Quick answer
A cyber libel case in the Philippines generally begins with a sworn complaint and supporting evidence filed with the proper Office of the City or Provincial Prosecutor. The complainant must show that the respondent was the original author of an online defamatory statement, that another person saw or received it, that it referred to an identifiable person, and that the statement was malicious. The use of a computer system or similar digital means distinguishes cyber libel from ordinary libel.
If you receive a prosecutor’s subpoena, do not ignore it. Note the date of receipt, obtain the complete complaint and attachments, preserve your accounts and devices, and submit a properly sworn counter-affidavit within the stated deadline. Under the ordinary preliminary-investigation rule, that period is 10 days from receipt, but the subpoena or an applicable prosecutor’s rule or order should be checked immediately.
Time is especially important for complainants. The Supreme Court has affirmed that cyber libel prescribes in one year from discovery, not 12 years. File promptly with the legally proper office rather than relying only on a demand letter, platform report, barangay proceeding, or informal police inquiry to protect the deadline. The precise date of discovery and whether prescription was validly interrupted can be disputed, so obtain legal advice well before the year expires. Supreme Court: cyber libel prescribes one year from discovery
What counts as cyber libel?
Section 4(c)(4) of the Cybercrime Prevention Act covers libel, as defined and punished under the Revised Penal Code, when committed through a computer system or similar means. This can include original statements published through social-media posts, websites, blogs, online articles, emails, messaging groups, videos, captions, graphics, or other digital communications. Republic Act No. 10175
The prosecution generally must establish:
A defamatory imputation. The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person to contempt.
Identification. The complainant is named or is identifiable from the words, image, context, surrounding facts, or information known to readers. A name is not always necessary, but a vague statement about an unidentifiable person is not enough.
Publication. At least one person other than the complainant received, viewed, or understood the statement. A strictly private message sent only to the person discussed ordinarily presents a publication problem, although forwarding it to someone else may change the analysis.
Malice. Malice is ordinarily presumed for a defamatory publication unless a recognized privileged-communication rule applies. In cases involving public officers, public figures, or matters of public concern, constitutional standards may require proof of actual malice—knowledge that the statement was false or reckless disregard of whether it was false.
Use of a computer system or similar digital means.
Authorship or legally attributable publication by the accused. The prosecution must connect the respondent to the statement and account; a profile name, screenshot, suspicion, motive, or prior dispute alone does not necessarily prove authorship beyond reasonable doubt.
The Supreme Court upheld cyber libel as applied to the original author. It invalidated liability that would automatically punish people who merely receive a post and react to it, including through an ordinary like, comment, or share. But a person who adds a new defamatory assertion may become the original author of that new statement. Disini v. Secretary of Justice, G.R. No. 203335
Cyber libel should not be confused with online threats, harassment, identity theft, unauthorized access, non-consensual sharing of intimate images, or violations of data-privacy laws. The same incident may raise different offenses, but each has its own elements and defenses.
Statements that may not be criminally defamatory
Not every offensive, embarrassing, or critical online statement is cyber libel.
Possible defenses or reasons for dismissal include:
- the statement did not carry a defamatory meaning when read in its full context;
- it was rhetorical exaggeration, satire, or an opinion that did not imply undisclosed false facts;
- the complainant was not reasonably identifiable;
- nobody other than the complainant received it;
- the respondent did not author or publish it;
- the account was impersonated, compromised, or falsely attributed;
- the communication was privileged;
- the prosecution cannot prove the required form of malice;
- the complaint was filed after prescription had run;
- the court or prosecutor lacks proper territorial authority;
- the law is being applied retroactively to conduct completed before the relevant law took effect; or
- the prosecution’s electronic evidence is inadmissible, unauthenticated, incomplete, or unreliable.
Context matters. A question, joke, meme, edited image, emoji, or “opinion” label is not automatically protected if it communicates a defamatory factual accusation. Conversely, harsh language is not automatically libel if it cannot reasonably be understood as stating a defamatory fact.
Truth, good motive, and privileged communications
“Pero totoo naman” is not always a complete defense by itself.
Under Article 361 of the Revised Penal Code, the accused may present evidence of truth. As a general rule, acquittal based on truth also requires proof that the publication was made with good motives and for justifiable ends. For an imputation concerning a government employee’s discharge of official duties, the statutory rule is different and should be applied to the exact statement and circumstances.
Potentially privileged communications include:
- a private communication made in the performance of a legal, moral, or social duty; and
- a fair and true report, made in good faith and without added comments or remarks, of qualifying official proceedings or acts.
Privilege is not a blanket license to post accusations publicly. The audience, purpose, wording, source, relevance, accuracy, and presence of unnecessary publicity all matter. A report to an authorized supervisor, regulator, school official, police officer, or prosecutor may be treated differently from a public social-media campaign.
Fair comment on public affairs also receives substantial constitutional protection. But inventing facts, deliberately altering records, or publishing with knowledge of falsity may defeat that protection.
If you want to file a complaint
1. Preserve the publication before confronting the author
Save more than a cropped screenshot. Whenever possible, preserve:
- the entire post, article, video, comment thread, or message;
- the visible account name, profile information, date, time, and reactions;
- the full URL or direct link;
- screen recordings showing how the material was accessed;
- original downloaded files, images, audio, or video;
- headers and metadata for emails;
- the device on which the material was received or viewed;
- messages or admissions connecting the author to the account;
- earlier and later versions of an edited post;
- notifications showing when you first discovered it;
- names and contact details of people who saw it; and
- records showing reputational or financial harm.
Keep unedited originals. Store working copies separately and record when, where, and how each item was obtained. Do not fabricate engagement, alter screenshots, crop out helpful context, or ask witnesses to memorize a preferred version of events.
Because platform data may be deleted or overwritten, consult the NBI Cybercrime Division, the PNP Anti-Cybercrime Group, or a lawyer promptly if subscriber information, traffic data, or forensic acquisition may be necessary. Formal preservation, disclosure, search, and examination of computer data are governed by statutory requirements and, where applicable, judicial warrants. Republic Act No. 10175 provides preservation periods and procedures; a private person should not attempt unauthorized access to obtain evidence.
2. Identify the exact actionable statements
Quote or reproduce the specific words, images, captions, or portions alleged to be defamatory. Explain:
- their ordinary or contextual meaning;
- why they refer to you;
- who received or viewed them;
- why they are false or otherwise unlawful;
- when and how you discovered them;
- why the respondent is believed to be the author; and
- whether the accusation concerns private conduct, official duties, or a matter of public concern.
A complaint that merely says “the posts ruined my reputation” without identifying the statements, publication, author, and surrounding facts may be inadequate.
3. Determine the proper filing office and venue
Cybercrime cases fall within Regional Trial Court jurisdiction, and the statute also addresses offenses involving Philippine territory, computer systems, Filipino nationals, and damage suffered in the Philippines. That establishes jurisdiction, but the proper venue for a particular complaint remains a technical, fact-dependent question.
Do not assume that a case may be filed anywhere the post could be opened. The place of publication, relevant acts, residence rules applicable to libel, location of computer systems, place of damage, and allegations in the complaint may matter. Filing in the wrong office can waste critical time.
A lawyer should check venue before filing, particularly when:
- the parties live in different cities or provinces;
- the author or server is abroad;
- the material was published by an online news organization;
- the complainant is a public officer;
- the account is anonymous; or
- several posts were made from different places.
4. Prepare the complaint-affidavit and supporting affidavits
The complaint should be sworn and based on personal knowledge or properly identified records. Attach the evidence in an organized manner, with each annex labeled and explained. Witnesses who personally saw the publication, can identify the author, or can authenticate records should execute their own affidavits.
Under Rule 112, a complaint for preliminary investigation is accompanied by the complainant’s and witnesses’ affidavits and supporting documents. The investigating prosecutor may dismiss it outright if there is no sufficient ground to continue or may issue a subpoena to the respondent. Revised Rules of Criminal Procedure, Rules 110–112
5. Consider whether a demand is useful—but do not let it consume the deadline
A carefully drafted demand for removal, correction, preservation, or retraction may stop continuing harm or support settlement. It is not an element of cyber libel, however, and it ordinarily should not be treated as a substitute for timely filing.
A retraction or apology may affect the dispute, damages, or assessment of good faith, but it does not automatically erase a completed offense. Avoid demands that could themselves be threatening, defamatory, or extortionate.
6. Decide how to handle civil damages
Civil liability arising from the alleged offense is generally deemed included in the criminal action unless it is waived, reserved, or previously filed, subject to the Rules of Court. Philippine law also recognizes independent civil actions for defamation, which use a different burden of proof. Double recovery for the same injury is not allowed.
This choice affects filing fees, evidence, timing, and litigation strategy. Obtain advice before filing a separate damages suit or making a reservation.
If a complaint has been filed against you
1. Verify the subpoena and calculate the deadline immediately
Record the exact date and method of service. Obtain the complaint, all affidavits, and every attachment. Under the general Rule 112 procedure, the respondent has 10 days from receipt to submit a sworn counter-affidavit and supporting evidence. A motion to dismiss cannot simply replace the counter-affidavit.
Follow the actual subpoena and any valid current directive of the investigating office. If essential attachments are missing or additional time is genuinely necessary, promptly make the proper written request; do not assume an extension has been granted.
Failure to respond allows the prosecutor to resolve the complaint using the complainant’s evidence alone.
2. Do not post your defense online
Publicly attacking the complainant, repeating the accusation, revealing private evidence, or mobilizing followers can create new evidence or new complaints. Avoid deleting or altering material without first preserving it and receiving advice. Do not contact witnesses to influence their statements.
3. Build the defense around the legal elements
A useful counter-affidavit should answer the complaint factually and element by element. Depending on the evidence, address:
- whether you created the challenged content;
- control and security of the account;
- the complete, unedited context;
- whether the words were factual assertions or protected opinion;
- whether the complainant was identifiable;
- proof of publication to another person;
- the truth and reliable basis of any factual statement;
- good motives and justifiable ends;
- privilege;
- the complainant’s status as a private person, public officer, or public figure;
- absence of actual malice where that standard applies;
- prescription;
- venue and jurisdiction;
- authenticity and reliability of screenshots or recordings; and
- inconsistencies between the complaint, annexes, timestamps, and platform records.
A bare denial is usually weaker than a supported explanation. Attach original records, contemporaneous research, source documents, correspondence, account-security notices, device records, witness affidavits, or expert findings when relevant.
4. Preserve exculpatory material
Keep drafts, source materials, interview notes, research records, fact-checking communications, account-login alerts, publication logs, editorial discussions, and messages showing your purpose and state of mind. For journalists, editors, researchers, whistleblowers, and public-interest speakers, the steps taken to verify information may be central.
Do not manufacture records after the fact. Clearly distinguish contemporaneous documents from later explanations.
5. Prepare for the prosecutor’s resolution and possible court proceedings
A preliminary investigation does not decide guilt. It determines whether there is sufficient ground to hold the respondent for trial. If an information is filed, the judge independently evaluates probable cause and may dismiss the case, require additional evidence, or issue a warrant of arrest.
Do not assume that voluntarily appearing at a prosecutor’s office, filing a counter-affidavit, or receiving a resolution eliminates the possibility of a later warrant. Have counsel monitor the prosecutor and court records and advise on surrender, bail, arraignment, motions, and trial deadlines.
Penalties and exposure
Ordinary written libel is punished under Article 355 of the Revised Penal Code, as affected by later legislation adjusting monetary fines. Section 6 of Republic Act No. 10175 provides a penalty one degree higher when a Revised Penal Code offense is committed through information and communications technology.
The exact imposable sentence or fine depends on the charge, the statutory framework, modifying circumstances, and sentencing rules. Courts have also been directed in libel cases to consider whether a fine rather than imprisonment is appropriate, but this does not create an automatic right to a fine-only sentence or eliminate possible imprisonment.
A conviction may also include civil damages and other legal consequences. Separate counts may be alleged for distinct original publications, although whether posts constitute separate offenses depends on the facts and charging rules.
Evidence: screenshots help, but they may not be enough
Electronic evidence must still be authenticated. A party should be able to explain what the exhibit is, where it came from, how it was captured, and why it accurately reflects the original.
Common authentication issues include:
- no visible URL, date, or account details;
- cropped images that omit context;
- screenshots supplied by an unknown person;
- edited or composite images;
- no witness who personally viewed the original;
- inability to connect a pseudonymous account to the accused;
- uncertain time zones or timestamps;
- missing original files or devices;
- hearsay within the post; and
- unlawfully obtained private communications.
A screenshot can be genuine while the attribution to a particular person remains unproved. Conversely, deletion from a platform does not necessarily eliminate copies, witnesses, archives, subscriber records, or forensic traces.
Common mistakes to avoid
For complainants
- Waiting for negotiations until the one-year period may have expired.
- Filing based only on hurt feelings without identifying a defamatory factual imputation.
- Submitting cropped screenshots without URLs, dates, context, or an authenticating witness.
- Assuming the account owner’s display name proves who posted.
- Naming everyone who liked, received, or shared an existing post despite Disini.
- Filing in a convenient but legally improper place.
- Exaggerating damages or alleging facts outside personal knowledge.
- Treating a platform report, barangay complaint, or demand letter as a guaranteed interruption of prescription.
- Publicly repeating the defamatory material while announcing the case.
For respondents
- Ignoring the subpoena or missing the counter-affidavit deadline.
- Filing only a denial without supporting records.
- Deleting accounts, messages, drafts, or devices after learning of the complaint.
- Reposting the accusation as part of a public “explanation.”
- Assuming that truth alone always ends the case.
- Assuming that “opinion,” “allegedly,” a question mark, or a disclaimer automatically prevents liability.
- Contacting or intimidating the complainant or witnesses.
- Waiting for an arrest warrant before obtaining counsel.
When legal help is urgent
Seek a Philippine lawyer immediately if:
- the one-year prescription period is approaching;
- you received a prosecutor’s subpoena, resolution, information, or arrest warrant;
- the account is anonymous or allegedly hacked;
- the post has been deleted or platform data may disappear;
- several cities, provinces, or countries are involved;
- the complainant or respondent is a journalist, public officer, public figure, minor, or corporation;
- confidential records, sexual content, threats, doxxing, or identity theft are involved;
- law-enforcement officers want access to a device or account;
- a search, seizure, disclosure, or examination warrant has been served;
- multiple posts or defendants are involved; or
- civil damages, employment consequences, professional discipline, or immigration issues may follow.
Eligible persons who cannot afford private counsel may ask the Public Attorney’s Office about assistance, subject to its current eligibility and merit requirements.
Frequently asked questions
Is an insulting Facebook post automatically cyber libel?
No. The prosecution must prove all the legal elements, including a defamatory imputation, identification, publication, malice, digital means, and attribution to the accused. Context and constitutional protections for opinion and public-interest speech matter.
Can I be charged merely for liking or sharing someone else’s post?
Not automatically. Disini held cyber libel valid as to the original author but unconstitutional as applied to people who merely receive and react to a post. If you add a new defamatory factual assertion, however, that new statement can be evaluated as your own publication.
Does deleting the post prevent a case?
No. Deletion does not undo a publication already seen by another person. It may reduce continuing harm, but evidence may remain with witnesses, devices, platforms, or service providers. Preserve an accurate copy and obtain advice before altering potential evidence.
Is a private group chat covered?
It can be. Publication requires communication to at least one person other than the person defamed; the audience need not be the general public. Privilege
Quick answer
Cyber libel is committed when a person authors and publishes a defamatory statement through a computer system or similar digital means, and the other legal elements of libel are present. A Facebook post, online article, public video caption, blog entry, email, or original defamatory comment may qualify. A hurtful or critical statement is not automatically cyber libel.
To file a case, preserve the complete online evidence immediately, identify the author as reliably as possible, and file a sworn complaint with the proper prosecutor’s office. The NBI Cybercrime Division or the PNP Anti-Cybercrime Group may assist where attribution, account records, or forensic examination is needed. The case must ordinarily be brought within one year from discovery of the cyber libel, according to the Supreme Court’s current ruling. Do not wait for the post to be deleted or for informal negotiations to end.
To defend a case, do not ignore a subpoena. Obtain the complaint and attachments, preserve your own records, and submit a fact-specific counter-affidavit by the stated deadline. Possible defenses include lack of authorship, lack of identification or publication, absence of defamatory meaning or malice, privileged communication, fair comment on a matter of public interest, truth under the applicable legal conditions, prescription, and improper venue.
Cyber libel is a criminal case. A conviction may result in imprisonment, a fine, civil damages, or a combination allowed by law. Because deadlines, venue, authorship, and the exact words used can decide the case, early advice from a Philippine lawyer is strongly recommended.
What counts as cyber libel?
Section 4(c)(4) of the Cybercrime Prevention Act of 2012 covers libel under the Revised Penal Code when committed through a computer system or a similar means.
The prosecution generally must establish:
A defamatory imputation. The statement attributes a crime, vice, defect, dishonorable conduct, or another condition or circumstance that tends to dishonor, discredit, or expose a person to contempt.
Identification. The complainant must be identifiable from the words, images, surrounding facts, or circumstances. Naming the person is not always necessary, but vague suspicion that a post refers to someone may be insufficient.
Publication. At least one person other than the subject must have received, read, watched, or otherwise perceived the statement. A private message sent only to the person allegedly defamed normally presents a publication problem, although forwarding it to someone else can change the analysis.
Malice. Libelous statements are generally presumed malicious unless they fall within a recognized privileged occasion. In cases involving public officials, public figures, or matters of public concern, constitutional standards may require proof of actual malice—knowledge that the statement was false or reckless disregard of whether it was false. Whether that standard applies depends on the person, subject, and context.
Use of a computer system or similar digital means. This includes internet-connected computers and mobile phones, online platforms, electronic publications, and comparable technologies.
Responsibility for the original defamatory publication. The evidence must connect the respondent to the content as its author or originator.
Context matters. Courts consider the entire publication, not merely a word or sentence isolated from the surrounding discussion. Satire, rhetorical exaggeration, opinion, criticism, and factual allegations are not treated identically. Simply labeling an accusation “opinion” does not protect it if it implies a provably false and defamatory fact.
Who may be charged?
In Disini v. Secretary of Justice, the Supreme Court upheld cyber libel as applied to the original author of the defamatory online statement.
The Court invalidated the application of “aiding or abetting” cyber libel to people who merely receive and react to a post. A simple like, share, or comparable reaction therefore does not by itself make a person criminally liable for cyber libel.
There is an important limit: someone who adds a new defamatory accusation in a comment, caption, repost, video, or other publication may become the original author of that new statement. Copying another person’s words and presenting them as one’s own publication can also require separate legal analysis.
Account ownership alone may not conclusively prove authorship. Investigators and prosecutors should consider admissions, device records, account activity, subscriber information, witness testimony, and other evidence linking the respondent to the particular publication.
Filing a cyber libel complaint
1. Preserve the evidence before confronting the author
Online material can disappear quickly. Preserve:
- Full-page screenshots showing the post, account name, date, time, reactions, comments, and surrounding context
- The complete URL or platform link
- A screen recording showing how the post is reached from the account or page
- The original image, video, audio, email, message, or downloaded webpage
- The account’s profile page, username, user ID if visible, and identifying details
- Earlier and later versions of an edited post
- Notifications, emails, or messages showing when you first discovered it
- The names and contact details of people who saw the publication
- Records showing resulting harm, such as lost work, cancelled contracts, threats, or medical treatment
- Communications in which the author admits publishing, editing, controlling, or deleting the content
Keep the original files and device. Do not crop, annotate, filter, or overwrite your only copy. Make read-only backups and record when, where, and how each item was obtained.
A screenshot can be challenged if no witness can explain its source or if it omits essential context. Electronic evidence must be authenticated under the applicable evidence rules. For a serious case, ask counsel or a qualified forensic examiner about preserving metadata, generating hash values, and documenting the chain of custody.
2. Record the discovery date
The Supreme Court has affirmed that cyber libel prescribes in one year from discovery. The discovery date can therefore be decisive. Save the notification, message, email, witness account, or other record showing when the publication was first found.
Do not assume that every continuing view, share, or unchanged availability of an old post restarts the period. Editing, updating, or republishing content may raise separate questions, but the result depends on what was actually changed and who made the new publication. The current prescription rule is summarized in the Supreme Court’s official release, “SC Affirms Cyber Libel Prescribes One Year from Discovery”.
Because prescription can turn on exact dates and procedural acts, file well before the anniversary rather than relying on last-day calculations.
3. Identify the correct respondent
Gather lawful evidence connecting the person to the account and post. Useful evidence may include:
- A verified or long-used personal account
- Links between the account and the person’s phone number, email address, website, or business
- Admissions in messages or public statements
- Witnesses who saw the person create or publish the content
- Consistent photographs, biographical details, or prior posts
- Platform or subscriber records obtained through lawful process
Do not hack an account, impersonate another person, secretly access a device without authority, or publish private information to force an admission. Illegally obtained evidence can create separate criminal, privacy, and admissibility problems.
When the author is unknown, the NBI or PNP cybercrime unit may investigate. Subscriber, traffic, or content data generally requires the legal process prescribed by law and, where required, an appropriate court warrant. A private complainant cannot compel a platform or telecommunications company to disclose protected data merely by sending a demand letter.
4. Prepare the complaint-affidavit
A complaint-affidavit should clearly state:
- The complainant’s and respondent’s identifying information
- The exact words, images, audio, or video alleged to be defamatory
- The URL, platform, account, and date of publication
- Why the statement refers to the complainant
- Who received or saw it
- Why the statement is defamatory and false, where falsity is relevant
- Facts showing authorship and malice
- When and how the complainant discovered the publication
- Facts supporting jurisdiction and venue
- The harm caused
- A numbered list of supporting documents and witnesses
Attach complete, legible copies. If the publication is in Filipino, a regional language, slang, or another language, include an accurate translation and explain any expression whose meaning depends on local usage or context.
The affidavit must be based on facts personally known to the affiant or supported by identified records. Avoid speculation, inflated claims, or accusations unrelated to the allegedly libelous publication.
5. File with the proper office
A cyber libel complaint ordinarily goes through preliminary investigation because of its prescribed penalty. It may be filed with the prosecutor’s office having territorial authority over the case. An NBI or PNP cybercrime unit may first receive and investigate the report, particularly where technical evidence or account identification is needed, but the prosecutor determines whether a criminal Information should be filed in court.
Venue is not simply a matter of choosing the most convenient city. The complaint must establish legally sufficient facts connecting the offense to the place of filing. The Cybercrime Prevention Act gives Regional Trial Courts jurisdiction when, among other grounds, an element occurred in the Philippines, a relevant computer system was wholly or partly situated here, or the commission caused damage to a person who was in the Philippines. Those jurisdictional provisions do not eliminate all territorial-venue requirements.
Online publication, the complainant’s residence, the place of initial publication, the location of relevant systems, and the allegations in the complaint may affect the analysis. Have counsel verify venue before filing; filing in the wrong place can lead to dismissal without leaving enough time to refile.
6. Follow the preliminary-investigation process
Under Rule 112 of the Revised Rules of Criminal Procedure, a complaint for preliminary investigation must be supported by sworn affidavits and documents establishing probable cause.
If the prosecutor finds a basis to proceed, the respondent is served with a subpoena and copies of the complaint and supporting evidence. The Rules ordinarily give the respondent 10 days from receipt to submit a counter-affidavit and supporting evidence. The subpoena or an applicable current DOJ rule or order should be checked carefully and followed.
The respondent cannot substitute a bare motion to dismiss for the required counter-affidavit. If the respondent does not answer on time, the prosecutor may resolve the complaint using the complainant’s evidence alone.
The prosecutor’s task at this stage is not to decide guilt beyond reasonable doubt. The issue is whether the evidence meets the governing standard for filing the case in court. If an Information is filed, the Regional Trial Court independently evaluates probable cause for a warrant of arrest.
How to defend a cyber libel complaint
Do not ignore the subpoena
Write down the exact date and method of receipt. Obtain a complete copy of the complaint, affidavits, and attachments. If an attachment is missing or unreadable, promptly request access to it through the proper office.
Consult counsel immediately. A short response based only on denial can waive the opportunity to present evidence that was readily available during preliminary investigation.
Preserve—not destroy—your records
Keep the device, account history, drafts, login notices, messages, source documents, editorial records, and complete conversation. If another person operated the page or device, preserve records showing that fact.
Do not delete the account, reset the device, fabricate screenshots, coach witnesses, or ask someone to change testimony. Deletion may not prevent prosecution and can damage credibility or create an inference that evidence was intentionally concealed.
Address every element with evidence
A useful counter-affidavit ordinarily deals separately with:
- Authorship: Did the respondent create or publish the precise statement? Was the account compromised, impersonated, jointly managed, or misidentified?
- Identification: Would a reasonable reader know that the words referred to the complainant?
- Publication: Did a third person receive the communication?
- Defamatory meaning: What did the words mean in their full linguistic and factual context?
- Malice or privilege: Why was the communication made, to whom, and for what legitimate purpose?
- Truth and factual basis: What reliable records existed before publication?
- Public-interest context: Was the statement part of fair discussion about official conduct or a matter of legitimate public concern?
- Prescription: When was the post discovered, and when was the complaint instituted?
- Jurisdiction and venue: What facts, if any, connect the alleged offense to the filing location?
- Attribution and integrity: Are the screenshots complete and authentic? Do they prove who controlled the account at the relevant time?
Affidavits from witnesses should state facts they personally know. Attach the original records relied upon rather than unsupported summaries.
Important defenses and limitations
Lack of defamatory imputation
Disagreement, annoyance, embarrassment, profanity, or harsh criticism does not automatically establish libel. The question is whether the publication, understood as a whole and in context, makes the kind of discreditable imputation punished by law.
Pure opinion may be protected, particularly where the facts on which it is based are disclosed. An assertion framed as opinion can still be actionable if it reasonably conveys an undisclosed, provably false factual accusation.
No identification or publication
The prosecution must show that the complainant was the person referred to and that the statement reached someone else. These requirements cannot be supplied by speculation.
No authorship
Screenshots showing an account name do not always prove who made a post. The respondent may challenge attribution with device records, account-security notices, administrator logs, travel or work records, and testimony from the actual account operators.
A false hacking claim is dangerous. Use this defense only when supported by genuine evidence, and report an actual compromise promptly to the platform and appropriate authorities.
Privileged communication
Certain communications are privileged because the law protects candid statements made in particular settings. Article 354 of the Revised Penal Code recognizes, among others:
- A private communication made in the performance of a legal, moral, or social duty; and
- A fair and true report, made in good faith and without added comments or remarks, of specified official proceedings or acts.
Qualified privilege is not a license to broadcast accusations unnecessarily. The relationship of the parties, audience, purpose, manner, and presence of actual malice remain important. Excessive publication to people with no legitimate interest may defeat the protection.
Statements in judicial proceedings may receive broader protection when relevant to the proceeding, but the privilege and relevance requirements should be assessed by counsel.
Truth and good motives
Truth is not always a complete defense by itself. Article 361 generally requires proof that the imputation was true and published with good motives and for justifiable ends.
The rule contains a specific treatment for imputations concerning government employees and facts related to their official duties. Whether a publication fits that provision is a legal question. Preserve the records used to verify the statement and evidence of the legitimate reason for publishing it.
Fair comment and actual malice
Good-faith comment on public officials, public figures, official conduct, and matters of public interest receives strong constitutional protection. The Supreme Court’s decisions in Borjal v. Court of Appeals and Vasquez v. Court of Appeals explain important protections for public-interest speech.
Protection is not automatic. Fabricated accusations, knowingly false claims, or statements published with reckless disregard for truth may satisfy actual malice. Failure to investigate is not always equivalent to actual malice, but ignoring obvious contrary evidence can be highly damaging.
Prescription
As currently settled by the Supreme Court, cyber libel generally prescribes one year from discovery. Establishing prescription requires reliable proof of discovery and filing dates. A visible upload date alone may not prove when the offended party learned of the post.
Mere reaction or share
Under Disini, merely liking, sharing, or reacting to another person’s defamatory post is not punishable as aiding or abetting cyber libel. But an added caption or comment containing a new defamatory assertion can be treated as a separate original publication.
Penalties and civil liability
Traditional libel under Article 355 carries imprisonment or a fine under the Revised Penal Code, as amended. Section 6 of the Cybercrime Prevention Act provides for a penalty one degree higher when a Revised Penal Code offense is committed through information and communications technology.
The precise imposable sentence depends on the charge, applicable amendments, circumstances, and the Indeterminate Sentence Law. Courts must also consider Supreme Court guidance on the preference for fines in appropriate libel cases; that guidance does not erase the statutory possibility of imprisonment.
Civil liability may be pursued with the criminal case unless waived, reserved, or previously filed as allowed by Rule 111. Independent civil remedies may also exist under Article 33 and other provisions of the Civil Code. A claimant cannot recover twice for the same injury.
Damages are not automatic merely because someone felt offended. The claimant should prove the injury and its connection to the publication. Retraction, apology, correction, scope of dissemination, and conduct after publication may affect the practical resolution and assessment of damages, but an apology does not automatically extinguish criminal liability.
Common mistakes to avoid
If you are considering filing
- Waiting while negotiating until the one-year period is nearly over
- Saving only cropped screenshots without URLs or surrounding context
- Assuming the named account owner necessarily wrote the post
- Filing in a convenient but legally improper venue
- Treating criticism or opinion as automatically defamatory
- Naming everyone who liked or shared the post despite Disini
- Exaggerating damages without documents or witnesses
- Publicly threatening the respondent or reposting the accusation
- Obtaining account data through hacking, impersonation, or unauthorized access
- Assuming an NBI or PNP report necessarily completes every step required to institute the criminal action
If you are responding to a complaint
- Ignoring the subpoena or missing the counter-affidavit deadline
- Deleting posts, messages, accounts, or device data
- Posting new attacks against the complainant
- Contacting witnesses in a manner that could be viewed as intimidation
- Filing only a general denial
- Invoking “freedom of speech” without addressing the legal elements
- Assuming truth alone always ends the case
- Relying on account compromise without security records
- Settling or signing an admission without understanding its criminal and civil effects
When legal help is urgent
Seek a lawyer immediately if:
- The one-year period may expire soon
- You received a prosecutor’s subpoena, court summons, or warrant
- The post was made through a pseudonymous, hacked, shared, or business account
- The complainant or respondent lives abroad
- Several posts, authors, platforms, or cities are involved
- The statement concerns a public official, journalist, election, public controversy, or whistleblowing
- Police or investigators want to search, seize, or examine a device
- A platform or service provider must preserve or disclose account data
- There are related threats, stalking, identity theft, privacy violations, or intimate images
- The parties are discussing an affidavit of desistance, settlement, apology, or retraction
- The respondent has been arrested or a court has issued a warrant
If you cannot afford private counsel, ask the Public Attorney’s Office about eligibility and assistance. An accused under custodial investigation has constitutional rights, including the right to remain silent and to competent and independent counsel.
Frequently asked questions
Can I file because a post is false and embarrassing?
Not necessarily. The publication must satisfy all elements of cyber libel, including defamatory imputation, identification, publication, malice, use of a computer system, and responsibility of the accused for the original statement.
Is a private group chat covered?
It can be. Publication requires communication to at least one third person, not publication to the entire public. Privilege, audience, purpose, authorship, and the exact words still matter.
Is sharing a defamatory post cyber libel?
A simple share or reaction is not criminal aiding or abetting of cyber libel under Disini. Adding a new defamatory assertion may create liability as an original publication.
Is an anonymous account immune?
No. The prosecution still must lawfully obtain enough evidence to identify and connect a person to the account and particular publication. Suspicion alone is insufficient.
Should I delete the post?
First preserve the complete evidence and consult counsel. Removal can limit further dissemination, but it does not automatically erase an offense already completed. A respondent should not destroy relevant evidence after learning of a complaint or investigation.
Will an apology or affidavit of desistance dismiss the case?
Not automatically. Cyber libel is prosecuted in the name of the People of the Philippines. A complainant’s desistance, apology, settlement, or retraction may affect evidence, damages, or prosecutorial decisions, but it does not by itself require dismissal.
Can the prosecutor order a website or platform to block the post?
Section 19 of the Cybercrime Prevention Act, which allowed the DOJ to restrict or block computer data based only on a prima facie finding, was declared unconstitutional in Disini. Platform reporting mechanisms and properly issued judicial remedies may still be available in appropriate cases.
Can a person be arrested immediately after a complaint is filed?
Filing a complaint with the prosecutor does not itself authorize arrest. After preliminary investigation and the filing of an Information, the judge independently determines probable cause and whether a warrant should issue. Lawful warrantless arrest is limited to the situations allowed by the Rules of Criminal Procedure.
Is bail available?
Cyber libel is generally bailable before conviction. The court sets the amount and conditions. A person who learns of an outstanding warrant should have counsel verify the case and arrange the proper surrender and bail procedure rather than evade service.
Official legal sources
This article provides general legal information, not legal advice or an attorney-client relationship. Cyber libel cases are highly fact-specific, and procedural rules or official filing arrangements may change. The law and official sources were checked as of September 19, 2026.