Quick answer
If someone creates a social media account using your name, photograph, personal details, business identity, or other identifying information to make people believe that the account is yours, preserve the evidence first, secure your legitimate accounts, report the impersonating account to the platform, and promptly report suspected criminal conduct to the PNP Anti-Cybercrime Group (PNP-ACG) or the NBI Cybercrime Division (NBI-CCD). The Cybercrime Investigation and Coordinating Center (CICC) also operates government cybercrime reporting channels, including Hotline 1326. (PNP ACG)
Philippine law expressly punishes computer-related identity theft. Section 4(b)(3) of Republic Act No. 10175, or the Cybercrime Prevention Act of 2012, covers the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion, without right, of identifying information belonging to another natural or juridical person. The Supreme Court upheld this provision in Disini v. Secretary of Justice. (Lawphil)
A “fake account,” however, is not automatically a criminal identity-theft case simply because the account uses a false name or is anonymous. The facts matter. The important questions include whether the person used identifying information belonging to somebody else without right, whether the account was presented as genuinely belonging to that person or organization, what the account was used for, and whether other offenses—such as fraud, illegal access, threats, harassment, or cyber libel—were committed.
When a fake account may amount to identity theft
The clearest cases involve accounts deliberately designed to impersonate a real person or organization. Examples include using another person's name and photograph to ask relatives for money, posing as a company officer to obtain payments or confidential information, copying a professional's profile to solicit clients, or creating an account that communicates with other people as though it were the victim.
The Supreme Court has recognized that identifying information ordinarily includes matters such as a person's name, address, contact information, birth information, occupation, and similar data. Section 4(b)(3) remains valid and enforceable. (Lawphil)
The law also expressly contemplates cases in which no damage has yet occurred. Section 4(b)(3) states that when no damage has yet been caused, the imposable penalty is one degree lower. This means you should not assume that you must first lose money before seeking help. (Lawphil)
For violations under Section 4(b), Section 8 of RA 10175 generally provides the penalty of prision mayor, or a fine of at least ₱200,000 up to an amount commensurate with the damage incurred, or both, subject to the specific rule reducing the penalty when identity theft has not yet caused damage. The precise charge and penalty ultimately depend on the proven facts and the prosecutor's and court's application of the law. (Lawphil)
A fake account can involve other crimes too
Identity theft is often only one part of the incident. If the offender obtained control of your genuine account by entering it without authority, illegal access under RA 10175 may also be relevant. If the impersonator deceives people into sending money or property, fraud or estafa provisions may apply depending on how the scheme was carried out. If the fake account publishes defamatory accusations, cyber libel may become an issue; in Disini, the Supreme Court sustained the cyber-libel provision as applied to the original author of the unlawful post. (Lawphil)
The NBI has in fact investigated impersonation schemes involving persons who falsely represented themselves as legitimate individuals or representatives online. In one Supreme Court-related case, a suspect allegedly posed as a Court official on Facebook and was charged with, among other offenses, computer-related identity theft and estafa. More recently, the NBI has reported investigations involving online scams in which suspects allegedly assumed false identities or represented themselves as legitimate company representatives. (Supreme Court of the Philippines)
If the incident also involves threats, intimate photographs or videos, stalking, sexual harassment, violence against women or children, or exploitation of a minor, additional special laws may apply. Those situations should be reported immediately rather than treated merely as a problem of getting a fake profile removed.
What to do immediately
Preserve the fake account before it disappears. Take screenshots showing the profile name, username or handle, profile photograph, posts, messages, dates and times, and the parts that impersonate you. Copy the exact profile URL and URLs of important posts or conversations. Where possible, make a screen recording showing how you reached the account so the evidence has context. Keep the original files rather than only edited or cropped copies.
Preserve communications and transaction evidence. Save direct messages, emails, SMS messages, login alerts, verification notices, payment requests, bank or e-wallet receipts, account numbers, QR codes, telephone numbers, email addresses, and messages from people who were contacted by the impostor. Ask witnesses to retain their own original messages rather than merely forwarding screenshots to you.
Secure your genuine accounts. Change passwords, especially if passwords were reused on other services. Sign out unfamiliar devices or sessions, enable multi-factor authentication, review recovery email addresses and phone numbers, and check whether your email account was also compromised. If banking, e-wallet, credit-card, or SIM credentials may have been exposed, contact the relevant provider immediately.
Report the impersonating account to the social-media platform. Use the platform's impersonation or “pretending to be someone” reporting mechanism. Preserve your evidence before requesting removal because the page may become inaccessible once the platform disables it. If friends, customers, or relatives are being approached, warn them through your genuine and independently verifiable channels.
Report suspected cybercrime to the PNP-ACG or NBI-CCD. The PNP-ACG's current contact page lists its Cyber Response Unit at complaint@acg.pnp.gov.ph and 0968-878-3561, and also lists regional anti-cybercrime units. The NBI's Citizen's Charter states that members of the public may proceed to its Cybercrime Division to file a complaint or request an investigation; the process includes a complaint sheet, preliminary interview, sworn statements or affidavits, submission of supporting evidence, and, when relevant, examination of a device. The NBI currently lists ccd@nbi.gov.ph for its Cybercrime Division. (PNP ACG)
You may also report through the CICC. Current CICC materials identify 1326 as its cybercrime hotline and list report@cicc.gov.ph, together with mobile reporting numbers. The CICC coordinates cybercrime prevention and response among government agencies; serious cases may still require investigation by the appropriate law-enforcement agency and prosecution authorities. (CICC)
If money was sent, act on the financial side immediately. Contact the bank, card issuer, e-wallet, or payment provider and request the appropriate fraud response or account restriction. Give investigators complete transaction references. Do not send additional money because the impersonator promises a refund, removal of the account, or disclosure of his identity.
Consider a National Privacy Commission complaint when the facts involve unlawful processing of your personal data. The Data Privacy Act prohibits various forms of unauthorized processing of personal information, but not every fake-profile dispute necessarily falls within the NPC's jurisdiction. Under the NPC's 2021 Rules of Procedure, a complainant ordinarily must first inform the relevant personal information controller, personal information processor, or concerned entity in writing and allow an appropriate response; absence of a response within 15 calendar days satisfies this exhaustion requirement. The NPC may waive that requirement for good cause or serious violations, including circumstances involving grave and irreparable harm, lack of an adequate remedy, or patently illegal conduct. (National Privacy Commission)
Why reporting quickly matters
Online evidence can change within minutes. An impersonator can rename an account, delete posts, erase conversations, block the victim, or abandon one profile and create another.
RA 10175 contains specific preservation mechanisms for computer data. Section 13 requires preservation of traffic data and subscriber information for specified periods and permits law-enforcement preservation orders for content data. The Supreme Court upheld the data-preservation provision in Disini. Investigators can also seek appropriate judicial processes for disclosure and examination of computer data. (Lawphil)
This does not mean that every deleted Facebook, Instagram, TikTok, X, Messenger, or other social-media record will necessarily remain obtainable. The safer approach is to preserve what you can personally and report promptly so investigators can determine whether formal preservation or warrant procedures are appropriate.
What evidence is most useful
A single screenshot showing a fake profile can establish that something appeared online, but a stronger complaint normally contains enough information to reconstruct what happened.
Try to preserve the fake account's exact URL and username, the date you discovered it, screenshots showing the full page rather than only isolated text, conversations sent by the impostor, messages received by third parties, payment information, copies of photographs or personal details taken from you, proof showing which genuine account or identity belongs to you, and a chronological account of what happened.
If a witness was personally contacted by the fake account, identify that person and preserve the conversation. The NBI's published procedure specifically contemplates supporting documents and sworn statements from complainants and witnesses. (National Bureau of Investigation)
Do not alter the evidence merely to make it look cleaner. Cropping, adding annotations over important information, deleting message history, or repeatedly forwarding compressed copies may eliminate useful context. Keep originals and create separate working copies if you need to highlight something.
What if you do not know who created the account?
You can still report the incident.
Victims often know the fake username but not the individual operating it. Identifying an account holder may require subscriber information, traffic information, platform records, IP-related evidence, financial records, or other data that an ordinary user cannot lawfully compel a service provider to disclose.
RA 10175 assigns cybercrime investigative functions to the NBI and PNP cybercrime units, and its implementing rules authorize them to investigate cybercrimes and perform forensic work involving electronic evidence. (Lawphil)
Give investigators every legitimate lead you have, but distinguish facts from suspicions. Do not publicly accuse a former employee, former partner, competitor, relative, or other suspected person unless you have a proper factual and legal basis for doing so.
Can you file directly with a prosecutor?
A criminal complaint may proceed through the prosecution system once there is sufficient evidence and the appropriate complaint has been prepared. The DOJ's published requirements for complaints directly filed by private individuals include an Investigation Data Form, complaint-affidavit or sworn statement, witness affidavits where applicable, and supporting documents. The currently applicable DOJ-NPS framework includes the 2024 rules on preliminary investigation and related procedures. (Department of Justice)
For online impersonation, however, going first to a specialized cybercrime investigator can be particularly useful where the offender is unknown or technical evidence must be preserved or obtained from service providers.
When the Data Privacy Act may matter
A fake account may also involve personal-data violations when somebody unlawfully processes your personal information or sensitive personal information. Sections 25 and 28 of RA 10173, for example, penalize certain unauthorized processing and processing for unauthorized purposes. The applicability of these provisions depends on the particular data, circumstances, lawful basis for processing, statutory exclusions, and the role of the person or entity involved. (National Privacy Commission)
For an NPC complaint, use the current form and instructions published by the NPC. The Commission announced a newer complaint template effective in 2025, and its current website provides its complaint-filing procedure and forms. Filing fees may apply, subject to exemptions or waiver under the NPC rules. (National Privacy Commission)
Importantly, if contacting the person behind the fake account would expose you to threats, retaliation, continuing fraud, destruction of evidence, or other serious harm, do not put yourself at risk merely to satisfy the usual NPC exhaustion requirement. The rules expressly allow the NPC to waive that requirement in appropriate cases.
Common mistakes to avoid
Reporting before saving the evidence. Platform removal is useful, but obtain screenshots, URLs, usernames, messages, and other accessible evidence first whenever it is safe to do so.
Focusing only on the profile photograph. Investigators need the account identifier, URL, communications, dates, transactions, and conduct showing how the account was used.
Assuming the person you suspect is necessarily the operator. A familiar photograph, writing style, telephone number, or personal detail may be a lead, but attribution of an online account can require technical investigation.
Paying the impersonator. Do not pay someone who demands money to delete a fake account, return an account, stop posting, or reveal who is behind it. Preserve the demand and report it.
Trying to hack the fake account. Unauthorized access can itself create legal problems. Preserve evidence and use lawful reporting and investigative channels.
Treating account removal and criminal investigation as the same thing. A platform may remove an account under its own rules without establishing a Philippine criminal offense. Conversely, deletion of an account does not necessarily end possible criminal liability.
When legal or law-enforcement help is urgent
Seek immediate assistance when the impersonator is currently obtaining money from victims, has gained control of your genuine email or social-media account, is threatening physical harm, is publishing or threatening to publish intimate material, is impersonating you in business or financial transactions, is contacting your clients or employer, is using government IDs or financial credentials, or is targeting a child.
If there is an immediate threat to physical safety, treat it as an emergency rather than waiting for the social-media platform to respond.
Frequently asked questions
Is using my photograph on a fake Facebook account automatically identity theft?
Not necessarily. The photograph may be part of the evidence, but criminal liability depends on the entire conduct. Section 4(b)(3) focuses on intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of another's identifying information without right. An account deliberately presented to others as being genuinely yours is substantially different from an account that merely happens to use the same name. (Lawphil)
Do I have to lose money before I can report identity theft?
No. RA 10175 expressly addresses the situation in which computer-related identity theft has not yet caused damage, although the statutory penalty is reduced in that situation. (Lawphil)
Should I confront the fake-account owner?
Usually, preserving evidence and reporting through the proper channels is safer. Confrontation may cause deletion of evidence or escalation. If law enforcement is already involved, follow the investigator's instructions before communicating further with the suspect.
Can the police find out who owns an anonymous account?
Potentially, but not in every case. Identifying an operator can require platform records, subscriber or traffic information, financial records, device evidence, and lawful preservation or warrant procedures. Whether sufficient information remains available depends on the circumstances.
Can I report to both the PNP and NBI?
Both agencies have cybercrime investigative functions under RA 10175 and its implementing rules. Avoid creating unnecessary conflicting complaints, however. If one agency has already formally taken the case, disclose that fact when approaching another agency or prosecutor. (Lawphil)
Can I file an NPC complaint as well?
Possibly, if the conduct constitutes a privacy violation or personal-data breach within the Data Privacy Act and NPC jurisdiction. An NPC administrative complaint is different from a criminal cybercrime investigation, and its procedural requirements—including the usual prior written notice and 15-day opportunity to respond—should be followed unless a recognized ground for waiver applies.
Official sources
Cybercrime Prevention Act of 2012, Republic Act No. 10175: Lawphil — RA 10175
Supreme Court decision in Disini v. Secretary of Justice, G.R. Nos. 203335 et al., February 11, 2014: Lawphil — Disini v. Secretary of Justice
PNP Anti-Cybercrime Group contact information: PNP-ACG — Contact Us
NBI procedure for investigative assistance to victims of computer crimes: NBI — Cybercrime Division Citizen's Charter
Cybercrime Investigation and Coordinating Center: CICC official website
Data Privacy Act of 2012, Republic Act No. 10173: National Privacy Commission — Data Privacy Act
NPC complaint procedure and current forms: National Privacy Commission — File a Complaint
DOJ preliminary-investigation filing information: Department of Justice — Filing of Complaint for Preliminary Investigation
General-information disclaimer
This article provides general Philippine legal information and is not a substitute for advice based on the specific evidence and circumstances of a particular case. Cybercrime, privacy, fraud, defamation, harassment, and related offenses can overlap, and the correct complaint, respondent, venue, procedure, and legal theory may depend on facts not apparent from an online profile alone.
Sources and current government procedures checked: August 23, 2026.