Quick answer

A cyber libel case in the Philippines generally begins with a sworn complaint-affidavit filed with the proper Office of the City or Provincial Prosecutor, supported by admissible evidence showing:

A defamatory imputation;
Publication to at least one person other than the person defamed;
Identification of the person defamed;
Malice; and
Use of a computer system or information and communications technology.

Act quickly. The Supreme Court has definitively ruled that cyber libel prescribes in one year from discovery of the allegedly defamatory material by the offended party, the authorities, or their agents. Filing the complaint or information interrupts prescription. A demand letter, platform report, or informal police report should not be assumed to stop the clock.

A respondent should not ignore a prosecutor’s subpoena. The counter-affidavit, witness affidavits, electronic records, and legal defenses must normally be submitted on the scheduled preliminary-investigation date, which must be at least ten days after receipt of the subpoena and complaint. Extensions are exceptional and, when granted, cannot exceed ten days.

Cyber libel remains a criminal offense under Section 4(c)(4) of the Cybercrime Prevention Act of 2012, read with Articles 353 to 355 of the Revised Penal Code.

What legally counts as cyber libel?

Cyber libel is libel committed through a computer system or a similar technological means. It may involve a social-media post, blog, online article, caption, video containing defamatory assertions, public comment, email sent to third parties, or message placed in a group chat.

The statement must impute a crime, vice, defect, act, omission, condition, status, or circumstance that tends to cause dishonor, discredit, or contempt. Courts examine the complete statement, language used, audience, surrounding conversation, and ordinary meaning—not an isolated word chosen by one party.

A rude remark, criticism, joke, or expression of disagreement is not automatically libel. Conversely, calling something an “opinion” does not necessarily protect it if the statement conveys or implies a defamatory factual assertion.

The person defamed need not always be named. Identification may be established if people who know the circumstances could reasonably determine who was being discussed. But a statement about a broad or indeterminate group may fail the identification requirement.

Publication occurs when the statement is communicated to someone other than the person defamed. A private message seen only by its subject ordinarily lacks this element, although sending the same message to another person or a group may constitute publication.

Who may be held liable?

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel only as applied to the original author of the defamatory online statement. It invalidated liability for merely aiding or abetting cyber libel through routine online reactions.

Someone who merely clicks “like,” shares an existing post, or adds a reaction is not, for that act alone, treated as the original author. But a person who adds a new defamatory caption, comment, accusation, or story may become the original author of that new publication. The distinction depends on the actual words and how the content was republished.

Account ownership and authorship must also be proved. A display name, profile picture, or screenshot alone may not conclusively establish who controlled an account. Admissions, prior messages, distinctive knowledge or language, witnesses who saw the account being used, device records, platform or telecommunications records, and forensic findings may establish authorship through direct or circumstantial evidence.

The governing constitutional ruling is Disini v. Secretary of Justice, G.R. No. 203335.

The filing deadline is one year from discovery

The controlling rule is now clear: cyber libel prescribes in one year, not 12 or 15 years.

Under Article 91 of the Revised Penal Code, that period begins when the alleged crime is discovered by:

The offended party;
The authorities; or
Their agents.

The Supreme Court has rejected an automatic presumption that a person discovered a public Facebook post on the date it was uploaded. Actual discovery is determined from the evidence—for example, when the complainant received a screenshot, commented on the post, threatened legal action, or otherwise demonstrated awareness of it.

The period is interrupted by the filing of the complaint or information. It may run again if the proceedings end without conviction or acquittal or are unjustifiably stopped for a reason not attributable to the accused.

Record the earliest truthful, provable date of discovery. Preserve the message by which the post was sent to you, the date you first opened it, and any earlier communication suggesting that you or your representative already knew about it. Do not delay while waiting for a retraction or negotiating privately.

The latest controlling ruling is the Supreme Court’s 2026 resolution in Causing v. People, G.R. No. 258524.

A separate civil action for defamation is also generally subject to a one-year period under Article 1147 of the Civil Code, although its accrual and interruption must be analyzed separately.

What evidence should be preserved immediately?

Preserve evidence before asking the author or platform to delete the material.

Keep:

Full-page screenshots showing the entire post, not just the allegedly defamatory sentence;
The exact URL, account handle, profile URL, page or group name, and platform;
Visible dates, times, privacy settings, captions, comments, reactions, edits, and share counts;
A screen recording showing how the post is reached from the account or page;
Copies of linked articles, images, videos, audio, and attached files;
Original downloaded files with their metadata intact;
Messages showing when and from whom you first learned about the post;
Earlier and later posts that establish context;
Names and sworn accounts of people who personally saw the publication;
Records connecting the account to its alleged user;
For a complainant, evidence of reputational or economic harm where available;
For a respondent, source documents, interview notes, official records, fact-checking efforts, drafts, account-access logs, and communications supporting good faith or lack of authorship.

Do not crop or annotate your only copy. Keep the original device and files, make working copies, and document who collected each item and when. Screenshots can be useful, but electronic evidence must still be shown to be authentic, reliable, and accurately reproduced. The Rules on Electronic Evidence place the burden of authentication on the party offering a private electronic document.

Do not hack an account, impersonate another person, secretly intercept nonpublic communications, or alter data to obtain evidence. Ask investigators or counsel about lawful preservation and disclosure procedures. Under Republic Act No. 10175 and the Rule on Cybercrime Warrants, law-enforcement authorities may seek preservation orders and court warrants for subscriber, traffic, content, or device data.

Where should the complaint be filed?

A criminal cyber libel action belongs in a designated Regional Trial Court acting as a cybercrime court. Under Section 2.1 of the Rule on Cybercrime Warrants, venue may lie in the province or city:

Where the offense or any element was committed;
Where any part of the computer system used was situated; or
Where any of the resulting damage to a natural or juridical person occurred.

The first court in which the criminal action is properly filed acquires jurisdiction to the exclusion of the others.

The preliminary-investigation complaint should ordinarily be filed with the prosecution office having territorial authority corresponding to the proper venue. Merely accessing a post in a convenient city does not make that city a safe choice in every case. Venue allegations should be tied to provable facts, particularly the author’s conduct, the computer system used, or the place where legally cognizable damage occurred.

Because improper venue can defeat a case, have counsel confirm the prosecution office before filing—especially when the author, complainant, device, or platform is outside the Philippines.

How to file the complaint

1. Assess every legal element

Identify the exact words, image, audio, or video alleged to be defamatory. Explain:

What factual imputation it conveyed;
Why it referred to the complainant;
Who other than the complainant received or saw it;
Why the respondent is believed to be its author;
When the complainant discovered it;
How a computer system or ICT was used; and
What facts support malice or answer an anticipated claim of privilege.

Avoid a complaint that simply labels a statement “libelous.” Each element must be supported by evidence capable of being preserved and presented in court.

2. Prepare the required submissions

Under the 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings, the complainant ordinarily files:

The original complaint-affidavit;
Two duplicate copies for the prosecution office;
One additional copy for every respondent;
A completed NPS Investigation Data Form;
Affidavits of witnesses; and
Documentary, electronic, and other supporting evidence.

The complaint-affidavit must state the parties’ names and addresses, the date and place of the alleged offense, and a factual account of how it was committed. It must be sworn before a prosecutor or authorized government officer or, if they are unavailable, a notary public.

The current prosecutorial standard is prima facie evidence with reasonable certainty of conviction. The evidence must appear admissible, credible, preservable, and sufficient—if left uncontroverted—to prove every element and the responsible person’s identity.

3. Obtain technical assistance where needed

The NBI and PNP are the principal law-enforcement authorities under Republic Act No. 10175. An anonymous account, disappearing content, disputed authorship, hacked account, or need for platform records may justify early referral for technical investigation.

The NBI publishes its process for investigative assistance to victims of computer crimes and maintains an online complaint page.

An NBI or PNP investigation can help build the evidence, but do not assume that reporting to an investigator or platform interrupts the one-year prescriptive period. Confirm that the proper complaint-affidavit has been timely filed and officially docketed with the competent prosecution office.

4. Follow the local filing instructions

The DOJ rules allow electronic filing and virtual proceedings as alternatives, but implementation and the official email address may differ by prosecution office. Do not send a complaint to an unofficial address or assume that an email was validly filed. Obtain acknowledgment, a docket number, and a complete received copy.

What happens during preliminary investigation?

Once the records are complete and assigned, the investigating prosecutor has five calendar days to recommend immediate dismissal or issue subpoenas. The hearing must ordinarily be scheduled within 30 days from the prosecutor’s receipt of the complete records.

The respondent’s subpoena should include the complaint and attachments. The scheduled submission date for the counter-affidavit must be at least ten days after the respondent receives them.

The prosecutor may then:

Consider the case submitted for resolution;
Conduct a physical or virtual clarificatory hearing;
Require a reply-affidavit addressing genuinely new matters; and
Permit a rejoinder-affidavit from the respondent.

A reply or rejoinder required by the prosecutor must be filed within no more than ten calendar days from receipt of the pleading being answered. The rejoinder is the last pleading.

DOJ rules generally require resolution within 60 calendar days from assignment, subject to a maximum 30-day extension for specified circumstances such as complex issues, countercharges, consolidated cases, or reassignment.

If the prosecutor finds the required evidence, an information is filed in the proper cybercrime court. The judge then independently determines judicial probable cause and whether to dismiss, issue a summons, or issue a warrant of arrest.

How to defend after receiving a subpoena

Act before the scheduled hearing

Immediately record:

The date and manner the subpoena was received;
The hearing and counter-affidavit deadline;
Whether the complaint and all attachments were actually included; and
Whether the prosecution office has your correct address.

Engage counsel promptly. An extension is not automatic. It may be allowed when the interests of justice require more time to obtain counsel, examine voluminous records, authenticate evidence, or address unusually complex issues, but an extension cannot exceed ten days.

A motion to dismiss cannot ordinarily replace the counter-affidavit. A verified motion containing the respondent’s factual and legal defenses may instead be treated as the counter-affidavit. Failure to respond can result in the complaint being resolved solely on the complainant’s evidence.

The respondent’s personal appearance may be dispensed with if the counter-affidavit was properly sworn before an authorized officer, but the respondent should still comply with every subpoena or express order and confirm the procedure with counsel.

Preserve, but do not litigate online

Do not delete accounts, destroy messages, fabricate an explanation, pressure witnesses, or post attacks against the complainant. Do not contact the prosecutor privately. Preserve the account, device, access logs, drafts, sources, and communications even if they appear unfavorable; counsel must evaluate them lawfully.

A public “counterattack” may generate new complaints, undermine a good-faith defense, or supply evidence of malice.

The principal defenses

A defense must be supported by the particular post, documents, and testimony. Common issues include the following.

The respondent was not the author

The prosecution must prove the identity of the person who authored or controlled the publication. Evidence of hacking, impersonation, shared account access, compromised credentials, device loss, conflicting location data, or another authorized administrator may create reasonable doubt.

A bare denial may carry little weight when the post contains facts known only to the respondent or the account has a long, authenticated history of use by that person.

There was no defamatory factual imputation

Read the complete exchange. Protected criticism, rhetorical exaggeration, satire, loose insults, or statements that cannot reasonably be understood as asserting defamatory facts may fall outside Article 353. Context, language, audience, and surrounding circumstances are decisive.

The complainant was not identifiable

If no reasonable reader familiar with the circumstances could identify the complainant, an essential element may be missing. Evidence that selected readers correctly understood the reference may support the prosecution.

There was no publication to a third person

A communication seen only by the person allegedly defamed ordinarily does not satisfy publication. Forwarding it to another person, placing it in a group, or making it accessible to an audience may satisfy the element.

The communication was privileged

Article 354 recognizes, among others:

A private communication made in performing a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments, of a nonconfidential official proceeding, official statement, or act performed by a public officer.

Privilege is not a license for unnecessary insults or excessive publication. Its scope and whether actual malice defeated it are factual questions.

The complainant was a public official or public figure

Where the challenged statement concerns a public official or public figure and a matter of public concern, the prosecution may have to prove actual malice: knowledge of falsity or reckless disregard of whether the statement was false. Reckless disregard requires evidence of serious doubts or a high awareness of probable falsity; even serious negligence is not automatically enough.

Truth, good motives, and justifiable ends were proved

Truth is not an unlimited defense under Article 361. Acquittal generally requires proof both that the imputation was true and that it was published with good motives and for justifiable ends.

Proof of the truth of a noncriminal act or omission is ordinarily inadmissible unless the statement concerns a government employee and facts related to official duties. Source records and the purpose, audience, tone, and extent of publication therefore matter.

The case prescribed or was filed in the wrong venue

The respondent may challenge:

The asserted date of discovery;
Earlier acts showing that the complainant or an agent already knew of the post;
Whether a timely filing actually interrupted prescription; and
Whether the selected prosecution office and cybercrime court have a legally supported territorial connection.

The charged act occurred before cyber libel became punishable

Online libel cannot be applied retroactively to a publication made before Republic Act No. 10175 took effect. A later edit, update, repost, or republication requires careful factual and legal analysis; do not assume that leaving an old item online automatically creates a new offense.

The same publication is being charged twice

The State cannot separately punish the same defamatory publication as both traditional libel and cyber libel when the charges concern one and the same offense. Disini specifically recognized the double-jeopardy problem with duplicative charges.

Penalties and civil liability

For cyber libel, the statutory imprisonment range is one degree higher than ordinary written libel: prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years. The actual sentence can depend on the Indeterminate Sentence Law and the circumstances proved.

The Supreme Court has fixed the current alternative fine at ₱40,000 to ₱1,500,000. The court may impose imprisonment, a fine, or both. A fine-only sentence is legally possible, but it is discretionary—not an entitlement. If an accused cannot pay a valid fine, subsidiary imprisonment may apply under the Revised Penal Code.

These rules are explained in People v. Soliman, G.R. No. 256700. Civil damages may also be awarded or pursued under the applicable procedural rules.

Retraction, apology, settlement, and takedown requests

A demand letter or request for correction is not a required element of a criminal cyber libel complaint. It may be useful for stopping continued harm, obtaining a correction, or exploring settlement, but it must not consume the one-year filing period.

Deletion, apology, or retraction does not automatically erase a completed offense. It may affect proof of malice, damages, prosecutorial evaluation, or sentencing. In Soliman, prompt deletion and repeated apologies were among the circumstances considered when a fine-only sentence was upheld.

An affidavit of desistance also does not automatically terminate a criminal prosecution. The offense is prosecuted in the name of the People of the Philippines, and the prosecutor or court must independently determine the legal effect of any settlement. Civil claims may be compromised separately, subject to law.

The DOJ cannot rely on Section 19 of Republic Act No. 10175 to block content unilaterally; the Supreme Court declared that provision unconstitutional in Disini. Platform reporting and properly sought judicial relief remain separate possibilities. Preserve the evidence before requesting removal.

Common mistakes

Waiting for a demand-letter response until the one-year period is nearly over;
Filing wherever the post happened to be viewed without establishing proper venue;
Submitting cropped screenshots without URLs, context, dates, or authentication;
Charging everyone who liked or shared a post without identifying a new defamatory statement;
Assuming truth alone guarantees acquittal;
Treating a profile name or photograph as conclusive proof of authorship;
Naming a person who merely administered or owned a page without proving authorship or legally relevant participation;
Failing to identify the complainant through evidence from actual readers;
Ignoring a prosecutor’s subpoena or filing only an unverified motion to dismiss;
Deleting accounts, devices, messages, or source records;
Continuing the dispute through new public accusations; and
Assuming a retraction, settlement, or affidavit of desistance automatically ends the criminal case.

Remedies after the prosecutor’s resolution

An aggrieved party may file a motion for reconsideration within 15 days from receipt of the resolution under the 2024 DOJ-NPS Rules. A resolution of the Prosecutor General or City, Provincial, or Regional Prosecutor may also be reviewed under the applicable DOJ rules.

If an information has already been filed in court, a DOJ review does not by itself suspend the court case. The appropriate motion to suspend proceedings must be filed with the court, and the court retains authority over the filed information.

Because these periods are strict, record the actual date the resolution was received and obtain counsel immediately.

When legal help is urgent

Seek a Philippine lawyer immediately when:

The one-year deadline is within the next several weeks;
You have received a subpoena, summons, warrant, or search order;
An account is anonymous or provider data may soon be deleted;
A phone, computer, or storage device has been seized;
The post is being edited, removed, or rapidly redistributed;
The case involves a journalist, public official, public figure, company, or foreign party;
Several possible venues or respondents are involved;
The publication predates the Cybercrime Prevention Act but was later edited or reposted;
The online material also involves threats, stalking, intimate images, identity theft, child abuse, or violence; or
Police request access to a device or an interview under circumstances you do not understand.

Qualified indigent accused persons may ask the Public Attorney’s Office about representation during preliminary investigation and trial. Other parties may inquire with the Integrated Bar of the Philippines National Center for Legal Aid or a local IBP chapter.

Frequently asked questions

Can I file a case against everyone who shared or liked the post?

Not merely for clicking “like,” reacting, or routinely sharing the original post. Disini limits cyber libel liability to the original author. A person who adds a new defamatory accusation may, however, be the original author of that new statement.

Are screenshots enough?

They may support a complaint, but screenshots alone are not automatically conclusive. Their accuracy, context, source, authenticity, and connection to the alleged author must be established.

Does deleting the post defeat the case?

No. Deletion does not undo an allegedly completed publication. It can make proof harder and may be relevant to intent, mitigation, damages, or penalty.

Is a public post considered discovered on the date it was uploaded?

Not automatically. The Supreme Court requires evidence of actual discovery by the offended party, authorities, or their agents. Public accessibility by itself does not create presumed discovery.

Is truth a complete defense?

No. Article 361 generally also requires good motives and justifiable ends, and it restricts proof concerning noncriminal imputations.

Must I send a demand letter or request a barangay settlement first?

A demand or retraction letter is not a statutory element of criminal cyber libel. Do not let informal measures consume the one-year period. Whether any separate civil claim requires additional preliminary steps depends on the parties, residence, relief, and cause of action.

Can an anonymous account be prosecuted?

Potentially, but authorship must be proved. NBI or PNP investigators may seek lawful preservation and disclosure of platform, subscriber, traffic, device, or forensic evidence through the procedures allowed by Republic Act No. 10175 and the Rule on Cybercrime Warrants.

Can the complainant simply withdraw the case?

The complainant may execute a desistance or settle civil claims, but this does not automatically compel the prosecutor or court to dismiss a criminal case.

Does conviction always mean imprisonment?

No. Imprisonment remains available, but the Supreme Court has confirmed that a court may impose a fine alone when the circumstances justify it. The outcome cannot be predicted without the complete record.

Primary legal sources

This article provides general Philippine legal information, not advice for a specific case. Cyber libel conclusions depend heavily on the exact words, context, dates, account evidence, parties, and venue. Sources and procedures were checked as of 3 August 2026.