The proliferation of social media has brought about a parallel rise in cyber-vulnerabilities. Among the most pervasive of these is online impersonation—the creation of fake accounts using another person’s name, photos, and personal information.

In the Philippines, creating a fake account to misrepresent someone is not merely a violation of social media terms of service; it is a criminal offense. This comprehensive legal guide outlines the applicable Philippine laws, immediate remedies, and step-by-step procedures for dealing with identity thieves in the digital space.

1. The Legal Framework: What Laws Are Violated?

Creating a fake account using a real person's identity triggers several provisions under Philippine criminal and civil laws.

Republic Act No. 10175: The Cybercrime Prevention Act of 2012

The primary legislation governing this offense is R.A. 10175. Under Section 4(b)(3) (Computer-related Identity Theft), the law penalizes:

"...the unauthorized acquisition, use, misuse, transfer, possession, alteration or deletion of identifying information belonging to another, whether natural or juridical."

Penalty: Imprisonment of prision mayor (6 years and 1 day to 12 years) or a fine of at least ₱200,000, or both.
Aggravating Circumstance: If the fake account is used to commit another crime (e.g., swindling/estafa or online defamation), the penalty is increased by one degree.

Cyber Libel

If the fake account posts defamatory content, status updates, or photos that tarnish your reputation, the perpetrator can be charged with Cyber Libel under Section 4(c)(4) of R.A. 10175, in relation to Article 355 of the Revised Penal Code.

The Revised Penal Code (RPC)

Article 178 (Using Fictitious Name and Concealing True Name): If the perpetrator uses a fake name publicly to conceal a crime, evade a judgment, or cause damage to public interest.
Article 315 (Estafa/Swindling): Frequently, fake accounts are used for financial scams (e.g., asking the victim’s friends for money or emergency loans). This constitutes online estafa.

2. Immediate Step: Securing the Evidence

Before notifying the perpetrator or reporting the account to the platform, you must preserve the evidence. If the culprit realizes they have been caught, they may delete the account, destroying the digital trail needed for a criminal prosecution.

Do Not Block the Account Yet: Blocking the account will prevent you from seeing its activity and gathering evidence.
Capture Screenshots: Take clear screenshots of the following:
The profile page showing the exact name, profile picture, and cover photo.
The unique URL (web address) of the fake account profile (e.g., facebook.com/username). Do not just copy the display name, as display names can be changed easily; the unique URL or profile ID remains constant.
Defamatory posts, private messages sent to other people, or instances where the account is pretending to be you.
Document Timestamps: Ensure the date and time are visible on your device when taking screenshots.

3. Administrative Remedy: Reporting to the Platform

Once evidence is safely preserved, report the account directly to the host platform to mitigate ongoing damage to your reputation.

Platform	Reporting Mechanism
Meta (Facebook / Instagram)	Click the three dots `...` on the fake profile $\rightarrow$ Select Find Support or Report $\rightarrow$ Choose Pretending to be Someone $\rightarrow$ Select Me or A Friend. If you do not have an account, Meta provides an external web form titled "Report an Impersonation Account."
X (formerly Twitter)	Navigate to the profile $\rightarrow$ Click the three dots $\rightarrow$ Select Report $\rightarrow$ Choose It's pretending to be me or someone else.
TikTok	Go to the profile $\rightarrow$ Tap the arrow/share icon $\rightarrow$ Select Report $\rightarrow$ Choose Report Account $\rightarrow$ Select Impersonation.

4. Criminal Remedy: Filing a Complaint with Law Enforcement

If you wish to pursue criminal charges and unmask the individual behind the fake account, you must seek assistance from specialized cybercrime units in the Philippines.

Step 1: Choose the Agency

You can file a complaint with either of the following government agencies:

Philippine National Police - Anti-Cybercrime Group (PNP-ACG)

Headquarters: Camp Crame, Quezon City (or their respective Regional Anti-Cybercrime Units / RACUs).

National Bureau of Investigation - Cybercrime Division (NBI-CCD)

Headquarters: NBI Building, Taft Avenue, Manila (or regional offices).

Step 2: Submit a Complaint Form / Affidavit

You will be required to fill out a complaint sheet and provide a sworn statement (Affidavit). Bring the following:

Printed screenshots of the fake account, its unique URL, and its activities.
A soft copy of the evidence (stored in a flash drive).
Valid government-issued IDs to prove that you are the rightful owner of the identity being stolen.

Step 3: Subpoenaing the Tech Company

Because social media platforms are bound by strict privacy policies, law enforcement agencies (PNP or NBI) will issue a formal request or secure a Warrant to Disclose Computer Data (WDCD) under the Supreme Court's Rule on Cybercrime Warrants. This legally compels platforms like Meta or Google to release the IP addresses, registration emails, and log-in histories associated with the fake account, effectively unmasking the perpetrator.

5. Civil Liability: Claiming Damages

Apart from criminal prosecution, a victim can file a separate civil action for damages under Article 26 of the Civil Code of the Philippines, which mandates respect for human personality and privacy:

"Every person shall respect the dignity, personality, privacy and peace of mind of his neighbors and other persons. The following and similar acts, though they may not constitute a criminal offense, shall produce a cause of action for damages, prevention and other relief: ... (3) Intriguing against honor..."

Through this, you can demand Moral Damages (for mental anguish and wounded feelings) and Exemplary Damages (to set a public example).

Summary Protocol for Victims

Freeze & Record: Do not confront the user. Take screenshots and copy the unique profile URL string immediately.

Report Nationally/Locally: Alert your family and friends publicly from your real account that an imposter account exists, preventing financial scams.

Report to Platform: Submit an impersonation report to take down the page.

Engage Authorities: Visit the PNP-ACG or NBI-CCD if the impersonation causes severe professional, personal, or financial harm.