Quick answer

If someone is using your name, photos, personal details, or stolen account to pretend to be you, first preserve the evidence, secure your real accounts, report the impersonating profile to the social-media platform, and notify anyone being approached in your name. Report promptly to the PNP Anti-Cybercrime Group or NBI Cybercrime Division if the account is being used for fraud, threats, harassment, reputational harm, unauthorized transactions, or other unlawful activity.

A fake profile is not automatically a crime merely because it uses a similar name. Criminal liability depends on what information was taken, whether it was used without right, and the impersonator’s purpose and conduct. Under Section 4(b)(3) of the Cybercrime Prevention Act of 2012, computer-related identity theft includes intentionally acquiring, using, misusing, transferring, possessing, altering, or deleting another person’s identifying information without right.

The Supreme Court has explained that the prohibited use must be for an illegitimate purpose; information that a person has made public is not, by that fact alone, “stolen.” However, using public photos and details to deceive others, solicit money, damage the person, or support another unlawful act may supply the necessary context. See Disini v. Secretary of Justice, G.R. No. 203335, February 11, 2014.

Act immediately if money, safety, or account access is involved

Do not wait for the platform to remove the profile before taking protective action.

If money was transferred or a bank, card, or e-wallet account was accessed, contact the institution through its official fraud channel immediately. Ask it to secure the account, dispute the transaction, trace the funds, and consider a temporary hold under the Anti-Financial Account Scamming Act and applicable BSP rules.
If the impersonator controls your real social-media or email account, use the platform’s account-recovery process, change the password of the connected email account first, end unknown sessions, remove unfamiliar recovery details, and enable multi-factor authentication.
If there are credible threats, stalking, extortion, sexual exploitation, or danger to a child, contact the nearest police station or emergency services immediately. Do not negotiate, send more money, or meet the offender alone.
If government IDs, tax records, SIMs, employment records, or loan applications are involved, notify the issuing agency or organization and ask it to flag unauthorized use.

Preserve evidence before reporting the account

A platform may quickly change, suspend, or remove a profile. Capture the evidence first unless viewing the content would expose a child or another person to further harm.

Preserve:

The complete profile URL, username, display name, profile or page ID if visible, and platform name.
Screenshots and screen recordings showing the entire profile, posts, comments, messages, dates, timestamps, and surrounding context.
The URL of each important post, image, video, listing, or message thread.
Copies of messages sent to relatives, friends, customers, coworkers, or other victims.
Email and SMS alerts, login notifications, password-reset notices, and records of unknown devices or sessions.
Payment receipts, transaction reference numbers, beneficiary names and account details, bank or e-wallet statements, and fraud-report reference numbers.
The impersonator’s phone numbers, email addresses, payment accounts, delivery addresses, QR codes, and any claimed identity.
Your genuine account URL and older records showing your established use of the name, photo, business, or brand.
Names and contact details of witnesses who received messages or sent money.
Copies and acknowledgment numbers for every report made to the platform, bank, employer, government agency, or police.

Keep unedited originals. Do not crop the only copy, add annotations over it, or delete the original messages. Store duplicate copies in a secure location and record when and how each item was collected. Philippine rules recognize electronic records, but the person presenting them may still need to establish authenticity, integrity, and reliability. See the Supreme Court’s Rules on Electronic Evidence and 2019 Amendments to the Rules on Evidence.

A screenshot is useful, but it may not prove who operated the account. Subscriber information, traffic data, device evidence, financial records, witness testimony, or admissions may also be needed.

Report the profile to the platform

Use the platform’s specific impersonation category rather than reporting only as spam. Identify the genuine person or organization being impersonated and attach the clearest available proof.

Official reporting channels include:

For another service, use its official Help or Safety Center. Report both the account and any fraudulent, threatening, defamatory, or privacy-violating posts individually when the platform permits it.

The platform may request identification. Submit it only through the platform’s verified app, website, or official form—not through a link sent by the suspected impersonator. Save the submission confirmation and case number.

Platform removal and a criminal complaint are separate processes. A police report does not automatically delete an account, and account removal does not prevent you from pursuing a complaint.

Report the incident to Philippine authorities

The Cybercrime Prevention Act designates the PNP and NBI as the principal law-enforcement authorities for cybercrime cases. You may approach:

The nearest PNP station and request referral or coordination with the PNP Anti-Cybercrime Group or the appropriate Regional Anti-Cybercrime Unit.
The NBI Cybercrime Division or an NBI regional or district office.
The government’s 1326 cybercrime and scam hotline for initial reporting and coordination. Current DICT guidance also identifies reporting through the eGovPH app’s scam-reporting feature. See the DICT’s official contact information and DOJ cybercrime-reporting page.

For a formal complaint, be prepared to appear personally and execute a sworn affidavit. Office requirements may vary, but you should ordinarily bring:

At least one valid government-issued ID.
A chronological written account stating when you discovered the account, what information was used, what the impersonator did, who was deceived, and what harm occurred.
Printed and electronic copies of the preserved evidence.
Details of your genuine account and proof that the identifying information belongs to you or your organization.
Financial records and fraud-reference numbers if money or an account was involved.
Witness affidavits or contact information, where available.
Copies of your platform takedown reports and responses.

You do not need to know the offender’s real name before making a report. Provide every available digital identifier. Investigators may use the procedures under the Rule on Cybercrime Warrants to seek preservation or court-authorized disclosure of relevant computer data.

Ask for the complaint or docket number, the investigator’s official contact details, and written acknowledgment of the documents you submitted. Do not send sensitive evidence to an unofficial personal account unless the investigator’s office has verified that channel.

Ask about preservation of platform records

Social-media records can disappear because an account is deleted, renamed, disabled, or abandoned. Tell the investigator if data is at immediate risk and provide exact URLs, usernames, dates, and account identifiers.

Under the Cybercrime Prevention Act, law-enforcement authorities may require the preservation of specified computer data, while disclosure of protected subscriber, traffic, or content data generally requires the appropriate judicial process. A victim’s private demand to a platform is not a substitute for a lawful preservation order or cybercrime warrant.

Report early enough for investigators to assess preservation while useful records may still exist. Do not attempt to hack the fake account or obtain private subscriber information yourself.

If money was sent or a financial account was misused

Report the transaction first to the bank, e-wallet, card issuer, or other financial institution through its official fraud or consumer-assistance channel. Clearly state that the transaction is disputed and resulted from identity theft, impersonation, account takeover, or social engineering. Request:

Immediate restriction of compromised access and replacement of affected credentials or cards.
Tracing and temporary holding of disputed funds, if applicable.
A coordinated verification with the receiving institution.
A written acknowledgment and complaint reference number.
Copies of the institution’s findings and final response.

The Anti-Financial Account Scamming Act, Republic Act No. 12010 covers specified social-engineering schemes and other financial-account offenses. Under BSP Circular No. 1215, Series of 2025, covered institutions may temporarily hold disputed electronic-transfer funds while conducting coordinated verification. The total statutory holding period may not exceed 30 calendar days unless extended by a competent court. This mechanism does not guarantee recovery, particularly if the funds have already left the financial system.

If the institution’s consumer-assistance process does not resolve the complaint, escalate it through the BSP Consumer Assistance Mechanism. BSP requires consumers to report first to the concerned BSP-supervised institution and retain its complaint reference or response.

When a National Privacy Commission complaint may help

Identity misuse can also involve unlawful processing of personal data. The Data Privacy Act of 2012 gives data subjects qualified rights to dispute inaccurate information and request the blocking, removal, or destruction of personal data that is false, unlawfully obtained, or used for an unauthorized purpose.

An NPC complaint may be appropriate when an identifiable person, business, platform, lender, employer, or other entity has unlawfully processed your personal data or has failed to address a privacy violation. Not every fake-account dispute falls within the NPC’s jurisdiction, and a complaint can fail if the respondent or alleged privacy violation is not adequately identified.

Ordinarily, before filing with the NPC, you must:

Notify the respondent or concerned entity in writing of the privacy violation or personal-data breach.
Give it an opportunity to take appropriate action.
Show that it failed to act appropriately or did not respond within 15 calendar days after receiving the written notice.

The NPC may waive these requirements for good cause or a serious violation involving substantial risk of harm. Preserve proof that your written notice was received.

The complaint is generally filed using a notarized Complaint-Assisted Form or a verified complaint, with supporting documents and witness affidavits. See the NPC’s complaint instructions and 2021 Rules of Procedure, as amended.

An NPC proceeding is distinct from a criminal complaint with the PNP, NBI, or prosecutor.

What laws may apply

The exact charge depends on the evidence and the account’s actual use.

Computer-related identity theft

Section 4(b)(3) of Republic Act No. 10175 is the principal cybercrime provision. When damage has been caused, the statutory penalty is prision mayor—generally six years and one day to 12 years—or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. If no damage has yet been caused, the Act provides for a penalty one degree lower.

These are statutory penalties, not predictions of the sentence in a particular case. Charging, proof, mitigating or aggravating circumstances, and the court’s judgment remain fact-dependent.

Other possible offenses

Depending on what the fake account does, authorities may also examine:

Computer-related fraud or forgery.
Illegal access where a genuine account was hacked.
Estafa or other fraud offenses.
Cyber libel when the original author publishes defamatory statements online.
Threats, coercion, stalking, or gender-based online sexual harassment.
Unauthorized disclosure or other offenses under the Data Privacy Act.
Violations involving intimate images or the sexual exploitation of children.
Financial-account scamming or social-engineering offenses under Republic Act No. 12010.

Do not assume that every offensive post is cyber libel or that every use of a photograph proves identity theft. Each offense has separate elements.

If the fake account has published potentially defamatory material, seek legal advice quickly. The Supreme Court has reaffirmed that cyber libel generally prescribes in one year from discovery by the offended party, authorities, or their agents. See Causing v. People, G.R. No. 258524. Other possible charges may have different prescriptive periods.

Common mistakes to avoid

Reporting the profile before saving its URL, messages, posts, and payment details.
Keeping only cropped screenshots with no username, date, or context.
Deleting the conversation or compromised account too soon.
Publicly accusing a suspected person without reliable evidence.
Pretending to be another person, hacking an account, or using tracking links to identify the offender.
Paying an “investigator,” “platform employee,” or “account-recovery expert” who contacted you unexpectedly.
Sending IDs, passwords, one-time PINs, or recovery codes through unofficial channels.
Assuming that platform removal automatically starts a criminal investigation.
Waiting for the platform’s decision while fraudulent transfers, threats, or evidence loss continue.
Filing an NPC complaint without first giving written notice and allowing 15 calendar days, unless a recognized waiver may apply.
Submitting altered evidence or making claims that cannot be supported.

When legal help is urgent

Consult a Philippine lawyer promptly if:

A warrant, subpoena, demand letter, or formal complaint has been received.
Significant money, loans, property, or business transactions were made in your name.
The impersonator is publishing defamatory allegations, because cyber-libel prescription can be short.
The fake account involves intimate images, sexual extortion, a child, stalking, or credible threats.
A platform, bank, employer, or government agency refuses to correct records connected to the false identity.
You need an injunction, damages, or coordinated action across several platforms or countries.
You are unsure which criminal, civil, or administrative remedy fits the evidence.

Bring the lawyer a clean timeline, the original evidence files, report numbers, written responses, and a list of affected people and transactions.

Frequently asked questions

Can I report an account even if I do not know who created it?

Yes. Preserve the username, URL, messages, payment details, and any linked phone numbers or email addresses. Law-enforcement authorities may seek additional records through lawful preservation and disclosure procedures.

Is using my photograph enough to prove identity theft?

Not necessarily. It is important evidence, but liability depends on the complete circumstances—including the information used, lack of authority, purpose, representations made, and resulting or intended harm.

Is a parody, fan, or role-playing account illegal?

Not automatically. Clear labeling, absence of deception, lawful use of public information, and expressive purpose may distinguish it from identity theft. A supposedly humorous account may still create liability if it deceives people, unlawfully uses personal data, makes threats, defames someone, or facilitates fraud.

Are screenshots enough for a case?

They can support a complaint but may not establish authorship or authenticity by themselves. Preserve the underlying messages, URLs, devices, account alerts, transaction records, and witnesses whenever possible.

Should I ask friends to mass-report the profile?

Ask affected people to make truthful, individual reports and preserve what they personally received. Coordinated false reports, harassment, or fabricated evidence can create separate problems.

Do I have to wait 15 days before going to the police?

No. The 15-calendar-day rule generally concerns exhaustion of remedies before an NPC privacy complaint. It does not require you to delay an urgent platform, bank, PNP, NBI, or emergency report.

Can the authorities immediately reveal who owns the account?

Usually not. Platforms and service providers hold different records, and protected data generally requires the proper legal process. Some records may be incomplete, foreign-held, falsified, or no longer available.

Will reporting guarantee that the account is removed or the money is returned?

No. Removal depends on the platform’s evidence and policies. Recovery of money depends on how quickly the transaction is reported, whether funds remain traceable, the institutions involved, and the investigation’s findings.

Official references

This article provides general legal information, not advice for a specific case. Procedures, platform requirements, and legal conclusions may depend on the evidence and documents involved. Official sources were last checked on July 28, 2026.