A Legal Article in the Philippine Context

I. Overview

Facebook impersonation and photo misuse are common cyber-related problems in the Philippines. They may involve a person creating a fake Facebook account, page, or profile using another person’s name, photo, identity, personal details, business name, or reputation. The impersonator may use the account to scam others, harass the victim, solicit money, spread false statements, post obscene content, damage reputation, stalk, threaten, or deceive the victim’s friends, family, customers, or the public.

Photo misuse may occur even without a full fake account. A person may copy, download, repost, edit, crop, sexualize, meme, sell, or use another person’s photo without permission. In serious cases, the image may be used for blackmail, fake dating profiles, fake business accounts, fake charity appeals, fake investment schemes, cyberbullying, identity theft, or sexual harassment.

Under Philippine law, the victim may have several remedies:

Report and request takedown from Facebook;
Preserve digital evidence;
Report to the PNP Anti-Cybercrime Group or NBI Cybercrime Division;
File a criminal complaint, where facts support it;
File a civil case for damages or injunction;
File complaints under the Data Privacy Act, where personal data misuse is involved;
Use remedies under the Safe Spaces Act, if the conduct is gender-based online sexual harassment;
Use remedies under VAWC law, if the impersonator is a current or former intimate partner and the victim is a woman or child;
Use child protection laws, if the victim is a minor;
Send cease-and-desist or demand letters, where the offender is identifiable;
Coordinate with banks, e-wallets, employers, schools, or businesses if the fake account is being used for fraud.

The correct remedy depends on the impersonator’s conduct. Not every unauthorized use of a photo is automatically a criminal case, but many impersonation cases involve cybercrime, identity misuse, fraud, harassment, privacy violations, or defamation.

II. What Is Facebook Impersonation?

Facebook impersonation occurs when a person creates or uses a Facebook account, page, group, Messenger account, Marketplace listing, or Meta-related profile pretending to be someone else.

Common forms include:

Fake personal profile using the victim’s name and photo;
Fake profile using the victim’s face but a different name;
Fake account pretending to be the victim to message friends;
Fake page pretending to be the victim’s business;
Fake seller account using the victim’s identity;
Fake dating profile using the victim’s photos;
Fake account used to ask for money or loans;
Fake account used to spread rumors;
Fake account used to post sexual content;
Fake account used to threaten or harass;
Fake account used to contact the victim’s workplace or school;
Fake account used to scam buyers or investors;
Fake account used to damage a public figure, professional, influencer, or business;
Fake account used to impersonate a lawyer, doctor, teacher, police officer, public official, or company representative.

Impersonation becomes more serious when the fake account uses the victim’s identity to cause harm, obtain money, deceive others, or commit another offense.

III. What Is Photo Misuse?

Photo misuse is the unauthorized or abusive use of someone’s image.

Examples include:

Downloading and reposting another person’s photo without permission;
Using someone’s profile photo for a fake account;
Using someone’s photo in a fake dating profile;
Editing someone’s photo to make it sexual, insulting, or misleading;
Posting someone’s private photo to shame or harass them;
Using someone’s image for scams;
Using someone’s photo for fake testimonials;
Using someone’s photo in advertisements without consent;
Using a child’s photo without parental permission;
Reposting private photos from a closed group;
Making memes intended to humiliate;
Creating fake screenshots or captions;
Using someone’s photo to solicit donations or investments;
Using someone’s photo to pretend to be an employee, owner, or representative.

Photo misuse may violate privacy, data protection, intellectual property, cybercrime, defamation, harassment, consumer protection, or civil law depending on the facts.

IV. First Legal Issue: Is the Account Merely Fake, or Is It Causing Harm?

A fake account may violate Facebook rules, but legal action depends on the harm and conduct.

Important questions include:

Did the impersonator use the victim’s real name?
Did the impersonator use the victim’s photo?
Did the impersonator copy personal information?
Did the impersonator contact other people?
Did the impersonator ask for money?
Did the impersonator post defamatory statements?
Did the impersonator post obscene or sexual material?
Did the impersonator threaten the victim?
Did the impersonator harass, stalk, or shame the victim?
Did the impersonator use the fake account to scam others?
Did the impersonator impersonate a business?
Did the impersonator target minors?
Did the impersonator use private photos?
Did the impersonator alter or manipulate images?
Did the impersonator continue after being told to stop?

The more harm, deception, or malicious intent involved, the stronger the legal basis for action.

V. Immediate Steps for Victims

A victim should act quickly but carefully.

Step 1: Do not panic or immediately message the impersonator aggressively

Angry messages may alert the impersonator, who may delete evidence, change names, block the victim, or escalate the abuse.

Step 2: Preserve evidence before reporting

Before Facebook removes the account or the impersonator deletes it, preserve:

Profile URL;
Page URL;
Account name;
Profile photo;
Cover photo;
Bio details;
Posts;
Comments;
Messenger chats;
Friend requests;
Scam messages;
Marketplace listings;
Payment instructions;
Threats;
Reposts of photos;
Date and time visible on screenshots.

Step 3: Report to Facebook

Use Facebook’s impersonation and privacy reporting tools. Ask trusted friends to report the fake account too, but avoid mass harassment.

Step 4: Warn close contacts

If the fake account is asking for money or pretending to be the victim, warn family, friends, customers, or colleagues using a factual advisory.

Step 5: Report to payment providers if money is involved

If the fake account used GCash, Maya, bank accounts, remittance centers, QR codes, or online payment links, immediately report to the payment provider.

Step 6: File with cybercrime authorities if serious

If the impersonation involves fraud, threats, sexual harassment, blackmail, defamation, repeated harassment, or identity misuse, report to the PNP Anti-Cybercrime Group or NBI Cybercrime Division.

Step 7: Consider a complaint with the National Privacy Commission

If personal data was collected, used, disclosed, or processed without consent or lawful basis, a Data Privacy Act remedy may be considered.

VI. Evidence Checklist

Evidence is critical. Screenshots are useful, but they should be complete and organized.

A. Profile or page evidence

Save:

Full account name;
Username or handle;
Profile URL;
Page URL;
User ID if visible;
Profile photo;
Cover photo;
Bio or “About” section;
Work, school, location, or contact details copied from the victim;
Date account was discovered;
Number of friends or followers;
Public posts;
Mutual friends;
Any account name changes.

B. Photo misuse evidence

Save:

Original photo owned or posted by the victim;
Fake account using the photo;
Edited or altered version;
Date and location where misused photo appeared;
URL of post or profile;
Comments or captions;
Shares or reposts;
Evidence that the photo came from the victim’s account;
Proof that permission was not given.

C. Fraud evidence

If the fake account scammed people, save:

Messages asking for money;
Payment instructions;
Bank or e-wallet details;
QR codes;
Transaction receipts;
Victim statements from people who paid;
Fake promises;
Proof that the real person did not authorize the request.

D. Harassment or threat evidence

Save:

Threatening messages;
Repeated unwanted contact;
Sexual messages;
Doxxing posts;
Insults;
Blackmail demands;
Posts tagging the victim’s family or employer;
Group posts inciting harassment;
Comments from others encouraged by the impersonator.

E. Defamation evidence

Save:

False accusations;
Insulting captions;
Public posts;
Comments identifying the victim;
Shares;
Reactions and engagement;
Evidence of reputational harm;
Witnesses who saw the post.

F. Technical evidence

Save:

Account links, not just screenshots;
Screen recordings scrolling from profile URL to posts;
Chat exports where available;
Email notifications;
Login alerts, if the victim’s own account was hacked;
Device used to receive messages;
Metadata, if available.

VII. How to Preserve Facebook Evidence Properly

Digital evidence can disappear quickly. The impersonator may change names, delete posts, or block the victim.

Good preservation practices include:

Take full-screen screenshots;
Include date and time where possible;
Record the URL bar if using a browser;
Take screen recordings;
Save links separately in a document;
Download copies of your original photos;
Ask witnesses to screenshot what they received;
Do not edit screenshots;
Keep original files;
Back up evidence in cloud storage or external drive;
Print important screenshots for filing;
Keep digital copies for investigators.

A screenshot of a profile name alone is weak because names can be changed. A profile URL is stronger.

VIII. Reporting to Facebook

Facebook provides reporting options for:

Impersonation of a person;
Fake accounts;
Intellectual property infringement;
Privacy violations;
Harassment or bullying;
Non-consensual intimate images;
Scam pages;
Unauthorized business impersonation;
Child safety concerns.

A victim should report the account through the specific reporting category that best matches the case.

A. Personal impersonation

Use this when the fake profile pretends to be the victim or someone known to the victim.

B. Business impersonation

Use this when a page or profile pretends to be a business, shop, professional practice, or organization.

C. Photo privacy violation

Use this when the issue is unauthorized posting of a private or sensitive photo.

D. Scam or fraud report

Use this when the fake account asks for money, sells fake products, or solicits payments.

E. Non-consensual intimate image

Use this immediately where nude, sexual, or intimate images are posted or threatened.

Facebook reporting is not a substitute for legal action, but it may remove the content faster than a formal case.

IX. Reporting to PNP Anti-Cybercrime Group or NBI Cybercrime Division

For serious cases, report to cybercrime authorities.

A. When to report

Report when the fake account:

Uses your identity to scam people;
Posts false accusations;
Uses your photos for sexual content;
Threatens you;
Blackmails you;
Doxxes you;
Harasses you repeatedly;
Pretends to be your business;
Uses your name to borrow money;
Uses fake IDs or payment accounts;
Causes reputational or financial harm;
Targets minors;
Hacks or accesses your real account.

B. What to bring

Bring:

Government ID;
Printed screenshots;
Digital evidence;
Account URLs;
Timeline of events;
Witness names;
Proof that the account is fake;
Proof that the photo is yours;
Proof of damage;
Payment evidence, if fraud is involved;
Prior reports to Facebook;
Police blotter, if any.

C. Why law enforcement is important

Facebook, banks, e-wallets, internet providers, and platforms generally cannot disclose private account information to a private person without lawful process. Cybercrime authorities may help preserve records and identify suspects through proper legal channels.

X. Possible Criminal Liability Under Philippine Law

Facebook impersonation and photo misuse may fall under several criminal laws.

A. Cybercrime Prevention Act

The Cybercrime Prevention Act is often relevant because the conduct happens through Facebook, Messenger, social media, or online systems.

Possible cybercrime-related issues include:

Identity-related misuse;
Cyberlibel;
Illegal access, if the victim’s account was hacked;
Computer-related fraud;
Computer-related forgery;
Cyber harassment-related conduct when tied to other offenses;
Other crimes committed through information and communications technology.

If a crime under the Revised Penal Code is committed through the internet or digital systems, cybercrime consequences may apply.

B. Identity Theft or Computer-Related Identity Misuse

When a person uses another person’s identifying information without right, especially through digital systems, identity-related liability may arise.

In Facebook impersonation cases, the impersonator may misuse:

Name;
Photo;
Birthday;
Address;
School;
Workplace;
Signature;
Business identity;
Contact number;
Email;
Family details;
Government ID;
Professional title;
Company logo.

Identity misuse becomes stronger when the fake account is used to deceive others or gain benefit.

C. Cyberlibel

Cyberlibel may arise if the fake account posts defamatory statements online.

Defamation generally involves a public and malicious imputation of a crime, vice, defect, act, condition, status, or circumstance tending to dishonor, discredit, or contempt a person.

Examples:

Fake account posts that the victim is a scammer;
Fake account accuses the victim of adultery or prostitution;
Fake account posts false criminal accusations;
Fake account claims the victim has a disease;
Fake account posts edited screenshots to destroy reputation;
Fake business page accuses a competitor of fraud.

Cyberlibel focuses on defamatory content, not merely the creation of a fake account. If the fake account only uses a photo without defamatory statements, other remedies may be more appropriate.

D. Estafa or Online Fraud

If the fake account is used to obtain money or property, estafa or online fraud may arise.

Examples:

Fake account messages friends: “Emergency, send GCash.”
Fake seller page uses a real person’s photo to gain trust.
Fake charity account solicits donations.
Fake business page collects orders.
Fake investment account uses the victim’s identity as “proof” of legitimacy.
Fake account asks for load, loans, or transfers.

In such cases, both the victim whose identity was used and the persons who lost money may be complainants or witnesses.

E. Falsification and Computer-Related Forgery

If the impersonator creates fake documents or digital representations, falsification or computer-related forgery may be considered.

Examples:

Fake ID using the victim’s photo;
Edited business permit;
Fake receipt;
Fake authorization letter;
Fake certificate;
Fake employment document;
Fake screenshot of payment;
Fake conversation made to look like the victim sent messages.

The use of edited photos, fake IDs, and fabricated documents can create additional liability.

F. Grave Threats and Coercion

If the impersonator threatens the victim, additional criminal issues may arise.

Examples:

“Pay me or I will post more photos.”
“Do what I say or I will use your pictures.”
“I will ruin your reputation.”
“I will send this to your employer.”
“I will make more fake accounts if you report me.”

Threats and coercion may apply depending on the wording, demand, and circumstances.

XI. Data Privacy Act

The Data Privacy Act may apply because a person’s photo, name, contact details, address, workplace, school, family relationships, and other identifiers are personal information.

A photograph of a person can be personal data when the person is identifiable. Unauthorized collection, use, disclosure, or malicious processing of personal data may raise data privacy issues.

A. Personal information involved

Facebook impersonation may misuse:

Full name;
Face or image;
Birthday;
Address;
Contact details;
Employment details;
School details;
Relationship status;
Family photos;
Government ID;
Financial information;
Private messages.

B. Possible violations

Data privacy issues may include:

Unauthorized processing;
Unauthorized disclosure;
Malicious disclosure;
Improper use of personal data;
Processing for fraud or harassment;
Doxxing;
Use of personal data beyond consent;
Use of photos for fake accounts.

C. Remedies

A victim may consider filing a complaint with the National Privacy Commission if the facts involve misuse of personal data.

Possible outcomes may include investigation, orders to take down or stop processing, administrative penalties, and referral for prosecution where appropriate.

XII. Safe Spaces Act

The Safe Spaces Act may apply when the impersonation or photo misuse constitutes gender-based online sexual harassment.

Examples:

Fake account uses a woman’s photos for sexual posts;
Fake dating profile implies sexual availability;
Edited sexualized images are posted;
Photos are used to shame a person based on gender or sexuality;
Unwanted sexual comments are made using or about the photo;
The fake account sends sexual messages to others using the victim’s identity;
The impersonator posts private photos to humiliate;
The victim is cyberstalked or repeatedly harassed.

The Safe Spaces Act is especially relevant where the online conduct is sexual, gender-based, humiliating, or harassing.

XIII. Anti-Photo and Video Voyeurism Act

If the photo misuse involves nude, sexual, intimate, or private images, the Anti-Photo and Video Voyeurism Act may apply.

This law is relevant where a person:

Takes intimate photos or videos without consent;
Copies intimate images;
Publishes or shares intimate photos or videos without consent;
Sells or distributes private sexual images;
Uploads or shows intimate content;
Threatens to release intimate photos or videos.

Consent to take or send an intimate photo does not automatically mean consent to publish or repost it.

If an impersonator uses intimate photos on Facebook, Messenger, groups, or fake accounts, urgent legal and platform action is needed.

XIV. Violence Against Women and Their Children

If the victim is a woman and the impersonator is a spouse, former spouse, person with whom she has or had a sexual or dating relationship, or person with whom she has a common child, the Anti-Violence Against Women and Their Children Act may apply.

Facebook impersonation and photo misuse may constitute psychological violence, harassment, stalking, public humiliation, or sexual violence depending on the facts.

Examples:

Ex-boyfriend creates a fake profile using victim’s photos;
Ex-partner posts humiliating content;
Ex-spouse sends fake messages to ruin reputation;
Former partner threatens to upload private photos;
Partner uses fake account to monitor, stalk, or harass;
Offender contacts the victim’s employer or family through fake accounts.

Remedies may include criminal complaint and protection orders.

XV. If the Victim Is a Minor

If a child’s photo is misused, the case becomes more sensitive. Philippine law gives special protection to minors.

Possible issues include:

Child privacy;
Cyberbullying;
Child abuse;
Online sexual abuse or exploitation;
Grooming;
Use of child photos in fake accounts;
Use of child images for scams;
Posting humiliating or sexualized content involving a minor.

If the photo is sexual, nude, or exploitative, the matter should be treated as urgent and reported immediately to appropriate authorities. Do not repost or circulate the child’s image as “proof” in public posts.

Parents, guardians, schools, and authorities should preserve evidence while protecting the child’s privacy.

XVI. Civil Remedies

Even if criminal prosecution is not pursued or is difficult, the victim may have civil remedies.

A. Damages

The victim may claim damages for:

Moral suffering;
Emotional distress;
Reputational injury;
Loss of business;
Loss of employment opportunity;
Medical or psychological expenses;
Actual financial loss;
Attorney’s fees;
Litigation expenses;
Exemplary damages in proper cases.

B. Injunction or court orders

A victim may seek court relief to stop continued use, publication, or harassment.

Possible requests include:

Removal of fake account content;
Prohibition against further use of name or photos;
Order to stop contacting victim or third persons;
Order to stop spreading defamatory content;
Order to stop using the victim’s identity for business or fraud.

C. Right to privacy and image

Philippine law recognizes privacy and dignity interests. Unauthorized use of a person’s identity or photo may support civil liability, especially where the use is malicious, commercial, humiliating, or harmful.

XVII. Intellectual Property Issues

Not all photo misuse is only privacy-related. It may also involve copyright.

A. Who owns the copyright in a photo?

The person who took the photo usually owns the copyright, unless there is an employment, commission, assignment, or other legal arrangement affecting ownership.

This means:

If the victim took a selfie, the victim may own copyright in the photo;
If a professional photographer took the photo, the photographer may own copyright unless rights were transferred;
If a company owns marketing photos, the company may have rights;
If the photo was taken by a friend, the friend may own copyright, while the victim still has privacy and personality interests.

B. Copyright remedies

If the victim or rights holder owns the photo, they may pursue takedown or legal remedies for unauthorized copying, reposting, editing, or commercial use.

C. Privacy and copyright are different

A person appearing in a photo may have privacy or personality-based claims even if they do not own the copyright. Conversely, the photographer may have copyright claims even if the photographer is not the person shown.

XVIII. Business Impersonation on Facebook

Facebook impersonation may target a business, shop, professional practice, or organization.

Examples:

Fake restaurant page taking orders;
Fake online shop using real store photos;
Fake law office page;
Fake clinic page;
Fake real estate agent profile;
Fake supplier page;
Fake charity page;
Fake school page;
Fake government assistance page;
Fake recruitment page.

Possible remedies include:

Report to Facebook for business impersonation;
Warn customers;
File cybercrime report;
Report fraud to payment providers;
File DTI or SEC-related complaints depending on business type;
File civil or criminal action against identified offenders;
Protect trademarks and business names if applicable;
Coordinate with affected customers.

Businesses should preserve proof of official page ownership, business registration, original photos, customer complaints, and fake account URLs.

XIX. Professional Impersonation

Impersonating professionals may create additional issues.

Examples:

Fake lawyer account giving legal advice;
Fake doctor account soliciting consultation fees;
Fake accountant offering services;
Fake teacher or school official messaging students;
Fake police or government personnel account demanding payments;
Fake HR recruiter collecting fees.

These may involve fraud, unauthorized practice, regulatory complaints, professional discipline, or public authority-related offenses depending on the facts.

Victims should report to both cybercrime authorities and the relevant professional or regulatory body if appropriate.

XX. Facebook Impersonation Used for Scams

A common Philippine scenario involves fake accounts messaging friends and relatives:

“Mars, emergency. Pa-GCash muna.” “Na-lock bank ko. Send muna ako QR.” “May binebenta akong phone/laptop. Down payment muna.” “Donation for hospital bills.” “Investment slot, guaranteed profit.”

If the account uses the victim’s identity to scam others, several persons may be involved:

The identity victim;
The person deceived into sending money;
The payment account holder;
The person operating the fake account;
Possible accomplices.

The identity victim should immediately post a warning from the real account, message close contacts, report the fake account, and file a cybercrime report if money was collected.

XXI. Hacked Account vs. Fake Account

The remedy depends on whether the offender created a fake account or took over the victim’s real account.

A. Fake account

The victim’s real account is still under the victim’s control, but another person created a separate account pretending to be the victim.

Remedies include reporting impersonation, preserving evidence, and filing complaints if harmful conduct occurred.

B. Hacked account

The offender gained access to the victim’s actual Facebook account.

Additional issues include:

Illegal access;
Account recovery;
Unauthorized messages;
Changed email or password;
Use of account for scams;
Data breach;
Exposure of private messages and photos.

The victim should recover the account, change passwords, enable two-factor authentication, check linked email and phone, log out unknown devices, and report to cybercrime authorities if serious.

XXII. Fake Dating Profiles

Using another person’s photo for a fake dating profile may be legally actionable, especially if it causes humiliation, harassment, sexual messages, stalking, or reputational harm.

Possible violations may include:

Identity misuse;
Data privacy violations;
Safe Spaces Act violations;
Civil privacy claims;
Defamation if false sexual statements are made;
Anti-voyeurism laws if intimate images are involved;
VAWC if committed by a current or former partner.

Evidence should include the fake dating profile URL, screenshots, chats from persons who contacted the victim, and proof that the photos were taken from the victim.

XXIII. Edited Photos, Memes, and Deepfakes

Photo misuse may involve editing.

Examples:

Face pasted onto sexual image;
Fake nude image;
Meme humiliating the victim;
Fake quote card;
Edited screenshot;
Altered photo implying crime or scandal;
AI-generated image resembling the victim.

Even if the image is fake, legal liability may still arise if it is used to defame, harass, sexually humiliate, threaten, or deceive.

Possible remedies include cyberlibel, Safe Spaces Act, Data Privacy Act, civil damages, and cybercrime-related complaints depending on the facts.

XXIV. Doxxing and Exposure of Personal Information

Facebook impersonation may include doxxing, or the malicious posting of personal information.

Examples:

Home address;
Phone number;
Workplace;
School;
Family details;
Government ID;
Private messages;
Bank account details;
Photos of children;
Travel information.

Doxxing can expose the victim to harassment, stalking, threats, fraud, or physical danger. It may support data privacy, cybercrime, harassment, civil, and protective remedies.

XXV. Defamation Through Fake Accounts

If a fake account posts false and damaging statements, cyberlibel may be considered.

Important elements usually include:

Defamatory imputation;
Publication online;
Identifiability of the victim;
Malice, presumed or proven depending on context;
Damage or tendency to dishonor or discredit.

Examples:

“This person is a thief.”
“She sells herself.”
“He is HIV positive,” if false and maliciously posted;
“This business is a scam,” if false and damaging;
Fake screenshots making it appear the victim admitted wrongdoing.

Truth, fair comment, privileged communication, and lack of identification may be raised as defenses depending on the case.

XXVI. When Photo Misuse Is Not Always Criminal

Not every unauthorized repost is automatically a criminal offense.

Examples that may be less clearly criminal:

A friend reposts a group photo without asking;
Someone shares a public profile photo without malicious caption;
A fan page reposts a public image;
A photo is used in a non-harmful context;
A person appears incidentally in a crowd photo.

However, even these may raise privacy, copyright, or platform issues depending on context.

The seriousness increases when the photo is private, harmful, sexualized, defamatory, commercial, deceptive, or used for impersonation.

XXVII. Cease-and-Desist Letter

If the offender is known, a cease-and-desist letter may be useful.

It may demand that the offender:

Delete the fake account;
Remove photos;
Stop using the victim’s name;
Stop contacting third persons;
Stop defamatory posts;
Preserve records;
Issue correction or apology;
Pay damages, where appropriate.

A cease-and-desist letter is not required in every case. If the matter is urgent, criminal, or involves risk of evidence deletion, immediate reporting may be better.

XXVIII. Sample Cease-and-Desist Letter

Subject: Demand to Cease Impersonation and Unauthorized Use of Photos

Dear [Name]:

It has come to my attention that you created or used a Facebook account/page under the name [fake account name/link], using my name, image, personal information, and/or photographs without my consent.

Your unauthorized use of my identity and photos has caused confusion, distress, and damage to my reputation. You are hereby demanded to:

Immediately delete or deactivate the fake account/page;
Remove all photos, posts, captions, comments, and messages using my identity or image;
Stop representing yourself as me or as connected with me;
Stop contacting my friends, family, customers, or other persons using my identity;
Preserve all records relating to the account and communications.

If you fail to comply, I will consider filing appropriate complaints with Facebook, cybercrime authorities, the National Privacy Commission, and the courts.

Sincerely, [Name]

XXIX. Complaint-Affidavit Outline

A complaint-affidavit for Facebook impersonation may include:

Identity of complainant;
Description of the fake account;
Date discovered;
How complainant discovered it;
Photos or personal data used;
Statements or messages made by the fake account;
Harm caused;
Why complainant believes respondent is responsible, if known;
Steps taken to report or request takedown;
Evidence attached;
Request for investigation and prosecution.

Sample outline

I discovered on [date] that a Facebook account using the name [name] and URL [link] was using my photo and pretending to be me. I did not create, authorize, or consent to this account. The account used my photo as its profile picture and sent messages to my friends asking for money. Attached are screenshots of the fake account, its URL, the messages sent, and payment instructions. Because of this, my friends were deceived and my reputation was damaged. I am executing this affidavit to file a complaint for appropriate legal action.

The affidavit should be factual and supported by annexes.

XXX. Evidence Annexes for Filing

A well-organized complaint may attach:

Annex A: Screenshot of real profile;
Annex B: Screenshot of fake profile;
Annex C: Fake profile URL;
Annex D: Screenshot showing copied photo;
Annex E: Original photo from victim’s account;
Annex F: Messages sent by fake account;
Annex G: Scam payment instructions;
Annex H: Transaction receipts of persons scammed;
Annex I: Witness affidavits;
Annex J: Facebook report confirmation;
Annex K: Demand letter, if sent;
Annex L: Damage evidence.

Organized evidence helps investigators and prosecutors understand the case.

XXXI. Remedies When the Impersonator Is Unknown

Often, the victim does not know who created the fake account.

Possible steps:

Preserve profile links and evidence;
Report to Facebook;
File with cybercrime authorities;
Provide payment trails if money was involved;
Provide names of persons contacted by the fake account;
Identify possible suspects based on context;
Avoid public accusations without proof;
Ask authorities about preservation requests;
Monitor for account name changes;
Continue documenting new activity.

Private persons usually cannot directly compel Facebook to reveal account ownership. Lawful process is needed.

XXXII. Remedies When the Impersonator Is Known

If the impersonator is known, options include:

Demand letter;
Barangay complaint, if appropriate;
Criminal complaint;
Civil case for damages;
Data privacy complaint;
Safe Spaces Act complaint, if gender-based harassment;
VAWC complaint, if relationship-based abuse;
School or workplace administrative complaint, if relevant;
Professional regulatory complaint, if professional misconduct is involved.

The victim should still preserve evidence before confronting the offender.

XXXIII. Barangay Proceedings

Barangay conciliation may be available for disputes between individuals in the same locality, depending on the offense, penalty, residence of parties, urgency, and legal exceptions.

Barangay may help with:

Demand to delete photos;
Settlement;
Written undertaking not to repeat;
Apology;
Payment of damages;
Referral to police if serious.

However, serious cybercrime, gender-based harassment, blackmail, fraud, or cases involving unknown online offenders should not rely solely on barangay proceedings.

XXXIV. School, Workplace, and Organizational Remedies

If the impersonator is a student, employee, member, or officer of an organization, administrative remedies may be available.

Examples:

Student creates fake account of classmate;
Employee uses co-worker’s photo for harassment;
Business competitor creates fake page;
Association member posts edited photos;
Teacher or supervisor uses student or employee photos without consent.

Possible remedies include:

School discipline;
Workplace investigation;
HR complaint;
Anti-sexual harassment process;
Data privacy complaint within organization;
Professional discipline;
Termination or sanctions where justified.

Administrative remedies may proceed separately from criminal or civil action.

XXXV. Public Advisories by the Victim

A victim may need to warn others that a fake account exists.

A safe public advisory should be factual.

Example:

“Please be informed that the Facebook account using the name [fake account name/link] and my photos is not mine. I did not create or authorize it. Please do not transact with it or send money. I have reported it to Facebook and the proper authorities.”

Avoid:

Naming a suspected person without proof;
Posting threats;
Doxxing;
Sharing private information;
Using insults;
Encouraging harassment.

The goal is warning and evidence preservation, not retaliation.

XXXVI. Takedown Strategy

A victim may pursue multiple takedown paths:

Report as impersonation;
Report as fake account;
Report photo privacy violation;
Report intellectual property violation if the victim owns the photo;
Report non-consensual intimate image if applicable;
Ask friends to report accurately;
Submit government ID if Facebook requires identity verification;
Report scam listings separately;
Report Messenger messages;
Report groups or pages hosting the content.

If Facebook denies the first report, try the most accurate alternative reporting category and provide clearer evidence.

XXXVII. When the Fake Account Uses the Victim’s Business Photos

Business photo misuse may involve:

Copyright infringement;
False advertising;
Unfair competition;
Fraud;
Consumer protection issues;
Trademark or trade name misuse;
Data privacy if personal customer photos are used.

Businesses should act quickly because fake pages can damage customer trust.

Steps include:

Post official warning;
Report fake page to Facebook;
Notify customers;
Report scam payment accounts;
File cybercrime complaint;
Preserve customer complaints;
Protect trademarks and business names;
Coordinate with DTI, SEC, or relevant regulators if necessary.

XXXVIII. If the Fake Account Uses Government IDs

If the impersonator posts or uses a victim’s government ID, this is more serious.

Risks include:

Identity theft;
Loan fraud;
SIM registration misuse;
E-wallet fraud;
Bank account opening attempts;
Doxxing;
Data privacy violations;
Scam verification.

The victim should:

Screenshot and save the post;
Report to Facebook;
Report to cybercrime authorities;
Report to relevant financial institutions if used for transactions;
Monitor accounts;
Avoid reposting the ID publicly;
Consider data privacy complaint.

XXXIX. If the Fake Account Uses Photos of Children

Using children’s photos without permission can be especially harmful.

Parents or guardians should:

Preserve evidence;
Report to Facebook;
Avoid publicly resharing the child’s image;
Report to cybercrime authorities if malicious, sexual, or fraudulent;
Inform the school if school-related;
Consider data privacy remedies;
Seek child protection assistance if exploitation is involved.

If the image is sexualized or nude, handle as a child protection emergency.

XL. If the Photo Is Publicly Available

A common defense is:

“Public naman ang picture.”

A public Facebook photo is not automatically free for impersonation, harassment, fraud, sexualization, or commercial misuse.

Even if the photo was publicly viewable, another person generally has no right to use it to pretend to be the victim, scam others, defame the victim, or violate privacy and dignity.

Public availability may affect expectations of privacy, but it does not legalize malicious or deceptive use.

XLI. If the Victim Previously Sent the Photo

Another defense is:

“Siya naman nag-send sa akin.”

Sending a photo privately does not mean the recipient may use it for a fake account, publish it, edit it, or harass the sender.

Consent is limited by purpose and context. Consent to receive or view a photo is not consent to impersonate, repost, sell, or misuse it.

This is especially true for intimate or private photos.

XLII. If the Photo Was Taken by Someone Else

If another person took the photo, the victim may still object to impersonation or privacy abuse.

The legal theories may differ:

The photographer may own copyright;
The person shown may have privacy, dignity, and identity claims;
Unauthorized use for fake identity may still be actionable;
Commercial use may require consent;
Defamatory or sexualized use may be actionable regardless of copyright ownership.

Thus, the impersonator cannot always escape liability by saying the victim did not take the photo.

XLIII. If the Impersonator Claims It Was a Joke

“Joke lang” is not a complete defense if the conduct caused harm, deception, harassment, defamation, fraud, or privacy violation.

A prank fake account may still be legally serious if it:

Uses real photos and identity;
Misleads others;
Posts harmful statements;
Causes the victim shame or fear;
Solicits money;
Harasses or bullies;
Continues after objections;
Targets a minor;
Includes sexual content.

Intent and context matter, but calling it a joke does not automatically remove liability.

XLIV. If the Impersonator Is a Minor

If the offender is a minor, the case may involve child-in-conflict-with-the-law procedures, school discipline, parental involvement, diversion, or restorative approaches depending on age and offense.

The victim may still seek protection, takedown, damages, school action, and appropriate legal remedies.

If both victim and offender are minors, authorities should handle the matter with sensitivity and privacy protection.

XLV. If the Victim Is a Public Figure

Public figures, influencers, politicians, professionals, and business owners may be more exposed to fake accounts and photo misuse.

Public status does not remove legal protection.

However, the analysis may consider:

Whether the post is commentary or satire;
Whether it is clearly parody;
Whether it deceives the public;
Whether it uses photos commercially;
Whether it contains false factual claims;
Whether it causes actual harm;
Whether it impersonates rather than criticizes.

A parody account that is clearly parody may be different from a deceptive fake account pretending to be the person.

XLVI. Parody, Satire, and Fan Accounts

Not every account using a public figure’s photo is impersonation.

An account may argue it is:

Fan page;
Commentary page;
Parody;
Satire;
News or criticism page.

However, such accounts may still be liable if they:

Mislead people into thinking they are official;
Use photos for scams;
Post defamatory falsehoods;
Harass or threaten;
Use private images;
Violate intellectual property;
Cause confusion with a business or brand.

Clear disclaimers may reduce confusion but do not excuse unlawful content.

XLVII. Commercial Use of Photos

Using someone’s photo for advertising, selling, endorsements, fake testimonials, or business promotion without consent may create civil, privacy, consumer protection, and intellectual property issues.

Examples:

Using a person’s selfie as a fake customer review;
Using a before-and-after image without consent;
Using a celebrity or influencer photo to sell products;
Using a doctor’s photo to endorse medicine;
Using a customer’s image for ads without permission;
Using photos from a photographer’s page for marketing.

Commercial misuse is often stronger than casual reposting because it exploits identity or copyright for gain.

XLVIII. Fake Marketplace Listings

A fake Facebook account may use the victim’s identity in Marketplace listings.

Examples:

Selling phones using the victim’s name;
Listing vehicles using stolen photos;
Offering rentals under fake identity;
Selling products through a fake business page;
Collecting reservation fees.

Victims should:

Report the Marketplace listing;
Warn contacts;
Save listing URL;
Save buyer complaints;
Report payment accounts;
File cybercrime complaint if scam is active.

XLIX. Remedies for People Scammed by the Fake Account

If a fake account uses someone’s photos to scam others, the people who paid money may also have legal remedies.

They should preserve:

Fake account URL;
Chat messages;
Payment instructions;
Proof of payment;
Product or loan promises;
Delivery failure;
Identity used by scammer.

They may file complaints for estafa or cyber fraud. The person whose identity was misused may be a witness and separate victim.

L. Account Recovery and Security

If impersonation followed hacking or account compromise, the victim should secure accounts.

Steps include:

Change Facebook password;
Change email password;
Enable two-factor authentication;
Log out unknown devices;
Review linked phone numbers and emails;
Check Facebook Business Manager access;
Review page admins;
Check recent posts and messages;
Warn contacts;
Scan devices for malware;
Avoid reusing passwords;
Secure GCash, Maya, bank, and email accounts.

Impersonation sometimes begins with account compromise.

LI. Demand for Damages

Where the impersonator is identified, the victim may demand damages.

Damages may include:

Emotional distress;
Reputational harm;
Lost business;
Lost employment opportunity;
Cost of legal assistance;
Cost of public correction;
Psychological treatment;
Financial loss from fraud;
Damage to goodwill;
Expenses for investigation.

The demand should be supported by proof.

LII. Injunction and Protective Relief

If the impersonation is ongoing and harmful, court relief may be considered.

Possible relief includes orders to:

Stop using the victim’s name or photo;
Stop maintaining fake accounts;
Stop reposting images;
Stop contacting the victim’s family, clients, or employer;
Remove content;
Stop publishing defamatory statements;
Preserve evidence;
Refrain from further harassment.

Where VAWC or child protection laws apply, protection orders may be available.

LIII. The Role of Witnesses

Witnesses may be important.

Useful witnesses include:

Friends who received messages from fake account;
Customers who were scammed;
Family members who saw the posts;
Co-workers who received defamatory messages;
Persons who know the offender admitted creating the account;
People who saw the fake page before deletion;
IT personnel who helped preserve evidence;
Photographer who owns the original photo;
Victims of the same scam.

Witness affidavits strengthen complaints.

LIV. Timeline of Events

A clear timeline helps authorities.

Example:

Date	Event	Evidence
June 1	Victim discovered fake Facebook profile	Screenshot Annex A
June 1	Fake profile used victim’s photo	Annex B
June 2	Fake profile messaged victim’s friends asking for money	Annex C
June 2	Friend sent ₱3,000 to provided GCash account	Annex D
June 3	Victim reported account to Facebook	Annex E
June 4	Fake account changed name but same URL remained	Annex F
June 5	Victim filed cybercrime report	Annex G

Timelines make complaints easier to evaluate.

LV. Common Mistakes by Victims

Victims often make mistakes that weaken their case.

Avoid:

Reporting before saving evidence;
Saving screenshots without profile URLs;
Publicly accusing a suspected person without proof;
Deleting messages;
Editing screenshots;
Posting the fake account repeatedly and increasing its reach;
Engaging in online fights;
Paying blackmailers;
Ignoring payment trails;
Waiting too long;
Failing to warn contacts in scam cases;
Using only Facebook reports when criminal conduct exists.

LVI. Common Defenses by Impersonators

An accused person may argue:

“It was a joke.”
“The photo was public.”
“I did not make the account.”
“Someone hacked me.”
“I only shared the photo.”
“I did not earn money.”
“There was no damage.”
“It was a fan page.”
“The victim gave me the photo.”
“I deleted it already.”

These defenses may or may not succeed depending on evidence. Deletion does not erase prior misconduct. Public photos cannot be used for fraud or harassment. A joke can still be unlawful if it causes legally recognized harm.

LVII. Preventive Measures

To reduce risk:

Use strong passwords;
Enable two-factor authentication;
Limit visibility of personal photos;
Avoid posting government IDs;
Watermark business photos;
Monitor fake accounts using your name;
Regularly check privacy settings;
Be cautious accepting friend requests;
Secure email accounts;
Avoid sending sensitive photos;
Report impersonation early;
Use official business pages with verification where possible;
Educate family about emergency money scams;
Keep copies of original photos;
Avoid oversharing address, school, workplace, and family details.

These measures do not shift blame to victims. The offender remains responsible for unlawful impersonation or misuse.

LVIII. Practical Checklist for Personal Victims

A personal victim should prepare:

Screenshot of real account;
Screenshot of fake account;
Fake account URL;
Original photo used;
Screenshot of copied photo on fake profile;
Messages sent by fake account;
Names of persons contacted;
Proof of money requested or received, if any;
Timeline;
Facebook report confirmation;
Police or cybercrime report;
Witness statements;
Demand letter, if offender known;
Evidence of damage.

LIX. Practical Checklist for Business Victims

A business victim should prepare:

Official business registration;
Official Facebook page link;
Fake page link;
Screenshots of fake page;
Customer complaints;
Fake product listings;
Payment account details used by fake page;
Original product photos;
Proof of copyright or ownership where available;
Public advisory;
Platform report;
Cybercrime complaint;
DTI or other regulatory complaint if appropriate;
Evidence of lost sales or reputation harm.

LX. Frequently Asked Questions

1. Is using my Facebook photo without permission illegal?

It depends on context. Unauthorized use may become legally actionable if it involves impersonation, harassment, fraud, defamation, privacy violation, commercial misuse, intimate images, or personal data misuse.

2. What should I do first?

Preserve evidence before the account disappears. Save screenshots, URLs, posts, messages, and proof of misuse. Then report to Facebook and, if serious, cybercrime authorities.

3. Can I file a case if a fake account uses my name and photo?

Yes, especially if it deceives others, harms your reputation, scams people, harasses you, or misuses your personal data.

4. What if the fake account only used my photo but a different name?

That may still be actionable if it misuses your identity, violates privacy, is used for scams, or causes harm.

5. What if the person says my photo was public?

Public availability does not authorize impersonation, fraud, harassment, sexualization, or defamatory use.

6. Can I force Facebook to reveal who made the account?

A private person usually cannot directly compel disclosure. Law enforcement or court processes may be needed.

7. Should I post the fake account publicly?

You may issue a factual warning, especially if scams are involved, but avoid unsupported accusations, threats, or doxxing.

8. Can I claim damages?

Yes, if you can prove wrongful conduct, harm, and legal basis. Damages may include moral, actual, and other damages depending on facts.

9. What if my ex-partner is behind it?

If the victim is a woman and the offender is a current or former spouse, sexual partner, dating partner, or person with whom she has a common child, VAWC remedies may apply.

10. What if intimate photos are involved?

Treat it as urgent. Preserve evidence, report to Facebook under non-consensual intimate image procedures, and report to cybercrime authorities. Anti-voyeurism, Safe Spaces Act, VAWC, and other laws may apply.

LXI. Practical Legal Strategy

The best strategy is usually layered:

Preserve evidence first so the case does not disappear with the account;
Report to Facebook for quick takedown;
Warn contacts if money or fraud is involved;
Report payment trails to banks or e-wallets;
File cybercrime report if there is fraud, harassment, threats, defamation, or serious identity misuse;
Consider Data Privacy Act remedies for unauthorized personal data use;
Consider civil damages if reputation, business, or emotional harm is significant;
Consider protection remedies if the offender is an intimate partner, stalker, or abuser;
Avoid public retaliation that may create counterclaims;
Document every new incident until the matter is resolved.

LXII. Conclusion

Facebook impersonation and photo misuse in the Philippines can give rise to several legal remedies. Depending on the facts, the conduct may involve cybercrime, identity misuse, data privacy violations, cyberlibel, estafa, falsification, gender-based online sexual harassment, anti-voyeurism violations, VAWC, child protection issues, civil damages, or intellectual property claims.

The first priority is evidence. Fake accounts can be deleted, renamed, or blocked quickly. Victims should preserve profile URLs, screenshots, screen recordings, messages, posts, payment details, and witness accounts before reporting. After preservation, they should report the account to Facebook and pursue legal remedies if the conduct is serious.

The law does not allow a person to use another’s identity or photo as a weapon, disguise, scam tool, sexual harassment device, or means of reputational harm. Publicly available photos are not free licenses for impersonation. Private sharing is not consent to reposting. A joke is not a defense to fraud, harassment, or serious harm.

The practical rule is clear: when Facebook impersonation or photo misuse causes deception, harassment, financial loss, privacy invasion, sexual humiliation, or reputational damage, the victim should preserve evidence, seek takedown, report to the proper authorities, and pursue the appropriate civil, criminal, data privacy, or protective remedies.