Quick answer
To file a Philippine cyber libel case, preserve the online material and proof of authorship, then file a sworn complaint-affidavit with the proper city or provincial prosecutor. Act promptly: the Supreme Court has definitively ruled that cyber libel prescribes in one year from discovery of the allegedly defamatory material by the offended party, the authorities, or their agents. Filing in the wrong place or waiting while sending demands or reporting the post to the platform may put the case at risk.
To defend a case, do not ignore a prosecutor’s subpoena. Obtain the complete complaint and attachments, preserve your account and device records, and submit a detailed counter-affidavit by the stated deadline. The prosecution must establish every element—including the defamatory imputation, publication to a third person, identification of the complainant, malice, use of a computer system, and the accused’s authorship or responsibility.
Not every offensive post is cyber libel. Important defenses may include lack of a defamatory factual imputation, lack of publication or identification, failure to prove who controlled the account, privileged communication, good faith, truth coupled with good motives and justifiable ends, the heightened actual-malice standard for public officials or public figures, prescription, improper venue, and protection for people who merely received or reacted to another person’s post.
What Philippine law treats as cyber libel
Section 4(c)(4) of the Cybercrime Prevention Act of 2012 covers the unlawful acts of libel defined under Article 355 of the Revised Penal Code when committed through a computer system or similar future technology. This may include original defamatory material published through social media, websites, blogs, email, online forums, messaging groups, videos, images, or comparable digital channels.
The prosecution generally must prove:
A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a natural or juridical person to contempt.
Publication. At least one person other than the person defamed received, saw, or understood the material. A message sent only to the person concerned ordinarily lacks this element; a group chat, public post, forwarded email, or message copied to another person may satisfy it.
Identification. The complainant must be named or sufficiently identifiable from the words, images, circumstances, or information known to readers. Merely believing that a vague post refers to you is not necessarily enough.
Malice. Malice may sometimes be presumed from a defamatory publication, but that presumption does not apply in the same way to privileged communications, statements involving official conduct, or public-figure cases.
Use of a computer system or similar technology.
Authorship or responsibility. The evidence must connect the respondent to the account and to the particular statement. A profile name or photograph, standing alone, may not conclusively prove who wrote a post.
The precise words and their full context matter. Criticism, disagreement, satire, rhetorical exaggeration, or an opinion is not automatically libelous. Conversely, adding “in my opinion,” “allegedly,” or a question mark will not protect a statement that reasonably communicates an unsupported defamatory assertion of fact.
Who may be charged—and who is protected as a mere reactor
In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel with respect to the original author but declared it unconstitutional as applied to people who merely receive the post and react to it. The Court also invalidated the application of “aiding or abetting” liability to online libel.
Accordingly, merely liking, reacting to, commenting agreement on, or sharing another person’s post cannot automatically be prosecuted as aiding or abetting cyber libel. This protection should not be misunderstood: a person who writes a new defamatory caption, comment, accusation, or independently authored post may be treated as the author of that new statement.
The same act should not be charged simultaneously as both traditional libel and cyber libel. Disini held that doing so for the identical defamatory material violates the prohibition against double jeopardy.
The one-year deadline
The controlling rule is now settled. In its April 8, 2026 en banc ruling in Causing v. People, the Supreme Court affirmed that cyber libel prescribes in one year from discovery, not 15 years.
The one-year period:
- Starts when the offended party, the authorities, or their agents discover the allegedly libelous material.
- May start on the publication date when publication and discovery occurred on the same day.
- Is interrupted by the filing of the proper complaint or information.
- May run again if proceedings terminate without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused.
- Does not run while the offender is absent from the Philippine archipelago, subject to the facts and applicable law.
The date of discovery is a factual question. A complainant should document when, where, and how the material was first discovered and who brought it to their attention. An accused raising prescription should present evidence; the Supreme Court has held that prescription is generally a defense, and the prosecution need not allege it away unless it is apparent from the Information.
Do not assume that a demand letter, barangay visit, platform report, or informal police inquiry preserves the deadline. The safer course is to file the proper prosecutor’s complaint well within one year.
A separate civil action for defamation is also generally subject to the Civil Code’s one-year limitation. Its commencement, legal basis, and interaction with a criminal case require separate analysis.
How to file a cyber libel complaint
1. Preserve the complete publication immediately
Before asking for removal, preserve:
- Full-page screenshots showing the complete statement and surrounding context.
- The account name, handle, profile URL, account ID, and profile details.
- The direct URL of the post, article, video, comment, or image.
- Visible publication, upload, edit, and access dates and times.
- Comments, audience settings, group membership, shares, and other evidence that a third person saw the material.
- Screen recordings showing how the post is reached from the profile or page.
- The original messages, emails, notifications, files, and attachments.
- Copies in their original file formats, with metadata where available.
- The device used to view or receive the material.
- Statements from people who independently saw or received it.
- Evidence of reputational or financial harm, such as lost clients, cancelled contracts, disciplinary action, or communications reacting to the accusation.
- A written record of the exact discovery date and the person who first reported the post.
Keep unedited originals. If you make cropped copies for readability, retain the complete versions. Do not hack an account, guess a password, install spyware, or secretly intercept communications to obtain evidence.
2. Identify evidence connecting the account to its user
The Supreme Court’s current guideposts allow social-media ownership, access, or authorship to be proved through direct or circumstantial evidence, including:
- An admission of account ownership, access, or authorship.
- A witness who saw the person use the account or compose the post.
- Information in the post known only to the suspected author or a limited group.
- Language or writing patterns associated with the suspected author.
- Prior messages and consistent account activity.
- Provider, telecommunications, subscriber, IP, geolocation, or forensic-device records.
- Other conduct reliably linking the person to the account.
A dummy-account case often requires early assistance from the NBI or PNP because platform and telecommunications records may not remain available indefinitely.
3. Check whether the words satisfy every element
Prepare a simple element-by-element analysis:
- What exact words, image, or implication are defamatory?
- What fact do they appear to assert?
- Who understood the material to refer to the complainant?
- Which third persons received it?
- Why is the respondent believed to be the author?
- What evidence shows malice?
- Is the complainant a public officer, public figure, or private individual?
- Could the publication be privileged?
- When was it discovered?
- What connects the chosen venue to the offense, computer system, or damage?
A complaint built mainly around hurt feelings, without proof of publication, identity, authorship, or malice, may be dismissed.
4. Choose the proper venue
Cyber libel cases belong to a designated Regional Trial Court acting as a cybercrime court. Under Section 2.1 of the Rule on Cybercrime Warrants, the criminal action may be filed in the province or city:
- Where the offense or any element occurred;
- Where any part of the computer system used was situated; or
- Where damage to a natural or juridical person occurred.
The first properly seized court acquires jurisdiction to the exclusion of the others. Because online material may be accessible almost anywhere, a complaint should allege concrete venue facts—not merely that the post could be opened in a chosen city.
At the preliminary-investigation stage, file with the city or provincial prosecution office corresponding to a legally supportable venue. Venue errors can defeat an otherwise substantial case, so this should be reviewed by counsel.
Prior barangay conciliation is not ordinarily a prerequisite for cyber libel. The offense falls within the Local Government Code exception for crimes carrying a maximum imprisonment of more than one year or a fine exceeding ₱5,000.
5. Prepare and file the sworn complaint-affidavit
The complaint-affidavit should clearly state:
- The parties’ names and available addresses.
- The complainant’s status as a private individual, public officer, public figure, or juridical person.
- The date and place of publication and discovery.
- The exact words, images, or video complained of.
- The platform, account, URL, and computer-system facts.
- How third persons received or saw the material.
- Why the complainant was identifiable.
- Evidence linking the respondent to authorship.
- Facts showing malice and rebutting any expected privilege.
- The basis for venue.
- The harm caused.
- A chronological, numbered narration supported by properly marked annexes.
Attach witness affidavits and all available supporting evidence. The affidavit must be sworn before an authorized officer. The prosecution office may require its prescribed investigation data form, physical copies, electronic copies, or other local filing requirements.
You may seek investigative assistance from the NBI Cybercrime Division or the PNP’s cybercrime unit, especially where the author is unknown or provider and forensic evidence is needed. An NBI investigation does not replace the prosecutor’s preliminary investigation.
6. Participate in the preliminary investigation
Current DOJ-National Prosecution Service rules require prima facie evidence with reasonable certainty of conviction before an Information is filed. The Supreme Court upheld that standard in Meking v. Remulla.
If the complaint is sufficient and supported, the prosecutor issues a subpoena directing the respondent to submit a counter-affidavit. The complainant may receive the counter-affidavit and may be required to answer genuinely new and material matters through a reply-affidavit. The prosecutor may also conduct a clarificatory hearing or require additional evidence.
The prosecutor may:
- Dismiss the complaint;
- Find sufficient evidence and file an Information in the designated cybercrime court; or
- Require further case-building or clarification under the applicable rules.
An aggrieved party generally has 15 days from receipt of the prosecutor’s resolution to file a motion for reconsideration. Further review is governed by current DOJ appeal rules and should be handled promptly because a review request does not automatically erase court deadlines or suspend proceedings.
7. Consider civil relief separately
When a criminal action is filed, civil liability arising from the offense is generally deemed included unless it is waived, reserved for separate filing, or was previously instituted. Article 33 of the Civil Code also recognizes an independent civil action for defamation, decided under the lower preponderance-of-evidence standard.
Possible remedies can include proven actual, moral, or exemplary damages. Damages are not automatic and must have a legal and evidentiary basis. A claimant cannot recover twice for the same injury.
How to defend a cyber libel complaint
1. Determine the exact stage
A demand letter, NBI invitation, prosecutor’s subpoena, filed Information, arrest warrant, and arraignment require different responses.
A prosecutor’s subpoena is not itself a warrant of arrest. Ignoring it, however, may cause the complaint to be resolved using only the complainant’s evidence. Once an Information is filed, the judge independently evaluates probable cause and may issue a warrant.
If arrested, detained, or subjected to custodial questioning, invoke the rights to remain silent and to have competent and independent counsel. Do not sign an admission, consent to a device search, or surrender account credentials without understanding the legal consequences.
2. Calendar the counter-affidavit deadline immediately
Under the 2024 DOJ-NPS rules, the hearing and submission date stated in the subpoena must ordinarily give the respondent at least 10 days from receipt of the subpoena and complaint-affidavit. Count conservatively and follow the date written in the subpoena.
An extension is not automatic. It may be allowed only on meritorious grounds when the interests of justice require additional time, such as securing counsel or examining records. Request it immediately and in writing; do not assume it has been granted.
A motion to dismiss generally cannot substitute for a counter-affidavit. If a verified motion contains all defenses, it may be treated as the counter-affidavit. The safer approach is a complete sworn response with every factual and legal defense and all available evidence.
3. Preserve—not erase—your evidence
Keep:
- The original device and account.
- Login alerts, security notifications, access logs, and password-change records.
- Proof of hacking, impersonation, or loss of account control.
- Full conversations and posts showing context.
- Drafts, research files, source documents, and editorial communications.
- Official records supporting the statement.
- Messages showing the purpose and intended recipients.
- Proof of corrections, retractions, or apologies.
- Witnesses with personal knowledge of authorship, good faith, or account access.
- Evidence of the complainant’s discovery date and prior knowledge.
Deleting a post may limit ongoing harm, but deleting the underlying account, files, messages, or device data can destroy evidence useful to the defense. Take legal advice before making changes.
4. Answer every element in the counter-affidavit
A strong counter-affidavit should identify the complaint’s theory, admit only facts that are true, deny unsupported allegations specifically, and explain:
- Whether the statement was authored by the respondent.
- Whether it was published to a third person.
- Whether the complainant was identifiable.
- Whether the words make a defamatory factual imputation.
- The factual basis and sources for the statement.
- The public interest or duty behind the communication.
- The applicable privilege.
- Why malice is absent.
- Any public-official or public-figure status.
- Prescription and the evidence supporting the actual discovery date.
- Defects in venue, jurisdiction, account attribution, authentication, or chain of evidence.
- Whether the respondent merely received or reacted to another person’s post.
- Whether identical material is improperly charged under both the Revised Penal Code and RA 10175.
Attach corroborating affidavits and documents. Preliminary investigation is usually conducted through sworn written submissions, so waiting to present a key defense only at trial can be costly.
5. Act quickly after an adverse resolution
A motion for reconsideration of the prosecutor’s resolution generally must be filed within 15 days from receipt. If a petition for review is available, counsel should also consider whether a separate motion to suspend court proceedings is required.
Once an Information is filed, possible issues may include a motion to quash before plea, prescription, improper venue, defects in the Information, bail, arraignment, pre-trial stipulations, suppression or exclusion of unlawfully obtained evidence, and trial strategy.
Cyber libel is bailable as a matter of right before conviction by the RTC because it is not punishable by death, reclusion perpetua, or life imprisonment. If a warrant has been issued, arrange lawful surrender and bail through counsel rather than evading the court.
Substantive defenses that commonly matter
No defamatory imputation
The statement must be read as a whole, in its ordinary meaning and context. Sharp criticism or an unpleasant opinion is not necessarily an accusation of a discreditable fact. The defense should explain what a reasonable reader would understand, rather than relying only on the author’s claimed intention.
No publication
Cyber libel requires communication to someone other than the person allegedly defamed. Prove the actual recipients, privacy setting, group membership, or absence of third-party access.
No identification
A complainant who was not named must show that readers could reasonably identify them. Evidence that the audience did not understand the post to refer to the complainant may be material.
Authorship was not proved
A screenshot of an account bearing the accused’s name does not automatically establish who controlled it or wrote the disputed post. Examine admissions, device records, access history, provider information, writing patterns, unique knowledge, witnesses, and any evidence of impersonation or hacking.
Privileged communication
Article 354 of the Revised Penal Code recognizes qualified privileges that include:
- A private communication made in the performance of a legal, moral, or social duty; and
- A fair and true report, made in good faith and without added comments, of a non-confidential judicial, legislative, or official proceeding or an act performed by a public officer in an official function.
Privilege is fact-dependent. Excessive publication, unrelated personal attacks, lack of good faith, or proof of actual malice may defeat it.
Truth, good motives, and justifiable ends
Truth is not always a complete defense by itself. Under Article 361, the accused generally must also show good motives and justifiable ends. Special rules apply to imputations involving government employees and facts related to their official duties.
Preserve the records, interviews, official documents, correspondence, and verification steps that existed before publication. Information found only after the complaint may not prove the author’s original good faith.
Public officials, public figures, and matters of public concern
For defamatory statements concerning a public officer’s official conduct—or a public figure in a matter of legitimate public interest—the prosecution must prove actual malice: knowledge that the statement was false or reckless disregard of whether it was false.
This is a demanding standard, but it is not a license to fabricate accusations. Failure to check obvious contradictions, reliance on a source known to be unreliable, or publication despite serious doubts can support a finding of reckless disregard. The Supreme Court discusses this standard in Cabatian v. People.
Prescription
The accused must ordinarily prove when the complainant, authorities, or their agents discovered the material. Useful evidence may include earlier replies, screenshots, reports, messages, public statements, demands, or other conduct showing prior knowledge.
Lack of malice or good-faith response to a duty
Show the relationship between the recipients and the duty or interest being protected, the steps taken to verify the information, the restrained language used, the limited audience, and any prompt correction. Gratuitous insults and dissemination far beyond the legitimate audience weaken this defense.
Possible penalties and financial exposure
Traditional libel under Article 355, as amended by RA 10951, carries imprisonment, a fine, or both. Because RA 10175 raises the penalty for online libel by one degree, the imprisonment range for cyber libel is four years, two months, and one day to eight years.
The Supreme Court held in People v. Soliman that a court may impose a fine instead of imprisonment. The current fine range for online libel is ₱40,000 to ₱1,500,000. A court may also impose both imprisonment and a fine, depending on the circumstances.
Supreme Court Administrative Circular No. 08-2008 expresses a preference, where justice permits, for a fine rather than imprisonment in libel cases. It does not give an accused an absolute right to a fine-only sentence. Civil damages may be awarded in addition to the criminal penalty.
Evidence checklist
For either side, organize the case file into:
- A one-page chronology.
- Exact publication and discovery dates.
- Full screenshots and screen recordings.
- URLs and account identifiers.
- Original electronic files and devices.
- Proof that third persons received the material.
- Evidence identifying—or disproving—the author.
- Complete conversations and surrounding context.
- Witness affidavits based on personal knowledge.
- Official records and source materials.
- Account security and access history.
- Evidence of harm, correction, retraction, or mitigation.
- A venue memorandum identifying the local connection.
- A deadline sheet for prescription, affidavits, reconsideration, arraignment, and court filings.
Common mistakes
- Waiting for a platform to finish its review before filing the legal complaint.
- Assuming the one-year period runs automatically from the posting date rather than examining discovery.
- Treating an insult or criticism as automatically libelous.
- Assuming truth alone is always a complete defense.
- Filing cropped screenshots without the URL, date, account details, or surrounding context.
- Failing to prove that a third person saw the statement.
- Assuming that the name or photograph on an account proves authorship.
- Filing in a convenient city without facts supporting venue.
- Relying on an unverified motion instead of a complete counter-affidavit.
- Ignoring the subpoena because it is not an arrest warrant.
- Deleting accounts, messages, devices, or access records.
- Responding publicly with new accusations while the case is pending.
- Contacting witnesses in a way that could be viewed as pressure or intimidation.
- Charging the identical act as both traditional libel and cyber libel.
- Assuming a barangay certificate is required before filing cyber libel.
When legal help is urgent
Consult a Philippine criminal lawyer immediately if:
- The one-year anniversary of discovery is approaching.
- A subpoena gives only a short period to submit a counter-affidavit.
- The account is anonymous, compromised, or likely to be deleted.
- Provider, IP, subscriber, or forensic records are needed.
- An Information or warrant of arrest may already have been issued.
- Police or NBI officers want to question you or examine your device.
- A cybercrime warrant, search, seizure, or preservation order is involved.
- The publication includes threats, extortion, stalking, intimate images, or information about a child.
- Several posts, respondents, jurisdictions, or related criminal laws are involved.
- The complainant is a public official, journalist, corporation, or public figure.
- A settlement, apology, correction, or takedown is being negotiated.
Qualified indigent parties may ask the Public Attorney’s Office about representation. Investigative assistance may be requested from the NBI or PNP cybercrime units, but only a lawyer who has reviewed the complete documents can advise on the proper charge, venue, defenses, and filing strategy.
Frequently asked questions
Can I file because somebody insulted me on Facebook?
Only if the post satisfies all legal elements. Vulgarity or hurt feelings alone may not establish a defamatory imputation, publication, identification, malice, authorship, and use of a computer system.
Is a private Messenger message cyber libel?
A message sent only to the person concerned ordinarily lacks publication. If it was sent to a group, copied to another person, or forwarded by its author, publication may be present.
Can a screenshot prove the case?
It can be evidence, but its weight depends on authenticity, completeness, context, lawful acquisition, and proof connecting the post to its author. Preserve the original device and source whenever possible.
Can I be charged for sharing or liking someone else’s post?
Not merely as a person who received and reacted to another’s post. Disini invalidated that application of cyber libel and aiding-or-abetting liability. Writing your own defamatory caption, comment, or accusation is different.
Is cyber libel still subject to a 15-year deadline?
No. The Supreme Court en banc definitively affirmed in April 2026 that cyber libel prescribes in one year from discovery.
Does deleting the post end the case?
No. Deletion may limit further exposure or mitigate harm, but it does not erase a completed publication or preserved evidence. Preserve relevant data before making changes.
Is cyber libel automatically punishable by imprisonment?
No. The law permits imprisonment, a fine, or both. The Supreme Court has confirmed that a fine-only sentence may be imposed, but the choice belongs to the court after considering the circumstances.
Can the parties settle?
They may resolve the civil claims and request appropriate action, but a criminal case is prosecuted in the name of the People of the Philippines. The complainant alone does not control dismissal once the case is under prosecutorial or judicial authority.
Official legal sources
- Cybercrime Prevention Act of 2012, RA 10175
- Revised Penal Code
- RA 10951 amendments to Article 355
- Implementing Rules and Regulations of RA 10175
- Disini v. Secretary of Justice
- Causing v. People, April 8, 2026
- People v. Soliman
- Rules of Criminal Procedure
- NBI investigative assistance for computer-crime victims
This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Cyber libel depends heavily on the exact words, audience, authorship evidence, documents, dates, and venue. Law and official procedures were checked through July 30, 2026.