Quick answer

Cyber libel is libel committed through a computer system or similar digital means. A criminal case generally requires proof that the accused authored a public, defamatory, and malicious imputation identifying the complainant and published it online. The statement may accuse someone of a crime, vice, defect, dishonorable act, status, or circumstance. Philippine law does not make truth an automatic defense in every situation.

If you intend to complain, preserve the online evidence immediately and file a properly sworn complaint-affidavit with the prosecutor having territorial authority. Do not wait: the Supreme Court has ruled that cyber libel prescribes in one year from discovery by the offended party, the authorities, or their agents. Filing interrupts prescription, but disputes about the true discovery date may require evidence.

If you are accused, do not ignore a subpoena. Obtain the complete complaint and attachments, preserve your own records, and submit a sworn counter-affidavit on time. Defenses may include lack of authorship, publication, identifiability, defamatory meaning, or malice; privileged communication; prescription; and, in appropriate cases, truth published with good motives and for justifiable ends.

Cyber libel is a criminal charge with possible imprisonment, civil liability, and serious reputational consequences. Early advice from a Philippine criminal-law practitioner is strongly advisable.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on written libel when the conduct is committed through a computer system or similar means.

The prosecution must establish the essential elements of libel, together with the digital means used:

A discreditable imputation. The material attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a natural or juridical person to contempt.
Publication. At least one person other than the person defamed received or accessed the material.
Identifiability. The complainant was named or was sufficiently identifiable from the words, images, context, or surrounding facts.
Malice. The publication was legally malicious. The applicable form and required proof of malice depend on such matters as privilege, the complainant’s status, and whether the publication concerns a public issue.
Use of a computer system. The publication occurred through social media, a website, email, an online message, or another covered digital system.
The accused’s responsibility for the publication. The evidence must reliably connect the accused to the authorship and publication—not merely to a device, account name, or screenshot.

The Supreme Court explained in Disini v. Secretary of Justice that the law constitutionally applies to the author of the defamatory online statement. Its application to people who merely receive, react to, or share an existing post as “aiding or abetting” cyber libel was struck down. That protection is not a license to add a new defamatory caption, comment, edited image, or accusation: a person may be treated as the author of their own added material.

Not every harmful online statement is cyber libel

An insulting or damaging post does not automatically satisfy every element.

A case may fail where:

the material does not convey a defamatory factual imputation when read as a whole;
the complainant cannot reasonably be identified;
nobody other than the complainant received the private message;
the respondent did not create or publish the material;
the evidence does not reliably connect the respondent to the account;
the publication is privileged;
the legally required malice is absent;
the criminal action has prescribed; or
the publication occurred before the Cybercrime Prevention Act became effective and cannot lawfully be punished retroactively as cyber libel.

Labels such as “opinion,” “satire,” “review,” or “exposé” are not conclusive. Courts examine the actual words, context, audience, surrounding facts, and whether the statement reasonably asserts verifiable and defamatory facts.

Malice, public figures, and privileged communications

Under Article 354 of the Revised Penal Code, a defamatory imputation is generally presumed malicious even if true, unless good intention and justifiable motive are shown. The same article recognizes qualified exceptions, including:

a private communication made in performing a legal, moral, or social duty; and
a fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts.

These privileges are qualified, not blanket immunity. Excessive publication, irrelevant accusations, hostile embellishment, lack of good faith, or proof of actual malice may defeat them.

Where the complainant is a public officer or public figure and the publication concerns official conduct or a matter of public interest, constitutional protections for speech may require proof of actual malice—knowledge that the statement was false or reckless disregard of whether it was false. Mere error, poor phrasing, or criticism is not necessarily actual malice, but the conclusion is intensely fact-dependent.

Truth also requires care. Article 361 permits proof of truth in specified circumstances. For an accusation of a crime, truth may support acquittal if the legal requirements are met. For imputations not involving a crime, proof of truth is more restricted, including where the statement concerns a government employee’s official duties. In either setting, the defendant may still need to establish good motives and justifiable ends. “It is true” should therefore not be treated as an automatic, stand-alone defense.

The one-year deadline

In Causing v. People, as confirmed on reconsideration by the Supreme Court en banc on April 8, 2026, the Court held that cyber libel prescribes in one year under Articles 90 and 91 of the Revised Penal Code.

The period runs from the day the alleged cyber libel is discovered by the offended party, the authorities, or their agents. Publication and discovery may occur on the same day, but discovery is not automatically presumed merely because material was posted publicly online.

The filing of the complaint or information interrupts prescription. The period may begin to run again if the proceeding terminates without conviction or acquittal or is unjustifiably stopped for a reason not attributable to the accused. Prescription generally does not run while the offender is absent from the Philippines.

Because the relevant dates and the act that validly interrupted prescription can be disputed, both sides should preserve evidence of:

the original posting date and time;
the date and manner of discovery;
who first discovered and reported the material;
every filing date and receiving stamp;
removal, editing, or republication dates; and
periods when the respondent was outside the Philippines, if relevant.

A separately filed civil action for injury to rights, including defamation, is also generally subject to a one-year period under Article 1147 of the Civil Code. The interaction between criminal and civil proceedings should be assessed before filing.

How to prepare and file a complaint

1. Preserve the publication before contacting the poster

Save more than a cropped screenshot. Preserve:

the complete post, article, email, message, video, or comment thread;
the exact URL and the account or profile URL;
visible publication dates, timestamps, usernames, page names, and account identifiers;
images showing the full screen and surrounding context;
the original media files at their available resolution;
comments or contextual material showing that readers identified the complainant;
messages or notifications showing when the complainant first discovered the publication;
names and contact details of witnesses who saw it;
admissions concerning authorship or account control; and
documents showing why the accusation is false, misleading, malicious, or damaging.

Keep the original files and devices unchanged. Make working copies. Record when and how each item was collected. If possible, generate file hashes or have a qualified examiner create a forensic copy. Do not obtain evidence by guessing passwords, impersonating another person, or unlawfully entering an account.

A screenshot proves what appeared on a screen, but it may not by itself prove who authored the post, when it was first published, or whether it was altered.

2. Identify the correct offense and respondent

Separate the respondent’s own words from material merely forwarded or reacted to. Identify every person whose authorship or participation can be supported by admissible evidence. Do not name an account holder solely because a profile uses their photograph or name.

Also consider whether the conduct is better addressed by another law, a civil action, a platform report, a workplace or professional process, or a request for correction. Threats, stalking, identity theft, unauthorized account access, intimate-image abuse, and gender-based online harassment may involve different offenses with different elements and deadlines.

3. Determine the proper prosecution office

A cyber-libel complaint is ordinarily initiated through a sworn complaint-affidavit filed with the appropriate Office of the City Prosecutor, Office of the Provincial Prosecutor, or other competent prosecution office. Venue and territorial authority depend on legally significant facts, which may include where relevant elements occurred, the parties’ residence in circumstances recognized by libel law, and the allegations that can be proved.

Online accessibility everywhere does not safely establish venue everywhere. Filing in the wrong place can waste critical time, so obtain venue advice before the one-year period expires.

The NBI or the PNP Anti-Cybercrime Group may assist with investigation and digital-evidence issues. A law-enforcement report, however, is not a substitute for ensuring that the proper complaint is timely filed with the competent prosecutorial office.

4. Execute a detailed complaint-affidavit

The complaint-affidavit should ordinarily state:

the complainant’s and respondent’s identifying information and addresses;
the exact words, images, or content complained of;
when, where, and how the material was published and discovered;
how the complainant is identifiable;
who received or viewed the publication;
why it is defamatory;
the facts supporting authorship, publication, and malice;
facts relevant to venue and prescription;
the harm caused; and
an authenticated list of attachments.

Witnesses should execute their own affidavits based on personal knowledge. Assertions copied from someone else, conclusions without supporting facts, and unauthenticated screenshots may carry little weight.

Affidavits must be properly subscribed and sworn before an authorized officer. Follow the receiving office’s current requirements for copies, electronic files, proof of service, and identification.

5. Participate in the preliminary investigation

The governing framework is the DOJ’s 2024 DOJ–NPS Rules on Preliminary Investigations and Inquest Proceedings, issued as Department Circular No. 015, series of 2024. The Supreme Court recognized the DOJ’s authority to issue these rules, and later upheld the circular in Meking v. Remulla.

The prosecutor evaluates whether the available admissible, credible, and preservable evidence establishes a prima facie case with reasonable certainty of conviction. The prosecutor does not conduct a full criminal trial at this stage.

The complainant must monitor notices, attend when directed, and file any permitted reply-affidavit only to address genuinely new matters. Do not assume that repeated supplemental filings will be accepted or will cure an incomplete original complaint.

How to defend against a complaint

1. Treat the subpoena as urgent

A subpoena ordinarily includes the complaint-affidavit and attachments and sets the date for the counter-affidavit. Under the 2024 DOJ–NPS Rules, that date must generally be at least ten days from receipt of the subpoena and complaint. An extension may be allowed on meritorious grounds, but any extension is limited; the rules contemplate no more than ten days.

Record the exact date and method of service. Obtain the entire record immediately. If attachments, videos, links, or object evidence are missing or inaccessible, document that problem and promptly request access through the proper office.

Failure to submit a counter-affidavit can result in resolution based on the complainant’s evidence.

2. Do not file a bare motion to dismiss

Under the current DOJ rules, a motion to dismiss in place of a counter-affidavit is generally not allowed unless it is verified and contains the respondent’s defenses, in which case it may be treated as the counter-affidavit.

The safer course is usually a complete, sworn, evidence-supported counter-affidavit addressing every element, each attachment, venue, prescription, and any constitutional or procedural defense.

3. Preserve—not delete—your records

Keep:

the device used at the relevant time;
account-security and login records;
original drafts and source materials;
private messages showing context;
editorial records and fact-checking notes;
documents supporting the factual basis of the publication;
communications showing good faith or a request for comment;
proof of hacking, impersonation, or loss of account control;
travel and location records where material; and
the complete version of content presented incompletely by the complainant.

Deleting a post does not erase screenshots or platform records and may complicate authentication, context, or credibility. Before editing, deleting, apologizing, or contacting the complainant, obtain legal advice and preserve a complete evidentiary copy.

4. Test every element

A defense should ask:

What exact passage is allegedly defamatory?
Is it being read in its complete context?
Does it assert a fact or use protected rhetorical, evaluative, satirical, or critical language?
Could an ordinary reader identify the complainant?
Was it communicated to a third person?
Who actually authored and published it?
Is account attribution supported by competent evidence?
Was the communication privileged?
Is actual malice required, and what evidence supposedly proves it?
Does documentary evidence support truth, good motive, or justifiable purpose?
Was the complaint filed within one year of provable discovery?
Is venue properly alleged and supported?

The prosecution bears the burden of proving guilt beyond reasonable doubt at trial. The respondent need not prove innocence merely because a complainant produced screenshots.

5. Avoid retaliation

Do not pressure witnesses, publish private evidence to rally supporters, threaten a countersuit, or launch new accusations. A response post can create a separate publication and may undermine a good-faith defense.

A carefully worded correction, clarification, apology, or settlement proposal may sometimes reduce harm, but it may also be characterized as an admission. Counsel should review it first. A private settlement also does not automatically compel the State to dismiss a criminal prosecution.

What happens after preliminary investigation?

The prosecutor may dismiss the complaint or find sufficient basis to file an information in court. Cybercrime cases are generally handled by designated Regional Trial Courts acting as cybercrime courts.

Once an information is filed, the court independently determines whether probable cause exists for issuing a warrant of arrest. Preliminary investigation is different from the court’s judicial determination of probable cause and different again from proof beyond reasonable doubt at trial.

The accused should promptly discuss with counsel:

any motion or petition available against the prosecutor’s resolution;
arraignment and the consequences of entering a plea;
bail;
preservation and production of electronic evidence;
objections to unlawfully obtained evidence;
possible motions to quash, including prescription or defective allegations;
civil liability deemed instituted with the criminal case; and
trial strategy and witnesses.

Do not assume that a request for reconsideration, petition for review, settlement discussion, or platform takedown automatically stops a court deadline or prescription. Confirm each deadline from the actual notice, governing rule, and date of receipt.

Electronic evidence and lawful access to account data

Courts assess electronic material under the Rules on Electronic Evidence and ordinary rules on relevance, authenticity, hearsay, and admissibility. Useful proof may include testimony from someone who personally captured or received the material, platform or service-provider records, metadata, account admissions, corroborating messages, and forensic examination.

Subscriber information, traffic data, stored content, and devices cannot simply be taken because a complaint was filed. The Rule on Cybercrime Warrants governs preservation, disclosure, interception, search, seizure, examination, and related judicial processes. Different types of data require different legal authority.

If platform records may disappear, ask law enforcement or counsel immediately about a lawful preservation request. A private individual should not fabricate a subpoena, demand passwords, seize another person’s device, or access an account without permission.

Common mistakes

Waiting for negotiations until the one-year period is nearly over.
Counting only from the posting date without preserving proof of discovery.
Filing in a convenient location without establishing proper venue.
Submitting cropped screenshots without URLs, timestamps, context, or authentication.
Assuming an anonymous account can automatically be attributed to the person pictured or named.
Treating truth as an automatic defense without addressing good motive and justifiable purpose.
Assuming “opinion” protects an accusation that reasonably asserts defamatory facts.
Naming everyone who liked or shared a post despite Disini.
Deleting evidence or replacing the original device.
Ignoring a subpoena or relying on an unsupported motion to dismiss.
Contacting witnesses or the opposing party in a threatening or coercive manner.
Assuming a takedown, apology, affidavit of desistance, or private settlement automatically ends criminal liability.
Publishing the complaint, counter-affidavit, or private records online and creating further legal exposure.

When legal help is urgent

Consult counsel immediately if:

the one-year anniversary of discovery is approaching;
you received a prosecutor’s subpoena, information, warrant, or court order;
an account is anonymous or platform records may soon be deleted;
police seek access to a device, account, or private messages;
the publication involves a public officer, journalist, whistleblower, employer, regulated professional, or matter of public concern;
a child, intimate content, threats, stalking, or personal-data exposure is involved;
several people, jurisdictions, or republications are involved;
the respondent is outside the Philippines;
you are considering an apology, retraction, settlement, or affidavit of desistance; or
the same facts may support other criminal, civil, administrative, labor, or data-privacy proceedings.

Those unable to afford private counsel may inquire with the Public Attorney’s Office about eligibility and assistance.

Frequently asked questions

Can a private message be cyber libel?

Potentially, but publication to a third person is essential. A message sent only to the person allegedly defamed ordinarily presents a publication problem. A group chat, copied email, forwarded message, or message shown to someone else may satisfy publication, depending on the proof.

Can I sue over a fake account?

Yes, if the elements can be established, but identifying the operator requires lawful evidence. A profile name, photograph, phone number, or IP address may be relevant without conclusively proving authorship. Seek preservation assistance quickly.

Is sharing a defamatory post automatically cyber libel?

No. Disini protects people from liability under the Cybercrime Prevention Act merely for receiving, reacting to, or sharing an existing defamatory post as aiders or abettors. Liability may still arise from a person’s own added accusation, caption, comment, or other independently defamatory publication.

Is a screenshot enough?

Sometimes it is useful, but it is rarely the strongest possible record. Preserve the URL, complete page, context, date and time, original files, witness testimony, and evidence connecting the publication to its author.

Does deleting the post end the case?

No. Deletion does not erase a completed publication, stop prescription by itself, or eliminate copies held by readers or platforms. It may affect continuing harm and remedies, but the legal effect depends on the circumstances.

Can the complainant withdraw the case?

The complainant may execute an affidavit of desistance or settle civil claims, but cyber libel is prosecuted in the name of the People of the Philippines. Desistance does not automatically require the prosecutor or court to dismiss the criminal case.

Can someone file both criminal and civil claims?

Yes. Civil liability arising from the alleged offense is generally deemed instituted with the criminal action unless it is waived, reserved, or previously filed separately. A separate civil defamation action may also be available, subject to procedural rules and prescription. Coordinating the claims is important to avoid waiver, duplication, or inconsistent positions.

What is the penalty?

Section 6 of the Cybercrime Prevention Act provides a penalty one degree higher than that for libel under the Revised Penal Code when information and communications technology is used. The resulting imprisonment range, sentencing rules, possible fine, civil damages, and eligibility for probation depend on the charge, judgment, and circumstances. A person facing prosecution should obtain case-specific sentencing advice rather than rely on a generic estimate.

Official legal sources

This article provides general legal information, not legal advice or an attorney-client opinion. Outcomes depend on the exact words, evidence, dates, parties, venue, and procedural record. Philippine legal sources and procedures were checked through September 12, 2026.