Quick answer

If someone is using your name, photos, personal details, business identity, or hacked account to deceive other people, preserve the evidence first, secure your accounts, report the impersonating profile to the platform, and promptly report the incident to the PNP Anti-Cybercrime Group or the NBI Cybercrime Division. For rapid government referral or assistance, call the CICC’s 24/7 Anti-Scam Hotline 1326 or submit a report through the CICC reporting portal.

A platform report can remove an account, but it is not a criminal complaint. A report to police or the NBI does not automatically remove the profile, freeze money, or guarantee prosecution. Use the appropriate channels in parallel, especially if money, a compromised SIM, threats, or sensitive images are involved.

When a fake account may be identity theft

Section 4(b)(3) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, covers the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion—without right—of identifying information belonging to another person or juridical entity.

Identifying information can include a person’s name, photograph, address, contact number, birth details, occupation, account credentials, or similar data. A business or organization may also be impersonated.

The Supreme Court explained in Disini v. Secretary of Justice that identity theft involves an illegitimate purpose. Merely acquiring or sharing information that the person made public is not automatically identity theft. However, public availability does not necessarily authorize someone to reuse that information deceptively—for example, to pose as the person, solicit money, obtain access to an account, damage a reputation, or make others believe the impersonator is acting with the victim’s authority.

Accordingly:

A different person having the same name is not, by itself, identity theft.
A clearly disclosed parody, fan, or commentary account is not automatically a crime, although its content and manner of operation still matter.
A profile using another person’s name or photo is not automatically enough for a conviction. Investigators must still establish lack of authority, the operator’s identity, the relevant intent, and the acts committed.
Impersonation accompanied by fraudulent messages, payment requests, account takeovers, harassment, threats, or misuse of private information presents a stronger basis for investigation.

Depending on the facts, other laws may also become relevant, such as computer-related fraud or forgery, estafa, cyberlibel, threats, gender-based online sexual harassment, or offenses involving unauthorized processing or disclosure of personal information. The correct charge depends on the evidence; the victim need not select the final criminal offense before reporting.

Computer-related identity theft is punishable under Section 8 of RA 10175 by prisión mayor, a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. If no damage has yet been caused, the law provides for a penalty one degree lower. Penalties are imposed only after conviction.

What to do immediately

1. Preserve evidence before blocking or reporting the account

Fake profiles, posts, messages, and usernames can be edited or deleted quickly. Capture only material that you can lawfully access.

Preserve:

Full screenshots showing the account name, username or handle, profile photo, post or message, date, time, and surrounding context
The complete profile and post URLs—not only cropped screenshots
A screen recording showing how you opened the profile, its visible contents, and the URL
Copies of direct messages, comments, stories, advertisements, payment instructions, and voice notes
Emails from the platform, including security alerts and report acknowledgments
Phone numbers, email addresses, bank or e-wallet details, QR codes, transaction references, receipts, and delivery information used by the impersonator
The date and time you discovered the account and each later change
Names and contact details of people who received messages or sent money
Proof that the genuine account, photo, name, or business identity belongs to you
Evidence showing that you did not authorize the account
Any distinctive language, private facts, recurring contacts, or other circumstances that may help identify who controlled it

Keep the original files. Do not crop, annotate, rename, compress, or repeatedly forward your only copies. Store a backup and prepare a separate index describing each item. Ask witnesses to preserve their own original messages and devices.

The Supreme Court’s guide on proving control of a social-media account recognizes that direct and circumstantial evidence may matter, including admissions, observed account use, private knowledge, distinctive writing patterns, account history, and technical evidence. See XXX v. People, G.R. No. 274842.

Do not hack the fake account, secretly access another person’s device, plant tracking software, or impersonate the suspected operator. Those acts can create separate legal and evidentiary problems.

2. Secure the genuine accounts

If there is any possibility that your real account, email, or phone number was compromised:

Secure your primary email account first.
Change passwords using a trusted device. Use a different, strong password for every account.
Enable multi-factor authentication, preferably through an authenticator app or security key where available.
Review logged-in devices, active sessions, forwarding rules, recovery addresses, and connected applications.
Sign out unfamiliar sessions and revoke unknown app access.
Save security-alert emails before deleting anything.
Contact your telecommunications provider immediately if your SIM stopped working unexpectedly or you suspect a SIM-swap attempt.
Do not factory-reset a device that may contain evidence until an investigator or qualified forensic professional advises you.

3. Warn likely targets without making unproven accusations

Tell family, friends, customers, coworkers, or clients that a specific profile is unauthorized. Share the fake account’s exact URL or username and state that they should not send money, codes, documents, or personal information.

Keep the warning factual. Avoid publicly naming an alleged operator unless you have reliable evidence and legal advice. A wrong public accusation can expose you to a separate complaint.

4. Report the profile to the platform

Use the platform’s impersonation category rather than a generic spam report:

Report individual posts, advertisements, and messages as well as the account when appropriate. Keep confirmation emails, case numbers, and copies of everything submitted. Platforms may request identification; upload it only through the platform’s verified help page, not through a link sent by the impersonator.

A successful platform report may result in removal or modification, but it does not identify the operator for you and does not replace a police, NBI, bank, or privacy complaint.

Where to report in the Philippines

Situation	Appropriate channel	What the channel can address
You need rapid referral or anti-scam assistance	Call 1326, email 1326@dict.gov.ph, use the eGovPH reporting feature, or submit through the CICC portal	Coordinates or refers cybercrime and scam reports; this may not replace the sworn complaint required for a criminal case
You want a criminal investigation	PNP Anti-Cybercrime Group or NBI Cybercrime Division	Receives and investigates cybercrime complaints; investigators may take sworn statements and seek lawful preservation or disclosure of data
Your personal information was unlawfully used or disclosed	National Privacy Commission	Administrative remedies and investigation under the Data Privacy Act; not every impersonation case is necessarily a DPA violation
Money, cards, bank accounts, or e-wallets are involved	The provider’s fraud or consumer-assistance channel first; then the BSP Consumer Assistance Mechanism if unresolved	Flags transactions, secures financial accounts, handles disputes, and provides regulatory escalation
A SIM, phone, or scam text is involved	Your telco immediately; use the NTC reporting services when applicable	SIM replacement, number or device blocking, and telecommunications complaints
There is an immediate threat to life or safety	Dial 911 or go to the nearest police station	Emergency police, medical, fire, or rescue response

RA 10175 designates the PNP and NBI as the principal law-enforcement authorities for cybercrime. The NBI’s published procedure states that members of the public may proceed to its Cybercrime Division or a regional cybercrime center, undergo an interview, execute sworn statements, and submit relevant devices and supporting documents. The NBI lists no fee for its initial investigative-assistance process.

Call or check the official office page before traveling because addresses, intake arrangements, and contact details may change.

What to bring for a criminal report

Prepare:

A valid government-issued ID
A clear chronological narrative: what happened, when you discovered it, what information was copied, what the account did, who was contacted, and what harm resulted
The fake account’s URLs, handles, profile identifiers, and visible contact information
Printed and electronic copies of screenshots, recordings, messages, emails, transaction records, and platform reports
Proof of ownership of the genuine account, image, name, brand, phone number, or email
A list of witnesses and people who received messages or paid the impersonator
The device on which the messages or account were viewed, if requested
For a business or organization, proof that the representative is authorized to file and act for the entity

State honestly what you personally know and distinguish it from what another person told you. If you do not know who operated the account, say so. Provide facts that could help identify the operator instead of naming someone based only on suspicion.

The investigator may assist with a complaint sheet or sworn statement. If the case proceeds, a prosecutor—not the complainant or platform—determines whether the evidence supports probable cause for a particular offense.

Why prompt reporting matters

Under Section 13 of RA 10175, service providers must preserve traffic data and subscriber information for a minimum of six months from the transaction. Content data is preserved for six months from receipt of a lawful preservation order, subject to a possible one-time six-month extension by law enforcement.

This does not mean all content will remain available to the victim for six months. A user may delete it earlier, and platforms may apply different retention practices. A personal request to a platform is also not the same as a preservation order issued through law enforcement. Report promptly and ask the assigned investigator whether an urgent preservation request is appropriate.

There is no single safe deadline for every identity-theft, privacy, fraud, or related complaint. Prescriptive periods vary according to the offense, penalty, discovery, and procedural events. Do not postpone reporting because you believe you have several years.

Filing a complaint with the National Privacy Commission

The Data Privacy Act of 2012, Republic Act No. 10173, may apply when personal information is processed without a lawful basis or used for an unauthorized purpose. It gives a data subject rights that may include correction and, upon substantial proof, blocking, removal, or destruction of information that is false, unlawfully obtained, used without authority, or no longer necessary.

An NPC complaint is not automatic merely because a fake profile exists. You must identify the personal information processed, explain the respondent’s acts, and submit supporting proof.

Under the 2021 NPC Rules of Procedure, as amended, the usual steps are:

Inform the personal information controller, processor, or concerned entity in writing about the violation and give it an opportunity to act.
Preserve proof that the notice was received.
If it does not take timely or appropriate action, or does not respond within 15 calendar days after receiving the written notice, file the NPC complaint.

The NPC may waive exhaustion for good cause or in serious cases, including circumstances involving grave and irreparable harm, the absence of an adequate remedy, or patently illegal conduct. Explain and prove why a waiver is necessary rather than simply skipping the written notice.

Use the current NPC Complaint-Affidavit. It must be completed accurately, supported by evidence, notarized, and accompanied by a valid ID. The NPC accepts filing in person, by courier, or by scanning and emailing the required documents to complaints@privacy.gov.ph. Follow the NPC’s current requirements for digital signatures, PDF format, copies, and payment.

The NPC’s published schedule lists a ₱500 filing fee, a legal-research fee equal to 1% of the filing fee but not less than ₱10, and additional fees for claims of damages. Qualified indigent litigants may seek exemption by submitting the required proof. Verify the current NPC schedule of fees before filing.

If money or financial accounts are involved

Do not wait for the fake account to be removed.

Immediately call the bank, card issuer, remittance company, or e-wallet through the number in its official app, website, or card. Ask it to secure the account, record a fraud report, trace or flag the transaction where possible, and give you a reference number. Preserve the recipient account, QR code, transaction ID, amount, date, and exact time.

The BSP directs consumers to complain first through the financial institution’s Financial Consumer Protection Assistance Mechanism. If the institution’s handling is unsatisfactory, escalate through the BSP Online Buddy or submit the BSP complaint form to consumeraffairs@bsp.gov.ph with proof that you first reported the matter to the institution. See the BSP’s current complaint instructions.

A police or NBI complaint does not itself reverse a transfer, and a bank dispute does not replace a criminal report.

Common mistakes to avoid

Reporting or blocking the profile before saving its full URL and contents
Keeping only cropped screenshots that omit the username, date, or context
Deleting messages, resetting the phone, or discarding the SIM
Negotiating with or paying the impersonator
Clicking “verification” or “appeal” links sent by the fake account
Sending an ID, selfie, OTP, password, or recovery code through direct message
Assuming that mass reporting will preserve evidence or identify the operator
Publicly accusing a suspected person without adequate proof
Editing evidence or mixing originals with annotated copies
Giving inconsistent dates or exaggerating facts in different complaints
Assuming that a platform takedown, CICC report, NPC complaint, bank dispute, and criminal complaint are interchangeable
Paying an unofficial “recovery agent” who promises guaranteed deletion, arrest, or refund

When legal help is urgent

Consult a lawyer promptly if:

The impersonator is demanding money or threatening to publish private or intimate material
The account is stalking you, disclosing your address, or making credible threats
A child is being impersonated, contacted, exploited, or depicted sexually
A bank account, e-wallet, government ID, SIM, loan, or contract was opened or used in your name
The profile is issuing receipts, collecting investments, selling goods, or entering transactions as you or your business
You have substantial financial loss or reputational harm
The platform or operator is abroad and preservation or cross-border disclosure may be needed
You received a subpoena, prosecutor’s notice, counter-complaint, or demand letter
You are considering a civil action for damages, injunction, or other court relief

For an immediate threat to life or physical safety, dial 911 and go to the nearest police station. Do not wait for an online report to be answered.

Frequently asked questions

Can I report the account if I do not know who created it?

Yes. Give the PNP or NBI the URLs, messages, contact details, payment information, witnesses, and other identifying circumstances. Do not guess. The NPC’s rules likewise allow a complainant who does not know the respondent’s identity to state circumstances that may lead to identification.

Do I need a lawyer to make the initial report?

No. A victim may personally approach the PNP Anti-Cybercrime Group or NBI Cybercrime Division. A lawyer becomes especially useful when the losses are substantial, urgent court relief may be needed, several offenses overlap, or the evidence or operator is overseas.

Can I force the platform to reveal who owns the fake account?

Ordinary users generally cannot compel disclosure of subscriber or traffic data. Under RA 10175, law enforcement may seek the appropriate court warrant in an officially docketed investigation. The service provider must then comply with a lawful disclosure order within the period stated by law.

Is a screenshot enough?

It can be relevant, but a single screenshot may not establish who operated the account, whether it was altered, or the full context. Preserve URLs, original messages, witness testimony, account history, transaction records, devices, and other direct or circumstantial evidence.

What if the account copied only my name or photo and has not asked for money?

Report it to the platform and preserve it. Whether it amounts to a crime or privacy violation depends on lack of authority, purpose, manner of use, surrounding conduct, and proof. Actual financial loss is not the only possible harm, but a copied name or photo alone does not guarantee criminal liability.

Can friends report the impersonating account for me?

They may use the platform’s bystander-reporting feature, but the person impersonated—or a properly authorized representative—should make the principal platform and government complaints whenever possible. The victim is usually best placed to prove ownership and lack of consent.

Will reporting guarantee removal, arrest, or reimbursement?

No. Platforms apply their own policies; investigators require evidence; prosecutors assess probable cause; and financial providers separately evaluate disputed transactions. Keep every reference number and follow up through the same official channel.

Should I announce the suspected operator’s name online?

Usually not. Warn people about the unauthorized account, but avoid presenting suspicion as fact. Give identifying evidence privately to investigators or counsel.

Official references

This article provides general Philippine legal information, not legal advice for a particular case. Procedures and conclusions may depend on the documents, platform records, location, persons involved, and specific acts proved. Official sources and reporting procedures were checked as of August 3, 2026.