Quick answer

If someone is using your name, photos, business identity, documents, or account details without permission, preserve the evidence before the account disappears, report the profile through the platform’s impersonation channel, secure your email and financial accounts, warn likely targets, and report suspected crime to the PNP Anti-Cybercrime Group or NBI Cybercrime Division.

For scams and active account takeovers, call the government’s National Anti-Scam Hotline at 1326. If money has moved, contact your bank or e-wallet immediately—before waiting for a police report—because disputed funds can quickly be withdrawn or transferred.

A fake account is not automatically a crime. An obviously labeled parody, fan, or fictional account may be lawful. But intentionally acquiring, possessing, using, altering, transferring, or deleting another person’s identifying information without right may constitute computer-related identity theft under the Cybercrime Prevention Act of 2012. Fraud, forgery, threats, harassment, defamatory posts, or misuse of personal data may create additional liability depending on the evidence.

Act in this order

1. Preserve evidence before reporting or blocking

Save enough information to show what existed, when you found it, what the account did, and how it was connected to you.

Capture:

The complete profile URL, not just the display name
The username, account handle, profile photo, bio, and visible account or page ID
Full-page screenshots showing the date and time on your device
A screen recording opening the platform, navigating to the profile, and viewing relevant posts or messages
Messages, posts, comments, advertisements, payment instructions, phone numbers, email addresses, QR codes, and links
Email headers, login alerts, password-reset notices, and security notifications
Transaction reference numbers, receipts, bank or e-wallet records, and the receiving account details
Messages from people who were approached by the impostor
Any document, photo, or personal information copied from you
The platform’s report confirmation and case or reference number

Keep the original files. Do not crop, annotate, compress, or repeatedly forward your only copy. Store a duplicate in a secure location and maintain a short incident log listing dates, times, reports made, people contacted, and reference numbers.

Screenshots are helpful, but a display name or photograph does not by itself establish who operated the account. Prompt reporting gives investigators a better opportunity to seek subscriber and traffic information through lawful procedures. Under Section 13 of the Cybercrime Prevention Act, service providers generally preserve traffic data and subscriber information for at least six months from the transaction; content data is preserved for six months after a law-enforcement preservation order, with a possible one-time six-month extension.

2. Report the account to the platform

Choose “impersonation,” “pretending to be someone,” “fraud,” or the closest available category. Report individual scam posts and messages as well as the profile itself.

Official reporting pages include:

Some platforms may ask the person being impersonated, a parent, or an authorized representative to confirm identity. Submit identification only through the platform’s official application or Help Center. Check the domain carefully, and provide no more information than the official form requires.

Platform removal and a criminal complaint are separate processes. A platform can disable an account without identifying or prosecuting its operator, while police may investigate even if the platform has already removed it.

3. Secure the real account and the email behind it

If your genuine account was hacked rather than merely copied:

Start with the platform’s official compromised-account recovery process.
Change the password of the connected email account first, using a trusted device.
Use a new, unique password that is not used elsewhere.
Sign out unknown devices and revoke unfamiliar applications or sessions.
Enable multi-factor authentication, preferably through an authenticator app or security key where available.
Check whether the recovery email, phone number, forwarding rules, or security questions were changed.
Secure other accounts that used the same or a similar password.
Contact your mobile provider if your SIM unexpectedly lost service or you suspect an unauthorized SIM replacement.

Do not pay a person who claims to be a platform employee, hacker, “account recovery agent,” police officer, or government official unless you have independently verified the channel. Legitimate investigators do not need your password, PIN, CVV, or one-time password.

4. Warn people who may be targeted

Using your genuine account or another verified channel, issue a brief factual warning. Identify the exact fake handle or profile URL, state that it is unauthorized, and tell people not to send money, documents, passwords, or verification codes.

Avoid publicly accusing a named individual unless you have reliable evidence. Do not repost unnecessary copies of stolen IDs, private messages, intimate images, or the impostor’s unverified allegations.

Where to report in the Philippines

PNP, NBI, and the National Anti-Scam Hotline

For identity theft, impersonation used for fraud, hacked accounts, threats, extortion, forged documents, or other suspected crimes, report to any of the following:

National Anti-Scam Hotline 1326: Call 1326 for scams, phishing, account takeover, impersonation, and related cyber incidents. Reports may also be sent to 1326@dict.gov.ph or through the eGovPH application. The hotline coordinates referrals to appropriate agencies. See the DICT’s official contact guidance.
PNP Anti-Cybercrime Group: Contact the official PNP-ACG page or visit the nearest regional anti-cybercrime unit or police station.
NBI Cybercrime Division: The NBI accepts requests for investigation, interviews complainants, takes sworn statements, receives supporting documents, and may examine relevant devices. See its official procedure for victims of computer crimes and regional office directory.

Bring or prepare:

A government-issued ID, if available
A chronological written account
Printed and electronic copies of the evidence
The device containing original messages or files, if investigators request it
Witness names and contact information
Bank, e-wallet, platform, and hotline reference numbers
A clear statement that you did not authorize the account or use of your information

Ask for the report, complaint, blotter, or docket reference number. A police blotter records the incident but does not automatically complete a criminal complaint or guarantee prosecution. Investigators may require a sworn complaint-affidavit and additional evidence.

Your bank or e-wallet

If an impostor obtained money, opened or used an account in your name, or caused an unauthorized transfer:

Contact the bank or e-wallet’s official fraud channel immediately.
Ask it to secure the source account, treat the transaction as disputed, trace the transfer, and coordinate with the receiving institution.
Record the complaint reference number and the date and time of notice.
Submit any sworn complaint, affidavit, police report, or other requested document promptly.

Under the Anti-Financial Account Scamming Act and BSP Circular No. 1215, a BSP-supervised institution may initially hold identifiable disputed funds for up to five calendar days. An originating institution may request an extension of up to 25 additional calendar days, keeping the total within the statutory maximum of 30 calendar days, unless extended by a court. Supporting documents generally must be provided during the initial holding period, subject to the applicable industry protocol. A hold is not automatic, does not guarantee recovery, and cannot recover funds that have already left the reachable financial system.

If the institution does not resolve the complaint satisfactorily, escalate it through the BSP Consumer Assistance Mechanism. You must normally complain to the financial institution first. Do not send the BSP your PIN, password, full card number, passport, or other unnecessary credentials.

National Privacy Commission

Consider an NPC complaint when your personal information was unlawfully collected, disclosed, used, or inadequately protected—for example, when an organization’s data practices enabled the misuse or when a known person or entity processed your information in violation of the Data Privacy Act. Not every fake account is automatically an NPC case; the facts must involve a privacy violation, personal-data breach, or violation of data-subject rights under the Data Privacy Act of 2012.

Ordinarily, before filing:

Notify the responsible person or organization in writing.
Describe the privacy violation and requested corrective action.
Keep proof that the notice was received.
Allow 15 calendar days for a response or appropriate action.

The NPC may waive this exhaustion requirement for properly supported good cause or a serious violation, including situations involving grave and irreparable harm, lack of an adequate remedy, or a patently illegal act.

The complaint must generally be verified, notarized, supported by evidence and witness affidavits where available, and accompanied by a certification against forum shopping. It may be filed personally, by registered mail, courier, or authorized electronic mail. The current base filing fee is ₱500, plus the applicable legal research fee and any additional fee for a damages claim. Qualifying indigent litigants may seek an exemption under the NPC’s requirements. Review the NPC complaint mechanics, formal complaint page, and current rules of procedure before submission.

An NPC complaint does not replace an urgent report to law enforcement or a financial institution.

What the law covers

Section 4(b)(3) of Republic Act No. 10175 defines computer-related identity theft as the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another natural or juridical person, without right. The Supreme Court upheld this provision in Disini v. Secretary of Justice.

For computer-related identity theft, the statutory penalty is generally prisión mayor—six years and one day to twelve years—or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. If no damage has yet been caused, the law provides for a penalty one degree lower. The actual charge and sentence depend on the proven acts, damage, participation, applicable defenses, and court findings.

A profile may also involve other laws when it is used to:

Obtain money or property through deceit
Create or use forged electronic documents
Access another person’s account without right
Threaten, extort, stalk, or sexually harass someone
Publish defamatory accusations
Distribute intimate images without consent
Exploit or groom a child
Open or use a financial account under another person’s identity

These are fact-dependent offenses. Using another person’s publicly visible photo does not necessarily give someone the right to impersonate that person, but neither does every reuse of a name or image establish every element of identity theft. Consent, authorization, purpose, context, platform labeling, and proof of intent matter.

Even where conduct does not amount to a crime, Articles 19, 20, 21, and 26 of the Civil Code may support damages, prevention, or other civil relief for unlawful injury or invasion of dignity, privacy, and peace of mind. A lawyer should assess whether an injunction or civil action is practical and who can properly be sued.

What may happen after a report

Law enforcement may interview the complainant and witnesses, examine voluntarily submitted devices, correlate accounts and transactions, and seek cybercrime warrants or other lawful orders. Subscriber, traffic, and content information generally cannot be obtained merely by asking a platform; legal process and court authorization may be required.

A report does not guarantee that authorities can identify the operator. Difficulties arise when an account uses false registration data, overseas infrastructure, compromised devices, disposable numbers, cryptocurrency, or accounts held by intermediaries. Early reporting and complete transaction records materially improve the investigation.

Do not attempt to hack the account, secretly access another person’s private messages, install tracking software, or organize an unauthorized entrapment. These actions can expose you to danger, compromise evidence, or create separate legal problems. Coordinate any controlled transaction or meeting with investigators.

Common mistakes to avoid

Blocking or reporting the account before saving its URL and content
Saving only cropped screenshots with no username, date, or context
Deleting messages, emails, transaction notices, or account-recovery alerts
Resetting the social-media password but leaving the connected email compromised
Sending more money to “recover” an earlier payment
Posting unredacted IDs, signatures, addresses, account numbers, or intimate material
Assuming a platform takedown identifies or convicts the operator
Treating a barangay or police blotter as the entire criminal complaint
Waiting for the impostor to cause more damage before reporting
Filing a knowingly false or exaggerated financial report; malicious reporting that causes a fund hold is punishable under the Anti-Financial Account Scamming Act

When help is urgent

Call 911 for an imminent threat to life, physical safety, fire, or another active emergency. The Unified 911 service is the nationwide emergency line.

Seek immediate police, NBI, bank, or platform assistance when:

The impostor is actively soliciting or transferring money
Your bank, e-wallet, email, mobile number, or government account has been taken over
Loans, accounts, contracts, or purchases are appearing in your name
The account is threatening violence, stalking, extortion, or disclosure of private material
A child is being groomed, exploited, or depicted sexually
Intimate images are being distributed without consent
Someone may act on a fake emergency, medical request, or instruction supposedly from you
You receive collection demands, subpoenas, warrants, or official notices tied to transactions you did not make

For sexual or child-abuse material, do not download, forward, or publicly repost it. Preserve the URL, account details, and necessary screenshots, then report it promptly to the platform and law enforcement.

Frequently asked questions

Can I report the account if I do not know who created it?

Yes. State that the operator is unknown and provide every identifier available. Investigators may seek information through lawful process, but identification is not guaranteed.

Do I need a notarized affidavit?

A platform report usually does not require one, although identity verification may be requested. Police or NBI investigators may ask for a sworn complaint or statement. An NPC formal complaint generally must be verified and notarized.

Should I message the fake account first?

Usually, preserve the evidence and report it without confrontation. Contact can alert the operator, prompt deletion, or expose you to manipulation. If investigators consider communication useful, follow their instructions.

Can I ask the platform for the account owner’s name or IP address?

You may ask, but platforms generally will not disclose private subscriber data directly to an individual. Investigators may seek preservation and disclosure through the applicable court-authorized process.

Can friends report the account too?

Yes, particularly if they received fraudulent messages. However, the impersonated person or an authorized representative should submit the principal impersonation report when the platform requires identity confirmation. Friends should preserve their own messages and be available as witnesses.

Can I recover money sent to the impostor?

Possibly, but recovery depends heavily on speed and whether the funds remain traceable and within participating financial institutions. Notify the source bank or e-wallet immediately and provide supporting documents within its requested period. A police report alone does not reverse a transaction.

Can I post a public warning?

Yes, if it is accurate and limited to what you can verify. Identify the unauthorized account, advise people not to transact with it, and avoid naming an alleged operator without sufficient evidence or exposing private information.

Should I report both to the platform and the government?

Yes when the conduct may be criminal or has caused harm. The platform addresses the account and content; law enforcement investigates possible offenses; the bank or e-wallet handles disputed transactions; and the NPC addresses qualifying privacy violations.

This article provides general Philippine legal information, not legal advice or a prediction of any case outcome. Procedures and available remedies depend on the evidence and circumstances. Official sources and reporting procedures were checked as of 3 August 2026.