Quick answer

Cyber libel is committed when a person publishes online a defamatory and malicious imputation about an identifiable person or entity. The prosecution must establish all elements of ordinary libel under the Revised Penal Code and show that the publication was made through a computer system or similar digital means.

A complainant generally starts by filing a properly sworn complaint-affidavit, witness affidavits, and supporting digital evidence with the prosecutor’s office that has territorial authority over the case. The National Bureau of Investigation Cybercrime Division or the Philippine National Police Anti-Cybercrime Group may assist in identifying an anonymous account or preserving technical evidence.

A respondent should not ignore a subpoena, delete material, contact or threaten the complainant, or answer publicly in anger. The proper response is a timely, evidence-supported counter-affidavit addressing every element, any applicable privilege or defense, authorship, venue, jurisdiction, and prescription.

Cyber libel generally prescribes in one year from discovery of the alleged offense by the offended party, the authorities, or their agents. Filing the complaint or information interrupts prescription. Because the date of discovery can become a disputed factual issue, neither side should assume that the date of posting automatically controls.

What Philippine law treats as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act of 2012, or Republic Act No. 10175, covers the acts of libel defined in Article 355 of the Revised Penal Code when committed through a computer system or another similar means.

The Supreme Court has explained that cyber libel is not an entirely new form of defamation. It is libel committed through information and communications technology, with the use of that technology affecting the applicable penalty. See Disini v. Secretary of Justice, G.R. No. 203335, February 11, 2014.

Potential examples include an original defamatory post, article, caption, video, comment, message, email, or other digital publication. Whether a particular communication qualifies depends on its complete wording, context, audience, authorship, and manner of transmission—not merely on the platform used.

What must be proved

The prosecution must establish all of these matters:

A defamatory imputation. The statement imputes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person or juridical entity to contempt.
Publication. The statement was communicated to at least one person other than the person defamed. A purely private message received only by its subject ordinarily lacks this element, although forwarding it to another person may change the analysis.
Identifiability. The complainant was named or was sufficiently identifiable to a third person from the words, descriptions, surrounding facts, or admissible extrinsic evidence. It is not enough that the complainant alone believed the post referred to them. The Supreme Court discusses this requirement in Lastimosa v. People, G.R. No. 233577, December 5, 2022.
Malice. The publication was legally malicious. Malice may sometimes be presumed from a defamatory imputation, but that presumption is subject to statutory privileges and constitutional protections.
Use of a computer system or similar digital means. The allegedly libelous material was published through information and communications technology.
Responsibility of the accused. The evidence must link the respondent to the creation or publication charged. A profile name, screenshot, or allegation that “this is their account” is not automatically conclusive proof of authorship.

The exact words and their full context matter. Courts interpret the publication as a whole and ordinarily give the words their plain, natural meaning. Insults, exaggeration, satire, opinion, and assertions of verifiable fact are not automatically treated alike.

General rules and important exceptions

Truth is important, but it is not always the whole defense

In Philippine criminal libel law, merely proving that a statement was true may not always be sufficient. Article 361 of the Revised Penal Code makes the admissibility and effect of proof of truth depend on the nature of the imputation. Acquittal based on truth generally also requires proof that the publication was made with good motives and for justifiable ends.

Special rules apply when the imputation concerns a crime allegedly committed by the complainant or the discharge of official duties by a government officer. A lawyer should match the proposed truth defense to the precise language of Articles 354 and 361 and the relevant jurisprudence.

Preserve the original documents, official records, messages, interviews, source material, and verification work supporting the statement. A belief that something was true is not the same as having admissible proof of it.

Privileged communications

Article 354 recognizes two principal qualified privileges:

A private communication made to another person in the performance of a legal, moral, or social duty.
A fair and true report, made in good faith and without comments or remarks, of a non-confidential judicial or other official proceeding, an official statement or report, or an act performed by a public officer in the exercise of official functions.

Qualified privilege does not grant automatic immunity. The communication must remain within the purpose and audience of the privilege, and proof of actual malice may defeat it.

Statements made in certain official proceedings may also be absolutely privileged when they are relevant to the proceeding, but the scope of that protection is fact-sensitive. Reposting the same accusation outside the protected setting may be treated differently.

Public officials and public figures

When an allegedly defamatory statement concerns a public official or public figure and relates to a matter of public concern, the prosecution must prove actual malice: knowledge that the statement was false or reckless disregard of whether it was false.

Mere error, inaccuracy, or ordinary negligence does not by itself establish actual malice. The Supreme Court explains this standard in Daquer v. People, G.R. No. 206015, June 30, 2021.

This protection is not a license to invent facts. A knowingly false accusation or one published despite serious doubts about its truth may still be actionable. Attacks on a public figure’s private life that have no sufficient connection to public duties may also fall outside the protection afforded to criticism of official conduct.

Likes, reactions, and ordinary sharing

In Disini, the Supreme Court upheld cyber libel as applied to the original author but declared Section 5 of Republic Act No. 10175 unconstitutional insofar as it punished aiding or abetting cyber libel. The Court was particularly concerned about automatically treating ordinary online reactions—such as likes, shares, and similar interactions—as criminal participation.

That does not mean every person who interacts with a post is immune. A comment or repost that creates a new defamatory assertion may itself be evaluated as an original publication. Liability therefore depends on what the person actually added, adopted, or published.

Posts made before the cybercrime law took effect

The Constitution prohibits ex post facto punishment. A publication completed before Republic Act No. 10175 took effect cannot be retroactively punished as cyber libel merely because it remained accessible online afterward.

A later substantive modification or republication may present a different issue. Changing an article, reposting it, or presenting it anew should be assessed from the actual records rather than assumed to be legally insignificant.

The filing deadline: one year from discovery

The Supreme Court held that cyber libel prescribes in one year, abandoning earlier rulings that applied much longer periods. The period begins when the alleged offense is discovered by the offended party, the authorities, or their agents—not necessarily when the material was first uploaded.

The period is interrupted by filing the complaint or information. It may begin running again if the proceedings terminate without conviction or acquittal or are unjustifiably stopped for a reason not attributable to the accused.

The governing decision is Causing v. People, G.R. No. 258524, October 11, 2023, as affirmed in 2026.

Evidence of discovery may include:

The date and time the complainant first received or viewed the material.
The message or notification through which another person sent the post.
An affidavit from the person who alerted the complainant.
Access records, emails, chat logs, or earlier complaints showing prior knowledge.
Earlier public responses that may contradict a claimed later discovery date.

Prescription is often a factual defense. If it is not clear from the face of the charge, the accused may have to present evidence establishing the relevant discovery and filing dates.

Where to file

A criminal complaint is ordinarily filed for preliminary investigation with the appropriate city or provincial prosecutor, or another authorized prosecution office. Cybercrime investigators from the NBI or PNP may receive reports and conduct technical investigation, but the prosecutor determines whether the evidence supports filing an information in court.

Republic Act No. 10175 assigns cybercrime cases to the Regional Trial Court, including designated special cybercrime courts. Its jurisdiction can extend to an offense involving a Filipino national abroad, an element committed in the Philippines, a computer system wholly or partly situated here, or damage caused to a person who was in the Philippines when the offense was committed.

Jurisdiction is not the same as venue. The correct prosecutor’s office and trial court depend on the allegations and provable facts about publication, the parties, residence, computer systems, and where an essential element occurred. Libel also has special venue rules under Article 360 of the Revised Penal Code. Filing in a convenient location without a legally sufficient venue basis can lead to dismissal or delay.

Before filing, have counsel identify the specific venue facts and place them in the complaint-affidavit. A general allegation that an online post “could be read anywhere” should not be treated as a substitute for proper venue allegations and evidence.

How to file a cyber libel complaint

1. Preserve the publication immediately

Capture more than a cropped screenshot. Preserve:

The complete post, article, video, comment, or message.
The account name, profile page, and visible account identifiers.
The full URL or other unique locator.
The date and time displayed, including the time zone when available.
The surrounding thread, preceding statements, captions, attachments, and replies.
Public engagement information relevant to publication.
The device on which the content was viewed.
Messages showing when and how the complainant learned of it.
Copies in their original electronic format, when available.
Any later edits, corrections, reposts, or deletion notices.

Make an unedited screen recording showing the path from the account or page to the publication. Keep the original files and make working copies. Record who collected each item, when it was collected, and how it was stored.

Screenshots can be useful, but authenticity remains a separate evidentiary question. Avoid altering, annotating, or repeatedly converting the only copy.

2. Identify the exact accusation and why it is defamatory

Quote the precise words being challenged and explain their ordinary meaning in context. Identify whether they allege a crime, dishonesty, misconduct, a vice, or another discrediting fact.

Do not rely only on conclusions such as “the post ruined my reputation.” Explain how another person understood the publication and recognized the complainant as its subject.

3. Establish publication and identifiability

Obtain affidavits from people who personally saw or received the material. If the complainant was not named, a witness should explain how the witness identified the complainant from the publication itself or from relevant surrounding circumstances.

Avoid scripted or identical affidavits. Each witness should state only facts within that witness’s personal knowledge.

4. Gather evidence connecting the respondent to the account

Possible evidence includes:

Admissions in messages or prior proceedings.
Consistent account identifiers and verified ownership information.
Posts or communications showing control of the account.
Witness testimony based on personal knowledge.
Lawfully obtained subscriber or technical information.
Digital-forensic findings.

Do not obtain passwords, impersonate another person, hack an account, or unlawfully access private data. Subscriber information, traffic data, content data, and devices may require lawful process and a court-issued cybercrime warrant.

5. Document harm without exaggeration

Keep records of lost work, cancelled contracts, disciplinary action, medical or counselling expenses, messages from clients or relatives, and other consequences tied to the publication.

Actual financial loss is not a separate element of criminal libel, but reliable evidence of harm may be relevant to civil liability and damages. Emotional distress should be documented honestly and, when appropriate, through qualified professionals.

6. Prepare the sworn submissions

A filing normally includes:

A complaint-affidavit setting out facts based on personal knowledge.
Witness affidavits.
Legible, labelled annexes.
Electronic evidence and an explanation of how it was obtained.
Proof of identity and address when required.
Facts supporting venue and the date of discovery.
The respondent’s known name and address, if available.

Affidavits must be properly sworn before an authorized officer. False statements under oath can create separate legal exposure.

7. Consider investigative assistance

Anonymous, fake, or compromised accounts often require technical investigation. Report promptly to the PNP Anti-Cybercrime Group or the NBI, particularly when subscriber records, traffic data, preservation requests, or digital-forensic examination may be necessary.

Service providers ordinarily preserve some categories of data only for limited periods. Under Section 13 of Republic Act No. 10175, traffic data and subscriber information relating to communications services must be preserved for at least six months from the transaction, while content data is preserved for six months after a lawful preservation order. These statutory periods do not guarantee that every platform possesses every requested record.

8. File before the deadline

Do not wait until the last day of the one-year period. Determine and document the earliest defensible discovery date, then file with the proper office after confirming venue.

A demand to delete or retract is not generally a substitute for filing and should not be assumed to interrupt prescription.

What happens during preliminary investigation

Prosecutors apply the 2024 DOJ–National Prosecution Service Rules on Preliminary Investigations and Inquest Proceedings. The Supreme Court has recognized the DOJ’s authority over these executive proceedings and upheld the elevated prosecutorial standard of prima facie evidence with reasonable certainty of conviction.

In broad terms:

The complainant submits the sworn complaint and evidence.
The prosecutor determines whether the filing is sufficient to proceed.
If it proceeds, the respondent is served with a subpoena and copies of the supporting evidence.
The respondent files a counter-affidavit, witness affidavits, and documentary or electronic evidence within the period stated in the subpoena and governing rules.
The prosecutor may require clarification or additional evidence.
The prosecutor issues a resolution dismissing the complaint or approving the filing of an information.

Preliminary investigation is not the criminal trial, but it is not a formality. Both sides should present a coherent, admissible, and substantially complete case at this stage.

A party seeking review of a prosecutor’s resolution must observe the applicable DOJ appeal or review rules and the deadline stated in the resolution or controlling issuance. A request for review does not automatically stop all proceedings unless the proper authority issues a stay.

How to defend against a cyber libel complaint

Act immediately on the subpoena

Record the date and manner of service, obtain the complete complaint and annexes, and calendar the response deadline. If necessary, counsel should seek an extension through the proper procedure before the deadline expires; an extension should never be assumed.

Failure to answer allows the prosecutor to resolve the complaint using the complainant’s evidence alone.

Preserve your own evidence

Keep:

The original post and its complete thread.
Drafts, source documents, and research notes.
Messages with editors, witnesses, sources, or the complainant.
Records showing who controlled or accessed the account.
Login alerts and evidence of compromise or impersonation.
Official records underlying the publication.
Copies showing the actual audience or privacy settings.
Evidence of corrections, clarifications, or retractions.
Documents establishing relevant dates, residence, and location.

Do not delete the account, wipe the device, edit the original publication, fabricate supporting material, or coach witnesses. If removal is necessary to limit continuing harm, preserve a reliable copy first and document what was removed and when.

Test every legal element

A useful defense analysis asks:

Were the words actually defamatory when read as a whole?
Were they assertions of fact, protected opinion, rhetorical exaggeration, satire, or criticism?
Was the complainant identifiable to anyone else?
Was the material communicated to a third person?
Did the respondent author or publish it?
Was the account authentic and under the respondent’s control?
Does a statutory or constitutional privilege apply?
If a public official or public figure is involved, can actual malice be proved?
Can truth, good motive, and justifiable ends be established with admissible evidence?
Was the complaint filed within one year of discovery?
Is venue proper?
Does the charge impermissibly seek separate punishment for the same publication under both ordinary and cyber libel?

Address authorship directly

A bare denial may be inadequate when the account contains strong links to the respondent. Conversely, a screenshot bearing a respondent’s name may not establish who created the material.

If the account was hacked, cloned, impersonated, operated jointly, or accessed by another person, preserve security alerts, device histories, recovery emails, police reports, platform correspondence, and other contemporaneous proof. Avoid making sweeping claims that available digital records may contradict.

Use privilege carefully

If relying on a private communication made in the performance of a duty, explain:

What the duty was.
Why the recipient had a corresponding interest.
Why the communication was reasonably necessary.
Why its distribution was limited.
What verification was undertaken.
Why there was no actual malice.

If relying on a report of an official proceeding, compare the publication with the official record and identify any added commentary. A misleading headline, omitted qualification, or unsupported embellishment can weaken the defense.

Raise prescription with evidence

Identify:

The publication date.
The earliest provable discovery date.
The complaint or information filing date.
Any event that interrupted prescription.
Any prior communication showing the complainant knew earlier than alleged.

The Supreme Court treats prescription as a defense that may require evidence when it is not apparent from the information. A timeline supported by authenticated messages and records is more useful than a bare assertion that the post is old.

Prepare for court proceedings

If an information is filed, the RTC independently determines whether probable cause exists for issuing process. A filed case does not automatically prove guilt, and an arrest warrant does not itself establish guilt.

Cyber libel is generally bailable before conviction. The court fixes bail according to the governing rules and the circumstances of the case. Once a warrant, summons, or court notice exists, obtain counsel promptly and deal with it through lawful court procedures rather than avoiding service.

Penalties and civil liability

Article 355, as amended by Republic Act No. 10951, provides for ordinary written libel a penalty of prisión correccional in its minimum and medium periods, or a fine of ₱40,000 to ₱1,200,000, or both, in addition to possible civil liability. The amended text appears in Republic Act No. 10951.

For cyber libel, Section 6 of Republic Act No. 10175 raises the imprisonment range by one degree. The resulting range is generally four years, two months and one day to eight years, subject to the rules on application of penalties and the facts established at trial. Courts may have discretion to impose a fine instead of imprisonment where the law permits, but no accused should assume that imprisonment is legally impossible.

The offended party may also pursue civil damages. A civil action arising from the offense is generally deemed included in the criminal case unless it is waived, reserved, or previously filed as allowed by the Rules of Court. Philippine law also permits an independent civil action for defamation under Article 33 of the Civil Code, subject to procedural rules and the prohibition against double recovery.

Damages are not automatic. Their existence and amount must be supported by the law and evidence.

Evidence that both sides should preserve

Keep the following in original or reliably preserved form:

Complete web pages and message threads.
URLs, account identifiers, timestamps, and time-zone information.
Original image, audio, and video files with available metadata.
Devices used to create, publish, receive, or capture the material.
Emails and platform notifications.
Account-recovery and security records.
Witness contact details and contemporaneous statements.
Official documents and source material.
Requests for correction, replies, retractions, and settlement communications.
Proof of residence and relevant locations.
Proof of discovery and filing dates.
Receipts and records supporting claimed losses.

Maintain a simple evidence log recording the item, source, collector, collection date, and storage location. Keep a secure master copy and work only from duplicates.

Common mistakes

For complainants

Filing based only on a cropped screenshot.
Failing to prove that a third person saw the material.
Assuming that being offended is enough to establish reputational defamation.
Failing to show how an unnamed complainant was identifiable.
Naming everyone who liked or shared a post without examining what each person actually published.
Filing in a convenient but legally unsupported venue.
Waiting too long because the post remains online.
Claiming a late discovery date contradicted by earlier messages or public responses.
Seeking both ordinary libel and cyber libel punishment for the identical publication.
Using threats or public pressure instead of preserving evidence and following legal process.

For respondents

Ignoring the subpoena or filing a bare denial.
Deleting posts, accounts, devices, or chat histories.
Posting new accusations against the complainant.
Treating truth as self-proving without documents or witnesses.
Assuming that calling something “opinion” automatically protects it.
Assuming public officials can never sue for libel.
Contacting witnesses to influence their accounts.
Obtaining evidence by hacking or unauthorized access.
Relying on prescription without proving discovery and filing dates.
Missing appeal, arraignment, or court deadlines while waiting for an informal settlement.

Retraction, correction, settlement, and removal

A prompt correction, apology, or retraction may limit harm and may be relevant to motive, damages, or settlement. It does not automatically erase a completed offense or compel dismissal.

Before publishing an apology, the respondent should consider its wording carefully. An unnecessary admission may be used as evidence, while a hostile or conditional “apology” may worsen the dispute.

Settlement of private interests does not automatically terminate a criminal prosecution, because a criminal offense is prosecuted in the name of the People of the Philippines. The complainant’s desistance is relevant but does not necessarily bind the prosecutor or court.

Content removal and criminal liability are also separate questions. Prosecutors do not ordinarily become private content moderators, and compulsory access to, preservation of, or disclosure of computer data must follow Republic Act No. 10175 and the Rule on Cybercrime Warrants.

When legal help is urgent

Seek a Philippine lawyer immediately when:

The one-year filing period is approaching.
A prosecutor’s subpoena has been received.
A warrant of arrest, summons, information, or arraignment notice has been issued.
The account is anonymous and provider records may disappear.
Police or investigators seek access to a phone, computer, account, or private messages.
A device has been seized or searched.
The publication concerns a public official, election, journalist, whistleblower, workplace investigation, or pending case.
The material involves threats, intimate images, child sexual-abuse material, identity theft, hacking, stalking, or another possible offense in addition to libel.
Either side is considering a public response that may create a new publication.
The parties are discussing an admission, affidavit of desistance, settlement, or retraction.

The Public Attorney’s Office may provide representation to qualified persons under its eligibility and merit requirements. Contact information is available through the Public Attorney’s Office.

Frequently asked questions

Is every false Facebook post cyber libel?

No. The prosecution must prove a defamatory imputation, publication to a third person, an identifiable complainant, malice under the applicable standard, online publication, and responsibility of the accused. Some statements are protected opinion, privileged communication, fair comment, or otherwise outside criminal libel.

Must the complainant be named?

No. The complainant may be identifiable from the language, description, surrounding circumstances, or competent extrinsic evidence. Someone other than the complainant must be able to make the connection on an adequate factual basis.

Can a private or group-chat message be cyber libel?

Potentially. Publication exists when a defamatory message reaches at least one person other than its subject. A message sent only to the person discussed ordinarily lacks publication, while a group message usually reaches third persons. A qualified privilege may still apply depending on the purpose, recipients, good faith, and absence of actual malice.

Is a screenshot enough?

Not necessarily. A screenshot may show content, but authenticity, completeness, authorship, publication, date, and context may still be disputed. Preserve the URL, account details, original file, surrounding thread, device, metadata, and witness testimony whenever possible.

Can someone be charged merely for liking or sharing a post?

Not automatically. Disini rejected the application of aiding-or-abetting liability to cyber libel because ordinary online interactions are too uncertain a basis for criminal punishment. A person who adds or publishes a new defamatory assertion, however, may face liability for that separate publication.

Does deleting the post prevent a case?

No. Deletion does not undo an earlier publication witnessed or reliably preserved by others. It may also make the evidence harder to evaluate. Preserve the material before making any advised removal or correction.

Is truth always a complete defense?

No. The precise Article 361 requirements matter, and proof of good motive and justifiable ends may also be necessary. The rules differ when the imputation concerns a crime or a public officer’s official duties.

How long does the complainant have to file?

Cyber libel generally prescribes in one year from discovery by the offended party, the authorities, or their agents. Filing interrupts prescription. The discovery date and the legally effective filing date can be contested, so obtain advice well before the anniversary.

Can both ordinary libel and cyber libel be charged for the same post?

The Supreme Court held in Disini that the identical defamatory material cannot be separately punished as ordinary libel and online libel when the offenses are essentially the same. Separate publications or materially different acts require their own analysis.

Can a company be defamed?

Yes. Article 353 protects both natural and juridical persons. The company must still establish that the publication concerned it and satisfy the remaining elements.

Can a complainant obtain damages without a criminal conviction?

An independent civil action for defamation may be available under Article 33 of the Civil Code and is governed by the civil standard of proof. Its timing and relationship to a criminal case require careful procedural analysis, and double recovery is prohibited.

Official legal sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Cyber libel disputes turn heavily on the exact words, evidence, dates, parties, and procedural history. Consult a Philippine lawyer about your documents and deadlines. Sources checked as of September 15, 2026.