Quick answer
To file a cyber libel case in the Philippines, preserve the online material and proof of when it was discovered, identify the original author, confirm the correct venue, and file a sworn complaint-affidavit with the proper City or Provincial Prosecutor’s Office. The complaint must establish every element of libel, publication through a computer system, and the respondent’s authorship using admissible, authentic evidence.
To defend one, do not ignore a prosecutor’s subpoena. Obtain the complete complaint and attachments, preserve the account and full conversation, and submit a sworn counter-affidavit on the date stated in the subpoena. Possible defenses include lack of defamatory meaning, failure to identify the complainant, lack of publication, lack of authorship, privileged communication, absence of the required malice, improper venue, prescription, and unreliable or unauthenticated electronic evidence.
Cyber libel is not established merely because a post is insulting, embarrassing, harsh, or false. The prosecution must prove every element beyond reasonable doubt at trial. The governing provisions are Articles 353 to 361 of the Revised Penal Code and Sections 4(c)(4) and 6 of the Cybercrime Prevention Act of 2012.
What counts as cyber libel?
Cyber libel is libel committed through a computer system or information and communications technology. A prosecution ordinarily must establish:
| Requirement | What must be shown |
|---|---|
| Defamatory imputation | The statement attributes a crime, vice, defect, act, omission, condition, status, or circumstance tending to dishonor, discredit, or expose a person to contempt. |
| Publication | At least one person other than the person defamed received or understood the statement. A direct message seen only by its subject may lack this element; a group message may not. |
| Identifiable complainant | The complainant was named or was identifiable to people who knew the surrounding facts. Naming the person is not always necessary. |
| Malice | The legally required form of malice must be proved or properly presumed, subject to constitutional and statutory protections. |
| Use of a computer system | The material was published through social media, a website, email, messaging technology, or another covered computer system. |
| Attribution to the accused | Competent evidence connects the accused to the creation or publication of the challenged statement. An account name or screenshot alone may not conclusively prove authorship. |
Words are assessed in their full context, including the language used, the surrounding discussion, the intended audience, and how an ordinary reader would understand them. Courts do not decide defamatory meaning from an isolated word alone.
The Supreme Court upheld cyber libel as constitutional only with respect to the original author of the challenged statement. People who merely receive and react to an existing post are not criminally liable for that original post. A person who adds a new defamatory accusation in a caption or comment, however, may become the original author of that new statement. See Disini v. Secretary of Justice.
Malice, public officials, and protected speech
Article 354 generally treats a defamatory imputation as malicious even if true, unless it falls within a recognized exception. That rule is subject to constitutional protection for speech about public affairs.
When the complainant is a public officer and the statement concerns official conduct, the prosecution must prove actual malice—that the accused knew the statement was false or acted with reckless disregard of whether it was false. Actual malice is not established merely by showing that an accusation was inaccurate, strongly worded, or upsetting.
In the recently released decision in Tan v. People, G.R. No. 265929, the Supreme Court acquitted an accused charged over a Facebook accusation involving a municipal mayor because the prosecution failed to prove the required malice beyond reasonable doubt. The actual-malice rule may also apply to public figures and matters of legitimate public concern, but the classification and the connection between the statement and the public matter depend on the evidence.
Potentially privileged communications include:
A private communication made in good faith to another person in the performance of a legal, moral, or social duty.
A fair and true report, made in good faith and without added comments or remarks, of qualifying official proceedings, official acts, or public statements covered by Article 354.
Fair comment or criticism on matters of public interest, subject to the limits developed in Supreme Court decisions.
A communication being “private” on social media does not automatically make it privileged. The audience, purpose, good faith, relevance, and persons to whom it was sent all matter.
Is truth a complete defense?
Not automatically. Under Article 361, truth may support an acquittal only under the conditions set by law, including publication with good motives and for justifiable ends. The rules on when proof of truth is admissible also depend on whether the imputation concerns a crime or a government employee’s official duties.
A respondent relying on truth should preserve the source documents, official records, firsthand witnesses, messages, research notes, and verification steps available when the statement was published. A later attempt to find support for an accusation is not necessarily proof of the author’s state of mind at publication.
The one-year deadline
The Supreme Court has definitively ruled that cyber libel prescribes in one year from discovery of the offense by the offended party, the authorities, or their agents. Publication online does not create an automatic legal presumption that the offended party discovered the post on the date it appeared.
Filing the complaint or information interrupts prescription. The period may run again if the proceedings terminate without conviction or acquittal, or are unjustifiably stopped for a reason not attributable to the accused. The relevant dates and any interruption must be proved with evidence.
This current rule was affirmed by the Supreme Court En Banc on April 8, 2026 in Causing v. People, G.R. No. 258524. A bare assertion about the posting or discovery date may be insufficient. Preserve:
The date the complainant first saw or received the material.
The message, notification, email, or conversation through which it was discovered.
The identity of the person who first brought it to the complainant’s or authorities’ attention.
The publication date and any evidence of deletion, editing, or republication.
The dates the complaint was filed, dismissed, refiled, or otherwise acted upon.
A separate civil action for defamation is also generally subject to a one-year period under Article 1147 of the Civil Code, but its accrual, interruption, and relationship with a criminal case require separate analysis.
Where should the complaint be filed?
Venue in libel cases is restrictive and can be jurisdictional. Under Article 360, as amended by Republic Act No. 4363:
For a private complainant, the recognized choices include the city or province where the complainant actually resided when the offense was committed, or where the material was printed and first published.
For a public officer, the rules generally refer to the place where the officer held office when the offense was committed, with a special rule for an office in Manila, or to the place of printing and first publication.
Applying “printed and first published” to internet material can raise difficult factual and legal questions. Accessing or printing an online post in a chosen city does not necessarily create venue there. The complaint should allege and document the specific facts supporting venue, such as the complainant’s actual residence or official station at the relevant time.
The preliminary-investigation complaint is normally filed with the City or Provincial Prosecutor’s Office corresponding to the proper venue. If an information is approved, cyber libel is tried in the Regional Trial Court, ordinarily in a designated cybercrime court where one is available.
Because cyber libel carries penalties far above the barangay-conciliation limits, barangay proceedings are generally not a condition before filing the criminal complaint.
How to file a cyber libel complaint
1. Preserve the complete electronic evidence
Before requesting deletion or posting a rebuttal, preserve the material in a form that shows its source and context. Keep:
Screenshots showing the entire post, account name, profile address, date and time, caption, attached media, comments, and visible URL.
A screen recording showing navigation from the account or webpage to the challenged material.
The original URL, post identifier, email headers, message export, downloaded media, and available metadata.
The original phone, computer, or storage device on which the material was received. Avoid factory resets, unnecessary editing, or overwriting.
Copies in more than one secure location, with a written record of who collected, copied, or handled them.
Affidavits from people who personally saw the material and can explain when, where, and how they accessed it.
Evidence linking the account to the proposed respondent, such as admissions, prior account activity, verified contact details, consistent identifiers, or lawfully obtained subscriber information.
Proof of reputational or financial harm, if damages will be claimed.
Electronic evidence must be authenticated. Under the Rules on Electronic Evidence, the person offering an electronic document bears the burden of showing that it is what the person claims it to be. A cropped screenshot without a URL, witness, source device, or surrounding context is vulnerable to challenge.
2. Seek investigative assistance when necessary
If the author is unknown, an account may be fake or compromised, or provider-held information is needed, consider requesting assistance from:
The Philippine National Police Anti-Cybercrime Group.
These agencies may help collect evidence and use the preservation, disclosure, or cybercrime-warrant procedures allowed by law. A private complainant should not attempt to access another person’s account, device, or private data without authority.
Do not delay the prosecutor filing while waiting indefinitely for an investigation. The one-year prescriptive period remains critical.
3. Prepare the complaint-affidavit
Under the 2024 DOJ–National Prosecution Service Rules, the complaint-affidavit should be sworn and should state:
The parties’ names and addresses.
The date and place of the alleged offense.
The exact statements being challenged, preferably quoted accurately and attached in context.
Why the complainant was identifiable.
How and when the material was published and discovered.
Why the material was defamatory.
Facts connecting the respondent to the authorship or publication.
Facts establishing the correct venue.
The supporting witnesses and documentary, electronic, and physical evidence.
The current DOJ standard is prima facie evidence with reasonable certainty of conviction. The evidence must be admissible, credible, preservable, and capable of establishing all the elements and the responsible person’s identity.
4. Assemble the required copies and form
The rules require the original complaint-affidavit, two duplicate copies for the official file, and as many additional copies as there are respondents. Attach the witness affidavits and supporting evidence and complete the NPS Investigation Data Form.
Confirm the receiving office’s current intake instructions before filing. Do not assume that emailing a complaint is a valid filing. The DOJ rules allow electronic submissions in specified virtual proceedings, generally after the prosecutor has issued the appropriate order.
Obtain a stamped receiving copy or other official proof showing the filing date and docket details.
5. Participate in the preliminary investigation
The prosecutor may dismiss an insufficient complaint or issue a subpoena directing the respondent to appear and submit a counter-affidavit. After evaluating both sides, the prosecutor may dismiss the complaint or recommend filing an information in court.
A complainant should address genuinely new matters in a counter-affidavit only through a reply-affidavit when the prosecutor permits or requires one. The reply is not an opportunity simply to repeat the complaint.
How to defend against a cyber libel complaint
Act immediately upon receiving a subpoena
The subpoena must provide the respondent at least ten days from receipt before the scheduled preliminary-investigation hearing. Under the 2024 DOJ rules, the counter-affidavit is filed on the date stated in the subpoena.
An extension is not automatic. It may be allowed in the interest of justice—for example, to obtain counsel, examine voluminous records, or research a genuinely complicated issue—and may not exceed ten days.
Failure to appear or file a counter-affidavit despite proper service may cause the case to be resolved from the complainant’s evidence alone.
Obtain and inspect the complete record
The respondent is entitled to receive or examine the complaint and supporting evidence. Check whether anything referenced in the complaint is missing, cropped, illegible, password-protected, or taken out of context. Compare each alleged statement with the complete post, thread, recording, or message.
Do not file an ordinary motion to dismiss instead of a counter-affidavit. The DOJ rules generally prohibit that approach. A verified motion containing the respondent’s defenses may be treated as the counter-affidavit, but relying on that exception without legal advice is risky.
Preserve defense evidence
Keep the following where relevant:
The full post, thread, preceding discussion, links, and attached material.
The original device and account records.
Login alerts, access history, compromise reports, password-reset notices, and support tickets if hacking or impersonation is claimed.
Drafts, research notes, source documents, interviews, official records, and communications showing verification or good faith.
Proof of privacy settings and the actual audience.
Evidence identifying who operated the account.
Records showing the complainant’s actual residence or office, the place of publication, and the discovery date.
Any correction, apology, retraction, removal, or settlement communication.
Preserve first. Afterward, consult counsel about removing, correcting, or limiting the post. Deletion does not erase a completed offense, but a prompt correction or apology may be relevant to good faith, damages, settlement, or the eventual penalty. Never destroy evidence after receiving a subpoena, preservation demand, or court order.
Address every element separately
A counter-affidavit should explain, with supporting evidence, why the prosecution cannot establish one or more requirements. Depending on the facts, the defenses may include:
The statement is not defamatory when read as a whole.
It is rhetorical criticism, satire, hyperbole, or protected opinion rather than an assertion of defamatory fact.
The complainant was not named and was not identifiable to readers.
No person other than the complainant received the communication.
The accused did not create or publish the statement.
The accused merely received, liked, or shared another person’s post without authoring the challenged accusation.
The electronic material is altered, incomplete, unauthenticated, or not reliably attributed to the accused.
The communication was privileged.
The complainant is a public officer or public figure and the prosecution cannot prove actual malice.
The statement was true and was published with good motives and for justifiable ends, within Article 361’s requirements.
Venue is not supported by the complaint’s allegations and evidence.
The case was filed more than one year after discovery and was not timely interrupted.
The post predates the Cybercrime Prevention Act and cannot be punished retroactively.
The same publication is being prosecuted simultaneously as both traditional libel and cyber libel, contrary to Disini.
A counter-affidavit is sworn testimony. It should not make unsupported accusations, conceal inconvenient evidence, or adopt inconsistent explanations.
Reply, rejoinder, and reconsideration deadlines
If the prosecutor requires a reply-affidavit or rejoinder-affidavit, each must be filed no later than ten calendar days from receipt of the pleading being answered. The rejoinder is the last pleading ordinarily permitted.
An aggrieved party may file a motion for reconsideration of the prosecutor’s resolution within 15 days from receipt. A further petition for review is governed by separate DOJ appeal rules. If an information has already been filed, a DOJ appeal does not by itself remove the court’s control over the criminal case; the appropriate motion to suspend proceedings must also be addressed to the court.
What happens after an information is filed?
The judge independently reviews the prosecutor’s resolution and supporting evidence to determine judicial probable cause. The judge may dismiss the case for an evident lack of probable cause, require additional evidence, or issue a warrant of arrest.
A prosecutor’s complaint does not itself authorize an arrest. Warrantless arrest is lawful only under the limited circumstances in Rule 113. If a court issues a warrant, arrange voluntary surrender and bail through counsel rather than evading service.
Before conviction by the Regional Trial Court, bail is generally a matter of right because cyber libel is not punishable by death, reclusion perpetua, or life imprisonment. The court determines the amount and conditions.
Possible pre-plea remedies include a motion to quash based on grounds recognized in Rule 117, such as prescription, lack of jurisdiction, or failure of the alleged facts to constitute an offense. These remedies are technical and should be evaluated before arraignment.
Possible penalties and civil liability
The imprisonment range for cyber libel is prisión correccional in its maximum period to prisión mayor in its minimum period, or four years, two months, and one day to eight years. Under the Supreme Court’s computation after Republic Act No. 10951, the alternative fine ranges from ₱40,000 to ₱1,500,000.
Depending on the circumstances, a court may impose imprisonment, a fine, or both. A fine alone is legally permissible; it is not guaranteed. The Supreme Court explained the applicable fine and judicial discretion in People v. Soliman.
The complainant may also seek civil liability. Civil liability arising from the offense is ordinarily deemed instituted with the criminal action unless waived, reserved, or previously filed as provided by the Rules. Article 33 of the Civil Code also recognizes an independent civil action for defamation. The proper cause of action, reservation, venue, limitation period, and prohibition against double recovery should be reviewed before filing separate cases.
Settlement, apology, and withdrawal
A demand letter, takedown request, or prior barangay proceeding is not generally required before filing cyber libel. A carefully drafted request for correction, retraction, or apology may nevertheless resolve the harm without litigation.
Once a criminal complaint has been filed, an affidavit of desistance does not automatically terminate it. Cyber libel is prosecuted in the name of the People of the Philippines, and the prosecutor or court must independently determine the proper disposition. Any settlement should address the criminal complaint, civil claims, preservation of evidence, wording of any correction, and prohibited future conduct without using threats or unlawful pressure.
Common mistakes
Waiting until the one-year period is nearly over.
Preserving only a cropped screenshot and no URL, source device, witness, or context.
Assuming that a profile name proves who operated the account.
Filing in a convenient city without facts supporting venue.
Treating every insult or falsehood as automatically libelous.
Assuming truth alone always defeats criminal libel.
Ignoring the higher actual-malice standard for statements about public officers’ official conduct.
Publicly repeating the accusation while announcing the intended case.
Deleting accounts, messages, source files, or devices before preserving them.
Ignoring a subpoena because it is “only from the prosecutor.”
Filing a motion to dismiss instead of the required counter-affidavit.
Assuming a retraction or affidavit of desistance automatically ends the prosecution.
Contacting witnesses aggressively or pressuring them to change their statements.
When legal help is urgent
Consult a Philippine criminal-law or cybercrime lawyer immediately if:
The one-year period may expire soon.
A subpoena sets an approaching counter-affidavit deadline.
An information, arrest warrant, search warrant, or cybercrime warrant has been issued.
Authorship depends on subscriber data, IP records, a compromised account, or digital forensics.
The case concerns journalism, whistleblowing, public officials, elections, or official misconduct.
The same posts may also involve threats, stalking, intimate images, child-protection laws, violence against women and children, or data-privacy violations.
There are several posts, complainants, respondents, or places that could affect the number of charges and venue.
Qualified indigent persons may seek assistance from the Public Attorney’s Office. The Integrated Bar of the Philippines can also provide information about legal-aid services.
Frequently asked questions
Is one screenshot enough to win a cyber libel case?
Not necessarily. It may show what appeared on a screen, but authorship, authenticity, completeness, publication, and context may still be disputed. Preserve the URL, source device, metadata where available, full thread, and witnesses with personal knowledge.
Can I be charged for sharing or liking someone else’s post?
A person who merely receives and reacts to the original post is not liable for that original cyber libel under Disini. If the person adds a new defamatory statement, that new statement requires separate analysis.
Does deleting the post prevent a case?
No. Deletion does not undo a completed publication. Preserve a reliable copy first, then obtain advice about removal, correction, or apology.
Does the complainant have to be named?
No. Identification is sufficient if people familiar with the circumstances reasonably understood who was being discussed.
Can a private message be cyber libel?
Only if the publication element is present. A message sent exclusively to the person defamed may lack publication, but a message sent to another person or group may satisfy it.
Is criticism of a mayor or other official automatically protected?
No. Deliberately or recklessly false factual accusations may still be punishable. But where the statement concerns official conduct, the prosecution must prove actual malice and courts must protect legitimate criticism of public affairs.
Can police arrest someone immediately over an old post?
The existence of a post alone does not dispense with constitutional and procedural arrest requirements. Ordinarily, a complaint undergoes preliminary investigation and a judge decides whether to issue a warrant after an information is filed. Warrantless arrest is limited to the circumstances in Rule 113.
How long does a respondent have to file a counter-affidavit?
Follow the subpoena. It must set the hearing at least ten days after the respondent receives the subpoena and complaint, and the counter-affidavit is due on the scheduled date. Any extension requires sufficient grounds and may not exceed ten days under the current DOJ rules.
Key official sources
Supreme Court’s 2026 ruling on the one-year prescriptive period
2024 DOJ–NPS Rules on Preliminary Investigations and Inquest Proceedings
This article provides general legal information, not legal advice or a prediction of any case’s outcome. Cyber libel depends heavily on the exact words, audience, authorship evidence, dates, status of the complainant, venue, and complete electronic record. Sources and current rules were checked as of August 10, 2026.