Quick answer

If someone is using your name, photos, personal details, or organization’s identity in a fake social media account:

Preserve the evidence before the account disappears.
Secure your email, phone, social media, bank, and e-wallet accounts.
Report the profile and each harmful post or message to the platform.
Report promptly to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or the government’s 24/7 Hotline 1326 if the account is being used for fraud, threats, harassment, reputational attacks, or other harm.
Contact the bank or e-wallet immediately if money or financial credentials are involved.

A platform report seeks removal. A complaint to law enforcement seeks investigation and possible prosecution. One does not replace the other.

Is every fake account identity theft?

No. A fictitious, fan, parody, or anonymous account is not automatically criminal merely because it uses a false name. The account may still violate platform rules, but criminal liability depends on what information was used, whether it belonged to another person or organization, whether its use was unauthorized, and the purpose and resulting harm.

Section 4(b)(3) of the Cybercrime Prevention Act of 2012 defines computer-related identity theft as the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion—without right—of identifying information belonging to another natural or juridical person.

In Disini v. Secretary of Justice, the Supreme Court explained that the prohibited conduct must involve an illegitimate purpose. Simply acquiring or sharing information that the person made public is not, by itself, identity theft. Using that information to impersonate the person, deceive contacts, solicit money, open accounts, harass the victim, or damage the victim’s reputation presents a materially different case.

Computer-related identity theft generally carries prision mayor—six years and one day to twelve years—or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. The law provides for a penalty one degree lower if no damage has yet been caused. The actual charge and penalty remain for prosecutors and courts to determine from the evidence.

Depending on the conduct, a fake account may also involve:

Estafa or another form of fraud;
Computer-related forgery or fraud;
Cyberlibel;
Threats, coercion, stalking, or harassment;
Unauthorized processing or disclosure of personal data;
Gender-based online sexual harassment under the Safe Spaces Act;
Unauthorized distribution of intimate recordings under the Anti-Photo and Video Voyeurism Act;
Access-device fraud;
Financial-account scamming under the Anti-Financial Account Scamming Act; or
Online sexual abuse or exploitation of a child under Republic Act No. 11930.

Which law applies depends on what the account did, not simply on the label “fake account.”

Preserve evidence before reporting the account

Platforms can remove content quickly, and an impersonator can rename, deactivate, or delete an account. Capture what you can without engaging the operator or putting yourself at risk.

Preserve:

The complete profile URL, username, display name, profile photo, bio, and visible account or profile ID;
Full-screen screenshots showing the URL or username, date, and time;
A screen recording that scrolls through the profile, posts, comments, and visible account details;
Direct messages, emails, text messages, voice notes, and call logs;
Links and screenshots of each fraudulent, threatening, sexual, or defamatory post;
Requests for money, payment instructions, QR codes, bank or e-wallet details, and transaction reference numbers;
Receipts, statements, and notices of unauthorized transactions;
Names and contact details of people who received messages or sent money;
Your legitimate profile and documents showing that the impersonated name, photo, business, or organization belongs to you;
Copies of reports submitted to the platform and every acknowledgment or case number; and
A written chronology stating when you first discovered the account, what happened, who saw it, and what harm resulted.

Keep original files. Do not rely only on cropped screenshots or images forwarded through chat, which may lose context and quality. Export messages where the service permits it. Back up the evidence to a second secure location, and do not factory-reset or dispose of a relevant phone or computer.

Do not secretly record private calls without legal advice. The Philippines’ Anti-Wiretapping Act can create separate issues. Saved messages, call logs, voluntary witness statements, and lawfully captured public-facing content are safer forms of evidence.

Secure your real accounts

A copied profile is not necessarily a hacked account, but check for compromise immediately:

Change the password of the email account connected to your social media.
Use a unique password and enable multi-factor authentication.
Review active sessions and sign out devices you do not recognize.
Check whether recovery email addresses or phone numbers were changed.
Remove unfamiliar third-party applications.
Ask your mobile provider about unexplained loss of signal or a possible SIM-swap.
Review bank, card, e-wallet, lending, and shopping accounts for unauthorized activity.
Inform close contacts through a channel they already know is yours.
If your real account was taken over, use the platform’s hacked-account recovery process as well as the impersonation-report process.

Do not post scans of your identification documents publicly to prove that you are the victim. Submit them only through verified platform, bank, or government channels.

Report the account to the platform

After preserving evidence, report both the account and the specific harmful content. Reporting only the profile may not bring threatening messages, scam solicitations, or intimate images to the correct review team.

Official reporting routes include:

Platform	Official route
Facebook	Report a profile or Page pretending to be someone or use the impostor-account form
Instagram or Threads	Impersonation report form
TikTok	Report an impersonation account
X	Report an impersonation account

Use the platform’s separate reporting category for threats, private information, fraud, sexual content, or child-safety concerns when applicable. Keep the confirmation number and the exact date of every submission.

Removal is not guaranteed, and removal does not identify the operator, recover money, or establish criminal liability.

Where to report in the Philippines

Republic Act No. 10175 designates the PNP and NBI as the principal law-enforcement authorities for cybercrime. The CICC coordinates assistance and referrals.

Agency	How to report
Cybercrime Investigation and Coordinating Center	Call 1326, the government’s 24/7 anti-scam and cybercrime hotline; email report@cicc.gov.ph; use the eGovPH app’s reporting feature; or visit the CICC reporting page
PNP Anti-Cybercrime Group	Use the PNP-ACG eComplaint portal or email acg@pnp.gov.ph
NBI Cybercrime Division	Use the NBI Online Complaint page, email ccd@nbi.gov.ph, or visit the Cybercrime Division or an NBI regional or district office

The government has confirmed that Hotline 1326 covers impersonation, phishing, online scams, and other cybercrime reports and operates around the clock. See the DICT/PIA guidance on Hotline 1326.

An online report or email may lead to an interview or a request for personal appearance. A formal case ordinarily requires a sworn complaint or statement and supporting evidence. The NBI Cybercrime Division Citizen’s Charter states that investigators assist with the sworn complaint sheet, collect supporting documents and witness statements, and may examine a relevant device. Its listed intake service has no fee.

If you report to more than one agency, disclose the earlier reports and their reference numbers so the authorities can coordinate and avoid conflicting or duplicate case records.

What to include in the complaint

Prepare a clear, factual packet containing:

Your full name and reliable contact details;
The fake account’s platform, username, URL, and visible identifying information;
The date and time you discovered it;
A chronological account of what it posted, sent, requested, or obtained;
An explanation of which name, image, document, or other identifying information belongs to you;
A statement that you did not authorize the account or the relevant use;
Screenshots, recordings, messages, receipts, and transaction records;
Names and statements of witnesses or recipients;
The platform-report reference number;
Details of any bank, e-wallet, telco, employer, school, or government-agency report;
The known or suspected operator, if any, and the factual basis for the suspicion; and
The harm already caused or the harm being threatened.

It is acceptable to identify the perpetrator as unknown. Provide leads such as phone numbers, email addresses, payment accounts, delivery addresses, repeated phrases, linked profiles, and mutual contacts. Do not state speculation as fact.

If money or financial credentials are involved

Contact the bank, card issuer, e-wallet, remittance company, or other financial institution immediately through its official fraud or consumer-assistance channel. Ask it to:

Secure the affected account;
Record and investigate the disputed transaction;
Preserve relevant records;
Trace or flag the recipient account where legally permitted; and
Give you a complaint or reference number.

Prompt reporting matters. The Anti-Financial Account Scamming Act and related BSP regulations provide mechanisms for the temporary holding and coordinated verification of funds involved in disputed transactions, but a report does not guarantee that funds remain available or will be returned.

If the institution does not resolve the concern, escalate it through the BSP Consumer Assistance Mechanism. The BSP requires the consumer to approach the concerned financial institution first and to retain its reference number.

Never send additional money to “verify” your identity, unlock a refund, or help with an alleged entrapment. Conduct any operation only under the direct supervision of authorized investigators.

When a National Privacy Commission complaint may help

A fake account’s unauthorized use or disclosure of personal data may raise issues under the

Quick answer

If someone is using your name, photos, personal details, or organization’s identity through a fake social media account:

Preserve the evidence before the account disappears.
Secure your email, social media, mobile number, and financial accounts.
Report the profile and its harmful posts or messages to the platform.
Report promptly to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or CICC if the account is deceiving people, soliciting money, threatening or harassing anyone, publishing harmful falsehoods, or using sensitive information.
Call the bank or e-wallet immediately if money or account credentials are involved. Do this before waiting for a police response.

A fake profile is not automatically a criminal case. The account’s purpose and conduct matter. Impersonation intended to deceive, defraud, harass, damage a person, or misuse identifying information may constitute computer-related identity theft or another offense. A clearly disclosed parody, fan, or commentary account presents different issues.

What Philippine law covers

Section 4(b)(3) of the Cybercrime Prevention Act of 2012 penalizes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion—without right—of identifying information belonging to another natural or juridical person.

In Disini v. Secretary of Justice, the Supreme Court explained that identity theft concerns the illegitimate acquisition or use of another person’s identifying data. Merely acquiring or sharing information that the user made public is not, by itself, identity theft. Using that information to impersonate someone for an illegitimate purpose is a different matter and must be assessed from the account’s conduct and surrounding evidence.

For computer-related identity theft, the statutory penalty is prision mayor—six years and one day to twelve years—or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. The law provides for a penalty one degree lower if no damage has yet been caused. The actual charge and penalty remain for prosecutors and courts to determine.

Depending on what the account does, other laws may also apply:

Fraud or solicitation of money: estafa, computer-related fraud, access-device fraud, or the Anti-Financial Account Scamming Act may be relevant.
Defamatory posts: cyberlibel may be considered, but its elements—including defamatory imputation, publication, identification, and malice—must be established.
Sexual or gender-based harassment: the Safe Spaces Act expressly addresses certain online acts, including impersonating a victim’s identity or posting lies to harm the victim’s reputation, when committed in the context of gender-based online sexual harassment.
Non-consensual intimate recordings: the Anti-Photo and Video Voyeurism Act may apply where its specific requirements are met.
Sexual content involving a child: the Anti-OSAEC and Anti-CSAEM Act applies. Do not download, forward, or repeatedly copy suspected child sexual abuse material.

The same incident can raise several possible offenses, but that does not mean every provision will apply or that multiple convictions will automatically follow. The evidence and legally proven acts control.

Preserve evidence before reporting the account

Take evidence first unless doing so would place someone in immediate danger. Platform removal can protect victims, but it can also make publicly accessible material disappear.

Preserve:

The full profile URL, username, display name, profile photograph, bio, account ID if visible, and date and time you accessed it.
Full-screen screenshots showing the browser address bar or application interface. Avoid relying only on cropped images.
A screen recording scrolling through the profile, posts, comments, and account information, without editing the recording.
URLs and screenshots of each harmful post, story, advertisement, livestream, or marketplace listing.
Complete message threads, including dates, timestamps, sender details, attachments, voice messages, and transaction instructions.
Original emails, message exports, downloaded account data, and electronic files—not only printouts.
Bank or e-wallet names, account names and numbers, transaction reference numbers, receipts, QR codes, and the exact time money was sent.
Platform acknowledgments, report numbers, emails, and decisions.
Messages from relatives, customers, or friends who were contacted by the impostor.
Your genuine profile, ownership records, business registration, trademark records, or other documents showing the identity being misused.
A written chronology: when you discovered the account, who informed you, what the account did, and what harm followed.

Keep an untouched copy of every file. Back it up to a second secure location. Do not rename, annotate, compress, or repeatedly resave the only original. If the relevant device may be examined, do not factory-reset, discard, repair, or wipe it.

Do not secretly record private calls without legal advice. The Anti-Wiretapping Act can create separate legal issues. Saving messages you lawfully received is different from covertly recording a private conversation.

Secure your real accounts

A cloned profile does not necessarily mean your genuine account was hacked, but you should check.

Change the passwords for your primary email and affected accounts using a trusted device.
Use a different, strong password for each account.
Enable multi-factor authentication, preferably through an authenticator app or security key where available.
Review logged-in devices, active sessions, recovery email addresses, mobile numbers, connected applications, and recent security alerts.
Log out unfamiliar sessions and revoke unknown applications.
Contact your telecommunications provider immediately if you unexpectedly lose mobile service or suspect a SIM-swap.
If your genuine account was taken over, use the platform’s compromised-account recovery process. An account-takeover report is different from an impersonation report.
Warn close contacts through a verified channel that you are not requesting money, passwords, OTPs, or account transfers.

A public warning can help, but keep it factual. Link to your genuine account, identify the impersonating username, and state that requests from it are unauthorized. Do not publish unverified accusations about who you think is behind the account.

Report the account to the platform

Report both the profile and any individual posts, messages, advertisements, or listings that violate separate policies. One profile report may not capture every harmful act.

Platform	Official reporting route
Facebook	Report a profile or Page pretending to be someone or use the impostor-account form
Instagram or Threads	Impersonation report form
TikTok	Report an impersonation account
X	Report impersonation

Use only the platform’s official application or help-center domain when submitting identification. Do not send IDs to an account claiming to be “support” through direct messages.

Keep the confirmation number and a copy of everything submitted. Platform removal is separate from a Philippine criminal, privacy, or civil proceeding. A successful takedown does not necessarily identify the operator or prove a crime, while a rejected platform report does not establish that the conduct is lawful.

Report to Philippine authorities

The Cybercrime Prevention Act designates the PNP and NBI as its principal law-enforcement authorities. CICC provides centralized cybercrime and anti-scam assistance and can coordinate referrals.

Office	How to report
PNP Anti-Cybercrime Group	Use the PNP ACG eComplaint portal or email `acg@pnp.gov.ph`. For immediate physical danger, call 911 or go to the nearest police station.
NBI Cybercrime Division	Use the NBI Online Complaint page, email `ccd@nbi.gov.ph`, or visit an NBI regional or district office.
CICC Inter-Agency Response Center	Call 1326, email `report@cicc.gov.ph`, use the CICC reporting page, or submit through eReport in the eGovPH app. Government guidance describes 1326 as a 24/7 reporting channel.

An online submission or hotline call may begin the referral process, but investigators may still require your personal appearance, sworn statement, original documents, and relevant device.

The NBI’s current Citizen’s Charter states that its Cybercrime Division assists the complainant in completing a sworn complaint sheet, conducts an initial interview, receives sworn statements and supporting documents, and may examine a relevant device. Its listed intake service has no fee.

If you report to more than one office, disclose the other reports and reference numbers. This helps avoid inconsistent statements and unnecessary duplicate investigations.

What to include in the complaint

Prepare a short, factual package containing:

Your complete name, contact details, valid identification, and relationship to the identity being misused.
The exact username and URL of the fake account.
The date and manner of discovery.
A chronological account of what happened.
The identifying information copied or used.
The deceptive, threatening, defamatory, sexual, or fraudulent acts involved.
Names and contact details of witnesses or people approached by the account.
The amount and destination of any payment.
All screenshots, original files, message exports, receipts, and platform report confirmations.
Any known information about the suspected operator, clearly separated from assumptions.
The specific assistance requested, such as investigation, evidence preservation, account identification, or referral for prosecution.

If the offender is unknown, state “unknown” and provide every available lead. Do not name a suspected person as a fact unless you have reliable evidence. A formal complaint is a sworn matter; knowingly false allegations can create liability.

Why prompt reporting matters

Service-provider records are not available indefinitely. Under Section 13 of the Cybercrime Prevention Act:

Traffic data and subscriber information must be preserved for at least six months from the transaction.
Content data must be preserved for six months from receipt of a law-enforcement preservation order.
Law enforcement may order a one-time six-month extension.

These rules do not guarantee that every platform possesses every record, and they do not let a private complainant compel disclosure. Subscriber information and content normally require lawful investigative process and, where required, a court-issued cybercrime warrant. Prompt reporting gives investigators a better opportunity to seek preservation before relevant records disappear.

There is also an important deadline where the fake account publishes allegedly defamatory material. In its final April 8, 2026 resolution in Causing v. People, the Supreme Court held that cyberlibel prescribes in one year from discovery by the offended party, the authorities, or their agents. The discovery date is factual and may be disputed.

Do not assume that clicking a platform’s “Report” button interrupts a legal prescriptive period. If cyberlibel or another time-sensitive claim may be involved, consult counsel and approach the proper authorities well before the possible deadline.

If money or financial accounts are involved

Contact the sending bank, receiving bank if known, e-wallet, card issuer, or payment provider immediately through its official fraud channel. Ask it to:

Mark the transaction as disputed or fraudulent.
Secure your account and disable compromised credentials.
Check for unauthorized devices, loans, cards, or transfers.
Coordinate with the receiving institution where legally permitted.
Give you a case or reference number and written acknowledgment.

Under BSP rules implementing the Anti-Financial Account Scamming Act, financial institutions have procedures for disputed transactions, coordinated verification, and temporary holding of funds. A hold or investigation does not guarantee recovery.

If the institution fails to resolve the matter, first-level recourse is its Financial Consumer Protection Assistance Mechanism. You may then escalate an unresolved complaint through the BSP Consumer Assistance Mechanism, including the BSP Online Buddy or consumeraffairs@bsp.gov.ph. Preserve the financial institution’s reference number because BSP asks for proof that the concern was first raised with the institution.

Never send more money for a supposed “refund,” “verification,” “unlocking fee,” or “investigation fee.”

When a National Privacy Commission complaint may help

The Data Privacy Act may be relevant if personal information was unlawfully processed, disclosed, or misused. The National Privacy Commission is a privacy regulator, however—not an emergency police service and not merely a faster platform-takedown channel.

Under the NPC’s amended Rules of Procedure, a complainant generally must first:

Inform the personal information controller, processor, or concerned entity of the privacy violation in writing; and
Allow it an opportunity to act. Lack of an appropriate response within 15 calendar days satisfies this exhaustion requirement.

The NPC may waive that requirement for good cause or a serious violation, including grave and irreparable harm or the absence of an adequate remedy.

A formal NPC complaint must be written, signed, verified, supported by evidence and correspondence, and accompanied by a certification against forum shopping. Filing fees may apply, subject to the rules on exemptions and waivers. Follow the current NPC complaint instructions and form; the form is notarized before submission.

A report to the PNP, NBI, or CICC and a privacy complaint serve different purposes. One does not automatically replace the other.

Situations requiring urgent help

Act immediately if:

The account makes a credible threat, publishes a home address or live location, encourages violence, or appears linked to stalking. Call 911 or go to the nearest police station.
Money is being transferred or credentials, OTPs, card details, or e-wallet access have been exposed. Contact the financial institution first, then law enforcement.
The account is targeting a child or circulating sexual material involving a child. Call 1326, report to the PNP or NBI, or contact the MAKABATA Helpline 1383. Do not download or forward the material.
Intimate images or recordings are being threatened or distributed. Preserve only what is necessary and do not redistribute it to friends or post it publicly as “proof.”
The fake account is contacting an employer, school, customers, or government agency in your name. Notify the institution’s security, data-protection, legal, or disciplinary office through an official channel.
The conduct may amount to cyberlibel and discovery occurred close to one year ago. Seek legal help immediately.
Government identification or financial credentials were used to open accounts, obtain loans, or enter contracts. Notify the issuing or affected institution and request written records of the unauthorized application or transaction.

Common mistakes to avoid

Reporting the profile before saving its URL, posts, and messages.
Keeping only cropped screenshots with no username, date, or context.
Editing the sole copy of a screenshot or video.
Deleting conversations, wiping the device, or closing a compromised account before securing relevant records.
Confronting the suspected operator and causing evidence to disappear.
Publicly accusing someone based only on suspicion.
Asking friends to harass, threaten, or dox the suspected operator.
Paying an online “hacker,” “tracer,” fixer, or recovery agent.
Sending IDs or affidavits through unofficial social media accounts.
Secretly recording private calls without legal advice.
Treating a platform takedown as a complete criminal complaint.
Waiting for a platform decision while financial loss, threats, or a legal deadline continues.

Frequently asked questions

Can I report a fake account if I do not know who created it?

Yes. Identify the respondent as unknown and provide the profile URL, usernames, messages, payment details, email addresses, phone numbers, witnesses, and other leads. Law enforcement may seek subscriber or computer data through the required legal process. Identification is not guaranteed.

Do I need a lawyer to report identity theft?

Not to make an initial report to the PNP, NBI, CICC, a platform, or your bank. Legal assistance becomes particularly important when preparing a prosecutor’s complaint, claiming damages, seeking protective relief, responding to counter-allegations, or dealing with a possible prescriptive deadline. Qualified indigent complainants may ask the Public Attorney’s Office about eligibility for assistance.

Should I message the fake account and demand that it stop?

Usually not before preserving evidence. Confrontation can prompt deletion, retaliation, or further deception. If communication is necessary, coordinate with the investigator or counsel and do not conduct your own entrapment operation.

Can Facebook or another platform give me the creator’s identity?

Ordinarily, a private user cannot compel disclosure of subscriber information. Platforms assess lawful requests under their policies and applicable law. Philippine investigators may seek disclosure through a court-issued cybercrime warrant or other authorized process.

Is using my photograph enough for an identity-theft case?

Not necessarily. Investigators must examine whether identifying information was intentionally acquired or used without right and for an illegitimate purpose. A misleading profile soliciting money in your name is materially different from a properly disclosed news, commentary, parody, or fan account. Unauthorized photograph use may also raise privacy, copyright, harassment, or other issues depending on ownership and context.

Can I report a profile impersonating a business or organization?

Yes. The Cybercrime Prevention Act’s identity-theft provision covers identifying information belonging to natural and juridical persons. Preserve corporate records, official account details, trademarks, customer complaints, fraudulent invoices, and proof that the fake profile claimed authority to act for the organization.

Will reporting guarantee that the account is removed or the offender is charged?

No. Platform removal depends on platform policy, while prosecution requires admissible evidence and proof of every legal element. Early, well-documented reporting improves the ability to investigate but does not guarantee identification, takedown, recovery of money, filing of charges, or conviction.

Key official references

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. The proper offense, procedure, remedy, and deadline depend on the account’s content, purpose, records, parties, and resulting harm. Laws and official procedures were checked as of August 3, 2026.