Quick answer

To file a Philippine cyber libel case, preserve the online material and proof of authorship, determine the correct venue, and file a sworn complaint-affidavit with the appropriate city or provincial prosecution office. Investigative assistance from the NBI Cybercrime Division or PNP Anti-Cybercrime Group may be necessary when the poster is anonymous or platform records must be preserved.

Act quickly. The Supreme Court has definitively ruled that cyber libel prescribes in one year from its discovery by the offended party, the authorities, or their agents—not automatically from the posting date. Filing the proper complaint with the prosecution office interrupts prescription. A demand letter, settlement discussion, platform report, or police blotter alone should not be relied upon to stop the period.

To defend a case, do not ignore the prosecutor’s subpoena. Submit a sworn counter-affidavit and all supporting evidence on the stated hearing date, which must be at least 10 days after receipt of the subpoena and complaint. Possible defenses include failure to prove authorship, identification, publication, defamatory meaning, malice, correct venue, or timely filing, as well as privilege, fair comment, truth accompanied by good motives and justifiable ends, and the higher constitutional standard applicable to public officials and public figures.

Cyber libel is governed principally by Article 353 in relation to Article 355 of the Revised Penal Code and Section 4(c)(4) of the Cybercrime Prevention Act of 2012.

What the prosecution must establish

A prosecutor must find prima facie evidence with reasonable certainty of conviction before filing an information in court. At trial, the prosecution must prove guilt beyond reasonable doubt.

Ordinarily, the evidence must establish:

A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose a natural or juridical person to contempt.
Identification. The complainant was named or was sufficiently identifiable to people who encountered the statement. Naming a person is not always necessary, but a vague statement about a large, indeterminate group may not identify an individual complainant.
Publication. At least one person other than the person defamed received or understood the statement. A message sent only to the offended person normally lacks this element; a public post, group message, comment thread, or message sent to another person may satisfy it.
Malice. For an ordinary private complainant, a defamatory imputation is generally presumed malicious unless it is privileged or good intention and justifiable motive are shown. Different rules apply to public officials, public figures, privileged communications, and matters of public interest.
Use of a computer system or similar technology. The publication was made through social media, a website, email, messaging technology, or another computer system.
Authorship or responsibility. The respondent—not merely an account bearing the respondent’s name—authored the defamatory material.

The statement must be evaluated as a whole, in its language and social context. Courts distinguish factual accusations from rhetorical exaggeration, humor, opinion, and fair criticism. Calling something an “opinion” does not provide automatic protection if it implies specific, provably false facts.

Who may be liable

The Supreme Court upheld cyber libel as constitutional with respect to the original author of the defamatory post. It invalidated liability for people who merely receive the post and react through a like, share, or similar knee-jerk response.

There is an important distinction: a person who writes a new comment containing an independent defamatory accusation may be treated as the original author of that new statement. A simple reaction is different from adding a new factual story.

The prosecution must still prove who controlled the account and authored the material. In its 2025 guideposts for criminal cases involving social media, the Supreme Court identified potentially relevant proof such as:

An admission of account ownership or authorship;
A witness who saw the person access the account or compose the post;
Information in the post known only to the suspected author or a few people;
Language or conduct consistent with the suspected author;
Platform, telecommunications, internet-service-provider, geolocation, or device-forensic records;
Prior messages and posts reliably connected to the same person; and
Other circumstances demonstrating ownership, access, or authorship.

A profile name and photograph can be relevant, but account identity should not be assumed when hacking, impersonation, shared access, or a dummy account is genuinely possible.

Statements that may be protected

Privileged communications

Article 354 recognizes qualified privileges, including:

A private communication made in the performance of a legal, moral, or social duty; and
A fair and true report, made in good faith and without added comments, of qualifying official proceedings, official acts, or public proceedings that are not confidential.

Fair comment on a matter of legitimate public interest may also be privileged under Supreme Court jurisprudence. A qualified privilege removes the ordinary presumption of malice, but it can be defeated by proof of actual malice.

Statements made in judicial proceedings may enjoy broader protection when relevant to the proceeding. Reposting those allegations outside the protected setting, however, may present a separate issue.

Public officials and public figures

When the complainant is a public official or public figure and the statement concerns official conduct or a legitimate matter of public interest, the prosecution bears the more demanding burden of proving actual malice: knowledge that the statement was false or reckless disregard of whether it was false.

Reckless disregard is more than ordinary carelessness. It may involve publishing despite serious doubts about the truth or a high degree of awareness that the accusation is probably false. Mere error or failure to conduct a perfect investigation does not automatically establish actual malice.

The protection is not unlimited. Personal accusations unrelated to official duties or public concerns may be treated differently, and fabricated allegations published with knowledge of falsity remain actionable.

Truth

Truth is not an automatic, universal defense to criminal libel. Under Article 361:

The accused must generally establish both the truth of the matter and that it was published with good motives and for justifiable ends.
Proof of the truth of an imputation that does not constitute a crime is generally inadmissible unless the imputation concerns a government employee and facts related to the discharge of official duties.

The defense therefore should preserve not only documents supporting accuracy but also evidence explaining why publication was reasonably necessary and properly motivated.

The one-year deadline

In Causing v. People, resolved with finality by the Supreme Court En Banc on April 8, 2026, the Court held that cyber libel prescribes in one year from discovery of the allegedly defamatory material by the offended party, authorities, or their agents.

The posting date and discovery date may coincide, but they are not legally presumed to be the same. A public social-media post does not create the kind of constructive notice produced by registration in a public registry.

Discovery may be proved through circumstances such as:

The complainant’s reaction or comment on the post;
A message confronting the author;
A threat to file a case;
A platform report or takedown demand;
A communication from an employee, lawyer, relative, or other agent who found the post; or
Other conduct showing actual knowledge.

Under Article 91 of the Revised Penal Code:

Prescription is interrupted by filing the complaint or information;
It may begin running again if proceedings terminate without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused; and
It does not run while the offender is absent from the Philippines.

The institution of proceedings for preliminary investigation through a proper complaint filed with the prosecutor interrupts prescription. Because venue defects, incomplete filings, and refiling after dismissal can create serious disputes, do not wait until the last days of the period.

A civil action for defamation is also generally subject to a one-year prescriptive period under Article 1147 of the Civil Code. Obtain advice about its accrual and whether the civil claim should be included in the criminal case, reserved, or filed independently.

How to preserve the evidence

Preserve evidence before requesting deletion or publicly confronting the poster.

Keep:

Full screenshots showing the statement, account name, profile details, date and time, audience or privacy setting, comments, reactions, and surrounding context;
The exact URL or direct link to the post, comment, profile, page, video, or message;
A screen recording showing how the content was accessed and where it appeared;
Original downloaded photographs, audio, video, emails, and message exports;
Unedited copies of webpages or PDF printouts;
The original device used to view or receive the material;
The date, time, place, and circumstances of discovery;
Names and sworn accounts of people who saw or received the statement;
Messages or conduct linking the account to its suspected user;
Proof of professional, business, medical, or financial harm; and
Copies of platform reports, replies, corrections, demands, and takedown notices.

Do not crop, annotate, overwrite, or enhance the only copy. Work on duplicates and retain the originals. Do not factory-reset a relevant device or delete posts, account records, login notifications, or messages—even if they appear unfavorable.

Electronic evidence must be authenticated. Screenshots are useful, but a screenshot alone may not prove who wrote the post, that it is complete, or that it accurately reflects the original. The Rules on Electronic Evidence permit authentication through digital signatures, security procedures, or other evidence establishing integrity and reliability.

Do not hack an account, guess a password, impersonate another person, or secretly obtain records through unlawful access. Evidence obtained without the necessary authority or warrant may be excluded and may expose the collector to a separate case.

How to file the complaint

1. Calculate the deadline

Record both the publication date and the earliest provable discovery date. Identify whether a lawyer, employee, relative, investigator, or other agent discovered it earlier. If the one-year period is close, consult counsel immediately.

A demand letter is optional. It may support a request for correction, apology, or settlement, but it does not replace the timely filing of the criminal complaint.

2. Establish the proper venue

Venue is jurisdictional in criminal cases. Filing in the wrong place can defeat the case.

Article 360 of the Revised Penal Code contains special venue rules for written defamation:

For a private offended party, the statutory anchors include the place where the article was printed and first published or where the offended party actually resided when the offense was committed.
For a public officer, the relevant alternatives depend on where the officer held office and where the article was printed and first published.

Applying “first publication” to an online post can be fact-sensitive. The place where a reader happened to open a webpage should not automatically be treated as the place of first publication. Section 21 of Republic Act No. 10175 separately addresses Philippine jurisdiction and assigns cybercrime cases to Regional Trial Courts, including designated cybercrime courts.

The complaint should allege concrete venue facts, not merely state a legal conclusion. When available, the complainant’s actual residence or public office at the relevant time may provide a clearer statutory basis than an uncertain upload location. Have counsel confirm venue before filing.

3. Consider investigative assistance

A complainant may seek assistance from the NBI Cybercrime Division or the PNP Anti-Cybercrime Group, particularly when:

The account is anonymous or apparently fake;
Platform or telecommunications records are needed;
A device requires forensic examination;
Content may disappear; or
The publication crosses jurisdictions.

The NBI’s official procedure allows members of the public to file a complaint or request an investigation, execute sworn statements, submit affidavits, and present a relevant device for examination.

Ask investigators promptly whether a lawful preservation order is appropriate. Under Sections 13 and 14 of Republic Act No. 10175, computer data may be preserved, while disclosure of subscriber, traffic, or relevant data requires a court warrant. A private complainant cannot personally compel a platform to disclose protected account records.

Do not assume that an investigative request alone stops prescription. Ensure that the appropriate sworn complaint reaches the proper prosecution office within the legal period.

4. Prepare the complaint-affidavit

The affidavit should state facts within the affiant’s personal knowledge and should include:

Full names and usable addresses of the parties, if known;
The exact allegedly defamatory words, image, video, or other material;
A faithful translation when the statement is in Filipino, a regional language, slang, or another language;
The complete context—not merely selected phrases;
When and how the statement was published and discovered;
Who received, saw, or understood it;
How the complainant was identified;
Why the imputation was defamatory;
Evidence connecting the respondent to the account and publication;
Facts establishing malice, including actual malice when required;
Facts establishing the selected venue;
The applicable URLs, screenshots, files, and electronic records; and
The harm caused and supporting documents.

Attach sworn affidavits of witnesses and an exhibit index. Avoid argument unsupported by firsthand facts, exaggerated damage claims, and assumptions about account ownership.

5. File with the prosecution office

Under the 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings, a regular preliminary investigation begins with:

The original complaint-affidavit;
Two duplicate copies for the official file;
One additional set for each respondent;
Supporting affidavits and evidence; and
A completed NPS Investigation Data Form.

Affidavits must be sworn before a prosecutor or another government official authorized to administer oaths, or, when they are unavailable, before a notary public. Check the receiving office’s current administrative checklist, copying requirements, and payment instructions before filing.

General email submission is not automatically equivalent to filing. Electronic filing and virtual proceedings are alternatives used under the conditions and orders specified by the prosecutor.

What happens during preliminary investigation

Because the prescribed cyber-libel imprisonment reaches eight years, the case falls under the DOJ-NPS rules for regular preliminary investigation.

The principal administrative periods are:

Stage	Current period under DOJ Department Circular No. 15
Initial action after the investigating prosecutor receives the complete records	Within 5 calendar days
Scheduled preliminary-investigation hearing	Not more than 30 days from receipt of the complete records
Respondent’s time after receiving the subpoena and complaint	At least 10 days before the required submission date
Clarificatory hearing, if necessary	Within 10 calendar days after receipt of the counter-affidavit
Reply or rejoinder, when required	Not more than 10 calendar days from receipt of the pleading answered
Extension for a responsive submission	Not automatic; maximum of 10 days on meritorious grounds
Resolution by investigating prosecutor	Generally within 60 calendar days from assignment, subject to a maximum 30-day extension in specified cases
Motion for reconsideration	Within 15 days from receipt of the resolution

The prosecutor may dismiss the complaint before issuing a subpoena if the evidence is insufficient. Otherwise, the respondent receives the complaint and attachments and is given an opportunity to submit controverting evidence.

If probable cause meeting the DOJ standard is found, the prosecutor prepares a resolution and information for approval and filing in the proper RTC. The judge then independently determines whether judicial probable cause exists and whether to issue a warrant of arrest.

A prosecutor’s subpoena is not an arrest warrant, and a preliminary-investigation finding is not a conviction.

How to defend after receiving a subpoena

Act immediately

Record the exact date of service, photograph or scan the subpoena and envelope, and obtain the complete complaint and exhibits. Calendar the prosecutor’s stated hearing and filing date.

Do not file an ordinary motion to dismiss instead of a counter-affidavit. Under the 2024 rules, such a motion is generally prohibited unless it is verified and contains the respondent’s defenses, in which event it may be treated as the counter-affidavit itself.

An extension is discretionary, limited to meritorious grounds, and cannot exceed 10 days. Ask before the deadline and do not assume it will be granted.

Prepare a complete counter-affidavit

Address every required element and every significant exhibit. Attach witness affidavits and documents at the first opportunity. Potential defenses may include:

The material is not defamatory when read as a whole;
It is protected opinion, rhetorical criticism, satire, or fair comment rather than a false factual accusation;
The complainant was not named or reasonably identifiable;
No third person received or understood the statement;
The respondent did not own, control, or access the account;
The account was hacked, impersonated, or shared;
The screenshot is incomplete, altered, unauthenticated, or disconnected from its original context;
The prosecution cannot establish the respondent’s authorship;
The communication was privileged;
The statement was true and made with good motives and for justifiable ends;
The complainant is a public official or public figure and actual malice cannot be proved;
The complaint was filed after the one-year period;
The complainant or an agent demonstrably discovered the post earlier than alleged;
Venue is not properly alleged or supported;
The publication occurred before Republic Act No. 10175 became effective and no legally actionable later publication is established; or
The same material is being impermissibly charged as both ordinary libel and cyber libel.

A denial should be supported by evidence where possible. Useful records may include account-security alerts, login histories, lost-device or hacking reports, travel or work records, device-forensic findings, source documents, research notes, correspondence with sources, and proof of the complainant’s earlier knowledge.

Do not destroy or alter evidence

Deleting the post after receiving notice does not erase a completed publication, although a prompt correction, deletion, or apology may affect settlement discussions or the eventual choice of penalty. Preserve the original before making changes and obtain advice before issuing a statement that could be treated as an admission.

An affidavit of desistance does not automatically terminate the case. Once a criminal action is initiated, the offense is prosecuted in the name of the People of the Philippines, and the complainant does not have unilateral control over dismissal.

If an information or arrest warrant has been issued

Engage criminal counsel immediately. Cyber libel is bailable before conviction, but the court fixes the conditions and amount. Counsel can coordinate voluntary surrender, posting of bail, arraignment, and any appropriate motion challenging the information, prescription, venue, or lack of probable cause.

Do not evade service or give an uncounseled custodial statement. If arrested or invited for custodial questioning, clearly request a lawyer.

Possible penalties and civil liability

Cyber libel carries a penalty one degree higher than traditional libel. The prescribed imprisonment is prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years, subject to the rules governing the sentence actually imposed.

The Supreme Court held in People v. Soliman that a court may impose a fine instead of imprisonment. Applying Republic Act No. 10951 and Article 75 of the Revised Penal Code, the current fine range for online libel is ₱40,000 to ₱1,500,000. A court may also impose both imprisonment and a fine when legally warranted. Fine-only treatment is permitted, not guaranteed.

Civil liability may include proven damages. When a criminal action is instituted, the civil action arising from the offense is generally deemed included unless the offended party waives it, reserves the right to file separately, or previously filed it. Article 33 of the Civil Code also recognizes an independent civil action for defamation, subject to the rules against double recovery.

Common mistakes

Waiting for the platform to respond while the one-year period continues to run;
Sending only a demand letter or filing only a police blotter;
Filing in the most convenient city without establishing lawful venue;
Submitting cropped screenshots without URLs, context, or authentication;
Assuming that a profile name proves who authored the post;
Omitting the exact discovery date or facts showing earlier knowledge;
Suing everyone who liked or shared the original post;
Treating truth alone as a complete defense;
Assuming criticism of a public officer is automatically criminal;
Ignoring a prosecutor’s subpoena;
Filing a bare denial instead of a supported counter-affidavit;
Deleting accounts, resetting devices, or altering the original evidence;
Publicly repeating the disputed accusation during the case;
Assuming an apology or affidavit of desistance automatically ends the prosecution; and
Posting about the evidence, witnesses, prosecutor, or judge while proceedings are pending.

When legal help is urgent

Seek a Philippine lawyer immediately when:

The one-year deadline may expire within the next month;
You received a prosecutor’s subpoena, court summons, or arrest warrant;
The account is anonymous and platform data may soon disappear;
Several people, posts, or jurisdictions are involved;
The complainant is a public official, journalist, candidate, influencer, or other possible public figure;
The publication concerns confidential proceedings or privileged documents;
The case involves threats, stalking, intimate images, doxxing, extortion, or a child;
Police want to examine or seize a device;
A search, disclosure, or cybercrime warrant is being sought or executed;
The same publication is being charged under multiple laws; or
A separate civil action, injunction, professional complaint, or employment case is contemplated.

Frequently asked questions

Is every offensive Facebook post cyber libel?

No. The prosecution must establish a defamatory factual imputation, identification, publication, malice, use of a computer system, and the respondent’s responsibility. Context, privilege, public interest, and constitutional protection for opinion and criticism all matter.

Is a private message cyber libel?

It can be, if it is sent to someone other than the person defamed and the other elements are present. A message sent only to the person being insulted generally lacks publication, although another offense may apply depending on its contents.

Can I sue someone who only shared the post?

The Supreme Court ruled that people who simply receive and react to an original post are not criminally liable for aiding or abetting cyber libel. A person who adds a separate defamatory accusation, however, may be liable as the author of that new statement.

Does deleting a post prevent a case?

No. Deletion does not undo a completed publication. It may also make proof more difficult, which is why both sides should preserve authentic copies before changing anything.

When does the one-year period begin?

From actual discovery by the offended party, authorities, or their agents. Publication and discovery may occur on the same day, but the law does not presume that every online post was immediately discovered.

What stops the one-year period?

A properly instituted complaint or information interrupts prescription. Do not rely on a demand letter, platform report, informal settlement negotiation, or investigative inquiry alone.

Is truth always a defense?

No. Article 361 generally also requires good motives and justifiable ends, and it limits when proof of a noncriminal imputation may be admitted.

Can the accused be jailed?

Imprisonment is legally possible, but the Supreme Court has confirmed that a court may impose a fine only. The result depends on the evidence, applicable sentencing rules, and circumstances of the case.

Can the parties settle?

They may discuss retraction, correction, apology, damages, or other lawful terms. Settlement or desistance does not automatically compel the prosecutor or court to dismiss a public criminal action.

Do I need the NBI before going to the prosecutor?

Not always. A complainant with complete evidence may file directly with the proper prosecution office. NBI or PNP cybercrime assistance is particularly useful for anonymous accounts, digital forensics, data preservation, and records that require lawful compulsory process.

Official sources

This article provides general Philippine legal information, not legal advice or an attorney-client opinion. Cyber-libel outcomes depend on the exact language, complete context, identity and status of the parties, electronic evidence, discovery date, venue, and procedural record. Sources and procedures were checked as of July 30, 2026.