Fake accounts are usually more than an annoyance. In the Philippines, an impostor profile can be used to scam your relatives, damage your reputation, harass you, spread private photos, or collect personal information for identity theft. The right response is not just to click “Report” on the app. You should preserve evidence first, report the account to the platform, secure your own accounts, and, when there is fraud, harassment, threats, sexual content, or reputational harm, file a proper cybercrime complaint with the PNP Anti-Cybercrime Group or the NBI Cyber Crime Division.
What Counts as a “Fake Account” in the Philippines?
A fake account is not automatically a crime just because it uses an alias or does not show a real face. Many people use nicknames, fan pages, parody accounts, or anonymous accounts for lawful reasons.
The legal problem usually starts when the account does one or more of these:
- Uses your name, photos, videos, logo, business name, or other identifying information without authority
- Pretends to be you or your company
- Sends messages asking for money, OTPs, passwords, GCash/Maya transfers, bank deposits, or personal documents
- Posts false statements that damage your reputation
- Harasses, threatens, stalks, blackmails, or sexually humiliates someone
- Uploads private, intimate, edited, or AI-generated images
- Uses a fake page to mislead customers, voters, patients, clients, or students
It is also important to distinguish a fake account from a hacked account. A fake account is a separate account created by someone else. A hacked account is your real account taken over by another person. Both may involve cybercrime, but the platform recovery process and evidence needed are different.
Legal Basis: Is Creating a Fake Account a Crime in the Philippines?
A fake account may fall under several Philippine laws depending on what the account does.
Computer-Related Identity Theft Under RA 10175
The main law is Republic Act No. 10175, or the Cybercrime Prevention Act of 2012. Section 4(b)(3) punishes computer-related identity theft, which includes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person or company, without right. If no damage has yet been caused, the penalty is one degree lower. (Supreme Court E-Library)
In ordinary terms, this may cover a fake account that uses your name, photo, business identity, or other identifying information to make people believe the account is yours.
Examples:
- A fake Facebook profile using your name and profile photo to borrow money from your friends
- A fake Instagram account using your photos to message strangers
- A fake business page using your store name and logo to collect payments
- A fake account pretending to be a lawyer, doctor, recruiter, public official, or company representative
Computer-Related Fraud and Estafa
If the fake account is used to obtain money or property through deceit, it may also involve computer-related fraud under RA 10175. Section 4(b)(2) covers unauthorized input, alteration, deletion, or interference in a computer system that causes damage with fraudulent intent. (Supreme Court E-Library)
It may also involve estafa under Article 315 of the Revised Penal Code, especially when the scammer uses a fictitious name or falsely pretends to have power, influence, agency, business, credit, property, or other similar qualifications. (Lawphil)
A common example is the “Hi, this is my new account” scam, where a cloned account messages relatives asking for emergency money through GCash, Maya, bank transfer, or remittance.
Cyber Libel
If the fake account posts defamatory statements, the issue may become cyber libel. RA 10175 covers libel committed through a computer system or similar means, by reference to libel under Article 355 of the Revised Penal Code. (Supreme Court E-Library)
A fake account that posts “magnanakaw siya,” “scammer ito,” “may kabit,” “drug addict,” or similar accusations may create legal exposure if the statement is false, public, malicious, and damaging. Screenshots alone are not always enough; the complainant usually needs to preserve the account URL, post URL, date, time, comments, shares, and evidence showing the publication reached other people.
Data Privacy Violations
If the fake account uses personal information, IDs, private photos, contact numbers, addresses, school details, work details, health information, or government-issued numbers, the Data Privacy Act of 2012, RA 10173 may be relevant. The law protects personal information and gives data subjects rights such as access, correction, blocking, removal, destruction, and indemnity for unauthorized use of personal information. (National Privacy Commission)
The National Privacy Commission can receive complaints involving privacy violations. A formal NPC complaint must follow a specific format, be notarized, and may be submitted in person, by courier, or by scanned email submission. (National Privacy Commission)
Civil Damages Under the Civil Code
Even if law enforcement does not immediately file a criminal case, the Civil Code may provide remedies. Article 26 requires every person to respect the dignity, personality, privacy, and peace of mind of others, and recognizes damages, prevention, and other relief for similar acts that disturb private life, alienate friends, or humiliate another person. Articles 19, 20, 21, 32, and 33 may also support civil claims depending on the facts. (Lawphil)
Intimate Images, Sexual Harassment, and Cyberstalking
If the fake account uses nude, sexual, or intimate images, the Anti-Photo and Video Voyeurism Act of 2009, RA 9995 may apply. The law prohibits taking, copying, reproducing, selling, distributing, publishing, broadcasting, showing, or exhibiting intimate photos or videos without the required consent, including through the internet or mobile phones. (Lawphil)
If the fake account is used for gender-based online sexual harassment, cyberstalking, unwanted sexual remarks, or sexual humiliation, the Safe Spaces Act, RA 11313 may also apply. Its IRR recognizes cyberstalking and provides that the PNP Anti-Cybercrime Group receives complaints for gender-based online sexual harassment. (Supreme Court E-Library)
Where to Report a Fake Account in the Philippines
Use more than one reporting channel when the fake account is causing real harm. The platform can remove or restrict the account, but law enforcement handles criminal investigation. Banks and e-wallets handle payment freezing or account review. The NPC handles data privacy complaints.
| Situation | Where to report | Purpose |
|---|---|---|
| Fake Facebook, Instagram, TikTok, or X account | The platform’s impersonation or abuse reporting tool | Removal, restriction, or account review |
| Scam, extortion, identity theft, cyber libel, threats, harassment | PNP Anti-Cybercrime Group or NBI Cyber Crime Division | Cybercrime investigation and case build-up |
| Online scam needing urgent government referral | CICC / I-ARC Hotline 1326 | Centralized cybercrime and online scam reporting |
| GCash, Maya, bank, credit card, or remittance scam | The bank/e-wallet/remittance provider | Account blocking, transaction dispute, fraud investigation |
| Unauthorized use of personal data or IDs | National Privacy Commission | Data privacy complaint and possible orders |
| Sexual harassment or intimate image abuse | PNP ACG, NBI, PNP Women and Children Protection Desk, platform | Criminal complaint, evidence preservation, victim protection |
| Fake business page using a registered mark or company identity | Platform, PNP/NBI, SEC/DTI where relevant | Takedown, fraud report, business identity protection |
The Cybercrime Prevention Act specifically makes the NBI and PNP responsible for enforcement and requires them to organize cybercrime units or centers handled by special investigators. (Supreme Court E-Library)
Step-by-Step Guide: How to Report a Fake Account Properly
1. Preserve Evidence Before Reporting the Account
Do this before the account disappears. Once a fake account is reported, blocked, renamed, or deleted, it may become harder for an ordinary user to retrieve the details.
Collect:
- Full profile URL or handle
- Display name and username
- Profile photo and cover photo
- Screenshots of the profile, posts, comments, messages, reels, stories, marketplace listings, or ads
- Date and time of each screenshot
- Links to specific posts, comments, videos, or messages
- Screenshots showing your real account for comparison
- Proof that your photos, name, logo, or identity were copied
- Names of people who received messages from the fake account
- Transaction receipts, reference numbers, QR codes, wallet numbers, bank account numbers, or remittance slips
- Threats, defamatory statements, sexual content, or blackmail messages
- Any phone number, email address, Telegram/WhatsApp/Viber account, or payment channel connected to the fake account
Use full-screen screenshots where possible. Do not crop out the URL, username, time, or surrounding context. For fast-changing content like stories, live videos, or disappearing messages, take a screen recording and ask another person who can view the account to preserve what they see.
2. Secure Your Own Accounts
Before engaging with the fake account, secure your real accounts:
- Change passwords for email, Facebook, Instagram, TikTok, X, banking, and e-wallet accounts.
- Turn on two-factor authentication.
- Check login activity and remove unfamiliar devices.
- Review email forwarding rules and recovery emails.
- Warn close contacts not to send money or OTPs.
- If your SIM, email, or e-wallet is compromised, contact the provider immediately.
If the incident involves money, speed matters. For online scams, the I-ARC Hotline 1326 is used to report scams and may help coordinate with relevant agencies; government reporting also lists alternative mobile numbers for Smart, Globe, and DITO users. (Philippine News Agency)
3. Report the Fake Account to the Platform
Platform reporting is often the fastest way to remove the fake profile, but it is not a substitute for a police or NBI complaint when there is a crime.
| Platform | How to report impersonation |
|---|---|
| Use Facebook’s impostor account reporting process or report the profile/page pretending to be you or someone else. (Facebook) | |
| Instagram / Threads | Use the Instagram impersonation form or report the account from the profile. Instagram allows reports for accounts pretending to be you or someone you know. (Instagram Help Center) |
| TikTok | Go to the profile, tap the report option, choose “Report account,” and select impersonation. (TikTok Support) |
| X / Twitter | X allows impersonation reports by the person affected or an authorized representative, and bystanders may report an account misusing someone else’s identity from the profile. (Help Center) |
When reporting, use calm and specific language:
This account is impersonating me. It uses my full name and photos without permission and is messaging my contacts to ask for money. I am the person in the photos. The real account is [your real handle]. The fake account is [fake handle/link].
For a business:
This page is impersonating our business and using our logo, product photos, and store name to collect payments from customers. Our official page is [official page]. The fake page is [fake page].
4. Warn People Without Defaming Anyone
Post a short warning from your real account:
Someone created a fake account using my name and photos. Please do not send money, OTPs, passwords, or personal information to that account. My only official account is this one. I have already reported it.
Avoid naming a suspected person unless you have evidence. Publicly accusing the wrong person can create a separate defamation problem.
5. File a Complaint With PNP ACG or NBI Cyber Crime Division
For serious cases, prepare a complaint packet and go to the nearest PNP Anti-Cybercrime Group office, PNP cybercrime unit, NBI Cyber Crime Division, or NBI Regional Cybercrime Center.
For the NBI Cyber Crime Division, the Citizen’s Charter describes the process as proceeding to the CCD to file a complaint or request investigation, undergoing preliminary interview and initial investigation, executing sworn statements or submitting affidavits, and providing supporting documents; the listed government fee is none for the initial transaction. (National Bureau of Investigation)
Bring:
- Valid government ID
- Printed screenshots
- Digital copies on USB or cloud folder
- Your written timeline of events
- Names and contact details of witnesses
- Proof of ownership of the real account, business, photos, or page
- Proof of damage, such as scam receipts, lost sales, lost job opportunity, customer complaints, mental distress, or reputational harm
- Draft complaint-affidavit, if available
- Barangay blotter or police blotter, if already obtained
A complaint-affidavit is your sworn written statement explaining what happened, who was harmed, what evidence you have, and what laws may have been violated. It should be notarized if you are filing it directly with the prosecutor or an agency requiring notarized submissions.
6. Ask About Evidence Preservation
Cybercrime evidence can disappear quickly. Under RA 10175, service providers are required to preserve certain traffic data and subscriber information for at least six months from the transaction date, and content data for six months from receipt of a preservation order. Law enforcement may order a one-time six-month extension. (Supreme Court E-Library)
The same law provides that disclosure of subscriber information, traffic data, or relevant data requires a court warrant and must be connected to a valid complaint officially docketed and assigned for investigation. (Supreme Court E-Library)
This means an ordinary complainant usually cannot simply ask Facebook, TikTok, X, Google, or a telco to reveal the fake account owner’s IP address or subscriber details. That normally requires law enforcement action, proper process, and, when needed, international cooperation.
7. Follow Up With the Prosecutor Stage
If investigators find enough basis, the complaint may be referred for preliminary investigation before the prosecutor. The prosecutor determines whether there is probable cause, meaning enough basis to charge the respondent in court.
Cybercrime cases can move slowly because of:
- Anonymous or foreign-based accounts
- Delayed platform responses
- Need for cyber warrants
- Incomplete screenshots or missing URLs
- Multiple victims in different cities
- Fake SIM registration data
- Use of VPNs, mule accounts, or hacked accounts
- Need to coordinate with banks, e-wallets, telcos, or foreign service providers
Do not be surprised if the initial intake takes only a day, but the investigation and prosecutor stage take weeks or months.
Documents and Evidence Checklist
| Document or evidence | Why it matters |
|---|---|
| Valid ID | Proves the identity of the complainant |
| Screenshot of your real profile or official business page | Shows what the fake account copied |
| Screenshot of the fake profile | Shows the fake name, photo, handle, and identifying details |
| URL or username | Helps investigators and platforms locate the account |
| Screenshots of messages | Shows fraud, threats, harassment, or impersonation |
| Post/comment links | Helps prove publication for cyber libel or harassment |
| Transaction receipts | Proves financial damage |
| Witness statements | Shows other people were misled or harmed |
| Business registration, DTI/SEC papers, trademark proof, permits | Helps prove business identity |
| School/company certification, if relevant | Useful when the fake account affects work, school, or professional reputation |
| Medical, counseling, or HR records, if relevant | May help prove harm or impact |
| Complaint-affidavit | Formal sworn narrative for law enforcement or prosecutor |
| SPA or consularized authority, if abroad | Allows a representative in the Philippines to act for you |
If You Are a Filipino Abroad or a Foreigner Outside the Philippines
You can still take practical steps even if you are outside the country.
If you are abroad:
- Preserve all evidence digitally.
- Report the fake account through the platform.
- Send an online report or inquiry to the relevant Philippine cybercrime office, if available.
- Authorize a trusted representative in the Philippines through a Special Power of Attorney if physical filing or follow-up is needed.
- Execute your affidavit before a Philippine Embassy or Consulate, or follow the apostille route when the document is notarized in a country where apostille is available and accepted for use in the Philippines.
Philippine consular posts can notarize private documents such as affidavits and special powers of attorney, and documents executed abroad for use in the Philippines may need consular notarization or apostille depending on where and how they are executed. (Philippine Embassy of Canberra)
For foreigners dealing with a fake account in the Philippines, Philippine jurisdiction may still matter if the victim is in the Philippines, the damage occurred in the Philippines, the computer system or account activity has a Philippine connection, or the suspect is in the Philippines. RA 10175 gives Regional Trial Courts jurisdiction over covered cybercrime cases and recognizes jurisdiction when elements are committed in the Philippines, the computer system is wholly or partly in the country, or damage is caused to a person in the Philippines. (Supreme Court E-Library)
Common Mistakes When Reporting a Fake Account
Reporting the Account Before Saving Evidence
This is the most common mistake. The account may be removed, renamed, blocked, or hidden before you have enough proof. Always preserve evidence first.
Sending Angry Messages to the Impostor
Direct confrontation may warn the person to delete the account. It can also lead to more harassment or manipulation. If there is an immediate risk, report and secure your accounts first.
Posting the Suspect’s Name Without Proof
It is natural to suspect a former partner, rival, employee, classmate, or competitor. But public accusations can create a cyber libel risk if you cannot prove them.
Relying Only on “Mass Reporting”
Mass reporting may help get a platform’s attention, but it does not identify the perpetrator, preserve evidence, recover money, or file a criminal case.
Submitting Cropped Screenshots Only
Cropped screenshots may hide important details like the URL, date, time, handle, and context. Save full screenshots and screen recordings.
Assuming the Barangay Can Order a Takedown
A barangay blotter may help document the incident, especially for local harassment or community disputes. But barangay officials generally cannot compel Meta, TikTok, X, Google, a bank, or a telco to disclose account data or remove content. Serious cybercrime complaints should go to PNP ACG, NBI, or the prosecutor.
Practical Timelines and Fees
| Step | Typical timeline | Usual cost |
|---|---|---|
| Evidence preservation | Same day | Free |
| Platform report | Hours to weeks, depending on platform review | Free |
| Bank/e-wallet fraud report | Same day is best | Free, subject to provider rules |
| CICC/I-ARC online scam hotline report | Immediate hotline intake where available | Free |
| NBI Cyber Crime Division initial intake | NBI Citizen’s Charter lists about 1 hour and 10 minutes for the initial transaction | No government fee listed for the initial transaction (National Bureau of Investigation) |
| Complaint-affidavit notarization | Same day to a few days | Notarial fee varies |
| Prosecutor preliminary investigation | Often weeks to months | Filing is generally free, but document preparation costs vary |
| NPC formal complaint | Depends on completeness and docketing | NPC rules require proper complaint format and notarization; schedule of fees may apply (National Privacy Commission) |
| Consular notarization or apostille abroad | Days to weeks, depending on country and consulate | Consular/notarial/apostille fees vary |
What to Write in a Complaint-Affidavit
A useful complaint-affidavit is factual, chronological, and evidence-based. Avoid speculation.
Include:
- Your full name, address, contact number, and email.
- The fake account’s name, username, URL, and platform.
- How you discovered the fake account.
- What identity information was copied.
- What the account posted or sent.
- Who saw or received the messages.
- Whether money, personal data, reputation, safety, or privacy was affected.
- What steps you already took, such as platform report, bank report, or hotline report.
- A list of attached screenshots and receipts.
- A clear request for investigation.
Sample wording:
I am filing this complaint because an unknown person created and used a fake account on Facebook using my name and photos without my authority. The fake account messaged my relatives and asked them to send money through GCash. Attached are screenshots of the fake profile, the messages sent to my relatives, the GCash number used, and the transfer receipt. I request investigation for possible computer-related identity theft, computer-related fraud, estafa, and other applicable offenses.
Frequently Asked Questions
Can I report a fake Facebook account to the police in the Philippines?
Yes, especially if the fake account is used for scams, identity theft, threats, harassment, cyber libel, sexual harassment, or misuse of private information. For simple impersonation with no harm yet, start with platform reporting and evidence preservation. For criminal conduct, report to PNP ACG or NBI Cyber Crime Division.
Is using my photo on a fake account identity theft?
It can be, depending on the facts. Under RA 10175, computer-related identity theft involves unauthorized use or misuse of identifying information belonging to another person or company. A profile photo, full name, business logo, contact details, and other personal identifiers may become important evidence when used to impersonate you. (Supreme Court E-Library)
Can the police find out who owns the fake account?
Sometimes, but not instantly. Investigators may need platform records, subscriber data, device information, bank or e-wallet records, telco data, witness statements, and cyber warrants. RA 10175 requires court warrants for disclosure of relevant computer data in covered investigations. (Supreme Court E-Library)
Should I block the fake account?
Save evidence first. Blocking may prevent you from seeing updates or preserving posts. After evidence is saved and reports are filed, blocking may be appropriate for safety and privacy.
What if the fake account is asking my friends for GCash or Maya money?
Tell your contacts immediately not to send money. Save screenshots, fake account links, wallet numbers, QR codes, reference numbers, and chat logs. Report to the platform, the e-wallet provider, and cybercrime authorities. For urgent online scam reporting, the I-ARC Hotline 1326 is a government-supported reporting channel. (Philippine News Agency)
Can I sue if the fake account damaged my reputation?
Possibly. Depending on the content, you may have remedies for cyber libel, civil damages, privacy violations, or other claims. Civil Code Article 26 recognizes protection for dignity, personality, privacy, and peace of mind, while Article 33 allows an independent civil action for damages in cases such as defamation and fraud. (Lawphil)
What if the fake account posted my private or intimate photos?
Preserve evidence immediately, but do not repost the images. Report to the platform and to PNP ACG or NBI. RA 9995 penalizes unauthorized taking, copying, distribution, publication, or exhibition of intimate photos or videos through the internet or similar means. (Lawphil)
Can I report a fake account if I am outside the Philippines?
Yes. Report the account through the platform, preserve digital evidence, and authorize someone in the Philippines if physical filing is needed. Your affidavit or SPA may need consular notarization or apostille depending on where it is executed. (Philippine Embassy of Canberra)
Do I need a lawyer to report a fake account?
Not always. You can report directly to the platform, PNP ACG, NBI, CICC/I-ARC, bank, e-wallet, or NPC depending on the issue. A lawyer is most helpful when the case involves large financial loss, cyber libel, business impersonation, intimate images, foreign parties, or prosecutor/court proceedings.
What if I know who created the fake account but I cannot prove it?
Do not publicly accuse the person without evidence. Give investigators the facts that support your suspicion, such as timing, writing style, payment account, phone number, previous threats, or witnesses. Let the complaint focus on verifiable evidence.
Key Takeaways
- Preserve evidence before reporting, blocking, or confronting the fake account.
- Report the account to the platform, but file with PNP ACG or NBI when there is fraud, harassment, threats, cyber libel, sexual content, or identity theft.
- RA 10175 may apply to computer-related identity theft, computer-related fraud, cyber libel, and related online offenses.
- The Data Privacy Act, Civil Code, Revised Penal Code, Safe Spaces Act, and Anti-Photo and Video Voyeurism Act may also apply depending on what the fake account did.
- Ordinary users usually cannot force platforms to reveal IP addresses or account owners; law enforcement generally needs proper legal process.
- For scams involving money, report quickly to the platform, bank or e-wallet, and cybercrime authorities.
- If you are abroad, prepare a clear evidence file and consider a consularized or apostilled affidavit or SPA for a representative in the Philippines.