Quick answer

Cyber libel is committed when a person authors and publishes defamatory material through a computer system or similar digital means. A viable complaint ordinarily must show:

a defamatory allegation of a crime, vice, defect, or act tending to dishonor or discredit a person;
publication to at least one person other than the person defamed;
identification of the complainant, even if the complainant was not expressly named;
malice, unless the communication is privileged; and
use of a computer system, such as a social-media platform, website, messaging service, email, or similar technology.

A complainant should preserve the original post and related electronic evidence immediately, determine the correct venue, and file a sworn complaint with the proper prosecution office before prescription. A person accused should not ignore a subpoena: obtain the complete complaint and annexes, preserve—not alter or delete—relevant evidence, and submit a sworn counter-affidavit within the deadline stated in the subpoena or prosecutor’s order.

The Supreme Court has ruled that cyber libel generally prescribes in one year from discovery of the allegedly defamatory publication. Filing close to that deadline is dangerous because disputes may arise over discovery, republication, venue, and whether the proceeding validly interrupted prescription. See Causing v. People, G.R. No. 258524, and the Supreme Court’s 2026 reaffirmation of the one-year rule.

What Philippine law punishes

Section 4(c)(4) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, punishes the unlawful acts of libel defined in Article 355 of the Revised Penal Code when committed through a computer system or similar future means.

The underlying rules appear in Articles 353 to 362 of the Revised Penal Code:

Article 353 defines libel as a public and malicious imputation of a crime, vice, defect, or circumstance tending to cause dishonor, discredit, or contempt.
Article 354 generally presumes malice from a defamatory imputation, subject to privileged-communication exceptions.
Article 355 covers libel committed by writing, printing, and similar means.
Article 361 governs when truth may be proved as a defense.
Article 360 addresses responsibility, venue, and civil liability in ordinary libel cases.

Cyber libel is not established merely because a post is insulting, upsetting, inaccurate, or widely shared. The prosecutor and, if a case is filed, the court must evaluate the words in their full context, whom they referred to, who published them, whether they communicated a factual imputation, and whether a privilege or constitutional protection applies.

Who may be held responsible

In Disini v. Secretary of Justice, G.R. No. 203335, the Supreme Court upheld the cyber-libel provision as to the original author of the online post. It declared the provision unconstitutional as applied to people who merely receive the post and react to it. The Court also invalidated aiding-or-abetting liability under Section 5 of RA 10175 insofar as it applied to cyber libel.

Accordingly, a “like,” ordinary reaction, or mere receipt of someone else’s post does not by itself make a person the author of cyber libel. Liability for a share, repost, added caption, edited republication, coordinated publication, or separate comment can be fact-sensitive, however. A person who adds a new defamatory allegation may become the author of that new statement.

An account name or screenshot alone does not conclusively prove authorship. Attribution may depend on admissions, account records, device evidence, subscriber information obtained through lawful process, witnesses, and the surrounding circumstances.

The same online publication should not result in separate prosecutions for both ordinary libel and cyber libel. Disini held that charging both for the same material would violate the prohibition against double jeopardy.

Statements that may or may not be defamatory

Courts assess the ordinary meaning and overall impression of the communication, not isolated words selected after the fact.

Potentially defamatory factual imputations include unsupported accusations that an identifiable person committed fraud, theft, adultery, corruption, professional misconduct, or another disgraceful act. A photograph, video, meme, headline, hashtag, insinuation, or combination of words and images can convey an imputation even without naming the person.

Not every harsh statement is criminal libel. Depending on context, the following may fall outside liability:

rhetorical hyperbole or obvious exaggeration;
an opinion that does not imply undisclosed defamatory facts;
fair comment on matters of legitimate public interest;
a substantially accurate report of an official proceeding, subject to Article 354;
a private communication made in the performance of a legal, moral, or social duty; or
constitutionally protected criticism of public officials or public figures.

Calling a statement an “opinion,” adding “allegedly,” or ending it with a question mark does not automatically protect it. The issue is what a reasonable reader would understand the statement to assert.

Malice, privilege, truth, and public-interest speech

Presumed and actual malice

For an ordinarily defamatory statement, Article 354 presumes malice even if the allegation is true, unless good intention and justifiable motive are shown or a recognized privilege applies.

“Actual malice” has a more specific constitutional meaning in cases involving public officials, public figures, or protected discussion of public affairs: knowledge that the statement was false or reckless disregard of whether it was false. Whether this heightened standard applies depends on the complainant’s status, the subject discussed, and the evidence concerning the author’s state of mind.

Personal hostility can be evidence of malice, but hostility alone does not replace proof of the other elements.

Privileged communications

Article 354 recognizes qualified privileges that include:

a private communication made to another person in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts of public officers.

A qualified privilege is not absolute. It may be defeated by proof of actual malice, unnecessary publication, excessive language, or use of the occasion for an improper purpose.

Statements made in the course of legislative, judicial, or other proceedings may also involve constitutional or other forms of privilege. Their protection depends on the speaker, forum, purpose, and connection to the proceeding.

Truth is not an automatic defense in every case

Under Article 361, acquittal based on truth generally requires proof both that the defamatory matter was true and that publication was prompted by good motives and justifiable ends.

If the imputation concerns an act or omission that is not a crime, proof of truth is generally not admitted unless the statement concerned a government employee and facts related to the discharge of official duties. Because these distinctions matter, a respondent should not rely on “but it was true” without reviewing Article 361 and the supporting documents with counsel.

The one-year filing period

The Supreme Court held in Causing v. People, G.R. No. 258524, that cyber libel prescribes in one year, consistent with the Revised Penal Code period for libel. The period runs from discovery of the offense, subject to the statutory rules on interruption and resumption.

Do not assume that an old post creates a new one-year period every time somebody views it. Whether an edit, re-upload, new caption, or deliberate republication constitutes a new publication depends on what was done and the evidence. Likewise, removing a post does not erase a completed publication or necessarily prevent liability.

Record the following dates immediately:

the date and time the material was first posted;
when the complainant or a reliable witness first discovered it;
every material edit or separate republication;
when preservation or platform requests were made; and
when the complaint was formally filed and docketed.

If the first discovery date is approaching one year—or is disputed—obtain legal assistance urgently.

How to preserve usable electronic evidence

Screenshots are useful, but a single cropped screenshot is often incomplete. Preserve enough material to establish content, context, publication, identity, and authenticity.

Keep:

full-page screenshots showing the account name, exact content, date, time, reactions, comments, and surrounding thread;
the complete URL or other unique post identifier;
a screen recording showing navigation from the account or page to the publication;
downloaded copies of the image, video, audio, email, or message in its original available format;
account-profile information and prior or later posts relevant to identity and context;
notifications, direct messages, admissions, demands, retractions, and replies;
names and contact information of people who saw the publication;
records showing reputational or financial harm, such as cancelled contracts or client messages; and
the original device and unedited files.

Create a written log stating who captured each item, on what device, and when. Back up the files without changing the originals. If possible, calculate file hashes or have a qualified examiner make a forensic copy.

Do not obtain evidence by guessing passwords, impersonating another person, unlawfully accessing a private account, or secretly intercepting communications. Illegally obtained material may be excluded and may expose the collector to a separate complaint.

Platform data can disappear. RA 10175 and the Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC, provide procedures for preserving, disclosing, intercepting, searching, seizing, and examining computer data. Subscriber, traffic, or content data generally require the appropriate preservation process or judicial warrant; a private complainant cannot compel disclosure merely by emailing a platform.

How to file a cyber-libel complaint

1. Have the publication assessed before filing

Identify the exact words, images, audio, or video claimed to be defamatory. For each publication, ask:

What factual imputation does it communicate?
How is the complainant identifiable?
Who authored or controlled the publication?
Who other than the complainant saw it?
What proves use of a computer system?
Is the statement privileged or protected public-interest commentary?
What evidence shows falsity or rebuts a claimed defense?
Is the complaint still within one year from discovery?

A demand for correction or retraction is not generally an element that must precede a criminal complaint. It may nevertheless help clarify authorship, avoid litigation, or become relevant to malice and damages. It should be carefully written; threats, public shaming, or demands for improper payment can create new problems.

2. Determine the proper place of filing

Cybercrime cases are tried by designated Regional Trial Courts. Under Section 2.1 of the Rule on Cybercrime Warrants, venue may lie in the city or province:

where the offense or any element occurred;
where any part of the computer system used is situated; or
where damage to a natural or juridical person took place.

Venue is jurisdictional in criminal cases and must rest on provable facts. The mere nationwide accessibility of a post should not be treated as a license to select any convenient location. Obtain advice if the author, server, complainant, and audience were in different places.

3. Prepare the complaint-affidavit

The complaint-affidavit should be sworn and based on personal knowledge or properly identified records. It should clearly state:

the parties’ identities and addresses, if known;
the exact publication and its URL or identifier;
the date of publication and date of discovery;
how the complainant is identified;
who saw or received the material;
facts connecting the respondent to the account or publication;
why the imputation is defamatory and materially false;
facts relevant to malice, privilege, venue, and prescription; and
a numbered list of authenticated annexes.

Avoid legal conclusions unsupported by facts. Preserve originals and submit copies in the form required by the prosecution office.

4. File with the proper prosecution office

A criminal complaint is ordinarily filed for preliminary investigation with the Office of the City Prosecutor, Office of the Provincial Prosecutor, or other prosecution office having authority over the proper venue.

The NBI and PNP are the law-enforcement authorities designated by Section 10 of RA 10175. Their cybercrime units may investigate, preserve evidence through lawful processes, identify an unknown account holder, and refer or file a complaint with prosecutors. Reporting to an investigative agency should not be assumed, without confirmation, to be equivalent to timely filing of the required complaint for prescription purposes.

5. Participate in preliminary investigation

The governing procedure is the 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings, Department Circular No. 15. The prosecutor evaluates whether there is prima facie evidence with reasonable certainty of conviction.

The respondent is normally served with a subpoena and copies of the complaint and supporting evidence, then given a deadline to submit a sworn counter-affidavit and annexes. The investigating prosecutor may require clarificatory proceedings or additional evidence.

If the prosecutor dismisses the complaint or finds sufficient basis to file an Information, any motion for reconsideration or administrative review must follow the period and procedure stated in the governing DOJ rules and resolution. Do not assume that seeking review automatically suspends court proceedings or an arrest warrant.

How to defend against a complaint

Act immediately upon receiving a subpoena

Note the date and manner of service. Obtain the complaint, all annexes, and the prosecutor’s orders. Contact counsel promptly and verify the submission deadline with the prosecution office. If essential attachments are missing, raise that deficiency in writing rather than simply ignoring the subpoena.

A request for extension is discretionary. File it before the deadline, explain the concrete reason, and do not assume it has been granted until the prosecutor issues an order.

Preserve everything

Do not delete the account, post, device, messages, drafts, or login records. Deletion can destroy exculpatory context and may be portrayed as concealment. Preserve:

the complete conversation or thread;
source materials relied upon;
drafts and editorial communications;
records identifying the actual author or account administrator;
evidence of hacking, spoofing, or unauthorized access;
communications showing verification efforts or good faith;
official documents supporting a fair-report defense; and
evidence that the complainant was not identified or that no third person received the material.

Avoid contacting witnesses to pressure them, coaching them to change statements, or posting attacks on the complainant or prosecutor.

Build the counter-affidavit around the required elements

Depending on the facts, defenses may include:

the respondent did not author or publish the material;
the account attribution is unreliable;
the complainant was not identifiable;
there was no publication to a third person;
the communication did not make a defamatory factual imputation;
the words were protected opinion, fair comment, or rhetorical hyperbole;
the communication was privileged;
the report was fair, true, and made in good faith;
actual malice was not proved where constitutionally required;
truth, good motives, and justifiable ends are established under Article 361;
venue is unsupported;
the offense had prescribed;
the publication occurred before RA 10175 took effect and cannot be punished retroactively;
the respondent merely received or reacted to another person’s post under Disini; or
the same act was impermissibly charged as both ordinary and cyber libel.

A blanket denial is rarely enough if the complainant has produced detailed evidence. Address authorship, context, publication, and the alleged defamatory meaning with admissible supporting records.

What happens if an Information is filed in court

The Information is filed in the proper designated Regional Trial Court. The judge independently evaluates the prosecutor’s resolution and supporting evidence to determine whether to dismiss the case, issue a warrant, or require further evidence.

If a warrant is issued, arrange lawful surrender and bail through counsel. Do not evade service or rely on informal assurances that the warrant will be withdrawn. Bail, hold-departure issues, travel restrictions, arraignment, pre-trial, and trial require case-specific advice.

Cyber libel carries the enhanced penalty provided by Section 6 of RA 10175—one degree higher than the corresponding Revised Penal Code offense. The exact imposable sentence depends on the charging allegation, applicable penalty rules, modifying circumstances, and the court’s judgment. A conviction may also include civil damages and costs. Courts have discretion in appropriate libel cases to consider a fine instead of imprisonment, but a fine-only disposition is not guaranteed.

Criminal and civil remedies are different

A cyber-libel prosecution may include the civil liability arising from the offense unless it is validly waived, reserved, or separately instituted under the procedural rules.

Depending on the facts, an injured person may also consider an independent civil action for defamation or violations of privacy, dignity, or other rights under the Civil Code. Different causes of action have different elements, parties, filing periods, remedies, and standards of proof. A criminal dismissal does not automatically decide every possible civil claim, particularly when the dismissal rests on failure to meet the criminal standard.

A complainant seeking removal of content should also consider the platform’s reporting tools and, with counsel, appropriate civil or judicial relief. Section 19 of RA 10175, which purported to let the DOJ block data without a court order, was declared unconstitutional in Disini.

Common mistakes to avoid

Waiting for a post to “go viral” before preserving or reporting it.
Saving only a cropped screenshot without its URL, date, context, or witnesses.
Treating every insult or criticism as a defamatory factual allegation.
Filing against everyone who liked, received, or reacted to the post.
Assuming truth alone always defeats criminal libel.
Naming an account holder without evidence connecting that person to authorship.
Choosing venue solely for convenience.
Counting the one-year period from deletion rather than examining discovery and publication dates.
Assuming a police report, barangay complaint, demand letter, or platform report necessarily interrupts prescription.
Editing, deleting, or replacing evidence after learning of a complaint.
Posting the complaint, counter-affidavit, or private evidence online and creating further exposure.
Ignoring a subpoena because the respondent believes the complaint is “obviously false.”
Missing a prosecutor, review, bail, or court deadline while settlement discussions continue.

When legal help is urgent

Seek a Philippine lawyer immediately when:

the one-year prescriptive period is near;
the author used an anonymous, hacked, or overseas account;
platform or telecommunications data may soon disappear;
you received a prosecutor’s subpoena or court notice;
a warrant of arrest has been issued;
the publication concerns a public official, journalist, whistleblower, election, or matter of public interest;
the complaint involves both cyber libel and privacy, threats, harassment, identity theft, or unlawful access;
the disputed material contains confidential, sexual, or child-related content;
several publications, authors, jurisdictions, or corporate accounts are involved; or
a proposed retraction, settlement, or payment demand could be interpreted as an admission or improper threat.

Those unable to afford private counsel may ask the Public Attorney’s Office or an accredited legal-aid organization whether they qualify for assistance.

Frequently asked questions

Can I file because a private message insulted me?

Not necessarily. Libel requires publication to someone other than the person defamed. A message sent only to you may lack that element, although threats, harassment, privacy violations, or other offenses may be relevant. A group chat or copied message may satisfy publication if third persons received it.

Must the post mention my full name?

No. Identification can be established when readers familiar with the circumstances would reasonably understand that the statement referred to you. The link must be proved, not merely asserted.

Is a screenshot enough?

It may support a complaint, but its weight depends on authenticity, completeness, and corroboration. Preserve the URL, account details, original files, full thread, device, capture process, and witnesses.

Can I sue everyone who shared the post?

Not automatically. Disini protects people who merely receive and react to a post from cyber-libel liability. A person who writes a new defamatory caption, adopts the accusation as a new publication, or creates separate defamatory content presents a different factual question.

Does deleting the post end the case?

No. Deletion does not undo a completed publication. Preserve a copy before asking for removal, and do not delete evidence after receiving notice of an investigation or complaint.

Is an apology or retraction a complete defense?

No. It may affect proof of malice, mitigation, damages, or settlement, but it does not automatically erase an already completed offense. Have counsel review the wording before publishing an admission or retraction.

Can a company be defamed?

A juridical person may suffer reputational injury, and RA 10175 also contains corporate-liability provisions. Whether the publication supports criminal or civil liability depends on the precise imputation, the responsible natural persons, and the evidence.

Can an old online article still be prosecuted because it remains accessible?

Continued accessibility alone should not be assumed to restart prescription each day. The Supreme Court’s current rule is one year from discovery. A genuine new publication or material republication may require separate analysis.

Can the case be settled?

The private parties may discuss apology, correction, removal, or compensation, but cyber libel is a public offense prosecuted in the name of the People. A private settlement or affidavit of desistance does not automatically compel the prosecutor or court to dismiss the criminal case.

Official legal sources

This article provides general legal information, not legal advice or an attorney-client relationship. Cyber-libel outcomes depend heavily on the exact words, context, evidence, dates, parties, and procedural history. Law and official procedures were checked through September 19, 2026.