Quick answer
Cyber libel is generally committed when the author maliciously publishes through a computer system a defamatory statement that identifies—or can reasonably be understood to identify—another person. The statement must be communicated to at least one person other than the person defamed.
A complainant ordinarily files a sworn complaint and supporting evidence with the proper prosecutor’s office. The NBI Cybercrime Division or PNP Anti-Cybercrime Group may first investigate, especially when the author is unknown or platform and subscriber records are needed. A respondent who receives a subpoena should promptly obtain counsel and submit a fact-specific counter-affidavit with supporting documents.
Act quickly. The Supreme Court has ruled that cyber libel prescribes in one year from discovery by the offended party, the authorities, or their agents. Filing location, interruption of prescription, republication, and the discovery date can be disputed, so do not calculate the deadline informally.
What counts as cyber libel?
Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies the Revised Penal Code’s law on libel when the publication is made through a computer system or similar means. This may cover original posts, articles, messages, emails, videos with defamatory captions, and other online publications.
The prosecution must establish all of the following:
- A defamatory imputation. The communication attributes a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose a person to contempt.
- Publication. At least one third person received or understood the communication. A message sent only to the person discussed ordinarily lacks this element, although other offenses may apply.
- Identification. The complainant was named or was sufficiently identifiable from the words, images, context, or surrounding circumstances.
- Malice. The publication was legally malicious. Malice may be presumed from a defamatory imputation unless privilege or another applicable rule removes that presumption.
- Use of a computer system. The prohibited publication was made online or through another covered information-and-communications technology.
- Authorship or legally attributable publication. There must be sufficient admissible evidence connecting the respondent to the publication.
A statement need not use the complainant’s full name. Identification may be established if people familiar with the circumstances reasonably understood who was being discussed. Conversely, hurt feelings, criticism, vulgarity, or an unfavorable opinion do not automatically establish every element of libel.
Context matters. Courts assess the communication as a whole, including its ordinary meaning, audience, accompanying images, conversational setting, and whether it asserts a verifiable fact or merely expresses opinion, rhetoric, satire, or hyperbole.
Original authors, commenters, and people who share posts
In Disini v. Secretary of Justice, the Supreme Court upheld online libel as constitutional with respect to the original author, but not as applied to people who merely receive and react to the post. The Court also invalidated aiding or abetting liability in relation to online libel.
A simple “like,” reaction, comment, or share is therefore not automatically criminal aiding or abetting of the original cyber libel. But a person who adds a new defamatory assertion, creates a new accusatory caption, materially adopts the accusation as their own, or independently republishes defamatory content may face a separate fact-specific inquiry as an author or publisher. The label attached by the platform does not decide legal responsibility.
The same publication cannot ordinarily support cumulative convictions for both traditional libel and cyber libel merely because the identical material appeared online. Disini recognized that punishing the same offense under both provisions would raise double-jeopardy concerns. A genuinely separate publication, however, may require separate analysis.
Truth, opinion, privilege, and public-interest speech
Truth is not always enough by itself
Philippine criminal libel law does not treat truth as an automatic defense in every situation. Under Articles 354 and 361 of the Revised Penal Code, the accused may need to show both the truth of the matter and that publication was made with good motives and for justifiable ends, subject to the precise nature of the imputation and the evidence.
Keep the documents and witnesses that supported the statement when it was published. A belief based only on rumor, an anonymous message, or an unverified screenshot may not establish truth or responsible publication.
Opinion versus assertion of fact
An honestly expressed opinion is more strongly protected when it is recognizable as opinion and based on disclosed, substantially accurate facts. Merely adding “in my opinion,” “allegedly,” or a question mark does not protect a statement that, in context, asserts an undisclosed or false defamatory fact.
Privileged communications
Article 354 recognizes qualified privileges, including:
- A private communication made in the performance of a legal, moral, or social duty; and
- A fair and true report, made in good faith and without comments or remarks, of covered official proceedings or acts of public officers.
The privilege is qualified, not absolute. It may be defeated by proof of actual malice, unnecessary circulation, excessive language, lack of good faith, or departure from a fair and true account.
Complaints submitted in good faith to an official who has authority over the subject may receive qualified protection. Posting the same accusations publicly on social media is a different act and may not inherit the privilege of the official complaint.
Public officials and matters of public concern
Speech about official conduct and matters of legitimate public concern receives significant constitutional protection. Depending on the circumstances, the complainant may have to prove actual malice—knowledge that the statement was false or reckless disregard of whether it was false. “Actual malice” in this constitutional sense is not established merely by hostility, sharp language, or a desire to criticize.
This protection is not a license to fabricate facts. Whether a person is a public figure, whether the subject is a matter of public concern, and whether actual malice must be proved are legal questions dependent on the evidence.
Criminal penalties and civil liability
Traditional written libel under Article 355, as amended by Republic Act No. 10951, carries:
- Prisión correccional in its minimum and medium periods;
- A fine from ₱40,000 to ₱1,200,000; or
- Both imprisonment and fine.
Section 6 of the Cybercrime Prevention Act provides that a Revised Penal Code offense committed through information and communications technology is punishable one degree higher. For cyber libel, this may expose the accused to an imprisonment range reaching from prisión correccional maximum to prisión mayor minimum, subject to the rules on penalties and the circumstances proved. The court determines the lawful sentence; imprisonment is not automatic in every conviction.
The offended party may also seek civil damages. Civil liability may be pursued with the criminal case, reserved where permitted, or asserted through an appropriate independent civil action. Civil claims have their own prescription, venue, pleading, and proof requirements. Article 1147 of the Civil Code generally places actions for defamation or injury to rights within a one-year period, but interruption and the relationship between criminal and civil proceedings require case-specific advice.
An apology, correction, retraction, or deletion may reduce harm and affect damages or prosecutorial judgment, but it does not automatically erase a completed offense or stop prescription.
The one-year criminal deadline
The controlling ruling is Causing v. People, G.R. No. 258524, October 11, 2023. The Supreme Court held that cyber libel prescribes in one year, rejecting earlier suggestions of a 12- or 15-year period.
Under Articles 90 and 91 of the Revised Penal Code:
- The period begins when the cyber libel is discovered by the offended party, the authorities, or their agents.
- Proper institution of the criminal action interrupts prescription.
- The period may run again if proceedings terminate without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused.
- The statutory rule also addresses absence of the offender from the Philippines.
Record the earliest possible discovery date, not simply the date when the complainant decided to act. Evidence may include the original notification, message forwarding the post, email alert, incident report, or the testimony of the first person who showed it to the complainant.
Do not assume that continued online availability restarts the period each day. Likewise, do not assume that every share, edit, or repost is legally a new publication. Those issues depend on who acted, what changed, and whether a distinct publication occurred.
How to file a cyber libel complaint
1. Preserve the publication immediately
Before asking for removal, preserve:
- Full-page screenshots showing the post, account name, date, time, comments, and surrounding context;
- The complete URL or message identifiers;
- Screen recordings showing how the page was reached;
- The original electronic file, email, chat export, audio, or video;
- Profile and account details visible to the public;
- Notifications and messages showing when the publication was discovered;
- Copies of edits, reposts, captions, and linked material;
- Names and contact details of people who saw or received the statement;
- Documents showing why the accusation is false or misleading; and
- Evidence of resulting harm, such as lost work, cancelled contracts, professional complaints, or messages from readers.
Keep the original device and unedited files. Back up evidence without altering it. Note the date, time, device, account, and person who captured each item. Printed screenshots may be useful, but authentication and completeness can be challenged.
Do not obtain evidence by hacking an account, impersonating someone, secretly accessing a device, or publishing private data. Unlawful collection can create separate criminal, privacy, and evidentiary problems.
2. Identify the author and witnesses
Record why the account is attributable to the suspected author. Relevant evidence may include admissions, linked phone numbers or email addresses, consistent usernames, prior conversations, account ownership records, witnesses, or platform data lawfully obtained through investigators and court process.
A display name or profile photograph alone may be insufficient, particularly where impersonation or account compromise is plausible.
3. Determine the proper filing office
A complainant may approach:
- The city or provincial prosecutor’s office with territorial authority;
- The NBI unit handling cybercrime; or
- The PNP Anti-Cybercrime Group.
Law enforcement assistance is particularly important when the author is anonymous, forensic examination is needed, or subscriber, traffic, or content data must be preserved and obtained lawfully. Under Republic Act No. 10175, the NBI and PNP are the principal cybercrime law-enforcement authorities.
Territorial jurisdiction and venue must be established, not chosen merely for convenience. Section 21 of the Cybercrime Prevention Act supplies jurisdictional connections, including where an element occurred in the Philippines, a covered computer system was situated wholly or partly in the country, or qualifying damage was caused to a person in the Philippines. The proper local prosecutor and eventual Regional Trial Court still depend on the pleaded and proved circumstances. Venue can be especially contentious when the author, complainant, platform, and readers are in different places.
4. Prepare the sworn complaint
The complaint-affidavit should state facts within the complainant’s personal knowledge, including:
- The exact words, images, or audiovisual content complained of;
- Where, when, and how they were published;
- When and how the complainant discovered them;
- Why the material refers to the complainant;
- Who received or saw it;
- Why it is defamatory and, where relevant, false;
- What connects the respondent to the account or publication;
- The facts supporting territorial jurisdiction and venue; and
- The documents and witness affidavits relied upon.
Attach clearly marked annexes and usable electronic copies where required. Each witness should execute an affidavit covering facts personally known to that witness. Avoid exaggerating readership, damage, or technical attribution.
Local prosecutor offices may impose filing, copy, identification, notarization, and electronic-submission requirements. Confirm the current checklist directly with the intended office before the deadline.
5. Allow investigators to seek lawful preservation and disclosure
Platform records can disappear under retention policies. Republic Act No. 10175 and the Supreme Court’s Rule on Cybercrime Warrants provide mechanisms for preserving, disclosing, searching, seizing, and examining computer data.
A private complainant cannot compel a platform to disclose protected subscriber or content data merely by sending a demand. Investigators and prosecutors must use the appropriate statutory and judicial process. Filing early gives authorities a better opportunity to preserve potentially useful records.
6. Participate in preliminary investigation
Cyber libel ordinarily undergoes preliminary investigation before an information is filed in the Regional Trial Court. The prosecutor evaluates the affidavits, documents, electronic evidence, and applicable defenses under the governing DOJ rules.
Filing a complaint does not guarantee prosecution. If the prosecutor finds the required evidentiary standard satisfied, an information may be filed in the proper court. If the complaint is dismissed, the available remedy and deadline depend on the issuing office and the governing DOJ rules. Obtain the complete resolution and proof of receipt immediately.
How to defend a cyber libel complaint
1. Do not ignore a subpoena
A subpoena from a prosecutor is not yet a conviction or arrest warrant, but failure to respond can cause the matter to be resolved on the complainant’s evidence. Note the actual date and manner of receipt, secure the complete complaint and annexes, and consult a criminal-defense lawyer immediately.
Follow the deadline stated in the subpoena and the current DOJ rules. Do not rely on an online description of an older procedure. If essential annexes are missing or additional time is genuinely needed, counsel should seek the appropriate relief promptly rather than simply filing late.
2. Preserve your own evidence
Keep:
- The original post, drafts, source documents, research notes, and complete conversation;
- Records showing who controlled or had access to the account;
- Login and security alerts relevant to hacking or impersonation;
- The complete thread and surrounding context;
- Official records or firsthand sources supporting the statement;
- Communications showing the intended audience and purpose;
- Earlier statements by the complainant relevant to identification or truth;
- Corrections, clarifications, or retractions; and
- Evidence concerning the alleged discovery and filing dates.
Do not delete, edit, fabricate, backdate, or coach evidence after receiving notice of a dispute. Deletion may remove helpful context and can be portrayed as concealment, even though deletion alone does not prove guilt.
3. Examine every element and procedural requirement
Possible defenses or grounds for dismissal may include:
- The respondent did not author or control the publication;
- The account was impersonated, compromised, or misattributed;
- No third person received the communication;
- The complainant was not identifiable;
- The words are not defamatory when read in full context;
- The statement is protected opinion, fair comment, satire, or rhetorical hyperbole;
- The statement is true and was published with good motives and for justifiable ends;
- The communication is privileged and no actual malice is shown;
- Constitutionally required actual malice is absent;
- The respondent merely reacted to or shared another person’s post without becoming the author of a new defamatory assertion;
- The prosecution is time-barred;
- Territorial jurisdiction or venue is defective;
- The electronic material has not been properly authenticated;
- The evidence was unlawfully obtained or exceeds a cybercrime warrant; or
- The charge duplicates the same libel offense in violation of double-jeopardy protections.
A denial unsupported by records may be weak. The counter-affidavit should give a coherent factual account, identify the precise legal defects, and authenticate supporting documents through people with personal knowledge.
4. Treat demands for retraction or settlement carefully
A reasonable correction or apology may prevent further harm, but its wording can also be offered as an admission. Have counsel review proposed statements and settlement terms.
Criminal liability is prosecuted in the name of the People of the Philippines. A private settlement, desistance, or deletion does not automatically require the prosecutor or court to dismiss the case. It may nevertheless affect the evidence, civil claims, or the parties’ practical resolution.
5. Respond properly if a case reaches court
Once an information is filed, the judge independently determines whether probable cause exists for issuing process. The accused must address arraignment, bail when applicable, motions allowed by the Rules of Criminal Procedure, pre-trial, and trial deadlines.
Do not assume that a pending motion excuses nonappearance. Follow court orders and obtain counsel before entering a plea or filing a waiver, admission, or motion that may affect available defenses.
Electronic evidence: why screenshots may not be enough
Electronic documents are admissible when the applicable evidentiary rules are satisfied, but their authenticity, integrity, authorship, meaning, and completeness can be disputed.
Useful proof may include:
- Testimony from the person who personally viewed and captured the publication;
- The original device or native file;
- Metadata and message headers;
- A complete conversation export rather than selected excerpts;
- Platform or subscriber records obtained through lawful process;
- Admissions by the account holder;
- Corroborating witnesses; and
- Forensic findings explaining acquisition and integrity.
A screenshot proves what appeared on a screen only to the extent that a competent witness and the surrounding evidence can establish its source and reliability. It does not automatically prove who operated the account.
Common mistakes to avoid
- Waiting because an old source says cyber libel prescribes in 12 or 15 years;
- Counting one year only from publication without preserving evidence of discovery;
- Filing in a convenient city without establishing venue;
- Cropping out dates, URLs, account details, or conversation context;
- Treating an account name as conclusive proof of authorship;
- Assuming truth alone defeats criminal libel;
- Believing “allegedly” automatically prevents liability;
- Publicly repeating the accusation while announcing the case;
- Contacting, threatening, or humiliating witnesses;
- Editing or deleting evidence without first preserving it;
- Ignoring a prosecutor’s subpoena or court notice;
- Assuming a platform report is a substitute for a legal complaint;
- Obtaining account data through hacking or unauthorized access; and
- Treating a private settlement as automatic dismissal of the criminal case.
When legal help is urgent
Consult a Philippine lawyer immediately if:
- The possible one-year deadline is close or the discovery date is disputed;
- A subpoena, prosecutor’s resolution, information, warrant, or court order has been received;
- The author is anonymous or platform records may soon disappear;
- Several people edited, reposted, or controlled the account;
- The complainant or respondent is a journalist, public official, employee, student, or regulated professional;
- The publication concerns alleged crime, corruption, abuse, or workplace misconduct;
- The parties or computer systems are in different countries or Philippine localities;
- There are related threats, stalking, doxxing, sexual material, identity theft, or data-privacy violations;
- A search or seizure of devices has occurred; or
- A settlement requires an admission, payment, confidentiality clause, or waiver of claims.
People who cannot afford private counsel may inquire with the Public Attorney’s Office, subject to its eligibility, merit, and conflict rules.
Frequently asked questions
Can I file because a post is false and embarrassing?
Possibly, but falsity and embarrassment alone do not complete a cyber libel case. The prosecution must establish a defamatory imputation, publication to a third person, identification, malice, use of a computer system, and attribution to the accused.
Is a private group chat covered?
It can be. Publication may exist when a defamatory message is communicated to even one person other than the person defamed. Privacy settings affect the audience and context but do not necessarily eliminate publication.
Can an anonymous account be charged?
A case may be investigated, but the author must still be identified through admissible evidence. Report promptly so investigators can consider lawful preservation and disclosure procedures.
Does deleting the post end the case?
No. The offense, if completed, is not erased by deletion. Prompt removal, correction, or apology may still limit further harm and affect damages or case resolution.
Is sharing a defamatory post automatically cyber libel?
No. Disini protects people who merely receive and react to another person’s post from automatic liability for the original cyber libel. A new caption or independently authored defamatory assertion may be evaluated as a separate publication.
Can both cyber libel and ordinary libel be charged for the same post?
The identical online publication should not produce cumulative punishment for the same libel under both provisions. Distinct print, broadcast, or online publications may present a different question.
Must I report first to the barangay?
Cyber libel cases ordinarily proceed through the prosecutor and, when needed, cybercrime investigators. Barangay conciliation should not be assumed to apply, particularly given the offense’s penalty and specialized jurisdiction. Obtain advice before allowing the one-year period to run.
Where will the court case be filed?
Cybercrime offenses fall within Regional Trial Court jurisdiction, with designated cybercrime courts handling assigned cases. The correct territorial venue depends on the allegations and evidence connecting the offense to the locality; it should be assessed before filing.
Can I demand that Facebook or another platform reveal the user?
You may report the account and preserve publicly visible material, but protected subscriber, traffic, and content data generally require appropriate law-enforcement and judicial process. A private demand is not equivalent to a disclosure warrant.
Can the complainant recover damages without a criminal conviction?
Potentially. Philippine law recognizes civil remedies for defamation and injury to rights, with different standards of proof and procedural requirements. The one-year limitation commonly applicable to defamation claims makes early legal advice essential.
Official legal sources
- Republic Act No. 10175—Cybercrime Prevention Act of 2012
- Republic Act No. 10951—amended fines under the Revised Penal Code
- Revised Rules of Criminal Procedure
- Disini v. Secretary of Justice, G.R. No. 203335, February 18, 2014
- Causing v. People, G.R. No. 258524, October 11, 2023
- Supreme Court Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC
This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Cyber libel liability, defenses, filing deadlines, jurisdiction, and venue depend on the exact publication, evidence, dates, and procedural history. Official sources were checked as of September 19, 2026.