Quick answer

Cyber libel is generally committed when a person knowingly publishes online a defamatory statement that identifies another person and tends to dishonor, discredit, or expose that person to contempt. It is punished under Article 353 of the Revised Penal Code, in relation to Section 4(c)(4) of the Cybercrime Prevention Act of 2012.

If you are filing a complaint, preserve the complete online publication and evidence connecting it to the respondent, then prepare a sworn complaint supported by witness affidavits and authenticated records for the proper prosecutor’s office. If you are defending a complaint, do not ignore the subpoena: obtain the complete case record, preserve your own evidence, and submit a detailed counter-affidavit within the deadline stated in the subpoena.

Act quickly. The Supreme Court has ruled that cyber libel generally prescribes in one year from discovery by the offended party, the authorities, or their agents. The date of discovery, any later republication, and the filing that allegedly interrupted prescription may all require careful factual and legal analysis.

What the prosecution must prove

Cyber libel applies the elements of ordinary libel to a publication made through a computer system or another similar digital means. The prosecution must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, condition, status, or act or omission that tends to dishonor, discredit, or expose a person to contempt.
Publication. The statement was communicated to at least one person other than the person defamed. A private message seen only by the subject may not satisfy publication, although forwarding it to others may change the analysis.
Identifiability. The offended person must be named or sufficiently identifiable from the words, images, surrounding facts, or context. It is not always necessary to use the person’s full name.
Malice. Malice may be presumed from a defamatory publication unless the communication falls within a recognized exception. When the statement concerns a public official, public figure, or matter of public interest, constitutional and jurisprudential protections may require proof of actual malice—knowledge that the statement was false or reckless disregard of whether it was false.
Responsibility for the publication. The prosecution must connect the accused to the creation or publication of the offending content. A profile name, photograph, or screenshot alone does not automatically prove who controlled an account.
Use of a computer system. The publication must have been made online or through information and communications technology, such as a social-media post, website article, email sent to third persons, online video, or group chat.

The whole publication and its context matter. Courts do not ordinarily decide defamatory meaning by isolating one word from the rest of the communication.

Not every offensive online statement is cyber libel

Cyber libel does not make every insult, criticism, negative review, or false statement criminal. Depending on the facts, a complaint may fail because:

the words are not defamatory in their ordinary meaning or context;
the complainant is not identifiable;
nobody other than the complainant received the communication;
the respondent did not create, post, or control the content;
the statement is a protected opinion rather than a false assertion of fact;
the imputation is true and was published with good motives and for justifiable ends, where the legal requirements for that defense are met;
the communication is privileged;
the prosecution cannot establish the required form of malice;
the complaint was filed in the wrong venue;
the offense had already prescribed; or
the publication occurred before the Cybercrime Prevention Act took effect.

Truth is not a universal or automatic defense to criminal libel. Article 361 of the Revised Penal Code imposes additional requirements, and special rules apply when the imputation concerns a crime or a public officer’s official duties. A respondent should therefore avoid relying on “but it was true” without evidence and legal advice.

Original posts, shares, comments, and reactions

In Disini v. Secretary of Justice, the Supreme Court upheld the cyber-libel provision as applied to the author of the libelous online statement. It struck down the application of the Cybercrime Prevention Act’s broad aiding-or-abetting provision to online libel because it could indiscriminately cover actions such as liking, commenting on, or sharing a post.

That does not give every person who clicks “share” complete immunity. A person who adds a new defamatory caption, edits the allegation, independently republishes it as their own statement, or otherwise becomes an author may face liability based on that new content. The exact words and conduct must be examined.

A later substantial republication may also present different prescription issues from a passive, unchanged copy that merely remains accessible online. Do not assume that every view or continued availability of an old post restarts the one-year period.

The one-year deadline

In Causing v. People, G.R. No. 258524, the Supreme Court held that cyber libel prescribes in one year, applying Article 90 of the Revised Penal Code rather than the longer period previously associated with offenses under special laws.

Under Article 91, prescription generally begins when the offense is discovered by the offended party, the authorities, or their agents. It may be interrupted by the filing of a complaint or information and may run again if proceedings end without the accused being convicted or acquitted or are unjustifiably stopped for a reason not attributable to the accused.

Because prescription can determine whether a case may proceed at all, record these dates immediately:

when the publication first appeared;
when the complainant first saw or learned of it;
who discovered it and how;
whether the content was edited or reposted;
when the complaint was filed; and
whether an earlier proceeding was dismissed or terminated.

Do not wait until the last day. Questions about discovery, republication, interruption, weekends, holidays, and the proper initiating complaint require case-specific advice.

How to file a cyber-libel complaint

1. Preserve the publication before contacting the author

Save the evidence in its original form as far as possible. Keep:

full-page screenshots showing the post, account name, date, time, comments, and surrounding context;
the complete URL or other unique content identifier;
screen recordings showing how the page or conversation is reached;
downloaded copies of images, videos, emails, and attachments;
the original device and unedited files;
message headers and available metadata;
names and contact details of people who saw the publication;
proof of when and where you first discovered it;
records showing why the post referred to you; and
records of actual consequences, such as lost work, cancelled contracts, threats, or requests for explanation.

Avoid cropping out context or relying only on printed screenshots. Record the collection process, including the date, device, account used, and person who captured the material. Back up the files without altering the originals.

A takedown request can be useful, but make a reliable copy first. Deletion may stop further harm while also making proof more difficult.

2. Identify the proper respondent

Do not assume that the name displayed on an account proves who operated it. Collect lawful evidence connecting the publication to a person, such as admissions, linked contact details, consistent account activity, witnesses with personal knowledge, or properly obtained provider records.

Do not hack an account, impersonate someone, buy unlawfully obtained data, or publicly accuse a suspected author without adequate proof. Law-enforcement investigators may seek subscriber or traffic data through the procedures and judicial warrants authorized by the Cybercrime Prevention Act and the Supreme Court’s Rule on Cybercrime Warrants.

3. Check venue before filing

Cybercrime cases fall within the jurisdiction of designated Regional Trial Courts. Under the Rule on Cybercrime Warrants, the criminal action may generally be filed before the designated cybercrime court in the province or city:

where the offense or any element occurred;
where any part of the computer system used is situated; or
where any damage to a natural or juridical person took place.

Venue in criminal cases is jurisdictional, and internet accessibility everywhere does not eliminate the need to allege and prove a legally sufficient connection to the chosen place. The prosecutor’s office that conducts the preliminary investigation and the court that may ultimately try the case should be selected with this in mind.

4. Prepare the complaint-affidavit

The complaint should state facts within the affiant’s personal knowledge, including:

the identities and addresses of the parties, if known;
the exact words, images, or video complained of;
the complete context and why the material is defamatory;
how the complainant was identified;
who received or viewed the publication;
why the respondent is believed to have authored or published it;
when and where the publication and discovery occurred;
facts supporting malice, when relevant;
facts supporting the selected venue; and
a numbered inventory of supporting evidence.

Attach the affidavits of witnesses with personal knowledge and properly mark each supporting document. The affidavit must be sworn before an authorized officer and must be truthful. Deliberately false statements can create separate legal exposure.

5. File with the proper prosecution office

A criminal complaint is ordinarily lodged for preliminary investigation with the appropriate Office of the City Prosecutor, Office of the Provincial Prosecutor, or other competent prosecution office. The National Bureau of Investigation or the Philippine National Police may assist in investigating and preserving digital evidence, but an investigative report does not replace the prosecutor’s determination.

Filing requirements and accepted submission methods can differ by office. Confirm directly with the chosen prosecution office:

the current filing channel;
the required number and format of copies;
whether electronic filing is available;
identification and notarization requirements; and
how large digital files or physical devices should be submitted.

Obtain a stamped receiving copy or official electronic acknowledgment showing the date and time of filing.

6. Participate in preliminary investigation

The prosecutor evaluates whether the evidence meets the governing threshold for filing an information in court. A clarification hearing is not an automatic full trial, and the parties ordinarily do not cross-examine witnesses at this stage.

If the prosecutor dismisses the complaint, or finds sufficient basis to file a case, any motion for reconsideration or petition for review must comply with the deadline and procedure stated in the resolution and the applicable DOJ rules. Obtain legal advice immediately upon receipt; do not assume that seeking reconsideration automatically extends every other remedy.

How to defend a cyber-libel complaint

1. Do not ignore the subpoena

Note the exact date and manner of receipt. Under the prosecution rules, the subpoena should provide the complaint and supporting material and give the respondent time to submit a counter-affidavit—generally at least ten days from receipt under the current preliminary-investigation framework.

Follow the specific date in the subpoena. If essential records are missing or more time is genuinely necessary, request appropriate relief promptly and before the deadline. An extension is not automatic.

Failure to respond can allow the prosecutor to resolve the case on the complainant’s evidence.

2. Obtain and inventory the complete record

Check whether you received:

the complaint-affidavit;
all witness affidavits;
every screenshot, printout, file, and attachment;
the complete publication rather than selected excerpts;
proof of account ownership or control;
proof of publication to a third person;
evidence supporting venue; and
evidence concerning the date of discovery.

Document missing or unreadable exhibits. Compare screenshots with any original content you lawfully possess.

3. Preserve your evidence and stop informal arguments

Save account-access records, devices, drafts, correspondence, source materials, research notes, editorial communications, and records showing where you were and who had access to the account.

Do not delete posts, messages, accounts, or devices after learning of a complaint. Deletion may destroy helpful evidence and can be portrayed as consciousness of wrongdoing. Do not pressure the complainant or witnesses, fabricate explanations, ask someone to alter records, or post new accusations about the dispute.

4. Build the defense around the required elements

A counter-affidavit should answer the actual evidence, not merely deny liability. Depending on the facts, it may establish that:

you did not own or control the account;
another authorized or unauthorized user made the post;
the screenshot is incomplete, altered, or unauthenticated;
the complainant was not identifiable;
there was no publication to a third person;
the language was not defamatory in context;
the content was opinion, satire, rhetorical hyperbole, or fair comment;
the statement was a fair and true report of an official proceeding made in good faith and without added remarks;
the communication was made in the performance of a legal, moral, or social duty to a person with a corresponding interest;
the accusation involves official conduct or a public issue and there is no proof of actual malice;
the factual imputation was true and the requirements of Article 361 are satisfied;
venue is unsupported;
the complainant has not shown a legally sufficient connection between you and the post; or
the one-year prescriptive period had expired.

A privileged communication can lose protection if it is excessively published, made to people without a corresponding interest, or shown to have been made with actual malice.

5. Submit a complete counter-affidavit

Include sworn statements from witnesses and all available documentary or digital support. Explain the context of the publication and address each allegation in numbered paragraphs.

A bare motion to dismiss is generally not a substitute for the required counter-affidavit. Preserve jurisdictional, constitutional, evidentiary, and prescription objections in the appropriate form while still answering the facts unless counsel advises otherwise.

6. Prepare for court proceedings

If the prosecutor files an information, the designated Regional Trial Court will independently determine whether there is probable cause for a warrant or other process. A filed case does not mean guilt has been established. The prosecution must prove guilt beyond reasonable doubt at trial, and the accused retains the rights to counsel, silence, confrontation, and compulsory process.

Do not miss arraignment, bail, pre-trial, or appeal deadlines. If a warrant may have issued, have counsel verify the court record and arrange a lawful response rather than relying on social-media posts or unofficial messages.

Possible penalties and civil liability

Section 6 of the Cybercrime Prevention Act provides a penalty one degree higher when a crime defined by the Revised Penal Code is committed through information and communications technology. The application of the penalty depends on the charge, the court’s findings, modifying circumstances, and current sentencing law.

Article 355 of the Revised Penal Code allows imprisonment, a fine, or both for libel. The Supreme Court has recognized that the statutory option of imposing a fine rather than imprisonment remains relevant in cyber-libel sentencing. A court—not the complainant, investigator, or prosecutor—determines the lawful penalty after conviction.

The offended party may also pursue civil liability for damages arising from the allegedly defamatory publication. Civil claims may accompany the criminal case or, subject to procedural rules, be pursued separately. Retraction, apology, or deletion may affect practical resolution and damages but does not automatically erase an already completed offense.

Evidence both sides should preserve

Keep originals and create verified backups of:

full posts and conversation threads;
URLs and account identifiers;
raw image, audio, and video files;
email headers;
timestamps and time-zone information;
device and account-access records;
notices from platforms;
preservation or takedown requests;
source documents supporting factual statements;
editorial drafts and communications;
witness contact information;
proof of discovery and filing dates;
proof of residence, business location, or other venue facts; and
records showing reputational or financial impact.

Maintain a simple evidence log stating what each item is, where it came from, who collected it, and whether it was copied or altered. Give counsel copies; do not surrender the only original unless required and properly documented.

Common mistakes

Waiting because the post is still online and assuming the deadline has not begun.
Filing in a convenient location without facts establishing venue.
Submitting cropped screenshots without a URL, date, context, or witness.
Naming an account holder without proof that the person controlled the account when the post was made.
Treating every offensive opinion or criticism as a defamatory factual allegation.
Assuming truth alone always defeats criminal libel.
Assuming every share, reaction, or comment is automatically punishable.
Deleting posts or devices after receiving a demand, subpoena, or preservation request.
Fighting the case through new social-media posts.
Ignoring the deadline for a counter-affidavit.
Using a motion to dismiss as a substitute for answering the evidence.
Paying an alleged “settlement” or signing a retraction without understanding its criminal and civil consequences.
Obtaining evidence through hacking, impersonation, threats, or unlawful access.

When legal help is urgent

Consult a Philippine lawyer immediately if:

the one-year period may expire soon;
you received a prosecutor’s subpoena, court summons, or warrant;
the author is anonymous and provider data may need prompt preservation;
the publication is being edited, deleted, or rapidly redistributed;
a journalist, public official, election candidate, whistleblower, or matter of public interest is involved;
the communication may be privileged;
the post concerns an alleged crime, workplace misconduct, abuse, or corruption;
several people or organizations participated in producing the content;
the author, server, complainant, or evidence is outside the Philippines;
a minor or confidential record is involved;
settlement discussions include money, admissions, retraction, or waiver; or
related threats, stalking, identity theft, data-privacy violations, or violence are present.

For immediate threats to life or safety, contact the police or emergency services rather than relying only on a cyber-libel complaint.

Frequently asked questions

Can I file because someone insulted me online?

Possibly, but an insult is not automatically cyber libel. The words must amount to a legally defamatory imputation, identify you, be published to another person, and satisfy the other elements.

Is a private message cyber libel?

A message sent only to the person discussed ordinarily lacks publication to a third person. A group message, copied email, forwarded chat, or message shown to others may satisfy publication depending on the evidence.

Is a negative business review cyber libel?

Not automatically. Honest opinion and fair criticism may be protected, but knowingly false factual accusations can create risk. The wording, factual basis, audience, and presence or absence of actual malice matter.

Can an anonymous account be charged?

A person may be charged if competent evidence identifies the individual responsible. The display name or profile photograph alone may be insufficient. Investigators may need properly authorized preservation, disclosure, or cybercrime-warrant procedures.

Does deleting the post end the case?

No. Cyber libel may be complete once the defamatory statement is published to a third person. Deletion can reduce continuing harm but does not necessarily remove criminal or civil liability.

Does an apology automatically dismiss the complaint?

No. An apology or retraction may support settlement or mitigation, but the effect depends on its terms, timing, the complainant’s action, and the stage of proceedings. Only the proper authority can dispose of the criminal case.

Can the same post support both ordinary libel and cyber libel charges?

The State may not impose duplicative punishment for the same act contrary to constitutional protections. In Disini, the Supreme Court invalidated Section 7 of the Cybercrime Prevention Act insofar as it permitted prosecution for both cyber libel and ordinary libel based on the same act.

Can a company be defamed?

A juridical person may, in an appropriate case, claim injury to its reputation. Criminal responsibility, however, attaches to natural persons whose participation is proved; it is not established merely by naming the corporation connected with them.

Where can I verify the governing rules?

Useful primary sources include:

General-information disclaimer

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Cyber-libel liability depends heavily on the exact words, complete context, dates, evidence, identity of the speaker and subject, venue, and procedural history. Consult a qualified Philippine lawyer about a specific complaint or defense.

Law and official-source check completed 16 September 2026.