Quick answer

Cyber libel is committed when a person makes a public and malicious defamatory imputation through a computer system—such as a social-media post, online article, video caption, email sent to third persons, or similar digital communication—and the subject is identifiable.

To file a case, preserve the original electronic evidence and submit a sworn complaint with supporting documents to the proper city or provincial prosecutor, often after seeking assistance from the NBI Cybercrime Division or the PNP Anti-Cybercrime Group. The prosecutor conducts a preliminary investigation before deciding whether to file an Information in the Regional Trial Court.

To defend a case, do not ignore a subpoena, demand letter, invitation, warrant, or court notice. Obtain the complete complaint and attachments, preserve your own records, and evaluate whether the prosecution can prove every element—including authorship, publication to a third person, identification, defamatory meaning, and malice. Truth, privileged communication, fair comment, lack of publication, mistaken identity, prescription, and defective venue may apply, but each depends on the exact words, context, evidence, and parties involved.

Time is critical. The Supreme Court has ruled that cyber libel prescribes in one year from discovery, subject to the legal rules on interruption and computation. A separate civil action for injury to rights or defamation ordinarily also has a one-year limitation period. Anyone considering a complaint—or raising prescription as a defense—should have the dates and procedural history reviewed immediately.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the prohibited acts of libel under the Revised Penal Code to communications made through a computer system or similar technology.

A prosecution generally must establish:

A defamatory imputation. The communication attributes a crime, vice, defect, condition, act, omission, or circumstance that tends to dishonor, discredit, or expose a person to contempt.
Publication. At least one person other than the person defamed received, read, watched, or heard the communication. A purely private message sent only to its subject normally lacks this element, although sending it to a group chat, employer, relative, customer, or other third person may constitute publication.
Identification. The offended person was named or was sufficiently identifiable from the words, images, tags, surrounding facts, or context. Naming the person is not always necessary.
Malice. Article 354 generally presumes malice from a defamatory imputation, even if it is true, unless the communication falls within a recognized privileged category. When qualified privilege applies, the prosecution must prove actual malice.
Use of a computer system or similar means. The publication was made online or through information and communications technology.
Authorship or legally attributable participation. The prosecution must connect the accused to the publication with admissible evidence. A profile name or screenshot alone does not automatically prove who controlled the account or made the post.

The whole communication matters. Courts consider the ordinary meaning of the words, the audience, images and links, the surrounding exchange, and whether the statement would reasonably be understood as asserting a damaging fact rather than mere rhetoric, satire, or opinion.

Who may be liable?

The principal risk generally falls on the person who authored or published the allegedly defamatory online content. Editors, account administrators, publishers, or other participants may require a separate analysis of what each person actually did and whether the necessary criminal intent and participation can be proved.

In Disini v. Secretary of Justice, the Supreme Court sustained the cyber-libel provision but invalidated the Cybercrime Prevention Act’s general aiding-or-abetting provision as applied to cyber libel. The Court explained that liability should not automatically extend to people who merely receive a post and react to it. A “like,” reaction, or passive receipt therefore should not be treated as automatic cyber-libel liability. Reposting content with one’s own defamatory statement, materially adopting it, or making a new publication presents a different and fact-dependent question.

A single online publication also cannot be used to impose both ordinary libel and cyber libel in a way that violates the constitutional protection against double jeopardy.

Statements that may be protected

Absolutely privileged communications

Statements made in settings covered by absolute privilege—such as statements made by legislators in the proper discharge of legislative functions or material statements made in judicial proceedings—may be immune from defamation liability even if offensive. The privilege has defined limits and does not necessarily protect republication outside the protected setting.

Qualifiedly privileged communications

Article 354 recognizes qualified privilege for:

A private communication made in the performance of a legal, moral, or social duty to a person with a corresponding interest or duty; and
A fair and true report, made in good faith and without added comments, of specified official proceedings or acts.

Other forms of qualified privilege have also developed through jurisprudence, including fair comment on matters of public interest. Qualified privilege is not an automatic acquittal. It changes the malice analysis: the prosecution must prove actual malice, such as knowledge of falsity, reckless disregard of truth, spite, or use of the occasion for an improper purpose.

Posting an accusation publicly to thousands of people is not automatically privileged simply because the author says there was a moral duty to warn others. The audience, necessity, proportionality, verification efforts, and motive all matter.

Truth and good motives

Truth is important but should not be oversimplified as a complete defense in every case. Under Article 361, the accused generally must show both the truth of the imputation and that it was published with good motives and for justifiable ends. Special rules apply when the imputation concerns an act or omission of a government employee related to official duties.

Documents, reliable witnesses, contemporaneous records, and proof of responsible verification are much stronger than rumor or a claim that “someone told me.”

Opinion, satire, and fair comment

Pure opinion that cannot reasonably be understood as asserting a provably defamatory fact may be protected. Merely adding “in my opinion,” “allegedly,” a question mark, or an emoji does not convert a factual accusation into protected opinion.

Fair comment about public conduct or a matter of public interest receives greater protection, especially when readers can see the true facts on which the comment is based. Fabricated facts, knowingly false accusations, and reckless disregard of readily available contrary information remain dangerous.

Filing a cyber-libel complaint

1. Preserve the evidence before requesting removal

Save more than a cropped screenshot. Where possible, preserve:

The full post, article, comment, message, image, audio, or video;
The exact URL and the profile or account URL;
Publication date and time, including the displayed time zone;
The account name, username, profile details, and account-identifying information;
The complete conversation or thread, not only selected portions;
Comments, shares, recipient lists, view information, and notifications;
Screen recordings showing how the content was accessed;
Original downloaded files and available metadata;
Messages or admissions connecting the respondent to the account;
Names and contact details of people who saw the publication;
Evidence explaining why the statement referred to the complainant;
Evidence of falsity, malice, reputational harm, lost work, medical treatment, or other damage; and
Copies of any correction request, demand, apology, retraction, or response.

Keep the original device and unedited files. Back up copies securely. Do not add annotations to the only copy, alter metadata, impersonate someone to gain access, or obtain evidence by hacking an account.

Electronic evidence must be authenticated. Screenshots can be useful, but the opposing party may challenge their completeness, source, integrity, or connection to the accused.

2. Identify the respondent and the proper venue

If the publisher is anonymous, report the matter promptly to the NBI Cybercrime Division or PNP Anti-Cybercrime Group. Subscriber information and nonpublic platform records normally require lawful investigative process and, where required, a cybercrime warrant. A private complainant cannot compel a platform or telecommunications company to disclose protected records simply by sending a demand.

Venue in a libel case is jurisdictional and must be properly alleged and proved. Article 360 of the Revised Penal Code contains special venue rules based on factors such as the place of printing and first publication, the complainant’s residence, and—for a public officer—the location of the relevant public office. Applying those rules to an online publication can be technically disputed. The Cybercrime Prevention Act also defines when Philippine courts have jurisdiction over cybercrime.

Do not choose an office solely because it is convenient. Have counsel or the receiving prosecutor confirm the correct city or province before filing.

3. Prepare the complaint-affidavit

The complaint should ordinarily contain:

The complainant’s identifying and contact information;
The respondent’s known identity and address;
The exact allegedly libelous words or an accurate transcription and translation;
When, where, and how the content was published and discovered;
Who received or saw it;
Why the complainant was identifiable;
Why the imputation was defamatory and false or malicious;
Facts supporting the selected venue;
A chronological account based on personal knowledge;
A list of witnesses and their affidavits, where available; and
Properly marked attachments and electronic evidence.

The complaint is sworn. Material exaggerations, incomplete quotations, misleading translations, or false statements can damage the case and may create separate legal exposure.

A prior demand for deletion, correction, or apology is generally not an element of cyber libel. It may nevertheless help resolve the dispute, preserve admissions, or show how the respondent acted after receiving notice. A demand should be carefully drafted and must not contain threats that could amount to coercion, extortion, or another offense.

4. File with the proper prosecutor or seek investigation

Because cyber libel carries a penalty requiring preliminary investigation, the criminal complaint is ordinarily filed with the proper city or provincial prosecutor. A complainant may first seek technical investigation from the NBI or PNP, particularly where account attribution, preservation of provider data, or forensic examination is necessary.

The prosecutor—not the complainant—decides whether the evidence meets the governing standard for filing an Information in court.

5. Participate in the preliminary investigation

The respondent is served with a subpoena and copies of the complaint and supporting evidence, then given a deadline to submit a counter-affidavit and evidence. The parties may be directed to file replies or attend clarificatory proceedings. The prosecutor later issues a resolution dismissing the complaint or finding sufficient basis to file an Information.

Deadlines and available review procedures depend on the applicable DOJ rules and the document served. Read the actual subpoena or resolution immediately; do not rely on an informal summary of the deadline.

6. Court proceedings

If an Information is filed, the case belongs in the Regional Trial Court, including a designated cybercrime court where applicable. The judge independently evaluates probable cause and may issue a warrant of arrest or another appropriate process.

An accused facing a warrant should obtain counsel and arrange a lawful surrender and bail application rather than evade authorities. Bail is generally a matter of right before conviction by the RTC for an offense not punishable by death, reclusion perpetua, or life imprisonment, but the court determines the amount and conditions.

The prosecution must still prove guilt beyond reasonable doubt at trial. A prosecutor’s finding of probable cause is not a conviction.

How to defend a cyber-libel complaint

Respond immediately but carefully

Upon receiving a subpoena or complaint:

Record the date and manner of service.
Obtain every attachment and verify whether anything is missing.
Consult a lawyer before contacting the complainant or posting publicly about the dispute.
Preserve the account, device, drafts, source materials, login records, messages, and full context.
Calendar the response deadline and any hearing.
Prepare a fact-specific counter-affidavit supported by admissible evidence.

Do not destroy content, factory-reset a device, fabricate a source, coach witnesses, or ask another person to claim ownership of the account. Deleting a post does not undo an offense already completed and may eliminate evidence useful to the defense.

Test every element

A defense should examine:

Authorship: Does admissible evidence prove that the accused controlled the account and made the publication?
Publication: Did a third person actually receive or understand the material?
Identification: Would readers reasonably recognize the complainant?
Defamatory meaning: Is the statement damaging when read in full context?
Fact or opinion: Is it a factual accusation capable of proof, or protected comment, rhetoric, or satire?
Malice: Is malice presumed, rebutted, or required to be affirmatively proved because of privilege?
Truth and justification: What documents and witnesses support the statement and the reason for publishing it?
Privilege: Was the communication made to an appropriate recipient in the performance of a duty or as a fair report?
Timing: Was the complaint commenced within the applicable prescriptive period?
Venue: Does the complaint allege and support a legally proper place of prosecution?
Applicability of the law: Did the relevant online publication occur after the Cybercrime Prevention Act took effect?
Integrity of evidence: Are the screenshots complete and authenticated? Was digital evidence lawfully obtained?
Duplicative prosecution: Is the same publication being prosecuted under inconsistent or constitutionally impermissible duplicate charges?

Consider correction or settlement without admitting facts carelessly

Retraction, correction, apology, removal, or settlement may reduce harm and sometimes resolve the private dispute. They do not automatically erase criminal liability because a criminal case is prosecuted in the name of the People of the Philippines. Once proceedings have begun, dismissal is subject to prosecutorial and judicial authority.

Any proposal should address confidentiality, preservation of evidence, pending civil claims, platform content, and the exact scope of releases. Do not offer money or make admissions impulsively in a public thread.

Prescription and other deadlines

In Causing v. People, the Supreme Court held that cyber libel is still libel for purposes of prescription and is governed by the special one-year prescriptive period, not a 12- or 15-year period. In 2026, the Court affirmed that the period runs from discovery of the offense.

The exact deadline may still depend on:

When the offended party or authorities discovered the publication and its author;
Whether and when a complaint was validly filed;
Whether filing interrupted prescription;
Whether the publication relied upon is the original post or a legally distinct later publication; and
The procedural effect of dismissal, refiling, or filing in an improper office.

Because a single day can matter, both sides should build a dated timeline supported by records. A complainant should not delay while negotiating a takedown. A respondent should raise prescription at the earliest procedurally proper opportunity.

The one-year period for a separate civil action for defamation or injury to rights must also be considered. Civil liability may be pursued with the criminal case or separately, subject to the Rules of Criminal Procedure and the Civil Code.

Possible penalties and civil exposure

Ordinary written libel under Article 355 is punishable by imprisonment, a fine, or both. Republic Act No. 10951 adjusted the fine for Article 355 to ₱40,000 to ₱1,200,000. For cyber libel, Section 6 of the Cybercrime Prevention Act provides a penalty one degree higher than the corresponding Revised Penal Code penalty. Applied to imprisonment, this produces a range extending from prisión correccional maximum to prisión mayor minimum.

Actual sentencing is not a simple matter of selecting the highest number. The court must consider the charge, the proven circumstances, the Indeterminate Sentence Law where applicable, current jurisprudence favoring fines in appropriate libel cases, and the accused’s eligibility for probation or other relief.

A convicted person may also be ordered to pay civil damages. Even without a criminal conviction, a separate civil claim may be possible if its elements are proved under the applicable standard and filed on time.

Common mistakes

Waiting for the post to disappear before saving complete evidence;
Assuming a screenshot conclusively proves authorship;
Filing in the most convenient city without checking special venue rules;
Quoting only a fragment that changes the meaning of the full post;
Treating every insult, criticism, or negative review as criminal libel;
Assuming that truth alone always ends the case;
Believing that “allegedly” or “in my opinion” provides automatic immunity;
Publicly attacking the other party after receiving a complaint;
Ignoring a prosecutor’s subpoena because it is not yet a court case;
Deleting accounts or messages after learning of an investigation;
Missing the one-year prescriptive period or a shorter procedural deadline;
Trying to obtain private account data through impersonation, hacking, or unauthorized access; and
Assuming a private settlement automatically dismisses a criminal prosecution.

When legal help is urgent

Seek a Philippine lawyer immediately if:

The one-year period is close to expiring;
A prosecutor’s subpoena, resolution, Information, or warrant has been issued;
The account is anonymous or crucial provider data may soon be deleted;
Law-enforcement officers want to search, seize, or examine a device;
The disputed statement concerns a public official, journalist, whistleblower, workplace investigation, sexual misconduct, or an alleged crime;
The publication crossed national borders or involved a person outside the Philippines;
Multiple posts, republishers, or complainants are involved;
A child, confidential record, intimate image, or personal data is involved; or
There are threats, stalking, doxxing, extortion, or immediate safety risks in addition to defamation.

Ask to see the warrant before consenting to a search or forensic examination. Do not obstruct a lawful search, but clearly state that you wish to consult counsel and obtain a copy of the warrant and inventory.

Frequently asked questions

Is every false Facebook post cyber libel?

No. The prosecution must prove all elements, including a defamatory imputation, publication to another person, identification of the complainant, malice where required, use of a computer system, and the accused’s responsibility for the post.

Can a private message be cyber libel?

A message sent only to the person discussed ordinarily lacks publication to a third person. A message sent to another person or to a group may satisfy publication.

Can I file even if the post has been deleted?

Possibly. Deletion does not necessarily prevent a case if reliable evidence establishes the post, its contents, publication, authorship, and timing. Authentication may become harder, which is why early preservation matters.

Am I liable for liking or reacting to a defamatory post?

A reaction or passive receipt is not automatically cyber libel. The Supreme Court’s ruling in Disini rejected application of the general aiding-or-abetting provision to cyber libel. A person who adds a defamatory statement or makes a new publication may face a different analysis.

Is sharing or reposting automatically criminal?

Not automatically. Liability depends on the precise act, accompanying words, intent, and whether the person made or adopted a legally actionable publication. Do not assume that adding “shared only” eliminates risk.

Can the complainant have an anonymous account owner identified?

Potentially, through lawful investigation and appropriate court process. Platforms and service providers may hold subscriber or traffic data, but retention periods, foreign law, platform policy, and the availability of a proper cybercrime warrant can affect recovery.

Must the complainant first send a demand letter?

Generally, no. A demand, takedown request, or request for correction is not ordinarily an element of the crime. It may still be useful in resolving the dispute or documenting the respondent’s response.

Does deleting or apologizing end the criminal case?

No. Removal, correction, or apology may mitigate harm and support settlement, but it does not automatically extinguish criminal liability or require the prosecutor or court to dismiss the case.

Where is the case filed?

The complaint is ordinarily filed with the proper city or provincial prosecutor for preliminary investigation, and any Information is filed in the Regional Trial Court. The correct territorial venue depends on Article 360, the allegations and evidence concerning publication, the complainant’s status and residence or office, and applicable cybercrime rules.

How long do I have to file?

The current Supreme Court rule is one year from discovery of the cyber libel, subject to rules on computation and interruption. Obtain advice promptly because the legally relevant discovery and filing dates may be disputed.

Official legal sources

This article provides general legal information, not legal advice or an assessment of any particular post or case. Cyber-libel outcomes depend heavily on the exact words, audience, evidence, dates, parties, and procedural history. Law and procedure checked against official sources as of September 17, 2026.