Quick answer

A cyber libel case in the Philippines usually begins with a sworn complaint before the prosecutor’s office—not with an immediate court trial. The complainant must present admissible evidence establishing a defamatory online statement, publication to another person, identification of the person defamed, malice, use of a computer system, and the respondent’s authorship or responsibility.

A person accused of cyber libel should not ignore a prosecutor’s subpoena. The counter-affidavit and supporting evidence must be filed on the date stated in the subpoena, which ordinarily must give the respondent at least 10 days from receipt. Missing that deadline may allow the prosecutor to decide the complaint from the complainant’s evidence alone.

Cyber libel now prescribes in one year from its discovery by the offended party, the authorities, or their agents, subject to the rules on interruption and recommencement of prescription. This was affirmed by the Supreme Court en banc in Causing v. People on April 8, 2026. Because the discovery date can itself be disputed, neither side should wait until the end of the one-year period.

A takedown request, apology, demand letter, barangay proceeding, or report to a social-media platform does not automatically begin—or replace—the criminal case. Consult a Philippine lawyer promptly, particularly if the publication or discovery date is close to one year, a subpoena has arrived, or investigators are seeking access to a device or account.

What counts as cyber libel?

Section 4(c)(4) of the Cybercrime Prevention Act of 2012, or Republic Act No. 10175, covers libel under the Revised Penal Code when committed through a computer system or a similar means.

The prosecution generally must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, dishonorable act, condition, status, or circumstance that tends to dishonor, discredit, or expose a person or juridical entity to contempt.
Publication. At least one person other than the person defamed received, saw, or understood the statement.
Identifiability. The offended person is named or can reasonably be identified from the words, images, context, or surrounding facts.
Malice. The applicable form of malice must be established. The standard can differ depending on whether the complainant is a private person, public official, or public figure and whether the communication is privileged.
Use of a computer system. The publication occurred online or through information and communications technology.
Responsibility of the accused. Evidence must connect the accused to the authorship or publication—not merely to ownership of a device or an account bearing the person’s name.

The entire post matters. Courts examine the words, photographs, video, captions, links, audience, language used, and surrounding exchange rather than isolating one phrase.

Insults, criticism, satire, opinion, or an unpleasant review are not automatically cyber libel. The decisive questions include whether the communication reasonably conveys a defamatory assertion of fact, whether the person is identifiable, whether it was published, and whether the required malice exists.

Who can be held responsible?

In Disini v. Secretary of Justice, the Supreme Court upheld online libel as applied to the original author but invalidated liability for people who merely received and reacted to the post through “Like,” “Comment,” or “Share” functions under the law’s aiding-or-abetting provision.

That ruling does not give blanket immunity to every person who comments or reposts. Someone who writes a new, independently defamatory caption or comment may be treated as the author of that new statement. Liability therefore depends on the person’s own words and conduct, not simply the platform button used.

Account ownership also does not necessarily prove authorship. Relevant questions may include who controlled the account, whether it was compromised, what device was used, and whether records or testimony reliably connect the respondent to the publication.

Malice, truth, and protected communications

Private persons

Article 354 of the Revised Penal Code generally presumes malice from a defamatory imputation unless good intention and a justifiable motive are shown or the communication falls within a recognized privilege. This does not relieve the prosecution of proving the other elements beyond reasonable doubt at trial.

Public officials and public figures

When the statement concerns a public official or public figure in a matter of public interest, the Constitution provides broader protection for speech. The prosecution may have to prove actual malice: knowledge that the statement was false or reckless disregard of whether it was false.

Reckless disregard is more than carelessness. It ordinarily requires evidence that the author had serious doubts about the statement’s truth or a high awareness of probable falsity. The public status of the complainant and the connection between the publication and a public issue are fact-sensitive questions.

Truth is not always enough by itself

Under Article 361, truth may support acquittal when the defamatory charge is true and was published with good motives and for justifiable ends. Proof of truth concerning a noncriminal act or omission is generally restricted unless the imputation concerns a government employee’s discharge of official duties.

Accordingly, “but it was true” should not be treated as an automatic defense. Preserve evidence both of truth and of the legitimate purpose for publishing.

Privileged communications

Article 354 recognizes qualified privileges that include:

a private communication made in the performance of a legal, moral, or social duty; and
a fair and true report, made in good faith and without comments or remarks, of a nonconfidential judicial, legislative, or other official proceeding or an official act.

Privilege depends on the communication’s purpose, recipients, accuracy, and manner of publication. Unnecessary circulation, embellishment, hostile commentary, or proof of actual malice may defeat a qualified privilege.

The one-year prescriptive period

The controlling rule is that cyber libel prescribes in one year, not 12 or 15 years. In Causing v. People, G.R. No. 258524, April 8, 2026, the Supreme Court en banc held that cyber libel remains libel for purposes of Article 90 of the Revised Penal Code.

Under Article 91:

the period begins when the alleged cyber libel is discovered by the offended party, the authorities, or their agents;
publication online does not automatically prove that the offended party discovered it on the same date;
filing the complaint or information interrupts prescription;
the period may begin running again if proceedings terminate without conviction or acquittal or are unjustifiably stopped for reasons not attributable to the accused; and
prescription does not run while the offender is absent from the Philippine Archipelago.

The alleged discovery date should be supported by evidence such as the first message alerting the complainant, an email forwarding the post, an incident report, witness testimony, or dated correspondence. If earlier discovery is shown, a later affidavit simply claiming a later date may not control.

A substantially modified or newly published statement may create separate issues, but continued availability of an old post should not automatically be assumed to restart the one-year period. Obtain advice before relying on theories of republication.

How to file a cyber libel complaint

1. Preserve the publication properly

Before requesting removal, collect the best available evidence:

full-page screenshots showing the post, account name, date, time, URL, comments, and surrounding context;
screen recordings showing how the page or conversation was reached;
the original electronic files, not only cropped or forwarded copies;
exact URLs, usernames, profile identifiers, group or channel names, and privacy settings;
messages or notifications showing when and how the post was discovered;
names of people who actually saw or received it;
records connecting the account to the suspected author;
correspondence with the author or platform;
documents bearing on falsity, truth, good motive, privilege, or actual malice; and
evidence of harm, such as lost contracts, employment records, customer messages, medical records, or reasonable mitigation expenses.

Do not edit, annotate, or repeatedly resave the only copy. Keep an untouched original and a working copy. Record who collected each item, when it was collected, and from what device or account.

Screenshots are useful but may be disputed as incomplete, altered, or unauthenticated. Electronic evidence must still be identified and authenticated under the applicable rules. A witness who personally saw the live publication, device records, account admissions, certified platform records, or lawful forensic examination may become important.

2. Assess every legal element

Before filing, identify precisely:

the exact words or media alleged to be defamatory;
what defamatory fact they supposedly communicate;
who received or viewed them;
how the complainant is identifiable;
why the respondent is believed to be the author;
the computer system or online service used;
the publication and discovery dates;
whether the complainant is a public official or public figure;
evidence of malice or actual malice; and
possible privilege, truth, fair-comment, good-motive, or mistaken-identity issues.

A complaint should not simply attach screenshots and declare them defamatory. It should connect competent evidence to each element.

3. Choose the proper prosecution office

A criminal complaint is ordinarily filed with the city or provincial prosecutor having territorial jurisdiction over the place connected to the proper cybercrime venue. Under Section 2.1 of the Rule on Cybercrime Warrants, the resulting criminal action may be filed in the designated cybercrime court of the province or city:

where the offense or any element occurred;
where any part of the computer system used is situated; or
where any damage to a natural or juridical person occurred.

Once one proper court acquires jurisdiction, it does so to the exclusion of the others. Because internet access alone can create overbroad venue claims, the complaint should state specific jurisdictional facts rather than merely saying that the post was accessible everywhere.

Venue is often contested. Confirm it with counsel and the relevant prosecutor’s office before filing, particularly when the author, complainant, device, server, and alleged damage are in different places.

4. Prepare the complaint-affidavit

The complaint-affidavit should ordinarily:

identify the complainant and respondent and provide their addresses;
narrate facts from personal knowledge in chronological order;
reproduce or identify the exact alleged publication;
explain publication, identification, authorship, malice, and use of a computer system;
state when, where, and how the post was discovered;
explain the basis for venue;
identify witnesses and what each can prove;
attach clearly marked supporting documents; and
be properly subscribed and sworn to.

Submit the number of copies and follow the filing method required by the particular prosecution office. The 2024 DOJ-NPS Rules recognize electronic filing and virtual preliminary-investigation procedures as alternatives, but availability and technical requirements should be confirmed with the receiving office. Do not assume that an email, online police report, or platform complaint is a formally filed criminal complaint.

The NBI and PNP are the principal law-enforcement authorities under Republic Act No. 10175. A complainant may seek investigative assistance from the NBI or the PNP Anti-Cybercrime Group, especially when authorship, subscriber information, or preservation of computer data requires lawful investigation. The prosecutor—not the investigating agency—ultimately determines whether the evidence justifies filing an information in court.

5. Participate in the preliminary investigation

Cyber libel carries a sufficiently serious possible imprisonment penalty to require preliminary investigation. Under DOJ Department Circular No. 015, series of 2024, the prosecutor evaluates whether there is prima facie evidence with reasonable certainty of conviction.

The respondent receives a subpoena with the complaint and attachments. The hearing date must ordinarily give the respondent at least 10 days from receipt to prepare the counter-affidavit. If clarification is necessary, the prosecutor may conduct a physical or virtual clarificatory hearing and may permit a reply-affidavit and rejoinder-affidavit. When allowed, each generally must be filed within 10 calendar days from receipt of the pleading being answered.

The subpoena, prosecutor’s written directions, and any later issuances control the actual deadline. Requesting an extension does not suspend a deadline unless the request is granted.

6. Await the prosecutor’s resolution

The prosecutor may dismiss the complaint or recommend filing an information in the designated Regional Trial Court acting as a cybercrime court. The court then independently determines whether probable cause exists to issue a warrant of arrest, issue a summons where permitted, require additional evidence, or dismiss the case.

A party dissatisfied with the prosecutor’s resolution may have administrative remedies, including reconsideration or review, subject to short and technical deadlines. Read the notice and governing DOJ rules immediately; do not assume that negotiations or an informal request suspend the period.

How to defend against a complaint

Do not ignore the subpoena

Record the exact date and manner of service. Obtain the complete complaint and all attachments. If materials are missing or voluminous, promptly ask the prosecutor’s office for access and document the request.

A respondent who fails to submit a counter-affidavit without a justified reason risks having the case resolved on the complainant’s evidence alone. A motion to dismiss generally cannot replace a counter-affidavit; under the 2024 rules, a verified motion containing the defenses may instead be treated as the counter-affidavit.

Preserve—not destroy—your records

Keep the relevant device, account records, drafts, messages, source documents, login alerts, security emails, and backups. Do not:

delete the account or factory-reset a device;
fabricate or backdate supporting records;
pressure witnesses to change their statements;
ask others to delete copies;
publicly attack the complainant or witnesses; or
secretly access another person’s account to obtain evidence.

Deletion may eliminate helpful evidence and create damaging inferences. A lawyer can help arrange a targeted, defensible collection while protecting unrelated private information.

Build the defense around the elements

Depending on the evidence, defenses may include:

the statement was not defamatory when read in context;
it was opinion, rhetorical hyperbole, satire, or fair comment rather than a provably false factual accusation;
the complainant was not named or reasonably identifiable;
there was no publication to a third person;
the respondent did not author or publish the statement;
the account was impersonated, compromised, or accessible to someone else;
the statement was privileged;
the statement was true and published with good motives and for justifiable ends;
actual malice was not proved where constitutionally required;
venue was improperly laid;
the electronic evidence is incomplete, inadmissible, or unauthenticated;
the alleged act occurred before Republic Act No. 10175 became effective;
the complaint was filed after the one-year prescriptive period; or
the charge improperly duplicates ordinary libel for the same publication.

Every factual assertion in the defense should be supported where possible by documents or witnesses. A bare denial is usually weaker than account-security records, contemporaneous communications, drafts, source materials, or testimony identifying the actual author.

Treat investigative requests carefully

Law enforcement cannot simply disregard constitutional and statutory protections governing searches and computer data. Different cybercrime warrants cover preservation, disclosure, interception, search, seizure, and examination. The proper authority and requirements depend on the data sought.

If officers arrive with a warrant:

remain calm and do not physically obstruct them;
ask to read and obtain a copy;
note the issuing court, scope, devices, accounts, dates, and data covered;
contact counsel immediately;
do not consent to access beyond the warrant without advice; and
document the inventory, items taken, and condition of devices.

Do not destroy or conceal evidence after learning of an investigation.

Penalties and civil liability

Article 355, as amended by Republic Act No. 10951, provides for ordinary written libel a penalty of prisión correccional in its minimum and medium periods, a fine from ₱40,000 to ₱1,200,000, or both. When libel is committed through information and communications technology, Section 6 of Republic Act No. 10175 raises the imprisonment penalty by one degree.

The actual sentence and fine depend on the charge, applicable amendments, circumstances, and judgment. Courts have also recognized a policy favoring fines in appropriate libel cases, but a fine-only sentence is not guaranteed.

Before conviction in the Regional Trial Court, bail is generally a matter of right because cyber libel is not punishable by death, reclusion perpetua, or life imprisonment. The court fixes the amount and conditions. Bail does not dismiss the case or constitute an admission of guilt.

Civil liability arising from the offense is generally deemed included when the criminal action is instituted unless the offended party waives it, reserves the right to sue separately, or has already filed the civil action. Independent civil remedies may also be available under Article 33 of the Civil Code, but double recovery for the same injury is not allowed. Damages must be proved; reputational harm is not converted automatically into whatever amount the complainant demands.

Retraction, apology, takedown, and settlement

Removing a post may limit further harm, but it does not automatically erase a completed publication or terminate criminal liability. Preserve an evidentiary copy before removal.

A prompt, clear correction or apology may help resolve the dispute or bear on motive, malice, damages, or penalty, but it is not an automatic defense. Poorly drafted statements can instead admit authorship or repeat the accusation. Obtain advice before publishing one.

Settlement of the civil aspect does not necessarily compel the State to dismiss a criminal prosecution. An affidavit of desistance is relevant but does not bind the prosecutor or court. Never pay money in exchange for an informal promise that a criminal case will disappear without documenting the agreement and understanding its legal limits.

Common mistakes

Waiting because an old source says cyber libel prescribes in 12 or 15 years.
Counting automatically from publication without investigating the discovery date.
Filing in a convenient location without facts establishing venue.
Submitting cropped screenshots without the URL, date, context, or authentication evidence.
Naming an account owner without evidence of actual authorship or control.
Treating every offensive opinion or criticism as a defamatory factual allegation.
Assuming truth alone always defeats criminal libel.
Assuming public officials cannot be defamed—or ignoring the actual-malice requirement.
Suing people merely for passive reactions or ordinary sharing despite Disini.
Responding to a subpoena with social-media posts instead of a proper counter-affidavit.
Deleting accounts, messages, or devices after receiving notice of a complaint.
Missing a deadline while waiting for settlement discussions.
Believing that a platform takedown or police blotter is equivalent to filing with the prosecutor.

When legal help is urgent

Seek a Philippine lawyer immediately when:

the first anniversary of discovery is approaching;
you received a subpoena, prosecutor’s resolution, warrant, summons, or information;
investigators want to inspect or seize a phone, computer, or account;
the disputed account may have been hacked or impersonated;
the complainant is a public official or public figure;
confidential, journalistic, employment, medical, or privileged material is involved;
the parties or computer systems are in different cities or countries;
the publication concerns several possible offenses;
a child, intimate image, threat, extortion demand, or personal data is involved; or
the post is spreading rapidly and immediate preservation or protective relief may be needed.

People who cannot afford private counsel may ask the Public Attorney’s Office about eligibility. Journalists and media workers may also seek counsel experienced in press freedom and digital evidence.

Frequently asked questions

Is a demand letter required before filing?

No. A prior demand, takedown request, or request for apology is not a statutory element of cyber libel. It may nevertheless become relevant to discovery, mitigation, malice, settlement, or later publications.

Must the post be public?

Not necessarily. Publication requires communication to at least one third person. A post in a private group or a message sent to several recipients can satisfy publication, depending on the evidence. A message seen only by its author and the person defamed ordinarily presents a different issue.

Can a business file a complaint?

Article 353 protects natural and juridical persons. A corporation or other juridical entity may be defamed, but authority to act for the entity, identification, reputational injury, and the other elements must still be established.

Is sharing another person’s post automatically cyber libel?

No. Disini rejected cyber-libel liability based merely on receiving and reacting through functions such as Like, Comment, and Share. A person who adds a new defamatory statement, however, may be responsible for that person’s own publication.

Does deleting the post end the case?

No. Deletion does not undo a publication already seen by another person. It may also destroy evidence. Preserve a reliable copy and obtain advice before taking action.

Can the same publication be charged as both ordinary libel and cyber libel?

For the same online publication, Disini held that prosecution under both ordinary libel and online libel would violate the protection against double jeopardy. Distinct statements or publications require a separate factual analysis.

Can police arrest someone immediately after a complaint is filed?

Ordinarily, a filed complaint first undergoes preliminary investigation. If the prosecutor later files an information, the judge independently determines whether to issue an arrest warrant or, where legally appropriate, a summons. Warrantless arrest is allowed only under the limited circumstances stated in the Rules of Criminal Procedure.

What is the prosecutor deciding?

The prosecutor is not yet deciding guilt beyond reasonable doubt. Under the 2024 DOJ-NPS Rules, the prosecutor determines whether the evidence establishes a prima facie case with reasonable certainty of conviction and warrants filing an information in court.

Where can the governing materials be checked?

Primary materials include:

This article provides general legal information, not advice for a particular case and not a substitute for consultation with a Philippine lawyer. Procedures and conclusions can change based on the exact publication, evidence, parties, venue, and later legal developments. Sources checked as of September 14, 2026.