Quick answer

To file a Philippine cyber libel case, preserve the online material and proof of authorship, then submit a sworn complaint-affidavit and supporting evidence to the prosecution office with territorial authority. The evidence must support every element of libel and show that the defamatory material was published through a computer system. An NBI cybercrime investigation can help when the author is unknown or electronic evidence must be secured.

To defend a case, do not ignore a subpoena or delete evidence. File a sworn counter-affidavit on the date stated in the subpoena, supported by evidence addressing authorship, publication, identification, defamatory meaning, malice, privilege, truth, venue, and prescription.

Cyber libel now prescribes in one year from discovery by the offended party, the authorities, or their agents. The Supreme Court confirmed this rule with finality in April 2026. Filing the proper complaint or Information interrupts prescription; merely reporting a post to a platform, sending a demand letter, or asking police to record an incident may not do so. Because the discovery date and the kind of filing made can be disputed, act well before the year expires. See Causing v. People, G.R. No. 258524, April 8, 2026.

What counts as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the publication is made through a computer system or a similar technology.

The prosecution must establish:

A defamatory imputation. The material attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a natural or juridical person to contempt, or blackens the memory of a deceased person.
Publication. At least one person other than the person defamed received, viewed, or understood the statement. A message sent only to the subject ordinarily lacks this element. A group chat, public post, email copied to others, blog, video caption, or similar communication may satisfy it.
Identification. The complainant must be identifiable from the words, images, circumstances, or information known to readers. Naming the person is not always necessary, but a vague statement about an unidentifiable group may be insufficient.
Malice. For a private complainant, the law generally presumes malice from a defamatory imputation unless a privilege or other applicable rule removes that presumption. Different standards apply to public officials, public figures, and privileged communications.
Online authorship and use of a computer system. The evidence must reliably connect the accused to the account and the particular publication. A display name, profile picture, or unverified screenshot alone may not prove who controlled the account.

The statement is read as a whole and in context. Labels such as “opinion,” “satire,” or “just asking” do not automatically protect a publication if it communicates a provably defamatory factual accusation.

Important exceptions and defenses

Public officials and public figures

When the complainant is a public official or public figure and the statement concerns official conduct or a matter in which the public has a legitimate interest, the prosecution must prove actual malice: knowledge that the statement was false, or reckless disregard of whether it was false.

Recklessness means more than carelessness or a weak investigation. The circumstances must support a finding that the publisher had a high awareness of probable falsity or seriously doubted the statement’s truth. The prosecution carries this burden. See Daquer v. People, G.R. No. 206015 and Disini v. Secretary of Justice, G.R. No. 203335.

Public status is not blanket permission to make accusations. The statement must still be evaluated for falsity, relevance to public affairs, factual basis, tone, sources, verification, and evidence of bad faith.

Qualifiedly privileged communications

Malice is not presumed in recognized qualified privileges, including:

A private communication made in the performance of a legal, moral, or social duty, sent to a person with a corresponding interest or authority;
A fair and true report, made in good faith and without added defamatory remarks, of non-confidential official proceedings or official acts;
Fair comment or fair reporting on a matter of public interest.

Qualified privilege is not absolute. Liability may still arise if actual malice is proved. Posting an accusation to the general public when the supposed duty required reporting it only to a supervisor, regulator, police officer, or other proper authority can defeat the claimed privilege.

Truth is not automatically enough

Under Article 361 of the Revised Penal Code, acquittal based on truth generally also requires proof that publication was made with good motives and for justifiable ends. There are additional restrictions on proving the truth of an accusation that does not involve a crime, except when it concerns a government employee’s discharge of official duties.

Preserve both the proof supporting the statement and the reason it was communicated to that particular audience.

Likes, reactions, shares, and new comments

In Disini, the Supreme Court upheld cyber libel as applied to the original author, but not to people who merely received a post and reacted through functions such as Like, Comment, or Share under the invalidated aiding-or-abetting theory.

This does not immunize a person who writes a new defamatory caption or comment. That person may be treated as the author of a separate statement. Liability depends on the words actually added and the surrounding facts, not merely the platform button used.

Prescription: the one-year deadline

The controlling rule is:

Cyber libel prescribes one year from discovery, not automatically from the date of posting.
Discovery must be proved from the facts. The complainant is not presumed to have discovered a post on the day it went online simply because it was publicly accessible.
Filing the proper complaint or Information interrupts the period.
The period may begin running again if proceedings terminate without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused.
Under Article 91 of the Revised Penal Code, prescription does not run while the offender is absent from the Philippines.

Record the exact date, time, person, and circumstances of discovery. Preserve the message, email, screenshot, or witness testimony showing when the complainant or authorities first learned of the post.

A separate civil action for defamation is also generally subject to a one-year period under Article 1147 of the Civil Code. Its accrual, interruption, and relationship to a criminal case require separate analysis, so do not assume that a criminal complaint or demand letter automatically protects every civil claim.

Where the case should be filed

The private complainant normally files the complaint-affidavit with the appropriate City or Provincial Prosecutor’s Office. If the evidence is sufficient, the prosecutor—not the complainant—files the formal Information in the designated cybercrime Regional Trial Court.

Under Section 2.1 of the Rule on Cybercrime Warrants, venue may lie in the province or city where:

The offense or any element occurred;
Any part of the computer system used was situated; or
Damage to a natural or juridical person took place.

The first court in which the criminal action is properly filed acquires jurisdiction to the exclusion of the others. Mere accessibility of a webpage everywhere should not be treated as an unlimited choice of venue. The complaint should state concrete venue facts, such as where the author posted the material, where the relevant device or system was located, or where the legally relevant damage occurred. See Tieng v. People, G.R. No. 164845.

Section 21 of the Cybercrime Prevention Act also permits Philippine jurisdiction in specified cross-border situations, including when an element occurred here, a relevant computer system was wholly or partly in the country, or a person in the Philippines suffered damage. A Filipino national may fall within Philippine jurisdiction even when the act was committed abroad. Cross-border cases require early legal and investigative assistance.

Evidence to preserve immediately

Electronic evidence must be authenticated. A readable printout can qualify as an original when it accurately reflects stored computer data, but the party offering it must still establish authenticity, integrity, reliability, and relevance under the Rules on Electronic Evidence.

Preserve	Why it matters
Full-page screenshots showing the post, account name, URL, date, time, reactions, and surrounding context	Establishes content and publication without misleading cropping
Screen recording opening the profile, post, comments, and URL	Helps show how the material appeared and where it was located
Original photos, videos, audio, downloaded files, emails, and message exports	Retains metadata and higher-quality evidence
Platform data download or account archive	May show timestamps, activity, and account control
Exact web addresses, account IDs, usernames, and profile links	Display names and profile pictures can be changed
Names and affidavits of people who personally viewed or received the material	Supports publication, identification, context, and discovery
The device used to view, receive, or publish the material	May be needed for forensic examination
Messages admitting authorship or discussing publication	Can connect a person to an account or show intent
Source documents and research conducted before publication	Relevant to truth, good faith, privilege, and actual malice
Proof of discovery date	Critical to prescription
Employment, business, medical, or financial records showing actual harm	Relevant to damages, although actual financial loss is not required to establish every criminal element
Police, NBI, platform, and prosecutor acknowledgments	Shows what was reported, when, and to whom

Keep untouched copies. Do not edit filenames, recompress media, annotate the only screenshot, or discard the device. Store working copies separately. If authorship, alteration, or metadata is likely to be contested, obtain qualified digital-forensic assistance.

How to file a complaint

1. Assess the complete publication

Identify the exact words, image, video segment, caption, or comment being challenged. Explain their meaning in context and why readers would understand them as referring to the complainant. Separate each allegedly unlawful original publication instead of treating an entire account as one accusation.

2. Identify the author with admissible evidence

Do not assume that the visible account holder made the post. Look for admissions, linked contact details, consistent account activity, witnesses, device evidence, or lawfully obtained subscriber information.

When the author is unknown, seek prompt investigative assistance. The NBI Cybercrime Division accepts complaints, sworn statements, supporting documents, and relevant devices for examination. Law-enforcement authorities can seek lawful preservation and disclosure orders; private parties cannot compel a platform to disclose protected subscriber data merely by sending a request.

An investigative referral is useful, but confirm whether and when a complaint capable of interrupting prescription has actually been filed with the prosecution office.

3. Prepare the complaint-affidavit

The affidavit should clearly state:

The complainant’s and respondent’s names and usable addresses;
The exact publication and its complete context;
The date and circumstances of publication and discovery;
Why the material is defamatory and identifies the complainant;
Who received or viewed it;
Evidence connecting the respondent to the publication;
Facts supporting malice or actual malice, when required;
Facts establishing Philippine jurisdiction and the chosen venue;
The requested investigation and prosecution; and
A numbered list of authenticated annexes.

Attach witness affidavits and supporting electronic and documentary evidence. The DOJ’s current filing checklist lists the sworn NPS Investigation Data Form, complaint-affidavit, witness affidavits, and supporting documents. It presently specifies two copies of the Investigation Data Form and five copies plus one for each respondent for the principal affidavits and supporting documents. Confirm the receiving office’s latest requirements because local submission and permitted electronic-filing arrangements may differ.

4. File in the correct prosecution office

Obtain a stamped receiving copy, docket number, or valid electronic acknowledgment. Keep proof of every submission and service. Do not wait for a platform’s takedown decision, a reply to a demand letter, or informal settlement discussions if prescription is approaching.

5. Participate in preliminary investigation

Cyber libel is subject to regular preliminary investigation under DOJ Department Circular No. 15, series of 2024. The prosecutor applies the standard of prima facie evidence with reasonable certainty of conviction, considering whether the evidence is admissible, credible, preservable, and sufficient to establish the offense and the responsible person.

The respondent is given an opportunity to submit a counter-affidavit. The prosecutor may then resolve the matter, seek additional evidence, or hold a clarificatory hearing. If the required standard is met, an Information is filed in the designated cybercrime RTC. The judge independently determines whether judicial probable cause exists and whether a warrant of arrest should issue. Guilt at trial must still be proved beyond reasonable doubt.

How to defend a complaint

Act as soon as the subpoena arrives

The subpoena should include the complaint and attachments and set a preliminary-investigation hearing at least 10 days after their receipt. The counter-affidavit is due on the date stated in the subpoena. A meritorious extension is discretionary and may not exceed 10 additional days under the 2024 DOJ-NPS Rules.

If records are missing, unreadable, or voluminous, notify the prosecutor in writing immediately, identify what is missing, preserve proof of actual receipt, and request appropriate relief. Do not simply miss the deadline. The complaint may be resolved on the complainant’s evidence if the respondent does not participate.

Build the counter-affidavit around the elements

A useful defense review asks:

Authorship: Did the respondent actually control the account and make this publication? Was the account spoofed, hacked, shared, or impersonated?
Content: Does the statement, read as a whole, actually impute a discreditable fact?
Publication: Was it communicated to anyone other than the complainant?
Identification: Could readers reasonably identify the complainant?
Malice: Is malice presumed, or must the prosecution prove actual malice?
Truth and motive: What reliable sources supported the statement, and why was it published?
Privilege: Was it a good-faith report to a proper person, a fair report of an official proceeding, or fair comment on a public matter?
Prescription: When did the complainant, authorities, or their agents first discover it, and what proceeding interrupted the period?
Venue: What facts connect the offense, computer system, or damage to the chosen locality?
Duplicative charges: Is the same publication being charged twice under overlapping provisions?
Admissibility: Can the screenshots, messages, and claimed account records be authenticated?

Attach sworn witness statements and the actual source materials. A bare denial is rarely as useful as a fact-specific explanation supported by records.

Observe the available review periods

An aggrieved party may file a motion for reconsideration of the prosecutor’s resolution within 15 days from receipt under Department Circular No. 15. Further internal DOJ review depends on the issuing office, court level, and applicable DOJ review rules. If an Information has already been filed, a prosecutor-level review does not automatically stop the court case; counsel should address both proceedings promptly.

Some objections must be raised before arraignment or may be waived. Others require evidence at trial and cannot properly be decided through a motion to quash. A lawyer should examine the Information, venue allegations, service history, prescription, possible duplicity, available bail, and the correct pre-arraignment remedy.

If a warrant has issued, do not evade it. Arrange through counsel for lawful surrender, booking, and bail.

Penalties and civil exposure

Traditional written libel is punishable under Article 355 by imprisonment or a fine, or both. Because Section 6 of the Cybercrime Prevention Act raises the penalty by one degree when information and communications technology is used, the possible imprisonment for cyber libel runs from prisión correccional in its maximum period to prisión mayor in its minimum period, generally four years, two months and one day to eight years.

The Supreme Court has held that imprisonment is not mandatory. A court may impose a fine alone when legally and factually justified. Following the amended fine under Article 355 and the one-degree increase, the current statutory fine range for online libel is ₱40,000 to ₱1,500,000. See People v. Soliman, G.R. No. 256700.

The offended party may also seek civil damages. Under Rule 111, civil liability arising from the offense is generally deemed included in the criminal case unless it is waived, reserved for separate filing, or was filed earlier. Article 33 of the Civil Code also recognizes an independent civil action for defamation. Double recovery for the same injury is not allowed.

The actual sentence and damages depend on the charge, established circumstances, evidence, judicial discretion, and applicable sentencing rules.

Common mistakes

Waiting for the post to be deleted before preserving it;
Saving only cropped screenshots without URLs, timestamps, context, or account identifiers;
Assuming a profile name proves who authored the post;
Treating every Like, Share, or reaction as cyber libel;
Assuming “opinion,” “public interest,” or “truth” is an automatic defense;
Assuming a public official can never sue, or that criticism of official conduct requires no factual basis;
Filing wherever the post could be viewed instead of proving a legally relevant venue;
Sending a demand letter and assuming it stopped prescription;
Adding public accusations while a complaint is being prepared or defended;
Contacting or pressuring witnesses, the complainant, an employer, or family members;
Deleting accounts, messages, devices, or source files after receiving notice of a complaint;
Ignoring a subpoena because no court case or warrant exists yet;
Missing the 15-day reconsideration period;
Treating a platform takedown as a substitute for a criminal or civil remedy.

A correction, apology, or takedown may affect the evidence, damages, motive, or settlement discussions, but it does not automatically erase a completed publication or terminate criminal proceedings. An affidavit of desistance likewise does not compel the prosecutor or court to dismiss a public prosecution.

When legal help is urgent

Consult a Philippine criminal lawyer immediately when:

The one-year prescriptive period may expire soon;
A prosecutor’s subpoena, resolution, Information, warrant, or arraignment notice has been received;
The respondent is anonymous or platform records may disappear;
The account may have been hacked, cloned, or impersonated;
The publication involves a public official, journalist, whistleblower, confidential source, or pending government proceeding;
Several posts, accounts, jurisdictions, or respondents are involved;
The publication originated abroad or the respondent is outside the Philippines;
Threats, stalking, doxxing, intimate material, identity theft, or violence accompany the alleged defamation; or
Civil damages, employment consequences, professional discipline, or another criminal statute may also apply.

Cyber libel should not be used as a substitute for emergency protection. Threats, extortion, unlawful disclosure of intimate material, violence against women or children, or immediate physical danger may require separate and faster police, court, or protective remedies.

Frequently asked questions

Can I file without a lawyer?

A complainant may execute and file a complaint-affidavit without private counsel, subject to the prosecution office’s requirements. Legal assistance is strongly advisable because authorship, venue, prescription, privilege, and electronic authentication are frequent failure points.

Does a deleted post still support a case?

Potentially. Deletion does not undo an earlier publication, but the complainant must still prove what was published, who authored it, who received it, and that the evidence is authentic. This is why immediate preservation matters.

Is a private or “friends only” post exempt?

No. Restricted visibility does not eliminate publication if at least one third person received the statement. The limited audience may still matter to context, motive, damage, or privilege.

Is sharing another person’s post automatically cyber libel?

No. A simple reaction or share is not automatically punishable as cyber libel under Disini. A person who adds a new defamatory caption, accusation, or comment may be treated as the author of that new material.

Can a company be cyber-libeled?

Yes. Article 353 covers both natural and juridical persons. The company must still prove identification, defamatory imputation, publication, malice under the applicable standard, authorship, and the cyber element.

Is proof of financial loss required?

Not necessarily to establish criminal libel, which focuses on a publication tending to cause dishonor, discredit, or contempt. Financial records and other concrete harm remain important when damages are claimed.

Does a police or NBI report stop prescription?

Do not assume so. Article 91 refers to interruption through the filing of a complaint or Information, and the legal effect depends on where and how the matter was formally initiated. Confirm that a proper prosecutorial complaint was filed before the deadline.

Does filing a complaint automatically remove the post?

No. A criminal complaint does not itself create an automatic takedown order. Platform moderation is separate, and the Supreme Court struck down the Cybercrime Prevention Act provision that would have allowed the DOJ to block content without a judicial warrant.

Can the parties settle?

They may settle civil claims or submit an apology, correction, retraction, or affidavit of desistance. Criminal liability is prosecuted in the name of the People of the Philippines, however, so a private agreement does not by itself require dismissal.

Official sources

This article provides general Philippine legal information, not advice for a particular case. Outcomes depend on the complete publication, evidence, dates, parties, and procedural record. Official sources were checked for currency on 3 August 2026.