Quick answer

A Philippine cyber libel case generally requires proof that the respondent authored a defamatory statement, published it through a computer system, referred to an identifiable person or entity, communicated it to at least one third person, and acted with the malice required by law.

An offended party usually begins by filing a sworn complaint with the proper city or provincial prosecution office. A person served with a prosecutor’s subpoena should promptly submit a sworn, evidence-supported counter-affidavit; ignoring the subpoena may allow the prosecutor to resolve the case without the respondent’s side.

Act quickly. The Supreme Court has ruled—and reaffirmed in April 2026—that cyber libel prescribes in one year from discovery of the allegedly defamatory material by the offended party, the authorities, or their agents. The publication date controls when it is also the discovery date. Filing proceedings for preliminary investigation ordinarily interrupts prescription, but merely reporting a post to a platform or informally asking the police for assistance may not. The date of discovery and any interruption can become disputed factual questions. See Causing v. People, G.R. No. 258524 and the Court’s 2026 resolution on the motions for reconsideration.

What counts as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 covers the unlawful acts of libel under the Revised Penal Code when committed through a computer system or similar future technology. This can include an original Facebook post, online article, blog entry, caption, comment, email, or other digital publication, depending on the evidence and context.

The prosecution must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a natural or juridical person to contempt.
Publication. Someone other than the author and the person defamed received, read, or saw the statement. A message sent only to the person being criticized ordinarily lacks this element. A message sent to another person or a group chat may satisfy it.
Identification. The complainant must be named or otherwise identifiable. A person who is not named may still be identified through the words used, surrounding descriptions, or testimony from readers who understood the post to refer to that person.
Malice. Ordinarily, Article 354 presumes malice from a defamatory imputation unless an applicable privilege or other rule removes that presumption. Different and stricter standards apply to qualifiedly privileged communications and statements concerning public officials or public figures.
Use of a computer system or information and communications technology.
Authorship or responsibility. It is not enough that an account displayed the respondent’s name or photograph. The evidence must reliably connect the respondent to the account and the specific publication.

The governing provisions are found in Articles 353 to 362 of the Revised Penal Code.

Conduct that is not automatically cyber libel

Not every insulting, inaccurate, harsh, or embarrassing online statement is criminal.

Mere reactions and shares

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author but rejected liability based merely on receiving and reacting to a post. The Court also invalidated aiding-or-abetting liability as applied to cyber libel.

A person who merely likes, reacts to, or shares another person’s post is therefore not automatically the author of cyber libel. However, someone who adds an original defamatory caption or comment may be treated as the author of that new statement.

Criticism, opinion, and public debate

Strong criticism is not automatically defamatory. Courts examine the words as a whole, their ordinary meaning, context, audience, and whether they assert or imply verifiable facts. Calling a statement an “opinion” does not protect a disguised factual accusation.

Fair comment on a matter of legitimate public interest may be qualifiedly privileged, particularly when grounded in established facts and not made with actual malice. Personal attacks unrelated to the public issue may fall outside the privilege.

Public officials and public figures

For statements concerning a public official’s conduct or a public figure on a matter of public concern, the prosecution must prove actual malice beyond reasonable doubt: knowledge that the statement was false or reckless disregard of whether it was false. Negligence, an honest mistake, or an inaccuracy alone does not necessarily meet that standard. Whether someone is a public figure, and whether the statement concerns the person’s public role, depends on the facts. See Guingguing v. Court of Appeals and ABS-CBN Corporation v. Gozon.

Privileged communications

Article 354 recognizes qualified privileges that include:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments, of a non-confidential judicial, legislative, or other official proceeding, or of an act performed by a public officer in the exercise of official functions.

Privilege is not a blanket exemption. Excessive publication, irrelevant personal attacks, bad faith, or proof of actual malice may defeat it.

Truth

Truth alone is not always a complete defense under Philippine criminal-libel law. Article 361 generally requires proof of the truth together with good motives and justifiable ends. Special rules govern imputations against public officers concerning the performance of official duties. Anyone relying on truth should preserve the documents, records, witnesses, and verification work that existed before publication.

The deadline to file

Cyber libel currently prescribes in one year from discovery by the offended party, the authorities, or their agents. Article 91 also provides that prescription is interrupted by the filing of the complaint or information and may run again if proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused.

Practical implications include:

Record the exact date, time, and circumstances in which the post was first discovered.
Preserve messages from the person who first reported or forwarded it.
Do not assume that an old post is automatically prescribed or that continued online availability creates a fresh one-year period.
Do not wait until the last few days. Venue, authentication, oath-taking, incomplete attachments, holidays, and filing-office requirements can cause delay.
A platform report, demand letter, barangay visit, or request for a takedown should not be treated as a substitute for filing the proper criminal complaint.

A separate civil action for defamation is also generally subject to a one-year limitation under Article 1147 of the Civil Code, although accrual, interruption, and the relationship between civil and criminal proceedings require case-specific analysis.

If you are filing the complaint

1. Preserve the entire publication

Before requesting deletion, save evidence showing:

The complete statement, not only the most offensive sentence;
The full post, article, comment thread, or conversation;
Account name, username, profile link, and account URL;
Direct URL of the post or page;
Visible date and time, including the relevant time zone;
Privacy or audience setting, if visible;
Comments, reactions, shares, and surrounding exchanges;
Images, video, audio, captions, hyperlinks, and attached documents;
The device and account used to view the material; and
Any later edits, deletion, apology, correction, or reposting.

Take uncropped screenshots and, when useful, a screen recording that begins at the account profile and navigates to the post. Keep the original files and device. Do not add annotations to the only copy. Store working copies separately.

2. Preserve proof of publication

Identify people who personally saw the publication and understood whom it concerned. Obtain their complete contact details. A witness affidavit should explain when and how the witness saw the material, what was visible, and why the witness understood it to refer to the complainant.

Public visibility may help establish publication, but reliable evidence that a third person actually received or viewed the statement is stronger than an unsupported assertion that anyone could have seen it.

3. Connect the post to its author

A profile name and photograph may be insufficient, especially if the respondent claims impersonation, hacking, or shared access. Useful evidence may include:

An admission of account ownership or authorship;
A witness who saw the person use the account or compose the post;
Prior messages reliably received from the same account;
Information in the post known only to the alleged author or a small group;
Distinctive language or writing patterns;
Consistent conduct across earlier posts;
Subscriber, platform, telecommunications, or internet-service records; and
Lawfully obtained device-forensic, IP-address, geolocation, or login evidence.

The Supreme Court set out these kinds of guideposts for proving social-media account ownership, access, and authorship in XXX v. People, G.R. No. 274842. Technical evidence is not indispensable in every case, but it becomes important when authorship is genuinely disputed.

If the author is anonymous or crucial records are held by a platform or service provider, seek assistance promptly from the NBI Cybercrime Division, another authorized law-enforcement unit, or counsel. Investigators may apply for the appropriate court order under the Rule on Cybercrime Warrants. A private person cannot compel a platform to disclose protected subscriber or content data simply by sending a demand.

4. Evaluate the full context

Before filing, assess facts that can defeat or weaken the charge:

Was the complainant identifiable?
Did any third person receive the statement?
Was the statement a factual accusation or protected commentary?
Was it substantially true?
Did the author have good motives and justifiable ends?
Did it concern a public official, public figure, or matter of public interest?
Was it a private duty-based communication or fair official report?
Is there evidence of actual malice?
Is authorship provable?
Has the one-year period expired?
Is the proposed venue proper?

A demand for correction, retraction, apology, or deletion may sometimes resolve the dispute, but it is not a statutory prerequisite and does not guarantee dismissal. Avoid threats, public retaliation, or publishing private information during negotiations.

5. Choose the proper venue

Cyber libel is tried by a designated cybercrime Regional Trial Court. Under Section 2.1 of the Rule on Cybercrime Warrants, a criminal action under Section 4 of Republic Act No. 10175 may be filed in the designated cybercrime court of the province or city where:

The offense or any element occurred;
Any part of the computer system used is situated; or
Damage to a natural or juridical person took place.

The first court in which the action is validly filed acquires jurisdiction to the exclusion of the others.

Venue is not established merely by saying that an online post could be accessed everywhere. The complaint should allege and support the specific factual connection to the chosen city or province. Because venue defects can be fatal, obtain legal advice before filing if the author, server, complainant, and readers are in different places.

6. Prepare and file the complaint-affidavit

Under DOJ Department Circular No. 015, series of 2024, regular preliminary investigation begins with:

The original complaint-affidavit;
Two duplicate copies for the official file;
One additional copy for every respondent;
A duly accomplished NPS Investigation Data Form;
Witness affidavits; and
Documentary, electronic, and other supporting evidence.

The complaint-affidavit should state the parties’ names and addresses, the dates and places involved, the facts showing every element of cyber libel, the discovery date, the basis for venue, and how the evidence identifies the author. It must be sworn before a prosecutor, another government official authorized to administer oaths, or, when they are unavailable, a notary public.

Current DOJ policy requires prima facie evidence with reasonable certainty of conviction. The available evidence must be admissible, credible, capable of preservation and presentation at trial, and sufficient—if left uncontradicted—to establish every element and the offender’s identity.

An offended party may file directly with the proper prosecution office. Where technical investigation is needed, the NBI’s investigative-assistance process for computer-crime victims is another route. An NBI or police report is investigative assistance, not necessarily the same as a docketed complaint for preliminary investigation.

If you are defending the complaint

1. Do not ignore the subpoena

The prosecutor’s subpoena should include the complaint and attachments and must give the respondent at least 10 days from receipt before the scheduled submission of the counter-affidavit.

Record the exact date and manner of service. Obtain a complete copy of every attachment. If essential records are missing, voluminous, or technically difficult to verify, promptly request appropriate relief. Under the 2024 DOJ rules, extensions are exceptional and, when justified, cannot exceed 10 days.

If the respondent received the subpoena at the last known address but fails to appear or submit a counter-affidavit without justification, the prosecutor may consider the case submitted for resolution.

2. Preserve evidence and stop public commentary

Do not delete devices, account data, drafts, messages, login notices, source materials, or communications with editors and witnesses. Preserve evidence of hacking, impersonation, shared access, account recovery, or loss of control.

Avoid debating the complainant online, pressuring witnesses, coordinating false accounts, or posting supposed “proof” that may disclose confidential information. New posts can create additional disputes and undermine defenses such as good faith.

3. Build the counter-affidavit around the elements

A counter-affidavit should specifically address:

Whether the respondent authored the exact words charged;
Whether the account belonged to or was controlled by the respondent;
Whether a third person received the statement;
Whether the complainant was identifiable;
The complete context and ordinary meaning;
Truth, sources, verification, and pre-publication records;
Good motives and justifiable ends;
Public-official, public-figure, fair-comment, or qualified-privilege issues;
Absence of actual malice;
Prescription and the supported discovery date;
Venue;
Material alteration, cropping, or incomplete screenshots; and
Authentication and admissibility defects.

Attach supporting affidavits and records rather than relying on a bare denial. A motion to dismiss generally cannot replace the counter-affidavit; if a verified motion contains the respondent’s defenses, the prosecutor may treat it as the counter-affidavit.

If a reply-affidavit introduces material new matters, the respondent may be allowed a rejoinder-affidavit. Under the current DOJ rules, a reply or rejoinder must be filed within 10 calendar days from receipt of the pleading being answered. The rejoinder is ordinarily the last pleading.

4. Challenge electronic evidence properly

A screenshot is not self-proving. The party relying on it must establish that it accurately reflects the original data, has not been materially altered, came from the claimed account or source, and can be connected to the alleged author. Electronic evidence is governed by the Rules on Electronic Evidence, as expanded to criminal cases, together with the current Rules on Evidence.

Relevant questions include:

Who captured the screenshot?
When and from what device was it captured?
Was the witness personally viewing the account or relying on a forwarded image?
Is the full URL, account name, timestamp, and surrounding context visible?
Was the image cropped, edited, translated, or annotated?
Is the original file or device available?
What proves that the respondent—not an impersonator, hacker, employee, family member, or other authorized user—made the post?
Were platform or device records obtained lawfully?

An authentication objection does not succeed merely because the evidence is digital. Conversely, a printout does not become reliable merely because it looks like a social-media page.

5. Use the available remedies on time

An aggrieved party may file a motion for reconsideration of the prosecutor’s resolution within 15 days from receipt. A qualifying resolution may also be reviewed under the 2022 NPS Rule on Appeal. If an Information has already been filed, a petition for review must be accompanied by a motion asking the trial court to suspend proceedings; an administrative appeal does not itself erase the court case or automatically stop arraignment.

Once an Information is filed, the RTC judge independently evaluates judicial probable cause. The judge may dismiss for a clear lack of probable cause, issue a warrant of arrest, or require additional evidence. If a warrant is issued, consult counsel immediately about voluntary surrender and bail. Do not evade service or assume that a pending prosecutor-level remedy cancels the warrant.

Prescription may be raised in a motion to quash when apparent from the Information. When the discovery date is disputed or not stated, the accused generally must present evidence, and the court may need a hearing.

After an RTC conviction, the period for an ordinary appeal is generally 15 days from promulgation of the judgment or notice of the final order. A timely motion for new trial or reconsideration interrupts that period. Appellate deadlines are strict and require immediate advice from counsel.

Possible penalties and civil liability

Cyber libel carries a penalty one degree higher than traditional written libel. The imprisonment range is generally prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years, subject to the rules on imposing an indeterminate sentence and the facts of the case.

A court may instead impose a fine. In People v. Soliman, the Supreme Court held that fine and imprisonment remain alternative penalties and calculated the current fine for online libel at ₱40,000 to ₱1,500,000. A fine-only sentence is permitted but not automatic; the court considers the law and the circumstances. Imprisonment, a fine, or both may be imposed.

Civil liability may be pursued with the criminal case or, subject to the applicable procedural rules, through a separate civil action. Possible damages are not automatic or fixed: they must be properly pleaded and supported by evidence. The complainant should document actual reputational, professional, business, medical, or other legally recoverable harm. The defense should challenge unsupported or speculative amounts.

The same online act should not be used to punish a person simultaneously for traditional libel and cyber libel in violation of the constitutional protection against double jeopardy. Disini invalidated the contrary application of Section 7 of Republic Act No. 10175.

Common mistakes

Mistakes by complainants

Filing based only on a cropped screenshot;
Failing to preserve the URL, profile, timestamp, and complete thread;
Assuming the displayed account name proves authorship;
Providing no third-party witness to publication;
Omitting the date and circumstances of discovery;
Treating anger or embarrassment as proof of every legal element;
Filing in a convenient but legally unsupported venue;
Waiting for a platform response while prescription continues to run;
Treating a demand letter or police blotter as the criminal complaint; and
Hiding context that supports truth, privilege, public interest, or lack of malice.

Mistakes by respondents

Ignoring the subpoena;
Submitting only a general denial;
Deleting posts, accounts, devices, or source records;
Claiming “opinion” without addressing factual implications;
Claiming truth without proving good motive, justifiable ends, and reliable sources;
Assuming a public-official complainant can never sue;
Contacting or threatening the complainant or witnesses;
Repeating the disputed accusation after receiving notice;
Missing the 15-day reconsideration or appeal periods; and
Assuming a DOJ appeal automatically suspends the court case.

When legal help is urgent

Seek a Philippine lawyer experienced in criminal procedure and electronic evidence immediately when:

The one-year prescriptive period is close;
A prosecutor’s subpoena, court summons, or warrant has been received;
The respondent is anonymous or crucial platform records may disappear;
The post concerns a public official, journalist, company, election, or major public controversy;
There are multiple posts, complainants, respondents, or possible venues;
The account may have been hacked, impersonated, or shared;
The complaint includes other offenses such as threats, identity theft, unlawful access, image-based abuse, or violations involving a child;
Police seek access to a phone, computer, password, or private account;
A cybercrime warrant has been served;
An Information has been filed or arraignment scheduled; or
Settlement discussions involve payment, retraction, confidentiality, or an affidavit of desistance.

An affidavit of desistance does not automatically extinguish a public criminal case after it has been filed. Any settlement should be documented carefully and must not involve coercion, obstruction, false testimony, or suppression of evidence.

Frequently asked questions

Is a demand letter required before filing?

No. A prior demand, correction request, or takedown request is not an element of cyber libel. It may be useful in some disputes but does not extend the criminal prescriptive period.

Must the parties first go through the barangay?

Cyber libel ordinarily proceeds through the prosecution process and is not generally subject to mandatory barangay conciliation because of the prescribed penalty. Venue and any related lower-level offenses should still be checked individually.

Can a private message be cyber libel?

A message sent only to the person allegedly defamed ordinarily lacks publication to a third person. A message about that person sent to someone else, or posted in a group chat, may satisfy publication.

Can an anonymous or dummy account be prosecuted?

Yes, if admissible evidence identifies the person who owned, controlled, accessed, or authored the relevant publication. The account name alone may not be enough. Prompt technical investigation may be essential.

Does deleting the post end the case?

No. Deletion does not erase a completed publication or automatically dismiss a complaint. It may affect ongoing harm and sentencing considerations, but preserved copies and witness testimony may remain usable.

Does an apology prevent prosecution?

No. A sincere and timely correction or apology may help resolve the dispute or affect the court’s assessment, but it is not an automatic defense.

Can I be charged merely for sharing somebody else’s post?

A bare share, like, or reaction is not automatically cyber libel under Disini. Liability may arise if you add and publish your own defamatory statement or otherwise become the author of a new unlawful publication.

Is a false statement always cyber libel?

No. Falsity alone does not establish publication, identification, authorship, defamatory meaning, or the legally required malice. Privilege and constitutional protections may also apply.

Can a true statement still create liability?

Potentially. Under Article 361, the defense commonly requires both truth and good motives and justifiable ends. The treatment of statements concerning public officers and official duties has additional rules.

Is cyber libel bailable?

Yes. It is not an offense punishable by reclusion perpetua when evidence of guilt is strong. The court determines the bail amount and conditions. A person facing a warrant should coordinate surrender and bail through counsel rather than waiting to be arrested unexpectedly.

Where can technical investigative assistance be requested?

The NBI Cybercrime Division accepts requests for investigative assistance. The DOJ Office of Cybercrime also provides official cybercrime information and contact channels. Confirm current office procedures before visiting or sending records.

Key official sources

This article provides general Philippine legal information, not legal advice or an assessment of any particular post, complaint, or defense. Outcomes depend on the exact words, complete context, evidence, dates, parties, and venue. Sources and current procedural rules were checked as of July 30, 2026.