Quick answer

Cyber libel is committed when a person uses a computer system or information and communications technology to publish a legally defamatory and malicious imputation about an identifiable person or organization. It is prosecuted under Section 4(c)(4) of the Cybercrime Prevention Act in relation to Articles 353 and 355 of the Revised Penal Code.

A complainant ordinarily begins by filing a sworn complaint-affidavit and supporting evidence with the proper prosecutor’s office. The National Bureau of Investigation or Philippine National Police Anti-Cybercrime Group may assist in identifying an anonymous account, preserving data, or conducting a forensic investigation, but reporting to an investigative agency should not be assumed to preserve the filing deadline.

A respondent who receives a prosecutor’s subpoena should not ignore it. Under the ordinary preliminary-investigation procedure, the respondent generally has 10 days from receipt to submit a counter-affidavit and supporting evidence. Because venue, prescription, authorship, publication, malice, privilege, and the exact words used can determine the outcome, either side should consult a Philippine criminal lawyer promptly.

Most importantly, the Supreme Court has now affirmed that cyber libel prescribes in one year from its discovery by the offended party, the authorities, or their agents. Posting online does not automatically create a presumption that the offended party discovered the material on the posting date. The discovery date is a factual matter that may require evidence. See Causing v. People, G.R. No. 258524, April 8, 2026.

What the prosecution must establish

Cyber libel is not established merely because an online statement is insulting, embarrassing, harsh, or false. The prosecution must prove every required element beyond reasonable doubt.

In general, the evidence must establish:

A defamatory imputation. The statement imputes a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose a person or juridical entity to contempt.
Identification. The complainant is named or is identifiable from the words, images, surrounding circumstances, or audience’s knowledge. Naming someone is not always necessary, but a vague statement that cannot reasonably be connected to the complainant may be insufficient.
Publication to another person. At least one person other than the complainant must have received, read, heard, or seen the material. A message communicated only to the person criticized generally does not satisfy publication, although other offenses or civil claims may still be relevant.
Use of a computer system or ICT. The publication occurred through Facebook, Messenger group chats, X, TikTok, YouTube, email, a website, or another computer-based channel.
Malice. Malice is generally presumed from a defamatory publication unless the communication is privileged or the circumstances rebut the presumption. Different and more demanding rules can apply when the statement concerns a public official, public figure, or matter of public interest.
Responsibility of the accused. The prosecution must connect the accused to the creation or publication of the charged statement. Ownership of a name, photograph, page, device, or account may be relevant, but the totality of admissible evidence still matters—especially where an account was hacked, shared, impersonated, or anonymously operated.

The statutory foundation appears in Republic Act No. 10175 and Articles 353 to 362 of the Revised Penal Code, as amended.

Who may be liable

The Supreme Court upheld cyber libel primarily as applied to the original author of the online post. In Disini v. Secretary of Justice, G.R. No. 203335, February 18, 2014, the Court rejected the automatic application of aiding-or-abetting liability to people who merely receive, react to, or pass along an online libel, noting the uncertainty surrounding routine online interactions.

That does not mean every repost is automatically protected. A person who adds a new defamatory accusation, republishes material as their own, or otherwise makes a separate actionable publication may face an assessment based on that person’s actual words and conduct. Administrators, editors, employees, page owners, and corporate officers are not automatically criminally liable simply because of their position; participation, authority, knowledge, and the governing statutory provisions must be proved.

A corporation or other juridical person may face statutory corporate liability in the circumstances described in Section 9 of Republic Act No. 10175. Criminal imprisonment, however, is imposed on natural persons whose participation is established.

Statements that are not automatically cyber libel

Opinion and fair comment

Calling something an “opinion” is not conclusive. Courts examine the whole statement and its context. A protected opinion ordinarily expresses an evaluation rather than asserting a provably false fact. An accusation dressed up as “I think” may still be defamatory if it communicates an undisclosed or false factual claim.

Fair comment on a matter of public interest may be protected when it is based on true or established facts and represents an honest opinion. Invented facts, knowingly false accusations, or reckless factual claims do not become protected merely because they concern politics or public affairs.

Truth

Truth is important but is not a universal, stand-alone answer in every criminal-libel case. Under Article 361 of the Revised Penal Code, proof of the truth of an imputation may be admitted in specified circumstances, including when the imputation concerns a crime or a public officer’s discharge of official duties. Acquittal on this ground generally requires both proof of truth and publication with good motives and for justifiable ends.

Preserve the documents and sources that were available when the statement was made. A belief formed only after publication ordinarily does not prove the publisher’s original basis or state of mind.

Privileged communications

Article 354 recognizes qualified privileges, including:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts that are not confidential.

Qualified privilege does not always end the case. The complainant may attempt to prove actual malice—such as knowledge of falsity, reckless disregard, bad faith, or use of the occasion for an improper purpose.

Some communications made in legislative, judicial, or other legally protected proceedings may carry stronger protection, but the exact scope depends on who spoke, where, why, and whether the statement was pertinent to the proceeding.

Public officials, public figures, and public interest

Speech concerning government and public affairs receives strong constitutional protection. When the complainant is a public official or public figure and the statement relates to public conduct or a matter of public concern, liability generally requires proof of actual malice: knowledge that the statement was false or reckless disregard of whether it was false.

“Reckless disregard” is more than ordinary carelessness. Conversely, public status is not permission to fabricate accusations. The complainant’s status, the subject of the statement, the publisher’s sources, efforts to verify, and awareness of contradictory information can all be decisive.

The one-year deadline

The current controlling rule is that cyber libel prescribes after one year, counted from the date the alleged offense was discovered by the offended party, the authorities, or their agents.

Three points are critical:

The one-year period does not automatically begin on the upload date.
There is no general presumption that a person discovered a post the moment it appeared online.
The date of discovery must be established from evidence where disputed.

Messages forwarding the post to the complainant, reports to an employer, demand letters, takedown requests, screenshots with dates, prior replies, or admissions that the complainant had already seen the post may become important.

Filing the proper criminal complaint interrupts prescription under the applicable procedural rules, but a platform report, barangay complaint, private demand letter, or informal inquiry with police should not be treated as a substitute. Because a wrong office or wrong venue can create serious problems, obtain legal advice well before the anniversary of discovery.

Where and how to file

1. Confirm that cyber libel is the correct offense

Record the exact words, images, captions, links, and surrounding conversation. Distinguish cyber libel from threats, harassment, identity theft, unauthorized access, nonconsensual intimate-image offenses, data-privacy violations, or ordinary civil defamation. More than one law may be relevant, but each has different elements.

2. Identify the proper venue

Venue is jurisdictional in a criminal case and must be properly alleged and proved. Libel has special venue rules under Article 360 of the Revised Penal Code, while Section 21 of Republic Act No. 10175 addresses Philippine jurisdiction over cybercrime and assigns cases to Regional Trial Courts, including designated cybercrime courts.

The proper place may depend on such facts as:

Where an essential element occurred;
Where the complainant actually resided when the offense was committed;
For a public officer, where the officer held office at the relevant time;
Where the computer system or relevant conduct was situated; and
What the complaint and available evidence can lawfully establish.

Do not select a prosecutor’s office merely because the post could be viewed there. Venue questions in online-publication cases can be technical and fact-sensitive.

3. Prepare the complaint-affidavit

The complaint should be sworn, based on personal knowledge where required, and organized chronologically. It should identify:

The complainant and respondent;
The respondent’s account or other identifying information;
The exact allegedly defamatory content;
When and how it was published;
Who other than the complainant saw it;
Why it refers to the complainant;
When and how the complainant discovered it;
The facts supporting authorship and malice;
The basis for venue; and
The harm and relief sought.

Attach authenticated or properly identifiable copies of the evidence. Avoid exaggeration and do not omit messages that materially change the context.

4. File with the proper prosecutor’s office

Because the potential penalty calls for preliminary investigation, the criminal complaint is ordinarily filed with the proper city, provincial, or designated prosecution office. The prosecutor evaluates whether the evidentiary standard for filing an information in court is met.

Under Rule 112, the complaint is generally accompanied by affidavits of the complainant and witnesses, supporting documents, and enough copies for the respondents. Local prosecution offices may impose administrative requirements, so verify the current checklist and accepted filing method directly with the office.

5. Consider an NBI or PNP cybercrime investigation

The NBI and PNP are the law-enforcement authorities specifically tasked by Republic Act No. 10175 with cybercrime investigation. Their specialized units may assist where:

The publisher is anonymous;
Subscriber or traffic data may be needed;
An account was impersonated or compromised;
Devices require lawful forensic examination;
Evidence may be deleted; or
Overseas platforms or records are involved.

Compulsory disclosure of subscriber, traffic, or content data ordinarily requires the lawful process and warrants provided by the Cybercrime Prevention Act and the Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC. A private person generally cannot compel a platform to disclose another user’s confidential information.

Evidence a complainant should preserve

Preserve evidence promptly, without altering the original device or unlawfully accessing another person’s account.

Useful material may include:

Full-page screenshots showing the account name, exact post, date, time, reactions, comments, and URL;
Screen recordings showing navigation from the account or page to the post;
The original URL, post ID, username, profile link, and account identifier;
Downloaded copies of videos, images, audio, and public webpages;
The original phone or computer on which the content was received;
Messages showing when the complainant or authorities first discovered the post;
Affidavits from people who saw the material and can explain whom they understood it to identify;
Communications linking the respondent to the account or publication;
Takedown requests, replies, corrections, retractions, or admissions;
Documents disproving the factual accusation;
Proof of resulting harm, such as lost work, cancelled contracts, or communications from affected clients; and
A written evidence log stating who captured each item, when, how, and from which device.

Screenshots are not automatically conclusive. Electronic evidence must still be authenticated and shown to be reliable and relevant under the Rules on Electronic Evidence. Keep original files and metadata where available; do not crop away context or repeatedly resave the only copy.

How to respond or defend the case

Do not ignore the subpoena

In an ordinary preliminary investigation, Rule 112 generally gives a respondent 10 days from receipt of the subpoena, complaint, and supporting evidence to submit a counter-affidavit and supporting documents. The respondent generally may not replace the counter-affidavit with a motion to dismiss. If the records are incomplete or the deadline cannot reasonably be met, counsel should promptly request the appropriate relief rather than simply allowing the period to expire.

Preserve everything before deleting or editing

Save the charged post, its drafts, sources, complete thread, private messages, login records, device information, and any evidence of compromise or impersonation. Do not fabricate records, coach witnesses, or pressure the complainant. Deleting a post does not erase existing copies and may destroy evidence helpful to the defense.

Examine each element separately

A counter-affidavit should address the actual accusation, not merely deny wrongdoing. Depending on the facts, possible issues include:

The words are not defamatory when read in full context;
The complainant is not reasonably identifiable;
No third person received the communication;
The respondent did not create or publish it;
The account was hacked, spoofed, shared, or falsely attributed;
The statement is protected opinion or fair comment;
The factual statements are true and were published for good motives and justifiable ends;
The communication is privileged;
Actual malice cannot be established where that standard applies;
The complaint was filed after prescription;
Venue is improper;
The allegedly unlawful evidence was obtained without the required warrant or authority; or
The post occurred before Republic Act No. 10175 became effective and cannot constitutionally be punished under that law.

Not every defense applies to every case. Inconsistent defenses or unsupported technical claims can damage credibility.

Challenge digital attribution carefully

A display name or profile photo does not alone prove who operated an account at the relevant time. Relevant evidence may include device possession, account-recovery records, IP or login information lawfully obtained, phone numbers, email addresses, writing patterns, prior admissions, witness testimony, and platform records.

An accused person should not attempt to access the complainant’s account, obtain passwords, or acquire private platform records through deception. That conduct can create separate legal exposure.

Raise prescription with evidence

Prescription may be raised by a motion to quash when the ground appears from the information or can properly be resolved, or it may require evidence at trial. The Supreme Court in Causing refused to terminate the case merely on the posting dates because the discovery date was disputed and unsupported by evidence.

A respondent relying on prescription should preserve proof that the complainant, authorities, or their agents discovered the material more than one year before the proper complaint was instituted.

What happens after the complaint is filed

The prosecutor ordinarily serves the complaint and supporting evidence on the respondent and allows submission of a counter-affidavit. The prosecutor may conduct a clarificatory hearing if necessary, but the parties do not have an automatic right to cross-examine one another at preliminary investigation.

The prosecutor then determines whether the case should be dismissed or an information should be filed in the Regional Trial Court. Available review or reconsideration procedures—and their deadlines—depend on the issuing prosecution office, Department of Justice rules, and the procedural stage. A request for review does not automatically suspend every related court process, so the party should check the governing order and rules immediately.

If an information is filed, the court independently determines probable cause for purposes of issuing a warrant of arrest. The accused may then be arraigned and required to plead. Bail, motions to quash, pretrial, trial, and appeal are governed by the Rules of Criminal Procedure and applicable cybercrime rules.

The offended party’s civil claim is generally deemed instituted with the criminal action unless it was waived, reserved, or previously filed, subject to the Rules of Court. The civil and criminal consequences should be evaluated separately.

Penalties and possible civil liability

Article 355, as amended by Republic Act No. 10951, provides for ordinary written libel a penalty of prisión correccional in its minimum and medium periods, a fine of ₱40,000 to ₱1,200,000, or both, in addition to a possible civil action. Section 6 of Republic Act No. 10175 provides that when a Revised Penal Code offense is committed through ICT, the penalty is one degree higher.

The actual sentence is not determined simply by reading the statutory range. It can depend on the charge, modifying circumstances, the Indeterminate Sentence Law, applicable Supreme Court guidance favoring fines in appropriate libel cases, and the evidence proved at trial. Damages likewise are not automatic and must have a legal and evidentiary basis.

A correction, apology, or retraction may help reduce harm and may be considered under the applicable law, but it does not automatically erase a completed offense or compel dismissal. Obtain advice before sending any demand, admission, settlement proposal, or public response.

Common mistakes

Waiting because the post remains online and assuming the deadline has not started;
Treating a platform report, barangay proceeding, or demand letter as the formal criminal filing;
Filing wherever the complainant happens to be when venue belongs elsewhere;
Submitting cropped screenshots without URLs, timestamps, context, or a witness who can identify them;
Assuming an account name conclusively proves authorship;
Alleging that every person who liked or shared a post committed cyber libel;
Equating criticism, satire, hyperbole, or an adverse opinion with a criminal accusation;
Assuming truth alone always defeats criminal libel;
Publicly repeating the accusation while announcing the intended lawsuit;
Deleting devices, messages, or account records after receiving a demand or subpoena;
Ignoring a prosecutor’s subpoena or missing the counter-affidavit period;
Contacting or intimidating witnesses; and
Obtaining private account data through hacking, deception, or an unauthorized login.

When legal help is urgent

Seek a Philippine lawyer immediately if:

The one-year anniversary of discovery is approaching;
You received a prosecutor’s subpoena, resolution, information, warrant, or court notice;
Police or NBI officers want to search a device, conduct custodial questioning, or obtain a statement;
The account is anonymous and platform data may soon be unavailable;
The content involves a public official, journalist, election, whistleblower, workplace investigation, or confidential proceeding;
The same publication has produced multiple complaints in different places;
A child, intimate image, threat, extortion demand, or hacked account is involved;
You are being pressured to sign an affidavit, apology, waiver, or settlement immediately; or
The content is spreading rapidly and continued publication may increase harm.

During custodial investigation, a person has constitutional and statutory rights, including the right to remain silent and to competent and independent counsel. Ask whether you are free to leave and do not consent to a device search or sign a statement you do not understand without legal advice.

Frequently asked questions

Is a false Facebook post automatically cyber libel?

No. The prosecution must still prove a defamatory imputation, identification, publication to a third person, use of ICT, malice under the applicable standard, and the accused’s responsibility for the publication. Privilege, protected opinion, lack of attribution, venue, and prescription may also matter.

Can I file against an anonymous account?

Yes, a complaint may describe an initially unknown respondent if permitted by the procedural circumstances, but identifying the operator may require lawful investigation and court-authorized disclosure. A username or profile photograph alone may not establish identity.

Does deleting the post prevent a case?

No. Publication may already have occurred, and recipients may have preserved copies. Deletion can limit continued harm but can also remove evidence. Preserve an accurate copy and obtain advice before changing the content.

Is a private group chat covered?

Potentially. A group chat uses a computer system, and publication can exist if the statement reaches at least one person other than the person defamed. Privacy settings and a small audience do not automatically defeat publication, although context and privilege may be important.

Can someone be charged merely for liking or sharing a post?

A mere reaction or routine sharing is not automatically cyber libel. Disini limited the law’s reach and focused liability on the original author. Liability may require a different analysis if the person adds a fresh defamatory statement or makes a separate publication as their own.

Is every criticism of a politician cyber libel?

No. Political criticism and discussion of public affairs receive substantial constitutional protection. But knowingly false or recklessly published factual accusations are not immunized simply because their subject is a public official.

Does a retraction automatically end the case?

No. A genuine and timely correction or retraction may affect harm, damages, prosecutorial decisions, settlement, or sentencing, but it does not automatically extinguish criminal liability.

Can the complainant demand payment in exchange for not filing?

Parties may lawfully explore settlement of civil interests, but criminal prosecution remains subject to public law and prosecutorial authority. Threats, coercive demands, or payment arrangements can create separate issues. Both sides should use counsel and document any negotiations carefully.

Where can I read the governing procedure?

The principal procedural provisions are in the Revised Rules of Criminal Procedure, including Rules 110 and 112, together with the Supreme Court’s Rule on Cybercrime Warrants.

Official sources

This article provides general legal information, not advice for a particular case and not an attorney-client opinion. Cyber-libel outcomes depend heavily on the exact publication, evidence, discovery date, parties’ status, venue, and procedural record. Controlling sources were checked as of September 14, 2026.