Quick answer

If someone is using your name, photos, business identity, or personal details in a fake social media account:

Preserve the evidence before reporting or blocking the account.
Report the profile and its harmful posts or messages to the platform.
Secure your real accounts, email, mobile number, and financial accounts.
Report suspected crime promptly to the PNP Anti-Cybercrime Group or NBI Cybercrime Division. You may also contact the CICC through hotline 1326 for cybercrime assistance and referral.
Consider a National Privacy Commission complaint if personal information was unlawfully processed or your data-privacy rights were violated.
If there is an immediate threat, extortion, active financial loss, intimate-image abuse, or danger to a child, contact Unified 911 or the nearest police station immediately.

A fake account is not automatically a criminal offense simply because it uses a similar name or image. Criminal liability depends on what information was used, whether it was used without right and for an illegitimate purpose, and what harm or prohibited conduct occurred.

When a fake account may amount to identity theft

Section 4(b)(3) of the Cybercrime Prevention Act of 2012 defines computer-related identity theft as the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion—without right—of identifying information belonging to another natural or juridical person.

This may cover an account that deliberately assumes a person’s or company’s identity to:

Ask contacts for money or account credentials;
Sell goods, solicit investments, or collect donations fraudulently;
Damage the victim’s reputation;
Send threats, sexually harassing messages, or defamatory statements;
Obtain services, loans, credit, or access to accounts;
Mislead customers, employees, or government offices; or
Conceal the offender’s identity while committing another offense.

The statutory penalty for offenses under Section 4(b) is prision mayor, a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. For computer-related identity theft, the law provides a penalty one degree lower if no damage has yet been caused. The actual charge and sentence depend on the proven facts, applicable defenses, and sentencing rules.

There are important limits. In Disini v. Secretary of Justice, the Supreme Court explained that identity information must be taken or used for an illegitimate purpose. Merely acquiring or disseminating information that the person made public is not, by itself, the identity theft contemplated by the law. Clearly labeled parody, commentary, or fan accounts may also be treated differently from deceptive impersonation.

Even when the criminal threshold is uncertain, a platform may remove an account under its own impersonation, fraud, harassment, or authenticity rules.

Other laws that may apply

The proper complaint is determined by the account’s actual conduct, not merely by its username or profile photo. Depending on the evidence, the incident may involve:

Illegal access under the Cybercrime Prevention Act, if the offender took control of your real account;
Computer-related fraud, forgery, estafa, threats, coercion, or cyberlibel, if the account was used for fraud, fabricated documents, intimidation, or defamatory publications;
Gender-based online sexual harassment under the Safe Spaces Act. The law expressly includes certain online impersonation, cyberstalking, threats, unwanted sexual or sexist communications, and posting lies to harm a victim’s reputation when the conduct is gender-based;
Photo or video voyeurism under Republic Act No. 9995, where covered intimate images or recordings are copied, distributed, published, or shown without the required consent;
Online sexual abuse or exploitation of children under Republic Act No. 11930; or
Violence against women and their children under Republic Act No. 9262, where the offender and victim have a relationship covered by that law and the conduct amounts to psychological, sexual, physical, or economic abuse.

These laws are not interchangeable. One incident may support more than one theory, but investigators and prosecutors must determine which elements the evidence can establish.

Preserve evidence before the account disappears

Save enough material to identify the account and prove what it did. Screenshots are useful, but they should not be your only evidence.

Preserve:

The complete profile URL, username, account ID if visible, display name, profile photo, biography, and creation information;
Screenshots and screen recordings showing the profile, posts, comments, stories, advertisements, and messages;
The URL of each harmful post or video;
The date and time you found each item, including your time zone;
The original messages, emails, notifications, and attachments—not only copied text;
Email headers, caller numbers, wallet or bank details, transaction references, receipts, and delivery records;
Messages from people who were deceived or contacted by the account;
Copies of your original photos or posts showing where the impersonator obtained the material;
Proof that the genuine account, business, photograph, or contact information belongs to you;
Platform report confirmations, ticket numbers, and takedown notices; and
A written timeline identifying what happened, when you discovered it, whom the account contacted, and what loss or harm resulted.

Keep the unedited originals. Store a backup on another device or secure drive. Do not crop out usernames, URLs, timestamps, or surrounding context unless you also retain the complete version.

Electronic evidence may need to be authenticated in a legal proceeding. The person who captured a screenshot, received a message, owns the device, or has personal knowledge of the exchange may later be asked to execute an affidavit or testify. Investigators may also request examination of the relevant device.

Do not download or forward suspected child sexual abuse material merely to “collect evidence.” Record the URL, account details, and circumstances, then report it immediately through law-enforcement and platform channels.

Report the account to the platform

After preserving the evidence, report both the profile and the specific content or messages involved. Select the most accurate ground—such as “pretending to be someone,” “scam or fraud,” “harassment,” “threats,” or “non-consensual intimate images.”

Official reporting guidance includes:

A platform may ask for a government-issued ID, authorization from the person or business being impersonated, or proof of ownership. Upload identification only through the platform’s genuine app, help center, or official form. Never send an ID to the fake account or to an unsolicited “support agent.”

Ask affected friends, customers, or employees to report the actual violation they personally observed. Mass reporting without accurate information is not a substitute for a detailed report from the person being impersonated.

Platform removal and a criminal complaint are separate processes. A takedown does not automatically identify or prosecute the offender, and a pending investigation does not guarantee immediate removal.

Secure your real accounts

If there is any possibility that your genuine account or email was compromised:

Change the password using a trusted device;
Use a unique password that is not used on another service;
Turn on multi-factor authentication, preferably through an authenticator app or security key where available;
Review active sessions and sign out unfamiliar devices;
Remove unknown linked accounts, applications, recovery emails, and mobile numbers;
Check whether email-forwarding rules were secretly added;
Secure the email account connected to your social media first;
Ask your mobile provider about an unexplained SIM loss or replacement;
Alert your contacts that the other account is fake, without reposting its harmful material unnecessarily; and
If financial details may be exposed, notify the bank, card issuer, or e-wallet through its official fraud channel and request protective measures.

Do not pay the impersonator, negotiate an unofficial takedown, click a “verification” link, or attempt your own entrapment.

File a cybercrime report

PNP Anti-Cybercrime Group

You may report to the PNP Anti-Cybercrime Group, an appropriate Regional Anti-Cybercrime Unit, or the nearest police station. The PNP-ACG is specifically designated by the Safe Spaces Act to receive complaints involving gender-based online sexual harassment.

Bring:

A government-issued ID;
Your written chronology;
Printed and electronic copies of the evidence;
The device containing original messages, if requested;
Proof of ownership or identity;
Transaction and loss records; and
Contact details and statements of available witnesses.

Ask for the complaint or blotter reference number, the investigator’s name and contact details, and instructions for submitting additional evidence.

NBI Cybercrime Division

The NBI provides an online complaint page and accepts requests for investigation through its Cybercrime Division and regional offices. Its Citizen’s Charter procedure contemplates a complaint sheet, preliminary interview, sworn statements or prepared affidavits, supporting documents, and—when relevant—examination of the device.

An online submission may begin the process, but you may still be required to appear, identify the evidence, execute a sworn statement, or present the device.

CICC hotline 1326

The Cybercrime Investigation and Coordinating Center operates hotline 1326 for reports and assistance concerning cybercrime and online scams. It can help coordinate or refer a matter to the proper agency. A hotline report should not be assumed to replace the sworn complaint or supporting evidence required by the investigating law-enforcement agency.

Ask about data preservation

Report promptly and tell the investigator if the account is being deleted, renamed, or actively used. Under Section 13 of the Cybercrime Prevention Act, service providers must preserve traffic data and subscriber information for a minimum of six months from the transaction, while specified content data may be preserved following a lawful order. Disclosure of subscriber or relevant computer data for an official investigation generally requires a court warrant.

A victim normally cannot compel the platform to reveal an anonymous user’s identity simply by demanding it. Law enforcement must use the applicable preservation, disclosure, and cybercrime-warrant procedures.

When to approach the National Privacy Commission

The Data Privacy Act of 2012 may apply when personal information has been unlawfully collected, used, disclosed, altered, or otherwise processed. The National Privacy Commission is not a general police agency, and not every fake account falls within its jurisdiction. Its role is especially relevant where a platform, company, organization, employee, or other covered personal-information controller or processor mishandled personal data.

Under the 2021 NPC Rules of Procedure, a formal complaint is generally filed by the affected data subject or by a representative with a special power of attorney.

Before filing, the complainant generally must:

Notify the respondent in writing about the privacy violation or personal data breach;
Give the respondent an opportunity to act; and
Show that the respondent failed to take timely or appropriate action, or did not respond within 15 calendar days after receiving the written notice.

The NPC may waive these requirements for good cause or a serious violation, including situations involving grave and irreparable harm, no adequate remedy from the respondent, or patently illegal action. This 15-day process does not require you to delay a police report, emergency action, account security measures, or a platform report.

Use the NPC’s current Complaint-Affidavit template and filing instructions. The complaint should be verified, use the required current form, identify the respondent or available identifying leads, narrate the material facts, state the relief sought, and include:

Supporting documents and witness affidavits;
Proof of your written notice to the respondent;
The respondent’s response, if any;
A certification against forum shopping; and
The applicable filing fee or a proper request for exemption or waiver.

The NPC currently accepts qualifying filings personally, by registered mail, courier, or authorized electronic mail. Check the filing page before submission because templates, fees, addresses, and technical requirements may change.

Common mistakes to avoid

Blocking or confronting the account before preserving evidence. The offender may delete or rename it.
Keeping only cropped screenshots. Preserve complete URLs, timestamps, account details, and originals.
Editing or annotating the only copy. Work on duplicates and retain untouched files.
Assuming a platform report is already a police complaint.
Assuming a hotline call automatically starts a criminal case. Confirm whether a docketed complaint and sworn statement are still required.
Waiting for financial losses to settle. Alert the bank, card issuer, or e-wallet immediately.
Publicly accusing an unverified suspect. This may expose the wrong person and create separate legal problems.
Posting the impersonator’s phone number, address, or ID. Give those details to the platform and authorities instead of doxxing the suspect.
Sending more money to “trace” or entrap the offender.
Using unofficial recovery agents. Some scammers pose as cybersecurity experts, police contacts, or platform support.
Submitting an old NPC form. The current Complaint-Affidavit template took effect on July 1, 2025.
Failing to keep report numbers and follow-up records.

When help is urgent

Contact Unified 911 or the nearest police station immediately if the fake account is connected to:

A credible threat of violence or abduction;
Stalking that creates an immediate safety risk;
Extortion or a demand tied to intimate images;
Active access to your bank, e-wallet, email, or mobile number;
A child being groomed, sexually exploited, or threatened;
Publication of an address or real-time location that creates danger; or
An ongoing fraud in which other people are currently sending money.

For online child sexual abuse or exploitation, use the DSWD reporting guidance in addition to reporting to law enforcement and the platform. If the offender is a current or former intimate partner and the conduct may fall under the Anti-VAWC law, ask the police Women and Children Protection Desk or a lawyer about immediate protection measures.

Frequently asked questions

Can I report a fake account if I do not know who created it?

Yes. Preserve all available identifiers and explain that the offender is unknown. Law enforcement may investigate account, device, transaction, subscriber, and communications records using lawful procedures. Identification is not guaranteed, particularly where records are unavailable, false, foreign, or outside Philippine jurisdiction.

Are screenshots enough?

They are useful but may not be conclusive on their own. Keep URLs, original messages and files, platform notices, device data, witness information, and transaction records. Be prepared to explain who captured or received the evidence and how it was preserved.

Can someone report impersonation on my behalf?

A witness may report harmful content or give information to law enforcement. Platform rules determine whether an authorized representative can submit an impersonation request. For a formal NPC complaint, a representative generally needs a special power of attorney.

Must I wait 15 days before going to the police?

No. The 15-calendar-day rule generally concerns exhaustion of remedies before a formal NPC complaint. It does not apply to emergency calls, platform reports, bank notifications, or cybercrime complaints to the PNP or NBI.

Can the account be removed even if no criminal case is filed?

Yes. Platforms enforce their own impersonation and authenticity policies. Removal does not require a criminal conviction, although the platform will decide whether its rules were violated.

Can I force the platform to disclose the creator’s name or IP address?

Ordinarily, no. Platforms may protect subscriber and communications data and respond only to valid legal process. Under Philippine cybercrime law, law enforcement generally needs a court warrant to compel disclosure for an officially docketed investigation.

What if the impersonator is abroad?

Report the account to the platform and Philippine law enforcement. The Cybercrime Prevention Act recognizes Philippine jurisdiction in specified situations, including when an element occurs in the Philippines or damage is caused here to a person who was in the Philippines. Cross-border identification and evidence requests may require international cooperation and can take longer.

Is there a deadline for reporting?

There is no single deadline covering every platform report, privacy complaint, and possible criminal offense. Different causes of action have different prescriptive periods. Report promptly: accounts and messages may disappear, witnesses may forget details, and service providers do not retain all data indefinitely.

Official sources and reporting links

This article provides general legal information, not legal advice or a prediction of any case’s outcome. The correct remedy and offense depend on the exact account, messages, documents, relationships, losses, and available evidence. Official sources and procedures were checked as of July 27, 2026.