Quick answer

If someone is using your name, photos, business identity, or personal details in a fake social media account, preserve the evidence before requesting removal. Then:

Secure your real accounts and warn contacts.
Report the impersonating profile through the platform’s official reporting tool.
Report promptly to the PNP Anti-Cybercrime Group, the NBI Cybercrime Division, or the government’s 1326 cybercrime and anti-scam hotline if the account is being used for fraud, threats, harassment, reputational harm, or other unlawful activity.
Contact your bank, e-wallet, mobile provider, employer, or issuing government agency immediately if accounts, money, a SIM, IDs, or official records may be compromised.
Consider a National Privacy Commission complaint if your personal data was unlawfully processed or disclosed.

A fake or anonymous profile is not automatically a crime. The surrounding facts matter—particularly whether another person’s identifying information was intentionally used without right and for an illegitimate purpose. A platform takedown and a criminal, privacy, or financial complaint are separate processes; one does not replace the others.

Preserve evidence before the account disappears

Fake profiles can be renamed, restricted, or deleted without warning. Before blocking, confronting, or reporting the account, collect what you can lawfully access.

Preserve:

The complete profile or page URL—not only the displayed name
The username, account ID if visible, profile name, bio, photos, and creation information
Screenshots showing the whole screen, including the date and time where possible
A screen recording showing how you reached the profile and opened relevant posts, stories, advertisements, or messages
Every post, comment, message, threat, payment request, QR code, phone number, email address, and financial-account detail used
Links and timestamps for each relevant post
Original message exports, email files and headers, voice messages, videos, and attachments
Platform notifications and emails about logins, password changes, recovery requests, or reports
Receipts, reference numbers, account statements, delivery records, and communications with banks or e-wallets
Messages received by friends, customers, employers, or relatives who were contacted by the impersonator
Proof that the identity belongs to you or your organization, such as your authentic profile, website, registration records, or prior use of the name
Proof of actual harm, including fraudulent transactions, lost business, workplace consequences, medical expenses, or counseling records

Keep the original files. Do not crop, annotate, compress, rename, or repeatedly resave your only copy. Make a separate working copy if you need to highlight something. Record who captured each item, when it was captured, and from what device or account.

Ask recipients to preserve their own copies and write a factual account of what they personally saw or received. Their testimony may be more useful than a screenshot forwarded several times.

Do not hack the fake account, guess its password, install tracking software, or secretly intercept private communications. Do not conduct an entrapment operation without law-enforcement guidance.

Secure your identity and accounts

Treat impersonation as a possible sign that other accounts or records have also been compromised.

Change the password of the email account connected to your social media first, followed by social media, banking, e-wallet, shopping, and cloud-storage accounts.
Use a different, strong password for each account.
Enable two-factor or multi-factor authentication. An authenticator app or security key is preferable where available.
Review active sessions and sign out devices you do not recognize.
Remove unfamiliar recovery addresses, phone numbers, forwarding rules, and connected applications.
Save security notifications before deleting them.
If your mobile number suddenly stops working, contact your telecommunications provider immediately about possible SIM replacement or account takeover.
If an ID was lost or copied, notify the issuing agency and any institution where it could be used.
Check financial accounts for unfamiliar transactions and new beneficiaries.
Tell close contacts, customers, or staff that the fake account is unauthorized. Use a neutral warning and avoid publicly accusing a person whose identity has not been verified.

Never send passwords, PINs, one-time passwords, CVVs, recovery codes, or unredacted identification documents to someone claiming privately that they can “recover” or remove the account. Use only the platform’s official application or help pages.

Report the account to the social media platform

Report the profile for impersonation or pretending to be someone, not merely as spam. Report the specific posts or messages separately when they involve scams, threats, private information, intimate content, or harassment.

Official reporting resources include:

Provide the fake account’s exact URL and the URL of the authentic account, if any. The person being impersonated—or an authorized representative of a business or incapacitated person—should ordinarily submit the main report. Platforms may request identification or proof of authority.

Keep the confirmation email, report number, date submitted, and platform response. If the first report is rejected, use the available appeal or follow-up mechanism and explain specifically how the account creates a false impression that it is you or your organization.

A fan, commentary, satire, or parody account is not necessarily prohibited if it is clearly labeled and does not deceptively represent itself as the real person. Likewise, using a similar name does not by itself establish identity theft. Focus the report on concrete deception and unauthorized use.

Report serious cases to Philippine authorities

PNP, NBI, and Hotline 1326

Under Section 10 of the Cybercrime Prevention Act of 2012, the PNP and NBI are the principal law-enforcement authorities for offenses under the Act.

You may:

Contact or visit the PNP Anti-Cybercrime Group or its regional cybercrime unit.
Proceed to the NBI Cybercrime Division or an NBI regional cybercrime center.
Call the government’s 1326 hotline for cybercrime, impersonation, phishing, and scam reports. Current DICT guidance also lists 1326@dict.gov.ph for complaints and incident reports.
Go to the nearest police station if no cybercrime unit is immediately accessible, especially when threats or local suspects are involved.

The NBI’s published Citizen’s Charter states that investigative assistance is available to the general public without a filing fee or documentary checklist. The complainant completes a complaint sheet, undergoes an interview, and may execute a sworn statement or submit an affidavit, supporting documents, witness statements, and a relevant device for examination.

An initial hotline call, email, platform report, or police-blotter entry may help document the incident, but it is not necessarily the same as a formally docketed criminal complaint. Ask for:

A report or reference number
The investigator’s name and unit
Confirmation of what documents or devices are required
Whether you need to execute a sworn complaint-affidavit
Whether the matter will be referred for preliminary investigation
Whether a prompt preservation request to the platform or service provider is appropriate

Only law enforcement can seek appropriate subscriber or traffic information through the legal process. Under the Rule on Cybercrime Warrants, investigators may apply for court authority to obtain relevant computer data. A private complainant generally cannot compel a platform to reveal who operates an account.

Section 13 of Republic Act No. 10175 requires service providers to preserve traffic data and subscriber information for a minimum of six months from the transaction. Content data may be preserved for six months after a law-enforcement preservation order, with one authorized six-month extension. These rules do not guarantee that every platform possesses the requested data, and your personal platform report does not itself amount to a law-enforcement preservation order. Report quickly.

What to include in a complaint narrative

Present the events chronologically and distinguish what you personally know from what someone else told you.

State:

Who you are and how the impersonated identity belongs to you or your organization
When and how you first discovered the account
The exact account name, username, and URL
What personal information, images, marks, or records were used
What the account claimed or did
Who received messages or relied on the account
What money, information, opportunity, or reputation was lost or placed at risk
What actions you took with the platform, bank, employer, or other entity
What evidence and witnesses are available
Whether the conduct is continuing and why urgent preservation or protection is needed

Do not identify a suspected operator as a fact unless you have reliable evidence. Explain why you suspect someone and identify the supporting facts.

When impersonation may be a crime

Computer-related identity theft

Section 4(b)(3) of Republic Act No. 10175 covers the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion—without right—of identifying information belonging to another natural or juridical person.

In Disini v. Secretary of Justice, the Supreme Court upheld this provision and explained that the prohibited use must be intended for an illegitimate purpose. The Court also noted that merely acquiring and disseminating information that a user made public is not, by itself, identity theft.

Accordingly, a cloned profile used to obtain money, deceive customers, send fraudulent messages, damage the victim, or falsely transact in the victim’s identity may support an identity-theft complaint. A profile that merely uses a similar name, or a clearly disclosed parody account, requires a different analysis.

Computer-related identity theft is punishable under Section 8 by prision mayor—six years and one day to twelve years—or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. If no damage has yet been caused, the law provides for a penalty one degree lower. Liability and the proper penalty remain for the court to determine after due process.

Other possible offenses

The same conduct may raise other issues, depending on the evidence:

Illegal access if the offender entered your actual account without right
Computer-related forgery or fraud if inauthentic data or unauthorized system activity was used for a dishonest scheme
Estafa or another offense committed through ICT, which may fall under Section 6 of Republic Act No. 10175
Cyberlibel if the original author publicly made a malicious and defamatory imputation through a computer system
Gender-based online sexual harassment when the impersonation forms part of conduct covered by Sections 12 to 14 of the Safe Spaces Act
Data Privacy Act violations involving unlawful processing, disclosure, or use of personal data
Anti-Photo and Video Voyeurism Act violations involving nonconsensual intimate recordings
OSAEC or child sexual abuse or exploitation offenses under Republic Act No. 11930
Anti-Financial Account Scamming Act violations if financial accounts or social-engineering schemes were involved

The correct charge depends on the account’s content, purpose, operator, victims, and resulting harm. Reporting facts accurately is more important than selecting a legal label yourself.

If money or financial accounts are involved

Contact the bank, card issuer, e-wallet, remittance company, or other financial institution immediately through the number in its official application, website, or on the back of the card.

Ask it to:

Block or secure affected accounts and cards
Record the transaction as disputed
Preserve transaction, device, beneficiary, and communications records
Provide a complaint reference number
Explain its affidavit, police-report, or supporting-document requirements
Coordinate with the receiving institution where legally permitted

Under the Anti-Financial Account Scamming Act, institutions may temporarily hold funds involved in a qualifying disputed transaction in accordance with BSP rules. The statutory period cannot exceed 30 calendar days unless extended by a competent court. A hold is not automatic and does not guarantee recovery or reimbursement.

First submit the complaint to the institution’s own consumer-assistance channel. If its response is unsatisfactory, the BSP Consumer Assistance Mechanism is a second-level recourse for complaints involving BSP-supervised institutions. Complaints may be escalated through the BSP Online Buddy on the BSP website or, if BOB is inaccessible, through the prescribed form and consumeraffairs@bsp.gov.ph.

A BSP consumer complaint does not replace a report to the PNP, NBI, or CICC for suspected crime.

When to file with the National Privacy Commission

Consider an NPC complaint when the incident involves the unlawful collection, use, disclosure, retention, or other processing of your personal data under the Data Privacy Act of 2012.

Ordinarily, the NPC’s amended Rules of Procedure require you first to notify the personal information controller, processor, or concerned entity in writing and allow it to address the violation. You must generally show that it failed to take timely or appropriate action or did not respond within 15 calendar days after receiving your written notice.

The NPC may waive this exhaustion requirement for good cause or a serious violation presenting a risk of harm, including grave and irreparable damage, lack of a plain and adequate remedy, or patently illegal action. State and prove the reason for requesting a waiver; do not simply skip the requirement.

A formal complaint should use the NPC’s current complaint-assisted form or a properly verified complaint, include supporting evidence and witness affidavits, and be notarized. The NPC filing guide permits filing personally, by courier, or by scanning and emailing the complaint to complaints@privacy.gov.ph.

The current NPC fee schedule lists a ₱500 complaint filing fee, a legal-research fee of 1% of the filing fee but not less than ₱10, and additional fees when damages are claimed. Qualified indigent litigants are exempt if they meet both the income and property thresholds and submit the required proof.

The NPC is a privacy regulator and adjudicatory body, not a substitute for urgent police intervention. A complaint may also be dismissed if it does not involve a privacy violation, lacks supporting evidence, or fails to comply with procedural requirements.

Important deadlines

There is no single filing deadline covering every fake-account case. Prescription depends on the particular offense, when it was discovered, and whether a legally sufficient complaint or information interrupted the period.

One especially short deadline concerns cyberlibel. In its April 8, 2026 resolution in Causing v. People, the Supreme Court confirmed that cyberlibel prescribes in one year, generally counted from discovery by the offended party, authorities, or their agents. The date of discovery is fact-dependent.

Do not assume that reporting content to a platform, making a blotter entry, sending a demand, or filing an unrelated administrative complaint stops a criminal prescriptive period. Obtain legal advice promptly when defamatory posts are involved.

Common mistakes to avoid

Reporting the account before preserving its URL, content, and messages
Saving only cropped screenshots with no username, date, or context
Assuming a profile name uniquely identifies its operator
Publicly accusing a suspected person without adequate evidence
Paying an online “hacker,” fixer, or recovery agent
Sending identification documents through unofficial messages or forms
Deleting security emails or resetting a device before evidence is preserved
Continuing to negotiate with an extortionist without police guidance
Treating a platform takedown as proof that a crime was committed
Treating a hotline call or blotter entry as a completed criminal complaint
Filing an NPC complaint without the written 15-day notice or a properly supported request for waiver
Using a copyright report merely because you appear in a photograph; copyright may belong to the photographer or another rights holder
Mass-reporting an account using false grounds
Waiting for actual financial loss before reporting an active impersonation scam

Get urgent help when

Call Unified 911 or go to the nearest police station immediately if there is a credible threat of physical harm, abduction, stalking, suicide, or an emergency requiring police, medical, fire, or rescue assistance.

Promptly contact the PNP, NBI, or 1326 when:

The impersonator is asking people for money or account credentials
A bank, e-wallet, SIM, email, or government account has been taken over
Private addresses, IDs, medical records, or other sensitive information are being exposed
The offender is threatening violence, extortion, or publication of intimate material
A minor is being sexualized, groomed, threatened, or exploited
Customers or employees are receiving fraudulent instructions
The account is creating immediate employment, licensing, immigration, or reputational consequences
You need a service provider’s records preserved or disclosed through legal process

For child sexual abuse or exploitation concerns, reports may also be made through MAKABATA Helpline 1383. Do not download, forward, or create additional copies of suspected child sexual abuse or exploitation material merely to document it; preserve the URL and report it immediately.

Frequently asked questions

Can I report an account if I do not know who created it?

Yes. Provide the exact URL, username, content, dates, witnesses, and any connected phone numbers, email addresses, or financial accounts. Investigators may seek provider records through lawful preservation and warrant procedures. Identification is not guaranteed, particularly when records are unavailable or the operator is overseas.

Should I message the impersonator first?

Usually not. Contact may cause the operator to delete evidence, block you, escalate threats, or manipulate the conversation. Preserve the material and seek investigator guidance. A written notice may be needed before an NPC complaint, but that notice can be directed to the appropriate controller, processor, or concerned entity rather than engaging an unsafe offender.

Do I need a lawyer to make the initial report?

No. You may approach the PNP, NBI, CICC, platform, financial institution, or NPC yourself. A lawyer can be valuable when preparing a complaint-affidavit, identifying the correct respondent and offense, seeking urgent court relief, claiming substantial damages, or dealing with multiple jurisdictions.

Does removal of the fake account end the case?

No. Removal addresses access to the profile. A criminal investigation, privacy complaint, financial dispute, or civil claim may continue if admissible evidence has been preserved.

Can friends report the fake account too?

Yes, where the platform permits bystander reports. The impersonated person should still submit the principal report when possible. Friends should report truthfully and preserve any messages they personally received.

What if the operator is outside the Philippines?

Philippine jurisdiction may still exist under Section 21 of Republic Act No. 10175 when an element occurred in the Philippines, a relevant computer system was situated here, or damage was caused to a person who was in the Philippines when the offense occurred. Actual investigation and enforcement may require international cooperation and can take longer.

Will reporting guarantee that stolen money is returned?

No. Immediate reporting can improve the chance that an institution identifies or temporarily holds disputed funds, but recovery depends on where the money went, how quickly the report was made, the evidence, and applicable law and institutional rules.

Is an anonymous or “dummy” account illegal?

Not simply because it is anonymous or uses a pseudonym. Liability depends on what the operator did—such as deceptively using another person’s identity, committing fraud, unlawfully accessing an account, issuing threats, harassing someone, or publishing unlawful content.

Official sources

This article provides general legal information, not legal advice for a particular case. Procedures and conclusions may change depending on the documents, platform records, location, date of discovery, identity of the parties, and resulting harm. Official sources and procedures were checked as of August 2, 2026.