Quick answer

Cyber libel is committed when the punishable acts of libel under the Revised Penal Code are carried out through a computer system or another similar information-and-communications technology. A viable case ordinarily requires:

A defamatory imputation;
Publication to at least one person other than the person defamed;
An identifiable offended person;
Malice under the standard applicable to the case;
Use of a computer system or ICT; and
Proof that the respondent authored the defamatory material.

A complainant should preserve the complete online evidence, document when the material was discovered, identify the proper venue, and file a sworn complaint with the appropriate City or Provincial Prosecutor’s Office. Assistance from the NBI Cybercrime Division, PNP Anti-Cybercrime Group, or DOJ Office of Cybercrime may be important when the author is anonymous or provider records must be preserved.

A respondent who receives a prosecutor’s subpoena should act immediately. Under the current DOJ preliminary-investigation rules, the hearing and deadline stated in the subpoena must allow at least 10 days from receipt of the subpoena and complete complaint documents for the filing of a counter-affidavit. Ignoring the subpoena may result in the complaint being resolved on the complainant’s evidence.

Cyber libel presently prescribes in one year from discovery of the alleged crime by the offended party, the authorities, or their agents. The Supreme Court reaffirmed this rule in April 2026. Publication starts the period only when publication and discovery coincide. Prescription and venue can turn on disputed evidence, so anyone near the deadline should obtain legal advice immediately.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel to publication through a computer system or a similar future technology.

The underlying definition is broad. Under Article 353 of the Revised Penal Code, libel may involve a public and malicious imputation of:

A crime;
A vice or defect, whether real or imaginary;
An act, omission, condition, status, or circumstance tending to cause dishonor, discredit, or contempt; or
Matter that blackens the memory of a deceased person.

The allegedly defamatory material must be examined as a whole and in its actual context. Not every insult, criticism, exaggeration, disagreement, negative review, or unpleasant opinion is criminal libel. The words must reasonably carry a defamatory imputation, and all other elements must still be proved.

Cyber libel may arise from text, photographs with captions, edited images, videos, blogs, social-media posts, forum entries, emails, or messages transmitted through a computer system. Whether a livestream, recording, meme, reaction video, or mixed spoken-and-written publication falls within the charge depends on its content, how it was transmitted, and the allegations and evidence presented.

The elements that must be established

1. There must be a defamatory imputation

The publication must attribute something that tends to dishonor, discredit, or expose a person to contempt. Courts consider the ordinary meaning of the words, the entire publication, the audience, and relevant surrounding circumstances.

Calling something an “opinion” is not conclusive. An opinion may still imply undisclosed and provably false facts. Conversely, rhetorical criticism or commentary that cannot reasonably be understood as asserting a defamatory fact may fail this element.

2. The statement must be published to a third person

In defamation law, publication means communicating the material to someone other than the person allegedly defamed.

A message sent only to its subject generally lacks third-party publication. A group chat, copied email, public post, restricted social-media post, or message seen by another person may satisfy the requirement. A small or private audience does not automatically eliminate publication.

3. The offended person must be identifiable

The person need not always be named. Identification may arise from a photograph, position, nickname, surrounding facts, or other details, but the evidence must show that readers or viewers could identify the person being discussed.

A corporation or other juridical person may also be protected under Article 353. Vague criticism of a large, undefined group may fail the identification requirement, depending on the language and circumstances.

4. The required malice must exist

For a private person, Article 354 generally presumes malice from a defamatory imputation unless the occasion is privileged or good intention and justifiable motive are shown.

A different constitutional standard applies when the complainant is a public official or public figure and the publication concerns a matter within that status or of public interest. The prosecution must prove actual malice—that the author knew the statement was false or acted with reckless disregard of whether it was false. Reckless disregard requires more than ordinary or even gross negligence; the evidence must support a high awareness of probable falsity or serious doubts about the truth. The Supreme Court explained this standard in Disini v. Secretary of Justice and Daquer v. People.

Whether someone is a public figure, and whether the statement relates to a public matter, are fact-dependent questions. Holding public office does not make every statement about the person automatically protected.

5. A computer system or ICT must have been used

The prosecution must connect the publication to a computer system or information-and-communications technology. This distinguishes cyber libel from traditional written libel, oral defamation, and other offenses against honor.

6. The respondent’s authorship must be proved

A username, display name, photograph, or account registration is not necessarily conclusive proof that a particular person wrote or uploaded the material. Relevant evidence may include admissions, account records lawfully obtained from a provider, device evidence, witnesses, linked communications, access records, or other circumstances establishing authorship.

In Disini, the Supreme Court upheld cyber libel as applied to the original author, but declared it unconstitutional as applied to people who simply receive and react to a post. A mere Like, Share, retweet, or brief reaction to somebody else’s defamatory post is therefore not treated as cyber libel under that ruling. A commenter who creates a new and independently defamatory accusation may, however, become the original author of that new statement.

Privileged communications, truth, and fair comment

Qualifiedly privileged communications

Article 354 recognizes, among others:

A private communication made to another person in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without additional remarks, of non-confidential judicial, legislative, or official proceedings or acts performed by public officers in their functions.

Philippine jurisprudence also recognizes fair comment on matters of legitimate public interest as qualifiedly privileged in appropriate circumstances.

Privilege is not a blanket license to make accusations. The communication should be made on a proper occasion, to persons with a legitimate interest, for the relevant duty or purpose, and without unnecessary publication. Once qualified privilege applies, the presumption of malice is displaced and actual malice must be proved.

Statements in certain official proceedings may receive absolute privilege, but that doctrine has strict limits. Reposting an accusation from a pleading or hearing onto social media does not automatically inherit the proceeding’s privilege.

Truth is not automatically enough

“True naman” is not, by itself, a complete answer to every criminal-libel charge. Article 361 provides for acquittal when the matter is shown to be true and was published with good motives and for justifiable ends. It also restricts proof of truth for imputations that do not constitute crimes, except in specified circumstances involving government employees and their official duties.

A defense based on truth should therefore be supported by admissible records and evidence of the publication’s legitimate purpose—not rumor, anonymous messages, or unsupported belief.

Corrections and good-faith verification

Prompt correction, verification efforts, requests for comment, reliance on reliable records, and the absence of hostility may be relevant to motive or actual malice. None is automatically decisive. A later apology also does not erase a completed offense, although it may affect the parties’ decisions, civil damages, or the court’s assessment of circumstances.

Penalties and possible civil liability

Traditional libel under Article 355, as amended by Republic Act No. 10951, carries prisión correccional in its minimum and medium periods, a fine of ₱40,000 to ₱1,200,000, or both.

Section 6 of the Cybercrime Prevention Act raises the penalty by one degree when ICT is used. The Supreme Court has held that the resulting imprisonment range for online libel is prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months, and one day to eight years. The applicable fine range is ₱40,000 to ₱1,500,000. Depending on the case, the court may impose imprisonment, a fine, or both.

The Supreme Court’s ruling in People v. Soliman confirms that courts may, in sound discretion and after considering the circumstances, impose a fine alone. Imprisonment nevertheless remains legally available, and subsidiary imprisonment may become relevant if an imposed fine is not paid under the applicable rules.

The offended party may also seek civil damages. Civil liability may be pursued with the criminal case or, in appropriate circumstances, through a separate civil action. The timing, reservation, and venue of a separate action require careful coordination because Article 360 contains special rules for libel proceedings and gives consequences to which related action is filed first.

The same defamatory publication should not be used to punish an accused separately for both traditional libel and cyber libel when the charges are legally the same offense. Disini held that such double prosecution would violate the protection against double jeopardy. Distinct publications or acts require a separate factual analysis.

The one-year prescription period

In Causing v. People, as reaffirmed by the Supreme Court En Banc on April 8, 2026, cyber libel was held to prescribe in one year under Article 90 of the Revised Penal Code.

Under Article 91, the period begins when the crime is discovered by:

The offended party;
The authorities; or
Their agents.

The date the material was posted is not automatically the date of discovery. They coincide only when the evidence shows that the alleged crime was discovered upon publication. There is no automatic presumption that a person saw an online post as soon as it became publicly available.

Filing the complaint or information interrupts prescription under Article 91. A private demand, platform report, request for deletion, or exchange of settlement messages should not be relied upon to stop the criminal prescriptive period.

For complainants, the complaint-affidavit should state the exact discovery date and explain how discovery occurred. Preserve messages from the person who first sent the post, notifications, access records, emails, and other dated proof.

For respondents, prescription may be raised even after arraignment because it extinguishes criminal liability. But when prescription is not apparent from the Information, the accused generally bears the burden of proving it. Mere reliance on the posting date may be insufficient.

Continued availability of an old post should not casually be treated as restarting the period. A new upload, material edit, or independently authored publication may present different issues, which should be assessed from the actual platform records and conduct involved.

Where to file

Venue in cybercrime cases is jurisdictional, not a matter of convenience. Under Section 2.1 of the Rule on Cybercrime Warrants, criminal actions under Section 4 of Republic Act No. 10175 are filed in the designated cybercrime court of the province or city:

Where the offense or any element was committed;
Where any part of the computer system used was situated; or
Where any damage to a natural or juridical person took place.

The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of the other qualified courts.

At the preliminary-investigation stage, the complaint is ordinarily filed with the City or Provincial Prosecutor’s Office corresponding to the legally proper venue. The eventual Information is filed in the appropriate Regional Trial Court designated to handle cybercrime cases.

Do not assume that a case may be filed anywhere the post could be viewed. Venue allegations must be supported by facts, and an incorrectly chosen prosecution office or court can cause delay or dismissal. Cases involving public officials, multiple complainants, foreign authors, cloud systems in several places, or uncertain locations require particular care.

How to file a cyber libel complaint

1. Preserve the publication before requesting its removal

Save more than a cropped screenshot. Preserve, where available:

The complete post, video, photograph, caption, or message;
The full conversation or thread, including material before and after the statement;
The exact URL;
The account name, handle, profile URL, user ID, and profile details;
The visible date, time, privacy setting, and edit history;
Comments, reactions, shares, and other evidence of third-party publication;
A screen recording showing how the content was reached;
Original downloaded files and their metadata;
Notifications, emails, or messages showing when the material was discovered;
The device on which it was first viewed;
Names and affidavits of people who saw or received it; and
Records of measurable harm, such as lost work, cancelled contracts, customer communications, or necessary expenses.

Keep untouched originals and working copies. Record who collected each item, when it was collected, and what was done with it. Do not log into another person’s account, bypass security, impersonate anyone, or use illegal access to obtain evidence.

2. Identify the author and the publication path

Record facts connecting the account to the suspected author. Avoid relying solely on a familiar name or photograph, since accounts can be spoofed, compromised, or shared.

If the author is anonymous, approach an authorized cybercrime investigator quickly. Private parties generally cannot compel a platform or internet provider to disclose protected subscriber or traffic information. Authorized agencies can pursue preservation and disclosure through the procedures established by Republic Act No. 10175 and the Rule on Cybercrime Warrants.

The NBI’s official procedure for investigative assistance to victims of computer crimes accepts complaints and supporting devices or documents. The PNP Anti-Cybercrime Group also receives reported incidents through its authorized channels. The DOJ Office of Cybercrime may facilitate preservation, technical assistance, and coordination in cybercrime matters.

3. Evaluate every legal element

Before filing, determine:

What exact words or images are defamatory;
What factual accusation they communicate;
Who understood the material to concern the complainant;
Which third persons received it;
Who authored it;
Whether the complainant is a private person, public official, or public figure;
Whether the communication may be privileged;
What evidence shows falsity or actual malice, when required;
When and how the alleged crime was discovered; and
What facts establish the proposed venue.

A weak complaint should not be strengthened by exaggeration. State only facts that can be sworn to and supported.

4. Prepare the complaint-affidavit and annexes

The complaint-affidavit should ordinarily contain:

The parties’ identifying information and addresses;
A chronological, first-person account;
The exact publication and its context;
The date of publication and date and manner of discovery;
Facts showing publication, identification, authorship, malice, and ICT use;
Facts supporting venue;
The names and accounts of witnesses;
A numbered list of supporting documents; and
A request for investigation and appropriate action.

Attach legible, properly labelled annexes. Material in another Philippine language may require an accurate translation so that the prosecutor can evaluate its meaning. The affidavit must be subscribed and sworn before an authorized officer.

Check the receiving office’s current requirements for identification, copies, electronic media, and local intake forms. Do not rely on an ordinary email as a valid filing unless the prosecution office has expressly authorized electronic filing for the case.

5. File with the proper prosecution office

Cyber libel requires a preliminary investigation because of its prescribed penalty. A complainant may file directly with the proper prosecution office, or seek NBI or PNP assistance first when attribution, forensic examination, or lawful provider disclosure is needed.

The filing of a report with an investigator and the filing of a complaint for preliminary investigation are not always the same event. Near the one-year limit, obtain written confirmation of what was filed, where, when, and under what docket number.

6. Participate in preliminary investigation

Under the 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings, the prosecutor determines whether there is prima facie evidence with reasonable certainty of conviction.

The respondent receives the complaint and supporting documents and may submit a counter-affidavit. The prosecutor may hold a physical or virtual clarificatory hearing and may require a reply-affidavit and rejoinder-affidavit when material new issues require them.

The rules generally direct the investigating prosecutor to resolve a preliminary-investigation complaint within 60 calendar days from assignment, with a maximum 30-day extension for specified circumstances such as complex issues, countercharges, consolidation, or reassignment. These are prosecutorial processing periods, not a promise that the entire criminal case will end within that time.

If the evidence meets the required standard, the prosecutor prepares an Information for filing in the proper court. A judge then makes an independent judicial determination of probable cause. Filing a complaint-affidavit does not itself mean that the respondent will automatically be arrested.

How to defend against a complaint or charge

1. Verify and calendar the subpoena immediately

Confirm the prosecutor’s office, docket number, parties, hearing date, and how and when the documents were served. Check that the complete complaint-affidavit and annexes are included.

The subpoena must give the respondent at least 10 days from receipt of the subpoena and complaint documents to submit a counter-affidavit. The actual date stated in the subpoena controls the immediate response. Request missing annexes or necessary access to voluminous records promptly and in writing.

2. Preserve your own evidence

Do not delete accounts, wipe devices, edit records, fabricate explanations, or ask witnesses to change their accounts. Preserve:

The original post and edit history;
Drafts, source documents, research notes, and messages;
Records of verification and requests for comment;
Complete conversations showing context;
Evidence of account compromise or lack of access;
Documents supporting truth, privilege, duty, or legitimate purpose;
Platform and device records relevant to authorship; and
Retractions, corrections, or responses made without coercion.

Avoid retaliatory posts, threats, or direct pressure on the complainant or witnesses. These can create new evidence or separate legal problems.

3. File a sworn, evidence-supported counter-affidavit

Answer the allegations paragraph by paragraph and raise all available factual and legal defenses, including where supported:

The statement is not defamatory in context;
There was no publication to a third person;
The complainant was not identifiable;
The respondent was not the author;
The account was fake, shared, or compromised;
The communication was privileged;
The publication was a protected fair comment;
The prosecution cannot prove actual malice;
The requirements for a truth defense are met;
The complaint was filed in the wrong venue;
The offense has prescribed; or
The evidence is incomplete, unauthenticated, inadmissible, or incapable of proving every element.

A bare motion to dismiss may not be used instead of a counter-affidavit. Under the 2024 DOJ rules, it will be allowed only if verified and containing the respondent’s defenses, in which event it is treated as the counter-affidavit.

If a properly served respondent neither appears nor files a counter-affidavit without justification, the prosecutor may consider the matter submitted for resolution.

4. Use post-resolution remedies on time

An aggrieved party may file a motion for reconsideration of the prosecutor’s resolution within 15 days from receipt. Further review may be available under the applicable DOJ rules, but the reviewing authority and requirements depend on which prosecutor issued the resolution and which court has jurisdiction over the offense.

A motion for reconsideration or petition for review does not necessarily stop the filing of an Information or the court proceedings. A party seeking review must coordinate any required motion to suspend proceedings and monitor both the prosecution and court dockets.

5. Respond properly if an Information or warrant has been issued

Once an Information is filed, obtain the complete court record and determine whether a warrant, hold-departure order, or scheduled arraignment exists. Do not evade service or rely on unofficial assurances.

Cyber libel is ordinarily bailable before conviction. The judge determines the amount and conditions of bail under the Constitution and Rule 114, considering the accused’s circumstances and the evidence. Counsel can arrange an orderly surrender and bail application when necessary.

Before entering a plea, counsel should examine whether a motion to quash is warranted for reasons such as failure of the Information to charge an offense, lack of jurisdiction, improper venue, double jeopardy, or prescription. Some objections can be waived if not raised at the proper time, while prescription is treated differently because it extinguishes criminal liability.

Common mistakes to avoid

Waiting for a platform to answer a report while the one-year prescriptive period runs;
Treating a demand letter or settlement negotiation as interrupting prescription;
Saving only a cropped screenshot without the URL, account, date, or context;
Assuming a profile name conclusively proves authorship;
Filing wherever the post happened to be viewed;
Charging everyone who Liked, shared, or reacted to the original post;
Assuming truth alone always defeats criminal libel;
Assuming a private group chat can never constitute publication;
Ignoring the higher actual-malice standard for public officials and public figures;
Ignoring a subpoena because the respondent believes the complaint is weak;
Submitting an unsworn denial without supporting records;
Deleting evidence before it is properly preserved;
Contacting or pressuring witnesses;
Posting a public “defense” that repeats or expands the disputed accusation; and
Treating an apology, deletion, or affidavit of desistance as an automatic dismissal.

Cyber libel is a public offense. A private settlement may resolve civil claims or influence how the parties proceed, but it does not by itself compel the prosecutor or court to dismiss a criminal case.

When legal help is urgent

Consult a Philippine lawyer promptly if:

The one-year period is close to expiring;
A prosecutor’s subpoena or court notice has been received;
A warrant of arrest may already exist;
The account is anonymous or provider data may disappear;
Venue or the discovery date is disputed;
The post concerns a public official, journalist, election, or matter of public interest;
The complaint includes several posts, authors, or jurisdictions;
The accused or relevant provider is outside the Philippines;
A related civil case, employment case, administrative complaint, or protection order is pending; or
The content also involves threats, stalking, doxxing, intimate images, a child, extortion, identity theft, unlawful access, or immediate physical danger.

When personal safety is at risk, contact law enforcement or emergency services instead of waiting for a libel case.

Frequently asked questions

Can a case be filed against an anonymous account?

Yes, but the complainant must ultimately establish who authored the material. Preserve the account and publication details and promptly seek authorized investigative assistance. A court order or cybercrime warrant may be necessary to obtain protected provider information.

Is sharing or liking a defamatory post cyber libel?

Not ordinarily, if the person merely received and reacted to another person’s post. Disini limited cyber-libel liability to the original author. A new comment or caption containing an independent defamatory accusation may be treated as a new original publication.

Does deleting the post prevent a case?

No. Deletion does not erase a completed publication if admissible evidence proves what was posted, who authored it, and that a third person received it. Deletion can, however, make proof more difficult.

Is a retraction required before filing?

No. A demand, correction request, or platform report may be useful, but it is not generally a prerequisite to a criminal complaint and should not be allowed to consume the prescriptive period.

Is truth a complete defense?

Not automatically. Article 361 generally requires both truth and proof that publication was made with good motives and for justifiable ends, subject to its rules on when proof of truth is admissible.

Can criticism of a government official be prosecuted?

It can be complained of, but conviction requires the applicable constitutional protections to be observed. When the statement concerns a public official or public figure in the relevant public context, the prosecution must prove actual malice beyond reasonable doubt.

Can the complainant file more than one charge for the same post?

The same online publication cannot properly support duplicative punishment for both traditional and cyber libel when they are legally the same offense. Separate original publications may raise distinct questions, but duplication must be tested against double-jeopardy principles.

Can a recently discovered old post still be actionable?

Possibly. The present rule is one year from discovery by the offended party, authorities, or their agents—not automatically one year from upload. The claimed discovery date must be supported by evidence and may be contested.

Will filing a complaint cause immediate arrest?

Normally, no. Cyber libel undergoes preliminary investigation. If the prosecutor later files an Information, the judge independently determines probable cause and whether to issue a warrant.

Does an apology or settlement automatically end the criminal case?

No. It may affect civil liability, damages, motive, or the parties’ positions, but the criminal prosecution is controlled by the State through the prosecutor and court.

Official legal sources

This article provides general Philippine legal information, not legal advice or an assessment of any particular post, complaint, or defense. Outcomes depend on the exact words, context, parties, dates, venue, documents, and admissible evidence. Sources and procedures checked as of August 10, 2026.