Quick answer

If someone creates a social media account using your name, photographs, business identity, or other identifying information without authority, preserve the evidence first, report the account through the platform’s impersonation or fraud channel, secure your real accounts, and report the incident to the Philippine National Police or National Bureau of Investigation.

A fake account may constitute computer-related identity theft when another person intentionally acquires, uses, misuses, transfers, possesses, alters, or deletes identifying information belonging to another person or organization, without right. However, an account is not automatically criminal merely because it uses a similar name or is anonymous. Liability depends on the information used, the account’s purpose, whether the user had authority, and the available evidence.

Act quickly. Platforms can remove accounts and electronic records may disappear. Philippine law generally requires service providers to preserve subscriber information and traffic data for at least six months from the transaction, but obtaining preserved or disclosed data ordinarily requires action by law-enforcement authorities and, where required, a court warrant.

What Philippine law covers

Computer-related identity theft

Section 4(b)(3) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, defines computer-related identity theft as the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of another person’s identifying information, without right. The protected identity may belong to a natural person or a juridical person, such as a corporation.

The Supreme Court upheld this provision in Disini v. Secretary of Justice, G.R. No. 203335, February 11, 2014. The Court explained that the law regulates specific unauthorized acts involving another person’s identifying data.

For offenses under Section 4(b), the statutory penalty is prisión mayor—generally six years and one day to twelve years—or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. If identity theft has not yet caused damage, the law provides for a penalty one degree lower. Only a court can determine guilt and the proper penalty after considering the charge and evidence.

Other offenses may also apply

Depending on what the account owner did, investigators may consider other laws or offenses, including:

Computer-related fraud, if unauthorized manipulation of computer data or interference with a computer system caused damage with fraudulent intent.
Computer-related forgery, if inauthentic computer data was created or knowingly used so that it would be treated as authentic for legal purposes.
Illegal access, if the offender entered your real account or another computer system without right.
Estafa or other fraud offenses, if the fake account obtained money, property, credit, or services through deceit.
Threats, coercion, extortion, stalking, or harassment, when supported by the particular messages and circumstances.
Libel committed through a computer system, if the account published a legally defamatory statement. Criticism, an insulting username, or an unflattering parody is not automatically cyber libel; all legal elements and applicable defenses must be examined.
Data Privacy Act violations, where personal information was processed without consent or another lawful basis. Consent is not the only possible lawful basis, so liability remains fact-dependent.

A parody, fan, role-playing, commentary, or similarly labeled account is not necessarily identity theft. Its legality depends on whether it used identifying information without right and on its actual conduct—not simply on whether the real person dislikes the account.

What to do immediately

1. Preserve the evidence before reporting or blocking

Capture enough information to identify the account and show what it did. Save:

The complete profile URL, not only the displayed username.
Screenshots of the profile, profile photograph, cover photograph, biography, username, follower count, creation information if visible, and any claim that the account is “official.”
Screenshots and direct links for posts, stories, advertisements, comments, messages, payment instructions, threats, or solicitations.
A screen recording showing how you opened the profile and relevant content.
The date and time of every capture, including your time zone where possible.
Emails and platform notifications, preferably with complete email headers.
Phone numbers, email addresses, website links, QR codes, bank or e-wallet details, transaction references, receipts, and delivery records associated with the account.
Messages from people who were contacted or deceived. Ask them to preserve their own original messages and transaction records.
Proof of your identity or ownership of the legitimate account, photograph, trademark, business name, or page involved.

Keep the original files. Do not crop, annotate, filter, rename, or repeatedly resave your only copy. Store a backup in a separate device or secure cloud location. A printed screenshot can help explain the incident, but the original electronic file and its metadata may be more useful to investigators.

Do not secretly access the offender’s account, guess passwords, install tracking software, or impersonate another person to obtain private data. Evidence gathered unlawfully may create separate legal problems.

2. Report the account to the platform

Use the platform’s in-app Report, Impersonation, Fake account, Scam, or Harassment function. If available, use the platform’s official impersonation form and provide the direct account URL.

State clearly:

Who is being impersonated.
Which name, image, or identifying information was copied.
That you did not create or authorize the account.
Whether the account is soliciting money, contacting customers, damaging your reputation, or threatening anyone.
The URL of your authentic account, if you have one.

Save the confirmation, report number, acknowledgment email, and every follow-up response. Report each fraudulent advertisement, page, group, or linked account separately if the platform treats them as separate items.

Platform reporting may secure a takedown, but it does not replace a criminal complaint. Conversely, reporting to law enforcement does not guarantee immediate platform removal.

3. Secure your real accounts and identity

Change the password of the affected account and the password of the email account connected to it. Use unique passwords and enable multi-factor authentication. Review active sessions, login history, recovery email addresses, phone numbers, linked applications, administrator roles, and recent changes.

If your real account was taken over, use the platform’s compromised-account recovery process. Warn contacts through a verified channel, but avoid reposting more of the victim’s sensitive data or sending people directly to harmful content.

If financial information was exposed or money was transferred:

Notify the bank, e-wallet, card issuer, or payment service immediately through its official fraud channel.
Ask whether the account or transaction can be frozen, recalled, disputed, or monitored.
Change online-banking credentials and secure the mobile number and email tied to the account.
Preserve the institution’s reference number and written response.

If a SIM, government ID, tax record, credit account, or company account may have been compromised, promptly notify the responsible provider or agency and ask what protective measures are available.

Where to report the crime

Republic Act No. 10175 designates the PNP and NBI as the principal law-enforcement authorities for cybercrime investigations.

PNP Anti-Cybercrime Group

You may approach the PNP Anti-Cybercrime Group or an appropriate PNP cybercrime unit. Bring your identification, evidence, incident timeline, and details of any witnesses or financial loss.

For an immediate threat to life or physical safety, contact emergency services or the nearest police station instead of waiting for an online response.

NBI Cybercrime Division

You may file with the NBI Cybercrime Division or an NBI regional or district office. The NBI’s published procedure for investigative assistance for victims of computer crimes involves completing a complaint sheet, undergoing an interview and initial investigation, and submitting supporting documents and sworn statements. Examination of a relevant device may also be requested.

The NBI also maintains an online complaint page and a directory of regional and district offices. Confirm current office arrangements through the official NBI website before travelling.

CICC assistance

The Cybercrime Investigation and Coordinating Center coordinates cybercrime-response efforts and public assistance. Its official public advisories identify 1326 and report@cicc.gov.ph as reporting channels. Because hotline availability and intake arrangements can change, verify the current channel through an official CICC or DICT page and use the PNP or NBI for a formal investigation when appropriate.

Do not submit a cybercrime complaint through the government Freedom of Information portal. FOI is for requesting government records, not for privately reporting crimes.

What to include in a complaint

Prepare a short chronological account containing:

Your full name and reliable contact details.
The fake account’s platform, username, profile URL, and any other identifiers.
When and how you discovered it.
The identifying information it used.
Why the use was unauthorized.
What the account posted, represented, requested, or obtained.
The names of affected witnesses or recipients.
Any money lost, accounts compromised, threats received, or reputational or business harm.
Steps already taken with the platform, bank, employer, school, or other organization.
A numbered list of attached evidence.

Separate what you personally observed from what another person told you. Identify assumptions as assumptions. Do not name a suspect as a confirmed offender unless the evidence supports that conclusion; accounts, numbers, and payment channels can themselves be compromised or registered under another person’s identity.

Investigators may ask you and witnesses to execute sworn statements or a complaint-affidavit. Read any affidavit carefully and correct inaccuracies before signing it.

Why prompt reporting matters

Under Section 13 of Republic Act No. 10175, service providers must preserve the integrity of subscriber information and traffic data for at least six months from the transaction. Content data must be preserved for six months from receipt of a law-enforcement preservation order, with a possible one-time extension.

This does not mean that a victim can compel a platform to reveal the account owner. Disclosure of protected computer data ordinarily requires official investigation and the applicable court process. Section 14 requires a court warrant before law enforcement orders disclosure of relevant subscriber, traffic, or other data in connection with an officially docketed complaint.

Report promptly so investigators can evaluate whether a preservation request or cybercrime warrant is necessary. Do not assume that a screenshot, deleted profile, or platform report automatically preserves backend records.

Legal prescriptive periods vary according to the offense, penalty, discovery of the violation, interruptions, and other circumstances. Platform appeal windows and financial-dispute deadlines may be much shorter. Obtain case-specific legal advice instead of waiting for what appears to be the longest possible period.

When to approach the National Privacy Commission

You may also consider a complaint to the National Privacy Commission (NPC) if your personal information was unlawfully collected, used, altered, disclosed, or otherwise processed.

Under the NPC’s 2021 Rules of Procedure, a complainant ordinarily must first notify the personal information controller, processor, or concerned entity in writing and allow appropriate action. A complaint is generally not given due course if the entity acted appropriately or if fewer than 15 calendar days have passed since it received the written notice without responding.

The NPC may waive this requirement for good cause or a serious privacy violation, including circumstances involving grave and irreparable harm, the absence of a plain and adequate remedy, or patently illegal conduct. Whether an exception applies is for the NPC to determine.

The NPC instructs complainants to submit a completed and notarized complaint-assisted form or a properly verified complaint, together with evidence and relevant witness affidavits. Its official guidance lists personal submission, registered mail, courier, and authorized electronic mail as possible methods. Check the current form, fees, address, and filing instructions on the NPC’s formal complaint page before filing.

An NPC case concerns data-protection rights and administrative remedies. It is separate from a criminal investigation by the PNP or NBI, although the same incident may support more than one lawful remedy.

If the account is threatening or exploiting someone

Seek urgent help when the account:

Threatens violence or reveals a person’s home, school, workplace, or live location.
Uses intimate images or demands money, more images, or sexual acts.
Targets a child.
Is actively deceiving contacts into sending money.
Has taken over email, banking, e-wallet, business, or government-service accounts.
Is destroying evidence or continuing a coordinated impersonation campaign.

Preserve the messages, stop negotiating where safety permits, and contact law enforcement immediately. Do not pay an extortion demand merely because the offender promises to delete material; payment may not end the threat. If intimate material or a child is involved, avoid forwarding or publicly reposting it. Show it only through appropriate platform and official reporting channels.

Common mistakes to avoid

Reporting or blocking the account before saving its URL and content.
Saving only the display name, which the account owner can change.
Publicly confronting the account and alerting the operator before evidence is preserved.
Encouraging mass harassment, doxxing, or hacking in response.
Editing screenshots without retaining untouched originals.
Deleting suspicious messages from your own device.
Sending full government IDs to unofficial pages or unverified “agents.”
Paying people who promise to trace an IP address, reveal a platform subscriber, or guarantee arrest.
Treating a platform takedown as proof that a crime was committed.
Assuming a similar name, satire, or anonymous criticism is automatically identity theft.
Delaying reports because no money has yet been lost; the statute expressly contemplates identity theft before damage occurs.

Frequently asked questions

Can I report a fake account even if I do not know who created it?

Yes. Provide the account URL, evidence, timeline, and all known linked details. Identifying the operator may require records held by the platform, telecommunications provider, or payment service and the appropriate legal process.

Is using my photograph enough to establish identity theft?

Not necessarily. A photograph can be identifying information, but criminal liability still depends on intentional use without right and the surrounding facts. Context matters, including permission, news reporting, parody, commentary, public availability, and the account’s representations or conduct.

Should I report to the PNP, NBI, CICC, or NPC?

For investigation of a suspected cybercrime, report to the PNP or NBI. The CICC can provide coordinated assistance and intake support. Use the NPC process when the incident also involves a possible violation of data-privacy rights. These routes may overlap, but they serve different functions.

Will the platform disclose the offender’s identity to me?

Usually, a victim cannot compel direct disclosure merely by submitting a platform report. Subscriber or traffic information may require a valid law-enforcement request and court warrant. Preserve evidence and file promptly so investigators can assess the proper process.

Do I need a lawyer to report?

You may approach the PNP, NBI, or CICC without a private lawyer. Legal assistance becomes especially useful when preparing a formal complaint-affidavit, seeking urgent court relief, responding to counter-allegations, pursuing damages, or dealing with multiple possible offenses or jurisdictions.

Can I post the suspected offender’s name online?

Doing so carries risk if identification is uncertain or the statements are defamatory, threatening, or disclose protected information. Give the evidence to investigators and warn contacts about the fake account without presenting an unverified suspect as conclusively guilty.

What if the fake account has already disappeared?

Report it anyway if you preserved evidence or witnesses received messages. Provide old URLs, screenshots, notification emails, transaction records, and the date and time the account disappeared. Investigators can determine whether further preservation or disclosure efforts remain possible.

Official references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. The applicable remedy depends on the account’s content, authority, evidence, harm, parties, and jurisdiction. Official legal and procedural sources were checked as of September 3, 2026.