Quick answer

To file a Philippine cyber libel case, preserve the online evidence immediately and file a properly supported sworn complaint with the prosecutor’s office that has territorial venue. Do this well before the offense prescribes: the Supreme Court has confirmed that cyber libel generally prescribes one year from discovery. A platform report, demand letter, police blotter, or request for investigation should not be assumed to stop that deadline.

To defend a case, do not ignore a prosecutor’s subpoena. Record when and how you received it, obtain the complete complaint and attachments, and submit a sworn counter-affidavit with supporting evidence within the period stated in the subpoena. Current DOJ rules generally require at least 10 calendar days from receipt for the counter-affidavit in a regular preliminary investigation.

Cyber libel is not established merely because a post is offensive, harsh, embarrassing, or false. The prosecution must prove the legally required elements—including the defamatory imputation, publication, identifiability of the offended person, malice where required, use of a computer system, and the respondent’s identity as the author. The applicable provisions are Article 353 and related provisions of the Revised Penal Code, together with Section 4(c)(4) of the Cybercrime Prevention Act of 2012.

What counts as cyber libel?

Article 353 of the Revised Penal Code defines libel as a public and malicious imputation of:

A crime;
A vice or defect, whether real or imaginary;
An act, omission, condition, status, or circumstance that tends to cause dishonor, discredit, or contempt; or
A matter that blackens the memory of a deceased person.

It becomes cyber libel when the prohibited libel is committed through a computer system or a similar information and communications technology. This can include social-media posts, online articles, blogs, public comments, videos with defamatory captions or narration, and other internet publications.

A typical prosecution must establish:

A defamatory imputation. The words, images, or surrounding context must convey a discreditable accusation or meaning—not merely an unpleasant tone.
Publication. The material must have been communicated to at least one person other than the person allegedly defamed.
Identifiability. The complainant must be named or sufficiently identifiable from the words, images, circumstances, or information known to readers.
Malice. Malice may be presumed in ordinary cases unless the communication is privileged, but the applicable standard changes in cases involving public officials, public figures, or matters of legitimate public concern.
Use of a computer system. The publication must have been made through a computer, phone, social-media platform, website, messaging service, or comparable technology.
Authorship or responsibility. The prosecution must connect the respondent—not merely an account bearing the respondent’s name or photograph—to the publication.

The statement is assessed as a whole and according to how an ordinary reader would naturally understand it. Emojis, altered images, hashtags, insinuations, questions, and sarcastic wording can matter when the complete context conveys a defamatory factual accusation.

Important limits and exceptions

The law generally targets the original author

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author but declared it unconstitutional as applied to people who merely receive a post and react to it. The Court also invalidated aiding or abetting liability for cyber libel.

A person who simply clicks “like” or passively receives material is therefore not automatically liable for the original post. But someone who writes a new defamatory comment, caption, accusation, or independently authored post may be treated as the author of that new content. Adding one’s own defamatory allegation to shared material is different from merely reacting to it.

A private message may lack publication

A message sent only to the person being criticized ordinarily lacks publication to a third person. A group chat, copied email, public comment, or message deliberately sent to other people may satisfy publication. The exact recipients and the sender’s role in the dissemination must be proved.

The complainant must be identifiable

It is unnecessary for a post to use the complainant’s full legal name if readers can identify the person from a photograph, nickname, office, relationship, location, or other details. Conversely, a broad criticism of an undefined or very large group may fail if no particular complainant can show that the words referred to them.

Public officials and public figures face a higher malice standard

When speech concerns a public official’s performance of official duties—or, in appropriate cases, a public figure or matter of legitimate public concern—the constitutional protection of free expression requires proof of actual malice: knowledge that the allegation was false or reckless disregard of whether it was false.

Actual malice is not established merely by showing hostility, strong language, failure to retract, or an honest factual mistake. The complainant must present evidence bearing on what the author knew and whether the author seriously disregarded the probable falsity of the accusation. Private individuals generally receive greater protection.

Privileged communications may defeat liability

Article 354 recognizes qualified privileges, including:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments or remarks, of a non-confidential judicial, legislative, or other official proceeding, statement, report, speech, or official act.

Relevant statements in judicial pleadings, testimony, and certain official communications may receive absolute privilege. Qualified privilege can be defeated by proof of actual malice or abuse of the occasion. Posting an accusation publicly when the duty required communication only to a responsible authority may weaken a claim of privilege.

Truth is not always a complete defense by itself

Under Article 361, an accused relying on truth generally must also establish that the publication was made with good motives and for justifiable ends. The law limits proof of the truth of non-criminal acts or omissions, except where the imputation concerns a government employee and facts related to official duties.

A genuine public-interest report supported by records is therefore different from publishing an accusation primarily to humiliate someone. “It is true” should never be treated as a complete defense without examining the nature of the imputation, the evidence, the person involved, and the reason and manner of publication.

Opinion is different from a false factual accusation

A recognizable opinion, criticism, or value judgment may receive constitutional protection. Calling a policy “terrible,” for example, is different from falsely claiming that a named official stole a specific amount.

Labels such as “scammer,” “thief,” or “corrupt” can imply verifiable criminal conduct despite being phrased as opinion. Adding “allegedly,” “I think,” or a question mark does not automatically protect a statement whose overall meaning asserts an unsupported fact.

The one-year prescription period

Cyber libel generally prescribes one year from the date the allegedly defamatory publication is discovered by the offended party, the authorities, or their agents. The Supreme Court first clarified this in Causing v. People and affirmed the rule En Banc in 2026. The Court rejected the older view that cyber libel prescribed in 12 or 15 years. See the Supreme Court’s 2026 En Banc resolution.

Under Articles 90 and 91 of the Revised Penal Code:

The one-year period begins upon legally relevant discovery;
Filing the criminal complaint with the proper prosecution office interrupts prescription;
The period may run again if the proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused; and
Prescription does not run while the offender is absent from the Philippines.

The discovery date is a factual issue. Preserve evidence showing when the complainant or authorities first learned of the publication, such as messages forwarding the post, notification emails, witness communications, or the complainant’s first documented response.

Do not assume that these acts interrupt prescription:

Reporting the post to Facebook, YouTube, TikTok, X, or another platform;
Sending a demand letter;
Making a barangay or police blotter entry;
Asking the NBI or PNP for general assistance; or
Starting private settlement discussions.

Ensure that the sworn complaint is filed with the proper prosecution office within the year. Do not also assume that a post’s continued availability automatically restarts the period. A later repost, material edit, new caption, or fresh publication may raise separate questions, but its legal effect depends on the specific act and evidence.

How to preserve the online evidence

Preservation should begin before confronting the author or asking a platform to remove the material. A screenshot alone can be useful, but it may not establish the full context, date, authenticity, audience, or authorship.

Preserve, where available:

Full-page screenshots showing the exact words, images, username, profile name, date, time, URL, post identifier, and surrounding context;
A screen recording that starts from the account or page and navigates to the post;
The original URL and any shortened or redirected URL;
The complete comment thread, captions, edits, reactions, shares, and replies;
The account’s profile information and relevant earlier or later posts;
Notification emails, direct messages, account-recovery messages, and login alerts;
Copies exported or downloaded through the platform’s official tools;
The original phone or computer on which the material was viewed, created, received, or stored;
Names and contact details of people who independently saw and understood the publication;
Evidence showing when the post was first discovered;
Records of actual consequences, such as cancelled contracts, employment action, customer messages, or other measurable harm; and
For a defense, login history, device records, security alerts, travel or work records, and evidence showing who had access to the account or device.

Keep original files unchanged. Make working copies for annotations and translations. Record who captured each item, when it was captured, which device was used, and how it has been stored. Do not crop away information that may later be needed.

Electronic evidence must be authenticated. Under the Rules on Electronic Evidence, authenticity may be established through testimony from a person with direct knowledge, reliable technical evidence, applicable security procedures, or other proof of integrity and reliability.

Never enter another person’s account, bypass a password, impersonate someone, install monitoring software, or obtain private data without authority. That conduct may create separate criminal and privacy issues.

Proving who controlled the account

An account name and profile photograph are important, but they may not be enough because accounts can be fabricated, hacked, shared, or operated by several people.

In XXX v. People, the Supreme Court provided guideposts for proving social-media ownership, access, and authorship through direct or circumstantial evidence. Relevant proof can include:

An admission of ownership, access, or authorship;
A witness who saw the person use the account or compose the material;
Information in the post known only to the alleged author or a small group;
Distinctive language or writing patterns;
Platform, telecommunications, or internet-service-provider records;
Device examinations, account connections, search history, geolocation, or forensic findings;
Conduct consistent with the post or earlier communications; and
Other circumstances reliably linking the person to the account and publication.

Technical records are valuable but not indispensable in every case. The surrounding evidence may establish authorship when considered together. See the Supreme Court’s official guide on social-media account attribution.

How to file the complaint

1. Identify the exact publication and legal theory

Quote or reproduce the specific words, images, video statements, or captions complained of. Explain:

What defamatory meaning they conveyed;
Why they referred to the complainant;
Who received or viewed them;
Why the respondent is believed to be the author;
When and how the publication was discovered;
How a computer system was used; and
What facts establish venue.

Avoid filing a complaint based only on a general statement that an account was “attacking” or “harassing” the complainant. Each alleged publication should be identified precisely.

Quick answer

To file a Philippine cyber libel case, preserve the post and its digital context immediately, identify the author and at least one third person who saw it, and file a properly sworn complaint with the prosecutor’s office that has territorial venue. Act quickly: the Supreme Court has definitively ruled that cyber libel prescribes in one year from discovery, subject to the rules on interruption of prescription.

To defend a case, do not ignore a subpoena or delete anything. Record when you received the papers, obtain the complete complaint and annexes, and submit a detailed sworn counter-affidavit within the deadline stated in the subpoena. The prosecution must establish every element—including authorship, publication, identification, malice, and use of a computer system—with admissible and credible evidence.

Cyber libel is governed principally by Section 4(c)(4) of the Cybercrime Prevention Act of 2012, together with Articles 353 to 362 of the Revised Penal Code. Liability is never automatic merely because a post is offensive, damaging, untrue, or associated with someone’s account.

What must be proved

A viable cyber libel charge generally requires proof of all these matters:

A defamatory imputation. The post attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person or organization to contempt.
Identification. The complainant is named or is sufficiently identifiable from the words, images, surrounding facts, or circumstances. It is not always necessary to use the person’s full name, but readers must be able to understand who was being referred to.
Publication. Someone other than the person defamed received, read, viewed, or otherwise perceived the statement. A private message seen only by the sender and its subject ordinarily lacks this element; a group chat, public post, shared page, or message deliberately sent to another person may satisfy it.
Malice. Article 354 generally presumes malice in a defamatory imputation unless a privilege or other applicable rule intervenes. Different constitutional standards apply when the statement concerns a public official, public figure, official conduct, or a matter of legitimate public interest.
Use of a computer system. The defamatory material was published through social media, a website, email, messaging technology, or another computer or information-and-communications system.
Identity of the author. The respondent—not merely an account bearing the respondent’s name or photograph—authored or controlled the publication.

The Supreme Court upheld the cyber libel provision only as applied to the original author. A person is not criminally liable under that provision merely for receiving a post and making a simple reaction. But someone who writes a new defamatory comment, caption, accusation, or independently authored post may be treated as the author of that new material. The governing ruling is Disini v. Secretary of Justice.

Offensive speech is not automatically cyber libel

Courts examine the entire publication in its ordinary context—not isolated words alone. Relevant questions include:

Does the statement assert or imply a discreditable fact, or is it recognizable rhetoric, satire, or opinion?
Would an ordinary reader understand it as referring to the complainant?
Was it communicated to a third person?
Is it a fair and accurate report of an official proceeding?
Was it made privately and in good faith in the performance of a legal, moral, or social duty?
Does the complainant hold public office or qualify as a public figure?
What evidence shows that the respondent actually wrote or controlled the post?
Was the publication made before the Cybercrime Prevention Act became effective?
Was the complaint filed in time and in the correct venue?

Calling a statement an “opinion” does not settle the issue. An apparent opinion may still imply undisclosed and defamatory facts. Conversely, criticism, exaggeration, or harsh language does not necessarily amount to a provably defamatory factual imputation.

Malice, public officials, and privileged communications

Article 354 recognizes two important forms of qualified privilege:

A private communication made in the performance of a legal, moral, or social duty.
A fair and true report, made in good faith and without added comments, concerning a non-confidential judicial, legislative, or other official proceeding or an act performed by a public officer in an official capacity.

Qualified privilege can be lost through actual malice, excessive publication, irrelevant accusations, or use of the occasion for an improper purpose. Statements relevant to pleadings, testimony, and judicial proceedings may receive broader protection, but relevance and context remain important.

When the complainant is a public official or public figure and the statement concerns official conduct or a legitimate matter of public interest, the complainant generally must establish actual malice—knowledge that the statement was false or reckless disregard of whether it was false. Mere error, negligence, hostility, or an embarrassing publication does not necessarily prove actual malice.

Truth is also not an automatic, unrestricted defense. Under Article 361, an accused relying on truth ordinarily must show both that the material imputation was true and that it was published with good motives and for justifiable ends. The statute contains special rules governing proof of non-criminal acts or omissions and imputations concerning government employees in the discharge of official duties. These issues are highly dependent on the precise words and documents involved.

The one-year deadline

Cyber libel prescribes in one year from the date it is discovered by the offended party, the authorities, or their agents. The Supreme Court first adopted this rule in Causing v. People and affirmed it En Banc in 2026. The latest controlling action is available in the Supreme Court’s April 8, 2026 resolution.

The filing of a proper criminal complaint with the prosecution office interrupts prescription under Article 91. Do not assume that any of the following will stop the one-year clock:

Reporting the account to the social-media platform
Sending a demand letter
Making a barangay or police blotter entry
Asking the author to delete the post
Beginning informal settlement discussions
Filing only an investigative request without ensuring that the criminal complaint reaches the proper prosecution office

Document the exact date and circumstances of discovery. Save the notification, message, email, witness communication, or other record showing when the post first came to the complainant’s attention.

Do not assume that a post’s continued availability restarts the one-year period every day. A later edit, fresh upload, new caption, or separate republication can present different legal questions, but these depend on the particular acts and evidence.

How to preserve the evidence

Digital evidence can disappear long before the case is resolved. Preserve it before demanding deletion or publicly responding.

Keep:

Full-page screenshots showing the post, account name, profile information, date, time, comments, captions, images, and visible URL
A screen recording showing how the post is reached from the account or page
The direct link, post ID, username, account ID, and any archived or downloaded copy
The complete thread and surrounding conversation, not just the allegedly defamatory sentence
Original photographs, audio, video, attachments, and downloaded files
Emails, login alerts, account-recovery notices, and platform notifications
The device on which the material was received or viewed
Names and contact details of people who independently saw the post
Messages showing admissions, apologies, threats, demands, or claims of authorship
Records of measurable harm, such as cancelled contracts, employment action, lost clients, medical treatment, or corrective communications

Do not crop, enhance, retype, or annotate the only copy. Make working copies and preserve the originals. Record who captured each item, when it was captured, what device was used, and how the file was stored.

Electronic material must ultimately be authenticated. Under the Rules on Electronic Evidence, authentication may come from a competent witness, technical or security evidence, platform or provider records, or other proof of integrity and reliability. A screenshot with no witness or evidence connecting it to the account and author may be insufficient.

Do not access another person’s account, device, or private records without authority. Evidence gathering that involves illegal access, interception, impersonation, or account intrusion can create separate criminal and evidentiary problems.

Proving who controlled the account

A name, photograph, or familiar profile is useful but not necessarily conclusive because accounts can be fabricated, hacked, or shared.

In XXX v. People, the Supreme Court identified forms of direct and circumstantial evidence that may establish account ownership, access, or authorship, including:

An admission of ownership, access, or authorship
A witness who saw the person using the account or composing the post
Information in the communication known only to the alleged author or a small group
Distinctive language, writing style, or behavioral patterns
Connections to the person’s email address, mobile number, devices, or other accounts
Internet-service-provider, telecommunications, platform, geolocation, device, or forensic records
Conduct consistent with the post or earlier messages
Other circumstances that, taken together, reliably identify the author

Technical or forensic evidence is valuable but is not indispensable in every case. The official summary is available in the Supreme Court’s guide on social-media account identification.

If the author is unknown or using a dummy account, approach investigators promptly. Under Section 13 of the Cybercrime Prevention Act, law-enforcement authorities can require service providers to preserve specified computer data for prescribed periods. An ordinary private complainant cannot compel disclosure merely by sending the platform a personal request.

How to file the complaint

1. Identify the exact publication

Quote or reproduce the specific words, image, video, caption, or combination being challenged. Explain their meaning in context rather than alleging only that the post was “malicious” or “defamatory.”

For a long video, audio program, livestream, or thread, identify the relevant timestamps or passages and preserve the complete material.

2. Establish publication and identification

Obtain affidavits from people who personally saw the post and understood it to concern the complainant. Each witness should explain:

When and how the witness saw it
What account or page published it
Why the witness understood it as referring to the complainant
What the witness personally observed, without relying on rumor

The complainant’s own screenshot may prove discovery, but an independent recipient is important to prove publication to a third person.

3. Establish authorship

Attach admissions, prior conversations, account connections, witness observations, or technical evidence linking the respondent to the account and post. If account ownership is uncertain, seek investigative assistance instead of presenting speculation as fact.

The NBI Cybercrime Division’s Citizen’s Charter states that members of the public may file a complaint or request for investigation, undergo an interview, submit sworn statements and supporting documents, and make relevant devices available for examination. NBI investigation can be particularly useful when a dummy account, deleted material, platform records, or digital forensics are involved.

4. Choose the proper venue

Cyber libel cases fall within Regional Trial Court jurisdiction and are handled by designated cybercrime courts. Under Section 2.1 of the Rule on Cybercrime Warrants, the criminal action may be filed in the province or city:

Where the offense or any element occurred;
Where any part of the computer system used was situated; or
Where damage to the natural or juridical person occurred.

The court where the action is first properly filed acquires jurisdiction to the exclusion of the others. Venue facts should be stated specifically and supported by evidence. The mere assertion that online content was accessible everywhere is not a safe substitute for establishing a statutory venue.

The complainant ordinarily begins by filing with the city or provincial prosecutor’s office corresponding to the proper venue. The prosecutor—not the private complainant—files the Information in court if the required evidentiary standard is met.

5. Prepare the sworn complaint

The complaint-affidavit should clearly state:

Complete names and usable addresses of the parties
The exact defamatory material and its context
Date of publication and date and manner of discovery
Why the complainant was identifiable
Who saw or received the material
Facts connecting the respondent to the account and post
Facts establishing malice or actual malice, when required
Facts establishing venue
A chronological narration based on personal knowledge
A list of annexes and witnesses

The DOJ’s current preliminary-investigation filing checklist lists a sworn Investigation Data Form, complaint-affidavit, witness affidavits, and supporting documents in the required number of copies. Confirm the receiving office’s current requirements before filing because local submission, identification, notarization, and electronic-copy procedures may differ.

Do not wait until the last day of the prescriptive period. An incomplete, unsworn, misdirected, or improperly venued filing can create avoidable disputes about whether prescription was interrupted.

What happens during preliminary investigation

Because cyber libel carries a possible maximum imprisonment exceeding six years, it undergoes regular preliminary investigation under the 2024 DOJ–NPS Rules on Preliminary Investigations and Inquest Proceedings.

The prosecutor now determines whether there is prima facie evidence with reasonable certainty of conviction. The evidence should be admissible, credible, capable of preservation and presentation at trial, and sufficient—if left uncontradicted—to establish every element and the offender’s identity. The Supreme Court upheld this standard in Meking v. Remulla.

If the complaint is not dismissed outright, the respondent receives a subpoena with the complaint and supporting evidence. Current rules require the respondent to receive at least 10 calendar days from receipt of the subpoena to submit a verified counter-affidavit. The actual date stated in the subpoena or prosecutor’s order must be followed.

The prosecutor may:

Resolve the case from the affidavits and annexes
Ask clarificatory questions
Require additional evidence
Permit or require a reply-affidavit and rejoinder
Dismiss the complaint
Recommend the filing of an Information in the proper RTC

A prosecutor’s finding is not a conviction. If an Information is filed, the judge independently determines whether a warrant of arrest should issue. Guilt must still be proved in court beyond reasonable doubt.

How to defend the complaint

Do not ignore the subpoena

Record the date, time, and manner of receipt. Check the docket number, prosecutor’s office, alleged offense, submission date, and whether all complaint documents were attached. If an annex is missing or unreadable, promptly request a complete copy in writing.

Failure to submit a counter-affidavit can result in resolution based solely on the complainant’s evidence.

Prepare an element-by-element answer

A useful counter-affidavit addresses the precise evidence rather than offering only a general denial. Possible issues include:

The statement was not defamatory when read as a whole.
The complainant was not named or reasonably identifiable.
No third person received or understood the communication.
The respondent did not own, control, or access the account.
Another authorized user had access to a shared account.
The account was hacked, cloned, or impersonated.
The screenshot is incomplete, altered, unauthenticated, or missing essential context.
The statement was privileged.
The publication concerned a public official or figure, and actual malice is absent.
The material was true and published for legally justifiable reasons, subject to Article 361.
The post predates the effectivity of the Cybercrime Prevention Act.
The complaint was filed after the one-year prescriptive period.
The chosen office or court lacks proper venue.
The respondent merely received or reacted to another person’s post and did not author the alleged imputation.

If hacking, impersonation, or shared access is asserted, support it with account-recovery records, login alerts, device histories, work or travel records, witness statements, prior reports to the platform, or forensic evidence. A bare claim that “anyone could have made a dummy account” may carry little weight when surrounding circumstances point consistently to the respondent.

Preserve favorable evidence

Keep the entire conversation, including material that explains tone, consent, source, context, or the purpose of the communication. Preserve drafts, research notes, source documents, official records, interview recordings obtained lawfully, and communications with editors or account administrators.

Do not delete the post, reset devices, destroy messages, fabricate a hacking claim, coach witnesses, or create replacement screenshots. Deletion can remove exculpatory context and may be interpreted adversely. A lawyer can advise whether voluntary correction, takedown, or retraction is appropriate after the evidence has been preserved.

Exercise caution before making statements

A sworn counter-affidavit can later be used as evidence. Do not casually admit authorship, account control, publication, or underlying conduct while attempting to explain something else. Avoid discussing the case publicly, attacking the complainant online, or pressuring witnesses.

Possible penalties and civil liability

Traditional written libel under Article 355 is punishable by imprisonment, a fine, or both. When committed through information and communications technology, Section 6 of the Cybercrime Prevention Act raises the penalty by one degree.

The possible statutory penalty for cyber libel is:

Imprisonment: prisión correccional in its maximum period to prisión mayor in its minimum period—approximately four years, two months and one day to eight years; or
Fine: ₱40,000 to ₱1,500,000; or
Both, depending on the judgment and applicable circumstances.

The Supreme Court has confirmed that a court may impose a fine alone; imprisonment is not automatic. It also fixed the current fine range in Soliman v. People. That range is the statutory range, not a prediction of the outcome in any particular case.

Criminal liability may carry civil liability for proven injury. A complainant may seek actual, moral, or other legally recoverable damages, but amounts are not presumed merely from online outrage or engagement figures. The claimant must establish the legal and factual basis for the requested award.

An apology, correction, deletion, retraction, or settlement may affect damages, prosecutorial decisions, or the penalty ultimately selected, but it does not automatically erase a completed offense. Once a criminal case is instituted, the State controls the prosecution; an affidavit of desistance does not compel dismissal.

Common mistakes

Mistakes by complainants

Filing near or after the one-year deadline
Saving a cropped screenshot without the URL, date, account, or context
Failing to identify a third person who saw the post
Assuming the account name alone proves authorship
Filing wherever convenient without establishing venue
Naming every person who reacted to or shared a post as an author
Relying on rumor instead of witnesses with personal knowledge
Quoting only selected lines that change meaning when the full thread is read
Threatening criminal prosecution solely to obtain money or another improper concession
Assuming a platform report or demand letter stops prescription

Mistakes by respondents

Ignoring the subpoena because it is “not yet a court case”
Missing the counter-affidavit deadline
Filing an unsworn explanation or generic denial
Deleting the account, post, messages, or device data
Contacting or intimidating the complainant or witnesses
Publicly repeating the accusation while defending it
Claiming hacking without reporting it or producing supporting records
Treating truth as a complete defense without addressing motive, purpose, and statutory limitations
Assuming that free speech protects knowingly or recklessly false defamatory factual claims
Making admissions in social-media posts or settlement messages

When legal help is urgent

Consult a Philippine lawyer immediately if:

The one-year period is close to expiring.
You received a subpoena and the counter-affidavit deadline is approaching.
A warrant of arrest may have been issued.
Police or NBI agents want to search, seize, or examine a device.
The account is anonymous, deleted, hacked, shared, or located abroad.
The case involves a journalist, public official, public figure, employer, school, or corporate account.
Several publications, respondents, or possible venues are involved.
The post includes intimate images, threats, extortion, identity theft, stalking, or illegal access, which may involve additional offenses.
A prosecutor has issued an adverse resolution and you are considering reconsideration or DOJ review. Review periods are short and the correct remedy depends on the issuing office and procedural posture.

Qualified indigent persons may seek assistance from the Public Attorney’s Office. The Integrated Bar of the Philippines also maintains legal-aid contact channels.

Frequently asked questions

Can I sue over a false Facebook post?

Possibly. You must still establish defamatory meaning, identification, publication to someone else, malice under the applicable standard, computer-system use, and the author’s identity. Falsity alone does not complete the case.

Is a group-chat message cyber libel?

It can be. If a defamatory statement identifying the complainant is sent to other group members, publication may be present. Privilege, duty, context, malice, and authorship must still be evaluated.

Is sharing or liking a defamatory post a crime?

A simple receiver’s reaction is not enough under Disini. But a person who writes an independently defamatory caption, comment, or accusation may be the original author of that new content.

Can a private company be the victim?

Yes. Article 353 protects natural and juridical persons. The company must still be identifiable, and the statement must tend to cause legally cognizable dishonor, discredit, or contempt.

Is a screenshot enough?

Not necessarily. It should be authenticated and connected to the relevant account, publication, and author. Full context, witness testimony, platform or device information, and other corroborating evidence can be crucial.

Does deleting the post end the case?

No. Publication may already have been completed. Deletion can reduce continuing harm and may be relevant to damages or penalty, but it does not automatically extinguish criminal liability.

Will the respondent be arrested as soon as the complaint is filed?

Ordinarily, no. Filing a complaint begins prosecutorial investigation. If the prosecutor later files an Information, the judge independently evaluates whether to issue a warrant. A subpoena from a prosecutor is not itself a warrant of arrest.

Can the parties settle?

They may discuss correction, apology, damages, or other lawful terms, preferably through counsel. However, cyber libel is a public offense, and private settlement or desistance does not automatically require the prosecutor or court to dismiss it.

Can a post made before the Cybercrime Prevention Act be prosecuted as cyber libel?

The cyber libel provision cannot be applied retroactively to a publication made before the law took effect. Later editing or republication can raise separate factual and legal questions and should be evaluated from the original digital records.

Where should an anonymous-account complaint be taken?

A complainant may seek investigative assistance from the NBI Cybercrime Division or another authorized cybercrime unit while preparing a timely complaint for the proper prosecutor’s office. Do not let the investigation cause the one-year prescriptive period to lapse.

Official legal sources

This article provides general Philippine legal information, not legal advice or an assessment of any particular post, complaint, or defense. Outcomes depend on the exact words, parties, dates, evidence, venue, and procedural history. Law and official guidance were checked as of July 30, 2026.