Quick answer

Report the impersonating account to the social media platform, preserve the account’s links and content before it disappears, secure your own accounts, and file a complaint with the PNP Anti-Cybercrime Group or NBI Cybercrime Division if the account is being used to deceive, scam, threaten, harass, damage your reputation, or misuse private identifying information.

A fake account is not automatically a crime. Philippine criminal liability depends on what information was used, whether it was used without right and for an illegitimate purpose, and what the account actually did. A clearly labelled parody or fan account, for example, is different from an account that pretends to be you to obtain money or harm you.

If money, financial credentials, threats, sexual content, or a child is involved, treat the matter as urgent.

What Philippine law covers

Computer-related identity theft

Section 4(b)(3) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, prohibits the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion—without right—of identifying information belonging to another natural or juridical person.

The Supreme Court upheld this provision in Disini v. Secretary of Justice but explained that identity information must be taken or used for an illegitimate purpose. Merely acquiring and sharing information that a person made public is not, by itself, identity theft. The surrounding conduct—such as posing as the victim, soliciting money, accessing accounts, or deceiving other people—therefore matters. See the Supreme Court’s decision in Disini.

Computer-related identity theft is generally punishable by prision mayor—six years and one day to twelve years—or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. If no damage has yet been caused, the law provides for a penalty one degree lower. Only a court can determine guilt and the proper penalty.

Other offenses may apply

Depending on the evidence, an impersonating account may also involve:

Computer-related fraud, forgery, illegal access, or another offense under Republic Act No. 10175.
Estafa, threats, coercion, falsification, or libel under the Revised Penal Code, when their separate elements are present.
Unauthorized processing, access, or disclosure under the Data Privacy Act of 2012, Republic Act No. 10173.
A financial-account offense under the Anti-Financial Account Scamming Act, Republic Act No. 12010, particularly when another person’s identity or identification documents are used to open a financial account or a social-engineering scheme obtains financial credentials.
Gender-based online sexual harassment under the Safe Spaces Act, Republic Act No. 11313, when impersonation forms part of gender-based intimidation, sexual harassment, cyberstalking, threats, or reputation-harming conduct covered by that law.
Offenses involving intimate images or child sexual abuse material, if the account posts or threatens to post such content.

The correct charge depends on the account’s content, purpose, audience, method of operation, and resulting harm. A platform-policy violation does not automatically prove a criminal offense.

What to do immediately

1. Address urgent danger or financial loss

Call 911 if there is an immediate threat to life or physical safety.

If the account obtained passwords, one-time PINs, card details, bank information, or e-wallet access:

Contact the bank, e-wallet, or payment provider through its official hotline or app immediately.
Request that unauthorized transactions be disputed and affected access credentials or cards be blocked.
Record the case number, time of report, representative’s name, transaction references, and instructions given.
Contact the CICC’s National Anti-Scam Hotline by calling 1326. DICT also accepts reports at 1326@dict.gov.ph, as listed on its official contact page.

Do not continue sending money merely because the impersonator promises to return earlier payments.

2. Preserve evidence before reporting or blocking

Capture the evidence before the platform removes the account or the impersonator changes its username. Preserve:

The complete profile URL, exact username or handle, displayed name, profile photograph, biography, and any visible account or user ID.
Full-page screenshots and a screen recording showing how you reached the profile.
Every relevant post, story, reel, comment, advertisement, message, call log, and request for money or information.
Dates and times, including the time zone if it is not obvious.
Links to individual posts and messages, not only the profile.
Original downloaded files, voice messages, images, videos, and exported conversations.
Email notices and message headers where available.
Bank or e-wallet receipts, transaction references, destination account details, QR codes, phone numbers, and cryptocurrency wallet addresses.
Messages from people who were contacted or deceived by the fake account.
Proof that you own or operate the genuine account, such as earlier account notices or profile history.
Copies of every platform, bank, police, NBI, CICC, or NPC report and its acknowledgment number.

Keep the original files. Avoid editing, annotating, cropping, or repeatedly resaving the only copy. Store a backup in a separate device or secure cloud account. If possible, ask affected witnesses to preserve their own copies and write down what they personally saw.

Screenshots are useful but may not be enough to identify the account operator. In criminal cases, the prosecution must still connect a person to the account or post through admissions, account access, subscriber data, linked contact details, testimony, or other direct or circumstantial evidence. The Supreme Court has issued guideposts on proving ownership or control of social media accounts.

3. Secure your real accounts and identity

Start with the email account connected to your social media and financial services:

Change its password using a trusted device.
Use a new, unique password that was not used elsewhere.
Turn on multi-factor authentication, preferably through an authenticator app or security key where available.
Review active sessions, recovery email addresses, phone numbers, forwarding rules, linked applications, and recently generated backup codes.
Log out unknown devices and revoke unfamiliar app access.
Repeat these steps for social media, financial, shopping, and government-service accounts.
Contact your mobile provider immediately if your SIM stopped working unexpectedly or you suspect an unauthorized replacement.
Notify the issuing agency if a government ID or identifying number appears to have been misused.
Monitor financial statements, loan notices, account-opening alerts, and password-reset messages.

Use only official websites and apps. Do not send an ID or selfie to someone claiming through direct message that they can “verify” or recover your account.

Report the account to the platform

Platform reporting can remove or restrict the account, but it is separate from a criminal complaint. Report both the profile and the specific posts, advertisements, or messages involved.

Official impersonation-reporting pages include:

Select “impersonation” or “pretending to be someone else,” rather than only “spam,” when that accurately describes the conduct. Supply the fake profile’s exact URL and the genuine profile being copied. If the platform requests identification, upload it only through the platform’s official form and disclose no more than necessary.

Save the confirmation page and acknowledgment email. If the report is rejected, use the platform’s appeal or follow-up process and attach clearer proof.

You may warn friends, customers, or colleagues through your genuine account, but keep the warning factual. Identify the fake account, state that it is unauthorized, and tell people not to send money or information. Avoid publicly accusing a particular person unless reliable evidence supports the accusation.

File a cybercrime complaint

Report to either of the principal law-enforcement agencies named in Republic Act No. 10175:

PNP Anti-Cybercrime Group

You may use the PNP ACG’s e-Complaint portal or approach the nearest PNP Regional Anti-Cybercrime Unit. If the case involves gender-based online sexual harassment, the PNP ACG is specifically designated to receive such complaints under the Safe Spaces Act. A PNP Women and Children Protection Desk may also assist in covered cases.

NBI Cybercrime Division

You may submit an initial report through the NBI’s Online Complaint page or proceed to the NBI Cybercrime Division or an appropriate regional cybercrime center. The NBI Citizen’s Charter for computer-crime victims states that the complainant is interviewed, completes a sworn complaint sheet, submits supporting documents and sworn statements, and may present a device relevant to the investigation.

What to bring or submit

Prepare:

At least one valid ID.
A chronological written account stating when you discovered the account, what it copied, what it did, who was contacted, and what harm occurred.
Printed and electronic copies of the evidence.
The fake account’s URLs, usernames, user IDs, phone numbers, emails, and transaction details.
Names and contact information of witnesses.
Proof of ownership of the genuine identity or account.
Platform and financial-provider report numbers.
A list of losses, threatened harm, or corrective expenses supported by documents.

Ask that the complaint be officially docketed and assigned for investigation. Obtain the docket or reference number and the investigator’s official contact details.

You may report even if you do not know the offender’s real name. State that the operator is unknown and give every fact that may help identify them. Do not attempt to hack the account, obtain passwords, publish suspected personal details, or arrange your own entrapment.

Ask about preservation of platform data

Make the report promptly and tell the investigator if the account is actively changing or deleting content. Under Section 13 of Republic Act No. 10175 and the Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC, service providers must preserve traffic data and subscriber information for a minimum period of six months from the transaction. Content data is preserved for six months from receipt of a law-enforcement preservation order, with a possible one-time six-month extension.

Preservation is not the same as disclosure. Subscriber, traffic, or other relevant platform data generally requires a Warrant to Disclose Computer Data obtained by law enforcement. A private complainant ordinarily cannot compel a platform to reveal an account operator’s IP address or subscriber information.

When to approach the National Privacy Commission

Consider an NPC complaint when a company, government office, school, employer, platform, lender, or other personal-information controller may have unlawfully disclosed, processed, failed to secure, or refused to correct or remove your personal data. An NPC complaint is not a substitute for a police or NBI complaint against an impersonator.

Under the NPC’s amended 2021 Rules of Procedure, a complainant ordinarily must first notify the respondent in writing and allow it to address the privacy violation. If the respondent does not take timely and appropriate action or gives no response within 15 calendar days from receiving the notice, the complainant may proceed, subject to exceptions for good cause or serious violations.

The formal complaint should use the NPC’s complaint-assisted form or a verified complaint, include supporting evidence and witness affidavits, and be notarized. The NPC accepts filing personally, by registered mail or courier, or by authorized email submission. Follow the current instructions on the NPC’s formal complaint page and complaint mechanics page.

A representative generally needs a special power of attorney. Complaints must also include the required verification and certification against forum shopping. Failure to comply with the required form or to attach proof of the prior written notice can result in dismissal.

Important deadlines

Do not delay merely because a profile is still online.

Cyber libel: The Supreme Court has held that cyber libel prescribes in one year from discovery by the offended party, authorities, or their agents. Filing the proper complaint or information interrupts prescription. See Causing v. People, including the Court’s April 8, 2026 resolution.
Computer-related identity theft: Because it is a special-law offense carrying prision mayor, the general rule under Act No. 3326 ordinarily points to a 12-year prescriptive period for offenses punishable by imprisonment of six years or more. The applicable period and its starting or interruption may still depend on the precise offense and facts.
Gender-based online sexual harassment: An offense under Section 12 of the Safe Spaces Act is stated to be imprescriptible.
NPC matters: The NPC’s rules adopt the prescription periods applicable to penal violations of special laws. The exact period depends on the alleged Data Privacy Act offense.

A single incident may involve several offenses with different deadlines. Obtain legal advice promptly where cyber libel, continuing harassment, substantial loss, or an uncertain discovery date is involved.

Common mistakes to avoid

Blocking the account before saving its URL, messages, posts, and transaction details.
Saving only cropped screenshots that omit the username, date, or surrounding conversation.
Assuming a profile photograph and matching name alone prove who created the account.
Sending identification documents through unofficial links, email addresses, or direct messages.
Paying a “recovery agent,” hacker, or fixer who promises to identify or remove the account.
Publicly accusing a suspected person without sufficient evidence.
Threatening, baiting, or negotiating with the impersonator.
Asking friends to mass-report before preserving the evidence.
Reporting only to the platform when financial loss, threats, harassment, or identity misuse also requires law-enforcement action.
Filing inconsistent narratives with several agencies without disclosing the other reports.
Waiting for the platform’s decision before protecting financial, email, mobile, or government accounts.

When legal help is urgent

Consult a Philippine lawyer promptly if:

The account published defamatory accusations and the one-year cyber-libel period may be running.
A bank, lender, employer, government office, or collection agency is treating fraudulent documents or transactions as yours.
A substantial amount was lost or several victims were targeted.
The account threatens violence, extortion, stalking, or publication of intimate material.
A child is being impersonated, groomed, exploited, or depicted sexually.
You need a restraining order, civil damages, correction of official records, or coordination with a foreign platform.
Law enforcement asks to examine your device and you need advice on preserving evidence and protecting unrelated private information.
You receive a subpoena, warrant, demand letter, summons, or criminal complaint connected to the stolen identity.

Frequently asked questions

Can I report a fake account if I do not know who created it?

Yes. Provide the unknown account’s exact identifiers and all available evidence. Law enforcement may investigate subscriber and traffic information through the procedures and warrants allowed by law.

Are screenshots enough?

They are important but may not prove who operated the account. Preserve URLs, original files, messages, witnesses, linked phone numbers or emails, transaction records, admissions, and other evidence connecting a person to the account.

Is copying my public photograph automatically identity theft?

Not necessarily. The Supreme Court has said that acquiring and disseminating information made public by the user is not, by itself, identity theft. Unauthorized impersonation for deception, fraud, harassment, or another illegitimate purpose may change the legal analysis and may violate platform rules even if a criminal identity-theft charge is not established.

Should I contact the impersonator?

Usually not. Preserve the evidence, secure your accounts, and report through official channels. Direct contact may provoke further conduct, reveal your strategy, or result in evidence being deleted.

Can a friend report the account for me?

Most platforms allow bystander reports. A formal criminal or NPC complaint is ordinarily strongest when filed by the victim, parent or guardian where appropriate, or a properly authorized representative. NPC representatives generally require a special power of attorney.

Does platform removal end the case?

No. Removal may limit further harm, but it does not determine criminal or civil liability. Keep the report acknowledgment and evidence, and continue cooperating with the assigned investigator.

This article provides general Philippine legal information, not legal advice or a prediction of any case outcome. Applicable remedies depend on the evidence, documents, jurisdiction, and specific conduct. Laws, procedures, and official reporting channels were checked as of 3 August 2026.