How to File or Defend a Cyber Libel Case

Quick answer

Cyber libel is ordinary libel committed through a computer system or similar digital means. A complainant generally must prove a defamatory imputation, publication to at least one third person, identification of the offended person, and malice. The prosecution must also link the accused to the online publication and prove every element beyond reasonable doubt.

To start a criminal case, the offended person ordinarily files a complaint-affidavit, witness affidavits, and supporting digital evidence with the prosecutor’s office that has territorial authority over the case. The prosecutor conducts a preliminary investigation before any Information may be filed in the proper Regional Trial Court.

Act quickly. The Supreme Court’s current controlling ruling in Causing v. People is that cyber libel prescribes in one year from discovery of the allegedly defamatory publication. Prescription, venue, republication, and the sufficiency of digital evidence can be highly fact-dependent, so do not wait until the end of the year.

A respondent should not ignore a subpoena, contact the complainant impulsively, delete accounts or devices, or post a public “defense” that repeats the accusation. Obtain counsel, preserve the full context, and submit a properly supported counter-affidavit on time.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 punishes the unlawful acts of libel defined in Article 355 of the Revised Penal Code when committed through a computer system or similar means.

Possible platforms include websites, blogs, social-media posts, online videos, emails, messaging applications, and other electronic communications. The platform alone does not establish guilt. The content, audience, authorship, context, and applicable defenses still matter.

The usual elements are:

  1. Defamatory imputation. The statement attributes a crime, vice, defect, misconduct, condition, status, or act or omission that tends to dishonor, discredit, or expose a person to contempt.

  2. Publication. At least one person other than the person defamed received or understood the statement. A private message sent only to the person concerned ordinarily lacks this element, although other offenses may apply.

  3. Identifiability. The offended person must be named or otherwise reasonably identifiable. A nickname, photograph, job title, surrounding facts, or other clues may be enough even if no full name appears.

  4. Malice. Malice may be presumed from a defamatory publication unless the communication is privileged or another legal rule requires proof of actual malice. The surrounding circumstances remain important.

  5. Use of a computer system or similar means. The defamatory matter was communicated through digital technology.

  6. Participation of the accused. Evidence must connect the respondent to the creation or publication of the material. Ownership of a device, friendship with an account holder, motive, or suspicion does not automatically prove authorship.

Words are not assessed in isolation. Courts consider their ordinary meaning, the complete post or conversation, accompanying images and captions, the audience, and the circumstances of publication. Insults, satire, criticism, opinions, and factual accusations are not interchangeable; the legal effect depends on the actual language and context.

Who may be held liable?

The Supreme Court upheld the cyber-libel provision in Disini v. Secretary of Justice, but limited its application to the original author of the allegedly libelous online statement. The Court rejected automatic criminal liability for people who merely receive a post or react to it through a “like,” comment, or similar response.

That does not make every repost harmless. A person who adds a new defamatory statement, presents an accusation as their own, or independently republishes defamatory material may create a separate factual and legal issue. Liability cannot be inferred merely from online association; the prosecution must prove the person’s own legally punishable conduct.

For conventional printed libel, Article 360 of the Revised Penal Code contains rules concerning authors, editors, business managers, publishers, and certain media personnel. Whether those provisions apply to a particular digital publication depends on the person’s actual role and the evidence.

The filing deadline is one year from discovery

In Causing v. People, G.R. No. 258524, as subsequently affirmed by the Supreme Court En Banc, the Court ruled that cyber libel follows the one-year prescriptive period for libel. The period is counted from discovery of the offense. The Court rejected both the previously applied 12-year period and the argument for a 15-year period. See the Supreme Court’s official 20 April 2026 case summary.

Do not assume that the visible date on a screenshot conclusively resolves prescription. Relevant questions may include:

  • When was the publication first discovered?
  • Who discovered it, and what proof records that date?
  • Was there an actual later republication, or did an old post merely remain accessible?
  • When was the complaint formally filed with the proper authority?
  • Did a filing or other legally recognized event interrupt prescription?
  • Was the case filed in an office with authority over the matter?

Both sides should document discovery and filing dates precisely. A complainant nearing the deadline needs urgent legal advice. A respondent should expressly raise prescription when the dates support it rather than assume the prosecutor or court will do so unaided.

Before filing: preserve reliable evidence

A screenshot is useful, but a cropped or unidentified screenshot may be challenged. Preserve as much original digital context as possible.

Collect and secure:

  • full-page screenshots showing the account name, post, comments, date, time, and surrounding context;
  • the exact URL or platform-specific link;
  • a screen recording showing how the post is reached from the account or page;
  • the original photo, video, audio file, email, or message export;
  • visible account identifiers, usernames, profile links, and account numbers;
  • copies of comments, shares, captions, edits, or follow-up posts relevant to meaning or authorship;
  • the device on which the publication was received or viewed;
  • names and contact details of people who personally saw the post;
  • a written record of when and how the material was first discovered;
  • platform notices, takedown responses, and correspondence;
  • documents contradicting or supporting the challenged factual allegations; and
  • proof of reputational or financial harm, if damages are claimed.

Keep untouched originals. Work from copies, retain metadata where possible, and record who collected each item and when. Do not edit files, manufacture message threads, access another person’s account without authority, or ask someone to obtain evidence unlawfully.

If content may disappear, consult counsel or the NBI or PNP cybercrime unit promptly. Republic Act No. 10175 provides mechanisms for preserving and obtaining specified computer data, but subscriber information, traffic data, content, and device searches are subject to different legal requirements. Private parties generally cannot compel a platform or service provider to disclose protected account data simply by sending a demand.

How to file a criminal complaint

1. Have the elements and defenses assessed

Before filing, identify the exact words or images alleged to be defamatory. Separate factual assertions from rhetoric, criticism, parody, quotation, or opinion. Confirm:

  • who published the material;
  • how the complainant is identified;
  • who else received it;
  • why it is defamatory;
  • why no privilege or other defense applies;
  • when it was discovered; and
  • what evidence reliably links the respondent to the account or publication.

Do not name every administrator, employee, relative, or person who reacted to the post without evidence of personal participation.

2. Determine the proper prosecutor’s office

Cybercrime jurisdiction is given to Regional Trial Courts, with designated cybercrime courts handling cases. Territorial filing and venue can depend on where an element occurred, where the relevant computer system was situated, where damage was caused, and the special venue rules governing libel.

Because online material can be created, hosted, and viewed in different places, venue should be checked against the specific facts before filing. Filing wherever the complainant prefers is unsafe. The complaint should state concrete venue facts, not merely that the material was accessible online.

3. Prepare the complaint-affidavit

The complaint-affidavit should be based on personal knowledge and should clearly state:

  • the identities and addresses of the parties, if known;
  • the exact publication complained of;
  • where and when it appeared;
  • when and how the complainant discovered it;
  • how the complainant is identifiable;
  • who saw or received it;
  • why it is defamatory;
  • facts showing publication and authorship;
  • the basis for filing in that location; and
  • a description of every attached exhibit.

Witnesses with personal knowledge should execute their own affidavits. The affidavits must be properly sworn before an authorized officer. Attach legible, organized, and authenticated evidence rather than unexplained screenshots.

4. File and monitor the preliminary investigation

A complaint may be filed directly with the appropriate prosecution office or brought first to the NBI Cybercrime Division or PNP Anti-Cybercrime Group for investigation. Police or NBI assistance can be especially important when the publisher uses a fictitious account or technical evidence must be lawfully obtained.

An investigative report is not itself a conviction, and reporting to investigators does not necessarily substitute for timely filing of the complaint required to interrupt prescription. Confirm the docketing date, obtain proof of filing, keep copies, and monitor notices.

5. Respond to submissions and resolutions on time

The respondent is ordinarily served with a subpoena and copies of the complaint and evidence, then directed to file a counter-affidavit and supporting documents. The complainant may be permitted or directed to submit a reply, followed in appropriate cases by a rejoinder.

The prosecutor determines whether sufficient grounds exist to file an Information in court. A party dissatisfied with the resolution may have an administrative or judicial remedy, but the correct remedy and deadline depend on who issued the resolution and the procedural posture. Obtain the complete resolution and seek advice immediately rather than relying on an informal request for reconsideration.

How to defend against a cyber-libel complaint

Do not ignore the subpoena

Record the date of actual receipt. Read the directive and attachments carefully. The stated deadline may be short, and an unsupported request for more time may be denied. If the attachments are incomplete or unreadable, document that immediately and request proper copies through the authorized process.

Preserve evidence even if the post has been deleted

Keep the relevant device, account records, login alerts, original files, drafts, conversations, and full thread. Evidence may show that:

  • the accused did not control the account;
  • the account was compromised;
  • another person created or published the statement;
  • the screenshot was altered or omitted material context;
  • no third person received the communication;
  • the complainant was not identifiable;
  • the words were not defamatory in context;
  • the publication was privileged;
  • the allegation was true and made with good motives and justifiable ends;
  • the prosecution cannot prove malice where actual malice is required;
  • the complaint was filed after prescription; or
  • venue is improper.

Do not factory-reset a device, erase messages, coordinate stories, or ask witnesses to delete material. Destruction after notice of a dispute can damage credibility and may create additional legal problems.

File a fact-specific counter-affidavit

A counter-affidavit is evidence, not merely an argument. It should answer the material allegations paragraph by paragraph and attach documents from witnesses who can authenticate them.

Possible defenses include:

No defamatory imputation

The words, read as a whole and in context, may not accuse the complainant of a discreditable fact. Mere disagreement, unfavorable evaluation, or criticism is not automatically libel.

No identification

The prosecution must show that readers could reasonably understand the publication as referring to the complainant. The complainant’s subjective belief is insufficient.

No publication

A communication seen only by the offended person ordinarily does not satisfy publication. For group communications, identify who actually received or understood the message.

No proof of authorship

Screenshots of an account bearing a person’s name do not invariably establish who operated it at the relevant time. Account records, device evidence, admissions, witnesses, and surrounding circumstances may be examined collectively.

Privileged communication

Article 354 recognizes privileged communications, including certain statements made in the performance of a legal, moral, or social duty to a person with a corresponding interest, and fair and true reports of official proceedings made in good faith and without comments or remarks.

Privilege has limits. Excessive distribution, irrelevant accusations, misleading summaries, spiteful language, or proof of actual malice may defeat a qualified privilege.

Truth, good motives, and justifiable ends

Under Article 361, truth is not always a stand-alone defense. As a general rule, the accused must also show good motives and justifiable ends. When the imputation concerns a crime committed by a government employee or relates to the discharge of official duties, the statute contains specific rules that require close analysis.

Support the defense with admissible records and firsthand testimony. Saying “everyone knew it” or relying on another unverified online post is not proof.

Fair comment and matters of public concern

Honest criticism of official conduct and discussion of matters of legitimate public concern receive constitutional protection. Public officials and public figures generally must meet the applicable actual-malice standard for statements connected with their public conduct or status.

Labeling a factual accusation as “opinion” does not automatically protect it. Courts consider whether the statement asserts or implies a provably false fact and whether the publisher knew it was false or recklessly disregarded its truth where that standard applies.

Prescription

The complaint must comply with the one-year period from discovery recognized in Causing. Establish the relevant discovery, filing, and procedural dates through documents rather than unsupported estimates.

Improper venue or lack of jurisdictional facts

The complaint and eventual Information must contain sufficient facts placing the offense within the authority of the prosecutor and court. Online accessibility everywhere does not necessarily make every location a proper venue.

What happens after an Information is filed?

If the prosecutor finds the required basis to prosecute, an Information is filed in the proper Regional Trial Court. The judge independently evaluates the record for purposes such as the issuance of a warrant of arrest.

The accused may be entitled to bail because cyber libel is not punishable by reclusion perpetua. The amount and form of bail are determined under the Rules of Criminal Procedure and the court’s order. Do not rely on unofficial estimates. The Judiciary publishes general bail documentary requirements, but the issuing court’s instructions control.

After acquiring jurisdiction over the accused, the court proceeds through arraignment, pretrial, trial, and judgment unless the case is lawfully dismissed or otherwise resolved. At arraignment, the accused is informed of the charge and enters a plea. Defenses that must be raised before plea should be evaluated immediately with counsel.

Conviction requires proof beyond reasonable doubt. A prosecutor’s finding during preliminary investigation does not determine guilt.

Penalties and civil liability

Cyber libel carries the libel penalty as increased under the Cybercrime Prevention Act. Section 6 provides a penalty one degree higher when a Revised Penal Code offense is committed through information and communications technology. The possible sentence or fine depends on the charging provision, applicable amendments, the court’s findings, and sentencing rules.

Do not treat social-media estimates of imprisonment, fines, or bail as authoritative. The final penalty may be affected by the precise offense charged, modifying circumstances, the Indeterminate Sentence Law, and whether the court chooses imprisonment, a fine, or another disposition allowed by law.

Civil liability may accompany the criminal case. The offended party may seek actual, moral, exemplary, or other damages when legally supported, but damages are not automatic and must be pleaded and proved. Under the Rules of Criminal Procedure, the civil action arising from the offense is generally deemed instituted with the criminal action unless it is waived, reserved, or previously filed, subject to the applicable rules.

A separate civil action based on abuse of rights or injury to reputation may also be considered under the Civil Code. It has its own elements, procedure, limitation period, and possible defenses. Filing both civil and criminal proceedings without coordinating them can create procedural problems.

Can a post be removed before the case ends?

A criminal complaint does not automatically produce a takedown order. The Supreme Court struck down the Cybercrime Prevention Act provision that allowed the DOJ to block computer data based only on a prima facie finding, because judicial safeguards were lacking.

A person may use a platform’s reporting process or send a carefully drafted request for correction, retraction, or removal. These steps may reduce continuing harm, but they do not automatically establish liability or stop prescription. A demand letter is not always required before filing, and an aggressive or public demand can worsen the dispute.

Courts are cautious about orders restraining speech before a final determination because prior restraint raises serious constitutional concerns. The appropriate remedy depends on the content, urgency, and legal basis.

Common mistakes to avoid

  • Waiting for a platform response while the one-year prescriptive period runs.
  • Submitting only cropped screenshots without URLs, dates, context, or witnesses.
  • Assuming that a profile name conclusively proves who made the post.
  • Filing against everyone who liked, viewed, or received the publication.
  • Treating an insult as automatically criminal without analyzing the statutory elements.
  • Believing that every true statement is automatically protected.
  • Repeating the entire accusation in a demand letter, press conference, or “exposé.”
  • Filing in a convenient location without establishing proper venue.
  • Contacting or threatening the other side after counsel or authorities are involved.
  • Deleting a post, account, message history, or device without first preserving evidence.
  • Ignoring a subpoena because the respondent believes the complaint is baseless.
  • Assuming that a settlement, apology, or deletion automatically terminates a criminal case.
  • Accessing another person’s account or private messages without authority to obtain evidence.

When legal help is urgent

Seek a Philippine lawyer immediately if:

  • the one-year deadline is approaching;
  • you received a prosecutor’s subpoena, court summons, or warrant;
  • the account is anonymous or appears compromised;
  • the post has been deleted or is likely to disappear;
  • police or investigators request access to a device or account;
  • a search, disclosure, interception, or preservation order is involved;
  • the dispute concerns a journalist, public official, public figure, or matter of public interest;
  • the same facts may involve threats, harassment, identity theft, data-privacy violations, violence against women or children, or another offense;
  • either party is a minor;
  • publication or evidence crosses national borders; or
  • a settlement proposal includes admissions, confidentiality, money, or withdrawal of proceedings.

Qualified indigent parties may ask the Public Attorney’s Office about eligibility for assistance. The Integrated Bar of the Philippines and law-school legal-aid clinics may also provide or refer legal assistance, subject to their requirements and availability.

Frequently asked questions

Is every damaging Facebook post cyber libel?

No. The prosecution must establish all legal elements, including a defamatory imputation, identification, publication, malice under the applicable standard, use of a computer system, and the accused’s participation. Privilege and constitutional protections may apply.

Can a private group-chat message be cyber libel?

Potentially. Publication may exist if at least one person other than the offended person received the defamatory message. The group’s limited size may affect context, privilege, malice, and damages but does not automatically prevent liability.

Is sharing a post automatically a crime?

No. Disini rejected automatic liability for ordinary recipients and people who merely react to an online post. A share accompanied by a new defamatory statement or an independent republication may require separate analysis.

Is an anonymous or dummy account immune?

No, but the complainant must lawfully obtain sufficient evidence connecting a person to it. A username, suspicion, or prior disagreement may be inadequate by itself.

Does deleting the post end the case?

No. Deletion may reduce further dissemination but does not erase an already completed publication or preserved evidence. It may also remove evidence needed by either side.

Is truth always a complete defense?

No. Article 361 generally requires both truth and proof that the publication was made with good motives and for justifiable ends, subject to its specific rules. The defense must be supported by admissible evidence.

Must a demand letter be sent first?

Not generally. A demand may be useful for correction, retraction, preservation, or settlement, but it is not a universal prerequisite to a criminal complaint and does not necessarily stop prescription.

Can the complainant file directly in court?

Ordinarily, the criminal complaint first undergoes preliminary investigation before the prosecutor because the offense falls within Regional Trial Court jurisdiction. If the prosecutor finds sufficient grounds, the prosecutor files the Information in court.

Can the parties simply withdraw the case after settling?

Not necessarily. Cyber libel is a public offense prosecuted in the name of the People of the Philippines. An affidavit of desistance or settlement may be considered, especially regarding civil liability and evidentiary cooperation, but it does not automatically compel the prosecutor or court to dismiss the criminal case.

Can both ordinary libel and cyber libel be charged for the same act?

Section 7 of Republic Act No. 10175 cannot be used to impose duplicate punishment for the same libelous act when that would violate the constitutional protection against double jeopardy. The precise charging issue depends on whether the alleged publications are the same act or legally distinct acts.

Official legal sources

This article provides general legal information, not legal advice or an attorney-client relationship. Cyber-libel outcomes depend heavily on the exact publication, evidence, dates, parties, and procedural history. The law and official sources were checked through 18 September 2026.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.