Quick answer

Cyber libel is committed when a person publishes a defamatory statement through Facebook, Messenger, X, TikTok, YouTube, email, a website, a group chat, or another computer system, and the prosecution can prove the elements of libel—including publication, identification, defamatory meaning, and malice.

If you are the person defamed, preserve the post and its surrounding digital evidence immediately, identify when you or the authorities first discovered it, and file a sworn complaint with the proper prosecution office before the case prescribes. A report to a platform, demand letter, police blotter, or informal request for investigation should not be treated as a substitute for timely filing with the prosecutor.

If you are accused, do not ignore a subpoena. Preserve the original post, account records, sources, conversations, and documents supporting your defenses. Submit a properly sworn counter-affidavit within the deadline stated in the subpoena and raise fact-specific defenses such as lack of authorship, lack of publication or identification, privilege, absence of actual malice, truth with the legally required justification, improper venue, or prescription.

The controlling rule is now clear: cyber libel prescribes in one year from discovery by the offended party, the authorities, or their agents, not automatically from the date of posting. The Supreme Court reaffirmed this rule in its April 8, 2026 resolution in Causing v. People. The date of discovery can be disputed and may require evidence. Filing the criminal complaint with the proper prosecution office interrupts prescription; reporting only to a social-media platform or sending a demand letter does not. Causing v. People, G.R. No. 258524; People v. Consebido, G.R. No. 258563.

What the prosecution must prove

Section 4(c)(4) of Republic Act No. 10175 covers libel under Article 355 of the Revised Penal Code when committed through a computer system or similar means. The prosecution must establish all of the following beyond reasonable doubt:

Defamatory imputation. The statement attributes a crime, vice, defect, dishonorable act, condition, status, or circumstance that tends to expose a person or juridical entity to dishonor, discredit, or contempt.
Publication. Someone other than the person defamed received, read, heard, or viewed the statement. A public post plainly satisfies publication, but a message sent to even one third person may also do so. A message seen only by its author and the person criticized generally lacks this element.
Identification. The complainant must be named or sufficiently identifiable. A nickname, photograph, job description, initials, workplace, family relationship, or surrounding context may be enough if readers could reasonably identify the person.
Malice. Defamatory imputations are generally presumed malicious unless a recognized privilege applies. In privileged communications and cases involving public officials or public figures on matters of public concern, the prosecution may have to prove actual malice—knowledge of falsity or reckless disregard of whether the statement was true.
Use of a computer system. The publication was made through a computer, smartphone, online platform, messaging application, website, email system, or comparable information-and-communications technology.

Courts interpret the words in their full context and according to their plain and ordinary meaning to the intended audience. A rude, offensive, or embarrassing statement is not automatically defamatory; its meaning, factual implications, audience, and context matter. Republic Act No. 10175; Disini v. Secretary of Justice, G.R. No. 203335.

Important limits and defenses

Mere reactions and sharing

In Disini, the Supreme Court upheld cyber libel as applied to the original author but invalidated Section 5’s aiding-and-abetting provision as applied to online libel. A bare “like,” reaction, or unembellished sharing of another person’s post therefore does not automatically create cyber-libel liability.

That protection is not a license to add new defamatory content. A person who republishes material with an original caption, accusation, edited image, voice-over, or other defamatory assertion may be treated as the author of a separate publication. Whether a particular share is merely mechanical or amounts to a new defamatory statement depends on its content and context.

Truth is not always enough

For an ordinary private-person case, Article 361 generally requires the accused to show both that the imputation was true and that it was published with good motives and for justifiable ends. Truth alone should not be assumed to be a complete defense.

A different rule may apply to truthful statements concerning a government employee’s discharge of official duties. Public-official and public-figure cases also receive stronger constitutional protection, particularly when the statement concerns official conduct or a genuine matter of public interest.

Fair comment and public-interest reporting

Fair opinion based on established facts about a public official, public figure, or matter of legitimate public concern may be privileged. A false factual accusation disguised as an “opinion,” however, may still be actionable.

A fair and true report, made in good faith and without added defamatory commentary, concerning a non-confidential judicial, legislative, or official proceeding is qualifiedly privileged. Private communications made in the performance of a legal, moral, or social duty may also be privileged when sent in good faith to a person or body with a corresponding duty, interest, or authority.

Privilege usually removes the presumption of malice; it does not always end the case. The complainant may still prevail by proving actual malice. Philippine Daily Inquirer v. Enrile, G.R. No. 229440; Cabatian v. People, G.R. No. 206905.

Public status has limits

Criticism of a public officer’s official conduct is not judged by the same standard as an attack on a private citizen. The prosecution must prove actual malice in appropriate public-official or public-figure cases. But a person’s public status does not automatically place purely private matters outside the protection of defamation law.

Posts made before the law took effect

A post made before the Cybercrime Prevention Act took effect cannot be punished retroactively as cyber libel merely because it remained accessible online. Later republication or a materially new post must be assessed separately. Peñalosa v. Ocampo, G.R. No. 230299.

Penalties and civil liability

Traditional written libel under Article 355 is punishable by imprisonment, a fine, or both. Because Section 6 of Republic Act No. 10175 raises the penalty by one degree when information-and-communications technology is used, the imprisonment range for cyber libel is prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years.

If the court chooses a fine, the Supreme Court has held that the current statutory range for online libel is ₱40,000 to ₱1,500,000. A court may impose a fine instead of imprisonment, but this is discretionary. Administrative Circular No. 08-2008 expresses a preference for a fine in suitable libel cases; it does not abolish imprisonment. The final sentence depends on the governing law, the circumstances, and applicable rules on penalties. Tulfo v. People, G.R. No. 256700; Administrative Circular No. 08-2008.

A person defamed may also pursue damages. Article 33 of the Civil Code permits an independent civil action for defamation, which is decided by preponderance of evidence rather than proof beyond reasonable doubt. Civil actions for defamation are generally subject to a one-year prescriptive period, but accrual, interruption, the chosen cause of action, and interaction with a criminal case require careful legal analysis. Double recovery for the same injury is not allowed. Civil Code, Articles 33 and 1147.

How to file a cyber-libel complaint

1. Preserve the complete publication

Before requesting deletion or blocking the account, preserve:

Full-page screenshots showing the post, account name, profile link, date, time, reactions, comments, and surrounding conversation
The exact URL or platform-specific link
A screen recording showing how the post is reached from the account or page
Original images, videos, audio, emails, messages, and attachments—not merely forwarded or compressed copies
Email headers, message details, usernames, account IDs, telephone numbers, and other identifiers
Copies of edits, reposts, follow-up statements, corrections, apologies, or takedown notices
The device on which the content was received, with its data left intact
Names and affidavits of people who saw the publication and could identify you
Records showing reputational or financial harm, such as lost work, cancelled contracts, customer messages, or workplace complaints

Do not crop away context, add annotations to the only copy, alter timestamps, or rely solely on printed screenshots. Keep a working copy and an untouched original. Record who collected each item, when it was collected, and where it has been stored.

2. Record the discovery date

Write down:

The first date and time you personally learned of the publication
Who showed or sent it to you
When that person first saw it
Whether any authority had discovered it earlier
The date of each separate post or materially new publication

The one-year period runs from discovery by the offended party, the authorities, or their agents. Publication and discovery may occur on the same day, but the law does not presume that every online post was discovered immediately. Because prescription can decide the case, support any claimed later discovery date with messages, affidavits, notifications, or other contemporaneous records.

3. Identify the author without using illegal methods

Record visible account information and lawful communications linking the account to a person. Do not hack the account, secretly intercept communications, impersonate officials, or obtain private data unlawfully.

If the account is anonymous, report promptly to the NBI Cybercrime Division or PNP Anti-Cybercrime Group. Law-enforcement authorities may seek preservation and disclosure orders or cybercrime warrants. A private complainant cannot compel a platform or internet provider to reveal subscriber data without the proper legal process.

Under Republic Act No. 10175, subscriber information and traffic data are subject to limited preservation periods, while disclosure generally requires a court warrant. Delay may therefore cause useful provider records to disappear. The NBI’s published procedure includes interviewing the complainant, receiving sworn statements and supporting documents, and examining relevant devices. NBI investigative assistance for computer-crime victims.

4. Confirm the proper venue

Cyber-libel cases belong to designated cybercrime branches of the Regional Trial Court. Under the Rule on Cybercrime Warrants, venue may lie in the province or city:

Where the offense or any element was committed;
Where any part of the computer system used was situated; or
Where damage to the natural or juridical person occurred.

Do not assume that the complaint may be filed anywhere the post could theoretically be accessed. State concrete venue facts, such as where the author posted, where the relevant device was located, or where the complainant actually suffered and discovered the reputational injury. Once a proper court acquires jurisdiction, it excludes other courts.

5. Prepare a sworn complaint-affidavit

The complaint-affidavit should clearly state:

The complainant’s and respondent’s identifying details and addresses, if known
The exact words, images, video, or audio complained of
A faithful translation if the material is in Filipino, a regional language, or another language
Why the material is defamatory
How the complainant is identifiable
Who received or viewed the publication
Why the account or post is attributable to the respondent
The relevant computer system or online platform
The publication and discovery dates
Facts establishing proper venue
Facts and evidence supporting malice
A numbered list of attached evidence and witness affidavits

Avoid exaggeration. Distinguish what you personally witnessed from what another person told you. Authenticate links and account information as far as reasonably possible.

6. File with the proper prosecution office

You may seek investigative assistance from the NBI or PNP, particularly for anonymous accounts or evidence requiring warrants. You may also file a complete complaint directly with the appropriate Office of the City or Provincial Prosecutor.

The safest approach is to obtain a stamped receiving copy, docket number, and written confirmation of the filing date. A platform report, NBI or police inquiry, demand letter, or barangay record should not be relied upon to stop prescription unless a legally sufficient criminal complaint has actually been filed with the proper prosecution office.

The NBI also maintains an online complaint page, while the DOJ publishes cybercrime-reporting information. Confirm whether an online submission is merely an initial report or has been formally docketed for prosecution.

What happens during preliminary investigation

Cyber libel ordinarily undergoes preliminary investigation under DOJ Department Circular No. 15, series of 2024. The prosecutor determines whether the available testimonial, documentary, and real evidence establishes a prima facie case with reasonable certainty of conviction.

If the complaint is sufficient, the prosecutor issues a subpoena requiring the respondent to submit a counter-affidavit and supporting evidence. The subpoena normally provides a 10-day response period and sets a preliminary-investigation hearing. The printed deadline controls. Any extension requires meritorious grounds and should never be assumed.

The prosecutor may request additional evidence or conduct an in-person or virtual clarificatory hearing. There is no full trial or automatic right to cross-examine witnesses at this stage. If the required evidentiary standard is met, an Information is filed in the designated cybercrime RTC; otherwise, the complaint is dismissed.

An aggrieved party may file a motion for reconsideration within 15 days from receipt of the prosecutor’s resolution. Further review is governed by technical DOJ rules, and a review petition does not automatically stop a case already filed in court. Obtain counsel immediately if the resolution is adverse. DOJ Department Circular No. 15, series of 2024.

How to defend a cyber-libel complaint

Act immediately upon receiving a subpoena

Note the date and method of service, because the response period is short. Obtain the entire complaint and every attachment. If anything is missing or unreadable, request a complete copy in writing without waiting until the deadline.

A counter-affidavit is evidence, not a casual denial. It should answer each material allegation, identify the applicable legal defenses, attach supporting documents and witness affidavits, and be sworn before an authorized officer.

Preserve your own evidence

Keep:

The original post and its complete context
Drafts and earlier versions
Source documents and research
Links to official records
Messages with editors, administrators, sources, or intended recipients
Account-login and device information supporting or disproving authorship
Evidence of account compromise, impersonation, or unauthorized access
Communications showing correction, apology, takedown, or lack of harmful intent
Documents supporting truth, reasonable reliance, good motive, or public interest

Do not fabricate backdated records, coach witnesses, pressure the complainant, or destroy devices. Taking content down may reduce continuing harm, but preserve an accurate copy first and obtain legal advice. Deletion does not erase earlier publication or necessarily remove provider records.

Test every element

A defense should examine:

Authorship: Is there competent evidence that you controlled the account and made the post?
Defamatory meaning: Read fairly and in full context, does the statement actually impute a discreditable act or condition?
Publication: Did any third person receive it?
Identification: Could reasonable readers identify the complainant?
Malice: Is malice presumed, or is this a privileged communication requiring proof of actual malice?
Public concern: Did the statement concern official conduct, a public figure, or a genuine public issue?
Fact or opinion: Was it a reasonable opinion based on disclosed or established facts, or a factual accusation capable of being proven false?
Truth and justification: Can the relevant facts, good motives, and justifiable ends be proved with admissible evidence?
Venue: Does the complaint allege and support a lawful venue?
Prescription: When did the complainant, authorities, or their agents actually discover the publication, and when was the complaint filed?
Retroactivity: Was the material posted before the Cybercrime Prevention Act became effective?
Double jeopardy or duplicate charging: Is the same publication being charged simultaneously as traditional and online libel contrary to Disini?

Prescription is ordinarily a defense. If it is not apparent from the Information, the accused may have to present evidence establishing the discovery and filing dates. A publication date alone may not prove that the one-year period expired.

If a warrant or arrest follows

Do not physically resist, delete data, remotely wipe a device, or obstruct officers. Ask to see the warrant, note the issuing court and exact items or accounts covered, request an inventory of anything seized, and contact counsel immediately. The Rule on Cybercrime Warrants limits what authorities may search, seize, examine, disclose, and retain.

Bail is generally available before conviction in a cyber-libel prosecution, but the court sets the conditions. A lawyer should address bail, judicial probable cause, possible motions to quash, arraignment, pre-trial, and preservation objections without delay.

Common mistakes

Waiting for the platform to act while the one-year period continues to run
Treating a demand letter, police blotter, or informal NBI report as a filed prosecutor’s complaint
Saving only a cropped screenshot without the URL, account, date, audience, or context
Naming an account owner as respondent without evidence connecting that person to the post
Assuming an anonymous account can be identified after provider data has expired
Claiming that every insult is cyber libel without addressing defamatory meaning
Assuming truth alone always defeats the case
Ignoring the stronger actual-malice protection for public-official and public-figure speech
Believing that adding “allegedly,” “for awareness,” or “just my opinion” automatically prevents liability
Assuming a share or reaction is always punishable—or that adding a new defamatory caption is always protected
Filing in a convenient city without concrete venue facts
Missing the counter-affidavit or 15-day reconsideration deadline
Deleting evidence, editing screenshots, or submitting unauthenticated printouts
Contacting, threatening, or publicly attacking the other party after proceedings begin

When legal help is urgent

Consult a Philippine criminal lawyer immediately if:

The one-year period may expire within the next few weeks
The account is anonymous or provider records may disappear
You received a prosecutor’s subpoena, court summons, arrest warrant, or cybercrime warrant
Devices or accounts have been seized
The publication involves a public official, journalist, whistleblower, workplace complaint, or confidential proceeding
Several posts, defendants, jurisdictions, or foreign platforms are involved
The content also includes threats, stalking, impersonation, hacked accounts, intimate images, child-related material, or disclosure of sensitive personal data
A prosecutor has issued an adverse resolution and the 15-day reconsideration period is running

Indigent qualified parties may ask the Public Attorney’s Office about representation. The Integrated Bar of the Philippines and local legal-aid clinics may also provide assistance, subject to their eligibility rules and capacity.

Frequently asked questions

Is every negative Facebook post cyber libel?

No. The prosecution must prove every element. Protected criticism, non-defamatory opinion, satire that no reasonable reader would treat as factual, privileged communications, and fair comment on public matters may fall outside criminal liability. Context remains decisive.

Can a private Messenger or group-chat message be cyber libel?

Yes, if a third person receives the defamatory statement. A message delivered only to the person criticized generally lacks publication, but sending it to a group, coworker, relative, or other third party may satisfy that element.

Is sharing another person’s post cyber libel?

A bare reaction or unembellished share is not automatically punishable as aiding or abetting online libel under Disini. Adding your own defamatory accusation, endorsement, caption, edit, or voice-over may create a separate publication.

Does deleting or apologizing erase liability?

No. Publication may already be complete once a third person sees the material. Prompt deletion, correction, or apology may affect evidence of intent, damages, or penalty, but it does not automatically extinguish criminal or civil liability.

Must the complainant first send a demand letter?

No. A demand, correction request, or takedown notice is not an element of cyber libel and does not by itself stop prescription. It may be useful for resolving harm or documenting the response, but it should not delay formal filing.

Can a case be filed more than one year after the post?

Possibly, if the offended party, authorities, or their agents discovered it later and the complaint was filed within one year of that discovery. The discovery date must be supported by evidence. Prescription may also be interrupted by filing and is affected by the statutory rules governing terminated proceedings and an offender’s absence from the Philippines.

Can the complainant seek damages without a criminal conviction?

Yes. Article 33 permits an independent civil action for defamation based on preponderance of evidence. Civil prescription is also generally short, so a lawyer should evaluate the deadline and relationship between the civil and criminal remedies before filing.

Who is liable when a page is managed by several people?

Account ownership or job title alone does not necessarily prove authorship. Liability depends on competent evidence showing who wrote, approved, uploaded, or caused the defamatory publication. Corporate and editorial arrangements require document-specific analysis.

Official sources

This article provides general legal information, not advice for a particular case. Cyber-libel outcomes depend heavily on the exact publication, audience, evidence, discovery date, venue, and procedural history. Sources and current rules were checked as of August 3, 2026.