Quick answer

If someone creates a social media account using your name, photos, business identity, or other identifying information without permission, first preserve the evidence, then report the profile and its harmful content through the platform’s official impersonation process. If the account is scamming people, accessing accounts, threatening anyone, publishing private data, or causing financial or reputational harm, promptly report it to the National Bureau of Investigation Cybercrime Division or the Philippine National Police cybercrime unit.

A fake account is not automatically a criminal case. The facts must show conduct covered by law—such as intentionally acquiring or using another person’s identifying information without right, fraud, unlawful data processing, threats, or defamatory publication. There is no minimum peso loss required for computer-related identity theft, and the law contemplates liability even when damage has not yet occurred, although the prescribed penalty is lower in that situation.

Platform reporting, a criminal complaint, a privacy complaint, and a bank dispute serve different purposes. Depending on what happened, you may need to pursue more than one at the same time.

Act immediately if money, safety, or account access is at risk

Do not wait for the fake profile to be removed before protecting yourself.

If money was transferred or a bank, card, or e-wallet account was accessed, call the provider’s official fraud channel immediately. Ask it to block access, dispute the transaction, trace the recipient account, and consider holding the disputed funds.
If your SIM was lost, stolen, or taken over, immediately notify your telecommunications provider. Under the SIM Registration Act and its implementing rules, a provider must immediately bar a reported lost or stolen SIM and deactivate it within 24 hours, subject to the prescribed verification process.
If your real social media or email account was hacked, use the platform’s account-recovery process—not only its impersonation form. Secure the connected email address and mobile number, change passwords from a trusted device, sign out unknown sessions, revoke unfamiliar apps, and turn on multi-factor authentication.
If there is an immediate threat of violence, stalking, abduction, or physical harm, contact 911 or the nearest police station. Do not arrange a meeting or attempt your own entrapment.
If the account is distributing sexual images, exploiting a child, or threatening to release intimate material, preserve the evidence without forwarding or publicly reposting it and seek law-enforcement help urgently.

Preserve evidence before reporting or blocking

Fake accounts can change usernames, delete messages, or disappear after being reported. Capture enough information to identify the account and explain what it did.

Preserve:

The profile’s exact username or handle, display name, profile URL, and platform;
Screenshots of the entire profile, including its profile photo, biography, follower information, account name, and visible URL;
A screen recording showing how you navigated from the platform to the profile;
Every relevant post, story, advertisement, comment, message, call log, or transaction;
Dates and times, including the time zone if relevant;
Names and contact details of people who received messages from the impostor;
Phone numbers, email addresses, payment links, QR codes, bank or e-wallet details, delivery addresses, and transaction reference numbers used;
Your platform report confirmation, case number, emails, and follow-up responses;
Proof that the identity belongs to you, such as links to your genuine account or appropriate identification; and
Proof of harm, including unauthorized charges, lost income, refund demands, customer complaints, threats, or reputational damage.

Keep the original files. Avoid cropping, annotating, filtering, or repeatedly resaving your only copy. Make a separate working copy if you need to mark important portions. Under the Philippine Rules on Electronic Evidence, the party presenting an electronic document may have to establish its authenticity, integrity, and reliability. A screenshot is useful, but its source and surrounding context may still need to be explained.

Do not publish an unredacted government ID to prove that the account is fake. Submit identification only through an official, secure reporting channel.

Report the fake account to the platform

Report both the profile and any specific posts, messages, advertisements, or fundraising activity

Quick answer

If someone is using your name, photos, personal details, or business identity through a fake social media account, act in this order:

Preserve the account, posts, messages, links, and transaction records before anything disappears.
Report the profile and the specific harmful content through the platform’s impersonation or fraud channel.
Secure your email, real social media accounts, mobile number, and financial accounts.
Report suspected criminal conduct promptly to the National Bureau of Investigation Cybercrime Division (NBI-CCD) or the Philippine National Police cybercrime unit. The Cybercrime Investigation and Coordinating Center (CICC) can also receive and coordinate reports through Hotline 1326 or 1326@dict.gov.ph.
If money or a financial account is involved, notify the bank or e-wallet immediately.
Consider a National Privacy Commission (NPC) complaint when personal information was unlawfully collected, disclosed, or used.

A fake account is not automatically a crime simply because it uses a similar name. Criminal liability depends on evidence that identifying information was intentionally acquired, used, misused, transferred, possessed, altered, or deleted without right. Deception, unauthorized access, financial loss, threats, defamatory posts, or misuse of government IDs may support additional charges.

When a fake account may amount to identity theft

Section 4(b)(3) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, defines computer-related identity theft as the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another natural or juridical person, without right.

Identifying information may include a person’s name, address, contact details, date of birth, occupation, account credentials, identification documents, photographs, or other information that identifies or can be linked to that person. In Disini v. Secretary of Justice, the Supreme Court upheld this provision and explained that it regulates specific conduct involving another person’s identifying data.

There is no minimum peso-loss requirement for computer-related identity theft. The statute expressly contemplates cases in which no damage has yet occurred, although it provides a penalty one degree lower in that situation. Where the full penalty applies, Section 8 provides for imprisonment in the range of prision mayor, a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. The court—not the complainant, investigator, or platform—ultimately determines criminal liability and the proper penalty.

Depending on the evidence, the same conduct may also involve:

Estafa or another offense committed through information and communications technology;
Unauthorized access to an existing account;
Computer-related forgery or fraud;
Cyber libel for defamatory online publication;
Threats, extortion, harassment, or unlawful disclosure of private material;
Unauthorized processing or disclosure under the Data Privacy Act of 2012; or
Financial-account scamming under the Anti-Financial Account Scamming Act, Republic Act No. 12010.

These are fact-dependent possibilities, not automatic charges. A disclosed parody, commentary, or fan account may be treated differently from an account designed to make people believe it is genuinely operated by the person or organization depicted.

First, contain any immediate harm

If the impostor is asking people for money

Contact the bank, card issuer, remittance company, or e-wallet through its official fraud channel immediately. Give it:

The transaction date, time, amount, and reference number;
The sending and receiving account details shown in your records;
Screenshots of the solicitation and false account;
The phone number, QR code, payment link, or account name used; and
A clear statement that the transaction is disputed or associated with impersonation or fraud.

Under Republic Act No. 12010 and BSP Circular No. 1215, account owners should immediately report disputed transactions to their financial institution. The implementing rules provide for an initial hold of up to five calendar days and, when the requirements are met, an extended hold of up to 25 additional calendar days. A hold is not automatic, and reporting does not guarantee recovery, especially if the money has already left the regulated financial system.

The institution’s consumer-assistance mechanism is the first recourse. If its response is unsatisfactory, escalate the complaint through the BSP Consumer Assistance Mechanism.

If your real account was hacked

Use the platform’s hacked-account recovery process instead of reporting only for impersonation. Then:

Change the password of the email account connected to the profile;
Change any reused passwords;
Sign out unknown devices and sessions;
Remove unfamiliar recovery addresses, phone numbers, and connected applications;
Turn on multi-factor authentication using an authenticator app or other secure method;
Save security alerts and login-history records; and
Tell contacts not to act on recent requests until you confirm control.

Do this from a device you reasonably believe is secure. Avoid resetting credentials through links sent by the suspected impostor.

If your SIM was lost, stolen, or taken over

Immediately notify your telecommunications provider through its official reporting facility. Under the SIM Registration Act and its implementing rules, a provider must immediately bar a SIM reported lost or stolen and deactivate it within 24 hours from the report, subject to the applicable verification and replacement process.

Also tell your banks and online services that the number may be compromised. A criminal may use control of the SIM to intercept recovery codes even after you change a password.

If there is an immediate threat

Call 911 or go to the nearest police station if there is a credible threat of violence, stalking, kidnapping, sexual exploitation, or imminent financial harm. If a child is involved, or the account is distributing sexual images, do not download, forward, or publicly repost the material beyond what investigators instruct. Preserve links and report urgently to law enforcement and the platform.

Preserve evidence before reporting the account

A takedown is useful, but it can also make evidence harder to retrieve. Collect what is safely available before asking friends to mass-report the account.

Preserve:

The full profile URL and exact username or handle;
The account’s displayed name, profile photo, biography, creation information if visible, and follower details;
URLs of individual posts, stories, reels, advertisements, listings, or videos;
Screenshots showing the complete screen, including the handle, date, time, and surrounding context;
A screen recording that starts from the platform and navigates to the profile and relevant content;
Complete message threads—not only selected statements;
Original emails with full headers when email was used;
Voice messages, call logs, phone numbers, QR codes, and payment instructions;
Bank, e-wallet, courier, or transaction receipts and reference numbers;
Platform report confirmations and case numbers;
Messages from people who were approached or deceived;
Security alerts, password-reset notices, and account-login records; and
A written chronology stating when you discovered the account and what happened afterward.

Keep the original files. Do not crop, annotate, rename repeatedly, or edit your only copy. Make a separate working copy if you need to highlight something. Record who captured each item, when it was captured, and what device or account was used.

Electronic documents can be admitted in legal proceedings, but their authenticity, integrity, and reliability may need to be established under the Electronic Commerce Act and the Rules on Electronic Evidence. Screenshots are therefore more useful when supported by original files, URLs, testimony, records, and a clear chain of events.

Do not obtain evidence by hacking the fake account, guessing passwords, secretly taking over another person’s device, or pretending to be a victim in a risky confrontation.

Report the account to the platform

Report both the profile and, when applicable, each fraudulent post, message, advertisement, or listing. Use “impersonation,” “pretending to be someone,” “fraud,” or the closest available category.

Official reporting pages include:

Follow the platform’s secure verification process if it requests proof of identity. Send only what is necessary, and do not post an unredacted government ID publicly.

In the report, state briefly:

Who is being impersonated;
The genuine account, website, or public contact details;
How the fake account creates a false impression of authenticity;
What personal information it copied;
Whether it solicited money, credentials, images, or documents;
Whether anyone was deceived or suffered loss; and
The URLs of the most serious content.

Save the submission confirmation. Platform removal is a private moderation action; it is not a criminal judgment and does not replace a police, NBI, bank, or NPC complaint.

File a cybercrime report

Republic Act No. 10175 assigns enforcement responsibility to the NBI and PNP, each of which maintains a specialized cybercrime unit.

NBI Cybercrime Division

You may use the NBI online complaint page or proceed to the Cybercrime Division or an appropriate NBI regional office. The NBI’s Citizen’s Charter for computer-crime victims states that investigative assistance is available to the general public and that no fee is charged for filing the initial complaint or request for investigation. The current NBI directory lists the Cybercrime Division at ccd@nbi.gov.ph.

PNP cybercrime unit

You may report to the PNP Anti-Cybercrime Group or an appropriate regional cybercrime unit. If you initially go to a regular police station, explain that the incident involves an online account and electronic evidence and ask where the specialized cybercrime complaint should be referred.

CICC reporting and coordination

The CICC receives cybercrime reports through Hotline 1326 and 1326@dict.gov.ph. A CICC report can support triage and coordination, but an investigator may still require your personal appearance, identification, complaint-affidavit, or additional documents before a criminal case can proceed.

What to bring or submit

Prepare:

A valid government-issued ID;
Your signed factual narrative and chronology;
A list of the fake account’s URLs and usernames;
Screenshots, recordings, messages, and original electronic files;
Proof that the copied identity belongs to you or the person or organization represented;
Financial records and a computation of loss, if any;
Names and contact details of witnesses or other victims;
Copies of platform, bank, telco, and NPC reports; and
All known information about the suspect, without guessing or presenting rumor as fact.

Ask for a complaint, docket, reference, or acknowledgment number and the name or office handling the report.

Ask about prompt preservation of provider data

Tell the investigator if the account may soon be deleted or if its operator is actively changing usernames and content. Section 13 of Republic Act No. 10175 requires service providers to preserve traffic data and subscriber information relating to communications for at least six months from the transaction. Content data must be preserved for six months from receipt of a lawful preservation order, subject to a possible one-time six-month extension.

That rule is not a guarantee that every platform still holds every item. Prompt reporting gives investigators a better chance to seek preservation and, when legally justified, obtain the appropriate cybercrime warrant or disclosure order. Victims generally cannot compel a platform to disclose confidential subscriber information themselves.

Consider a National Privacy Commission complaint

An NPC complaint may be appropriate if a person, company, platform, employer, lender, school, government office, or other entity processed, disclosed, or used your personal information without a lawful basis or for an unauthorized purpose. The NPC process is separate from a criminal cybercrime investigation.

Under the 2021 NPC Rules of Procedure, as amended, you generally must first:

Inform the personal information controller, processor, or concerned entity of the privacy violation in writing; and
Give it an opportunity to act. If it does not take timely and appropriate action, or does not respond within 15 calendar days after receiving your written notice, you may proceed with the NPC complaint.

Attach proof that the written notice was delivered. The NPC may waive this exhaustion requirement for good cause or a serious violation, including circumstances involving grave and irreparable harm, lack of an adequate remedy, or patently illegal conduct.

A formal complaint ordinarily requires:

A completed, notarized complaints-assisted form or properly verified complaint;
The identities and available contact details of the parties;
A factual narrative and the relief requested;
Supporting documents and witness affidavits, if any;
Correspondence with the respondent;
A certification against forum shopping; and
Payment of the applicable filing fee unless an exemption or waiver applies.

The NPC allows filing personally, by registered mail, by courier, or by electronic mail as authorized by the Commission. Use the NPC complaint instructions and current form and confirm the current submission channel before sending sensitive documents.

Warn others without creating a second legal problem

A short notice on your genuine account can reduce harm:

An unauthorized account using my name and images is contacting people. I do not control that account and am not requesting money, passwords, verification codes, or personal documents. Please do not transact with it. Report any contact to me through my official channel.

Link to your genuine profile or official website if safe. Avoid publicly naming an unverified suspect, publishing private addresses or IDs, threatening retaliation, or encouraging harassment. A mistaken accusation can create privacy, defamation, and safety problems.

Privately notify people who were directly contacted, especially relatives, customers, employees, suppliers, or community members likely to trust the impostor.

Common mistakes to avoid

Reporting the account before saving its exact URL, messages, and transaction details;
Saving only cropped screenshots with no handle or context;
Deleting messages, security alerts, or bank notifications after taking one screenshot;
Arguing with the impostor and warning that law enforcement is seeking records;
Paying an additional “release,” “verification,” or “recovery” fee;
Sharing passwords, one-time PINs, recovery codes, or remote-access control;
Sending IDs to unofficial “support agents” in comments or direct messages;
Assuming a platform takedown automatically identifies or prosecutes the offender;
Assuming a police blotter alone causes a cybercrime case to be filed;
Waiting for more victims before contacting a bank or investigator;
Mass-reporting an account through false reasons instead of the accurate impersonation or fraud category; and
Publicly posting all evidence, which can expose private data, alert the offender, or prejudice an investigation.

When legal help is urgent

Consult a Philippine lawyer promptly when:

Substantial money, business assets, credit, or property is at risk;
The fake account used contracts, government IDs, tax records, signatures, or company documents;
You need help preparing a complaint-affidavit or identifying the proper respondents;
The suspect is known and may destroy evidence or continue contacting victims;
The account is causing serious professional or reputational damage;
Intimate images, sexual demands, threats, stalking, or a child are involved;
Several countries, platforms, or financial institutions are involved;
An agency or platform rejected the report despite continuing harm; or
You are considering a court order, civil damages, or urgent injunctive relief.

You do not generally need a private lawyer merely to make an initial NBI, PNP, CICC, platform, bank, or telco report. Representation becomes more valuable when sworn pleadings, competing claims, significant losses, or urgent court remedies are involved.

Frequently asked questions

Can I report the account if I do not know who created it?

Yes. Provide the profile and content URLs, usernames, messages, payment details, phone numbers, email addresses, and any reliable tracing information. Do not guess the offender’s identity. Subscriber or traffic information may require lawful preservation, a cybercrime warrant, or another legal process.

Can I report an account impersonating someone else?

Platforms generally allow bystander reports. For a criminal or NPC complaint, the person impersonated, an authorized representative, or a qualified parent or guardian will usually be in the best position to prove the identity and lack of consent. Under the NPC rules, a representative normally needs a special power of attorney; a parent representing a minor may use the child’s birth certificate as proof of relationship.

Does the account have to cause financial loss?

No. Computer-related identity theft does not require a minimum financial loss, and the statute provides a lower penalty where no damage has yet occurred. Evidence of actual confusion, reputational injury, unauthorized transactions, or other damage can nevertheless be important.

Is using my photograph enough to prove identity theft?

Not necessarily. Investigators must consider the source and use of the photograph, whether it is identifying information, whether its use was intentional and without right, and the account’s overall purpose and conduct. A copied photo combined with your name, biography, contacts, and deceptive solicitations is materially different from a clearly disclosed commentary or fan account.

Should I wait 15 days before going to the police?

No. The 15-calendar-day rule concerns exhaustion before an ordinary NPC privacy complaint. It does not require you to delay reporting a suspected crime, financial loss, threat, or disappearing electronic evidence to the NBI, PNP, CICC, bank, telco, or platform.

Is there a fixed deadline for reporting a fake account?

There is no single reporting deadline covering every impersonation case. Prescription depends on the specific offense, applicable penalty, when the offense or offender was discovered, and procedural events that may interrupt the period. Platform data may disappear much sooner. Report promptly and obtain case-specific advice instead of relying on the longest possible legal period.

What if the platform already removed the account?

Keep the takedown notice, report number, saved evidence, and original URLs. Removal does not erase possible criminal, civil, privacy, or financial consequences. Inform the investigator that the account has been removed so appropriate records can still be requested if available.

Can I demand the platform reveal the account owner?

You can ask the platform to preserve information and cooperate with authorities, but it will generally not disclose protected subscriber or account information directly to a private complainant. Disclosure may require a warrant, subpoena, court order, or other lawful process.

What if the fake account is operated from abroad?

Report it to the platform and Philippine cybercrime authorities. Republic Act No. 10175 recognizes Philippine jurisdiction in specified circumstances, including when an element occurs in the Philippines or the offense causes damage to a person who was in the Philippines. Cross-border identification and evidence collection may require formal international cooperation and can take longer.

Official references

This article provides general Philippine legal information, not legal advice or a prediction of any case outcome. Procedures and legal conclusions may depend on the documents, platform, offender, location, and resulting harm. Official sources and reporting procedures were checked as of 28 July 2026.