I. Introduction

A fake Facebook account using another person’s name, photos, personal details, or reputation to ask for money is not merely an “online prank.” In the Philippines, it may give rise to criminal, civil, data privacy, and platform-based remedies. The conduct may involve identity theft, computer-related fraud, estafa, unjust vexation, harassment, defamation, unauthorized use of personal information, and other offenses depending on the facts.

This article discusses what a complainant should know when someone creates or uses a fake Facebook account pretending to be them and solicits money from friends, relatives, customers, co-workers, or the public.

This is general legal information and not a substitute for advice from a Philippine lawyer, prosecutor, law enforcement officer, or data privacy professional handling the specific facts.

II. Typical Scenario

A common fact pattern is as follows:

A person discovers that another Facebook account is using their full name, profile picture, personal photos, employment details, family information, or other identifying data. The fake account sends messages to the victim’s friends or relatives, saying the victim urgently needs money due to an emergency, hospitalization, travel problem, business issue, school expense, or other fabricated reason. The impostor may ask recipients to send money through GCash, Maya, bank transfer, remittance center, cryptocurrency wallet, or another payment channel.

Sometimes the impostor does not create a new account but hacks or takes over the victim’s real account. In other cases, the impostor creates a clone account by copying photos and public information. The fraud may be committed by a stranger, scam syndicate, former partner, disgruntled acquaintance, employee, business competitor, or someone who personally knows the victim.

The legal approach depends on whether the account is fake, hacked, used to deceive others, used to collect money, used to damage reputation, or used to process personal information without authority.

III. Why This Is Serious Under Philippine Law

A fake Facebook account used to impersonate someone and ask for money affects several protected interests:

First, it violates the victim’s identity and reputation. The public may think the victim is personally begging, borrowing, deceiving, or conducting questionable transactions.

Second, it defrauds or attempts to defraud the people who receive the messages. Those recipients may send money believing they are helping the real person.

Third, it involves unauthorized use of personal information, photos, name, likeness, and possibly contact networks.

Fourth, it may involve cybercrime because the acts are committed through a computer system, social media platform, mobile device, electronic communications, or online payment channel.

IV. Possible Criminal Offenses

A. Identity Theft under the Cybercrime Prevention Act

The Cybercrime Prevention Act of 2012, Republic Act No. 10175, penalizes certain cyber-related acts. One relevant offense is computer-related identity theft.

In simple terms, computer-related identity theft involves the unauthorized acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person, whether natural or juridical, through a computer system.

A fake Facebook account using another person’s name, photos, personal details, or identity to mislead others may fall within this concept, especially where the impostor uses the identity to obtain money, gain advantage, deceive contacts, or cause harm.

Important points:

The victim does not need to prove at the beginning that the impostor already received money. If the account clearly uses the victim’s identity without consent and solicits money, a complaint may already be justified.

The stronger the proof of unauthorized use of identifying information, the stronger the complaint. Examples include copied profile photos, use of full name, use of employment details, copied posts, copied family photos, and messages saying “I am [victim’s name]” or implying that the fake account is the real person.

B. Computer-Related Fraud

Computer-related fraud may also apply when the fake account is used to manipulate or deceive recipients into sending money. The fraud is committed through electronic means: Facebook messages, posts, links, payment instructions, QR codes, online banking screenshots, or electronic wallets.

This offense is particularly relevant when the impostor obtains money or attempts to obtain money through deceitful online communications.

A complaint may be stronger if there are screenshots showing:

The fake account pretending to be the victim;
Messages asking for money;
Payment instructions;
Proof that someone actually sent money;
The receiver account, mobile number, bank account, QR code, or remittance details used by the impostor.

C. Estafa under the Revised Penal Code

Estafa, or swindling, may apply when a person defrauds another through deceit, false pretenses, fraudulent acts, or abuse of confidence, causing damage.

In a fake Facebook identity scam, estafa may arise where the impostor falsely represents that they are the victim, invents an emergency, and induces another person to send money.

For estafa, prosecutors usually look for deceit and damage. If someone actually sent money, the complainant should obtain that person’s statement, proof of transfer, screenshots of conversation, and details of the receiving account.

Even if no one paid yet, there may still be basis to report attempted fraud, identity theft, or other cybercrime-related conduct.

D. Traditional Crimes Committed Through ICT

Under the Cybercrime Prevention Act, crimes already punishable under the Revised Penal Code or special laws may carry increased consequences when committed through information and communications technology. Thus, if the acts constitute estafa, libel, threats, coercion, unjust vexation, or another offense, and they were committed through Facebook or electronic communications, the cyber element may be significant.

E. Cyberlibel, Defamation, or Reputation-Based Claims

If the fake account posts statements that damage the victim’s reputation, accuse the victim of crimes, immoral conduct, debt, fraud, sexual misconduct, professional dishonesty, or other defamatory matters, cyberlibel may become relevant.

However, not every fake account is cyberlibel. A fake account that merely uses the victim’s name and asks for money may be more directly treated as identity theft, fraud, or estafa. Cyberlibel becomes more relevant when the impostor publishes defamatory statements to third persons.

F. Grave Threats, Light Threats, Coercions, or Harassment

If the impostor threatens the victim or others, demands payment, blackmails the victim, threatens to release private photos, or coerces people into sending money, other crimes may be considered.

Examples include:

Threatening to post private information unless money is paid;

Threatening friends or relatives who refuse to send money;

Using the fake account to pressure the victim into silence;

Demanding money in exchange for taking down the fake account.

G. Data Privacy Violations

The Data Privacy Act of 2012, Republic Act No. 10173, may be relevant where personal information is collected, used, disclosed, or processed without consent or lawful basis.

Using a person’s name, photo, address, contact details, workplace, school, family information, or other personal data to impersonate them may involve unauthorized processing or misuse of personal information. Where sensitive personal information is involved, the matter may be more serious.

A complaint with the National Privacy Commission may be considered where the issue substantially involves misuse of personal data, identity information, unauthorized disclosure, or personal data breach concerns.

V. Who May File the Complaint?

The primary victim whose identity was used may file a complaint.

Persons who were deceived into sending money may also file complaints, especially for estafa or fraud.

A family member, employer, business partner, or authorized representative may help preserve evidence and report the matter, but formal affidavits should ideally be executed by persons with direct knowledge.

If the victim is a minor, the parent or guardian should assist. If the impersonation involves sexual exploitation, intimate images, grooming, or threats involving a minor, the matter should be treated with greater urgency and reported to appropriate authorities.

VI. Where to Report in the Philippines

A complainant may consider reporting to one or more of the following:

A. Philippine National Police Anti-Cybercrime Group

The PNP Anti-Cybercrime Group handles cybercrime complaints, including online scams, fake accounts, identity theft, and social media-related offenses.

B. National Bureau of Investigation Cybercrime Division

The NBI Cybercrime Division also receives cybercrime complaints and may assist in investigation, digital evidence handling, and coordination with platforms or financial entities.

C. City or Provincial Prosecutor’s Office

A complainant may file a criminal complaint for preliminary investigation with the appropriate prosecutor’s office, supported by affidavits and evidence.

D. Barangay or Local Police

For immediate documentation or blotter purposes, a complainant may report to the local police or barangay. However, for cybercrime investigation, referral to PNP ACG or NBI Cybercrime is often more appropriate.

E. National Privacy Commission

If the main issue involves misuse, unauthorized processing, or exposure of personal data, a complaint or report to the NPC may be considered.

F. Facebook/Meta Reporting Tools

The victim should also report the fake account directly to Facebook/Meta for impersonation. This is not a substitute for a criminal complaint, but it may help stop further harm quickly.

VII. Evidence to Preserve Immediately

Digital evidence is fragile. Fake accounts may be deleted, messages may disappear, usernames may be changed, and scammers may block the victim. Preserve evidence before engaging with the impostor.

Important evidence includes:

Screenshots of the fake profile;

Profile URL of the fake account;

Username or handle;

Facebook user ID if obtainable;

Profile photos used;

Cover photos used;

Posts copied from the victim;

Messages sent by the fake account;

Screenshots showing money solicitation;

Payment instructions, QR codes, bank details, GCash or Maya numbers, remittance details;

Names of persons contacted by the fake account;

Statements from friends or relatives who received messages;

Proof of actual payments, if any;

Receipts, transaction reference numbers, bank transfer confirmations, and wallet transaction screenshots;

Date and time stamps;

Links to posts, stories, reels, comments, or messages;

Screenshots showing that the real victim did not authorize the account;

Evidence that the victim owns the original photos or identity information used.

Best practice: capture full-screen screenshots showing the date, time, browser address bar, profile URL, and relevant messages. Use screen recording where helpful. Do not crop excessively. Save original files. Back them up.

VIII. Affidavits Needed

A strong complaint often includes the following affidavits:

A. Affidavit of the Identity Victim

The victim should state:

Their full name and identifying details;

That they own or use their legitimate Facebook account;

That they discovered a fake account using their name, photo, or identity;

That they did not create, authorize, or control the fake account;

That the fake account contacted people and asked for money;

That the impersonation caused damage, embarrassment, anxiety, reputational harm, or risk of financial loss;

That they are requesting investigation and prosecution.

B. Affidavit of the Person Solicited

A friend, relative, client, or acquaintance contacted by the fake account should state:

How they received the message;

Why they believed or initially believed it was from the victim;

What the fake account asked for;

Whether money was sent;

What payment details were given;

What screenshots or records they preserved.

C. Affidavit of the Person Who Sent Money

If someone paid, their affidavit is critical. It should attach proof of payment and identify the payment destination.

D. Affidavit of Digital Evidence Preservation

Where possible, a person who personally captured screenshots may state how, when, and from what device the screenshots were taken.

IX. Practical Steps for the Victim

Step 1: Do Not Publicly Accuse a Suspect Without Evidence

Even if the victim suspects someone, public accusations may create defamation risks. Report facts to authorities and preserve evidence.

Step 2: Preserve Evidence First

Before warning the impostor, take screenshots, copy URLs, save messages, and ask contacted friends to preserve their conversations.

Step 3: Warn Contacts

Post a warning from the real account, such as:

“There is a fake account using my name and photos. Please do not send money or respond to messages from that account. I have not authorized anyone to solicit money on my behalf. Kindly report the fake profile and send me screenshots if you were contacted.”

This warning should be factual and avoid naming a suspect unless verified.

Step 4: Report the Fake Account to Facebook

Use Facebook’s impersonation reporting feature. Ask close contacts to report the account as impersonating the victim.

Step 5: Secure Your Real Account

Change passwords, enable two-factor authentication, review logged-in devices, check recovery email and phone number, remove suspicious apps, and warn contacts.

Step 6: Report to PNP ACG or NBI Cybercrime

Bring printed and digital copies of evidence. Include IDs, screenshots, URLs, affidavits, and payment details.

Step 7: Notify Payment Platforms

If money was sent, immediately report the receiving account to the payment provider, bank, e-wallet, or remittance company. Request preservation, investigation, freezing where legally possible, and transaction details through proper channels.

Step 8: Consider Filing a Prosecutor’s Complaint

If the suspect is known or traceable, a complaint may be filed with the prosecutor’s office for identity theft, computer-related fraud, estafa, and other applicable offenses.

X. Jurisdiction and Venue

Cybercrime cases may involve complicated jurisdiction issues because the victim, recipient, suspect, servers, and payment accounts may be in different places.

In practical terms, complaints are often filed where the victim resides, where the offended party received the fraudulent message, where damage occurred, where payment was made, or where the cybercrime unit accepts the complaint for investigation.

Because cybercrime can cross city, provincial, and national borders, law enforcement may need to coordinate with social media platforms, telecommunications companies, banks, e-wallet providers, and foreign entities.

XI. Identifying the Perpetrator

Victims often ask: “Can the police find out who made the fake Facebook account?”

Possibly, but it depends on available evidence, speed of reporting, cooperation of platforms, payment trails, device traces, IP logs, telecommunications records, and legal process.

Helpful identifiers include:

Payment account name;

E-wallet number;

Bank account number;

Remittance claim details;

Mobile number used;

Email address used;

Profile URL;

Facebook username;

Linked accounts;

Mutual friends;

Language patterns;

Repeated phrases;

Time of activity;

Location clues;

Device or login information if the real account was hacked.

A payment trail is often more useful than the fake profile itself. Scammers may hide behind fake names, but receiving money usually requires some account, number, wallet, or cash-out method.

XII. If the Victim’s Real Facebook Account Was Hacked

If the impostor used the victim’s actual Facebook account instead of creating a clone, additional issues arise.

The victim should:

Immediately recover the account;

Change password;

Enable two-factor authentication;

Check email and phone recovery settings;

Log out all devices;

Review recent posts and messages;

Download account information if needed;

Notify contacts that the account was compromised;

Preserve evidence of unauthorized access.

Legal theories may include unauthorized access, identity theft, fraud, estafa, data privacy violations, and other offenses depending on what the hacker did.

XIII. If Friends or Relatives Sent Money

Where money was actually sent, the case becomes stronger because there is concrete financial damage.

The paying person should preserve:

Conversation with the fake account;

Proof of transfer;

Reference number;

Name or number of recipient;

Bank or e-wallet transaction confirmation;

Date and time of payment;

Any follow-up messages from the scammer;

Screenshots of the fake profile.

The sender of money may be a direct complainant for estafa or fraud. The identity victim may still be a complainant for identity theft and reputational harm.

XIV. Civil Liability

Aside from criminal liability, the wrongdoer may face civil liability. The victim may claim damages for injury to reputation, mental anguish, anxiety, embarrassment, loss of business, loss of clients, or other harm, depending on proof.

Persons who sent money may seek restitution or recovery of the amounts lost.

Civil claims may be pursued with the criminal action or separately, depending on legal strategy.

XV. Employer, Business, and Professional Concerns

If the fake account uses the identity of a professional, business owner, employee, public official, influencer, seller, or company representative, the harm may extend to clients, patients, customers, students, suppliers, or co-workers.

Additional steps may be appropriate:

Issue a formal advisory;

Notify clients or customers;

Coordinate with the company’s legal or compliance team;

Report to the platform;

Preserve evidence of business losses;

Monitor other cloned accounts;

Warn against unauthorized payment channels.

Businesses should maintain verified pages, official payment channels, public fraud advisories, and internal escalation procedures.

XVI. Special Situations

A. The Fake Account Uses Photos of Children

If the fake account uses photos of minors, especially to solicit money, harass, groom, exploit, or deceive, the matter should be reported urgently. Additional child protection laws may be implicated.

B. The Fake Account Uses Intimate Photos

If intimate images are used, threatened, or distributed, laws on photo and video voyeurism, cyber harassment, grave coercion, unjust vexation, or related offenses may apply.

C. The Fake Account Is Used for Romance Scams

If the fake identity is used to create romantic relationships and solicit money, the case may involve fraud, estafa, identity theft, and possibly syndicated or large-scale scam activity.

D. The Fake Account Is Used Against a Business

If a fake account pretends to be a company officer or employee and asks customers or suppliers to pay invoices, it may involve business email compromise-style fraud, estafa, computer-related fraud, falsification, and civil claims.

XVII. Common Mistakes to Avoid

Do not delete messages before preserving evidence.

Do not rely only on cropped screenshots.

Do not threaten the impostor.

Do not publicly accuse a specific person without proof.

Do not pay the impostor to take the account down.

Do not send personal IDs to the fake account.

Do not click suspicious recovery links.

Do not delay reporting if money was sent.

Do not assume Facebook takedown is enough.

Do not ignore payment details; they may be the best lead.

XVIII. Suggested Evidence Checklist

A complainant preparing a cybercrime complaint should gather:

Government ID of complainant;

Screenshots of real account;

Screenshots of fake account;

Fake account URL;

Screenshots of copied photos or posts;

Screenshots of solicitation messages;

List of persons contacted;

Affidavits of persons contacted;

Proof of payment if any;

Receiving account details;

E-wallet or bank numbers;

Reference numbers;

Dates and times;

Communication with Facebook/Meta;

Proof of account ownership;

Warning post from the real account;

Any prior threats, disputes, or suspects, if relevant.

XIX. Sample Incident Narrative

A complaint narrative may read as follows:

“On or about [date], I discovered that a Facebook account using the name [fake account name] and the profile photo copied from my legitimate Facebook account was sending messages to my relatives and friends. The fake account represented itself as me and asked for money, claiming that I needed funds for [reason]. I did not create, authorize, own, or control said fake account. I did not authorize any person to use my name, photographs, or identity to solicit money. Several persons informed me that they received messages from the fake account. One recipient, [name], was instructed to send money to [payment details]. Attached are screenshots of the fake account, conversations, profile URL, and payment instructions. I am executing this affidavit to request investigation and prosecution for identity theft, computer-related fraud, estafa, and other applicable offenses.”

XX. Sample Public Advisory

A victim may post:

“NOTICE: A fake Facebook account is using my name and photos to ask for money. Please do not respond, click links, or send money to that account. I have not authorized anyone to solicit money on my behalf. If you received a message, please take screenshots, copy the profile link, report the account to Facebook for impersonation, and send the evidence to me. This matter is being reported to the proper authorities.”

XXI. Remedies Against the Fake Facebook Account

The victim may pursue several remedies at the same time:

Platform takedown through Facebook;

Criminal complaint before cybercrime authorities;

Complaint before the prosecutor;

Data privacy complaint, where appropriate;

Bank or e-wallet fraud report;

Civil action for damages;

Public advisory to prevent further fraud.

These remedies are not mutually exclusive. A platform report may stop immediate harm, while a criminal complaint seeks accountability.

XXII. Penalties and Consequences

The exact penalty depends on the offense charged, the evidence, the amount involved, the manner of commission, whether the act was consummated or attempted, and whether special aggravating cybercrime provisions apply.

Possible consequences for the offender may include imprisonment, fines, restitution, civil damages, account takedown, freezing or investigation of financial accounts, and permanent criminal record if convicted.

Where multiple victims are involved, multiple transactions occurred, or the conduct was organized, the case may become more serious.

XXIII. Role of Lawyers

A lawyer can assist by:

Assessing the proper offenses;

Preparing affidavits;

Organizing evidence;

Drafting the complaint;

Coordinating with law enforcement;

Communicating with banks or e-wallet providers;

Representing the victim before the prosecutor;

Advising on civil damages;

Preventing risky public statements by the victim.

A lawyer is especially useful when money was lost, the suspect is known, reputational harm is severe, the victim is a public figure or professional, or the matter involves sensitive personal information.

XXIV. Conclusion

A fake Facebook account using another person’s identity to ask for money may constitute a serious cybercrime in the Philippines. It is not merely an online nuisance. It can involve identity theft, computer-related fraud, estafa, data privacy violations, and civil liability.

The victim should act quickly: preserve evidence, warn contacts, report the fake account to Facebook, secure their real account, document payment trails, and file a complaint with the appropriate cybercrime authorities. The strongest cases are those supported by complete screenshots, URLs, affidavits from persons contacted, payment records, and clear proof that the victim did not authorize the account or solicitation.

In identity-based online scams, speed and documentation matter. The sooner the victim preserves evidence and reports the incident, the better the chance of stopping further harm and tracing the offender.