Quick answer

If someone is pretending to be you on social media, preserve the account and messages first, report the profile through the platform’s official impersonation channel, secure your real accounts, and warn people who may be targeted. Report promptly to the PNP or NBI when the account uses your identity without authority for fraud, solicitation, harassment, threats, reputational harm, or other unlawful purposes.

A “fake account” is not automatically a crime. An account using a fictional name, or a clearly identified parody or fan identity, may be lawful. The legal issue becomes stronger when someone intentionally uses another person’s identifying information without right and for an illegitimate purpose.

What Philippine law covers

Section 4(b)(3) of the Cybercrime Prevention Act of 2012 prohibits the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion—without right—of identifying information belonging to another natural or juridical person.

Identifying information may include a person’s name, photograph, contact details, address, date of birth, occupation, government-issued information, business identity, and similar data. Whether a particular profile amounts to computer-related identity theft depends on what information was used, how it was obtained, whether its use was authorized, and the purpose and harm involved.

In Disini v. Secretary of Justice, the Supreme Court upheld the identity-theft provision but explained that the prohibited conduct involves an illegitimate purpose. Merely acquiring or disseminating information that the person made public is not, by itself, identity theft. Using public information to impersonate someone for fraud, harassment, or another unlawful design may nevertheless support liability depending on the complete facts. See the Supreme Court decision.

Upon conviction, computer-related identity theft is generally punishable by prisión mayor, a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. If no damage has yet been caused, the law provides for a penalty one degree lower. The precise charge and penalty remain for prosecutors and courts to determine.

Depending on what the account does, other laws may also apply:

Fraudulent transactions or solicitations may constitute estafa, computer-related fraud, forgery, or offenses under the Anti-Financial Account Scamming Act.
Defamatory posts may raise cyberlibel issues, although falsity, publication, identification, malice, and applicable defenses must be evaluated from the actual statements and context.
Threats, coercion, stalking, hacking, or unauthorized access may constitute separate offenses.
Online impersonation used for sexual, misogynistic, homophobic, transphobic, or sexist harassment may fall under the Safe Spaces Act.
Nonconsensual intimate recordings or images may fall under the Anti-Photo and Video Voyeurism Act.
Sexual material involving a child requires urgent handling under the Anti-OSAEC and Anti-CSAEM Act.
Misuse of personal data may implicate the Data Privacy Act, subject to its scope, lawful-processing grounds, and exemptions.
Serious invasion of privacy, dignity, or peace of mind may also support a civil claim under Articles 19, 20, 21, or 26 of the Civil Code.

These laws can overlap, but not every unpleasant or misleading profile satisfies every offense.

Preserve evidence before reporting or blocking

Fake accounts can disappear or change usernames quickly. Before engaging with, reporting, or blocking the account, preserve:

The exact profile URL, username, display name, user ID if visible, profile photograph, biography, and creation information.
Full-screen screenshots showing the account, posts, comments, messages, and the device’s date and time.
A screen recording showing how you reached the profile and the relevant content.
Links and copies of individual posts, stories, advertisements, marketplace listings, or fundraising pages.
Messages sent by the account, including complete conversation threads rather than selected excerpts.
Email headers, SMS messages, phone numbers, QR codes, payment links, bank or e-wallet details, and transaction receipts.
Notifications from the platform, including report numbers and confirmation emails.
Statements or screenshots from people contacted, deceived, threatened, or asked for money.
Proof that the identity belongs to you, such as your genuine profile, earlier photographs, business registration, or appropriately protected identification.

Keep original files. Do not crop, annotate, enhance, rename, or repeatedly forward the only copy. Store a backup and note who collected each item and when. Screenshots are useful but may require authentication and supporting testimony; they do not automatically prove who operated the account.

Do not obtain evidence by hacking the account, guessing passwords, secretly intercepting private communications, or installing tracking software. Those methods can create separate legal problems and may make evidence unusable.

Report the account to the platform

Use the platform’s impersonation category, not only its general spam option. Report both the profile and any fraudulent, threatening, or abusive content.

Official reporting pages include:

Follow the current on-screen instructions because platform procedures change. A platform may request identification to confirm that you are the person being impersonated. Submit documents only through the platform’s verified website or application, disclose only what the official form requires, and never send identification to an account claiming in a direct message to be “support.”

State the problem precisely: the account is pretending to be you, which identifying information it copied, and whether it is contacting people, requesting money, publishing false statements, or causing another specific harm. Save the report confirmation and follow up through the same official case channel.

A platform report and a criminal complaint serve different purposes. Platform reporting may produce faster restriction or removal, while law enforcement can investigate the operator. A police or NBI complaint does not automatically remove the profile, and platform removal does not identify or prosecute its operator.

File a cybercrime complaint

The Cybercrime Prevention Act assigns cybercrime law enforcement to the PNP and NBI. You may approach:

The PNP Anti-Cybercrime Group, a Regional Anti-Cybercrime Unit, or the nearest police station for referral.
The NBI Cybercrime Division or an NBI regional or district office.
The NBI’s official online complaint page for initial submission.

For walk-in investigative assistance, the NBI Citizen’s Charter states that a complainant completes a complaint sheet, undergoes a preliminary interview, executes a sworn statement or submits a prepared affidavit, and provides supporting documents. Examination of a relevant device may be requested. The published NBI process lists no fee for this investigative assistance.

Bring:

A valid identification document.
A chronological written account stating when you discovered the profile and what it did.
Printed and digital copies of the preserved evidence.
The account URLs and other identifiers in editable text.
Names and contact information of witnesses or recipients.
Records of platform reports, financial reports, and prior demands.
Evidence of actual or threatened harm, including lost money, cancelled transactions, employment consequences, or medical documentation where relevant.

You do not need to know the operator’s real identity before making a report. Identify the person as unknown if necessary and provide every available account, device, phone, email, and payment identifier.

Only the platform and service providers normally possess subscriber details, IP logs, and other nonpublic records. Victims cannot compel their private disclosure. Investigators may seek preservation and disclosure through the procedures and court warrants required by law.

Report quickly. Under Section 13 of the Cybercrime Prevention Act, service providers must preserve traffic data and subscriber information for a minimum of six months from the transaction, while content data is preserved for six months after a lawful preservation order, with a possible one-time extension. These rules do not guarantee that every platform has retained every item, and only authorized law-enforcement action triggers the relevant preservation process.

If money or a financial account is involved

Immediately contact the bank, card issuer, remittance company, or e-wallet through its official fraud channel. Ask it to secure the account, trace or hold the transaction if still possible, and provide a written reference number. Do not wait for the social-media profile to be removed.

Change compromised credentials and review linked accounts, devices, beneficiaries, cards, and transaction limits. Report unauthorized SIM activity to your telecommunications provider.

For a complaint involving a BSP-supervised institution, report first to the institution. If its response is inadequate, the BSP requires the institution’s complaint reference number before escalation through BSP Online Buddy or another official channel. See the BSP’s reporting guidance.

Recovery is not guaranteed. Speed, the receiving institution, the movement of funds, and the available records can affect the outcome.

When a National Privacy Commission complaint may help

An NPC complaint is especially relevant when a company, platform, employer, school, lender, government office, or other personal-information controller improperly collected, disclosed, retained, or used your data, or failed to address your data-subject rights.

The Data Privacy Act does not automatically make the NPC the proper forum for every dispute with an individual fake-account operator. Its application depends on who processed the data, in what capacity, and whether an exemption—such as processing connected with purely personal, family, or household affairs—applies. Criminal misuse can still be reported to the PNP or NBI even when NPC jurisdiction is uncertain.

Before filing, the NPC rules generally require written notice to the responsible entity and proof that it failed to take timely and appropriate action or did not respond within 15 calendar days after receiving the notice. The NPC may waive that requirement for proven good cause or a serious violation, including grave and irreparable harm, lack of an adequate remedy, or patently illegal conduct.

Use the NPC’s current complaint-assisted form, attach the written notice and evidence, have the complaint notarized, and submit it through a channel listed on the NPC formal-complaint page. Check that page immediately before filing for current addresses, fees, forms, and submission instructions.

Secure your identity and limit further harm

After preserving evidence:

Change the passwords of your genuine social-media and primary email accounts.
Sign out unknown sessions and remove unfamiliar recovery addresses, phone numbers, applications, and devices.
Enable multi-factor authentication, preferably through an authenticator app or security key where available.
Secure the email and mobile number used to recover your accounts.
Review privacy settings and remove publicly exposed identification numbers, signatures, addresses, and documents.
Inform family, friends, clients, and coworkers through a trusted channel that the account is fake.
If appropriate, post a short warning from your genuine account with the fake profile’s exact username, without accusing an unverified person of operating it.
Monitor financial accounts, credit applications, government-service accounts, and mobile services for unauthorized activity.

Do not pay the impersonator, negotiate for deletion, threaten retaliation, or publicly post an alleged operator’s private information. A mistaken accusation can harm an innocent person and may expose you to legal claims.

When help is urgent

Contact emergency services or the nearest police station immediately if there is a credible threat of violence, kidnapping, extortion, stalking, or imminent physical danger. Call 911 when emergency intervention is needed.

If intimate material is being distributed, preserve the URL and report it without forwarding the material unnecessarily. If a child is involved, do not download, duplicate, or circulate sexual images merely to “collect evidence.” Preserve links and account details and contact law enforcement promptly. Child-protection concerns may also be reported through the government’s MAKABATA Helpline 1383.

Seek a lawyer promptly when the account has caused substantial financial loss, obtained credit or contracts in your name, published damaging allegations, targeted a business or professional license, or continues operating after reports. Counsel can assess criminal complaints, privacy remedies, civil damages, injunctive relief, and urgent evidence-preservation requests.

Common mistakes to avoid

Reporting or blocking before saving the exact URL and evidence.
Saving only a cropped screenshot with no username, date, context, or link.
Assuming that every fake account automatically constitutes identity theft.
Treating a platform’s removal decision as proof of a crime.
Expecting police to obtain account records without lawful process.
Sending identification documents to unofficial “support” accounts.
Altering messages or creating a staged conversation to strengthen the complaint.
Publicly naming a suspected operator without reliable evidence.
Waiting for more victims while logs, posts, and money continue to disappear.
Reposting harmful or intimate material in an attempt to warn others.

Frequently asked questions

Can I report a fake account if I do not know who created it?

Yes. Report the account as operated by an unknown person and supply its exact URL, username, messages, connected phone numbers, payment information, and other identifiers. Determining the operator is part of the investigation.

Is using my photograph enough to prove identity theft?

Not necessarily. Liability depends on the unauthorized conduct, the purpose, and the surrounding facts. A copied photograph may support a complaint, particularly when paired with your name, biography, messages, solicitations, or other conduct showing impersonation.

Are screenshots enough for a case?

They are useful evidence, but not automatically conclusive. Preserve the original device, complete conversation, URLs, metadata, and testimony from recipients. Investigators may request additional records or forensic examination.

Can I demand the account holder’s name or IP address from the platform?

You can ask the platform to preserve records, but it will ordinarily disclose nonpublic subscriber or traffic information only through a valid legal process. File promptly so investigators can consider the appropriate preservation and disclosure steps.

Can a friend report the impersonating account?

A friend can generally use the platform’s reporting tools. For a formal criminal or privacy complaint, the person impersonated—or a properly authorized representative—will usually be in the best position to provide identification, a sworn account, and proof of harm.

What if the fake account is operated from another country?

Report it locally if you are in the Philippines or suffered harm here. Philippine jurisdiction and international cooperation depend on where the acts, systems, offender, and damage are located. Cross-border cases may take longer and require assistance from foreign providers or authorities.

Should I delete my real account?

Usually not. Secure it and use it to establish which account is genuine. Deletion may remove useful records or make it harder to warn contacts. If remaining online creates a safety risk, preserve the evidence first and ask the platform or investigators about the safest next step.

This article provides general Philippine legal information, not legal advice or a prediction of any case outcome. Charges, remedies, jurisdiction, and evidence requirements depend on the complete facts and documents. Laws and official procedures were checked against available primary and government sources as of 27 August 2026.