Quick answer

Cyber libel is committed when a person publicly and maliciously makes a defamatory imputation through a computer system or similar digital means. At trial, the prosecution must prove beyond reasonable doubt that the statement was defamatory, published to someone other than the person concerned, referred to an identifiable natural or juridical person, was malicious, and was authored or published online by the accused.

Act quickly. Under the Supreme Court’s April 8, 2026 resolution in Causing v. People, cyber libel generally prescribes one year from discovery by the offended party, the authorities, or their agents. Filing the proper criminal complaint or Information interrupts that period. A platform report, takedown request, demand letter, or private negotiation does not by itself interrupt criminal prescription.

A complaint normally starts with the proper city or provincial prosecutor, often after assistance from the NBI Cybercrime Division or another cybercrime unit. A respondent who receives a prosecutor’s subpoena should obtain counsel immediately and submit a sworn, evidence-supported counter-affidavit by the stated deadline—generally with at least ten days from receipt.

Cyber libel carries possible imprisonment of four years, two months and one day to eight years, a fine of ₱40,000 to ₱1,500,000, or both, plus possible civil liability. A fine-only sentence is legally possible but is not guaranteed.

What must be proved

Cyber libel under Section 4(c)(4) of Republic Act No. 10175 incorporates Philippine libel law under Articles 353 and 355 of the Revised Penal Code. The prosecution must establish all of the following:

A defamatory imputation. The post must impute a crime, vice, defect, act, omission, condition, status, or circumstance that tends to cause dishonor, discredit, or contempt. Courts consider the complete statement, its ordinary meaning, context, audience, accompanying images, and relevant Filipino or local-language usage. Criticism, disagreement, satire, or an unpleasant remark is not automatically defamatory.
Publication. At least one person other than the person defamed must have received, read, heard, or viewed the statement. A message sent only to the person concerned ordinarily lacks this element. A public post, group chat, forwarded message, email copied to others, livestream, video, podcast, or accessible webpage may satisfy publication.
Identification. The complainant need not always be named, but the prosecution must show that readers familiar with the circumstances could reasonably identify the person or organization concerned.
Malice. As a general rule, a defamatory imputation is presumed malicious unless a privilege or other applicable defense is established. Different rules apply to qualifiedly privileged communications and speech about public officials, public figures, or matters of legitimate public concern.
Use of a computer system and authorship by the accused. The prosecution must connect the accused to the account, device, publication, or other digital act. A profile name or screenshot alone does not necessarily prove who controlled the account.

The prosecutor’s preliminary-investigation standard is lower than proof beyond reasonable doubt but is now more demanding than bare probable cause: the evidence must establish a prima facie case with reasonable certainty of conviction under DOJ Department Circular No. 15, series of 2024. The Supreme Court upheld that framework in 2026.

Important exceptions and defenses

Privileged communications

Article 354 recognizes qualified privilege for:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments, of a non-confidential judicial, legislative, or other official proceeding or official act.

Privilege depends on purpose, audience, relevance, good faith, and manner of publication. A legitimate complaint sent to the proper employer, regulator, school, association, or government office may be treated differently from broadcasting the same accusation to the public. Unnecessary circulation, insulting embellishments, or publication to people with no legitimate interest may defeat the defense.

Other communications—such as relevant statements in judicial proceedings—may receive stronger protection under jurisprudence. Their scope should be evaluated from the actual pleading, proceeding, and context.

Public officials, public figures, and public concerns

When a statement concerns a public official’s performance of official duties, the prosecution must prove actual malice: knowledge that the statement was false or reckless disregard of whether it was false. Actual malice in this sense is not merely anger, hostility, or personal dislike.

The actual-malice standard may also apply to public figures and protected commentary on matters of legitimate public concern. It does not protect fabricated accusations, knowing falsehoods, or assertions published while consciously disregarding serious reasons to doubt them. The Supreme Court’s discussion in Tulfo v. People explains these constitutional safeguards.

Truth is not an automatic defense

Under Article 361, proving that an imputation of a crime is true generally must be accompanied by proof of good motives and justifiable ends. Proof of a non-criminal act or omission is subject to additional statutory limits, except where the imputation concerns a government employee’s official duties.

Keep the records on which the statement was based: official documents, recordings, interview notes, source communications, verification efforts, and requests for comment. A sincere belief unsupported by reliable facts may not establish truth or negate reckless disregard.

Opinion and fair comment

Calling a statement an “opinion” does not conclusively protect it. Courts examine whether it communicates a verifiable factual accusation. Fair comment grounded in disclosed or established facts and directed to a matter of public interest may be privileged; inventing an undisclosed factual basis is different.

Likes, shares, reactions, and comments

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author but invalidated its application to persons who merely receive a post and react to it. It also invalidated the Cybercrime Act’s aiding-or-abetting provision as applied to cyber libel.

This is not blanket immunity for every share or comment. A person who writes a new defamatory caption, materially alters a post, uploads defamatory material as their own publication, or makes a separate accusation may be treated as the author of that new content. Liability must be assessed from the exact words and act charged.

Prescription, authorship, venue, and constitutional defenses

A defense may also arise where:

The complaint was filed outside the one-year prescriptive period;
The complainant or authorities discovered the post earlier than alleged;
The accused did not own or control the account;
The account was hacked, spoofed, or impersonated;
The evidence does not reliably authenticate the post;
The accused or complainant is not sufficiently identified;
The case was filed in an improper venue;
The same publication was impermissibly charged as both traditional and cyber libel; or
The alleged online publication occurred before the Cybercrime Prevention Act became effective.

Prescription, venue, discovery, and authorship often require evidence and cannot always be resolved from the complaint alone.

Critical deadlines

Matter	General rule
Criminal cyber libel	One year from discovery by the offended party, authorities, or their agents
Interruption of criminal prescription	Filing the proper complaint or Information; do not rely on a demand letter or platform report
Separate civil action for defamation	Generally one year under Article 1147 of the Civil Code
Counter-affidavit	Follow the subpoena; regular preliminary investigation generally provides at least ten days from receipt
Motion for reconsideration of prosecutor’s resolution	Fifteen days from receipt under the 2024 DOJ-NPS Rules

The discovery date is a factual question. Preserve the message, email, witness statement, or other record showing when the complainant or authorities first learned of the publication. Do not assume that the period starts only when a screenshot was taken or that a post remaining online continuously resets the deadline.

A written extrajudicial demand may affect civil prescription under Article 1155 of the Civil Code, but it does not replace timely filing of the criminal complaint.

How to file a complaint

1. Preserve the complete publication immediately

Before requesting deletion, capture:

The complete post, article, video, audio, or message—not only the allegedly defamatory sentence;
The visible date and time, account name, profile page, username, and unique account or post identifier;
The full URL and any shortened or redirected link;
Comments, captions, photographs, thumbnails, edits, shares, and surrounding conversation;
A screen recording showing how the content is accessed;
The original file in its native format when available;
The device used to view or receive it;
Names and sworn statements of people who saw it;
Messages showing admission, ownership, motive, prior warnings, or refusal to correct a known falsehood;
Proof of harm, such as lost work, cancelled contracts, customer messages, disciplinary action, or medical records, where lawfully obtainable; and
Evidence of the date of discovery.

Keep untouched originals and working copies. Record who collected each item, when, using what device, and what was done with it. Do not crop away identifying details or alter files.

Electronic documents must be authenticated. Under the Rules on Electronic Evidence, the party presenting a private electronic document bears the burden of showing its integrity and reliability. Notarizing a screenshot does not, by itself, prove who authored it or that it was unaltered.

2. Determine whether the facts actually fit cyber libel

Write down the exact statement and assess every element. Identify:

What specific crime, defect, or discreditable condition was imputed;
Who understood the statement to refer to the complainant;
Which third parties received it;
Why it was false, malicious, or outside any privilege;
Who authored or controlled the account; and
What computer system or digital platform was used.

If the content involves threats, extortion, account intrusion, non-consensual intimate images, identity theft, stalking, or disclosure of protected personal information, other laws and urgent remedies may apply. Tell investigators the complete facts rather than forcing every online harm into a cyber-libel theory.

3. Choose the proper venue

Cybercrime venue is technical. Under Section 2.1 of the Rule on Cybercrime Warrants, reflected in Henares v. Tieng, the criminal action is filed in the designated cybercrime court of the province or city where:

The offense or any element occurred;
Any part of the computer system used is situated; or
The damage to a natural or juridical person occurred.

The court where the action is first properly filed acquires jurisdiction to the exclusion of other courts. Mere internet accessibility in a location should not be treated as an automatic venue connection. The complaint and eventual Information should allege concrete venue facts.

4. Seek investigative help when necessary

If the author is anonymous, the account may disappear, or subscriber and traffic data are important, promptly approach a cybercrime law-enforcement unit. Service-provider data may require preservation measures and a court-issued cybercrime warrant; a private complainant cannot simply compel a platform to reveal another user’s confidential data.

The NBI Cybercrime Division’s citizen service accepts requests for investigation, interviews complainants, takes sworn statements, examines relevant devices, and collects supporting records. The NBI also maintains an online complaint page, although an online submission should not be assumed to complete every formal filing requirement or interrupt prescription without confirmation.

5. Prepare the complaint-affidavit

A useful complaint-affidavit should:

Identify the complainant and respondent;
Quote or accurately reproduce each specific publication complained of;
Explain its meaning and context;
State when and how it was published and discovered;
Identify witnesses who saw or received it;
Explain how readers identified the complainant;
Present evidence linking the respondent to the account or publication;
Address falsity, malice, privilege, and public-interest issues;
Establish the selected venue;
List and authenticate supporting exhibits; and
State the requested criminal charge without exaggerating the evidence.

The complaint must be sworn before an authorized officer. Witnesses should execute their own affidavits based on personal knowledge. Check the DOJ’s current preliminary-investigation filing requirements and the local prosecution office’s instructions for copies, identification, forms, filing channels, and fees.

6. Participate in the preliminary investigation

Because cyber libel’s maximum penalty exceeds six years, it falls under the regular preliminary-investigation process in DOJ Department Circular No. 15.

If the complaint is sufficient, the prosecutor issues a subpoena with the complaint and supporting evidence. The respondent files a counter-affidavit and exhibits. The prosecutor may allow reply and rejoinder affidavits or conduct clarificatory proceedings when needed. The parties do not ordinarily cross-examine each other at this stage.

The prosecutor then decides whether the evidence establishes a prima facie case with reasonable certainty of conviction. An aggrieved party may file a motion for reconsideration within 15 days from receipt. A further DOJ petition for review may be available, subject to strict procedural requirements; it does not automatically stop court proceedings, so counsel should also consider a motion to suspend proceedings where appropriate.

If an Information is filed, the Regional Trial Court independently evaluates judicial probable cause. Only then may it issue an arrest warrant. Filing a complaint with the prosecutor does not itself mean that the respondent can immediately be arrested.

How to defend a complaint

Act immediately after receiving a subpoena

Record the date, time, and manner of service. Check that the complaint-affidavit and all referenced attachments were included. The subpoena’s stated deadline controls; do not wait until the final day to seek advice.

A subpoena from a prosecutor is not an arrest warrant, but ignoring it may cause the complaint to be resolved solely from the complainant’s evidence.

Preserve—not destroy—your evidence

Keep:

The complete account archive and original post;
Drafts, revision history, unpublished material, and source notes;
Login history, IP records, device lists, recovery emails, and security alerts;
The phone, computer, storage media, and applications involved;
The complete thread or conversation showing context;
Official records and other sources used for the statement;
Requests for comment and responses received;
Communications showing the purpose and intended audience;
Evidence of correction, deletion, apology, or lack of further circulation; and
Proof of hacking, impersonation, unauthorized access, or loss of device control.

Do not delete the account, factory-reset devices, alter timestamps, coach witnesses, contact the complainant aggressively, or post about the pending case. Deletion can remove favorable context and may create evidentiary problems.

Prepare a complete counter-affidavit

A counter-affidavit should answer each factual allegation and each legal element. Attach evidence rather than relying on general denials. Depending on the facts, it may establish:

No defamatory imputation;
No publication to a third party;
Failure to identify the complainant;
Lack of authorship or account control;
Qualified or absolute privilege;
Truth, good motives, and justifiable ends;
Fair comment or protected criticism;
Absence of actual malice in a public-official or public-figure case;
Mere receipt or reaction under Disini;
Improper venue;
Prescription;
Inadmissible or unauthenticated electronic evidence; or
Material variance between the accusation and the evidence.

Do not submit a fabricated explanation or selectively edited evidence. A sworn counter-affidavit can be used against the respondent, including through admissions. Counsel should review it before signing.

If an Information or arrest warrant has been issued

Obtain a certified or official copy of the Information, resolution, warrant, and court orders. Do not evade service. Counsel can coordinate a lawful voluntary surrender, booking, and bail application where appropriate.

Cyber libel is bailable as a matter of right before conviction by the RTC. The amount and conditions depend on the court and applicable bail rules; the fine range is not the bail amount.

Before entering a plea, counsel should assess whether a motion to quash or another remedy is available. Certain objections may be waived if not raised at the proper time. Arraignment, pre-trial, trial, and appeals have separate deadlines that must be calendared from the actual orders received.

Criminal and civil remedies

The criminal case is prosecuted in the name of the People of the Philippines. The private complainant assists but does not have complete control over dismissal once public prosecution has begun. An affidavit of desistance or private settlement does not automatically terminate the criminal case.

Civil liability arising from the alleged offense is generally deemed included with the criminal action unless waived, reserved, or previously filed. Article 33 of the Civil Code also recognizes an independent civil action for defamation, proved by preponderance of evidence. The claimant cannot recover twice for the same act.

A separate civil defamation action generally must be filed within one year. Venue, reservation, coordination with the criminal case, and the basis of damages require careful assessment before filing.

Common mistakes

Waiting for a platform investigation while the one-year criminal period runs;
Treating the post’s upload date and discovery date as automatically identical;
Saving only cropped screenshots without URLs, timestamps, context, or the original device;
Filing where the post was merely viewable without establishing a proper venue connection;
Naming an account holder without evidence that they controlled the account when the post was made;
Assuming every insult is defamatory or every opinion is immune;
Assuming truth alone always defeats criminal libel;
Ignoring privilege and the actual-malice standard in public-affairs cases;
Charging a person solely for a simple like, share, or reaction despite Disini;
Filing both traditional and cyber libel for the same publication;
Responding publicly to a complaint and creating additional publications;
Missing the counter-affidavit or reconsideration deadline; and
Assuming deletion, apology, settlement, or an affidavit of desistance automatically ends criminal liability.

When legal help is urgent

Seek a Philippine criminal-law practitioner immediately when:

Discovery occurred close to one year ago;
The post or anonymous account may disappear;
Subscriber, traffic, or platform data must be preserved;
A prosecutor’s subpoena or resolution has been received;
An Information or arrest warrant has been issued;
Several posts, authors, victims, or possible venues are involved;
The case concerns journalism, whistleblowing, a public official, or confidential proceedings;
A hacked or impersonated account is alleged;
The publication includes threats, extortion, intimate images, or personal-safety risks; or
A civil claim is also approaching its one-year period.

Those who cannot afford private counsel may inquire with the Public Attorney’s Office, subject to its eligibility and conflict-of-interest rules.

Frequently asked questions

Can cyber libel arise from a private chat?

Yes, if the message was published to at least one third person. A message sent only to the person allegedly defamed ordinarily lacks publication. A communication to a limited recipient for a genuine legal, moral, or social duty may be qualifiedly privileged, depending on its purpose and circulation.

Can a company file a cyber-libel complaint?

Potentially. Article 353 protects identifiable juridical persons as well as natural persons. The company must still prove the remaining elements and connect the publication to reputational injury.

Is a screenshot enough?

Not necessarily. It may help establish the content, but authenticity, completeness, authorship, timing, and integrity can still be challenged. Preserve the original device, URL, account identifiers, native files, witnesses, and other corroboration.

Does deleting the post prevent a case?

No. Deletion does not erase a completed publication. It may limit further circulation and can be relevant to mitigation or good faith, but it can also destroy useful evidence. Preserve an accurate copy before making changes and obtain legal advice.

Does an apology end the case?

No. An apology may support settlement or mitigation but does not automatically extinguish criminal liability. Once an Information is filed, the prosecutor and court retain control over the criminal proceedings.

Can someone be charged only for sharing a post?

A simple receipt and reaction are protected by the constitutional limitation in Disini. A new caption, separate accusation, altered content, or deliberate publication as one’s own statement may be treated differently.

Is cyber libel always punished with imprisonment?

No. The law permits imprisonment, a fine, or both. In De Leon v. People, the Supreme Court confirmed that a fine-only penalty may be imposed in an appropriate online-libel case. It is discretionary, not automatic.

Does a post remaining online make cyber libel a continuing offense?

Do not assume so. The Supreme Court’s current rule counts the one-year period from discovery. Whether a later edit, new upload, or separate publication creates another actionable event depends on the specific act and evidence.

What if the accused is outside the Philippines?

Republic Act No. 10175 contains jurisdictional rules covering certain offenses where an element occurred in the Philippines, a Philippine computer system was used, or damage was caused here. Service, evidence gathering, arrest, and enforcement across borders require case-specific advice.

Primary and official references

This article provides general legal information, not advice for a particular complaint, publication, or defense. Philippine cyber-libel cases are highly dependent on the exact words, evidence, parties, venue, and dates. Sources and procedures were checked as of August 4, 2026.