Quick answer

If someone created a social media account using your name, photos, business identity, or personal details to deceive others, preserve the evidence before reporting the account. Then:

Report the profile and each harmful post or message through the platform’s impersonation tools.
File a cybercrime complaint with the PNP Anti-Cybercrime Group (PNP-ACG) or NBI Cybercrime Division (NBI-CCD) if the account is being used for fraud, threats, harassment, reputational attacks, or other unlawful activity.
You may also report through the CICC’s 24/7 Hotline 1326, online reporting portal, or report@cicc.gov.ph.
If money or a financial account is involved, immediately contact the bank, card issuer, or e-wallet through its official fraud channel.
For immediate danger, credible threats, stalking, or an ongoing emergency, call the nationwide Unified 911 Hotline.

A fake or anonymous account is not automatically a crime. The legal issue is how it was created and used. Philippine law may apply when someone intentionally uses another person’s identifying information without right and for an illegitimate purpose, or when the account is used for fraud, harassment, threats, defamatory publication, or sexual abuse.

When a fake account may amount to identity theft

Section 4(b)(3) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, defines computer-related identity theft as the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion—without right—of identifying information belonging to another natural or juridical person.

The Supreme Court upheld this provision in Disini Jr. v. Secretary of Justice. It explained that the prohibited conduct involves an illegitimate purpose. Merely acquiring or sharing information that a user made public is not, by itself, identity theft.

This means that context matters:

An account that clearly identifies itself as parody, commentary, or a fan account may not be criminal merely because it uses a similar name.
A deceptive account that presents itself as the real person, solicits money, contacts relatives or customers, sends false instructions, or harms the person’s reputation may support an identity-theft or related complaint.
Using a public photograph does not automatically establish the crime. Investigators will look at the account’s overall presentation, intent, communications, and resulting harm.
“Damage” is not necessarily limited to money. Its existence and legal significance depend on the evidence and the facts of the case.

For computer-related identity theft, Section 8 of RA 10175 provides, upon conviction, imprisonment of prision mayor—six years and one day to twelve years—or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. If no damage has yet been caused, the law provides that the imposable penalty is one degree lower. Only a court can determine guilt, damage, and the proper penalty.

Other laws that may apply

The proper charge depends on what the fake account actually did.

Conduct	Possible legal issue
Using another person’s identity without right for an illegitimate purpose	Computer-related identity theft under RA 10175
Taking over the victim’s real account or accessing it without authority	Illegal access under RA 10175
Creating or using false computer data for a dishonest or fraudulent design	Computer-related forgery or fraud under RA 10175
Publishing a defamatory imputation online	Cyberlibel under RA 10175 and the Revised Penal Code, subject to all elements and defenses
Deceiving someone into revealing bank, card, or e-wallet credentials	Social-engineering offenses under the Anti-Financial Account Scamming Act, RA 12010
Gender-based threats, sexual remarks, cyberstalking, nonconsensual sharing, or online impersonation that causes or is likely to cause distress or fear	Gender-based online sexual harassment under the Safe Spaces Act, RA 11313
Sharing recordings of sexual acts or private areas without the required written consent	Possible violation of the Anti-Photo and Video Voyeurism Act, RA 9995
Sexual exploitation, grooming, sexual extortion, or sexual material involving a child	The Anti-OSAEC and Anti-CSAEM Act, RA 11930
Unlawful processing, disclosure, or misuse of personal data	Possible violation of the Data Privacy Act, RA 10173, depending on the parties and circumstances

Do not try to select or prove the final criminal charge yourself. Describe the acts accurately and let investigators and prosecutors evaluate the applicable laws.

Preserve the evidence before seeking takedown

A profile can change its username, delete posts, block you, or disappear after it is reported. Before requesting removal, preserve:

The complete profile URL—not just the displayed name.
The username, account ID if visible, display name, profile photograph, biography, and creation information shown by the platform.
Full-page or full-screen screenshots showing the account, post, date, time, reactions, comments, and surrounding context.
A screen recording that begins at the profile and opens the relevant posts, messages, or links.
Direct URLs for every harmful post, video, story, listing, or message that remains accessible.
The complete message thread, including timestamps and the account name or number.
Emails or platform notifications concerning login attempts, password changes, reports, and takedown decisions.
Receipts, reference numbers, beneficiary-account details, QR codes, phone numbers, and transaction histories if money was requested or transferred.
Messages from friends, customers, or relatives who were contacted by the impersonator.
The names of potential witnesses and a short note describing what each person personally saw or received.
Copies of your genuine profile and earlier posts establishing that the impersonator copied your identity.

Keep original files. Avoid cropping, adding annotations to the only copy, changing filenames, or repeatedly forwarding files through apps that may strip metadata. Store at least one duplicate in a secure location and keep the original phone or computer available for possible examination.

Electronic evidence may require authentication. Under the Rules on Electronic Evidence, electronic documents are recognized as evidence, but their authenticity and reliability still have to be established. Screenshots are useful, but screenshots supported by URLs, original files, witness testimony, transaction records, and the original device are generally more useful than isolated images.

Do not publicly repost intimate material or content involving a child “for evidence.” Preserve the URL, account identifiers, report confirmation, and relevant context, then coordinate promptly with law enforcement.

Secure your accounts and identity

If the impersonator may have accessed your real accounts:

Secure your main email account first because it is often used for password resets.
Change compromised or reused passwords using a clean, trusted device.
Sign out unknown devices and revoke unfamiliar applications or sessions.
Enable multi-factor authentication, preferably through an authenticator app or another secure method offered by the service.
Check whether recovery emails, phone numbers, forwarding rules, or security questions were changed.
Contact your mobile provider immediately if your SIM suddenly stopped working or you suspect an unauthorized SIM replacement.
Review bank, card, loan, e-wallet, online-shopping, and government-service accounts for unauthorized activity.
Warn close contacts and customers through a verified channel. State the exact fake username and tell them not to send money or disclose codes.

Never send an OTP, password, PIN, recovery code, or identity document to the impersonator or to someone claiming that payment is required to “trace” the account.

Report the account to the platform

Report both the account and the particular posts, advertisements, messages, or listings that violate platform rules. Save the confirmation, case number, and any response.

Facebook: Use Facebook’s impersonating profile or Page guidance or its impostor-account form.
Instagram or Threads: Use the impersonation-report form or report the profile in the app.
X: Use the impersonation-report form and separately report abusive posts or direct messages where appropriate.
TikTok: Follow TikTok’s impersonation-report procedure.

The real victim or an authorized representative may have to submit identification. Upload documents only through the platform’s verified website or app—not through a link sent by the suspect.

A platform report requests enforcement of platform rules. It is not a criminal complaint and does not automatically cause the account holder’s identity or records to be disclosed to you.

How to file a cybercrime complaint

Choose the appropriate government channel

For a formal criminal investigation, the principal agencies designated by RA 10175 are the PNP and NBI.

PNP Anti-Cybercrime Group: You may contact acg@pnp.gov.ph or visit PNP-ACG at Camp General Crame or the appropriate regional anti-cybercrime unit. The government’s current contact summary appears in the BSP’s fraud-complaint guidance.
NBI Cybercrime Division: The NBI Citizens’ Charter directs complainants to the Cybercrime Division or a Regional Cybercrime Center for a complaint sheet, preliminary interview, sworn statements, supporting documents, and possible device examination. Its listed investigative assistance has no fee. The NBI also maintains an online complaint page.
Cybercrime Investigation and Coordinating Center: Call 1326, email report@cicc.gov.ph, or use the CICC reporting portal for central reporting, assistance, or referral.

If you report through more than one channel, disclose your existing reference numbers so agencies know that the incident may already be recorded elsewhere.

Prepare a clear complaint packet

Bring or submit:

A valid ID, if available.
A concise chronological narrative stating what happened, when you discovered it, and what harm occurred.
The URLs, usernames, account IDs, phone numbers, email addresses, and other technical identifiers.
An evidence index matching each attachment to an event in your narrative.
Original or unedited copies of screenshots, recordings, emails, and messages.
Transaction documents and communications with the bank or e-wallet, if applicable.
Copies of platform reports and responses.
Names and contact information of witnesses.
Information about a possible suspect, clearly marked as a lead rather than a proven fact.

You may report even if you do not know the real person behind the account. Do not publicly accuse a suspected person without reliable proof.

During and after filing

The investigator may ask you to complete a complaint sheet, undergo an interview, execute a sworn statement, submit witness affidavits, or make a device available for examination. Review every sworn statement carefully before signing and correct any inaccurate date, amount, or quotation.

Ask for:

The complaint, reference, or docket number.
The investigator’s official contact details.
A list or acknowledgment of evidence received.
Instructions for submitting new incidents.
Whether a prompt preservation request to the platform or service provider is appropriate.

Under Section 13 of RA 10175, service providers must preserve the integrity of traffic data and subscriber information for at least six months from the transaction. Content data must be preserved for six months from receipt of a law-enforcement preservation order, with a possible one-time six-month extension. Disclosure of protected subscriber or content data generally requires lawful process, including the applicable court warrant. A private complainant cannot simply demand confidential account information from a platform.

If money or a financial account is involved

Contact the bank, card issuer, or e-wallet immediately using the number in its official app, website, card, or statement. Ask it to:

Secure the account and terminate unauthorized sessions.
Record a formal fraud or unauthorized-transaction dispute.
Identify the transactions and beneficiary details it can lawfully provide.
Preserve relevant records.
Explain whether any hold, recall, blocking, or recovery measure remains available.

Do not assume that reporting guarantees reimbursement. Liability and restitution depend on the institution’s controls, the applicable BSP rules, and the specific facts. Under RA 12010, conviction of the scammer is not always a prerequisite to restitution where a covered institution failed to employ adequate risk-management controls or the legally required degree of diligence.

The financial institution’s consumer-assistance mechanism is the first-level complaint channel. If its response is unsatisfactory, the BSP Consumer Assistance Mechanism is the second-level recourse. Complaints may be escalated through the BSP Online Buddy on the BSP website or, when that is unavailable, through the prescribed form sent to consumeraffairs@bsp.gov.ph with proof that the institution was contacted first.

A bank dispute does not replace a cybercrime complaint. File both when the facts indicate criminal activity.

When an NPC complaint may be appropriate

The National Privacy Commission route is separate from criminal investigation. Consider it when the issue involves unlawful processing or disclosure of personal data, failure to respect applicable data-subject rights, or a personal-information controller’s failure to address misuse of your data.

Under the NPC’s current complaint mechanics, a complainant generally must first inform the respondent in writing about the privacy violation and allow it to act. The requirement is satisfied when the respondent fails to take timely or appropriate action or gives no response within 15 calendar days after receiving the written notice. The NPC may waive this requirement for good cause or a serious violation or breach, considering the risk of harm.

A formal NPC complaint generally requires a notarized complaint-assisted form or verified complaint with supporting evidence. It may be submitted personally, by registered mail or courier, or through authorized email filing. Current forms, fee-assessment instructions, and filing details are available on the NPC’s formal complaint page; its complaints email is complaints@privacy.gov.ph.

NPC jurisdiction is fact-dependent. An anonymous perpetrator who cannot be identified may also create procedural difficulties, and the NPC can dismiss a complaint when the parties cannot be identified or traced despite diligent effort. For an unknown fake-account operator, report to law enforcement as well.

Important time limits

Act promptly even if the account has not yet caused financial loss.

Service providers’ statutory minimum preservation period for certain subscriber and traffic data is six months. Delay can make attribution more difficult.
For an NPC complaint, the usual exhaustion step allows the respondent 15 calendar days after written notice, subject to the NPC’s waiver authority.
If the fake account published allegedly defamatory material, cyberlibel has a particularly short prescriptive period. In its April 8, 2026 resolution in Causing v. People, the Supreme Court maintained that cyberlibel prescribes in one year from discovery by the offended party, authorities, or their agents, subject to the rules on interruption of prescription.
There is no single 24-hour or 48-hour filing deadline that applies to every ordinary identity-theft report. Different possible offenses have different prescriptive rules.

Do not calculate prescription without legal advice when significant time has passed. The date of discovery, the applicable offense, and whether a particular filing interrupted prescription may be disputed.

Common mistakes to avoid

Reporting the profile before saving URLs and unedited evidence.
Keeping only cropped screenshots that omit the username, time, or context.
Deleting messages, security emails, or the original account notification.
Arguing with the impersonator and revealing what evidence you have.
Paying a supposed investigator, hacker, or “Meta employee” to identify the account.
Trying to hack, dox, or unlawfully access the suspected perpetrator’s account.
Publicly posting your IDs, signatures, account numbers, or intimate evidence.
Treating a platform report, barangay entry, or ordinary police blotter as a substitute for a cybercrime complaint.
Filing inconsistent narratives with different agencies.
Naming a suspected person as the offender when the available facts only make that person a possible lead.
Waiting for the platform’s final response while evidence disappears or a legal deadline runs.

When help is urgent

Seek immediate law-enforcement assistance when:

The account makes a credible threat of violence, publishes your location, stalks you, or appears connected to someone nearby.
The impersonator is extorting money or demanding a meeting.
Your bank, e-wallet, SIM, email, or government account has been taken over.
Intimate images are being threatened, sold, or distributed.
A child is being impersonated, groomed, sexually extorted, or depicted in sexual material.
The account is contacting customers or relatives for money in real time.
You are being targeted through gender-based threats, sexual humiliation, cyberstalking, or repeated identity-based harassment.

Call 911 for an immediate threat to life or safety. For gender-based online sexual harassment, RA 11313 specifically designates the PNP-ACG to receive complaints, with CICC coordination.

Frequently asked questions

Is every dummy or fake account illegal?

No. Pseudonyms and clearly disclosed parody, commentary, or fan accounts are not automatically crimes. Deceptive impersonation, unauthorized use of identifying information for an illegitimate purpose, fraud, threats, harassment, or other unlawful acts may create liability.

Can I report an account if I do not know who created it?

Yes. Give investigators the exact URLs, usernames, account IDs, communications, transaction details, and any legitimate leads. Identifying the operator may require preservation requests and court-authorized disclosure.

Can I require Facebook, TikTok, X, or another platform to tell me who owns the account?

Usually not through an ordinary user request. Protected subscriber and content information generally requires the platform’s lawful disclosure process and, where applicable, a court-issued cybercrime warrant.

Should I report the profile even if it has already been deleted?

Yes. Submit your preserved evidence, the former URL or username, platform notifications, and witness records. Deletion may affect the available evidence, but it does not necessarily make an investigation impossible.

Will reporting automatically remove the account?

No. Platform removal depends on the service’s rules and review. A government report also does not guarantee immediate takedown, identification, prosecution, or recovery of money.

Can a barangay or local police blotter help?

It can document when you reported the incident, especially if there are local threats or safety concerns. For technical investigation and lawful requests to platforms, also file with the PNP-ACG, an appropriate regional anti-cybercrime unit, or the NBI-CCD.

Do I need a lawyer?

A lawyer is especially helpful if the account caused substantial financial or reputational harm, intimate material is involved, the suspect is known, the conduct has continued for months, a prescriptive period may be close, or you are considering civil, criminal, or administrative proceedings. Qualified complainants may also inquire about assistance from the Public Attorney’s Office.

This article provides general legal information, not advice for a particular case. Outcomes depend on the evidence, documents, dates, jurisdiction, and applicable defenses. Laws, agency procedures, and platform reporting channels were checked against official sources as of 30 July 2026.