Finding out that someone is using your name, photo, ID, or marketplace profile to scam buyers can feel frightening and unfair. You may be worried that victims will blame you, that your reputation will be damaged, or that your bank, e-wallet, employer, landlord, or immigration status could be affected. In the Philippines, this situation can involve identity theft, estafa, data privacy violations, and online consumer fraud, depending on how your identity was used. This article explains what the law says, what evidence to preserve, where to report, and how to protect yourself if a scammer is using your name on Facebook Marketplace, Carousell, Shopee, Lazada, TikTok Shop, Instagram, Viber, Telegram, or another online platform.

What Counts as an Online Marketplace Scam Using Your Name?

This usually happens in one of these ways:

Someone creates a fake seller account using your real name and photo.
A scammer uses your stolen ID, selfie, business name, or mobile number to make buyers trust them.
Your legitimate marketplace account is hacked and used to post fake listings.
The scammer tells buyers to send payment to a bank or e-wallet account that appears connected to you.
A fake account copies your photos, listings, reviews, or business page.
Buyers message you, tag you publicly, or threaten to file a case because they believe you received their money.

The most important point is this: being named by the scammer does not automatically make you legally liable. Liability depends on evidence that you participated in the scam, received the money, allowed your account to be used, or benefited from the transaction. If your name or identity was used without your permission, you are also a victim.

Philippine Laws That May Apply

Cybercrime Prevention Act: Computer-Related Identity Theft

Under Section 4(b)(3) of Republic Act No. 10175, the Cybercrime Prevention Act of 2012, computer-related identity theft includes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person or entity without right. This can cover the unauthorized use of your name, photo, ID, marketplace profile, business page, or other identifying information online. The full law is available through the Cybercrime Prevention Act of 2012 on Lawphil. (Lawphil)

If the scammer used a fake account, hacked account, edited screenshots, fake proof of payment, fake courier receipts, or manipulated online listings, the same law may also involve computer-related fraud or computer-related forgery. RA 10175 also treats crimes committed through information and communications technology more seriously when the underlying act is already punishable under the Revised Penal Code or special laws.

Revised Penal Code: Estafa and Other Deceits

Most online marketplace scams are also examined as estafa under Article 315 of the Revised Penal Code. Estafa generally involves fraud or deceit that causes damage to another person. In marketplace scams, the deceit may be a fake listing, false seller identity, fake shipping promise, fake payment confirmation, or pretending to be another person to gain the buyer’s trust.

For example, estafa may be present if the scammer:

Pretended to be you to sell a phone, appliance, ticket, gadget, vehicle part, condo rental, or concert pass;
Induced the buyer to pay through GCash, Maya, bank transfer, or remittance;
Never delivered the item or delivered something substantially different;
Used false pretenses before or at the time of payment.

The Supreme Court has repeatedly described fraud or deceit causing damage as the core of estafa. In People v. Balasa, G.R. No. 215132, the Court discussed that the gravamen of estafa is the employment of fraud or deceit to the damage or prejudice of another. (Lawphil)

If the conduct does not fit estafa perfectly, prosecutors may also consider Article 318 of the Revised Penal Code on other deceits, depending on the facts.

Data Privacy Act: Misuse of Personal Information

If your personal information was collected, posted, shared, sold, or used without authority, the Data Privacy Act of 2012, Republic Act No. 10173, may apply. Personal information can include your name, photo, address, phone number, email address, ID details, workplace, account details, or any combination of details that identifies you. The law and the National Privacy Commission’s materials are available through the NPC Data Privacy Act page. (National Privacy Commission)

The National Privacy Commission (NPC) allows data subjects to file complaints when they are the subject of a privacy violation or personal data breach. The NPC’s complaint process generally requires a filled-out and notarized complaint-assisted form or verified complaint, supporting evidence, and proof that the respondent was first informed in writing and given an opportunity to act, unless circumstances justify otherwise. (National Privacy Commission)

Civil Code: Damage to Name, Reputation, Privacy, and Peace of Mind

Even when the immediate problem is criminal, there may also be a civil aspect. Under the Civil Code of the Philippines, Articles 19, 20, and 21 require people to act with justice, give everyone their due, and observe honesty and good faith. A person who causes damage contrary to law, morals, good customs, public order, or public policy may be liable for damages.

Article 26 of the Civil Code is especially relevant when someone’s dignity, privacy, or peace of mind is disturbed. If your name or photo is used in a scam and you suffer reputational harm, harassment, lost business, job issues, or emotional distress, these facts may support a civil claim for damages, depending on evidence.

Internet Transactions Act: Online Platforms and Online Merchants

Republic Act No. 11967, the Internet Transactions Act of 2023, protects online consumers and merchants engaged in covered internet transactions. It created the DTI E-Commerce Bureau and applies to certain business-to-business and business-to-consumer internet transactions where one party is in the Philippines or where the platform, e-retailer, or online merchant avails of the Philippine market. The law expressly excludes ordinary consumer-to-consumer transactions, so not every Facebook Marketplace or casual resale dispute falls under it. (Supreme Court E-Library)

This distinction matters. If the fake account is posing as a business seller, registered online merchant, or platform-based shop, DTI remedies may be relevant. If it is a purely person-to-person scam using a dummy Facebook account, law enforcement and cybercrime reporting are usually more important.

Anti-Financial Account Scamming Act: Bank and E-Wallet Misuse

If the scam involves bank accounts, e-wallets, payment credentials, or money-mule activity, Republic Act No. 12010, the Anti-Financial Account Scamming Act (AFASA) of 2024, may also be relevant. AFASA covers financial account scamming and includes acts involving the use, borrowing, or allowing the use of financial accounts for proceeds known to come from crimes or social engineering schemes. It also covers opening accounts using fictitious names or another person’s identity documents. (Lawphil)

This is important if your ID was used to open an e-wallet or bank account, or if a scammer pressured you to “receive money for a buyer” or “lend” your account. Letting someone use your bank or e-wallet account can expose you to serious legal risk even if you did not personally talk to the buyer.

What to Do Immediately If Your Name Is Being Used in a Scam

1. Preserve Evidence Before Anything Disappears

Do not rely only on cropped screenshots. Online scam evidence often disappears when the fake account is deleted, the listing is taken down, or the scammer changes their name.

Save:

Full-page screenshots showing the URL, profile name, date, time, and visible platform details;
Screen recordings showing how you reached the fake profile or listing;
Chat logs between the scammer and buyers, if buyers send them to you;
Payment receipts showing account name, account number, GCash/Maya number, bank, reference number, and timestamp;
Links to the fake listing, fake account, duplicate page, or marketplace profile;
Buyer complaints, public posts, comments, tags, and private messages;
Your own proof that you did not create or control the account;
Login alerts, password reset emails, or device access notices if your real account was hacked.

For electronic evidence, the Electronic Commerce Act of 2000, RA 8792, recognizes electronic documents and electronic data messages, but authenticity and integrity still matter. The person using electronic evidence may need to show that the record is what they claim it is, and that the information was generated, stored, or communicated reliably. (Lawphil)

2. Secure Your Own Accounts

Change passwords immediately for:

Marketplace accounts;
Facebook, Instagram, TikTok, Gmail, Yahoo, or Apple ID;
GCash, Maya, online banking, crypto wallets, and payment apps;
Email accounts connected to password recovery;
Cloud storage accounts where ID photos may be stored.

Turn on two-factor authentication. Log out unknown devices. Check account recovery emails and mobile numbers. If your SIM may have been compromised, coordinate with your telecom provider.

3. Publicly Clarify Without Defaming Anyone

If buyers are messaging you, make a calm statement such as:

“My name/photo is being used by an unauthorized account. I did not create that listing, I did not receive payment, and I have reported the matter to the platform and the proper authorities. Please preserve your screenshots, chat logs, payment receipts, and the profile link.”

Avoid calling a specific person a criminal unless you have verified evidence. A public warning is useful, but careless accusations can create a separate libel or cyberlibel issue.

4. Report the Account to the Platform

Use the platform’s in-app reporting tools and choose the closest category:

Impersonation;
Scam or fraud;
Fake account;
Intellectual property or copied content;
Hacked account;
Unauthorized use of personal information.

Ask the platform to preserve records such as login details, IP logs, account registration information, linked phone numbers, payment links, and transaction records. Platforms may not release these directly to you because of privacy rules, but law enforcement may request them through the proper process.

5. Contact the Bank, E-Wallet, or Payment Provider

If your account is involved, report it immediately to your bank or e-wallet provider. If the scammer’s account details are known, victims should also report the receiving account.

Provide:

Scam listing link;
Chat screenshots;
Payment receipt and reference number;
Account name and number;
Date and time of transfer;
Police/NBI report reference, if already available.

Ask whether the provider can flag the transaction, freeze the suspicious account, preserve records, or start a dispute process. Speed matters because funds are often moved quickly through several accounts.

6. Report to Cybercrime Authorities

You may report to:

Office or Channel	Best For	Practical Notes
PNP Anti-Cybercrime Group (PNP-ACG)	Online identity theft, marketplace scams, hacked accounts, fake profiles	Useful when you need cybercrime investigation, account tracing, or referral to prosecutors
NBI Cybercrime Division	Computer crimes, complex scams, identity misuse, digital evidence	NBI’s Citizen’s Charter lists investigative assistance for victims of computer crimes as available to the general public, with complaint forms and sworn statements handled by CCD personnel. (National Bureau of Investigation)
CICC / Inter-Agency Response Center 1326	Cyber fraud guidance and urgent scam reporting	Government reports identify Hotline 1326 as a channel for victims of cyber fraud. (Philippine News Agency)
DTI Fair Trade Enforcement Bureau / E-Commerce channels	Online seller complaints involving identifiable merchants or covered online businesses	DTI says complaints against online sellers may be sent to the Fair Trade Enforcement Bureau and copied to its e-commerce office. (ecommerce.dti.gov.ph)
National Privacy Commission	Misuse, disclosure, or breach of personal data	Use when your personal information was mishandled, posted, or processed without authority

How to Prepare a Cybercrime Complaint in the Philippines

A strong complaint is organized, chronological, and evidence-based. Investigators and prosecutors need facts, not just anger or suspicion.

Step-by-Step Process

Write a timeline. Start from the date you discovered the fake account or hacked account. Include when buyers contacted you, what the scammer posted, and what payment details were used.
Identify all accounts involved. List usernames, profile links, page names, phone numbers, email addresses, bank names, e-wallet numbers, courier tracking numbers, and other identifiers.
Prepare screenshots and files. Arrange them by date. Label each file clearly, such as 01_fake_listing_June_1_2026.pdf or 02_buyer_chat_payment_receipt.pdf.
Get statements from buyers or witnesses. If a buyer is willing, ask them for a written statement explaining how they found the listing, who they talked to, how much they paid, where they sent payment, and what happened after.
Execute a complaint-affidavit. A complaint-affidavit is a sworn written statement. It should explain who you are, what happened, why you believe your identity was misused, what evidence supports your claim, and what relief or investigation you are requesting.
Bring valid ID and proof of identity. Bring government ID, proof of ownership of your real account or business page, business registration if relevant, and proof that the fake account is not yours.
File with PNP-ACG, NBI Cybercrime Division, or the prosecutor’s office. In many cases, law enforcement first conducts case build-up before referral to the prosecutor. For stronger evidence, you may later be asked to execute supplemental affidavits.
Follow up using reference numbers. Keep copies of complaint sheets, receiving stamps, email acknowledgments, or blotter/reference numbers.

Documents to Prepare

Document or Evidence	Why It Matters
Valid government ID	Proves your identity as the person being impersonated
Complaint-affidavit	Main sworn narrative of what happened
Screenshots and screen recordings	Shows fake profile, fake listing, chats, comments, and public posts
URLs and profile links	Helps investigators locate accounts before deletion
Payment receipts	Connects the scam to specific bank/e-wallet accounts
Buyer/witness affidavits	Shows that real victims were deceived by the fake identity
Platform reports and replies	Shows you acted promptly to report impersonation
Bank/e-wallet incident tickets	Helps prove you tried to stop account misuse
Proof your account was hacked, if applicable	Login alerts, password reset emails, unfamiliar devices
Business registration, if your shop name was copied	Helps prove legitimate ownership of the business identity

Should You Go to the Barangay First?

Usually, serious online marketplace scams, identity theft, and cybercrime complaints should not be treated as ordinary barangay disputes.

Under the Katarungang Pambarangay rules in the Local Government Code, barangay conciliation generally applies only to disputes within the barangay’s authority. Offenses punishable by imprisonment exceeding one year or a fine exceeding ₱5,000 are outside barangay conciliation coverage. (Lawphil)

A barangay blotter may still be useful as an early record that you reported the incident, especially if neighbors, buyers, or local contacts are harassing you. But for cybercrime investigation, account tracing, platform records, and prosecution, the more relevant offices are PNP-ACG, NBI, the prosecutor, NPC, DTI, or payment providers.

What If Buyers Are Threatening to Sue You?

Stay calm and avoid arguing online. Ask them to send the evidence privately and preserve their payment records. You can say:

You did not create or control the fake account.
You did not receive the money.
You are also reporting the identity misuse.
They should report the transaction to their bank/e-wallet, the platform, and cybercrime authorities.
You are willing to provide a statement that your identity was used without permission.

Do not promise refunds unless you actually received the money or have a legal or business reason to compensate them. A refund offer can sometimes be misunderstood as an admission that you were the seller.

If buyers file a complaint naming you, your defense will likely depend on evidence such as:

You had no access to the fake account;
The payment account was not yours;
The phone number or email used was not yours;
You reported the impersonation promptly;
Your real accounts show no transaction with the buyer;
You did not benefit from the payment.

What If the Scammer Used Your GCash, Maya, or Bank Account?

This is more serious. If money passed through your account, investigators may ask why the account was used and whether you knew about the scam.

Common risky situations include:

You lent your GCash or bank account to a friend, partner, relative, or “online job recruiter.”
Someone asked you to receive money and forward it to another account.
You sold or rented your verified e-wallet account.
Your ID was used to open an account without your knowledge.
Your SIM or phone was taken over.

Under AFASA, money-mule activity and the use of financial accounts in fraudulent schemes can create criminal exposure. If your account was used without your knowledge, report immediately, preserve all access logs and messages, and ask the bank or e-wallet provider to investigate unauthorized use.

What If You Are a Filipino Abroad or a Foreigner Outside the Philippines?

Filipinos abroad and foreigners can still be involved in Philippine cybercrime complaints if the scam affected persons in the Philippines, used Philippine platforms or payment channels, or involved accounts and victims located in the Philippines.

Practical points:

If you are abroad, you may need a notarized or consularized affidavit for use in the Philippines.
Philippine embassies and consulates can notarize certain private documents signed by individuals for use in the Philippines, and personal appearance is commonly required. (Philippine Consulate LA)
In many Apostille Convention countries, a locally notarized document may need an apostille from the competent authority before it is used in the Philippines, depending on the document and receiving office. The Philippine Embassy in Washington, D.C. explains the general process for private documents as local notarization, apostille by the competent authority, then use in the Philippines. (Philippine Embassy)
If you authorize someone in the Philippines to file or follow up for you, prepare a Special Power of Attorney (SPA) with proper notarization, consular acknowledgment, or apostille as required by the receiving office.

For foreigners in the Philippines, bring your passport, ACR I-Card if applicable, visa documents if relevant, and proof of your local address or contact details when reporting.

Common Pitfalls That Hurt Your Case

Deleting Conversations Too Early

Do not delete chats, posts, or emails before preserving them. Even embarrassing messages may become important evidence.

Only Saving Cropped Screenshots

Cropped screenshots are easy to challenge. Save the full screen, URL, date, time, profile details, and surrounding context.

Posting Accusations Without Evidence

Publicly warning people is understandable. But naming a person as the scammer without sufficient proof can expose you to defamation, libel, or cyberlibel allegations.

Paying Buyers Just to Make the Issue Go Away

This may encourage more claims and may be misconstrued as admitting involvement. If you did not receive the money, focus on documentation and reporting.

Ignoring the First Complaint

If the first buyer message seems rude or threatening, you may be tempted to block them. A better approach is to document the message, respond calmly once, ask for evidence, and then report the impersonation.

Letting Someone Use Your Account “Just Once”

Never lend your verified seller account, bank account, e-wallet, SIM, ID, or selfie verification. Scammers often recruit “helpers” by offering commissions for receiving payments. That can turn a victim or bystander into a suspect.

Practical Timeline: What Usually Happens

Stage	Usual Timeline	What to Expect
Platform report	Same day to several days	Account may be reviewed, limited, or removed; response quality varies
Bank/e-wallet report	Same day to several weeks	Provider may investigate, flag, freeze, or deny reversal depending on timing and evidence
PNP/NBI initial report	Same day to a few days	Intake, interview, complaint sheet, evidence review
Case build-up	Weeks to months	Investigators may request platform/payment records, additional affidavits, or witness statements
Prosecutor evaluation	Months or longer	Complaint may proceed to preliminary investigation if evidence supports charges
NPC complaint	Varies	NPC may evaluate form, exhaustion of remedies, evidence, jurisdiction, and possible remedies
Civil or criminal court case	Months to years	Timeline depends on evidence, respondent identity, court docket, and complexity

Timelines vary widely. The most common bottlenecks are identifying the real person behind a dummy account, obtaining platform records, tracing money through several accounts, incomplete affidavits, and victims scattered across different cities or countries.

Frequently Asked Questions

Can I be arrested because a scammer used my name online?

Not simply because your name appeared on a fake account. Authorities need evidence linking you to the scam, such as control of the account, receipt of money, communications with buyers, or participation in the scheme. Report the impersonation early so there is a record that you are also a victim.

What if the payment account has my name but I did not open it?

Report it immediately to the bank, e-wallet provider, PNP-ACG or NBI, and consider an NPC complaint if your ID or personal data was used. Ask the provider to investigate account opening records, device logs, KYC documents, linked numbers, and transaction history.

Is using my photo and name on Facebook Marketplace identity theft?

It can be, especially if your identifying information was used without authority to deceive buyers or cause harm. Under RA 10175, computer-related identity theft covers the unauthorized use or misuse of another person’s identifying information.

Should I file with PNP-ACG or NBI?

Either may handle cybercrime complaints. PNP-ACG is commonly approached for online scams, fake accounts, and cybercrime reports. NBI Cybercrime Division also handles investigative assistance for victims of computer crimes. Choose the office most accessible to you, or the one handling related complaints from the victims.

Can DTI help with a Facebook Marketplace scam?

DTI may help when the issue involves an online seller, merchant, or covered online business. But many person-to-person marketplace scams are better handled through cybercrime authorities, payment providers, and the platform. The Internet Transactions Act expressly excludes ordinary consumer-to-consumer transactions.

Can I ask the platform to reveal the scammer’s identity?

You can ask the platform to preserve and investigate records, but platforms often will not release private user data directly to private individuals. Law enforcement or courts may request records through proper legal channels.

What if the scammer is overseas?

Philippine authorities may still investigate if victims, payment accounts, platforms, or effects are in the Philippines. Cross-border cases are slower because they may require coordination with foreign platforms, foreign law enforcement, or mutual legal assistance channels.

Do I need a lawyer to file a cybercrime complaint?

Many people file initial complaints directly with PNP-ACG, NBI, NPC, DTI, banks, or platforms. A lawyer can help when the facts are complex, when you are being accused, when money passed through your account, when you need a carefully drafted affidavit, or when a prosecutor or court proceeding begins.

Can I recover damages for reputational harm?

Possibly, if you can prove wrongful conduct, damage, and causation. Civil Code provisions on abuse of rights, acts contrary to law or morals, and interference with dignity, privacy, or peace of mind may be relevant. Evidence of lost customers, job issues, public harassment, mental distress, or business disruption can matter.

What is the best first step if buyers are already posting my name publicly?

Preserve the posts, issue a calm clarification, report the fake account, ask buyers for evidence, and file reports with the platform and cybercrime authorities. Avoid online fights. Your goal is to create a clear record that your identity was misused and that you acted promptly.

Key Takeaways

Using your name, photo, ID, or account to scam buyers can involve computer-related identity theft, estafa, data privacy violations, and financial account scamming.
You are not automatically liable just because a scammer used your name; liability depends on proof of participation, control, receipt of money, or benefit.
Preserve full digital evidence: screenshots, URLs, screen recordings, payment receipts, buyer messages, and platform reports.
Report quickly to the platform, bank or e-wallet provider, PNP-ACG, NBI Cybercrime Division, CICC 1326, NPC, or DTI depending on the facts.
Do not lend your bank account, e-wallet, SIM, ID, or verified marketplace account to anyone.
If you are abroad, prepare properly notarized, consularized, or apostilled documents if a Philippine office requires sworn statements or an SPA.
The earlier you document and report the impersonation, the easier it is to show that you are a victim, not the scammer.