I. Introduction

A fake Facebook account that uses another person’s name, photographs, personal details, or identity to deceive others is not merely an online nuisance. In the Philippines, this conduct may give rise to criminal, civil, administrative, and platform-based remedies, especially when the fake account is used to solicit money, sell fake products, borrow from friends, pretend to be a business, blackmail victims, or damage someone’s reputation.

The legal issue becomes more serious when identity theft is combined with fraud. A person whose identity is copied may suffer reputational damage, emotional distress, privacy violations, harassment, and possible suspicion from people who were scammed. The people who sent money or gave personal information to the fake account may also be victims of cybercrime.

This article discusses the Philippine legal framework, possible offenses, evidence preservation, remedies, and practical steps when a person’s photos and name are used in a fake Facebook account for scams.

II. What Is a Fake Facebook Account for Scams?

A fake Facebook account may involve any of the following:

Using another person’s real name;
Uploading another person’s photographs as profile pictures, cover photos, posts, or stories;
Copying biographical details, school, workplace, address, or family relationships;
Sending messages to the person’s friends, relatives, clients, or followers;
Soliciting money, donations, investments, loans, or emergency assistance;
Selling fake goods or services using the victim’s identity;
Pretending to be the victim to gain trust;
Requesting sensitive personal information, passwords, one-time PINs, bank details, e-wallet transfers, or identification cards;
Posting defamatory or embarrassing content;
Threatening, harassing, or blackmailing the victim or others.

The situation is legally different from parody, commentary, fan pages, or mistaken duplication. A fake account becomes legally actionable when it impersonates a real person without consent, violates privacy, causes damage, deceives others, or is used for unlawful activity.

III. Main Philippine Laws That May Apply

Several laws may apply at the same time. The exact charge depends on the facts, the evidence, the identity of the offender, and the acts committed.

A. Cybercrime Prevention Act of 2012

Republic Act No. 10175, or the Cybercrime Prevention Act of 2012, is the central law for offenses committed through information and communications technology.

A fake Facebook account used for scams may fall under cyber-related offenses because the internet, social media, electronic messages, and digital accounts are used as tools to commit the act.

Possible cybercrime angles include:

1. Computer-related identity theft

Using another person’s identifying information without authority may constitute computer-related identity theft. This is especially relevant when the offender uses the victim’s name, photo, profile information, or other personal identifying data to pretend to be that person.

Identity theft does not always require that money be stolen from the impersonated person. The unauthorized use of personal identifying information may already be significant, especially when used to deceive third parties.

2. Computer-related fraud

If the fake account is used to obtain money, property, services, bank transfers, e-wallet payments, prepaid loads, donations, or other benefits through deceit, computer-related fraud may apply.

Examples include:

Pretending to be the victim and asking friends for emergency money;
Creating a fake business page using the victim’s name and photos;
Selling fake products and receiving payment through GCash, Maya, bank deposit, or remittance;
Pretending to be a relative, employee, public figure, professional, or business owner;
Using fake screenshots or fake proof of legitimacy.

3. Cyber libel

If the fake account posts defamatory statements that identify or refer to a real person, cyber libel may be involved. This is separate from the identity theft and scam. For example, the fake account may post statements accusing the victim of immoral, criminal, dishonest, or disgraceful conduct.

Cyber libel requires more than insult or annoyance. It generally involves a public and malicious imputation that tends to dishonor, discredit, or cause contempt against a person.

4. Aiding, abetting, or attempt

Cybercrime liability may extend to persons who assist, cooperate, or participate in the unlawful conduct. For example, someone who provides e-wallet accounts, bank accounts, SIM cards, fake documents, or technical assistance may potentially be investigated depending on the facts.

B. Revised Penal Code

Even if the act is committed online, traditional crimes under the Revised Penal Code may still apply.

1. Estafa or swindling

Estafa may be committed when a person defrauds another through deceit or abuse of confidence, causing damage. A fake Facebook account used to trick people into sending money may amount to estafa.

Common examples include:

“Emergency” scams asking for hospital funds;
Fake online selling;
Fake investment offers;
Fake job processing fees;
Fake donation drives;
Fake loan offers;
Fake romantic or friendship-based requests for money.

Where the internet or social media is used, cybercrime-related provisions may affect the legal treatment and penalties.

2. Unjust vexation, threats, coercion, or other offenses

Depending on what the fake account does, other offenses may arise, such as unjust vexation, grave threats, light threats, coercion, or other crimes. For example, if the fake account threatens to release private photos unless money is paid, the facts may support more serious charges.

C. Data Privacy Act of 2012

Republic Act No. 10173, or the Data Privacy Act of 2012, protects personal information and sensitive personal information.

Photos, names, addresses, contact details, identification documents, account details, and other personal data may be protected under this law. A fake account that collects, processes, discloses, or misuses personal information without authority may raise data privacy issues.

Possible concerns include:

Unauthorized use of the victim’s name and photo;
Collection of personal details from the victim’s friends;
Disclosure of private information;
Use of screenshots, IDs, or private images;
Misuse of personal data for scams or harassment.

Complaints involving data privacy may be brought before the National Privacy Commission when appropriate.

D. Civil Code

The victim may also have civil remedies. Under the Civil Code, a person may seek damages for injury to rights, reputation, privacy, dignity, peace of mind, or property.

Potential civil claims may include:

Moral damages for anxiety, humiliation, social embarrassment, or reputational harm;
Actual damages for financial loss, lost opportunities, or expenses incurred;
Exemplary damages in proper cases;
Attorney’s fees and litigation expenses, when allowed;
Injunction or other relief to stop continuing harm.

Civil liability may exist alongside criminal liability. A criminal case may also include civil liability unless the civil action is reserved, waived, or separately filed depending on procedural rules.

E. Special Protection for Women, Children, and Sensitive Images

If the fake account uses intimate images, sexual content, child images, or threats involving sexual exposure, additional laws may apply. These may include laws on violence against women and children, photo and video voyeurism, child protection, trafficking, online sexual abuse or exploitation, or related offenses.

Where minors are involved, the matter should be treated urgently. The use of a child’s photo in scams, sexualized content, grooming, or exploitation may trigger serious criminal liability.

IV. Who Are the Victims?

There may be more than one victim.

A. The person whose identity is used

The impersonated person is a victim because their name, image, reputation, privacy, and personal identity are being misused. Even if they did not lose money, they may suffer damage when others believe they are involved in the scam.

B. The people who sent money or information

The persons who transferred money, gave account details, submitted IDs, or relied on the fake account are also victims. They may file complaints for fraud or estafa.

C. Businesses, professionals, and public figures

If the fake account copies a business owner, professional, influencer, public servant, or organization, reputational and financial harm may be broader. Clients may be misled, business goodwill may be damaged, and the fake account may create public confusion.

V. Evidence to Preserve Immediately

Evidence is crucial because fake accounts can be deleted, renamed, blocked, or hidden quickly. Victims should preserve evidence before reporting or confronting the offender.

Useful evidence includes:

Full screenshots of the fake profile;
Profile URL or Facebook link;
Username, profile ID, page ID, or account handle;
Profile photo, cover photo, bio, workplace, school, and copied details;
Screenshots of posts, stories, reels, comments, and messages;
Screenshots showing the scam request;
Names and accounts of people contacted by the fake profile;
Receipts of money transfers, bank deposits, e-wallet transfers, remittances, or payment confirmations;
Chat logs between the fake account and victims;
Dates and times of messages;
Links to posts or conversations;
Any phone number, e-wallet number, bank account, email, or delivery address used;
Witness statements from people who were contacted;
Proof that the photographs and name belong to the real victim;
Proof of damage, such as complaints from friends, lost clients, reputational harm, or expenses.

Screenshots should show the entire screen when possible, including date, time, URL, and account name. It is also helpful to record the screen while opening the profile and messages, but this should be done carefully and without violating privacy laws.

For stronger evidence, the victim may consider notarizing an affidavit, executing screenshots with a sworn statement, or seeking assistance from law enforcement or counsel for proper evidence preservation.

VI. Practical First Steps

A victim may take these steps:

1. Do not immediately engage the fake account

Confronting the scammer may cause them to delete the account and destroy evidence. Preserve evidence first.

2. Warn close contacts

The victim should immediately inform family, friends, clients, and followers that the account is fake and that they should not send money or personal information.

A short advisory may say:

“Please be informed that a fake Facebook account is using my name and photos. I am not asking for money, donations, loans, or payments through that account. Please report and block it. If you were contacted or sent money, preserve screenshots and receipts.”

3. Report the account to Facebook

Use Facebook’s reporting tools for impersonation, fake account, scam, harassment, or intellectual property/privacy violation as applicable.

The victim should ask friends and contacts to report the account as impersonating them. However, mass reporting should not replace legal evidence preservation.

4. Secure personal accounts

The victim should check whether their real Facebook account, email, or phone number has been compromised. Recommended steps include changing passwords, enabling two-factor authentication, reviewing login sessions, checking recovery emails and numbers, and updating privacy settings.

5. Gather statements from people contacted

People who received messages from the fake account should be asked to preserve screenshots and provide details of what happened.

6. Report to authorities

The victim may report to the Philippine National Police Anti-Cybercrime Group, the National Bureau of Investigation Cybercrime Division, or local police units that can assist in cybercrime complaints.

Where data privacy issues are central, a complaint may also be considered before the National Privacy Commission.

7. Consult counsel

A lawyer can help determine whether to file a criminal complaint, civil action, data privacy complaint, request for takedown, or demand letter.

VII. Where to File a Complaint

Depending on the facts, complaints may be brought before:

PNP Anti-Cybercrime Group;
NBI Cybercrime Division;
Local police station for initial assistance or blotter;
Office of the City or Provincial Prosecutor;
National Privacy Commission for data privacy-related violations;
Courts, if civil action or injunctive relief is necessary;
Facebook/Meta’s internal reporting system for takedown.

A police blotter alone does not necessarily mean a criminal case has been filed. It may serve as an initial record. For prosecution, the complainant usually needs to submit evidence and affidavits for evaluation.

VIII. Possible Criminal Liability of the Fake Account Operator

The fake account operator may face liability if evidence shows that they:

Created or controlled the fake account;
Used the victim’s name, photographs, or personal information without consent;
Intended to deceive others;
Solicited or received money;
Posted defamatory content;
Collected personal information unlawfully;
Used accounts, wallets, bank accounts, or phone numbers connected to the scam;
Coordinated with others to carry out the scheme.

The scammer may attempt to hide behind fake names, VPNs, prepaid SIMs, dummy emails, mule accounts, or borrowed e-wallets. However, investigators may look at digital traces, account recovery details, payment trails, phone numbers, IP logs, device information, transaction records, and witness statements, subject to legal procedures.

IX. Liability of Money Mules or Account Holders

Scams often use bank accounts, e-wallets, or remittance names that belong to another person. These persons may claim they merely lent their account, received money for a friend, or did not know the source of funds.

However, account holders may become part of the investigation if their accounts received scam proceeds. Their liability depends on knowledge, participation, benefit, and surrounding circumstances.

People should not lend bank accounts, e-wallet accounts, SIM cards, IDs, or social media accounts to others. Doing so can expose them to investigation and possible liability.

X. What If the Scammer Is Unknown?

A complaint may still be initiated even if the real identity of the scammer is unknown. The complaint may describe the respondent as an unknown person using a specific Facebook profile, phone number, e-wallet account, bank account, or other identifier.

Investigators may then use lawful processes to trace the account, request information, examine payment channels, or identify persons involved. The victim should provide as much identifying data as possible.

XI. Is Using Someone’s Photo Automatically a Crime?

Not every use of a photo is automatically criminal. Context matters.

It may be legally actionable when the photo is used:

Without consent;
To impersonate the person;
To deceive the public;
To solicit money;
To damage reputation;
To harass or threaten;
To collect personal information;
To create fake credibility;
To falsely suggest endorsement, affiliation, or authority.

A person’s publicly visible photo on Facebook is not free for anyone to use for impersonation or fraud. Public availability does not mean unlimited consent.

XII. What If the Fake Account Says It Is “Not the Real Person”?

A disclaimer may reduce confusion in some cases, but it does not automatically remove liability. If the account still uses the person’s identity, misleads others, collects money, or causes harm, the operator may still face legal consequences.

A disclaimer is especially weak if it is hidden, contradicted by the account’s conduct, or used as a shield while the account continues to scam people.

XIII. What If the Fake Account Is a Parody or Fan Account?

Parody, commentary, or fan accounts may exist, but they should not impersonate a real person in a way that deceives others. They should not use the identity for scams, harassment, defamation, or privacy violations.

A parody defense is unlikely to help where the account asks for money, pretends to be the real person in private messages, uses real personal details to gain trust, or causes victims to believe they are transacting with the real person.

XIV. Remedies Available to the Impersonated Person

The impersonated person may consider the following remedies:

A. Platform takedown

Report the fake account to Facebook for impersonation, fraud, fake account, or privacy violation.

B. Criminal complaint

File a complaint for cybercrime-related offenses, estafa, identity theft, cyber libel, threats, or other applicable crimes.

C. Data privacy complaint

Where personal information was misused, disclosed, or processed unlawfully, a complaint before the National Privacy Commission may be appropriate.

D. Civil action for damages

The victim may seek damages for reputational harm, emotional distress, financial loss, or violation of rights.

E. Public advisory

The victim may post a clear warning to prevent further scams. The advisory should be factual and avoid accusing a named person unless supported by evidence.

F. Demand letter

If the identity of the offender is known, counsel may send a demand letter requiring takedown, cessation, retraction, preservation of evidence, and payment of damages. In some cases, however, a demand letter may alert the offender and cause destruction of evidence, so strategy matters.

XV. Remedies Available to People Who Were Scammed

People who sent money or gave personal information to the fake account should:

Preserve all screenshots and receipts;
Report the transaction to the bank, e-wallet provider, or remittance center;
Request freezing, reversal, or investigation if still possible;
Report the fake account to Facebook;
Coordinate with the impersonated person;
File a complaint with cybercrime authorities;
Submit affidavits and proof of payment;
Monitor accounts for identity theft or unauthorized access.

They should not blame the impersonated person unless there is evidence that the real person participated in the scam. In many cases, the real person is also a victim.

XVI. Public Advisory Template

A victim may post something like this:

PUBLIC ADVISORY

A fake Facebook account is using my name and photos without my consent. Please be informed that I am not connected with that account and I am not asking for money, loans, donations, payments, investments, or personal information through it.

If you receive any message from the fake account, do not send money or provide personal details. Please take screenshots, report the account for impersonation, and inform me immediately.

This matter is being documented for reporting to the proper authorities.

XVII. Affidavit Points to Include

An affidavit for reporting may include:

Full name, address, and contact details of the complainant;
Statement that the complainant is the person whose name and photos were used;
Description of the fake account;
Facebook profile link or username;
Date the fake account was discovered;
How the complainant discovered it;
Screenshots attached as annexes;
Explanation that the complainant did not authorize the use of their identity;
List of people contacted by the fake account;
Description of scam messages or posts;
Proof of money obtained, if any;
Damage suffered by the complainant;
Request for investigation and appropriate action.

XVIII. Sample Complaint Narrative

A complaint may state:

I discovered that an unknown person created or operated a Facebook account using my name and photographs without my consent. The account appears to impersonate me and has been contacting my friends, relatives, and acquaintances. The fake account has asked for money and represented itself as me, causing confusion, damage to my reputation, and possible financial loss to persons who believed they were communicating with me. I never authorized the creation of the account, the use of my photographs, or any request for money. I respectfully request investigation and appropriate legal action.

XIX. Preventive Measures

To reduce the risk of impersonation:

Adjust Facebook privacy settings;
Limit public visibility of photos and friend lists;
Add two-factor authentication;
Use strong, unique passwords;
Avoid posting identification documents;
Watermark business or professional photos where appropriate;
Regularly search one’s name on Facebook;
Warn friends not to trust money requests without verification;
Verify payment requests through a separate channel;
Avoid oversharing personal details used for identity verification.

For businesses and professionals, it may help to maintain an official verified page, publish official contact channels, and warn clients about fake accounts.

XX. Common Mistakes to Avoid

Victims should avoid:

Deleting conversations before saving screenshots;
Warning the scammer before preserving evidence;
Posting unsupported accusations against a suspected person;
Sharing private personal data of suspects online;
Encouraging online harassment or vigilante action;
Paying ransom or settlement without legal advice;
Assuming Facebook takedown is enough;
Ignoring reports from people who were scammed;
Using illegal hacking or unauthorized access to identify the scammer.

The goal is to preserve evidence, stop further harm, and use lawful remedies.

XXI. Importance of Timeliness

Speed matters. Fake accounts can disappear quickly. Money can be transferred through multiple accounts. Chat histories may be deleted. Victims should act as soon as they discover the fake account.

The first priority is evidence preservation, followed by public warning, platform reporting, account security, and legal reporting.

XXII. Conclusion

A fake Facebook account using another person’s photos and name for scams is a serious legal matter in the Philippines. It may involve cybercrime, identity theft, fraud, estafa, data privacy violations, cyber libel, civil damages, and other offenses depending on the facts.

The impersonated person is not merely embarrassed or inconvenienced; they may be a victim of identity misuse and reputational harm. The people deceived into sending money are also victims. Both groups should preserve evidence, report the fake account, coordinate with authorities, and consider legal remedies.

In online impersonation cases, documentation is often the strongest first defense. Screenshots, links, transaction receipts, witness statements, and timely reports can make the difference between a vague complaint and an actionable case. The safest approach is to act quickly, preserve evidence carefully, avoid public speculation, and seek proper legal assistance where needed.