Quick answer

Act quickly on two tracks:

Preserve the fake account, messages, URLs, transactions, and security alerts as evidence.
Report the account both to the social-media platform and—when your identity was used to deceive, obtain money, threaten, harass, open accounts, or cause other harm—to the PNP Anti-Cybercrime Group or NBI Cybercrime Division.

A platform report may remove the account, but it is not a criminal complaint. Conversely, a police or NBI complaint does not automatically remove the profile. You may need both.

If money, an e-wallet, a bank account, a payment card, a loan, or a SIM is involved, contact the institution immediately through its official channel. If there is an immediate physical threat, stalking, extortion, or danger to a child, call the nationwide Unified 911 emergency hotline.

Is a fake social-media account automatically identity theft?

No. The circumstances matter.

Section 4(b)(3) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, covers the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of another person’s identifying information without right. This can include identifying information belonging to an individual or an organization.

In Disini v. Secretary of Justice, the Supreme Court upheld this offense and identified names, addresses, contact numbers, birth details, occupation, and similar data as ordinary examples of identifying information. The Court described the law as targeting unauthorized use of such information to cause harm. The statute nevertheless recognizes that an offense may exist even before damage occurs, although the imposable penalty is lower when no damage has yet been caused. See Disini v. Secretary of Justice, G.R. No. 203335, February 11, 2014.

A case is more likely to require law-enforcement attention when the account:

Copies your name, photographs, employer, business, contact details, or government-issued information;
Presents itself as genuinely operated or authorized by you;
Solicits money, loans, investments, personal data, passwords, or one-time passwords;
Contacts relatives, customers, coworkers, or friends while pretending to be you;
Publishes false statements as though they came from you;
Uses your identity to open or access an account;
Threatens, blackmails, stalks, or harasses you; or
Uses altered, synthetic, or AI-generated images, video, or voice to make the impersonation convincing.

A coincidental same name, a clearly disclosed fan or parody account, commentary, or other non-deceptive use is not automatically computer-related identity theft. Criminal liability depends on the account’s content, purpose, lack of authority, and surrounding conduct. Let investigators and prosecutors determine the appropriate offense instead of insisting on a particular charge.

Depending on the evidence, other laws may also be relevant, including illegal access, computer-related forgery or fraud, estafa committed through information and communications technology, access-device fraud, threats, cyberlibel, or data-privacy offenses. These are fact-specific and should not be assumed merely because an account is fake.

First, secure yourself and your real accounts

If the fake profile is only a clone, your genuine account may still be secure. If posts or messages appeared from your real account, your email or phone number changed, or you can no longer sign in, treat it as an account takeover.

Immediately:

Secure the email account connected to your social-media accounts.
Change compromised or reused passwords, beginning with your email.
Sign out unknown devices and revoke unfamiliar third-party applications.
Turn on two-factor authentication or a passkey.
Save login alerts and password-change notices before deleting anything.
Warn close contacts through a channel the impersonator does not control.
Tell contacts not to send money, disclose OTPs, or continue communicating with the fake account.
Contact your mobile provider if your SIM stopped working unexpectedly or may have been taken over.

For a compromised Facebook account, use facebook.com/hacked. TikTok provides a separate hacked-account procedure, while X has a compromised-account form. Use only official applications and domains; impersonators sometimes send fake “support” links after being reported.

Preserve evidence before requesting removal

Save what you can before blocking or reporting the account. Once content is deleted, made private, renamed, or removed by the platform, you may lose access to useful evidence.

Preserve:

The complete profile URL, not only the displayed name;
The exact username, handle, profile name, and any visible numeric account or page ID;
Full-page screenshots of the profile, biography, photographs, posts, comments, and follower information;
A screen recording showing how you reached the profile and opened relevant posts or messages;
Dates and times, including the time zone when possible;
Direct links to each relevant post, reel, video, or message;
Messages sent to you and to other victims;
Email headers, text messages, call logs, voicemails, and security alerts;
Payment requests, bank or e-wallet details, QR codes, receipts, reference numbers, and transaction records;
The fake account’s changes in username, photograph, or description;
Your genuine account and older materials showing that the identity, photographs, or branding belong to you;
Names and contact details of witnesses or people approached by the impersonator; and
Every platform, bank, CICC, PNP, NBI, or NPC acknowledgment and reference number.

Keep original files. Avoid cropping, annotating, filtering, or repeatedly resaving the only copy. Make a separate working copy if you need to highlight something. Ask witnesses to preserve the messages on their own devices and write down what occurred while events are still fresh.

Do not hack the account, secretly install software, pay for supposed “tracking,” or conduct your own entrapment. Subscriber information and private platform records generally require lawful investigative process.

Report the account to the platform

Use the platform’s impersonation category rather than a generic spam report. Supply the fake account’s exact URL and the URL of your genuine account. The platform may ask for identification; submit it only through the platform’s official form.

Current official reporting routes include:

Facebook: Use the profile or Page menu and select the option for an account pretending to be someone else. Facebook also accepts reports from people without an account through its impostor-account form.
Instagram and Threads: Report the profile in the app or use Meta’s impersonation form.
TikTok: Open the profile, select Share → Report → Report account → Pretending to Be Someone, following TikTok’s impersonation instructions.
X: The person impersonated or an authorized representative may use X’s Help Center; another user may report from the profile. X says an account is not required to submit certain impersonation reports. See X’s official guidance.
YouTube: Report the channel under YouTube’s impersonation policy.

In the report, state briefly:

“This account is not operated or authorized by me.”
Which name, photograph, business, or other identifying information was copied;
How the profile is misleading people;
Whether it requested money or personal information; and
The URLs of the fake and genuine accounts.

Keep the confirmation. If the report is rejected, use the platform’s appeal or follow-up mechanism and attach clearer comparison evidence. Do not assume removal will be immediate or that deletion will identify the operator.

File a formal cybercrime complaint

Republic Act No. 10175 designates the PNP and NBI as the principal law-enforcement authorities for cybercrime. You may begin with either agency:

PNP Anti-Cybercrime Group or the nearest regional cybercrime unit;
NBI online complaint intake, the NBI Cybercrime Division, or an NBI regional cybercrime center; or
The CICC reporting portal or DICT-CICC hotline 1326 for assistance and triage, especially when the incident involves a scam. DICT also lists 1326@dict.gov.ph for reports and complaints.

CICC may coordinate or refer the matter. Ask whether you must separately execute a sworn complaint with the PNP or NBI; do not assume that a hotline ticket alone has started a criminal prosecution.

The NBI’s current Citizen’s Charter procedure for computer-crime victims provides for an initial interview, a sworn complaint sheet or prepared affidavit, supporting documents, witness statements, and examination of a relevant device when necessary.

Prepare a chronological account containing:

Your full identifying and contact information;
When and how you discovered the account;
The account’s URLs, usernames, and platform;
The information, photographs, or credentials taken;
Statements or transactions made in your name;
The people contacted and any resulting loss or harm;
Suspected persons, if any, clearly identified as suspicions rather than established facts;
Steps taken with the platform and affected institutions; and
An indexed list of attachments.

Bring or submit copies while retaining your originals. Be ready to execute a sworn statement and to make a relevant device available for lawful examination. Confirm the receiving office’s current submission requirements before traveling, and obtain a complaint, docket, or reference number.

A barangay or ordinary police blotter may help document an incident, particularly when threats or local harassment are involved, but it does not necessarily replace a complaint with a cybercrime investigator.

Report quickly—digital records are time-sensitive

Do not wait for the platform to decide your report before contacting law enforcement if there is fraud, a threat, continuing harm, or a risk that evidence will disappear.

Section 13 of Republic Act No. 10175 establishes a six-month preservation framework for subscriber information and traffic data and permits law enforcement to require preservation of specified content data. The Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC governs preservation, disclosure, search, seizure, and examination of computer data. Private content and subscriber records are generally obtained by authorities through the required warrant or legal process—not by a victim directly.

These rules do not guarantee that every platform still possesses every record. Platform retention practices, foreign servers, deleted content, and cross-border procedures can affect availability. Prompt reporting gives investigators a better opportunity to seek preservation.

Criminal prescriptive periods vary according to the offense and circumstances. Do not rely on a supposed general deadline found in social-media posts or informal guides.

If money, credit, loans, or payment accounts are involved

Contact the bank, credit-card issuer, e-wallet, remittance company, lender, or other institution immediately through the number in its official app, website, or card. Request appropriate account restrictions, dispute the transaction or account, and ask for a written case number.

The Bangko Sentral ng Pilipinas advises consumers to report unauthorized or suspicious transactions immediately. If a BSP-supervised institution does not resolve your complaint after you first use its consumer-assistance mechanism, escalate through the BSP Online Buddy or BSP Consumer Assistance channels. Preserve proof that you first complained to the institution.

If a loan or account was opened in your name, ask the institution in writing for:

The application and agreement attributed to you;
The date and channel of account opening;
The contact information used;
The transaction history;
Its fraud-investigation reference; and
Correction or restriction of records shown to be unauthorized.

Access to some records may be limited by banking, privacy, or investigative rules. A lawyer or investigator can determine the proper process for obtaining them.

When a National Privacy Commission complaint may help

Consider the National Privacy Commission when an organization, platform, employer, lender, merchant, government office, or other personal-information controller improperly collected, disclosed, failed to secure, or refused to correct your personal data.

An NPC complaint is not a substitute for an urgent criminal report. It also may not be the correct remedy for every private dispute or purely personal use of information.

Under the NPC’s current complaint mechanics, a complainant generally must first notify the respondent in writing and allow it to address the alleged privacy violation. Proof must accompany the NPC complaint if the respondent fails to take timely or appropriate action or does not respond within 15 calendar days of receiving the notice.

The formal filing ordinarily requires a notarized complaint-assisted form or verified complaint, supporting evidence, and witness affidavits. The NPC lists personal filing, registered mail, courier, and electronic filing when authorized. Follow the current form and digital-signature requirements on the NPC website.

The 15-day exhaustion rule concerns an NPC administrative complaint. It does not require you to delay an emergency call, a bank fraud report, platform reporting, or a PNP/NBI complaint.

Common mistakes to avoid

Reporting before saving the profile URL, messages, and payment details;
Saving only a screenshot of the display name, which can easily change;
Assuming friends’ mass reports create a criminal case;
Waiting for actual financial loss even though continuing misuse may already warrant investigation;
Sending an ID to someone claiming in a direct message to be “platform support”;
Paying the impersonator or an unverified “hacker” to remove or trace the account;
Publicly accusing a suspected person without reliable evidence;
Editing or deleting original messages and files;
Reposting intimate material or content involving a child as “proof”;
Accessing the suspect’s account without permission; or
Filing inconsistent narratives with different agencies.

When legal help is urgent

Consult a Philippine lawyer promptly when:

The account is threatening violence, stalking, extorting, or demanding intimate material;
A child is being impersonated, groomed, exploited, or depicted sexually;
Intimate images or realistic sexual deepfakes are involved;
Significant money, multiple victims, business customers, or reputational harm is involved;
A bank, lender, employer, or government record has been created or changed in your name;
You know the suspected operator and need advice about a complaint-affidavit;
The platform repeatedly refuses to act;
The account or evidence is outside the Philippines; or
You need an injunction, damages, preservation request, or coordinated response across several institutions.

If material involves child sexual abuse or exploitation, do not download, forward, or repost it beyond what authorities instruct. Preserve the URL and report it immediately.

Frequently asked questions

Can I report an account if I do not know who created it?

Yes. Give investigators the account URL, username, messages, dates, transactions, and every available identifier. Authorities can assess whether lawful preservation and disclosure processes are justified. Do not delay merely because the operator uses an alias.

Do I need a notarized affidavit?

For NBI or PNP reporting, you may be asked to execute a sworn complaint or statement; investigators can explain their current process. An NPC administrative complaint has separate requirements and ordinarily calls for a notarized complaint-assisted form or verified complaint.

Can I force the platform to give me the operator’s name or IP address?

Usually not by making an ordinary user request. Platforms generally protect subscriber information and respond to valid legal process. Meta itself advises people seeking records from an impersonating account to contact a lawyer or local law enforcement.

Should I report to every agency?

Not necessarily. Start with one cybercrime law-enforcement agency and obtain a reference number. Make separate reports where they serve different purposes—for example, a platform takedown, bank fraud restriction, NPC privacy remedy, and PNP/NBI criminal investigation.

What if the fake account is operated from another country?

A Philippine investigation may still be possible when legally relevant conduct, computer systems, victims, or damage have a sufficient Philippine connection under Section 21 of Republic Act No. 10175. Obtaining foreign platform records can require international cooperation, so early reporting is particularly important.

Can I warn people publicly?

You may state accurately that a specified account is unauthorized and advise contacts not to transact with it. Avoid naming an unverified suspect, publishing private information, encouraging harassment, or making claims you cannot support.

Official legal and reporting references

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Charges, jurisdiction, evidence requirements, and remedies depend on the specific facts and documents. Laws, official procedures, and reporting channels were checked against available primary and official sources on July 28, 2026.