In the digital landscape of the Philippines, social media platforms—particularly Facebook—serve as primary hubs for communication, commerce, and community. However, this high digital saturation has a dark side: the proliferation of fake accounts utilizing stolen photos to perpetrate online scams.
In the Philippine legal context, creating a dummy account using someone else’s likeness to defraud others is not merely a violation of platform community guidelines; it is a serious, multi-layered criminal offense cross-cutting several special penal laws and the Revised Penal Code.
I. The Core Criminal Offenses Under Philippine Law
When a perpetrator steals an individual's photos, builds a fake profile, and uses it to scam online users, they commit a series of distinct cybercrimes:
1. Computer-Related Identity Theft
Under Section 4(b)(3) of Republic Act No. 10175 (The Cybercrime Prevention Act of 2012), computer-related identity theft is defined as the intentional, unauthorized acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person.
- Application: Appropriating a person’s public photos, full name, and personal background to set up a look-alike Facebook account without their explicit consent fits perfectly into this definition.
2. Computer-Related Fraud and Cyber-Estafa
If the fake account is leveraged to deceive people—such as selling non-existent goods, soliciting fake donations, or executing investment traps—the perpetrator violates Section 4(b)(2) of R.A. 10175 (Computer-Related Fraud).
- The Escalation Clause: Furthermore, this act constitutes swindling or Estafa under Article 315 of the Revised Penal Code (RPC). Crucially, Section 6 of R.A. 10175 dictates that if an offense punishable under the RPC is committed by, through, and with the use of Information and Communications Technology (ICT), the penalty shall be imposed one degree higher than what is originally prescribed. This transforms a standard fraud charge into a heavy, non-bailable offense depending on the amount defrauded.
3. Unauthorized Processing of Personal Information
The Data Privacy Act of 2012 (Republic Act No. 10173) protects individuals from the weaponization of their personal data. A person's face, name, and personal life constitute personal information.
- Application: Under Section 25 of R.A. 10173, processing personal information without the consent of the data subject or for unauthorized purposes carries separate criminal and civil liabilities.
4. Cyber Libel
If the dummy account is used to post defamatory statements, engage in illicit transactions, or publish vulgar materials that ruin the reputation of the actual owner of the photos, the perpetrator can be charged with Cyber Libel under Section 4(c)(4) of R.A. 10175.
II. Penalties and Liabilities
The Philippine judicial system treats cybercrimes with strict severity to deter digital anonymity:
- Computer-Related Identity Theft & Fraud: Punishable by prision mayor (imprisonment ranging from 6 years and 1 day to 12 years) or a fine of at least Php 200,000.00, or both.
- Cyber-Estafa: Because the penalty is raised by one degree due to ICT use, perpetrators face significantly longer prison sentences than traditional scammers, often stripping them of the immediate right to apply for probation.
- Data Privacy Violations: Unauthorized processing can land a perpetrator in prison for 1 to 3 years, alongside fines ranging from Php 500,000.00 to Php 2,000,000.00.
III. The Dual Categories of Victims
In these legal scenarios, the law recognizes two distinct sets of victims, each possessing different lines of legal remedies:
| Victim Category | Description | Primary Legal Recourse |
|---|---|---|
| The Identity Victim | The person whose photos and name were stolen to create the profile. | Can file charges for Computer-Related Identity Theft, Data Privacy Violations, and Cyber Libel. |
| The Scammed Victim | The person who was financially defrauded or tricked by the fake account. | Can file charges for Computer-Related Fraud and Cyber-Estafa to recover lost funds and imprison the scammer. |
IV. Immediate Action Plan and Evidence Preservation
For an investigation to succeed in the Philippines, digital evidence must be handled correctly to comply with the Rules on Electronic Evidence:
- Preserve the Digital Footprint: Do not simply report and delete. Take high-resolution screenshots of the fake profile, the specific posts, and the chat logs.
- Secure the Unique URL: Standard profile names can be changed instantly. You must capture the unique Facebook Profile ID or URL link (e.g.,
facebook.com/profile.php?id=1000xxxxxxxxx). - Trace the Financial Trail: Most online scammers in the Philippines utilize digital wallets (like GCash or Maya) or bank transfers. Keep receipts of these transactions. Under the SIM Card Registration Act (R.A. 11934), these mobile numbers are tied to verifiable legal identities, making it much easier for authorities to unmask the perpetrator.
- File a Law Enforcement Complaint: Bring the gathered evidence to specialized cybercrime units:
- PNP-ACG: Philippine National Police - Anti-Cybercrime Group
- NBI-CCD: National Bureau of Investigation - Cybercrime Division
Legal Note: Law enforcement agencies can apply for a Warrant to Disclose Computer Data (WDCD) to legally compel Meta/Facebook and telecommunication companies to release IP addresses, log-in locations, and user registration data linked to the fraudulent account.