Quick answer

A Philippine cyber libel case is usually started by filing a sworn complaint-affidavit and supporting evidence with the city or provincial prosecution office that has territorial authority over a proper venue. The complainant may first seek technical investigation from the National Bureau of Investigation Cybercrime Division or the Philippine National Police Anti-Cybercrime Group, especially when the poster is anonymous or platform records must be preserved.

Act quickly: cyber libel prescribes in one year from discovery of the allegedly defamatory publication by the offended party, the authorities, or their agents—not automatically from the posting date. The Supreme Court reaffirmed this rule with finality in April 2026.

Quick answer

A Philippine cyber libel case usually begins with a sworn complaint-affidavit filed in the proper city or provincial prosecution office. The complainant may first seek technical investigation from the National Bureau of Investigation Cybercrime Division or the Philippine National Police Anti-Cybercrime Group, especially when the author is anonymous or platform records are needed.

Act quickly: cyber libel generally prescribes one year from discovery of the allegedly defamatory material by the offended party, the authorities, or their agents. The Supreme Court reaffirmed this rule with finality in April 2026. Filing a complaint with the proper prosecution office interrupts prescription for current filings; a demand letter, platform report, barangay complaint, or request for police assistance should not be assumed to do so.

A respondent should not ignore a prosecutor’s subpoena. Record the date it was received, obtain all attachments, preserve the account and post, and submit a properly sworn counter-affidavit on the stated deadline. Under the current DOJ rules, the hearing must ordinarily be set at least 10 days after the respondent receives the subpoena and complaint.

Cyber libel is not established merely because an online statement is insulting, embarrassing, unpopular, or false. The prosecution must establish every legal element, connect the respondent to the publication, and ultimately prove guilt beyond reasonable doubt.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the publication is made through a computer system or a similar technology.

The prosecution must establish:

A defamatory imputation. The statement imputes a crime, vice, defect, act, omission, condition, or status tending to expose a natural or juridical person to dishonor, discredit, or contempt, or to blacken the memory of a dead person.
Publication. The material was communicated to at least one person other than the person defamed. A message sent only to its subject ordinarily lacks this element, although other offenses may apply. A group chat, email copied to others, restricted social-media post, or private forum can still involve publication.
Identifiability. At least one third person could identify the subject. Naming the person is not essential if the surrounding facts make the identity reasonably clear. Conversely, it is not enough that the complainant alone believes the post refers to them.
Malice. For an ordinarily defamatory imputation against a private person, malice may be presumed unless the communication is privileged or another applicable rule removes the presumption. Cases involving public officials, public figures, official conduct, or matters of public interest may require proof of actual malice—knowledge of falsity or reckless disregard of probable falsity.
Use of a computer system and authorship. The statement was published online or through covered information and communications technology, and the respondent authored or caused the publication complained of.

The entire publication and its context matter. Courts distinguish factual accusations from rhetorical exaggeration, satire, fair criticism, and expressions that reasonable readers would not understand as asserting defamatory facts. Calling an accusation an “opinion,” however, does not automatically protect it if it conveys a concrete factual charge.

Important exceptions and defenses

Truth is not always enough

Under Article 361 of the Revised Penal Code, truth is generally a defense in a criminal libel prosecution only when the publication was also made with good motives and for justifiable ends. A special rule applies to a true imputation against a government employee concerning facts related to the discharge of official duties.

A respondent relying on truth should produce admissible records and witnesses—not rumors, anonymous messages, or an assertion that “everyone knows.”

Privileged communications

Article 354 recognizes qualified privileges that include:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments or remarks, of non-confidential judicial, legislative, or other official proceedings, statements, or acts.

Qualified privilege generally removes the presumption of malice, leaving the prosecution or claimant to prove actual malice. The privilege can be lost through unnecessary distribution, irrelevant personal attacks, substantial inaccuracy, bad faith, or excessive publication.

Relevant statements properly made in judicial proceedings—and in qualifying quasi-judicial proceedings with comparable safeguards—may be absolutely privileged. The protection is closely tied to relevance and communication to people who have an official or legal duty concerning the proceeding. Posting the same allegations publicly is a different act and may not share the privilege.

Public officials, public figures, and public-interest speech

Criticism of government and public affairs receives wider constitutional protection. When a charge concerns a public official’s official conduct or a public figure, liability generally requires actual malice. Mere error, inaccuracy, or falsity does not by itself prove actual malice.

This protection is not a license to knowingly invent factual accusations. Documents showing investigation, source-checking, requests for comment, corrections, and the information actually available when the statement was published can be crucial.

Likes, shares, and comments

In Disini v. Secretary of Justice, the Supreme Court invalidated Section 5 on aiding or abetting insofar as it applied to cyber libel. A bare like, share, or reactive comment is not automatically criminal cyber libel.

But a comment that introduces its own defamatory factual accusation can constitute a new original publication. The substance of what the person wrote—not the platform button used—controls.

The one-year deadline

The Supreme Court’s final ruling in Causing v. People confirms that cyber libel prescribes in one year from discovery, not automatically from the date of posting. Publication and discovery may coincide, but the law does not presume that a person discovered a social-media post the moment it went online.

Preserve evidence of the earliest discovery date, such as:

The message that first sent the post to the complainant;
Email or platform notifications;
The complainant’s contemporaneous report;
Witness affidavits;
A demand letter or takedown request; and
Earlier screenshots or conversations showing prior knowledge.

Prescription is interrupted by filing the complaint or information. The Supreme Court has also ruled prospectively that filing the complaint with the prosecution office tolls the period. Older cases may require separate analysis because of the prospective application of that ruling.

Article 91 also contains exceptions concerning the termination or unjustified stoppage of proceedings and the offender’s absence from the Philippines. Multiple posts, substantive republication, later edits, delayed discovery, and separate authors can complicate the calculation. Do not wait until the anniversary date or calculate the deadline from memory.

A separate civil action for defamation generally also carries a one-year limitation period. Do not assume that a police report, criminal complaint, demand letter, or platform complaint automatically preserves every possible civil remedy.

How to file a complaint

1. Preserve the publication before requesting deletion

Save more than a cropped screenshot. Whenever safely and lawfully possible, preserve:

The complete post, article, video, caption, or message;
Its exact URL or permalink;
Account name, handle, profile URL, and visible account identifier;
Publication date and time, including the displayed time zone;
Full conversation or article context;
Audience or privacy setting, if visible;
Comments, shares, edits, reactions, and engagement information;
A screen recording showing navigation from the profile to the post;
Downloaded platform data or the native file;
The original phone or computer and an untouched backup; and
Copies in more than one secure location.

Do not hack an account, impersonate another person, secretly obtain passwords, or induce unauthorized access. Illegally acquired evidence can create separate criminal, privacy, or admissibility problems.

2. Gather proof for every element

The complaint should not consist of screenshots and conclusions alone. Collect:

An affidavit explaining the facts, the discovery date, and why the statement refers to the complainant;
Affidavits from people who actually saw the material and identified the complainant;
Evidence connecting the respondent to the account or publication;
Records contradicting the factual accusation;
Evidence relevant to malice, such as prior threats, knowledge of contrary facts, or refusal to correct a known falsehood;
Proof supporting the selected venue; and
Documents showing actual harm, expenses, lost opportunities, or other claimed damages.

A profile name or photograph alone may not reliably establish authorship. Admissions, linked communications, witnesses familiar with the account, lawfully obtained subscriber information, and forensic evidence may be needed.

Electronic evidence must be authenticated. The Rules on Electronic Evidence require the party offering a private electronic document to establish its authenticity, integrity, and reliability. A readable printout may qualify as an original when shown to reflect the electronic data accurately, but screenshots are not automatically conclusive.

3. Choose the proper place

Under the Rule on Cybercrime Warrants and the law’s Implementing Rules and Regulations, the eventual criminal action is filed in the designated cybercrime court of the province or city:

Where the offense or any element occurred;
Where any part of the computer system used was situated; or
Where damage to a natural or juridical person took place.

The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of the others. Mere nationwide accessibility should not be treated as permission to file anywhere. The complaint-affidavit must allege facts supporting the chosen territorial connection.

4. Decide whether technical investigation is needed

A complainant may seek assistance from:

This is particularly useful for anonymous accounts, deleted content, impersonation, coordinated attacks, or evidence requiring platform disclosure or forensic examination. Subscriber information and private computer data generally require lawful investigative processes and, when applicable, a court-issued cybercrime warrant.

Because platform data may be retained only for limited periods, ask investigators promptly whether a formal preservation request is appropriate. Do not assume that an ordinary platform report preserves data indefinitely.

Law-enforcement assistance is not always a prerequisite. A sufficiently documented complaint may be filed directly with the city or provincial prosecution office having territorial authority.

5. Prepare the complaint-affidavit correctly

Under DOJ Department Circular No. 015, series of 2024, a regular preliminary investigation is initiated by filing:

The original sworn complaint-affidavit;
Two duplicate copies for the official file;
Additional copies equal to the number of respondents;
A completed NPS Investigation Data Form; and
Witness affidavits and supporting evidence.

The affidavit should state the parties’ names and addresses, the date and place of the offense, the material facts, the online publication, the discovery date, the basis for authorship and venue, and facts supporting every element.

The complaint must be sworn before a prosecutor or authorized government officer or, when they are unavailable, a notary public. Check the receiving office’s current rules before attempting email filing; electronic and virtual procedures are alternatives, not an unrestricted right to file through any address.

6. Participate in the preliminary investigation

The prosecutor applies the current DOJ standard of prima facie evidence with reasonable certainty of conviction. The evidence must be admissible, credible, capable of preservation and presentation at trial, and sufficient—if uncontroverted—to establish all elements and identify the responsible person. The Supreme Court upheld this prosecutorial standard in Atty. Meking v. Department of Justice.

If the complaint proceeds, the respondent receives a subpoena, the complaint, and its attachments. After the counter-affidavit, the prosecutor may submit the case for resolution or hold a physical or virtual clarificatory hearing. Reply and rejoinder affidavits are allowed only when the prosecutor requires them under the rules.

The DOJ’s administrative target is generally to resolve a regular preliminary investigation within 60 calendar days from assignment, with a maximum 30-day extension in specified circumstances. That target does not guarantee a final court outcome within that period.

How to defend a complaint

1. Preserve first and stop discussing the dispute publicly

Keep the original post, drafts, source material, messages, research notes, account records, and devices. Do not fabricate documents, manipulate screenshots, pressure witnesses, or destroy potentially relevant data.

Avoid posting threats, counter-accusations, or running commentary about the complainant or witnesses. A new statement can become a separate publication or a different offense.

2. Record the subpoena deadline

Write down:

When and how the subpoena was received;
The scheduled hearing and filing date;
The docket number and prosecution office;
Whether all complaint attachments were included; and
Whether the address used for service was correct.

The respondent ordinarily receives at least 10 days from receipt of the subpoena and complaint to prepare the counter-affidavit. An extension is not automatic. It may be granted in the interest of justice—such as to obtain counsel, examine voluminous records, or address complicated issues—and may not exceed 10 days. Request it before the deadline and explain the concrete need.

3. File a complete counter-affidavit

The respondent or authorized representative files the original counter-affidavit, two duplicate copies, and a copy for each complainant. It must be properly sworn.

A bare motion to dismiss in place of a counter-affidavit is generally not allowed. A verified motion containing the respondent’s defenses may instead be treated as the counter-affidavit. If the respondent fails to file despite proper service at the last known address, the prosecutor may resolve the case without the respondent’s evidence.

4. Address every element with evidence

Depending on the facts, defenses may include:

No authorship: The respondent did not own or control the account, the account was compromised, or the attribution evidence is unreliable.
No defamatory imputation: The statement, read as a whole, was not reasonably understood as accusing the complainant of a discreditable fact.
No publication: No third person received or read the material.
No identifiability: Third persons could not reasonably identify the complainant.
Truth and lawful purpose: The imputation was true and published with the motives and ends required by Article 361.
Privilege: The communication was properly limited to people with a corresponding duty or was a fair and true good-faith report of an official proceeding.
Public-interest protection: The complainant was a public official or public figure, or the statement concerned official conduct, and actual malice cannot be shown.
No actual malice: Contemporaneous research, reliable sources, efforts to verify, requests for comment, and prompt correction may negate knowing or reckless falsity.
Prescription: The earliest provable discovery occurred more than one year before the proceeding that interrupted prescription.
Improper venue: The complaint lacks a factual connection to the selected city or province.
Defective or unauthenticated evidence: Screenshots, account attribution, edited media, or alleged messages lack competent authentication or context.
A mere reaction: The respondent only liked, shared, or reacted to another’s publication and did not author a new defamatory accusation.

Prescription is ordinarily a defense. If it is not apparent from the information itself, the accused may bear the burden of presenting evidence of the actual discovery date.

5. Protect constitutional rights during investigation

A prosecutor’s subpoena is not itself a conviction or arrest warrant. A respondent invited for police questioning should ask whether they are a witness, person of interest, or suspect and should obtain counsel before making a statement.

During custodial investigation, a person has the right to remain silent and to competent and independent counsel. Do not consent casually to a device search, password disclosure, or account access without understanding the request. At the same time, do not obstruct or disobey a valid court warrant or lawful order; have counsel examine its scope and supervise compliance.

6. Act promptly after the prosecutor’s resolution

An aggrieved party may file a motion for reconsideration within 15 days from receipt of the resolution under the 2024 DOJ-NPS Rules. A further petition for review is governed by separate DOJ appeal rules and documentary requirements.

If an information has already been filed in court, a prosecutor-level appeal does not automatically stop the court proceedings. The appropriate motion to suspend must also be filed with the court. Seek counsel immediately because prosecutorial, court, bail, and review deadlines may run at the same time.

What happens when an information is filed?

The prosecutor files the information with the proper designated Regional Trial Court cybercrime branch. The judge independently evaluates judicial probable cause and may dismiss the charge, require additional evidence, or issue a warrant of arrest.

Cyber libel is generally bailable before conviction because it is not punishable by reclusion perpetua or life imprisonment. The court determines the amount and conditions. A person who learns that a warrant has been issued should arrange lawful surrender and bail through counsel rather than evade authorities.

At trial, the prosecution must prove guilt beyond reasonable doubt. Preliminary-investigation findings do not establish guilt and do not bind the trial court.

Possible penalties and civil liability

For a current offense, the imprisonment range for cyber libel is prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years. The Supreme Court has determined that the alternative fine ranges from ₱40,000 to ₱1,500,000, or the court may impose both imprisonment and fine.

In People v. Soliman, the Supreme Court confirmed that a court may impose a fine alone in an appropriate online-libel case. A fine-only sentence is not automatic or an entitlement; the court considers the law and the circumstances of the particular offense. Offenses committed when an earlier penalty law was in force require separate computation.

Civil liability arising from the offense is generally deemed instituted with the criminal action unless the offended party waives it, reserves the right to file separately, or filed the civil action first. A separate civil defamation or abuse-of-rights claim may also be considered, but its legal basis, deadline, venue, and required proof must be assessed independently.

An apology, deletion, settlement, or affidavit of desistance may affect the evidence, damages, or exercise of prosecutorial discretion, but it does not automatically extinguish a public criminal prosecution. Get the terms reviewed before signing a release, admission, or settlement.

The same identical publication should not be punished twice as both traditional libel and cyber libel. The Supreme Court held in Disini that they are the same offense when the only distinction is the online means of publication.

Common mistakes

Waiting for a platform response or apology until the one-year period is nearly over;
Assuming that a police report, demand letter, or takedown request stops prescription;
Saving only a cropped screenshot without the URL, account, date, or surrounding context;
Failing to document when the complainant, authorities, or their agents first discovered the publication;
Naming an account owner, page administrator, employer, or organization without evidence of authorship or legally attributable participation;
Treating personal offense or hurt feelings as proof of injury to reputation;
Failing to identify a third person who received the statement and recognized its subject;
Filing in a convenient location without facts establishing proper venue;
Assuming that falsity alone proves actual malice;
Assuming that truth alone always defeats criminal libel;
Deleting or altering evidence before preserving it;
Continuing the dispute through new public accusations;
Ignoring a subpoena or filing an unsworn, generic denial;
Using hacked, impersonated, or unlawfully accessed account information; and
Believing that a withdrawal, apology, or private settlement automatically ends a filed criminal case.

When legal help is urgent

Obtain a Philippine lawyer immediately when:

The one-year period may expire within the next several weeks;
A subpoena has been received or its deadline is unclear;
The post is anonymous, disappearing, deleted, or likely to require platform records;
Police seek an interview, device examination, passwords, or a sworn statement;
A cybercrime search warrant or arrest warrant has been served;
An information has already been filed in court;
Several posts, authors, jurisdictions, or possible criminal offenses are involved;
The statement concerns a journalist, public official, election, public controversy, or confidential proceeding;
There are accompanying threats, stalking, doxxing, extortion, identity theft, intimate images, or danger to a child; or
A settlement requires an admission, retraction, payment, confidentiality clause, or affidavit of desistance.

People who meet the applicable requirements may seek free assistance from the Public Attorney’s Office or the Integrated Bar of the Philippines National Center for Legal Aid.

Frequently asked questions

Can I file if the post was deleted?

Possibly. Deletion does not erase an already completed publication, but proof becomes harder. Preserve existing screenshots, links, notifications, witnesses, and devices, and seek technical assistance promptly.

Is a private message cyber libel?

A message sent only to the person being insulted ordinarily lacks publication. If it was sent to or read by another person and concerns the complainant, publication may exist. Other laws may apply even when libel does not.

Can a true post still be libelous?

Yes, potentially. In a criminal case, truth generally must be accompanied by good motives and justifiable ends, subject to the special rule for imputations concerning government employees’ official duties.

Can someone be charged merely for sharing a post?

A bare like, share, or reactive response is not automatically criminal cyber libel under Disini. A person who adds a new defamatory factual accusation may be treated as the author of that new publication.

Does filing a cyber libel complaint cause immediate arrest?

Ordinarily, no. The usual process is preliminary investigation, filing of an information if the prosecutor finds sufficient evidence, and the judge’s independent determination of probable cause. Warrantless arrest is lawful only under the limited conditions in Rule 113.

Can criticism of a politician or government officer be cyber libel?

Fair criticism and discussion of public affairs receive broad constitutional protection. Liability for statements concerning official conduct generally requires proof of actual malice. Knowingly or recklessly publishing a false factual accusation is not automatically protected.

Can a case be filed against an anonymous account?

Yes, but identifying the actual author may require NBI or PNP investigation, lawfully obtained subscriber data, and digital forensics. The display name or profile photograph alone may be insufficient.

Can the case proceed if the poster is abroad?

Potentially. Philippine jurisdiction may exist when the statutory Philippine connections are present, including specified local elements, computer systems, damage, or nationality. Cross-border identification, service, evidence, and enforcement require fact-specific legal advice.

Primary and official references

This article provides general legal information, not advice for a particular complaint, defense, or deadline. The controlling documents, dates, evidence, and procedural history must be reviewed by Philippine counsel. Laws and official sources were checked as of August 24, 2026.