I. Introduction

A Facebook impersonation scam asking relatives for money is a common form of online fraud in the Philippines. It usually happens when a scammer creates a fake Facebook account, hacks an existing account, copies a person’s profile picture and public details, or uses Messenger to pretend to be the victim. The scammer then contacts the victim’s relatives, friends, co-workers, or acquaintances and urgently asks for money.

The request may appear emotionally convincing because it comes from what looks like a familiar person. The scammer may claim there is a medical emergency, accident, hospital bill, unpaid loan, travel problem, school expense, online banking issue, business emergency, or urgent need to borrow money. Payment is usually requested through GCash, Maya, bank transfer, remittance center, cryptocurrency, online lending account, or another fast payment channel.

In the Philippine legal context, this conduct may involve identity theft, computer-related fraud, estafa, unauthorized access, data privacy violations, cybercrime, civil liability, and platform abuse. The legal consequences may apply not only to the person who created the fake account but also to accomplices who received or transferred the money.

II. Nature of the Scam

This scam generally involves three elements:

Impersonation — the offender pretends to be another person.
Deception — the offender makes relatives believe the request is genuine.
Financial gain — the offender induces the relatives to send money.

The scam may be committed through:

A fake Facebook profile
A hacked Facebook account
A cloned account using stolen photos
Messenger chats
Facebook Marketplace messages
Group chats
Posts tagging relatives
Comments on family posts
Fake emergency appeals
Links to phishing pages
Use of screenshots or edited documents
Requests to send money to third-party accounts

The offense may begin as identity theft but becomes more serious once money is demanded or obtained.

III. Common Modus Operandi

The scammer may use several tactics:

A. Profile Cloning

The scammer copies the victim’s name, profile photo, cover photo, public posts, family details, school, workplace, or hometown. The fake account then adds the victim’s relatives and sends private messages asking for money.

B. Account Takeover

The scammer obtains access to the victim’s real Facebook account through phishing, malware, weak passwords, reused passwords, fake login pages, or stolen session cookies. Since the messages come from the real account, relatives are more likely to believe the request.

C. Emergency Script

The scammer claims there is an urgent problem, such as:

Hospital confinement
Accident
Operation or medicine expense
Detention or police issue
Stranded travel situation
Lost wallet
Locked bank account
Need to pay tuition
Online loan due date
Family emergency
Business payment deadline
“Send first, I’ll explain later”

D. Confidentiality Script

The scammer may say:

“Huwag mo muna sabihin sa iba.”
“Nakakahiya kasi.”
“Emergency lang talaga.”
“Wala akong ibang malapitan.”
“Pahiram muna, balik ko mamaya.”
“Hindi ako makatawag ngayon.”
“Low battery ako.”
“Nasa hospital ako.”
“Nasa meeting ako.”
“Nasira phone ko.”

These lines are meant to prevent verification.

E. Payment Diversion

The scammer often asks that payment be sent to an account not in the victim’s name, claiming:

“Account ng friend ko.”
“GCash ng nurse.”
“Bank ng pinsan ko.”
“Hindi gumagana account ko.”
“Sa rider mo ipadala.”
“Paki-send sa number na ito.”
“Temporary account lang.”

This is a strong red flag.

IV. Governing Philippine Laws

A Facebook impersonation scam asking relatives for money may involve several laws, including:

Cybercrime Prevention Act of 2012
Revised Penal Code
Data Privacy Act of 2012
Electronic Commerce Act
Rules on Electronic Evidence
Civil Code
Anti-Financial Account Scamming Act, where financial accounts or money mule activities are involved
Anti-Money Laundering laws, where scam proceeds are laundered
SIM Registration Act, where registered mobile numbers are used for fraudulent accounts or payment channels
Consumer protection and banking regulations, where banks, e-wallets, or payment platforms are involved

The exact liability depends on how the scam was done: whether the account was hacked, whether fake documents were used, whether money was actually received, whether financial accounts were used, and whether there were accomplices.

V. Cybercrime Prevention Act

The Cybercrime Prevention Act is highly relevant because the scam is committed through information and communications technology.

Possible cybercrime offenses include:

A. Computer-Related Identity Theft

Using another person’s identifying information without authority may constitute computer-related identity theft. In Facebook impersonation scams, the offender may use the victim’s name, photograph, profile details, family information, and social connections to deceive relatives.

Identity theft may exist even before money is received. The unauthorized use of another person’s identity online is already legally significant.

B. Computer-Related Fraud

When the offender uses a fake or hacked Facebook account to deceive relatives into sending money, the act may constitute computer-related fraud. The deception is committed through a computer system or electronic platform.

C. Computer-Related Forgery

If the offender creates fake electronic documents, fake screenshots, fake IDs, fake receipts, edited hospital bills, fabricated payment instructions, or false electronic messages, computer-related forgery may be involved.

D. Illegal Access

If the offender hacked or accessed the victim’s Facebook account without authority, illegal access may apply. This includes unauthorized entry into an account, unauthorized use of credentials, or maintaining access without consent.

E. Misuse of Devices

If the offender used phishing tools, malware, stolen credentials, credential stuffing tools, or devices designed to commit cybercrime, additional liability may arise.

F. Aiding or Abetting Cybercrime

Persons who knowingly assist the scam may be liable, such as those who provide mule accounts, receive funds, supply hacked accounts, sell personal data, or help withdraw scam proceeds.

VI. Estafa Under the Revised Penal Code

The scam may also constitute estafa or swindling. Estafa generally involves defrauding another by abuse of confidence, deceit, or fraudulent means, resulting in damage.

In this context, estafa may occur where:

The scammer pretends to be the victim.
The scammer makes a false urgent request for money.
The relative relies on the false representation.
The relative sends money.
The scammer receives or benefits from the money.
The relative suffers financial loss.

Estafa may be committed even if the deception occurs online. If information and communications technology is used, cybercrime provisions may also increase or affect liability.

VII. Identity Theft and Impersonation

The heart of the scam is impersonation. The offender misuses the victim’s identity to gain trust.

Identity misuse may involve:

Name
Profile picture
Family relationships
Workplace or school information
Public posts
Messenger history
Voice clips
Personal stories
Nicknames
Old photos
Contact lists
Mutual friends
Screenshots of genuine conversations

The use of publicly available information does not automatically make the conduct lawful. Even if the photo or name was publicly visible, using it to pretend to be someone else and obtain money is unlawful.

VIII. Data Privacy Act Implications

The Data Privacy Act may apply where the offender collects, uses, stores, shares, or discloses personal information without authority.

The personal data involved may include:

Name
Photograph
Social media profile details
Contact information
Family relationships
Address or location
Workplace
School
Private messages
Financial account details
Identification documents, if used
Medical or emergency information, if fabricated using real details

Unauthorized processing of personal data may occur when a scammer copies photos and personal details to create a fake account or uses hacked private messages to deceive relatives.

If a company, employee, lending app, data broker, or insider provided personal information used in the scam, separate data privacy liability may arise.

IX. Hacked Account vs. Fake Account

There is an important factual distinction between a hacked account and a fake account.

A. Hacked Account

A hacked account means the offender gained unauthorized access to the victim’s real Facebook account. The scammer can read private messages, contact real friends, post publicly, and impersonate the victim more convincingly.

Legal issues may include:

Illegal access
Identity theft
Computer-related fraud
Data privacy violations
Unauthorized processing of private messages
Possible extortion or blackmail
Fraudulent financial requests

B. Fake or Cloned Account

A fake or cloned account means the offender created a separate profile pretending to be the victim. It may use the victim’s name, photos, and public information.

Legal issues may include:

Identity theft
Computer-related fraud
Estafa
Misuse of personal data
Platform rule violations
Civil damages

Both situations are serious, but account takeover usually creates greater privacy and security risks.

X. Liability of the Scammer

The scammer may face criminal, civil, and administrative consequences.

Possible liabilities include:

Computer-related identity theft
Computer-related fraud
Estafa
Illegal access, if the account was hacked
Data privacy violations
Falsification or computer-related forgery
Use of falsified documents
Threats or coercion, if pressure was used
Cyber libel, if defamatory statements were made
Unjust enrichment
Civil damages
Money laundering-related liability, if proceeds are layered or concealed

The scammer may be liable whether the account was fake or hacked, provided the elements of the offense are proven.

XI. Liability of Money Mules

Many scams use accounts belonging to third persons. These persons may be called “money mules.” They may receive, transfer, withdraw, or convert scam proceeds.

A money mule may be:

A willing accomplice
A recruited account holder
A person paid a commission
A person whose e-wallet was rented
A person who sold access to their bank account
A person deceived into receiving funds
A person whose account was hacked

Liability depends on knowledge and participation. A person who knowingly allows their account to receive scam proceeds may face criminal liability, civil liability, account closure, blacklisting, and possible investigation for financial account misuse or money laundering.

XII. Liability of the Payment Account Holder

If the relative sent money to a GCash, Maya, bank, or remittance account, the registered account holder becomes a key person in the investigation.

The account holder may claim:

They were also scammed.
Their account was hacked.
They lent the account without knowing the purpose.
They sold the account.
They were asked to receive money for someone else.
They withdrew funds under instruction.
They did not know the money came from fraud.

These defenses are fact-specific. Evidence such as KYC records, transaction logs, withdrawal footage, device logs, IP records, and communications may determine liability.

XIII. Liability of Relatives Who Forwarded the Request

Sometimes a relative receives the fake request and forwards it to other family members. If done in good faith, this does not necessarily make the relative criminally liable.

However, a person may face liability if they knowingly help the scammer by:

Convincing others to send money despite knowing the account is fake
Hiding the scammer’s identity
Receiving a share of the proceeds
Providing family information to the scammer
Lending an account to receive money
Threatening victims to prevent reporting

Good faith, lack of knowledge, and absence of benefit are important.

XIV. Liability of Facebook or Platforms

Victims often ask whether Facebook can be liable. Platform liability depends on facts, applicable law, terms of service, negligence, response to reports, and jurisdictional issues.

Generally, the direct offender is primarily liable. However, platform-related issues may arise where:

The platform ignored repeated valid reports.
The platform failed to remove a clearly impersonating account.
The platform’s system allowed misuse despite clear notice.
User data was breached.
The platform violated data privacy obligations.
The platform failed to preserve relevant evidence after lawful request.

In practice, victims usually begin by reporting the fake or hacked account through Facebook’s reporting channels, while also filing complaints with local authorities when money or identity theft is involved.

XV. Liability of Banks, E-Wallets, and Remittance Centers

Banks, e-wallets, and remittance centers may become involved because scam proceeds pass through them.

Potential issues include:

Know-your-customer compliance
Account verification
Fraud monitoring
Freezing or holding suspicious transactions
Complaint handling
Transaction reversal policies
Preservation of records
Cooperation with law enforcement
Data privacy and confidentiality
Money mule detection

A payment provider is not automatically liable merely because a scammer used its service. However, liability or regulatory action may arise if there was negligence, weak controls, failure to follow regulations, or refusal to act on proper complaints.

XVI. What Victims Should Do Immediately

Time is critical. Once a fake or hacked Facebook account asks relatives for money, the victim should act quickly.

A. Warn Relatives and Friends

Immediately post on other channels, call relatives, and send warnings through text, Messenger, group chats, Viber, WhatsApp, or email.

The warning should say:

The account is fake or hacked.
Do not send money.
Do not click links.
Report the account.
Verify requests by calling the victim directly.
Send screenshots of suspicious messages.

B. Secure the Real Account

If the real account was hacked:

Change password.
Log out of all devices.
Enable two-factor authentication.
Check email and phone recovery options.
Remove unknown devices.
Remove suspicious apps.
Check recent activity.
Recover the account through official Facebook recovery tools.
Secure the email account connected to Facebook.
Scan devices for malware.

C. Preserve Evidence

Before the fake account disappears, collect evidence:

Profile URL
Screenshots of the fake profile
Messenger conversations
Money requests
Payment details given by scammer
GCash, Maya, bank, or remittance account numbers
Transaction receipts
Date and time of messages
Names of relatives contacted
Links sent by the scammer
Any voice messages or attachments
Reports from other relatives

D. Report the Account to Facebook

Use the platform’s impersonation and hacked-account reporting tools. Ask relatives to report the fake account too.

E. Contact the Payment Provider

If money was sent, immediately contact the bank, e-wallet, or remittance provider. Request account hold, investigation, reversal if possible, and preservation of records.

F. File a Complaint

Report the matter to the appropriate law enforcement cybercrime unit, and prepare supporting evidence.

XVII. Evidence Checklist

A strong complaint may include:

Screenshot of the fake profile
URL of the fake account
Screenshot of the real profile
Screenshots of messages asking for money
Screenshots showing impersonation
Proof of relationship between victim and targeted relatives
Payment receipts
Account name and number where money was sent
Transaction reference numbers
Time and date of transfer
Chat logs with the scammer
Warning posts made by the victim
Facebook report confirmation
Police blotter or complaint affidavit
Bank or e-wallet complaint reference number
Affidavit of the person impersonated
Affidavit of the relative who sent money
Proof that the victim did not own or control the receiving account
Device security records, if account was hacked
Recovery emails from Facebook

Evidence should be saved in original form whenever possible. Screenshots are useful, but original URLs, devices, emails, and transaction records are better.

XVIII. Complaint Before Law Enforcement

A complaint may be filed with cybercrime authorities or police units handling online fraud.

The complaint should clearly state:

The identity of the person impersonated
The Facebook account involved
Whether it was hacked or fake
The relatives contacted
The exact false statements made
The amount requested
The amount actually sent, if any
The receiving account details
The timeline of events
The evidence attached
The suspected offender, if known
The requested action

The complaint may lead to requests for platform records, payment account records, telco records, and other digital evidence through lawful procedures.

XIX. Barangay Blotter and Police Blotter

A barangay or police blotter may help create an early record of the incident. It is useful for documenting that the victim promptly denied the scam and warned others.

However, a blotter is not the same as a full criminal complaint. For serious fraud, identity theft, or cybercrime, the victim should pursue formal reporting with the proper law enforcement or prosecutorial authorities.

XX. Complaint-Affidavit

A complaint-affidavit is often required in criminal complaints. It should include:

Personal circumstances of the complainant
Description of the impersonation
Date and time of discovery
How the fake or hacked account was used
Names of relatives targeted
Amounts requested and paid
Receiving account details
Screenshots and documents attached
Statement that the account or messages were unauthorized
Statement of damage suffered
Request for investigation and prosecution

The relative who sent money should also execute an affidavit describing how they were deceived and how payment was made.

XXI. Demand for Preservation of Evidence

Digital evidence can disappear quickly. The victim should request preservation of:

Facebook account records
Login history
IP logs
Device information
Message metadata
Registration email or mobile number
Payment account KYC records
Transaction logs
Withdrawal records
CCTV footage, if cash-out occurred
SIM registration records, if phone numbers were used

Private individuals may have limited direct access to these records, but law enforcement or regulators may request them through proper channels.

XXII. Recovery of Money

Recovery depends on speed and traceability.

Possible routes include:

Immediate fraud report to e-wallet or bank
Temporary account hold
Reversal, if still possible
Complaint against receiving account holder
Civil action for recovery
Criminal restitution
Settlement, if the account holder is identified
Insurance or platform protection, if applicable

If the money was already withdrawn, recovery becomes harder, but transaction records may still identify the cash-out path.

XXIII. Civil Remedies

Victims may seek civil relief against the offender and accomplices.

Possible civil claims include:

Return of money
Actual damages
Moral damages
Exemplary damages
Attorney’s fees
Litigation expenses
Injunction or takedown-related relief
Damages for invasion of privacy
Damages for reputational harm
Damages arising from identity theft

The person impersonated may also have a claim even if they did not lose money, because their name, image, reputation, and privacy were misused.

XXIV. The Person Impersonated as a Victim

The person whose Facebook identity was copied is also a victim, even if relatives were the ones who sent money.

The impersonated person may suffer:

Reputational damage
Loss of trust among relatives
Emotional distress
Privacy violation
Harassment from victims
Exposure to investigation
Account insecurity
Loss of business or employment trust
Damage to family relationships

They should document that they did not authorize the account or messages.

XXV. The Relative Who Sent Money as a Victim

The relative who sent money is a direct financial victim.

They should preserve:

The scam conversation
Proof of transfer
Receiving account details
The reason they believed the message
Their relationship with the impersonated person
Attempts to verify
Later discovery that it was a scam
Reports filed with the bank, e-wallet, or police

Their affidavit is important in proving deceit and damage.

XXVI. Is the Impersonated Person Liable to Relatives?

Generally, the impersonated person is not liable if they did not create the fake account, did not send the messages, did not receive the money, and did not benefit from the scam.

However, disputes may arise if relatives claim the victim was negligent, such as by failing to secure their account. Liability would depend on facts. Mere hacking or impersonation does not automatically make the victim financially responsible.

If the real account was compromised because of gross negligence, arguments may be raised, but the direct wrongdoer remains the scammer.

XXVII. When the Real Facebook Account Was Hacked

If the real account was hacked, relatives may believe the request because it came from an authentic profile.

The victim should immediately:

Recover the account.
Preserve login alerts.
Check unauthorized messages.
Download account information if possible.
Identify unknown devices or locations.
Notify relatives.
File a report.
Secure connected email and phone number.
Change passwords for other accounts.
Watch for further compromise.

The incident may involve illegal access in addition to fraud.

XXVIII. When the Fake Account Uses Public Photos

A common defense by scammers is that the photo was publicly visible. This does not excuse impersonation or fraud.

Public visibility does not authorize:

Pretending to be the person
Contacting relatives as that person
Asking for money
Misleading others
Misusing personal data
Damaging reputation
Creating fake accounts for deception

The legal wrong is not merely copying a photo; it is using identity to deceive.

XXIX. When the Scammer Uses Deepfakes or Voice Cloning

More advanced scams may use:

AI-generated voice messages
Edited videos
Fake video calls
Deepfake images
Synthetic screenshots
Cloned writing style
AI-generated emergency scripts

These tools may strengthen the deception and may support additional allegations of computer-related fraud, forgery, or identity misuse.

Family members should verify urgent money requests through a separate trusted channel, preferably a direct phone or video call to a known number.

XXX. Red Flags of a Facebook Money Scam

Common warning signs include:

Newly created account
Few posts or friends
Duplicate account using the same photo
Urgent request for money
Refusal to call or video call
Request to keep the matter secret
Payment account under a different name
Grammar or tone unlike the real person
Sudden emergency story
Request for OTP or login codes
Sending links to “verify”
Asking for multiple transfers
Pressure or guilt-tripping
Claiming bank or GCash is unavailable
Asking for screenshot after payment

One red flag may not prove fraud, but several together should stop the transaction.

XXXI. Family Verification Protocol

Families can reduce risk by agreeing on verification rules:

Never send money based only on chat.
Call the person using a known number.
Use a family code word for emergencies.
Verify through another relative.
Do not send to accounts under other names.
Ask a question only the real person would know.
Do not click login links.
Never share OTPs.
Check whether the account is newly created.
Treat secrecy and urgency as red flags.

A simple family rule can prevent major losses.

XXXII. Reporting to Facebook

A fake account should be reported for impersonation. A hacked account should be reported through account recovery and hacked-account procedures.

When reporting, provide:

Link to fake profile
Link to real profile
Screenshots of impersonation
Explanation that money is being solicited
Evidence that relatives are being targeted

Multiple reports from relatives and friends may help speed review.

XXXIII. Reporting to Banks, E-Wallets, and Remittance Centers

If money was sent, the sender should immediately contact the payment provider.

Provide:

Transaction reference number
Date and time
Amount
Receiving account name
Receiving account number
Screenshots of scam messages
Police report or complaint, if available
Request to freeze or hold funds
Request to preserve account records
Request for written acknowledgment

Speed matters because scammers often cash out quickly.

XXXIV. Anti-Financial Account Scamming Concerns

Where bank or e-wallet accounts are used to receive scam proceeds, laws and regulations against financial account scamming may apply.

Relevant misconduct may include:

Acting as a money mule
Selling or renting financial accounts
Opening accounts using false information
Social engineering schemes
Unauthorized financial transactions
Use of payment accounts to receive fraud proceeds

The receiving account is often the best lead for tracing the offender.

XXXV. SIM Registration Issues

Scammers may use mobile numbers to create Facebook accounts, receive OTPs, communicate through Messenger, or operate e-wallets.

If a mobile number is involved, SIM registration records may help identify the registered subscriber. However:

The SIM may be registered under a false identity.
The SIM may be registered under a stolen identity.
The SIM may have been sold or transferred.
The SIM may be controlled by someone other than the registered person.
Law enforcement may need lawful process to obtain records.

SIM registration is useful but not conclusive proof of guilt.

XXXVI. Electronic Evidence and Authentication

Electronic evidence must be properly preserved and authenticated.

Best practices include:

Keep original chat threads.
Do not delete messages.
Save profile URLs.
Take screenshots showing date and time.
Export data when available.
Preserve the device used.
Keep transaction receipts.
Record report reference numbers.
Ask witnesses to execute affidavits.
Avoid editing screenshots.

Courts may require proof that electronic evidence is authentic, complete, and reliable.

XXXVII. Prescription and Timeliness

Victims should report promptly. Delay can harm both investigation and recovery.

Timeliness matters because:

Fake accounts may be deleted.
Payment accounts may be emptied.
CCTV may be overwritten.
Logs may be retained only for limited periods.
Scammers may change numbers.
Witness memories may fade.
More relatives may be victimized.

Immediate reporting is both practical and legally helpful.

XXXVIII. Prevention for Individuals

Individuals should protect their Facebook accounts and personal information by:

Enabling two-factor authentication
Using strong unique passwords
Securing the email linked to Facebook
Avoiding phishing links
Reviewing login sessions
Limiting public visibility of friends list
Limiting public visibility of personal posts
Avoiding public posting of IDs, addresses, and phone numbers
Warning relatives about fake-account scams
Using trusted payment verification rules
Not sharing OTPs
Checking duplicate profiles regularly
Reporting fake accounts immediately
Using privacy settings for profile photos and friend lists

XXXIX. Prevention for Families

Families should establish a no-panic rule for money requests.

A good family rule is:

No emergency transfer without a call.
No transfer to third-party accounts without verification.
No secrecy in family emergencies.
Use a code word.
Confirm with at least one other family member.
Screenshot suspicious chats before replying.
Report fake accounts together.
Teach elderly relatives about impersonation scams.
Keep a list of real contact numbers.
Never send OTPs or passwords.

Older relatives are often targeted because they may be more trusting and less familiar with account cloning.

XL. Prevention for Businesses and Public Figures

Business owners, professionals, influencers, teachers, pastors, politicians, and community leaders may be impersonated because many people trust them.

They should:

Maintain official pages.
Announce official payment channels.
Use verified contact information.
Monitor fake profiles.
Keep public friend lists private.
Educate clients and followers.
Avoid conducting money requests through personal chat.
Post warnings about impersonation scams.
Use brand monitoring where feasible.
Document reports to platforms.

XLI. Common Mistakes Victims Make

Victims often weaken their case by:

Deleting conversations
Only blocking the scammer without taking screenshots
Failing to get the fake profile URL
Waiting too long to report payment transfers
Not warning relatives immediately
Not filing a formal complaint
Sending angry threats to the scammer
Publicly accusing an unverified person
Sharing sensitive evidence online
Failing to secure the hacked account
Ignoring connected email compromise
Assuming Facebook reports are enough

Platform reports are useful, but they do not replace legal reporting when money is involved.

XLII. Defenses and Evidentiary Issues

An accused person may raise defenses such as:

They did not create the fake account.
Their account was also hacked.
They did not receive the money.
Their e-wallet was used without consent.
They were deceived into receiving funds.
They did not know the funds were from fraud.
The screenshots are fabricated.
The complainant sent money voluntarily.
There is no proof linking them to the Facebook account.
There is no proof they controlled the receiving account.
There is mistaken identity.
There is insufficient authentication of electronic evidence.

This is why digital logs, payment records, device information, affidavits, and lawful platform records are important.

XLIII. Practical Legal Analysis

A typical Facebook impersonation money scam may be analyzed as follows:

Was there impersonation? If the offender used another person’s name, photo, or account, identity theft may be present.
Was there unauthorized access? If the real account was hacked, illegal access may be present.
Was money requested or obtained? If yes, computer-related fraud and estafa may be involved.
Was personal data misused? If photos, names, private messages, or contact lists were used, data privacy issues may arise.
Was a financial account used? If yes, the receiving account holder and transaction trail are crucial.
Was there an accomplice? Money mules, account sellers, or recruiters may share liability.
Was the evidence preserved? Successful prosecution or recovery often depends on screenshots, URLs, logs, receipts, affidavits, and official records.

XLIV. Sample Timeline for a Victim

A victim may proceed as follows:

First Hour

Warn relatives.
Screenshot fake messages.
Get profile URL.
Report fake account.
Secure real account.
Call payment provider if money was sent.

Same Day

File police or cybercrime report.
Prepare affidavit.
Ask relatives to execute affidavits.
Contact bank or e-wallet fraud department.
Request preservation of records.
Post public warning if necessary.

Within the Next Few Days

Follow up with Facebook.
Follow up with payment provider.
Submit additional evidence.
Check for other fake accounts.
Monitor financial accounts.
Coordinate with law enforcement.
Consider legal action for damages.

XLV. Remedies Requested in a Complaint

A complainant may request:

Investigation of the fake or hacked Facebook account
Identification of the account creator or controller
Preservation of digital evidence
Tracing of payment accounts
Freezing or holding funds where legally possible
Deactivation or takedown of fake account
Criminal prosecution
Return of money
Civil damages
Protection from further impersonation
Correction of records
Coordination with Facebook, telcos, banks, or e-wallets

XLVI. Practical Checklist Before Sending Money Online

Before sending money requested through Facebook or Messenger, verify:

Did I call the person through a known number?
Is the payment account under the person’s real name?
Is the request unusually urgent?
Is the person refusing to call?
Is the person asking for secrecy?
Is the account new or duplicated?
Does the language sound unusual?
Did I verify with another family member?
Is the story consistent?
Am I being asked to send multiple transfers?
Am I being asked for OTPs?
Am I clicking a suspicious link?

If verification fails, do not send money.

XLVII. Conclusion

A Facebook impersonation scam asking relatives for money is not merely a social media problem. In the Philippines, it may give rise to criminal, civil, cybercrime, data privacy, banking, telecommunications, and evidentiary issues. The scammer may be liable for identity theft, computer-related fraud, estafa, illegal access, data misuse, and related offenses. Money mules and receiving account holders may also be investigated if they knowingly received, transferred, or withdrew scam proceeds.

The person impersonated is also a victim. They are not automatically liable for money sent by relatives if they did not authorize the fake account, did not send the messages, did not receive the funds, and did not benefit from the scam. The relatives who sent money are direct financial victims and should preserve evidence, report the transaction immediately, and cooperate in filing complaints.

The most important practical steps are speed and documentation: warn relatives, secure the real account, preserve screenshots and URLs, contact payment providers, report the fake account, and file the appropriate complaints. Prevention is equally important. Families should agree that no emergency money request through Facebook or Messenger should be honored without direct verification through a trusted channel.