Quick answer

If someone is using your name, photos, documents, or other identifying information in a fake social media account:

Preserve the evidence before reporting or blocking the account.
Report the profile and offending posts or messages through the platform’s official impersonation channel.
Secure your email, social media, mobile number, and financial accounts.
Report promptly to the PNP Anti-Cybercrime Group or NBI Cybercrime Division if the account is scamming people, threatening or harassing anyone, using identification documents, obtaining money, or causing other harm.
Contact the bank or e-wallet immediately if any unauthorized transaction occurred.
Consider a National Privacy Commission complaint when an identifiable person or organization unlawfully processed your personal data or failed to address a privacy complaint.

A fake profile is not automatically the crime of identity theft. Criminal liability depends on evidence showing intentional, unauthorized use or misuse of another person’s identifying information for an illegitimate purpose. Platform rules may nevertheless prohibit impersonation even when the available facts are not enough for a criminal case.

Preserve evidence before the account disappears

Fake accounts can be renamed, blocked, made private, or deleted quickly. Capture the evidence before confronting the operator or submitting a report.

Preserve:

The full profile URL, exact username, display name, profile photo, biography, and account or page ID if visible
Screenshots and a screen recording showing how you reached the profile
Each relevant post, story, comment, advertisement, or direct message
Visible dates, times, reactions, and account names
Links to individual posts and advertisements
Messages sent to relatives, customers, employers, or other victims
Phone numbers, email addresses, QR codes, bank or e-wallet details, and payment instructions used by the account
Transaction receipts and reference numbers
Security alerts, password-reset notices, login notifications, and emails from the platform
The names and contact details of people who received messages or paid money
Platform report confirmations, ticket numbers, and replies
A dated timeline explaining when the account was discovered and what happened next

Keep the original files. Do not crop, annotate, compress, or alter your only copy. Store a backup in a secure location and retain the device on which the messages were received. Philippine rules require electronic evidence to be authenticated; a screenshot is useful, but its source, accuracy, and surrounding circumstances may still have to be proved. The Electronic Commerce Act places the burden of proving authenticity on the person offering an electronic document.

If disappearing content is involved, record it without reposting it. Do not download, copy, or forward suspected child sexual abuse material; report it immediately to the platform and law enforcement.

Report the account to the social media platform

Report both the profile and any separate posts, advertisements, or messages that violate the platform’s rules. Use the impersonation category where available.

Facebook: Use Facebook’s official instructions for reporting a profile or Page pretending to be you or someone else. Facebook also provides an impostor-account form for appropriate cases.
Instagram and Threads: Use the official impersonation-report form or report the profile in the app.
TikTok: Follow TikTok’s impersonation-account reporting procedure.
X: Use X’s impersonation-reporting channel. X states that the person impersonated or an authorized representative may file a report, and that an X account is not required.

Submit one report for each fake account unless the platform instructs otherwise. Explain precisely how the profile creates a false impression that it is you, your business, or your organization. Identify copied photos, altered names, solicitations, and false statements.

A platform may request proof of identity. Upload identification only through the platform’s genuine website or application. Check the domain carefully. Never send an ID, password, one-time PIN, selfie, or recovery code to the fake account or to an unsolicited “support agent.”

Keep the report confirmation. A platform takedown can reduce further harm, but it does not identify the operator, recover money, or automatically start a Philippine criminal case.

Secure your real accounts and warn people safely

If your genuine account may have been compromised, preserve evidence first and then:

Change the password of the email account connected to social media.
Change affected social media and financial-account passwords.
Use unique passwords and enable multi-factor authentication, preferably through an authenticator app, passkey, or security key when available.
Sign out unknown devices and review active sessions.
Check whether recovery email addresses, mobile numbers, forwarding rules, or linked applications were changed.
Remove unfamiliar applications and revoke unauthorized access.
Ask your mobile provider to secure the SIM if calls or messages suddenly stopped or a SIM swap is suspected.
Review privacy, tagging, public-profile, and friend-list settings.
Notify family, customers, co-workers, or followers through a channel they already know is yours.

A short warning is usually enough: identify the fake username, state that it is unauthorized, and tell people not to send money or information. Avoid publishing the suspected operator’s personal information or making accusations you cannot prove.

When and where to make a criminal report

Report to a cybercrime investigator promptly when the account:

Uses your identity or identification documents to deceive others
Solicits money, loans, investments, donations, or purchases
Opens or accesses accounts in your name
Sends threats, blackmail, sexual demands, or persistent harassment
Publishes intimate or manipulated sexual images
Targets a child
Damages your employment, business, credit standing, or reputation
Continues operating after platform reports
Appears linked to several victims or coordinated accounts

The Cybercrime Prevention Act of 2012 designates the Philippine National Police and National Bureau of Investigation as the principal law-enforcement authorities for cybercrime.

You may approach:

The PNP Anti-Cybercrime Group or the nearest PNP anti-cybercrime unit
The NBI Cybercrime Division or an NBI regional cybercrime office
The CICC’s 1326 National Anti-Scam Hotline when the impersonation is connected with a scam; DICT also publishes 1326@dict.gov.ph for complaints and feedback

Confirm current addresses and contact details on the agencies’ official websites before visiting. The NBI’s current citizen’s-charter procedure for computer-crime victims describes an initial complaint sheet, interview, sworn statement or affidavit, submission of supporting evidence, and possible examination of a relevant device. It lists no fee for that investigative-assistance process.

Bring:

A valid ID
A clear chronological statement
Printed and electronic copies of the evidence
Original devices when requested
Names and affidavits of witnesses, if available
Proof of financial or reputational damage
Copies of platform, bank, e-wallet, employer, or agency reports
Proof that the identity, photos, documents, business, or account being copied belong to you or that you are authorized to represent the affected person or organization

If the operator is unknown, describe the respondent as the unknown person behind the identified account. Do not name someone merely because you suspect them. Give investigators the facts supporting any possible connection.

An initial report is not the same as a filed criminal case. Investigators may need to verify the evidence, request preservation of platform data, obtain the proper cybercrime warrant, identify the subscriber, and refer the matter to a prosecutor. Foreign platforms may also require formal legal process before releasing account information.

Under the Cybercrime Prevention Act and the Supreme Court’s Rule on Cybercrime Warrants, law enforcement—not a private complainant—uses the applicable preservation and warrant procedures. The law provides a minimum six-month preservation period for traffic data and subscriber information measured from the transaction, while content data may be preserved for six months from a law-enforcement preservation order, subject to a permitted extension. These rules are another reason to report promptly.

What Philippine law says about identity theft

Section 4(b)(3) of the Cybercrime Prevention Act defines computer-related identity theft as the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion—without right—of identifying information belonging to another natural or juridical person.

The Supreme Court upheld this provision in Disini v. Secretary of Justice. The Court explained that identifying information can include a person’s name, citizenship, address, contact number, birth information, spouse, occupation, and similar data. It also stressed that the prohibited conduct involves an illegitimate purpose. Merely obtaining or discussing information that the person made public is not automatically identity theft.

Accordingly, the following distinctions matter:

A clearly disclosed parody, commentary, or fan account is not automatically identity theft.
Two people having the same name is not enough.
Copying a public photograph is not, by itself, conclusive proof of the crime.
A profile designed to make people believe it is genuinely operated by the victim is much stronger evidence of impersonation.
Using the identity to collect money, obtain credit, access accounts, contact the victim’s customers, or cause harm strengthens a criminal complaint.
The exact result depends on the account’s presentation, messages, purpose, source of the data, authority or consent, and proven damage.

For computer-related identity theft, Section 8 generally provides, upon conviction, imprisonment of prisión mayor, a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. If no damage has yet been caused, Section 4(b)(3) states that the imposable penalty is one degree lower. The actual charge and penalty remain for prosecutors and courts to determine from the evidence.

Other laws may apply—but only if their elements are proved

The same conduct may raise other legal issues depending on what the account actually did:

Fraud or estafa: When deception causes another person to deliver money or property.
Anti-financial-account scamming offenses: When another person’s identity or identification documents are used to open or misuse a financial account.
Cyberlibel: When the account publishes defamatory allegations and all legal elements and defenses are considered.
Threats, coercion, or harassment: When the messages contain threats or repeated abusive conduct covered by applicable law.
Data Privacy Act violations: When a covered person or organization processes personal information without a lawful basis or violates data-subject rights.
Sexual-image or gender-based offenses: When intimate content, sexual threats, or gender-based online harassment is involved.
Child-protection offenses: When a minor is sexually exploited, groomed, threatened, or depicted in prohibited material.
Civil liability: Proven injury to privacy, reputation, property, business, or other rights may support damages or injunctive relief.

Do not assume that every harmful post supports every possible charge. The wording, audience, intent, consent, actual loss, identity of the operator, and supporting documents all matter.

If money or a financial account is involved

Call the affected bank, credit-card issuer, lender, or e-wallet through its official fraud channel immediately. Do not wait for the platform or police to respond.

Ask the institution to:

Block or secure the affected account
Mark the transaction as disputed
Trace the transfer and notify receiving institutions
Preserve transaction and login records
Replace compromised cards or credentials
Give you a complaint or case reference number
State what affidavit, police report, or other documents it needs

Under the Anti-Financial Account Scamming Act and the BSP’s implementing regulations, covered institutions can temporarily hold disputed funds and conduct coordinated verification. Current BSP rules provide for an initial hold of up to five calendar days. It may be extended by up to 25 additional calendar days when the prescribed grounds exist and more time is needed for verification; a hold beyond the total 30-day period requires a court extension.

For a possible extended hold, the source-account owner may be required to submit a sworn complaint, affidavit, police report, or other supporting document within the initial holding period. A hold is not automatic and does not guarantee that money remains available or will be returned.

If the institution does not resolve the complaint satisfactorily, the BSP Consumer Assistance Mechanism is a second-level remedy. The complaint must first be raised through the institution’s own consumer-assistance mechanism.

If an unauthorized loan appears in your name, dispute it directly with the lender. You may also obtain your credit report and use the Credit Information Corporation’s Online Dispute Resolution Process to challenge inaccurate credit information.

When a National Privacy Commission complaint may help

The Data Privacy Act of 2012 may apply when personal information is unlawfully collected, disclosed, used, or otherwise processed by a person or organization covered by the law. Data subjects may seek access, correction, blocking, removal, or destruction in circumstances specified by the Act.

An NPC complaint is most useful when you can identify the person or organization responsible for the privacy violation, or when a company, platform, employer, lender, or other entity failed to address unlawful processing of your data. It is not a substitute for an urgent police report and may not be the most effective route for identifying a completely anonymous account.

Under the 2021 NPC Rules of Procedure, as amended, a complainant generally must first:

Inform the personal information controller, processor, or concerned entity of the violation in writing; and
Give it an opportunity to act.

If it does not take timely or appropriate action, or does not respond within 15 calendar days after receiving the written notice, the complainant may proceed with an NPC complaint. The NPC may waive this exhaustion requirement for good cause or a serious violation, including circumstances involving grave and irreparable harm, lack of a plain and adequate remedy, or patently illegal action.

The complaint generally must be written, verified, and supported by evidence, relevant correspondence, witness affidavits when available, and a certification against forum shopping. The NPC’s complaint mechanics and forms should be checked before filing because form, notarization, copies, authorized electronic filing, and fee requirements apply.

Special steps when identification documents were exposed

If the fake account displayed or used a government ID:

Save the image and URL without reposting the document publicly.
Inform the issuing agency through its official fraud or customer-service channel.
Ask affected banks, lenders, employers, and government accounts to flag possible misuse.
Monitor for password resets, account applications, benefit claims, loans, or credit inquiries.
Keep the police or cybercrime report for use when disputing future transactions.

National ID-related fraud or suspicious activity may be reported through the official PhilSys channels, including Hotline 1388 and info@philsys.gov.ph, as confirmed in PhilSys public advisories.

Common mistakes to avoid

Blocking or reporting the profile before saving its URL and content
Keeping only cropped screenshots with no username, date, or context
Editing the original evidence
Deleting messages, emails, or transaction notifications
Paying the impersonator to remove the account
Clicking a “verification” or “appeal” link sent by the fake account
Sending an ID or OTP to someone claiming to be platform support
Publicly accusing a suspected operator without reliable proof
Encouraging friends to submit false or exaggerated reports
Reposting private documents or intimate content while warning others
Assuming a platform takedown identifies the offender or ends the legal case
Waiting for a platform decision before calling a bank about stolen funds
Treating an NPC complaint as a replacement for an urgent criminal report
Throwing away or resetting a relevant device before investigators advise you

When help is urgent

Act immediately when there is:

An imminent threat to life or physical safety
Sexual blackmail or threatened release of intimate material
Child grooming, exploitation, or sexual content
An active takeover of email, SIM, social media, or financial accounts
Money still moving through a bank or e-wallet
Use of an ID to obtain loans or open accounts
Threats against an address, workplace, school, or family member
A coordinated scam targeting several people

For immediate physical danger, contact 911 or the nearest police station. For financial loss, call the institution’s official fraud hotline at once. For child sexual abuse material, do not forward or redistribute it; preserve only what investigators instruct you to preserve and report it immediately.

Frequently asked questions

Can I report a fake account if I do not know who created it?

Yes. Provide the exact account URL, username, messages, payment details, and other identifying leads. Subscriber information generally must be obtained by authorized investigators through the proper legal process.

Do I need a lawyer to report identity theft?

No lawyer is required to make an initial platform, PNP, NBI, CICC, bank, or e-wallet report. Legal assistance becomes especially useful when substantial money, a business, intimate material, several victims, an identified suspect, a prosecutor’s complaint, or urgent court relief is involved.

Is using my name and photo enough for a criminal case?

Not necessarily. It is enough to justify an impersonation report to many platforms, but criminal identity theft requires proof of the statutory elements, including intentional and unauthorized use or misuse for an illegitimate purpose. Messages, solicitations, copied documents, and resulting harm provide important context.

Can I ask the platform to tell me who owns the fake account?

You may ask, but platforms generally do not disclose private subscriber or login information directly to another user. Investigators can pursue preservation and disclosure through applicable legal processes.

Should friends also report the profile?

People who independently observe impersonation or receive fraudulent messages may submit truthful reports and preserve their own evidence. They should not coordinate false statements or report conduct they did not witness.

What if the account has already been deleted?

Report anyway. Submit saved URLs, screenshots, messages, emails, transaction records, and witness details. Deleted content may sometimes remain in platform or service-provider records, but availability is not guaranteed.

Is there a fixed deadline for reporting?

There is no single deadline covering platform reports, criminal offenses, privacy complaints, and financial disputes. Different legal prescriptive periods and procedural rules apply. Platform and electronic records may disappear much sooner, while financial recovery can depend on minutes or hours. Report promptly and obtain legal advice immediately if the incident is old or a filing deadline may be disputed.

Will reporting guarantee removal, prosecution, or recovery?

No. Platform removal depends on platform rules and evidence. Criminal prosecution requires proof of every element beyond reasonable doubt. Financial recovery depends partly on whether funds remain traceable and available. A prompt, well-documented report gives authorities and institutions the best opportunity to act.

This article provides general Philippine legal information, not advice for a particular case. Outcomes depend on the evidence, documents, location, parties, and acts involved. Official sources and procedures were checked as of 3 August 2026.