Quick answer

To file a cyber libel case in the Philippines, preserve the online material immediately and file a sworn complaint-affidavit—normally with the city or provincial prosecutor that has proper venue—within one year from discovery of the alleged cyber libel. The evidence must establish a defamatory imputation, publication to someone other than the person defamed, identification of that person, malice, use of a computer system or information and communications technology, and the respondent’s responsibility for the publication.

To defend a case, do not ignore the subpoena. Obtain the complete complaint and attachments, preserve your own evidence, and submit a detailed counter-affidavit on the date stated in the subpoena. Possible defenses include failure to prove authorship, publication, identification, defamatory meaning or malice; privileged communication; constitutional protection for discussion of public affairs; truth accompanied by the legally required good motives and justifiable ends; improper venue; prescription; and defective or unlawfully obtained electronic evidence.

Cyber libel is fact-sensitive. A harsh or offensive post is not automatically criminal, while deleting a post does not automatically prevent prosecution.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel to defamatory material published through a computer system or similar technology. This can include material on social media, websites, blogs, online forums, email, messaging applications, videos, captions, images or other digital communications.

The prosecution generally must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status or circumstance that tends to dishonor, discredit or expose a person or juridical entity to contempt.
Publication. The material was communicated to at least one person other than the person defamed. A one-to-one message seen only by its sender and the person attacked ordinarily lacks this element, although another offense or civil claim may apply.
Identification. The complainant was named or was sufficiently identifiable from the words, images and surrounding circumstances. Being personally offended is not enough if readers could not reasonably identify the complainant.
Malice. As a general rule, Article 354 of the Revised Penal Code presumes malice from a defamatory imputation unless the communication is privileged or the surrounding law requires proof of actual malice. The context, purpose, audience and complete publication matter.
Use of ICT. The libel was committed through a computer system or information and communications technology.
Responsibility of the accused. The evidence must connect the respondent to the authorship or legally relevant publication of the material. A profile name, photograph or unverified screenshot may not, by itself, prove who controlled the account or made the post.

Words are assessed in their entirety and according to their plain, natural and ordinary meaning to the intended readers. Courts distinguish potentially verifiable factual accusations from rhetorical exaggeration, satire and protected opinion, but labeling an accusation “opinion” does not protect it if it reasonably communicates a defamatory assertion of fact.

Important exceptions and protections for speech

Privileged communications

Article 354 recognizes qualified privilege for:

A private communication made to another person in the performance of a legal, moral or social duty; and
A fair and true report, made in good faith and without comments or remarks, of non-confidential judicial, legislative or other official proceedings, statements made in those proceedings, or acts performed by public officers in their functions.

The Supreme Court has also recognized that the statutory list is not necessarily exhaustive. Privilege is not a license for unnecessary public shaming: the recipient, scope, relevance, wording and purpose of the communication all matter. Once qualified privilege applies, the person complaining generally must prove actual malice rather than rely on presumed malice.

A good-faith complaint sent to an employer, regulator or government office with authority over the matter may be treated differently from posting the same accusations publicly to thousands of users.

Public officials, public figures and matters of public concern

Speech about public affairs receives strong constitutional protection. When allegedly defamatory statements concern a public officer’s exercise of official functions, a criminal case cannot prosper without proof of actual malice—knowledge that the statement was false or reckless disregard of whether it was false.

Mere error, inaccuracy or even falsity does not automatically establish actual malice. The evidence must be assessed as it existed when the material was published. Personal attacks unrelated to official conduct, however, may fall outside this protection.

Relevant Supreme Court authorities include Tulfo v. People and Borjal v. Court of Appeals.

Truth is not always enough by itself

Under Article 361, a defendant may present truth as evidence. As a general rule, acquittal requires proof not only that the material was true but also that it was published with good motives and for justifiable ends. Special rules apply to imputations against government employees concerning facts related to their official duties.

Keep the documents, recordings, official records, interviews and contemporaneous communications on which the publication was based. A belief that “everyone knew it was true” is not evidence.

Likes, shares and reactions

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author but declared it unconstitutional as applied to people who merely receive a post and react through such actions as “Like,” “Comment” or “Share.” It also invalidated aiding or abetting liability in relation to cyber libel.

This does not immunize a user who authors a new defamatory caption, comment or independent accusation. The exact content attributed to each respondent must be examined.

The same defamatory material should not be used to prosecute a person separately for both ordinary libel and cyber libel; Disini treated the two as the same offense for double-jeopardy purposes.

The one-year filing deadline

The Supreme Court’s 2026 en banc resolution in Causing v. People confirms that cyber libel prescribes in one year.

The period generally begins on the day the alleged cyber libel is discovered by the offended party, the authorities or their agents—not automatically on the date it was uploaded. Publication and discovery may, of course, occur on the same day. Continued online availability does not by itself create a legal presumption that the offended party discovered the material when it was first posted.

Filing the complaint with the prosecution office interrupts the prescriptive period. The computation can be affected by later termination or unjustified stoppage of proceedings and by the accused’s absence from the Philippines. Prescription is often a factual question; if it is not apparent from the complaint or information, the accused may need evidence showing when discovery occurred.

For this reason:

Record the exact date and manner of discovery.
Identify the first person who showed or sent the material to the complainant.
Preserve the accompanying message, email or other record that proves that date.
Do not wait until the final days of the one-year period.

A materially new publication or later authored accusation may require separate analysis. Do not assume that editing, reposting or leaving old material online automatically resets—or can never affect—the deadline.

How to file a cyber libel complaint

1. Preserve the publication before contacting the author

Capture more than a cropped screenshot. Preserve, where available:

The entire post, article, video, image, caption or message thread;
The complete URL and unique post, page, channel or account identifier;
The account’s profile page and public identifying information;
The displayed date and time, including the relevant time zone;
Audience and privacy settings;
Comments, reactions and shares that show third-party publication;
The device or browser on which the material was viewed;
Screen recordings showing how the content was reached;
Original downloaded files, email headers and platform data exports;
The names and affidavits of people who personally saw the material; and
Evidence of the discovery date and resulting reputational or financial harm.

Keep the original files unchanged and make working copies. Record who collected each item, when and how. Electronic documents must be authenticated; under the Rules on Electronic Evidence, the party offering a private electronic document bears the burden of proving its authenticity, integrity and reliability.

Do not obtain evidence by hacking an account, impersonating another person, secretly installing software or accessing a device without authority.

2. Identify the responsible person

A complaint against “the owner of this Facebook page” may fail if there is no admissible evidence connecting the respondent to the post. Useful attribution evidence can include:

Admissions or messages acknowledging authorship;
Consistent contact details or account-recovery information;
Witnesses who saw the respondent create or manage the account;
Prior posts uniquely connected to the respondent;
Lawfully obtained subscriber, traffic or device evidence; and
Forensic examination conducted through lawful procedures.

If the author is anonymous or using a fictitious account, prompt assistance from the NBI or PNP may be necessary. Under Sections 13 and 14 of Republic Act No. 10175, law-enforcement authorities can require preservation of specified computer data and, with a court warrant, obtain relevant subscriber or traffic information. A private complainant cannot compel a platform to disclose protected account data simply by sending a demand letter.

Subscriber information and traffic data must generally be preserved by service providers for at least six months from the transaction. Content data is preserved for six months from a lawful preservation order, subject to a one-time extension. Act quickly because platforms may not retain every category of data indefinitely.

3. Determine the proper venue

Cyber libel cases fall within the jurisdiction of the Regional Trial Court, including designated special cybercrime courts. Venue is narrower than simply filing wherever the post was viewed.

Under Article 360, as amended by Republic Act No. 4363:

For a private individual, venue may generally be based on the city or province where that person actually resided when the offense was committed, or where the material was printed and first published.
For a public officer whose office was in Manila, the specified venue includes Manila or the place of printing and first publication.
For a public officer holding office outside Manila, the specified venue includes the city or province where the officer held office or the place of printing and first publication.

For internet material, “first publication” can be difficult to locate. In Bonifacio v. Regional Trial Court of Makati, the Supreme Court rejected the theory that the place where an online article was first accessed by the complainant was necessarily the place of printing and first publication.

Venue facts should be alleged specifically. Filing in the wrong place can cause dismissal or substantial delay, so have counsel assess this issue before filing.

4. Prepare the complaint-affidavit and supporting affidavits

The complaint-affidavit should clearly state:

The identities and addresses of the complainant and respondent, if known;
Whether the complainant was a private individual or public officer;
The complainant’s actual residence or public office when the alleged offense occurred;
The exact words, images or statements complained of, with an accurate translation where necessary;
The full context rather than isolated phrases;
Where, when and through what system the material was published;
Who received, read, watched or heard it;
Why readers could identify the complainant;
The evidence connecting the respondent to the account and publication;
When and how the complainant or authorities discovered it;
Why the communication was allegedly malicious and not privileged; and
A numbered list of supporting documents and electronic evidence.

The affidavit must be properly subscribed and sworn before a prosecutor or another official authorized to administer oaths, or, where permitted, a notary public. Witness affidavits and supporting evidence should accompany it.

5. File with the proper prosecution office

The complaint is ordinarily filed with the city or provincial prosecution office corresponding to the proper venue. An investigation by the police is not always a prerequisite, but technical assistance may be essential where account attribution, platform records or forensic evidence is needed.

The DOJ’s 2024 rules require prima facie evidence with reasonable certainty of conviction before an information is filed in court. The evidence must be admissible, credible, capable of preservation and sufficient—if left unanswered—to establish the offense and the identity of the responsible person.

Confirm the receiving office’s current requirements, accepted filing methods, number of copies and procedures. Electronic filing and virtual proceedings are alternatives under the rules, but their actual availability depends on the prosecution office and its official instructions.

Useful official channels include:

An investigative report is not a substitute for timely filing with the proper prosecution office. Confirm whether the agency will itself file or endorse a complaint before relying on a report to protect the one-year deadline.

How to defend against a complaint

1. Do not ignore the subpoena

Under DOJ Department Circular No. 015, series of 2024, the subpoena should include the complaint-affidavit and its attachments and state when the counter-affidavit must be submitted. The scheduled date must generally allow at least ten days from receipt.

The counter-affidavit is normally due on the date stated in the subpoena. An extension may be allowed for meritorious reasons but is not automatic and must not exceed ten days under the regular preliminary-investigation procedure. Follow the actual order and seek any extension before the deadline.

Failure to respond without justification may cause the prosecutor to resolve the complaint using only the complainant’s evidence.

2. Preserve the account and defense evidence

Do not destroy, fabricate or alter evidence after learning of the dispute. Preserve:

The complete post and surrounding conversation;
Drafts, source documents and research materials;
Messages showing the purpose and intended audience;
Account login history, security alerts and evidence of hacking or impersonation;
Platform records identifying administrators or contributors;
Corrections, retractions or apologies and their dates;
Communications showing a good-faith attempt to verify information;
Evidence supporting truth, privilege, fair comment or lack of malice;
Proof of where the complainant lived or held office;
Records showing when the complainant or authorities discovered the material; and
The envelope, email or record proving when the subpoena and resolution were received.

Deleting material after preserving it may reduce further harm, but deletion is not a complete defense and may complicate proof. Obtain legal advice before changing an account that has become evidence.

3. Address every element, not only your intention

A useful counter-affidavit identifies what the prosecution cannot establish and supports each point with admissible evidence. Depending on the facts, it may argue:

The respondent did not author or control the account;
The screenshot is incomplete, altered or unauthenticated;
No third person received the communication;
The complainant was not named or reasonably identifiable;
The words, read as a whole, were not defamatory factual assertions;
The statement was a fair report, privileged complaint or protected fair comment;
The complainant is a public officer and actual malice concerning official conduct is absent;
The accusation was true and made with the motives and ends required by Article 361;
The complaint was filed more than one year after discovery;
Venue is improper or inadequately alleged;
The evidence was obtained without the warrant required by law;
The respondent merely received or reacted to another person’s post; or
The same publication is being prosecuted impermissibly under both ordinary and cyber-libel provisions.

A bare denial is usually weaker than a chronological, document-supported explanation. Do not submit falsified affidavits, manufactured conversations or selective screenshots.

4. Attend any clarificatory hearing

The prosecutor may consider the matter submitted after receiving the counter-affidavit or may call a physical or virtual clarificatory hearing. This is not a full trial or an opportunity to cross-examine witnesses as of right. Answer carefully and consistently with the evidence and advice of counsel.

5. Act promptly on an adverse resolution

An aggrieved party may file a motion for reconsideration of the prosecutor’s resolution within 15 days from receipt under Department Circular No. 015. Further review may be available under applicable DOJ rules, but filing a petition for review does not by itself guarantee that court proceedings will stop. If an information has already been filed, the required motion to suspend proceedings and the appropriate court remedies must be handled promptly.

After an information is filed, the judge independently determines probable cause for the issuance of a warrant. A lawyer should immediately assess bail, arraignment and any motion to quash. Some objections must be raised before entering a plea.

Possible penalties and civil liability

Cyber libel carries a penalty one degree higher than traditional written libel. The possible imprisonment range is prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years.

The Supreme Court held in People v. Soliman that imprisonment is not mandatory in every cyber libel conviction. A court may impose imprisonment, a fine, or both, depending on the law and circumstances. Following the amended fine for traditional libel and the one-degree increase, the general fine range for cyber libel is ₱40,000 to ₱1,500,000.

Supreme Court guidelines express a preference for fines in appropriate libel cases, but they do not eliminate imprisonment or create an automatic entitlement to a fine-only sentence.

Criminal liability may also carry civil liability. An injured person may pursue damages, including through a civil action under Article 33 of the Civil Code where legally appropriate. Civil claims have their own short deadlines, evidentiary standards, venue rules and procedural consequences; obtain advice before filing a separate case or reserving a civil action.

Retraction, apology, takedown and settlement

Deletion or takedown does not erase a completed publication, but it can limit further harm. Preserve evidence first.
Retraction or apology is not an automatic defense. Its timing and sincerity may nevertheless be relevant to good faith, damages or penalty.
A platform report may remove content under the platform’s rules but does not institute a criminal case or stop prescription.
An affidavit of desistance does not automatically terminate a criminal prosecution. The offense is prosecuted in the name of the People, although the complainant’s cooperation and available evidence may affect the case.
Settlement of civil claims does not automatically extinguish criminal liability.
Demands for payment, threats of exposure or offers to suppress publication for compensation can create separate legal risks. Settlement discussions should be documented and handled through counsel.

Evidence checklist

For either side, preserve:

Complete screenshots and screen recordings;
URLs, post IDs and account IDs;
Original photos, videos, audio and downloaded files;
Metadata, email headers and platform exports;
Publication, discovery and deletion dates;
Audience and privacy settings;
Names of people who personally saw the publication;
Account-control and attribution evidence;
Original devices where relevant;
Source documents, official records and verification efforts;
Proof of actual residence or public office for venue;
Proof of reputational, professional or financial harm;
Subpoenas, resolutions and proof of receipt; and
A written chain-of-custody log for important digital files.

Common mistakes

Waiting because the post is still online despite the one-year prescriptive period;
Treating every insult, negative review or false statement as cyber libel without checking all elements;
Filing against an account name without proof of who authored the post;
Relying only on cropped screenshots;
Failing to prove that a third person saw the material;
Filing in the place of first access rather than a venue allowed by law;
Assuming truth alone is always a complete defense;
Publicly reposting the accusation while trying to refute it;
Naming everyone who reacted to or shared a post despite Disini;
Ignoring the subpoena or requesting an extension after the deadline;
Deleting accounts, devices or source material after receiving notice of a case;
Contacting witnesses in a threatening or manipulative manner; and
Assuming a retraction, apology or desistance automatically ends the prosecution.

When legal help is urgent

Speak with a Philippine criminal lawyer immediately when:

The one-year deadline is close or the discovery date is disputed;
The author is anonymous or platform data may soon be lost;
A subpoena, prosecutor’s resolution, information, warrant or court order has been received;
Police seek access to a device, account or private communications;
Arrest, custodial questioning or search and seizure is threatened or underway;
The case concerns journalism, public officials, whistleblowing or confidential sources;
The material was posted from abroad or the relevant platform is outside the Philippines;
A child, intimate image, threat, stalking, doxxing or sexual accusation is involved; or
The same facts may involve another crime, administrative complaint or protection order.

A person under custodial investigation has the right to competent and independent counsel. Those who cannot afford private representation may check eligibility with the Public Attorney’s Office or seek assistance from the Integrated Bar of the Philippines National Center for Legal Aid.

Frequently asked questions

Do I have to go to the NBI or PNP before filing?

Not necessarily. A complainant may generally file with the proper prosecution office. NBI or PNP assistance is valuable when technical investigation, lawful data preservation, account attribution or forensic examination is needed.

Can a private chat be cyber libel?

Possibly, if the defamatory material was communicated to a third person. A message seen only by the sender and the person defamed ordinarily lacks publication. A private communication to selected recipients may also be qualifiedly privileged if made in the performance of a legal, moral or social duty and without actual malice.

Can I file after the author deletes the post?

Yes, if sufficient admissible evidence was preserved and the case is filed on time. Deletion may make authentication and attribution more difficult.

Is a screenshot enough?

Sometimes it is useful, but an isolated screenshot can be challenged as incomplete, altered or unauthenticated. Preserve the URL, account details, full context, original file, device and witness testimony whenever possible.

Can an anonymous account be charged?

A fictitious account name cannot be imprisoned. Investigators must identify a natural person legally responsible for the publication and obtain admissible evidence connecting that person to it.

Is sharing someone else’s post automatically cyber libel?

No. Disini protects people who merely receive and react to a post. A person may still face scrutiny for a new defamatory caption, comment or independently authored accusation.

Can a public official file cyber libel?

Yes, but when the publication concerns the official’s performance of public functions, the prosecution must prove actual malice—knowledge of falsity or reckless disregard of truth or falsity. Private-life attacks unrelated to official conduct may be treated differently.

Does an apology end the case?

No. It may help demonstrate remorse or reduce harm, but it does not automatically extinguish criminal or civil liability.

Can the complainant withdraw the case?

The complainant may express a desire not to proceed, but dismissal is not automatic. Once instituted, the criminal action is controlled by the public prosecutor and the court.

Will a conviction always mean imprisonment?

No. The court may impose imprisonment, a fine, or both. A fine-only sentence is possible in appropriate circumstances but is not guaranteed.

What if the complaint was filed more than one year after the post?

The decisive starting point is generally discovery by the offended party, authorities or their agents—not necessarily the upload date. Prescription may require evidence and a hearing. Raise it promptly through counsel.

Official legal sources

This article provides general Philippine legal information, not legal advice or an assessment of any particular post, complaint or defense. Procedures and outcomes depend on the complete evidence and documents. Sources and current rules were checked on July 25, 2026.