Quick answer

Cyber libel is committed when the original author publishes through a computer system a malicious, identifiable, and defamatory imputation that reaches at least one person other than the subject. A hurtful post is not automatically cyber libel: the prosecution must establish every element, the accused’s authorship, proper venue, and timely filing.

If you are filing, preserve the complete online evidence before requesting deletion and promptly submit a sworn complaint with supporting affidavits and records to the proper city or provincial prosecutor. If the poster cannot yet be identified, seek technical assistance from the NBI Cybercrime Division or another authorized cybercrime law-enforcement unit.

If you are defending, do not ignore a prosecutor’s subpoena. Obtain the entire complaint, preserve your account and device records, and submit a detailed counter-affidavit by the stated deadline. Possible defenses include lack of authorship, publication, identification, defamatory meaning, or malice; privileged communication; fair comment; truth coupled with the legal requirements for that defense; improper venue; and prescription.

Cyber libel generally prescribes one year from discovery by the offended party, the authorities, or their agents. In April 2026, the Supreme Court denied reconsideration with finality and reaffirmed this rule. A public social-media post does not automatically give the victim constructive notice on the posting date. The discovery date is factual and may be shown by messages, reactions, threats to sue, access records, or other conduct. Filing the complaint with the proper prosecution office interrupts prescription; do not assume that a demand letter, barangay report, platform report, or informal police inquiry does the same.

What the law punishes

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 covers libel under Articles 353 and 355 of the Revised Penal Code when committed through a computer system or similar technology. It can apply to material published through websites, blogs, social-media posts, online articles, emails, messaging applications, digital images, videos, or comparable electronic channels.

The prosecution must establish:

A defamatory imputation. The material imputes a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose a natural or juridical person to contempt. The entire publication and its ordinary meaning are considered. Rudeness, criticism, embarrassment, or an insult is not automatically defamatory.
Publication. At least one person other than the subject received, read, heard, or viewed the statement. A private message seen only by the person criticized ordinarily lacks this element. A group chat, copied email, or message shown to another person may satisfy it.
Identifiability. The subject was named, pictured, tagged, or described clearly enough that at least one third person could identify them. Omitting the name is not decisive if the surrounding details reveal who was meant.
Malice. The applicable standard depends on the nature of the communication and the person involved. For an ordinarily defamatory statement about a private person, Article 354 generally presumes malice unless good intention, justifiable motive, or privilege is shown. Statements concerning the official conduct of a public officer—or concerning a public figure on a matter of legitimate public interest—receive greater constitutional protection and generally require proof of actual malice: knowledge of falsity or reckless disregard of whether the statement was false.
Use of a computer system or similar technology. The defamatory material was communicated online or through information and communications technology.
Authorship or legal responsibility. The prosecution must connect the accused to the account and the specific publication. An account name or profile photograph may help, but authorship should be supported by admissions, witnesses, account history, language, facts known to the author, device records, service-provider records, forensic evidence, or a combination of circumstances.

The Supreme Court’s discussion of these elements and the distinction between private persons, public officers, and public figures appears in Tulfo v. People.

Who may be liable—and who is not automatically liable

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author, but declared it unconstitutional as applied to people who merely receive and react to the post. It also invalidated aiding or abetting liability under Section 5 insofar as it applies to cyber libel.

Accordingly, merely pressing “like,” using a reaction, making a non-defamatory comment, or simply sharing another person’s post is not, by itself, a sufficient basis for cyber-libel liability. The result may differ if a person writes a new defamatory caption, materially adopts the accusation as their own, creates a separate defamatory publication, or is independently responsible under another applicable law.

The same publication should not result in separate convictions for ordinary libel and cyber libel based on the identical act. Disini held that charging both for the same online libel would violate the protection against double jeopardy.

Important defenses and exceptions

The accused did not author the post

The prosecution must prove the identity of the offender, not simply the apparent identity of the account. Relevant questions include:

Who created and controlled the account?
Who knew the password?
Was the account compromised or impersonated?
Which devices were logged in?
Do IP, location, recovery-email, telephone, or device records connect the accused to the post?
Does the wording contain information known only to the alleged author?
Did the accused admit, delete, edit, defend, or apologize for the post?
Did witnesses see the accused composing or publishing it?

In XXX v. People, G.R. No. 274842, the Supreme Court explained that authorship or account control can be established through admissions, eyewitness evidence, distinctive knowledge or language, service-provider and telecommunications records, device forensics, consistent past conduct, and other circumstantial evidence. A bare claim that an account was “fake” may be insufficient, but neither should account ownership be assumed from a name or photograph alone.

There was no publication or identification

A statement communicated only to the subject generally lacks publication. Likewise, a vague statement does not satisfy identifiability unless a third person understood it as referring to the complainant. Witness affidavits should explain when, where, and why the witness recognized the person being discussed.

The material was not defamatory when read as a whole

Courts assess the complete post, including its context, images, links, captions, and ordinary meaning. Satire, rhetorical exaggeration, opinion, criticism, or an isolated insult is not automatically libelous. Calling something an “opinion,” however, does not protect a disguised or implied false assertion of fact.

Privileged communication

Article 354 recognizes qualified privileges, including:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without added comments or remarks, of a non-confidential judicial, legislative, or other official proceeding, official statement, or act performed by a public officer.

Fair comment on matters of public interest may also be privileged. An opinion about a public person’s official conduct is generally protected when reasonably based on established facts. Qualified privilege is not absolute: it may be defeated by proof of actual malice or abuse of the occasion.

Posting an accusation publicly to a needlessly broad audience may undermine a claim that the communication was a private, duty-bound report. A complaint sent in good faith to the appropriate employer, regulator, school, homeowners’ association, or public authority may stand differently from the same accusation posted publicly for ridicule.

Truth, good motives, and justifiable ends

Truth is important but is not an automatic, universal defense under Article 361. For acquittal under the statutory defense, the accused generally must prove both that the imputation was true and that it was published with good motives and for justifiable ends. Special rules govern proof of non-criminal acts or omissions, particularly when the statement concerns a government employee’s official duties.

For criticism of a public officer’s official conduct or a public figure on a matter of legitimate public concern, the constitutional actual-malice rule may place the burden on the prosecution to prove knowing or reckless falsity. The classification of the person and the connection between the statement and a public issue are therefore critical.

Prescription

Under the Supreme Court’s final April 8, 2026 Resolution in Causing v. People, cyber libel prescribes in one year from discovery by the offended party, authorities, or their agents.

For the complainant, record the exact discovery date and how discovery occurred. For the defense, preserve evidence of any earlier knowledge: reactions, comments, private messages, public replies, takedown demands, prior complaints, or statements referring to the post.

Prescription is ordinarily a defense that the accused must prove unless it is already apparent from the charge. A later claimed discovery date is not conclusive merely because it appears in the complaint; it may be tested through evidence and cross-examination.

A separate civil action for defamation is also generally subject to a one-year period under Article 1147 of the Civil Code. The starting point and interruption of either period can depend on the documents and procedural history, so waiting until the last month is risky.

Improper venue or deficient allegations

Venue in cyber-libel cases is jurisdictional and technically sensitive. Under Section 2.1 of the Rule on Cybercrime Warrants, criminal actions under Sections 4 and 5 of RA 10175 are filed in the designated cybercrime court of the province or city:

where the offense or an element occurred;
where any part of the computer system used is situated; or
where damage to a natural or juridical person took place.

Article 360 of the Revised Penal Code and the Supreme Court’s venue decisions may also affect how the proper locality and allegations are evaluated. Merely alleging that an internet post was accessed in a particular city does not automatically establish valid venue. Because filing in the wrong locality can defeat the case, confirm venue with the prosecution office or a lawyer before filing.

How to file a cyber-libel complaint

1. Preserve the evidence before asking for deletion

Capture more than a cropped screenshot. Preserve, where available:

the complete post, article, image, video, or message;
the exact wording and surrounding conversation;
the account name, handle, profile page, and unique account or post link;
posting and editing dates and times;
privacy or audience settings;
captions, comments, reactions, shares, and visible reach;
a screen recording showing navigation from the profile to the post;
original downloaded files, message exports, emails, and attachments;
the device on which the content was received or viewed;
notices from the platform and correspondence with the account;
the names and contact details of third persons who saw the material;
proof of the date of discovery; and
proof of harm, such as lost work, cancelled transactions, client messages, medical records, or expenses.

Keep unedited copies and backups. Record who collected each item, when it was collected, and from which device or account. Do not crop out details that may establish authenticity or context.

Electronic evidence must be authenticated. Under the Rules on Electronic Evidence, the party offering a private electronic document bears the burden of showing its authenticity, integrity, and reliability. Printing a screenshot or having it notarized does not, by itself, prove who authored it.

2. Identify the author lawfully

Collect admissions, earlier messages, account history, common usernames, profile links, witnesses, and facts showing control. Do not hack an account, secretly obtain passwords, impersonate another person, or unlawfully intercept communications.

If the author is unknown or technical records may disappear, request investigative assistance promptly. The NBI online complaint facility and NBI Cybercrime Division are official starting points. Investigators may seek preservation, disclosure, or examination orders under RA 10175 and the Rule on Cybercrime Warrants. A private complainant cannot compel a platform to disclose protected subscriber or content data without the required legal process.

An investigative report to the NBI or another agency is not a substitute for timely filing with the proper prosecution office unless the matter is formally referred and docketed there within the prescriptive period.

3. Prepare a fact-specific complaint-affidavit

The affidavit should state, in chronological order:

the complainant’s and respondent’s identifying information and addresses;
the exact publication complained of;
why its ordinary meaning is defamatory;
how the complainant was identifiable;
the names of people who received or saw it;
why the respondent is believed to be the author;
when and how the complainant discovered it;
the facts supporting the chosen venue;
the computer system or online service used;
any demand, response, admission, edit, deletion, or republication; and
the injury and relief sought.

Attach sworn witness affidavits and clearly labeled exhibits. Avoid general statements such as “many people saw it” when specific witnesses are available.

4. File with the proper prosecution office

Cyber libel carries a potential imprisonment term extending beyond six years, so it ordinarily undergoes regular preliminary investigation under DOJ Department Circular No. 015, series of 2024. The Supreme Court upheld these DOJ rules in Meking v. Remulla.

The filing generally includes:

the original sworn complaint-affidavit;
two duplicate copies for the official file;
a copy for each respondent;
the affidavits of witnesses;
all supporting evidence; and
a completed NPS Investigation Data Form.

Local prosecution offices may have additional intake, copy, identification, or electronic-filing requirements. Confirm the current checklist and official filing channel directly with the office. Do not send sensitive evidence to an unofficial email address or social-media account.

5. Participate in preliminary investigation

The prosecutor evaluates whether the admissible and credible evidence establishes a prima facie case with reasonable certainty of conviction. If the complaint is sufficient, the respondent receives a subpoena with the complaint and supporting evidence.

The subpoena must provide the respondent at least 10 calendar days to submit a counter-affidavit under the regular preliminary-investigation procedure. The stated date and instructions should be followed exactly. The prosecutor may call a clarificatory hearing, but the proceeding is mainly affidavit-based and parties do not have an automatic right to cross-examine each other at this stage.

If the prosecutor finds the required evidence, an Information is prepared and filed in the designated Regional Trial Court. The judge then independently evaluates probable cause and determines whether to dismiss, require more evidence, or issue a warrant of arrest.

6. Consider the civil claim carefully

A claim for civil liability arising from the offense is generally deemed included in the criminal case unless it is waived, reserved, or filed separately. Article 33 of the Civil Code also permits an independent civil action for defamation based on preponderance of evidence.

Damages are not automatic or based on a fixed schedule. The claimant must prove the legal and factual basis for the amounts sought. Filing separate criminal and civil cases affects venue, prescription, costs, and coordination, so obtain advice before choosing a route.

How to defend against a complaint

1. Treat a prosecutor’s subpoena as an immediate deadline

A subpoena from a prosecution office is not yet a conviction or an arrest warrant, but ignoring it may allow the prosecutor to resolve the complaint from the complainant’s evidence alone. Note the date of actual receipt, obtain all annexes, and verify the submission deadline.

If the attachments are incomplete or the period is unworkable for a legitimate reason, promptly make the appropriate written request. Do not assume an informal phone call suspends the deadline.

2. Preserve—not destroy—records

Keep the relevant account, device, messages, login notices, drafts, source documents, editing history, and backups. Preserve evidence of hacking, shared access, lost devices, impersonation, travel, location, or work activity if relevant.

Deleting records after learning of an investigation can destroy helpful evidence and may create adverse factual issues. Do not ask witnesses to erase messages or coordinate stories.

3. Build the counter-affidavit around each required element

A useful counter-affidavit should address:

whether the respondent authored or controlled the post;
whether a third person received it;
whether the complainant was identifiable;
the complete context and ordinary meaning;
whether it was fact, opinion, satire, quotation, or fair comment;
the sources and documents available before publication;
any legal, moral, social, or official duty behind the communication;
whether the complainant was a private person, public officer, or public figure;
good faith, actual malice, truth, motive, and justifiable purpose;
discovery and filing dates;
venue; and
defects or inconsistencies in the electronic evidence.

Attach the proof instead of relying on bare denial. If the account was compromised, provide security alerts, recovery messages, device lists, contemporaneous reports, and qualified technical evidence where available.

4. Do not retaliate online

Avoid reposting the accusation, attacking the complainant, threatening witnesses, or discussing confidential evidence publicly. A new post may become a separate issue and can undermine claims of good faith.

Any correction, apology, takedown, or settlement proposal should be considered with counsel. It may reduce harm, but it can also be characterized as an admission if badly worded.

5. Use available remedies promptly

Under DOJ Circular No. 015, an aggrieved party may file a motion for reconsideration of the prosecutor’s resolution within 15 days from receipt. Review or appeal within the DOJ is governed by the applicable DOJ review rules. Once an Information is filed, a petition for review does not automatically suspend court proceedings; the proper request for suspension must also be made.

If a warrant has been issued, do not evade service. Cyber libel is generally bailable before conviction. A lawyer can coordinate voluntary surrender, bail, arraignment, and any appropriate motion challenging the Information, venue, prescription, or probable cause.

Possible penalties

Section 6 of RA 10175 raises the penalty for libel committed through information and communications technology by one degree. The potential imprisonment range is prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years.

A court may instead impose a fine alone, or both imprisonment and a fine. In People v. Soliman, the Supreme Court held that imprisonment is not mandatory and calculated the fine for online libel at ₱40,000 to ₱1,500,000 under the amended Article 355 and Section 6 of RA 10175. Civil damages may also be awarded when properly proved.

These are possible statutory consequences, not an automatic sentence. The final penalty depends on the charge, evidence, applicable modifying circumstances, and the court’s judgment.

Common mistakes

Waiting for the post to go viral before preserving it or filing.
Counting one year only from publication without investigating the actual discovery date.
Assuming a demand letter, barangay complaint, or platform report stops prescription.
Filing wherever the post happened to be viewed without establishing legal venue.
Submitting cropped screenshots without URLs, context, witnesses, or authentication.
Treating the account name as conclusive proof of authorship.
Naming every person who liked or shared a post as an accused.
Assuming that truth alone always defeats criminal libel.
Assuming that adding “allegedly,” “in my opinion,” or a question mark automatically prevents liability.
Publicly reposting the accusation to “prove” the case.
Ignoring a subpoena because no court case has yet been filed.
Deleting accounts, messages, devices, or source documents after receiving notice.
Treating an affidavit of desistance or private settlement as an automatic dismissal of the criminal case.

When legal help is urgent

Consult a Philippine criminal-law or cybercrime lawyer immediately if:

the one-year period may expire soon;
you received a prosecutor’s subpoena or adverse resolution;
a court has issued a warrant;
the respondent is anonymous and provider records may disappear;
the post involves a public officer, journalist, public figure, or matter of public interest;
the account may have been hacked, impersonated, or shared by several users;
there are several posts, respondents, victims, or possible venues;
the material includes confidential records, sexual images, personal data, threats, stalking, extortion, or violence; or
a child or an immediate safety risk is involved.

Cyber libel may not be the only applicable law. Threats, unlawful access, identity theft, data-privacy violations, violence against women or children, and non-consensual intimate-image offenses have different elements, procedures, and urgency.

Frequently asked questions

Is a demand letter required before filing?

No. A prior demand, barangay proceeding, or request for apology is not an element of cyber libel. A carefully prepared demand may help stop continuing harm, but it does not replace timely filing with the proper prosecution office.

Does deleting the post erase liability?

No. Deletion may limit further harm but does not undo an already completed publication. Preserve evidence before seeking takedown. For the accused, deleting evidence after receiving notice can create additional problems.

Is a one-to-one private message cyber libel?

Ordinarily not if only the subject received it, because libel requires publication to a third person. If another person received, viewed, or was copied on the message, publication may exist. Other offenses may apply even without libel.

Can someone be charged for sharing a defamatory post?

A person who merely receives and reacts to or shares the original post is not automatically liable for cyber libel under Disini. Liability may be different if the person adds an independently defamatory statement or creates a new publication as its author.

Is a screenshot enough?

It may begin the investigation, but its weight depends on authenticity, completeness, and connection to the accused. Preserve the original device, account link, full context, screen recording, witnesses, metadata, and any service-provider or forensic records available through lawful process.

Can the complainant file years after the post was uploaded?

Possibly, if discovery genuinely occurred later. The controlling rule is one year from discovery, and public posting alone does not create constructive notice. The claimed discovery date remains a factual issue that the defense may contest.

Does an apology or affidavit of desistance end the case?

Not automatically. Criminal prosecution is brought in the name of the People of the Philippines. An apology, settlement, or desistance may affect the evidence, civil claim, or prosecutorial assessment, but it does not by itself compel dismissal.

Will receiving a prosecutor’s subpoena lead to immediate arrest?

No. A subpoena for preliminary investigation is not an arrest warrant. Arrest ordinarily becomes an issue only after an Information is filed and a judge independently finds probable cause to issue a warrant.

Can the victim claim damages without pursuing imprisonment?

A separate civil action for defamation may be available under Article 33 of the Civil Code, subject to venue, prescription, proof, and rules against double recovery. The criminal court may also award civil liability in the criminal case.

Official sources

This article provides general legal information, not advice for a particular case. Outcomes depend on the exact publication, parties, evidence, dates, and procedural record. Consult a Philippine lawyer or the proper prosecution office for case-specific guidance. Law and official sources checked as of July 27, 2026.