserve evidence before asking the author or platform to remove the material. Keep both human-readable copies and the original electronic context.

Save:

Full-page screenshots showing the exact words, images, account name, date, time, URL and surrounding thread—not only a cropped quotation.
A screen recording showing how the account, post, comments and URL were accessed.
The original message, email, webpage, photo, video or downloadable file, including available metadata.
The device and account on which the material was first received. Do not reset, reformat or discard the device.
The date and circumstances of discovery, including who first sent or showed the post to the complainant.
Affidavits from people who saw the material and could identify the complainant before being asked to participate in the case.
Evidence linking the account to the suspected author, such as prior admissions, consistent account details, lawful correspondence or witness knowledge.
For civil damages, records of lost work, cancelled contracts, medical or counseling expenses, and other measurable consequences.
For a defense, drafts, source materials, official records, interview notes, fact-checking efforts and the full conversation showing context and motive.

Electronic evidence must be shown to be authentic, reliable and accurately preserved. A screenshot can be evidence, but it is not automatically conclusive proof of authorship or authenticity. The person offering electronic material bears the relevant authentication burden under the Rules on Electronic Evidence.

Do not hack an account, impersonate another person, secretly obtain passwords or alter files to identify an anonymous author. Subscriber, traffic and content data may require law-enforcement assistance and a court-issued cybercrime warrant.

How to file a criminal complaint

1. Test every element before filing

Write down the exact statement complained of and ask:

What specific crime, vice, defect or discreditable circumstance was imputed?
Who other than the complainant saw it?
How did that person identify the complainant?
What proves the respondent authored the statement?
When and how was it discovered?
What facts establish proper venue?
Is the statement part of an official report, protected complaint, public-interest discussion or other potentially privileged communication?
If the statement is true, what evidence addresses the author’s motive and purpose?

A complaint should focus on provable facts, not simply describe the material as “fake,” “offensive” or “cyberbullying.”

2. Determine the proper venue

Under Section 2.1 of the Rule on Cybercrime Warrants, criminal actions under Sections 4 and 5 of RA 10175 are filed in the designated cybercrime court of the province or city:

where the offense or any element was committed;
where any part of the computer system used is situated; or
where any damage to a natural or juridical person took place.

The first court in which the criminal action is properly filed acquires jurisdiction to the exclusion of the others. Because mere internet accessibility can create uncertain or competing venue claims, the complaint should allege concrete location facts. Have counsel verify venue before filing, particularly when the parties, device, server and alleged harm are in different places or countries.

3. Prepare the complaint-affidavit

The sworn complaint should clearly state:

the complainant’s and respondent’s names and addresses, if known;
the date, time, platform and place connected with the offense;
the exact words, images or recording complained of;
the URL, account details and privacy or audience setting;
how the statement was published to a third person;
how the complainant was identifiable;
the basis for attributing authorship to the respondent;
when and how the material was discovered;
facts supporting venue; and
a chronological account based on personal knowledge.

Attach witness affidavits and all available electronic, documentary and physical evidence. Follow the prosecution office’s required number of copies and filing method. The DOJ maintains an official preliminary-investigation filing checklist.

4. Seek technical investigation when necessary

A complainant may request assistance from the NBI Cybercrime Division, the PNP Anti-Cybercrime Group or the DOJ Office of Cybercrime, especially when:

the author uses an anonymous or dummy account;
account or platform data may disappear;
forensic preservation is needed;
several devices or jurisdictions are involved; or
another offense—such as threats, identity theft or unlawful access—may also have occurred.

The NBI’s official service for investigative assistance to victims of computer crimes explains its interview, sworn-statement and device-examination process. Reporting to an investigative agency, however, is not a substitute for watching the one-year prescriptive period.

5. Participate in preliminary investigation

Under the 2024 DOJ-NPS Rules, the prosecutor evaluates whether there is prima facie evidence with reasonable certainty of conviction. This means the available evidence should be admissible, credible, preservable and capable of proving every element and the responsible person’s identity if left uncontroverted.

If that standard is met, the prosecutor prepares an Information for filing in court. If not, dismissal should be recommended. The Supreme Court upheld the DOJ’s authority to apply these rules in Meking v. Remulla.

Filing a complaint does not automatically produce an arrest warrant. If an Information is filed, the judge independently evaluates judicial probable cause and may issue a warrant, dismiss the case or require additional evidence.

How to defend against a complaint

Act immediately on the subpoena

The subpoena should include the complaint and attachments and specify the preliminary-investigation hearing and counter-affidavit deadline. Under the current rules, the scheduled submission must be at least 10 days after receipt.

Engage counsel as soon as possible. Any extension is discretionary, must be based on meritorious grounds and generally may not exceed 10 days. Do not assume that settlement discussions, an apology or difficulty hiring a lawyer automatically extends the deadline.

Build the counter-affidavit around the elements

A useful counter-affidavit answers the accusation fact by fact and attaches admissible supporting evidence. Depending on the record, it may address:

Authorship: The respondent did not create or control the account or material.
Original-author requirement: The respondent merely received or reacted to another person’s post without creating a new defamatory statement.
No publication: No third person received the statement.
No identifiability: A third person could not reasonably identify the complainant.
No defamatory imputation: The words, read in context, did not attribute a crime, vice, defect or other discreditable fact.
Absence of malice: The statement concerned a public issue or official conduct and was published without knowledge of falsity or reckless disregard of truth.
Privilege: The communication was made in the performance of a legal, moral or social duty, or was a fair and true good-faith report of a non-confidential official proceeding without added comments.
Truth, good motives and justifiable ends: All three may be required; truth alone is not a universal defense.
Prescription: More than one year elapsed after legally relevant discovery before the complaint was filed.
Improper venue: The alleged facts do not place an element, relevant computer system or damage within the chosen jurisdiction.
Non-retroactivity: The alleged online publication occurred before RA 10175 took effect, subject to any genuinely distinct later publication.
Double jeopardy or duplicate charging: Disini held that the same libelous act cannot be prosecuted both as ordinary libel and cyber libel in violation of double jeopardy.

Do not rely on a bare denial when records, witnesses or account evidence can corroborate the defense.

Understand malice and public-interest speech

For a defamatory imputation against a private person, Article 354 generally presumes malice unless a recognized exception applies. If the offended party is a public official or public figure and the statement concerns official conduct or a matter of legitimate public interest, the prosecution may have to prove actual malice: knowledge that the statement was false or reckless disregard of whether it was false.

Gross negligence alone does not necessarily establish actual malice. But attacking a public figure’s purely private life, knowingly inventing facts or publishing despite serious doubts about accuracy may fall outside protected criticism. Status as a public official or celebrity is not a blanket license to defame.

Truth is not automatically enough

Under Article 361, an accused relying on truth ordinarily must prove both:

that the allegedly defamatory matter was true; and
that it was published with good motives and for justifiable ends.

Proof of a true non-criminal act or omission is subject to additional limits, except where the imputation concerns a government employee’s performance of official duties. Preserve the primary documents and witnesses proving both truth and legitimate purpose.

Challenge the case at the correct stage

If the prosecutor dismisses or files the complaint, an aggrieved party may generally move for reconsideration within 15 days from receipt under the current DOJ-NPS rules. Petition-for-review routes depend on which prosecution office issued the resolution and which court has jurisdiction. An administrative appeal does not necessarily stop an Information already filed in court, so counsel should consider a proper motion to suspend proceedings.

Once the case is in court, defenses such as prescription, improper venue, defects in the Information or double jeopardy may require a motion to quash before plea. Other defenses require trial evidence. Missing arraignment, bail, pretrial or appeal deadlines can cause serious consequences.

Possible penalties and civil liability

For offenses committed under the current penalty provisions, online libel may be punished by:

imprisonment one degree higher than ordinary libel—technically, prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years;
a fine from ₱40,000 to ₱1,500,000;
both imprisonment and fine; and
civil liability.

The Supreme Court has held that a court may impose a fine alone when justified by the circumstances, but imprisonment remains legally available. The actual sentence depends on the applicable law on the date of the offense, the evidence, modifying circumstances and judicial discretion. See People v. Soliman and the fine adjustments in RA 10951.

The civil action arising from the offense is generally deemed included in the criminal action unless waived, reserved or previously filed. Article 33 of the Civil Code also recognizes an independent civil action for defamation based on a preponderance of evidence. Civil prescription, accrual, reservation and possible double recovery require careful analysis; civil actions for defamation generally carry a one-year limitation.

Common mistakes

Waiting for a platform response, apology or settlement until the one-year criminal deadline expires.
Saving only a cropped screenshot without the URL, date, account details or surrounding exchange.
Naming an account holder as the author without evidence connecting that person to the post.
Filing wherever the content could be viewed instead of establishing concrete venue facts.
Giving an unsupported discovery date that conflicts with earlier messages, reactions or threats to sue.
Assuming that truth, public-interest language or “opinion” automatically defeats liability.
Ignoring a subpoena and allowing the prosecutor to resolve the complaint without the respondent’s evidence.
Deleting, editing or resetting accounts and devices after learning of a complaint.
Publicly attacking the other party or coaching witnesses while the case is pending.
Attempting to identify a dummy account through hacking, impersonation or unauthorized access.
Assuming an affidavit of desistance automatically ends the criminal case. The offense is prosecuted in the name of the People, and the prosecutor or court—not the private parties alone—controls its disposition.

When legal help is urgent

Consult a Philippine lawyer immediately if:

the one-year prescriptive period may expire within weeks;
a subpoena gives a counter-affidavit or hearing date;
an Information, arrest warrant, search warrant or cybercrime warrant has been issued;
arraignment or bail is pending;
the alleged author is anonymous and platform data may disappear;
the case involves a journalist, whistleblower, public official, election issue or confidential source;
the statement also involves threats, intimate material, identity theft, unlawful access or danger to a child;
the post was edited, republished or carried in both print and online versions; or
settlement terms include admissions, retractions, money or surrender of devices.

A qualified person who cannot afford private counsel may approach the Public Attorney’s Office, an IBP legal-aid office or an accredited law-school legal clinic.

Frequently asked questions

Is a screenshot enough to win a cyber libel case?

Not necessarily. It may show what appeared on a screen, but the proponent must still establish authenticity, context, publication, identifiability and authorship. Preserve the original device and obtain corroborating witnesses or lawful platform evidence when available.

Can I file against a dummy account?

Yes, but identifying the responsible person may require investigation and court-authorized disclosure of subscriber or traffic data. Do not guess the identity in a sworn complaint or obtain access unlawfully.

Is sharing a defamatory post automatically cyber libel?

No. Disini protects people who merely receive and react to a post from liability under the cyber-libel provision. Adding a new defamatory accusation or creating a separate post requires its own analysis.

Does deleting the post erase liability?

No. Deletion does not undo an alleged completed publication and may remove evidence relevant to either side. Preserve a forensic copy and obtain legal advice before changing disputed material.

Can an apology or settlement end the case?

It may help resolve the private dispute or civil claims, but it does not automatically terminate a criminal prosecution. Any settlement should clearly address retraction, preservation, confidentiality, civil claims and lawful steps the parties may take before the prosecutor or court.

Can I be arrested immediately after someone files a complaint?

A prosecutor’s complaint normally begins preliminary investigation, not automatic arrest. If an Information is later filed, the judge independently determines whether a warrant should issue. A valid warrant must not be resisted; request counsel and address bail promptly.

Is cyberbullying the same as cyber libel?

No. “Cyberbullying” describes conduct, not one universal criminal charge applicable to every situation. The facts may involve cyber libel or different laws on threats, stalking, sexual harassment, child protection, privacy or unauthorized access.

Does a later discovery date allow a complaint about any old post?

Not automatically. The complainant must prove the claimed date of discovery, and the accused may use earlier messages, reactions or conduct to show earlier knowledge. The alleged publication must also have occurred when the applicable penal law was in force.

Official and primary sources

This article provides general Philippine legal information, not legal advice or an assessment of any particular post, complaint or defense. Cyber libel outcomes depend heavily on the exact words, audience, authorship evidence, dates, venue and documents. Sources and current legal developments were checked through July 30, 2026.