In an era where our digital footprints are as distinct as our physical ones, identity theft has migrated from stolen wallets to cloned profiles. In the Philippines, the creation of fake accounts using a real person's name, photos, and personal details is not just a violation of social media community standards—it is a serious criminal offense.

If someone has stolen your identity online, you are not helpless. Philippine law provides robust mechanisms to criminally prosecute perpetrators and compel platforms to take down malicious accounts.

1. The Legal Landscape: Is it Illegal?

Yes. Creating a fake account using another person’s identity is heavily penalized under several Philippine statutes.

Cybercrime Prevention Act of 2012 (Republic Act No. 10175): Section 4(b)(3) penalizes Identity Theft. It punishes the intentional acquisition, use, misuse, transfer, possession, or alteration of identifying information belonging to another person, without right.
Revised Penal Code (RPC) - Online Libel: If the fake account is used to smear your reputation, post defamatory statements, or cause dishonor, the perpetrator can be charged with Libel under Article 355 of the RPC, in relation to Section 4(c)(4) of R.A. 10175 (which bumps the penalty up by one degree).
RPC - Swindling (Estafa) / Falsification: If the dummy account is used to solicit money, borrow funds, or transact business under your name, it constitutes Estafa or Falsification of Documents.
Data Privacy Act of 2012 (Republic Act No. 10173): The unauthorized processing and malicious disclosure of your personal information can also trigger severe penalties under this law.

2. Step-by-Step Guide to Action

If you discover a fake account impersonating you, act swiftly. Follow this step-by-step protocol to protect yourself and build a viable legal case.

Step 1: Secure the Evidence (Preservation)

Do not immediately alert the perpetrator, as they might delete the account before you can gather proof.

Take Screenshots: Capture the account’s profile picture, cover photo, bio, and the exact URL/link of the profile.
Document the Malice: Screenshot any posts, messages, or interactions where the account is actively pretending to be you or defrauding others.
Save the Unique ID: Social media handles can change, but unique account IDs (often found in the profile link) remain the same.

Step 2: Report to the Social Media Platform

Simultaneously, use the platform's internal reporting tools to have the account taken down.

Facebook/Instagram: Click the three dots (...) on the fake profile, select "Report," choose "Pretending to be someone," and select "Me."
X (formerly Twitter)/TikTok: Follow their respective help center links for "Impersonation."
Note: Keep a record of your report submission and the platform's acknowledgment email.

Step 3: File a Formal Complaint with Law Enforcement

To pursue criminal charges, you must report the incident to specialized cybercrime units. You can approach either of the following agencies:

Option A: PNP Anti-Cybercrime Group (PNP-ACG)

Where to go: Visit the PNP-ACG headquarters at Camp Crame, Quezon City, or their Regional Anti-Cybercrime Units (RACU) nationwide.
Online Portal: You can log a complaint via their official website or social media hotlines.

Option B: NBI Cybercrime Division (NBI-CCD)

Where to go: Visit the NBI Main Office in Manila or any NBI Regional/District Office.
Online Portal: Submit a complaint through the NBI’s official website.

What to bring: > * At least two (2) valid government-issued IDs.

Printed and digital copies (on a flash drive) of all your screenshot evidence.

A notarized Complaint-Affidavit detailing how and when you discovered the account (highly recommended, though the agencies can assist you in drafting one).

3. Remedies Under the Data Privacy Act

If the identity theft involves a massive breach of your personal data or if a business entity failed to secure your data resulting in the identity theft, you can file a formal complaint with the National Privacy Commission (NPC).

The NPC can investigate data privacy violations, issue cease-and-desist orders, and recommend the prosecution of individuals who maliciously processed your data.

4. Summary of Penalties for Perpetrators

Philippine courts do not take cyber identity theft lightly. The consequences for the perpetrator are severe:

Offense	Governing Law	Imprisonment
Identity Theft	R.A. 10175, Sec. 4(b)(3)	Prision mayor (6 years and 1 day to 12 years) or a fine of at least ₱200,000
Online Libel	R.A. 10175 in relation to RPC Art. 355	Prision correccional in its maximum period to prision mayor in its minimum period (4 years and 2 months to 8 years)

5. Immediate Preventive Measures

While the legal system works to track down the perpetrator, secure your remaining digital footprint immediately:

Run a Privacy Audit: Change your social media privacy settings to "Friends Only." Limit who can see your past posts and future photos.
Two-Factor Authentication (2FA): Enable 2FA on all accounts to prevent actual hacking.
Public Disclaimer: Post a brief announcement on your real profile warning your network that a fake account is circulating and that you are not responsible for any messages or transactions coming from it.