A false online post calling your store a scam, accusing your restaurant of poisoning customers, or claiming your clinic, salon, contractor, or online shop cheats people can damage a small business quickly. In the Philippines, online defamation may be handled as cyber libel, a civil damages claim, platform takedown issue, or a mix of all three. The right response is not to panic or fight publicly, but to preserve evidence, identify what exactly is false and defamatory, document business damage, and choose the proper legal route.

What Online Defamation Means for a Small Business

Defamation is a statement that harms a person’s or business’s reputation. In Philippine law, written or posted defamation is generally treated as libel. When it is made through Facebook, TikTok, X, YouTube, Google Reviews, blogs, messaging apps, websites, or other computer systems, it may become cyber libel under Republic Act No. 10175, the Cybercrime Prevention Act of 2012.

For small businesses, the most common online defamation situations include:

A competitor using a fake account to post false reviews.
A customer saying “this shop is a scam” even after receiving the product.
A former employee accusing the owner of crimes without proof.
A viral post claiming a restaurant caused food poisoning without medical or official findings.
A Facebook page naming the business and telling people not to buy because it is “fraudulent,” “illegal,” or “fake.”
A foreign customer or expat business partner posting accusations online from outside the Philippines.

Not every harsh review is illegal. A customer may say, “delivery was late,” “I did not like the service,” or “the food was disappointing.” Those are usually opinions or consumer feedback. The legal problem becomes stronger when the post states or implies a false fact that can be proven true or false and that tends to dishonor or discredit the business.

When a Bad Review Becomes Cyber Libel

Under Article 353 of the Revised Penal Code, libel is a public and malicious imputation of a crime, vice, defect, act, omission, condition, status, or circumstance that tends to cause dishonor, discredit, or contempt of a natural or juridical person. A corporation, partnership, or other juridical person can therefore be the target of libel, not only an individual owner. (Lawphil)

In practical terms, prosecutors and courts usually look for these core points:

Defamatory imputation — the post says or clearly implies something damaging, such as fraud, criminal conduct, dishonesty, dangerous service, fake products, or immoral business behavior.
Publication — at least one other person saw or could access the statement.
Identification — readers can tell that the statement refers to your business, brand, owner, branch, product, or staff.
Malice — the law generally presumes malice in defamatory imputations unless good intention and justifiable motive are shown, subject to recognized exceptions. (Lawphil)
Use of a computer system — for cyber libel, the defamatory material was posted, sent, uploaded, or published through an online or electronic system.

A post saying “ABC Café is a scam and steals customers’ payments” is different from “I waited 45 minutes and I was disappointed.” The first accuses the business of dishonest or criminal conduct. The second is a negative experience.

Legal Bases in the Philippines

Revised Penal Code: Libel

Traditional libel is punished under Article 355 of the Revised Penal Code. Republic Act No. 10951 updated the fine for libel to ₱40,000 to ₱1,200,000, or imprisonment, or both, in addition to the civil action that may be brought by the offended party. (Supreme Court E-Library)

Article 354 also matters because it explains the presumption of malice and the main privileged situations. A private communication made in the performance of a legal, moral, or social duty, or a fair and true good-faith report of official proceedings, may be treated differently from an ordinary public attack. (Lawphil)

Article 361 is also important: in a criminal libel case, truth may be given in evidence, but the law also asks whether the publication was made with good motives and for justifiable ends. This is why “but it is true” is not always a complete answer in every libel situation. (Lawphil)

Cybercrime Prevention Act: Cyber Libel

Section 4(c)(4) of RA 10175 covers libel under Article 355 when committed through a computer system or similar means. The Supreme Court has explained that cyber libel is not a completely new crime; it is libel committed through a computer system. (Supreme Court E-Library)

The Cybercrime Prevention Act and its rules also recognize the role of the National Bureau of Investigation (NBI) and the Philippine National Police (PNP) as law enforcement authorities for cybercrime cases. The DOJ rules state that the NBI and PNP must have cybercrime divisions or units to handle cases involving violations of the Act. (Supreme Court E-Library)

One practical point: the DOJ implementing rules state that online libel applies to the original author of the online libelous post, and not to people who merely receive the post and react to it. (Supreme Court E-Library) However, a person who reposts the statement with a new defamatory caption, repeats the accusation as their own, or creates a new publication may face a different analysis.

Civil Code: Damages for Reputation Harm

A small business may also pursue civil remedies. Civil Code Articles 19, 20, and 21 require people to act with justice, honesty, and good faith, and provide compensation when someone unlawfully, willfully, negligently, or contrary to morals and public policy causes injury to another. (Lawphil)

Article 33 of the Civil Code specifically allows an independent civil action for damages in cases of defamation, fraud, and physical injuries. This civil action is separate from the criminal case and requires only preponderance of evidence, meaning the evidence shows that the claim is more likely true than not. (Supreme Court E-Library)

This is useful when the business wants compensation for lost sales, cancelled bookings, damaged goodwill, or reputational harm, even if the criminal route is slow or uncertain.

What to Do in the First 24 to 48 Hours

The first two days are often the most important. Online posts can be edited, deleted, hidden, or made private. If evidence is weak, even a strong legal claim can become difficult to prove.

1. Do not answer in anger

Avoid posting emotional replies such as:

“You are the scammer.”
“We will destroy you.”
“You are a liar and a criminal.”
“Everyone should attack this person.”

A reckless public response can create a counterclaim. Keep any public reply short, factual, and professional. For example:

We take this seriously. We have checked our records and disagree with the claims in this post. We are preserving the relevant records and will address the matter through the proper channels.

2. Preserve the post before reporting it

Do not immediately click “report,” message the poster, or ask friends to mass-report the content before saving proof. Platforms may remove the post before you have enough evidence.

Save:

Full-page screenshots showing the post, account name, profile photo, date, time, comments, reactions, shares, and URL.
Screen recordings showing how you navigated to the post.
The exact link to the post, profile, review, video, or comment.
Screenshots of the poster’s profile, bio, username changes, public contact details, and related posts.
Comments showing that customers understood the post as referring to your business.
Private messages from customers cancelling orders or asking about the accusation.
Sales records, booking cancellations, refund demands, or negative review spikes after the post.

For important cases, print the screenshots, label them by date and time, and keep the original digital files. If the post is still live, preserve it from more than one device or account.

3. Identify the exact defamatory statements

Separate facts from insults.

Statement	Usually stronger for a claim?	Why
“The owner stole my money.”	Yes	Accuses a specific dishonest/criminal act.
“This restaurant sells expired meat.”	Yes	Alleges a factual health/safety issue.
“Worst service ever.”	Usually no	Likely opinion.
“I think they are overpriced.”	Usually no	Opinion or consumer judgment.
“They are not BIR-registered.”	Possibly yes	Factual claim that can be verified.
“Do not buy here; they send fake products.”	Yes	Accuses fraud or counterfeit goods.

A good complaint does not simply say, “The post ruined us.” It identifies the exact words, why they are false, how readers connected them to the business, and what damage followed.

4. Confirm who the proper complainant is

For small businesses, this is a common bottleneck.

If the business is a sole proprietorship, the owner may usually complain personally and attach the DTI registration and business permit.
If the business is a corporation, the corporation should usually act through an authorized officer. Prepare SEC registration, latest General Information Sheet if available, secretary’s certificate, board authority, or written authorization.
If the post attacks both the business and the owner personally, both may have interests to protect.
If it attacks employees, the affected employees may need their own sworn statements.

A complaint filed by the wrong person or without authority can be delayed or challenged.

5. Report the content to the platform, but keep expectations realistic

Facebook, Google, TikTok, YouTube, and marketplace platforms have reporting tools for harassment, fake reviews, impersonation, and false information. A platform report may result in takedown, but it is not the same as a Philippine legal finding. Some posts remain online because the platform treats them as opinion or consumer speech.

When reporting, use calm and specific language:

Identify the false statement.
Explain that it names your business.
Attach proof such as invoices, delivery records, permits, customer communications, or screenshots.
Avoid threats or excessive legal language.

Filing a Cyber Libel Complaint in the Philippines

A cyber libel complaint may be initiated with the NBI Cybercrime Division, the PNP Anti-Cybercrime Group, or the appropriate prosecutor’s office, depending on the situation. For anonymous accounts, fake profiles, or technical tracing, the NBI or PNP route is often practical because cybercrime investigators can help evaluate digital evidence.

The NBI Citizen’s Charter for investigative assistance for computer crimes states that the general public may proceed to the CyberCrime Division to file a complaint or request investigation. It lists no fee for the intake steps and describes complaint-sheet filing, preliminary interview, sworn statements, supporting documents, and device examination as part of the process. (National Bureau of Investigation)

Documents to prepare

Document	Why it matters
Complaint-affidavit	Your sworn story: who posted, what was posted, when discovered, why false, and how it damaged the business.
Valid government ID	Confirms identity of the complainant or authorized representative.
DTI certificate, SEC documents, business permit, BIR registration, or mayor’s permit	Shows the business exists and connects you to it.
Secretary’s certificate or board authorization	Needed when a corporation acts through an officer or representative.
Screenshots and URLs	Core evidence of publication and identification.
Screen recordings	Helps show authenticity, account path, and that the post was live.
Customer messages and cancellation proof	Shows actual business impact.
Sales reports before and after the post	Helps support damages.
Witness affidavits	Useful when customers, staff, or suppliers saw the post and understood it as referring to your business.
Platform reports and responses	Shows what you asked the platform to do and whether it acted.
For owners abroad: consularized or apostilled SPA/affidavits when required	Helps a Philippine representative sign, file, or follow up when the owner cannot appear personally. DFA apostille guidance covers affidavits and special powers of attorney among documents commonly processed for authentication purposes. (Apostille Authority)

Step-by-step process

Prepare a timeline. Note the date the post was uploaded, the date you discovered it, and the dates of screenshots, customer cancellations, and platform reports.
Prepare the complaint-affidavit. This should be sworn before a notary or authorized officer. It must be factual and organized. Avoid exaggeration.
Submit evidence to NBI, PNP, or the prosecutor. If the account is anonymous or technical data is needed, NBI or PNP assistance may be useful.
Request preservation when appropriate. Under the cybercrime rules, service providers have duties to preserve traffic data, subscriber information, content data, and other computer data for specified periods when preservation is properly ordered. (Supreme Court E-Library)
Expect a preliminary investigation. If the prosecutor finds the complaint sufficient, the respondent may be required to submit a counter-affidavit. The complainant may be allowed to reply. The prosecutor then resolves whether there is probable cause.
If probable cause is found, the case goes to court. Cyber libel cases are generally filed before the proper court with jurisdiction over cybercrime cases. Court proceedings can take months or years, especially if the accused contests identity, authorship, malice, or falsity.
If dismissed, review the remedy and deadline. Depending on the stage and office involved, remedies may include a motion for reconsideration or petition for review under prosecution rules.

Timelines and Practical Realities

Item	Typical practical timing
Evidence preservation	Same day, ideally immediately
Platform report	Same day to a few days
NBI/PNP intake	Often same day for initial filing, depending on queue and completeness
Technical investigation	Weeks to months, especially for fake accounts or foreign platforms
Prosecutor preliminary investigation	Several months, depending on docket and complexity
Court case	Months to years
Prescription period for cyber libel	One year from discovery by the offended party, authorities, or their agents

The one-year prescription period is critical. In Causing v. People, the Supreme Court abandoned the older view that cyber libel prescribes in 15 years and held that cyber libel prescribes in one year. The Court also affirmed in 2026 that the period runs from discovery of the offense, not automatically from the upload date. (Supreme Court E-Library) (Supreme Court of the Philippines)

This means a business should not wait until the post becomes viral again months later. Preserve evidence and act while the facts, links, witnesses, and platform data are still available.

Common Mistakes Small Businesses Make

Reporting before saving evidence

Many owners report the post first, then realize the content disappeared. Takedown may solve the public relations problem but weaken the legal case if there are no complete screenshots, links, or proof of publication.

Treating every bad review as libel

A one-star review is not automatically defamatory. The strongest cases involve false factual claims, not mere dissatisfaction.

Filing under the wrong name

A restaurant operated by a corporation is not always the same legal complainant as the owner personally. A sole proprietorship, corporation, partnership, franchise branch, and unregistered trade name may require different documents.

Ignoring proof of damages

Courts and prosecutors will want more than “our reputation was destroyed.” Save actual indicators: cancelled reservations, refund demands, messages from suppliers, lost contracts, screenshots of customer confusion, and before-and-after sales data.

Publicly shaming the poster

Calling the poster names, publishing private information, or encouraging followers to attack them can create new legal problems, including privacy, harassment, unjust vexation, or counter-defamation issues.

Assuming anonymous means impossible

Anonymous accounts are harder, not automatically untouchable. Cybercrime investigators may use preservation requests, warrants, platform data, device evidence, IP-related information, and other lawful methods. The rules require court authority for certain collection and disclosure of computer data, and service providers may be required to disclose relevant subscriber or traffic data within 72 hours after receiving the proper order or warrant. (Supreme Court E-Library)

Special Issues for Foreigners, OFWs, and Owners Abroad

Foreigners who own or manage a Philippine business, and Filipinos abroad who operate a local business remotely, often face extra paperwork issues.

Common practical requirements include:

A notarized, consularized, or apostilled Special Power of Attorney authorizing a Philippine representative to file, receive notices, sign documents, or coordinate with investigators.
Sworn affidavits executed abroad, with proper authentication depending on where they are signed.
Clear proof that the foreign owner, foreign corporation, or local Philippine entity is connected to the affected business.
Translation of foreign-language posts or documents when needed.
Coordination with Philippine staff who can authenticate local records and customer communications.

If the defamatory post was made abroad, Philippine remedies may still be considered when the post is accessible in the Philippines, identifies a Philippine business, and causes damage here. Enforcement, identity tracing, and evidence-gathering may be slower when foreign platforms, foreign users, or overseas witnesses are involved.

Do You Need Barangay Conciliation?

For serious cyber libel complaints, barangay conciliation is usually not the main route. Supreme Court Circular No. 14-93 lists offenses with a maximum penalty exceeding one year of imprisonment or a fine over ₱5,000 among matters not covered by mandatory barangay conciliation. (Lawphil)

However, barangay settlement may still appear in related neighborhood disputes, customer arguments, or small civil disagreements. If the matter is primarily a cybercrime complaint, especially involving online publication, fake accounts, technical evidence, or a corporate complainant, the practical route is usually through cybercrime law enforcement or the prosecutor.

Frequently Asked Questions

Is calling my business a “scammer” cyber libel in the Philippines?

It can be, if the statement is presented as a fact, is false, identifies your business, is seen by others, and tends to discredit your reputation. “Scammer” is especially serious because it suggests fraud or dishonest conduct. The strength of the case depends on the full post, context, proof of falsity, and evidence of publication.

Can a small business or corporation file a cyber libel complaint?

Yes. Article 353 of the Revised Penal Code expressly refers to a “natural or juridical person,” so a company or corporation may be defamed. The business must show that it was identifiable and that the proper representative is authorized to act for it. (Lawphil)

Can I sue over a fake Facebook, TikTok, or Google review?

Possibly. A fake review may support a platform report, civil claim, or cyber libel complaint if it contains false defamatory factual statements. If it only says “bad service” or “not recommended,” it may be treated as opinion. If it says “this business sells fake medicine” or “the owner stole my payment,” it is more legally serious.

What if the post is partly true?

Truth matters, but criminal libel law also looks at good motives and justifiable ends. A post can mix true details with false or exaggerated accusations. For example, a delayed refund may be true, but calling the store a criminal syndicate may be false and defamatory.

Can I force Facebook, Google, or TikTok to reveal who posted it?

Not by simply demanding it privately. Cybercrime investigators and courts follow legal processes for preservation, collection, and disclosure of computer data. Service providers have preservation and disclosure duties under the cybercrime rules, but certain data collection and disclosure steps require proper orders or warrants. (Supreme Court E-Library)

How long do I have to file cyber libel?

The current Supreme Court rule is that cyber libel prescribes in one year from discovery by the offended party, authorities, or their agents. Do not rely on old materials saying 12 or 15 years. (Supreme Court of the Philippines)

Is sharing or liking a defamatory post also cyber libel?

The DOJ implementing rules state that online libel applies to the original author of the post and not to people who simply receive the post and react to it. But a person who republishes the accusation with their own defamatory statement may create a new publication. (Supreme Court E-Library)

Can I claim damages for lost sales?

Yes, but damages must be proven. Useful evidence includes cancelled orders, customer messages, sales reports, lost contracts, refund requests, supplier concerns, ad performance changes, and testimony from people who saw the post and changed their behavior because of it.

Should I send a demand letter first?

A demand letter can help if the poster is known and the goal is retraction, apology, takedown, or settlement. But it should be carefully written. Avoid threats, insults, or demands that look like harassment or extortion. Preserve evidence before sending anything.

What if the defamatory post is already deleted?

A deleted post is not automatically fatal if you preserved screenshots, URLs, screen recordings, witnesses, or platform notifications. The case is harder if there is no proof of the content, author, date, and publication. This is why immediate evidence preservation is crucial.

Key Takeaways

Online attacks against a small business may amount to cyber libel if they contain false defamatory factual statements published through a computer system.
Not every negative review is illegal. The strongest cases involve false accusations of fraud, crime, dishonesty, unsafe products, fake goods, or illegal conduct.
Preserve screenshots, URLs, screen recordings, comments, customer messages, and sales impact before reporting or confronting the poster.
Cyber libel currently prescribes in one year from discovery, based on the Supreme Court’s ruling in Causing v. People and its 2026 affirmation.
A business may consider both criminal and civil remedies, including an independent civil action for damages under Article 33 of the Civil Code.
NBI and PNP cybercrime units can assist with cybercrime complaints, especially when fake accounts, technical tracing, or preservation of computer data is involved.
Corporations and other business entities should prepare proof of authority, such as SEC records, board authorization, or a secretary’s certificate.
Owners abroad may need a properly authenticated affidavit or Special Power of Attorney so a Philippine representative can act effectively.