Quick answer

To file a Philippine cyber libel case, act quickly: preserve the online material and proof of authorship, then file a sworn complaint-affidavit with the prosecution office that has territorial authority. The current rule is that cyber libel generally prescribes one year from discovery by the offended party, authorities, or their agents—not 12 or 15 years. Filing a demand letter or reporting a post to the platform does not safely protect that deadline.

To defend a case, do not ignore a prosecutor’s subpoena. Preserve your account and device records, consult counsel, and submit a sworn counter-affidavit on time. Examine whether the prosecution can prove every element: a defamatory imputation, publication to another person, identification of the complainant, malice, authorship, and use of a computer system. Prescription, improper venue, privilege, lack of authorship, and the special rules for speech about public officials or public figures may also be decisive.

Not every harsh opinion, insult, criticism, “like,” or shared post is automatically cyber libel. Liability depends on the exact words, context, audience, author, evidence, and applicable defenses.

What Philippine law treats as cyber libel

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 covers libel under the Revised Penal Code when committed through a computer system or similar technology. The Supreme Court has explained that this is essentially libel committed through information and communications technology, with a higher penalty.

The prosecution generally must establish:

A defamatory imputation. The post attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a natural or juridical person to contempt.
Publication. A person other than the author and the complainant saw, received, or understood the statement. “Public” does not necessarily mean that the post was visible to everyone; publication to even one third person may be enough.
Identification. The complainant was named or was reasonably identifiable from the words, images, circumstances, or surrounding information.
Malice. Article 354 generally presumes malice in a defamatory imputation unless good intention and justifiable motive are shown or the communication is privileged. Different constitutional rules apply when the complainant is a public officer or public figure and the statement concerns a matter within the protected sphere of public discussion.
Authorship or responsibility. The respondent must be proved to have written, posted, or otherwise authored the offending material.
Use of a computer system or similar means. This includes online material posted through computers, mobile phones, social-media platforms, websites, and comparable systems.

The governing definition and statutory privileges appear in Articles 353 to 362 of the Revised Penal Code.

Courts assess the communication as a whole and in its ordinary meaning. A post framed as an “opinion” may still be actionable if it implies a false and defamatory assertion of fact. Conversely, offensive language, exaggeration, satire, or rhetorical abuse does not automatically satisfy every element.

Who may be liable for reactions, comments, and shared material

In Disini v. Secretary of Justice, the Supreme Court sustained cyber libel as applied to the original author but rejected extending aiding-and-abetting liability to people who merely receive and react to a post.

That distinction must be applied carefully:

Merely liking or reacting to somebody else’s post is not the same as authoring it.
A bare share or similar reaction does not automatically establish cyber libel.
A person who adds a new defamatory caption or comment may become the original author of that separate statement.
Editing, adopting, or republishing material in a way that creates a new defamatory communication presents a fact-specific issue.
Group administrators and page owners are not automatically criminally liable merely because another user posted material. Their own authorship, participation, and the applicable statutory basis must be proved.

The one-year deadline

The Supreme Court’s current and final ruling is that cyber libel prescribes in one year, despite its higher penalty. Under Article 91 of the Revised Penal Code, the period begins when the alleged offense is discovered by the offended party, the authorities, or their agents.

The discovery date is factual. In its April 8, 2026 final resolution in Causing v. People, G.R. No. 258524, the Supreme Court held that an offended party is not automatically presumed to have discovered a Facebook post on the date it was uploaded, even if its privacy setting was “public.” Knowledge may instead be shown through reactions, comments, messages, threatened legal action, or other conduct demonstrating actual discovery.

The filing of the proper complaint or information interrupts prescription. To avoid a fatal mistake:

Record the exact date and manner in which the post was first discovered.
Keep the message, notification, email, or witness evidence showing discovery.
Do not rely on a demand letter, platform report, informal consultation, or takedown request to stop prescription.
Do not assume that giving information to an investigator is equivalent to filing the required complaint with the prosecutor.
Have counsel or the prosecution office confirm that a properly sworn complaint has been filed before the one-year period expires.

If the one-year deadline is close, filing and venue should be reviewed urgently by a Philippine lawyer.

Where the case should be filed

Cyber libel falls within the jurisdiction of Regional Trial Courts. Under Section 2.1 of the Rule on Cybercrime Warrants, criminal actions under Sections 4 and 5 of Republic Act No. 10175 are filed before a designated cybercrime court in the province or city:

where the offense or any of its elements was committed;
where any part of the computer system used is situated; or
where any part of the damage to a natural or juridical person occurred.

The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of the others.

Venue remains a serious, sometimes jurisdictional issue. The complaint and eventual Information must allege facts supporting the chosen venue. Mere access to an online article in a particular city does not necessarily make that city the place of first publication. Article 360’s special rules for libel, the complainant’s status and residence or office, and the cybercrime venue rule may interact. The Supreme Court discusses these rules in Tieng v. People.

A complainant should file with the city, provincial, or regional prosecution office corresponding to the proper court territory. Do not select a distant or convenient city solely because the post could be viewed there.

Evidence to preserve immediately

Electronic evidence can disappear or be altered quickly. Preserve it before asking the author or platform to remove it.

Keep, where available:

full-page screenshots showing the exact words, account name, profile details, date, time, reactions, comments, and surrounding context;
screen recordings showing how the post is reached from the account or page;
the complete URL or post link, not only a cropped screenshot;
the original image, audio, or video file;
downloadable account data, message exports, email notifications, and original attachments;
the device on which the post or message was received;
dates and times in Philippine time, with any visible timezone information;
copies showing the privacy setting or intended audience;
the full conversation before and after the disputed statement;
proof of edits, corrections, deletion, or later admissions;
names and sworn statements of people who personally saw the post;
messages showing that the respondent admitted owning the account or writing the material;
business, employment, or personal records supporting any claimed damage;
proof of the date and manner of discovery; and
evidence supporting or disproving the factual accusation itself.

Do not crop away context, annotate the only copy, change filenames, forward files repeatedly, or log into another person’s account without permission.

The Rules on Electronic Evidence require electronic documents to be authenticated. A screenshot may be useful, but it does not by itself prove who controlled the account or that the content remained unaltered.

In 2025, the Supreme Court issued guideposts for proving ownership, access, and authorship of social-media accounts. Relevant proof may include:

an admission of ownership, access, or authorship;
a witness who saw the person use the account or compose the post;
information in the communication known only to the suspected author or a few people;
language or writing style consistent with that person;
platform, telecommunications, internet-service-provider, geolocation, or device-forensic records;
conduct consistent with earlier communications from the same account; and
other circumstantial evidence that, taken together, reliably identifies the author.

If a dummy account, deleted post, or disputed device is involved, ask the NBI, PNP Anti-Cybercrime Group, prosecutor, or counsel about lawful preservation and forensic measures immediately. Subscriber and content data normally require appropriate legal process; a private person should not attempt unauthorized access.

How to file the complaint

1. Test the case against every element

Before filing, identify:

the exact defamatory words;
their language and an accurate translation, if necessary;
what crime, vice, defect, or discreditable circumstance they allegedly impute;
why the complainant was identifiable;
who received or saw the statement;
who authored it;
how authorship can be proved;
when it was discovered;
where the relevant acts, systems, and damage occurred; and
why the statement was malicious and not privileged.

A general claim that a post was “offensive,” “fake news,” or “damaging” is not a substitute for evidence of each element.

2. Consider investigative assistance

A complainant may seek assistance from the NBI Cybercrime Division or the PNP Anti-Cybercrime Group, especially when attribution, forensic examination, or provider records are needed. The NBI publishes an online complaint page and its procedure for investigative assistance to computer-crime victims. Cybercrime incidents may also be reported through the DOJ’s official reporting page.

Investigative assistance does not remove the need to monitor prescription and ensure that the proper complaint-affidavit reaches the correct prosecution office.

3. Prepare a sworn complaint-affidavit

The affidavit should be chronological, specific, and based on personal knowledge. It ordinarily should:

identify the complainant and respondent as accurately as possible;
reproduce or attach the complete disputed communication;
explain the meaning and context;
state when and how it was discovered;
identify third persons who saw or received it;
explain the basis for attributing the account and post to the respondent;
allege the facts supporting venue;
address foreseeable claims of privilege or good faith;
identify and authenticate each attachment; and
state the relief and charges being requested without exaggeration.

Attach witness affidavits and reliable documentary, electronic, and object evidence. The affidavit must be subscribed and sworn before a prosecutor or another officer authorized to administer oaths. False or knowingly misleading sworn statements may create separate legal consequences.

4. File with the proper prosecution office

Cyber libel carries a prescribed penalty high enough to require preliminary investigation. The applicable prosecutorial procedure is governed by the 2024 DOJ–National Prosecution Service Rules, whose validity the Supreme Court upheld in Meking v. Remulla.

The prosecutor now looks for prima facie evidence with reasonable certainty of conviction. The evidence must be admissible, credible, capable of preservation, and capable of proving all elements and the responsible person’s identity. This makes complete and properly authenticated evidence important at the filing stage, not only at trial.

E-filing and virtual proceedings are recognized in appropriate circumstances, but local implementation and hard-copy requirements may vary. Confirm the current instructions directly with the prosecution office rather than sending documents to an unofficial email address.

5. Participate in preliminary investigation

If the complaint is sufficient, the investigating prosecutor issues a subpoena with the complaint and attachments. The hearing date should give the respondent at least 10 days from receipt to prepare the counter-affidavit and should generally be set within 30 days from the prosecutor’s receipt of the complete record.

After receiving the counter-affidavit, the prosecutor may submit the case for resolution or conduct a physical or virtual clarificatory hearing. A reply and rejoinder are not automatic; the prosecutor may require them when necessary.

If the complaint is dismissed, the complainant may generally file a motion for reconsideration within 15 days from receipt of the resolution. Further review is governed by DOJ appeal rules. Because cyber libel is an RTC-level case, a petition for review may be available to the Secretary of Justice, subject to the required form, period, service, and any motion to suspend court proceedings. Obtain counsel immediately rather than relying on the motion for reconsideration to correct an incomplete original case.

How to defend during preliminary investigation

Respond to the subpoena, not to social-media pressure

Record the date the subpoena and attachments were received. That date controls the response period. Do not answer the allegations through another public post, contact witnesses to influence them, threaten the complainant, or destroy account data.

Under the 2024 DOJ rules, a motion to dismiss filed instead of a counter-affidavit is generally not allowed. If the respondent fails to appear or submit a counter-affidavit despite proper notice, the prosecutor may resolve the complaint using the prosecution’s evidence alone.

Prepare a sworn, evidence-based counter-affidavit

The response should address the complainant’s proof, not merely deny wrongdoing. Depending on the facts, it may show:

the statement was not defamatory when read in full context;
the complainant was not named or reasonably identifiable;
no third person received the communication;
the respondent did not own or control the account;
the respondent did not write or post the disputed statement;
the screenshots are incomplete, altered, unauthenticated, or inconsistent with the original data;
the communication was privileged;
the prosecution cannot prove malice;
the factual imputation was true and made with the motives required by Article 361;
the statement concerned the official conduct of a public officer or a public figure and actual malice cannot be proved;
the case was filed after prescription;
venue is unsupported or improperly alleged;
the allegedly criminal act occurred before the applicable law could punish it; or
the respondent merely received or reacted to another person’s material rather than authoring the charged statement.

Attach the full thread, account records, device records, source documents, research notes, correspondence seeking verification, corrections, witness affidavits, and other evidence supporting the defense.

Preserve evidence even if the account was hacked or impersonated

A claim that an account was hacked, spoofed, or created by an impostor should be supported by evidence such as:

security alerts and login-history records;
password-reset or recovery emails;
contemporaneous reports to the platform or authorities;
device and location records;
evidence that the writing style or private information does not match the respondent;
forensic findings; and
proof identifying another possible user.

A bare assertion that “anyone could have created the account” may be rejected when the surrounding circumstances reliably point to the respondent.

Important defenses and exceptions

Privileged communications

Article 354 recognizes two statutory exceptions to the presumption of malice:

a private communication made in performing a legal, moral, or social duty; and
a fair and true report, made in good faith and without comments or remarks, of a non-confidential judicial, legislative, or other official proceeding, statements made in it, or acts performed by public officers in their functions.

These are generally qualified privileges, not a license to publish unrelated insults or knowingly false statements. Excessive publication, irrelevant accusations, or proof of actual malice may defeat the privilege.

Public officers, public figures, and matters of public concern

When criminal libel concerns a public officer’s official conduct or a public figure within the relevant public controversy, the prosecution may have to prove actual malice—that the statement was made knowing it was false or with reckless disregard of whether it was false.

This protection is fact-sensitive. It does not automatically cover accusations about purely private affairs, fabricated claims, or statements outside the legitimate public issue. Good-faith investigation, reliable sources, requests for comment, corrections, and the complete publication context can be critical evidence.

Truth, good motives, and justifiable ends

Truth is not always a stand-alone defense under Philippine criminal libel law. Article 361 generally requires proof that the matter was true and published with good motives and for justifiable ends. It also contains special limits concerning proof of non-criminal acts, except where the imputation concerns a government employee’s official duties.

A respondent should therefore preserve both proof of truth and proof of the reason and manner of publication.

Lack of publication

A message communicated only to the person allegedly defamed ordinarily lacks the third-person publication element. A group chat, copied email, public comment, or message sent to relatives or co-workers may satisfy it because others received the statement.

Lack of authorship

A profile name or photograph alone may not conclusively establish authorship. The prosecution must connect the respondent to the account and the particular post through admissions, witnesses, platform or device evidence, distinctive information, consistent conduct, or a reliable combination of circumstances.

Prescription and venue

Both defenses should be raised with precise dates and documents. For prescription, identify evidence showing when the complainant, authorities, or their agents actually discovered the post. For venue, compare the allegations with the location of the acts, relevant computer system, damage, and the special libel rules. Do not assume that the place where a screenshot was taken is automatically the proper venue.

If an Information has already been filed in court

Once the prosecutor files an Information, the judge independently determines whether probable cause exists for a warrant of arrest. The court may dismiss the case, require additional evidence, issue a summons where legally appropriate, or issue a warrant.

If you learn that an Information or warrant exists:

obtain counsel immediately;
secure a certified copy of the Information and relevant orders;
do not evade service or rely on social-media reports about the case;
arrange lawful surrender and bail when advised by counsel;
examine whether a motion to quash must be filed before arraignment;
preserve objections involving the charge, jurisdiction, venue, prescription, or double jeopardy;
attend arraignment and every required hearing; and
observe the separate court deadlines for motions and appeals.

Cyber libel is bailable before conviction, but bail is not automatic paperwork: the amount and conditions are determined through the applicable court process.

Possible penalties and civil liability

Section 6 of Republic Act No. 10175 raises the applicable Revised Penal Code penalty by one degree when libel is committed through information and communications technology. The corresponding imprisonment classification is generally prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years.

However, imprisonment is not inevitable. In Soliman v. People, G.R. No. 256700, the Supreme Court confirmed that a court may impose a fine instead of imprisonment for online libel. Taking account of Republic Act No. 10951 and the one-degree increase, the Court identified a cyber-libel fine range of ₱40,000 to ₱1,500,000. The precise penalty depends on the law applicable to the offense date and the circumstances found by the court.

Criminal liability may also carry civil liability, including proven damages. The civil action arising from the offense is ordinarily included with the criminal action unless it is waived, reserved when the rules permit, or previously instituted. A separate civil defamation or injury-to-rights claim may involve different elements, defenses, deadlines, and standards of proof.

An apology, correction, takedown, settlement, or affidavit of desistance does not automatically erase a completed offense or compel the prosecutor or court to dismiss a public criminal action. It may nevertheless affect the parties’ evidence, civil claims, damages, or prosecutorial assessment.

Common mistakes to avoid

Waiting because an old article says cyber libel prescribes in 12 or 15 years.
Treating the upload date and discovery date as automatically identical.
Filing in any city where the post could be accessed.
Relying only on cropped screenshots.
Failing to preserve the URL, full context, original file, and device.
Assuming that the profile name alone proves authorship.
Naming the wrong person behind an anonymous or dummy account.
Treating every insult or negative opinion as criminal libel.
Assuming truth automatically ends the case.
Assuming a public official can never be defamed.
Assuming every like, share, or reaction makes the user an author.
Deleting or altering potentially exculpatory account records.
Responding with threats, doxxing, or another defamatory post.
Filing a motion to dismiss instead of the required counter-affidavit.
Missing the response or 15-day reconsideration period.
Publishing complaint affidavits containing unnecessary private information and creating fresh legal exposure.

When legal help is urgent

Consult a Philippine criminal or cybercrime lawyer immediately if:

the one-year period is close to expiring;
a prosecutor’s subpoena, resolution, Information, summons, or warrant has been received;
authorship depends on deleted content, a dummy account, platform data, or device forensics;
the case involves a journalist, public officer, public figure, whistleblower, employer, school, or regulated profession;
multiple posts or complainants are involved;
the statement accuses someone of a serious crime;
the post includes threats, stalking, doxxing, intimate images, or information about a child;
the respondent is overseas or the relevant platform data is held abroad; or
settlement, correction, or takedown discussions are underway.

People who qualify may seek assistance from the Public Attorney’s Office, subject to its indigency, merit, and conflict rules. The Integrated Bar of the Philippines and the Judiciary’s Unified Legal Aid Service also provide official routes to legal-aid resources.

Frequently asked questions

Is a private Facebook or Messenger message cyber libel?

If it was sent only to the person allegedly defamed, the publication element may be absent. If it was sent to a group, copied to another person, or shown to third parties, publication may exist. Other offenses may also apply depending on threats, harassment, sexual content, or surrounding conduct.

Can a business or organization be the complainant?

Yes. Article 353 protects both natural and juridical persons. The organization must still be identifiable, and every other element must be proved.

Does deleting the post end the case?

No. Deletion does not erase a completed publication, although it may limit further circulation. Preserve a complete evidentiary copy before seeking removal. A complainant should not keep republishing the material unnecessarily.

Can I file against an anonymous account?

You may seek investigative assistance, but the eventual prosecution must reliably identify the responsible person. Platform records, telecommunications data, forensic examination, admissions, writing style, and information known only to the author may help. Do not accuse a suspected person publicly without adequate proof.

Is an apology or retraction a complete defense?

No. It does not automatically extinguish criminal liability. Its timing and sincerity may nevertheless be relevant to malice, mitigation, damages, settlement, and the overall assessment of the case.

Can the complainant withdraw the case after settlement?

A complainant may execute a settlement or affidavit of desistance, but cyber libel is prosecuted in the name of the People of the Philippines. The prosecutor or court—not the complainant alone—decides the criminal case’s disposition. Civil claims may be settled separately, subject to law and court approval where necessary.

Can a respondent appeal an adverse prosecutor’s resolution?

Generally, the respondent may file a motion for reconsideration within 15 days from receipt. A petition for review may then be available under DOJ rules. Filing an administrative review does not automatically suspend a court case; the required motion to suspend proceedings must be handled properly.

Official references

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Cyber libel questions are highly dependent on the exact words, documents, dates, audience, authorship evidence, and venue. Official sources were last checked on July 23, 2026.