A fake social media profile using your name, photos, business identity, or personal details is not “just an online issue.” In the Philippines, it may be a cybercrime, a privacy violation, a fraud case, a harassment case, a civil damages case, or a combination of these. The correct case depends on what the fake account is doing: simply pretending to be you, posting damaging statements, asking your friends for money, using your private photos, harassing you sexually, or impersonating your business.
The most common case for a fake Facebook, Instagram, TikTok, X, LinkedIn, or messaging account using your identity is computer-related identity theft under Republic Act No. 10175, or the Cybercrime Prevention Act of 2012. But that is not the only possible legal remedy.
What case can you file for a fake social media profile using your identity?
In many situations, the main complaint is:
Computer-related identity theft under Section 4(b)(3) of Republic Act No. 10175, the Cybercrime Prevention Act of 2012.
This provision penalizes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person or entity, without right.
In simple terms, this may apply when someone uses your:
- Name
- Photos
- Videos
- Username or handle
- Business name or logo
- Personal details
- Contact number
- Email address
- Screenshots of your ID
- Family photos
- Professional profile
- Reputation or public identity
A fake profile can become more serious when the impersonator uses it to scam people, damage your reputation, expose private information, or harass you.
Legal basis: computer-related identity theft under RA 10175
Under Section 4(b)(3) of RA 10175, computer-related identity theft involves the use or misuse of another person’s identifying information through a computer system, without authority.
A fake social media profile may fall under this law if the facts show:
- The offender used information that identifies you.
- The use was intentional.
- The offender had no right or permission to use it.
- The act was done through a computer system, social media platform, messaging app, website, or similar digital means.
The law also states that if no damage has yet been caused, the imposable penalty may be one degree lower. But in practice, complainants should still document actual or potential damage, such as emotional distress, reputational harm, loss of clients, scam victims contacting you, family conflict, workplace issues, or threats.
Under Section 8 of RA 10175, offenses under Section 4(b) generally carry serious penalties, including imprisonment and/or fines. This is why cybercrime complaints are usually handled by specialized units such as the PNP Anti-Cybercrime Group or the NBI Cybercrime Division, not merely by ordinary barangay blotter.
Other possible cases depending on what the fake profile does
A fake account case is rarely limited to one law. The correct legal theory depends on the conduct.
| Situation | Possible case or remedy |
|---|---|
| Someone made a fake account using your name and photo | Computer-related identity theft under RA 10175 |
| The fake account posts false accusations or insulting claims about you | Cyber libel under RA 10175 and Articles 353 and 355 of the Revised Penal Code |
| The fake account asks your friends, clients, or relatives for money | Computer-related fraud, estafa, identity theft, and possibly financial account scamming |
| The fake account uses your private or intimate images | RA 9995, Anti-Photo and Video Voyeurism Act of 2009; possibly RA 10175 |
| The fake account sexually harasses, stalks, or targets you online | RA 11313, Safe Spaces Act; possibly RA 10175 |
| The victim is a child and the account sexualizes or exploits the child | RA 11930, Anti-OSAEC and Anti-CSAEM Act |
| The fake account exposes your personal information | Data Privacy Act complaint with the National Privacy Commission |
| The act causes humiliation, anxiety, business loss, or reputational damage | Civil damages under the Civil Code |
| The fake account impersonates a company or professional practice | Identity theft, unfair competition issues, civil damages, and possible cybercrime remedies |
When fake profile impersonation becomes cyber libel
A fake account is not automatically cyber libel just because it uses your picture. Cyber libel requires defamatory content.
Cyber libel may apply when the fake profile posts or sends statements that tend to dishonor, discredit, or expose you to contempt. The legal basis is Article 353 of the Revised Penal Code, Article 355 on libel by writings or similar means, and Section 4(c)(4) of RA 10175 when committed through a computer system.
Examples may include fake posts claiming that you are:
- A scammer
- A thief
- An adulterer
- A drug user
- A corrupt employee
- A prostitute
- A fake professional
- A person with a disease, criminal record, or immoral conduct, if stated maliciously and falsely
The Supreme Court in Disini v. Secretary of Justice, G.R. No. 203335 upheld the constitutionality of cyber libel, but treated it as libel committed through a computer system. The Court also limited liability in important ways, especially as to persons who merely receive or react to online content.
A practical point: the Supreme Court has also clarified that cyber libel prescribes in one year from discovery, not 12 or 15 years. This was reaffirmed in the Supreme Court’s 2026 public information release, SC Affirms Cyber Libel Prescribes One Year from Discovery. If the fake account posted defamatory material, do not wait too long before preserving evidence and filing.
If the fake profile is asking people for money
If the impersonator uses your identity to borrow money, solicit donations, sell fake items, ask for GCash transfers, or redirect payments, the case may involve more than identity theft.
Possible charges include:
- Computer-related identity theft under RA 10175
- Computer-related fraud under Section 4(b)(2) of RA 10175
- Estafa or swindling under Article 315 of the Revised Penal Code, especially when deceit causes someone to part with money or property
- RA 12010, the Anti-Financial Account Scamming Act (AFASA), if financial accounts, e-wallets, mule accounts, or social engineering schemes are involved
- RA 8484, the Access Devices Regulation Act, if credit cards, account numbers, payment credentials, or access devices are misused
In scam-related impersonation, ask every person contacted by the fake account to preserve:
- Chat screenshots
- Profile links
- Payment receipts
- GCash, Maya, bank, or remittance records
- Account numbers used
- Phone numbers and email addresses used
- Delivery addresses, tracking numbers, or marketplace listings
- Any audio, video, or call logs
The victim whose identity was used and the people who lost money may all become important complainants or witnesses.
If the fake profile uses your private photos or sexual content
If the fake account posts private, intimate, nude, sexual, or voyeuristic images, report and preserve evidence immediately.
Possible laws include:
- RA 9995, Anti-Photo and Video Voyeurism Act of 2009, which protects dignity and privacy against unauthorized recording, copying, reproduction, sharing, or distribution of private sexual images or videos
- RA 10175, if the act is committed through a computer system
- RA 11313, Safe Spaces Act, if the conduct qualifies as gender-based online sexual harassment
- RA 11930, Anti-Online Sexual Abuse or Exploitation of Children and Anti-Child Sexual Abuse or Exploitation Materials Act, if a minor is involved
If a child’s photos are used, especially in a sexual, exploitative, humiliating, or predatory way, treat it as urgent. A parent, guardian, school official, social worker, or law enforcement officer may need to act quickly to prevent further circulation.
Can you file a data privacy complaint?
Yes, in appropriate cases.
The Data Privacy Act of 2012, RA 10173, protects personal information in information and communications systems. A fake profile may raise data privacy concerns if someone collected, used, disclosed, or misused your personal information without a lawful basis.
A complaint with the National Privacy Commission (NPC) may be relevant if the issue involves:
- Unauthorized use of your personal information
- Malicious disclosure of private details
- Posting your ID, address, phone number, medical information, or private records
- Doxxing or exposing information to harass you
- Misuse of photos or personal data by an organization, employer, school, business, or platform user
The NPC states that a person may file a complaint if personal information has been misused, maliciously disclosed, improperly disposed, or if data privacy rights have been violated. For formal complaints, the NPC generally requires a specific complaint format, supporting evidence, and notarization. See the NPC’s official guide on filing a complaint.
A privacy complaint is different from a criminal cybercrime complaint. In some cases, you may pursue both.
Civil damages for humiliation, anxiety, and reputational harm
Even when the evidence is not enough for a criminal conviction, the Civil Code may still provide remedies.
Relevant Civil Code provisions include:
- Article 19 — every person must act with justice, give everyone his due, and observe honesty and good faith.
- Article 20 — a person who willfully or negligently causes damage contrary to law shall indemnify the injured person.
- Article 21 — a person who willfully causes loss or injury in a manner contrary to morals, good customs, or public policy shall compensate the injured party.
- Article 26 — protects personal dignity and may cover acts such as disturbing private life, intriguing to alienate a person from friends, or humiliating another because of personal condition.
- Article 32 — allows damages for violation of certain constitutional rights and liberties.
Civil remedies may be useful when the fake profile caused:
- Loss of clients or business
- Cancellation of employment or professional opportunities
- Emotional distress
- Family conflict
- Public humiliation
- Harassment by strangers
- Damage to reputation
- Expenses for takedown, documentation, or legal action
A civil case focuses on compensation, injunction, and other relief. A criminal case focuses on punishment of the offender. They may overlap, but they are not the same.
Step-by-step guide: what to do when someone makes a fake profile using your identity
1. Do not immediately confront the impersonator
Many victims instinctively message the fake account, threaten the person, or post angry public warnings. That can backfire.
Before confrontation, preserve evidence. Fake accounts can be deleted, renamed, made private, or transferred. Once the account disappears, tracing becomes harder.
2. Capture evidence properly
Take clear screenshots and screen recordings showing:
- The fake account’s profile page
- URL or profile link
- Username or handle
- Profile photo and cover photo
- Posts, captions, comments, stories, reels, or videos
- Messages sent by the fake account
- Date and time visible on the device, if possible
- List of mutual friends or followers, if relevant
- Any phone numbers, payment details, email addresses, or links used
- Proof that the photos or details belong to you
Do not crop screenshots too tightly. Investigators need context.
For stronger documentation, prepare a simple evidence folder:
| Evidence | Why it matters |
|---|---|
| Screenshots of the fake profile | Shows impersonation |
| URL or account link | Helps investigators and platforms identify the account |
| Screenshots of posts or messages | Shows the exact harmful act |
| Your original photos or profile | Proves the content was taken from you |
| Messages from confused friends or customers | Shows impact and possible witnesses |
| Payment receipts, if scam-related | Connects the account to fraud |
| Notarized affidavit | Converts your story into sworn evidence |
3. Report the account to the platform
For Facebook, you can use Meta’s official page for reporting a profile or Page pretending to be you or someone else, or the direct form to report an impostor account.
Platform reporting is useful for takedown, but it does not automatically create a Philippine legal case. If the impersonation is serious, do both: report to the platform and prepare a legal complaint.
4. Secure your own accounts
Change passwords and turn on two-factor authentication for:
- TikTok
- Gmail or Yahoo Mail
- Apple ID or Google account
- Online banking and e-wallets
- Work email
- Business pages and ad accounts
Check whether your email or phone number was used for account recovery. If your own account was hacked, that may involve illegal access or other cybercrime offenses under RA 10175.
5. Warn close contacts carefully
If the fake account is messaging people, warn family, friends, employees, clients, or customers. Keep the warning factual.
For example:
Someone is using a fake account with my name and photos. Please do not send money, click links, or share personal information. I am documenting the account and reporting it to the proper authorities.
Avoid naming a suspect publicly unless you have strong evidence. Accusing the wrong person online can expose you to a separate libel or cyber libel complaint.
6. Prepare a complaint-affidavit
A complaint-affidavit is your sworn written statement. It should state:
- Your full name, address, and contact details
- How you discovered the fake profile
- Why you know the account is fake
- What personal information was used
- What the account posted or sent
- Who saw or received the content
- What damage or risk it caused
- What evidence is attached
- What laws you believe may apply, if known
- A request for investigation and prosecution
Attach screenshots and supporting documents as annexes. Label them clearly: Annex “A,” Annex “B,” and so on.
7. File with PNP-ACG, NBI Cybercrime Division, or the prosecutor
For cybercrime matters, common offices include:
| Office | Best for | Practical notes |
|---|---|---|
| PNP Anti-Cybercrime Group (PNP-ACG) | Most cybercrime reports, online impersonation, scams, harassment | Regional cybercrime units may be available outside Metro Manila |
| NBI Cybercrime Division | More complex cybercrime complaints, tracing, forensic assistance | The NBI Citizen’s Charter lists investigative assistance for victims of computer crimes |
| City or Provincial Prosecutor’s Office | Filing a criminal complaint for preliminary investigation | Stronger if your complaint-affidavit and evidence are already organized |
| National Privacy Commission | Data privacy violations | Requires proper complaint format and supporting evidence |
| Social media platform | Takedown and account removal | Does not replace legal filing |
The NBI’s Citizen’s Charter page on investigative assistance for victims of computer crimes indicates that complainants may proceed to the Cybercrime Division to file a complaint or request investigation, with no listed filing fee for the initial complaint assistance.
8. Ask about preservation of data
Timing matters. Social media platforms may not keep all data forever, and fake accounts may be deleted quickly.
Under RA 10175 and its rules, law enforcement may take steps to preserve relevant computer data. The Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC, governs cybercrime warrants such as warrants to disclose computer data, intercept computer data, and search, seize, and examine computer data. The Supreme Court-approved rule took effect in 2018 and is important because private account information is not usually released to ordinary users on request.
In practice, this means you should give investigators the account URL, screenshots, dates, times, usernames, and related identifiers as early as possible.
What documents should you prepare?
Prepare both printed and digital copies.
| Document or evidence | Notes |
|---|---|
| Valid government ID | Passport, driver’s license, National ID, UMID, PRC ID, etc. |
| Complaint-affidavit | Notarized if required |
| Screenshots and screen recordings | Include full profile, URL, posts, messages, timestamps |
| Profile link or URL | Copy the exact link, not only the display name |
| Proof of your identity | Your real profile, ID, business registration, professional ID, or other proof |
| Proof that the photo/content is yours | Original photo files, old posts, publication dates |
| Witness statements | From friends, relatives, customers, or people contacted by the fake account |
| Scam records | Receipts, transaction references, bank/e-wallet details |
| Platform reports | Confirmation emails or report reference numbers |
| Police blotter, if any | Helpful but not always enough by itself |
| Special Power of Attorney | Needed if someone else will file for you in some situations |
What if you are abroad or the fake account is abroad?
RA 10175 has broad jurisdictional language. Section 21 provides that Philippine courts may have jurisdiction over cybercrime violations, including violations committed by Filipino nationals regardless of place of commission, and where elements are committed in the Philippines, a computer system is wholly or partly situated in the Philippines, or damage is caused to a person in the Philippines.
Practical examples:
- An OFW in Dubai is impersonated by someone targeting relatives in Cebu.
- A foreigner living in Manila is impersonated by a fake dating profile.
- A Filipino abroad is falsely represented by a fake investment account aimed at Philippine residents.
- A foreign scammer uses a fake profile of a Philippine business owner to collect payments from Filipino customers.
If you are outside the Philippines, you may need to execute documents before a Philippine embassy or consulate, or use local notarization with apostille/authentication depending on where the document will be used. The DFA now uses apostille processes for many public documents; see the DFA’s Apostille Appointment System and DFA Apostille information.
If a representative will file for you in the Philippines, prepare a Special Power of Attorney and ensure it is properly notarized, consularized, or apostilled as needed.
Common mistakes that weaken fake profile cases
Reporting only to Facebook or Instagram
Platform reporting may remove the fake account, but it may also erase visible evidence before you have documented it. Save evidence first.
Taking screenshots without URLs
A screenshot with only a name and photo may not be enough. Social media names can be duplicated. Investigators need profile links, usernames, timestamps, and account identifiers when available.
Publicly accusing someone without proof
Even if you strongly suspect an ex-partner, former employee, competitor, or relative, be careful. Publicly naming a person as the culprit without enough proof can create a separate defamation problem.
Ignoring witnesses
If friends received messages from the fake profile, they should preserve their own screenshots. Their devices may show details that your account cannot see.
Waiting too long
Fake accounts disappear. Logs may become harder to obtain. Cyber libel has a one-year prescriptive period from discovery. Scam victims may lose transaction details. Act early.
Assuming a barangay blotter is enough
A barangay blotter can help document the incident, especially if the suspect is known and nearby. But cybercrime investigation usually requires PNP-ACG, NBI, prosecutors, or court processes. For serious online impersonation, a blotter alone is usually not enough.
Frequently Asked Questions
Can I file a case if someone used my photo but not my full name?
Yes. A person’s photo can be identifying information, especially if it clearly points to you or is used together with other details such as your nickname, school, workplace, family, business, or social media contacts. The case may still involve computer-related identity theft.
Is making a fake Facebook account using my name automatically a crime?
Not every fake or parody account is prosecuted the same way, but using another person’s identifying information without right may fall under computer-related identity theft. The stronger cases involve deception, reputational harm, harassment, fraud, privacy invasion, or actual use of your photos and details to mislead others.
Can I file cyber libel against a fake account?
You may consider cyber libel if the fake account posted defamatory statements that identify you and damage your reputation. If the account merely uses your name or picture without defamatory statements, identity theft, privacy, or civil remedies may be more appropriate.
Where should I report a fake social media profile in the Philippines?
You may report it to the platform for takedown and to the PNP Anti-Cybercrime Group or NBI Cybercrime Division for investigation. If personal data was misused, you may also consider the National Privacy Commission. If money was taken, report to the relevant bank, e-wallet, or financial institution immediately.
Can police or NBI trace who created the fake account?
They may be able to investigate using digital evidence, platform records, warrants, preservation requests, subscriber information, device data, payment trails, phone numbers, or witness statements. However, tracing is harder if the account used VPNs, fake emails, foreign numbers, public Wi-Fi, or quickly deleted accounts.
Can I ask Facebook or Instagram to reveal the identity of the fake account owner?
Ordinary users generally cannot force a platform to release private account information. Law enforcement usually needs proper legal process, such as preservation requests, warrants, or international cooperation channels where applicable.
What if the fake account was already deleted?
A case may still be possible if you preserved enough evidence or if investigators can obtain platform, device, payment, or witness records. But deletion makes the case harder, so screenshots, URLs, timestamps, and witness evidence should be saved immediately.
Can I claim damages for embarrassment and stress?
Yes, if you can prove the wrongful act, the person responsible, and the damage caused. Civil Code provisions on human relations, dignity, privacy, and damages may support a civil claim, especially when the impersonation caused humiliation, anxiety, reputational harm, or financial loss.
What if the fake account is impersonating my business?
A business or company may also be a victim of identity theft under RA 10175 because the law covers identifying information belonging to natural or juridical persons. You should preserve evidence, warn customers, report the account to the platform, and consider cybercrime, fraud, unfair competition, trademark, and civil remedies depending on the facts.
Do I need a lawyer to report a fake profile?
You can report directly to the platform, PNP-ACG, NBI, NPC, or prosecutor. However, legal help is often useful when the case involves cyber libel, scams, sexual content, minors, business identity, foreign evidence, or a suspect who may countercharge.
Key Takeaways
- A fake social media profile using your identity may be computer-related identity theft under RA 10175.
- If the fake account posts false and damaging statements, cyber libel may also apply.
- If the account asks people for money, the case may involve fraud, estafa, AFASA, access device violations, and cybercrime.
- If private or sexual images are used, consider RA 9995, RA 11313, RA 11930, and RA 10175.
- If personal data is misused or exposed, a National Privacy Commission complaint may be appropriate.
- Save screenshots, URLs, timestamps, messages, payment records, and witness statements before reporting or confronting anyone.
- Platform takedown is helpful, but it is not the same as filing a Philippine legal complaint.
- Act quickly because accounts can disappear, data may become harder to preserve, and cyber libel has a one-year prescriptive period from discovery.