Quick answer
To file a cyber libel case, preserve the online evidence immediately and file a sworn complaint with the proper City or Provincial Prosecutor’s Office. If the author is anonymous or platform records are needed, first seek help from the NBI, PNP Anti-Cybercrime Group, or DOJ Office of Cybercrime so investigators can pursue lawful preservation and disclosure of computer data.
Act quickly. The Supreme Court has definitively ruled that cyber libel prescribes one year from its discovery by the offended party, the authorities, or their agents. Filing the criminal complaint with the prosecution office interrupts prescription; a demand letter, platform report, barangay complaint, police blotter, or private negotiation may not. The discovery date is a factual matter that must be supported by evidence. Causing v. People, G.R. No. 258524, April 8, 2026.
To defend a case, do not ignore the prosecutor’s subpoena. Record when you received it, obtain the complete complaint and attachments, and submit a sworn counter-affidavit within the date stated in the subpoena. The current DOJ rules require the respondent to receive at least 10 days to prepare. Possible defenses include lack of authorship, publication, identifiability, defamatory meaning, or malice; privileged communication; truth under the conditions set by law; protected criticism involving public officials or public figures; improper venue; and prescription.
What cyber libel means
Cyber libel is libel committed through a computer system or a similar information and communications technology. It is governed principally by:
- Articles 353 to 362 of the Revised Penal Code;
- Section 4(c)(4) and Section 6 of the Cybercrime Prevention Act of 2012, Republic Act No. 10175; and
- Supreme Court decisions applying constitutional protections for speech and the press.
A prosecution ordinarily must establish all of the following:
A defamatory imputation. The statement imputes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person or juridical entity to contempt.
Publication. The statement was communicated to at least one person other than the person allegedly defamed. A direct private message seen only by the complainant ordinarily does not satisfy publication, although other laws may apply.
Identifiability. The complainant was named or could be identified by at least one third person from the words, images, surrounding facts, or other circumstances. It is not enough that only the complainant recognized themself. Lastimosa v. People, G.R. No. 233577, December 5, 2022.
Malice. The applicable form of malice depends on whether the complainant is a private person and whether the statement is privileged or concerns the official conduct of a public official, a public figure, or a matter of public interest.
Use of a computer system or ICT. The defamatory material was posted, transmitted, or published online or through comparable technology.
The words must be read as a whole, in their ordinary meaning and context. Calling a statement an “opinion,” using a question mark, omitting the person’s name, or adding “allegedly” does not automatically prevent liability. Conversely, an offensive remark, harsh criticism, satire, exaggeration, or expression of dislike is not automatically libelous. The prosecution must still prove every element.
Who may be liable
The Supreme Court upheld cyber libel as applied to the original author of the online post, but declared it unconstitutional as applied to people who merely receive and react to the post. The Court also invalidated the application of aiding-or-abetting liability to online libel. Disini v. Secretary of Justice, G.R. No. 203335, February 11, 2014.
A like, emoji, or simple receipt of a post therefore does not by itself establish cyber libel. A person who writes a new defamatory caption or comment, however, may become the original author of that separate statement. Reposting or materially editing content can also raise fact-specific questions about authorship and republication.
Account ownership is not necessarily the same as authorship. The evidence should establish who actually wrote, approved, uploaded, or caused the publication of the material. A profile name or screenshot alone may be insufficient when account control is genuinely disputed.
Important exceptions and defenses
Privileged communications
Article 354 recognizes qualifiedly privileged communications, including:
- a private communication made in the performance of a legal, moral, or social duty; and
- a fair and true report, made in good faith and without comments or remarks, of a nonconfidential judicial, legislative, or other official proceeding, official statement, or official act.
The communication must remain reasonably connected to the duty or occasion. Unnecessary publication to a broad audience, irrelevant personal attacks, or proof of malice may defeat a qualified privilege.
Certain communications are absolutely privileged when relevant to the protected proceeding or function, such as legislative speech and pertinent statements in judicial proceedings. Whether a particular post merely reports a protected statement or adds an independently defamatory accusation depends on its wording and context.
Public officials, public figures, and public-interest speech
Criticism of a public official’s official conduct receives stronger constitutional protection. When the complainant is a public official or public figure and the statement concerns their public conduct or a legitimate matter of public interest, the prosecution must prove actual malice beyond reasonable doubt: knowledge that the statement was false or reckless disregard of whether it was false.
Reckless disregard requires more than carelessness, poor research, or an honest mistake. It generally requires evidence that the author had a high awareness of probable falsity or serious doubts about the statement’s truth. The prosecution bears this burden. Daquer v. People, G.R. No. 206015, June 30, 2021.
This protection does not give unrestricted license to attack a public figure’s unrelated private life. The connection between the statement, the person’s public role, and the public interest must be examined.
Truth, good motives, and justifiable ends
Truth is important but is not an automatic, all-purpose defense. Under Article 361:
- If the allegedly libelous imputation is proved true, the accused must generally also show that it was published with good motives and for justifiable ends.
- For an imputation against a government employee concerning the discharge of official duties, proof of truth may support acquittal under the special rule for official conduct.
- Proof of a noncriminal private act may be restricted when the complainant is not a government employee acting in an official capacity.
Preserve the records that supported the statement when it was published: official documents, source communications, interview notes, research history, drafts, requests for comment, corrections, and evidence of verification. Later-acquired proof may establish truth, but it may not by itself show the author’s state of mind at publication.
Lack of publication or identifiability
A statement sent only to the complainant generally lacks publication. A vague statement about a large or undefined group may also fail the identifiability requirement unless evidence shows that readers understood it to refer specifically to the complainant.
Lack of authorship or reliable electronic proof
The party offering electronic evidence must authenticate it and demonstrate its integrity and reliability. Screenshots are useful but can be challenged as incomplete, edited, fabricated, or disconnected from the alleged author. The Rules on Electronic Evidence govern authentication and evidentiary weight.
Prescription
Cyber libel prescribes in one year from discovery, not automatically from the date the material was posted. Online publication does not create a legal presumption that the complainant discovered the post immediately.
Prescription may require evidence of:
- the original posting date;
- when the complainant, authorities, or their agents actually learned of the material;
- messages or actions showing earlier knowledge;
- when the complaint was filed; and
- whether earlier proceedings ended or were unjustifiably stopped.
The filing of a criminal complaint with the prosecution office now tolls the prescriptive period. People v. Consebido, G.R. No. 258563, April 2, 2025. Do not assume that reporting the post to a platform or sending a private demand has the same effect.
How to file a cyber libel complaint
1. Preserve the complete online record
Before requesting deletion or confronting the author, preserve:
- full-page screenshots showing the statement, account name, profile details, date, time, URL, and surrounding thread;
- a screen recording showing how the page or post was reached;
- the post’s direct link and the profile link;
- the original image, audio, video, email, or downloaded file where available;
- visible comments, captions, edits, shares, and audience settings;
- messages showing who controlled or admitted using the account;
- notifications or messages showing when you first discovered the post;
- names and contact details of people who saw the material and identified you;
- documents showing why the statement is false or misleading; and
- proof of reputational or financial harm, including lost clients, cancelled contracts, workplace communications, and medical or counseling records where relevant.
Keep the original device and unaltered files. Make read-only backup copies and record who collected each item, when, and how. Do not crop away context or overwrite the only copy.
2. Identify the author—or seek an investigation
If the author is known, the complainant may proceed directly to the proper prosecution office with sufficient evidence.
If the account is anonymous, impersonated, hacked, or disputed, report promptly to an authorized cybercrime unit. Republic Act No. 10175 assigns cybercrime investigation functions to the NBI and PNP. The DOJ Office of Cybercrime also receives cybercrime reports and referrals.
Law-enforcement officers may request preservation and, when legally justified, seek cybercrime warrants for subscriber information, traffic data, content, search, seizure, or examination. A private complainant cannot compel a platform to disclose protected user data simply by sending a demand. Delay is risky because platforms and service providers do not retain every category of data indefinitely.
3. Establish the proper venue
Cyber libel cases are filed in a designated cybercrime Regional Trial Court. Under the Rule on Cybercrime Warrants, venue may lie in the province or city:
- where the offense or any element was committed;
- where any part of the computer system used was situated; or
- where damage to a natural or juridical person took place.
The court where the criminal action is first properly filed acquires jurisdiction to the exclusion of the others. Venue is jurisdictional in criminal cases and should be supported by specific facts, not selected solely for convenience. The territorial prosecution office should correspond to a legally supportable venue. Tieng v. People, G.R. Nos. 164845, 181732 and 185315, July 13, 2021.
4. Prepare the complaint-affidavit
Under DOJ Department Circular No. 015, series of 2024, a regular preliminary investigation is initiated by filing:
- the original complaint-affidavit;
- two duplicate copies for the official file;
- one additional set for each respondent;
- a duly accomplished, sworn NPS Investigation Data Form;
- witness affidavits; and
- the documentary, electronic, and other supporting evidence.
The complaint-affidavit should state the parties’ names and addresses, the date and place of the offense, the discovery date, facts supporting venue, the exact allegedly defamatory material, how it identifies the complainant, who received or saw it, why it is defamatory, and facts showing authorship and malice.
The affidavit must be sworn before a prosecutor or another official authorized to administer oaths, or, when they are unavailable, before a notary public. Check the receiving office’s current documentary and filing requirements before the deadline.
5. Address every element with admissible evidence
The current prosecution standard is prima facie evidence with reasonable certainty of conviction. The evidence must be credible, admissible, capable of preservation and presentation at trial, and sufficient—if left uncontradicted—to establish the crime and the responsible person. The Supreme Court upheld this DOJ standard in Meking v. Remulla, G.R. No. 280455, November 11, 2025.
A lengthy narrative cannot replace missing proof of publication, identification, authorship, malice, or venue.
6. Follow the preliminary investigation
If the complaint is sufficient, the prosecutor issues a subpoena requiring the respondent to submit a counter-affidavit. The prosecutor may then:
- consider the case submitted for resolution;
- hold a physical or virtual clarificatory hearing;
- require authorized reply- and rejoinder-affidavits when material new issues arise; or
- require additional evidence through lawful process.
If the evidence meets the applicable standard, the prosecutor may recommend filing an Information in the designated cybercrime court. Otherwise, the complaint may be dismissed.
How to defend a cyber libel complaint
1. Preserve the subpoena and calculate the deadline
Keep the subpoena, envelope, delivery record, complaint-affidavit, and every attachment. Record the exact date and manner of receipt. Check whether the package is complete and whether the hearing or filing date gives the required preparation period.
Do not rely on informal assurances that the hearing will be reset. Obtain written confirmation of any extension or new setting.
2. Prepare a sworn counter-affidavit, not an unsupported denial
Respond to every material allegation and attach the available evidence. A motion to dismiss ordinarily does not replace the counter-affidavit unless it is verified and contains the substantive defenses and evidence required by the current DOJ rules.
Depending on the facts, the counter-affidavit should address:
- whether the respondent wrote or controlled the account;
- whether the alleged post is authentic and complete;
- whether anyone other than the complainant received it;
- whether readers could identify the complainant;
- the natural meaning and full context of the statement;
- whether it was opinion, criticism, satire, quotation, or a factual accusation;
- truth, sources, verification, good faith, and justifiable purpose;
- qualified or absolute privilege;
- whether the complainant is a public official or public figure;
- whether the matter concerns official conduct or public interest;
- absence of actual malice;
- venue;
- the posting, discovery, and filing dates; and
- any constitutional or procedural defect.
Witness affidavits should be based on personal knowledge. Avoid attachments that cannot be authenticated or explained by a competent witness.
3. Do not destroy or alter evidence
Do not delete accounts, wipe devices, edit posts, fabricate messages, coach witnesses, or ask others to conceal evidence. If a correction, apology, or takedown is being considered, obtain advice on how to preserve the original record and avoid creating misleading evidence.
Do not continue the dispute through new posts. Retaliatory accusations may create separate statements, additional evidence of malice, or other legal exposure.
4. Attend any required clarificatory hearing
If the prosecutor sets a clarificatory hearing, attendance of the parties may be mandatory. Prepare to explain the affidavits and evidence, but coordinate with counsel before making additional statements. Preliminary investigation is not yet a trial, but sworn admissions can be used later.
5. Act promptly on the resolution
Under DOJ Department Circular No. 015, an aggrieved party may file a motion for reconsideration within 15 days from receipt of the prosecutor’s resolution. A further petition for review is governed by separate DOJ rules and may require a motion to suspend proceedings if an Information has already been filed.
If the prosecutor files an Information, the RTC judge independently determines whether probable cause exists for a warrant of arrest. Cyber libel is ordinarily bailable before conviction, but the court determines the bail amount and conditions. Counsel should promptly check the court docket and arrange the appropriate response rather than waiting to be arrested unexpectedly.
Possible penalties and civil liability
Cyber libel carries a higher penalty than traditional written libel. The statutory imprisonment range is generally prisión correccional in its maximum period to prisión mayor in its minimum period, or approximately four years, two months and one day to eight years, subject to the rules on individualized sentencing.
A court may impose a fine instead of imprisonment. The Supreme Court has held that the fine for online libel may range from ₱40,000 to ₱1,500,000, subject to the circumstances and applicable sentencing rules. Imprisonment remains legally available. People v. Soliman, G.R. No. 256700, April 25, 2023.
Civil damages may also be claimed. An independent civil action for defamation generally prescribes in one year under Article 1147 of the Civil Code. The relationship between the criminal case and any separate or reserved civil action should be decided with counsel before filing, because prescription, reservation, prior filing, and double-recovery rules may apply.
Common mistakes
- Waiting for a platform investigation, apology, or settlement while the one-year criminal period runs.
- Treating every insult or negative review as cyber libel without proving a defamatory factual imputation.
- Filing in a convenient but legally unsupported venue.
- Submitting cropped screenshots without URLs, dates, context, originals, or authenticating witnesses.
- Failing to prove who actually controlled or authored an anonymous or shared account.
- Omitting evidence that a third person saw the post and identified the complainant.
- Assuming falsity alone proves actual malice in a public-official or public-figure case.
- Assuming truth alone always guarantees acquittal.
- Ignoring a prosecutor’s subpoena or replacing a counter-affidavit with an unsworn letter.
- Posting retaliatory accusations while the case is pending.
- Assuming an apology, settlement, or affidavit of desistance automatically ends a criminal case. Once instituted, prosecution is under public control, although settlement-related evidence may still be considered where legally permissible.
When legal help is urgent
Seek a Philippine lawyer immediately when:
- the first anniversary of discovery is approaching;
- a post may be deleted or platform records may disappear;
- the author is anonymous or denies controlling the account;
- you have received a subpoena, resolution, Information, warrant, or court notice;
- the complainant is a journalist, public official, candidate, public figure, corporation, or government agency;
- the post concerns public funds, corruption, workplace misconduct, abuse, or another matter of public interest;
- the publication involves confidential records, private messages, intimate images, threats, stalking, doxxing, or a child;
- several people, accounts, posts, or jurisdictions are involved; or
- a settlement, correction, takedown, or public apology is being proposed.
Qualified indigent parties may ask the Public Attorney’s Office about representation. Other parties may approach an Integrated Bar of the Philippines legal-aid office or private counsel experienced in criminal, media, and cybercrime law.
FAQ
Is a Facebook, TikTok, YouTube, X, blog, email, or group-chat post covered?
Potentially. The decisive questions are whether a computer system was used and whether all elements of libel are present. Audience size does not determine liability, although publication to at least one third person is required.
Is sharing or liking a defamatory post cyber libel?
A mere like, reaction, receipt, or simple share is not automatically cyber libel under Disini. Writing a new defamatory caption or comment can create a separate statement for which that person may be treated as the original author.
Does deleting the post end the case?
No. Deletion does not erase an already completed publication or preserved evidence. It may limit continuing harm, but the legal effect depends on the facts. Preserve the original record before any takedown.
Does an apology prevent prosecution?
Not automatically. A sincere correction or apology may affect negotiations, damages, or the assessment of circumstances, but it does not by itself extinguish criminal liability.
When does the one-year period begin?
From actual discovery by the offended party, authorities, or their agents—not automatically from uploading. If publication and discovery occurred on the same day, that date may be the practical starting point. The discovery date must be proved when disputed.
Can I file directly with the NBI or PNP?
You may report the incident to their cybercrime units for investigation, particularly when the author is unknown or platform data is needed. To protect against prescription, however, ensure that the formal criminal complaint is timely filed with the proper prosecution office. Do not assume that every report, blotter, referral, or request for assistance tolls the one-year period.
Can both criminal and civil cases be filed?
Potentially, but the civil claim may be deemed included in the criminal action unless waived, reserved, or previously filed under the procedural rules. An independent defamation action also has a short prescriptive period. Obtain advice before selecting or combining remedies.
Official legal references
- Revised Penal Code, Articles 353–362 and 90–91
- Republic Act No. 10175
- Disini v. Secretary of Justice
- Causing v. People, final ruling on the one-year period
- DOJ Department Circular No. 015, series of 2024
- Rules on Electronic Evidence
- DOJ Office of Cybercrime reporting guidance
This article provides general legal information, not legal advice for a particular case. Cyber libel outcomes depend on the exact words, audience, identities, evidence, dates, venue, and procedural history. Sources and current rules were checked through July 27, 2026.