Social media impersonation has evolved from a malicious prank into a sophisticated vehicle for fraud, defamation, and harassment. In the Philippines, where Facebook remains a dominant communication platform, the creation of a fake account using someone else’s identity is not just a violation of community standards—it is a serious criminal offense.

Victims of online impersonation have robust legal mechanisms to unmask perpetrators and hold them criminally and civilly liable under Philippine jurisprudence.

The Legal Landscape: Applicable Philippine Laws

The creation and malicious use of a fake Facebook account triggers several overlapping criminal statutes, depending on the perpetrator’s conduct.

1. Computer-Related Identity Theft

Under Section 4(b)(3) of Republic Act No. 10175 (The Cybercrime Prevention Act of 2012), computer-related identity theft is explicitly criminalized.

Legal Definition: It is the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person (whether natural or juridical) without right.

Application: Copying your full name, profile photos, personal background, and employment details to create an unauthorized lookalike account constitutes a prima facie violation.
Penalties: Imprisonment ranging from prisión mayor (6 years and 1 day to 12 years) or a fine of at least ₱200,000, or both. If no actual damage has yet been caused, the penalty may be lowered by one degree.

2. Cyber Libel

If the dummy account is utilized to post false statements, status updates, or comments that damage your reputation, the offender can be prosecuted for Cyber Libel under Section 4(c)(4) of R.A. 10175.

Elements Required: Imputation of a crime, vice, or defect; publication online; identification of the victim; and malice.
Key Feature: R.A. 10175 raises the penalty for traditional libel by one degree when committed through a computer system. However, the Supreme Court has affirmed that judges retain the discretion to impose a fine rather than imprisonment depending on the context of the case.

3. Computer-Related Fraud and Estafa

If the fake profile is deployed to solicit money (e.g., messaging your friends asking for urgent loans, running fake investments, or selling non-existent goods), the perpetrator commits Computer-Related Fraud (Sec. 4(b)(2), R.A. 10175), which often overlaps with Estafa (Swindling) under Article 315 of the Revised Penal Code.

4. Violation of the Data Privacy Act (R.A. 10173)

Using your personal data—such as personal photos, contact numbers, and home addresses—without your explicit consent for malicious processing can be penalized by the National Privacy Commission (NPC) with hefty administrative fines and imprisonment.

Step-by-Step Enforcement: What to Do

Navigating an online impersonation case requires a precise, legally sound protocol to ensure evidence remains admissible in a Philippine court.

Step 1: Secure and Preserve Evidence

Do not immediately confront the account or alert the creator, as they may quickly delete the profile.

Capture Metadata: Take full screenshots of the fake profile, ensuring the exact URL (specifically the unique Facebook User ID number or customized username) is visible.
Document the Harm: Save screenshots of public posts, direct messages sent to your contacts, and timestamps.
Video Recording: Record a screen video scrolling through the fake account to prove the content is live and dynamic.

Step 2: Initiate the Parallel Takedown Track

Report the account directly to Meta using their "Impersonation" reporting tools. While this will not reveal the perpetrator's identity, it minimizes immediate reputational or financial exposure by forcing a platform-level suspension.

Step 3: File a Complaint with Specialized Law Enforcement

Because the creator of a fake account hides behind an alias, private individuals cannot force Meta or internet service providers (ISPs) to hand over IP logs. You must enlist the help of:

The Philippine National Police - Anti-Cybercrime Group (PNP-ACG)
The National Bureau of Investigation - Cybercrime Division (NBI-CCD)

You will submit a formal Complaint-Affidavit detailing the facts, appended with your preserved digital evidence.

Step 4: The Subpoena Process and Cybercrime Warrants

If the perpetrator is unknown, law enforcement will file John Doe/Jane Doe charges. To unmask the culprit, authorities will apply for a court-issued Warrant to Disclose Computer Data (WDCD) under the Rule on Cybercrime Warrants.

Once issued by a designated Special Cybercrime Court, this warrant legally compels Meta and local telecommunication networks to surrender subscriber data, registration emails, and login/logout IP logs tied to the account.

Civil Remedies: Suing for Damages

Beyond sending the perpetrator to prison, you can file a separate or integrated civil action for Damages under the Civil Code of the Philippines.

Article 26: Expressly mandates respect for human dignity and privacy, giving you cause to sue for online intrusion and identity exploitation.
Articles 19 to 21 (Human Relations): Penalizes the abuse of rights and willful acts that cause loss or injury to another in a manner contrary to morals or public policy.
Compensable Claims: You can demand Moral Damages (for mental anguish and wounded feelings), Exemplary Damages (to set a public example), and Actual Damages (if you suffered quantifiable financial losses).

Critical Practical Considerations

Prescription Periods: The deadline to file an action is strictly bound by law. While Computer-Related Identity Theft enjoys a long prescription period of 15 years, Cyber Libel claims must be handled with urgency, as traditional interpretation limits the filing window for libelous content.
Barangay Conciliation: Because cybercrimes generally require specialized technical investigations and often involve parties across varying territorial jurisdictions, they are typically exempt from mandatory Barangay conciliation proceedings, allowing you to go straight to law enforcement.