Quick answer

A cyber libel case in the Philippines usually begins with a sworn complaint before the prosecutor’s office that has territorial authority over the offense. The complainant must present evidence that the respondent authored an online publication containing a defamatory imputation, that another person saw it, that the complainant was identifiable, and that the publication was malicious. If the prosecutor finds sufficient grounds to proceed, an Information may be filed in the proper Regional Trial Court designated to handle cybercrime cases.

If you are accused, do not ignore a subpoena or casually delete, edit, explain, or repost the disputed material. Preserve the complete post and its context, note the deadline stated in the subpoena, and prepare a sworn counter-affidavit supported by documents and witness affidavits. Possible defenses include failure to prove authorship, identification, publication, defamatory meaning, or malice; prescription; privileged communication; fair comment; and, when the legal requirements are satisfied, truth published with good motives and for justifiable ends.

Act promptly. The Supreme Court’s current controlling rule is that cyber libel prescribes in one year from discovery by the offended party, the authorities, or their agents, subject to the rules on interruption and the facts establishing when discovery occurred. Filing near the deadline is risky.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the offense is committed through a computer system or a similar future means.

The prosecution generally must establish:

A defamatory imputation. The content imputes a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose a person or juridical entity to contempt.
Publication. At least one person other than the subject received or saw the material.
Identification. The offended party is named or can be identified from the words, images, surrounding facts, or context.
Malice. The applicable form of malice must be established.
Use of a computer system. The defamatory matter was published through an online or computer-based medium.
The respondent’s responsibility for the publication. The evidence must connect the respondent—not merely an account name—to the act charged.

Posts, captions, comments, blogs, online articles, videos, graphics, and similar material may qualify. The whole publication and its ordinary meaning matter; a complainant cannot safely rely only on an isolated phrase stripped of context.

The Supreme Court upheld cyber libel as applied to the original author of the post in Disini v. Secretary of Justice. It did not uphold criminal liability under the cybercrime law merely for people who receive and react to a post through ordinary online functions. A person who creates a new defamatory publication, however, should not assume that calling it a “share” or “repost” automatically prevents liability.

General rules and important exceptions

Malice is a central issue

Article 354 of the Revised Penal Code generally treats a defamatory imputation as malicious even if it is true, unless it falls within a recognized privileged communication. That presumption is not the end of the analysis.

When speech concerns a public official, public figure, or matter protected by constitutional free-speech principles, the prosecution may have to prove actual malice—that the publisher knew the statement was false or acted with reckless disregard as to whether it was false. Negligence, hostility, strong language, or failure to investigate does not automatically equal constitutional actual malice, although the surrounding evidence may still be relevant.

The required showing depends on the subject, the publication, the occasion, and the asserted privilege. Courts examine the evidence rather than the label placed on the speaker or the post.

Privileged communications

Article 354 recognizes two principal categories of qualified privilege:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments or remarks, of qualifying official proceedings or acts performed by public officers.

Qualified privilege is not absolute. It may be defeated by proof of actual malice. Circulating a complaint far beyond the people who reasonably need to receive it may also undermine a claim that the communication was private and duty-bound.

Statements made in pleadings or during judicial proceedings may enjoy stronger protection when relevant to the proceeding. That does not make publication of the same accusations on social media automatically privileged.

Truth is not always enough by itself

Under Article 361, proof of truth may support an acquittal only under the conditions fixed by law, including good motives and justifiable ends. The rules differ depending on whether the imputation concerns a crime or an act of a government officer connected with official duties.

A defendant should therefore present not only proof that the material was accurate, but also evidence showing:

What sources were consulted;
Why those sources were reliable;
What verification occurred before publication;
Whether the subject was asked to respond;
What public, legal, moral, or protective purpose the publication served; and
Whether corrections were made when credible contrary information emerged.

Opinion, criticism, and fair comment

An opinion is not immune simply because it begins with “I think.” A statement phrased as opinion may imply undisclosed, provably false facts.

Fair criticism on matters of public interest receives substantial protection, especially when its factual basis is disclosed and accurate. The court will consider whether a reasonable reader would understand the words as rhetoric, evaluation, satire, or an assertion of verifiable fact.

Honest reports of complaints and investigations

The filing of a complaint does not prove that the accusation is true. A safer report accurately states that a complaint was filed, identifies its source, explains that the allegation remains unresolved, and includes the other side when reasonably available. Repeating the underlying accusation as established fact creates a different risk.

The filing deadline

In Causing v. People, G.R. No. 258524, the Supreme Court held that cyber libel prescribes in one year, applying the Revised Penal Code rule for libel rather than the longer period previously associated with offenses under special laws. In its subsequent resolution, the Court affirmed that the period runs from discovery by the offended party, the authorities, or their agents.

The exact calculation may depend on:

When the allegedly defamatory publication was first discovered;
Who discovered it and in what capacity;
Whether a qualifying complaint or proceeding interrupted prescription;
Whether an alleged later act was truly a new publication; and
Whether the charge concerns conduct occurring after the cybercrime law became effective.

Do not assume that a post’s continuing online availability restarts the period every day. Likewise, do not rely on a takedown, correction, demand letter, or platform report to stop prescription without legal advice.

How to file a cyber libel complaint

1. Preserve the online evidence immediately

Before asking for removal, preserve:

Full-page screenshots showing the post, account name, date, time, captions, comments, and URL;
A screen recording showing how the content is reached;
The exact URL and account or profile link;
Original photos, videos, audio, messages, or downloaded files;
Notifications, emails, direct messages, and platform reports;
Public engagement information such as visible comments or shares;
The device on which the material was received;
Names of people who independently saw the publication; and
Evidence connecting the account or publication to the suspected author.

Keep original files. Do not crop away context or rely only on screenshots pasted into a document. Record when and how you first discovered the material. A witness who saw the content should describe that fact in their own affidavit.

Electronic evidence must be authenticated. A screenshot can be challenged if no witness or surrounding evidence establishes what it depicts, where it came from, and whether it is complete and reliable.

2. Assess every legal element

Identify the exact words, image, or segment claimed to be defamatory. Explain:

What factual accusation it communicates;
Why it is defamatory;
How readers knew it referred to you;
Who other than you saw it;
Why the respondent is believed to have created or published it;
What computer system or online service was used; and
What facts show the applicable form of malice.

Disagreement, insult, embarrassment, or harsh criticism alone does not automatically establish cyber libel.

3. Identify the proper prosecutor’s office and venue

A complaint is ordinarily submitted for preliminary investigation to the appropriate city or provincial prosecutor’s office. Venue in an online case is fact-sensitive.

Section 2.1 of the Supreme Court’s Rule on Cybercrime Warrants addresses criminal actions for offenses under Sections 4 and 5 of Republic Act No. 10175. It refers to the place where the offense or any element was committed, where any part of the computer system used is situated, or where damage to a natural or juridical person occurred. Article 360’s special venue rules for libel and the Supreme Court’s decisions must also be considered where applicable.

Do not choose an office merely because the post was accessible there. State concrete venue facts in the complaint and have counsel check the latest local filing practice.

4. Prepare the sworn complaint and supporting evidence

The complaint-affidavit should present facts in chronological order and be based on personal knowledge or properly identified records. Attach legible, marked copies of the disputed publication and supporting documents. Witnesses should execute separate sworn affidavits when necessary.

The DOJ’s published filing checklist identifies the Investigation Data Form, complaint-affidavit or sworn statement, supporting evidence, and required copies. Confirm the current number of copies, filing hours, fees, notarization requirements, and accepted filing method directly with the particular prosecutor’s office before submission.

A request to the NBI or PNP Anti-Cybercrime Group may assist in identifying an account holder or preserving technical evidence, but private complainants cannot compel platforms or telecommunications providers to disclose protected subscriber or traffic data on their own. Formal law-enforcement processes and, where required, a cybercrime warrant or court order are necessary.

5. Participate in the preliminary investigation

The prosecutor evaluates whether the evidence meets the governing standard for filing a criminal charge. The respondent is ordinarily given a subpoena and an opportunity to submit a counter-affidavit and supporting evidence.

A criminal complaint is prosecuted in the name of the People of the Philippines. An affidavit of desistance, apology, correction, or private settlement does not automatically compel the prosecutor or court to dismiss the case, although it may have evidentiary or practical consequences.

How to defend against a complaint

1. Treat the subpoena deadline as urgent

Read the subpoena, complaint, and attachments in full. Record the date and manner of service. The controlling response period is the one stated in the subpoena and applicable DOJ rules; do not assume that informal discussions suspend it.

If more time is genuinely necessary, seek an extension promptly and in the proper form. An extension is not automatic.

2. Preserve evidence; do not manufacture a cleaner history

Keep the original device, account records, drafts, source materials, messages, and complete conversation threads. Preserve the content as it existed before any correction or takedown.

Do not:

Fabricate screenshots or alter timestamps;
Ask witnesses to coordinate stories;
Delete relevant messages after receiving a complaint or preservation request;
Contact the complainant with threats or pressure;
Post new accusations about the case; or
Ignore official notices because the account was anonymous, hacked, shared, or deleted.

A carefully documented takedown, correction, or apology may sometimes reduce continuing harm, but it can also affect strategy or be characterized as an admission. Obtain advice before publishing one.

3. Challenge the prosecution’s proof element by element

A counter-affidavit may address:

Authorship: Is there competent evidence connecting you to the account and the particular publication?
Publication: Did anyone other than the complainant actually receive or see it?
Identification: Could an ordinary reader identify the complainant?
Meaning: Does the full context communicate a defamatory factual assertion?
Malice: Was the statement privileged, responsibly sourced, or published without knowledge of falsity or reckless disregard?
Truth and purpose: Can the factual basis, good motives, and justifiable ends be proved?
Public-interest speech: Was the material fair comment or protected criticism involving public conduct?
Venue: Do the affidavits establish facts connecting the case to the chosen place?
Prescription: Was a legally effective proceeding commenced within one year from discovery?
Constitutional or temporal limits: Did the alleged conduct occur before the cybercrime provision became enforceable, or is liability being based only on passive receipt or reaction?

Submit evidence, not bare denials. Explain documents and identify the witnesses who can authenticate them.

4. Prepare for possible court proceedings

If an Information is filed, the Regional Trial Court independently determines probable cause for the issuance of a warrant. Filing an Information does not always mean an immediate arrest, but any court notice or warrant requires urgent legal attention.

A motion to quash, petition for review, motion for reconsideration, bail application, or challenge to probable cause has technical grounds and deadlines. None should be filed merely to delay proceedings.

Possible penalties and civil liability

Article 355, as amended by Republic Act No. 10951, provides for ordinary written libel:

Prisión correccional in its minimum and medium periods;
A fine from ₱40,000 to ₱1,200,000; or
Both, in addition to a possible civil action.

Section 6 of Republic Act No. 10175 imposes a penalty one degree higher when a Revised Penal Code offense is committed through information and communications technology. The sentence in a particular case depends on the charge, the applicable penalty rules, modifying circumstances, and the court’s judgment. Imprisonment is legally possible; a fine-only outcome should never be assumed.

The offended party may also pursue damages. Civil liability may be included in the criminal case or pursued through an available independent civil action, subject to procedural rules against double recovery. Civil claims have their own causes of action, defenses, and limitation periods.

Practical evidence checklist

For a complainant:

Complete, uncropped copies of the publication;
URL, account identifier, platform, and discovery date;
Affidavit from at least one third-party reader;
Proof that readers understood the material to refer to you;
Evidence of authorship or account control;
Proof contradicting the accusation;
Demand, response, correction, or takedown records;
Evidence of actual harm, if damages are claimed; and
A clear chronology of discovery and filing.

For a respondent:

Complete post, thread, and surrounding conversation;
Drafts, research notes, source documents, and links consulted;
Messages showing the purpose and circumstances of publication;
Requests for comment and the responses received;
Proof of corrections or updates;
Account-access, hacking, or device records if authorship is disputed;
Material establishing privilege, truth, or public interest;
The subpoena and proof of when it was served; and
A chronology addressing venue and prescription.

Keep a read-only backup. Record who collected each item, when it was collected, and whether it was altered or converted.

Common mistakes

Waiting for a platform to act while the one-year criminal deadline runs;
Filing based only on insults without identifying a defamatory factual imputation;
Submitting cropped screenshots with no URL, date, context, or authenticating witness;
Assuming an anonymous or pseudonymous account can never be traced;
Naming every commenter or person who reacted without evidence of a punishable publication;
Treating truth as an automatic defense without addressing good motives and justifiable ends;
Assuming a public official can never file a case;
Choosing venue solely because the post could be opened there;
Ignoring a prosecutor’s subpoena;
Arguing the entire defense on social media;
Deleting evidence or coaching witnesses; and
Treating a demand letter or affidavit of desistance as an automatic filing bar or dismissal.

When legal help is urgent

Consult a Philippine lawyer immediately if:

The one-year period may expire soon;
You received a prosecutor’s subpoena, court summons, warrant, or hold-departure-related notice;
The account is anonymous and technical records may need preservation;
The publication involves a journalist, public official, election, whistleblower, workplace investigation, or pending case;
Several posts, respondents, jurisdictions, or foreign platforms are involved;
A search, seizure, disclosure, or examination of computer data is being sought;
The case includes threats, extortion, intimate images, stalking, identity theft, or child-protection issues; or
The disputed material may expose confidential, privileged, or protected personal information.

The Public Attorney’s Office may be available to qualified indigent persons. Law-enforcement assistance may be sought from the NBI Cybercrime Division or the PNP Anti-Cybercrime Group, but an investigative report does not replace the prosecutor’s and court’s independent evaluation.

Frequently asked questions

Can I file because someone insulted me online?

Not every insult is cyber libel. The content must satisfy all legal elements, including a defamatory imputation, publication, identification, malice, and use of a computer system. Depending on the words and conduct, another offense or civil remedy may be more appropriate.

Is a private message cyber libel?

It depends on publication. A message sent only to the person defamed ordinarily lacks communication to a third person. A message sent to another person or a group may satisfy publication, subject to privilege and the other elements.

Are likes, reactions, and ordinary shares automatically cyber libel?

No. Disini rejected cyber-libel liability based merely on the law’s aiding-or-abetting provision for people who simply receive and react to an original post. A person who authors a new caption, accusation, edited image, or materially new publication may face a different analysis.

Can a group or company be defamed?

Article 353 recognizes injury to a natural or juridical person. For a group-based statement, identification becomes especially important: the complainant must show that the words reasonably referred to the particular person or juridical entity asserting the claim.

Does deleting the post end the case?

No. Deletion may limit continuing exposure, but it does not erase a completed publication or automatically eliminate criminal or civil liability. Preserve an evidentiary copy before making changes.

Does an apology guarantee dismissal?

No. An apology, correction, or settlement may affect credibility, damages, or the parties’ decisions, but prosecution is undertaken in the name of the People. Dismissal remains subject to the prosecutor’s or court’s lawful authority.

Where is the complaint filed?

Ordinarily, it is filed with the city or provincial prosecutor’s office having authority over a legally proper venue. Because online venue requires concrete facts about the offense, computer system, damage, and applicable libel rules, confirm the correct office before filing.

How long do I have to file?

The current Supreme Court rule is one year from discovery by the offended party, authorities, or their agents, subject to interruption and case-specific facts. Seek advice immediately rather than attempting to calculate the last day informally.

Official legal sources

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Cyber libel questions depend heavily on the exact words, complete context, evidence, dates, identity of the parties, and procedural history. Sources and current rules were checked as of 22 September 2026.