Quick answer

If someone is pretending to be you online, take three separate actions:

Preserve the evidence before the account, posts, or messages disappear.
Report the account to the social-media platform for impersonation and removal.
Report the incident to the PNP Anti-Cybercrime Group or NBI Cybercrime Division if your identity was deliberately used without authority, the account contacted or deceived people, money or credentials were involved, or you were threatened, harassed, or harmed.

A platform report can remove an account, but it does not start a criminal investigation. A police or NBI report does not automatically remove the account.

Under the Cybercrime Prevention Act of 2012, computer-related identity theft includes intentionally acquiring, using, misusing, transferring, possessing, altering, or deleting another person’s identifying information without right. A fake profile using your name, photographs, contact details, employer, or other identifying information to pass itself off as you may fall within this offense, depending on the evidence and purpose of the account.

A similar name, anonymous account, obvious parody, or fan account is not automatically identity theft. The actual content, identifying information used, authority or consent, intent, representations made, and resulting harm all matter.

Act immediately if money, safety, or account access is at risk

Do not wait for the platform to finish reviewing your report if:

The account is asking your contacts for money, OTPs, passwords, identification documents, or financial information.
Your real account, email, mobile number, bank account, or e-wallet may have been compromised.
Someone has transferred money or opened an account using your identity.
The account is publishing your address, location, intimate material, or threats.
A child is being groomed, sexually exploited, blackmailed, or portrayed in sexual content.
The impersonator is threatening immediate physical harm.

For an immediate threat to life or safety, call the nationwide emergency hotline 911. For violence or abuse involving a child, assistance is also available through the DSWD MAKABATA Helpline 1383.

If a financial transaction is involved, call the bank or e-wallet provider through the number in its official app, website, or the back of the card. Ask it to secure the account, mark the transaction as disputed, and trace or temporarily hold any remaining funds. Do not rely on a phone number or link sent by the suspected scammer.

Under the Anti-Financial Account Scamming Act and BSP Circular No. 1215, a financial institution may initially hold disputed funds for up to five calendar days, with the total initial and extended holding period not exceeding 30 calendar days. A hold is not automatic and does not guarantee recovery, so reporting immediately is critical.

Preserve evidence before requesting removal

If it is safe to do so, preserve the account and its activity before blocking it or requesting takedown. Electronic evidence may have to be authenticated later; a few cropped screenshots may not be enough.

Save the following:

The full profile URL, username, display name, and account or user ID if visible.
Full-page screenshots of the profile, biography, photographs, followers, posts, comments, and timestamps.
A screen recording showing how you opened the platform, navigated to the profile, and viewed the relevant posts or messages.
Direct messages, chat requests, voice messages, call logs, emails, and notification emails.
The URLs of individual posts, videos, stories, or advertisements.
Names and statements of people who received messages from the fake account.
Payment requests, QR codes, bank or e-wallet details, transaction references, receipts, and merchant information.
Copies of the photographs, documents, or personal details that were copied.
Evidence showing which account is genuinely yours, including older posts or account records.
Every platform report, confirmation email, reference number, and response.
A chronological note of when you discovered the account and what happened afterward.

Keep the original files. Do not crop, annotate, rename, or repeatedly resave your only copy. Store a backup in a separate device or secure cloud folder. Record the date, time, and Philippine time zone when each item was captured.

The Rules on Electronic Evidence recognize electronic documents, but the party presenting them must establish their authenticity, integrity, and reliability. Preserving the original context, URLs, metadata, and the testimony of people who personally saw the account can therefore be important.

Do not hack the account, guess its password, install tracking software, secretly access another person’s device, or pose as a victim to obtain private information. Give investigators the evidence you obtained lawfully.

Secure your real accounts and identity

A fake profile may have been created from public information, but it can also be a sign that an account or device was compromised.

Take these precautions:

Change the password of the email account connected to your social-media accounts.
Change reused passwords on social media, banking, shopping, and cloud-storage accounts.
Use unique passwords and enable multi-factor authentication.
Review active sessions, logged-in devices, recovery addresses, forwarding rules, and connected applications.
Remove unfamiliar devices or third-party applications.
Check whether your mobile number suddenly lost service. If it did, contact the telco immediately about possible SIM replacement or takeover.
Review bank, credit-card, and e-wallet activity.
Tell close contacts that an impersonator is operating. Give them the exact fake username and ask them not to send money, codes, or documents.
If government identification was exposed, contact the issuing agency about protective steps or replacement.

When warning others publicly, do not repost unredacted identification documents, financial details, intimate images, or other sensitive evidence.

Report the account to the platform

Use the platform’s dedicated impersonation route, not only its general “spam” option:

Select “pretending to be me” or the closest equivalent. Identify your genuine account and provide only the identification the official platform form requires. Check the domain carefully before uploading an ID.

Also report specific posts, advertisements, messages, or images if they independently involve fraud, threats, private information, harassment, or intimate content. Save the report confirmation and reference number.

Do not assume that takedown means the platform will permanently retain the evidence. Once the account is removed, information needed to identify its operator may become harder to obtain.

Report to the PNP or NBI

Republic Act No. 10175 designates the Philippine National Police and National Bureau of Investigation as the principal law-enforcement authorities for cybercrime cases.

You may:

Go to the nearest PNP Anti-Cybercrime Group regional or provincial cybercrime unit.
Ask the nearest police station to document the incident and refer you to the appropriate cybercrime unit.
Visit the NBI Cybercrime Division or an NBI regional or district office.
Submit an initial report through the NBI’s official Online Complaint page.
Contact the NBI Cybercrime Division through the current address published in the NBI Divisions and Services directory.

The NBI’s published service charter states that investigative assistance for computer-crime victims is available to the general public without a service fee. An online submission may still be followed by a request to appear, execute a sworn complaint-affidavit, identify evidence, or provide original files.

For scam-related incidents, you may additionally report through the DICT–CICC National Anti-Scam Hotline 1326 or 1326@dict.gov.ph. This does not replace any sworn statement or evidence requested by the investigating agency.

A barangay or police blotter can help establish when you reported an incident, but it is not necessarily the complete cybercrime complaint or evidence package needed for investigation and prosecution.

What to put in your complaint

Prepare a clear chronological account containing:

Your complete name and reliable contact information.
The fake account’s platform, username, display name, and full URL.
The date and time you first discovered it.
The specific information taken from you.
A direct statement that you did not create or authorize the account or its activity.
What the account claimed, posted, or sent to other people.
Names and contact details of witnesses or message recipients.
Any suspected operator and the factual basis for that suspicion.
The harm caused, such as financial loss, damaged relationships, threats, lost business, or account compromise.
Steps already taken with the platform, bank, telco, employer, or other organization.
A numbered list of attachments and electronic files.

Separate facts you personally know from information others gave you. Do not identify a suspect publicly or under oath based only on a hunch, writing style, mutual friend, or profile photograph.

Bring or keep ready a valid government ID, the device containing the original evidence, printed copies if requested, and copies of relevant transaction records. Ask for the complaint, incident, or case reference number and the investigator’s official contact details.

Ask promptly about preservation of platform data

Subscriber, login, traffic, and content data are generally held by the platform or service provider, not visible to the victim. The victim normally cannot compel disclosure of the account operator’s IP address, registration details, or private communications. Investigators must use the procedures and, where required, court warrants under Philippine law.

Tell the investigator if the account is active, being deleted, or likely to disappear. Ask whether a preservation request or order should immediately be sent to the platform.

Section 13 of Republic Act No. 10175 requires preservation of traffic data and subscriber information for a minimum of six months from the transaction. Content data is preserved for six months from receipt of a law-enforcement preservation order, subject to a possible one-time six-month extension. These rules are not a promise that every foreign platform possesses every requested record. Reporting early gives investigators a better chance to preserve what remains.

There is no single 24-hour or 72-hour deadline imposed on an ordinary victim for reporting a fake social-media account. The Act’s 72-hour period concerns a service provider’s compliance with a lawful disclosure order—not the victim’s filing deadline.

When the National Privacy Commission may help

The Data Privacy Act of 2012 may apply when personal or sensitive personal information is processed without a lawful basis, used for an unauthorized purpose, unlawfully accessed, or maliciously disclosed.

The National Privacy Commission is not a general police or social-media takedown service. Its jurisdiction depends on the respondent, the processing involved, statutory exclusions, and the particular privacy violation. For example, the Act’s treatment of information handled solely in an individual’s personal, family, or household affairs can affect coverage.

Under the 2021 NPC Rules of Procedure, as amended, a complainant ordinarily must first notify the personal information controller, processor, or concerned entity in writing and give it an opportunity to act. If it does not take timely and appropriate action or does not respond within 15 calendar days, the complaint may be filed with the NPC. The NPC may waive this requirement for good cause or serious violations, including circumstances involving grave and irreparable harm or the absence of an adequate remedy.

Keep the platform report and its response as proof of written notice. If the operator is unknown or contacting the person would be dangerous, explain that clearly rather than approaching the impersonator.

The NPC currently requires a verified complaint or completed and notarized complaint-affidavit, supporting evidence, witness affidavits if any, relevant correspondence, and the required certification against forum shopping. Its current complaint-affidavit form includes Filipino guidance.

The filing fee is presently ₱500, subject to exemptions or waiver for qualifying indigent complainants and other grounds allowed by the NPC rules. The complaint may be submitted personally, by registered mail, courier, or authorized electronic filing. The NPC’s filing guidance presently directs emailed complaint forms to complaints@privacy.gov.ph.

An NPC complaint may proceed separately from a platform report or criminal investigation, but disclose any other case involving the same issues as required by the form and rules.

Other laws may apply

The correct offense depends on what the fake account actually did:

Illegal access: If the offender entered or took over your real account without authority, Section 4(a)(1) of Republic Act No. 10175 may apply.
Computer-related identity theft: Intentional, unauthorized acquisition or use of your identifying information may fall under Section 4(b)(3). The Supreme Court upheld this provision in Disini v. Secretary of Justice.
Financial-account scamming: Using another person’s identity or documents to open a financial account, operate a money-mule account, or obtain financial credentials through deception may fall under the Anti-Financial Account Scamming Act.
Fraud or estafa: A fake account used to obtain money or property through deceit may support additional charges, depending on proof of deceit, reliance, and damage.
Gender-based online sexual harassment: The Safe Spaces Act expressly covers certain online acts including impersonating a victim’s identity, cyberstalking, sexual threats, and posting lies to harm a victim’s reputation when committed in the gender-based sexual-harassment context.
Cyberlibel, threats, or coercion: Defamatory accusations, threats, or coercive demands may constitute separate offenses, but not every insult, criticism, or false statement satisfies their legal elements.
Intimate or sexual material: Nonconsensual publication of qualifying intimate recordings may implicate the Anti-Photo and Video Voyeurism Act. Sexual exploitation or sexual material involving a child requires urgent handling under child-protection and anti-OSAEC laws.

For computer-related identity theft under Section 4(b)(3), Section 8 of Republic Act No. 10175 provides prision mayor, a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. If no damage has yet been caused, the law provides for a penalty one degree lower. Only a court can determine guilt and impose a penalty.

Common mistakes to avoid

Reporting the account before saving its URLs, messages, and content.
Saving only cropped screenshots with no username, date, or surrounding context.
Assuming mass-reporting by friends replaces a report from the person being impersonated.
Uploading identification documents to links sent through direct messages.
Paying someone who claims they can reveal the account’s IP address or guarantee takedown.
Publicly accusing a suspected person without reliable evidence.
Threatening, baiting, or impersonating the offender.
Deleting the original conversation after forwarding screenshots.
Resetting or wiping a compromised device before investigators or a qualified technician can assess it.
Waiting for a platform decision while stolen funds are moving.
Assuming that a removed account can no longer be investigated.
Filing identical complaints with several investigators without disclosing the earlier reports.

Frequently asked questions

Can I report a fake account even if no money was lost?

Yes. Financial loss is not required before you report impersonation to the platform or seek investigative assistance. Under Section 4(b)(3), the absence of damage affects the statutory penalty, but it does not mean the conduct should be ignored.

Can a friend report an account impersonating me?

A friend can flag the account from the profile, but platforms may require the person being impersonated—or an authorized representative—to complete the formal impersonation form and verify identity.

Will the PNP or NBI immediately reveal who owns the account?

Usually not. Display names and photographs do not establish who operated an account. Identifying the operator may require preserved subscriber or login records, financial tracing, device examination, witness evidence, and lawful requests to service providers.

Should I message the fake account and demand that it stop?

Only if doing so is safe and strategically sensible. Do not make contact if there are threats, stalking, blackmail, sexual material, or a risk that the operator will destroy evidence. Preserve the evidence and consult the investigator.

Is using my photograph automatically identity theft?

Not necessarily. Context matters, including how the photograph and other identifiers were obtained, whether their use was authorized, whether the account pretended to be you, and what the operator intended or did. The same use may also raise privacy, copyright, harassment, or platform-policy issues.

Can I recover money from the impersonator?

Possibly, but recovery is not guaranteed. Notify the bank or e-wallet immediately so remaining funds can be traced or held under applicable rules. Keep transaction records and file the required law-enforcement report. Restitution or civil recovery will depend on tracing the funds, identifying responsible persons, and the evidence.

What if the platform is based outside the Philippines?

Philippine jurisdiction may still exist when an element occurred here, a Philippine computer system was involved, or the offense caused damage to a person in the Philippines. Obtaining overseas platform records may require formal cooperation and can take time.

Do I need a lawyer?

You may initially report to the platform, bank, PNP, or NBI without one. Seek legal help promptly if there is substantial financial loss, an identified suspect, intimate material, threats, repeated stalking, business or professional damage, a child victim, a rejected complaint, or a need for urgent court relief.

This article provides general Philippine legal information, not legal advice for a particular case. Outcomes depend on the evidence, documents, parties, and exact conduct involved. Laws, procedures, forms, and official channels were checked against primary and official sources on 3 August 2026.