Quick answer
To file a criminal cyber-libel case in the Philippines, act promptly: the Supreme Court now holds that cyber libel generally prescribes in one year from discovery of the allegedly defamatory online material. Prepare a sworn complaint-affidavit identifying the original author, the exact statement, its online publication, the person defamed, and the circumstances showing malice. Attach properly preserved electronic evidence and file with the prosecution office that has territorial jurisdiction. The prosecutor—not the complainant—decides whether the evidence justifies filing an Information in the designated cybercrime court.
To defend a case, do not ignore a subpoena or court notice. Preserve the entire online context and promptly assess whether the prosecution can prove every element, including authorship, identification, publication to another person, defamatory meaning, malice, and use of a computer system. Possible defenses include lack of authorship, lack of publication or identification, privileged communication, absence of malice where legally relevant, truth coupled with good motives and justifiable ends, and prescription.
Cyber libel is a criminal charge with possible imprisonment, a substantial fine, civil liability, or a combination of consequences. Early assistance from a Philippine criminal-defense lawyer is strongly advisable.
What counts as cyber libel?
Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the defamatory material is published through a computer system or a similar technological means.
The prosecution must establish, with admissible evidence, the essential components of libel:
A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose a person or juridical entity to contempt.
Identification. The complainant must be identifiable from the statement and its surrounding circumstances. Naming the person is not always necessary, but a vague statement that cannot reasonably be connected to the complainant may fail this element.
Publication. At least one person other than the complainant must have received or understood the material. A purely private message seen only by its subject ordinarily presents a publication problem, although forwarding it to another person may change the analysis.
Malice. Article 354 generally presumes malice from a defamatory imputation, even if it is true, unless the communication is privileged or good intention and justifiable motive are shown. Constitutional protections may require proof of actual malice in cases involving public officials, public figures, or protected commentary on public affairs.
Use of a computer system or ICT. The publication must have been made online or through covered information and communications technology.
Responsibility as the author. The State must connect the accused to the publication; ownership of an account alone may not resolve disputes involving hacking, impersonation, shared access, or fabricated screenshots.
Whether words are defamatory depends on their ordinary meaning and full context—not merely on an isolated sentence. Satire, rhetorical exaggeration, opinion, quotation, captions, emojis, images, and insinuations can require close factual and constitutional analysis.
Who may be charged?
In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as to the original author but declared it unconstitutional as applied to people who merely receive and react to the post. Merely liking, sharing, or making a reaction to someone else’s defamatory post is therefore not, by itself, cyber libel under Section 4(c)(4).
The protection is not unlimited. A person who writes a new comment containing a separate defamatory accusation may become the original author of that new statement. Copying or republishing material with one’s own defamatory assertions also requires fact-specific analysis.
The prosecution must still prove who actually controlled or used the account at the relevant time. A profile name, photograph, or screenshot does not automatically establish authorship beyond reasonable doubt.
The filing deadline
The Supreme Court’s April 8, 2026 En Banc resolution in Causing v. People, G.R. No. 258524, confirms that cyber libel prescribes in one year under Article 90 of the Revised Penal Code.
Under Article 91:
- The period generally begins when the alleged cyber libel is discovered by the offended party, the authorities, or their agents.
- There is no automatic legal presumption that the offended person discovered an online post on the day it appeared.
- Filing the complaint or Information interrupts prescription.
- The period may begin running again if proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused.
- The period does not run while the offender is absent from the Philippines.
The discovery date can itself be disputed. Preserve evidence showing when and how the post was first found, including messages from the person who reported it, notification records, emails, and sworn witness accounts. Do not wait until the final days of the one-year period.
A separate civil action for injury to rights or defamation may also be subject to a one-year period under Article 1147 of the Civil Code. The correct remedy and computation can depend on the claims pleaded and the procedural history.
Where to file
A complaint normally begins with the appropriate Office of the City Prosecutor or Office of the Provincial Prosecutor. A complainant may also seek investigative assistance from the National Bureau of Investigation’s cybercrime personnel or the Philippine National Police Anti-Cybercrime Group, but reporting to an investigative agency is not necessarily the same as filing the complaint that interrupts prescription. Obtain legal advice on the correct filing before the deadline.
Under Section 2.1 of the Rule on Cybercrime Warrants, as discussed by the Supreme Court in Hernani v. People, a criminal action for an offense under Section 4 of the Cybercrime Prevention Act may be filed in the designated cybercrime court of the province or city:
- where the offense or any element was committed;
- where any part of the computer system used is situated; or
- where damage to a natural or juridical person occurred.
The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of the others. Online accessibility everywhere does not make every location an automatically safe choice. The complaint and eventual Information should allege concrete facts supporting venue.
How to prepare and file a complaint
1. Preserve the material before seeking its removal
Save more than a cropped screenshot. Whenever lawfully possible, preserve:
- the complete post, thread, article, video, or message;
- the account name, unique username, profile URL, and account identifiers;
- the exact URL of each relevant page;
- visible publication dates and times;
- comments and surrounding material needed to show context;
- proof that another person saw or received the publication;
- the device and original files used to capture the material;
- screen recordings showing navigation from the account or page to the post;
- downloaded account data, emails, or platform notifications;
- names and contact details of witnesses;
- evidence of resulting harm, such as lost clients, cancelled contracts, workplace action, or messages referring to the publication; and
- records showing the date of discovery.
Keep unedited originals and working copies. Record who collected each item, when it was collected, and how it was stored. Avoid annotations or compression that erase metadata. A printout, notarization, or screenshot may help, but none automatically proves authenticity, authorship, or completeness.
Do not unlawfully enter another person’s account, impersonate someone, install monitoring software, or obtain private data by deception. Evidence-gathering methods can create separate criminal, privacy, or admissibility problems.
2. Identify the precise defamatory imputation
Quote or reproduce the exact passage and explain:
- what it asserts or implies;
- why it refers to the complainant;
- who received or viewed it;
- why it is defamatory in context;
- why the respondent is believed to be its original author; and
- how the internet, a messaging service, or another computer system was used.
General claims that an entire page is “libelous” are less useful than a statement-by-statement explanation.
3. Prepare sworn affidavits
The complaint-affidavit should give a chronological, firsthand account rather than speculation. Supporting witnesses should execute their own affidavits describing what they personally saw, heard, received, or did.
Attach the electronic and documentary evidence as properly labeled annexes. If the respondent’s identity is uncertain, investigative assistance may be necessary. Courts can authorize disclosure or examination of computer data only through the procedures and safeguards required by law.
4. Confirm the prosecution office’s current checklist
The Department of Justice’s preliminary-investigation filing page provides its service information and documentary checklist. Local prosecution offices may require the prescribed form, sufficient copies for each respondent, valid identification, sworn affidavits, annexes, and proof supporting venue.
Ask for a stamped receiving copy or other official proof of filing. Do not assume that an email, social-media report, barangay complaint, demand letter, or platform takedown request stops prescription.
5. Participate in the preliminary investigation
Under the 2024 DOJ-NPS Rules, the prosecutor evaluates whether there is prima facie evidence with reasonable certainty of conviction. This requires evidence that is admissible, credible, capable of preservation and presentation at trial, and sufficient to establish every element if left uncontroverted.
The prosecutor may:
- require clarification or additional evidence;
- subpoena the respondent;
- receive a counter-affidavit and supporting documents;
- conduct a clarificatory or virtual hearing when appropriate;
- dismiss the complaint; or
- approve the filing of an Information in court.
A preliminary investigation is not yet the criminal trial. Its purpose is to decide whether the respondent should be charged in court.
How to respond if you are accused
Treat the subpoena as urgent
Read the subpoena and all attachments immediately. The controlling deadline is the date stated in the subpoena or lawful order. Do not rely on informal assurances, and do not assume that deleting the post or deactivating an account ends the case.
A respondent generally answers through a sworn counter-affidavit with supporting evidence. A bare denial is rarely the strongest response. Address each element, the authenticity of the exhibits, venue, prescription, and the complainant’s legal theory.
If the deadline cannot reasonably be met, counsel may seek an extension where the applicable rules and prosecutor allow it. An extension is not automatic.
Preserve evidence instead of altering it
Retain:
- the original device and account records;
- the complete conversation or thread;
- drafts and source materials;
- login alerts and account-security notices;
- records showing who had account access;
- research, official documents, interview notes, and recordings lawfully obtained;
- communications showing the purpose and intended recipients; and
- evidence of correction, retraction, apology, or good-faith verification.
Do not fabricate, edit, backdate, or destroy evidence. The Cybercrime Prevention Act separately penalizes obstruction involving computer data, and deletion may also damage an otherwise valid defense.
Avoid public retaliation
Do not threaten the complainant, coach witnesses, publish private evidence, or post new accusations. A defensive social-media campaign can produce admissions, additional alleged offenses, privacy claims, or evidence of malice.
Communications seeking settlement, correction, or removal should be carefully drafted. An apology or retraction can be humane and strategically useful, but it may have evidentiary consequences and does not automatically erase criminal liability.
Major defenses and limits
No defamatory imputation
The words may not reasonably accuse the complainant of misconduct or expose the person to dishonor, discredit, or contempt. Courts examine the entire publication, ordinary meaning, audience, and context.
Calling a statement “opinion” is not conclusive. An opinion implying undisclosed false facts may still be actionable, while obvious parody, hyperbole, or value judgment may receive constitutional protection.
The complainant was not identifiable
The prosecution must show that readers could reasonably understand the statement as referring to the complainant. A member of a very large, undefined group may have difficulty proving individual identification, but group size is not governed by a mechanical rule.
No publication to a third person
Communication only to the person allegedly defamed may lack publication. The result changes if another person received, viewed, or was copied on it. Platform privacy settings do not necessarily defeat publication.
The accused was not the author
Relevant evidence may include account records, device possession, login history, IP-related evidence lawfully obtained, witness testimony, drafting records, and admissions. Hacking, parody accounts, impersonation, automated posting, and shared administration require careful proof.
Privileged communication
Article 354 recognizes qualified privileges, including:
- a private communication made in the performance of a legal, moral, or social duty; and
- a fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts, subject to the statutory limitations.
The privilege can be lost through actual malice, excessive publication, unnecessary inflammatory language, lack of good faith, or departure from the protected occasion.
Statements made in judicial proceedings may receive broader protection when relevant to the proceeding, but privilege is not a license to republish accusations indiscriminately online.
Truth, good motives, and justifiable ends
Truth alone is not a universal defense to Philippine criminal libel. Under Article 361, proof of truth must be considered together with the statutory requirements concerning good motives and justifiable ends. Where the imputation concerns a crime or a public officer’s discharge of official duties, the article contains specific rules.
Official documents, reliable records, contemporaneous verification, efforts to obtain the subject’s side, and careful wording can be important. Rumor, anonymous messages, or repeated allegations do not become true merely because several people circulated them.
Public officials, public figures, and matters of public concern
Speech about official conduct and public affairs receives strong constitutional protection. When the applicable constitutional standard requires actual malice, the complainant must establish that the defamatory statement was made with knowledge of falsity or reckless disregard for whether it was false.
Actual malice in this sense is not simply hostility, anger, or ill will. It concerns the speaker’s attitude toward the truth. Whether the complainant is a public figure, whether the statement involves a matter of public concern, and whether the standard applies are fact-sensitive legal questions.
Prescription
A case filed after the one-year period may be barred. The defense should determine:
- the provable discovery date;
- the date and nature of the filing said to have interrupted prescription;
- any termination or unjustified stoppage of proceedings; and
- whether absence from the Philippines affected computation.
An old post remaining accessible does not necessarily create a new offense every day. A later republication or materially new post may present a separate issue.
Mere reaction or sharing
Under Disini, simply receiving, liking, reacting to, or sharing another person’s post is not cyber libel under Section 4(c)(4). A new defamatory assertion added by the user can be treated differently.
Defective venue or insufficient allegations
The Information must allege facts showing that the case belongs in the chosen court. Challenges involving venue, identification, authorship, dates, and the precise online publication should be raised promptly through the remedies allowed at the relevant stage.
What penalties are possible?
Section 6 of the Cybercrime Prevention Act raises the penalty by one degree when libel is committed through ICT. The possible imprisonment range is generally prisión correccional in its maximum period to prisión mayor in its minimum period, subject to the rules on modifying circumstances and penalty computation.
In People v. Soliman, the Supreme Court held that imprisonment is not mandatory in every cyber-libel conviction. A court may impose a fine as the alternative penalty when legally justified. For offenses governed by the amended Article 355, the Court identified the cyber-libel fine range as ₱40,000 to ₱1,500,000, subject to the law in force when the offense occurred and the circumstances affecting the penalty.
Courts also consider Administrative Circular No. 08-2008, which expresses a preference for fines in appropriate libel cases without removing judicial discretion or decriminalizing libel.
The offended party may pursue civil liability. Damages are not automatic in a particular amount; they must have a legal and evidentiary basis.
Common mistakes
- Waiting because the post remains online and assuming prescription has not started.
- Treating a report to Facebook, a barangay, the NBI, or the police as automatically equivalent to the legally effective filing.
- Saving only a cropped screenshot without the URL, date, account details, context, or witness evidence.
- Naming every person who liked or shared the post despite Disini.
- Assuming that an insulting statement is necessarily criminally defamatory.
- Assuming that every “opinion” is immune from liability.
- Believing truth alone always defeats a libel charge.
- Filing in a convenient location without facts supporting venue.
- Ignoring a prosecutor’s subpoena or missing the stated deadline.
- Deleting accounts, messages, or devices after learning of the complaint.
- Contacting witnesses to coordinate stories.
- Posting additional accusations while the dispute is pending.
- Treating an account name as conclusive proof of its operator.
- Submitting unlawfully obtained private messages or account data.
- Confusing preliminary investigation with trial and withholding important defenses for later.
- Assuming an apology, deletion, or settlement automatically dismisses a public criminal case.
When legal help is urgent
Consult a Philippine lawyer immediately when:
- the one-year filing period is close;
- authorship or the discovery date is disputed;
- the respondent is anonymous or using a false account;
- you received a subpoena, resolution, Information, warrant, or court summons;
- investigators request access to or seizure of a phone, computer, or account;
- the case involves a journalist, public official, public figure, election, or matter of public concern;
- the publication contains confidential, intimate, medical, financial, or children’s information;
- related charges such as threats, harassment, identity theft, unlawful access, data-privacy violations, or violence are alleged;
- you are outside the Philippines or the publication crossed national borders;
- evidence may soon disappear from a platform; or
- arrest, bail, employment, immigration, professional-license, or personal-safety consequences are possible.
A person who cannot afford private counsel may inquire with the Public Attorney’s Office about eligibility. Assistance remains subject to its governing rules, conflict checks, and assessment.
Frequently asked questions
Is a false Facebook post automatically cyber libel?
No. Falsity may be important, but the prosecution must prove all elements, including a defamatory imputation, identification, publication, malice under the applicable standard, use of ICT, and authorship by the accused.
Can a true post still lead to a case?
Yes. Article 354 generally presumes malice in a defamatory imputation even if true unless the applicable requirements are met. Article 361 requires attention to truth, good motives, and justifiable ends. Privilege and constitutional protections may also affect the result.
Can I sue someone who only shared the post?
A person who merely received and shared or reacted to someone else’s post is not liable for cyber libel on that basis alone under Disini. If the person added a new defamatory accusation, that separate statement may be evaluated as an original publication.
Does deleting the post prevent prosecution?
No. Deletion does not undo a completed publication, although prompt correction, retraction, or apology may be relevant to good faith, damages, or penalty. Preserve evidence before removing anything and obtain advice where litigation is foreseeable.
Does each day that a post stays online create a new offense?
Not ordinarily. Continued accessibility is not automatically a new publication every day. A later, deliberate republication or a new defamatory post may require separate analysis.
Can I file directly in court?
A cyber-libel charge ordinarily undergoes preliminary investigation before the prosecutor files an Information in the proper designated cybercrime court. The prosecution office’s territorial jurisdiction and the ultimate court venue should be verified before filing.
Is a demand letter required?
Not generally as an element of cyber libel. A demand for correction, retraction, or removal may be useful in some cases, but it does not replace timely filing and does not necessarily interrupt prescription.
Is notarizing a screenshot enough?
No. Notarization does not by itself prove that the post is authentic, complete, attributable to the respondent, or admissible. Preserve the original electronic context and supporting testimony.
Can the complainant recover damages without a criminal conviction?
Potentially. Philippine law recognizes civil remedies relating to defamation and injury to rights, but the cause of action, proof, prescription period, and effect of any criminal proceedings must be evaluated carefully.
Can the accused be jailed immediately after a complaint is filed?
A complaint-affidavit does not itself establish guilt. The prosecutor must first determine whether an Information should be filed, and the court separately determines probable cause for judicial process. Questions concerning a warrant, voluntary surrender, and bail require immediate advice based on the actual case record.
Official references
- Cybercrime Prevention Act of 2012, Republic Act No. 10175
- Revised Penal Code, including Articles 90–91 and 353–362
- Disini v. Secretary of Justice, G.R. No. 203335, February 11, 2014
- Causing v. People, G.R. No. 258524, April 8, 2026
- Hernani v. People, G.R. Nos. 164845, 181732 and 185315, July 13, 2021
- People v. Soliman, G.R. No. 256700, April 25, 2023
- DOJ Office of Cybercrime
- DOJ preliminary-investigation filing information
This article provides general legal information, not legal advice or an attorney-client relationship. Cyber-libel outcomes depend on the exact words, full context, evidence, dates, parties, and procedural history. The controlling sources were checked as of September 15, 2026.