Quick answer

To file a cyber libel case in the Philippines, the complainant generally submits a sworn complaint-affidavit and supporting digital evidence to the proper Office of the City or Provincial Prosecutor. The evidence must show a defamatory imputation, publication through a computer system, identification of the person defamed, and malice. A complaint should be filed promptly: the Supreme Court has ruled that cyber libel generally prescribes one year from discovery by the offended party, the authorities, or their agents.

To defend a case, do not ignore a prosecutor’s subpoena. Obtain counsel quickly, preserve the complete online context, and submit a sworn counter-affidavit with documents supporting defenses such as lack of authorship, lack of identification or publication, truth coupled with good motives and justifiable ends, privileged communication, fair comment, absence of actual malice where constitutionally required, prescription, or lack of territorial connection and proper venue.

Deleting a post does not necessarily erase liability or the evidence. Conversely, a screenshot alone does not automatically prove who created an account, who authored a statement, when it was published, or whether it was altered.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 punishes libel, as defined in Article 355 of the Revised Penal Code, when committed through a computer system or a similar future means.

The prosecution must ordinarily establish:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person to contempt.
Publication. At least one person other than the person defamed received, read, heard, or saw the statement.
Identifiability. The complainant was named or was reasonably identifiable from the statement and surrounding circumstances.
Malice. Malice may be presumed from a defamatory statement unless the communication is privileged or constitutional rules require proof of actual malice.
Use of a computer system. The publication occurred through Facebook, Messenger, X, TikTok, YouTube, a website, email, an online forum, or another computer-based communication system.
Authorship or legally attributable participation. The evidence must connect the respondent to the defamatory publication—not merely to the name, photograph, or device associated with an account.

Cyber libel applies to natural persons who author defamatory online statements. In Disini v. Secretary of Justice, the Supreme Court sustained the cyber-libel provision as applied to the original author but rejected an interpretation that would automatically punish people merely for receiving, reacting to, or sharing the content under the law’s aiding-or-abetting provision. Someone who adds a new defamatory statement while sharing content may, however, be treated as the author of that new statement, depending on the evidence.

Opinion, criticism, and insults are not all treated alike

Calling a statement an “opinion” does not automatically protect it. Courts consider its actual meaning, context, audience, and whether it asserts or implies a verifiable defamatory fact.

At the same time, the Constitution protects robust discussion of public affairs. Fair criticism, rhetorical exaggeration, satire, and commentary that cannot reasonably be understood as asserting a defamatory fact may fall outside punishable libel. The dividing line is highly contextual.

Criticism of public officials and public figures receives greater constitutional protection. When a statement concerns a public official’s official conduct or a public figure and a matter of public interest, liability generally requires actual malice—knowledge that the statement was false or reckless disregard of whether it was false. “Reckless disregard” requires more than carelessness or failure to investigate; the evidence must support serious doubt about truthfulness or a high degree of awareness of probable falsity.

Private individuals generally receive greater protection for their reputations. Do not assume that a person becomes a public figure merely because the person has a social-media account, a large following, or temporary online visibility.

Important defenses and exceptions

A viable defense depends on the precise words, the full thread or publication, the parties’ identities, the source documents, and how the information was obtained.

No defamatory imputation

The statement may be neutral, ambiguous, non-defamatory, or incapable of the defamatory meaning alleged. Courts assess the entire communication rather than isolated words whenever context matters.

The complainant was not identifiable

A person need not always be named. Identification may arise from photographs, job descriptions, relationships, prior posts, tags, or facts known to readers. The defense is stronger when the prosecution cannot show that a third person reasonably understood the statement to refer to the complainant.

No publication to a third person

A statement communicated only to the person allegedly defamed generally lacks the publication element. Group chats, copied emails, public posts, forwarded messages, and comments visible to others ordinarily satisfy publication.

Lack of authorship or account control

An account name, profile image, or screenshot may not by itself establish authorship beyond reasonable doubt. Relevant issues include impersonation, hacking, shared devices, administrator access, automated posting, and whether reliable account, device, subscriber, or platform records connect the accused to the post.

A bare denial is usually weak. Preserve and present objective evidence such as login alerts, account-recovery records, device histories, work schedules, reports of unauthorized access, and testimony from people with direct knowledge.

Truth, good motives, and justifiable ends

Under Article 361 of the Revised Penal Code, proof of truth is subject to specific conditions. As a general rule, truth must be accompanied by good motives and justifiable ends. The admissibility and effect of truth can also depend on whether the imputation concerns a crime or a public officer’s official duties.

A belief that a statement was true is not the same as proof that it was true. Preserve the records relied upon before publication and evidence showing why publication served a legitimate purpose.

Privileged communication

Article 354 recognizes qualified privileges, including:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments or remarks, of qualifying official proceedings or acts of public officers.

Qualified privilege is not absolute. It may be defeated by proof of actual malice. Unnecessary circulation, inflammatory additions, knowing falsity, or using the privilege as a pretext for personal attack can undermine the defense.

Statements made in judicial proceedings may be absolutely privileged when relevant to the proceeding, but privilege does not necessarily extend to republishing the same accusations on social media.

Fair comment on a matter of public interest

An honestly expressed opinion based on true or substantially accurate facts concerning a matter of public interest may receive constitutional protection. Concealing contrary facts, inventing a factual basis, or presenting a false accusation as established fact creates substantial risk.

Prescription

In Causing v. People, the Supreme Court held that cyber libel generally prescribes in one year from discovery, applying Articles 90 and 91 of the Revised Penal Code. The filing of a complaint for preliminary investigation may interrupt prescription under Article 91. The computation can depend on evidence of discovery, the date and nature of the publication, any later publication, and intervening proceedings.

Do not wait until the final weeks of the one-year period. A takedown request, demand letter, barangay proceeding, platform report, or private settlement discussion should not be assumed to interrupt criminal prescription.

The law was not yet in force

The Cybercrime Prevention Act cannot be applied retroactively to an online publication made before the law took effect. Later conduct may raise separate issues, but continued availability of old material should not automatically be treated as a new offense without a legally significant new publication attributable to the accused.

Double punishment for the same online libel

In Disini, the Supreme Court invalidated Section 7 of the Cybercrime Prevention Act insofar as it would permit punishment for the same libelous online act under both the Revised Penal Code and the cybercrime law. A single online libelous publication should not produce duplicate punishment under both provisions.

How to file a cyber libel complaint

1. Preserve the publication immediately

Save more than a cropped screenshot. Preserve:

The complete post, article, video, caption, comment, message, or email;
The account name, profile URL, username, and available account identifiers;
The exact URL or permalink;
Visible publication date and time;
The complete conversation, thread, captions, replies, attachments, and surrounding context;
Screenshots and screen recordings showing how the content was accessed;
Original electronic files and their metadata;
Names and affidavits of people who saw or received the publication;
Platform notices, reports, takedown responses, and account correspondence;
Documents disproving the accusation;
Evidence of when you first discovered the publication; and
Evidence of actual harm, such as lost clients, employment consequences, threats, or messages from readers.

Keep the original device and files when practical. Do not edit, annotate, rename, compress, or repeatedly resave the only copy. Create working copies and preserve the originals.

A notarial acknowledgment of screenshots may help establish who captured them, but notarization does not prove that their contents are authentic or true. Electronic evidence must still satisfy the applicable rules on authenticity, integrity, relevance, and admissibility.

2. Identify the correct respondent

Determine who actually authored or published the statement. Do not name account followers, reactors, group members, page administrators, or presumed associates without evidence of their own legally relevant acts.

If the author is anonymous or using a false identity, consult the NBI Cybercrime Division, the PNP Anti-Cybercrime Group, or counsel promptly. Subscriber, traffic, and content data are governed by legal process, platform policies, territorial limits, and retention periods. Private parties cannot compel disclosure merely by sending a demand.

3. Prepare a sworn complaint-affidavit

The affidavit should state facts within the complainant’s personal knowledge and clearly explain:

The exact words, images, or conduct complained of;
Why the statement is defamatory;
How the complainant is identifiable;
Who received or viewed it;
Why the respondent is believed to be the author or publisher;
When and how the complainant discovered it;
The computer system or online service used;
The relevant locations and basis for filing in the chosen prosecution office; and
The documents, electronic evidence, and witnesses supporting each element.

Attach legible, organized exhibits. Avoid exaggeration and legal conclusions unsupported by facts. Material inconsistencies can weaken credibility.

4. File with the proper prosecution office

Cyber libel commonly begins with a complaint before the appropriate Office of the City or Provincial Prosecutor. The NBI Cybercrime Division or PNP Anti-Cybercrime Group may assist with investigation and digital evidence, but the prosecutor evaluates whether a criminal Information should be filed in court.

Territorial jurisdiction and venue are fact-sensitive. Relevant locations may include where an essential element occurred, where the computer system or relevant data was situated, or where legally cognizable damage occurred. Special venue rules for libel and the circumstances of the parties may also matter. Filing wherever a post happened to be accessible is not necessarily proper.

Before filing, confirm the current documentary, copy, identification, oath, and filing-channel requirements directly with the chosen prosecution office. Electronic filing and virtual proceedings may be available under the 2024 DOJ–National Prosecution Service rules, but availability and implementation can vary by office.

5. Participate in preliminary investigation

The prosecutor evaluates whether the evidence establishes a prima facie case with reasonable certainty of conviction under the 2024 DOJ–NPS Rules on Preliminary Investigations and Inquest Proceedings.

The respondent ordinarily receives a subpoena with the complaint and supporting evidence and is given a deadline for a counter-affidavit. The prosecutor may require additional affidavits or conduct a clarificatory hearing. Observe the deadline stated in the subpoena or order; do not rely on an assumed extension.

If the prosecutor finds the required evidentiary basis, an Information may be filed in the designated Regional Trial Court. The judge independently determines whether probable cause exists for a warrant of arrest or other judicial action.

How to defend after receiving a subpoena

1. Record the date and manner of receipt

The response period is tied to service. Keep the envelope, receiving copy, email headers, acknowledgment, or other proof showing when and how the subpoena and attachments arrived.

2. Obtain the complete complaint and exhibits

Check whether every referenced attachment was served. A proper response requires the exact publication, not the complainant’s paraphrase of it.

3. Preserve evidence and stop discussing the case online

Do not delete messages, alter files, ask witnesses to coordinate stories, or pressure the complainant. Do not publish retaliatory accusations. Preservation is different from keeping defamatory material publicly accessible: counsel can advise how to preserve evidence while limiting continuing harm.

4. Prepare a sworn, evidence-based counter-affidavit

Address every element and material allegation. Where applicable, attach:

The full unedited publication and context;
Source documents and fact-checking records;
Proof of account compromise or lack of control;
Witness affidavits based on personal knowledge;
Records showing privilege or duty to communicate;
Evidence of good motives and justifiable ends;
Evidence bearing on the complainant’s public status and the public-interest issue;
A reliable timeline showing discovery and prescription;
Location and system records relevant to jurisdiction or venue; and
Prior corrections, requests for clarification, or other communications, without mischaracterizing them as automatic defenses.

A motion to dismiss should not be used as a substitute for a counter-affidavit unless the applicable rules and prosecutor expressly permit the filing to be treated that way. Missing the deadline may cause the case to be resolved on the complainant’s evidence.

5. Handle arrest and bail issues promptly

Receiving a subpoena for preliminary investigation does not itself mean that a warrant has been issued. If an Information is later filed, the judge will determine judicial probable cause.

If you learn that a warrant has been issued, speak with criminal counsel immediately about lawful surrender, recall or lifting of the warrant where proper, and bail. Do not evade service or rely on unofficial assurances that the matter has been “fixed.”

Penalties and civil liability

Article 355 of the Revised Penal Code, as amended by Republic Act No. 10951, provides imprisonment, a fine, or both for libel. Section 6 of the Cybercrime Prevention Act generally imposes a penalty one degree higher when an offense defined by the Revised Penal Code is committed through information and communications technology.

The Supreme Court has clarified that a court may, in a proper online-libel case, impose a fine instead of imprisonment. This is a matter of judicial discretion—not a guarantee—and depends on the governing penalty provisions, sentencing rules, circumstances, and the final findings of the court.

A criminal case may also include civil liability for proven injury. Damages are not automatic in whatever amount the complainant requests; their legal basis and amount must be established.

Retraction, apology, takedown, and settlement

An apology, correction, or takedown may reduce harm and can be relevant to motive, malice, damages, or sentencing. It does not automatically erase an offense already completed.

Likewise, an affidavit of desistance does not automatically compel dismissal. Cyber libel is prosecuted in the name of the People of the Philippines, so the prosecutor or court retains authority over the criminal case. Settlement of civil claims must be carefully documented and should not involve threats, fabricated statements, or improper pressure.

Before posting a correction or signing a settlement, consider whether its wording contains unnecessary admissions that could be used in the criminal case.

Common mistakes to avoid

Waiting because the post remains online and assuming the deadline has not started;
Preserving only cropped screenshots without URLs, dates, context, or original files;
Treating account ownership as conclusive proof of authorship;
Filing against everyone who reacted to or shared a post;
Assuming every false or offensive statement is legally defamatory;
Assuming “opinion,” “public interest,” or “truth” is a complete defense without satisfying its legal requirements;
Filing in a location chosen only for convenience;
Ignoring the prosecutor’s subpoena or requesting an extension only after the deadline;
Deleting relevant data after learning of a complaint;
Publicly arguing the case and creating new potentially defamatory publications;
Contacting witnesses to shape their testimony; and
Assuming a platform takedown, apology, or desistance automatically ends the criminal case.

When legal help is urgent

Seek Philippine criminal-law counsel immediately when:

The one-year prescriptive period may be close;
The author is anonymous and platform or subscriber data may disappear;
You receive a prosecutor’s subpoena, summons, Information, or warrant;
The publication involves a public official, journalist, whistleblower, workplace report, confidential source, or pending proceeding;
There are multiple publications, respondents, locations, or countries;
A device or account was seized, searched, hacked, or shared;
The case includes threats, extortion, doxxing, intimate images, stalking, or danger to a person;
Someone is demanding money or a false confession in exchange for withdrawing the case; or
You are being pressured to delete evidence or sign an affidavit you do not understand.

If there is an immediate threat to safety, contact local law enforcement or emergency services rather than treating the matter solely as a defamation dispute.

Frequently asked questions

Is every false Facebook post cyber libel?

No. The prosecution must establish all legal elements, including a defamatory imputation, publication, identification, malice under the applicable standard, use of a computer system, and attribution to the accused. Some false statements are not defamatory, and some communications are privileged.

Can a private message be cyber libel?

Potentially. A message sent only to the person defamed generally lacks publication to a third person. A message sent to another person, a group chat, or multiple recipients may satisfy publication.

Can I be charged merely for liking or sharing a post?

A reaction or bare share is not automatically cyber libel. Disini limited liability to the original author and invalidated the application of aiding-or-abetting liability to cyber libel. But adding your own defamatory caption, comment, edit, or accusation may constitute a separate publication attributable to you.

Is a screenshot enough to win a case?

Not necessarily. It may help show what appeared on a screen, but authorship, authenticity, integrity, date, publication, identity, and context may remain disputed. Strong cases preserve the original digital evidence and supporting testimony or records.

Does deleting the post prevent a complaint?

No. Cyber libel may be complete once a defamatory statement is published to a third person. Deletion may limit continued harm but does not erase preserved evidence or automatically eliminate liability.

How long does the complainant have to file?

Cyber libel generally prescribes one year from discovery by the offended party, authorities, or their agents. Filing a qualifying complaint may interrupt prescription. Because the computation can turn on disputed facts and procedural events, obtain advice well before the year expires.

Can truth alone defeat the complaint?

Not always. Article 361 generally requires truth together with good motives and justifiable ends, subject to its specific rules and the constitutional principles applicable to public-official and public-figure cases.

Can the case be withdrawn after settlement?

The complainant can express desistance and settle civil claims, but cannot unilaterally guarantee termination of a criminal prosecution. The prosecutor or court determines the legal effect.

Official legal sources

This article provides general legal information, not legal advice or an attorney-client relationship. Cyber libel outcomes depend on the exact publication, evidence, parties, dates, and procedural history. Official sources and current procedures were checked as of September 14, 2026.