I. Introduction

Facebook impersonation scams are common in the Philippines. A scammer may create a fake Facebook account using another person’s name, photo, personal information, workplace, school, family details, or public posts. The fake account may then be used to borrow money, sell fake products, solicit donations, demand payment, spread malicious posts, deceive relatives, or damage the real person’s reputation.

This conduct is not a simple “online prank.” Depending on the facts, it may involve identity theft, cyber fraud, estafa, cyber libel, unjust vexation, harassment, data privacy violations, falsification, threats, or other offenses. The victim may be the person whose name and identity were used, the people who were deceived into sending money, or both.

This article discusses the Philippine legal remedies available when a Facebook impersonation scam uses another person’s name.

This is a general legal discussion and not a substitute for advice from a lawyer or law enforcement based on the specific facts of a case.

II. What Is Facebook Impersonation?

Facebook impersonation occurs when a person creates or uses an account, page, profile, or Messenger identity pretending to be someone else.

Common forms include:

Creating a fake Facebook profile using another person’s full name.
Using another person’s profile photo or stolen pictures.
Copying a person’s public posts to make the fake account look real.
Sending friend requests to the real person’s relatives, friends, co-workers, classmates, or customers.
Messaging contacts to borrow money or ask for “emergency” financial help.
Selling products or services under another person’s name.
Asking for GCash, Maya, bank transfer, remittance, crypto, or load payments.
Pretending to be a business owner, lawyer, government employee, teacher, OFW, student, pastor, influencer, or public figure.
Using the victim’s name to spread defamatory, sexual, political, fraudulent, or malicious content.
Using a fake account to harass or threaten others.
Creating a fake account to apply for loans, jobs, rentals, or services.
Using another person’s identity to join groups, transact, or deceive buyers.

The legal consequences depend on what the impersonator did, what information was used, who was harmed, and what evidence is available.

III. Who Are the Victims?

There may be more than one victim.

1. The Person Being Impersonated

This person suffers identity misuse, reputational harm, privacy invasion, harassment, possible exposure to complaints, and emotional distress. Their name may be associated with scams or offensive posts even if they had nothing to do with them.

2. The Persons Deceived by the Fake Account

Friends, relatives, customers, buyers, or strangers may be tricked into sending money or personal data. They may be victims of fraud or estafa.

3. Third Persons Defamed or Harassed by the Fake Account

If the fake account posts accusations, threats, insults, edited photos, or private information about others, those third persons may also have claims.

4. Businesses or Organizations Misrepresented

A scammer may impersonate a business owner, employee, officer, school, church, charity, or public office. This can create liability, consumer complaints, and reputational harm.

IV. Why Facebook Impersonation Is Legally Serious

Facebook impersonation becomes legally serious because it often combines several wrongful acts:

Misuse of identity;
Unauthorized processing of personal information;
Deception;
Fraudulent collection of money;
Defamation;
Harassment;
Misrepresentation;
Unauthorized use of photos;
Social engineering;
Cybercrime;
Damage to reputation;
Emotional distress;
Possible financial loss.

A fake account may be removed by reporting it to Facebook, but takedown alone does not necessarily resolve the legal consequences. If money was taken, reputations were damaged, or private data was used, legal remedies may still be pursued.

V. Applicable Philippine Laws

A. Cybercrime Prevention Act

The Cybercrime Prevention Act of 2012, or Republic Act No. 10175, is one of the most relevant laws in Facebook impersonation cases.

Possible cybercrime issues include:

Computer-related identity theft This may apply where a person intentionally acquires, uses, misuses, transfers, possesses, alters, or deletes identifying information belonging to another, without right.
Computer-related fraud This may apply where deception through a computer system causes damage or prejudice, such as when the fake account is used to obtain money.
Cyber libel This may apply if the impersonation account posts defamatory statements online.
Illegal access or misuse of accounts If the scammer hacked or accessed the real person’s Facebook account, email, phone, or device, additional cybercrime issues may arise.
Aiding or abetting cybercrime Persons who knowingly help the scam may also face liability.
Attempted cybercrime Even unsuccessful attempts may still matter, depending on the offense and facts.

A Facebook impersonation scam is often investigated as a cybercrime because the act is committed through a computer system, social media platform, mobile phone, or online messaging service.

B. Revised Penal Code: Estafa and Fraud

If the fake Facebook account was used to deceive people into sending money, the act may amount to estafa, depending on the facts.

Estafa generally involves deceit or abuse of confidence causing damage or prejudice to another. In impersonation scams, deceit may consist of pretending to be the real person and asking for money, payment, donation, or purchase.

Examples:

“This is my new account. Can you send me ₱5,000? I have an emergency.”
“I am selling a phone. Send down payment to this GCash number.”
“Please donate for my hospital bill.”
“I am your relative abroad. I need money for customs fees.”
“I am your boss. Transfer money now.”

If the victim sends money because of the false representation, estafa or computer-related fraud may be considered.

C. Revised Penal Code: Libel and Defamation

If the fake account posts statements that dishonor, discredit, or contempt another person, defamation issues may arise.

If the defamatory content is posted online, it may be cyber libel.

Examples:

Calling someone a thief, scammer, adulterer, drug user, or criminal without basis.
Posting fake confessions under the victim’s name.
Publishing edited images with defamatory captions.
Pretending to be the victim and posting offensive statements to make the victim appear immoral, dishonest, or abusive.
Sending defamatory messages to the victim’s employer or family.

The real person whose name was used may suffer reputational damage even if the defamatory statement was supposedly “from” them. The person targeted by the defamatory statement may also have a claim.

D. Data Privacy Act

The Data Privacy Act of 2012, or Republic Act No. 10173, may apply when the impersonator uses personal information without authority.

Personal information may include:

Full name;
Photo;
Address;
Contact number;
Birthday;
Workplace;
School;
Family details;
Government ID;
Signature;
Email address;
Social media profile details;
Financial information;
Health information;
Private messages;
Location;
Personal circumstances.

Unauthorized collection, use, sharing, posting, or processing of personal data may lead to liability, especially if sensitive personal information is involved.

The National Privacy Commission may be involved if the case concerns misuse, unauthorized disclosure, or unlawful processing of personal data.

However, purely personal disputes may require careful assessment because data privacy remedies often depend on the nature of the personal data processing and the parties involved.

E. Civil Code: Damages

The victim may pursue civil damages when the impersonation causes injury.

Possible damages include:

Actual damages;
Moral damages;
Exemplary damages;
Attorney’s fees;
Litigation expenses;
Other appropriate relief.

Moral damages may be relevant where the victim suffers mental anguish, anxiety, social humiliation, besmirched reputation, wounded feelings, or similar harm.

Actual damages may be relevant where money was lost, business was affected, job opportunities were damaged, or expenses were incurred to address the scam.

F. Unjust Vexation, Threats, Coercion, or Harassment

If the fake account is used to annoy, threaten, blackmail, intimidate, or pressure someone, other offenses may be considered.

Examples:

“Pay me or I will post your private photos.”
“I will destroy your name.”
“I will message your employer.”
“I will expose your family.”
Repeated abusive messages.
Creating fake accounts repeatedly after being blocked.
Using the victim’s name to harass others.

Depending on the facts, possible issues may include unjust vexation, threats, coercion, grave threats, or other offenses.

G. Anti-Photo and Image-Based Abuse Issues

If the fake Facebook account uses intimate images, edited sexual photos, or private images, additional laws may apply.

Possible issues include:

Voyeurism or image-based sexual abuse;
Cybercrime;
Violence against women and children, where applicable;
Data privacy violations;
Civil damages;
Harassment or threats;
Defamation.

If intimate images are involved, urgent takedown, preservation of evidence, and immediate reporting are important.

H. Special Protection Laws

Depending on the victim, other laws may apply.

If the victim is a woman or child, the facts may involve:

Violence Against Women and Their Children;
Child protection laws;
Anti-bullying concerns, if school-related;
Anti-trafficking laws, if exploitation is involved;
Laws against online sexual abuse or exploitation of children.

If the impersonation involves a public officer, government agency, school, charity, or business, additional administrative or criminal implications may arise.

VI. Common Types of Facebook Impersonation Scams

A. “Emergency Money” Scam

The scammer creates a fake account using the real person’s name and photo, then messages relatives or friends:

“I lost my phone.”
“This is my new account.”
“Please send money urgently.”
“I am in the hospital.”
“I need money for my child.”
“Please send to this GCash number.”

This often targets family members who trust the real person.

B. Fake Online Selling Scam

The fake account offers products using the real person’s identity. Buyers send payment, but the product is never delivered. The real person may later be blamed.

This may involve fake gadget sales, ticket sales, clothing, shoes, appliances, rentals, vehicles, or investment offers.

C. Fake Donation or Charity Scam

The fake account solicits donations for illness, funeral expenses, calamity, church work, animal rescue, school expenses, or community causes.

This can harm both donors and the impersonated person.

D. Fake Investment or Job Offer Scam

The scammer uses another person’s name to recruit people into fake investments, online jobs, cryptocurrency schemes, networking, task scams, or “easy money” programs.

E. Fake Romance or Relationship Scam

A fake account uses another person’s photos and name to build romantic relationships, ask for money, extort private photos, or manipulate victims.

F. Reputation Destruction

The fake account posts offensive, defamatory, sexual, political, racist, or abusive content to make the real person appear responsible.

G. Impersonation of Professionals

Scammers may impersonate lawyers, doctors, teachers, police officers, government workers, accountants, brokers, real estate agents, or business owners. This may expose victims to professional and regulatory harm.

VII. Immediate Steps for the Person Being Impersonated

1. Preserve Evidence Before Reporting the Account

Before reporting the fake account, collect evidence. Once removed, it may become harder to document.

Preserve:

Profile URL;
Screenshots of the profile;
Screenshots of posts;
Screenshots of Messenger conversations;
Names of mutual friends contacted;
Photos used;
Phone numbers, GCash numbers, bank accounts, or remittance details used;
Transaction receipts from victims;
Dates and times;
Group posts or marketplace listings;
Comments and reactions;
Any threats or defamatory statements.

Screenshots should include the date, time, account name, profile URL, and identifying details where possible.

2. Report the Fake Account to Facebook

Use Facebook’s reporting tools for impersonation. The real person and their friends may report the account as pretending to be someone else.

For stronger reporting, the real person may need to show identification or use Facebook’s available reporting procedure.

3. Warn Family, Friends, and Contacts

Post a warning from the real account, but avoid defamatory accusations against a named person unless certain.

A warning may say:

“Please do not transact with any account using my name other than this account. A fake account is using my photos/name and asking for money. I am not requesting funds or selling anything through that account. Please report and block it.”

4. Secure Accounts

Change passwords for:

Facebook;
Email;
Messenger;
Instagram;
GCash or Maya;
Bank apps;
Cloud storage;
Other linked accounts.

Enable two-factor authentication. Log out of unknown sessions. Check recovery email and phone number. Review linked apps.

5. Notify People Who Paid Money

If someone sent money to the scammer, ask them to preserve receipts, screenshots, account numbers, transaction references, and chat records. They may be direct complainants for fraud.

6. Report to Law Enforcement

The victim may report to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or the local police station with cybercrime referral, depending on accessibility and urgency.

7. Consider a Data Privacy Complaint

If the fake account used private personal data, government ID, sensitive information, private photos, or unauthorized disclosures, a complaint with the National Privacy Commission may be considered.

8. Consult a Lawyer

Legal advice is useful if there is financial loss, reputational damage, threats, intimate images, business harm, employment consequences, or a known suspect.

VIII. Immediate Steps for People Who Sent Money

A person deceived by a fake Facebook account should act quickly.

1. Preserve All Evidence

Keep:

Messenger conversation;
Profile link;
Screenshots of the fake account;
Payment receipt;
GCash, Maya, bank, remittance, or crypto transaction details;
Phone number used;
Account name;
QR code;
Reference number;
Date and time of transfer;
Promises made by the scammer;
Product listing or post;
Delivery details, if any.

2. Contact the Payment Provider

Immediately contact GCash, Maya, bank, remittance center, or payment platform. Ask whether the transaction can be frozen, reversed, blocked, investigated, or flagged.

Acting quickly matters because funds may be withdrawn or transferred.

3. File a Police or Cybercrime Report

The person who lost money may file a complaint for online scam, estafa, computer-related fraud, identity theft, or related offenses.

4. Coordinate With the Impersonated Person

The real person can confirm that the account is fake. A written statement or screenshot from the real person may help establish deception.

5. Avoid Further Payments

Scammers may demand additional payments for “processing,” “refund,” “delivery,” “tax,” “verification,” or “case withdrawal.” Do not send more money.

IX. Evidence Checklist

A strong complaint usually includes:

A. Identity Evidence

Valid ID of complainant;
Proof that the complainant is the real person being impersonated;
Screenshot of the real account;
Screenshot of the fake account;
Copy of profile photo or personal details used.

B. Online Evidence

Fake profile URL;
Profile screenshots;
Posts;
Comments;
Stories;
Messenger conversations;
Group posts;
Marketplace listings;
Friend requests;
Names of contacted persons;
Date and time stamps;
Account creation clues;
Other linked accounts.

C. Financial Evidence

GCash or Maya number;
Bank account number;
Account name;
Remittance receiver details;
QR code;
Transaction reference number;
Receipts;
Amount sent;
Date and time of payment;
Proof of non-delivery or false representation.

D. Harm Evidence

Messages from confused friends or relatives;
Complaints from buyers;
Employer concerns;
Business losses;
Anxiety or reputational harm;
Public posts blaming the victim;
Demand letters or complaints received due to the fake account.

E. Suspect Evidence

Known person suspected;
Similar writing style;
Phone numbers;
Email addresses;
Payment account owner;
Delivery address;
IP-related information, if obtained through lawful process;
Witnesses;
Prior threats or disputes;
Admission or confession.

Do not hack the fake account to obtain evidence. Evidence should be collected lawfully.

X. Where to File Complaints

A. Facebook / Meta

Report the fake profile, page, group, Marketplace listing, or Messenger account through platform tools. This may result in takedown but is separate from legal action.

B. PNP Anti-Cybercrime Group

Cybercrime complaints may be brought to cybercrime authorities when the act involves identity theft, online fraud, hacking, cyber libel, threats, harassment, or other cyber offenses.

C. NBI Cybercrime Division

The NBI may investigate cybercrime complaints, especially where tracing, subpoenas, or technical investigation may be needed.

D. Local Police

A local police station may receive initial complaints, especially if the victim cannot immediately go to a cybercrime office. Ask for proper documentation and referral if needed.

E. Prosecutor’s Office

A criminal complaint may be filed with the prosecutor, often supported by affidavits, screenshots, payment records, and law enforcement findings.

F. National Privacy Commission

A data privacy complaint may be appropriate if the issue involves unauthorized processing, misuse, disclosure, or exposure of personal data.

G. Civil Court

A civil case may be considered if damages are significant and the wrongdoer is identifiable.

XI. Is It Necessary to Know the Scammer’s Real Identity?

It is helpful but not always necessary at the start.

Many victims only know the fake profile, phone number, payment account, or transaction reference. Law enforcement may use legal processes to request information from platforms, payment providers, banks, telecoms, or other entities, subject to law and procedure.

However, a criminal case against a specific person usually requires identification of the offender. The investigation may begin with digital and financial traces.

Important leads include:

Payment account holder;
Phone number linked to e-wallet;
Bank account owner;
Device or IP data, where lawfully obtained;
Delivery address;
Email address;
Recovery number;
CCTV from cash-out location, where available;
Admissions or witness testimony.

XII. Liability of the Person Whose Name Was Used

Generally, the real person whose name was used is not liable for the scam if they did not authorize, participate in, or benefit from it.

However, the real person should act quickly once they learn of the impersonation. They should warn contacts, report the account, preserve evidence, and cooperate with victims.

If the real person negligently allowed someone to use their account, knowingly lent their identity, received funds, or ignored obvious misuse, legal issues may arise. But mere impersonation without consent does not make the real person responsible.

XIII. Liability of the Payment Account Owner

A common question is whether the owner of the GCash, Maya, bank, or remittance account used in the scam is liable.

The account owner may be liable if they knowingly participated in the scam, allowed their account to be used, received or withdrew the money, or acted as a money mule.

Possible defenses may include:

Account was stolen or hacked;
SIM was lost;
Identity was used without authority;
Account holder was also deceived;
No knowledge of fraudulent purpose.

The facts matter. Payment accounts are often key evidence in tracing the scam.

XIV. Use of Another Person’s Photo

Using another person’s photo without permission may raise several issues:

Identity theft;
Data privacy violation;
Misappropriation of identity;
Defamation, if used in damaging posts;
Copyright concerns, depending on who owns the photo;
Civil damages;
Platform policy violation.

If the photo is private, intimate, edited, or used for sexual content, the situation becomes more serious.

Even publicly available photos are not automatically free to use for impersonation or fraud.

XV. Use of Another Person’s Name

A person’s name is personal information and a key part of identity. Using another person’s name to deceive others may support identity theft, fraud, civil damages, and data privacy claims.

However, the legal issue is stronger when the name is combined with other details, such as photos, workplace, relatives, messages, payment requests, or false claims.

A mere same-name account is not always impersonation. There must be conduct showing the account is pretending to be the particular person, especially where photos, details, or contacts are copied.

XVI. Cyber Libel Through a Fake Account

A fake account may create cyber libel issues in two ways.

First, the impersonator may post defamatory statements about the real person being impersonated. Second, the impersonator may pretend to be the real person and post defamatory statements about someone else, making it appear that the real person made the accusation.

In either case, the posts should be preserved immediately.

Relevant evidence includes:

Screenshot of the post;
URL;
Date and time;
Comments and shares;
Identity of viewers;
How the post identifies the victim;
Why the statement is false or defamatory;
Harm caused.

Cyber libel cases are fact-sensitive. Legal advice is important before filing or responding.

XVII. If the Fake Account Uses the Victim’s Name to Borrow Money

This is one of the most common forms of Facebook impersonation.

The scammer usually sends messages like:

“This is my new account.”
“I cannot access my old account.”
“Can I borrow money?”
“Please send to this number.”
“Do not call me; my phone is broken.”
“I will pay tomorrow.”
“This is urgent.”

The real person should immediately tell contacts not to send money. The person who paid should file the complaint as a fraud victim, while the impersonated person may file or support a complaint for identity misuse.

XVIII. If the Fake Account Sells Products

If a fake account sells goods using another person’s name, the case may involve:

Estafa;
Computer-related fraud;
Identity theft;
Consumer deception;
Civil damages;
Platform violations.

Buyers should preserve the listing, payment records, and conversation. The real person should issue a warning that they are not selling through the fake account.

If the real person owns a legitimate business, they should also warn customers through official channels.

XIX. If the Fake Account Solicits Donations

Fake donation scams are especially damaging because they exploit sympathy.

Legal issues may include:

Fraud;
Identity theft;
Misuse of personal data;
Possible falsification or false medical claims;
Civil damages.

The real person should clarify publicly that the solicitation is unauthorized. Donors should preserve receipts and report the matter.

XX. If the Fake Account Uses a Public Figure’s Name

Impersonation of a public figure, influencer, politician, celebrity, lawyer, doctor, teacher, or official may cause broader harm. It may involve fraud, reputational damage, misuse of authority, or public deception.

If the impersonation suggests government authority, law enforcement authority, legal services, medical advice, or official transactions, the case may be more serious.

Public figures should document the account, request takedown, warn the public, and consider law enforcement action if fraud or harm occurred.

XXI. If the Real Facebook Account Was Hacked

Impersonation is different from hacking, but the two may overlap.

If the real account was hacked, the scammer may use the genuine account instead of creating a fake one. This can be more dangerous because friends and relatives may believe the messages.

Immediate steps:

Recover the account using Facebook recovery tools.
Change email and social media passwords.
Enable two-factor authentication.
Log out of unknown devices.
Check linked email, phone number, and recovery settings.
Warn contacts.
Preserve screenshots from recipients.
Report financial scams to payment providers and law enforcement.

Hacking may involve illegal access in addition to fraud or identity theft.

XXII. If the Scammer Is Known

If the suspect is known, the victim should still preserve evidence carefully. Do not rely only on suspicion.

Evidence may include:

Prior threats;
Admissions;
Similar wording;
Known phone number;
Payment account connected to suspect;
Witness statements;
Motive;
Screenshots connecting the suspect to the fake account;
Device access;
Shared photos only the suspect possessed.

A complaint should be based on evidence, not guesswork. False accusations may expose the complainant to counterclaims.

XXIII. If the Scammer Is a Minor

If the impersonator is a minor, special rules may apply under juvenile justice laws. The conduct may still be wrongful, but procedure and liability may differ.

Parents, guardians, schools, barangays, social workers, and child protection authorities may become involved.

If the victim is also a minor, child protection and anti-bullying measures may apply.

XXIV. If the Impersonation Happens in School

School-related impersonation may involve bullying, cyberbullying, harassment, defamation, privacy violations, or child protection concerns.

Possible remedies include:

Reporting to school authorities;
Anti-bullying procedures;
Guidance office intervention;
Parent conferences;
Barangay or police report;
Cybercrime complaint for serious cases;
Takedown request;
Data privacy complaint where applicable.

Schools should preserve evidence and avoid dismissing fake account harassment as mere childish behavior when it causes harm.

XXV. If the Impersonation Happens in the Workplace

Workplace impersonation may involve reputational harm, professional discipline, fraud against clients, unauthorized transactions, or harassment.

The employee should:

Inform HR or supervisor immediately;
Provide screenshots;
Clarify that the account is fake;
Warn clients or co-workers if needed;
Report the fake account;
File a complaint if damage occurred.

Employers should be careful not to punish an employee solely because a fake account used their name. Due process and verification are important.

XXVI. Takedown Versus Criminal Complaint

A takedown request aims to remove the fake account or content.

A criminal complaint aims to hold the offender liable.

Both may be pursued. However, there is a practical tension: reporting the account too early may cause it to disappear before evidence is preserved. Therefore, evidence should be collected first whenever safe and possible.

For urgent harmful content, especially intimate images, threats, or ongoing scams, immediate reporting and takedown may be necessary even while evidence collection is ongoing.

XXVII. Affidavit of Denial or Disclaimer

The impersonated person may execute an affidavit stating that:

They did not create or control the fake account;
They did not authorize the use of their name or photos;
They did not ask for money;
They did not receive the payments;
The fake account is unauthorized;
They are willing to cooperate with investigation.

This affidavit may help friends, buyers, employers, banks, payment providers, or law enforcement understand the situation.

XXVIII. Demand Letter or Cease-and-Desist Letter

If the offender is known, a lawyer may send a demand letter requiring the person to:

Stop using the victim’s name and photos;
Delete the fake account;
Preserve records;
Return money;
Issue a correction or apology;
Stop contacting victims;
Pay damages;
Undertake not to repeat the acts.

However, in fraud or cybercrime cases, a demand letter may alert the offender and cause them to delete evidence. Strategy should be discussed with counsel.

XXIX. Preservation Requests

In serious cases, the complainant may ask law enforcement or counsel about preserving digital evidence. Platforms and service providers may retain logs only for limited periods.

Relevant data may include:

Account registration information;
Login logs;
IP addresses;
Linked email;
Linked phone number;
Device data;
Payment account information;
Transaction records.

Private individuals usually cannot obtain all this data directly. Lawful process may be needed.

XXX. Reporting to Facebook: Practical Considerations

When reporting impersonation, it helps if:

The real person reports the fake account;
Friends also report it as pretending to be someone else;
The report includes the real account and fake account;
The fake account clearly uses the real person’s name, photo, or details;
Evidence is preserved before reporting;
The victim continues monitoring for duplicate accounts.

Scammers often create new accounts after one is removed. Continue documenting repeat accounts.

XXXI. Public Warning: What to Say and What to Avoid

A public warning can prevent more people from being scammed. But the victim should avoid naming a suspected person unless there is strong proof.

A safe public advisory may say:

“Someone created a fake account using my name and photos. Please do not send money, share personal information, or transact with that account. I did not authorize it. Please report and block the fake account. If you received messages or sent money, please preserve screenshots and receipts.”

Avoid statements like “X is the scammer” unless legally advised and supported by evidence.

XXXII. Can the Victim Recover Money?

The victim who sent money may attempt recovery through:

Immediate report to e-wallet or bank;
Fraud dispute process;
Police or cybercrime complaint;
Criminal restitution, where ordered;
Civil action for damages;
Settlement, if offender is identified;
Claims against account holder, if legally justified.

Recovery is often difficult if money was quickly withdrawn. Acting immediately improves the chance of freezing or tracing funds.

XXXIII. Can the Impersonated Person Sue for Damages Even If No Money Was Lost?

Yes, if the impersonated person suffered legally compensable harm.

Possible harm includes:

Anxiety;
Embarrassment;
Damage to reputation;
Lost customers;
Employer suspicion;
Family conflict;
Public humiliation;
Legal expenses;
Time and cost spent clearing their name;
Exposure to complaints from scam victims.

The person must prove the wrongful act, the connection to the offender, and the harm suffered.

XXXIV. Can Facebook Be Sued?

Suing the platform is legally and practically complicated. In many cases, the more immediate remedies are reporting the account, preserving evidence, filing with law enforcement, and pursuing the scammer or account holder.

A platform may remove content based on its policies, but liability of the platform for user-generated content depends on complex issues, including jurisdiction, terms of service, applicable law, notice, and the specific facts.

Victims should focus first on takedown, evidence preservation, payment tracing, and law enforcement reporting.

XXXV. If the Fake Account Is Abroad

If the impersonator is outside the Philippines, the case becomes more complicated but not hopeless.

Relevant factors include:

Where the victim is located;
Where the deception was received;
Where payment was sent;
Whether the payment account is in the Philippines;
Whether the offender is Filipino;
Whether Philippine cybercrime law applies;
Whether foreign law enforcement cooperation is needed.

The victim may still report to Philippine cybercrime authorities, especially if Philippine victims were harmed or Philippine payment channels were used.

XXXVI. Jurisdiction and Venue

Cybercrime and online fraud may raise questions of jurisdiction and venue because acts can occur in multiple places.

Possible relevant places include:

Where the complainant resides;
Where the victim received the message;
Where the money was sent;
Where the fake account was accessed;
Where the payment account is maintained;
Where the offender resides, if known;
Where harm occurred.

Law enforcement or counsel can help determine where to file.

XXXVII. Preventive Measures

To reduce risk of impersonation:

Lock down Facebook privacy settings.
Limit visibility of friends list.
Avoid public posting of phone numbers, address, IDs, and family details.
Use watermarks for business photos where appropriate.
Enable two-factor authentication.
Use strong unique passwords.
Review profile from the public view.
Warn relatives not to send money without voice or video confirmation.
Do not post documents showing full personal details.
Monitor duplicate accounts.
Secure email accounts linked to Facebook.
Avoid accepting friend requests from duplicate accounts.

For families, adopt a verification rule: no emergency money transfer without a direct call, video call, or agreed family code word.

XXXVIII. Special Risk: GCash, Maya, and Bank Transfers

Many impersonation scams use e-wallets or bank accounts. Victims should remember:

Account names may be fake, borrowed, or mule accounts;
SIM cards may be registered under another name;
QR codes can conceal numbers;
Scammers may move funds quickly;
Screenshots of receipts are crucial;
Immediate reporting is important.

Payment providers may require a police report, affidavit, transaction reference, and screenshots.

XXXIX. Barangay Remedies

Barangay intervention may be useful if the offender is known and both parties are covered by barangay conciliation rules. However, many cybercrime and fraud cases may need police, prosecutor, or cybercrime authorities, especially if urgent, serious, or involving unknown offenders.

Barangay settlement should not be used to pressure a victim into dropping serious complaints without full understanding of rights and consequences.

XL. Prescription and Delay

Victims should act promptly. Delay may cause:

Loss of platform logs;
Deletion of fake account;
Loss of screenshots;
Withdrawal of funds;
Witnesses forgetting details;
Difficulty tracing phone numbers;
Expiration of complaint periods;
Continued victimization.

Even if the account has already been deleted, saved screenshots, payment records, and witness statements may still support a complaint.

XLI. Practical Complaint Outline

A complaint may be structured as follows:

1. Parties

Identify the complainant, the impersonated person, financial victims, suspected offender if known, and payment account details.

2. Facts

State when the fake account was discovered, what name and photos were used, who was contacted, what messages were sent, and what money or harm resulted.

3. Evidence

Attach screenshots, URLs, transaction receipts, witness statements, fake account profile, and proof of identity.

4. Legal Grounds

Mention possible identity theft, computer-related fraud, estafa, cyber libel, data privacy violation, unjust vexation, threats, or civil damages, depending on facts.

5. Relief Requested

Ask for investigation, preservation of digital evidence, identification of offender, takedown assistance, prosecution, restitution, and other lawful relief.

XLII. Sample Affidavit Points for the Impersonated Person

An affidavit may include:

Full name, age, citizenship, address;
Statement that the person owns the real Facebook account;
Statement that a fake account used their name and photos;
Date the fake account was discovered;
Screenshots attached;
Names of persons contacted by the fake account;
Statement that the person did not authorize the fake account;
Statement that the person did not request money or sell items through the fake account;
Statement that the fake account caused confusion, anxiety, reputation harm, or financial harm to others;
Request for investigation.

XLIII. Sample Affidavit Points for a Person Who Sent Money

An affidavit may include:

Full name, age, citizenship, address;
Statement that they received a message from an account they believed belonged to the real person;
Details of the false representation;
Amount sent;
Payment method;
Transaction reference;
Account number or wallet number;
Date and time of payment;
Discovery that the account was fake;
Screenshots and receipts attached;
Request for investigation and recovery.

XLIV. Defenses Commonly Raised by Accused Persons

An accused person may argue:

They did not create the fake account;
Their phone or account was hacked;
Their e-wallet was used without consent;
The complainant cannot prove identity of offender;
The posts were jokes or parody;
No money was received;
No damage occurred;
The account did not clearly impersonate the complainant;
The statements were true or privileged;
Someone else used their device;
Payment account was borrowed by another person.

The outcome depends on evidence. Digital records, financial records, witness testimony, and admissions may be important.

XLV. Parody, Fan Pages, and Same Names

Not every account using a similar name is illegal impersonation.

Possible lawful or less problematic situations include:

Same-name individuals;
Fan pages clearly labeled as fan pages;
Parody accounts clearly not pretending to be the real person;
Commentary pages;
Public interest discussions.

However, even a so-called parody account may become unlawful if it deceives people, uses private data, commits fraud, harasses, defames, or causes confusion by pretending to be the real person.

XLVI. The Importance of Intent

Intent matters in many cases.

The law may look at whether the account was created to:

Deceive;
Obtain money;
Damage reputation;
Harass;
Hide the offender’s identity;
Misuse personal data;
Threaten;
Commit another crime.

A fake account created with fraudulent intent is treated very differently from a harmless same-name profile. But even without financial fraud, identity misuse may still be actionable if it causes harm or violates the law.

XLVII. Practical Strategy for Victims

A strong response usually follows this order:

Preserve evidence.
Warn contacts.
Report to Facebook.
Secure real accounts.
Gather statements from people contacted.
Collect payment records from those who sent money.
Report to payment provider.
File with cybercrime authorities.
Consider NPC complaint if personal data was misused.
Consult counsel if damage is serious or suspect is known.

The most common mistake is reporting the fake account before saving proof. The second most common mistake is publicly accusing a suspected person without enough evidence.

XLVIII. Practical Strategy for Businesses

If a business owner or professional is impersonated, the response should be more formal:

Issue an official advisory;
Pin the warning on official pages;
Email customers if necessary;
Report the fake account;
Preserve customer complaints;
Coordinate with payment platforms;
File a cybercrime complaint;
Review brand and page security;
Monitor new fake pages;
Use verified channels for transactions;
Remind customers to confirm payment details before sending money.

Businesses should also check whether customer personal data was affected.

XLIX. Practical Strategy for Families

Families should agree on anti-scam rules:

Do not send money based only on chat.
Verify by voice or video call.
Ask personal questions only the real person knows.
Use a family code word for emergencies.
Call another family member to confirm.
Be suspicious of “new account” messages.
Be suspicious of requests to keep the transaction secret.
Do not send OTPs, passwords, IDs, or account numbers.
Report suspicious accounts immediately.

Impersonation scams often succeed because they exploit panic and trust.

L. Conclusion

Facebook impersonation using another person’s name is a serious legal issue in the Philippines. It may involve identity theft, computer-related fraud, estafa, cyber libel, data privacy violations, harassment, threats, and civil liability. The person whose name was used may suffer reputational and emotional harm, while those who sent money may suffer direct financial loss.

The first rule is to preserve evidence before the fake account disappears. The second is to warn others quickly. The third is to secure accounts, report the fake profile, and file complaints with the proper authorities when fraud, threats, defamation, or privacy violations are involved.

A valid legal response depends on the facts: what identity details were used, what messages were sent, whether money was obtained, whether defamatory content was posted, whether private data was exposed, and whether the offender can be traced.

The guiding principle is simple: no one has the right to use another person’s name and identity online to deceive, scam, harass, or destroy reputation.