Quick answer

Cyber libel is libel committed through a computer system—such as a Facebook post, public comment, online article, video caption, blog, email blast, or similar digital publication. A criminal complaint generally requires proof of:

A defamatory allegation about another person or identifiable organization;
Publication to at least one person other than the subject;
Identification of the person or entity defamed;
Malice; and
Use of a computer system or comparable information and communications technology.

The law generally targets the original author of the online statement, not a person who merely receives it or reacts to it. Liability for sharing, reposting, quoting, editing, captioning, or adding a fresh accusation depends on whether the person effectively made or republished the defamatory imputation—not simply on what a platform calls the action.

A complainant normally starts by filing a sworn complaint and supporting evidence with the proper prosecution office. A respondent served with a subpoena should submit a complete counter-affidavit within the period stated in the subpoena; under the current DOJ preliminary-investigation rules, that period is ordinarily 10 calendar days from receipt. Missing it can leave the prosecutor to resolve the complaint using only the complainant’s evidence.

Cyber libel now prescribes in one year from discovery of the offense by the offended party, the authorities, or their agents. This was reaffirmed by the Supreme Court en banc in April 2026. Prescription is highly fact-sensitive: the dates of publication, discovery, complaint filing, any later republication, and interruptions of the period must be proved rather than assumed.

Because imprisonment and civil damages are possible, both sides should consult a Philippine criminal-litigation lawyer early—ideally before filing an affidavit, answering a subpoena, deleting content, surrendering a device, or making further public statements.

What legally counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 incorporates the existing law on libel under Articles 353 and 355 of the Revised Penal Code when the publication is made through a computer system or similar means.

The Supreme Court describes the elements as:

Defamatory imputation: An allegation of a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose another to contempt;
Publication: Communication of the statement to someone other than the person allegedly defamed;
Identifiability: The complainant was named or could reasonably be identified from the words and surrounding circumstances;
Malice: The legally required wrongful state of mind; and
Online or computer-assisted publication: The defamatory statement was communicated through a computer system or ICT.

The statement must be evaluated in context. Courts may consider the complete post or conversation, ordinary meaning, tone, audience, accompanying images, hashtags, links, and surrounding circumstances. A complainant cannot safely isolate a few words if the entire communication materially changes their meaning.

Insults, harsh criticism, exaggeration, parody, opinion, satire, or vulgar language are not automatically libel. However, calling something an “opinion” does not protect a statement that reasonably asserts or implies a verifiable defamatory fact.

Who may be charged?

The Supreme Court held in Disini v. Secretary of Justice that cyber-libel liability under Section 4(c)(4) is constitutional as applied to the original author of the post. It did not uphold automatic criminal liability for people who merely receive the material and react to it.

The following situations require separate analysis:

Original post: The person who composed and published the accusation is the clearest possible accused.
Repost or share: A purely mechanical share is not automatically equivalent to authorship. Liability becomes more plausible when the user adds a defamatory caption, adopts the allegation as their own, or creates a fresh publication.
Comment or quote-post: A new accusation written in a comment or quote-post may itself be independently evaluated.
Edited or updated article: A substantive online alteration may amount to republication in some circumstances. A purely technical change should not automatically be treated the same way.
Page administrator, editor, or corporate officer: Title or access to an account alone does not conclusively prove personal authorship, participation, or criminal intent. The prosecution must establish the individual’s legally relevant acts.
Anonymous or impersonated account: Account ownership cannot be based only on a displayed name or profile photo. Attribution may require subscriber information, device or access records, admissions, witnesses, or other competent evidence.

A corporation or organization may be the person defamed, but criminal responsibility remains personal: the evidence must connect a particular accused to the punishable act.

Malice, truth, opinion, and privileged communications

Malice is not a one-size-fits-all rule

Article 354 generally presumes malice from a defamatory publication even when the allegation is true, unless the communication is privileged. That presumption is not the end of the inquiry. Constitutional free-expression protections, statutory exceptions, the identity of the complainant, and the subject of the speech may change what the prosecution must prove.

When a publication concerns a public official, public figure, or matter of public concern, the prosecution may have to prove actual malice—knowledge that the allegation was false or reckless disregard of whether it was false. Negligence, poor wording, or an honest factual mistake is not necessarily actual malice.

In Tan v. People, decided in January 2026, the Supreme Court acquitted the accused because malice was not proved beyond reasonable doubt, although the other elements were present. The ruling underscores that criticism involving public officials must be assessed with constitutional protection for public discussion in mind.

Truth is important but not always sufficient by itself

Philippine criminal-libel law does not create a blanket rule that every true allegation is automatically immune. Article 361 controls when truth may be introduced as a defense and may also require proof of good motives and justifiable ends. The rules differ depending on whether the imputation involves a crime or concerns a public officer’s official duties.

A person planning to publish a serious accusation should therefore preserve both:

Evidence showing the allegation is true or reasonably supported; and
Evidence showing why publication served a legitimate purpose and was not merely intended to injure.

Privileged communications

Article 354 recognizes qualified privileges, including:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts.

Qualified privilege may defeat the ordinary presumption of malice, but it can be lost through actual malice, unnecessary circulation, irrelevant accusations, unfair presentation, or added defamatory commentary.

Absolute privilege may apply in limited settings, such as statements properly connected to legislative, judicial, or other proceedings protected by law. Whether a statement falls within the privilege depends on its purpose, relevance, audience, and setting.

Filing a cyber-libel complaint

1. Confirm the deadline immediately

Under the Supreme Court’s en banc ruling in Causing v. People, cyber libel prescribes in one year from discovery, not automatically from the upload date.

Do not postpone action while privately negotiating a deletion or apology. A demand letter or platform report should not be assumed to stop prescription. Institution of the proper criminal proceeding may interrupt the period, but the effect of a particular filing depends on the governing law and the filing actually made.

Record and preserve:

The date and time the material was posted;
The date and manner in which the offended party first discovered it;
Who discovered it;
The date it was reported to police, the NBI, a prosecutor, or another authority;
Any deletion, editing, reposting, or later publication; and
The date the formal complaint was received by the proper office.

A post’s continued online availability does not automatically restart the prescriptive period every day. A genuinely new publication must be distinguished from the continuing accessibility of the original post.

2. Identify the correct prosecution office and venue

A criminal complaint is generally filed for preliminary investigation with the Office of the City Prosecutor, Office of the Provincial Prosecutor, or other prosecution office having jurisdiction. The NBI Cybercrime Division or the PNP Anti-Cybercrime Group may investigate and help gather evidence, but reporting to an investigative agency is not necessarily the same as filing the formal prosecutor’s complaint.

Venue in libel cases is jurisdictional and cannot be chosen merely for convenience. Article 360 of the Revised Penal Code contains special venue rules that differ depending on whether the offended party is a private person or public officer. The Cybercrime Prevention Act also contains jurisdiction provisions for offenses committed through computer systems.

The complaint and, later, the Information must allege facts establishing venue. The Supreme Court’s decision in Bonifacio v. RTC of Makati illustrates why an unsupported or conclusory venue allegation can be fatal. For an online publication involving parties, devices, servers, and readers in different places, obtain legal advice before choosing the filing office.

3. Prepare a sworn, fact-specific complaint

The complaint-affidavit should ordinarily explain:

The exact statement alleged to be defamatory;
The complete context in which it appeared;
Why it referred to the complainant;
When and how it was published to another person;
Why the respondent is believed to be its author or publisher;
The computer system or online platform used;
When and how the complainant discovered it;
Why the allegation is false, misleading, or unlawfully defamatory;
Facts supporting malice, including actual malice when applicable;
Facts establishing venue; and
The harm and surrounding circumstances.

Each important factual assertion should be supported by an annex and properly identified in the affidavit. Avoid exaggeration. A prosecutor must assess the evidence for each element, not simply the complainant’s anger or reputational standing.

The DOJ’s published checklist for a privately filed preliminary-investigation complaint calls for an Investigation Data Form, a complaint-affidavit, witness affidavits, and supporting documents, with the required copies varying according to the number of respondents. Confirm the current local filing instructions directly with the receiving prosecution office before submission. The DOJ filing guide provides the general checklist.

4. Present evidence in usable form

A screenshot is useful, but often insufficient by itself. Preserve:

Full-page screenshots showing the account name, date, time, text, images, comments, and surrounding thread;
The complete URL or other unique post identifier;
Screen recordings showing navigation from the profile or page to the post;
Original downloaded files rather than repeatedly forwarded copies;
Source emails, messages, notifications, and attachments with available headers;
The device on which the post was viewed;
Platform-generated download or account data, if lawfully available;
Names and affidavits of people who personally saw or received the publication;
Messages or admissions connecting the respondent to the account;
Earlier drafts, threats, demands, corrections, or refusals relevant to malice;
Documents disproving the allegation; and
A dated record of discovery and every preservation step.

Keep an untouched master copy and work from duplicates. Record who collected each item, when it was collected, and how it was stored. Electronic evidence must still be authenticated under the Rules on Electronic Evidence.

If provider-held data may disappear, consult law enforcement promptly. Under Republic Act No. 10175, law-enforcement authorities may require preservation of specified computer data subject to statutory conditions. Disclosure of subscriber, traffic, or content data and the search or examination of devices may require the appropriate legal process or a cybercrime warrant under the Rule on Cybercrime Warrants.

A private complainant should not attempt to hack an account, secretly seize a device, guess passwords, impersonate someone, or obtain records through deception.

5. Expect preliminary investigation before trial

The prosecutor does not determine guilt beyond reasonable doubt at preliminary investigation. Under the 2024 DOJ-NPS rules, the prosecutor evaluates whether the submitted evidence meets the governing standard for filing an Information, expressed as prima facie evidence with reasonable certainty of conviction.

The respondent is ordinarily served with a subpoena and copies of the complaint and supporting evidence. The parties may be allowed to submit responsive affidavits, and a clarificatory hearing may be called when necessary. The prosecutor then issues a resolution either dismissing the complaint or directing the filing of an Information in court.

A prosecutor’s adverse resolution may be subject to a motion for reconsideration and an administrative petition for review, but short and strict periods apply. Read the resolution and proof of receipt immediately rather than relying on an informal message or verbal advice.

Defending a cyber-libel complaint

1. Treat the subpoena as urgent

Write down the exact date and time of receipt. Preserve the envelope, email, delivery record, or acknowledgment showing service.

The counter-affidavit period is ordinarily 10 calendar days from receipt of the subpoena under the current DOJ rules, subject to the prosecutor’s lawful directions and the particular procedure being used. Do not assume that weekends, holidays, settlement talks, or difficulty obtaining counsel automatically extend the deadline.

If the papers are incomplete, illegible, or missing annexes, document the problem and promptly raise it with the prosecutor. Do not simply ignore the subpoena.

2. Do not delete, edit, or privately “fix” the evidence

Deletion may destroy favorable context, metadata, proof of impersonation, or evidence showing that another person controlled the account. It may also be portrayed as consciousness of wrongdoing.

Preserve the account and device as they existed when the complaint arose. Before making a correction, apology, takedown, or public response, ask counsel how the step may affect the defense, evidence, safety, and settlement position.

3. Test every element separately

A proper defense should examine:

No defamatory imputation: The words were not reasonably dishonorable or accusatory when read in full context.
No publication: The statement was communicated only to the person concerned, with no third-party recipient.
No identification: A reasonable reader could not identify the complainant.
No authorship or participation: The respondent did not create or publish the material, or the account evidence is unreliable.
No actionable republication: The alleged conduct was only receipt or a reaction, without a new defamatory statement.
No malice: The statement was made in good faith, after verification, or in circumstances requiring proof of actual malice.
Protected opinion or fair comment: The statement was a conclusion or criticism based on disclosed or established facts, not a knowingly false factual accusation.
Privilege: The communication was made under a recognized duty or was a fair and true report within Article 354.
Truth, good motives, and justifiable ends: The requirements of Article 361 are satisfied.
Prescription: More than one year elapsed from proven discovery before the proper proceeding was instituted.
Improper venue or defective allegations: The complaint or Information fails to establish the court’s territorial jurisdiction.
No qualifying computer use: The prosecution cannot establish the required online or computer-system publication.
Constitutional protection: The speech involved a public official, public figure, official conduct, or matter of public concern and the required actual malice was not proved.

A defense should not depend on slogans such as “freedom of speech,” “it was true,” or “I only shared it.” Each defense must be tied to admissible facts and the precise publication charged.

4. Submit the complete defense early

Affidavits generally take the place of live testimony during preliminary investigation. The counter-affidavit should therefore be complete, sworn, based on personal knowledge, and supported by annexes.

Include favorable context rather than only the disputed sentence. Where relevant, attach research notes, source documents, communications with sources, official records, account-security notices, device-access information, editorial history, and proof of efforts to verify or correct the statement.

Do not fabricate a source, alter a screenshot, coach a witness to deny what happened, or submit an affidavit containing facts the affiant cannot personally support. False statements under oath can create separate legal exposure.

5. Respond properly if a case reaches court

Once an Information is filed, the court independently determines the next procedural steps. The accused may face a warrant or summons, arraignment, pre-trial, trial, and possible civil liability.

Do not evade service or attempt informal contact with the judge, prosecutor, complainant, or witnesses. Counsel should promptly assess:

Whether the Information sufficiently alleges every element and venue;
Whether prescription or another defect appears on the face of the record;
Whether a motion to quash or other remedy is procedurally available;
Bail and conditions of release;
Preservation or return of seized devices and data;
Exclusion of unlawfully obtained evidence;
Witness and electronic-evidence objections; and
Available appellate or review remedies.

There is no single nationwide “cyber-libel bail amount.” Bail, when applicable, is fixed under court rules and current bail guidelines based on the charge and circumstances. Verify the amount and payment process with the court; never pay an unofficial collector.

Possible penalties and civil liability

Traditional libel under Article 355 carries imprisonment, a fine, or both. When libel is committed through ICT, Section 6 of Republic Act No. 10175 raises the corresponding penalty by one degree. The resulting statutory imprisonment range commonly associated with cyber libel is prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years, subject to the Indeterminate Sentence Law and the court’s sentencing analysis.

A court may consider a fine instead of imprisonment in appropriate libel cases under Supreme Court guidance, but a fine is not guaranteed. Fine amounts and the final sentence depend on the law applicable when the offense was committed, the charge, and the judgment.

A criminal case may also carry civil liability. Separately, the same conduct may support a civil claim under the Civil Code, including provisions protecting dignity, privacy, reputation, and other personal rights. Criminal dismissal or acquittal does not always resolve every possible civil claim; the legal basis and wording of the ruling matter.

Section 7 of the Cybercrime Prevention Act cannot be used to punish the same libelous act twice under both the Revised Penal Code and the cybercrime law. In Disini, the Supreme Court invalidated that application because of double-jeopardy concerns.

Practical options before or alongside litigation

Depending on safety, evidence, and limitation periods, the affected person may consider:

A written request for correction, clarification, or removal;
A platform complaint under impersonation, harassment, privacy, or defamation policies;
A carefully drafted demand letter;
Preservation of evidence followed by a private settlement discussion;
A right-of-reply request;
A civil action where appropriate; or
Reporting related conduct—such as threats, identity theft, unauthorized access, stalking, intimate-image abuse, or data-privacy violations—under the correct law.

A takedown or apology does not automatically erase criminal or civil liability. Conversely, refusing a demand is not by itself proof of guilt or malice. Settlement of the private dispute also does not automatically terminate a criminal prosecution once public authorities are involved.

Avoid posting the demand letter, complaint-affidavit, counter-affidavit, private messages, or personal data online. A second publication can worsen the dispute or create a new claim.

Common mistakes

Waiting until the one-year prescriptive period is almost over;
Assuming prescription always begins on the upload date;
Filing wherever the complainant currently happens to be;
Submitting cropped screenshots without URLs, dates, or context;
Treating a profile name as conclusive proof of authorship;
Charging every person who liked, reacted to, or received a post;
Assuming every repost is immune or every repost is automatically criminal;
Believing truth alone always ends the case;
Ignoring the higher actual-malice requirement when constitutionally applicable;
Deleting the post, account, messages, or device data;
Missing the counter-affidavit or review deadline;
Making admissions in an apology, interview, livestream, or settlement chat without advice;
Contacting witnesses to pressure them;
Publishing accusations from the complaint as retaliation;
Giving an unlocked device or passwords without understanding the legal basis and scope of the request; and
Assuming an NBI or police report is already the formal prosecutor’s complaint.

When legal help is urgent

Seek counsel immediately if:

The one-year period may expire soon;
You received a prosecutor’s subpoena, resolution, Information, warrant, or court notice;
Police or investigators want to search, seize, copy, or unlock a device;
The accused account may be deleted, compromised, or anonymous;
The publication concerns a public official, journalist, whistleblower, election, government transaction, or matter of public concern;
A child, intimate image, threat, extortion, doxxing, or personal-data leak is involved;
The parties are in different cities, provinces, or countries;
Multiple posts or alleged republications have different dates;
The complainant wants an immediate court-ordered takedown;
Settlement discussions may affect prescription or pending proceedings; or
An arrest appears imminent.

If an investigator presents a warrant, read it and note the issuing court, covered account or device, authorized data, date, and implementation period. Do not obstruct lawful enforcement, but clearly state that you wish to consult counsel and do not consent to any search beyond what the law or warrant authorizes.

Frequently asked questions

Is a private message cyber libel?

Only if it was published to someone other than the person defamed. A one-to-one message sent solely to its subject ordinarily lacks the publication element, although forwarding it to others or including other recipients can change the analysis. Other offenses may still apply.

Can a comment, meme, photo caption, or video be cyber libel?

Yes. The law is not limited to long written posts. Words, images, captions, edited media, and combinations of content may convey a defamatory factual allegation.

Is naming the complainant necessary?

No. It is enough if readers who know the surrounding facts could reasonably identify the person. Identifiability must be proved, not presumed merely because the complainant recognized themselves.

Are likes and emoji reactions cyber libel?

A mere reaction is not automatically punishable as cyber libel. Added words, coordinated participation, authorship, or a fresh defamatory publication require separate analysis.

Does deleting the post end the case?

No. A completed publication is not undone by deletion. Deletion may also destroy evidence. Preserve a complete copy and obtain advice before changing anything.

Does leaving an old post online create a new offense every day?

Not ordinarily. Continued accessibility is different from a new publication. A repost or substantive alteration may raise a separate republication issue, but the result depends on what was changed, who acted, and when.

Can the complainant file after one year by saying they discovered the post recently?

Discovery is a factual matter. The one-year rule begins when the offended party, authorities, or their agents actually discovered the offense, but the claimed discovery date may be challenged with messages, comments, prior demands, view records, witness testimony, or other evidence.

Can the prosecutor order social-media records released?

Investigators and prosecutors must follow Republic Act No. 10175, the Rule on Cybercrime Warrants, constitutional protections, and applicable provider procedures. Preservation, disclosure, interception, search, and examination are distinct measures with different requirements.

Is an apology an admission of guilt?

Not automatically, but its wording and circumstances can be used as evidence. An apology may also help resolve harm. Have counsel review any statement when a complaint is pending or likely.

Can the parties settle?

They may resolve private claims and the complainant may express a loss of interest, but cyber libel is a public offense. A private settlement does not by itself guarantee dismissal after a criminal complaint or Information has been filed.

Where can official rules and decisions be checked?

Useful primary sources include the Supreme Court E-Library, Supreme Court website, Department of Justice, Official Gazette, and the official text of the Rule on Cybercrime Warrants.

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Cyber-libel questions are highly dependent on the exact words, complete online context, identities of the parties, evidence of authorship and discovery, venue, and procedural history. Official sources were last checked on September 11, 2026.