Quick answer

To file a cyber libel case in the Philippines, act promptly: preserve the online material and proof of when it was discovered, identify the original author, prepare a sworn complaint supported by admissible evidence, and file it with the proper prosecution office. You may first seek technical assistance from the National Bureau of Investigation Cybercrime Division or the Philippine National Police Anti-Cybercrime Group.

To defend a case, do not ignore a subpoena, summons, warrant, or court notice. Obtain counsel immediately, preserve—not alter—the account and device evidence, and examine whether the prosecution can prove every element, proper venue, authorship, publication, identification, defamatory meaning, and malice. Also check prescription: under the Supreme Court’s current ruling, cyber libel generally prescribes in one year from discovery by the offended party, the authorities, or their agents, subject to interruption and other statutory rules. The date of discovery is a factual issue and is not automatically the date of posting. Causing v. People, G.R. No. 258524, April 7, 2026.

Cyber libel is a criminal offense. A conviction can result in imprisonment, a fine, or both, as well as civil liability. Filing a complaint does not guarantee that charges will be brought, and an offensive, false, or harmful post is not automatically cyber libel.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act penalizes libel committed through a computer system or a similar means. This includes potentially defamatory material published through social media, websites, blogs, online forums, messaging platforms, email, and other internet-based systems. The law uses the definition of libel found in Articles 353 and 355 of the Revised Penal Code. Republic Act No. 10175.

The prosecution generally must establish all of the following beyond reasonable doubt:

There was an imputation. The statement attributed a crime, vice, defect, act, omission, condition, status, or circumstance to a person, organization, or deceased person’s memory.
The imputation was defamatory. Considered in its full context and ordinary meaning, it tended to dishonor, discredit, expose to contempt, or damage the reputation of the person concerned.
The offended person was identifiable. Naming the person is not always necessary. Identification may be established if people familiar with the surrounding circumstances could reasonably determine who was being discussed.
There was publication. At least one person other than the author and the person defamed received, read, or saw the statement. A purely private message sent only to the person criticized may fail the publication requirement, although other laws could still apply.
The publication was malicious. Malice may be presumed for an unprivileged defamatory statement, but the presumption may be defeated by evidence or displaced where constitutional or statutory privilege applies.
The accused was responsible for the publication. The prosecution must connect the accused—not merely an account bearing the accused’s name—to the statement.
A computer system or information and communications technology was used.

Context matters. Courts consider the whole post, not isolated words alone, including images, hashtags, captions, replies, irony, language, audience, and surrounding events.

Who may be charged?

The cyber-libel provision is constitutional as applied to the original author of the defamatory online statement. In Disini v. Secretary of Justice, the Supreme Court held it unconstitutional as applied to people who merely receive and react to the post. The Court also invalidated aiding or abetting liability in relation to cyber libel. A mere “like” or uncomplicated sharing of someone else’s post therefore is not treated in the same way as authorship. Disini v. Secretary of Justice, G.R. No. 203335, February 11, 2014.

That protection is not a license to add new accusations. A person who writes an independently defamatory caption, comment, alteration, or follow-up statement may become the original author of that separate publication. Administrators, editors, employers, page owners, and other participants are not automatically criminally liable; responsibility depends on what each person actually authored or published and what the evidence proves.

The same online statement should not result in separate prosecutions for ordinary libel and cyber libel. Disini held that charging both for the same conduct would violate the prohibition against double jeopardy.

Important defenses and exceptions

A defense succeeds only if supported by the facts and evidence. Deleting a post, apologizing, or saying “no offense intended” does not by itself erase a completed offense, although later conduct can affect the evidence, settlement discussions, damages, or sentencing.

The statement was not defamatory

Criticism, disagreement, satire, rhetorical exaggeration, and an opinion that does not assert or imply a provably defamatory fact may be protected. Simply labeling an accusation “opinion” is not decisive. A court will examine whether an ordinary reader would understand it as conveying an underlying factual claim.

The person was not identifiable

A vague statement about a large or undefined group may not identify a particular complainant. Identification may nevertheless be proved through photographs, tags, initials, job titles, location, prior posts, or facts known to the audience.

There was no publication to a third person

A statement communicated solely to the subject ordinarily lacks the publication required for libel. Check recipients, group membership, privacy settings, forwarding, and whether another person actually saw the content.

The accused did not author or publish it

Accounts can be impersonated, hacked, shared, spoofed, or accessed through another device. The display name on a screenshot is not necessarily conclusive proof of authorship. Relevant evidence can include account-registration information, login records, device data, IP or traffic information, admissions, writing patterns, witnesses, and platform records.

Privileged communication

Article 354 of the Revised Penal Code recognizes limited privileged communications, including:

A private communication made in the performance of a legal, moral, or social duty to a person with a corresponding interest or duty; and
A fair and true report, made in good faith and without comments or remarks, of qualifying official proceedings or acts described by the law.

Privilege is fact-sensitive. Publicly broadcasting an accusation far beyond the people who have a corresponding duty or interest may defeat the claimed protection. Adding unsupported conclusions to an official report can also create liability.

Truth, good motives, and justifiable ends

Truth is not always a complete defense standing alone. Article 361 generally requires proof of the truth together with good motives and justifiable ends. Special rules apply when the imputation concerns a crime committed by a government employee or matters connected with official duties.

Preserve the documents and reliable sources that existed when the statement was published. A belief unsupported by reasonable verification may not establish good faith.

Fair comment, public interest, and actual malice

Speech on public issues and official conduct receives strong constitutional protection. Where the complainant is a public official or public figure and the publication concerns a matter of public interest, liability generally requires proof of actual malice—knowledge that the statement was false or reckless disregard of whether it was false.

“Actual malice” in this constitutional sense is not merely anger, dislike, or harsh wording. It concerns the publisher’s state of mind regarding falsity. Whether someone is a public figure, whether the subject is of public concern, and whether actual malice has been shown are legal and factual questions.

Prescription

As of the source-check date below, the Supreme Court holds that cyber libel prescribes in one year from discovery of the crime by the offended party, authorities, or their agents. Filing the complaint or information interrupts prescription; the period may run again if proceedings end without conviction or acquittal or are unjustifiably stopped for a reason not attributable to the accused. The period does not run while the offender is absent from the Philippines. Causing v. People, G.R. No. 258524, April 7, 2026.

There is no automatic presumption that a person discovered a defamatory statement on the day it was posted. Discovery may be shown through messages, comments, reactions, reports, threats of legal action, affidavits, or other conduct demonstrating knowledge. Because prescription may depend on disputed evidence, a court may require the issue to be resolved at trial rather than through an unsupported motion to quash.

Do not assume that editing, reposting, or leaving an old post online automatically creates a fresh prescriptive period. Each alleged publication must be examined on its facts.

How to file a cyber libel complaint

1. Preserve the material immediately

Before requesting deletion or confronting the author, preserve:

Full-page screenshots showing the post, account or page name, date and time, URL, comments, reactions, and surrounding context;
A screen recording showing how the post was accessed;
The original URL, post identifier, username, profile URL, and platform;
The original files, emails, messages, notifications, and downloaded data;
The device on which the material was received or viewed;
Names and contact details of people who saw it;
Proof of the date you first discovered it; and
Evidence of resulting harm, such as lost work, cancelled contracts, messages from clients, or medical records where genuinely relevant.

Do not crop away context or rely only on a printed screenshot. Keep unedited originals and working copies separately. Record who collected each item, when it was collected, and how it was stored. Electronic evidence must still be authenticated and shown to be reliable under the Rules on Electronic Evidence.

2. Identify the alleged author carefully

Record the exact account and content involved, but do not publicly accuse a suspected person without sufficient evidence. A username, photograph, or profile description may be false.

The NBI and PNP are the principal law-enforcement agencies designated to investigate offenses under Republic Act No. 10175. Their cybercrime units may assist in evidence preservation, attribution, and requests for data that private individuals cannot lawfully compel. Republic Act No. 10175, Sections 10–18.

Platform information is not available indefinitely. Republic Act No. 10175 provides preservation mechanisms, but disclosure of subscriber, traffic, or content data ordinarily requires lawful process and, where required, a court-issued warrant. Private parties should not attempt unauthorized access to an account or device.

3. Fix the discovery date and calculate the deadline

Write down:

When and how the post first came to your attention;
Who showed or sent it to you;
When authorities or an authorized representative learned of it;
Whether you reacted, replied, reported the post, sent a demand, or discussed filing a case; and
The dates of any complaint already filed or proceeding later terminated.

Because the general criminal period is one year from discovery, delay can be fatal. Filing a platform report, barangay complaint, demand letter, or informal police incident report should not be assumed to interrupt prescription. Obtain legal advice on what filing is required in the particular case.

A separate civil action for defamation may also have a short prescriptive period. Ask counsel to calculate criminal and civil deadlines independently.

4. Determine the proper place of filing

Cybercrime cases fall within the jurisdiction of the Regional Trial Court, with designated cybercrime courts handling them. Jurisdiction can exist when an element occurred in the Philippines, a computer system used was wholly or partly situated here, or the offense caused damage to a person who was in the Philippines when it occurred. Republic Act No. 10175, Section 21.

The correct venue is a separate question. Online accessibility everywhere does not necessarily make every city or province a proper venue. The complaint should allege and support specific facts connecting the offense or a material element to the chosen place. Venue errors can lead to dismissal or delay, so confirm the appropriate prosecution office and designated court before filing.

5. Prepare a complete sworn complaint

A useful complaint-affidavit ordinarily includes:

The complainant’s identity and personal knowledge;
The respondent’s identity, if known;
The exact statement complained of—not merely a summary;
The URL, platform, account, publication date, and discovery date;
How the complainant was identified;
Who else saw or received the statement;
Why the statement is defamatory and, where relevant, false;
Facts supporting authorship and malice;
Facts establishing jurisdiction and venue;
A chronological narrative; and
Properly marked supporting documents and witness affidavits.

State facts honestly. Do not embellish damages, alter screenshots, omit exculpatory context, or submit hearsay as though it were personal knowledge. A knowingly false sworn statement can create separate legal consequences.

6. File and follow the prosecutor’s instructions

The complaint may be filed with the proper city, provincial, or other competent prosecution office. A complainant who needs technical investigation may approach the NBI Cybercrime Division or PNP Anti-Cybercrime Group, but a law-enforcement investigation is not a substitute for filing in the proper forum before prescription expires.

The prosecutor will evaluate whether the evidence satisfies the governing standard for filing an information in court. The respondent is ordinarily given an opportunity to submit a counter-affidavit and evidence. Follow the deadlines and service instructions in the subpoena or official order; do not rely on assumptions about a standard number of days because an extension is not automatic.

If the prosecutor finds sufficient basis, an information is filed in the proper RTC. The court—not the complainant, investigator, or prosecutor—ultimately determines guilt, and conviction requires proof beyond reasonable doubt.

How to respond if you are accused

Do not ignore official papers

A demand letter is not the same as a prosecutor’s subpoena, warrant, or court order. Read the document carefully and note:

The issuing office;
Case or docket number;
Date and method of service;
Deadline and hearing date;
Specific post and offense alleged; and
Instructions for submitting a response.

Missing a deadline can forfeit an opportunity to present evidence during preliminary investigation. Contact a Philippine criminal-defense lawyer promptly.

Preserve evidence and stop discussing the case publicly

Do not delete messages, reset devices, fabricate conversations, coach witnesses, or attempt to access another person’s account. Preserve:

The complete post and drafts;
Account and device records;
Source documents relied upon;
Communications with editors, administrators, or sources;
Proof that someone else controlled or accessed the account;
Privacy settings and audience information;
The context before and after the challenged statement; and
Evidence relevant to truth, good faith, privilege, public interest, or lack of malice.

You may stop further publication after taking preservation measures, but ask counsel before editing or deleting material that may be evidence. Avoid online arguments, threats, retaliatory posts, or attempts to pressure the complainant or witnesses.

Build the defense element by element

A counter-affidavit should address the actual charge rather than merely deny wrongdoing. Counsel should examine:

Whether the information alleges every essential element;
Whether the complainant was identifiable;
Whether a third person received the statement;
Whether the accused authored or published it;
Whether the statement is factual, defamatory, or reasonably capable of an innocent meaning;
Whether it was privileged or involved public interest;
Whether truth, good motives, and justifiable ends can be proved;
Whether actual malice must be shown;
Whether venue and jurisdiction are supported;
Whether the case has prescribed; and
Whether electronic evidence was lawfully obtained and can be authenticated.

A motion to quash, motion to suppress or exclude evidence, petition for review of a prosecutor’s resolution, or other remedy may be available, but each has specific grounds and deadlines. These remedies should not be filed reflexively.

Know your rights during investigation

The Constitution protects the right against unreasonable searches and seizures and the right against self-incrimination. Searches, examination of computer data, compelled disclosure, interception, and seizure are governed by Republic Act No. 10175 and the Supreme Court’s Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC.

Ask to see and review any warrant with counsel. Check its type, court, scope, target account or device, authorized data, and validity period. Do not physically resist lawful officers. Clearly state that you wish to consult counsel and document objections through proper legal channels.

Penalties and civil exposure

Cyber libel carries a penalty one degree higher than traditional libel. For offenses governed by the amended fine provisions, the Supreme Court has held that the applicable fine for online libel ranges from ₱40,000 to ₱1,500,000. Depending on the circumstances, the court may impose imprisonment, a fine, or both. A fine alone is legally possible, but it is not guaranteed; courts retain discretion, and inability to pay may have consequences under the Revised Penal Code. People v. Soliman, G.R. No. 256700, April 25, 2023.

The precise penalty depends on the law in force when the offense occurred, mitigating or aggravating circumstances, and the judgment. Civil damages may also be pursued with or separately from the criminal case under applicable procedural and civil-law rules. Damages must be proved; they are not automatic simply because a post was hurtful.

An acquittal does not invariably resolve every possible civil claim in the same way. Counsel should examine whether civil liability was included, reserved, waived, separately filed, or extinguished by the particular basis of the judgment.

Common mistakes to avoid

Waiting for a platform to respond while the one-year period may be running;
Treating the posting date as automatically identical to the discovery date;
Filing in a convenient location without proving venue;
Submitting cropped screenshots with no URL, timestamp, or context;
Assuming an account name alone proves authorship;
Secretly accessing an account or device without authority;
Believing every insult, criticism, or negative review is criminal libel;
Assuming truth alone always ends the case;
Naming everyone who liked, received, or shared the original post;
Sending threats or demanding money in exchange for silence;
Deleting evidence after receiving a complaint or preservation request;
Ignoring a subpoena because the respondent believes the accusation is baseless; and
Posting the complaint, counter-affidavit, private messages, or evidence online and creating new legal risks.

When legal help is urgent

Seek immediate assistance from a Philippine lawyer if:

The one-year period may expire soon;
You received a prosecutor’s subpoena, information, arrest warrant, or search warrant;
A device, account, or business system may be searched or seized;
The author is anonymous and platform data may disappear;
The post involves a public official, journalist, whistleblower, workplace dispute, minor, intimate material, or threat;
Several people, reposts, jurisdictions, or countries are involved;
The alleged author was outside the Philippines;
A retraction, settlement, or payment is being demanded;
The same facts may involve privacy, threats, harassment, identity theft, or another offense; or
You are considering a public response that could create another publication.

Those who cannot afford private counsel may ask the Public Attorney’s Office about eligibility. Victims may also inquire with the NBI or PNP Anti-Cybercrime Group for investigation assistance.

Frequently asked questions

Is a false Facebook post automatically cyber libel?

No. The prosecution must still prove all elements, including defamatory imputation, identification, publication, malice, authorship, and use of a computer system. Privilege and constitutional protections may apply.

Can I sue someone for sharing a defamatory post?

Mere receipt, reaction, liking, or uncomplicated sharing is not treated as cyber libel under Disini. A person who adds a new defamatory accusation may be responsible for that separate statement.

Does deleting the post prevent a case?

No. Publication may already have been completed, and copies or platform records may remain. Deletion can, however, affect continuing harm and may be considered with other circumstances. Preserve evidence before making changes.

Is an apology a complete defense?

No. An apology does not automatically extinguish criminal or civil liability. It may be relevant to good faith, damages, settlement, or penalty, depending on the circumstances.

Must I send a demand letter before filing?

Not generally as an element of cyber libel. A demand may help clarify identity, seek correction, or support settlement, but it should not be allowed to consume the prescriptive period.

Can the complainant file where the post was viewed?

Not automatically. Online accessibility alone should not be treated as universal venue. The filing must satisfy the statutory and procedural venue rules based on the proven facts.

How long do I have to file?

The present Supreme Court rule is generally one year from discovery by the offended party, authorities, or their agents, subject to interruption and other rules in Article 91 of the Revised Penal Code. Establishing the discovery date may require evidence.

Can a court impose only a fine?

Yes. The Supreme Court has confirmed that a fine may be imposed instead of imprisonment in an appropriate case, but imprisonment remains legally available and the result depends on the circumstances and judicial discretion.

Can private messages be cyber libel?

They can be only if the publication requirement is met—for example, if the defamatory statement was sent to someone other than the person defamed. A message sent solely to its subject ordinarily lacks publication, although it may raise other legal issues.

Will a screenshot alone win the case?

Not necessarily. A screenshot must be authenticated and connected to the author, account, publication, recipient, date, and full context. Native files, URLs, witnesses, device records, and lawfully obtained platform data can be important.

Official legal sources

This article provides general legal information, not legal advice or an attorney-client relationship. Cyber-libel outcomes depend on the exact words, audience, authorship, evidence, dates, venue, and procedural record. The controlling sources and current rules cited here were checked as of September 12, 2026.