Quick answer
Cyber libel is committed when a person publishes through a computer system an identifiable and defamatory imputation with the legally required malice. It covers posts, articles, messages, videos, captions, and similar online content—not merely content that is rude, critical, embarrassing, or unpopular.
If you are the complainant, preserve the original post and proof of authorship, publication, identification, malice, and the date the post was discovered. A criminal complaint is ordinarily initiated through a sworn complaint-affidavit before the prosecutor’s office with territorial authority; the NBI or PNP cybercrime units may assist with investigation and digital evidence. Act promptly: under the Supreme Court’s current ruling, cyber libel generally prescribes one year from discovery by the offended party, the authorities, or their agents, subject to statutory rules on interruption and recommencement of prescription.
If you are accused, do not ignore a subpoena. Under Rule 112, the respondent ordinarily has 10 days from receipt of the subpoena and supporting papers to submit a sworn counter-affidavit, witness affidavits, and supporting evidence. Obtain counsel immediately, preserve your account and source materials, and assess every element, the filing date, venue, authorship, authentication, privilege, truth and motive, and any constitutional protection for speech about public officials or public figures.
What counts as cyber libel?
Section 4(c)(4) of the Cybercrime Prevention Act of 2012 applies libel under Article 355 of the Revised Penal Code when it is committed through a computer system or similar future technology. (lawphil.net)
The prosecution must establish:
- A defamatory imputation. The material attributes a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or expose a person to contempt.
- Publication. At least one person other than the person defamed received or perceived the material.
- Identification. The complainant was named or was sufficiently identifiable from the words, images, context, or surrounding circumstances.
- Malice. The kind of malice required depends on the nature of the statement, the occasion, and whether the complainant is a private person, public officer, or public figure.
- Use of a computer system or comparable technology.
- Attribution to the respondent. The evidence must reliably connect the accused to the challenged publication.
Courts read the statement as a whole and in its ordinary context. A harsh opinion, insult, joke, rhetorical exaggeration, or criticism is not automatically libelous; neither is labeling something “opinion” an automatic defense. The actual words, audience, context, factual implications, and evidence of malice matter.
Who may be held liable?
The Supreme Court sustained cyber libel as applied to the original author of the online statement. It declared the provision unconstitutional as applied to people who merely receive a post and react to it, such as through a simple “like,” comment, or share, under an aiding-or-abetting theory. It also ruled that the same publication cannot be prosecuted as both ordinary libel and cyber libel when doing so would violate double jeopardy. (lawphil.net)
This does not give blanket immunity to every user who reposts or comments. A person who adds a new defamatory caption, allegation, edited image, or independently authored statement may be investigated as the author of that new content. Liability must be assessed from the person’s own words and conduct, not merely the platform button used.
Editors, business officers, page administrators, employees, and account owners are not automatically criminally liable simply because of their position or access. The evidence must support the particular legal basis for holding each respondent responsible.
The one-year deadline
The Supreme Court has affirmed that cyber libel generally prescribes in one year, applying the specific rule for libel in Article 90 of the Revised Penal Code. The period begins when the alleged offense is discovered by the offended party, the authorities, or their agents. Posting on social media does not by itself create automatic constructive notice to the whole world. (lawphil.net)
Article 91 provides that prescription is interrupted by the filing of the complaint or information. It may run again if the proceedings end without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused. The period does not run while the offender is absent from the Philippines. (lawphil.net)
Record the following dates carefully:
- When the content was first posted;
- When the complainant actually saw or learned of it;
- When authorities or an authorized agent discovered it;
- When the complaint was filed;
- Whether a prior proceeding was dismissed or stopped; and
- Whether the disputed content is an original publication or a genuinely new publication.
Do not assume that an old post creates a fresh criminal case every day it remains online. Editing, reposting, or publishing the material to a new audience may raise fact-specific questions, but continued online availability alone should not be treated casually as automatic republication.
A separate civil action for defamation is also generally subject to a one-year limitation under Article 1147 of the Civil Code. Criminal and civil remedies interact under Rule 111, so obtain advice before filing, reserving, waiving, or separately pursuing civil damages.
How to file a complaint
1. Preserve the evidence before requesting removal
Capture the complete context, not only the most offensive sentence. Preserve:
- Full-page screenshots showing the post, username, profile, date, time, reactions, comments, and surrounding thread;
- The exact URL, account or page URL, platform, and post identifier;
- A screen recording showing how the content was accessed;
- Original images, audio, video, emails, or message exports;
- The date and manner in which you discovered the publication;
- Messages or admissions connecting the respondent to the account;
- Names and contact details of people who saw the post;
- Documents showing why readers would identify you even if you were not named;
- Records of reports made to the platform and the platform’s responses;
- Proof of actual consequences, such as lost work, cancelled contracts, threats, or medical treatment, if damages are claimed; and
- An untouched backup of the files and device used to collect them.
Electronic evidence must still be authenticated. A cropped screenshot with no URL, date, context, or evidence of who controlled the account may be challenged. Electronic documents may be treated as the functional equivalent of written documents, but their integrity and reliability remain important under the Electronic Commerce Act. (Lawphil)
Do not hack an account, impersonate another person, secretly obtain passwords, or alter files to strengthen the case.
2. Assess the elements and possible defenses
Before filing, identify the exact words alleged to be defamatory and explain:
- What the statement means in context;
- Why it refers to you;
- Who other than you received it;
- Why it is a factual imputation rather than protected expression;
- What evidence connects the respondent to the account;
- Why the communication was malicious or why any claimed privilege was abused; and
- When and where discovery, publication, computer use, or resulting damage occurred.
A complaint should not rely only on the conclusion that a post “destroyed my reputation.” It should establish each element with specific facts and documents.
3. Identify the proper place to file
Criminal venue is important and can affect the court’s authority over the case. The Rule on Cybercrime Warrants recognizes locations including where the offense or an element occurred, where a relevant part of the computer system was situated, or where damage to a natural or juridical person occurred. The complaint and eventual Information must be supported by concrete venue facts; nationwide internet accessibility alone should not be used as a substitute for them. (Separate Concurring Opinion)
Because venue may depend on technical and personal facts, confirm the appropriate city or provincial prosecutor’s office before filing.
4. Prepare a sworn complaint-affidavit
Under Rule 112, a complaint for preliminary investigation should state the respondent’s address and include the affidavits of the complainant and witnesses plus supporting documents. The required copies are ordinarily one for each respondent plus two for the official file. Affidavits must be properly sworn before an authorized officer or, when allowed, a notary public who certifies that the affiant was personally examined and voluntarily understood the affidavit. (Criminal Proceedure)
Include a clear chronology and numbered attachments. Translate material not in English or Filipino when required by the receiving office, and retain the original-language version.
5. File with the proper prosecutor and consider investigative assistance
A complaint may be brought to the appropriate city, provincial, or state prosecutor. The DOJ Office of Cybercrime coordinates cybercrime matters, while the Cybercrime Prevention Act designates the NBI and PNP as responsible law-enforcement authorities. Their cybercrime units may assist with identifying an anonymous account, documenting electronic evidence, or pursuing lawful preservation and disclosure processes.
Reporting to investigators is not necessarily the same as filing the complaint that interrupts prescription. Confirm where and when the formal complaint-affidavit was received, and keep a stamped copy or official acknowledgment.
6. Participate in the preliminary investigation
A preliminary investigation determines whether there is sufficient ground for a well-founded belief that a crime was committed and the respondent is probably guilty and should stand trial. It is not yet a trial and does not require proof beyond reasonable doubt. (Criminal Proceedure)
If the prosecutor finds probable cause, an Information may be filed in the proper court. The judge then independently evaluates probable cause for purposes such as issuing a warrant of arrest or summons. Filing a complaint does not guarantee a charge, an arrest, or a conviction.
How to defend a complaint
Respond to the subpoena on time
The respondent ordinarily has 10 days from receipt of the subpoena to submit:
- A sworn counter-affidavit;
- Affidavits of defense witnesses;
- Complete versions of conversations or posts;
- Source documents and research materials;
- Records showing account compromise or lack of control;
- Evidence supporting privilege, truth, good motive, or justifiable purpose; and
- Evidence on prescription, venue, identity, publication, or authentication.
A motion to dismiss cannot ordinarily replace the counter-affidavit. If the respondent does not answer, the prosecutor may resolve the complaint from the complainant’s evidence. (Criminal Proceedure)
Ask counsel immediately whether an extension is legally and practically available; never assume that a request automatically suspends the deadline.
Test every element
Common defense questions include:
- Defamatory meaning: Do the words actually impute a discreditable fact when read as a whole?
- Identification: Would a reasonable reader know that the statement referred to the complainant?
- Publication: Did anyone other than the complainant receive it?
- Authorship: Is there competent evidence that the respondent created or controlled the account and made the post?
- Computer-system element: Was the alleged publication actually made through the means covered by the statute?
- Malice: Is malice presumed, rebutted, or required to be affirmatively proved?
- Privilege: Was the statement made on a protected occasion and within the scope of that occasion?
- Prescription: Was the complaint filed within one year from legally relevant discovery?
- Venue: Do the affidavits and Information establish a proper territorial basis?
Consider privilege, truth, and public-interest protections
Article 354 recognizes qualifiedly privileged communications, including:
- A private communication made in the performance of a legal, moral, or social duty; and
- A fair and true report, made in good faith and without comments or remarks, of qualifying official proceedings or acts of public officers.
Other qualified privileges have also been recognized, including relevant statements in judicial proceedings and fair commentary on matters of public interest. Privilege is fact-sensitive and may be defeated by proof of actual malice or abuse. (lawphil.net)
Truth is not always a stand-alone defense. Article 361 requires attention not only to truth but also to good motives and justifiable ends. A truthful allegation circulated mainly to humiliate a private person may therefore present a different legal issue from a good-faith report made to the proper authority.
When the complainant is a public officer or public figure and the statement concerns a matter subject to public discussion, the prosecution may have to prove actual malice—knowledge that the statement was false or reckless disregard of whether it was false. The burden is on the prosecution in qualifying cases. (lawphil.net)
Preserve the defense record
Do not delete the post, wipe devices, fabricate sources, coordinate false testimony, or pressure witnesses. Preserve:
- Drafts and original files;
- Links and source materials consulted before publication;
- Fact-checking communications;
- The complete discussion thread;
- Account-access and security notices;
- Evidence of hacking or impersonation;
- Communications showing the purpose and intended recipient;
- Retractions, clarifications, or offers to correct; and
- Proof concerning the date of the complainant’s discovery.
A correction, apology, or takedown may affect malice, damages, settlement, or prosecutorial discretion, but it does not automatically erase a completed offense. Have counsel review any public response so it does not repeat the allegation, admit disputed facts, or provoke a new complaint.
Penalties and civil exposure
Ordinary libel under Article 355 carries prisión correccional in its minimum and medium periods, a fine of ₱40,000 to ₱1,200,000, or both, in addition to possible civil liability. Section 6 of the Cybercrime Prevention Act provides a penalty one degree higher when a Revised Penal Code offense is committed through information and communications technology. The precise sentence depends on the charge, applicable modifying circumstances, the Indeterminate Sentence Law, current sentencing policy, and the court’s findings. (lawphil.net)
The Supreme Court has encouraged courts, when appropriate, to prefer fines over imprisonment in libel cases, but this is not an automatic entitlement or a guarantee against imprisonment. A complainant may also seek civil damages, subject to proof, procedural rules, and applicable limitation periods.
Common mistakes
- Waiting because the post is “still online,” despite the one-year prescriptive period;
- Saving only cropped screenshots and losing the URL, profile, date, and surrounding discussion;
- Treating an anonymous username as sufficient proof of the author’s identity;
- Filing wherever the post can be viewed without establishing concrete venue facts;
- Naming everyone who liked or shared the post without evidence of an independently authored defamatory statement;
- Assuming truth alone always defeats criminal libel;
- Assuming criticism of a public official is automatically protected;
- Repeating the disputed allegation in a demand letter, press statement, or retaliatory post;
- Ignoring a prosecutor’s subpoena or filing an unsworn response;
- Deleting accounts, messages, devices, or source files after learning of a complaint;
- Publicly threatening arrest or conviction before authorities have acted; and
- Using cyber libel to suppress legitimate complaints, testimony, journalism, reviews, or good-faith reports to proper authorities.
When legal help is urgent
Consult a Philippine lawyer immediately if:
- The one-year deadline may expire soon;
- You received a prosecutor’s subpoena, court summons, warrant, or notice of arraignment;
- The account is anonymous and platform records may disappear;
- Police seek access to a phone, computer, or account;
- The publication concerns a public official, election, court case, workplace complaint, sexual misconduct, corruption, or another public-interest issue;
- Several posts, reposts, respondents, or jurisdictions are involved;
- A demand asks for money, a public apology, or deletion in exchange for not filing;
- The post includes threats, intimate images, doxxing, stalking, identity theft, or child sexual-abuse material, which may implicate other laws; or
- Settlement discussions could affect criminal or civil rights.
If arrested, ask to speak with counsel, do not resist, and do not sign an affidavit or consent to a device search without understanding it. Eligibility for bail, the amount, and the appropriate procedure depend on the filed charge and court orders.
Frequently asked questions
Is every false Facebook post cyber libel?
No. The prosecution must still establish defamatory meaning, publication, identification, malice, computer-system use, and the accused’s authorship or legal responsibility. Other laws may apply even when cyber libel does not.
Can a private message be cyber libel?
Possibly, if a third person received the defamatory material. A message sent only to the person criticized ordinarily raises a publication problem. A limited communication may also be qualifiedly privileged if made in the performance of a legal, moral, or social duty, but the scope and presence of malice matter.
Can I sue someone who shared the post?
A bare reaction or share cannot automatically be treated as aiding or abetting cyber libel under Disini. Liability becomes more fact-dependent when the person adds a new defamatory allegation or republishes content as their own.
Is a screenshot enough?
Sometimes it contributes important evidence, but a screenshot alone may not prove authenticity, authorship, completeness, publication, or timing. Preserve the URL, full context, original files, device data, witnesses, and any lawful platform or subscriber records.
Does deleting the post end the case?
No. Deletion does not undo a publication already completed, although it may limit further harm and may be relevant to motive, mitigation, settlement, or damages. Preserve evidence before seeking removal.
Is a demand letter required before filing?
Generally, cyber libel does not require a prior demand as an element. A carefully drafted demand may help secure preservation, correction, takedown, or settlement, but it must not cause the filing deadline to lapse.
Can the complainant file both ordinary libel and cyber libel for the same material?
The Supreme Court has held that charging the same online publication under both provisions may violate double jeopardy because cyber libel is not a wholly separate defamatory offense; the computer system is the means of publication. (lawphil.net)
Can the case be settled?
The parties may discuss apology, correction, takedown, or civil settlement, but criminal prosecution is brought in the name of the People of the Philippines. A private agreement does not automatically compel the prosecutor or court to dismiss a criminal case. Never pay or sign a waiver without legal advice.
Official legal sources
- Republic Act No. 10175 — Cybercrime Prevention Act of 2012
- Act No. 3815 — Revised Penal Code
- Republic Act No. 10951 — Updated fines under the Revised Penal Code
- Rules of Criminal Procedure, including Rule 112
- Disini Jr. v. Secretary of Justice, G.R. No. 203335
- Causing v. People, G.R. No. 258524, October 11, 2023
- Resolution on reconsideration in Causing v. People, G.R. No. 258524, April 8, 2026
- DOJ Office of Cybercrime
This article provides general legal information, not legal advice or a prediction of any case’s outcome. Cyber-libel questions depend heavily on the exact words, audience, account evidence, dates, venue, and procedural record. Official sources were checked through September 22, 2026.