How to Stop the Unauthorized Use of Your Face and Brand Online

Seeing your face, name, logo, or business identity used in a fake advertisement, impersonation account, counterfeit store, edited video, or false endorsement can be alarming. It can damage your reputation, mislead customers, and expose other people to scams. In the Philippines, there is no single “image rights” law that covers every situation. The most effective response usually combines privacy law, trademark and copyright law, civil remedies, cybercrime rules, platform reporting, and—when necessary—an injunction from a court.

The correct remedy depends on exactly what was copied, who owns it, how it is being used, and whether the use is commercial, deceptive, defamatory, intimate, journalistic, or merely personal. The first priority is normally to preserve strong evidence before the content disappears, then pursue the fastest takedown route while protecting your right to claim damages later.

What Counts as Unauthorized Use of Your Face or Brand?

Common examples include:

  • A Facebook page using your photograph to sell a product you never endorsed
  • A fake TikTok or Instagram account pretending to be you
  • A lending, investment, gambling, or cryptocurrency advertisement using an edited video of your face
  • An online seller copying your logo, packaging, product photographs, or business name
  • A competitor creating a confusingly similar page or storefront
  • A former employee or influencer continuing to use your brand after permission expired
  • A website using your name in a domain to divert customers
  • A deepfake video making it appear that you said something you never said
  • A copied photograph used in an advertisement without the photographer’s or copyright owner’s permission
  • An intimate photograph or video distributed without consent

These situations involve different legal rights.

What was used? Possible Philippine legal protection Important ownership issue
Your identifiable face or photograph Data Privacy Act, Civil Code privacy and dignity rights You may have privacy rights even if you do not own the photograph’s copyright
Your name or identity Civil Code, Data Privacy Act, cybercrime law Deceptive impersonation is more serious than merely mentioning your name
Registered brand name or logo Trademark infringement under the Intellectual Property Code The registered owner normally enforces the trademark
Unregistered business identity Unfair competition, trade-name protection, Civil Code remedies You must usually prove actual goodwill and deceptive passing off
Photograph, artwork, video, or logo design Copyright law The creator or valid assignee—not necessarily the person shown—usually owns copyright
Domain name using your name or mark Cyber-squatting provisions of RA 10175 Bad faith and confusing similarity are important
False or damaging statements Civil damages, libel or cyberlibel, depending on the facts Unauthorized use alone is not automatically defamation

A single fake endorsement may violate several laws at once. For example, a scammer who copies your photograph, places your name beside a fabricated testimonial, and uses your business logo may simultaneously commit unauthorized personal-data processing, trademark infringement, copyright infringement, identity misuse, fraud, and a civil wrong.

Your Rights Over Your Face and Personal Identity

An identifiable photograph is personal information

Under the Data Privacy Act of 2012, or Republic Act No. 10173, personal information includes information from which a person’s identity is apparent or can reasonably be determined. The National Privacy Commission has specifically recognized that the image of an identifiable person in a photograph or video is personal information.

This does not mean every photograph requires consent in all circumstances. Personal information may be processed when there is consent or another lawful basis, such as compliance with a legal obligation, performance of a contract, protection of vital interests, exercise of public authority, or a legitimate interest that is not overridden by the individual’s rights.

Whatever lawful basis is invoked, processing must comply with three core principles:

  • Transparency: You should be told how and why your information will be used.
  • Legitimate purpose: The purpose must be lawful and clearly defined.
  • Proportionality: The use must be relevant and no more extensive than necessary.

Using someone’s face to fabricate a commercial endorsement, lure victims into a scam, or create a deceptive account is unlikely to be justified merely by saying that the photograph was publicly available. (National Privacy Commission)

You may demand erasure, blocking, or removal

The Data Privacy Act gives a data subject—the person whose data is involved—the right, in qualifying cases, to demand that personal information be blocked, removed, destroyed, or no longer processed. The right is not absolute. Removal may be refused when continued processing is required by law, needed for legal claims, justified by an overriding public interest, or protected by freedom of expression and legitimate public-interest reporting. (National Privacy Commission)

A privacy claim is strongest when:

  • The account falsely presents you as endorsing a product or service
  • Your image is being used for fraud or impersonation
  • The use is unrelated to the reason the photograph was originally collected
  • You withdrew permission and there is no other lawful basis
  • The content exposes sensitive circumstances, location, health, finances, or private life
  • The operator cannot explain where it obtained the photograph or why it is processing it

A purely personal or household use may fall outside some obligations imposed on a “personal information controller” under the Data Privacy Act. That does not necessarily make the conduct lawful. Civil Code provisions on privacy, dignity, abuse of rights, and damages may still apply. (National Privacy Commission)

Civil Code Protection for Privacy, Dignity, and Reputation

Several provisions of the Civil Code are frequently used when a person’s identity or reputation is exploited:

  • Article 19 requires everyone to act with justice, give others their due, and observe honesty and good faith.
  • Article 20 makes a person liable for damage caused by a willful or negligent act contrary to law.
  • Article 21 allows damages for willfully causing loss or injury in a manner contrary to morals, good customs, or public policy.
  • Article 26 protects dignity, personality, privacy, and peace of mind and permits damages, prevention, and other relief.
  • Article 28 addresses unfair competition through force, intimidation, deceit, machination, or other unjust means. (LawPhil)

These provisions are useful when the conduct is abusive but does not fit neatly into one criminal offense or intellectual-property claim.

Philippine Supreme Court decisions also recognize that public exposure does not eliminate all privacy rights. In Lagunzad v. Vda. de Gonzales, the Court recognized limits on exploiting a person’s life and personality. In Ayer Productions Pty. Ltd. v. Capulong, the Court explained that a public figure’s privacy is narrower when the subject is genuinely connected to public interest, but it is not completely erased. Vivares v. St. Theresa’s College illustrates the practical limits of privacy expectations on social media, while Cadajas v. People confirms that privacy disputes between private persons may be governed by the Civil Code, the Data Privacy Act, and other applicable laws. (LawPhil)

The practical distinction is important: a news report using a photograph to discuss a genuine public event is very different from an advertisement falsely claiming that the person recommends a skin treatment, lending app, investment platform, or online casino.

Protecting Your Brand, Logo, and Business Identity

Registered trademarks provide the strongest brand remedy

Under Republic Act No. 8293, the Intellectual Property Code, trademark infringement occurs when a person, without the owner’s consent, reproduces or imitates a registered mark and uses it in commerce in a way likely to cause confusion, mistake, or deception. Liability may arise even before an actual sale is completed. (LawPhil)

A registered trademark owner may seek:

  • An injunction stopping further use
  • Recovery of damages and, in proper cases, profits attributable to the infringement
  • Destruction or disposal of infringing materials
  • Administrative enforcement before the Intellectual Property Office of the Philippines
  • Criminal prosecution in qualifying cases

Trademark registration is particularly useful for platform takedowns because the certificate clearly identifies the owner, mark, registration number, covered goods or services, and registration status.

A DTI business-name registration or SEC corporate registration is not the same as an IPOPHL trademark registration. DTI and SEC documents establish the existence or registered name of a business, but they do not automatically grant the nationwide exclusive trademark rights created by registration with IPOPHL.

An unregistered brand may still be protected

Section 168 of the Intellectual Property Code protects business goodwill against unfair competition. This may apply when another person passes off their goods, services, page, packaging, or business as yours, even if your mark is not registered.

You will normally need evidence showing:

  • You used the name, appearance, packaging, or identity before the offender
  • Customers associate it with your business
  • The offender copied distinctive elements
  • The copying is likely to mislead buyers
  • You suffered confusion, diverted sales, complaints, or reputational harm

Invoices, dated advertisements, social-media history, customer messages, sales records, packaging samples, and sworn statements can help prove goodwill and confusion. (LawPhil)

Copyright: Owning Your Face Is Not the Same as Owning the Photograph

One of the most common mistakes in takedown requests is claiming copyright merely because you appear in the photograph.

Copyright usually belongs initially to the photographer or other creator. For employee-created work, ownership depends on whether the creation formed part of the employee’s regular duties. For commissioned work, the person who commissioned the work may own the physical output, but copyright generally remains with the creator unless there is a written agreement providing otherwise. A copyright assignment should be in writing. (LawPhil)

You may validly file a copyright complaint when you are:

  • The photographer or creator
  • The employer that owns the work under the statutory rules
  • The recipient of a written copyright assignment
  • An authorized representative of the owner
  • The owner of an original logo, artwork, video, advertisement, or product photograph that was copied

Copyright gives the owner exclusive rights such as reproduction, adaptation, distribution, public display, and communication to the public, subject to statutory limitations and fair-use principles. Copyright ownership is separate from ownership of the physical file or object. (LawPhil)

If you are the person shown but not the copyright owner, use privacy, impersonation, false endorsement, trademark, or Civil Code grounds instead of making an inaccurate copyright claim.

Cybercrime, Impersonation, Fake Accounts, and Deepfakes

The Cybercrime Prevention Act of 2012, Republic Act No. 10175, penalizes computer-related identity theft, which includes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another natural or juridical person without right. Whether a fake account satisfies every element depends on how the identity was obtained and used. (LawPhil)

Other possible offenses include:

  • Online fraud
  • Illegal access to an account
  • Computer-related forgery
  • Cyberlibel when defamatory statements are published online
  • Cyber-squatting involving a domain name confusingly similar to a registered trademark or another person’s name and acquired in bad faith
  • Threats, extortion, or harassment under applicable penal laws

There is no need to wait for a platform to finish its internal review before reporting an active scam to the Philippine National Police Anti-Cybercrime Group, the National Bureau of Investigation Cybercrime Division, or the Department of Justice Office of Cybercrime. Law-enforcement reporting is especially urgent when victims are sending money, accounts are being hacked, threats are being made, or evidence may quickly disappear. (LawPhil)

For intimate or sexual material, Republic Act No. 9995, the Anti-Photo and Video Voyeurism Act of 2009, may apply. Consent to the original recording does not automatically mean consent to publication or distribution. The law is especially relevant where intimate images or recordings are copied, sold, shared, or posted without the required consent. (LawPhil)

Step-by-Step: How to Stop the Unauthorized Use

1. Preserve evidence before contacting the offender

Do not rely on one cropped screenshot. Online content can be edited, renamed, or deleted within minutes.

Save:

  • Full-page screenshots showing the account name, handle, date, time, caption, and surrounding page
  • The exact URL of every post, profile, advertisement, product listing, and website
  • A screen recording showing how you reached the content
  • The account ID or page transparency information, when available
  • Copies of photographs, videos, advertisements, or downloadable files
  • Comments from confused customers or victims
  • Direct messages, emails, invoices, payment instructions, and phone numbers
  • Platform ad-library entries or sponsored-post details
  • Search-engine results showing how the page presents itself
  • Your original files and their metadata
  • Trademark certificates, contracts, licensing agreements, and copyright assignments

Record the date and time in Philippine time and, where relevant, the time zone shown by the platform.

For high-value disputes, consider having a disinterested witness execute an affidavit describing how the content was found and captured. A lawyer may also arrange more formal electronic-evidence preservation where authenticity is likely to be challenged.

2. Secure your accounts and reduce immediate harm

When impersonation or hacking is involved:

  1. Change passwords for your email and social-media accounts.
  2. Enable multi-factor authentication.
  3. Review active sessions and connected applications.
  4. Preserve security-alert emails and login records.
  5. Notify your bank, e-wallet, or payment processor if money is involved.
  6. Warn customers using a factual notice from your verified channel.

Keep any public warning accurate and restrained. Identify the fake page and state that it is unauthorized, but avoid making unsupported accusations about a specific person. Overstated public allegations can create a separate defamation dispute.

3. Identify the strongest legal basis

Use the ground that best matches the content:

Situation Best initial grounds
Fake account pretending to be you Impersonation, privacy, identity misuse
Your face used in a false advertisement Privacy, false endorsement, Civil Code damages
Registered logo copied by an online seller Trademark infringement
Unregistered packaging or store identity copied Unfair competition
Your original photo or video reposted Copyright
Your face appears in a photo you do not own Privacy or false endorsement—not necessarily copyright
Fake domain using your name or registered mark Cyber-squatting, trademark
Intimate content distributed without consent RA 9995, privacy, cybercrime
False captions damaging your reputation Civil damages, possible cyberlibel
Deepfake used to collect money Identity misuse, fraud, privacy, possible trademark or defamation claims

Multiple grounds may be used, but each claim should be truthful and supported by documents.

4. Send a precise takedown and preservation demand

A written demand should identify:

  • Your full name or business name
  • The unauthorized account, URL, or listing
  • The exact photograph, mark, video, or identity being used
  • Your legal relationship to the material
  • Why the use is unauthorized or deceptive
  • The action required: removal, account closure, cessation of advertisements, preservation of records, or disclosure through lawful process
  • A reasonable deadline
  • A reservation of your right to pursue damages and other remedies

For an active scam, a 24- to 48-hour demand may be reasonable. For an ordinary commercial or licensing dispute, five to ten calendar days is more common. The appropriate period depends on urgency and complexity.

A demand letter is not automatically required to be notarized, but notarization can strengthen proof of authorship and service. Send it through channels that create a reliable record, such as registered mail, accredited courier, email with delivery information, or the platform’s formal reporting system.

Do not demand that the recipient destroy all files if those files may be needed as evidence. Require the person to stop publication while preserving relevant account, advertising, transaction, and access records.

5. File the correct platform report

Most large platforms separate reports for:

  • Impersonation
  • Privacy violations
  • Trademark infringement
  • Copyright infringement
  • Counterfeit goods
  • Scam or fraud
  • Non-consensual intimate imagery
  • Harassment
  • Advertisements violating platform rules

Use the most specific form available. Attach proof of identity and ownership, but redact unrelated personal information.

For trademark reports, submit the IPOPHL or foreign registration certificate, registration number, owner’s name, and proof that you are authorized to act. For copyright reports, identify the original work and provide the original publication or file. For impersonation reports, submit a government-issued ID only through the platform’s official secure process.

IPOPHL advises rights holders to pursue direct notice-and-takedown measures and maintains enforcement channels through its Intellectual Property Rights Enforcement Office. Platforms and marketplaces may also provide specialized rights-management tools for verified trademark and copyright owners. (IPOPHL)

6. Escalate to the appropriate Philippine authority

National Privacy Commission

Use the NPC route when the dispute primarily involves the collection, disclosure, posting, commercial use, or refusal to erase your personal information.

Before filing, send the person or organization a written privacy complaint or demand. NPC procedural decisions have applied a requirement to give the respondent an opportunity to act, commonly involving a 15-day response period. Filing deadlines may be short: decisions applying the procedural rules have referred to filing within six months from the violation or within 30 days from the last communication with the respondent, whichever occurs earlier. Check the currently effective rules and form before filing. (National Privacy Commission)

The NPC’s complaint instructions and downloadable form require the complaint to be completed, printed, notarized, and submitted through an accepted filing method. Supporting evidence and proof of prior communication should be attached. Current filing fees are governed by the NPC’s published schedule. (National Privacy Commission)

Intellectual Property Office of the Philippines

For trademark, copyright, and unfair-competition disputes, options may include:

  • An enforcement report or verified complaint through the IEO
  • An administrative infringement case before the Bureau of Legal Affairs
  • Mediation
  • A court action for injunction and damages
  • Criminal referral in qualifying cases

IPOPHL’s published administrative complaint fees have listed different amounts for small and large entities, including ₱15,000 and ₱19,200 respectively, although fees and classifications should be checked against the current schedule before payment. IPOPHL mediation is generally designed to conclude within 60 days, extendible to 90 days. (IPOPHL)

Police, NBI, or DOJ cybercrime authorities

Report immediately when the unauthorized use involves:

  • Active solicitation of money
  • Hacked accounts
  • Identity theft
  • Threats or extortion
  • Fraudulent loans or investments
  • Forged documents
  • Organized counterfeit sales
  • Intimate-image abuse
  • Harm involving a child

Bring a government-issued ID, printed and digital copies of the evidence, an affidavit or written chronology, URLs, account details, transaction records, and the device on which relevant messages were received. Keep the original device and files intact whenever possible.

7. Seek an injunction when removal cannot wait

A civil court may issue an injunction ordering a person to stop specified conduct. Under Rule 58 of the Rules of Court, a temporary restraining order or preliminary injunction may be sought when the legal requirements are met. The applicant must establish a clear right requiring protection and a serious threat of injury; the court may also require a bond. A restraining order is never automatic merely because a demand letter was ignored. (LawPhil)

A court case may also seek:

  • Actual or compensatory damages
  • Moral damages for proven mental anguish, humiliation, or reputational injury
  • Exemplary damages in appropriate cases
  • Lost profits or diverted income supported by records
  • Attorney’s fees when legally recoverable
  • Destruction or surrender of infringing materials
  • Permanent injunctive relief

Full court litigation often takes considerably longer than a platform takedown or administrative mediation. However, it may be necessary when the offender repeatedly reuploads content, operates multiple accounts, refuses to disclose records, or causes substantial financial loss.

Is Barangay Conciliation Required?

Barangay conciliation may be a condition before filing certain disputes in court when the individual parties actually reside in the same city or municipality.

It generally does not apply in the same way when:

  • One party is a corporation or other juridical entity
  • The parties reside in different cities or municipalities, subject to statutory exceptions
  • The dispute requires urgent legal action
  • A provisional remedy such as an injunction is urgently sought
  • The matter falls within another statutory exception

Because an urgent online impersonation or scam may require immediate injunctive relief, barangay proceedings should not automatically be allowed to delay necessary preservation or emergency court action. (LawPhil)

Documents, Costs, and Realistic Timelines

Action Common requirements Cost considerations Practical timing
Platform takedown URLs, screenshots, ID, proof of ownership Usually no filing fee Hours to several weeks
Demand letter Evidence, ownership documents, recipient details Lawyer, courier, and notarization costs may apply Commonly 24 hours to 10 days for compliance
NPC complaint Notarized form, proof of prior notice, evidence NPC filing fee plus notarization and delivery Often months; complex cases may take longer
IPOPHL enforcement report IP ownership records and infringement evidence Depends on process selected Initial action varies
IPOPHL administrative case Verified complaint, evidence, filing fee Official fees and professional costs Months or longer
IPOPHL mediation Case referral and participation of parties Mediation-related fees may apply Target of 60 days, extendible to 90
Cybercrime complaint Affidavit, device, URLs, transaction records Usually evidence, travel, notarization, and professional costs Investigation length varies greatly
Court injunction and damages Verified complaint, evidence, certifications, bond if required Court fees depend on claims; bond and legal costs may be substantial Urgent relief may be heard early; full case may take years

No government agency or platform can guarantee a particular removal date. Delays commonly arise from incomplete URLs, mismatched ownership documents, lack of an English translation, anonymous operators, repeated reuploads, cross-border accounts, and reports filed under the wrong category.

Special Issues for Foreigners and Overseas Filipinos

A foreign person or company may enforce qualifying intellectual-property rights in the Philippines under the reciprocity and treaty provisions of the Intellectual Property Code. A foreign corporation may, in appropriate circumstances, bring an infringement or unfair-competition action even if it is not licensed to do business in the Philippines. (LawPhil)

Documents signed abroad may need:

  1. Notarization in the country where they are executed
  2. An apostille if the country participates in the Apostille Convention
  3. Philippine consular authentication when the apostille process does not apply
  4. A certified translation when the document is not in English or Filipino

A special power of attorney authorizing a Philippine representative should clearly cover complaints, evidence submission, settlement, receipt of notices, and court or agency appearances as needed. The DFA Apostille information portal explains the Philippine authentication framework. (Philippine Embassy)

The Data Privacy Act may also apply beyond Philippine territory in defined circumstances, including certain processing involving Philippine citizens or residents and entities with relevant links to the Philippines. Cross-border enforcement, however, is often slower because the operator, platform, records, and assets may be located in different jurisdictions.

Common Mistakes That Weaken a Takedown or Legal Case

Reporting before preserving the evidence

A successful platform report can remove the best proof of the violation. Capture the complete page, URLs, account identifiers, and transaction information first.

Claiming copyright in your face

Your likeness may support privacy and false-endorsement claims, but copyright in the photograph usually belongs to the photographer or a person who received a valid written assignment.

Assuming a public post is free for commercial use

A photograph visible on Facebook, Instagram, LinkedIn, or a website is not automatically available for fake testimonials, advertisements, or impersonation. Public accessibility and lawful reuse are different questions.

Relying only on a DTI or SEC registration

A business-name or corporate registration is useful evidence, but a registered IPOPHL trademark normally provides clearer and stronger nationwide enforcement rights.

Sending vague reports

“Someone stole my identity” is less effective than identifying the exact account, URL, copied material, date found, legal right, ownership document, and requested action.

Threatening criminal charges without checking the elements

Not every repost, criticism, parody, or mistaken use is a crime. Overstating accusations can undermine credibility and complicate settlement.

Ignoring old contracts and releases

A photographer, model, influencer, employee, agency, or endorser may previously have granted permission. Review the scope, territory, duration, platforms, editing rights, sublicensing provisions, and termination clauses before alleging unauthorized use.

Treating criticism or news reporting as trademark infringement

Trademark law generally targets confusing commercial use, not every mention of a brand. Commentary, comparison, criticism, parody, and legitimate reporting may be protected depending on how the name or image is presented.

Frequently Asked Questions

Can someone use my public Facebook photo in an advertisement?

Not merely because it is public. The advertiser still needs a lawful basis for processing your personal information and must comply with transparency, legitimate-purpose, and proportionality requirements. A fabricated endorsement may also create Civil Code, trademark, fraud, and identity-misuse liability.

Do I own the copyright to every photograph of me?

No. The photographer or creator usually owns copyright unless employment rules, a written assignment, or another statutory arrangement transfers ownership. You may still have privacy and personality rights over how your identifiable image is used.

Can I force Facebook, TikTok, or another platform to remove a fake account?

You can file an impersonation, privacy, trademark, copyright, scam, or intimate-image report, depending on the facts. Removal is governed by the platform’s rules and applicable law. Complete URLs, proof of identity, and proof of ownership greatly improve the report.

Can I sue if my trademark is not registered?

Possibly. Unregistered marks and business identities may be protected through unfair competition, trade-name rights, and Civil Code remedies. You must usually prove goodwill, prior use, deceptive copying, customer confusion, and resulting harm.

Is unauthorized use of my face automatically a criminal case?

No. It may initially be a privacy, civil, contractual, or platform-policy issue. Criminal liability depends on whether the facts satisfy an offense such as identity theft, fraud, cyberlibel, threats, illegal access, forgery, or non-consensual intimate-image distribution.

Can a news site use my photograph without permission?

Sometimes, particularly where the photograph is relevant to legitimate news reporting or public interest and the use complies with applicable privacy, copyright, and ethical standards. That does not permit unrelated commercial endorsement, misleading presentation, or gratuitous intrusion into private life.

What damages can I claim?

Depending on the claim and evidence, possible recovery may include actual losses, lost profits, moral damages, exemplary damages, infringer’s profits, attorney’s fees, and other statutory relief. Keep sales records, customer complaints, medical or counseling records where relevant, advertising data, and proof of reputational harm.

What should I do when the fake account is already collecting money?

Preserve evidence immediately, warn customers through a verified channel, report the account and advertisements, notify affected banks or e-wallets, and file a cybercrime complaint. Do not negotiate privately if doing so risks further loss, threats, or destruction of evidence.

What if the offender is outside the Philippines?

You may still file platform reports and pursue Philippine remedies where Philippine rights, residents, consumers, or commercial activity are involved. Actual enforcement may require cooperation from a foreign platform, service provider, registrar, or court. Properly apostilled or authenticated documents and a Philippine representative may be necessary.

Key Takeaways

  • Preserve complete digital evidence before requesting removal.
  • Your identifiable face is personal information, but you do not automatically own copyright in every photograph of you.
  • Use privacy or impersonation grounds for misuse of your likeness and copyright grounds only when you own or represent the work.
  • IPOPHL trademark registration provides the clearest brand-enforcement rights, although unregistered goodwill may still be protected.
  • File the platform report that precisely matches the violation.
  • Escalate active scams, hacking, threats, extortion, and intimate-image abuse to cybercrime authorities without delay.
  • NPC complaints generally require prior written notice, a notarized complaint, supporting evidence, and compliance with short procedural deadlines.
  • An injunction may be appropriate when repeated uploads or continuing commercial harm make ordinary takedown requests inadequate.
  • Public availability does not automatically authorize deceptive, commercial, or reputation-damaging use.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.