Quick answer

If someone is using your name, photograph, personal details, or business identity through a fake social media account, preserve the evidence first, report the account through the platform’s impersonation process, secure your real accounts, and file a complaint with the Philippine National Police Anti-Cybercrime Group (PNP-ACG) or the National Bureau of Investigation Cybercrime Division (NBI-CCD) when the account is being used to deceive, threaten, harass, defame, solicit money, or misuse personal information.

Call the Cybercrime Investigation and Coordinating Center’s 1326 hotline for cybercrime reporting assistance and referral. If money or a financial account is involved, contact the bank, card issuer, or e-wallet immediately before completing the other steps. If there is an immediate threat to life or safety, call 911 or go to the nearest police station.

A fake account may amount to computer-related identity theft, but not every similar name, fan page, parody account, or anonymous profile automatically establishes a crime. Authorization, intent, the information used, the account’s presentation, and what the operator did must all be examined.

What Philippine law treats as identity theft

Section 4(b)(3) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, defines computer-related identity theft as the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion—without right—of identifying information belonging to another natural or juridical person.

This can cover an account that deliberately uses another person’s identifying information without authority. Relevant information may include a name, photograph, contact details, credentials, account information, or other data capable of identifying a person or organization. Whether a particular account satisfies every element of the offense depends on the evidence.

Proof of financial loss is not always required. The law expressly provides for a penalty one degree lower if no damage has yet been caused. For violations under Section 4(b), the ordinary statutory penalty is prision mayor or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. A court—not the complainant, platform, or investigating officer—determines guilt and the proper penalty.

Depending on what the fake account does, other laws may also become relevant:

Fraud or forged digital material. Computer-related fraud or computer-related forgery may apply when false or altered data is used to obtain money, create inauthentic records, or carry out a dishonest scheme.
Defamation. Defamatory posts may raise cyber libel issues. In Causing v. People, the Supreme Court held that cyber libel is the Revised Penal Code offense of libel committed through a computer system and is subject to the one-year prescriptive period for libel. Anyone considering a cyber libel complaint should obtain legal advice promptly because discovery and prescription can become contested issues.
Gender-based online sexual harassment. Section 12 of the Safe Spaces Act, Republic Act No. 11313, expressly covers certain gender-based online conduct, including impersonating a victim online, cyberstalking, incessant messaging, threats, unauthorized sharing of photos or information, and posting lies to harm a victim’s reputation. The conduct must fall within the law’s gender-based online sexual-harassment framework; ordinary impersonation alone is not automatically covered.
Nonconsensual intimate images. Creating a fake account to publish or distribute intimate photographs or recordings may implicate the Anti-Photo and Video Voyeurism Act and, where children are involved, child-protection laws. Do not download, forward, or publicly repost suspected child sexual-abuse material.
Financial-account scams. When stolen personal or financial information is used to access accounts or move money, the Anti-Financial Account Scamming Act, Republic Act No. 12010, access-device laws, fraud laws, and BSP regulations may apply.
Unauthorized access. If the offender took over your real account rather than merely creating a copy, illegal access and related cybercrime offenses may also be involved.

A clearly labeled parody, fan, commentary, or fictional account is not automatically identity theft merely because it discusses or depicts another person. The central questions include whether identifying information was used without right, whether the account was designed to pass as the real person or organization, and whether it was used for an unlawful purpose.

What to do immediately

1. Address danger and financial loss first

Call 911 or go to the nearest police station if the account operator is making credible threats, publishing your home location, stalking you, threatening a child, or indicating an imminent physical attack.

If an unauthorized transfer, card transaction, loan, or e-wallet transaction has occurred:

Call the institution through the number in its official app, website, card, or statement—not a number supplied by the suspected scammer.
Ask it to secure the account, mark the transaction as disputed, and begin its fraud process.
Request a case or reference number and written confirmation.
Preserve transaction IDs, recipient-account details, alerts, statements, and your communications with the institution.

Under the BSP’s current Anti-Financial Account Scamming Act framework, supervised institutions have procedures for tracing and temporarily holding disputed funds when the legal and regulatory conditions are met. The initial holding period can be up to five calendar days and may be extended, subject to the rules, for a total temporary holding period of up to 30 calendar days. A report does not guarantee that funds remain available or will be returned, which is why immediate reporting matters. See the BSP’s AFASA law-and-regulations booklet.

2. Preserve evidence before blocking or reporting the account

Content can be edited, renamed, hidden, or deleted after a report. Before taking it down, collect:

The complete profile URL, username, display name, and any visible account or page ID.
Screenshots of the full profile, including the profile photograph, biography, follower information, and date and time displayed on your device.
Screenshots and URLs of each relevant post, story, reel, advertisement, group post, comment, or marketplace listing.
The full conversation, not only the most offensive message. Include timestamps and account details.
A screen recording showing how you navigated from the profile to the posts or messages.
Emails in their original form, including headers where available.
Call logs, SMS messages, payment requests, QR codes, receipts, transaction IDs, recipient names, and account numbers.
Messages from people who were contacted or deceived by the impostor.
Copies of platform reports, acknowledgment emails, ticket numbers, and decisions.
A short chronology stating when you discovered the account, what happened, who witnessed it, and what losses or risks followed.

Keep original files. Avoid cropping, annotating, compressing, or repeatedly forwarding the only copy. Store a backup and retain the device on which the material was received. Record the date, time, and time zone when you captured it.

Screenshots can be useful, but they do not automatically prove who operated an account or that every displayed item is authentic. Electronic evidence must still satisfy admissibility and authentication requirements under the Supreme Court’s Rules on Electronic Evidence. Preserving context and originals makes later authentication easier.

3. Report the profile and the specific content to the platform

Report both the account and any harmful posts, messages, advertisements, or listings. Select “impersonation,” “pretending to be someone,” “fraud,” or the closest available category.

Official reporting pages include:

Some platforms accept impersonation reports even if you do not have an account. They may request identification or proof that you represent the person, business, or organization being impersonated. Submit identification only through the platform’s official app, help center, or secure form. Do not send an unredacted ID to the suspected impostor or post it publicly.

State the issue precisely: identify the genuine account, explain that you did not authorize the other account, list the copied details, and describe any fraud, threats, or solicitations. Save the submission receipt.

4. Secure your real accounts and communication channels

Using a trusted device:

Change the password of your email first, then your social media, financial, and cloud accounts.
Use a different, strong password for each account.
Enable multi-factor authentication or a passkey where available.
Review logged-in devices and active sessions; sign out unfamiliar ones.
Check recovery email addresses, telephone numbers, forwarding rules, linked apps, and authorized administrators.
Ask your mobile provider to investigate unexpected loss of signal or a suspected SIM-swap.
Check bank, card, e-wallet, shopping, and lending accounts for unauthorized activity.
Warn close contacts through a channel the impostor does not control.

A public warning can help, but keep it factual. Publish the fake account’s URL or username if necessary, state that it is unauthorized, and tell people not to transact with it. Avoid accusing a named person unless you have reliable evidence; the account’s operator may not be who you suspect.

Where to file a Philippine cybercrime complaint

PNP Anti-Cybercrime Group

The PNP and NBI are the law-enforcement authorities designated by Section 10 of Republic Act No. 10175 to investigate cybercrime. You may approach the PNP Anti-Cybercrime Group, a Regional Anti-Cybercrime Unit, or the nearest police station for referral.

Bring your evidence, chronology, real account details, and the device containing the messages if investigators request to examine it. Ask for the complaint or docket reference number and the investigator’s official contact information.

NBI Cybercrime Division

The NBI online complaint page can be used for initial reporting. A complainant may also proceed to the NBI Cybercrime Division or an appropriate regional cybercrime center.

The NBI’s current Citizen’s Charter for computer-crime assistance states that the public may file a complaint or request an investigation without an agency fee. The process may include a preliminary interview, a sworn complaint sheet or affidavit, witness statements, submission of supporting records, and examination of a relevant device.

CICC cybercrime assistance

Call the Cybercrime Investigation and Coordinating Center at 1326 or use the CICC reporting page for assistance and referral. CICC coordinates cybercrime response; a formal criminal investigation will ordinarily involve the PNP or NBI.

What to include in the complaint

Prepare a clear, chronological statement covering:

Your identity and relationship to the genuine name, photograph, account, or organization.
When and how you discovered the fake account.
Every known username, URL, account ID, telephone number, email address, payment account, and linked profile.
The identifying information copied or misused.
What the operator represented, requested, threatened, published, or obtained.
The identities of people contacted or deceived.
Financial loss, reputational harm, safety risk, or other damage.
Actions already taken with the platform, bank, employer, school, or other organization.
A list of attached evidence.

You may file even if you do not know the operator’s real name. Do not guess. Identify the account as an unknown person and provide all available digital identifiers and facts that may help trace it.

Why prompt reporting matters

A victim normally cannot compel a platform to disclose subscriber information. Investigators may seek preservation and appropriate court-authorized disclosure under Republic Act No. 10175 and the Supreme Court’s cybercrime-warrant rules.

Section 13 of the Cybercrime Prevention Act requires service providers to preserve traffic data and subscriber information for at least six months from the transaction. Content data is preserved for six months from receipt of a law-enforcement preservation order, with a possible one-time extension. Disclosure of protected subscriber, traffic, or content data generally requires lawful process.

Do not treat six months as a safe waiting period. Platforms have different systems and retention practices, and a particular record may disappear earlier for other reasons. Prescription also depends on the suspected offense, its penalty, discovery, and procedural events. Cyber libel, in particular, has a short one-year prescriptive period. Report promptly and obtain advice about any filing deadline relevant to your facts.

When to consider a National Privacy Commission complaint

The Data Privacy Act of 2012, Republic Act No. 10173, may apply when a person, platform, organization, or other entity unlawfully processes personal data. An NPC complaint is distinct from a criminal complaint and is not a substitute for reporting immediate fraud, threats, or cybercrime to law enforcement.

Under the 2021 NPC Rules of Procedure, as amended, a complainant ordinarily must first:

Inform the personal information controller, processor, or concerned entity of the privacy violation in writing.
Give it an opportunity to act.
Show that it failed to take timely and appropriate action or did not respond within 15 calendar days after receiving the notice.

The NPC may waive these requirements for good cause or a serious violation, including circumstances involving grave and irreparable harm, lack of an adequate remedy, or patently illegal action.

A formal complaint must comply with the NPC’s requirements, including verification, supporting evidence, relevant correspondence, and a certification against forum shopping. It generally must be notarized. The NPC’s formal-complaint page provides the current form, submission methods, and fee information.

Save the platform-report ticket and any written privacy or takedown request. These records may help establish that you first gave the concerned entity an opportunity to address the problem.

Common mistakes to avoid

Reporting the account before preserving its URL, messages, posts, and payment details.
Keeping only cropped screenshots with no username, date, or context.
Deleting conversations or resetting the device containing the evidence.
Publicly confronting the operator and giving them time to erase records.
Paying the impostor or agreeing to an improvised entrapment without police direction.
Trying to hack, track, or access the fake account yourself.
Sending IDs, passwords, OTPs, or banking credentials through unofficial links.
Assuming the profile photograph identifies the operator; it may also be stolen.
Mass-reporting with false categories or asking others to submit invented facts.
Posting an unverified accusation against a suspected person.
Assuming a platform takedown automatically starts a criminal case.
Assuming a police blotter alone completes the complaint, investigation, or prosecutor’s process.
Waiting for a platform decision while fraud, threats, or financial transfers continue.

When legal help is urgent

Consult a lawyer or the Public Attorney’s Office promptly when:

The account is publishing threats, addresses, intimate material, or information about a child.
Money, loans, contracts, government records, or financial accounts were opened or used in your name.
You are considering a cyber libel complaint and the one-year period may be running.
The suspected operator is a spouse, former spouse, dating partner, employer, school official, public officer, or someone with continuing access to you.
A platform or organization refuses to preserve or remove high-risk personal data.
Investigators request extensive access to a device containing privileged, confidential, or unrelated information.
You need a protection order, injunction, damages, or another court remedy.
You receive a subpoena, prosecutor’s notice, counter-complaint, or demand letter.

Frequently asked questions

Is every fake profile a criminal case?

No. A fake or duplicate profile may violate platform rules without satisfying every element of a Philippine criminal offense. Criminal liability depends on intent, lack of authority, the identifying information used, the account’s presentation, and its actual conduct.

Can I report an account if I do not know who created it?

Yes. Submit the username, URL, account ID, messages, linked payment details, and other identifiers. Law enforcement can evaluate whether lawful preservation and disclosure processes are justified.

Are screenshots enough?

They are useful but may not be sufficient by themselves. Preserve original messages, URLs, files, devices, timestamps, report receipts, and witnesses. The prosecution must still authenticate electronic evidence and connect the account to the accused.

Should I block the account immediately?

Preserve the evidence first unless viewing or remaining connected places you in danger. After preservation and reporting, blocking can reduce further contact, but it does not remove the account or preserve platform records.

Can I ask friends to report it?

Yes, if they report truthfully. The person being impersonated should still submit the platform’s formal impersonation report because platforms may require proof of identity or authority.

What if the account disappears?

Keep your saved evidence and file the complaint. Deletion does not necessarily erase all provider records, but recovery or disclosure will depend on retention and lawful process.

Do I need to pay to file with the PNP or NBI?

The NBI Citizen’s Charter lists no agency fee for its computer-crime investigative-assistance process. Platform reports are also free. Separate costs may arise for notarization, copies, legal representation, or proceedings before another agency.

Can the platform give me the operator’s identity?

Usually not simply upon request. Subscriber and account data are subject to privacy, platform rules, and legal process. Investigators may seek preservation and court-authorized disclosure when the requirements are met.

What if my bank or e-wallet does not resolve the complaint?

Use the institution’s formal Financial Consumer Protection Assistance Mechanism first. If the matter remains unresolved or the institution does not act, escalate it through the BSP’s Consumer Assistance Mechanism and BSP Online Buddy. Do not send passwords, PINs, OTPs, or complete card credentials to the BSP.

This article provides general Philippine legal information, not legal advice or a prediction of any case outcome. The proper complaint, deadline, offense, and remedy depend on the evidence and surrounding facts. Laws, procedures, and official reporting channels were checked against official sources as of 3 August 2026.