When someone creates a fake Facebook page, Instagram account, Google Business Profile, TikTok shop, or messaging account using your business name and asks customers for “reservation fees,” “down payments,” or “delivery deposits,” the damage is not only financial. Your real customers may lose money, your brand may be blamed, and the scammer may disappear before anyone identifies them. Philippine law gives you several tools: platform takedown reports, cybercrime complaints, bank or e-wallet escalation, trademark and business-name enforcement, civil claims for damages, and evidence-preservation steps that can make or break the case.

What is a fake business page deposit scam?

A fake business page deposit scam happens when a person pretends to be a legitimate business online and convinces customers to send money before receiving goods or services.

Common examples in the Philippines include:

A fake resort page asking for a 50% room reservation deposit through GCash or Maya.
A fake restaurant or catering page accepting event deposits.
A fake appliance, gadget, furniture, or car-parts page asking for “down payment before shipping.”
A fake travel agency account selling discounted tour packages.
A fake clinic, salon, tattoo studio, or repair service account copying real photos and reviews.
A fake franchise, supplier, or wholesale page asking businesses to pay a “slot reservation.”
A fake Google Maps listing using your business name but a different phone number.

For the legitimate business, the problem is different from an ordinary unpaid invoice. The scammer is using your identity, goodwill, photos, trade name, logo, customer reviews, or address to deceive the public.

In legal terms, the conduct may involve fraud, cybercrime, trademark infringement, unfair competition, identity theft, data misuse, and civil liability for damages, depending on the facts.

Why this is a serious legal issue for your business

Many business owners react by posting, “This is not us. Please beware.” That helps, but it is usually not enough.

A fake page can cause:

customer complaints against your real business;
refund demands from victims who paid the scammer;
negative reviews on your real page;
loss of bookings and sales;
confusion in search results;
misuse of your logo, photos, and employee names;
exposure of customer personal data;
reputational damage that may last even after the page is removed.

The practical goal is not only to punish the scammer. It is to stop the fake page quickly, preserve usable evidence, protect customers, and show that your business acted responsibly.

Philippine laws that may apply

Estafa under the Revised Penal Code

The most basic criminal offense is often estafa, a form of fraud punished under Article 315 of the Revised Penal Code. In simple terms, estafa may exist when a person uses false pretenses or fraudulent acts to induce another person to part with money, causing damage.

The Supreme Court has described the usual elements of estafa by false pretenses as: a false pretense or fraudulent act, made before or at the same time as the fraud; reliance by the victim; and damage suffered because the victim was induced to part with money or property. (Lawphil)

In a fake business page case, the false pretense is usually: “We are the real business,” “This is our official payment account,” or “Your booking/order is confirmed once you send the deposit.”

Cybercrime Prevention Act of 2012, RA 10175

If the scam was done through Facebook, Instagram, TikTok, Messenger, Viber, email, websites, online marketplaces, or other information and communications technology, the Cybercrime Prevention Act of 2012 may apply.

RA 10175 covers certain computer-related offenses, including computer-related fraud and computer-related identity theft. It also states that crimes under the Revised Penal Code and special laws, if committed through information and communications technology, may be covered by the Act, with the penalty generally one degree higher. (Lawphil)

This matters because an ordinary estafa case may become a cybercrime case when the deception is carried out online.

Internet Transactions Act of 2023, RA 11967

The Internet Transactions Act of 2023, RA 11967, protects online consumers and merchants engaged in internet transactions and created the Electronic Commerce Bureau under the Department of Trade and Industry. The law applies to business-to-business and business-to-consumer internet transactions within the DTI’s mandate. (Lawphil)

For legitimate businesses, this is important because the law recognizes that online merchants also need protection. A fake page is not only a consumer problem. It is also an attack on the real merchant’s online identity and trust.

Intellectual Property Code, RA 8293

If the fake page uses your registered trademark, logo, trade name, product photos, packaging design, or branding, the Intellectual Property Code of the Philippines, RA 8293, may apply. The IP Code protects intellectual property rights, including marks used to distinguish goods or services. (Lawphil)

Even if your mark is not yet registered, you may still have possible remedies under business-name rules, civil law, unfair competition principles, and platform impersonation rules. But trademark registration gives stronger proof of ownership and makes takedown and enforcement easier.

Civil Code liability for damages

The Civil Code may apply when the scammer’s acts damage your business reputation, interfere with customer relationships, or cause financial loss.

Relevant provisions may include:

Article 19 — every person must act with justice, give everyone his due, and observe honesty and good faith.
Article 20 — a person who willfully or negligently causes damage contrary to law must indemnify the injured party.
Article 21 — a person who willfully causes loss or injury in a manner contrary to morals, good customs, or public policy must compensate the injured party.
Article 1170 — those guilty of fraud, negligence, delay, or breach of obligations may be liable for damages.

These provisions can support a civil action for damages when the wrongdoer can be identified and sued.

Data Privacy Act of 2012, RA 10173

If the fake page collects names, mobile numbers, IDs, addresses, booking details, medical information, travel documents, or payment screenshots, the Data Privacy Act of 2012 may become relevant. RA 10173 protects personal information in government and private-sector information systems and created the National Privacy Commission. (Lawphil)

A business should also be careful when warning the public. Do not post victims’ full names, phone numbers, IDs, bank details, or unredacted screenshots unless there is a lawful and necessary reason.

SIM Registration Act, RA 11934

Many fake page scammers use prepaid mobile numbers. The SIM Registration Act, RA 11934, requires end-users to register SIMs as a prerequisite to activation. (Lawphil)

This does not mean a victim or business can personally demand subscriber details from a telco. In practice, law enforcement usually needs proper legal process before subscriber information is disclosed. But the registered SIM may help investigators trace the user if the case is properly reported.

Anti-Financial Account Scamming Act, RA 12010

If the scammer used bank accounts, e-wallets, or “mule accounts” to receive deposits, the Anti-Financial Account Scamming Act, RA 12010, may be relevant. The law addresses financial account scamming, including money mule activities connected with proceeds from crimes or social engineering schemes. (Supreme Court E-Library)

For businesses, this means reports should not stop with the platform. You should also document and report the receiving bank account, e-wallet number, QR code, account name, and transaction reference numbers.

What to do immediately when you discover a fake business page

1. Preserve evidence before reporting the page

Do not rush to report the page before saving evidence. Once a page is taken down, deleted, renamed, or blocked, it may become harder to prove what happened.

Save:

full-page screenshots showing the fake page name, URL, profile photo, cover photo, follower count, posts, reviews, and contact details;
screenshots of the scammer’s messages asking for deposits;
payment instructions, QR codes, bank names, e-wallet numbers, account names, and reference numbers;
links to the fake page, posts, reels, ads, comments, and marketplace listings;
customer complaints and proof of their payments;
evidence showing your real official page, website, DTI/SEC registration, business permit, trademark certificate, and official payment channels;
dates and times when each screenshot was taken.

Under Philippine rules, electronic documents may be used as evidence if properly authenticated. The Rules on Electronic Evidence apply when electronic documents or data messages are offered in evidence, and the Supreme Court has recognized that digital materials can be admissible when properly proven. (Lawphil)

Practical tip: take screenshots that show the browser address bar or app profile URL. For important pages, use screen recording while scrolling from the profile name to the deposit instructions.

2. Make an internal incident record

Create a simple incident file with:

Item	Details to record
Date discovered	When your team first saw the fake page
Platform	Facebook, Instagram, TikTok, Google Maps, website, marketplace, Viber, etc.
Fake account URL	Exact link, username, page ID if available
Impersonated business assets	Logo, name, photos, address, staff names, menu, product list
Payment channel used	Bank, e-wallet, QR code, account name, number
Known victims	Names or initials, contact details kept privately
Amounts involved	Deposits requested and paid
Actions taken	Platform report, police report, bank report, public advisory
Evidence folder	Location of screenshots, videos, affidavits, reports

This helps if multiple employees are answering customer messages. It also prevents inconsistent statements.

3. Report the fake page to the platform

Use the platform’s impersonation, scam, intellectual property, or business-profile reporting channel.

For example:

Meta platforms usually allow reports for impersonation, fraud, scams, intellectual property violations, and fake accounts.
Google Maps allows users to report inaccurate or inappropriate business listings, and business owners should use the proper Business Profile support or reporting flow. (Google Help)
TikTok provides a reporting path for impersonation accounts. (TikTok Support)

When reporting, explain clearly:

“This page is impersonating our registered business, using our business name/photos/logo/address, and asking customers to send deposits to an unauthorized account.”

Attach proof of your real business identity, such as:

DTI business name certificate for sole proprietors;
SEC certificate and articles for corporations or partnerships;
mayor’s permit or business permit;
BIR Certificate of Registration;
trademark certificate, if available;
official website and official social media links;
screenshots comparing the real page and fake page.

4. Notify customers without exposing private information

Post a clear public advisory on your official channels.

A good advisory should include:

your official page links;
your official phone numbers and email;
your authorized payment channels;
a statement that you do not accept deposits through the fake account;
a warning not to send money to unverified accounts;
instructions for victims to preserve screenshots and report the incident.

Avoid posting:

full names of victims;
complete bank or e-wallet account numbers of private individuals unless necessary and carefully reviewed;
unverified accusations against a person you cannot yet identify;
insults or threats.

You can say “unauthorized page,” “fake account,” or “impersonating page” without guessing the scammer’s real identity.

5. Report the receiving account to the bank or e-wallet

Ask affected customers to report the transaction immediately to their bank or e-wallet provider. Your business can also submit a merchant-side report, especially if your business name was used.

Provide:

transaction reference number;
date and time of transfer;
amount;
sender and recipient account details;
screenshots of the fake page’s payment instructions;
police blotter or complaint reference, if already available.

Freezing or recovering money is not guaranteed. Scam funds are often moved quickly. But prompt reporting can help preserve transaction trails and may support later investigation.

6. File a cybercrime report

For cybercrime incidents, reports may be made to appropriate law-enforcement offices such as the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or DOJ Office of Cybercrime, depending on the situation. The NBI Cybercrime Division’s citizen’s charter identifies investigative assistance for victims of computer crimes as an external service available to the general public. (National Bureau of Investigation)

Bring or prepare:

valid government ID of the complainant;
proof that you represent the business, such as authorization letter, board secretary’s certificate, special power of attorney, or owner’s affidavit;
business registration documents;
screenshots and URLs;
customer affidavits or written statements, if available;
proof of payments;
platform report reference numbers;
bank or e-wallet report reference numbers.

If you are a corporation, the complainant is usually an authorized officer or representative. Prepare a board resolution or secretary’s certificate if the investigating office asks for proof of authority.

7. Consider a criminal complaint before the prosecutor

Law enforcement investigation may lead to a referral to the prosecutor. In some cases, the business or victims may file a complaint-affidavit directly with the Office of the City or Provincial Prosecutor.

A complaint-affidavit usually states:

who the complainant is;
what business was impersonated;
how the fake page operated;
what false representations were made;
how victims were induced to pay deposits;
what damage was caused;
what laws appear to have been violated;
what evidence is attached.

Affidavits are normally signed and sworn before a prosecutor, notary public, or authorized officer. If a victim is abroad, the document may need notarization before a Philippine consulate or apostille/authentication depending on where it will be executed and used.

Practical evidence checklist

Evidence	Why it matters
Fake page URL and screenshots	Proves the account existed and used your business identity
Deposit instructions	Links the scam to a receiving account or e-wallet
Customer chat logs	Shows false representations and reliance
Payment receipts	Proves money was actually sent
Your real business registration	Proves legitimate identity and authority
Trademark certificate	Strengthens brand ownership and takedown requests
Public advisory	Shows you warned customers once aware
Platform report confirmation	Shows prompt action
Police or NBI report	Supports bank/e-wallet escalation and later prosecution
Affidavits of victims	Helps prove fraud, reliance, and damage

Should the business refund customers who paid the fake page?

Legally, the answer depends on the facts.

If the customer paid a scammer and not your authorized business account, your business is not automatically liable just because your name was misused. However, disputes can become complicated if:

your real page had unclear payment instructions;
staff used personal accounts for deposits;
old payment numbers were still posted online;
your official page was hacked;
your employee or agent participated in the scam;
your business failed to correct a known fake page for a long time;
customers reasonably believed the payment channel was official because of your own communications.

From a risk-management perspective, make your official payment rules unmistakable:

publish one official payment page;
use business-name bank accounts when possible;
avoid employee personal wallets for customer deposits;
issue official receipts or acknowledgment receipts;
confirm bookings only through official channels;
regularly search for fake pages using your business name.

If your official business page was hacked

A hacked official page is more urgent than an impersonation page because customers may reasonably believe the scam posts came from you.

Do these immediately:

Secure all admin accounts and change passwords.
Remove unknown page admins, editors, and business portfolio users.
Revoke suspicious third-party app access.
Enable two-factor authentication.
Report the compromise to the platform.
Preserve logs, emails, login alerts, and screenshots.
Post an advisory once you regain access.
Report fraudulent payment instructions to the bank, e-wallet, and law enforcement.

If customer personal data was exposed, assess whether the incident is a data breach requiring internal documentation or notification under data privacy rules.

Preventive legal protection for Philippine businesses

Register and organize your business identity

At a minimum, maintain updated copies of:

DTI business name registration for sole proprietorships;
SEC registration for corporations or partnerships;
mayor’s permit or business permit;
BIR Certificate of Registration;
official receipts or invoices;
trademark applications or certificates;
domain-name registration records;
official social media page ownership records.

These documents are useful when platforms, banks, government agencies, or investigators ask: “How do we know you are the real business?”

Use official payment channels

Scammers thrive when customers are used to paying random personal accounts. Reduce confusion by using:

business bank accounts under the registered business name;
verified merchant e-wallets when available;
payment links from known providers;
invoices with complete business details;
automated booking confirmations;
official receipts issued promptly.

Avoid telling customers, “Send to my cousin’s GCash” or “Deposit to our staff’s account.” Even if common for small businesses, it creates legal and reputational risk.

Protect your brand online

A practical brand-protection routine includes:

claiming your Google Business Profile;
using consistent usernames across platforms;
registering obvious misspellings or backup usernames;
watermarking photos without ruining usability;
keeping a public list of official channels;
monitoring comments where fake pages reply to customers;
checking Facebook Ads Library or platform ad transparency tools when suspicious ads appear;
asking customers to verify payment accounts before sending deposits.

Register your trademark early

Trademark registration is not only for big companies. Restaurants, resorts, clinics, salons, online stores, construction suppliers, training centers, and local service businesses can benefit from registration.

A registered trademark can help with:

platform takedowns;
cease-and-desist letters;
customs and marketplace enforcement;
investor or franchise due diligence;
civil or administrative IP enforcement;
proving that the business name or logo is yours.

Common mistakes that make fake page cases harder

Reporting before preserving evidence

If the page is removed before screenshots and URLs are saved, you may lose key proof. Always preserve evidence first unless urgent harm requires immediate reporting.

Posting emotional accusations

Public anger is understandable. But accusing a named person without enough proof can expose the business to defamation, privacy, or harassment issues. Keep advisories factual.

Using personal wallets for official deposits

This is one of the biggest practical problems in Philippine small businesses. It becomes difficult to prove which payment channels were official and which were fake.

Ignoring small reports

A customer message saying “Is this your other page?” should be treated seriously. Many scams start with one suspicious inquiry before multiple victims come forward.

Not coordinating with victims

The business may have brand evidence, but victims have the strongest proof of payment, reliance, and damage. Coordinate respectfully and privately.

Special issues for foreigners and overseas Filipinos

Foreign business owners, expats, and overseas Filipinos dealing with Philippine businesses should be aware of practical documentation issues.

If you are abroad and need to submit a statement or affidavit in the Philippines, you may need:

a notarized affidavit;
consular notarization at a Philippine embassy or consulate; or
an apostilled document if executed in a country that is part of the Apostille Convention.

If the business is Philippine-registered but the owner is abroad, a local representative may need a Special Power of Attorney or corporate secretary’s certificate to file reports, request records, or appear before agencies.

Foreigners should also remember that business ownership rules in the Philippines may differ depending on industry, nationality, and constitutional or statutory restrictions. For a fake page incident, however, the immediate focus is usually authority to represent the business, evidence preservation, and reporting.

Frequently Asked Questions

Can I file a case if a fake Facebook page used my business name and asked for deposits?

Yes. Depending on the facts, the conduct may support reports or complaints for estafa, cybercrime, identity theft, trademark infringement, unfair competition, civil damages, or platform impersonation. Start by preserving evidence, reporting the page, and filing with the appropriate cybercrime office or prosecutor.

Is this estafa or cybercrime?

It can be both. Estafa under Article 315 of the Revised Penal Code focuses on fraud and damage. If the fraud was committed through online platforms, phones, websites, or digital payment channels, RA 10175 may also apply.

Can I force Facebook, TikTok, or Google to reveal who made the fake page?

Usually, not by private request alone. Platforms commonly require proper legal process, law-enforcement coordination, or court orders before disclosing account information. This is why filing a proper cybercrime report matters.

Can the bank or e-wallet return the deposit to the victim?

Sometimes, but it is not guaranteed. Scam funds may be transferred quickly. Victims should report immediately to the bank or e-wallet and provide transaction references, screenshots, and police or cybercrime report details when available.

Should my business refund victims who paid the scammer?

Not automatically. If payment went to an unauthorized scammer, the scammer is primarily responsible. But your business should review whether customers were confused because of unclear official payment instructions, hacked accounts, employee involvement, or negligent practices.

Are screenshots enough evidence in the Philippines?

Screenshots can be useful, but they should be properly authenticated. Save URLs, timestamps, screen recordings, original files, chat exports, payment receipts, and witness statements. Do not rely on cropped images alone.

What if the fake page uses my logo and photos but my trademark is not registered?

You may still report impersonation to the platform and pursue other legal remedies, but a registered trademark makes ownership easier to prove. Consider trademark registration if your brand is important to customer trust.

Can I post the scammer’s name, phone number, or bank account publicly?

Be careful. Public warnings should be factual and necessary. Avoid exposing personal data or accusing a specific person unless verified. A safer approach is to post the fake page link, unauthorized payment channel warning, and official payment channels, while giving full details to law enforcement and the bank.

Where should I report a fake business page scam in the Philippines?

Possible reporting channels include the platform itself, the receiving bank or e-wallet, PNP Anti-Cybercrime Group, NBI Cybercrime Division, DOJ Office of Cybercrime, DTI Consumer CARe or E-Commerce Bureau for online transaction concerns, and the prosecutor’s office for criminal complaints. The right combination depends on whether the priority is takedown, tracing, money recovery, or prosecution.

How long does it take to remove a fake page?

Platform takedowns can take hours, days, or longer depending on the quality of the report, proof of business ownership, and platform review. Law-enforcement and prosecutor action usually takes longer. This is why a clear evidence packet and proof of official business identity are important.

Key Takeaways

Fake business pages asking for deposits can involve estafa, cybercrime, IP violations, data privacy issues, and civil damages.
Preserve evidence before reporting the fake page.
Report not only to the platform, but also to the bank or e-wallet and appropriate cybercrime authorities.
Use official business-name payment channels to reduce customer confusion.
Keep business registrations, trademark documents, and official page records ready.
Warn customers clearly, but avoid exposing private data or making unverified personal accusations.
Coordinate with victims because their payment proof and affidavits may be essential.
Prevention is legal protection: clear payment rules, trademark registration, account security, and active monitoring can reduce both scams and liability.