Quick answer

Cyber libel is criminal libel committed through a computer system or similar digital means. A Facebook post, public TikTok video, online article, blog entry, email circulated to other people, or comparable online publication may qualify—but an offensive or false statement is not automatically cyber libel.

The prosecution generally must prove beyond reasonable doubt that:

the accused made a defamatory allegation of a crime, vice, defect, act, omission, status, or circumstance;
the allegation concerned an identifiable person, whether or not expressly named;
it was communicated online to at least one person other than the person defamed;
the accused was responsible for the publication; and
the legally required form of malice was present.

A complainant normally starts by filing a properly supported complaint-affidavit for preliminary investigation with the appropriate prosecutor’s office. A respondent should not ignore a subpoena: the counter-affidavit is the main opportunity to challenge the elements, authenticity, authorship, venue, prescription, privilege, and probable cause before a criminal case reaches court.

Time is critical. In Causing v. People, the Supreme Court held that cyber libel prescribes in one year from discovery of the offense, subject to the rules on interruption of prescription. Identifying the exact discovery date and any legally interrupting event is therefore essential. Do not assume that an old post remains actionable indefinitely merely because it can still be viewed online.

What Philippine law treats as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 punishes the unlawful acts of libel defined in Article 355 of the Revised Penal Code when committed through a computer system or similar means.

Articles 353 to 362 of the Revised Penal Code supply the underlying rules on libel, privileged communications, responsible persons, venue, proof of truth, and related matters.

Cyber libel is not established simply because:

the statement was insulting, rude, embarrassing, or unpopular;
the subject felt offended;
the post received many reactions;
the speaker was mistaken;
the parties were arguing online; or
the post used no real name.

The words, images, surrounding discussion, audience, identity of the subject, publication history, purpose, and available evidence must be assessed together.

The elements the complainant must establish

A defamatory imputation

The publication must attribute something that tends to dishonor, discredit, or place a person in contempt. Allegations of criminal conduct, dishonesty, professional misconduct, sexual impropriety, corruption, fraud, or serious moral defects may be defamatory.

Context matters. Courts do not necessarily examine a disputed word in isolation. Captions, photographs, hashtags, earlier posts, replies, video narration, and the meaning understood by ordinary readers may affect the analysis.

Pure abuse or name-calling may be actionable under another law without necessarily satisfying all the elements of libel. Conversely, wording framed as a question, joke, insinuation, quotation, or opinion does not automatically escape liability if its ordinary meaning communicates a defamatory assertion of fact.

Identification of the complainant

The complainant must be identifiable from the publication and surrounding circumstances. Naming the person is the clearest form of identification, but it is not indispensable. A photograph, job title, initials, workplace, family connection, nickname, or combination of details may enable readers who know the circumstances to identify the subject.

A vague statement about a large or undefined group may present an identification problem. A small, specific group or a post containing individualized clues may be different.

Publication to another person

Libel requires publication to someone other than the person allegedly defamed. A private message seen only by its sender and recipient ordinarily lacks this element, although it may raise other legal issues. Publication may occur when the material is placed in a group chat, sent to third parties, posted publicly, or otherwise made accessible to another person.

The complainant should identify actual recipients or viewers where possible rather than relying only on an assumed audience.

Use of a computer system

The defamatory material must have been committed through a computer system or similar digital means. The statutory definition covers devices with data-processing capabilities, including computers and mobile phones.

A printed publication may fall under traditional libel. A spoken accusation may raise oral-defamation issues. The correct offense depends on how the statement was made and published.

Responsibility for the publication

The prosecution must connect the accused to the account and the particular publication. A profile bearing someone’s name is not conclusive by itself. Relevant proof may include admissions, authenticated messages, account records obtained lawfully, testimony about account control, device evidence, consistent contact details, or other circumstances establishing authorship.

In Disini v. Secretary of Justice, the Supreme Court sustained cyber libel as applied to the original author of the post. It did not impose cyber-libel liability under the law’s aiding-or-abetting provision merely on people who react to, comment on, or share an online post. A person who adds a new defamatory statement, however, must be assessed according to that person’s own words and conduct.

Malice

Article 354 generally presumes malice from a defamatory imputation, even if the allegation is true, unless the publication falls within a recognized exception. The surrounding circumstances may rebut or reinforce that presumption.

Where the publication concerns a public official, public figure, or a matter of public concern, constitutional free-expression principles can require proof of actual malice—knowledge that the allegation was false or reckless disregard of whether it was false. Negligence, poor writing, hostility, or failure to investigate is not invariably the same as actual malice, although evidence of purposeful avoidance, fabricated sourcing, or obvious reasons to doubt a claim can be important.

Whether a person is a public figure and whether the disputed statement concerns a public issue are fact-sensitive questions. Public status is not a blanket license to publish knowingly or recklessly false accusations.

Important defenses and exceptions

No defamatory meaning

The complete publication may show criticism, satire, rhetorical exaggeration, or non-defamatory language rather than an assertion that exposes the complainant to public hatred, contempt, or ridicule.

The defense should preserve the complete thread or recording. A cropped screenshot can remove wording that changes the meaning.

The complainant was not identifiable

The defense may show that reasonable readers could not connect the statement to the complainant without speculation or information unavailable to the audience. This becomes weaker when photographs, positions, events, or other clues point to one person.

No publication to a third person

A one-to-one communication may defeat the publication element if no third person received or saw it. This defense depends on proof: forwarding, copying another recipient, using a shared device, or posting in a group can change the result.

The accused did not create or publish it

Impersonation, hacked accounts, fabricated screenshots, spoofed messages, and unauthorized access are genuine possibilities. A bare denial is usually insufficient. Preserve login alerts, device records, account-recovery emails, travel or location evidence, reports to the platform, and any prompt complaint about unauthorized access.

Do not fabricate a hacking defense or alter the account after learning of the complaint. Forensic evidence can expose both the original publication and later tampering.

Privileged communication

Article 354 recognizes qualifiedly privileged communications, including:

a private communication made in the performance of a legal, moral, or social duty to a person with a corresponding interest or duty; and
a fair and true report, made in good faith and without comments or remarks, of qualifying official proceedings or acts.

Privilege is not automatic merely because the speaker labels a post a “warning,” “complaint,” or “public service.” Publication to an unnecessarily broad audience, irrelevant personal attacks, lack of good faith, or actual malice may defeat a qualified privilege.

Absolute privilege may apply in narrowly defined settings, such as relevant statements made in legislative or judicial proceedings. Its scope depends on the proceeding and the statement’s connection to it.

Fair comment, opinion, and public-interest criticism

People may criticize official conduct and discuss matters of public concern. A protected opinion should be distinguished from a disguised factual accusation. “I disagree with this policy” is different from asserting, without adequate basis, that a named official stole public funds.

A conclusion honestly drawn from disclosed, substantially accurate facts is easier to defend than a serious factual charge presented without its basis.

Truth, good motives, and justifiable ends

Truth alone is not a universal answer to criminal libel. Under Article 361, proof of truth must be considered together with good motives and justifiable ends, subject to the article’s rules and limitations.

Preserve the reliable records that existed when the statement was published. Documents created later, rumors, anonymous messages, and unverified screenshots may not establish either truth or responsible belief.

Lack of actual malice

When actual malice is the governing standard, useful evidence can include contemporaneous source materials, interview notes, official records, efforts to seek comment, corrections, editorial communications, and testimony showing an honest belief in the statement.

Later deletion or correction does not automatically erase an already completed offense, but the circumstances may still be relevant to good faith, damages, or credibility.

Prescription

The Supreme Court’s ruling in Causing v. People, G.R. No. 258524 applies a one-year prescriptive period counted from discovery of cyber libel. The Court rejected the view that a much longer period under the Cybercrime Prevention Act governs.

Prescription can depend on:

when the offended party actually discovered the publication;
whether earlier knowledge can be proved;
the date and legal effect of the complaint or proceeding claimed to interrupt prescription;
whether a later act was a genuine new publication rather than the continuing online availability of the original; and
which procedural law applies to the particular filing.

This defense should be raised promptly and supported by dated evidence. Do not wait until trial if the face of the records already shows a serious prescription issue.

The publication predates the law

The Cybercrime Prevention Act cannot constitutionally punish conduct completed before the law became effective. A later, affirmative republication or material update may raise a separate issue, but the mere continued accessibility of old material should not casually be treated as a new offense. The exact online history must be examined.

Double prosecution for the same online libel

In Disini, the Supreme Court invalidated Section 7 of the Cybercrime Prevention Act insofar as it would allow punishment for both traditional libel and cyber libel based on the same act. Counsel should examine duplicate charges arising from one publication for constitutional and statutory defects.

How to file a cyber-libel complaint

1. Record the discovery date immediately

Write down:

when and how you first learned of the publication;
who showed it to you;
whether you had seen it earlier;
when witnesses first viewed it; and
the dates of any report, demand, police referral, or complaint.

Because the prescriptive period is one year from discovery, delay can be fatal. Seek legal advice well before the anniversary date; do not treat the last day as a safe filing target.

2. Preserve the complete online evidence

Save more than one screenshot. Preserve:

the complete post, article, video, or message;
the visible account name, username, URL, date, and time;
the full thread and surrounding posts;
photographs, captions, hashtags, and attached files;
public reactions, comments, shares, or viewer information relevant to publication;
the profile page and identifying account details;
original downloaded files where the platform permits;
screen recordings showing navigation to the content;
messages or admissions concerning authorship;
witnesses who saw the publication independently; and
platform notices, takedown responses, or account records.

Keep original devices and unedited files. Record who collected each item and when. Avoid repeated conversions, annotations, or editing that may obscure metadata or invite an authenticity challenge.

A screenshot is not automatically self-proving. Electronic evidence must be authenticated under the Rules on Electronic Evidence.

3. Assess each legal element before filing

Identify the exact words or images alleged to be defamatory. Explain:

what they mean in context;
how they refer to the complainant;
who other than the complainant received or saw them;
why the respondent is believed to control the account;
what proves falsity, where relevant;
why privilege or public-interest protections do not apply; and
when the offense was discovered.

A complaint based only on conclusions such as “the post ruined my name” may fail to establish probable cause.

4. Choose the proper place of filing

Cybercrime venue is governed by Republic Act No. 10175 and the Supreme Court’s Rule on Cybercrime Warrants. Venue may involve the place where the offense or an element occurred, where a relevant part of the computer system was situated, or where the legally cognizable damage took place.

Cyber libel is tried in a Regional Trial Court, ordinarily a designated cybercrime court. Venue is jurisdictional in criminal cases and should not be selected merely for convenience. Online accessibility throughout the Philippines does not eliminate the need to allege and prove a valid venue connection.

A complaint may be submitted to the prosecutor’s office with authority over the proper venue. The NBI Cybercrime Division or PNP Anti-Cybercrime Group may assist with investigation, particularly where account attribution or preserved provider data is needed, but the specific referral route and office requirements should be confirmed locally.

5. Prepare the complaint-affidavit and supporting affidavits

The complaint-affidavit should be sworn, factual, chronological, and based on personal knowledge. Attach clearly marked exhibits and authenticated or authenticatable electronic evidence. Witnesses who personally saw the publication should execute their own affidavits.

Under Rule 112 of the Rules of Criminal Procedure, the complaint must be accompanied by affidavits and supporting documents sufficient to establish probable cause. Prosecutor offices may impose current documentary, copy, identification, and filing requirements, so verify them before submission.

6. Participate in preliminary investigation

If the prosecutor finds the filing sufficient in form, the respondent may be subpoenaed and required to submit a counter-affidavit and evidence. Rule 112 generally gives the respondent 10 days from receipt of the subpoena to submit the counter-affidavit. The respondent cannot rely on a motion to dismiss in place of the required counter-affidavit.

The prosecutor may clarify issues in a hearing, but preliminary investigation is generally conducted through affidavits and documents. It is not a full criminal trial.

After evaluating probable cause, the prosecutor may dismiss the complaint or approve the filing of an information in court. Available review or reconsideration remedies, their deadlines, and their effect on court proceedings depend on the applicable rules and case posture.

7. Consider civil remedies separately

Civil liability arising from the alleged offense is generally deemed included in the criminal action unless it is waived, reserved, or previously filed as allowed by the Rules. Article 33 of the Civil Code also recognizes an independent civil action for defamation.

Criminal and civil cases have different burdens, remedies, and procedural consequences. A complainant seeking damages, correction, takedown, or urgent protective relief should obtain advice on the correct remedy instead of assuming a cyber-libel complaint will produce every desired result.

How to defend after receiving a complaint or subpoena

Do not miss the counter-affidavit deadline

Note the exact date and manner of service. Obtain the complete complaint, affidavits, and exhibits. If legitimate additional time is needed, make the proper request immediately; an extension is not automatic.

Failure to submit a counter-affidavit allows the prosecutor to resolve the complaint using the complainant’s evidence alone.

Preserve first; do not alter evidence

Do not delete accounts, reset devices, edit messages, fabricate conversations, contact witnesses to change their accounts, or induce anyone to destroy records. Preserve:

the original publication and drafts;
source documents;
private messages relevant to context or consent;
account-security and login records;
editorial notes;
requests for comment and responses;
platform reports;
evidence of correction or clarification; and
records showing where the accused and relevant devices were located.

Deleting a post may reduce continuing harm, but it can also destroy evidence. Obtain advice on how to preserve an authenticated copy before changing anything.

Answer every element with evidence

A useful defense analysis asks:

Were the exact words defamatory?
Was the complainant identifiable?
Did a third person receive the statement?
Did the respondent author or publish it?
Is the screenshot complete and authentic?
Is the account attribution reliable?
Was the communication privileged?
Was the statement factual, opinion, or fair comment?
Did it concern a public official, public figure, or public issue?
Is actual malice required, and what evidence addresses it?
Can truth, good motives, and justifiable ends be proved?
Was the case filed within one year from discovery?
Is venue properly alleged?
Did the publication occur after the Cybercrime Prevention Act took effect?
Are traditional libel and cyber libel improperly charged for the same act?

A broad denial is usually less effective than a point-by-point response supported by admissible records.

Avoid retaliatory posting

Do not answer a complaint by publishing new accusations about the complainant, prosecutor, investigators, or witnesses. A new post can create a separate dispute, undermine claims of good faith, or become evidence of malice.

Communications about settlement or apology should be made carefully, preferably through counsel. An apology may help resolve a conflict but may also contain admissions if drafted carelessly.

Prepare for court proceedings

If an information is filed, the RTC determines whether to issue a warrant of arrest or summons based on the records and applicable law. Bail, arraignment, pre-trial, trial, and possible motions follow the Rules of Criminal Procedure.

Counsel should immediately evaluate:

defects apparent in the information;
lack of jurisdiction or improper venue;
prescription;
duplicative charges;
whether a motion to quash is available;
bail and voluntary-surrender strategy;
preservation or suppression issues involving digital evidence; and
civil liability included in the criminal case.

Do not ignore a warrant, court notice, or arraignment setting.

Possible penalties and other consequences

Cyber libel carries the libel penalty under the Revised Penal Code as increased by the Cybercrime Prevention Act. The precise sentencing range depends on the statutes, the Indeterminate Sentence Law, modifying circumstances, and the court’s findings. Conviction can involve imprisonment, a fine, or both, as well as civil damages.

Courts should also consider Supreme Court Administrative Circular No. 08-2008, which encourages courts, when legally appropriate, to prefer a fine over imprisonment in libel cases. The circular does not decriminalize libel, guarantee a fine-only sentence, or prevent imprisonment when the circumstances warrant it.

A criminal complaint can also produce significant collateral consequences: arrest processing, bail expenses, travel and employment complications, reputational harm, device examination under lawful process, and lengthy litigation. These risks justify early professional advice on both sides.

Digital evidence and lawful government access

A private complainant should preserve evidence but should not impersonate another person, hack an account, secretly seize a device, or obtain private provider data through unlawful means.

Under Republic Act No. 10175 and the Rule on Cybercrime Warrants, authorities may seek judicial authority for disclosure, interception, search, seizure, or examination of computer data. Subscriber, traffic, and content data are subject to distinct legal safeguards. Evidence obtained without the required warrant or beyond its lawful scope may be inadmissible.

Provider data can disappear under retention practices. Where attribution is genuinely disputed, prompt reporting may matter, but a complainant cannot personally compel a platform or telecommunications company to disclose protected records simply by sending a demand.

Common mistakes

Waiting until near the one-year deadline before seeking advice.
Treating continued online visibility as automatically restarting prescription.
Submitting only cropped or edited screenshots.
Failing to preserve the URL, profile, thread, and discovery evidence.
Assuming that the account name conclusively proves authorship.
Filing wherever the complainant prefers without analyzing venue.
Naming every person who liked, reacted to, or passively shared a post.
Treating truth alone as a complete defense.
Assuming that “opinion” protects a disguised factual accusation.
Ignoring privilege and public-concern protections.
Responding to a subpoena with a bare denial or a motion to dismiss instead of a counter-affidavit.
Publishing retaliatory accusations while the case is pending.
Deleting devices, accounts, drafts, or source records.
Trying to obtain private data through hacking, impersonation, or coercion.
Assuming that a platform takedown settles criminal or civil liability.
Confusing cyber libel with oral defamation, unjust vexation, threats, privacy violations, identity theft, or other possible offenses.

When legal help is urgent

Consult a Philippine lawyer promptly if:

the first anniversary of discovery is approaching;
you received a prosecutor’s subpoena, court summons, or warrant;
law-enforcement officers seek access to a phone, computer, or account;
authorship or account compromise requires technical examination;
the publication involves a journalist, public official, public figure, election issue, or public controversy;
the post concerns alleged crime, corruption, sexual misconduct, or professional wrongdoing;
the material was published from or stored outside the Philippines;
a child, intimate image, confidential record, or personal data is involved;
the complainant seeks both criminal prosecution and substantial damages;
several people reposted or modified the material; or
there is an immediate threat of violence, doxxing, blackmail, or evidence destruction.

Indigent parties may inquire with the Public Attorney’s Office about eligibility for assistance. Journalists and media workers may also need counsel experienced in constitutional free-expression and press-law issues.

Frequently asked questions

Can I file a case over a Facebook post or TikTok video?

Yes, if the evidence establishes all the elements of cyber libel, proper venue, timely filing, and the respondent’s responsibility for the publication. The use of social media alone does not prove the offense.

Must the post name me?

No. It is enough if people familiar with the circumstances could reasonably identify you from the words, image, title, position, or other details. Identification must be proved, not merely asserted.

Is a private message cyber libel?

A message seen only by the sender and the person discussed ordinarily lacks publication to a third person. A group chat, copied recipient, forwarded message, or shared-device situation may satisfy publication. Other offenses or civil claims may still apply.

Can someone be charged merely for liking or sharing a post?

Under Disini, the cyber-libel provision is valid as to the original author, while aiding-and-abetting liability cannot simply be imposed on people who merely react to, comment on, or share a post. A person who adds a separate defamatory assertion may face liability for that person’s own publication.

Does deleting the post end the case?

No. Deletion does not necessarily undo a completed publication. It may also destroy relevant evidence if no reliable copy was preserved. Seek advice before altering disputed content.

Is truth a complete defense?

Not automatically. Article 361 requires consideration of truth together with good motives and justifiable ends, and contains special rules concerning proof of truth. The nature of the statement and the person concerned also matter.

Does an apology make the criminal case disappear?

Not by itself. An apology or settlement may influence the complainant’s position, damages, or prosecutorial assessment, but cyber libel is a public offense prosecuted in the name of the People. Any resolution must follow applicable law and procedure.

How long does the complainant have to file?

The controlling Supreme Court ruling states that cyber libel prescribes in one year from discovery of the offense. The exact discovery date and any interruption of prescription must be established from the records.

Where is the case filed?

The proper prosecutor and RTC depend on the legally relevant place of commission, computer-system connection, or damage under the Cybercrime Prevention Act and the Rule on Cybercrime Warrants. Nationwide internet access does not make every location a proper venue.

Can a person face both libel and cyber libel for the same post?

The Supreme Court ruled in Disini that the law cannot impose punishment for both traditional libel and cyber libel based on the same act. Separate publications or separate conduct require their own analysis.

Can police search a phone immediately after a complaint is filed?

A complaint alone does not erase constitutional protections. Search, seizure, disclosure, interception, and examination of computer data generally require the proper consent or judicial authority under the Constitution, Republic Act No. 10175, and the Rule on Cybercrime Warrants.

Official legal sources

This article provides general legal information, not advice for a specific case and not an attorney-client relationship. Cyber-libel outcomes depend heavily on the exact words, audience, evidence, dates, venue, status of the parties, and procedural record. The cited law and procedures were checked against official Philippine sources as of September 17, 2026.