Quick answer

To file a cyber libel case in the Philippines, the complainant must promptly preserve the online publication and evidence identifying its author, then file a properly sworn complaint-affidavit with the appropriate prosecution office. The evidence must support every element of libel and show that the defamatory material was published through a computer system.

To defend against a complaint, do not ignore the prosecutor’s subpoena. Obtain the complete complaint and attachments, preserve—not alter or delete—the relevant accounts and devices, and submit a sworn counter-affidavit addressing authorship, publication, identification, defamatory meaning, malice, privilege, truth and proper motive, prescription, jurisdiction, venue, and the authenticity of the electronic evidence.

A harsh, insulting, embarrassing, or false-looking post is not automatically cyber libel. Liability depends on the exact words, context, audience, identity of the person discussed, evidence linking the accused to the publication, applicable privileges, and compliance with procedural requirements.

What cyber libel means

Section 4(c)(4) of the Cybercrime Prevention Act of 2012, or Republic Act No. 10175, penalizes the unlawful acts of libel defined in Article 355 of the Revised Penal Code when committed through a computer system or similar means.

The prosecution generally must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, condition, status, or act or omission that tends to dishonor, discredit, or expose a person to contempt.
Publication. At least one person other than the person defamed received, read, heard, or saw the statement. A private message sent only to the subject may not satisfy publication, but a group chat, shared email, public post, comment, video, or message forwarded to someone else may.
Identification. The complainant must be identifiable from the words, image, surrounding facts, or context. Naming the person is not always necessary, but a vague statement about an unidentifiable group may be insufficient.
Malice. Defamatory imputations are generally presumed malicious, subject to statutory privileges and constitutional protections. In some cases—particularly speech about public officials, public figures, or matters of public concern—the complainant may have to prove actual malice, meaning knowledge of falsity or reckless disregard of whether the statement was false.
Use of a computer system. The publication was made through the internet, a social-media platform, messaging application, email, website, computer, smartphone, or comparable electronic system.

The prosecution must ultimately prove guilt beyond reasonable doubt. During a DOJ preliminary investigation, the governing standard is whether the submitted evidence establishes prima facie evidence with reasonable certainty of conviction.

Who may be criminally liable

In Disini v. Secretary of Justice, the Supreme Court upheld the cyber-libel provision but limited its application to the original author of the defamatory online statement. It did not uphold liability under the Cybercrime Prevention Act merely for receiving, reacting to, or sharing another person’s post.

That protection has limits. A person who adds an independently defamatory caption, accusation, comment, voice-over, or edited presentation may become the author of new content. Administrators, editors, employers, page owners, and corporate officers are not automatically criminally liable simply because of their position; their personal participation and the applicable statutory basis must be proved.

Cyber libel also cannot be imposed retroactively on an online publication made before Republic Act No. 10175 took effect. A later edit, update, repost, or new publication requires careful factual and legal analysis rather than an assumption that an old post automatically creates a new offense.

Opinion, criticism, and defamatory assertions

Calling a statement an “opinion” does not end the inquiry. Courts examine its substance and context.

Statements of taste, rhetoric, satire, or value judgment may receive protection, especially when based on disclosed facts and concerning a matter of public interest. By contrast, an “opinion” that implies undisclosed and provably false criminal or factual conduct may still be actionable.

Criticism of official conduct, public policy, businesses, candidates, and public figures receives significant constitutional protection. That protection does not create a license to fabricate facts. A court may consider:

whether the statement asserted a verifiable fact;
whether the supporting facts were disclosed;
whether reliable sources were checked;
whether contrary information was deliberately ignored;
whether the language was literal, exaggerated, satirical, or rhetorical;
whether the subject and issue were matters of public concern; and
whether the publisher knew the accusation was false or recklessly disregarded its probable falsity.

Truth, privilege, and good motive

Truth is important, but it is not always a complete defense by itself. Article 361 of the Revised Penal Code generally requires proof of the truth of the matter charged together with good motives and justifiable ends. The precise application depends on the nature of the accusation and the person involved.

Article 354 recognizes qualified privileged communications, including:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts that are not confidential.

A qualified privilege generally defeats the presumption of malice, but it may be overcome by proof of actual malice. The communication must stay within the purpose and audience of the privilege. Broadcasting an accusation far beyond those who reasonably need to receive it can weaken the defense.

Absolute privileges, such as statements properly made during legislative or judicial proceedings, are narrower and depend on the speaker, setting, and relevance of the statement.

The one-year prescription period

The Supreme Court has ruled that cyber libel prescribes in one year, counted from discovery of the offense rather than automatically from the upload date. See the Court’s official summary of its ruling in Causing v. People.

“Discovery” is a factual issue. Evidence may include the date the complainant first saw the post, received a link or screenshot, was informed about it, or took action showing prior knowledge. Leaving content online does not necessarily restart the period every day.

The safest course is to file the complaint with the prosecution office well before one year expires. Do not rely on a takedown request, barangay proceedings, a demand letter, a platform report, or an informal police inquiry to stop prescription. Recent Supreme Court doctrine recognizes filing with the prosecution office as the operative step for interrupting prescription, subject to the ruling’s prospective application and the particular offense and filing date.

For a respondent, prescription should be raised with dated, admissible proof. A bare claim that the post is “old” is rarely enough.

How to preserve online evidence

Electronic evidence can disappear or be altered quickly. Preserve it before contacting the publisher if there is a real risk of deletion.

Keep:

full-page screenshots showing the post, account name, date, time, reactions, comments, and surrounding context;
the exact URL or platform link;
a screen recording showing how the post is reached from the account or page;
the original electronic file, message, email, image, audio, or video;
the device on which the material was received or viewed;
account identifiers, usernames, profile links, email addresses, and telephone numbers;
messages or admissions connecting the respondent to the account;
names and affidavits of people who personally saw the publication;
evidence of the date of discovery;
prior versions, edits, reposts, notifications, and platform correspondence;
source documents proving truth or falsity; and
evidence of actual harm, such as lost work, cancelled transactions, threatening messages, or inquiries from people who saw the post.

Do not crop away essential context, edit metadata, manufacture a reconstruction, impersonate someone, or access an account without authority. Keep a working copy and an untouched original. Record who collected each item, when it was collected, from what device, and how it has been stored.

A screenshot may be useful, but its authenticity and connection to the alleged author can still be challenged. Where identity or deletion is likely to be disputed, seek prompt assistance from the NBI Cybercrime Division, the PNP Anti-Cybercrime Group, or counsel experienced in electronic evidence.

How to file a cyber libel complaint

1. Evaluate the exact publication

Copy the precise words and preserve the entire conversation, article, thread, video, or image. Identify which particular statements are alleged to be defamatory. A complaint should not rely only on labels such as “fake news,” “paninirang-puri,” or “character assassination.”

Check whether the statement:

refers to the complainant;
reached another person;
makes or implies a defamatory factual accusation;
was published through a computer system;
is protected criticism, opinion, satire, or privileged communication;
can be linked to the proposed respondent; and
was discovered within the one-year prescriptive period.

2. Identify the correct respondent

A profile name or screenshot alone may not prove who controlled an account at the relevant time. Gather lawful evidence of authorship, such as admissions, linked contact details, consistent account history, witnesses, or records obtainable through proper legal process.

Do not name relatives, employees, officers, page administrators, or organizations merely because they are connected to the suspected author.

3. Determine the proper prosecution office and venue

A cyber libel complaint ordinarily begins with the appropriate Office of the City Prosecutor, Office of the Provincial Prosecutor, or other prosecution office authorized by law. The NBI and PNP are the principal law-enforcement authorities under Republic Act No. 10175 and may investigate and assist in preserving or developing technical evidence.

Cybercrime cases fall within the jurisdiction of the Regional Trial Court, including designated cybercrime courts. Territorial venue is a separate requirement from subject-matter jurisdiction. It may depend on where a material element occurred, where the relevant computer system was situated, and other legally significant facts. Republic Act No. 10175 also contains jurisdictional rules for offenses involving Filipino nationals, computer systems in the Philippines, or damage caused to a person in the Philippines.

Because an incorrect venue can defeat a prosecution, obtain case-specific advice before filing if the author, complainant, server, account, or audience is associated with different cities, provinces, or countries.

4. Prepare the complaint-affidavit

The affidavit should set out facts within the complainant’s personal knowledge, including:

the complainant’s identity and address;
the respondent’s known identity and address;
the exact defamatory material;
where and how it was published;
when and how the complainant discovered it;
why it refers to the complainant;
who else saw or received it;
the basis for attributing authorship to the respondent;
why the accusation is false or malicious, when relevant;
the injury or circumstances resulting from publication; and
a clear identification of every attachment.

Witnesses should generally execute their own sworn affidavits. Documents should be legible, organized, marked, and explained. Follow the receiving office’s current requirements for copies, electronic filing, oath administration, identification, and service.

5. File promptly and keep proof

Secure a stamped receiving copy, docket number, official acknowledgment, or electronic receipt. Keep proof of the filing date because it may be decisive on prescription.

A complaint may lead to further case build-up, a subpoena to the respondent, clarificatory proceedings, dismissal, or the filing of an Information in court. Filing does not guarantee prosecution or conviction.

What happens during preliminary investigation

The applicable DOJ rules are found in Department Circular No. 15, series of 2024, whose authority has been recognized by the Supreme Court. A prosecutor evaluates whether the evidence reaches the required threshold for filing an Information.

For a regular preliminary investigation:

the respondent should receive a subpoena with the complaint and supporting evidence;
the subpoena must give the respondent at least 10 days from receipt to submit a counter-affidavit;
the respondent may attach witness affidavits and documentary or electronic evidence;
the prosecutor may require replies, rejoinders, or clarification when permitted by the rules; and
an aggrieved party may generally move for reconsideration within 15 days from receipt of the resolution.

The specific date in the subpoena or order must be followed. Different rules may apply to proceedings outside the DOJ National Prosecution Service or where a later issuance governs. A petition for review does not automatically suspend court proceedings after an Information has been filed; a separate request for suspension may be necessary.

How to defend against a cyber libel complaint

Act immediately after receiving a subpoena

Note the actual date and manner of service. Obtain the full complaint, affidavits, screenshots, storage media, and other attachments. If anything is missing, promptly make a written request and document it.

Engage counsel before posting a public response or contacting the complainant. Do not threaten witnesses, solicit false statements, delete accounts, or instruct others to remove evidence.

Prepare a fact-specific counter-affidavit

Possible defenses include:

No authorship or participation. The respondent did not create or publish the material, or the account was falsely attributed, compromised, or operated by someone else.
No publication to a third person. The communication remained solely between the respondent and complainant.
No identification. A reasonable reader could not identify the complainant from the statement and context.
No defamatory imputation. The words, taken as a whole and in context, do not accuse the complainant of dishonorable conduct.
Protected opinion or fair comment. The publication was a recognizable opinion based on disclosed or established facts, particularly on a matter of public interest.
Truth with good motives and justifiable ends. Reliable records and circumstances support both the accuracy of the statement and the legitimate purpose for making it.
Privileged communication. The statement was made on a proper occasion, for a lawful duty or interest, to an appropriate audience, and without actual malice.
Failure to prove malice. This is especially important when constitutional actual-malice protection applies.
Defective or unauthenticated electronic evidence. The evidence does not reliably establish the content, source, date, integrity, or account holder.
Prescription. The complaint was filed more than one year after discovery, supported by competent evidence of the discovery date.
Improper venue or lack of jurisdictional facts.
Non-retroactivity. The alleged publication occurred before the cybercrime law took effect.

A bare denial is usually weak. Support each material fact with records, witnesses, device or account information, source documents, and a clear chronology. Explain apparent inconsistencies before the prosecutor treats them as evidence of bad faith.

Do not substitute an unsupported motion for the counter-affidavit

Under the DOJ-NPS procedure, a respondent should ordinarily present factual and legal defenses in a sworn counter-affidavit. A document titled “motion to dismiss” may not excuse failure to answer unless it is verified and contains the defenses and evidence necessary to be treated as the counter-affidavit.

If an Information is filed in court

Once an Information is filed, court proceedings begin. The accused should promptly address:

counsel and bail;
any warrant or summons;
lawful grounds for a motion to quash;
arraignment and plea;
preservation and disclosure of electronic evidence;
objections to authentication, hearsay, completeness, and chain of custody;
possible civil liability attached to the criminal case; and
deadlines for review or other remedies.

A pending motion for reconsideration or DOJ petition for review does not by itself authorize the accused to disregard a court date.

Penalties and civil exposure

Ordinary libel under Article 355, as amended by Republic Act No. 10951, carries imprisonment of prisión correccional in its minimum and medium periods, a fine of ₱40,000 to ₱1.2 million, or both. For cyber libel, Section 6 of Republic Act No. 10175 raises the applicable imprisonment by one degree; this corresponds to a range extending from prisión correccional maximum to prisión mayor minimum—four years, two months and one day to eight years—subject to the rules on sentencing, mitigating or aggravating circumstances, and the court’s determination.

The Supreme Court has encouraged courts, where legally proper, to consider a fine instead of imprisonment in libel cases. That policy does not guarantee that imprisonment will never be imposed.

A conviction may also result in civil damages and costs. Separately, defamatory conduct may support a civil action under the Civil Code, including Articles 19, 20, 21, 26, and 33, depending on the facts. A complainant should not assume that every reputational injury will justify a large award; actual, moral, exemplary, and other damages require their respective legal and evidentiary bases.

Retraction, correction, and settlement

A prompt, clear, and proportionate correction, apology, or retraction may reduce harm and may be relevant to good faith, malice, or damages. It does not automatically extinguish criminal liability.

Do not publish a vague “sorry if you were offended” statement without considering its consequences. A poorly written response may repeat the accusation, create a new publication, admit disputed facts, or aggravate the conflict.

Settlement discussions should be handled carefully. Criminal prosecution is exercised in the name of the People of the Philippines, so an affidavit of desistance does not automatically compel dismissal. Never offer money, threaten exposure, or pressure a witness in a manner that could create a separate offense.

Common mistakes

Waiting for the post to be deleted before saving the URL, context, and account details.
Filing close to the one-year deadline without resolving venue or affidavit defects.
Submitting cropped screenshots with no proof of source or authorship.
Treating every insult, bad review, or negative opinion as a criminal accusation.
Assuming that truth alone always defeats liability.
Naming every person associated with a page as an accused.
Confusing a platform takedown report with a criminal complaint.
Accessing another person’s account or device without permission to obtain evidence.
Deleting posts, messages, or devices after receiving a demand or subpoena.
Answering the allegations through social media instead of through sworn evidence.
Ignoring a subpoena because the respondent believes the complaint is baseless.
Missing the deadline stated in the subpoena or prosecutor’s resolution.
Assuming that a retraction, desistance, or private settlement automatically ends the case.
Republishing the disputed accusation while attempting to deny it.

When legal help is urgent

Consult a Philippine lawyer immediately if:

the one-year prescriptive period is approaching;
a prosecutor’s subpoena, resolution, Information, or arrest warrant has been received;
the identity of an anonymous account requires subscriber or traffic data;
evidence may soon be deleted or overwritten;
the publication involves several jurisdictions or a person abroad;
a journalist, public official, public figure, whistleblower, child, or vulnerable person is involved;
the statement concerns sexual conduct, national security, confidential records, or another possible offense;
law enforcement wants access to a device or account;
there is a threat of violence, doxxing, stalking, or extortion; or
settlement terms include admissions, money, confidentiality, or withdrawal of several cases.

Cyber libel is technical criminal litigation. Early advice is often most valuable before evidence is lost, a sworn statement is filed, or an avoidable public response is posted.

Frequently asked questions

Can I file because someone insulted me online?

Not necessarily. The statement must satisfy all elements of cyber libel. Vulgar abuse or name-calling may be offensive without conveying a defamatory factual imputation, although other laws may apply.

Is a Facebook post automatically cyber libel?

No. The prosecution must still prove defamatory imputation, publication, identification, malice when required, authorship, use of a computer system, and all jurisdictional and procedural facts.

Can someone be charged for sharing or liking a defamatory post?

Under Disini, merely receiving, reacting to, or sharing another person’s statement is not enough to impose aiding-or-abetting liability for cyber libel. A person who adds new defamatory content may face liability as the author of that content.

Can a private group chat amount to publication?

Yes, if the defamatory statement was communicated to at least one person other than the subject. The small or private audience may affect context, privilege, harm, and damages, but it does not automatically eliminate publication.

Can an anonymous account be sued?

A complaint may initially identify an unknown account, but criminal liability ultimately requires reliable proof of the human author. Subscriber, traffic, or content data may require preservation measures, lawful process, and, where required, a court warrant.

Does deleting the post end the case?

No. Deletion may limit continuing harm but does not erase a completed publication or copies already preserved. Deleting evidence after notice of a dispute may also damage the deleting party’s credibility.

Is a demand letter required before filing?

Generally, no universal rule makes a prior demand an element of cyber libel. A demand may be useful in some cases, but it should not cause the complainant to miss the one-year period or give advance warning that allows evidence to disappear.

Can I file both criminal and civil cases?

Potentially. Civil liability may accompany the criminal case, and an independent civil action may be available under the Civil Code. The proper arrangement, reservation requirements, and risk of duplicating recovery should be reviewed with counsel.

Where can the incident be reported?

Technical evidence may be reported to the NBI’s cybercrime unit or the PNP Anti-Cybercrime Group. The criminal complaint itself is ordinarily filed with the legally proper prosecution office. Confirm current receiving procedures directly with the agency or office before filing.

Official legal sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Cyber libel issues are highly fact-dependent; consult a Philippine lawyer about the actual publication, evidence, dates, and documents. Laws and official procedures were checked as of September 15, 2026.