Quick answer

Cyber libel is committed when a person publishes a defamatory statement through a computer system—such as a social-media post, online article, video caption, email, or message—and the legal elements of libel are present. A negative, insulting, or inaccurate online statement is not automatically cyber libel. The prosecution must establish the defamatory imputation, publication to another person, identification of the complainant, malice where legally required, and use of a computer system beyond reasonable doubt.

To pursue a case, preserve the online evidence immediately, identify the author and relevant witnesses, and file a sworn complaint with the prosecutor’s office that has territorial authority over the offense. The NBI or PNP cybercrime unit may assist with investigation and preservation of electronic data. Under the Supreme Court’s current ruling, cyber libel generally prescribes in one year from discovery of the allegedly libelous publication by the offended party, authorities, or their agents. The exact starting date and whether filing interrupted prescription can be fact-dependent, so do not wait.

If you receive a prosecutor’s subpoena, do not ignore it. Under the ordinary preliminary-investigation rule, the respondent has 10 days from receipt to submit a sworn counter-affidavit and supporting evidence. A motion to dismiss cannot simply replace the counter-affidavit.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel to publication through a computer system or similar technology.

A prosecution ordinarily must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, dishonorable act, condition, or circumstance that tends to dishonor, discredit, or expose a person to contempt.
Publication. Someone other than the person defamed received, read, heard, or saw the statement. A purely private message sent only to the person discussed ordinarily lacks publication, although forwarding it to another person may satisfy this element.
Identification. The complainant was named or was sufficiently identifiable from the words, images, surrounding facts, or audience’s knowledge. Naming someone is not always necessary.
Malice. Article 354 generally presumes malice in a defamatory imputation, subject to privileged communications and other constitutional or statutory rules. In cases involving public officials, public figures, or matters of public concern, the applicable standard may require proof of actual malice—knowledge of falsity or reckless disregard of whether the statement was false.
Use of a computer system. The publication was made online or through information and communications technology.

The post must be assessed as a whole and in its actual context. Courts may consider the ordinary meaning of the words, accompanying photographs or videos, captions, hashtags, the intended audience, and relevant surrounding circumstances. Calling something “opinion,” “satire,” or a “question” does not automatically protect it if it reasonably communicates a defamatory factual accusation.

Who may be held responsible?

In Disini v. Secretary of Justice, the Supreme Court sustained cyber libel as applied to the original author of the online statement. It invalidated Section 5 of the Cybercrime Prevention Act insofar as that provision broadly punished aiding or abetting cyber libel.

A person therefore should not be charged with cyber libel merely for an automatic platform reaction or passive interaction. But the distinction is factual:

A “like” or similar reaction is not the same as authoring a defamatory statement.
A bare share or repost presents different issues from writing an original accusation.
Adding a defamatory caption, comment, narration, edited image, or new factual accusation may amount to a separate original publication.
Reposting material does not become safe merely because someone else said it first.
Page administrators, editors, employers, and corporate officers are not automatically criminally liable solely because of their positions. Their actual participation and the applicable law must be proved.

Protected speech and important defenses

Freedom of expression protects criticism, fair comment, and discussion of public affairs, but it does not give a blanket right to publish knowingly false defamatory factual accusations.

Possible defenses depend on the evidence and may include the following.

No defamatory imputation

The words may be unpleasant, critical, humorous, rhetorical, or hyperbolic without asserting a defamatory fact. Courts consider the complete publication, not an isolated phrase.

The complainant was not identifiable

A vague statement about an undefined group may not point to a particular person. Identification may nevertheless be proved through context even when no name appears.

No publication to a third person

A communication seen only by the person discussed ordinarily lacks the publication element. Group chats, copied emails, public posts, and messages sent to another person can satisfy publication.

Lack of authorship or account control

A profile bearing someone’s name does not by itself conclusively prove that the person created the post. Hacking, impersonation, shared account access, fabricated screenshots, and unauthorized posting must be investigated rather than merely asserted.

Privileged communication

Article 354 recognizes qualifiedly privileged communications, including certain private communications made in the performance of a legal, moral, or social duty and fair and true reports of official proceedings made in good faith and without added comments or remarks.

Privilege is not automatic simply because a complaint was sent to an employer, regulator, government office, or professional body. The recipient, purpose, scope, wording, good faith, and extent of circulation matter. Excessive publication or proof of actual malice may defeat a qualified privilege.

Truth, good motives, and justifiable ends

Under Article 361, truth may be offered as a defense, but truth alone is not always enough. The defendant generally must also establish good motives and justifiable ends. Proof of the truth of an imputation that does not involve a crime is restricted by Article 361, subject to its rule concerning government employees and facts related to their official duties.

Public-official or public-figure standard

When a publication concerns a public official, public figure, or matter of public interest, constitutional protections may require proof that the defendant published with actual malice. Honest mistakes are different from statements made with knowledge of falsity or reckless disregard of probable falsity.

The label “public figure” should not be assumed. It depends on the person’s role and the controversy involved.

Prescription

The Supreme Court held in Causing v. People that cyber libel prescribes in one year, abandoning earlier rulings that applied much longer periods.

The Court also held that the year generally runs from the day the publication is discovered by the offended party, authorities, or their agents. Publication and discovery may occur on the same date, but not always. Prescription is commonly a factual defense: if it is not apparent from the charge itself, the accused may need evidence of when discovery occurred.

The institution of the criminal action ordinarily interrupts prescription under Rule 110, but the legally effective filing, correct office, dates, and controlling procedural rules must be examined carefully.

Penalties and civil exposure

Article 355 of the Revised Penal Code, as amended by Republic Act No. 10951, provides imprisonment, a fine of ₱40,000 to ₱1,200,000, or both for ordinary libel. Section 6 of the Cybercrime Prevention Act generally raises by one degree the penalty for a Revised Penal Code offense committed through information and communications technology.

This creates serious potential imprisonment and financial exposure. The Supreme Court has expressed a preference for a fine rather than imprisonment in appropriate libel cases, but that policy does not abolish imprisonment or guarantee a fine-only sentence. The proper penalty depends on the charge, applicable amendments, circumstances, and final judgment.

A complainant may also seek civil damages. Civil liability arising from the offense is generally deemed included in the criminal action unless it is waived, reserved when a reservation is legally permitted, or previously filed. An independent civil action under Article 33 of the Civil Code may also be available. Different limitation periods and procedural consequences can apply, and double recovery for the same injury is not allowed.

How to file a cyber libel complaint

1. Record the discovery date

Write down when and how you first learned of the publication. Identify anyone who showed or sent it to you. Preserve the message, email, notification, or conversation through which you discovered it.

This date can determine whether the one-year period has expired. Do not rely on the fact that a post remains online; continued accessibility does not necessarily restart the period every day.

2. Preserve the publication properly

Before requesting deletion or confronting the author, preserve:

Full-page screenshots showing the account name, text, images, date, time, reactions, comments, and surrounding context
The exact URL or post link
The account’s profile URL and available identifying information
Screen recordings showing how the post was accessed
Original emails, message exports, attachments, audio, and video files
The device on which the content was received or viewed
Names and contact details of people who saw the publication
Evidence connecting the account to the suspected author
Evidence of harm, such as lost work, cancelled contracts, customer messages, or professional complaints
Evidence establishing the discovery date

Keep the original files. Avoid cropping, annotating, converting, or repeatedly forwarding the only copy. Store duplicates securely and record who collected each item and when. Screenshots are useful, but authenticity and authorship may still need testimony, metadata, platform records, or other corroboration.

3. Assess the exact statement

Identify the specific words, image, audio, or video alleged to be defamatory. Explain:

What factual accusation it communicated
Why it referred to you
Who received or viewed it
Why it was false or legally defamatory
What evidence contradicts it
Why any claimed privilege, fair comment, or public-interest defense does not apply

A complaint should not depend merely on conclusions such as “the post ruined my reputation.”

4. Identify the proper filing location

Cybercrime cases fall within the jurisdiction of Regional Trial Courts, including designated cybercrime courts. Territorial venue still matters. Ordinarily, the complaint should be filed with a prosecutor who has authority over the place where the offense or an essential element occurred.

Online accessibility everywhere does not make every city or province a proper venue. The place where the content was authored or uploaded, the allegations in the complaint, the location of relevant computer use, and any special venue rule may matter. Have counsel verify venue before filing because filing in the wrong office can waste crucial time.

5. Prepare the complaint-affidavit

Under Rule 112 of the Rules of Criminal Procedure, the complaint should state the respondent’s address and be supported by sworn affidavits and documents establishing probable cause. It should ordinarily include:

The parties’ identifying information
A chronological account based on personal knowledge
The exact publication and its context
The publication and discovery dates
The platform, account, device, and URL involved
Facts showing identification, publication, malice, and authorship
A numbered list of attachments
Witness affidavits
Electronic and documentary evidence
The relief requested

Affidavits must be properly subscribed and sworn before an authorized officer. Submit the required number of copies and follow the current local prosecutor’s filing and service instructions.

6. Consider technical investigation

The NBI and PNP are the law-enforcement authorities identified by the Cybercrime Prevention Act. Their cybercrime units may help investigate anonymous accounts, preserve data, and prepare applications for appropriate cybercrime warrants.

Platform subscriber data, traffic data, and private content are not obtained simply by demanding them from a service provider. Compulsory disclosure or examination generally requires lawful process and, where required, a court-issued warrant. Preservation should be requested promptly because platform records may be deleted under retention policies.

7. Participate in preliminary investigation

If the investigating prosecutor finds grounds to proceed, the respondent is ordinarily served with a subpoena and copies of the complaint and supporting materials. Both sides may submit affidavits and documentary evidence. A clarificatory hearing may be held, but preliminary investigation is generally documentary and does not include ordinary cross-examination.

The prosecutor determines probable cause, not guilt beyond reasonable doubt. If probable cause is found and approved, an information may be filed in the proper Regional Trial Court.

How to defend against a complaint

Act immediately upon receiving a subpoena

Record the exact date and manner of service. The ordinary period for submitting a counter-affidavit is 10 days from receipt of the subpoena and supporting documents.

Contact counsel immediately. Extensions should never be assumed. If no counter-affidavit is timely submitted, the prosecutor may decide the case using only the complainant’s evidence.

Obtain and review the complete record

The respondent has the right to examine evidence submitted by the complainant that was not furnished and to copy it at the respondent’s expense. Compare:

The quoted words with the complete publication
Screenshots with the live page and original files
Claimed publication and discovery dates
Account ownership and login evidence
The alleged audience
The complainant’s identity and status
The asserted defamatory meaning
The prosecutor’s territorial authority
Each attachment against the affidavit that supposedly authenticates it

Submit a complete counter-affidavit

Do not file only a motion to dismiss in place of a counter-affidavit; Rule 112 expressly prohibits that substitution. Present all material defenses and supporting evidence, including:

Complete, unedited context
Source documents and research records
Communications showing good faith
Requests for comment or verification
Retractions, corrections, or clarifications
Evidence of truth
Evidence of privilege or public interest
Proof that the complainant was not identifiable
Proof that no third person received the statement
Account-security or impersonation evidence
Evidence concerning discovery and prescription
Facts challenging venue or territorial jurisdiction

A bare denial is rarely enough. Affidavits should be based on personal knowledge and should identify and explain every attachment.

Do not tamper with evidence

Deleting the post may limit further circulation, but deletion can also destroy evidence or appear inconsistent with later claims. Preserve a complete forensic copy and obtain legal advice before changing the content or account.

Do not edit timestamps, fabricate conversations, pressure witnesses, retaliate online, or ask others to coordinate false accounts. Those acts may damage the defense or create separate legal exposure.

Prepare for court proceedings

If an information is filed, the RTC judge independently evaluates probable cause and may dismiss the case, require additional evidence, or issue the appropriate process. A court filing does not establish guilt.

Counsel should promptly evaluate bail, arraignment, motions permitted before plea, prescription, defects in the information, venue, admissibility and authentication of electronic evidence, and constitutional defenses. Missing an arraignment or court date can have serious consequences.

Electronic evidence that can strengthen or weaken a case

Electronic evidence is most persuasive when several independent facts agree. Useful corroboration may include:

Native files rather than screenshots alone
Platform-generated download or archive data
Email headers and message exports
Device records and consistent metadata
Witnesses who personally saw the publication
Admissions by the account user
Prior or subsequent messages showing authorship
Account recovery details or connected contact information
A documented chain of custody
Lawfully obtained subscriber or traffic information

Metadata can be incomplete or altered, and an IP address does not necessarily identify the individual who wrote a post. Shared devices, public Wi-Fi, compromised accounts, VPNs, and impersonation must be evaluated carefully.

Common mistakes

Waiting because the post is “still online,” despite the one-year prescriptive period
Treating every insult, bad review, or criticism as criminal libel
Filing in a place based only on where the post could be viewed
Submitting cropped screenshots without URLs or surrounding context
Assuming the profile name conclusively proves authorship
Forgetting to establish publication to a third person
Claiming truth without evidence of good motives and justifiable ends
Assuming criticism of a public official is automatically protected—or automatically libelous
Treating a bare repost and a newly captioned accusation as legally identical
Ignoring a prosecutor’s subpoena
Filing a motion to dismiss instead of the required counter-affidavit
Responding to the dispute with another accusatory post
Threatening criminal charges merely to collect money or silence legitimate criticism
Obtaining private account data through hacking, deception, or unauthorized access
Believing a takedown, apology, or settlement automatically terminates a criminal case already under state control

When legal help is urgent

Consult a Philippine lawyer immediately when:

The one-year period may expire soon
The author is anonymous or platform records may disappear
You received a prosecutor’s subpoena, court summons, or warrant
You have only a few days left to submit a counter-affidavit
The publication involves a public official, journalist, activist, election issue, or public controversy
Multiple people created, edited, shared, or administered the content
The material was published from or viewed across different countries
The case involves confidential records, intimate material, threats, stalking, or impersonation
Police want access to a device or account
A search, disclosure, interception, or examination warrant has been served
Settlement discussions include payment, retraction, confidentiality, or withdrawal of a complaint
Employment, licensing, immigration, or professional-disciplinary consequences are possible

The Public Attorney’s Office may assist qualified indigent litigants, subject to its mandate, means and merit requirements, and conflict rules.

Frequently asked questions

Is every false Facebook post cyber libel?

No. The statement must satisfy all legal elements, including defamatory meaning, identification, publication, and the applicable form of malice. Authorship and use of a computer system must also be proved.

Can a private chat be cyber libel?

Possibly. If the message was sent to at least one person other than the person defamed, publication may exist. A message sent only to the person discussed ordinarily lacks that element.

Are likes, shares, and reactions automatically criminal?

No. Disini invalidated the broad aiding-or-abetting provision as applied to cyber libel. A person who adds a new defamatory caption or allegation, however, may become the author of a separate publication.

Is a true statement always safe?

No. In a criminal libel case, Article 361 generally also requires good motives and justifiable ends. Other rules affect when proof of truth is admissible.

Does deleting the post end the case?

No. Deletion does not erase a completed publication, though it may affect continuing harm or the parties’ practical options. Preserve the evidence before making changes.

Does an apology or retraction automatically dismiss the case?

No. It may be relevant to damages, intent, settlement, or prosecutorial and judicial assessment, but it does not automatically extinguish criminal liability.

How long does the complainant have to file?

Cyber libel generally prescribes in one year from discovery by the offended party, authorities, or their agents under Causing v. People. The discovery date, interruption of prescription, and effectiveness of a particular filing may require evidence and legal analysis.

Can the same publication support both ordinary libel and cyber libel charges?

The Supreme Court has held that ordinary libel and cyber libel based on the identical publication are essentially the same offense; punishing the same act under both provisions raises double-jeopardy concerns. Different publications or independently authored statements require separate analysis.

Can a company be defamed?

The Revised Rules of Criminal Procedure recognize that an offended party may be a juridical person. Whether a particular statement legally defames a company, and who may execute the complaint, depends on the publication and corporate authority documents.

Can I file directly with the RTC?

A cyber libel charge ordinarily undergoes preliminary investigation first because of the prescribed penalty. The complainant generally files with the proper prosecutor; if probable cause is found and approved, the prosecutor files the information in the proper RTC.

Official legal references

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Cyber libel questions are highly dependent on the precise words, complete context, evidence, dates, parties, and filing location. Official sources were checked as of September 19, 2026.