Quick answer

To file a cyber libel complaint in the Philippines, the offended person should promptly preserve the online material, identify the author, establish the required elements, and file a properly sworn complaint-affidavit with supporting evidence before the appropriate City or Provincial Prosecutor’s Office. The criminal offense generally prescribes one year from discovery of the allegedly defamatory material by the offended party, the authorities, or their agents—not necessarily from the posting date. Filing the criminal complaint with the prosecutor interrupts that period.

To defend, do not ignore a subpoena. File a sworn counter-affidavit and supporting evidence by the date stated in the subpoena, which must ordinarily give the respondent at least 10 calendar days from receipt. Examine authorship, publication, identification, defamatory meaning, malice, privilege, venue, prescription, and the integrity of the electronic evidence.

Not every false, insulting, or damaging online statement is cyber libel. The prosecution must establish every legal element and the respondent’s identity as the author. Truth, fair comment, privileged communication, lack of publication, lack of identification, absence of actual malice in protected public-interest speech, and prescription may apply—but each depends on the precise words, context, parties, documents, and evidence.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the defamatory material is published through a computer system or similar information and communications technology.

A prosecutable case generally requires proof of:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person to contempt.
Publication. At least one person other than the person defamed received, viewed, or understood the statement. A message sent only to the offended person ordinarily lacks this element, but a group chat, email copied to others, public post, comment, video, podcast, or other online publication may satisfy it.
Identification. The complainant must be named or reasonably identifiable from the words and surrounding circumstances. Naming someone is not indispensable if people who know the circumstances can tell who was being discussed.
Malice. Defamatory imputations are generally presumed malicious unless the communication is privileged. In public-official, public-figure, and public-interest cases, the prosecution may have to establish actual malice—knowledge that the assertion was false or reckless disregard of whether it was true or false.
Use of a computer system or ICT. The publication must have been made online or through covered technology.
Authorship or legally attributable publication. The evidence must connect the respondent to the statement, not merely to an account bearing the respondent’s name or photograph.

The exact language matters. Prosecutors and courts consider the post as a whole, including captions, images, hashtags, emojis, linked material, the surrounding thread, the audience, and the ordinary meaning readers would take from it. A harsh opinion may be protected; a supposed “opinion” that implies undisclosed, false facts may not be.

Who may be liable for a post, comment, reaction, or share?

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author of the libelous statement but invalidated the use of “aiding or abetting” liability for online libel. Merely receiving a post or pressing Like, Comment, or Share does not automatically make a person liable for the original author’s words.

That rule does not give blanket immunity to all subsequent activity. A person who adds a new defamatory caption, writes an independently defamatory comment, or creates a new publication may be treated as the author of those new words. Liability involving editors, publishers, corporate officers, or persons who caused an online publication requires a fact-specific analysis of the Cybercrime Prevention Act and the related Revised Penal Code provisions.

The deadlines that matter most

Stage	Current general rule
Filing the criminal complaint	Cyber libel prescribes in one year from discovery by the offended party, authorities, or their agents
Interrupting prescription	Filing the criminal complaint with the prosecutor interrupts the period
Responding to a subpoena	Follow the date in the subpoena; the respondent should ordinarily receive at least 10 calendar days to submit a counter-affidavit
Motion for reconsideration of the prosecutor’s resolution	Generally 15 days from receipt under the 2024 DOJ-NPS Rules
Separate civil action for defamation	Generally subject to a one-year period under Article 1147 of the Civil Code, although accrual, prior filing, reservation, and the nature of the civil claim require separate analysis

The Supreme Court’s April 8, 2026 final resolution in Causing v. People confirms that cyber libel prescribes in one year from actual discovery. A public post is not automatically deemed discovered on its posting date merely because it was accessible online.

Evidence of discovery can therefore decide a case. Preserve the message or link through which the complainant first learned of the post, the date it was opened, any immediate response, and communications showing earlier knowledge. For the defense, look for earlier reactions, comments, threats to sue, reports, or messages demonstrating that the complainant or an authorized agent discovered the material sooner.

Do not assume that a demand letter, platform report, barangay blotter, takedown request, or pending police inquiry stops the one-year period. The safe course is to file the proper sworn criminal complaint with the prosecution office before the deadline. Conversely, a respondent asserting prescription must support the asserted discovery date with evidence; a bare allegation may not be enough.

Preserve the online evidence before taking action

Whether filing or defending, preserve the complete record before a post is edited, deleted, restricted, or taken down.

Keep:

Screenshots showing the exact words, images, account name, profile details, date, time, reactions, comments, and visible URL;
A screen recording showing how the post is reached from the account or page;
The original URL, post ID, message link, email headers, chat export, or downloaded page;
The full conversation or thread—not only the allegedly defamatory sentence;
The original file and available metadata for videos, audio recordings, photographs, and documents;
Names and contact information of people who personally saw or received the material;
Evidence of when the complainant first discovered it;
Evidence connecting the account and post to the alleged author;
Proof of harm, such as canceled transactions, employment communications, client messages, or testimony from people whose view of the complainant changed;
For the defense, research files, source documents, interview notes, official records, and communications showing verification, good faith, motive, context, or lack of authorship.

Do not crop away context, alter files, fabricate a reenactment, access another person’s account without authority, or wipe a device. A screenshot can be evidence, but its authenticity, completeness, and connection to the accused may be challenged.

The Supreme Court has clarified that ownership, access, and authorship of a social-media account or post may be proved by direct or circumstantial evidence. Relevant evidence can include admissions, eyewitness testimony, distinctive information or writing patterns, conduct consistent with the post, linked email or telephone records, platform or telecommunications records, device examinations, and geolocation. Provider records or forensic reports can be useful but are not indispensable in every case.

If platform or subscriber data is important, approach counsel or a cybercrime law-enforcement unit quickly. Private individuals cannot simply compel confidential platform data. Preservation, disclosure, interception, and examination of computer data are governed by the Cybercrime Prevention Act and the Supreme Court’s cybercrime-warrant rules.

How to file a cyber libel complaint

1. Test the facts against every element

Write down:

The exact allegedly defamatory words;
Their language and accurate translation, if needed;
Why they refer to the complainant;
Who else received or viewed them;
Why their ordinary meaning is defamatory;
Why the respondent is believed to be the author;
The date and manner of discovery;
The place supporting venue;
Whether the subject involves public duties, a public controversy, journalism, a complaint to an authority, or another potentially privileged occasion.

An angry or embarrassing post is not automatically criminal. Filing without evidence of authorship, third-party publication, identification, or malice can result in dismissal.

2. Determine the proper place of filing

Cyber libel cases are tried by a designated Regional Trial Court acting as a cybercrime court. Under the Rule on Cybercrime Warrants, the criminal action may be filed in the province or city:

Where the offense or any element occurred;
Where any part of the computer system used is situated; or
Where any of the damage to the natural or juridical person occurred.

The first court properly acquiring jurisdiction excludes the others. The complaint should allege concrete venue facts; merely saying that an internet post could be viewed everywhere is risky. Before filing, confirm the correct prosecution office and designated cybercrime court for the facts.

3. Prepare the sworn complaint and attachments

The usual filing package includes:

A completed and sworn NPS Investigation Data Form;
A detailed complaint-affidavit based on personal knowledge;
Affidavits of witnesses who viewed the post, can identify the complainant, or possess other relevant knowledge;
Printouts, screenshots, recordings, URLs, and electronic files;
Evidence supporting authorship and account control;
Proof of discovery date and venue;
Supporting official records, correspondence, or proof of harm;
Authority to act if filing for a corporation or through an authorized representative.

Follow the current documentary and copy requirements of the receiving office. The DOJ maintains an official preliminary-investigation filing checklist.

4. File with the proper prosecution office

File with the appropriate Office of the City Prosecutor or Provincial Prosecutor. The NBI Cybercrime Division or PNP Anti-Cybercrime Group may assist with investigation and evidence that requires lawful government process, but law-enforcement assistance is not a substitute for timely filing with the prosecutor.

A demand to retract or apologize is not a legal prerequisite. It may resolve a dispute or help establish later conduct, but waiting for a response can consume the one-year prescriptive period.

5. Participate in the preliminary investigation

Cyber libel carries a prescribed imprisonment range extending beyond six years, so it falls under the regular preliminary-investigation process in the 2024 DOJ-NPS Rules.

The prosecutor applies the standard of prima facie evidence with reasonable certainty of conviction. The evidence must be credible, admissible, preservable, and capable of proving every element and the responsible person’s identity.

The prosecutor may:

Recommend outright dismissal if the evidence is insufficient;
Issue a subpoena and receive the respondent’s counter-affidavit;
Consider the case submitted after the counter-affidavit;
Conduct a physical or authorized virtual clarificatory hearing;
Permit a reply-affidavit and rejoinder when necessary; or
Require production of material records or sworn statements through authorized process.

Electronic filing and virtual proceedings are available only under the governing rules and the prosecutor’s directions. Do not assume that emailing an initial complaint or pleading to an address found online constitutes valid filing. Follow the official order, email address, hard-copy requirement, and deadline issued in the particular case.

6. Act immediately on the resolution

If the complaint is dismissed, an aggrieved complainant generally has 15 days from receipt to move for reconsideration. The respondent has the same general period to challenge an adverse resolution at the prosecution level.

Further review may be available under DOJ appeal rules, depending on which prosecution official issued the resolution and which court has cognizance of the offense. A petition for review does not necessarily stop a court case already filed; the party may need to seek suspension separately. Because these remedy periods are short and routing errors can be fatal, obtain case-specific advice immediately upon receipt.

How to defend against a cyber libel complaint

1. Do not ignore the subpoena

Record the exact date and manner of receipt. Obtain a complete copy of the complaint-affidavit and every attachment. The date in the subpoena controls submission of the counter-affidavit, subject to the required response period.

Failure to appear or submit a counter-affidavit without justification may cause the prosecutor to resolve the case using only the complainant’s evidence. A motion to dismiss should not be used as a substitute for the required counter-affidavit.

2. Preserve the account, device, and complete context

Do not delete the post, reset the account, wipe the device, fabricate an “account hacked” explanation, or ask witnesses to coordinate stories. Preserve login alerts, access history, recovery emails, device records, drafts, source material, and the full thread.

Deletion and apology may sometimes be relevant to mitigation, but they do not automatically erase a completed offense. Preserve first, then obtain advice before changing anything.

3. Prepare a specific, evidence-based counter-affidavit

Address each factual allegation separately. Attach admissible evidence supporting:

Lack of authorship or account access;
Account compromise or access by another person;
The complete context and intended meaning;
Absence of third-party publication;
Failure to identify the complainant;
Truth and source records;
Good-faith verification;
Privilege or performance of a duty;
Public-interest context and absence of actual malice;
The complainant’s earlier discovery of the post;
Improper venue or other jurisdictional facts.

A denial is stronger when supported by records and witnesses. If the defense is account compromise, preserve security alerts, reports to the platform, recovery records, unfamiliar-device notices, and contemporaneous messages—not merely a later assertion that the account was hacked.

4. Examine the principal defenses

No defamatory imputation

The words may be criticism, rhetorical exaggeration, satire, or an opinion that does not assert defamatory facts. Context controls. Labels such as “opinion,” “allegedly,” or “for awareness only” do not automatically protect a factual accusation.

No publication

There must be communication to someone other than the offended person. A private message sent only to that person ordinarily does not satisfy publication, although forwarding, group recipients, copied emails, or later online posting may.

No identification

The complainant must be identifiable to recipients. A vague statement about a broad, unidentifiable group may fail, while initials, photographs, job descriptions, or contextual clues may be sufficient.

No authorship or reliable attribution

A profile name or photograph does not conclusively establish who controlled the account at the relevant time or composed a particular post. Ownership, access, and actual authorship should be examined separately.

Privileged communication

Article 354 of the Revised Penal Code recognizes qualified privileges, including certain private communications made in the performance of a legal, moral, or social duty and fair, true, good-faith reports of non-confidential official proceedings or official acts. The communication must remain within the privilege’s purpose and proper audience. Excessive publication, unnecessary defamatory remarks, or actual malice can defeat a qualified privilege.

Relevant statements made in judicial or legislative proceedings may receive stronger protection, but relevance, the speaker’s role, and the occasion still require legal analysis.

Truth, good motives, and justifiable ends

Truth is important but is not an automatic defense in every criminal-libel case. Article 361 generally requires proof that the matter was true and published with good motives and for justifiable ends. It also contains a specific rule concerning imputations against government employees relating to their official duties.

Preserve the records that existed when the statement was made. A source document discovered only after publication may prove truth, but it may not establish the author’s original good faith.

Fair comment and public-interest speech

Honest comment on matters of public interest may be protected when based on established facts and made without actual malice. Public officials and public figures receive less protection from criticism concerning public conduct than private individuals, but knowingly false statements and reckless accusations remain actionable.

“Reckless disregard” is more than ordinary carelessness. The inquiry may include whether the author entertained serious doubts, ignored obvious reasons to question the accusation, fabricated details, or deliberately avoided readily available verification.

Prescription

The defense should identify when the offended party, authorities, or their agents actually discovered the material and when the criminal complaint was filed. Reactions, messages, prior demands, reports, or witness testimony may establish earlier discovery.

5. Respond quickly after an adverse resolution

A respondent generally has 15 days from receipt to seek reconsideration under the regular DOJ-NPS preliminary-investigation rules. If an Information has already been filed, review remedies at both the prosecution and court levels. A DOJ petition for review does not automatically suspend judicial proceedings.

What happens after an Information is filed?

The prosecutor files the Information in the designated cybercrime court. The judge independently evaluates probable cause for issuing a warrant of arrest. The accused may also raise authorized objections before the court, including a motion to quash when a recognized ground—such as prescription, lack of jurisdiction, or failure of the Information to charge an offense—is genuinely present.

Cyber libel is bailable before conviction. If a warrant has been issued or is imminent, arrange counsel, voluntary surrender where appropriate, and bail promptly. Do not evade service or rely on informal assurances that the complaint will be withdrawn.

The prescribed imprisonment for online libel is one degree higher than traditional libel: prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years. Following the amendment of Article 355 and the Supreme Court’s ruling in People v. Soliman, the alternative fine is generally ₱40,000 to ₱1,500,000, or the court may impose both imprisonment and fine, depending on the applicable law and circumstances.

A conviction does not invariably require imprisonment. The Supreme Court has confirmed that a court may impose a fine instead, but this is not an entitlement. Retraction, apology, deletion, motive, the extent of publication, and other circumstances may affect penalty and damages without necessarily erasing liability.

Civil liability may be pursued with the criminal case or through an authorized independent or separately filed action. Whether the civil claim was deemed instituted, reserved, waived, previously filed, prescribed, or subject to exclusive venue must be checked from the pleadings and procedural history.

Common mistakes to avoid

For complainants

Waiting until the one-year period is nearly over;
Assuming a platform report or demand letter stopped prescription;
Filing in a convenient but unsupported location;
Attaching cropped screenshots without URLs, context, or authentication witnesses;
Accusing the account owner without proving authorship of the post;
Failing to state when and how the post was discovered;
Treating insult, criticism, or opinion as automatically libelous;
Omitting evidence relevant to privilege or public-interest speech;
Publicly repeating the accusation while the case is pending.

For respondents

Ignoring the subpoena or filing only an unsworn denial;
Substituting a motion to dismiss for the counter-affidavit;
Deleting the account, post, messages, or device data;
Contacting or threatening the complainant or witnesses;
Assuming that “it was true,” “it was only my opinion,” or “I only shared it” ends the inquiry;
Claiming account compromise without contemporaneous security evidence;
Missing the 15-day reconsideration period;
Ignoring a filed Information while pursuing DOJ review.

When legal help is urgent

Seek a Philippine criminal-law practitioner immediately when:

The one-year prescriptive period is close;
A subpoena, prosecutor’s resolution, Information, summons, or arrest warrant has been received;
The post has been deleted or platform records may disappear;
The author used an anonymous or compromised account;
The dispute involves a journalist, confidential source, public official, public figure, election, or public controversy;
Several people, corporate officers, editors, or page administrators are being accused;
The case crosses cities, provinces, or countries;
The material also involves threats, stalking, doxxing, intimate images, extortion, child sexual-abuse material, or identity theft; or
A settlement or affidavit of desistance is being proposed.

An affidavit of desistance or private settlement does not automatically terminate a criminal prosecution. Once filed, the offense is prosecuted in the name of the People of the Philippines, and the prosecutor or court must determine the legal effect of any withdrawal. Civil compromise, deletion, correction, and apology should be documented separately and carefully.

Frequently asked questions

Is a demand letter required before filing?

No. A demand, correction request, or takedown notice may be useful, but it is not a required element of cyber libel and does not safely substitute for timely filing with the prosecutor.

Can I file if the post was already deleted?

Yes, if admissible evidence can still establish the content, publication, identity, authorship, and other elements. A deleted post is usually harder to prove, making prior screenshots, witnesses, links, exports, device data, and lawful provider records important.

Is one screenshot enough?

Possibly, but relying on one screenshot is risky. Its completeness, accuracy, source, and connection to the accused may be challenged. Preserve the URL, entire thread, electronic file, witness testimony, metadata, and corroborating account or device evidence whenever available.

Can someone be charged for using a fake account?

Yes, if admissible direct or circumstantial evidence identifies the person who controlled the account and authored the post. A fake name does not prevent prosecution, but suspicion or resemblance alone is insufficient.

Does proving the statement true automatically end the case?

Not always. Article 361 generally also examines good motives and justifiable ends, with a specific rule for statements about government employees relating to official duties. Truth, privilege, public interest, and malice must be analyzed together.

Can the court impose only a fine?

Yes. The Supreme Court has confirmed that fine and imprisonment remain alternative penalties for online libel, although the court may impose imprisonment or both when justified by the law and circumstances.

Can a corporation be the offended party?

Potentially. Article 353 protects natural and juridical persons, but the statement must be capable of discrediting the identifiable corporation, and the person filing for it must have proper authority.

Does an old post become a new offense every time someone views it?

Ordinary later access does not automatically restart prescription. A deliberate repost, substantial update, or new defamatory publication may present a different issue. Whether an edit or repost constitutes a new publication depends on what was done and the evidence.

Official legal sources

This article provides general legal information, not legal advice or an attorney-client opinion. Outcomes depend on the exact words, context, parties, evidence, dates, venue, and procedural record. Philippine law and official procedures were checked through August 3, 2026.