Quick answer

Preserve the evidence first. Then report the impersonating account through the social-media platform and file a separate cybercrime complaint with the Philippine National Police Anti-Cybercrime Group (PNP-ACG) or the National Bureau of Investigation Cybercrime Division (NBI-CCD).

A platform report may remove the account, but it is not a criminal complaint. Conversely, reporting to the police does not automatically take the account down. Do both, and act quickly—especially if the account is soliciting money, accessing financial accounts, threatening someone, or impersonating a child.

You do not need to know the offender’s real name before reporting. Give investigators the exact account links, usernames, messages, transaction records, and other available evidence so they can determine whether legal process should be used to identify the account holder.

Is every fake account identity theft?

No. An anonymous account, pseudonym, parody, fan page, or fictional profile is not automatically illegal. The surrounding facts matter: what information was used, whether its use was authorized, whether the account misleads people into believing it is genuinely yours, and what the operator intended to accomplish.

Section 4(b)(3) of the Cybercrime Prevention Act of 2012 punishes computer-related identity theft—the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion, without right, of identifying information belonging to another person or organization.

Identifying information may include a person’s name, address, contact number, birth details, occupation, and similar data. A profile that copies your name, photographs, work details, or organization and then uses them to deceive others, solicit payments, obtain accounts, or cause harm may fall within this provision.

In Disini v. Secretary of Justice, the Supreme Court upheld the identity-theft provision and explained that the prohibited use must be for an illegitimate purpose. Merely acquiring or sharing information that the person made public is not, by itself, identity theft. Using that information without right as part of deceptive impersonation is a different matter.

Financial loss is not always required before a complaint can be made. The statute expressly provides for a lower imposable penalty if no damage has yet been caused. For the completed offense, Section 8 provides prision mayor—six years and one day to twelve years—or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. The actual charge and penalty depend on the proven facts.

Depending on what the account does, other laws may also be relevant, including those covering computer-related fraud or forgery, estafa, threats, cyber libel, unauthorized processing of personal data, or gender-based online sexual harassment. The Safe Spaces Act, for example, expressly covers certain forms of gender-based online harassment, including impersonating a victim’s identity. Not every rude, false, or embarrassing post meets the elements of these offenses.

Preserve evidence before reporting or blocking

An impersonating account may change its username, delete messages, or disappear after being reported. Capture what you can before alerting its operator.

Preserve:

The complete profile or page URL—not just the display name.
The username, page name, account ID, and profile photograph.
Screenshots and a screen recording showing the profile, address bar or URL, posts, comments, and “About” information.
Dates and times, including the time zone if relevant.
Complete conversations, not isolated messages. Export or download chats when the platform permits it.
Original emails, including full headers when available.
Voice messages, call logs, and the telephone numbers used.
Payment instructions, bank or e-wallet account details, receipts, transaction reference numbers, and communications with the financial institution.
Copies of posts or messages received by relatives, friends, customers, or co-workers.
Proof that the identity is yours, such as your genuine profile, original photographs, business records, or authorization to represent an organization.
Platform-report acknowledgments and reference numbers.
A written timeline identifying what happened, when you learned of it, who was contacted, and what loss or harm followed.

Keep the original files. Avoid cropping, annotating, compressing, or repeatedly forwarding your only copies. Back them up in a secure location, but do not publicly repost sensitive personal information or intimate material.

Philippine rules recognize electronic documents as evidence, but the person presenting them may still have to establish authenticity and reliability under the Rules on Electronic Evidence. Screenshots are useful, but complete URLs, original files, testimony from message recipients, and platform or financial records can provide stronger context.

Do not factory-reset a relevant phone or delete the conversation after taking screenshots. If investigators need to examine a device, ask for an official acknowledgment or receipt identifying what was received.

Report the account to the platform

Use the account’s profile menu and select the option for reporting impersonation, pretending to be someone else, fraud, or deceptive behavior. Also report individual scam messages or harmful posts when the platform provides a separate option.

Official reporting pages include:

Platforms may ask the person being impersonated—or an authorized representative—to submit identification. Upload identification only through the platform’s official website or app. Do not send it to the fake account, an unsolicited “support agent,” or a link received through direct message.

After reporting:

Save the confirmation, reference number, and date of submission.
Ask people who actually received fraudulent messages to report those messages and the account from their own profiles.
Warn contacts through a verified channel that the account is not yours. Keep the warning factual and include the exact fake-account URL if doing so is safe.
Block the account only after preserving the available evidence.

A platform’s decision to remove or retain an account does not determine criminal liability. It applies the platform’s own rules, while law enforcement and prosecutors apply Philippine law.

File a cybercrime complaint

The Cybercrime Prevention Act designates the PNP and NBI as the principal law-enforcement authorities for cybercrime cases.

PNP Anti-Cybercrime Group

Contact the PNP-ACG Cyber Response Unit or the appropriate regional cybercrime office. Its current official directory lists:

Email: complaint@acg.pnp.gov.ph
Mobile: 0968 878 3561
National and regional offices: PNP-ACG contact directory

An email can open communication, but investigators may still require a personal appearance, sworn statement, identification, supporting records, or examination of relevant devices.

NBI Cybercrime Division

You may approach the NBI Cybercrime Division or an NBI regional or district office. The NBI lists ccd@nbi.gov.ph for its Cybercrime Division and provides an online complaint page.

Under the NBI’s Citizen’s Charter for computer-crime complaints, a complainant may be interviewed, execute a sworn complaint or statement, submit supporting documents, and present a relevant device for examination. The listed frontline service has no fee.

CICC assistance

The Cybercrime Investigation and Coordinating Center can receive and coordinate cybercrime reports through:

National Anti-Scam Hotline: 1326
Email: 1326@dict.gov.ph
Online report: CICC reporting portal

CICC can help route or coordinate a report, but a formal criminal investigation may still be handled by the PNP or NBI.

What to include in the complaint

Prepare a clear, chronological account rather than simply stating that an account is “fake.” Include:

Your complete name and reliable contact details.
The exact fake-account URLs, usernames, and account or page IDs.
The date you discovered the account and the earliest known impersonating activity.
Which identifying information, photographs, or documents were copied.
Why the account could reasonably mislead people into believing it was yours.
The messages, posts, transactions, threats, or other acts carried out through it.
Names and contact details of witnesses or message recipients.
Any known connection to a possible offender, clearly distinguishing facts from suspicion.
The harm caused, such as money lost, fraudulent loans, damaged business relationships, harassment, or compromised accounts.
Reports already made to the platform, bank, e-wallet, telco, CICC, PNP, NBI, or another agency.
An organized list of attachments.

Ask for the complaint or incident reference number and the investigator’s official contact details. You may also ask whether an immediate data-preservation request is appropriate. Do not assume that merely sending a platform link by email completes the sworn complaint process.

If you have already reported the same incident to another agency, disclose that fact and provide its reference number. Undisclosed duplicate complaints can create confusion.

Why immediate reporting matters

There is no single reporting deadline that applies to every fake-account incident. Prescription depends on the particular offense, its penalty, the relevant dates, and when legally significant discovery or proceedings occurred. Do not wait for that analysis before preserving evidence and reporting.

Section 13 of the Cybercrime Prevention Act provides for preservation of subscriber information and traffic data for a minimum six-month period from the transaction. Content data is preserved for six months from receipt of a law-enforcement preservation order, with a possible one-time six-month extension. Disclosure of protected platform records generally requires appropriate legal process, including a court warrant where required.

A private complainant ordinarily cannot compel a platform to reveal another user’s subscriber information. Prompt reporting gives investigators a better chance to seek preservation or disclosure before records become unavailable, particularly when the service provider is overseas.

If money or financial accounts are involved

Contact the bank, card issuer, e-wallet, or payment service immediately through its official fraud channel. Ask it to secure the account, investigate the disputed transactions, and consider any available hold, recall, or blocking measure. Record the date, time, representative’s name, and complaint reference number.

Change compromised credentials from a trusted device. Secure the email account connected to your financial and social-media accounts first, then:

Change unique passwords.
End unfamiliar login sessions.
Remove unknown recovery addresses, telephone numbers, and linked applications.
Enable multi-factor authentication.
Contact the telco immediately if your SIM unexpectedly loses service or you stop receiving expected one-time passwords.

For a complaint involving a BSP-supervised institution, the institution’s own consumer-assistance mechanism is the required first-level recourse. If its response is unsatisfactory, use the BSP Online Buddy or another channel listed in the BSP’s current consumer-assistance guidance, using the institution’s complaint reference number.

A police report does not replace the report to the financial institution, and a bank complaint does not replace a cybercrime complaint.

When a National Privacy Commission complaint may help

The Data Privacy Act of 2012 may apply when personal data has been unlawfully processed, disclosed, or misused. An NPC complaint is especially relevant when an organization, employer, platform, lender, service provider, or other entity mishandled data or failed to act on a valid exercise of data-subject rights.

It is not automatically the correct remedy for every fake account, and it does not replace a criminal complaint.

Under the NPC’s current complaint mechanics, the complainant normally must first notify the respondent in writing and allow it to address the privacy violation. The complaint may proceed if the respondent fails to take timely or appropriate action or does not respond within 15 calendar days. The NPC may waive exhaustion requirements in qualifying serious or urgent circumstances.

A formal NPC complaint must comply with its rules, including verification, supporting evidence, witness affidavits when available, notarization, certification against forum shopping, and applicable fees or an authorized exemption. Consult the NPC complaint page for the current form and filing channels.

Common mistakes to avoid

Reporting before saving the profile URL, messages, and transaction details.
Keeping only cropped screenshots that omit the account name, URL, date, or surrounding conversation.
Publicly accusing a suspected person without reliable proof.
Threatening, harassing, or trying to hack the impersonator.
Paying the impersonator or an unverified “recovery hacker.”
Sending identification through an unofficial support link.
Sharing one-time passwords or account-recovery codes with anyone.
Reposting intimate material or personal documents while warning the public.
Assuming a police blotter alone has opened a specialized cybercrime investigation.
Filing several complaints without telling the agencies about the earlier reports.
Deleting or resetting the affected device too soon.
Waiting for the platform’s decision before notifying a bank or law-enforcement agency.

When help is urgent

Seek immediate assistance when:

The account is making credible threats or revealing a person’s live location.
Someone is in immediate physical danger—call 911 or contact the nearest police station.
Money is being transferred or financial accounts are actively being accessed.
The impersonator is demanding payment, sexual material, or further personal information.
Intimate images are being threatened or distributed.
A child is being impersonated, groomed, sexually exploited, or placed at risk.
The fake account is contacting customers, employees, or government offices in a way that may cause continuing loss.

For child sexual-abuse material, do not redistribute it or create unnecessary copies. Preserve the URL, account details, and report information, then contact the PNP-ACG, NBI, or police immediately.

Frequently asked questions

Can I report a fake account if no money was lost?

Yes. Lack of financial loss does not necessarily prevent a report. Identity theft, threats, harassment, privacy violations, or attempted fraud may exist before money changes hands. Whether the evidence establishes a specific offense is determined during investigation and prosecution.

Do I need to identify the offender myself?

No. Report the account identifiers and evidence you have. Investigators may seek preservation and disclosure through the required legal process. Do not publicly name a person based only on a profile photograph, telephone number, rumor, or personal suspicion.

Can I file anonymously?

You may be able to submit a platform report or initial tip without publicly revealing your identity. A formal criminal or administrative complaint will generally require the complainant’s identity, contact information, and sworn participation. Ask the receiving agency about confidentiality and protective measures if retaliation is a concern.

What if the fake account has already been deleted?

Report it anyway. Submit the saved URLs, screenshots, messages, witness information, and report confirmations. Deleted or deactivated content may sometimes remain in a service provider’s records, but availability is not guaranteed, which is why prompt preservation matters.

Is a hacked account handled the same way as a cloned account?

Not entirely. A cloned account is a separate profile pretending to be you. A hacked account is your genuine account under someone else’s control. For a hacked account, immediately use the platform’s recovery process, secure the connected email and telephone number, end unfamiliar sessions, and change reused passwords. If the compromised account was used for fraud or threats, preserve the evidence and make a cybercrime complaint as well.

Will removal of the account end the case?

Not necessarily. Removal may stop further misuse, but it does not identify the operator, recover money, or decide criminal liability. Preserve the takedown notice and continue following up with the investigating agency and financial institution.

Should I hire a lawyer?

Many victims can make the initial platform, bank, PNP, NBI, or CICC report themselves. Consider prompt legal assistance if there is substantial financial or business loss, an urgent court remedy may be needed, the incident involves intimate material or a child, a prosecutor requires a formal complaint-affidavit, or you face uncertainty about overlapping criminal, privacy, employment, or civil claims.

Official sources

This article provides general Philippine legal information, not legal advice or a prediction of any complaint’s outcome. Application of the law depends on the account, messages, records, intent, harm, and other evidence. Official sources and reporting channels were checked on August 4, 2026.