Quick answer

If someone is using your name, photos, personal details, or organization’s identity through a fake social media account, first preserve the evidence, secure any affected accounts or money, report the impersonating account to the platform, and then report suspected criminal conduct to the Philippine National Police Anti-Cybercrime Group (PNP-ACG) or the National Bureau of Investigation Cybercrime Division (NBI-CCD).

A fake account is not automatically a crime merely because it is anonymous, uses a similar name, or is satire. It may amount to computer-related identity theft when another person’s identifying information is intentionally acquired or used without right for an illegitimate purpose. Fraud, threats, harassment, defamatory posts, sexual impersonation, or the use of stolen personal data may support additional charges depending on the evidence.

Act promptly. Account details and platform records can change or disappear, and only authorized investigators—not private individuals—can pursue court-ordered disclosure of protected subscriber or traffic data.

What Philippine law covers

Computer-related identity theft

Section 4(b)(3) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, prohibits the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another natural or juridical person without right.

Identifying information may include a person’s name, address, contact details, birth information, occupation, and similar data. In Disini v. Secretary of Justice, the Supreme Court explained that identity information must be taken or used for an illegitimate purpose; acquiring and disseminating information that the user personally made public is not, by itself, identity theft. Read the Supreme Court decision.

Whether a fake account qualifies therefore depends on what it uses and does. Relevant facts include whether the account:

Uses your name, photograph, contact information, identification document, voice, business identity, or other identifying data without permission;
Pretends to be you when communicating with relatives, customers, employers, or the public;
Solicits money, obtains goods, opens accounts, or collects information in your name;
Publishes statements or sends messages that falsely appear to come from you;
Is used to threaten, stalk, sexually harass, shame, defraud, or damage your reputation; or
Is clearly identified as parody, commentary, or a fan account rather than presented deceptively as your authentic account.

For computer-related identity theft, Republic Act No. 10175 prescribes prision mayor or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. The law provides for a penalty one degree lower if no damage has yet been caused. The actual charge and sentence remain matters for prosecutors and courts.

Other laws may also apply

The same conduct may raise other offenses, depending on the facts:

Fraudulent requests for money or property may involve estafa, computer-related fraud, or other financial offenses.
Defamatory posts may raise libel or cyberlibel issues, but offensiveness alone does not establish every legal element.
Threats, coercion, extortion, stalking, or unauthorized access to an existing account may constitute separate offenses.
Unauthorized processing or misuse of personal information may fall under the Data Privacy Act of 2012.
Sexualized impersonation, cyberstalking, gender-based threats, or the posting of lies to harm a victim’s reputation may fall under the Safe Spaces Act. That law expressly includes certain forms of online identity theft and impersonation within gender-based online sexual harassment.
Non-consensual publication of intimate recordings may be covered by the Anti-Photo and Video Voyeurism Act.
If a child is being sexually exploited, groomed, impersonated for sexual purposes, or depicted in sexual material, the Anti-OSAEC and Anti-CSAEM Act may apply.

Do not select charges solely from online descriptions. Investigators and prosecutors must assess the account, communications, harm, identity of the operator, and admissible evidence.

What to do immediately

1. Preserve the account before reporting or blocking it

Capture evidence before the account is renamed, restricted, or removed. Preserve:

The full profile or page URL, not just the displayed username;
The current and any previous usernames or display names;
Screenshots showing the whole screen, including the account name, date and time, URL where visible, posts, captions, comments, and profile details;
A screen recording that opens the profile and relevant posts or conversations;
Direct messages, emails, text messages, voice notes, and call logs;
Original photos, videos, or files sent by the account;
Names and contact details of people who received messages or sent money;
Platform report confirmations, reference numbers, and responses;
A dated timeline explaining when the account was discovered and what it did; and
Proof of harm, such as transaction records, receipts, bank alerts, customer complaints, employer communications, or threats.

Keep the original files and device. Do not crop, annotate, filter, rename, or repeatedly re-save the only copy. Make a separate working copy if you need to highlight something.

Electronic documents can be used as evidence, but their integrity and authenticity must be established. The Rules on Electronic Evidence require proper authentication, so screenshots are more useful when supported by original files, the device on which they were viewed, platform exports, and testimony from someone with personal knowledge.

2. Secure your real accounts

If your genuine account may have been accessed—not merely copied—treat it as an account takeover:

Change the password from a trusted device;
Use a new, unique password that is not used elsewhere;
Turn on multi-factor authentication;
Review active sessions and sign out unfamiliar devices;
Check whether the recovery email address or mobile number was changed;
Remove unknown linked apps;
Secure the connected email account first; and
Contact your mobile provider immediately if your SIM suddenly stopped working or you suspect a SIM swap.

Use only the platform’s official account-recovery page. Do not pay anyone claiming they can “hack back,” trace an IP address, or recover an account through an insider.

3. Protect money and identity documents

If the fake account requested money, obtained banking details, or used an identification document:

Contact the bank, e-wallet, card issuer, or other institution through its official fraud channel immediately;
Ask it to secure affected accounts, review unauthorized transactions, and record the impersonation report;
Tell anyone who transferred funds to contact their own financial institution without delay;
Notify the issuing agency if a government ID, passport, driver’s licence, or other credential was actually lost, altered, or fraudulently used;
Monitor accounts and statements for unfamiliar activity; and
Keep every case number, email, acknowledgment, and transaction reference.

A police blotter or affidavit of loss may be useful in particular cases, but it is not a universal substitute for a cybercrime complaint and should not state that an original document was lost if only a digital copy was misused.

4. Warn contacts carefully

A short factual warning can reduce further harm: identify your authentic account, provide the fake account’s link, and tell people not to send money or personal information.

Avoid publicly naming a suspected operator unless the identity is established and publication is legally justified. Do not repost intimate images, identification documents, threats, or unnecessary personal information. A warning should prevent harm, not amplify the fake content.

Report the account to the social media platform

Use the platform’s impersonation category, not only “spam.” Report both the account and any specific harmful post or message. If the platform asks for proof of identity, submit it only through the official form and follow its instructions.

Official reporting resources include:

Save the report confirmation and follow-up messages. If the first report is rejected, appeal through the platform’s official process and explain precisely how the account is deceiving people. Ask affected contacts to submit truthful, individual reports; coordinated false reporting may weaken your position.

A platform report seeks restriction or removal under platform rules. It does not automatically start a Philippine criminal investigation, identify the operator, recover money, or preserve evidence indefinitely.

Report suspected crime to Philippine authorities

PNP Anti-Cybercrime Group

Republic Act No. 10175 designates the PNP and NBI as the principal law-enforcement authorities for cybercrime. You may approach the PNP-ACG or the appropriate Regional Anti-Cybercrime Unit. Use contact details published on the PNP-ACG’s official page because regional assignments and numbers can change.

Bring:

A government-issued ID;
Your incident timeline;
Printed and electronic copies of the evidence;
The original device if requested for examination;
Transaction records if money was involved;
Witness details; and
Any platform, bank, e-wallet, telco, or prior police report numbers.

Expect to describe the incident in detail and, if pursuing a formal case, execute a complaint-affidavit or sworn statement. Ask for the complaint or reference number and the investigator’s official contact details.

NBI Cybercrime Division

You may also request investigation by the NBI Cybercrime Division. The NBI’s current Citizens’ Charter states that a complainant proceeds to the division, undergoes an initial interview, completes a sworn complaint sheet or statement, and submits supporting evidence. The service itself is listed as having no fee. See the NBI procedure for victims of computer crimes.

The NBI lists ccd@nbi.gov.ph as the Cybercrime Division’s official email address on its Divisions and Services directory. An email inquiry or initial report may still be followed by a request for personal appearance, identity verification, sworn statements, or device examination.

CICC and Hotline 1326

For scams, fraudulent impersonation, phishing, and related cybercrime reports, the DICT’s inter-agency response channel may be reached through Hotline 1326, 1326@dict.gov.ph, or the CICC’s online reporting page. This channel can assist with reporting and agency coordination; criminal investigation and prosecution remain with the appropriate law-enforcement and prosecution offices.

If there is immediate danger

Call 911 or go to the nearest police station if there is an active threat of violence, stalking at your home or workplace, kidnapping, extortion requiring immediate action, or another emergency.

For violence or sexual exploitation involving a child, also contact the local social welfare and development office or the DSWD’s MAKABATA Helpline 1383. Do not circulate suspected child sexual abuse or exploitation material when seeking help; preserve the device and report it directly to authorities.

Can authorities require the platform to identify the account owner?

Potentially, but not simply on a victim’s private request.

Under Republic Act No. 10175 and the Supreme Court’s cybercrime-warrant rules, protected subscriber information, traffic data, content, or stored computer data generally requires lawful investigative process and, where required, a court warrant. Disclosure under Section 14 is tied to a valid complaint officially docketed and assigned for investigation.

The law also provides preservation periods for certain computer data and permits law enforcement to issue preservation orders. That is one reason to file promptly. A platform may have incomplete records, foreign operations, changing retention practices, or data that does not conclusively identify the person who operated the account. Tracing is therefore possible in some cases but never automatic or guaranteed.

Do not attempt to access the fake account, install tracking malware, publish an alleged IP address, or impersonate someone else to obtain private data. Such conduct can create separate legal and evidentiary problems.

When a National Privacy Commission complaint may help

Consider the National Privacy Commission when the incident involves unauthorized collection, use, disclosure, or other processing of your personal information—not merely an unpleasant or critical post.

Under the 2021 NPC Rules of Procedure, as amended, a data subject or an authorized representative may file. Ordinarily, the complainant must first notify the personal information controller, processor, or concerned entity in writing and allow it to act. If it does not take timely and appropriate action or does not respond within 15 calendar days from receipt, a complaint may be filed. The NPC may waive this requirement for good cause or serious cases, including circumstances involving grave and irreparable harm, no adequate remedy, or patently illegal conduct.

A formal NPC complaint generally requires:

A notarized complaint-assisted form or properly verified complaint;
A clear factual narration;
The respondent’s identity or available information that may lead to identification;
Supporting documents and witness affidavits, if any;
Copies of correspondence showing that the concern was first raised with the respondent;
The relief requested;
A certification against forum shopping; and
Payment of the applicable filing fee, unless an exemption or waiver applies.

Consult the NPC’s current filing instructions and forms before submitting. Complaints may be rejected or dismissed without prejudice if they are deficient, do not involve a privacy violation, lack supporting information, or the parties cannot be identified or traced despite diligent efforts.

An NPC complaint is different from a PNP or NBI criminal complaint. Depending on the case, it may result in data-protection orders, a ban on processing, indemnity, compliance action, or a recommendation for prosecution. It is not a substitute for emergency police assistance.

Common mistakes to avoid

Reporting the account before saving its URL, content, and messages;
Keeping only cropped screenshots with no visible account details or context;
Deleting chats, resetting the device, or closing affected accounts before preserving data;
Paying the impersonator, recovery scammers, or supposed “tracers”;
Using unofficial forms or sending identification documents through direct messages;
Publicly accusing a person based only on writing style, mutual friends, or an unverified IP claim;
Asking friends to harass, threaten, or entrap the suspected operator;
Treating a platform report as a formal criminal complaint;
Waiting for financial loss before contacting law enforcement;
Filing an NPC complaint without first documenting the written notice and 15-day response period, unless a waiver is justified; or
Exaggerating facts in a complaint. Separate what you personally observed from what another person told you.

When legal help is urgent

Consult a Philippine lawyer promptly when:

The account is demanding money or threatening physical or sexual harm;
Intimate images, fabricated sexual material, or a child’s identity is involved;
Significant money, business transactions, employment, or professional reputation is at risk;
The operator appears to be abroad or several accounts and victims are involved;
You need an urgent court order, preservation request, or coordinated action against several platforms;
A platform, bank, employer, or government agency refuses to correct records despite clear proof;
You are considering civil damages or a privacy complaint; or
You received a subpoena, counter-complaint, demand letter, or notice from a prosecutor.

You do not need a private lawyer merely to make an initial report to the PNP, NBI, CICC, or a platform. Legal assistance becomes especially useful when preparing affidavits, identifying the proper respondents and offenses, or avoiding inconsistent statements across several proceedings.

Frequently asked questions

Can I report a fake account if I do not know who created it?

Yes. Give investigators the profile URL, messages, transaction details, witness information, possible connections, and every available lead. State clearly that the operator’s identity is unknown. Do not name a suspect as a fact without reliable evidence.

Can I still report an account that has already been deleted?

Yes. Submit the preserved URL, screenshots, recordings, messages, report confirmations, and witness statements. Investigation may be harder if little evidence remains, but deletion does not necessarily erase all platform or recipient records.

Is using my photograph automatically identity theft?

Not always. Context, authority, intent, and use matter. A public repost, news report, fan page, misleading impersonation, commercial misuse, and fraudulent solicitation present different legal questions. A platform may remove content under its rules even when criminal liability has not been established.

Must I suffer financial loss before reporting?

No. Identity misuse can cause reputational, emotional, privacy, safety, or business harm. Republic Act No. 10175 also expressly contemplates cases in which no damage has yet occurred, although the applicable penalty may be lower.

Should I block the account?

Preserve the evidence first, then block it if continued contact is unsafe or distressing. Blocking may protect you but does not preserve the account’s data or begin an investigation.

Can I demand the account’s IP address from the platform?

You may ask the platform to preserve or review the account, but it will generally not disclose protected subscriber or traffic information directly to a private complainant. Investigators must use the appropriate legal process.

Is there a deadline for reporting?

Republic Act No. 10175 does not impose a single short deadline for making an initial police report, but different offenses have different prescriptive periods. Do not wait for those periods. Digital evidence and service-provider records may disappear much sooner. For an NPC complaint, also observe the written-notice and 15-calendar-day response rule unless a waiver is justified.

Can I use one complaint for both takedown and prosecution?

No single report guarantees both. Submit the platform report for takedown, a PNP or NBI complaint for criminal investigation, and—when personal-data processing is involved—a properly prepared NPC complaint. Keep the facts and supporting records consistent in every filing.

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. The proper remedy depends on the account’s content, purpose, evidence, parties, and resulting harm. Laws, procedures, and official reporting channels were checked against primary and official sources as of 3 August 2026.