Quick answer

If someone creates a fake Facebook, Instagram, TikTok, X, Messenger, or other social-media account using your name, photos, contact details, or other identifying information, preserve the evidence first, report the account to the platform, secure your own accounts, and report the incident to the PNP Anti-Cybercrime Group (PNP-ACG) or the NBI Cybercrime Division when there is impersonation, fraud, threats, unauthorized access, financial loss, or other criminal conduct.

Philippine law expressly punishes computer-related identity theft. Section 4(b)(3) of Republic Act No. 10175, the Cybercrime Prevention Act of 2012, covers the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of another person's identifying information without right. The Supreme Court upheld this provision in Disini v. Secretary of Justice and explained that identifying information can include a person's name, address, contact number, date and place of birth, occupation, and similar data. (Lawphil)

However, not every fake or anonymous account automatically constitutes criminal identity theft. The facts matter. An account that merely uses a fictitious name is different from an account that deliberately takes your identity, photos, personal details, or credentials and presents itself as you in order to deceive, defraud, threaten, harass, damage your reputation, or obtain access to accounts.

If the fake account is being used to solicit money or banking credentials, contact the affected bank or e-wallet provider immediately as well. Republic Act No. 12010, the Anti-Financial Account Scamming Act (AFASA), separately penalizes certain social-engineering schemes and misuse of financial accounts. (Lawphil)

What counts as computer-related identity theft?

Section 4(b)(3) of RA 10175 covers the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion, without right, of identifying information belonging to another natural or juridical person. (Lawphil)

The Supreme Court in Disini upheld the offense as constitutional. It explained that the law targets the unauthorized acquisition or use of another person's identifying data and does not prohibit legitimate access to publicly available information merely because that information identifies someone. (eLibrary)

A fake social-media account therefore becomes legally significant when, depending on the evidence, the operator does things such as:

uses your name and photographs while pretending to be you;
copies your personal details to make the account appear authentic;
messages your relatives, clients, employees, or friends while claiming to be you;
asks people for money, loans, investments, OTPs, passwords, or financial information;
uses your identity to make purchases, obtain services, open accounts, or commit fraud;
takes over your genuine social-media account and changes its credentials;
uses impersonation to threaten, harass, blackmail, or damage you; or
combines your identifying information with fabricated posts or documents to deceive other people.

The existence of a fake profile alone does not determine the final criminal charge. Investigators and prosecutors must evaluate what information was taken, whether its use was unauthorized, what the impersonator represented to others, the operator's apparent purpose, and whether damage resulted.

Possible offenses beyond identity theft

One incident may involve several different legal issues.

Computer-related identity theft. This is the most directly applicable provision when another person intentionally uses your identifying information without right. For offenses under Section 4(b) of RA 10175, Section 8 provides imprisonment of prision mayor, or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. For computer-related identity theft where no damage has yet been caused, Section 4(b)(3) provides for a penalty one degree lower. (Lawphil)

Computer-related fraud. If computer data or a computer system is manipulated with fraudulent intent and damage results, Section 4(b)(2) may become relevant. Other fraud offenses may also apply depending on how the deception and transfer of money occurred. (Lawphil)

Illegal access. If the offender entered your real Facebook, email, cloud-storage, banking, or other computer account without right, Section 4(a)(1) of RA 10175 may apply separately from impersonation. (Lawphil)

Cyber libel. A fake account that publishes defamatory material may raise a cyber-libel issue, but impersonation by itself is not automatically libel. Cyber libel requires the elements of libel under the Revised Penal Code together with publication through a computer system. (Lawphil)

Data Privacy Act violations. The unauthorized collection, use, disclosure, or other processing of personal information may also raise issues under RA 10173. The Act separately penalizes specified forms of unauthorized processing, unauthorized access, and unauthorized disclosure when their statutory elements are established. (Lawphil)

Financial-account scams. If the impersonator obtains banking credentials, e-wallet information, passwords, or other sensitive identifying information through deception and thereby gains unauthorized access or control over a financial account, AFASA may apply. The law expressly includes social-media messages and other electronic communications within its coverage. (Lawphil)

The correct charge therefore depends on exactly what happened. A victim does not need to identify every applicable criminal provision before seeking assistance; the important first step is to preserve the facts and evidence accurately.

What to do immediately

1. Preserve the fake account before trying to have it removed

Take screenshots or screen recordings showing:

the full profile;
profile and cover photographs;
username and display name;
profile URL;
account or user ID, if visible;
biography and contact information;
posts, stories, comments, and advertisements;
messages sent by the impersonator;
demands for money or credentials;
names of persons contacted;
transaction receipts or account numbers used;
dates and times; and
anything showing that the operator claimed to be you.

Whenever possible, preserve the actual URL, not only a screenshot. Also save the original messages, emails, notifications, photographs, files, and transaction records rather than relying exclusively on cropped images.

Do this promptly. A fake account can be renamed, deleted, suspended, or altered within minutes.

2. Ask recipients to preserve what they received

If the fake account contacted your family members, customers, coworkers, or friends, ask them not to delete the conversation.

They should preserve the entire message thread, the sender's profile, dates and times, payment instructions, telephone numbers, email addresses, bank or e-wallet details, and any files sent by the impersonator.

Independent witnesses can be important because they may be able to show exactly how the fake account represented itself to third persons.

3. Report the account to the platform

Most major platforms provide an impersonation-reporting mechanism.

For example, Meta provides reporting options when an account is pretending to be another person, while TikTok expressly allows users to report accounts for impersonation. (Facebook)

When reporting, select the option closest to impersonation, pretending to be someone, or fake account, rather than merely reporting content as unwanted.

Keep screenshots or confirmation emails showing that you submitted the report and the date it was made.

If your real account was hacked rather than merely copied, use the platform's account-recovery process immediately. Facebook, for example, maintains a separate hacked-account recovery procedure. (Facebook)

4. Secure your real accounts

Change passwords for your social-media account and, importantly, the email account connected to it.

Use unique passwords and enable multi-factor authentication where available. Review:

logged-in devices;
recovery email addresses;
recovery telephone numbers;
connected applications;
active sessions;
forwarding rules in your email account; and
recent password or security changes.

If you reused the same password elsewhere, change it on those services as well.

5. Warn people who may be targeted

If the impersonator is contacting people in your name, publish a short warning through your genuine account or other trusted communication channel.

State which account is authentic and tell recipients not to send money, OTPs, passwords, identification documents, or financial information to the fake account.

Avoid publicly identifying a suspected perpetrator unless you have reliable evidence. The identity of the person operating the account may not be the same as the name, photograph, telephone number, bank account, or SIM appearing on the profile.

Where to report the crime

PNP Anti-Cybercrime Group

The PNP-ACG investigates cybercrime and maintains regional and specialized cybercrime units.

Its current official contact directory lists the Cyber Response Unit at:

complaint@acg.pnp.gov.ph
0968-878-3561
PNP trunkline 8723-0401, local 7490

The same official directory lists Regional Anti-Cybercrime Units and provincial cyber-response teams around the country. (PNP ACG)

When possible, bring or submit the evidence you already preserved and be prepared to give a chronological account of what happened.

NBI Cybercrime Division

The NBI Cybercrime Division also provides investigative assistance to victims of computer crimes.

The NBI Citizens' Charter states that a complainant may proceed to the Cybercrime Division, undergo a preliminary interview, accomplish a complaint sheet, execute sworn statements or submit prepared affidavits, and provide supporting documents or relevant devices for examination when appropriate. The listed investigative service itself has no fee. (National Bureau of Investigation)

For cases outside Metro Manila, the NBI maintains regional and district offices. (National Bureau of Investigation)

CICC for online scams

Where the impersonation forms part of an online scam, the Cybercrime Investigation and Coordinating Center's current anti-scam materials instruct victims to report promptly through 1326 and list additional reporting channels through the CICC. (CICC)

This can supplement—not necessarily replace—a formal criminal complaint with the proper investigating authorities.

Why reporting quickly matters even when you do not know who created the account

You do not necessarily have to discover the operator's real identity yourself before reporting the case.

RA 10175 provides mechanisms for preservation and lawful disclosure of computer data. Subscriber information and traffic data are subject to statutory preservation rules, while investigators may obtain relevant computer data from service providers through the legal processes required by law. (eLibrary)

The Supreme Court's Rule on Cybercrime Warrants establishes procedures for warrants involving disclosure, interception, search, seizure, and examination of computer data. (eLibrary)

This is one reason prompt reporting can be important. Technical records may be subject to retention periods, accounts may disappear, and evidence becomes harder to reconstruct as time passes.

Do not attempt to hack the fake account, steal its password, remotely enter the suspected offender's device, or obtain private subscriber information illegally. Let investigators use lawful preservation, disclosure, and cybercrime-warrant procedures.

If money has already been sent

Contact the bank, e-wallet provider, payment service, or other financial institution immediately.

Give them:

the transaction reference number;
date and time;
recipient account or wallet;
amount;
screenshots of the fraudulent communication; and
your police, NBI, PNP-ACG, or CICC reference number if already available.

AFASA requires covered financial institutions to have mechanisms relating to disputed transactions and coordinated verification when a transaction reasonably appears suspicious or connected with social engineering. (Lawphil)

Do not wait for the fake social-media profile to be removed before reporting the financial transaction.

When the National Privacy Commission may also be involved

A fake account can raise a privacy issue when personal data has been unlawfully collected, disclosed, or otherwise processed. A data subject affected by a privacy violation or personal-data breach may file a complaint with the National Privacy Commission. (Privacy Commission)

An NPC complaint serves a different function from a PNP or NBI criminal investigation.

Under the NPC's current procedure, a formal complainant generally must show that the respondent or concerned entity was informed in writing of the alleged privacy violation and was given an opportunity to act. If it fails to take timely or appropriate action, or gives no response within 15 calendar days, the exhaustion requirement may be satisfied. The NPC may waive this requirement for good cause or serious violations involving a risk of harm, including circumstances involving grave and irreparable injury, lack of an adequate remedy, or patently illegal conduct. (Privacy Commission)

The NPC currently requires use of its applicable complaint form or verified complaint together with supporting evidence and witness affidavits, and allows filing personally, by registered mail, courier, or authorized electronic mail. Its website also advises that a newer Complaint-Affidavit template took effect on July 1, 2025, so complainants should download the current form rather than rely on an old copy circulating online. (Privacy Commission)

An NPC complaint should not be used as a reason to delay contacting law enforcement where an impersonator is actively committing fraud, threatening someone, accessing accounts, or causing continuing harm.

Evidence worth preserving

A useful evidence folder may contain:

screenshots and screen recordings;
the complete profile URL and username;
copies of your genuine profile showing the contrast;
direct-message histories;
emails and SMS messages;
call logs;
payment requests;
bank or e-wallet transaction records;
telephone numbers and email addresses used by the offender;
advertisements posted by the fake account;
names and contact details of witnesses;
proof that recipients believed they were communicating with you;
platform-report confirmations;
account-recovery or security alerts;
copies of identification documents the impersonator used or circulated; and
a written timeline of events.

Preserve original electronic files whenever possible. Do not repeatedly edit, annotate, crop, or re-save the only copy of important evidence. You can create annotated copies separately while retaining the originals.

Common mistakes to avoid

Reporting the profile before preserving it. Removal is useful, but once the account disappears you may lose visible evidence needed to explain what occurred.

Saving only the profile picture. Investigators need context: URLs, usernames, messages, timestamps, transactions, and representations made to victims.

Negotiating extensively with the impersonator. Continuing unnecessary communication may expose additional information or allow the offender to manipulate the situation.

Paying the impersonator to delete the account. Payment does not guarantee deletion and may encourage further demands.

Trying to identify the offender through hacking or unauthorized access. That can create separate legal problems and compromise the investigation.

Assuming the bank-account holder is automatically the mastermind. Accounts, SIMs, identities, and e-wallets may themselves have been stolen, rented, purchased, or used as mule accounts.

Posting an accusation against a suspected individual before verification. Preserve suspicions for investigators unless you have a proper basis for making a public statement.

When legal or law-enforcement help is urgent

Seek immediate assistance when the fake account is:

asking other people for money in your name;
obtaining OTPs, passwords, banking credentials, or identification documents;
accessing your genuine accounts;
threatening physical violence;
blackmailing or extorting you;
distributing intimate material;
targeting children;
pretending to represent a company, government office, bank, or professional;
creating fraudulent transactions;
using your identity for contracts, loans, purchases, or financial accounts; or
rapidly contacting large numbers of people.

If funds have been transferred, notify the financial institution immediately in addition to making the cybercrime report.

Is there a deadline for reporting?

There is no reason to wait simply because the incident appears minor.

For offenses created by special laws, prescription can depend on the penalty imposed and the particular offense. Act No. 3326 generally provides a 12-year prescriptive period for offenses under special laws punishable by imprisonment of six years or more, unless another rule applies. Prescription questions can become more complicated where several offenses are involved or the conduct continued over time. (Lawphil)

More importantly, the practical deadline is often much shorter: profiles disappear, platform records change, victims delete messages, and technical data may be subject to retention rules.

Report as soon as reasonably possible.

Frequently asked questions

Can I report a fake Facebook account even if no money was stolen?

Yes. Actual financial loss is not required before you report suspected identity theft. RA 10175 itself recognizes computer-related identity theft even where damage has not yet been caused, although the prescribed penalty is lower in that situation. (Lawphil)

What if the fake account uses only my name and photo?

That may still justify a platform impersonation report and may potentially support a legal complaint depending on how the information is being used. Criminal liability cannot be determined from the copied name or photograph alone; investigators must examine the unauthorized use, intent, surrounding representations, and resulting or intended harm.

Do I need to know the real person behind the account?

No. Give investigators all available identifiers even if the perpetrator's legal name is unknown. Cybercrime investigation procedures allow authorities, subject to applicable warrant and disclosure requirements, to seek technical and subscriber information that ordinary users cannot lawfully compel from service providers. (eLibrary)

Should I report to Facebook or to the police first?

Usually, do both. Preserve the evidence before seeking removal. If there is ongoing fraud, hacking, threats, extortion, financial loss, or danger, contact law enforcement and any affected financial institution immediately rather than waiting for the platform's decision.

Can I complain to the National Privacy Commission instead?

You may have a separate NPC remedy if the incident involves unlawful processing of personal data, but the NPC process is not a substitute for criminal investigation by the PNP or NBI. The appropriate routes may proceed separately depending on the facts.

What if the fake account is overseas?

That does not automatically prevent a Philippine investigation. RA 10175 provides Philippine jurisdiction in specified situations, including where an element occurs in the Philippines or damage is caused to a person who was in the Philippines when the offense was committed, and the law contains provisions for international cooperation concerning cybercrime evidence. (Lawphil)

Official sources

This article provides general legal information and is not a substitute for legal advice on a particular incident. The applicable offenses and remedies depend on what information was used, what the impersonator actually did, where the relevant acts occurred, whether damage resulted, and what evidence can be preserved. Sources and procedures were checked as of August 25, 2026.