Quick answer

A fake account is not automatically a crime simply because it uses a false name. It may become unlawful when someone intentionally uses another person’s name, photograph, contact details, or other identifying information without right; publishes defamatory claims; sends threats; stalks or sexually harasses someone; distributes intimate material; extorts money; commits fraud; or targets a child.

If you are being harassed:

Preserve the account, posts, messages, URLs, dates, and other evidence before blocking or reporting it.
Report the profile and each harmful post or message through the platform’s impersonation, harassment, threat, or intimate-image reporting tools.
Secure your real accounts and warn close contacts if the fake account is soliciting money or information.
Report promptly to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or Cybercrime Investigation and Coordinating Center.
Seek urgent police assistance if there is a credible threat, stalking, extortion, sexual exploitation, disclosure of your address, or danger to a child.

Do not assume that deleting the account ends the matter. Platforms may hold subscriber, traffic, and content data that victims cannot obtain directly. Law-enforcement officers may need to act quickly to seek preservation and, when legally required, court-authorized disclosure.

Preserve the evidence before it disappears

Take screenshots, but do not rely on screenshots alone. A screenshot may show what appeared on your screen while failing to establish the account’s full address, when the material was posted, or who controlled it.

Preserve as much of the following as possible:

The complete profile URL, username, display name, profile photograph, user or account ID if visible, and the date and time you accessed it.
Full URLs for individual posts, reels, videos, comments, stories, or public messages.
Screenshots showing the entire screen, including the account name, date, time, and surrounding conversation—not only the offensive sentence.
A screen recording that begins at the platform’s home page or app, opens the profile, and navigates to the offending material.
Original messages, emails, notifications, voice recordings, photographs, or videos. Avoid repeatedly forwarding or editing the originals.
The fake account’s friend requests, followers, tagged persons, shared groups, and interactions with people who can confirm what they saw.
Messages sent to your relatives, employer, customers, school, or friends.
Proof that the photograph, name, business identity, or other information belongs to you.
Evidence of actual harm, such as lost transactions, demands for payment, bank transfers, disciplinary notices, medical records, counselling records, or messages from people who believed the fake account.
A dated incident log describing what happened, who received the material, what action you took, and any platform report or reference number.
Copies of the platform’s acknowledgment, decision, or rejection of your reports.

Keep an untouched copy in secure storage. If possible, export the relevant conversation using the platform’s download feature. Do not crop, annotate, enhance, rename repeatedly, or convert the only copy of a file. These changes do not necessarily destroy evidence, but they can make authenticity and completeness harder to prove.

Ask witnesses to preserve what they received on their own devices and to write down when and how they saw it. Do not coach them on what to say.

Report the account to the platform

Use the reporting option that best describes the conduct. “Fake account,” “impersonation,” “harassment,” “threat,” “fraud,” and “non-consensual intimate image” may be handled through different review systems. Report the account itself and, where possible, report every offending post or message separately.

For Facebook, Meta provides an official process for reporting a profile or Page pretending to be you or someone else. A report may be made even if the person being impersonated does not have a Facebook account. Instagram and Threads also provide an official impersonation-reporting process.

When submitting a report:

State exactly who is being impersonated and identify the genuine account, if any.
Briefly describe the unauthorized use and the harm being caused.
Attach only the identification or supporting information the official form requires.
Save the confirmation number and a copy of what you submitted.
If the account remains online, appeal through the available review process and preserve the rejection notice.

A platform report can help remove content, but it is not the same as filing a criminal complaint. Conversely, a police report does not guarantee immediate removal by a foreign platform. These steps can proceed at the same time.

Secure your real identity and accounts

Change the passwords of your email and social-media accounts, especially if the fake account appeared after an account compromise. Use a different, strong password for each account and enable multi-factor authentication. Review active sessions, recovery addresses, connected applications, forwarding rules, and recent security alerts.

If the impersonator is asking for money, loans, passwords, one-time PINs, or identity documents:

Post a short warning through your verified or genuine channels.
Contact people who were directly approached.
Notify the relevant bank, e-wallet, employer, school, or business.
Ask recipients not to send money or delete their conversation.
Avoid publishing sensitive identity documents merely to prove that you are the real person.

If your home address, live location, child’s school, government ID, financial information, or private contact details have been exposed, consider changing compromised credentials and asking the relevant institution what protective measures are available.

Which Philippine laws may apply?

The correct charge depends on the precise acts, the evidence, the identity and intent of the operator, the content published, and the relationship between the parties. “Online harassment” is a description, not one universal criminal offense.

Computer-related identity theft

Section 4(b)(3) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, covers the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion—without right—of identifying information belonging to another natural or juridical person.

The Supreme Court upheld this provision in Disini v. Secretary of Justice. The Court explained that the provision targets the illegitimate acquisition or use of another person’s identifying data. It does not make every pseudonym, parody, anonymous account, or use of publicly available information criminal. Context and illegitimate purpose matter.

An account using your name and photograph to deceive people, damage you, obtain money, or pass itself off as you may support an identity-theft complaint. A merely anonymous account that criticizes you, without using your identity, presents a different issue.

Cyberlibel

Cyberlibel may arise when defamatory matter covered by the Revised Penal Code’s libel provisions is published through a computer system. A complainant generally must establish a defamatory imputation, publication to someone other than the person defamed, identification of the offended person, and malice as required by law. Defenses and constitutional protections—including truth in legally relevant circumstances, privileged communication, fair comment, and the higher standards applicable to some speech about public figures or public matters—can materially affect the case.

Not every insult, disagreement, negative review, satire, or embarrassing statement is cyberlibel. Whether a statement is defamatory must be assessed in its full context. A fake name also does not remove the prosecution’s obligation to identify the actual operator and prove the offense beyond reasonable doubt.

Do not delay. In its April 8, 2026 ruling in Causing v. People, G.R. No. 258524, the Supreme Court held that cyberlibel prescribes in one year from its discovery by the offended party, the authorities, or their agents. The application of prescription can depend on the pleaded act, discovery, and procedural history, so obtain advice immediately rather than calculating the last day yourself.

Threats, coercion, extortion, fraud, and other offenses committed online

Threatening physical injury, demanding money in exchange for deleting posts, forcing someone to act through intimidation, or using an assumed identity to obtain money may fall under provisions of the Revised Penal Code or special laws. Section 6 of Republic Act No. 10175 covers crimes under the Revised Penal Code and special laws when committed through information and communications technologies and generally raises the applicable penalty by one degree.

The exact classification matters. A demand for money backed by a threat, for example, should not be treated merely as an offensive message. Do not pay, negotiate, or arrange a meeting without law-enforcement guidance when personal safety is involved.

Gender-based online sexual harassment

Section 12 of the Safe Spaces Act, Republic Act No. 11313, addresses gender-based online sexual harassment. Covered conduct can include unwanted sexual remarks and comments, misogynistic, transphobic, homophobic, or sexist slurs; threats; unauthorized uploading or sharing of photographs, voice, or video with sexual content; impersonation; posting lies to harm a victim’s reputation; cyberstalking; and incessant messaging—when the statutory gender-based or sexual elements are present.

Ordinary hostility does not automatically fall under this law. The content, conduct, persistence, and gender-based or sexual character must be examined.

Intimate images and sexual material

The Anti-Photo and Video Voyeurism Act of 2009, Republic Act No. 9995, may apply to recording or reproducing specified sexual acts or intimate areas under circumstances in which a person had a reasonable expectation of privacy, and to copying, selling, distributing, publishing, or broadcasting covered material without the required consent. Consent to recording does not necessarily mean consent to publication or distribution.

Different laws may apply to fabricated sexual images, threats to publish intimate material, or material involving a child. If a child is depicted or targeted sexually, do not download, forward, or repeatedly reproduce the material. Preserve the URL and report it immediately to law enforcement. The Anti-Online Sexual Abuse or Exploitation of Children and Anti-Child Sexual Abuse or Exploitation Materials Act, Republic Act No. 11930, imposes special duties and protections for child-related cases.

Violence against women and their children

If the operator is a current or former husband, dating partner, sexual partner, or a person with whom the woman has a common child, repeated online humiliation, threats, surveillance, or harassment may form part of psychological violence under the Anti-Violence Against Women and Their Children Act, Republic Act No. 9262, depending on the relationship, conduct, and resulting mental or emotional suffering.

Protection orders and other immediate remedies may be available. Contact the police Women and Children Protection Desk, a barangay VAW desk, prosecutor, or lawyer promptly—particularly where the abuse is escalating or accompanied by physical threats.

Cyberbullying involving students

The Anti-Bullying Act of 2013, Republic Act No. 10627, requires elementary and secondary schools to maintain policies addressing bullying, including cyberbullying. School responsibility may extend to off-campus use of personal technology when it creates a hostile school environment, infringes the victim’s rights at school, or materially and substantially disrupts education or school operations.

Report the matter in writing to the school’s designated officer or administration and request the school’s anti-bullying procedure. Preserve evidence of retaliation. School discipline is separate from any criminal, child-protection, or civil process.

Data-privacy violations

Unauthorized use or disclosure of personal information may also raise issues under the Data Privacy Act, but not every fake account automatically produces an actionable case before the National Privacy Commission. The identity of the person processing the data, the purpose, the applicable lawful basis, statutory exclusions, and the steps already taken with the respondent or platform can affect jurisdiction and procedure.

The NPC provides its current formal complaint instructions and complaint form. Its process generally requires a notarized complaint with supporting documents, submitted through an authorized channel. Review the current NPC Rules of Procedure, as amended before filing. An NPC complaint is not a substitute for an urgent police report.

How to make a law-enforcement report

You may approach more than one appropriate intake channel, but disclose any earlier reports and reference numbers to avoid confusion.

National Bureau of Investigation

The NBI offers an official online complaint page and investigative assistance through its Cybercrime Division and regional cybercrime centers. Its current divisions page lists the Cybercrime Division’s official contact information.

Department of Justice cybercrime reporting

The Department of Justice maintains an official cybercrime-incident reporting page. Confirm current contact details on the page before sending sensitive documents.

Cybercrime Investigation and Coordinating Center

The CICC operates a cybercrime complaint service through CICC’s official reporting portal. Hotline and alternative contact availability can change, so verify them on the official site when reporting.

What to bring or submit

Prepare:

A government-issued ID and your contact details.
A chronological, factual account of the incidents.
Printed and electronic copies of the preserved evidence.
The account and content URLs.
Platform report acknowledgments.
Names and contact details of witnesses.
Proof that the identity, photographs, business, or account being copied belongs to you.
Proof of threats, financial loss, emotional or medical harm, or workplace or school consequences.
Information about any suspected operator, clearly marked as fact, inference, or hearsay.
Copies and reference numbers of reports already made elsewhere.

An investigator may ask for a sworn complaint-affidavit and supporting affidavits. Read every statement carefully before signing. Do not identify a suspect as certain when you only have a suspicion based on writing style, timing, mutual contacts, or personal conflict.

Under Section 13 of Republic Act No. 10175, service providers must preserve specified subscriber and traffic data for minimum periods, while content-data preservation generally follows a law-enforcement order. Disclosure of protected account data ordinarily requires lawful process, including a court warrant under the circumstances stated in the Act. This is why prompt reporting—and supplying exact URLs, usernames, and dates—is important.

Common mistakes to avoid

Blocking the account before saving its URL, content, and messages.
Posting the suspected operator’s identity without reliable proof.
Retaliating with threats, doxxing, account hacking, or another fake account.
Editing screenshots so heavily that context and authenticity become uncertain.
Asking many friends to confront or mass-message the account, which may trigger deletion before evidence is preserved.
Paying an extortion demand or arranging a private meeting without police advice.
Forwarding intimate material to friends “for proof.”
Assuming a platform takedown identifies the operator or completes a criminal complaint.
Waiting for the abuse to become severe before seeking preservation of platform records.
Treating every offensive post as cyberlibel without examining publication, identification, context, privilege, and proof of authorship.
Filing identical complaints with several offices without disclosing the other filings.

When help is urgent

Contact local police or emergency services immediately if the account:

Makes a specific or credible threat of violence.
Publishes your address, live location, daily route, or a child’s location.
Appears connected to stalking or an attempted physical approach.
Demands money, sex, intimate material, passwords, or silence.
Threatens to distribute intimate images.
Sexually targets, grooms, or exploits a child.
Impersonates you to obtain money, loans, documents, or access to accounts.
Causes you to fear immediate harm to yourself or another person.

If you are in immediate danger in the Philippines, call 911 or go to the nearest police station. Move to a safe place and tell a trusted person what is happening.

Frequently asked questions

Can I report a fake account if I do not know who created it?

Yes. Provide the exact account details and all available evidence. Identifying the operator may require platform records and lawful investigative process. Do not delay merely because the account uses a false name.

Are screenshots enough?

They are useful, but stronger preservation includes full URLs, original messages, screen recordings, timestamps, witness evidence, and the original device. The authenticity, source, and completeness of electronic evidence may still need to be established.

Should I message the fake account first?

Usually, preserve evidence and report it before making contact. Confrontation may cause deletion, retaliation, or escalation. If there is a threat, extortion, stalking, or child-safety issue, follow law-enforcement advice.

Can the police order Facebook or another platform to reveal the user immediately?

Not merely on a private request. Subscriber, traffic, and content data are subject to legal requirements. Investigators may seek preservation and the appropriate cybercrime warrant or other lawful process. Foreign platforms may also require requests through designated legal channels.

Is using my photograph automatically identity theft?

Not necessarily. Liability depends on the unauthorized conduct, intent, context, and other elements of the applicable law. Using your photograph and name to impersonate you for an illegitimate purpose is materially different from lawful news reporting, commentary, parody, or other authorized use.

Can I sue even if the account has already been deleted?

Potentially. Deletion does not necessarily erase copies, witness evidence, platform records, or the consequences of the conduct. Available criminal, civil, administrative, privacy, school, workplace, or protection-order remedies depend on the facts and applicable deadlines.

How quickly should I act?

Immediately. Content can disappear, platform data may be retained only for limited periods, and legal claims have different prescriptive periods. Cyberlibel, in particular, has a one-year prescriptive period from discovery under the Supreme Court’s April 8, 2026 ruling. Obtain individual legal advice about the actual deadline in your case.

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. The proper remedy depends on the messages, account records, relationship of the parties, harm caused, and admissible evidence. Official legal and procedural sources were last checked on July 27, 2026.