Quick answer
If someone creates a fake social media account using your name, photographs, business identity, contact details, or other identifying information, preserve the evidence before the account disappears, report the impersonating account to the platform, secure your own accounts, and report the incident to Philippine cybercrime authorities if the identity is being used to deceive, scam, threaten, harass, obtain information, or cause other harm.
Under Section 4(b)(3) of the Cybercrime Prevention Act of 2012 (Republic Act No. 10175), computer-related identity theft includes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of another person's or juridical entity's identifying information without right. The Supreme Court upheld this offense in Disini v. Secretary of Justice and explained that the prohibited conduct involves identity information taken or used for an illegitimate purpose; merely acquiring or disseminating information that a person has made public is not automatically identity theft. (Lawphil)
For criminal investigation, the principal law-enforcement agencies under RA 10175 are the Philippine National Police (PNP) and National Bureau of Investigation (NBI). The Cybercrime Investigation and Coordinating Center (CICC) also operates government reporting and coordination channels, including Hotline 1326. (Lawphil)
A platform report and a criminal complaint are different. Reporting the fake account to Facebook, Instagram, TikTok, or another platform may result in restriction or removal, but it does not by itself start a Philippine criminal case.
First, preserve the fake account before reporting it
Do this before blocking the account or asking friends to mass-report it. An impersonator may delete the profile, change the username, remove posts, or erase messages once alerted.
Preserve enough information to show not merely that a fake account existed, but what identity information it used, what it represented itself to be, what it did, who saw it, and what harm resulted.
| Evidence to preserve | What to capture |
|---|---|
| Fake profile | Full profile page, profile photo, cover photo, username, display name, bio, follower/friend information, and visible creation/account information |
| Exact account location | Full profile URL or account link, not merely the displayed username |
| Posts and stories | Full screenshots or screen recordings showing the content, account name, date, time, and surrounding context |
| Messages | Complete conversations rather than isolated screenshots; preserve dates, timestamps, attachments, voice messages, and payment requests |
| Your genuine identity | Your real account, photographs, business records, identification documents where appropriate, or other records showing that the copied identity belongs to you |
| Scam evidence | Bank or e-wallet details, QR codes, payment instructions, transaction references, receipts, and names given to potential victims |
| Witness evidence | Messages from relatives, clients, customers, employees, or friends who were contacted or deceived |
| Platform reports | Confirmation emails, support-ticket numbers, screenshots of reports, takedown notices, and appeals |
| Harm | Proof of money lost, fraudulent transactions, reputational consequences, threats, account lockouts, or expenses incurred responding to the impersonation |
Keep the original electronic files whenever possible. Avoid editing or annotating the only copy of a screenshot, photograph, audio file, or video. Create working copies instead.
If the impersonator contacted other people, ask them to preserve their own complete conversations. Their original messages may later be more useful than a screenshot forwarded to you.
Report the account to the social media platform
Platform reporting is normally the fastest route to seek removal or restriction of the fake account. Report the profile itself for impersonation and separately report scam posts, threats, fraudulent advertisements, or other violating content when the platform provides separate reporting options.
For Facebook, Meta states that profiles and Pages pretending to be another person violate its rules. Facebook permits reports against impersonating profiles or Pages and provides a reporting route even when the victim does not have, or cannot access, a Facebook account. (Facebook)
For Instagram, Meta provides an impersonation-reporting process. Its guidance states that when someone is impersonating a person, that person—or an authorized representative in circumstances recognized by the platform—should make the report. (Facebook)
TikTok likewise provides a specific impersonation-reporting process through its app, browser, and online forms. Its current guidance directs users to report the account as “Pretending to Be Someone” and may require identification for an impersonation claim.
Do not submit more personal information than the official platform requires. Fake “Meta support,” “account recovery,” and “verification” links are themselves commonly used for phishing.
When a fake account may amount to computer-related identity theft
A fake profile is not automatically a criminal conviction for identity theft. The facts still have to satisfy the statutory elements and be proved with admissible evidence.
Section 4(b)(3) of RA 10175 covers intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of another person's identifying information without right. Section 8 generally punishes computer-related offenses under Section 4(b) with prision mayor, a fine of at least ₱200,000 up to an amount commensurate with the damage incurred, or both. The identity-theft provision further states that if no damage has yet been caused, the penalty imposable is one degree lower. The precise criminal liability and penalty remain matters for the prosecutor and court based on the proven facts. (Lawphil)
In Disini v. Secretary of Justice, the Supreme Court upheld the identity-theft provision. It explained that the prohibited theft of identity information involves an illegitimate purpose and recognized that ordinary use of information made public by the person himself or herself is not, by that fact alone, identity theft. (Judiciary eLibrary)
This distinction matters. An account that transparently identifies itself as commentary, parody, or a fan account raises different issues from an account that copies your identity and pretends actually to be you in order to obtain money, communicate with your contacts, open accounts, obtain credentials, damage your reputation, or otherwise deceive people.
Other crimes may apply depending on what the fake account does
Identity theft is often only one part of the incident.
If the impersonator uses the fake account to obtain money through deceit, fraud-related offenses may also need to be evaluated. If the impersonator obtains banking or e-wallet credentials by pretending to represent another person or institution, the Anti-Financial Account Scamming Act, Republic Act No. 12010, specifically addresses social-engineering schemes involving sensitive financial identifying information. It also penalizes specified uses of another person's identity or identification documents in connection with financial accounts. (Lawphil)
If the account publishes defamatory statements, makes threats, demands money, accesses your real account without authority, fabricates electronic records, or unlawfully discloses personal information, other provisions of RA 10175, the Revised Penal Code, the Data Privacy Act, or other special laws may become relevant. The correct offense depends on the actual conduct and evidence; it should not be assumed merely because the activity happened online.
Report the incident to the PNP Anti-Cybercrime Group
RA 10175 expressly designates the PNP and NBI as the law-enforcement authorities responsible for cybercrime enforcement. (Lawphil)
For a fake account being used for fraud, threats, identity theft, account compromise, or another apparent cybercrime, you may report the incident to the PNP Anti-Cybercrime Group (PNP-ACG) or the appropriate regional anti-cybercrime unit.
Government guidance continues to direct cybercrime complainants to the PNP-ACG and its official reporting channels. The National Telecommunications Commission's current government guidance also lists the PNP-ACG Complaint Action Center for cybercrime reports. (FOI Philippines)
Bring your identification, chronology, URLs, screenshots, messages, transaction evidence, witness information, and original electronic evidence when available. A preliminary online report, telephone report, or email is not necessarily the same as completing the sworn documentation required for a criminal investigation. Follow the investigator's instructions about personal appearance, affidavits, devices, and additional evidence.
You may also file with the NBI Cybercrime Division
The NBI's current Citizen's Charter specifically provides investigative assistance for victims of computer crimes through its Cybercrime Division.
Its published procedure states that a complainant may proceed to the Cybercrime Division to file a complaint or request an investigation. The process includes completing a complaint sheet, undergoing a preliminary interview and initial investigation, and—where appropriate—executing sworn statements or submitting prepared affidavits and allowing examination of devices relevant to the investigation. The NBI lists no fee for this frontline investigative assistance. (National Bureau of Investigation)
This route may be particularly useful where the fake identity is connected with several accounts, substantial documentary or digital evidence, organized fraud, or activity involving persons or services outside the victim's locality.
CICC can be used for cybercrime reporting and coordination
The Cybercrime Investigation and Coordinating Center provides another government reporting channel. Current government guidance directs the public to the CICC reporting portal and Hotline 1326 for online scams and cybercrime concerns. (FOI Philippines)
The CICC can be useful for initial reporting and inter-agency coordination, particularly when a fake account is actively soliciting money or operating as part of an online scam.
For purposes of an actual criminal investigation under RA 10175, however, remember that the statute specifically identifies the PNP and NBI as the law-enforcement authorities. A CICC report should therefore not be assumed to replace any sworn complaint or evidence submission that the investigating PNP or NBI unit later requires. (Lawphil)
Ask about preserving platform records
Identifying the person behind a fake profile frequently requires information the victim cannot obtain personally, such as subscriber information, login records, traffic data, or other records held by a service provider.
RA 10175 contains mechanisms for preservation and lawful disclosure of computer data. It also provides that disclosure of specified computer data for an officially docketed investigation requires the legal process prescribed by law. (Lawphil)
For that reason, early reporting can matter even if the fake profile has already been removed. Tell the investigator if the account is disappearing, changing usernames, deleting conversations, or actively defrauding people. Ask whether prompt preservation measures are appropriate.
Do not attempt to obtain another person's private account information through hacking, password guessing, phishing, unauthorized databases, or a supposed “hacker for hire.” That can create additional legal problems and may compromise the investigation.
If money was sent, contact the bank or e-wallet immediately
Do not wait for the platform to remove the fake account before reporting a fraudulent financial transaction.
RA 12010, the Anti-Financial Account Scamming Act, establishes rules dealing with disputed transactions, social-engineering schemes, and financial accounts used in fraudulent activity. Financial institutions are required to maintain fraud-management safeguards, and the law provides for coordinated verification of disputed transactions after a complaint or other triggering information is received. (Lawphil)
Report the transaction first through the bank's or e-wallet's official fraud or consumer-assistance channel and obtain a reference number. Give the institution the exact transaction reference, date, time, amount, receiving account, and an explanation that the transaction resulted from impersonation or fraud.
If your dispute concerns the response of a BSP-supervised financial institution, current Bangko Sentral ng Pilipinas guidance requires consumers first to use the institution's own Financial Consumer Protection Assistance Mechanism or customer-service channel. An unresolved complaint may then be escalated through the BSP Consumer Assistance Mechanism.
Reporting promptly does not guarantee recovery. It improves the chance that investigators and institutions can act while records and funds remain traceable.
When the National Privacy Commission may also be relevant
A fake social media account can involve both cybercrime and a personal-data violation, but those are different legal tracks.
The Data Privacy Act of 2012, Republic Act No. 10173, regulates processing of personal information and penalizes specified forms of unauthorized processing and other unlawful handling of personal data. Whether the Act applies to a particular impersonator, platform, company, employee, or other respondent depends on the facts and statutory coverage. (Lawphil)
If you intend to pursue a formal complaint with the National Privacy Commission, follow the NPC's own procedure rather than treating a police complaint as a substitute.
Under the 2021 NPC Rules of Procedure, a complainant ordinarily must first inform the personal information controller, processor, or concerned entity in writing of the alleged violation and allow it an opportunity to act. The requirement is generally satisfied when the entity does not take timely or appropriate action or gives no response within 15 calendar days of receiving the written notice. The NPC may waive these requirements for good cause or in serious cases, including circumstances involving grave and irreparable harm, absence of an adequate remedy, or patently illegal action.
The NPC's current filing page instructs complainants to use its downloadable Complaint-Affidavit, complete it, have it notarized, and submit it in person, by courier, or by scanned email through the channel identified on the NPC website. Its currently linked form also instructs complainants to attach supporting evidence and provide valid government-issued identification. (National Privacy Commission)
For a rapidly operating anonymous scammer, the NPC process should not delay an urgent report to law enforcement, the platform, or a financial institution.
Secure your real accounts at the same time
If the impersonator appears to know private information, determine whether the problem is merely a copied public profile or an actual account compromise.
Change compromised or reused passwords from a trusted device, sign out unknown sessions where the service allows it, secure the email account connected to your social-media profiles, enable multi-factor authentication, and review recovery email addresses and telephone numbers.
If someone actually gained access to your genuine Instagram account, Meta provides a separate hacked-account recovery process. (Facebook)
Also warn people who are realistically at risk of being deceived. A short factual notice identifying your genuine account and stating that you are not requesting money may prevent additional victims. Avoid repeating the impersonator's defamatory statements or publishing unnecessary personal information about an unverified suspect.
Do not assume the photograph identifies the offender
A frequent mistake is to conclude that the person whose photograph appears in the fake profile must be the scammer.
The photograph itself may also have been stolen. The account name may be fictitious, the telephone number may be disposable or registered to another person, and the receiving financial account may belong to a money mule.
Give investigators the evidence and distinguish carefully between what you personally know and what you merely suspect. Publicly accusing the wrong person can create additional legal and reputational problems.
Common mistakes that can weaken an identity-theft complaint
One of the most damaging mistakes is reporting or blocking the fake account before recording its URL, username, posts, messages, and payment instructions. Another is keeping only cropped screenshots that do not show the account, date, time, or context.
Victims also sometimes delete conversations after taking screenshots, replace the original phone before preserving the data, or communicate with the impersonator in ways that alter or contaminate the evidence.
Another mistake is assuming that a Facebook or TikTok report automatically creates a police case. Platform moderation, criminal investigation, a bank dispute, and an NPC privacy proceeding are separate processes.
Do not pay people who claim they can secretly identify the account holder, obtain an IP address, recover stolen money, or “hack back” into the fake account. Apart from the risk of a second scam, unauthorized access can itself be unlawful.
Finally, do not exaggerate. State the exact amount lost, exact words used, dates, accounts involved, and what each witness actually observed. A precise complaint is more useful than one filled with legal labels that the evidence may not support.
When you should act urgently
Treat the matter as urgent when the fake account is presently asking your contacts for money, has obtained access to your real email or social-media account, is using copies of government IDs or financial credentials, is publishing private information that creates a safety risk, is threatening or extorting you, or is continuing to deceive additional victims.
If funds have just been transferred, contact the financial institution immediately while separately reporting the incident to the appropriate cybercrime authority.
If there is an immediate threat of physical harm, contact emergency services or the nearest police station without waiting for a platform response.
What happens after you report?
The agency may first determine whether the facts indicate identity theft, fraud, illegal access, threats, falsification, a privacy offense, or another crime.
Investigators may request a sworn statement, identification documents, original devices, supplemental affidavits, bank or e-wallet records, witness statements, and clearer electronic copies. They may also pursue the legal process required to obtain information from service providers.
The NBI's published Cybercrime Division procedure specifically contemplates preliminary interviewing, sworn statements or affidavits, supporting documents, and examination of devices relevant to the investigation. (National Bureau of Investigation)
A report is not proof of guilt, and account removal is not a criminal conviction. Identification of an anonymous operator may require provider records, financial tracing, telecommunications information, multiple witnesses, or international cooperation.
What if the person operating the fake account is overseas?
Being outside the Philippines does not automatically prevent Philippine cybercrime jurisdiction.
Section 21 of RA 10175 provides jurisdiction in specified circumstances, including where an element of the offense occurs in the Philippines, a relevant computer system is wholly or partly situated here, or the offense causes damage to a person who was in the Philippines when it was committed. The Act also provides a framework for international cooperation in cybercrime investigations. (Lawphil)
Whether a particular overseas case satisfies those requirements depends on its facts, and obtaining foreign platform or subscriber information may take additional time and legal process.
FAQ
Is using my photograph in a fake Facebook account automatically identity theft?
Not necessarily. The legal question is not simply whether your photograph or name appeared. RA 10175 requires intentional acquisition or use of another person's identifying information without right, and Disini explains the importance of an illegitimate purpose. An account deliberately pretending to be you to deceive other people presents a substantially different case from transparent commentary, parody, or ordinary reference to information you made public. (Judiciary eLibrary)
Can I report a fake account even if nobody has lost money yet?
Yes. Financial loss is not required before you preserve evidence or report suspicious impersonation. RA 10175 expressly addresses computer-related identity theft even where damage has not yet occurred, although the statute provides a different penalty treatment in that situation. (Lawphil)
Should I report to Facebook first or to the police first?
Preserve the evidence first. After that, the two reports can proceed in parallel. Use the platform report to seek takedown and use the PNP or NBI when criminal investigation or identification of the operator is necessary. If the fake account is actively scamming people or sending threats, do not wait for the platform's decision before contacting authorities.
Can the police force Facebook or another platform to disclose who owns the account?
Investigators cannot simply obtain private platform records because a victim asks for them. Access to non-public computer data is governed by RA 10175 and applicable court procedures. Law-enforcement authorities may use preservation and lawful disclosure mechanisms when the legal requirements are met. (Lawphil)
Is a screenshot enough?
It may be useful evidence, but a stronger case usually includes the profile URL, username, complete conversations, timestamps, original files, transaction records, witness evidence, platform-report records, and proof connecting the copied identity to the victim. The NBI's published procedure contemplates collection of supporting records, sworn statements, and examination of relevant devices when necessary. (National Bureau of Investigation)
Do I need to know the real name of the impersonator before reporting?
No. Anonymous online offenders are a central reason to involve cybercrime investigators. Give authorities every available identifier rather than inventing a name: profile URLs, usernames, phone numbers, email addresses, receiving accounts, transaction references, QR codes, and complete communications.
Do I need a lawyer to make the initial report?
Generally, no. The NBI's Cybercrime Division service is available to the general public and its published procedure includes assistance with the complaint sheet and initial interview. (National Bureau of Investigation) A lawyer may become useful when substantial money is involved, several offenses or jurisdictions overlap, a formal prosecutor's complaint is being prepared, urgent court relief is considered, or the identity/data issues are legally complex.
Can I file both a criminal complaint and an NPC privacy complaint?
Potentially, yes, because they address different legal issues. But an NPC complaint has its own procedural requirements, including the general prior-written-notice rule, required form, supporting evidence, verification, certification against forum shopping, and filing procedure. You must also disclose related proceedings as required by NPC rules.
Official sources
| Source | Official link |
|---|---|
| Cybercrime Prevention Act of 2012, RA 10175 | DOJ Office of Cybercrime – RA 10175 |
| Supreme Court decision in Disini v. Secretary of Justice | Supreme Court E-Library – G.R. No. 203335 et al. |
| NBI procedure for victims of computer crimes | NBI Cybercrime Division Citizen's Charter |
| PNP Anti-Cybercrime Group | PNP-ACG official website |
| CICC cybercrime reporting | CICC official website |
| Data Privacy Act of 2012, RA 10173 | National Privacy Commission – Data Privacy Act |
| NPC formal complaint procedure | National Privacy Commission – Filing a Complaint |
| Anti-Financial Account Scamming Act, RA 12010 | Lawphil – RA 12010 |
| Facebook impersonation reporting | Facebook Help Center – Report an impersonating profile or Page |
| Instagram impersonation guidance | Instagram Help Center – Impersonation |
| TikTok impersonation reporting | TikTok Support – Report an impersonation account |
General-information disclaimer
This article provides general Philippine legal information and is not a substitute for advice based on the specific evidence, parties, platform records, transactions, and procedural posture of a particular case. Whether a fake account constitutes computer-related identity theft, fraud, a Data Privacy Act violation, defamation, threats, illegal access, or another offense depends on the proven facts and applicable legal elements. Government and platform reporting procedures can also change, so confirm the current instructions on the official websites before filing.
Sources and procedures checked as of 23 August 2026.