Quick answer
If someone creates a fake social media account using your identity, report the account to the platform and preserve the evidence before the account disappears. If the person intentionally acquired, used, misused, possessed, transferred, altered, or deleted identifying information belonging to you without right, the conduct may constitute computer-related identity theft under Section 4(b)(3) of Republic Act No. 10175, the Cybercrime Prevention Act of 2012. The Supreme Court has upheld this offense as constitutional. (Lawphil)
A platform report is not the same as a criminal complaint. For investigation and possible prosecution, you may report the incident to the PNP Anti-Cybercrime Group (PNP-ACG) or the NBI Cybercrime Division (NBI-CCD). The DOJ Office of Cybercrime may also act on cybercrime complaints and referrals and coordinate preservation and production of electronic evidence. (PNP ACG)
Act promptly. A fake account can be deleted, renamed, transferred, or stripped of content, while important subscriber and traffic data are held by service providers for limited periods. Philippine cybercrime law provides mechanisms for preservation and court-authorized disclosure of computer data, but these ordinarily operate through law-enforcement authorities rather than through a private victim personally demanding the records. (Lawphil)
When does a fake account become identity theft?
Not every false, anonymous, parody, fan, or pseudonymous account automatically constitutes the crime of identity theft. The legal question is what information was taken or used, whether it belonged to another person or entity, whether the use was intentional, and whether it was done without right.
Under the implementing rules of R.A. No. 10175, “identifying information” includes a name or number that can identify a specific individual, including names, dates of birth, government identification numbers, unique biometric data, electronic identification numbers, addresses, routing codes, telecommunications identifying information, and access devices. “Without right” generally refers to conduct undertaken without or beyond authority and without a recognized legal justification or defense. (Cybercrime Division)
Accordingly, an account that merely uses a fictional name is different from an account deliberately designed to make other people believe that it is you. A cloned profile using your name, identifying details, photographs, workplace information, contact details, or other account identifiers—particularly when accompanied by messages, solicitations, transactions, or representations made in your name—can provide evidence supporting an identity-theft complaint. The precise criminal liability still depends on the evidence and the circumstances of the particular account.
Section 4(b)(3) expressly states that computer-related identity theft may exist even if no damage has yet been caused, although the law provides for a lower penalty in that situation. For computer-related offenses under Section 4(b), Section 8 generally provides prision mayor, or a fine of at least ₱200,000 up to an amount commensurate with the damage incurred, or both, subject to the particular statutory rules applicable to the offense. (Lawphil)
What to do as soon as you discover the fake account
Preserve the account before reporting or blocking it. Take screenshots and, where possible, screen recordings showing the entire profile, username, display name, profile photograph, biography, posts, comments, messages, follower or friend information relevant to the incident, and the date and time you viewed them. Copy the exact profile URL and the URLs of important individual posts. Preserve messages in their original application and retain emails, SMS messages, transaction notifications, and security alerts. If the username later changes, the original URL or account identifier may become especially important.
Document exactly how the account is impersonating you. Save evidence showing the genuine information from which the impersonator appears to have copied your identity. This may include your legitimate social media profile, website, business page, public biography, photographs, or messages sent by friends asking whether the fake account is yours. If the impersonator contacted third parties, ask those recipients to preserve the entire conversation rather than sending only cropped excerpts.
Secure your real accounts. If there is any possibility that your actual account was accessed, change its password, secure the associated email account, enable multi-factor authentication, review active sessions and recovery information, and sign out unfamiliar devices. Do not delete security-alert emails or login notifications. DOJ guidance specifically recommends account-recovery and two-factor-authentication measures when Facebook accounts have been unlawfully accessed. (Cybercrime Division)
Report the impersonating account to the social media platform. Use the platform's impersonation or fake-account reporting function after preserving the evidence. Facebook, for example, permits reporting profiles or Pages that pretend to be another person, including reports by persons who do not themselves have a Facebook account. TikTok likewise provides a specific process for impersonation accounts. (Facebook)
File a cybercrime report if criminal conduct may be involved. R.A. No. 10175 designates the NBI and PNP as the principal law-enforcement authorities responsible for cybercrime enforcement. The NBI's current Citizen's Charter states that members of the public may proceed to its Cybercrime Division to file a complaint or request for investigation; the complainant is interviewed and assisted in completing a sworn complaint sheet. The PNP-ACG maintains national and regional cybercrime units and publishes current contact details on its official website. (Lawphil)
Tell investigators immediately if platform records may disappear. Service-provider records can be crucial where the perpetrator's true identity is unknown. Under R.A. No. 10175 and its implementing rules, competent authorities can issue preservation orders, while disclosure of subscriber information, traffic data, or other relevant data requires the applicable judicial authorization. The law generally requires preservation of traffic data and subscriber information for at least six months from the transaction and allows preservation mechanisms relating to content data and ongoing cases. (Lawphil)
If money or financial accounts are involved, act separately on the financial side. Immediately notify the bank, e-wallet, card issuer, or other financial institution if the fake account induced transfers, obtained credentials, or compromised an account. The Cybercrime Investigation and Coordinating Center also operates the government 1326 cybercrime/scam reporting hotline and publishes additional reporting channels. (CICC)
What evidence should you preserve?
Good evidence allows investigators to reconstruct what happened even after the fake account has been removed.
Preserve the full context, not merely the most offensive screenshot. The most useful material ordinarily includes the profile URL; username and previous usernames if known; dates and approximate times; screenshots showing the browser address or application interface; complete conversations; voice notes, videos, photographs, and attachments; email notifications from the platform; phone numbers and email addresses used by the impersonator; QR codes or payment instructions; bank or e-wallet transaction references; advertisements or posts made through the account; names and contact details of people who communicated with the fake account; and proof identifying your genuine account.
Whenever possible, retain the original files on the device where they were received. Avoid repeatedly editing, cropping, annotating, or converting the only copy of important digital evidence. The Cybercrime Prevention Act's implementing rules recognize digital evidence and forensic methods intended to maintain the integrity of electronic information. (Cybercrime Division)
If your phone, computer, email, or real social media account was also hacked, do not immediately factory-reset the affected device merely to “clean” it. Secure the account first and consult the investigating cybercrime unit if the device itself may contain evidence.
Can the authorities identify an anonymous fake account?
Potentially, yes, but a profile's displayed name alone is rarely enough.
An investigation may require subscriber information, traffic data, IP-related information, records from telecommunications or internet providers, payment information, account-recovery details, or data held by a social media platform. Some of this information cannot lawfully be obtained simply because a private complainant asks for it.
R.A. No. 10175 provides procedures for preservation and disclosure of computer data. Disclosure of subscriber information, traffic data, or relevant data for an officially docketed investigation generally requires a court warrant. The Supreme Court's Rule on Cybercrime Warrants provides the procedural framework for obtaining electronic evidence through specialized warrants. (Lawphil)
This is an important reason to report serious impersonation promptly even when you do not know the perpetrator's real name. The investigation can begin from the digital account and other available evidence.
What if the fake account has already been deleted?
Deletion does not necessarily end the case.
Preserve whatever remains: screenshots, profile links, messages received by you or other people, platform emails, notifications, transaction records, witness statements, cached information legitimately available to you, and records showing when the account existed.
Report the incident promptly and tell investigators that the account has been deleted. Service-provider records may still exist and may potentially be preserved or obtained through the procedures provided by law. Do not assume, however, that every deleted account can later be reconstructed; retention practices and the availability of particular records depend on the provider, the type of data, the passage of time, and the applicable legal process. (Lawphil)
Other crimes may apply depending on what the fake account did
Identity theft is frequently only one part of the incident.
If the account obtained money through deceit, investigators may examine fraud or other property offenses. If someone unlawfully entered your genuine account, illegal access under R.A. No. 10175 may be relevant. If falsified electronic data was produced or used for a fraudulent or dishonest purpose, computer-related forgery may be considered. Defamatory online publications may raise cyberlibel issues, subject to the statutory elements and Supreme Court jurisprudence. Threats, extortion, sexual harassment, unauthorized intimate-image distribution, child exploitation, or offenses committed using financial accounts may also fall under other statutes depending on the facts. (Lawphil)
Do not assume that every unpleasant act committed by a fake profile automatically establishes all of these offenses. Each offense has separate elements that must be supported by admissible evidence.
Can you complain to the National Privacy Commission?
Possibly, but an NPC complaint serves a different function from a PNP or NBI criminal investigation.
The National Privacy Commission has authority over violations of the Data Privacy Act and other matters affecting personal data. A person whose own personal information has allegedly been unlawfully processed or whose data-privacy rights have been violated may file a complaint when the DPA and the NPC's jurisdiction apply. (National Privacy Commission)
Under the NPC's current complaint procedure, the complainant generally must first notify the personal information controller, personal information processor, or concerned entity in writing and give it an opportunity to address the privacy concern. If it fails to take timely or appropriate action, or does not respond within 15 calendar days, the exhaustion requirement may be satisfied. The NPC rules recognize circumstances in which failure to first approach the respondent may be justified. (National Privacy Commission)
A formal NPC complaint uses the Commission's complaint-assisted form or a verified complaint and must be supported by evidence. The NPC announced a new Complaint-Affidavit template effective July 1, 2025, so complainants should obtain the current form directly from the NPC website rather than relying on an old downloaded copy. (National Privacy Commission)
An NPC complaint should not be treated as a substitute for reporting suspected computer-related identity theft to the PNP or NBI.
Can you seek damages or other civil relief?
Depending on the facts, civil remedies may exist in addition to criminal proceedings.
Articles 19, 20, and 21 of the Civil Code recognize liability for wrongful conduct causing injury, while Article 26 protects a person's dignity, personality, privacy, and peace of mind and expressly recognizes actions for damages, prevention, and other relief for certain invasions of those interests. Whether damages, an injunction, or another remedy is appropriate depends on the conduct, proof of injury, identity of the defendant, and procedural circumstances. (Lawphil)
If the impersonation is continuing and causing serious professional, financial, reputational, or personal harm, legal advice may be useful before deciding whether to pursue criminal, civil, privacy, or combined remedies.
Common mistakes that can weaken a complaint
Reporting first and preserving later. Platforms can remove accounts quickly. Save the evidence before pressing the report button when it is safe to do so.
Saving only the profile photograph. Investigators need context. Preserve URLs, usernames, posts, conversations, dates, account identifiers, and evidence of what the impersonator actually did.
Deleting conversations after blocking the account. Blocking may be sensible for safety, but preserve the messages first.
Confronting the impersonator and warning that police are coming. This can prompt deletion of evidence, disposal of devices, or further harassment. If an investigation is warranted, ask the investigating officer before attempting contact.
Trying to obtain the suspect's password or hack the account yourself. Unauthorized access may itself be unlawful. Preserve evidence and use lawful investigative channels instead.
Publicly naming a suspected perpetrator without reliable evidence. The visible account may not reveal the person actually controlling it. Public accusations can create additional legal problems.
Assuming that a platform takedown means the criminal case is finished. Removal stops or reduces the public harm; it does not necessarily determine who committed the offense or whether criminal liability exists.
When help is urgent
Seek immediate law-enforcement assistance when the impersonator is threatening physical harm, stalking you, demanding money, blackmailing you, contacting your family or employer with threats, using your identity to obtain loans or financial accounts, accessing your actual accounts, publishing intimate material, targeting a child, or actively deceiving other people into sending money.
If unauthorized financial transactions are occurring, contact the relevant financial institution immediately in addition to reporting the cybercrime. If a genuine social media or email account has been compromised, secure it at once while retaining the security notifications and other evidence.
Frequently asked questions
Can I report a fake Facebook account even if I do not know who created it?
Yes. Lack of a known real-world identity does not prevent you from preserving the account and reporting the incident. The purpose of a cybercrime investigation may include identifying the person controlling the account. Facebook also allows impersonation reports even from persons who do not themselves have a Facebook account. (Facebook)
Is using my name online automatically identity theft?
Not necessarily. Criminal liability depends on the statutory elements, including intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another without right. Context and evidence matter. (Lawphil)
What if the fake account has not caused financial loss?
Financial loss is not a required condition for the identity-theft provision to become relevant. Section 4(b)(3) specifically addresses situations in which no damage has yet been caused by providing for a lower penalty. Whether other legally relevant damage exists is fact-dependent. (Lawphil)
Should I report to Facebook or to the police first?
Preserve the evidence first. You can then report to the platform and, where criminal conduct is involved, promptly report to the PNP-ACG or NBI-CCD. In a serious case, particularly where identifying records may be needed from the platform, prompt law-enforcement reporting is important because investigators can initiate lawful preservation and evidence-gathering procedures.
Do I need a lawyer before reporting to the NBI or PNP?
A lawyer is not ordinarily required merely to report an incident. The NBI's current Citizen's Charter states that the general public may proceed to the Cybercrime Division to request investigative assistance, with no documentary requirement listed for that initial service. Counsel may nevertheless be useful in complex cases, cases involving substantial financial or reputational damage, parallel civil claims, privacy proceedings, or disputes over the proper criminal charges. (National Bureau of Investigation)
Can I directly demand the fake account owner's identity from the social media company?
You may use any user-facing information request mechanism the platform lawfully provides, but private complainants generally should not expect platforms to disclose confidential subscriber or traffic information merely upon demand. Philippine cybercrime investigations provide mechanisms for law-enforcement preservation and court-authorized disclosure of such information. (Lawphil)
Where should I report?
For a suspected cybercrime, the principal investigative agencies are the PNP Anti-Cybercrime Group and the NBI Cybercrime Division. The DOJ Office of Cybercrime also acts on cybercrime complaints and referrals and coordinates cybercrime investigation and prosecution matters. For online scams, the CICC 1326 hotline is another government reporting channel. Privacy complaints falling within the Data Privacy Act may be brought separately to the National Privacy Commission. (PNP ACG)
Official sources
Republic Act No. 10175, Cybercrime Prevention Act of 2012: LawPhil — R.A. No. 10175
Implementing Rules and Regulations of R.A. No. 10175: DOJ Office of Cybercrime — Implementing Rules
Supreme Court decision in Disini v. Secretary of Justice, G.R. No. 203335, February 11, 2014: Supreme Court E-Library — Disini decision
DOJ Office of Cybercrime: DOJ Office of Cybercrime
PNP Anti-Cybercrime Group contact directory: PNP-ACG — Contact Us
NBI investigative assistance for victims of computer crimes: NBI — Cybercrime Division Citizen's Charter
National Privacy Commission complaint procedure: NPC — Mechanics for Complaints
Facebook impersonation reporting: Facebook Help Center — Report an Impersonating Profile or Page
TikTok impersonation reporting: TikTok Help Center — Report an Impersonation Account
Disclaimer
This article provides general legal information about Philippine law and is not a substitute for legal advice based on the complete facts, documents, digital evidence, and applicable procedural rules of a particular case. Cybercrime, privacy, fraud, defamation, and related liability can overlap, and the correct remedy may depend on what the fake account actually did and what evidence can be preserved. Laws, procedures, agency contacts, and platform reporting mechanisms were checked against official sources as of August 23, 2026.