Quick answer

To file a Philippine cyber libel case, preserve the online material immediately, confirm that every legal element can be proved, and file a sworn complaint with the proper city or provincial prosecutor’s office within one year from discovery of the alleged offense. If the account holder is unknown or platform records are needed, promptly seek investigative assistance from the NBI Cybercrime Division or PNP Anti-Cybercrime Group.

To defend a case, do not ignore a prosecutor’s subpoena. Preserve the complete post and account records, prepare a sworn counter-affidavit with supporting evidence, and examine authorship, publication, identification, defamatory meaning, malice, privilege, prescription, venue, and constitutional defenses. A simple like, share, or reaction is not automatically cyber libel, although a new comment or caption containing its own defamatory allegation may be treated as an original post.

Cyber libel is a criminal case, not merely a platform-reporting dispute. A takedown request, apology demand, or private negotiation does not replace timely filing and ordinarily does not stop the prescriptive period.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the publication is made through a computer system or similar technology.

In practical terms, the prosecution must establish:

Requirement	What must be shown
Defamatory imputation	The material imputes a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose a person or juridical entity to contempt.
Publication	At least one person other than the offended party received, saw, or understood the material. A message sent only to the person criticized ordinarily lacks this element; a group chat or limited-audience post may still satisfy it.
Identifiability	Readers could identify the offended party, even if the person was not expressly named.
Malice	Legal malice may be presumed from a defamatory imputation, subject to privilege and constitutional rules. In cases involving public officials or public figures and matters of public concern, actual malice may have to be proved.
Use of a computer system	The material was published through social media, a website, email, messaging service, or another qualifying digital system.
Authorship and identity	The respondent—not merely an account bearing the respondent’s name or photograph—authored or caused the publication.

The post must be evaluated as a whole. Captions, images, edited videos, memes, insinuations, questions, emojis, and surrounding comments can affect how an ordinary reader would understand it. Calling something an “opinion” does not automatically protect it if it communicates or implies a defamatory assertion of fact.

The Supreme Court upheld cyber libel as constitutional as applied to the original author, but ruled it unconstitutional as applied to people who merely receive and react to the post. A person who adds a new defamatory story in a comment or caption may nevertheless become the original author of that new statement. See Disini v. Secretary of Justice.

The one-year filing deadline

The controlling rule is now clear: cyber libel prescribes in one year from discovery of the alleged defamatory publication by the offended party, the authorities, or their agents. Publication starts the period only when publication and discovery occur on the same date.

The Supreme Court initially stated this rule in Causing v. People and, sitting en banc, affirmed it on April 8, 2026. See the 2026 en banc resolution in Causing v. People.

Important consequences follow:

Record exactly when and how the post was first discovered.
Preserve the message, email, screenshot, or witness testimony showing discovery.
The respondent may present evidence that the complainant, authorities, or their agents actually discovered it earlier.
If prescription is not apparent from the face of the charge, it is generally a factual defense that the accused must prove.
Filing the complaint or information interrupts prescription. A platform complaint, demand letter, mediation attempt, or private settlement discussion ordinarily does not.
The period may run again if proceedings end without conviction or acquittal or are unjustifiably stopped for a reason not attributable to the accused.
Under Article 91 of the Revised Penal Code, prescription does not run while the offender is absent from the Philippines.

Because the deadline is short and disputes about discovery are fact-sensitive, do not wait until the final days.

What evidence should be preserved?

Preserve evidence before asking the platform or author to remove the content.

The publication itself

Save:

Full-page screenshots showing the exact words, images, caption, account name, handle, profile URL, date, time, and visible audience information
The direct URL and any post, comment, video, or message identifiers
A screen recording that begins at the account profile and scrolls through the complete post and surrounding context
The original image, audio, or video file at its highest available quality
Downloaded or exported account and conversation data, when lawfully accessible
Replies, reactions, shares, and later edits relevant to meaning, reach, or authorship
The device on which the material was received or viewed

Avoid cropping, annotating, recompressing, or editing the only copy. Keep the original files and make separate working copies.

Evidence of publication and identification

Obtain affidavits from people who saw the material and understood whom it referred to. Each witness should explain:

Where and when the material was seen
What account or channel published it
Why the witness understood it to refer to the complainant
Whether the witness saw it before it was shown by the complainant

Evidence linking the respondent to the account

A displayed name or profile photograph can be copied or spoofed. Preserve lawful evidence such as:

Admissions by the account holder
Prior messages from the same account
Consistent account identifiers and known profile history
Emails or notifications linking the account to the person
Witnesses with personal knowledge of account control
Subscriber, traffic, or device data obtained through lawful investigation and appropriate court process

Private persons generally cannot compel a platform to reveal subscriber information. Law enforcement may seek preservation, disclosure, search, or examination orders under the Cybercrime Prevention Act and the Rule on Cybercrime Warrants.

Evidence relevant to malice, truth, or damages

Preserve:

The author’s sources and verification efforts
Official records supporting or contradicting the allegation
Prior corrections, warnings, or demands
Messages suggesting hostility, retaliation, fabrication, or knowledge of falsity
The full conversation showing the purpose and intended recipient
Employment, business, medical, or other records supporting claimed damages

Electronic evidence must be authenticated. Under the Rules on Electronic Evidence, the party offering an electronic document bears the burden of proving its authenticity. Screenshots can be useful, but a screenshot alone may not establish who controlled the account, whether the material was altered, or who actually saw it.

How to file a complaint

1. Confirm that cyber libel is the correct charge

Ask whether the material contains a legally defamatory imputation, was communicated to a third person, identifies the complainant, and can be tied to the respondent.

Cyber libel may not be the only or correct remedy when the conduct primarily involves threats, blackmail, identity theft, non-consensual intimate material, doxxing, stalking, or unlawful access. Those facts may engage different laws and require faster protective action.

2. Determine the proper venue

Cyber libel cases are tried in designated cybercrime Regional Trial Courts. Under the Rule on Cybercrime Warrants, the criminal action may be filed in the designated court of the province or city:

Where the offense or any element occurred;
Where any part of the computer system used is situated; or
Where any of the damage to a natural or juridical person took place.

The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of the others. See the Supreme Court’s discussion of Section 2.1 in Tieng v. Alcuaz.

Venue should be supported by specific allegations and evidence. Do not assume that the material’s mere accessibility in a city automatically establishes proper venue. Before filing, verify with counsel or the prosecution office that the territorial facts support the eventual information.

3. Use law enforcement when identification or forensic work is needed

If the author is unknown, the account may be fake, or platform data must be preserved, promptly approach a cybercrime investigator. The NBI’s investigative-assistance service accepts complaints involving computer crimes, and the NBI also maintains an online complaint page.

An online report may begin the process, but investigators may still require personal appearance, sworn statements, original devices, and supporting records. Investigative reporting does not necessarily equal the filing of a complaint that interrupts prescription, so confirm the docketing status and filing date.

4. Prepare the complaint-affidavit

The affidavit should state, in a clear chronological narrative:

The names and addresses of the complainant and respondent, if known
The exact defamatory words in their original language, with an accurate translation when necessary
The complete context of the post
When, where, and through what digital system it was published
Who saw it and how publication can be proved
Why readers could identify the complainant
Why the statement is defamatory
The evidence identifying the respondent as author
When and how the complainant or authorities discovered it
Facts establishing proper venue
Facts and documents relevant to malice
A list of attached witness affidavits and electronic evidence

Do not exaggerate, omit unfavorable context, or state assumptions as personal knowledge. A knowingly false sworn statement can create separate legal problems.

5. File with the proper prosecution office

Regular preliminary investigation is initiated by filing the original complaint-affidavit, two duplicate copies for the official file, and enough additional copies for every respondent, together with the required NPS Investigation Data Form, witness affidavits, and supporting evidence. Check the receiving office’s current requirements for identification, oath administration, payment, electronic media, and local e-filing.

The governing framework is DOJ Department Circular No. 015, the 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings. The Supreme Court recognized the DOJ’s authority to issue these rules in A.M. No. 24-02-09-SC.

6. Participate in the preliminary investigation

The prosecutor applies the standard of prima facie evidence with reasonable certainty of conviction. The available evidence must be admissible, credible, preservable, and capable of proving every element and the responsible person’s identity.

Under the current regular procedure:

Within five calendar days after receiving the complete records, the investigating prosecutor generally recommends dismissal or issues a subpoena.
The hearing set in the subpoena should not exceed 30 days from the prosecutor’s receipt of the complete records.
The respondent must be given at least 10 days from receipt of the subpoena and complaint to prepare the counter-affidavit.
If necessary, the prosecutor may require a reply-affidavit and rejoinder-affidavit, generally within the specified 10-day periods.
Preliminary investigations are generally targeted for resolution within 60 calendar days from assignment, subject to a maximum 30-day extension in specified cases.

These office-processing periods do not extend the one-year period for initially filing the complaint.

7. Act promptly on the resolution

An aggrieved party may generally file a motion for reconsideration within 15 days from receipt of the prosecutor’s resolution. Further review is governed by applicable DOJ circulars and may require a motion asking the trial court to suspend proceedings. A DOJ appeal does not automatically stop a case already filed in court.

If the prosecutor approves the filing of an information, the case proceeds to the designated RTC. The judge independently evaluates judicial probable cause and may dismiss the case, issue a warrant of arrest, or issue another appropriate order.

How to defend against a complaint

Respond immediately to the subpoena

A prosecutor’s subpoena is not an arrest warrant, but ignoring it can cause the complaint to be resolved using only the complainant’s evidence.

Read the subpoena and attachments carefully. Calendar the hearing and filing date from actual receipt. Do not assume that a motion to dismiss can replace a sworn counter-affidavit. A response should address both the facts and every legal element, supported by witness affidavits and documents.

Preserve—not delete—the relevant material

Preserve the entire account, post history, device data, drafts, messages, sources, and editing history. Deleting content after receiving a complaint may destroy helpful context and can be portrayed as concealment.

Stop discussing the complainant or case publicly. Do not ask witnesses to change their accounts, fabricate records, or coordinate stories.

Examine each defense separately

Possible defenses depend on the evidence and may include:

No authorship: The respondent did not create, control, or publish through the account.
No defamatory imputation: The words, read in context, do not impute a crime, vice, defect, or dishonorable circumstance.
No publication: No person other than the offended party received or understood the material.
No identification: Readers could not reasonably identify the complainant.
Simple reaction or sharing: The respondent merely received or reacted to another person’s post without creating a new defamatory allegation.
Qualified privilege: The communication was made in good faith to a proper recipient in the performance of a legal, moral, or social duty.
Fair and true official report: The material was a good-faith, fair, and true report—without defamatory additions—of a non-confidential official proceeding or an official act.
Fair comment on public affairs: The material concerns a matter of legitimate public interest and falls within constitutional protections, subject to its factual basis and the presence or absence of actual malice.
Lack of actual malice: When the complainant is a public official or public figure and the subject is a matter of public concern, the prosecution may need to prove that the statement was made knowing it was false or with reckless disregard for whether it was false. See Guingguing v. Court of Appeals.
Prescription: More than one year passed between discovery and the filing that interrupted prescription.
Improper venue or lack of territorial jurisdiction: The information does not allege or the evidence does not establish a valid territorial basis.
Non-retroactivity: An online publication made before the Cybercrime Prevention Act took effect on October 3, 2012 cannot be punished as cyber libel merely because it remained accessible afterward. A claimed later republication or materially new post requires separate factual analysis.
Duplicate prosecution: The same publication cannot be punished both as traditional libel and cyber libel when the charges concern the same offense. Disini held that doing so would violate double jeopardy.

Is truth a complete defense?

Not automatically.

Article 361 of the Revised Penal Code allows truth to be presented in a criminal libel case. Acquittal generally requires proof both that the material was true and that it was published with good motives and for justifiable ends.

Proof of truth concerning an imputed act or omission that is not itself a crime is generally restricted, except when the imputation concerns a government employee’s discharge of official duties. Public-official, public-figure, privilege, and actual-malice rules can change the analysis, so the exact words, subject, sources, and purpose matter.

A person relying on truth should preserve the evidence that existed when the statement was published. Unsupported suspicion, anonymous gossip, or later-discovered material may not establish that the author acted responsibly or without actual malice at the time.

Penalties and civil liability

Traditional libel under Article 355, as amended by Republic Act No. 10951, carries imprisonment, a fine, or both. Because the Cybercrime Prevention Act increases the penalty by one degree, the prescribed imprisonment for cyber libel is four years, two months and one day to eight years.

If the court selects a fine, the Supreme Court has held that the range for online libel is ₱40,000 to ₱1,500,000. A fine may be imposed instead of imprisonment, but a fine-only sentence is not guaranteed. See People v. Soliman.

Cyber libel is bailable as a matter of right before conviction. A complaint or subpoena does not by itself authorize arrest. If an information and warrant have already been issued, counsel can coordinate voluntary surrender, court appearance, and bail. The judge determines the amount and conditions.

Civil liability may also be pursued. Subject to the Rules of Criminal Procedure, the civil action arising from the offense is generally deemed included in the criminal case unless waived, reserved, or previously filed. Article 33 of the Civil Code also recognizes an independent civil action for defamation, but there can be no double recovery for the same injury. Civil venue, prescription, pleading, and evidentiary rules should be evaluated separately.

Retraction, apology, settlement, and desistance

Removing a post, correcting it, or apologizing does not erase a completed offense. These steps may still affect proof of malice, damages, settlement, or sentencing.

A respondent should obtain legal advice before issuing a public apology because it may also be used as an admission of authorship or publication. A complainant should preserve the original post before requesting removal.

Cyber libel is prosecuted in the name of the People of the Philippines. An affidavit of desistance or private settlement does not automatically dismiss the criminal case. Before an information is filed, the prosecutor evaluates whether sufficient evidence remains. After filing, dismissal is subject to the court’s independent judgment.

Common mistakes

Waiting for a platform to act while the one-year period continues to run
Saving only a cropped screenshot without the URL, profile, date, and context
Failing to preserve evidence of the actual discovery date
Assuming that a profile name proves who authored the post
Filing wherever the post can be opened without establishing proper venue
Naming every liker or sharer as an accused despite Disini
Treating truth as an automatic defense without proving good motives and justifiable ends
Ignoring a prosecutor’s subpoena
Filing an unsworn denial instead of a supported counter-affidavit
Deleting account data after receiving notice of a complaint
Continuing the online dispute while the case is pending
Assuming an apology, demand letter, or settlement negotiation stops prescription
Posting court submissions that contain private, confidential, or sensitive personal information

When legal help is urgent

Consult a Philippine criminal lawyer immediately when:

The one-year filing deadline is approaching
The post or account may soon disappear
The account holder is unknown and platform data must be preserved
A prosecutor’s subpoena, court summons, search warrant, or arrest warrant has been received
The publication involves a journalist, public official, public figure, or matter of public concern
The same publication is charged under multiple laws or in multiple venues
Police request access to a device, account, password, or private messages
A person demands money in exchange for not publishing material
The posts include threats, stalking, doxxing, intimate images, or danger to a child
A criminal information has already been filed and arraignment is imminent

Frequently asked questions

Is one screenshot enough to win a cyber libel case?

Usually not by itself. The screenshot must be authenticated, and separate evidence may be needed to prove authorship, publication to a third person, identification, context, discovery date, and venue.

Can a private Facebook post or group-chat message be cyber libel?

Yes. “Publication” does not require access by the general public. Communication to even one person other than the offended party may be sufficient.

Can someone be charged merely for liking or sharing a post?

A person who simply receives and reacts to a post is not liable for cyber libel under the rule in Disini. A person who adds a new defamatory caption, allegation, or story may be liable as the author of that new publication.

When does the one-year period begin?

From discovery by the offended party, the authorities, or their agents—not necessarily from the upload date. If publication and discovery occurred together, that date starts the period.

Will filing a report with Facebook stop prescription?

No. A platform report is not the complaint or information contemplated by Article 91. Confirm that a formal complaint has been filed and docketed with the proper government office.

Can the respondent be arrested as soon as the complaint is filed?

Ordinarily, no. The prosecutor first conducts a preliminary investigation. If an information is later filed, the RTC judge independently decides whether a warrant should issue.

Can the case continue if the complainant withdraws?

Yes. Desistance may weaken the evidence but does not automatically end a public criminal prosecution, particularly after the information has been filed in court.

Primary and official references

This article provides general Philippine legal information, not legal advice or an assessment of any particular post, document, or case. Applicable remedies and defenses depend on the exact words, evidence, parties, discovery date, and venue. Sources and current procedural rules were checked as of July 26, 2026.