Quick answer

To file a cyber libel case in the Philippines, promptly preserve the online material and proof of who published it, then file a sworn complaint with the prosecutor’s office that has territorial authority over the case. The complaint must establish every element of libel and show that the defamatory material was published through a computer system. A police or NBI cybercrime unit may help investigate or identify an unknown account, but the criminal case ordinarily begins through preliminary investigation before a prosecutor.

If you are accused, do not ignore a subpoena. Obtain the complete complaint and evidence, note the deadline—ordinarily 10 days from receipt under Rule 112—and submit a detailed counter-affidavit with supporting documents. Possible defenses include failure to prove authorship, publication, identification, defamatory meaning, or malice; privileged communication; truth published with good motives and for justifiable ends; protected discussion involving a public official or public figure; prescription; improper venue; and constitutional or evidentiary defects.

Time is critical. In its final April 8, 2026 resolution in Causing v. People, the Supreme Court affirmed that cyber libel prescribes in one year from discovery of the allegedly defamatory material by the offended party, the authorities, or their agents. Filing the complaint or information interrupts prescription. The actual discovery date can be disputed and must be proved from the facts—not automatically assumed to be the posting date. Causing v. People, G.R. No. 258524, April 8, 2026

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act penalizes libel, as defined under the Revised Penal Code, when committed through a computer system or a similar future technology. This can include an original defamatory post, article, caption, video, image, message, or other online publication. Republic Act No. 10175

The prosecution generally must establish:

A defamatory imputation. The material imputes a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose a natural or juridical person to contempt.
Publication. At least one person other than the person defamed received, read, viewed, or otherwise perceived the material.
Identification. The complainant is named or is sufficiently identifiable from the words, images, context, or surrounding circumstances.
Malice. The applicable kind of malice must be established, subject to the rules on presumed malice, privilege, and public officials or public figures.
Use of a computer system or information and communications technology.
Authorship or responsibility for the publication. The evidence must connect the respondent—not merely an account or device—to the material.

The prosecution bears the burden of proving guilt beyond reasonable doubt at trial. A prosecutor’s preliminary investigation does not decide guilt; it determines whether the evidence justifies filing an information in court.

What does not automatically amount to cyber libel?

An insulting, offensive, or embarrassing statement is not automatically criminal. The words must be evaluated as a whole, in their ordinary meaning, and in context.

A case may fail where:

the statement is not reasonably defamatory;
it is an opinion, criticism, satire, or rhetorical exaggeration that does not assert a provably defamatory fact;
nobody other than the complainant received it;
the complainant cannot reasonably be identified;
the prosecution cannot prove who created or published it;
the statement falls within an absolute or qualified privilege;
the required malice is absent;
the publication occurred before Republic Act No. 10175 became effective and was not later republished through a legally significant act; or
the criminal action has prescribed.

A private message sent only to the person concerned ordinarily lacks publication to a third person. A group chat, email copied to others, limited-audience post, or message forwarded to another person may satisfy publication, depending on the evidence.

Are likes, shares, comments, and reposts punishable?

The Supreme Court upheld the cyber-libel provision as to the original author, but declared it unconstitutional as applied to people who merely receive and react to a post. It also invalidated “aiding or abetting” liability in relation to cyber libel. A simple like, reaction, or routine share therefore should not be treated automatically as cyber libel.

The protection is not unlimited. A person who writes a new defamatory accusation in a comment, caption, quote-post, edited image, or separate repost may become the original author of that new publication. The content and the person’s actual participation matter. Disini v. Secretary of Justice, G.R. No. 203335, February 11, 2014

Malice, truth, and privileged communication

Private persons

Article 354 of the Revised Penal Code generally presumes malice from a defamatory imputation unless good intention and justifiable motive are shown or the communication is privileged. This presumption does not eliminate the prosecution’s duty to prove the other elements.

Truth alone is not always a complete defense. Under Article 361, acquittal generally requires proof both that the accusation was true and that it was published with good motives and for justifiable ends.

Public officials and public figures

Discussion of public affairs receives wider constitutional protection. Where the statement concerns a public official or public figure in a legally relevant context, the prosecution may have to prove actual malice: knowledge that the statement was false or reckless disregard of whether it was false.

Reckless disregard is more than carelessness. It involves a high degree of awareness of probable falsity or serious doubts about the statement’s truth. Whether a person is a public figure and whether the publication concerns a public issue are fact-sensitive questions.

Privileged communications

Article 354 recognizes qualified privileges that include:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without additional comments, of non-confidential official proceedings or acts performed by public officers in the exercise of their functions.

Qualified privilege can be defeated by proof of actual malice. Court pleadings, legislative speech, and other communications may also receive absolute or qualified protection under constitutional law and jurisprudence, but the scope depends on the occasion, relevance, audience, and manner of publication.

Simply labeling a post “opinion,” “for awareness,” “allegedly,” or “no copyright infringement intended” creates no automatic defense.

The one-year filing period

Cyber libel prescribes in one year under Articles 90 and 91 of the Revised Penal Code, as confirmed by the Supreme Court in 2026.

The period:

begins when the alleged cyber libel is discovered by the offended party, the authorities, or their agents;
is interrupted by the filing of the complaint or information;
may run again if the proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused; and
does not run while the offender is absent from the Philippines, under Article 91.

Discovery is not automatically presumed on the date of posting. Evidence of discovery may include a dated screenshot sent to the complainant, the complainant’s reply or reaction, a demand letter, a threat to sue, a platform report, a witness’s message, or other contemporaneous conduct.

Because even a short delay can produce a prescription dispute, a complainant should not wait until the final weeks of the period. An accused should preserve evidence showing the earliest date on which the complainant, authorities, or their agents actually knew of the material.

Editing, updating, or republishing old content can create separate legal questions. Do not assume that leaving an old post accessible continuously restarts the period each day, or that every minor edit necessarily constitutes republication. The nature and effect of the later act must be examined.

How to preserve online evidence

Preserve evidence before requesting deletion or blocking the account. A cropped screenshot alone may omit the facts needed to prove authenticity, context, authorship, publication, and timing.

Keep, where available:

full-page screenshots showing the account name, post, comments, date, time, URL, and surrounding context;
the original screenshot, photo, video, audio, or screen-recording files—not only compressed copies sent through messaging apps;
the exact profile, post, video, or message URL;
the date, time, device, browser, and account used to capture the material;
copies of the account profile, username history, biography, profile image, and identifying details;
comments, reactions, shares, view counts, and messages showing that third persons received the material;
earlier and later versions of an edited post;
notifications, emails, chat messages, or witness statements showing the discovery date;
messages or documents connecting the account to the suspected author;
records supporting or refuting the accusation, including official documents and source materials;
proof of harm, such as lost work, cancelled transactions, customer messages, medical records, or reasonable expenses; and
a written chronology identifying who discovered what, when, where, and how.

Do not alter files, fabricate engagement, impersonate anyone, access a private account without authority, or obtain data by hacking. Illegally obtained material may be excluded and can create separate criminal liability.

Electronic evidence must be authenticated. The person who captured or received it should be able to explain how it was obtained and why it accurately represents what appeared online. Platform or service-provider records may require lawful process.

How to file a criminal complaint

1. Assess every element

Identify the exact words, image, audio, or video claimed to be defamatory. Explain their meaning in context, how they refer to the complainant, who received them, and what connects the respondent to their creation or publication.

Do not rely only on the fact that the material came from an account bearing the respondent’s name. Account ownership and actual authorship may be different issues.

2. Confirm prescription and territorial authority

Record both the posting date and the discovery date. Determine where the complaint should be filed before submitting it. Cybercrime jurisdiction, criminal venue, the complainant’s residence, the place of publication, and the location of relevant acts can interact in technical ways.

Republic Act No. 10175 gives Regional Trial Courts jurisdiction over cybercrime violations and recognizes jurisdiction where an element occurred in the Philippines, a computer system used was wholly or partly situated here, or the specified Philippine damage requirement is met. This does not make every prosecutor’s office or RTC interchangeable. Filing in the wrong place can delay or defeat the case.

3. Prepare the complaint-affidavit

The complaint should ordinarily include:

the complainant’s and respondent’s identifying information and addresses, if known;
the exact material complained of;
the posting and discovery dates;
an explanation of defamatory meaning, identification, publication, malice, computer use, and authorship;
the relevant jurisdictional and venue facts;
a chronological factual narrative based on personal knowledge;
witness affidavits; and
properly marked supporting documents and electronic evidence.

The complaint and affidavits must be sworn before a person authorized to administer oaths. Under Rule 112, sufficient copies must be supplied for the respondents plus copies for the official file.

4. File with the proper prosecutor

Cyber libel carries a penalty requiring preliminary investigation. The criminal complaint is therefore filed with the proper city, provincial, or state prosecution office for preliminary investigation, subject to applicable jurisdictional rules.

The NBI and PNP are the principal law-enforcement authorities identified by Republic Act No. 10175. Their cybercrime units may receive reports and conduct technical investigation, especially when the publisher’s identity is unknown. An investigation or platform report, however, should not be mistaken for the timely filing needed to protect the criminal claim.

5. Request lawful preservation or disclosure when necessary

Service providers may retain subscriber, traffic, and content data only for limited periods or under their own retention practices. Republic Act No. 10175 and the Supreme Court’s Rule on Cybercrime Warrants provide legal processes for preservation, disclosure, interception, search, seizure, and examination of computer data.

A private complainant cannot compel a platform to disclose protected subscriber or content data merely by sending a demand. Coordinate promptly with counsel, the prosecutor, or an authorized cybercrime investigator where provider records are essential.

6. Participate in preliminary investigation

Under Rule 112, the investigating prosecutor ordinarily either dismisses the complaint or issues a subpoena within 10 days after filing. The respondent ordinarily has 10 days from receipt to submit counter-affidavits and evidence. The prosecutor may hold a clarificatory hearing, but parties do not have an ordinary right to cross-examine witnesses at that stage.

If probable cause is found and the reviewing authority approves, the prosecutor files an information in the proper RTC. The court independently determines whether judicial probable cause exists for a warrant of arrest or other appropriate action.

How to defend against a complaint

1. Record the date and manner of receipt

Keep the subpoena, envelope, receiving stamp, email, and attachments. The response period ordinarily runs from receipt. Do not assume that informal negotiations suspend the deadline.

2. Obtain and inventory all evidence

Verify that the subpoena includes the complaint-affidavit, witness affidavits, and supporting documents. Rule 112 permits the respondent to examine evidence not furnished with the subpoena and copy it at the respondent’s expense.

3. Submit a counter-affidavit—not a substitute motion

Rule 112 states that a motion to dismiss cannot replace the counter-affidavit. The response should address every element and attach the evidence supporting each defense.

Possible factual and legal issues include:

the account was fake, compromised, shared, or controlled by another person;
no competent evidence proves authorship;
the screenshot was cropped, edited, incomplete, or unauthenticated;
the complainant was not identified;
there was no publication to a third person;
the statement was not defamatory in context;
the material expressed protected opinion or fair comment rather than a false factual accusation;
the communication was privileged;
the accusation was true and made with good motives and for justifiable ends;
actual malice was not proved where that standard applies;
the prosecution was filed more than one year after discovery;
the alleged act occurred before the Cybercrime Prevention Act took effect;
territorial authority, venue, or jurisdiction is defective; or
the same online libel is being impermissibly charged under both ordinary libel and cyber libel.

Affidavits should be specific and based on facts the affiant can personally establish. Bare denials are usually less persuasive than account-security records, device logs, original files, correspondence, witness affidavits, source documents, or proof of prior verification.

4. Do not destroy or manipulate data

Deleting the account, wiping a device, changing timestamps, coaching witnesses, or manufacturing screenshots can seriously damage the defense and may create separate liability. Preserve relevant devices and records in their existing condition. If immediate account-security action is necessary, document what was done and why.

5. Prepare for court proceedings

If an information is filed, the RTC may issue a warrant or summons as legally appropriate. Arrange counsel and bail promptly if a warrant is possible. Before entering a plea, counsel should examine objections involving the arrest, warrant, preliminary investigation, information, prescription, jurisdiction, and venue because procedural rules may require some objections to be raised early.

The accused has the rights to remain silent, to counsel, to examine and challenge the prosecution’s evidence, to compulsory process, and to be presumed innocent until guilt is proved beyond reasonable doubt.

Penalties and civil liability

Article 355, as amended by Republic Act No. 10951, provides for ordinary written libel a penalty of prisión correccional in its minimum and medium periods, a fine from ₱40,000 to ₱1,200,000, or both, in addition to possible civil liability.

For cyber libel, Section 6 of Republic Act No. 10175 raises the applicable imprisonment penalty by one degree because information and communications technology was used. The precise sentence, fine, and application of the Indeterminate Sentence Law depend on the charge, circumstances, and judgment. Courts have discretion under applicable law and Supreme Court guidance, but a fine-only outcome should never be assumed.

A civil claim arising from the alleged offense is generally deemed included in the criminal action unless it is waived, reserved for separate filing, or filed earlier. An independent civil action under Article 33 of the Civil Code may also be available, subject to procedural rules, prescription, and the prohibition against double recovery.

The Supreme Court has ruled that charging the same online publication both as ordinary libel and as cyber libel would violate the prohibition against double jeopardy. Disini v. Secretary of Justice

Common mistakes

Waiting for a platform to answer before filing and allowing the one-year period to expire.
Counting one year only from the posting date without investigating the provable discovery date.
Submitting cropped screenshots without URLs, context, original files, or an authenticating witness.
Assuming an account name conclusively proves authorship.
Naming everyone who liked, reacted to, or mechanically shared a post without examining Disini.
Treating criticism, opinion, insult, and defamatory factual accusation as identical.
Assuming truth alone always defeats criminal libel.
Publishing the accusation again while announcing that a complaint has been filed.
Contacting, threatening, or publicly shaming witnesses or the opposing party.
Ignoring a subpoena or filing a motion to dismiss instead of a counter-affidavit.
Deleting accounts, messages, or devices after learning of a complaint.
Filing in a convenient location without confirming territorial authority and venue.
Believing a platform takedown automatically ends criminal or civil exposure.
Assuming an acquittal, dismissal, apology, or retraction automatically resolves every civil claim.

When legal help is urgent

Consult a Philippine lawyer immediately if:

the one-year period may expire soon;
the publisher uses an anonymous, fake, foreign, or compromised account;
essential subscriber or platform data may soon be deleted;
a subpoena, prosecutor’s resolution, information, warrant, or court order has been received;
police or investigators want to search, seize, or examine a device;
the material involves a journalist, public official, public figure, election, or matter of public concern;
the post was edited, revived, mirrored, or republished;
several people or publications are being charged for the same material;
the complainant or respondent is outside the Philippines;
the case includes threats, stalking, identity theft, intimate images, child sexual-abuse material, data-privacy violations, or unlawful access; or
settlement discussions could affect admissions, evidence, or pending proceedings.

If officers seek access to a phone, computer, account, or communications, ask to see the warrant and contact counsel. Do not physically resist, but do not volunteer passwords, consent, statements, or documents without understanding your rights and the warrant’s scope.

Frequently asked questions

Can I file based only on a screenshot?

A screenshot may support a complaint, but a lone screenshot can be challenged for incompleteness, manipulation, hearsay, lack of authentication, or failure to prove authorship. Preserve the original file, URL, context, capture details, and corroborating witnesses or records.

Must the defamatory post be public?

No. Publication requires communication to at least one third person, not necessarily the entire public. A restricted post, group chat, or email may qualify if someone other than the complainant received it.

Is a false statement always cyber libel?

No. The prosecution must still prove defamatory meaning, publication, identification, the required malice, computer use, authorship, and all jurisdictional facts. Some opinions, privileged communications, and protected discussions of public affairs are not punishable.

Is a true accusation automatically safe to post?

No. In a criminal libel prosecution, Article 361 generally requires truth together with good motives and justifiable ends. Privacy, data-protection, contempt, secrecy, harassment, and other laws may also apply even when information is true.

Does deleting the post prevent a case?

No. Deletion may reduce continuing harm but does not erase a completed publication or copies already preserved. Preserve evidence before deleting anything, and obtain legal advice if a dispute has begun.

Can I sue the person who merely shared the post?

Not automatically. Under Disini, people who simply receive and react to the original post cannot be punished as aiders or abettors of cyber libel. A person who adds or creates a new defamatory accusation may be responsible as the author of that new material.

When does the one-year period begin?

From actual discovery by the offended party, the authorities, or their agents—not automatically from upload. The discovery date is determined from evidence and surrounding conduct. Filing the complaint or information interrupts prescription.

Can an old online post create liability today?

A publication made before Republic Act No. 10175 took effect cannot be punished retroactively as cyber libel. A later substantive update or republication may present a different issue. Mere continued online availability should not be assumed, by itself, to create a new offense every day.

Can the parties settle?

They may discuss apology, correction, takedown, or civil settlement through counsel, but cyber libel is prosecuted in the name of the People of the Philippines. A private settlement or affidavit of desistance does not automatically compel the prosecutor or court to dismiss a criminal case.

Where can I verify the governing rules?

Official and primary materials include:

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Cyber-libel questions depend heavily on the exact words, audience, authorship evidence, discovery date, documents, and procedural history. Sources and current law were checked as of September 14, 2026.