Quick answer

A cyber libel case begins with a sworn complaint and supporting electronic evidence filed with the proper prosecution office. The complainant must establish a defamatory imputation, publication to at least one third person, identification of the person defamed, malice, authorship or responsibility, and use of a computer system or information and communications technology.

The accused may defend the case by disproving any element, challenging authorship or electronic evidence, invoking privilege or constitutionally protected criticism, proving truth together with good motives and justifiable ends where the law requires them, raising improper venue, or proving prescription.

Act quickly. In its final April 8, 2026 ruling in Causing v. People, the Supreme Court held that cyber libel prescribes in one year from discovery of the defamatory material by the offended party, the authorities, or their agents. Posting and discovery are not automatically presumed to have occurred on the same date. Filing the complaint with the prosecutor interrupts prescription, but a demand letter, platform report, or informal police inquiry should not be assumed to do so.

What counts as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel to defamatory material published through a computer system or similar technology. This can include material posted through a website, social-media account, blog, email, messaging service, or smartphone, depending on how it was communicated.

The prosecution must establish:

A defamatory imputation. The material attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a natural or juridical person to contempt.
Publication. Someone other than the person defamed received, read, or saw the material. A message sent only to the alleged victim ordinarily lacks this element, although threats, harassment, violence against women or children, privacy violations, or other offenses may still apply.
Identification. The complainant must be identifiable. Naming the person is not essential if readers familiar with the circumstances could reasonably determine who was meant.
Malice. For an ordinarily defamatory statement about a private person, the law generally presumes malice unless a privilege applies. Different rules apply to qualifiedly privileged communications and criticism involving public officials, public figures, or matters of legitimate public concern.
Authorship or legal responsibility. The prosecution must connect the accused to the account and the actual publication. A profile name or photograph alone may not settle that question.
Use of ICT or a computer system. The defamatory material must have been published through the technology covered by the law.

The words must be evaluated as a whole, in their language, context, audience, and ordinary meaning. Calling a statement “opinion,” adding “allegedly,” or framing it as a question does not automatically protect it if the overall message asserts or implies defamatory facts.

Likes, shares, comments, and republication

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the author of the defamatory statement, but declared unconstitutional the provision punishing the mere aiding or abetting of cyber libel. A person does not become criminally liable for cyber libel merely because of a routine Like, reaction, share, or comment agreeing with another person’s post.

There is an important exception: a comment, caption, repost, or other publication that introduces a new defamatory accusation may itself be treated as an original defamatory publication. Copying material into a new post or materially updating and republishing content also requires a fact-specific assessment. Do not assume that attributing the accusation to another source eliminates responsibility.

Statements that may be protected

Truth, good motives, and justifiable ends

Truth is important, but it is not automatically a complete defense in every Philippine libel case. Article 361 of the Revised Penal Code requires the accused, when truth is admissible, to show both that the material was true and that it was published with good motives and for justifiable ends.

Proof that an imputation not involving a crime is true is generally inadmissible unless it concerns a government employee and facts related to the discharge of official duties. The exact application depends on what was alleged, who was targeted, and why it was published.

Preserve the records on which the statement was based: official documents, correspondence, interview notes, photographs, recordings lawfully obtained, research logs, and evidence of verification before publication.

Qualifiedly privileged communications

Malice is not presumed when the communication is qualifiedly privileged. Statutory examples include:

A private communication made in performing a legal, moral, or social duty, sent only to people with a corresponding interest or duty.
A fair and true report, made in good faith and without improper comments, of a non-confidential judicial, legislative, or other official proceeding, an official statement delivered in that proceeding, or an act performed by a public officer in an official function.

Privilege can be lost through unnecessary circulation, irrelevant accusations, excessive language, fabrication, or proof of actual malice. Posting a supposedly private grievance to the general public may be inconsistent with the limited audience required by the privilege.

Public officials, public figures, and public concerns

Criticism of official conduct and matters of legitimate public concern receives stronger constitutional protection. When the complainant is a public figure—particularly a public officer whose official conduct is being discussed—the prosecution must prove actual malice: knowledge that the statement was false or reckless disregard of whether it was false.

Mere error, inaccuracy, or falsity does not by itself establish actual malice. But inventing sources, deliberately avoiding obvious contrary evidence, or publishing a serious accusation despite a high awareness of probable falsity may support it.

This protection is not unlimited. An attack on a public officer’s purely private life, unrelated to official duties or a legitimate public concern, may be treated differently.

The one-year deadline

The controlling rule is now settled by the Supreme Court’s final en banc resolution in Causing v. People, G.R. No. 258524, April 8, 2026:

Cyber libel prescribes in one year.
The period begins when the defamatory material is discovered by the offended party, the authorities, or their agents.
Publication and discovery may coincide, but discovery is not legally presumed to occur on the posting date merely because the material was online.
Filing the complaint or information interrupts the period. For crimes governed by the Revised Penal Code, filing a proper complaint with the prosecutor for preliminary investigation is recognized as an initiating step that interrupts prescription.
The period may run again if the proceedings terminate without conviction or acquittal or are unjustifiably stopped for a reason not attributable to the accused. Time does not run while the offender is absent from the Philippines.

The date of discovery can become a disputed fact. A complainant should document who first found the post, the exact date and time, how it was brought to the complainant’s attention, and any earlier communications suggesting prior knowledge. An accused relying on prescription should obtain admissible evidence showing an earlier discovery date. If prescription is not clear from the information, the accused ordinarily bears the burden of proving it.

Do not wait until the last weeks of the period. A platform complaint, private demand, mediation effort, or report to an investigator may not be the filing that interrupts prescription.

How to file a complaint

1. Preserve the complete publication

Before requesting removal, preserve:

Full-page screenshots showing the post, account name, date, time, captions, comments, and surrounding context.
A screen recording that begins at the account page and proceeds to the post.
The exact URL, username, account or profile identifier, and platform.
The original image, video, audio, message, or downloaded webpage where available.
Visible reactions, shares, audience settings, and comments showing that third persons received the material.
Messages or testimony showing the date of discovery.
Earlier posts or communications that help establish

Quick answer

A cyber libel case begins with a sworn complaint and supporting evidence filed with the proper prosecution office. The complainant must establish a defamatory imputation, publication to at least one person other than the target, identification of the person defamed, malice, authorship, and use of a computer system or information and communications technology.

A respondent should preserve the complete digital record, obtain every attachment to the complaint, and submit a sworn counter-affidavit on the date stated in the subpoena. Current DOJ rules generally require the subpoena to allow at least 10 days from receipt for that submission.

Act quickly. The Supreme Court has ruled with finality that cyber libel prescribes in one year from discovery of the publication by the offended party, the authorities, or their agents—not automatically from the posting date. Filing a complaint with the proper prosecutor interrupts prescription, but a demand letter, platform report, or informal police inquiry should not be assumed to do so.

What qualifies as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act applies the Revised Penal Code’s law on libel when the publication is made through a computer system or similar means. This can include social-media posts, blogs, online articles, emails, group chats, and communications made through computers or smartphones.

The prosecution must prove:

A defamatory imputation. The communication attributes a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose a person or juridical entity to contempt.
Publication. At least one person other than the person defamed received or understood the communication. A post need not go viral. Conversely, a message sent only to its subject ordinarily lacks this element, although threats, harassment, violence against women, privacy violations, or other offenses may still apply.
Identification. The complainant must be identifiable. Naming the person is not indispensable if readers familiar with the circumstances could reasonably identify the target.
Malice. For an ordinarily defamatory statement about a private person, the law generally presumes malice unless privilege or another defense applies. Different constitutional rules apply to protected comments about public officers, public figures, and matters of public concern.
Authorship or responsibility. The prosecution must connect the respondent—not merely a name or photograph on an account—to the post or message.
Use of ICT. The defamatory material must have been published through a computer system, mobile device, network, or comparable technology.

The words are evaluated in their full context and ordinary meaning. Calling something “opinion,” adding “allegedly,” using a question mark, or presenting an accusation as a meme does not automatically prevent liability if the communication reasonably asserts or implies defamatory facts.

Likes, shares, and comments are treated differently

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the author of an online defamatory statement but declared unconstitutional the application of “aiding or abetting” liability to cyber libel.

A person is therefore not automatically guilty merely for pressing “Like,” sharing an existing post, or posting a brief reaction. However, someone who adds a new, independently defamatory accusation may become the author of a separate cyber libel publication. The actual words, platform behavior, audience, and surrounding context remain important.

Important defenses and exceptions

A weak or unpleasant post is not automatically criminal. Common defenses include the following.

No defamatory factual imputation

Criticism, satire, rhetorical exaggeration, or value judgment may fall outside libel when a reasonable reader would not understand it as asserting defamatory facts. Courts examine the entire communication, including images, links, comments, tone, and surrounding events.

No publication

A communication seen only by its subject ordinarily does not satisfy publication. Group chats, copied emails, public posts, and messages shown to another person are different.

The complainant was not identifiable

It is not enough for the complainant to believe privately that a vague post referred to them. The prosecution must show that recipients could identify the complainant from the words and circumstances. A person may nevertheless be identifiable even without being named.

The respondent did not own, control, or use the account

A profile name or photograph alone does not conclusively prove authorship. In XXX v. People, the Supreme Court explained that ownership, access, or authorship may be proved by direct or circumstantial evidence, including:

An admission of ownership, access, or authorship;
Someone seeing the person use the account or compose the post;
Information in the post known only to the alleged author or a few people;
A distinctive language or writing pattern;
Platform, telecommunications, internet-service-provider, device, geolocation, or forensic records;
Conduct consistent with the post or message; and
Other circumstances linking the person to the account and communication.

Forensic or platform records are useful but are not always indispensable. Both sides should preserve evidence about account access, connected email addresses and phone numbers, devices, account-recovery notices, log-in alerts, and any suspected compromise.

Qualified privilege

Malice is not presumed when a communication is qualifiedly privileged. Statutory examples include:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without improper comments, of a non-confidential judicial, legislative, or other official proceeding, or of an act performed by a public officer in an official capacity.

Privilege is not a blanket license to publish an accusation to everyone. The recipient, purpose, scope, wording, and good faith must fit the duty or public interest involved. Excessive publication or proof of actual malice may defeat qualified privilege.

Public officers, public figures, and public concerns

When a defamatory statement concerns a public officer’s official conduct—or otherwise falls within the constitutional protection afforded to public figures and legitimate matters of public concern—the prosecution must prove actual malice: knowledge of falsity or reckless disregard of whether the statement was false.

Actual malice is not established simply because a report later proves inaccurate. But publishing a serious accusation while consciously avoiding obvious reasons to doubt it may support a finding of reckless disregard.

This protection does not automatically extend to attacks on a public officer’s purely private life unrelated to public duties or legitimate public concern.

Truth, good motives, and justifiable ends

Truth is important but is not always a complete defense by itself. Article 361 of the Revised Penal Code generally requires both:

Proof that the material imputation was true; and
Proof that it was published with good motives and for justifiable ends.

The rules on when proof of truth is admissible differ depending on whether the imputation concerns a crime or a public officer’s official duties. A respondent relying on truth should present the underlying documents and competent witnesses, not merely repeat rumors or cite another unverified social-media post.

Prescription

Under the Supreme Court’s April 8, 2026 final resolution in Causing v. People, cyber libel prescribes in one year from discovery by the offended party, the authorities, or their agents.

Publication and discovery may occur on the same day, but the Court rejected an automatic presumption that every online post is discovered when uploaded. The discovery date can therefore be a contested factual issue. When prescription is not apparent from the Information, the accused normally must present evidence proving it.

The period is interrupted by filing the complaint or Information. It may run again if the proceedings end without conviction or acquittal or are unjustifiably stopped for a reason not attributable to the accused. The Revised Penal Code also provides that prescription does not run while the offender is absent from the Philippines.

Wrong venue or lack of jurisdiction

Cyber libel cases are tried in designated Regional Trial Courts, but choosing the correct city or province is technical. The Cybercrime Prevention Act and Rule on Cybercrime Warrants recognize locations connected to the offense, computer system, or damage, while Article 360 of the Revised Penal Code contains special jurisdictional venue rules for libel.

The complaint and eventual Information must allege facts establishing the chosen venue. Filing wherever a screenshot happened to be opened is risky. Venue should be reviewed before filing and raised promptly when defending.

The one-year deadline: practical rules

For a complainant:

Record the exact date, time, and circumstances of first discovery.
Identify everyone who saw the material earlier and how it reached you.
Do not wait for platform action, settlement talks, or a demand-letter response if the deadline is approaching.
File the sworn complaint with the proper prosecutor within one year of discovery.
Do not assume that a barangay report, platform report, demand letter, or initial inquiry with investigators interrupts prescription.

For a respondent:

Determine the alleged posting date, discovery date, prosecutor-filing date, and any periods when proceedings stopped.
Preserve evidence contradicting a claimed late discovery, such as earlier replies, messages, tags, takedown demands, public statements, or access records.
Raise prescription with supporting evidence. Merely pointing to an old posting date may be insufficient.

A civil action for defamation is also generally subject to a one-year period under Article 1147 of the Civil Code, but its accrual and interaction with the criminal action require separate analysis.

How to file a complaint

1. Preserve the complete publication before seeking removal

Save more than a cropped screenshot. Preserve:

The exact URL and account or page address;
Full-page screenshots showing the account, date, time, post, comments, and surrounding context;
A screen recording that opens the profile and scrolls through the publication;
Original downloaded images, audio, video, or documents;
Messages, notifications, emails, tags, and links through which the post was discovered;
The device on which the material was viewed;
Names and contact details of people who saw or received it;
Evidence connecting the account to the suspected author;
The date and circumstances of discovery; and
Evidence of resulting harm, such as lost work, cancelled transactions, customer messages, or requests for explanation.

Do not annotate, enhance, crop, or overwrite the only copy. Keep an untouched original and a separate working copy. Record who collected each item and when.

Under the Rules on Electronic Evidence, the party offering a private electronic document must prove its authenticity and reliability. A screenshot is useful but is not automatically self-authenticating.

2. Assess every legal element

Write down:

The exact allegedly defamatory words;
Why they are defamatory;
Who understood them as referring to the complainant;
Who received or saw them;
Why the respondent is believed to be the author;
What computer system or platform was used;
Whether the complainant is a private person, public officer, or public figure;
Whether the subject concerns official conduct or public interest;
Whether the material came from an official proceeding or private complaint;
The discovery and filing dates; and
Facts establishing the proper venue.

3. Consider a preservation request through investigators

Content and account records can disappear. The NBI Cybercrime Division or PNP Anti-Cybercrime Group may assist with technical investigation and lawful preservation. Under Republic Act No. 10175, law-enforcement authorities can require preservation of specified computer data, while compelled disclosure of subscriber, traffic, or relevant data generally requires an appropriate court warrant.

The statutory preservation periods are not permission to delay filing. They concern service-provider data retention after proper legal action, not the complainant’s one-year prescriptive period.

4. Prepare the complaint-affidavit

The affidavit should state facts based on personal knowledge, identify each respondent, quote or accurately reproduce the publication, explain every element, establish venue and timeliness, and authenticate the attached evidence.

Witnesses should execute separate sworn affidavits explaining what they personally saw, received, recognized, or preserved. Avoid hearsay where direct witnesses or original records are available.

The DOJ’s current filing checklist calls for a sworn Investigation Data Form, complaint-affidavit, witness affidavits, and supporting documents. It presently lists two copies of the Investigation Data Form and five copies plus the number of respondents for the affidavits and supporting records. Confirm the requirements and any approved electronic-filing procedure with the specific prosecution office before filing.

5. File with the proper prosecution office

The complaint is ordinarily filed with the city or provincial prosecution office having territorial authority. A report to the NBI or police can support investigation, but the formal preliminary-investigation complaint must reach the proper prosecutor.

Obtain a stamped receiving copy, NPS docket number, and written inventory of the documents filed.

6. Participate in the preliminary investigation

The prosecutor assesses whether the evidence establishes prima facie evidence with reasonable certainty of conviction. This means the available evidence must be admissible, credible, preservable, and capable—if left uncontroverted—of establishing all elements and the respondent’s identity. The Supreme Court upheld this DOJ standard in Meking v. Remulla.

The respondent must receive the complaint and supporting evidence and be given an opportunity to answer. The prosecutor may require clarificatory hearings, limited reply or rejoinder affidavits, additional records, or witness statements.

If sufficient evidence exists, the prosecutor prepares an Information for filing in the proper RTC. If not, the complaint is dismissed at the prosecutorial level.

How to defend after receiving a subpoena

1. Note the receipt date immediately

The subpoena should include the complaint-affidavit and attachments and set the deadline or preliminary-investigation hearing. Under DOJ Department Circular No. 15, the submission date must generally be at least 10 days after receipt of the subpoena and complaint.

Extensions are not automatic. They may be allowed when the interests of justice require, such as reasonable time to engage counsel or examine important evidence. Request any extension before the deadline and do not rely on it unless granted.

2. Demand access to the complete evidence

Check that you received every screenshot, affidavit, attachment, video, storage medium, and other item cited in the complaint. Ask in writing to inspect voluminous or physical evidence when necessary.

3. Preserve your account and devices

Do not delete the post, account, messages, access logs, or device data after learning of the complaint. Deletion can destroy favorable context and complicate the defense.

If the account was compromised:

Change credentials and activate multi-factor authentication;
Preserve log-in and recovery alerts before changing anything;
Download available account information;
Record unfamiliar devices, sessions, IP alerts, and password-reset notices;
Report the compromise through the platform’s official channel; and
Preserve the report and platform response.

Do not fabricate a hacking claim. It must be supported by contemporaneous records and credible circumstances.

4. Prepare a sworn counter-affidavit

Answer each accusation factually. Attach evidence supporting defenses such as:

No authorship or account control;
Missing or altered context;
No publication to a third person;
Failure to identify the complainant;
Absence of a defamatory factual imputation;
Qualified privilege;
Public concern and lack of actual malice;
Truth, good motives, and justifiable ends;
Prescription;
Improper venue;
Unlawful acquisition or defective authentication of evidence; or
Material inconsistencies among the complainant’s affidavits and records.

A bare motion to dismiss is not a safe substitute. Under the current rules, a verified motion containing the respondent’s complete defenses may be treated as a counter-affidavit, but the better course is usually to file a properly sworn, evidence-supported counter-affidavit.

Anything admitted in the affidavit can affect the trial. Do not guess, exaggerate, or make unnecessary admissions about authorship, account access, intent, or publication.

5. Avoid retaliation

Do not publish the complaint, insult the complainant, pressure witnesses, or organize supporters to attack them online. New posts can create additional evidence or separate causes of action. Communicate through counsel when possible.

6. Act promptly on the prosecutor’s resolution

An aggrieved party may generally file a motion for reconsideration within 15 days from receipt under the 2024 DOJ-NPS rules. A petition for review may also be available, but the proper reviewing authority and requirements depend on which prosecution office acted and whether an Information has already been filed.

Neither an administrative review nor a motion filed with the prosecutor should be assumed to suspend court proceedings automatically. If an Information is already in court, counsel may need to seek appropriate relief from the trial judge.

What happens after an Information is filed

Filing a complaint with the prosecutor does not itself create a warrant of arrest. If the prosecutor files an Information, the RTC judge independently evaluates judicial probable cause. The judge may dismiss the case for clear lack of probable cause, require additional evidence, issue a summons where custody is unnecessary, or issue a warrant.

Cyber libel is bailable, but bail conditions and amount are determined under the Rules of Criminal Procedure and applicable court guidelines. If a warrant is issued, coordinate surrender and bail through counsel instead of evading service.

At trial, guilt and the accused’s identity must be proved beyond reasonable doubt. The prosecution must also authenticate electronic evidence and establish its integrity and reliability.

Possible penalties and civil liability

Cyber libel carries a penalty one degree higher than traditional written libel. If imprisonment is imposed, the statutory range is prisión correccional in its maximum period to prisión mayor in its minimum period, or four years, two months and one day to eight years, before application of rules governing the final sentence.

A fine may lawfully be imposed instead of imprisonment. Under People v. Soliman, the current fine range for online libel is ₱40,000 to ₱1,500,000. Depending on the judgment, imprisonment and a fine may both be imposed. Fine-only treatment is possible but never guaranteed.

Civil liability for proven injury to reputation may accompany the criminal case. An offended party may also have remedies under the Civil Code, but recovery cannot be duplicated for the same injury.

Common mistakes to avoid

Assuming every insult, criticism, or negative review is cyber libel;
Treating truth as an automatic complete defense;
Saving only a cropped screenshot without the URL, account, date, comments, and context;
Failing to prove who controlled the account;
Waiting for a demand-letter response while prescription runs;
Assuming a police report or platform complaint interrupts prescription;
Filing in a convenient but legally improper venue;
Ignoring the distinction between a private person and a public officer or figure;
Republishing the accusation while explaining or denying it;
Deleting the account, device data, or complete conversation;
Ignoring a prosecutor’s subpoena;
Filing an unsworn letter instead of a proper complaint- or counter-affidavit;
Contacting or threatening witnesses; and
Assuming an apology or affidavit of desistance automatically terminates the criminal case.

An apology, correction, or retraction can be relevant to motive, damages, mitigation, and settlement, but it does not automatically erase an already completed offense. Because a criminal case is prosecuted in the name of the People of the Philippines, the complainant’s withdrawal does not by itself compel dismissal.

When legal help is urgent

Seek a Philippine criminal lawyer immediately when:

The one-year period may expire within weeks;
The publication or account may soon disappear;
A dummy account requires platform or telecommunications records;
You received a prosecutor’s subpoena;
A prosecutor issued an adverse resolution;
An Information, summons, or arrest warrant has been issued;
Investigators seek access to or seizure of a device;
The case involves a journalist, whistleblower, public official, election issue, or official proceeding;
The post contains threats, intimate images, personal data, or information about a child; or
Several criminal, civil, employment, or administrative cases may arise from the same publication.

If private counsel is unaffordable, ask the Public Attorney’s Office or an IBP legal-aid office about eligibility and possible conflicts.

Frequently asked questions

Can a case continue if the post was deleted?

Yes, if admissible evidence establishes its contents, publication, authorship, and other elements. Deletion makes proof harder, which is why screenshots, witness testimony, device records, and timely preservation are important.

Is a private Messenger or group-chat message cyber libel?

A message sent only to the person defamed ordinarily lacks publication. A message sent to a group or copied to another person may satisfy publication. Other offenses may apply even without libel.

Can I be charged for sharing someone else’s post?

A bare Like, share, or brief reaction is not automatically punishable as aiding cyber libel under Disini. Adding a new defamatory accusation may constitute an original publication.

Is an anonymous or dummy account enough to prevent prosecution?

No. Account access and authorship may be proved circumstantially through private information, writing patterns, earlier messages, connected accounts, conduct, witness testimony, platform records, and device evidence.

Does proving that the accusation is true end the case?

Not necessarily. The defense generally must also establish good motives and justifiable ends, subject to the specific rules governing the type of imputation and the person targeted.

Does filing a complaint automatically remove the post?

No. A criminal complaint is not an automatic takedown order. The complainant may separately use the platform’s reporting process, request voluntary removal, or seek legally appropriate relief without sacrificing evidence or missing the filing deadline.

Can the respondent be arrested as soon as the complaint is filed?

Not merely because a prosecutor’s complaint was filed. A judge independently determines judicial probable cause after an Information reaches court and decides whether to dismiss, seek more evidence, issue summons, or issue a warrant.

How long does the respondent have to answer?

Follow the subpoena. For a regular preliminary investigation under the current DOJ rules, the submission date should allow at least 10 days from receipt of the subpoena and complete complaint. Do not assume an extension will be granted.

Can a corporation or organization be defamed?

Yes. Article 353 recognizes that a juridical person can be discredited. The complaint must still establish identification, defamatory meaning, publication, malice, authorship, and the other applicable elements.

Official sources

This article provides general legal information, not advice for a specific case, and does not create a lawyer-client relationship. Outcomes depend on the exact words, audience, documents, dates, identity evidence, and procedural history. Law and official procedures checked as of August 1, 2026.