Quick answer

If someone is using your name, photos, business identity, or personal information in a fake social media account, act in this order:

Preserve the evidence before reporting the account.
Secure your real accounts, email, mobile number, and financial accounts.
Report the fake account and each harmful post or message to the platform.
Warn contacts through a trusted channel.
Report promptly to the PNP Anti-Cybercrime Group or NBI Cybercrime Division if the account is scamming, threatening, harassing, defaming, obtaining confidential information, or causing financial or reputational harm.
Contact your bank, e-wallet, lender, or card issuer immediately if money or financial credentials are involved.
Consider a National Privacy Commission complaint when personal data was unlawfully processed or a covered organization failed to address a privacy violation.

A platform report seeks removal or restriction. A police or NBI complaint starts possible criminal investigation. One does not replace the other.

First, determine what happened

The correct response depends on whether the offender:

Cloned your identity: A separate account copied your name, photos, biography, or business details.
Took over your real account: Someone gained access and is posting or messaging from it.
Created a fictitious account without impersonating you: This may violate platform rules but is not automatically identity theft.
Used your identity for fraud: The account solicited money, loans, investments, passwords, one-time PINs, or financial information.
Used the account for harassment or threats: This may engage laws beyond identity theft.
Used your identification documents: This requires urgent reports to law enforcement, the issuing agency, and any affected financial institution.

If your real account was hacked, use the platform’s compromised-account recovery process as well as its impersonation or abuse-reporting process.

Is a fake account automatically a crime?

No. A fake, parody, fan, role-playing, or pseudonymous account is not automatically criminal merely because it does not display the operator’s legal name.

Computer-related identity theft under Section 4(b)(3) of the Cybercrime Prevention Act of 2012 involves the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion—without right—of identifying information belonging to another person or organization.

In Disini v. Secretary of Justice, the Supreme Court explained that identity information must be taken or used for an illegitimate purpose. Merely obtaining and disseminating information that the person made public is not, by itself, identity theft. The account’s purpose, the information used, how it was obtained, what the operator represented to others, and any resulting or intended harm therefore matter. Read the Supreme Court decision.

A deceptive account may support a criminal complaint when, for example, it:

Pretends to be you to obtain money or confidential information;
Uses your identity documents or credentials;
Contacts friends, customers, or employees while claiming to act for you;
Uses your identity to open or control financial accounts;
Publishes threats, defamatory statements, or intimate material;
Harasses or stalks you; or
Conceals another fraud or offense.

Computer-related identity theft is punishable by prision mayor—generally six years and one day to twelve years—or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. If no damage has yet been caused, the law provides for a penalty one degree lower. The charge and eventual penalty remain matters for investigators, prosecutors, and courts based on the proven facts.

Other laws may apply:

Unlawful processing, unauthorized use, disclosure, or access involving personal data may implicate the Data Privacy Act of 2012. Coverage and liability depend on who processed the data, why, and under what authority.
Impersonating a victim online can fall under gender-based online sexual harassment when it forms part of conduct covered by Section 12 of the Safe Spaces Act.
A fake identity used to open or control financial accounts, obtain financial credentials, or conduct social-engineering fraud may fall under the Anti-Financial Account Scamming Act.
Fraud, illegal access, computer-related forgery, computer-related fraud, threats, libel, extortion, or other offenses may apply depending on the acts and evidence.

Avoid declaring publicly that a particular person committed a crime unless that identity and accusation are properly supported.

Preserve evidence before the account disappears

Record the account before you block it or submit a takedown report. Preserve:

The complete profile URL, username, display name, profile photo, biography, and account ID if visible;
Full-page screenshots showing the browser address bar or in-app profile details;
A screen recording that opens the profile, posts, stories, messages, and linked payment details;
Dates and times, including the time zone;
Copies of posts, comments, advertisements, direct messages, emails, and notifications;
The original image, audio, or video files sent to you;
Phone numbers, email addresses, websites, QR codes, bank or e-wallet details, and transaction references used by the offender;
Receipts, account statements, loan notices, delivery records, or demands for payment;
Names and contact details of people who received messages from the fake account;
Platform-report confirmations, reference numbers, and responses;
Your genuine profile and older records showing that the identity, photo, brand, or contact details belong to you.

Keep original files unchanged. Do not crop, annotate, rename, or repeatedly re-save your only copy. Make a working copy if you need to highlight something. Ask recipients of fraudulent messages to preserve their own copies and not merely forward screenshots that omit the sender, date, or URL.

If illegal sexual content involving a child appears, do not download, forward, or redistribute it. Preserve the URL, account details, date, and surrounding non-illegal information, then report it immediately to law enforcement.

Act quickly. Under Section 13 of the Cybercrime Prevention Act, subscriber information and traffic data held by service providers are preserved for a minimum of six months from the transaction. Content data is preserved for six months after a law-enforcement preservation order, with a possible one-time extension. Tell the investigator promptly if a platform account or message may disappear so that lawful preservation procedures can be considered.

Secure your identity and real accounts

From a device you believe is safe:

Change the password of your primary email account first.
Change passwords for social media, banking, e-wallet, cloud-storage, shopping, and government-service accounts.
Use a different, strong password for every important account.
Enable multi-factor authentication, preferably through an authenticator app or security key when available.
Review active sessions and sign out devices you do not recognize.
Check recovery email addresses, mobile numbers, forwarding rules, linked apps, and authorized devices.
Save recovery codes somewhere secure.
Ask your mobile provider about unauthorized SIM replacement or loss of service.
Review bank, card, e-wallet, lending, and credit activity for unfamiliar transactions or accounts.

Do not give a supposed platform employee, “hacker,” or recovery agent your password, one-time PIN, authentication code, or remote access to your device.

Report the account to the platform

Report both the profile and the specific posts, messages, advertisements, or payment solicitations. These may violate different platform rules.

Facebook: Use the menu on the profile or Page and select the reporting option for impersonation. Facebook also provides an official impostor-account form and impersonation guidance.
Instagram and Threads: Report from the profile or use Meta’s official impersonation form.
TikTok: Open the profile, choose Share, then Report, Report account, and Pretending to Be Someone. See TikTok’s official instructions.
X: Report from the profile or use the official impersonation process. X states that an account is not required to report impersonation.

Interface labels can change. Use only the platform’s app, verified website, or Help Center. If asked for identification, upload it only through the official form and disclose no more than the form legitimately requires.

Save the report reference and submission date. If the first report is rejected, appeal through the platform’s official process and identify the exact deceptive conduct—for example, “This account is pretending to be me and requesting money from my contacts”—rather than stating only that it is “fake.”

Warn people without spreading the harmful material

Use your genuine account, verified business page, email list, or another established channel to make a short warning:

Identify the exact fake username and platform;
State that you do not control it;
Tell people not to send money, identification, passwords, or one-time PINs;
Provide your genuine contact details; and
Ask recipients to preserve and report suspicious messages.

Do not repost intimate images, government IDs, account numbers, threats, or other sensitive material. Avoid naming a suspected operator unless the identification is reliable and publication is legally justified.

Where to make an official report

PNP or NBI

The Cybercrime Prevention Act designates the Philippine National Police and National Bureau of Investigation as the principal law-enforcement authorities for cybercrime.

You may report to:

The PNP Anti-Cybercrime Group, its regional or local cybercrime unit, or the nearest police station; or
The NBI Cybercrime Division or an NBI Regional Cybercrime Center.

The NBI’s current Citizen’s Charter describes a no-fee process in which the complainant completes a sworn complaint sheet, undergoes an interview, provides sworn statements, and submits relevant documents or a device for examination. See the NBI procedure for computer-crime victims, NBI regional-office directory, and NBI online complaint page. The NBI directory lists ccd@nbi.gov.ph for the Cybercrime Division.

Bring:

At least one government-issued ID;
A concise written chronology;
Printed and electronic copies of your evidence;
The URLs and account identifiers;
Names and contact details of witnesses;
Transaction records and the affected financial institution’s response;
Platform-report confirmations; and
The original device if investigators ask to examine it.

An unknown offender does not prevent reporting. Provide every available identifier rather than guessing who is behind the account.

CICC and Hotline 1326

For scams, suspicious links, phishing, and related cyber-fraud reports, contact the DICT–Cybercrime Investigation and Coordinating Center through Hotline 1326, 1326@dict.gov.ph, or the reporting feature in the eGovPH app. The CICC may coordinate or refer the matter to the appropriate investigative agency. See the DICT contact page and its CICC information page.

A Hotline 1326 report is useful for intake and coordination, but follow any instruction to execute a sworn complaint or appear before the PNP or NBI if you want a criminal investigation pursued.

National Privacy Commission

Consider an NPC complaint when the incident involves unlawful collection, use, disclosure, retention, or other processing of personal data, particularly by an organization or person covered by the Data Privacy Act.

As a general rule, before filing you must:

Inform the personal information controller, processor, or concerned entity in writing about the privacy violation; and
Give it an opportunity to act. You may proceed if it takes no timely or appropriate action or gives no response within 15 calendar days after receiving your written notice.

The NPC may waive these requirements for good cause or a serious violation presenting a risk of harm, including circumstances involving grave and irreparable damage, no plain and adequate remedy, or patently illegal action.

A formal complaint must generally be written, signed, verified, and supported by evidence; include the respondent and material facts; attach prior correspondence; state the relief requested; and contain a sworn certification against forum shopping. Filing fees may apply unless an exemption or waiver is available. Consult the 2021 NPC Rules of Procedure, as amended in 2024 and the NPC’s current filing instructions and complaint form.

Do not delay an urgent police, NBI, bank, or platform report merely to complete the NPC’s 15-day pre-filing process.

If money or financial accounts are involved

Immediately contact the fraud department of every affected bank, card issuer, lender, remittance company, or e-wallet. Ask it to:

Block compromised access and cards;
Mark the transaction as disputed;
Attempt to hold or recall transferred funds;
Preserve authentication, device, and transaction records;
Investigate any account opened in your name; and
Give you a written reference number and response.

The Anti-Financial Account Scamming Act permits covered institutions to temporarily hold funds involved in a disputed transaction, subject to applicable BSP rules and a statutory maximum period of 30 calendar days unless extended by a court. This does not guarantee recovery, so speed and complete transaction details are critical.

Also report the incident to Hotline 1326 and the PNP or NBI. Do not pay an impersonator to delete the account or return your identity documents.

What to include in your written complaint

A useful complaint answers these questions in chronological order:

Who is being impersonated?
What identifying information was used?
What is the genuine account or identity?
What are the fake account’s URLs and usernames?
When and how did you discover it?
What exactly did the operator claim or do?
Who received messages or relied on them?
Was money, confidential information, or account access obtained?
What harm has occurred or is likely?
What reports have already been made?
What evidence is attached?
What assistance are you requesting?

Use facts, dates, and documents. Distinguish what you personally observed from what another person told you.

When help is urgent

Seek immediate assistance when the fake account:

Makes a credible threat of violence or reveals your current location;
Is extorting you or threatening to release intimate material;
Is targeting a child;
Has taken over your email, mobile number, bank, or e-wallet;
Is actively collecting money from your contacts or customers;
Uses government IDs, signatures, or financial credentials;
Has opened loans or accounts in your name; or
Is causing continuing danger to your safety, employment, or business.

For an immediate threat to life, safety, or property, call the Philippines’ Unified 911 Emergency Hotline or go to the nearest police station. For gender-based online sexual harassment, the Safe Spaces Act specifically assigns complaint-handling responsibilities to the PNP Anti-Cybercrime Group; Women and Children Protection Desks in police stations may also assist.

Consult a Philippine lawyer promptly if you need a preservation request, restraining order, civil damages, assistance with an affidavit, or coordinated complaints involving several offenses or jurisdictions.

Common mistakes to avoid

Reporting the account before saving its URL, messages, and transaction details;
Assuming a platform report automatically creates a police case;
Relying only on mass reporting by friends;
Deleting messages, resetting a device, or closing an account before preserving evidence;
Editing screenshots or keeping only cropped copies;
Confronting the operator and causing evidence to disappear;
Paying an extortion demand;
Sending identification documents to unofficial “support” accounts;
Publicly accusing an unverified suspect;
Reposting private or intimate material while warning others;
Waiting for financial losses to become final before contacting the bank; and
Assuming that deletion of the fake account ends the need to report the underlying fraud or harassment.

Frequently asked questions

Can I report a fake account if I do not know who created it?

Yes. Preserve the URL, username, messages, payment details, email addresses, phone numbers, and other identifiers. Investigators—not private complainants—can pursue subscriber or traffic information through lawful processes when the legal requirements are met.

Can I demand that the platform disclose the operator’s identity to me?

Usually not directly. Subscriber and account records are protected and may require a lawful preservation request, court warrant, or other valid legal process. Under the Cybercrime Prevention Act, law enforcement may seek disclosure through a court warrant in connection with an officially docketed investigation.

Is using my photograph enough to prove identity theft?

Not necessarily. The source of the photograph, the other information used, the representation made, and the operator’s purpose all matter. A copied public photograph combined with false claims, fraudulent messages, or unauthorized use of other identifying information presents a stronger case than mere republication alone.

Should I block the fake account?

Preserve the evidence first. After that, blocking may reduce direct contact, but ask investigators whether continued observation is important if an active operation or urgent preservation request is being considered.

Is a barangay blotter enough?

It may document that you reported an incident locally, but it does not replace a platform report or a complaint to a cybercrime-capable PNP or NBI unit. Use the channel appropriate to the conduct and remedy you need.

What if the platform removes the account before I reach the police?

Report anyway. Bring your screenshots, URLs, witnesses, report confirmations, and transaction records. Removal may stop public access but does not necessarily erase all service-provider records immediately.

Can I file both a criminal complaint and an NPC complaint?

Potentially, yes. They address different legal issues and remedies. Disclose related proceedings accurately, particularly in the NPC certification against forum shopping, and obtain legal advice if the cases substantially overlap.

Should I create a public post warning everyone?

A measured warning can prevent further harm. Identify the fake account, state that it is unauthorized, and give safe verification instructions. Do not publish sensitive evidence or accuse a named operator without reliable support.

Official references

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Procedures and legal conclusions may depend on the account, communications, evidence, parties, and resulting harm. Official sources and reporting channels were checked on 27 July 2026.