Quick answer
To file a cyber libel case in the Philippines, preserve the online material and proof of authorship, publication, discovery date, and proper venue, then submit a sworn complaint and supporting evidence to the appropriate city or provincial prosecution office. The NBI Cybercrime Division or PNP Anti-Cybercrime Group may first assist with digital attribution, preservation, and investigation.
To defend a case, act immediately upon receiving a subpoena. Record the date of receipt, obtain the complete complaint and attachments, preserve your account and source records, and submit a detailed counter-affidavit by the date stated in the subpoena. Under the current DOJ rules, that date must ordinarily give the respondent at least 10 days from receipt of the subpoena and complaint-affidavit.
Cyber libel is not established merely because a post is offensive, embarrassing, or false. The prosecution must establish a defamatory imputation, publication to someone other than the offended person, identification of that person, malice, use of a computer system, and the accused’s responsibility for the publication.
The most urgent deadline is prescription. In its final April 2026 ruling in Causing v. People, the Supreme Court held that cyber libel prescribes in one year from discovery of the alleged defamatory material by the offended party, the authorities, or their agents. A public post is not presumed discovered on the day it was uploaded. The actual discovery date may therefore become a disputed fact. Filing the complaint or information interrupts the running of prescription.
What counts as cyber libel?
Section 4(c)(4) of the Cybercrime Prevention Act of 2012 covers the prohibited acts of libel under Articles 353 and 355 of the Revised Penal Code when committed through a computer system or a similar means.
In practical terms, the prosecution must establish:
A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person or juridical entity to contempt.
Publication. At least one person other than the offended party received, read, viewed, or heard the material.
Identification. The offended party was named or was sufficiently identifiable from the words, images, surrounding facts, or context.
Malice. Malice may be presumed in an ordinary case, subject to constitutional and statutory protections for privileged communications, public-interest speech, and criticism of public officials or figures.
Use of a computer system. This includes publication through social media, websites, email, messaging applications, and devices such as computers and smartphones.
Responsibility of the accused. The evidence must connect the respondent to the authorship, publication, or legally attributable act. A display name or screenshot alone may not prove who controlled the account.
The words must be read as a whole, in their ordinary meaning and proper context. A harsh opinion, joke, insult, exaggeration, or rhetorical expression is not automatically a defamatory factual imputation. Conversely, using “allegedly,” a question mark, or “in my opinion” does not protect a statement that reasonably communicates a defamatory assertion of fact.
Important exceptions and defenses
No publication
A message seen only by the offended person ordinarily lacks publication, because no third person received it. A group chat, copied email, shared document, or private account can still satisfy publication if another person had access.
No identification
The complainant need not always be named. Identification may be inferred if people familiar with the circumstances could reasonably understand who was being discussed. A defense is stronger where the description applies to a broad, indeterminate group and no evidence links the statement to the complainant.
Privileged communications
Article 354 recognizes qualified privilege for:
- A private communication made to another person in the performance of a legal, moral, or social duty.
- A fair and true report, made in good faith and without comments or remarks, of a non-confidential judicial, legislative, or other official proceeding, statements made in it, or acts performed by public officers in their functions.
The privilege is qualified, not absolute. It may be defeated by proof of actual malice, excessive publication, irrelevant accusations, or use of the occasion primarily to injure the person’s reputation.
Statements made in judicial or legislative proceedings may receive broader protection when pertinent to the proceeding, but the protection does not necessarily extend to separately reposting the allegations on social media.
Public officials, public figures, and matters of public interest
When a statement concerns a public officer’s official conduct, the prosecution must prove actual malice—knowledge that the statement was false or reckless disregard of whether it was false. Supreme Court decisions have extended this constitutional standard to public figures in appropriate public-interest cases.
This is not a license to invent accusations. Relevant considerations include the reliability of sources, efforts to verify, documents reviewed, whether contrary information was ignored, the urgency of publication, and whether personal attacks were unrelated to the public issue.
Truth, good motives, and justifiable ends
Truth is important but is not always a complete defense by itself. Under Article 361:
- If the defamatory imputation is true, the accused must generally also show that it was published with good motives and for justifiable ends.
- Proof of the truth of a non-criminal act or omission is generally inadmissible unless the imputation concerns a government employee and facts related to official duties.
Preserve the records that existed when the statement was made. A later attempt to find support may not establish the author’s original good faith.
Reactions, shares, and new captions
In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as to the original author but declared the provision unconstitutional as applied to people who merely receive and react to a post. It also invalidated aiding or abetting liability in relation to cyber libel.
A like, reaction, or bare share is therefore not automatically cyber libel. A person who writes a new defamatory caption, comment, or independently composed post may, however, become the author of that new material. Liability depends on exactly what that person added and published.
The same identical material should not be charged separately as ordinary libel and cyber libel merely because it appeared in print and online; Disini treated those as the same offense for double-jeopardy purposes.
The one-year deadline
The controlling rule, reaffirmed with finality by the Supreme Court En Banc on April 8, 2026 in Causing v. People, is:
- Cyber libel prescribes in one year.
- The period begins when the material is actually discovered by the offended party, the authorities, or their agents—not automatically when it is posted.
- A public privacy setting does not create a legal presumption of same-day discovery.
- Filing a complaint or information interrupts the period.
- The period may run again if the proceedings terminate without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused.
- Prescription does not run while the offender is absent from the Philippines.
Evidence of discovery may include the message that first forwarded the post, an email alert, a comment or reaction by the complainant, a demand to remove the post, or another dated act showing knowledge.
Do not wait until the last few days. Questions about who first discovered the material, whether that person was the complainant’s agent, whether a proceeding interrupted prescription, or whether a later publication was genuinely new require document-specific analysis.
A separate civil action for defamation is also generally subject to a one-year period under Article 1147 of the Civil Code. Its accrual and interruption should be evaluated independently; do not assume that a criminal filing automatically preserves every separate civil claim.
Where the complaint should be filed
Cybercrime violations fall within the jurisdiction of the Regional Trial Court, including designated cybercrime courts. The complaint normally begins with a preliminary investigation before the proper city or provincial prosecution office.
Venue is jurisdictional in libel cases and must be alleged and proved correctly. Under Article 360, as amended by Republic Act No. 4363:
- A private offended party may generally rely on their actual residence at the time of the offense or a properly established place of first publication.
- Special rules apply when the offended party is a public officer, depending on where the officer held office at the time.
- The place where someone merely opened or accessed an internet post is not automatically the place of first publication.
- Current residence is not enough if the complainant lived elsewhere when the alleged offense occurred.
The Supreme Court warned in Tieng v. Palacio-Alaras against treating every location where online content can be accessed as a proper venue. Because online “first publication” can be difficult to establish, venue should be checked by counsel before filing.
Barangay conciliation is generally not a prerequisite because cyber libel is an RTC case and its prescribed penalties exceed the offenses within the ordinary Katarungang Pambarangay coverage.
How to file a complaint
1. Preserve the complete publication
Before requesting removal, save:
- Full-page screenshots showing the post, account name, date and time, caption, comments needed for context, and visible URL.
- A screen recording navigating from the account profile to the post.
- The exact profile and post URLs, account ID or username, and platform name.
- Original photos, videos, audio, emails, message exports, and attachments.
- Email headers and unedited files where available.
- The device on which the material was received or discovered.
- The message, notification, or witness evidence showing when it was first discovered.
- Earlier and later versions of the material if it was edited.
- The names of people who saw it and how they recognized the complainant.
- Records of concrete harm, such as lost work, cancelled transactions, customer messages, or relevant medical and professional expenses.
Keep an untouched master copy. Do not crop the only copy, alter metadata, hack an account, use stolen credentials, or secretly intercept private communications.
2. Gather proof of authorship and account control
Useful evidence may include admissions, prior communications, consistent account identifiers, linked business pages, witnesses who know who controlled the account, or security and subscriber records lawfully obtained during an investigation.
Anonymous accounts are not immune, but identification can be difficult. Under Sections 13 and 14 of the Cybercrime Prevention Act, law-enforcement authorities may require preservation of specified computer data and may seek court-authorized disclosure. Traffic data and subscriber information are ordinarily preserved for at least six months from the transaction; content covered by a lawful preservation order is preserved for six months, with a possible one-time six-month extension.
A private complainant cannot simply compel a platform to disclose subscriber data. Report disappearing content or an anonymous account promptly to the NBI or PNP so investigators can assess lawful preservation and warrant procedures. Compliance by foreign platforms may require additional legal processes.
3. Prepare a fact-specific complaint-affidavit
The affidavit should clearly state:
- The parties’ names and addresses, insofar as known.
- The exact words, image, video, or other material complained of.
- An accurate translation where the material is in Filipino or another language.
- The full context and why the imputation is defamatory.
- How the complainant was identified.
- Who else saw or received the material.
- The evidence connecting the respondent to the account or publication.
- The date and circumstances of discovery.
- The complainant’s actual residence or other facts establishing proper venue.
- The resulting harm and supporting documents.
- A chronological list of attached evidence and witnesses.
Avoid unsupported conclusions such as “the account is obviously theirs.” The current prosecutorial standard requires evidence capable of being admitted, believed, preserved, and presented at trial.
The DOJ’s public filing checklist calls for a sworn NPS Investigation Data Form, complaint-affidavit, witness affidavits, and supporting documents. Its published checklist states two copies of the data form and five copies plus one for each respondent of the affidavits and supporting documents. Confirm current local requirements, filing fees, office hours, and any authorized electronic-filing procedure before submission.
4. Consider an NBI or PNP investigation
The NBI and PNP are the law-enforcement authorities designated by Section 10 of Republic Act No. 10175. Their cybercrime units may assist when:
- The account owner is unknown.
- Platform or subscriber records are needed.
- Data may disappear.
- Devices require forensic examination.
- The publication or account is located abroad.
- Other offenses—such as threats, identity theft, unlawful access, or online sexual abuse—may also be involved.
A police or NBI investigation may strengthen a complaint, but it does not replace the prosecutor’s independent evaluation.
5. Participate in preliminary investigation
The 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings require prima facie evidence with reasonable certainty of conviction. The evidence at hand must be admissible, credible, capable of preservation and presentation, and sufficient—if uncontroverted—to prove every element and identify the responsible person.
The respondent will ordinarily receive a subpoena with the complaint and attachments and will be allowed to file counter-affidavits and evidence. The prosecutor may require additional evidence, allow responsive affidavits where appropriate, or conduct clarificatory questioning.
The rules generally call for resolution within 60 days from assignment, with a maximum 30-day extension for specified circumstances such as complex issues, countercharges, consolidation, or reassignment. These are case-management periods; delay does not automatically dismiss the complaint.
An aggrieved party may file a motion for reconsideration of the prosecutor’s resolution within 15 days from receipt. Further review is governed by separate DOJ rules and strict procedural requirements, so obtain advice immediately rather than waiting for the fifteenth day.
How to defend a complaint
1. Treat the subpoena as urgent
Write down when and how it was received. Check whether the complaint-affidavit and every referenced attachment were included. The subpoena should set a submission date at least 10 days after receipt of the subpoena and complaint.
If records are missing, request them and any necessary extension in writing immediately. Do not simply ignore the subpoena. The prosecutor may resolve the complaint using only the complainant’s evidence if no counter-affidavit is filed.
2. Preserve—not erase—the defense record
Secure:
- The complete post or conversation, including surrounding messages.
- Drafts, publication history, and original files.
- Research notes and sources reviewed before publication.
- Official records or witness communications supporting the statement.
- Messages showing a legal, moral, or social duty to communicate.
- Corrections, requests for comment, and efforts to verify.
- Account security logs, login alerts, recovery emails, and hacking reports if authorship is disputed.
- Evidence of the complainant’s earlier discovery.
- Proof concerning the respondent’s and complainant’s locations and the complainant’s residence at the relevant time.
Do not fabricate a source, backdate research, pressure witnesses, or delete material after receiving a preservation directive, subpoena, or court order.
3. Answer every element in the counter-affidavit
Depending on the actual evidence, possible defenses include:
- The statement is not defamatory when read in full context.
- It is opinion, rhetoric, satire, or criticism rather than a provably defamatory assertion.
- The complainant was not identifiable.
- No third person received the communication.
- The respondent did not author, publish, or control the account.
- The material was altered or the screenshot is incomplete or unauthenticated.
- The communication was privileged and made within the scope of a duty.
- It was a fair and true good-faith report of a non-confidential official proceeding.
- It was fair comment on a matter of public interest.
- The complainant is a public officer or public figure and actual malice cannot be proved.
- The imputation was true and made with good motives and for justifiable ends, where Article 361 permits that defense.
- Venue is not properly established.
- The one-year period had expired before it was interrupted.
- The respondent merely received or reacted to another person’s post.
- The charge duplicates ordinary libel based on identical material.
A counter-affidavit should present supporting evidence, not only denials. Raise procedural and substantive grounds in the response rather than relying on a stand-alone motion in place of the counter-affidavit unless counsel determines that the governing rule permits another course.
4. Act immediately if an information is filed in court
Once an information is filed, the judge independently evaluates whether judicial probable cause exists. The judge may dismiss the case for a clear lack of probable cause, require additional evidence, issue process, or issue a warrant of arrest.
Cyber libel is not punishable by reclusion perpetua or life imprisonment, so bail is generally a matter of right before conviction. The court fixes the amount and conditions; there is no single guaranteed bail amount. If a warrant may have issued, have counsel verify the docket and arrange the lawful surrender and bail process. Do not evade service or rely on social-media reports about the case.
Defenses such as lack of jurisdiction, prescription, or failure of the information to charge an offense may require prompt motions before plea. After arraignment, some objections may be waived while others are preserved by law.
At trial, the prosecution must prove guilt beyond reasonable doubt. A prosecutor’s finding at preliminary investigation is not a conviction.
Retraction, deletion, settlement, and damages
A prompt correction, deletion, or apology may limit continuing harm and can support good faith or influence the court’s choice of penalty. It is not an automatic defense and does not erase a completed publication.
Preserve the evidence before deleting or correcting it. If a preservation order, subpoena, or litigation hold exists, obtain legal advice before altering anything.
An affidavit of desistance does not automatically terminate the criminal case. Once the information is in court, prosecution is controlled by the State, and withdrawal generally requires the prosecutor’s participation and the court’s independent approval.
Civil liability may be pursued with the criminal case or, in suitable circumstances, through an independent civil action under Article 33 of the Civil Code. Article 360 requires related civil and criminal libel actions to be brought in the proper RTC and gives the court that first acquires jurisdiction priority over the other action. The choice between reserving, joining, or separately filing the civil claim should be made before procedural deadlines pass.
Possible penalties
For offenses governed by the current amended penalty provisions, cyber libel may be punished by:
- Imprisonment from four years, two months and one day to eight years;
- A fine from ₱40,000 to ₱1,500,000; or
- Both imprisonment and a fine.
The fine range was clarified by the Supreme Court in People v. Soliman. The Court also held that a fine alone remains legally possible in appropriate circumstances. It is not guaranteed: judges retain discretion, and imprisonment remains an available penalty. Civil damages may be awarded separately or with the criminal liability.
The law in force when the alleged offense occurred, favorable retroactivity rules, the number of distinct publications, and the circumstances of each count can change the actual exposure.
Common mistakes
- Waiting because the post remains online and assuming the one-year period has not begun.
- Filing where the post was viewed instead of establishing Article 360 venue.
- Using only cropped screenshots with no URL, context, witness, or proof of account control.
- Assuming every insult, criticism, or false statement is cyber libel.
- Assuming truth alone always ends the case.
- Treating a private group chat as legally private when third persons received the message.
- Accusing a person solely because their name or photo appears on a fake account.
- Filing only against people who liked or shared the original post without examining what they actually added.
- Retaliating through new posts, threats, doxxing, or coordinated harassment.
- Ignoring a subpoena or missing the counter-affidavit date.
- Deleting accounts, messages, research records, or security logs needed for the defense.
- Assuming an apology, private settlement, or affidavit of desistance automatically dismisses the criminal case.
- Secretly accessing another person’s account or intercepting communications to obtain evidence.
When legal help is urgent
Seek a Philippine lawyer experienced in criminal procedure and digital evidence immediately when:
- The one-year period may expire within the next few weeks.
- A subpoena, prosecutor’s resolution, information, summons, or warrant has been received.
- The account is anonymous, foreign-hosted, hacked, or rapidly deleting content.
- Venue, actual residence, or the discovery date is disputed.
- The statement concerns a journalist, whistleblower, public official, public figure, or confidential official proceeding.
- Several people, posts, or possible criminal charges are involved.
- The publication includes threats, stalking, doxxing, sexual images, extortion, or danger to a child.
- A platform, employer, school, or government agency is requesting a formal response.
- Settlement discussions involve payment, takedown terms, releases, or withdrawal of complaints.
Where there is an immediate threat to life or safety, contact law enforcement at once; do not treat the matter as only a reputation dispute.
FAQ
Is an offensive Facebook post automatically cyber libel?
No. All legal elements must be established, including a defamatory imputation, publication, identification, malice, use of a computer system, and the accused’s responsibility for publishing it.
Can a private message be cyber libel?
Only if it was published to someone other than the offended person. A direct message sent solely to the complainant ordinarily lacks publication. A copied message or group chat may be different.
Can I be charged merely for sharing or liking a post?
A bare reaction or receipt is not automatically cyber libel under Disini. Writing a new defamatory caption or comment can create separate exposure as the author of those words.
Is truth a complete defense?
Not always. Article 361 generally also requires good motives and justifiable ends, and it restricts proof of some non-criminal imputations. Public-official and public-interest cases involve additional constitutional standards.
Does deleting the post cancel the offense?
No. Publication may already have been completed. Deletion can reduce harm, but preserve an accurate copy first and do not alter data covered by an official preservation requirement.
When does the one-year period begin?
From actual discovery by the offended party, the authorities, or their agents—not automatically from upload. The person asserting prescription or timely filing should preserve evidence of the discovery date.
Do I need to file first at the barangay?
Generally no. Cyber libel is an RTC offense whose prescribed penalties place it outside ordinary barangay-conciliation coverage.
Can an anonymous account be prosecuted?
Potentially, but identity must be proved through lawful evidence. Report promptly to the NBI or PNP because platform data can be deleted and subscriber disclosure may require a cybercrime warrant or international assistance.
Can the complainant withdraw the case?
The complainant may express a desire to withdraw or settle, but this does not automatically terminate a criminal prosecution. Prosecutorial and, after court filing, judicial approval may be required.
Does a cyber libel charge always result in jail?
No. Conviction must first be proved beyond reasonable doubt, and the law allows imprisonment, a fine, or both. The Supreme Court has confirmed that a fine alone may be imposed in appropriate cases.
Key primary sources
- Cybercrime Prevention Act of 2012, Republic Act No. 10175
- Revised Penal Code, Articles 353–362
- Republic Act No. 10951, updated fines under Article 355
- Republic Act No. 4363, venue and jurisdiction under Article 360
- 2024 DOJ-NPS Rules on Preliminary Investigations and Inquest Proceedings
- Disini v. Secretary of Justice
- Causing v. People, final April 2026 resolution
- People v. Soliman
- Tieng v. Palacio-Alaras
- Tulfo v. People
This article provides general legal information, not legal advice or an attorney-client relationship. Outcomes depend on the exact publication, parties, evidence, dates, and procedural record. Law and official procedures were checked against primary Philippine sources current as of August 3, 2026.