Quick answer
To file a cyber libel case in the Philippines, preserve the online publication and its technical details, identify the author as far as possible, and submit a sworn complaint-affidavit with supporting evidence to the prosecutor’s office that has territorial jurisdiction. The prosecutor—not the complainant, the NBI, or the PNP—decides whether probable cause exists and whether an Information should be filed in the Regional Trial Court.
To defend against a complaint, do not ignore the subpoena. Submit a sworn counter-affidavit on time, challenge every missing element, preserve the complete context of the publication, and raise applicable defenses such as lack of authorship, lack of publication or identification, privileged communication, truth coupled with good motives and justifiable ends where legally applicable, absence of actual malice in public-official or public-figure cases, or prescription.
Cyber libel is criminal libel committed through a computer system or a similar digital means. It is not established merely because an online statement is offensive, embarrassing, harsh, or false. The prosecution must prove every element beyond reasonable doubt at trial.
Act quickly. The Supreme Court has ruled that cyber libel prescribes one year from discovery of the offense. The precise discovery date, interruption of prescription, and effect of later edits or republication can depend on the evidence and should be evaluated immediately. See the Supreme Court’s 2026 ruling in Causing v. People, summarized in its official cyber-libel prescription announcement.
What counts as cyber libel?
Section 4(c)(4) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, punishes libel as defined under the Revised Penal Code when committed through a computer system or another similar means.
The usual elements are:
A defamatory imputation. The statement attributes a crime, vice, defect, dishonorable conduct, status, or circumstance that tends to dishonor, discredit, or expose a person to contempt.
Publication. The statement was communicated to at least one person other than the person defamed. A private message sent only to its subject may fail this element, although forwarding it to another person may constitute publication.
Identification. The complainant was named or was reasonably identifiable from the words, images, surrounding facts, or audience’s knowledge. A person need not be named expressly if readers could still recognize who was being discussed.
Malice. Article 354 generally treats a defamatory imputation as malicious unless it falls within a recognized privileged communication. Different rules apply when constitutional protections require proof of actual malice.
Use of a computer system or similar digital means. Examples may include an original post, article, video, caption, email, online message, or newly authored comment containing a defamatory accusation.
The Supreme Court listed the core elements—defamatory imputation, publication, identification, and malice—in Disini v. Secretary of Justice.
A court evaluates the publication as a whole and in context. Labels such as “opinion,” “allegedly,” or “for awareness only” do not automatically prevent liability if the message reasonably communicates a defamatory factual accusation.
Who may be liable?
The principal target is the original author of the defamatory online statement.
In Disini, the Supreme Court upheld cyber libel as applied to the original author but declared it unconstitutional as applied to people who merely receive and react to the post through ordinary likes, comments, or shares. A person who writes a new comment containing a separate defamatory accusation may, however, become the author of that new statement.
Liability therefore should not be assumed solely because someone:
- liked or reacted to a post;
- shared or retweeted an existing link without adding a new defamatory assertion;
- administered a page on which another person posted; or
- owned a device or internet connection associated with the account.
Authorship, participation, and identity must be supported by admissible evidence. A username, display name, profile photograph, or screenshot alone does not always prove who actually controlled an account at the relevant time.
Corporate officers, editors, page administrators, employees, and media personnel should obtain fact-specific advice. Their liability cannot be based on title or association alone.
Statements that may not amount to cyber libel
Depending on the complete context and evidence, liability may be defeated where:
- the words do not carry a defamatory meaning;
- the statement was never communicated to a third person;
- the complainant could not reasonably be identified;
- the accused did not write, publish, or control the publication;
- the material is an unmistakable joke, parody, rhetorical exaggeration, or nonfactual opinion that cannot reasonably be understood as asserting provable facts;
- the communication is privileged;
- the statement concerns a public official or public figure and actual malice cannot be proved;
- a legally sufficient defense of truth applies; or
- the case was filed after the prescriptive period.
These are not automatic defenses. Courts examine the exact words, medium, audience, relationship of the parties, timing, supporting documents, and surrounding circumstances.
Privileged communications and fair reporting
Article 354 of the Revised Penal Code recognizes two principal categories of qualifiedly privileged communication:
- a private communication made in the performance of a legal, moral, or social duty; and
- a fair and true report, made in good faith and without comments or remarks, of specified official proceedings or acts.
The privilege is qualified, not absolute. It may be lost when the statement is unnecessarily published to people who have no legitimate interest, includes irrelevant defamatory matter, materially misstates the source, adds hostile commentary, or is made with malice.
Complaints made in proper channels—for example, to an employer, regulator, school, professional body, or government office—may receive protection when made in good faith to persons who have a legitimate duty or interest. Posting the same accusation publicly on social media is a separate act and may not share that protection.
Certain statements made during legislative, judicial, or other protected proceedings may involve absolute privilege, but its application depends on the proceeding and whether the statement was pertinent to it.
Truth is important, but it is not always enough by itself
A defendant should preserve proof that a factual statement was true. However, Philippine criminal libel law does not make “truth” a universal, stand-alone answer in every situation.
Under Article 361 of the Revised Penal Code, proof of truth is admissible in specified circumstances, including when the imputation concerns a crime or the discharge of official duties by a government officer. Acquittal on this defense generally requires proof both that the matter was true and that it was published with good motives and for justifiable ends.
Do not assume that rumors, anonymous messages, unverified screenshots, or “many people were saying it” prove truth. Evidence should establish the underlying fact, not merely that another person repeated the accusation.
Public officials, public figures, and actual malice
Speech about public affairs receives wider constitutional protection. When the offended party is a public official or public figure and the publication concerns a matter subject to that protection, the prosecution may have to prove actual malice: knowledge that the statement was false or reckless disregard of whether it was false.
Reckless disregard is more than carelessness. It generally requires evidence that the publisher had a high awareness of probable falsity or seriously doubted the statement’s truth but published it anyway. Gross negligence alone does not necessarily establish actual malice.
Whether someone is a public figure, whether the statement concerns a public matter, and whether actual malice must be proved are fact-sensitive questions. Ordinary private individuals generally receive stronger protection from defamatory publications.
The deadline: one year from discovery
The Supreme Court has affirmed that cyber libel prescribes one year from discovery, aligning it with the prescriptive period for traditional libel.
Because a late complaint may be dismissed, record:
- the exact date and time the publication was first discovered;
- who discovered it;
- how it was found;
- whether the complainant had received or discussed it earlier;
- the original posting date;
- any deletion, editing, or later republication; and
- the date the criminal complaint was filed.
Do not assume that a post remaining accessible continuously resets the period every day. Likewise, a minor correction, updated hyperlink, or technical change does not necessarily create a new offense. A genuinely new publication or republication may raise a different question, but the result depends on what was republished, by whom, and when.
The filing that interrupts prescription and the legally operative discovery date should be confirmed with counsel. Waiting for a demand letter, platform response, barangay proceeding, or private settlement discussion may consume valuable time.
How to file a cyber libel complaint
1. Preserve the complete publication immediately
Capture more than a cropped screenshot. Save, where available:
- the complete post, article, comment, video, or message;
- the full URL or permalink;
- account name, username, profile URL, and account identifier;
- visible date and time;
- surrounding posts, comments, captions, images, and conversation;
- the device on which the content was viewed;
- the original electronic file or webpage export;
- screen recordings showing how the page was accessed;
- notifications, emails, direct messages, or forwarding records;
- names and statements of people who saw and understood the publication; and
- evidence connecting the respondent to the account or publication.
Keep unedited originals. Make working copies instead of annotating the only copy. Record when, where, how, and by whom each item was obtained.
A printed screenshot can help establish probable cause, but authenticity and authorship may later be contested. Electronic evidence must satisfy the applicable Rules on Electronic Evidence.
2. Document the defamatory meaning and identification
Write down:
- the exact words or images complained of;
- their ordinary or contextual meaning;
- why the statement refers to the complainant;
- which third persons saw or received it;
- how those persons recognized the complainant; and
- any resulting communications or consequences.
Avoid relying only on a conclusion such as “the post ruined my reputation.” The complaint should connect the actual words and surrounding circumstances to each element of the offense.
3. Identify the proper respondent
Name the person who allegedly authored or published the statement and state the respondent’s known address. If the account is anonymous or impersonated, consider seeking prompt help from the:
- PNP Anti-Cybercrime Group; or
- NBI, through its cybercrime investigators.
These agencies can investigate, but they cannot bypass constitutional and procedural requirements. Subscriber information, content data, device searches, and other protected digital evidence may require the appropriate court warrant under the Rule on Cybercrime Warrants.
Ask investigators promptly about lawful preservation. Under Section 13 of Republic Act No. 10175, service providers ordinarily preserve traffic data and subscriber information for at least six months from the transaction, while content data may be preserved after a proper law-enforcement order. This statutory duty does not guarantee that every platform possesses every item or can identify the user.
Do not attempt to hack an account, impersonate another person, secretly obtain passwords, or manufacture evidence.
4. Prepare a sworn complaint-affidavit
The complaint-affidavit should present facts in chronological order and attach marked supporting documents. It should ordinarily cover:
- the complainant’s identity and address;
- the respondent’s identity and known address;
- the exact publication;
- the posting and discovery dates;
- the digital medium used;
- publication to third persons;
- identification of the complainant;
- the defamatory meaning;
- facts supporting malice where required;
- facts connecting the respondent to the publication;
- the basis for territorial jurisdiction and venue; and
- an explanation of each attachment.
Witnesses with personal knowledge should execute their own affidavits. Do not ask a witness to adopt facts the witness did not personally perceive.
Under Rule 112 of the Rules of Criminal Procedure, the complaint must be accompanied by the complainant’s and witnesses’ affidavits and the documents supporting probable cause. Affidavits must be properly sworn before an authorized officer.
5. File with the prosecutor’s office that has jurisdiction
Cyber libel complaints are generally submitted for preliminary investigation to the appropriate Office of the City Prosecutor or Office of the Provincial Prosecutor. Cybercrime investigations may also involve the NBI or PNP, but reporting to those agencies is not a substitute for instituting the criminal complaint within the prescriptive period.
Republic Act No. 10175 gives Regional Trial Courts jurisdiction over cybercrime offenses when the statutory jurisdictional connections exist—for example, when an element occurred in the Philippines, a relevant computer system was wholly or partly situated here, or qualifying damage was caused to a person in the Philippines.
The correct filing venue is not determined simply by choosing the most convenient prosecutor’s office. Online conduct may involve the author’s location, the place where publication occurred or was accessed, the complainant’s location, the location of relevant systems, and the allegations that can lawfully establish venue. Have counsel assess venue before filing; a defective venue allegation may jeopardize the case.
Confirm current local filing requirements directly with the prosecutor’s office. Documentary format, copy requirements, docket procedures, and accepted filing channels may vary, and national rules or local issuances may change.
6. Participate in the preliminary investigation
A preliminary investigation does not determine guilt. It asks whether there is sufficient ground for a well-founded belief that a crime was committed and the respondent is probably guilty and should stand trial.
The prosecutor may:
- dismiss the complaint at the outset for insufficient basis;
- issue a subpoena requiring a counter-affidavit;
- request clarificatory submissions or conduct a clarificatory hearing; and
- resolve whether probable cause exists.
If probable cause is found, the prosecutor may file an Information in the proper Regional Trial Court. The judge then independently determines judicial probable cause and whether a warrant of arrest, another appropriate process, or dismissal is warranted.
Filing a complaint does not itself prove guilt and does not automatically result in immediate arrest.
How to respond if you receive a subpoena
1. Verify the documents and deadline
Record the date, time, and manner of service. Obtain the complaint-affidavit and all supporting documents. Under the ordinary Rule 112 procedure, a respondent submits counter-affidavits and supporting evidence within 10 days from receipt of the subpoena. Follow the deadline stated in the subpoena and any currently applicable DOJ rules or orders.
If attachments are missing, request access promptly and in writing. Do not assume that a request automatically extends the filing period.
A motion to dismiss cannot ordinarily replace the counter-affidavit during preliminary investigation. Put the factual and legal defenses, objections, and supporting evidence into the proper sworn submission.
2. Preserve your account and devices
Do not delete messages, wipe devices, deactivate accounts, alter metadata, or ask others to destroy records. Preserve:
- account-security and login records;
- original drafts and source documents;
- research notes and communications with sources;
- publication history and edit logs;
- the complete conversation or thread;
- records showing who controlled the account;
- device-loss, compromise, or hacking reports;
- corrections and retractions; and
- evidence of good-faith verification before publication.
Deleting the public post may limit continuing harm, but deletion does not erase a completed publication. First preserve an accurate copy and obtain legal advice about takedown, correction, or retraction.
3. Answer each element, not just the accusation generally
A useful defense analysis asks:
- What exact statement is allegedly defamatory?
- Is it an assertion of fact, or protected opinion or rhetoric in context?
- Was it communicated to anyone other than the complainant?
- Could readers identify the complainant?
- Did the respondent author or publish it?
- Was it made through a computer system?
- Is the communication privileged?
- Is the complainant a public official or public figure?
- Is actual malice required, and what evidence allegedly proves it?
- Is the statement true, and are good motives and justifiable ends provable where required?
- Was the complaint filed within one year from discovery?
- Does the selected office have territorial authority and is venue properly alleged?
- Was the law already effective when the charged publication occurred?
Attach documents and affidavits supporting the answers. Bare denials are usually weaker than specific, verifiable facts.
4. Avoid retaliatory posting
Do not publish the complaint, insult the complainant, threaten witnesses, or launch a social-media campaign about the dispute. New statements can generate separate complaints, undermine privilege, reveal defense strategy, or be offered as evidence of malice.
Communicate through counsel or the proper official proceeding where possible.
5. Prepare for a possible court case
If an Information is filed, counsel should promptly assess:
- the validity and sufficiency of the Information;
- jurisdiction and venue;
- prescription;
- whether the facts charged constitute an offense;
- admissibility and authentication of electronic evidence;
- authorship and account attribution;
- lawful acquisition of digital evidence;
- arraignment and plea;
- bail, if required;
- motions that must be raised before plea; and
- the criminal and civil aspects of the case.
Do not miss arraignment, hearing, or court-order deadlines. Some objections may be waived if not raised at the proper stage.
Evidence worth preserving
For a complainant
Preserve:
- full-page screenshots and screen recordings;
- URLs, account identifiers, timestamps, and platform notifications;
- original messages and downloaded files;
- witnesses who personally viewed the publication;
- proof that readers identified the complainant;
- communications with the account owner;
- earlier copies showing edits or republication;
- records establishing the discovery date;
- lawful platform reports and responses;
- evidence relevant to authorship; and
- documented financial or professional consequences if civil damages are claimed.
Reputational harm may support damages, but damage is not a substitute for proving the elements of the criminal offense.
For a respondent
Preserve:
- source materials and verification efforts;
- the complete context, not only the challenged sentence;
- drafts, edit histories, and publication logs;
- evidence of account access or lack of access;
- records of compromise, impersonation, or shared-account control;
- documents supporting truth;
- the legitimate audience and purpose of a private communication;
- proof of good faith;
- the complainant’s public role where relevant;
- the original publication and discovery dates; and
- communications showing correction, clarification, or retraction.
Retraction, correction, and settlement
A sincere correction, apology, or retraction may reduce harm and may be relevant to malice, mitigation, or civil damages. It does not automatically extinguish criminal liability for a completed offense.
Before sending a demand or response:
- identify the precise statement being withdrawn or corrected;
- avoid repeating the defamatory allegation unnecessarily;
- do not make admissions broader than intended;
- specify where and for how long the correction will appear;
- preserve the original publication and correction; and
- address criminal and civil consequences separately.
Private settlement does not necessarily compel a prosecutor or court to dismiss a public offense. An affidavit of desistance is relevant but is not automatically controlling. Any settlement should be drafted with advice on restitution, confidentiality, takedown, retraction, releases, and pending proceedings.
Criminal penalties and civil exposure
Article 355 of the Revised Penal Code prescribes imprisonment or a fine for ordinary written libel, subject to the amendments introduced by Republic Act No. 10951. Section 6 of Republic Act No. 10175 provides that when a Revised Penal Code offense is committed through information and communications technology, the penalty is generally one degree higher.
The exact imposable penalty depends on the charging theory, applicable statutory text, modifying circumstances, and judgment. Courts also consider Supreme Court guidance favoring fines in appropriate libel cases, but a fine is not guaranteed.
A criminal case may also carry civil liability. The offended party may seek damages through the civil action deemed instituted with the criminal case unless it is waived, reserved, or previously filed, subject to the Rules of Criminal Procedure. A separate civil action for defamation has its own legal requirements and deadlines.
Common mistakes
- Waiting for a post to “go viral” before preserving or reporting it.
- Assuming the limitation period begins only when a lawyer confirms the offense.
- Filing in a convenient city without establishing territorial jurisdiction and venue.
- Submitting cropped screenshots without URLs, timestamps, context, or authentication evidence.
- Charging everyone who liked or shared the post despite Disini.
- Treating an offensive opinion as automatically criminal.
- Assuming truth alone always defeats libel.
- Naming an account owner without evidence that the person authored the statement.
- Ignoring a subpoena or filing only an unsworn denial.
- Filing a motion to dismiss instead of the required counter-affidavit.
- Deleting devices, messages, posts, or account records.
- Repeating the accusation in a demand letter, press release, or retaliatory post.
- Assuming a takedown, apology, or affidavit of desistance automatically ends the case.
- Obtaining digital evidence through hacking, unauthorized access, or other unlawful means.
When legal help is urgent
Seek a Philippine lawyer immediately if:
- the one-year period may expire soon;
- a prosecutor’s subpoena has been received;
- the respondent is anonymous or account data may disappear;
- police or investigators request access to a device or account;
- a cybercrime warrant has been served;
- an Information, warrant of arrest, or arraignment notice has been issued;
- the case involves a journalist, public official, whistleblower, confidential source, or public-interest report;
- the post concerns alleged crimes, sexual misconduct, corruption, professional wrongdoing, or a minor;
- the publication or parties are located in different cities or countries;
- the account may have been hacked or impersonated;
- there are related threats, stalking, identity theft, data-privacy violations, or intimate images; or
- a settlement, retraction, or affidavit of desistance is being proposed.
Those additional facts may trigger laws and remedies beyond cyber libel.
Frequently asked questions
Can I file based only on screenshots?
You may present screenshots, but their weight depends on completeness, authenticity, authorship, and context. Preserve the URL, profile details, timestamps, original electronic copies, device, witnesses, and any lawful records linking the respondent to the account.
Must the post name me?
No. Identification may be established if people familiar with the circumstances could reasonably understand that the statement referred to you. The complaint should explain who identified you and why.
Is a false statement automatically cyber libel?
No. The prosecution must still prove defamatory meaning, publication, identification, malice under the applicable standard, use of a computer system, authorship or participation, jurisdiction, venue, and timely prosecution.
Is a private direct message cyber libel?
If it was sent only to the person discussed, publication to a third person may be absent. If it was sent to someone else or forwarded, publication may exist. Other offenses or civil claims could still apply.
Is sharing a defamatory post a crime?
A simple reaction or ordinary sharing of another person’s post is not automatically cyber libel under Disini. A user who adds a new defamatory factual accusation may be treated as the original author of that new statement.
Does deleting the post end the case?
No. Deletion does not undo a completed publication. Preserve the content before removal, and obtain advice about takedown, correction, and possible evidentiary consequences.
Can an anonymous account be sued or prosecuted?
Potentially, but the author must still be lawfully identified and linked to the publication. Investigators may need judicial process to obtain protected subscriber, traffic, or content data. Platforms may not retain all information indefinitely.
Will the respondent be arrested as soon as the complaint is filed?
Ordinarily, no. A prosecutor first conducts a preliminary investigation. If an Information is filed, the judge independently evaluates probable cause before deciding whether to issue a warrant or other appropriate process.
Can barangay conciliation stop the one-year deadline?
Do not rely on it without legal advice. Whether the Katarungang Pambarangay process applies and how it affects prescription depend on the parties, residences, offense, and governing rules. Because cyber libel has a short prescriptive period, obtain advice before waiting for barangay proceedings.
Can I represent myself?
A person may submit affidavits without private counsel, but cyber libel cases involve criminal exposure, short deadlines, technical evidence, venue questions, and constitutional defenses. Qualified counsel is strongly advisable. Eligible persons may inquire with the Public Attorney’s Office or a local legal-aid organization.
Official legal sources
- Cybercrime Prevention Act of 2012, Republic Act No. 10175
- Revised Penal Code
- Republic Act No. 10951
- Rules of Criminal Procedure, including Rules 110 and 112
- Disini v. Secretary of Justice, G.R. No. 203335, February 11, 2014
- Supreme Court: Cyber libel prescribes one year from discovery
- Supreme Court of the Philippines decisions and issuances
This article provides general legal information, not legal advice or an assessment of any particular publication or case. Cyber libel outcomes depend heavily on the exact words, evidence, parties, dates, venue, and procedural history. Official sources were last checked on September 18, 2026.