In the digital age, identity theft has evolved from stolen physical wallets to the sophisticated cloning of social media accounts. A rising menace in the Philippines involves cybercriminals creating fake Facebook profiles using a real person's name and photographs, then messaging acquaintances, relatives, or the general public to solicit money under false pretenses—often claiming a sudden medical emergency, a stranded situation, or a temporary financial bind.

For the victim whose identity is stolen, this creates a dual nightmare: severe reputational damage and potential entanglement in criminal investigations.

This comprehensive legal guide explores the criminal offenses, civil liabilities, and step-by-step remedies available under Philippine jurisdiction to combat this form of cybercrime.

1. Criminal Liabilities of the Perpetrator

The Philippine legal system provides a robust framework to penalize individuals who create fake accounts to defraud others. Several distinct laws can be applied simultaneously to prosecute the perpetrator.

A. Computer-Related Identity Theft (R.A. 10175)

The primary legislation governing this offense is Republic Act No. 10175, otherwise known as the Cybercrime Prevention Act of 2012.

Under Section 4(b)(3) of the law, Computer-related Identity Theft is defined as:

The intentional acquisition, use, misuse, transfer, possession, alteration or deletion of identifying information belonging to another, whether natural or juridical, without right.

Application: Creating a Facebook account using someone else’s name, photos, and personal details without their consent perfectly satisfies the elements of this crime.
Penalty: Imprisonment of prision mayor (6 years and 1 day to 12 years) or a fine of at least PHP 200,000.00 up to a maximum amount commensurate to the damage incurred, or both.

B. Cyber Estafa / Swindling (Revised Penal Code in relation to R.A. 10175)

When the perpetrator successfully deceives someone into sending money using the fake profile, they commit Estafa (Swindling) under Article 315 of the Revised Penal Code (RPC) through false pretenses.

The Cybercrime Escalation Clause: Under Section 6 of R.A. 10175, if a crime punishable under the Revised Penal Code is committed by, through, and with the use of information and communications technologies (ICT), the penalty imposed shall be one degree higher than that provided by the RPC.
Penalty: Because of the qualifying use of Facebook, a standard Estafa charge is elevated to Cyber Estafa, drastically increasing the prison sentence depending on the amount defrauded.

C. Violations of the Data Privacy Act of 2012 (R.A. 10133)

By harvesting a victim’s photos and personal details from their legitimate account to populate a fake profile, the perpetrator engages in the Unauthorized Processing of Personal Information under Section 25 of Republic Act No. 10173.

Penalty: Imprisonment ranging from 1 to 3 years and a fine ranging from PHP 500,000.00 to PHP 2,000,000.00.

D. Cyber Libel (If Reputational Damage Occurs)

If the fake profile acts in a way that dishonors, discredits, or places the victim in public contempt (e.g., making offensive posts or begging aggressively in a humiliating manner), the perpetrator can also be charged with Cyber Libel under Section 4(c)(4) of R.A. 10175, which carries a penalty one degree higher than traditional libel.

2. Civil Liabilities: Seeking Damages

Aside from throwing the perpetrator in prison, the victim can file an independent civil action or claim civil damages within the criminal case under the Civil Code of the Philippines.

Article 26 (Violation of Privacy and Peace of Mind): Every person is bound to respect the dignity, personality, privacy, and peace of mind of his neighbors and other persons. Intruding upon or vexing another's privacy can ground an action for damages.
Article 2219 (Moral Damages): The victim can demand Moral Damages for the mental anguish, serious anxiety, wounded feelings, and besmirched reputation caused by the public impersonation and scamming.
Exemplary Damages & Attorney's Fees: Courts can award exemplary damages as a deterrent to the public, alongside reimbursement for the victim's legal expenses.

3. Immediate Action Plan: What the Victim Should Do

If you discover that a fake account is using your identity to solicit money, you must act swiftly to preserve evidence and mitigate damage.

Step 1: Secure and Preserve Digital Evidence

Do not immediately alert the perpetrator or block them from your real account before documenting the evidence. Under the Rules on Electronic Evidence, screenshots must be preserved systematically.

Take full screenshots of the fake profile's timeline.
Copy the exact URL/Web Address of the fake profile (e.g., facebook.com/profile.php?id=...).
Ask friends or victims who were messaged to send screenshots of the entire chat conversation, specifically showing the GCash account numbers, bank details, or remittance names provided by the scammer.

Step 2: Issue a Public Disclaimer

Post a clear announcement on your authentic social media handles.

State clearly that a fake account is circulating.
Explicitly mention that you are not asking for money, loans, or donations.
Advise your network to report and block the profile.

Step 3: Report to Meta (Facebook)

Use Facebook’s built-in reporting tools:

Go to the fake profile.
Click the three dots (...) below the cover photo.
Select Find Support or Report Profile.
Choose Pretending to be Someone $\rightarrow$ Me (or a friend).
Encourage family and friends to do the same to trigger Facebook's automated takedown system.

Step 4: File a Formal Complaint with Law Enforcement

To trace the perpetrator (especially through the bank accounts or mobile wallets they used to collect the money), you must report the incident to specialized cybercrime units:

Philippine National Police - Anti-Cybercrime Group (PNP-ACG): You can visit their headquarters at Camp Crame or submit a report via their official website or regional offices.
National Bureau of Investigation - Cybercrime Division (NBI-CCD): You can file a formal complaint at the NBI main office or regional centers.

Note on GCash/Maya/Banks: Law enforcement agencies can issue requests or coordinate with the Anti-Money Laundering Council (AMLC) and financial institutions to unmask the true identity behind the digital wallets used by the scammer.

4. Jurisdictional Challenges and the Reality of Cyber Prosecution

While the legal remedies are comprehensive, prosecuting social media identity theft poses practical hurdles in the Philippines:

Anonymity & VPNs: Cybercriminals often use burner SIM cards, fake names on digital wallets, and Virtual Private Networks (VPNs) to mask their IP addresses.
The SIM Card Registration Act (R.A. 11934): This law requires the registration of all SIM cards to reduce SMS and cyber fraud. If the scammer used a registered mobile wallet (like GCash or Maya) to receive the scammed funds, law enforcement can subpoena the telecommunications or fintech company to track the registered owner, significantly narrowing down the suspects.

Summary Matrix of Applicable Laws

Offense	Governing Law	Primary Act	Penalty
Computer-Related Identity Theft	Sec. 4(b)(3), R.A. 10175	Using name/photos without right	6 to 12 years imprisonment or $\ge$ PHP 200,000 fine
Cyber Estafa	Art. 315, RPC in relation to Sec. 6, R.A. 10175	Defrauding others of money via the fake profile	Penalty under RPC raised by one degree
Unauthorized Processing	Sec. 25, R.A. 10173 (Data Privacy)	Harvesting and using personal data without consent	1 to 3 years imprisonment + PHP 500k to 2M fine
Cyber Libel	Sec. 4(c)(4), R.A. 10175	Damaging the victim's reputation publicly	Prision correccional in its maximum period to prision mayor in its minimum period