Quick answer

If someone creates a social media account using your name, photographs, business identity, or other identifying information without authority, document the account before it disappears, report it through the platform’s impersonation process, secure your genuine accounts, and warn likely targets. If the account is being used to scam, threaten, harass, solicit money, damage your reputation, or obtain personal information, promptly file a complaint with the Philippine National Police Anti-Cybercrime Group (PNP-ACG) or the National Bureau of Investigation Cybercrime Division (NBI-CCD).

A fake account is not automatically a crime merely because it uses a false name. Criminal liability depends on what identifying information was acquired or used, whether this was done without right, the person’s intent, and any resulting harm. Under Section 4(b)(3) of the Cybercrime Prevention Act of 2012, computer-related identity theft includes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion—without right—of identifying information belonging to another natural or juridical person.

Reporting the account to the platform may remove it, but platform removal does not identify or prosecute the offender. Conversely, filing a police or NBI complaint does not guarantee immediate removal. In serious cases, pursue both tracks at once.

Act immediately if money, safety, or account access is at risk

Take urgent action when the impersonator is:

Asking your contacts for money, investments, loans, prepaid loads, verification codes, or banking information;
Using your identity to open accounts, borrow money, sell products, or enter transactions;
Sending threats, sexual material, or demands for payment;
Posting your address, telephone number, identification documents, or other sensitive information;
Impersonating a child or contacting minors;
Controlling your genuine account after a takeover;
Using your identity to communicate with clients, employees, government offices, or business partners; or
Causing an immediate risk of violence, self-harm, kidnapping, financial loss, or reputational damage.

If there is an immediate physical danger, contact the nearest police station or emergency services. If a bank, e-wallet, or payment account is involved, notify the institution immediately through its official fraud channel and request that the transaction or recipient account be investigated, restricted, or preserved where legally possible.

Preserve evidence before reporting or confronting the account

An impersonator may delete the account, change its username, remove posts, or block you after learning that a complaint is being prepared. Preserve evidence first.

Collect the following:

The exact profile URL. A screenshot of the display name alone may be insufficient because names and usernames can change.
Full-page screenshots or screen recordings. Capture the profile photograph, username, account ID if visible, biography, posts, stories, advertisements, follower details, dates, and timestamps.
Messages in context. Preserve the complete conversation rather than isolated statements. Include the sender’s profile, dates, attachments, voice messages, and transaction instructions.
Proof that the identity belongs to you. This may include your genuine profile, government-issued identification, original photographs, business registration, trademark documents, employment records, or earlier publications.
Proof of harm or intended harm. Save payment requests, transfer receipts, complaints from contacts, lost-business records, threatening messages, defamatory posts, and evidence that others believed the account was yours.
Information from other victims or witnesses. Ask them to preserve their own original messages and devices. Obtain their names and contact details with permission.
Platform reports and responses. Keep confirmation emails, case or reference numbers, dates of submission, and copies of the material sent to the platform.
Account-security alerts. Preserve password-reset notices, unfamiliar-login alerts, changed-email notifications, IP or device information supplied by the platform, and recovery communications.

Keep the original files. Do not crop, annotate, compress, or repeatedly forward the only copy. Create a backup and record when, where, and how each item was obtained. Investigators may need to examine the device on which the evidence was received.

Report the fake account to the social media platform

Use the platform’s specific category for impersonation, pretending to be someone, or fake identity. A general spam report may not present the facts needed for an impersonation review.

The usual process is:

Open the fake profile.
Select the profile’s report option.
Choose impersonation or pretending to be another person or business.
Identify the person or entity being impersonated.
Submit any identification or authorization the platform legitimately requests.
Save the report confirmation and reference number.
Check the platform’s support inbox or the email address used in the report.

Official platform guidance includes:

Access the reporting form through the platform’s official application or domain. Do not send an identification document to an account that merely claims to be “support.”

Friends who actually received deceptive messages may submit their own truthful reports. They should not exaggerate, coordinate false statements, or mass-report unrelated content.

Secure your genuine accounts

If the incident may involve an account takeover rather than a newly created profile:

Change the password using a trusted device;
Use a unique password that has not been used for email, banking, or other platforms;
Secure the connected email account first;
Enable multi-factor authentication;
Log out unfamiliar devices and sessions;
Remove unknown recovery addresses, telephone numbers, applications, and browser extensions;
Save any evidence before deleting unauthorized posts or messages;
Scan affected devices for malware; and
Notify administrators if the compromised account belongs to a business or organization.

Do not pay anyone who claims to be able to “hack back,” reveal the offender, or recover the account through an insider. Such offers may be a second scam.

File a cybercrime complaint

The NBI and PNP are the law-enforcement authorities specifically tasked by Section 10 of Republic Act No. 10175 with investigating cybercrime.

NBI Cybercrime Division

The NBI’s official procedure states that members of the public may proceed to the Cybercrime Division to file a complaint or request an investigation. The complainant undergoes an initial interview, completes a sworn complaint sheet, executes a sworn statement or submits a prepared affidavit, provides supporting documents, and may present the relevant device for examination. The published service has no fee. Regional cases may be handled through an NBI Cybercrime Regional Center.

Consult the NBI’s current official pages before visiting:

PNP Anti-Cybercrime Group

You may also seek assistance from the PNP-ACG or the appropriate regional or local cybercrime unit. Bring the device containing the original evidence, printed and electronic copies of the relevant material, identification, transaction records, and the names and contact details of witnesses.

The PNP’s official cybercrime-reporting guidance is available through the PNP Anti-Cybercrime Group. Verify current office locations and reporting channels on the official site because contact details can change.

What to state in the complaint

Give a chronological and factual account:

When and how you discovered the account;
The profile URL, username, and platform;
Which name, photographs, documents, or other identifying information were used;
Why the use was unauthorized;
What the account posted or communicated;
Who received or relied on the communications;
Whether money, property, credentials, or confidential information was requested or obtained;
What harm occurred;
What reports you submitted to the platform; and
What evidence and witnesses are available.

If the offender’s identity is unknown, say so. Do not identify a suspect based only on writing style, personal conflict, or suspicion. Provide investigators with objective leads instead.

A police blotter records a reported incident but is not necessarily the complete sworn complaint, supporting affidavit, or evidence package required for investigation and prosecution. Ask what further submission is needed and retain proof of filing.

Why prompt reporting matters

Social media platforms ordinarily hold subscriber, traffic, and content data that an individual complainant cannot compel them to disclose. Law-enforcement access is governed by Republic Act No. 10175 and the Rule on Cybercrime Warrants.

Under Section 13 of the Cybercrime Prevention Act:

Traffic data and subscriber information relating to communications must be preserved for at least six months from the transaction; and
Content data must be preserved for six months from receipt of a law-enforcement preservation order.

Law enforcement may order a one-time extension for another six months. Disclosure of subscriber information, traffic data, or other relevant data generally requires the legal process specified by law, including a court warrant where required.

These rules do not mean that every platform will still possess every item for six months. Data may fall under different retention practices, and identifying the correct account and transaction can take time. Prompt filing gives investigators a better opportunity to seek preservation before evidence is deleted or overwritten.

Do not personally demand that a platform reveal the account holder’s IP address or subscriber data. Platforms generally cannot lawfully release protected user information merely upon a private request.

When to complain to the National Privacy Commission

Using another person’s photographs, contact details, identification documents, or other personal information may also raise issues under the Data Privacy Act of 2012. However, an NPC complaint is not a substitute for a criminal complaint, and not every impersonation dispute falls within the NPC’s jurisdiction.

Under the 2021 NPC Rules of Procedure, a complainant ordinarily must first:

Inform the personal information controller, personal information processor, or concerned entity of the privacy violation in writing; and
Show that the entity failed to take timely or appropriate action, or did not respond within 15 calendar days after receiving the written notice.

The NPC may waive these exhaustion requirements for good cause or a serious violation, including circumstances involving grave and irreparable harm, the absence of an adequate remedy, or patently illegal action.

A formal NPC complaint must generally be written, signed, verified, supported by evidence and relevant correspondence, and accompanied by a certification against forum shopping. The respondent may be named as unknown if the complaint states circumstances that could lead to identification. Filing methods, forms, fees, and current instructions are available on the NPC’s official complaint page.

Consider an NPC complaint particularly when an identifiable organization, platform, employer, lender, or other entity unlawfully disclosed, used, retained, or failed to protect your personal data. For an unknown individual behind a fraudulent account, prompt reporting to the NBI or PNP may be the more immediately useful investigative step.

Other offenses may apply

The proper charge depends on the evidence. In addition to computer-related identity theft, the conduct may potentially involve:

Illegal access, if the offender entered your genuine account without right;
Computer-related forgery or fraud;
Estafa or another fraud offense when victims were deceived into transferring money or property;
Threats, coercion, harassment, or extortion;
Cyberlibel, when the legal elements of libel are present;
Unauthorized processing or malicious disclosure of personal information;
Offenses involving intimate images, sexual exploitation, or children; or
Falsification or use of falsified documents.

Section 8 of Republic Act No. 10175 provides that offenses under Sections 4(a) and 4(b), including computer-related identity theft, are punishable by prision mayor, a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. If identity theft or computer-related fraud caused no damage yet, the law provides for a penalty one degree lower. The precise charge and penalty remain matters for prosecutors and courts after considering all elements, defenses, and admissible evidence.

A parody, fan, commentary, role-playing, or similarly labeled account is not automatically criminal identity theft. Relevant questions include whether it acquired or used another person’s identifying information without right, whether it was reasonably presented as authentic, what it communicated, and whether it caused or was intended to cause harm.

Protect people who may be deceived

After preserving evidence, promptly notify those most likely to rely on the fake account. A short public warning may identify:

Your only genuine account or official contact channel;
The fake account’s exact username;
The fact that you are not requesting money, passwords, verification codes, or investments; and
The instruction not to engage, click links, or send funds.

Avoid publishing an unverified accusation about who created the account. Do not repost unnecessary copies of identification documents, intimate material, or private conversations. A warning should reduce harm without creating another privacy, defamation, or evidence-preservation problem.

If someone already sent money, advise that person to preserve the conversation and transaction records, contact the financial institution immediately, and file their own complaint. The person whose money was taken is an important complainant or witness even if your identity was used to facilitate the scam.

Common mistakes to avoid

Reporting the account before saving its URL and contents;
Keeping only cropped screenshots that omit the username, date, or context;
Deleting unauthorized messages before preserving them;
Assuming that platform removal automatically starts a criminal case;
Treating a blotter entry as the entire complaint process;
Waiting for the offender to cause financial loss before reporting;
Paying the impersonator or an alleged account-recovery specialist;
Sending identification documents through unofficial links or direct messages;
Publicly accusing a suspected person without reliable evidence;
Logging into supposed “verification” pages sent by the fake account;
Altering screenshots or submitting fabricated conversations;
Accessing the suspect’s account without authority to obtain evidence; and
Expecting investigators to obtain subscriber information without the required legal process.

When legal assistance is especially important

Consult a lawyer promptly when:

The impersonation has caused substantial financial or business loss;
Multiple victims or platforms are involved;
The account is publishing defamatory, intimate, or confidential material;
A child is being impersonated, groomed, threatened, or exploited;
The offender appears to be outside the Philippines;
You need urgent court relief;
The platform or organization has failed to preserve or address serious misuse of personal data;
You are being blamed for transactions made by the impersonator; or
Law enforcement, prosecutors, banks, or platforms require coordinated affidavits and evidence.

Counsel can help distinguish the possible offenses, prepare a coherent sworn complaint, preserve claims against the appropriate parties, and avoid unsupported allegations that could weaken the case.

Frequently asked questions

Can I report a fake account even if I do not know who created it?

Yes. Give the platform and investigators the exact URL, username, preserved communications, and any objective leads. Lawful identification may require subscriber records, traffic data, payment information, and court-authorized processes.

Is using my photograph enough to constitute identity theft?

Not necessarily in every case. The prosecution must establish the statutory elements, including intentional use or misuse of identifying information belonging to another and the absence of a right to do so. The presentation of the account, accompanying statements, purpose, and resulting harm are material.

Should I message the fake account and demand that it stop?

Usually, preserve evidence first. Contact may prompt the operator to delete evidence, change accounts, retaliate, or block you. If there are threats, extortion, fraud, or risks to a child, seek law-enforcement guidance before engaging.

Can the police immediately obtain the fake account’s IP address?

Not merely upon request. Platforms hold different forms of user data, and preservation, disclosure, search, seizure, or examination must follow Republic Act No. 10175 and the Rule on Cybercrime Warrants. Some data may also be stored abroad, requiring cooperation with foreign providers or authorities.

Can I have the account taken down without filing a criminal case?

Possibly. Platforms may remove impersonation accounts under their own rules. Use the official impersonation-reporting process and supply the requested proof. Removal does not prevent you from filing a complaint if a crime or privacy violation occurred.

What if the fake account merely exists but has not contacted anyone?

Document and report it. Computer-related identity theft expressly covers certain intentional misuse of identifying information without right, but whether a completed offense and damage exist depends on the facts. Early reporting may prevent later fraud and preserve evidence.

Where should a person who lost money complain?

The person should immediately notify the bank, e-wallet, remittance company, or other payment provider and file a cybercrime complaint. You may separately complain regarding the misuse of your identity. Coordinate the evidence because the impersonation and financial loss may be parts of the same scheme.

Does an NPC complaint automatically result in criminal prosecution?

No. NPC administrative proceedings, law-enforcement investigation, and criminal prosecution are distinct processes. The same incident may justify more than one remedy, but each forum has its own jurisdiction and procedural requirements.

This article provides general Philippine legal information, not advice for a particular case. The applicable offenses and remedies depend on the account’s contents, the information used, the offender’s purpose, the harm caused, and the available evidence. Official sources and procedures were checked as of August 25, 2026.