Quick answer

Report a fake or impersonating account to the social-media platform immediately, but preserve the account’s exact URL, username, posts, messages, and other evidence first if it is safe to do so. If the account uses your identity without authority, took over your real account, scams people, threatens or harasses you, or causes financial or reputational harm, also report it promptly to the Philippine National Police Anti-Cybercrime Group (PNP-ACG) or the National Bureau of Investigation Cybercrime Division (NBI-CCD).

A fake account is not automatically a crime. It may become computer-related identity theft when someone intentionally acquires or uses another person’s identifying information through a computer system, without right and for an illegitimate purpose. Depending on what the account does, illegal access, fraud, threats, extortion, gender-based online sexual harassment, or another offense may also apply.

Platform reporting, a police or NBI complaint, and a National Privacy Commission (NPC) complaint are separate remedies. Filing with one does not automatically start the others.

First determine what happened

The correct reporting route depends on the type of account:

Clone or impersonation account: A new account copies your name, photograph, business identity, or other information and pretends to be you.
Compromised account: Someone gained unauthorized access to your existing account and changed its password, contact details, or content.
Invented or pseudonymous account: The account uses a made-up identity but does not necessarily take another person’s identifying information.
Parody, commentary, or fan account: It refers to a real person but may clearly disclose that it is unaffiliated. Whether it is unlawful depends on its content, purpose, presentation, and use—not merely on the word “fake.”

Under Section 4(b)(3) of the Cybercrime Prevention Act of 2012, computer-related identity theft covers the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person or organization, without right.

In Disini v. Secretary of Justice, the Supreme Court explained that identity information must be taken or used for an illegitimate purpose. Simply acquiring and reporting information that the person made public is not, by itself, identity theft. Public availability, however, does not give someone blanket permission to use that information deceptively, solicit money in your name, or falsely represent that you control the account. Read the Supreme Court decision.

The law prescribes prision mayor or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both, for computer-related offenses under Section 4(b). A lower penalty is provided when identity theft has not yet caused damage. The actual charge and penalty depend on the proven acts, intent, harm, and applicable laws.

If someone took over your genuine account, illegal access under Section 4(a)(1) may apply even if no separate clone account was created.

What to do immediately

1. Protect your safety and accounts

If there is a credible threat of physical harm, stalking, extortion, or an attempt to locate you, call 911 or go to the nearest police station. Do not arrange a meeting or entrapment on your own.

From a trusted device:

Secure the email account connected to your social-media accounts.
Change reused or exposed passwords, starting with your email, banking, and social-media accounts.
Sign out unknown devices and revoke unfamiliar app access.
Turn on two-factor authentication, preferably through an authenticator app or security key where available.
Check whether recovery email addresses, phone numbers, payment details, or linked accounts were changed.
Notify your contacts through a known genuine channel that the fake or compromised account is not yours.
If identity documents, a SIM, financial information, or one-time passwords may be compromised, contact the relevant issuer, telecommunications provider, bank, or e-wallet immediately.

If your real account was taken over, use the platform’s account-recovery process rather than reporting it only as an impersonation account:

2. Preserve evidence before it disappears

Save evidence before blocking the account or asking others to report it, unless waiting would put someone in danger. Preserve:

The complete profile URL, not just the displayed name
The username or handle and any visible account or user ID
Profile, cover, and other photographs
Bio, contact details, links, and claimed affiliations
Posts, stories, advertisements, comments, and replies
Complete message threads, including dates and times
Voice messages, call logs, email notices, and login alerts
Requests for money, payment instructions, QR codes, bank or e-wallet details, and transaction references
Names and contact details of people approached by the fake account
Platform report confirmations and ticket numbers
Evidence showing that the copied information belongs to you or your organization

Take screenshots that show the whole screen, URL or username, date, and surrounding context. A screen recording that opens the profile, its URL, and the relevant posts can provide useful continuity. Keep the original files and an untouched backup. Do not crop, annotate, filter, rename repeatedly, or convert the only copy.

Write a short incident log stating:

When and how you discovered the account
Who informed you
What the account did
Who received messages
What harm or loss occurred
When you reported it and what response you received

Electronic evidence still has to be authenticated. Under the Rules on Electronic Evidence, messages and similar communications may be proved through testimony from a participant or someone with personal knowledge, while private electronic documents require proof of integrity and reliability.

In a 2025 decision, the Supreme Court identified non-exclusive ways to prove who owned, accessed, or authored content from a social-media account. These include admissions, witnesses who saw the account being used, facts known only to the suspected user, distinctive language, conduct consistent with the messages, platform or telecommunications records, and device forensics. A displayed name or photograph alone does not necessarily establish who controlled the account. Read the Supreme Court’s guide.

3. Report the account and its harmful content to the platform

Use both the profile-level impersonation report and, where applicable, separate reports for scams, threats, private-information exposure, sexual content, or abusive messages:

Submit identity documents only through the platform’s official app, website, or help form. Never send an ID, password, recovery code, or one-time password to an account claiming it can “assist” with takedown.

Save the confirmation, report number, and response. Account removal can limit ongoing harm, but it does not identify the offender or automatically begin a criminal investigation.

4. File a report with the PNP or NBI

Republic Act No. 10175 designates the PNP and NBI as the principal law-enforcement authorities for cybercrime cases. You may approach:

The PNP Anti-Cybercrime Group or the nearest Regional Anti-Cybercrime Unit
The NBI Cybercrime Division or a Regional Cybercrime Center
The DOJ cybercrime-reporting page for current government reporting information

Bring or prepare:

A valid government-issued ID
A clear chronological statement
Printed and electronic copies of the evidence
Exact URLs, usernames, and account identifiers
The device containing original messages, if requested for examination
Affidavits or contact details of witnesses and scam victims
Proof of ownership of the genuine account, name, photographs, business, or brand
Platform reports and replies
Financial records if money was requested or transferred
A list of the specific harm suffered

The NBI’s published Citizen’s Charter lists no filing fee or formal checklist for investigative assistance. It provides for an initial interview, a sworn complaint sheet or statement, collection of supporting documents, and possible examination of a relevant device.

Ask for the complaint’s docket, reference, or investigation number. If the account may soon be deleted, expressly ask whether investigators can issue an appropriate data-preservation request. A private complainant cannot compel a platform or telecommunications provider to reveal confidential subscriber records; investigators generally need to follow statutory procedures and, for disclosure, obtain the required court warrant.

Under Section 13 of Republic Act No. 10175, service providers must preserve traffic data and subscriber information for at least six months from the transaction. Content data is preserved for six months from receipt of a lawful preservation order, and law enforcement may order one six-month extension. Actual retention and cross-border access can still vary, so report promptly.

You may report even if you do not know the offender’s real name. Provide every lead that may connect the account to a person, device, phone number, email address, payment account, or pattern of conduct. Do not publicly name a suspected offender without adequate proof.

5. If money was transferred, call the financial institution immediately

Report the transaction through your bank or e-wallet’s official 24/7 fraud-reporting channel. Give the transaction reference, amount, date and time, recipient account, and police or NBI reference if already available.

Under the Anti-Financial Account Scamming Act and BSP Circular No. 1215, a complaint can trigger coordinated verification and the temporary holding of disputed electronic-transfer funds. The initial holding may last up to five calendar days and may be extended so that the total does not exceed 30 calendar days, unless a court authorizes more time. A report does not guarantee that the money remains available or will be returned.

Complain first to the financial institution. If its response remains unresolved, use the BSP Consumer Assistance Mechanism.

When a National Privacy Commission complaint may help

Consider an NPC complaint when the incident involves unauthorized processing, disclosure, misuse, failure to secure, or refusal to correct or erase your personal data. The NPC route may be appropriate against a personal information controller, processor, platform, organization, or other concerned entity, depending on the facts.

It is not a substitute for a PNP or NBI complaint, and not every fake account falls within the Data Privacy Act. The Act has scope limitations and exceptions, including certain purely personal, family, or household activities. Jurisdiction over an unknown individual or a foreign platform can also require fact-specific analysis.

Under the 2021 NPC Rules of Procedure, as amended in 2024, you ordinarily must:

Notify the personal information controller, processor, or concerned entity in writing and request appropriate action.
Preserve proof that it received the notice.
Allow 15 calendar days from receipt for a response.
If the response is absent or inadequate, file a verified complaint with the NPC.

The NPC may waive prior-notice requirements for good cause or a serious violation, including grave and irreparable harm, lack of an adequate remedy, or patently illegal conduct. This exception is discretionary; explain and document the urgency.

A formal complaint should identify the complainant and respondent—or describe facts that may lead to the respondent’s identity—and include:

A verified narrative of material facts
Documentary evidence and witness affidavits, if any
The relief requested
Correspondence with the respondent and its response
A certification against forum shopping
Authority documents if filed through a representative

The NPC’s current instructions require a completed and notarized complaint-assisted form or verified complaint. It may be filed personally, by registered mail or courier, or by authorized email submission. See the NPC’s complaint instructions and current filing channel.

The current basic filing fee is ₱500, plus a legal-research fee of 1% of the filing fee but not less than ₱10. Additional charges apply when damages or special relief are requested. Qualified indigent complainants and government entities may be exempt under the NPC schedule of fees. Obtain an official assessment before paying.

The NPC’s old six-month complaint deadline appeared in its 2016 rules but is not the general filing rule under the amended 2021 procedure. Prescriptive periods for penal violations of the Data Privacy Act are instead governed through Act No. 3326. Because computation can depend on the offense, discovery, and procedural steps taken, do not delay filing.

Situations requiring urgent help

Seek immediate police, NBI, or legal assistance when:

The account makes a credible threat or reveals your location
There is stalking, blackmail, extortion, or a demand for sexual content
Money is being transferred or people are actively being scammed
Government IDs, financial credentials, SIM details, or passwords are exposed
The account is contacting your employer, customers, relatives, or children
A former or current intimate partner is using the account to threaten, humiliate, or psychologically abuse a woman or her child
Sexual photographs or recordings are posted or threatened
A child is being impersonated, groomed, sexually exploited, or depicted in sexual material

Gender-based online impersonation, cyberstalking, sexual threats, or unauthorized sharing of photographs may fall under the Safe Spaces Act. Nonconsensual publication or distribution of intimate recordings may implicate the Anti-Photo and Video Voyeurism Act. Conduct involving child sexual abuse or exploitation material is governed by Republic Act No. 11930.

Do not forward, repost, or unnecessarily download intimate or child sexual-abuse material. Preserve the account URL, username, date, and reporting confirmation, then contact authorities.

Common mistakes to avoid

Reporting the account before saving its URL and evidence
Saving only cropped screenshots with no username, date, or context
Deleting the original messages or resetting a device before investigators advise you
Editing the sole copy of a screenshot or recording
Assuming that a platform takedown is already a police complaint
Waiting for the NPC’s 15-day response period before reporting an urgent crime to police
Confronting the suspected operator or arranging an entrapment without law enforcement
Paying someone who promises account deletion or “hacker tracing”
Sending passwords, one-time passwords, or IDs through unofficial links
Hacking the fake account or secretly accessing another person’s device
Publicly accusing or doxxing a suspected person without reliable proof
Reposting defamatory, intimate, or exploitative content while warning others

A neutral warning such as “This account is not mine; please do not transact with it” is usually safer than publicly identifying an unverified suspect.

Frequently asked questions

Can I report a fake account if no money was lost?

Yes. Actual financial loss is not required before you report impersonation to the platform or seek law-enforcement assistance. Under the Cybercrime Prevention Act, the absence of damage may affect the applicable penalty, but it does not necessarily make attempted or ongoing misuse lawful.

Can I report if I do not know who created the account?

Yes. Preserve technical and circumstantial leads and report the offender as unknown. Investigators may pursue platform, telecommunications, payment, or device records through lawful procedures.

Are screenshots enough?

Screenshots are useful but may not be sufficient by themselves. Keep original messages and files, full URLs, device records, witnesses, account-recovery notices, platform responses, and transaction documents. Evidence linking the account to its operator is particularly important.

Should I block the account?

After preserving evidence and submitting the necessary reports, blocking can reduce unwanted contact. Do not delay blocking when continued contact creates a safety risk.

Do I need a lawyer to make an initial report?

No. You may personally report to the platform, PNP, NBI, bank, or NPC. Legal advice becomes especially useful when there are repeated accounts, large losses, threats, intimate images, cross-border issues, an identified suspect, a prosecutor’s proceeding, or a need for urgent court relief.

Can the PNP or NBI order the platform to remove the account?

Investigators may coordinate with platforms and pursue lawful preservation, disclosure, or other orders, but removal is not automatic. Platform moderation, evidence preservation, criminal investigation, and court remedies follow different procedures.

What if the account has already been deleted?

You can still report it. Submit saved URLs, screenshots, messages, witnesses, platform notices, and transaction records. Deleted content may sometimes remain in platform or device records, but recovery is not guaranteed.

Is a barangay blotter enough?

A barangay record may help document that you reported an incident, but it is not a substitute for reporting a cybercrime to the PNP-ACG, NBI-CCD, or the appropriate prosecutor.

Official sources

This article provides general Philippine legal information, not legal advice for a particular case. The appropriate complaint, venue, deadline, and remedy depend on the evidence and surrounding facts. Laws, procedures, and official reporting channels were checked as of 3 August 2026.