Quick answer

A cyber libel case may arise when a person authors and publishes through a computer system an identifiable, defamatory statement that is legally malicious. The prosecution must prove every element beyond reasonable doubt; an offensive, embarrassing, or critical post is not automatically criminal.

If you are considering filing, preserve the original post and its digital context immediately, identify the author, document when you discovered it, and consult counsel without delay. The Supreme Court has confirmed that cyber libel generally prescribes in one year from discovery by the offended party, the authorities, or their agents, subject to the rules on interruption and the evidence establishing the actual discovery date. (lawphil.net)

If you have received a subpoena, complaint, or court process, do not ignore it, delete evidence, contact witnesses to coordinate stories, or publish retaliatory accusations. Have a Philippine lawyer check the deadline stated in the notice, the correct venue, prescription, authorship, and whether the statement was defamatory, privileged, true, or protected commentary.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act covers libel, as defined in Article 355 of the Revised Penal Code, committed through a computer system or similar future means. The Supreme Court treats cyber libel as the existing crime of libel committed online, with the use of information and communications technology affecting the applicable penalty. (lawphil.net)

The prosecution generally must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, dishonorable conduct or condition, or another matter tending to cause dishonor, discredit, or contempt.
Publication. The statement was communicated to at least one person other than the person defamed.
Identifiability. The complainant was named or could reasonably be identified from the words, images, surrounding facts, or context.
Malice. Malice may be presumed in an ordinarily defamatory publication, but that presumption does not apply in the same way to privileged communications or speech involving public officers or public figures.
Use of a computer system. The publication was made online or through relevant information and communications technology.
Responsibility for the publication. Evidence must connect the respondent to the authorship and publication—not merely to ownership of a name, device, or account.

Courts evaluate the publication as a whole and in its real context. A statement framed as a question, joke, meme, insinuation, edited image, or “opinion” can still be actionable if it conveys a provably defamatory factual imputation. Conversely, harsh language, satire, rhetorical hyperbole, or a genuine opinion may not constitute libel when it does not assert a defamatory fact.

Who may be liable?

The central target is ordinarily the author of the allegedly libelous online statement or article. In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel only insofar as it applies to the original author and invalidated the Cybercrime Prevention Act’s aiding-or-abetting provision as applied to cyber libel. The Court was concerned that automatically punishing people who merely “like,” comment on, or share a post would create excessive uncertainty and chill online expression. (lawphil.net)

That does not make every repost risk-free. A person who republishes material with a new caption, adopts it as their own assertion, or adds a fresh defamatory accusation may be evaluated as the author of a separate publication. Liability depends on the exact words, conduct, evidence, and charge—not simply the platform’s label for the action.

Account ownership alone also does not conclusively prove authorship. Relevant questions include who controlled the account, whether it was compromised, which device or connection was used, and whether admissions, metadata, witness testimony, or other records reliably identify the publisher.

Important defenses and exceptions

No defamatory factual imputation

The full publication may express criticism, opinion, satire, or rhetorical exaggeration rather than an assertion of discreditable fact. Context matters: the audience, language, accompanying media, earlier exchanges, and ordinary meaning of the words should all be examined.

The complainant was not identifiable

A statement about an unnamed person or a broad group may fail this element if readers could not reasonably identify the complainant. Identification need not come from the post alone, however; context and facts known to recipients may supply it.

No publication to a third person

A purely private message sent only to the person concerned ordinarily lacks the publication element. Group chats, copied recipients, forwarded messages, public posts, and messages shown to others present different facts.

Privileged communication

Article 354 recognizes qualified privileges, including:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without comments or remarks, of qualifying official proceedings or acts performed by public officers.

The privilege is not a blanket license to accuse someone online. The communication must fit the legal requirements, be made to appropriate recipients, remain connected to the duty or proceeding, and not be defeated by proof of actual malice.

Truth and proper motive

Truth is not automatically a complete defense in every criminal-libel situation. Article 361 generally requires proof of the truth of the matter charged and that the publication was made with good motives and for justifiable ends, subject to the provision’s treatment of imputations against government employees concerning the discharge of official duties. Documents, verification efforts, sources, and the reason for publishing may therefore be as important as whether an allegation was accurate.

Public officers, public figures, and matters of public concern

When the complainant is a public officer or public figure and the publication concerns matters within legitimate public interest, constitutional protections require proof of actual malice: knowledge that the statement was false or reckless disregard of whether it was true. Mere error or ordinary negligence is not enough. Reckless disregard is fact-specific and may involve evidence that the publisher had serious doubts but published anyway. (Concurring Opinion)

This rule does not protect knowingly false accusations, nor does a person become fair game in every aspect of private life merely because they hold public office or are publicly known.

Prescription, mistaken identity, or lack of authorship

A case may fail because it was brought after the prescriptive period, filed against the wrong person, or lacks reliable evidence connecting the respondent to the publication. These defenses often require records and affidavits; they should not be assumed from the face of a screenshot alone.

How to file a complaint

1. Preserve the publication properly

Before requesting deletion or reporting the content to a platform, preserve:

full-page screenshots showing the account name, text, images, date, time, and visible URL;
the direct URL and account or profile URL;
screen recordings showing how the content was accessed;
the original electronic files rather than screenshots alone;
comments, replies, shares, edits, and surrounding conversation;
notices showing when you first discovered the publication;
names and sworn accounts of people who saw it;
messages or records that may identify the author;
platform reports, acknowledgment emails, and takedown responses; and
evidence of harm, such as lost work, cancelled transactions, threats, medical records, or communications from people who encountered the post.

Do not crop away context, alter files, impersonate another person to obtain evidence, or unlawfully access an account. Keep untouched originals and working copies. Record who collected each item, when, and how.

2. Assess all elements and possible defenses

Write down the exact words alleged to be defamatory. Explain who understood them, how the complainant was identified, why the words conveyed a factual imputation, and what evidence links the respondent to the account and post.

Also assess contrary material fairly: prior disputes, the factual basis claimed by the publisher, official records, corrections, privilege, public-interest issues, and the complainant’s status as a private person, public officer, or public figure. A weak element should be identified before filing—not concealed.

3. Act within the one-year period

Under the Supreme Court’s current ruling in Causing v. People, cyber libel prescribes in one year, reckoned from discovery by the offended party, authorities, or their agents. The party asserting prescription must support the relevant dates with evidence. (lawphil.net)

Proceedings that legally interrupt prescription and any later recommencement of the period involve procedural rules and case-specific facts. Do not wait until the anniversary date to file: disputes over discovery, filing, venue, sufficiency, or office closures can be decisive.

4. Prepare the complaint-affidavit and attachments

A complaint for preliminary investigation ordinarily includes a sworn complaint-affidavit stating the relevant facts from personal knowledge, witness affidavits, supporting records, the respondent’s known address, and the required copies or electronic submissions.

The Department of Justice’s published checklist includes the sworn NPS Investigation Data Form No. 1, complaint-affidavit or sworn statement, witness affidavits, and documentary evidence. Confirm the current checklist, fees, number of copies, and accepted filing method with the specific prosecution office before submission. (doj.gov.ph)

An NBI or PNP cybercrime unit may help investigate authorship, account compromise, or technical evidence. Reporting an incident to an investigative agency is not necessarily the same as filing a legally sufficient complaint for preliminary investigation. The Cybercrime Prevention Act assigns specialized cybercrime units to the NBI and PNP. (Cybercrime Prevention Act of 2012)

5. File in the proper place

Venue in cybercrime cases is technical and may be jurisdictional. Under the Rule on Cybercrime Warrants, relevant connecting points can include where an element occurred, where any part of the computer system used was situated, or where damage was suffered. Special rules address offenses committed by a Filipino national outside the Philippines. The case must proceed before a court designated to handle cybercrime cases, subject to the applicable venue rule.

Because mere online accessibility everywhere does not safely answer the venue question, the complaint should allege and support the specific facts establishing venue. Have counsel verify the correct prosecution office and designated court before filing.

6. Participate in the preliminary investigation

A preliminary investigation determines whether the evidence justifies filing an Information in court; it is not yet a criminal trial. Follow every subpoena, order, and deadline. Submit organized, authenticated records and address the respondent’s evidence if a reply is permitted.

If the prosecutor dismisses the complaint or finds sufficient basis to prosecute, an available motion for reconsideration or petition for review may carry short, strictly applied deadlines. Check the governing DOJ rules and the date and manner of receipt of the resolution immediately.

How to defend a cyber libel complaint

1. Obtain the complete papers and calendar the deadline

Secure the complaint, attachments, subpoena, and proof of service. Note the exact deadline and the office where the counter-affidavit must be filed. The applicable period may come from the subpoena and current DOJ-NPS rules; do not rely on an informal verbal extension.

A counter-affidavit is evidence under oath, not merely a letter denying the charge. Respond paragraph by paragraph where useful, attach supporting records, and identify witnesses with personal knowledge.

2. Preserve exculpatory digital evidence

Keep:

account-login and security notifications;
proof of hacking, impersonation, or unauthorized access;
device, employment, travel, or location records relevant to authorship;
drafts and source materials;
messages showing verification efforts;
public records supporting the publication;
the complete conversation and uncropped post;
evidence showing limited or no third-party publication;
proof of correction, clarification, or retraction; and
documents establishing privilege, proper motive, or public interest.

Do not delete the account or post simply to make the evidence disappear. Deletion may destroy helpful metadata and can be portrayed as consciousness of wrongdoing, although deletion alone does not establish guilt.

3. Test each element

A sound defense should ask:

Is the alleged imputation actually defamatory when read in full?
Is it fact, protected opinion, satire, or hyperbole?
Was the complainant reasonably identifiable?
Was the material communicated to a third person?
Did the respondent author or publish it?
Does the evidence reliably attribute the account and post?
Was the communication privileged?
If truth is invoked, are truth, good motive, and justifiable purpose supported?
Is the complainant a public officer or public figure, and is actual malice provable?
Was the complaint timely?
Are venue and the charging allegations sufficient?

4. Do not treat preliminary investigation casually

The Rules of Criminal Procedure require preliminary investigation for offenses carrying the relevant level of prescribed penalty. The prosecutor evaluates the parties’ affidavits and supporting evidence before deciding whether an Information should be filed. (Criminal Proceedure)

If an Information is filed, the court independently determines probable cause for issuing process. Trial is where guilt must be proved beyond reasonable doubt. Bail, arraignment, pretrial, evidentiary objections, motions, and appeal each require separate legal analysis.

Penalties and civil exposure

Article 355, as amended by Republic Act No. 10951, gives ordinary written libel a penalty of prisión correccional in its minimum and medium periods, or a fine from ₱40,000 to ₱1,200,000, or both, without excluding the offended party’s civil action. (lawphil.net)

For libel committed through a computer system, Section 6 of the Cybercrime Prevention Act raises the corresponding penalty by one degree. The precise imposable sentence or fine depends on the charge, the law on graduated penalties, modifying circumstances, and the court’s findings. The Supreme Court has also issued guidance favoring fines in appropriate libel cases, but that guidance does not guarantee that imprisonment will never be imposed.

Possible financial consequences can include civil indemnity or damages and litigation expenses when legally and factually established. A demand for a large amount does not prove that the amount is recoverable.

Common mistakes

Waiting for the post to go viral before preserving it or seeking advice.
Assuming the one-year period always begins on the upload date, or that an old post can never be prosecuted.
Filing based only on cropped screenshots.
Naming the account owner without evidence of authorship or control.
Treating every insult, criticism, bad review, or false statement as cyber libel.
Ignoring privilege, truth, proper motive, public-interest speech, or the actual-malice standard.
Choosing venue solely because the post was viewable there.
Publishing the complaint-affidavit and repeating the accusation online.
Sending threats, demanding money in exchange for silence, or trying to obtain account access unlawfully.
Ignoring a subpoena because no court case has yet been filed.
Coordinating affidavits among witnesses.
Assuming an affidavit of desistance automatically terminates a public criminal prosecution.
Deleting devices, accounts, messages, or source records after learning of a complaint.

When legal help is urgent

Seek a Philippine lawyer immediately if:

the one-year period may expire soon;
you received a prosecutor’s subpoena, warrant, Information, summons, or arraignment notice;
police want to search, seize, or examine a phone, computer, or account;
the account was hacked or impersonated;
the post involves a public officer, journalist, whistleblower, workplace report, sexual allegation, child, or pending proceeding;
the author, device, or relevant platform records are outside the Philippines;
multiple reposts or publishers are involved;
the publication may also involve threats, stalking, privacy violations, intimate images, identity theft, or another offense; or
either side is being pressured to pay, retract, confess, or sign a settlement immediately.

Ask to see any warrant and obtain counsel before consenting to a forensic examination. Do not physically resist lawful officers. The Rule on Cybercrime Warrants contains specialized safeguards for preservation, disclosure, interception, search, seizure, and examination of computer data.

Frequently asked questions

Is a false Facebook post automatically cyber libel?

No. Falsity alone does not establish every element. The statement must be defamatory, published to another person, refer to an identifiable complainant, be attributable to the respondent, satisfy the applicable malice requirement, and have been committed through a computer system.

Can a private message be cyber libel?

A message sent only to the person concerned ordinarily lacks publication to a third person. A group message, copied message, forwarded message, or message deliberately shown to someone else may satisfy publication, depending on the evidence.

Can someone be charged for sharing or liking a post?

A mere like or mechanical share is not automatically criminal aiding or abetting of cyber libel under Disini. But adding and publishing a new defamatory assertion may create separate exposure as an author. The actual content and conduct control.

Does deleting the post end the case?

No. Deletion does not erase an already completed publication or evidence preserved by recipients or platforms. It may limit continuing harm, but it can also remove context or metadata useful to either side.

Is truth always a complete defense?

No. Article 361 generally also requires good motives and justifiable ends, with a specific rule for imputations concerning government employees and their official duties. The precise accusation and purpose of publication matter.

Can a company file a cyber libel complaint?

A juridical person may claim that a publication damaged its reputation, but identifiability, standing, authorship, malice, and the nature of the imputation still require careful analysis. Statements directed at officers, employees, or a large group present additional issues.

When does the one-year period begin?

The Supreme Court’s current rule is that cyber libel prescribes in one year from discovery by the offended party, authorities, or their agents. The actual date of discovery is an evidentiary question; it is not automatically whatever date either side states.

Where can an incident be reported?

Official starting points include the DOJ Office of Cybercrime, the DOJ cybercrime-reporting page, and the specialized cybercrime units of the NBI and PNP. Confirm whether the chosen office is only receiving an incident report or is accepting the formal complaint required for preliminary investigation.

Official legal sources

This article provides general legal information, not legal advice, and cannot determine the outcome of a particular case. Cyber libel questions are highly dependent on the exact words, audience, evidence, dates, parties, and procedural history. Law and agency procedures checked as of September 22, 2026.