Quick answer

A cyber libel case generally begins with a sworn complaint filed with the proper Office of the City or Provincial Prosecutor. The complainant must present admissible evidence supporting every element of libel, show that the defamatory material was published through a computer system, identify the original author, establish proper venue, and file within the prescriptive period.

A respondent should not ignore a subpoena. Obtain counsel promptly, preserve the post and account evidence, check authorship, publication, identification, defamatory meaning, malice, privilege, venue, and prescription, then file a detailed counter-affidavit with supporting evidence by the deadline stated in the subpoena.

The most time-sensitive rule is this: under the Supreme Court’s final ruling in Causing v. People, cyber libel prescribes in one year from its discovery by the offended party, the authorities, or their agents. Filing the proper complaint or information interrupts prescription. A demand letter, platform report, police blotter, or informal investigation should not be assumed to do so. The computation is fact-sensitive, so do not wait until the last weeks of the period. Causing v. People, G.R. No. 258524, April 8, 2026

What counts as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the publication is made through a computer system or similar means. This can include social-media posts, online articles, emails, online videos containing defamatory text or speech, and messages sent to a group.

The prosecution must establish:

A defamatory imputation. The material attributes a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose a person or juridical entity to contempt.
Publication. At least one person other than the person defamed received, read, heard, or saw the statement.
Identification. The offended person is named or is sufficiently identifiable from the words, images, context, or surrounding circumstances.
Malice. Malice may be presumed in an unprivileged defamatory publication, but different rules apply to privileged communications and speech involving public officers, public figures, or matters of public interest.
Use of a computer system. The material was published through information and communications technology.
Authorship or responsibility. The respondent was the original author or created an independently defamatory online statement.

A private one-to-one message seen only by its sender and the person defamed ordinarily lacks publication for libel. A group message may satisfy publication because other members receive it. Other offenses or civil claims may still apply even when an essential element of cyber libel is absent.

Context matters. Courts examine the entire publication, not isolated words alone. Calling something a “joke,” “opinion,” or “blind item” does not automatically prevent liability if the context identifies someone and conveys or implies defamatory facts.

Original posts, reactions, shares, and comments

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as to the original author, but declared it unconstitutional as applied to people who merely receive and react to a post. The Court also invalidated the Cybercrime Act’s general aiding-or-abetting provision insofar as it applies to cyber libel.

Accordingly:

Merely liking or reacting to another person’s post is not cyber libel.
Merely sharing or reposting another person’s material without adding an independently defamatory assertion is generally protected by the Disini ruling.
A commenter who creates a new defamatory accusation may be treated as the original author of that new statement.
Copying another person’s accusation into a newly authored post, adding a defamatory caption, or presenting the accusation as one’s own can raise a different issue from a mechanical share.

The exact wording and platform behavior must be examined. Do not assume that every “share” is protected or that every commenter is liable.

Important defenses and exceptions

No defamatory meaning

Criticism, disagreement, satire, rhetorical exaggeration, or an unpleasant remark is not automatically libel. The question is whether the publication, read in its full context and ordinary meaning, makes an imputation that tends to dishonor, discredit, or expose an identifiable person to contempt.

No publication

The prosecution must prove that someone other than the offended person received the statement. A screenshot showing that a message existed does not necessarily prove that a third person saw it.

The complainant was not identifiable

A person need not be named, but identification cannot rest on guesswork. Evidence must show that readers who knew the circumstances could reasonably understand that the publication referred to the complainant.

The respondent was not the author

A profile name, photograph, or screenshot alone may not prove who owned, controlled, or used an account at the relevant time. Relevant evidence can include admissions, eyewitness testimony, linked telephone numbers or email addresses, device records, account-recovery information, distinctive facts known to the author, subscriber data lawfully obtained from a service provider, and consistent prior account use.

The Supreme Court has emphasized the risk of impersonation and the need for reliable evidence connecting an accused to a social-media account. SC guideposts on proving social-media account ownership or control

Privileged communication

Article 354 of the Revised Penal Code recognizes, among others:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments or remarks, of non-confidential judicial, legislative, or other official proceedings or official acts.

Privilege is not a license to publish unrelated insults or knowingly false embellishments. The audience, purpose, wording, relevance, good faith, and extent of publication all matter. Malicious remarks may defeat a qualified privilege.

Public officers, public figures, and matters of public interest

When protected comment concerns the official conduct of a public officer, a public figure, or a genuinely public matter, liability may require proof of actual malice—knowledge that the statement was false or reckless disregard of whether it was false. Reckless disregard requires more than ordinary carelessness; evidence must support a high degree of awareness of probable falsity or serious doubts about the statement’s truth.

Public status is not a complete defense. Unrelated attacks on a person’s private life, fabricated accusations, or statements published with actual malice may still be actionable. Disini v. Secretary of Justice

Truth, good motives, and justifiable ends

Truth is not always a stand-alone defense under Philippine criminal libel law. Article 361 provides for acquittal when the matter is true and was published with good motives and for justifiable ends. Proof of the truth of a non-criminal act or omission is generally restricted unless the imputation concerns a government employee and facts related to official duties.

A respondent relying on truth should preserve the underlying records, sources, verification efforts, chronology, and evidence of a legitimate purpose. Repeating an unverified rumor is not made safe merely because someone else supplied it. Revised Penal Code, Articles 353–362

Prescription

Cyber libel prescribes in one year from discovery by the offended party, the authorities, or their agents. Discovery is a factual question. It may be shown by a comment, reaction, message, demand, threat of legal action, or another act demonstrating knowledge of the post.

The period is interrupted by filing the complaint or information and may run again if proceedings terminate without conviction or acquittal or are unjustifiably stopped for a reason not attributable to the accused. Article 91 also contains a rule concerning an offender’s absence from the Philippines. Obtain a date-specific computation rather than relying on a rough anniversary calculation.

The publication predates the Cybercrime Act

An online publication made before the Cybercrime Prevention Act took effect cannot be punished retroactively as cyber libel. Whether a later edit, upload, caption, or independently authored republication constitutes a new offense depends on what was actually done and the law applicable to those facts.

Penalties and civil exposure

Cyber libel carries a penalty one degree higher than traditional written libel. The imprisonment range is prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years.

After the adjustment of fines under Republic Act No. 10951 and the Supreme Court’s application of Section 6 of the Cybercrime Act, the authorized fine is ₱40,000 to ₱1,500,000. The court may impose imprisonment, a fine, or both, depending on the circumstances.

A fine alone is legally possible, but it is not guaranteed. Courts retain discretion, and the Supreme Court’s preference guidance for libel cases does not remove imprisonment as an available penalty. People v. Soliman, G.R. No. 256700, April 25, 2023

The offended party may also pursue civil damages subject to procedural rules, proof of injury, and the Civil Code’s separate one-year period for an action for defamation. A criminal complaint ordinarily carries the corresponding civil action unless it is waived, reserved when legally permitted, or previously filed. Separate criminal and civil filings require careful coordination.

How to preserve digital evidence

Act before the post, account, comments, or logs disappear.

Preserve:

Full-page screenshots showing the exact words, images, account name, date and time, and visible engagement;
The direct post, profile, article, video, or message URL;
A screen recording showing how the post is reached from the profile or conversation;
The complete thread and surrounding context, not only the allegedly defamatory sentence;
Original downloaded images, videos, audio, email files, and message exports;
The device on which the content was received or viewed;
Names and sworn statements of people who personally saw the publication;
Messages, reactions, or notices showing when the complainant first discovered it;
Admissions or communications linking the author to the account;
Platform reports, takedown notices, demand letters, replies, apologies, and retractions;
Documents showing reputational, employment, business, medical, or financial consequences; and
For a respondent, drafts, sources, research, official records, verification efforts, access logs, hacking reports, and account-security notices.

Keep unedited originals. Make working copies for annotation. Record who captured each item, when, on what device, and from which URL or account. Do not crop away information needed for authentication.

Electronic evidence must still be authenticated. The person offering it bears the burden of establishing its integrity and reliability. Rules on Electronic Evidence, A.M. No. 01-7-01-SC

Do not hack an account, impersonate someone, guess passwords, install spyware, or obtain private data unlawfully. Evidence obtained through illegal access may create separate liability and admissibility problems.

How to file a complaint

1. Confirm the critical dates

Record separately:

Date and time of publication;
Date and manner of discovery;
Date the author’s identity became known;
Dates of any deletion, edit, repost, or new comment; and
Dates of reports or filings with police, investigators, and prosecutors.

Because the criminal prescriptive period is one year from discovery, promptly determine what filing will legally interrupt it.

2. Identify the proper respondent

Name the person who allegedly authored the defamatory statement and explain the evidence connecting that person to the account. If the account is anonymous, report promptly to a cybercrime unit. Investigators may seek preservation and court-authorized disclosure of subscriber or traffic data.

Do not accuse a person solely because their name or photograph appears on an account.

3. Choose the proper venue

Cyber libel cases are within the jurisdiction of a designated cybercrime Regional Trial Court. Under the Rule on Cybercrime Warrants, the criminal action may be filed in the province or city where:

The offense or any element occurred;
Any part of the computer system used is situated; or
Any damage to a natural or juridical person took place.

The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of the others. Venue facts must be specifically supported; nationwide accessibility does not justify filing in any convenient location. Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC

4. Prepare a complete complaint-affidavit

The affidavit should clearly state:

The parties’ names and addresses;
The exact defamatory words, images, audio, or video;
The platform, account, link, publication date, and discovery date;
The complete context;
How the complainant is identified;
Who received or saw the publication;
Why the respondent is believed to be its author;
Facts establishing venue;
Why the publication is defamatory and malicious;
The harm caused; and
A numbered list of attached evidence.

Attach witness affidavits and properly marked exhibits. Complete the National Prosecution Service Investigation Data Form and follow the filing office’s current requirements for originals, duplicate copies, service on each respondent, electronic files, and oath administration. DOJ filing requirements for preliminary investigation

5. File with the proper prosecutor

File with the Office of the City or Provincial Prosecutor having territorial authority over the chosen venue. A complaint may also be investigated with assistance from the NBI Cybercrime Division or the PNP Anti-Cybercrime Group, but an investigator’s report or platform complaint should not be treated as a substitute for timely filing with the prosecutor.

Under Republic Act No. 10175, the NBI and PNP are the principal law-enforcement authorities for cybercrime. When provider-held data is at risk, ask investigators about a lawful preservation request and, when required, an application for a cybercrime warrant.

6. Participate in the preliminary investigation

Under the 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings, the prosecutor determines whether the evidence establishes a prima facie case with reasonable certainty of conviction.

The respondent receives a subpoena with the complaint and supporting evidence. The subpoena should allow at least 10 calendar days to submit a counter-affidavit. Clarificatory hearings, reply-affidavits, or rejoinder-affidavits are not automatic and may be required when necessary.

A complainant should be ready to establish admissibility, credibility, preservation, authorship, and every element—not merely submit screenshots and expect investigators to complete the case.

How to defend a complaint

1. Treat the subpoena as urgent

Note the exact date, time, and manner of receipt. Preserve the envelope, registry receipt, email headers, or electronic notice. The deadline in the subpoena controls immediate action.

Consult a Philippine criminal-defense lawyer before contacting the complainant, posting a public response, surrendering a device, or giving investigators a statement. Do not rely on an informal assurance that the hearing will be moved.

2. Obtain and review the complete record

Secure the complaint-affidavit, all attachments, URLs, screenshots, witness affidavits, and the prosecutor’s orders. Check whether exhibits are missing, cropped, unreadable, unauthenticated, or inconsistent.

3. Build an element-by-element defense

Ask:

What exact statement is charged?
Is it defamatory when read in context?
Did a third person receive it?
Is the complainant identifiable?
Was the respondent the original author?
Is the evidence authentic and admissible?
Was the account hacked, shared, spoofed, or impersonated?
Is the statement privileged?
Does the case involve official conduct, a public figure, or a public issue requiring proof of actual malice?
Can truth, good motives, and justifiable ends be proved?
Was the complaint filed within one year from provable discovery?
Does the chosen venue satisfy the governing rule?

4. Preserve defense evidence

Do not delete posts, wipe devices, close accounts, edit messages, fabricate screenshots, or ask witnesses to change their accounts. Preserve account-access notices, login histories, devices, source material, official records, correspondence, drafts, and testimony from people with personal knowledge.

If the account was compromised, document when and how it happened, preserve security alerts, change credentials safely, and make a truthful report to the platform and appropriate authorities.

5. File a sworn, supported counter-affidavit

A bare denial is rarely enough. State the material facts chronologically, answer the complaint’s allegations, raise applicable legal defenses, and attach affidavits and documents capable of being authenticated and presented at trial.

Generally, a motion to dismiss is not a substitute for the counter-affidavit at this stage. If no counter-affidavit is filed, the prosecutor may resolve the case from the complainant’s evidence.

6. Use remedies promptly

An aggrieved party may file a motion for reconsideration of the prosecutor’s resolution within 15 days from receipt under the 2024 DOJ-NPS Rules. Further review is governed by the applicable DOJ appeal rules.

A petition for review does not automatically suspend a criminal case already filed in court. The current DOJ rules require the petition to be accompanied by the appropriate motion to suspend proceedings filed with the court. Continue monitoring court notices, warrants, arraignment, and bail requirements.

If an Information is filed, the judge independently determines probable cause. The court may dismiss the case, issue a summons when authorized, or issue a warrant of arrest. Cyber libel is bailable before conviction, but the amount and conditions are determined by the court. Arrange any surrender and bail application through counsel.

Retraction, apology, settlement, and desistance

A prompt correction, deletion, apology, or retraction may reduce harm and may be relevant to motive, damages, or the eventual penalty. It does not automatically erase a completed offense.

Similarly, an affidavit of desistance does not by itself require dismissal. Once a criminal case is instituted, prosecution is undertaken in the name of the People of the Philippines, and the prosecutor or court must still act according to the evidence and law.

Settlement discussions should be handled carefully. Do not demand money in exchange for suppressing evidence, threaten additional publication, pressure witnesses, or make admissions without advice. Civil claims may be compromised, but criminal disposition remains subject to prosecutorial and judicial authority.

Common mistakes

Waiting for a platform to respond while the one-year period runs;
Treating a police blotter or demand letter as the filing that interrupts prescription;
Filing wherever the post can be viewed without establishing statutory venue;
Submitting only a cropped screenshot with no URL, context, witness, or authentication;
Assuming the account’s display name proves authorship;
Believing truth alone always defeats criminal libel;
Assuming public officers cannot be defamed;
Charging everyone who liked or mechanically shared a post;
Ignoring a new defamatory accusation written in a comment or share caption;
Deleting the post or wiping a device after receiving notice of a complaint;
Posting retaliatory accusations during the investigation;
Ignoring the subpoena because settlement talks are ongoing;
Missing the 15-day period for reconsideration; and
Assuming an apology or affidavit of desistance automatically ends the case.

When legal help is urgent

Seek immediate assistance when:

The one-year anniversary of discovery is approaching or the discovery date is disputed;
The content or account may soon disappear;
The account is anonymous, impersonated, hacked, or controlled from abroad;
You receive a prosecutor’s subpoena, court summons, Information, or warrant;
An arraignment or bail hearing has been scheduled;
The case involves a journalist, whistleblower, public officer, election issue, confidential source, or official document;
The post includes threats, doxxing, intimate images, extortion, stalking, or harm to a child;
Police request access to a device, account, or private communications; or
Anyone pressures a party or witness to delete evidence, execute a false affidavit, or withdraw through payment or threats.

For immediate danger, contact 911 or the nearest police station. For digital investigation and lawful provider-data preservation, contact the PNP Anti-Cybercrime Group or NBI cybercrime investigators without delaying the prosecutor filing deadline.

FAQ

Can I file without a lawyer?

Yes, a complainant may personally execute and file a complaint-affidavit. Cyber libel nevertheless involves a short prescriptive period, technical venue rules, electronic authentication, and constitutional defenses. Legal review before filing is strongly advisable.

Is a demand letter required?

No. A demand, takedown request, or request for correction is not an element of cyber libel. It may help establish notice, discovery, motive, mitigation, or continuing harm, but it does not replace the criminal complaint.

Can I file against an anonymous account?

An investigation may begin when the author is initially unknown, but criminal liability ultimately requires reliable identification. Investigators can pursue lawful preservation and court-authorized disclosure where the legal requirements are met.

Is a screenshot enough?

Not necessarily. It must be authenticated and connected to the publication and author. Preserve the URL, full context, original device or file, capture details, and witnesses with personal knowledge.

Can someone be charged for a share or reaction?

Not for merely receiving and reacting to another person’s post under Disini. A person who adds a new, independently defamatory statement may be liable as the author of that new statement.

Is a group-chat accusation cyber libel?

Potentially. Publication may exist when other group members receive the accusation. The complainant must still prove defamatory meaning, identification, malice, authorship, use of a computer system, venue, and timely filing.

Does deleting the post end the case?

No. Deletion does not erase an offense already completed or copies already preserved. It may, however, stop further spread and can be relevant to mitigation.

What if the statement is true?

Truth must generally be paired with good motives and justifiable ends. Additional limits apply to proof of non-criminal acts or omissions. Preserve the sources and legitimate reason for publication.

Can cyber libel lead to imprisonment?

Yes. Imprisonment remains authorized, although a court may impose a fine alone in an appropriate case. No one can promise the eventual sentence before the evidence and circumstances are evaluated.

How long do I have to complain?

The current Supreme Court rule is one year from discovery by the offended party, the authorities, or their agents. Because discovery and interruption can be disputed, obtain a formal computation and file well before the apparent deadline.

Official legal sources

This article provides general Philippine legal information, not legal advice or an assessment of any particular post, document, deadline, or case. Rules may apply differently depending on the exact words, audience, dates, parties, evidence, and venue. Sources were checked through August 4, 2026.