Quick answer

If someone is using your name, photos, personal details, or business identity in a fake social media account, preserve the evidence before the account disappears, report the account through the platform’s impersonation channel, secure any affected accounts, warn your contacts, and file a complaint with the PNP Anti-Cybercrime Group or NBI Cybercrime Division when the account is being used to deceive, threaten, harass, defame, obtain money, or cause other harm.

Philippine law treats the intentional use or misuse of another person’s or organization’s identifying information, without right, as possible computer-related identity theft. A fake account is not automatically a crime, however. Criminal liability depends on evidence of unauthorized use and an illegitimate purpose; a clearly identified parody, fan, commentary, or coincidentally similar account may present a different legal issue.

Do not wait for the platform to act before contacting law enforcement if money is moving, threats are being made, intimate or child-related content is involved, or the impersonator is actively contacting other people.

What to do immediately

Preserve the account and its activity. Capture the profile, username, profile URL, posts, stories, advertisements, messages, comments, payment instructions, dates, and visible engagement. Save the original files rather than relying only on printed copies.
Secure your real accounts. From a trusted device, change the password of your email first, then your social media, banking, e-wallet, cloud-storage, and telecommunications accounts. Sign out unknown sessions, remove unfamiliar recovery details or connected applications, and enable multi-factor authentication.
Warn likely targets privately. Tell family, friends, customers, co-workers, or business partners that the account is fake. Identify your genuine account or official contact channel. Do not publicly accuse a suspected operator unless you have reliable evidence and legal advice.
Report the fake account to the platform. Use the specific impersonation option, not only the generic spam option. Save the report confirmation, ticket number, and every response.
Report criminal conduct promptly. Contact the PNP Anti-Cybercrime Group or NBI Cybercrime Division. Ask for a complaint or reference number and provide a clear chronology with your evidence.
Act separately on financial or safety risks. Contact the relevant bank, e-wallet, card issuer, telecommunications provider, employer, school, or government agency without waiting for the social media investigation.

When a fake account may amount to identity theft

Section 4(b)(3) of the Cybercrime Prevention Act of 2012 penalizes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another natural or juridical person, without right. This can cover the identity of an individual, corporation, association, or other organization.

Identifying information can include a person’s name, address, contact number, date and place of birth, occupation, family information, and similar data. In Disini v. Secretary of Justice, the Supreme Court explained that identity information must be taken or used for an illegitimate purpose; simply acquiring or disseminating information that the person made public is not, by itself, identity theft. The account’s presentation, messages, conduct, purpose, and actual or intended harm therefore matter. Read the Supreme Court decision.

Examples that may support an identity-theft complaint include an account that:

Presents itself as you and asks your contacts for money, investments, loads, account credentials, or one-time passwords;
Uses your identity to open accounts, apply for loans, register services, or transact with customers;
Pretends to represent your business or organization;
Uses your identity to obtain confidential information;
Sends fraudulent job, sales, romantic, donation, or emergency requests;
Alters your identifying details or uses them to take over an existing account; or
Impersonates you to damage your employment, relationships, business, or reputation.

The base penalty under Section 8 for offenses under Section 4(b) is prision mayor—six years and one day to twelve years—or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. Section 4(b)(3) provides for a penalty one degree lower if no damage has yet been caused. The charge and penalty ultimately depend on the proven facts and the court’s judgment.

Other laws that may apply

One incident may involve several possible offenses, but the proper charges depend on the exact conduct.

Fraud or estafa: This may apply when the impersonator deceives someone into sending money, goods, credentials, or another benefit. Use of information and communications technology can affect the applicable penalty under Section 6 of the Cybercrime Prevention Act.
Illegal access, computer-related fraud, or forgery: These may apply when an existing account was hacked, computer data was altered, or inauthentic electronic data was created for fraudulent or legal use.
Cyberlibel: Defamatory statements published by the fake account may be actionable if all elements of libel are present. The Supreme Court has reaffirmed that cyberlibel generally prescribes in one year from discovery by the offended party, authorities, or their agents. Seek legal advice immediately if this may apply; do not assume that the continued availability of a post restarts the period. See the Supreme Court’s 8 April 2026 resolution in Causing.
Gender-based online sexual harassment: The Safe Spaces Act expressly covers online impersonation of victims and posting lies to harm their reputation when the conduct amounts to gender-based online sexual harassment. The statutory penalty is prision correccional in its medium period, a fine of ₱100,000 to ₱500,000, or both. Qualified circumstances can increase the penalty. An action for an offense under Section 12 is imprescriptible under the Act.
Data-privacy violations: The Data Privacy Act may apply when a person, company, employer, school, platform, or other entity unlawfully processed, disclosed, failed to secure, or refused to correct or erase personal data. A privacy complaint is distinct from a criminal cybercrime complaint.
Civil remedies: Depending on the evidence, a lawyer may assess damages, an injunction, protection orders, or other remedies under the Civil Code and special laws.

Evidence to preserve

Electronic evidence must be shown to be authentic, reliable, and intact. The Rules on Electronic Evidence place the burden of authentication on the party offering a private electronic document. Screenshots help, but stronger preservation makes them easier to verify.

Keep the following where available:

Full-page screenshots showing the account name, username or handle, profile photo, biography, URL, and date and time;
A screen recording that opens the platform, navigates to the profile, and displays the relevant posts or messages;
Direct links to the profile, each post, reel, video, story, advertisement, or message;
Original photos, videos, voice recordings, attachments, and downloaded account data;
Messages received by you and by people contacted by the impostor;
Email headers, SMS sender details, telephone numbers, QR codes, wallet addresses, account numbers, and payment links;
Transaction receipts, reference numbers, statements, delivery records, and communications with a bank or e-wallet;
Proof that the identifying information belongs to you or your organization;
Your genuine account’s URL and records showing when it was created or used;
Names and contact details of witnesses or recipients of the fake account’s messages;
Platform report confirmations and correspondence;
A written chronology identifying what happened, when you discovered it, and what harm followed; and
The original device on which important communications were received, if it can be retained safely.

Do not crop, annotate, compress, or repeatedly resave your only copy. Keep an untouched original and a separate working copy. Back up the evidence in at least two secure locations. If messages are disappearing, record them immediately without replying or forwarding unlawful content.

Report the account to the platform

Report both the profile and any harmful posts, advertisements, or messages. Platform removal is separate from a police investigation: removal may stop the immediate abuse, but it does not itself identify or prosecute the operator.

Official reporting channels include:

For another platform, open its official Help or Safety Center and select “impersonation,” “fake identity,” or the closest equivalent. Use only official forms reached through the platform’s application or verified website. An impostor may send a fake “appeal,” “verification,” or “support” link to steal more information.

A platform may ask the person being impersonated—or an authorized representative—to verify identity. Provide documents only through the official secure form, disclose no more information than required, and never send an ID, password, PIN, recovery code, or one-time password to the reported account.

File a report with Philippine authorities

PNP Anti-Cybercrime Group

The PNP is one of the law-enforcement agencies specifically tasked by Republic Act No. 10175 to investigate cybercrime.

The PNP Anti-Cybercrime Group’s official contact directory lists its Cyber Response Unit at:

Email: complaint@acg.pnp.gov.ph
Contact number: 0968 878 3561
Trunk line: (02) 8723 0401, local 7490

The directory also lists Regional Anti-Cybercrime Units and provincial or district cyber-response teams. Check the page before contacting a unit because government contact details can change.

NBI Cybercrime Division

You may use the NBI’s online complaint page or proceed to the Cybercrime Division or an appropriate NBI regional or district office. The NBI lists the Cybercrime Division’s email as ccd@nbi.gov.ph.

Under the NBI’s Citizen’s Charter for computer-crime victims, a complainant may file a complaint or request for investigation, undergo a preliminary interview, execute a sworn complaint sheet or submit a prepared affidavit, and provide supporting documents, witness statements, and relevant devices. The listed intake service has no fee.

CICC anti-scam channel

For cybercrime or scam intake and inter-agency referral, contact the Cybercrime Investigation and Coordinating Center through the national anti-scam hotline 1326 or 1326@dict.gov.ph. CICC coordination does not necessarily replace the sworn complaint or evidence that the PNP, NBI, or prosecutor may require.

What your complaint should contain

Organize the report so an investigator can understand it without reconstructing scattered screenshots:

Your full name and reliable contact details;
The fake account’s exact platform, username, URL, and any previous usernames;
The date and time you discovered it;
A chronological description of what the account did;
The personal or business information copied;
Names of people contacted or deceived;
Threats, defamatory statements, sexual content, or fraudulent representations;
Every transaction, amount, account number, and reference number;
The harm already caused and any continuing risk;
Actions already taken with the platform, bank, employer, or other entity; and
A numbered list of evidence and witnesses.

State plainly when the operator’s real identity is unknown. Do not guess. Investigators can evaluate whether to seek preservation and disclosure of subscriber, traffic, or other data through the procedures and court warrants provided by law.

Why fast reporting matters

Under Section 13 of Republic Act No. 10175, traffic data and subscriber information held by a service provider must generally be preserved for at least six months from the transaction. Content data must be preserved for six months from receipt of a law-enforcement preservation order, subject to a one-time six-month extension. Disclosure of protected account data generally requires lawful process, including the appropriate cybercrime warrant.

A private complainant ordinarily cannot compel a platform to reveal an account operator’s private information. When filing your complaint, call attention to any disappearing content or recent account activity and ask the investigator to consider immediate data preservation. Do not assume that every service retains every kind of record for the statutory maximum.

Philippine jurisdiction may still exist where an operator or platform is abroad if a relevant element occurred in the Philippines, a computer system was wholly or partly situated here, a Filipino national committed the offense, or the offense caused damage to a person who was in the Philippines. Cross-border identification and evidence collection may nevertheless take longer.

If money was transferred

The sender or account owner should immediately report the disputed transaction through the 24/7 fraud-reporting channel of the originating bank or e-wallet. Provide the transaction reference, amount, date and time, recipient account, and reason it is disputed. Ask whether the report has triggered the temporary-holding and coordinated-verification process under the Anti-Financial Account Scamming Act regulations.

Under BSP Circular No. 1215, covered institutions may initially hold disputed funds for up to five calendar days and may continue the hold, subject to verification, for an aggregate period not exceeding thirty calendar days unless a competent court extends it. The circular’s temporary-holding provisions do not cover credit-card transactions. A hold is not a guarantee that funds remain available or will be returned.

If the institution does not act or the complaint remains unresolved, escalate it through the BSP Consumer Assistance Mechanism. Report to law enforcement separately; a bank complaint is not a criminal complaint.

When to complain to the National Privacy Commission

Consider an NPC complaint when the incident involves unlawful processing, disclosure, inadequate security, refusal to correct or erase data, or another violation of your rights as a data subject. The NPC is not a substitute for the PNP or NBI and does not investigate every fake account as a criminal offense.

Under the NPC’s amended 2021 Rules of Procedure, a complainant must ordinarily:

Inform the personal information controller, processor, or concerned entity in writing about the privacy violation or personal-data breach;
Give that entity an opportunity to act;
Show that it failed to take timely or appropriate action, or did not respond within 15 calendar days from receiving the written notice; and
Attach proof of the notice and response or non-response.

The NPC may waive these exhaustion requirements for good cause or a serious violation, including circumstances involving grave and irreparable harm, no plain and adequate remedy, or patently illegal action.

The complaint must generally be written and verified, identify the parties or available leads, narrate the material facts, state the requested relief, include supporting documents and witness affidavits, and contain the required certification against forum shopping. Consult the NPC’s current complaint mechanics and filing instructions before filing.

Special situations requiring urgent action

Threats, stalking, or danger

If the impersonator knows your location, threatens violence, publishes your address, stalks you, or appears to be arranging an in-person confrontation, contact 911 or the nearest police station immediately. Preserve the threat without engaging the sender. Tell trusted people and your building, school, or workplace security where appropriate.

Sexual impersonation or intimate content

Report immediately if the account uses sexualized images, shares intimate recordings, solicits sexual activity in your name, or engages in gender-based harassment. The PNP Anti-Cybercrime Group is the primary implementing body for gender-based online sexual harassment; the PNP Women and Children Protection Desk may also assist.

A child is involved

If a child is being sexually exploited, groomed, threatened, or represented through sexual material, contact law enforcement and MAKABATA Helpline 1383 immediately. Do not download, forward, repost, or ask others to send copies of suspected child sexual abuse or exploitation material. Preserve URLs, usernames, dates, report confirmations, and a description of what was observed.

Identity documents or SIM credentials are compromised

Notify the issuing agency, telecommunications provider, bank, or other institution immediately if a government ID, SIM, card, account number, or authentication credential was lost or used. Ask what blocking, replacement, identity-verification, and written-dispute procedures apply. An affidavit of loss may be required by the particular issuer, but it does not replace a cybercrime complaint.

Common mistakes to avoid

Blocking or reporting the account before preserving its URL, messages, and activity;
Deleting messages, resetting a device, or closing an affected account before backing up evidence;
Paying the impersonator or trying to “trace” the person by clicking links or installing software;
Sending one-time passwords, recovery codes, identification documents, or account credentials to supposed support personnel;
Relying on mass reporting as the only response when fraud, threats, or serious harm is occurring;
Assuming a police blotter automatically produces a cybercrime investigation or platform takedown;
Assuming that platform removal preserves all evidence indefinitely;
Publicly naming a suspected offender without reliable proof;
Editing screenshots so heavily that their context or authenticity becomes disputable;
Filing only general allegations without usernames, URLs, dates, witnesses, or supporting records; and
Waiting for financial loss before reporting an account that is already contacting victims.

What may happen after a report

A platform may remove the account, restrict it, require changes, or find no policy violation. Law enforcement may interview the complainant and witnesses, examine relevant devices with proper authority, request data preservation, seek cybercrime warrants, identify additional offenses, and refer the case for preliminary investigation. A prosecutor—not the platform or complainant—determines whether the evidence establishes probable cause for criminal charges.

Removal, identification, recovery of money, arrest, and conviction are separate outcomes. None is automatic. Anonymous accounts, foreign service providers, recycled numbers, compromised devices, and rapidly transferred funds can complicate an investigation, which is why prompt and well-organized reporting matters.

Frequently asked questions

Can I report an account if I do not know who created it?

Yes. Use the exact username, URL, messages, transaction details, and other available leads. Identify the operator as unknown rather than naming someone based on suspicion.

Is using my photo automatically identity theft?

Not necessarily. Context and purpose matter. A misleading account that uses your photo and details to act as you is substantially different from news reporting, commentary, or clearly disclosed parody. Copyright, privacy, harassment, defamation, and platform-policy issues may also arise independently.

Should I contact the suspected impersonator?

Usually not. Contact can provoke further abuse, reveal your strategy, or cause evidence to disappear. Preserve the account, secure yourself, and use formal reporting channels.

Is a notarized screenshot enough?

Not by itself. Notarization does not prove that the online content is authentic or unchanged. Keep the original electronic files, URLs, device records, surrounding conversation, and testimony of people who saw or received the content.

Can someone else report for me?

Platforms often allow reports from witnesses or authorized representatives, but their verification requirements vary. For criminal proceedings, the person impersonated and directly affected should usually participate and execute the necessary sworn statement. Parents or guardians may act for children. An NPC representative generally needs a special power of attorney, subject to the specific rules for minors or persons who require guardianship.

Is there a deadline?

There is no single deadline covering every fake-account incident. Report immediately because content, funds, and technical records can disappear. Different offenses have different prescriptive periods: cyberlibel generally has a one-year period from discovery, while gender-based online sexual harassment under Section 12 of the Safe Spaces Act is imprescriptible. Do not calculate a deadline without legal advice where several offenses may be involved.

Will reporting to the platform reveal the operator’s identity?

Usually not. Platforms generally do not provide private subscriber information directly to a complainant. Law enforcement may seek disclosure through the appropriate legal and court-warrant process.

Can I go only to the NPC?

A privacy complaint may be appropriate, but it does not replace reporting fraud, identity theft, threats, or other crimes to the PNP or NBI. These remedies may proceed separately, subject to rules against duplicative claims and forum shopping.

Official references

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. The appropriate complaint, venue, evidence, defenses, and remedies depend on the facts and documents. Sources and procedures were checked as of 27 July 2026.