An impersonation account can damage your reputation, trick your relatives into sending money, expose private information, or make it look like you said or did something you never did. In the Philippines, the right response depends on what the fake account is doing: simple pretending, using your photos or IDs, asking for money, posting defamatory statements, threatening you, or sharing intimate content. This guide explains how to preserve evidence, report the account to the platform, file a cybercrime complaint with Philippine authorities, and understand which laws may apply.

What counts as an impersonation account?

An impersonation account is a profile, page, channel, or messaging account that uses someone else’s identity without authority in a way that can mislead others.

Common examples include:

A fake Facebook profile using your name and photo to add your friends.
A dummy Instagram account pretending to be your business.
A TikTok account reposting your videos and claiming to be you.
A fake Messenger, WhatsApp, Viber, Telegram, or email account asking your contacts for GCash, Maya, bank transfers, or “emergency” money.
A profile using your photos to harass, shame, blackmail, or threaten you.
A fake account pretending to be a lawyer, doctor, government employee, company officer, seller, recruiter, landlord, or public official.

Not every “fake account” is automatically a criminal case. A parody, fan account, anonymous account, or account using a nickname may not be illegal by itself. The issue becomes serious when the account pretends to be a real person or business, uses identifying information without authority, causes damage, commits fraud, harasses someone, posts defamatory material, or violates privacy.

Legal basis in the Philippines

Cybercrime Prevention Act: identity theft, fraud, forgery, and cyberlibel

The main law for online impersonation cases is Republic Act No. 10175, the Cybercrime Prevention Act of 2012.

Depending on the facts, an impersonation account may involve:

Computer-related identity theft — when someone intentionally acquires, uses, misuses, transfers, possesses, alters, or deletes another person’s identifying information without right.
Computer-related fraud — when online deception causes damage, such as convincing people to send money.
Computer-related forgery — when digital data is manipulated to make it appear authentic.
Cyberlibel — when defamatory statements punishable as libel under the Revised Penal Code are committed through a computer system or similar means.
Other crimes committed through ICT — Section 6 of RA 10175 increases penalties when crimes under the Revised Penal Code or special laws are committed through information and communications technology.

For tracing and evidence gathering, the Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC, provides procedures for court-authorized preservation, disclosure, interception, search, seizure, examination, custody, and destruction of computer data.

Revised Penal Code: libel, threats, estafa, and use of fictitious name

The Revised Penal Code may also apply.

Relevant provisions include:

Article 353 and Article 355 on libel — if the impersonation account publicly posts a malicious imputation that dishonors or discredits a person.
Estafa provisions — if the fake account deceives people into sending money, goods, passwords, or account access.
Threats, coercions, or unjust vexation — if the account sends threats, pressures the victim, or repeatedly harasses them.
Article 178 on using a fictitious name or concealing true name — in limited situations where a person publicly uses a false name for legally relevant purposes such as concealing a crime, evading judgment, or causing damage.

The exact offense depends on the screenshots, messages, victim statements, money trail, and the intent shown by the impersonator’s acts.

Civil Code: privacy, dignity, and damages

Even when a fake account does not clearly fit a criminal offense, it may still create civil liability.

Under Article 26 of the Civil Code, every person must respect the dignity, personality, privacy, and peace of mind of others. Acts that humiliate, disturb private life, or cause alienation from friends may support a civil action for damages, prevention, or other relief.

Articles 19, 20, and 21 of the Civil Code may also apply when a person abuses a right, violates the law, or willfully causes loss or injury in a manner contrary to morals, good customs, or public policy.

Data Privacy Act: misuse of personal information

If the impersonator uses your personal information, ID, photos, contact details, screenshots, address, school, workplace, or sensitive information, the Data Privacy Act of 2012, RA 10173, may be relevant.

The National Privacy Commission complaint process is most useful when there is a privacy violation or personal data breach involving an identifiable respondent, organization, website, app, company, school, employer, or platform-related data issue. NPC complaints generally require supporting documents, evidence, and, in many cases, proof that the respondent was first informed in writing and failed to act within 15 calendar days.

For unknown dummy accounts, however, the first practical step is usually law enforcement through the PNP Anti-Cybercrime Group or NBI cybercrime investigators, because the NPC is not primarily a police-tracing office.

Safe Spaces Act, intimate images, and financial account scams

Other laws may apply in specific situations:

Situation	Possible law
The fake account posts sexual harassment, gender-based attacks, or impersonates someone online to harm their reputation in a gender-based context	RA 11313, Safe Spaces Act
The account shares or threatens to share intimate photos, videos, or private sexual content	RA 9995, Anti-Photo and Video Voyeurism Act of 2009
The account asks for bank, e-wallet, OTP, passwords, or uses another person’s ID or financial account	RA 12010, Anti-Financial Account Scamming Act
The account impersonates a brand, seller, or business name and misleads customers	Cybercrime law, Civil Code, consumer protection rules, and possibly the Intellectual Property Code, RA 8293

What to do first before reporting the fake account

The biggest mistake is reporting the account too quickly without saving evidence. Once a platform removes the account, you may lose easy access to posts, messages, URLs, comments, and profile information.

Before clicking “Report,” do these:

Take screenshots of the entire profile. Include the profile photo, cover photo, username, display name, bio, account link, page URL, number of followers or friends, and visible posts.
Copy the exact URL. For Facebook, Instagram, X, TikTok, YouTube, LinkedIn, or websites, copy the full profile or post link.
Record the date, time, and timezone. Example: “24 June 2026, 9:15 p.m., Philippine Standard Time.”
Screenshot messages and comments. Include the sender name, account handle, message thread, timestamps, and any demand for money or threats.
Save proof that the account is pretending to be you. Keep your own official profile, IDs, business registration, employment ID, school ID, DTI or SEC records, trademark registration, or other proof of identity.
Ask affected contacts to save their own evidence. If the fake account messaged your relatives or customers, their screenshots and affidavits may matter because they are direct recipients.
Do not edit evidence. Avoid cropping, adding arrows, or covering details in the master copy. Make a separate annotated copy only for explanation.
Keep original files. Save screenshots, screen recordings, downloaded message histories, and emails in a folder. Back them up to cloud storage or a USB drive.

Electronic evidence may be admissible under the Electronic Commerce Act, RA 8792, and the Rules on Electronic Evidence, but you still need to show authenticity, relevance, and integrity. Clean, chronological evidence helps investigators and prosecutors understand the case faster.

Step-by-step guide to reporting an impersonation account in the Philippines

1. Report the account to the social media platform

Platform reporting is the fastest way to request takedown. It does not replace a police or NBI complaint, but it can stop continuing harm.

Platform	Where to report
Facebook	Report an impostor account
Instagram or Threads	Report an impersonation account
TikTok	Report an impersonation account
X / Twitter	Report impersonation on X

For best results, submit:

Your valid government ID, if required by the platform.
The fake account URL.
Your official account URL.
A short explanation: “This account is pretending to be me and is messaging my relatives for money.”
Screenshots showing the impersonation and harm.

If the account impersonates a business, attach proof such as a DTI certificate, SEC registration, Mayor’s Permit, BIR registration, IPO trademark certificate, official website, verified social media account, or authorization letter from the company.

2. Warn people who may be targeted

If the account is asking for money or personal information, warn your contacts immediately.

A simple notice is enough:

Someone is impersonating me online. Please do not accept new friend requests, send money, share OTPs, or reply to messages from accounts claiming to be me. I am reporting the fake account.

Avoid publicly accusing a specific person unless you have solid evidence. Naming someone without proof can create a separate defamation issue.

3. Secure your real accounts

Impersonation often happens together with hacking, phishing, or data scraping.

Do these quickly:

Change passwords on email, social media, banking, and e-wallet accounts.
Turn on two-factor authentication.
Check account recovery email addresses and phone numbers.
Log out unknown devices.
Review recent login activity.
Report lost SIMs or compromised phone numbers to your telco.
Notify your bank or e-wallet provider if money or financial information is involved.

If the fake account is using your hacked account, report it as account compromise or hacked account, not only impersonation.

4. File a report with the PNP Anti-Cybercrime Group or NBI

If the account is merely annoying and disappears after platform reporting, a platform report may be enough. But file with cybercrime authorities when there is fraud, threats, extortion, sexual content, repeated impersonation, business damage, identity theft, or a need to identify the person behind the account.

You may approach:

PNP Anti-Cybercrime Group (PNP-ACG) — for cybercrime investigation and police assistance.
National Bureau of Investigation cybercrime investigators — the NBI Citizen’s Charter for investigative assistance to victims of computer crimes states that the general public may request assistance, undergo preliminary interview, execute sworn statements, and submit supporting documents.
Cybercrime Investigation and Coordinating Center / Inter-Agency Response Center hotline 1326 — especially for online scams, phishing, impersonation, and cyber fraud reports.
DOJ Office of Cybercrime — the DOJ Office of Cybercrime acts on cybercrime complaints and referrals and coordinates cybercrime matters, including international assistance when appropriate.

In practice, bring printed and digital copies. Investigators may ask you to fill out a complaint sheet, narrate what happened, submit evidence, and execute a sworn statement or complaint-affidavit.

5. Prepare a clear complaint-affidavit

A complaint-affidavit is your sworn written statement. It should be factual and chronological.

Include:

Your full name, address, contact number, email, and valid ID.
A statement that you are the person being impersonated or the authorized representative of the victim or company.
The fake account’s name, username, URL, and platform.
When you discovered it.
What the account did: used your photo, messaged your friends, asked for money, posted defamatory statements, threatened you, used your business name, etc.
How you were harmed: financial loss, reputational damage, emotional distress, customer confusion, lost sales, safety risk.
Names and contact details of witnesses or recipients.
A list of attached evidence.
A request for investigation and appropriate legal action.

Have the affidavit notarized. If you are abroad, execute the affidavit before a Philippine Embassy or Consulate, or use a locally notarized document with apostille where applicable. The Philippines became a party to the Apostille Convention on 14 May 2019, and the DFA provides information through its Apostille FAQs. If the country is not an Apostille country, Philippine consular authentication may still be required.

6. Follow the money trail if there was a scam

If people sent money because of the fake account, preserve:

GCash, Maya, bank, remittance, or crypto transaction receipts.
Account names and numbers used by the scammer.
QR codes, wallet IDs, bank deposit slips, and reference numbers.
Chat messages where the fake account asked for payment.
Names and affidavits of people who sent money.

Report to the bank, e-wallet, or financial institution immediately and request freezing, investigation, or transaction dispute procedures. Under RA 12010, financial account scamming includes social engineering schemes and certain acts involving fictitious names or another person’s identity documents in relation to financial accounts.

7. Monitor and document new accounts

Impersonators often create another account after the first takedown. Keep a running incident log:

Date	Platform	Account URL	What happened	Evidence saved	Report reference
24 June 2026	Facebook	Profile link	Messaged relatives asking for ₱5,000	Screenshots A1-A5	Meta report no. ___
25 June 2026	Messenger	Thread link	Sent threats	Screenshots B1-B3	PNP/NBI received copy ___

This helps show a pattern of harassment, fraud, or malicious intent.

Where should you report: platform, barangay, police, NBI, NPC, or court?

Where to go	Best for	Practical note
Social media platform	Fast takedown of fake profile, page, post, or channel	Save evidence first before reporting.
PNP Anti-Cybercrime Group	Cybercrime investigation, tracing, fraud, threats, harassment, identity theft	Useful when the offender is unknown or technical tracing is needed.
NBI cybercrime investigators	Formal investigation and evidence gathering	Bring both printed and digital evidence, even if the official initial checklist appears simple.
CICC / 1326	Initial triage for scams, phishing, cyber fraud, and impersonation reports	May refer matters to PNP, NBI, or other agencies.
National Privacy Commission	Privacy violation or personal data breach involving personal information	Often requires evidence and prior written notice to respondent, unless the case falls under an applicable exception or special circumstance.
Barangay	Local documentation or immediate community safety issues	Not a substitute for cybercrime investigation. Serious cybercrime, identity theft, cyberlibel, or fraud usually goes beyond barangay conciliation.
Prosecutor’s Office / DOJ	Criminal complaint and preliminary investigation	Usually follows after case build-up or when the complainant is ready to file a formal complaint.
Court	Criminal prosecution, civil damages, injunctions, protection orders where applicable	Court action requires proper pleadings, evidence, and jurisdiction.

A barangay blotter can help document threats or local disturbances, especially if you know the person and live in the same community. But barangay officials cannot compel Facebook, TikTok, X, telcos, banks, or foreign platforms to reveal account data. For that, law enforcement and court-authorized processes are usually needed.

Documents and evidence to prepare

Requirement	Why it matters
Valid government ID	Proves your identity as the person being impersonated.
Fake account URL and username	Investigators and platforms need the exact account, not just a screenshot.
Screenshots of profile, posts, comments, and messages	Shows the impersonation and harmful acts.
Date, time, and timezone notes	Helps establish chronology and preserve context.
Proof of your real identity or official account	Shows that the fake account is misrepresenting you.
Witness screenshots and affidavits	Important when friends, customers, relatives, or clients were contacted.
Financial receipts	Needed for estafa, fraud, e-wallet, bank, or money-muling issues.
Platform report acknowledgments	Shows that you attempted takedown and preserves report reference numbers.
Notarized complaint-affidavit	Usually needed for formal investigation or prosecutor filing.
Business registration or authority letter	Needed if reporting impersonation of a company, brand, page, or organization.

Typical timelines and bottlenecks

Stage	Typical timing	Common bottleneck
Evidence collection	Same day	Missing URLs, deleted messages, cropped screenshots
Platform report	Same day to several days; sometimes longer	Automated rejection, insufficient ID, unclear impersonation proof
Initial PNP/NBI intake	Same day if complete and accepted	Need for printed evidence, sworn statement, or personal appearance
Case build-up	Days to months	Identifying the account owner, obtaining platform/telco/bank data, cross-border issues
Prosecutor evaluation	Weeks to months	Need for additional affidavits, clearer evidence, or respondent identification
Court case	Months to years	Docket congestion, technical evidence, witness availability

The most common problem is delay. Online platforms and telecom or financial records may not remain available forever. Report promptly when money, threats, sexual content, or ongoing harassment is involved.

Special situations

If the fake account is asking your friends for money

Treat it as both impersonation and possible fraud. Report to the platform, warn contacts, collect transaction receipts, and report to PNP-ACG, NBI, CICC/1326, and the bank or e-wallet provider. Ask affected contacts to preserve their messages and receipts.

If the account uses your photos but a different name

This may still be actionable if the account misleads people into thinking it is you, uses your image for scams, damages your reputation, or violates privacy or intellectual property rights. If the photos are intimate or private, RA 9995 may apply.

If the impersonator is a former partner, employee, classmate, or relative

Do not rely only on assumptions. Preserve evidence connecting the person to the account, such as admissions, matching phone numbers, payment accounts, shared devices, witnesses, or messages. Law enforcement may still need technical evidence before a prosecutor can act.

If you are a foreigner in the Philippines

Foreigners may report cybercrime in the Philippines if the harmful acts occurred in the Philippines, targeted a person or account in the Philippines, involved Philippine residents, or used Philippine banking, e-wallet, telecom, or business channels. Bring your passport, visa or immigration status if relevant, local address, and proof of identity.

If you are a Filipino abroad

You can begin with platform reports and evidence preservation from abroad. For formal Philippine filing, you may need a sworn complaint-affidavit executed through a Philippine Embassy or Consulate, or a notarized and apostilled document depending on the country. A trusted representative in the Philippines may also help if properly authorized through a Special Power of Attorney.

If the fake account impersonates a business

Prepare company documents: SEC or DTI registration, BIR registration, Mayor’s Permit, official website, official page links, brand guidelines, trademark certificate if available, and proof of customer confusion or financial loss. If the account is collecting payments, include receipts and customer complaints.

Frequently Asked Questions

Is creating a fake account illegal in the Philippines?

Not always. A fake or anonymous account is not automatically illegal. It becomes legally serious when it impersonates a real person or business, uses identifying information without authority, commits fraud, posts defamatory content, harasses someone, threatens harm, or violates privacy.

Can the police or NBI trace a fake Facebook or Instagram account?

They may be able to investigate, but tracing usually requires proper legal process, platform cooperation, technical data, and sometimes court-authorized warrants. Investigators normally cannot simply reveal the account owner on the spot.

Should I report to Facebook or Instagram first, or go straight to NBI or PNP?

Do both when the harm is serious. Save evidence first, then report to the platform for takedown. If there is scam, threat, extortion, sexual content, repeated harassment, business damage, or identity theft, file with PNP-ACG or NBI as soon as possible.

What if the account has already been deleted?

You can still report, but the case becomes harder if you did not save URLs, screenshots, messages, and timestamps. If you have report numbers, archived links, receipts, witness screenshots, or downloaded message histories, preserve them.

Can I sue the impersonator for damages?

Yes, if you can identify the person and prove harm. Possible civil bases include the Civil Code provisions on abuse of rights, unlawful acts, willful injury, privacy, dignity, and peace of mind. A criminal case may also include civil liability arising from the offense.

Is cyberlibel the same as impersonation?

No. Impersonation is pretending to be someone else. Cyberlibel involves defamatory statements made online. A fake account can involve both if it pretends to be you and posts statements that dishonor or discredit you or another person.

Can I file a barangay complaint for a fake account?

A barangay report may help document the incident if the person is known and local. But serious cybercrime, identity theft, online fraud, threats, and cyberlibel generally require PNP, NBI, prosecutor, or court action. Barangay officials cannot compel platforms to disclose account data.

What if the impersonator is outside the Philippines?

Cross-border cases are harder but not impossible. Philippine authorities may coordinate through proper channels, especially where the victim, damage, platform activity, financial transaction, or evidence has a Philippine connection. The DOJ Office of Cybercrime is relevant in international cybercrime coordination.

How long does it take to remove an impersonation account?

Platform takedown may happen within hours, days, or longer, depending on the platform, evidence, and review process. Law enforcement investigation usually takes longer because tracing, preservation, affidavits, subpoenas, warrants, and coordination with platforms or financial institutions may be needed.

What should I avoid doing?

Avoid paying blackmailers, hacking back, threatening the suspected person online, posting unverified accusations, deleting your own evidence, or submitting cropped screenshots as your only proof. Preserve first, report properly, and keep a clear timeline.

Key Takeaways

Save evidence before reporting the account for takedown.
An impersonation account may involve cybercrime, privacy violations, civil damages, fraud, cyberlibel, harassment, or financial account scamming depending on what it does.
Report to the platform for removal, but go to PNP-ACG, NBI, or CICC/1326 when there is fraud, threats, extortion, sexual content, repeated harassment, business damage, or identity theft.
A notarized complaint-affidavit, full URLs, screenshots, timestamps, IDs, witness statements, and transaction receipts make the complaint stronger.
Barangay reports can document local incidents but usually cannot replace cybercrime investigation.
Filipinos abroad and foreigners in the Philippines can report, but documents executed abroad may need consular notarization or apostille.
Fast reporting matters because online records, platform logs, messages, and financial traces can disappear.