Quick answer

If someone creates a fake social media account using your name, photographs, identity documents, business identity, or other identifying information, report the account to the platform immediately and preserve the evidence before the account disappears. If the account is being used to deceive people, solicit money, damage your reputation, threaten you, access your accounts, or impersonate your business, file a formal complaint with the PNP Anti-Cybercrime Group (PNP-ACG) or the NBI Cybercrime Division.

The conduct may constitute computer-related identity theft under Section 4(b)(3) of the Cybercrime Prevention Act of 2012. Other offenses may also apply, depending on what the impersonator actually did. However, every duplicate, anonymous, fan, parody, or similarly named account is not automatically a crime. Criminal liability depends on proof of intentional, unauthorized use of another person’s identifying information and the surrounding circumstances.

Do not limit yourself to reporting the profile inside Facebook, Instagram, TikTok, X, or another platform. Platform reporting may remove the account, but it does not by itself identify or prosecute the person behind it.

What Philippine law considers computer-related identity theft

Section 4(b)(3) of Republic Act No. 10175 defines computer-related identity theft as the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another natural or juridical person, without right.

Identifying information may include a person’s or organization’s:

Name or business name;
Photographs or videos;
Signature;
Government-issued identification details;
Address, telephone number, or email address;
Account credentials;
Financial or payment information;
Employment, professional, or organizational identity; and
Other information capable of identifying the person or entity.

The law expressly covers the identity of both natural persons and juridical persons, such as corporations and partnerships.

The prosecution must still prove the statutory elements. A fake account becomes especially serious when it presents itself as the victim, communicates with third parties in the victim’s name, asks for money, obtains confidential information, makes false representations, or uses copied identification documents.

Under Section 8 of Republic Act No. 10175, computer-related identity theft is punishable by prision mayor—generally six years and one day to twelve years—or a fine of at least ₱200,000 up to an amount commensurate with the damage incurred, or both. If no damage has yet been caused, the law provides for a penalty one degree lower. The precise penalty remains for the court to determine from the charge, evidence, applicable amendments, and circumstances of the case.

A fake account is not automatically a criminal offense

Using the same name as another person is not, by itself, sufficient proof of identity theft. Many people share common names. An account may also clearly identify itself as a fan page, commentary page, fictional character, or parody rather than pretending to be the person depicted.

Relevant questions include:

Did the account use your identifying information?
Did it claim, expressly or by implication, to be you?
Was the information used without your permission or other legal justification?
Did the creator intentionally mislead other people?
Did the account obtain money, information, access, or another benefit?
Did anyone suffer actual harm?
Were defamatory statements, threats, harassment, or intimate materials posted?
Was your genuine account hacked or merely copied?

A copied profile can therefore violate platform rules even when the available evidence is not yet enough to establish a criminal offense. Conversely, the absence of financial loss does not necessarily prevent prosecution because Section 4(b)(3) expressly contemplates identity theft in which no damage has yet occurred.

What other offenses may be involved

The correct charge depends on the acts committed through the fake account.

Computer-related fraud

Section 4(b)(2) of Republic Act No. 10175 may apply when unauthorized input, alteration, or deletion of computer data, or interference with a computer system, causes damage with fraudulent intent. Ordinary or syndicated estafa provisions may also become relevant when the impostor deceives someone into parting with money or property.

Illegal access

If the offender entered your genuine account, email, cloud storage, or device without authority, the conduct may constitute illegal access under Section 4(a)(1) of Republic Act No. 10175. Changing your password, recovery email, or stored information may support additional allegations.

Computer-related forgery

A fabricated electronic document or altered computer data intended to be accepted for legal purposes as authentic may fall under computer-related forgery. Examples may include falsified electronic identification, receipts, authorizations, or transaction records.

Cyber libel

If the account publishes a defamatory imputation identifying you, cyber libel may be considered. A false or offensive post is not automatically libel; the elements of libel, including defamatory imputation, publication, identification, and malice where legally required, must be established. The person who created or authored the unlawful post is legally different from someone who merely reacted to or encountered it.

Threats, harassment, extortion, or sexual offenses

Messages containing threats, demands for money, blackmail, or sexual exploitation may implicate provisions of the Revised Penal Code or special laws. If intimate images or recordings are involved, the Anti-Photo and Video Voyeurism Act may apply. Cases involving children require immediate referral to law enforcement and may fall under child-protection and online sexual abuse or exploitation laws.

Data Privacy Act violations

Unauthorized processing or disclosure of personal information may fall under the Data Privacy Act of 2012. However, the National Privacy Commission is not a general substitute for the police or NBI. Its jurisdiction focuses on personal-data processing, privacy violations, and personal data breaches.

Civil damages

Even when criminal prosecution is unavailable or unsuccessful, Articles 19, 20, and 21 of the Civil Code may support a civil claim for damages when the conduct violates another person’s rights, is contrary to law, or willfully causes injury in a manner contrary to morals, good customs, or public policy. The claimant must still prove the wrongful act, injury, and causal connection.

First steps: preserve the account before reporting it

Fake accounts can be renamed, restricted, deleted, or deactivated within minutes. Preserve the following before confronting the account holder or asking others to mass-report it:

Copy the exact profile URL. A display name can change. The direct URL, username, or numerical account identifier is more useful.
Capture the entire profile. Take screenshots and, where appropriate, a screen recording showing the profile name, username, photographs, biography, posts, follower information, dates, and URL.
Save complete conversations. Include the beginning and end of each exchange, dates and times, sender details, attachments, voice messages, and payment instructions. Avoid submitting only isolated statements that remove important context.
Preserve original electronic files. Keep downloaded images, emails, message exports, audio recordings, and attachments in their original form. Do not repeatedly edit, crop, annotate, or recompress the only copy.
Record transactions. Save official receipts, bank or e-wallet statements, reference numbers, recipient names, account numbers, QR codes, and the date and time of every transfer.
Identify witnesses and recipients. Ask people contacted by the fake account to preserve their own messages. A forwarded screenshot may be less useful than evidence retained by the person who directly received the communication.
Prove your real identity and account ownership. Preserve your IDs, original photographs, account-creation notices, verification records, and earlier posts showing that you owned or used the genuine identity before the fake account appeared.
Prepare a chronology. List when the account was discovered, what it did, who was contacted, what losses occurred, what reports were made, and the reference number issued by each platform or agency.

Keep an untouched master copy and use separate copies for highlighting or submission. Do not hack the fake account, secretly access another person’s device, impersonate the offender, or use spyware to obtain evidence.

Report the fake account to the social media platform

Use the platform’s built-in reporting function and select the category for impersonation, fake identity, fraud, hacked account, or unauthorized use of personal information, as applicable.

For Facebook, Meta provides an official impersonating account reporting form. The platform may require identification or other proof that you are the person being impersonated. If a child or a person unable to report personally is involved, follow the platform’s procedure for an authorized representative.

When filing a platform report:

Identify the fake profile, not your genuine account;
State clearly whom it is impersonating;
Provide the direct URL and username;
Explain briefly how the account is misleading people;
Attach only the identification or proof genuinely required by the official platform form;
Save the confirmation email, case number, and submission date; and
Check whether the account has linked pages, marketplace listings, groups, advertisements, or additional profiles and report each relevant item.

Be cautious with links sent through private messages claiming to be “Meta support” or another platform’s verification team. Access reporting forms through the platform’s official Help Center or application, not through links supplied by the suspected impersonator.

Removal is not guaranteed, and removal does not establish criminal guilt. Platform moderation and Philippine criminal proceedings apply different standards.

Secure your genuine accounts and financial identity

If the impersonator may have obtained your credentials or identification documents:

Change the password of the affected account and the connected email account;
Use a unique password and enable multi-factor authentication;
Review active sessions, logged-in devices, recovery addresses, and authorized applications;
Revoke unknown sessions and third-party access;
Inform your bank or e-wallet provider if financial information was exposed;
Ask the provider to flag disputed accounts or transactions;
Notify contacts through your verified channel that the other profile is fraudulent;
Review whether your mobile number was subjected to an unauthorized SIM replacement; and
Preserve all security alerts, one-time-password messages, and account-recovery emails.

Do not post a full photograph of your government ID publicly to prove which account is genuine. If a platform or investigator requires identification, transmit it only through an authenticated official channel.

Where to file a criminal complaint

PNP Anti-Cybercrime Group

The PNP is one of the law-enforcement authorities expressly designated by Section 10 of Republic Act No. 10175. You may approach the PNP Anti-Cybercrime Group or the appropriate regional or local cybercrime unit.

Bring your identification, printed chronology, copies of electronic evidence, the device containing the original evidence when requested, and information about witnesses and losses. Check the PNP-ACG’s official website before visiting because office locations, contact numbers, and electronic-reporting facilities may change.

NBI Cybercrime Division

You may also file with the NBI Cybercrime Division. The NBI’s current Citizens’ Charter describes the process as including:

Filing a complaint or request for investigation;
A preliminary interview and initial investigation;
Completion of a sworn complaint sheet;
Execution or submission of sworn statements or prepared affidavits;
Submission of supporting documents; and
Possible examination of a device relevant to the investigation.

The published NBI service lists no fee for these initial investigative steps. The NBI contact page also provides its current main-office location, hotline, and office-directory information.

CICC reporting and coordination

The Cybercrime Investigation and Coordinating Center is the inter-agency coordinating body created under Republic Act No. 10175. Its role includes immediate assistance and coordination against ongoing cybercrime. For urgent online scams or identity-based fraud, use only contact details published through the official CICC website or other verified government channels.

A CICC report or platform report may assist with triage, referral, or intervention, but ask whether a formal law-enforcement complaint has been officially docketed. A hotline call or online tip does not necessarily replace the sworn complaint and supporting evidence required for investigation and prosecution.

Barangay or ordinary police blotter

A barangay or police blotter can document that an incident was reported on a particular date, but it does not by itself prove the truth of the allegation, identify the offender, compel a platform to disclose subscriber information, or commence prosecution. For a technically complex online case, proceed to the PNP-ACG or NBI even if you have already obtained a blotter entry.

What to put in the complaint

A clear complaint should state:

Your full name and contact details;
The identity or description of the suspected offender, if known;
The URL, username, and platform involved;
The specific identifying information copied or misused;
Why the use was unauthorized;
The date and manner in which you discovered the account;
Each representation, message, post, demand, or transaction relevant to the complaint;
The persons who received or relied on the impersonation;
Any financial, reputational, privacy, employment, or safety harm;
Steps taken with the platform, bank, employer, school, or government agency;
The location of the devices and original files; and
A numbered list of supporting attachments.

Distinguish facts you personally witnessed from facts reported to you by others. Those directly contacted by the fake account should ideally execute their own sworn statements.

Do not name a suspect merely because of a personal dispute, writing style, mutual friend, or unverified IP-address claim. Explain the basis for any identification and allow investigators to evaluate it.

Why prompt reporting matters

Republic Act No. 10175 provides mechanisms for preserving and obtaining computer data, but private complainants generally cannot compel a platform to disclose subscriber records on their own.

Under the law and the Rule on Cybercrime Warrants, law-enforcement authorities may use appropriate preservation and court-authorized disclosure processes. Section 13 of Republic Act No. 10175 requires traffic data and subscriber information held by service providers to be preserved for a minimum of six months from the transaction. Content data may be preserved for six months after receipt of a lawful preservation order, subject to a one-time extension under the statute.

These periods are not a reason to wait. An account may be deleted, logs may fall outside the relevant retention period, witnesses may lose messages, and funds may be transferred. Tell investigators immediately if the account is active or likely to disappear and ask them to evaluate whether prompt data-preservation measures are warranted.

Investigators ordinarily need proper legal process to obtain nonpublic subscriber, traffic, or content data. A screenshot may establish what appeared online, but it does not necessarily establish who created or controlled the account.

Complaints involving personal-data misuse

Consider a separate complaint with the National Privacy Commission when the incident involves unauthorized collection, disclosure, processing, or security failure concerning personal data—for example, when an organization wrongfully disclosed identity documents later used for impersonation.

The NPC’s official complaint guidance requires a notarized complaint-assisted form or verified complaint, together with supporting evidence and witness affidavits. Filing may be done personally, by registered mail, courier, or authorized electronic means.

As a general rule, the complainant must first notify the respondent in writing and give the respondent an opportunity to act. NPC guidance treats the remedy as exhausted when the respondent fails to take timely or appropriate action, or gives no response within 15 calendar days from receipt. Proof of the prior written notice should be attached. Exceptions or urgent relief may require case-specific evaluation, particularly when continued processing poses an immediate risk.

An NPC complaint serves a different purpose from a criminal complaint. If the impersonation involves fraud, threats, hacking, or other criminal conduct, report it to the PNP-ACG or NBI without waiting for the NPC process.

If money was requested or transferred

If the fake account solicited or received money:

Contact the bank, e-wallet, remittance company, or payment service immediately.
Request that the transaction and recipient account be flagged and investigated.
Obtain a complaint or reference number.
Preserve the official transaction record.
Report promptly to the PNP-ACG, NBI, or CICC through verified official channels.
Tell investigators whether the recipient account, mobile number, QR code, or wallet address remains active.
Warn the people contacted by the impersonator without publishing sensitive account information unnecessarily.

A bank or e-wallet may restrict an account while reviewing a report, but recovery or reversal is not automatic. It depends on the payment method, provider rules, timing, available balance, and evidence.

If your identity documents were exposed

When a fake account displays or sends copies of your passport, driver’s license, national ID, company ID, signature, tax records, or bank documents:

Preserve where and how the document appeared;
Determine who lawfully held a copy;
Notify the issuing agency or organization if replacement, annotation, or protective action may be available;
Inform financial institutions if the document could be used for account opening or credit;
Monitor unfamiliar transactions, applications, and verification messages; and
Consider both a criminal complaint and an NPC complaint where the facts support them.

Do not assume that deleting the social media profile resolves the broader risk. Copies may have been sent privately or used to open accounts elsewhere.

Common mistakes that weaken a report

Mass-reporting before preserving evidence

A successful takedown may remove material that investigators need. Capture the profile, URL, communications, and transactions first.

Submitting screenshots without URLs or dates

A screenshot of a profile name alone may not identify the account. Include the exact URL, username, date, time, and surrounding context.

Editing the only copy

Cropping, annotating, or converting files can remove context or metadata. Preserve the original and make a separate working copy.

Publicly accusing an unverified suspect

An incorrect public accusation may expose the accuser to legal liability and alert the real offender. Give suspicions and supporting facts privately to investigators.

Assuming the platform will disclose the creator’s identity

Platforms generally do not release nonpublic subscriber information to an ordinary user simply upon request. Investigators must evaluate and pursue the proper legal process.

Paying an online “hacker” or recovery agent

Someone promising to identify, hack, or delete the fake account for an advance payment may be committing another scam. Do not provide passwords, one-time passwords, remote-device access, or additional identification.

Filing only a barangay complaint

A barangay record may be useful documentation, but specialized investigators are usually needed to preserve data and trace online activity.

Delaying because no money was lost

Identity theft may still be punishable even if no damage has yet been caused. Early reporting can prevent future victims and preserve evidence.

When legal or emergency help is urgent

Seek immediate police assistance and do not handle the matter solely through platform reporting when:

The account makes a credible threat of violence;
The offender knows your location, workplace, or child’s school;
Someone is demanding money under threat of releasing private material;
The account is soliciting money from many contacts;
Your bank, e-wallet, email, or genuine social media account has been accessed;
Government IDs or financial documents are being circulated;
A child is being impersonated, groomed, threatened, or sexually exploited;
Intimate images are being distributed or threatened with distribution;
The account is arranging in-person meetings while pretending to be you; or
Evidence is being deleted or the offender is actively moving fraud proceeds.

For an immediate physical danger, contact the nearest police station or emergency service first. Online reporting should not delay protection from an ongoing threat.

Frequently asked questions

Can I report a fake account if I do not know who created it?

Yes. Many cybercrime complaints initially name an unknown person. Provide the exact profile URL, username, messages, transaction information, and every available lead. Investigators may seek subscriber or traffic data through lawful processes if the evidence and legal requirements justify it.

Do I need a lawyer to report identity theft?

No. You may report directly to the platform, PNP-ACG, NBI, CICC, or NPC, as appropriate. A lawyer may be helpful when preparing a complaint-affidavit, addressing multiple possible offenses, seeking urgent civil relief, responding to a counter-allegation, or pursuing damages.

Can I have the fake account deleted immediately?

You can request prompt removal through the platform, but no government agency or lawyer can guarantee immediate takedown. Preserve evidence first. If the account involves ongoing criminal activity, tell investigators that urgent preservation and platform coordination may be necessary.

Is using my photograph enough to establish identity theft?

Not always. The photograph must be evaluated together with the account name, representations, purpose, authority, and other circumstances. A clearly labeled news report, commentary, fan page, or parody presents different legal issues from an account pretending to be you and communicating in your name.

What if the fake account uses my company’s name?

Computer-related identity theft under Republic Act No. 10175 covers identifying information belonging to juridical persons. Trademark infringement, unfair competition, fraud, or other remedies may also be relevant, depending on the registration, commercial use, representations, and resulting confusion.

Will a screenshot be accepted as evidence?

A screenshot can be relevant evidence, but its weight depends on authenticity, completeness, source, and supporting testimony. Preserve the original account link, device, messages, files, and testimony of the person who captured or received them. Investigators and prosecutors will determine what additional authentication is required.

Should I confront the fake account?

Usually, preserve evidence and seek advice before confronting it. Confrontation may cause deletion of the account, destruction of evidence, movement of funds, or escalation of threats. If communication is necessary, avoid threats, hacking, entrapment, or misrepresentation.

Is filing a cybercrime complaint free?

The NBI Citizens’ Charter lists no fee for the initial Cybercrime Division complaint and investigation-assistance process. Platform reporting is ordinarily free. Notarization, copying, courier services, private counsel, or other incidental services may involve separate expenses.

Official references

This article provides general legal information, not legal advice for a specific case. Charges, jurisdiction, evidence requirements, remedies, and outcomes depend on the actual communications, account records, documents, and resulting harm. Official sources and procedures were checked as of August 25, 2026.