When a scammer hides behind a dummy Facebook, Instagram, TikTok, X, Telegram, Viber, or marketplace account, the natural reaction is to “trace” the person yourself. In the Philippines, the safer and more effective approach is different: preserve digital evidence, identify lawful leads, avoid illegal counter-investigation, and let the NBI, PNP, prosecutor, court, bank, telco, or platform compel the private data you cannot legally obtain on your own. A dummy social media account may help you quietly view public information, but it should never be used to hack, impersonate, threaten, entrap, record private calls without consent, or dox a suspected scammer.

Can You Use a Dummy Social Media Account to Trace a Scammer?

A dummy account is not automatically a crime. Many people use separate accounts for privacy, safety, or monitoring public posts. The legal risk starts when the dummy account is used for deception, harassment, unauthorized access, identity theft, or gathering private personal data without lawful authority.

A victim may generally do passive, lawful observation of public information, such as:

Saving the scammer’s profile URL, username, page name, handle, public posts, public comments, public marketplace listings, and visible phone numbers.
Taking screenshots of public posts or public ads connected to the scam.
Noting the date and time when the scammer changed names, profile photos, page details, or contact numbers.
Comparing publicly visible details with your payment receipts, delivery records, chat history, or order documents.

A victim should not use a dummy account to:

Pretend to be a police officer, lawyer, bank employee, courier, government officer, or another real person.
Ask the scammer to send IDs, addresses, passwords, OTPs, bank details, or personal data under false pretenses.
Send tracking links, malware, phishing pages, spyware, or “IP grabbers.”
Access private accounts, bypass privacy settings, guess passwords, or use another person’s account.
Publicly post the suspected scammer’s name, address, family members, employer, school, phone number, or photos as “revenge.”
Make threats, insults, or defamatory posts that can create a separate cyberlibel, unjust vexation, grave threats, harassment, or privacy issue.

The practical rule is simple: you may document what you can lawfully see, but you cannot force your way into private data. Private subscriber information, login IP addresses, phone subscriber records, account ownership data, and platform records are usually obtained through legal process, not through private tracing.

Philippine Laws That Apply to Online Scams and Dummy Accounts

Estafa under the Revised Penal Code

Many online selling scams, romance scams, investment scams, fake booking scams, and “pay first, disappear later” schemes may fall under estafa, or swindling, under Article 315 of the Revised Penal Code. Estafa generally involves deceit or fraudulent acts that cause damage to another person. Article 315 specifically covers false pretenses, fictitious names, imaginary transactions, and other similar deceits used before or at the same time as the fraud. (Lawphil)

For example, estafa may be considered when a person:

Pretends to sell a phone, gadget, ticket, apartment, vehicle, job slot, visa service, or investment product.
Uses a fake name or fake business identity.
Receives payment through GCash, Maya, bank transfer, remittance, crypto, or cash deposit.
Disappears, blocks the buyer, or repeatedly gives false excuses after payment.

Cybercrime Prevention Act of 2012

Republic Act No. 10175, the Cybercrime Prevention Act of 2012, applies when the fraud is committed through a computer system, internet platform, mobile device, or online communication. It recognizes offenses such as illegal access, computer-related forgery, computer-related fraud, and computer-related identity theft. It also gives the NBI and PNP responsibility for cybercrime enforcement through cybercrime units. (Human Rights Library)

For victims, the important point is that cybercrime investigators can pursue leads that ordinary victims cannot lawfully compel, including subscriber information, traffic data, preserved computer data, and platform records, subject to the required court process.

Rule on Cybercrime Warrants

The Supreme Court’s Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC, governs applications for warrants and related orders involving preservation, disclosure, interception, search, seizure, examination, custody, and destruction of computer data. This is why a victim’s screenshots are useful, but they are not the end of the investigation. The police or NBI may need court-issued cybercrime warrants or related orders to connect the dummy account to a device, subscriber, SIM, e-wallet, or real person.

SIM Registration Act

Republic Act No. 11934, the SIM Registration Act, requires SIM registration before activation and requires telcos to protect subscriber data. It also allows disclosure of registration information only through specific lawful channels, such as a court order, legal process, or subpoena by a competent authority based on a sworn complaint that a specific mobile number was used in a crime or malicious, fraudulent, or unlawful act. (Supreme Court E-Library)

This means that even if you have the scammer’s mobile number, you usually cannot demand the registered owner directly from Globe, Smart, DITO, or a reseller. You provide the number to investigators, the prosecutor, or the proper authority.

Anti-Financial Account Scamming Act

Republic Act No. 12010, the Anti-Financial Account Scamming Act or AFASA, is especially relevant when the scam used a bank account, e-wallet, or other financial account. It penalizes money muling, social engineering schemes, opening accounts under fictitious names, buying or selling accounts, and related acts. It also allows institutions to temporarily hold funds subject of a disputed transaction for a period prescribed by BSP rules, not exceeding 30 calendar days unless extended by a court. (Supreme Court E-Library)

This is why fast reporting to the bank or e-wallet provider matters. In real cases, money often moves through several accounts within minutes or hours.

Data Privacy Act and Civil Code

Republic Act No. 10173, the Data Privacy Act of 2012, requires personal information processing to follow transparency, legitimate purpose, and proportionality. It also penalizes unauthorized processing, unauthorized access, and other misuse of personal data. (National Privacy Commission)

The Civil Code also matters. Articles 19, 20, 21, and 26 recognize good faith, liability for damage caused contrary to law or public policy, and protection of dignity, privacy, and peace of mind. These provisions can support civil claims for damages in proper cases, but they also warn victims not to overreach by humiliating, exposing, or harassing a suspected scammer online. (Lawphil)

What Information Can Actually Help Trace a Scammer?

A scammer’s real identity is rarely proven by one screenshot. Investigators usually build a chain of evidence from several sources.

Lead	Why it matters	Who can usually verify it
Social media profile URL and username	Identifies the exact account, even if the display name changes	Platform, NBI, PNP, prosecutor
Chat thread	Shows representations, promises, payment instructions, threats, and admissions	Victim, platform, court
Payment receipt	Connects the scam to a bank, e-wallet, remittance, merchant, or crypto wallet	Bank, e-wallet provider, BSP process, law enforcement
Mobile number	May connect to SIM registration and telco records	Telco through subpoena, court order, or legal process
Email address	May connect to platform signup or payment account	Platform or service provider through legal process
Delivery address or pickup point	Useful in fake selling or parcel scams	Courier, marketplace, law enforcement
Device or login data	May identify IP addresses, devices, timestamps, and account access	Platform through lawful request
Prior victims	Shows pattern, syndicate activity, common accounts, or economic sabotage	Investigators, prosecutor

Do not rely only on the profile picture. Scammers frequently use stolen photos, AI-generated faces, fake business pages, recycled screenshots, and names of real innocent people.

Step-by-Step: Lawful Way to Trace and Report a Scammer Using a Dummy Account

1. Stop the loss first

Before investigating, protect your money and accounts.

Change passwords for email, social media, banking, and e-wallet accounts.
Enable multi-factor authentication.
Call your bank or e-wallet provider immediately if money was transferred.
Ask whether the transaction can be flagged, reversed, disputed, or temporarily held.
Save the incident reference number from the bank, e-wallet, telco, platform, or hotline.

Under AFASA, financial institutions have important duties related to disputed transactions, coordinated verification, temporary holding of funds, and protection of client financial accounts. (Supreme Court E-Library)

2. Preserve evidence before the account disappears

Scammers often change names, delete posts, block victims, or abandon accounts after being reported. Before clicking “Report” on the platform, preserve what you can lawfully access.

Save:

Full screenshots showing the browser address bar or app profile page.
The profile URL, username, user ID if visible, page ID if visible, and display name.
Chat messages from the beginning, not only the last angry exchange.
Payment instructions given by the scammer.
Receipts, transaction numbers, reference numbers, QR codes, bank account names, e-wallet names, remittance slips, and crypto wallet addresses.
Dates and times, with time zone if you are abroad.
Voice notes, videos, product listings, comment threads, and seller ratings.
Proof that the item, service, investment, job, or booking was not delivered.

For electronic evidence, RA 8792 recognizes electronic documents and electronic data messages, and the Rules on Electronic Evidence apply when electronic documents are offered in evidence. The law focuses on integrity, reliability, authentication, and whether the record can be displayed and examined later. (Supreme Court E-Library)

3. Use a dummy account only for passive public viewing

A dummy account may be useful if the scammer blocked your main account and still has public posts, public marketplace listings, or public contact details visible to others. Keep the activity narrow.

Safer uses include:

Viewing public posts without interacting.
Taking screenshots of public listings.
Checking whether the same phone number, GCash number, bank account, or page name appears in other public posts.
Recording the exact URL of the account, page, group post, or marketplace listing.

Risky uses include:

Befriending the scammer using a fake identity to obtain private information.
Pretending to be a new buyer and sending money to “catch” the scammer.
Offering a fake deal to lure the person to a location.
Asking friends to gang-report, threaten, or harass the account.
Creating fake posts accusing the person before verification.

A controlled buy, entrapment, or coordinated operation should be handled by law enforcement, not by a private victim acting alone.

4. Do not secretly record private calls

Victims often want to call the scammer and secretly record the conversation. Be very careful. Republic Act No. 4200, the Anti-Wiretapping Law, makes it unlawful to secretly overhear, intercept, or record private communications without authorization of all parties, subject to limited lawful exceptions. (Lawphil)

A safer approach is to communicate in writing when possible. Chats, emails, text messages, receipts, and platform messages are easier to preserve and authenticate than secret call recordings.

5. Report the account to the platform, but do not rely on the platform alone

Use the platform’s built-in reporting tools for scam, impersonation, fake business, phishing, hacked account, or fraud. However, platform reporting usually helps remove or restrict the account; it does not necessarily give you the scammer’s real identity.

For example, Meta’s law enforcement materials state that account records are disclosed based on applicable legal requirements, and preservation for official criminal investigations may be requested by law enforcement for a limited period. Meta’s Help Center also states that it may preserve account records for 90 days pending formal legal process in connection with official criminal investigations. (Meta)

This is why the sequence matters:

Preserve your evidence.
Report urgent financial loss to the bank or e-wallet.
File with law enforcement.
Report the account to the platform.
Give investigators the exact account links and reference numbers.

6. File with the right Philippine office

For cyber-enabled scams, the usual agencies are:

Office	Best for	Practical notes
NBI Cybercrime Division / Cybercrime Regional Centers	Online scams, identity theft, fake accounts, account tracing, cyber evidence	NBI’s citizen charter describes complaint forms, sworn statements or affidavits, device examination when relevant, and routing to cybercrime personnel. (National Bureau of Investigation)
PNP Anti-Cybercrime Group	Cybercrime complaints, online fraud, threats, hacking, fake accounts	PNP ACG commonly handles cybercrime reports and coordinates with regional cybercrime units.
CICC / I-ARC Hotline 1326	Fast reporting of online scams and cyber fraud	Government information campaigns identify 1326 as a central anti-scam reporting hotline, with enforcement handled by PNP-ACG and NBI Cybercrime Division. (Philippine Information Agency)
Bank, e-wallet, remittance center, or payment provider	Freezing, holding, disputing, or tracing funds	Report immediately; financial recovery depends heavily on speed.
City or provincial prosecutor	Criminal complaint and preliminary investigation	Often needed when police or NBI investigation is ready for filing.

For large amounts, multiple victims, repeated accounts, senior citizen victims, money mule accounts, or organized activity, give investigators a clean summary showing the pattern.

7. Prepare a complaint packet

A well-organized complaint is easier to evaluate. Bring or prepare:

Valid government ID and contact details.
Printed and digital copies of screenshots.
A chronological narration: what was offered, what was promised, when you paid, what happened after payment.
Chat exports, message links, profile links, and group post links.
Bank, GCash, Maya, remittance, card, or crypto transaction receipts.
Account names, account numbers, mobile numbers, email addresses, QR codes, and reference numbers used by the scammer.
Platform report numbers, bank dispute numbers, telco report numbers, and hotline reference numbers.
Names and contact details of other victims or witnesses, if they consent.
A draft affidavit or sworn statement, if required.

When filing abroad, a Filipino or foreign victim may need notarization, consular acknowledgment, or an apostille depending on where the affidavit is executed and how it will be used in the Philippines. For criminal complaints, agencies may still require personal appearance, video verification, or execution of a sworn statement before an authorized officer.

What Happens After You File a Cyber Scam Complaint?

The process varies, but it commonly follows this path:

Intake and evaluation. The officer checks whether the matter is cybercrime, estafa, financial account scamming, identity theft, threats, libel, harassment, or a civil dispute.
Sworn statement. You execute a complaint-affidavit or sworn statement and submit evidence.
Preservation and tracing requests. Investigators may request preservation or data from platforms, telcos, banks, e-wallets, or couriers through the proper process.
Cybercrime warrant or disclosure process. For private computer data, subscriber data, or account records, investigators may need court authority or a legally recognized process.
Case build-up. Investigators compare the social media account, payment trail, SIM information, financial account, device data, IP records, and other victim reports.
Referral to prosecutor. If there is enough evidence, the complaint may be referred for preliminary investigation.
Preliminary investigation. The respondent may be required to submit a counter-affidavit. The prosecutor decides whether there is probable cause.
Court case. If an Information is filed in court, the case proceeds under criminal procedure.

Timelines vary widely. Initial intake may happen the same day, but platform responses, bank coordination, subpoenas, warrants, and prosecutor review can take weeks or months. Cross-border platforms and foreign-based suspects usually take longer.

Common Mistakes That Hurt Online Scam Cases

Reporting too late

The first 24 to 72 hours can matter, especially for bank and e-wallet transactions. Money may be transferred, withdrawn, converted, or moved through mule accounts quickly.

Reporting before saving evidence

If the platform removes the scammer’s account before you capture the profile URL and conversation, investigators may have less to work with. Always preserve evidence first unless there is an immediate safety threat.

Posting the suspect online

Publicly shaming a suspected scammer can backfire if the name or photo belongs to an innocent person whose identity was stolen. It can also expose you to cyberlibel, privacy complaints, harassment counterclaims, or threats.

Sending a “tracking link” or malware

Do not use IP grabbers, spyware, phishing pages, malicious files, or fake login links. These may violate cybercrime and privacy laws and can make your evidence unusable.

Assuming the e-wallet name is the mastermind

A GCash, Maya, bank, or remittance name may belong to a money mule, identity theft victim, recruited account holder, or compromised account. Treat it as a lead, not final proof.

Losing the chain of evidence

Do not edit screenshots heavily, crop out dates, rename files randomly, or delete original chat threads. Keep originals, backups, and a simple evidence index.

Special Situations for OFWs and Foreigners

Foreigners and Filipinos abroad can still report scams affecting Philippine accounts, Philippine-based victims, Philippine SIMs, Philippine bank or e-wallet accounts, or scammers operating from the Philippines. RA 10175 recognizes jurisdiction when elements are committed in the Philippines, when a computer system wholly or partly situated in the country is used, or when damage is caused to a person in the Philippines. (Human Rights Library)

For foreigners, practical issues include:

Needing a Philippine contact address or representative.
Executing affidavits abroad before a notary, Philippine Embassy/Consulate, or through documents acceptable for Philippine proceedings.
Apostille or authentication requirements depending on the country and document.
Difficulty attending hearings unless represented or allowed by procedure.
Currency conversion and proof of payment from foreign accounts.
Coordination with foreign banks, platforms, or law enforcement if the scam crosses borders.

For OFWs, keep screenshots showing your overseas time zone, remittance records, foreign bank transfer records, and communication with the scammer. These details help explain the timeline.

Frequently Asked Questions

Can I create a dummy Facebook account to monitor the scammer?

You may use a separate account to view publicly available information, but do not impersonate someone else, misrepresent yourself as an authority, obtain private data by deception, harass the person, or bypass privacy settings.

Can the police trace a dummy account in the Philippines?

Yes, in appropriate cases. The PNP Anti-Cybercrime Group or NBI Cybercrime Division may use lawful investigative tools, platform requests, preservation requests, telco data, financial records, and cybercrime warrants to connect an account to a person or device.

Can I ask Facebook or Instagram for the scammer’s IP address?

As a private person, usually no. Platforms generally disclose account records through legal process or law enforcement channels, not direct victim requests. You can give investigators the exact profile URL, username, screenshots, and case details.

Can a SIM-registered number identify the scammer?

It can be a strong lead, but it is not automatic proof. SIM data is confidential and disclosed only under lawful conditions. Also, the SIM may have been registered using fake documents, stolen identity, or a mule arrangement.

What if the scammer used GCash, Maya, or a bank account?

Report immediately to the financial institution and law enforcement. Under AFASA, disputed transactions and financial account scamming have specific rules, and institutions may be involved in coordinated verification or temporary holding of funds when legally warranted. (Supreme Court E-Library)

Is it okay to post the scammer’s photo and name online?

Be careful. If the identity is wrong, stolen, incomplete, or unverified, you may harm an innocent person and expose yourself to legal liability. Give the information to investigators instead of launching a public doxxing campaign.

Are screenshots accepted as evidence in Philippine courts?

Screenshots and electronic records may be used, but they must be properly authenticated and preserved. RA 8792 and the Rules on Electronic Evidence recognize electronic documents, but reliability, integrity, and authentication still matter. (Supreme Court E-Library)

Should I message the scammer from a dummy account to get more proof?

Only passive observation is generally safer. Active messaging can create risks, especially if you misrepresent yourself, provoke threats, offer money, or try to conduct your own entrapment. Let investigators decide whether controlled communication is appropriate.

What if there are many victims of the same dummy account?

Coordinate evidence, but avoid mob harassment. A group complaint or multiple affidavits can help show pattern, intent, common payment channels, and possible economic sabotage or organized activity.

Can I recover my money?

Recovery depends on speed, payment method, whether funds remain in the financial system, and whether the recipient account can be identified or frozen. Report to the bank or e-wallet immediately and file a law enforcement complaint with complete transaction details.

Key Takeaways

A dummy account may be used only for lawful, passive viewing of public information.
Do not hack, phish, impersonate, secretly record private calls, threaten, entrap, or dox a suspected scammer.
Preserve screenshots, profile URLs, chat threads, receipts, account numbers, mobile numbers, and timestamps before the account disappears.
Private account data, SIM registration details, IP logs, and platform records usually require legal process.
Report quickly to your bank or e-wallet, then to NBI Cybercrime, PNP ACG, CICC/I-ARC 1326, or the prosecutor as appropriate.
Treat payment names, profile photos, and phone numbers as leads, not final proof of identity.
A strong complaint packet with organized evidence is often more useful than risky private “tracing.”