Quick answer

Cyber libel is committed when a person publishes a defamatory statement through a computer system—such as social media, a website, email, or an online group—and the prosecution can establish the elements of libel, the identity of the person defamed, and the accused’s responsibility for the publication.

To file a criminal case, preserve the online evidence immediately and submit a sworn complaint-affidavit with supporting evidence to the proper city or provincial prosecutor’s office. The NBI Cybercrime Division or PNP Anti-Cybercrime Group may first investigate, particularly when the author is anonymous or platform records are needed. A platform report, demand letter, or informal police report should not be assumed to interrupt prescription.

To defend a case, do not ignore a subpoena, delete evidence, contact witnesses improperly, or answer publicly. Obtain the complete complaint and attachments, preserve the account and device records, and submit a sworn, evidence-supported counter-affidavit by the deadline in the subpoena.

The current criminal prescriptive period is one year from discovery of the allegedly defamatory material by the offended party, the authorities, or their agents. In April 2026, the Supreme Court En Banc reaffirmed this rule with finality. The discovery date is a factual issue and is not automatically the posting date. Act promptly whether filing or defending. See Causing v. People, G.R. No. 258524, April 8, 2026.

What the prosecution must prove

Cyber libel is governed by Section 4(c)(4) of the Cybercrime Prevention Act of 2012, together with Articles 353 to 355 of the Revised Penal Code. Ordinarily, the prosecution must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose another person or juridical entity to contempt.
Publication. The statement was communicated to at least one person other than the person defamed. A message seen only by its subject normally lacks this element; a group chat, public post, forwarded email, or message sent to another person may satisfy it.
Identification. The complainant was named or was sufficiently identifiable from the words and surrounding circumstances. Naming the person is not always necessary, but a vague statement about a large, unidentified group may be insufficient.
Malice. The applicable form and required proof of malice depend on whether the statement is privileged and whether the complainant is a private person, public official, or public figure.
Use of a computer system or similar ICT. The publication occurred online or through a device or system covered by the Cybercrime Prevention Act.
Authorship or responsibility for the publication. Evidence must reliably connect the accused to the account and the particular statement. The fact that a post appeared under someone’s name is important, but account control, hacking, impersonation, shared access, or fabricated screenshots may remain factual issues.

The Supreme Court lists the traditional elements as a discreditable allegation, publication, identification, and malice in Disini v. Secretary of Justice.

Who may be liable

The cyber-libel provision is valid as applied to the original author of the defamatory online statement. In Disini, however, the Supreme Court declared it unconstitutional as applied to people who merely receive and react to the post. It also invalidated “aiding or abetting” liability in relation to online libel.

Accordingly, merely clicking a reaction, receiving a post, or using a platform’s basic share function is not automatically cyber libel. But a person who adds a new defamatory caption, accusation, or comment may become the author of a separate statement. Liability then depends on the exact words, context, audience, and evidence—not the label used by the platform.

A person also cannot be prosecuted for both traditional libel and cyber libel for the same online act when doing so would violate double jeopardy.

The one-year criminal deadline

Under Articles 90 and 91 of the Revised Penal Code, as definitively applied in Causing:

Cyber libel prescribes in one year.
The period begins when the alleged crime is discovered by the offended party, the authorities, or their agents.
A public post is not automatically deemed discovered on its posting date merely because it was publicly accessible.
Filing the proper complaint or information interrupts prescription.
The period may run again if proceedings terminate without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused.
The period does not run while the offender is absent from the Philippines.

The complainant should preserve proof of the discovery date—for example, the message that first forwarded the post, the original screenshot or screen recording, the witness who showed it, and any immediate response. The respondent should preserve contrary evidence, such as an earlier comment, reaction, demand, report, or message showing earlier knowledge.

Do not wait until the final day. A filing in the wrong office, incomplete complaint, disputed venue, or inability to authenticate evidence can create serious problems.

A separate civil action for defamation is also generally subject to a one-year period under Article 1147 of the Civil Code. Its accrual and interruption rules require a separate analysis.

How to file a criminal complaint

1. Preserve the complete online publication

Before requesting removal, capture more than a cropped screenshot. Preserve:

The complete post, article, video, audio, email, or conversation;
The exact words complained of and their surrounding context;
The visible account name, username, profile link, page ID, and profile details;
The direct URL and the date and time accessed;
Posting, editing, and sharing dates, if visible;
Audience or privacy settings;
Comments, captions, replies, reactions, and share history relevant to publication;
A screen recording showing how the content was accessed;
The original files at their native quality;
The device on which the content was received or viewed;
Messages showing who first sent or disclosed the content;
Names and contact details of people who personally saw it; and
Evidence of harm, including lost work, cancelled transactions, medical expenses, or messages from people who changed their treatment of the complainant.

Keep untouched originals and working copies. Record who collected each item and when. Electronic evidence must still be authenticated and shown to be reliable under the Rules on Electronic Evidence. A screenshot alone may fail to prove authorship, publication, or authenticity.

2. Identify the author and assess the statement

Determine, as far as the evidence permits:

Who wrote the particular words;
Who controlled the account at the relevant time;
Whether the post was original, quoted, edited, or accompanied by a new caption;
Who other than the complainant received or viewed it;
How the complainant is identifiable;
Whether the statement asserts a fact or is rhetorical language, satire, or opinion;
Whether it concerns public affairs or official conduct;
Whether it reproduces an official record or proceeding; and
Whether any privilege or other defense is apparent.

Calling something an “opinion,” placing “allegedly” before an accusation, or adding “for awareness only” does not automatically prevent liability if the communication reasonably conveys a defamatory factual assertion.

3. Determine the proper place to file

Cybercrime cases are tried by designated cybercrime Regional Trial Courts. Under the Rule on Cybercrime Warrants, venue may lie in the province or city:

Where the offense or any element occurred;
Where any part of the computer system used was situated; or
Where damage to a natural or juridical person took place.

The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of other courts. Venue is fact-sensitive; mere nationwide internet accessibility should not be treated as permission to file anywhere.

Before filing, confirm the proper city or provincial prosecutor’s office corresponding to the intended court venue. A lawyer should examine venue when the author, device, server, complainant, and harm are in different places.

4. Consider an NBI or PNP investigation

The NBI and PNP are the law-enforcement authorities designated by Republic Act No. 10175. Their cybercrime units can document the incident and, when legally justified, seek preservation or disclosure of platform and subscriber data through the procedures and warrants required by law.

Early investigation is especially important when:

The account is anonymous or appears fake;
The account may soon be deleted;
The content was available only briefly;
Platform or telecommunications records are essential;
Account hacking or impersonation is alleged; or
Evidence or a relevant person is outside the Philippines.

Law enforcement cannot guarantee that a platform will retain usable data or that an anonymous author will be identified. Do not assume that emailing a report alone constitutes the formal complaint that interrupts prescription. Obtain the reference number and confirm what formal filing is still required. The DOJ Office of Cybercrime publishes official contact and reporting information.

5. Prepare and file the complaint-affidavit

The complaint-affidavit should be sworn and should clearly state:

The complainant’s and respondent’s identifying information and addresses, if known;
The exact defamatory words or an accurate translation where necessary;
The complete context;
How and when the complainant discovered the material;
Who else received, read, heard, or viewed it;
Why the statement refers to the complainant;
Facts connecting the respondent to the account and publication;
The computer system or online medium used;
The basis for venue;
The harm suffered; and
A chronological list of attached evidence.

Attach witness affidavits and authenticated or authentication-ready copies of the electronic evidence. Follow the prosecution office’s current requirements for copies, oath administration, identification, and electronic or physical filing. The DOJ maintains an official preliminary-investigation filing checklist, but confirm local requirements before the deadline.

6. Participate in the preliminary investigation

The prosecutor does not determine guilt beyond reasonable doubt at this stage. Under the current 2024 DOJ-NPS Rules, the required quantum is prima facie evidence with reasonable certainty of conviction. The evidence must be admissible, credible, capable of preservation, and sufficient—if uncontradicted—to establish the elements and the responsible person. The Supreme Court upheld these rules in Meking v. Remulla, G.R. No. 280455, November 11, 2025.

The respondent is ordinarily subpoenaed and given an opportunity to submit a counter-affidavit and evidence. The complainant may be permitted to reply, and the prosecutor may require clarification.

If the prosecutor finds the required evidence, an Information is filed in the proper RTC. The judge independently evaluates probable cause for a warrant of arrest. At trial, the prosecution must prove guilt beyond reasonable doubt.

How to defend against a complaint

1. Treat every official document as urgent

Record the date and manner you received the subpoena, complaint, resolution, Information, warrant, or court order. Keep the envelope, email headers, receiving copy, and all attachments.

Under the regular preliminary-investigation procedure, the subpoena should give the respondent at least 10 days from receipt to submit a counter-affidavit. Follow the exact date stated in the subpoena and verify whether the office counts or extends the period differently because of holidays, service issues, or an authorized extension.

A prosecutor’s resolution may generally be challenged through a motion for reconsideration filed within 15 days from receipt under the current DOJ-NPS rules. Further review has separate requirements and does not automatically stop a court case. Obtain counsel before the period expires.

2. Obtain the complete record

Check whether you received:

The complaint-affidavit;
All witness affidavits;
Every screenshot, printout, file, transcript, and storage medium;
Evidence allegedly identifying you as the author;
The alleged discovery date;
Proof of publication to a third person; and
Evidence supporting venue.

Ask for missing attachments through the proper office procedure. Do not respond to an accusation you have not fully seen.

3. Preserve your own evidence

Do not factory-reset devices, delete accounts, alter posts, erase messages, or fabricate replacement records. Preserve:

Account downloads and login history;
Security alerts and password-change notices;
Devices used by you and other authorized account users;
Drafts and original files;
Sources, official records, notes, interviews, and verification efforts;
Messages requesting the other side’s comment;
The complete conversation or publication, not isolated excerpts;
Evidence of hacking, impersonation, spoofing, or shared access;
Earlier reactions or communications proving when the complainant discovered the post;
Evidence of retraction, correction, apology, or removal; and
The complainant’s public position or role, when legally relevant.

Deletion after notice of a dispute may make authentication harder and can be portrayed adversely. Preservation does not mean the material must remain publicly accessible; ask counsel how to retain evidence while limiting further dissemination.

4. Submit a sworn, specific counter-affidavit

A useful defense addresses every element and attachment. Depending on the evidence, it may show:

The words were not defamatory in their full context;
The complainant was not identifiable;
No third person received the communication;
The respondent did not author or publish it;
The account or screenshot is not authentic;
The post was altered, fabricated, or taken out of context;
The statement was privileged;
Required actual malice is absent;
The facts were true and published with the legally required motive and purpose;
The offense had prescribed;
Venue is improper; or
The prosecution’s evidence is inadmissible, incredible, or incapable of preservation for trial.

Avoid a bare denial when records are available. Explain the evidence, identify witnesses with personal knowledge, and attach their sworn statements. Do not submit false affidavits or coordinate false accounts.

Important defenses and exceptions

Lack of publication

Defamation concerns reputation in the eyes of others. A statement communicated only to the person concerned ordinarily does not establish publication. If another person received it, even privately, publication may exist.

Lack of identification

The prosecution must show that readers could identify the complainant. Identification may arise from a name, photograph, position, nickname, past events, or surrounding facts. The issue is not merely whether the complainant personally felt targeted.

No authorship or unreliable attribution

A profile name or screenshot does not resolve every authorship dispute. Relevant evidence may include admissions, account ownership, consistent prior use, login records, device records, witnesses, platform data, or proof of unauthorized access.

Privileged communication

Article 354 recognizes, among others:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments or remarks, of a non-confidential judicial or other official proceeding, official statement, or act performed by a public officer in the exercise of official functions.

Privilege is not a license to circulate accusations to unnecessary recipients. Qualified privilege generally removes the presumption of malice, but liability may remain if actual malice is proved. Fair commentary on matters of public interest may also receive qualified protection, depending on its factual basis, purpose, and wording.

Public officials, public figures, and actual malice

When the publication concerns the official conduct of a public officer or the affairs of a public figure, the prosecution may have to prove actual malice: knowledge that the statement was false or reckless disregard of whether it was false. Reckless disregard requires more than ordinary negligence; evidence must support a high degree of awareness of probable falsity or serious doubts about the statement’s truth.

This protection does not cover a calculated falsehood merely because it concerns politics or public affairs. The classification of a person as a public figure, and the connection between the statement and a public issue, are fact-dependent.

Truth

Truth is not always a stand-alone defense to criminal libel. Article 361 generally requires proof both that the defamatory matter was true and that it was published with good motives and for justifiable ends.

Proof of the truth of an imputation involving an act or omission that is not a crime is restricted, except where the imputation concerns a government employee and facts relating to official duties. Special constitutional rules protecting criticism of public officials must also be considered.

Prescription

The defense must identify and prove the relevant discovery date. The Supreme Court has made clear that prescription remains available even after arraignment because it totally extinguishes criminal liability, but a court cannot decide a factual prescription claim based on unsupported assertions.

A simple reaction is not authorship

Under Disini, those who merely receive and react to another person’s post are not liable under the cyber-libel provision. The protection does not necessarily extend to someone who independently writes and publishes a new defamatory accusation.

Penalties and civil exposure

Section 6 of Republic Act No. 10175 raises the penalty by one degree when libel is committed through ICT. The imprisonment range is prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years.

Imprisonment is not mandatory in every conviction. In People v. Soliman, G.R. No. 256700, April 25, 2023, the Supreme Court held that a court may impose a fine alone, depending on the circumstances. It calculated the statutory fine for online libel at ₱40,000 to ₱1,500,000. A court may impose imprisonment, a fine, or both, and may also award civil damages.

A civil action arising from the offense is generally deemed instituted with the criminal action unless waived, reserved, or previously filed, subject to the Rules of Criminal Procedure. Article 33 of the Civil Code also recognizes an independent civil action for defamation, proved by a preponderance of evidence. Choosing between remedies affects prescription, filing fees, control of the case, and the damages that must be proved.

A settlement may resolve civil liability, produce a correction or apology, and affect the available evidence or penalty. It does not automatically extinguish the State’s criminal action. Any retraction, apology, affidavit of desistance, or settlement should be prepared with counsel.

Common mistakes

Waiting while negotiating and allowing the one-year criminal period to expire;
Treating the post date as automatically identical to the discovery date;
Relying only on a cropped screenshot;
Failing to preserve the URL, account identifiers, context, and original device;
Assuming that a platform report or demand letter is already a criminal filing;
Filing in a convenient but legally unsupported venue;
Naming every person who liked or shared a post without evidence of authorship;
Assuming that “opinion,” “allegedly,” or “shared only” automatically defeats liability;
Believing truth alone always guarantees acquittal;
Deleting accounts or messages after receiving a complaint or subpoena;
Posting a public rebuttal that creates admissions or a new defamatory publication;
Contacting the complainant or witnesses in a threatening or coercive way;
Missing the counter-affidavit or reconsideration deadline; and
Assuming that an affidavit of desistance automatically ends the case.

When legal help is urgent

Consult a Philippine criminal-law or cybercrime lawyer immediately if:

The one-year period is close to expiring;
You received a subpoena, prosecutor’s resolution, Information, warrant, or search order;
Law enforcement wants to search, seize, or examine a phone, computer, or account;
The author is anonymous or located abroad;
A platform account or relevant data may soon disappear;
Hacking, identity theft, threats, extortion, doxxing, or intimate content is involved;
The complainant or respondent is a journalist, public officer, public figure, employer, or corporation;
Several people or publications are involved;
The case may affect travel, employment, professional licensing, or immigration; or
A settlement, apology, correction, or takedown is being proposed.

Qualified indigent parties may seek assistance from the Public Attorney’s Office, including representation during preliminary investigation and trial.

FAQ

Can an old post still result in a case?

Possibly. The criminal period is one year from discovery by the offended party, authorities, or their agents—not automatically one year from posting. The claimed discovery date must be supported and may be challenged with contrary evidence.

Does deleting the post prevent a case?

No. Deletion does not erase an earlier publication witnessed or preserved by others. Preserve an accurate copy before any removal, and obtain advice about preventing further dissemination.

Can I be charged merely for liking or sharing a post?

A simple receipt or reaction is not cyber libel under Disini. A person who writes a new defamatory caption, comment, or accusation may face liability as the author of that separate statement.

Is a private message cyber libel?

It may be if it was sent to someone other than the person defamed. If only the subject received it, the publication element may be absent. A group chat or forwarded private message can constitute publication.

Is a false statement required?

Falsity and truth defenses interact with malice, privilege, public-interest speech, and Article 361. A complainant should prove the defamatory accusation with admissible evidence; a respondent should not assume that proving literal truth alone ends the analysis.

Can the complainant personally file the criminal case in court?

Ordinarily, the complainant files a complaint-affidavit for preliminary investigation. If the prosecutor finds the required evidence, the prosecutor files the Information in the RTC and controls the criminal prosecution.

Will filing a complaint immediately cause an arrest?

Not solely by itself in the ordinary process. The respondent is generally given preliminary-investigation rights. If an Information is later filed, the judge independently determines whether probable cause exists to issue a warrant. Valid warrantless-arrest situations are governed by separate, narrow rules.

Can the parties settle?

They may compromise civil liability and agree on lawful corrective measures. A private agreement or desistance does not automatically extinguish criminal liability or bind the prosecutor and court.

Official legal sources

This article provides general legal information, not advice for a particular case. Cyber-libel outcomes depend heavily on the exact words, complete context, authorship evidence, discovery date, venue, status of the complainant, privilege, and procedural record. The controlling sources and procedures were checked as of July 31, 2026.