Quick answer

Cyber libel is committed when the original author publicly makes an identifiable, defamatory, and malicious imputation through a computer system or similar information and communications technology. Being insulted online is not, by itself, enough: the prosecution must establish every legal element and reliably connect the accused to the post.

If you intend to complain, preserve the complete post and proof of authorship immediately, record when you first discovered it, and file the proper sworn complaint without delay. Cyber libel generally prescribes one year from discovery by the offended party, authorities, or their agents—not automatically from the posting date. Filing a platform report, police blotter, or demand letter should not be assumed to stop that period.

If you are accused, do not ignore a prosecutor’s subpoena. Obtain the complete complaint and attachments, preserve your account and device evidence, and submit a properly sworn counter-affidavit by the stated date. Under the current regular preliminary-investigation procedure, that date must be at least 10 days after receipt of the subpoena and complaint-affidavit.

What Philippine law treats as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the prohibited act is committed through a computer system or a similar means.

A case ordinarily requires proof of:

A defamatory imputation. The words attribute a crime, vice, defect, discreditable act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose someone to contempt.
Publication. A person other than the author and the person defamed received or understood the statement. A message seen only by its target ordinarily lacks this element; a public post, group chat, shared email, or message sent to third persons may satisfy it.
Identifiability. The complainant must be named or sufficiently identifiable from the words and surrounding circumstances. A reader’s ability to guess is a factual matter requiring evidence.
Malice. As a general rule, a defamatory imputation is presumed malicious unless it falls within a recognized privilege. Different and more speech-protective standards apply in certain public-interest cases.
Use of ICT and authorship. The defamatory material must have been published through a computer system or similar technology, and the evidence must connect the respondent to its authorship or publication.

Courts read the entire statement in its context and in its plain and ordinary meaning—not merely its most offensive sentence. Pure opinion, rhetorical exaggeration, or criticism that does not assert a provably defamatory fact may fall outside libel. Calling something an “opinion,” however, is not a shield if the words assert or imply false factual accusations.

A juridical person, such as a corporation, can also be the object of libel under Article 353.

Important exceptions and defenses

Mere reactions are not automatically cyber libel

In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as to the original author but declared it unconstitutional as applied to people who merely receive and react to the post. The ruling addressed ordinary online reactions such as liking, commenting on, or sharing received content.

This is not permission to create a new defamatory post. A person who adds a new accusation, composes a defamatory caption, materially rewrites the allegation, or otherwise becomes the author of separate content may present a different factual situation.

Truth alone may not be enough

Article 361 requires both:

proof that the imputation is true; and
proof that it was published with good motives and for justifiable ends.

For an imputation of an act or omission that is not itself a crime, proof of truth is generally inadmissible unless the statement concerns a government employee and facts related to official duties. A respondent relying on truth should preserve the underlying records and evidence of the legitimate reason for publication.

Public officers and public figures

When the complainant is a public figure—particularly a public officer—and the statement concerns a matter within the applicable public-interest standard, the prosecution must prove actual malice: knowledge that the statement was false or reckless disregard of whether it was false. Mere error, inaccuracy, failure to investigate fully, or ordinary negligence does not necessarily establish actual malice. The Supreme Court explained this standard in Daquer v. People.

Whether someone is a public figure, whether the statement concerns official conduct, and whether actual malice existed are fact-dependent questions.

Privileged communications

Article 354 recognizes qualified privileges, including:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without comments, of a non-confidential judicial, legislative, or other official proceeding or official act.

The audience, purpose, wording, relevance, good faith, and extent of circulation matter. Unnecessary publication to people who have no corresponding interest can weaken a claim of privilege. Qualified privilege may also be defeated by proof of actual malice.

The one-year deadline

The current controlling rule is that cyber libel prescribes one year from the day the alleged crime is discovered by the offended party, the authorities, or their agents. The Supreme Court reaffirmed this rule with finality in its April 8, 2026 resolution in Causing v. People.

The Court also held that a person is not automatically presumed to have discovered a Facebook post on the day it was uploaded, even if the post was public. Discovery is proved from the circumstances—for example, a contemporaneous screenshot, message forwarding the post, comment or reaction by the complainant, consultation with counsel, or threat to sue.

Under Article 91 of the Revised Penal Code:

prescription is interrupted by filing the complaint or Information;
it may run again if proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused; and
a person’s absence from the Philippines can affect the computation.

Record the discovery date honestly and precisely. A false discovery date can damage credibility and expose the affiant to other legal consequences. A platform complaint, private demand, barangay entry, or informal approach to law enforcement is not a safe substitute for timely filing of the proper criminal complaint.

A separate civil action for defamation is also generally subject to a one-year period under Article 1147 of the Civil Code. Its accrual, venue, interaction with a criminal case, and available damages should be reviewed separately.

Possible penalties and civil liability

Under Section 6 of the Cybercrime Prevention Act, the imprisonment prescribed for online libel is one degree higher than for traditional written libel: prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months, and one day to eight years.

Following the amendments in Republic Act No. 10951 and the Supreme Court’s ruling in People v. Soliman, the alternative fine for online libel ranges from ₱40,000 to ₱1,500,000. Depending on the circumstances, the court may impose imprisonment, a fine, or both, together with civil liability.

Supreme Court Administrative Circular No. 08-2008 expresses a preference for a fine in appropriate libel cases, and Soliman confirms that the guidance also applies to online libel. It does not guarantee a fine-only sentence. Judges retain discretion based on the seriousness and circumstances of the offense.

How to prepare and file a complaint

1. Preserve the complete digital evidence

Before reporting, requesting removal, or confronting the author, preserve:

full-page screenshots showing the exact text, images, comments, account name, profile details, date, time, URL, and post identifier;
a screen recording showing how the post is reached from the account or page;
the original downloaded image, video, document, email, or message where available;
notification emails, message links, forwarding messages, and platform timestamps;
the device on which the post was viewed;
the names and contact details of people who saw it;
proof of the date and circumstances of first discovery;
records showing why the accusation is false or misleading;
evidence identifying the complainant even if not expressly named; and
evidence connecting the account and post to the suspected author.

Keep unedited originals and working copies. Note who captured each item, when, using which device, and what steps were taken. Do not crop away context or alter file metadata.

Electronic material is not automatically admissible merely because it is printed. Under the Rules on Electronic Evidence, its relevance, authenticity, accuracy, and proper manner of proof must still be established.

2. Build proof of account ownership and authorship

A display name and profile photograph may be insufficient, especially for a dummy, hacked, shared, or impersonation account. The Supreme Court’s guide in XXX v. People recognizes that authorship may be established through combined circumstantial evidence, including:

an admission of ownership, access, or authorship;
a witness who saw the person using the account or composing the message;
information in the post known only to the suspected author or a small group;
distinctive language or writing patterns;
account history and conduct consistent with the person’s earlier activity;
device-forensic results; and
records from a telecommunications company, internet provider, or platform.

Do not obtain evidence through hacking, password guessing, impersonation, unlawful interception, or unauthorized access.

3. Seek prompt assistance for anonymous accounts

The NBI and PNP are the law-enforcement authorities designated by the Cybercrime Prevention Act. An anonymous account can be reported to the NBI Cybercrime Division or PNP Anti-Cybercrime Group for investigation, but attribution must eventually be supported by admissible evidence.

Service-provider records can disappear. Section 13 of the Cybercrime Prevention Act requires preservation of relevant traffic data and subscriber information for at least six months from the transaction and allows specified preservation orders. Disclosure of protected computer data generally requires a court warrant and a valid, officially docketed investigation.

A private demand cannot compel a foreign platform or internet provider to disclose subscriber data. Ask counsel or law enforcement promptly whether a preservation request and cybercrime warrant are appropriate. The NBI provides investigative assistance for victims of computer crimes and an online complaint channel.

4. Prepare a detailed complaint-affidavit

The sworn complaint should state, in chronological and factual terms:

the identities and addresses of the parties, as known;
the exact allegedly defamatory words and their complete context;
when, where, and how they were posted;
the computer system or online platform used;
who received or saw the material;
how the complainant was identified;
why the imputation was defamatory;
facts supporting malice or, where applicable, actual malice;
evidence connecting the respondent to the account and post;
the exact date and manner of discovery;
the factual basis for territorial jurisdiction and venue;
resulting harm and any claimed civil liability; and
an inventory of attached evidence and witness affidavits.

Use personal knowledge. Identify hearsay as such rather than presenting it as a witnessed fact. Attach the National Prosecution Service Investigation Data Form and comply with the receiving office’s requirements. The DOJ’s published main-office checklist calls for five copies plus one for each respondent, but local prosecution offices may issue different physical or electronic-filing instructions.

5. File in the proper place

A cyber-libel charge is tried by a designated Regional Trial Court cybercrime court. Under Section 2.1 of the Rule on Cybercrime Warrants, a criminal action under Section 4 or 5 of the Cybercrime Prevention Act may be filed in the designated cybercrime court of the province or city:

where the offense or any element occurred;
where any part of the computer system used is situated; or
where any damage to a natural or juridical person took place.

The first properly seized court acquires jurisdiction to the exclusion of the others. Venue must rest on specific facts; the ability to access a post anywhere does not make every court an equally safe choice. File with the prosecution office capable of bringing the Information in the corresponding designated court, or obtain law-enforcement assistance first when investigation is required.

6. Participate in preliminary investigation

Because cyber libel carries a prescribed maximum exceeding six years, it falls under the regular preliminary-investigation procedure in DOJ Department Circular No. 15, series of 2024.

The prosecutor evaluates whether there is prima facie evidence with reasonable certainty of conviction—evidence considered admissible, credible, preservable, and capable of proving the elements and the responsible person. The Supreme Court upheld the DOJ’s authority to apply that standard in Meking v. Secretary of Justice.

The respondent normally receives the complaint and attachments with a subpoena and is allowed to submit a counter-affidavit. The prosecutor may permit further affidavits or conduct clarificatory questioning. Preliminary investigation is not yet a trial, and filing the complaint does not by itself authorize an arrest.

If the complaint is dismissed, an aggrieved party may file a motion for reconsideration within 15 days from receipt of the resolution. Further review is governed by separate DOJ rules and may require a motion in court to suspend proceedings if an Information has already been filed. Do not assume that a review petition automatically stops the court case.

How to defend against a complaint

Act immediately upon receiving a subpoena

Keep the subpoena, envelope, email headers, acknowledgment, and any proof showing the date of receipt. Check whether every attachment mentioned in the complaint was included. Request missing or voluminous records in writing without waiting for the deadline.

The subpoena should set the counter-affidavit submission date at least 10 days after receipt of the subpoena and complaint-affidavit. Follow the actual date stated. If an extension is needed, request it promptly and in writing; do not assume it will be granted.

Personal appearance may be dispensed with when the counter-affidavit has been properly subscribed and sworn before a prosecutor, an authorized government official, or, in their absence, a notary public. Confirm the receiving office’s filing and service instructions.

Prepare a complete counter-affidavit

Answer the allegations paragraph by paragraph and attach all available supporting evidence. Depending on the facts, address:

whether the statement was actually defamatory when read as a whole;
whether it was a statement of fact, opinion, satire, or rhetorical criticism;
whether anyone other than the complainant received it;
whether the complainant was identifiable;
whether the respondent authored or controlled the account;
whether the respondent merely received or reacted to another person’s post;
whether the account was fake, hacked, shared, or compromised;
whether the statement was true and published with good motives and justifiable ends;
whether it was privileged;
whether actual malice must be proved and is absent;
whether the one-year period had expired before the proper complaint was filed;
whether the allegations and evidence establish the ICT element;
whether the selected venue has a concrete factual basis; and
whether the prosecution’s electronic evidence is authentic, complete, and admissible.

Support an account-compromise defense with records such as login alerts, recovery emails, device histories, security reports, prior reports to the platform, and witnesses. A bare denial that “someone else could have made the account” may carry little weight.

A motion to dismiss generally cannot replace the counter-affidavit. Under the current DOJ rules, a verified motion containing the respondent’s factual and legal defenses may instead be treated as the counter-affidavit. Submitting only a technical motion can therefore forfeit the best opportunity to present evidence.

Avoid damaging your defense

Do not:

post public explanations, threats, or counter-accusations;
pressure the complainant or witnesses;
fabricate, backdate, crop, or alter evidence;
wipe a phone, delete an account, or destroy relevant messages;
access another person’s account without authority;
sign a prepared admission you do not understand; or
ignore an invitation, subpoena, resolution, or court notice.

Preserve a forensic-quality copy before removing any post. Deletion, apology, or retraction does not automatically erase criminal liability, although prompt correction and genuine efforts to repair the harm may be relevant to malice, damages, or sentencing.

During custodial questioning, a person has the right to remain silent and to competent and independent counsel. For a non-custodial law-enforcement invitation, ask in what capacity you are being invited and whether a complaint has been filed. Do not obstruct a lawful warrant, but obtain legal advice before voluntarily surrendering devices, passwords, or broad access to private accounts.

If an Information is filed in court

The judge must independently determine probable cause. The judge may dismiss the case, require additional evidence, or issue a warrant of arrest. If a warrant is issued, arrange surrender and bail through counsel rather than waiting to be arrested unexpectedly.

Before conviction by the RTC, bail for cyber libel is generally a matter of right, but the court fixes the amount and conditions. Defenses involving prescription, failure to charge an offense, jurisdiction, or improper venue may need to be raised before plea. After arraignment, the case proceeds through pre-trial and trial, where the prosecution must prove guilt beyond reasonable doubt.

Common mistakes

Waiting for a platform to act while the one-year period continues to run.
Preserving only a cropped screenshot with no URL, account history, timestamp, or witness.
Assuming that a fake-looking account automatically belongs to a particular person.
Treating every offensive, unfair, or false statement as criminal libel.
Assuming truth is a complete defense without good motives and justifiable ends.
Filing wherever the post happened to be viewed without establishing proper venue.
Charging people solely for ordinary likes, reactions, or passive sharing despite Disini.
Filing a demand letter and assuming it interrupted prescription.
Responding publicly to a complaint and creating new evidence or a second possible case.
Deleting devices, account records, or messages after learning of an investigation.
Missing the counter-affidavit or reconsideration deadline.
Treating screenshots as self-authenticating proof.

When legal help is urgent

Consult a Philippine criminal-law or cybercrime lawyer immediately when:

the first-discovery anniversary is approaching;
a post or account is disappearing or controlled by an anonymous user;
you received a prosecutor’s subpoena or an adverse resolution;
a court Information or warrant of arrest may already exist;
police or NBI officers want to question you or examine a device;
the complainant is a public officer, public figure, journalist, or media organization;
the case involves several publishers, foreign platforms, or overseas parties;
the content also contains threats, extortion, sexual material, doxxing, impersonation, or unauthorized account access; or
a child or a victim of gender-based or domestic violence is involved.

These circumstances may involve separate offenses and protective remedies, not merely cyber libel. If you cannot afford private counsel, the Public Attorney’s Office provides qualified indigent persons with legal assistance, including representation of indigent accused during preliminary investigation and trial.

Frequently asked questions

Is a demand letter required before filing?

No general cyber-libel rule requires a prior demand. A carefully written request for correction, retraction, or removal may be useful, but it can also reveal strategy or provoke deletion of evidence. It does not replace timely filing and should not be assumed to interrupt prescription.

Are screenshots enough?

Sometimes they form part of the proof, but a screenshot alone may not establish authenticity, context, publication, authorship, or account ownership. Preserve the live URL, original files, device, witnesses, account history, and corroborating records.

Can I file against a dummy account?

You may seek investigation, but the responsible person must eventually be identified through admissible direct or circumstantial evidence. Act quickly so law enforcement can consider lawful preservation and disclosure procedures.

Can someone be liable for sharing another person’s post?

A person who merely receives and reacts to a post is protected by the limitation recognized in Disini. Liability becomes more fact-dependent when the person creates new defamatory wording, adds accusations, or independently republishes content as their own.

Does deleting or apologizing end the case?

No. Deletion, apology, retraction, or an affidavit of desistance does not automatically extinguish a completed offense or require the prosecutor to dismiss it. Such acts may nevertheless affect the evidence of malice, civil damages, prosecutorial assessment, or penalty.

Can a cyber-libel complainant withdraw the case after settlement?

The criminal action is prosecuted in the name of the People of the Philippines. A settlement or affidavit of desistance may be considered, particularly regarding civil liability and witness cooperation, but it does not automatically bind the prosecutor or court.

Can a public official file cyber libel?

Yes. However, when the applicable public-figure standard governs, the prosecution must prove actual malice beyond reasonable doubt. Legitimate criticism of official conduct receives greater constitutional protection than malicious factual falsehoods.

Can a convicted person be jailed?

Yes. Imprisonment remains legally available. Courts may impose a fine instead in appropriate circumstances, but the fine-only preference is discretionary and not a guarantee.

Official references

This article provides general Philippine legal information, not legal advice or an attorney-client opinion. Outcomes depend on the exact words, context, evidence, dates, parties, and procedural history. Law and official procedures checked through August 3, 2026.