Quick answer

If someone creates a social media account using your name, photos, business identity, or other identifying information without authority, preserve the evidence first, report the account through the platform’s impersonation channel, and promptly file a complaint with the Philippine National Police Anti-Cybercrime Group (PNP-ACG) or the National Bureau of Investigation Cybercrime Division (NBI-CCD).

A fake account is not automatically a crime merely because it resembles another account. Criminal liability depends on what information was used, whether the use was intentional and without right, and what the account did. Impersonation used to deceive people, solicit money, damage a reputation, access accounts, threaten someone, or misuse personal data may involve computer-related identity theft and other offenses.

Platform reporting can remove an account, but it does not replace a criminal complaint.

When a fake account may amount to identity theft

Section 4(b)(3) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, defines computer-related identity theft as the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion—without right—of identifying information belonging to another natural or juridical person.

This may cover an account that intentionally uses another person’s or company’s identifying information to pass itself off as the real person or organization. The account’s name, photographs, contact details, work information, documents, messages, payment instructions, and overall presentation may all be relevant. Whether the legal elements are present depends on the complete facts and evidence.

The Supreme Court upheld this offense against constitutional challenge in Disini v. Secretary of Justice.

For computer-related identity theft, Section 8 of Republic Act No. 10175 provides imprisonment of prision mayor, a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. If no damage has yet occurred, the law provides for a penalty one degree lower. Only a court can determine guilt and the proper penalty.

Depending on what the fake account does, other laws may also be relevant:

Computer-related fraud or forgery, if data is manipulated or used for a fraudulent or dishonest scheme
Estafa, threats, coercion, or other offenses committed through information and communications technology
Cyber libel, but only if all legal elements of libel are present—not simply because a post is false, critical, or offensive
Violations of the Data Privacy Act of 2012, Republic Act No. 10173, where personal data is unlawfully processed or disclosed
Gender-based online sexual harassment, voyeurism, or child-protection offenses when the impersonation involves sexual harassment, intimate content, or a minor

A clearly disclosed parody, fan, commentary, or fictional account presents different issues from an account designed to make people believe it is the real person. Labels are relevant but not necessarily conclusive if the account is still being used deceptively.

What to do immediately

1. Address any immediate danger or financial loss

Call 911 or go to the nearest police station if the account is making credible threats, publishing your location, stalking you, blackmailing you, threatening sexual violence, or placing anyone in immediate danger.

If money, banking information, an e-wallet, a credit card, or a financial account is involved:

Contact the bank, e-wallet provider, card issuer, or other financial institution immediately through its official fraud channel.
Ask it to secure the affected account, record the disputed transaction, and preserve relevant records.
Report the recipient account, mobile number, transaction reference, amount, date, and time.
Change compromised credentials from a trusted device.
If the institution does not satisfactorily resolve your complaint, escalate it through the BSP Consumer Assistance Mechanism. The BSP generally requires the consumer to complain to the supervised institution first.

Do not send more money because the impersonator promises a refund, account recovery, evidence release, or deletion of embarrassing material.

2. Preserve evidence before the account disappears

Save evidence before blocking the account or asking many people to report it. Capture:

The full profile URL—not only the displayed username
The username, display name, bio, profile photograph, account ID if visible, and creation information if available
Every relevant post, story, advertisement, comment, group, marketplace listing, or direct message
Dates and times, including the time zone where relevant
Links to individual posts and messages
Screen recordings showing how you opened the profile and navigated to the content
Emails and platform notifications, including their headers where available
Payment requests, QR codes, bank or e-wallet details, receipts, and transaction references
Names and statements of people who were contacted or deceived
Your authentic profile and records showing that the name, photograph, business, or other identity belongs to you
The platform’s report confirmation and reference number
A chronological written account of what happened and how you discovered it

Keep the original files and devices. Avoid relying only on cropped, annotated, or recompressed screenshots. You may prepare marked copies for explanation, but retain the untouched originals. Back them up in at least two secure places.

Do not log in to the fake account, attempt to hack it, secretly install software on another person’s device, or obtain information through unlawful access. Illegally obtained evidence can create separate legal and privacy problems.

3. Report the account to the platform

Use the platform’s dedicated impersonation process:

Also report individual scam posts, private messages, threats, or intimate content when the platform provides a separate reporting category. An impersonation report may address the account itself, while a content report addresses a particular post or message.

Use only official help pages. A platform may request proof of identity. Submit identification only through its authenticated reporting form—not by private message to the fake account or an unverified “support agent.” Redact information the form does not require when the platform permits it.

Tell relatives, customers, coworkers, or friends through your authentic account or another trusted channel that the account is fake. Keep the warning factual: identify the exact fake URL and state that people should not send money, disclose codes, or transact with it. Avoid publicly accusing a particular person unless you have reliable evidence.

How to make a criminal report

Republic Act No. 10175 designates the NBI and PNP as the law-enforcement authorities responsible for cybercrime cases. You may approach either agency.

Option 1: National Bureau of Investigation

Proceed to the NBI Cybercrime Division or an appropriate NBI regional or district office. The NBI Citizen’s Charter for victims of computer crimes states that a complainant may be asked to:

Complete a complaint sheet.
Undergo an initial interview and investigation.
execute a sworn statement or submit a prepared affidavit.
Submit supporting records and witness statements.
Allow examination of a relevant device when necessary.

The NBI’s current directory lists the Cybercrime Division at ccd@nbi.gov.ph, but an email inquiry may not by itself complete the sworn complaint process. Confirm the office and requirements through the NBI website before travelling.

Option 2: Philippine National Police

Contact the PNP Anti-Cybercrime Group or its appropriate regional anti-cybercrime unit. You may also go to the nearest police station for immediate assistance, especially where threats or ongoing harm are involved. Ask whether the matter will be endorsed to a cybercrime investigator and what is required to formalize the complaint.

A social media message to an agency or a police blotter entry can document your initial report, but it may not be the same as executing a complaint-affidavit and submitting evidence for investigation. Ask for:

The complaint, blotter, or reference number
The investigator’s name and official contact details
A list of missing documents
Instructions for submitting original electronic evidence
Confirmation that a request to preserve platform or service-provider data will be considered

What to bring

Prepare a folder containing:

A valid government-issued ID
A clear, dated chronology
The fake account’s exact URLs and usernames
Printed copies and digital originals of the evidence
Proof of your identity or authority to represent the person or business impersonated
The authentic account’s URL
Platform acknowledgments and reference numbers
Proof of financial loss or attempted transactions
Witness names and contact details
A list of suspected persons, if any, clearly separating facts from assumptions

Be accurate. If you do not know who created the account, say so. Provide clues—such as reused phone numbers, account names, payment details, writing patterns, or people contacted—but do not present speculation as fact.

Why prompt reporting matters

Under the Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC, law-enforcement authorities may seek court-authorized disclosure, interception, search, seizure, or examination of computer data when the legal requirements are met.

Traffic data and subscriber information must generally be preserved by a service provider for at least six months from the transaction. Content data is preserved for six months from the provider’s receipt of a law-enforcement preservation order, subject to the rule’s extension provisions.

These six-month periods are data-preservation rules—not a general six-month deadline for victims to file a case. Prescription varies according to the offense, penalty, facts, and procedural history. Report promptly because accounts, messages, logs, and transaction trails can become harder to recover. A victim cannot personally compel a platform to disclose another user’s confidential subscriber or IP information; investigators normally use lawful court processes.

When to consider a National Privacy Commission complaint

A fake account may also raise data-privacy issues if personal information was unlawfully obtained, processed, disclosed, or used. The Data Privacy Act gives a data subject qualified rights to dispute inaccurate information and seek the suspension, blocking, removal, or destruction of personal information that is false, unlawfully obtained, used for unauthorized purposes, or no longer necessary.

However, an NPC complaint is not a substitute for a criminal complaint. The NPC addresses data-protection violations; it does not perform the PNP’s or NBI’s criminal-investigation function. The Data Privacy Act also contains exceptions, and its application to an individual impersonator or a platform depends on the actor, purpose, data, and surrounding facts.

Under the 2021 NPC Rules of Procedure, as amended, a complainant generally must first:

Notify the personal information controller, processor, or concerned entity in writing.
Give it an opportunity to act.
Wait up to 15 calendar days for a response.

The NPC may waive these requirements for properly shown good cause or serious circumstances, including grave and irreparable harm, lack of an adequate remedy, or patently illegal conduct.

Use the NPC’s current formal complaint instructions and Complaint-Affidavit form. A formal complaint must be written, signed, verified, and notarized, and should include the parties’ information, a factual narration, evidence, prior correspondence, requested relief, and verification and certification against forum shopping. If the respondent is unknown, describe the circumstances that may lead to identification.

The current basic NPC complaint filing fee is ₱500, plus the applicable legal research fee and any additional fee for a damages claim. The NPC’s official fee schedule provides exemptions for qualifying indigent litigants, subject to income, property, and documentary requirements. Check the official page for the latest submission and payment instructions before filing.

Secure your real accounts and identity

If your genuine account was hacked, treat that as a separate account-compromise problem:

Change the password for the affected account and the connected email account.
Use a unique password and enable multi-factor authentication.
Review active sessions and sign out unfamiliar devices.
Check whether the recovery email address or mobile number was changed.
Remove unfamiliar connected apps.
Secure the mobile number with your telecommunications provider if the SIM may have been compromised.
Search your name, common username variations, mobile number, business name, and photographs for additional fake accounts.
Monitor financial accounts and official identification records for unauthorized activity.

Changing your password will not remove a separately created clone account, but it can prevent the impersonator from taking over your authentic account as well.

Common mistakes to avoid

Reporting the account before saving its URL, messages, and transaction details
Keeping only cropped screenshots with no username, date, or context
Deleting conversations or resetting a device before investigators advise you
Assuming a platform takedown automatically starts a criminal case
Treating a blotter entry as the final complaint
Paying unverified “hackers,” “recovery agents,” or supposed government personnel
Sending identification documents through private messages
Publicly naming an alleged offender without reliable evidence
Retaliating by creating another fake account, threatening the suspect, or attempting unlawful access
Waiting for actual financial loss before reporting attempted impersonation

When legal help is urgent

Consult a Philippine lawyer promptly if:

The impersonator is extorting money or threatening violence
Intimate images, sexual content, or a child are involved
The account is causing substantial business, employment, or reputational harm
A loan, SIM, financial account, contract, or government record was created in your name
Significant funds were transferred
The platform repeatedly refuses to act despite clear evidence
You need a formal demand, prosecutor filing, civil remedies, or an urgent court or NPC order
You have received a subpoena, counter-complaint, or demand from the suspected offender

The Public Attorney’s Office may be able to assist persons who satisfy its current indigency and merit requirements.

Frequently asked questions

Can I report an account that has already been deleted?

Yes. Submit the saved URLs, screenshots, recordings, messages, platform emails, witness accounts, and transaction records. Tell investigators when the account disappeared. Deletion does not necessarily mean that all provider records have already been erased, but recovery is not guaranteed.

Must I know the impersonator’s real name?

No. You may report an unknown account. Give investigators every reliable identifier and explain how the account operated. Law enforcement—not the victim—can seek subscriber or related data through the required legal process.

Can I ask the platform for the account’s IP address?

You may ask, but platforms generally do not disclose another user’s confidential subscriber or technical data to a private requester. PNP or NBI investigators may apply for the appropriate cybercrime warrant or related order.

Is using my name or photograph always identity theft?

Not automatically. The law requires intentional conduct involving identifying information belonging to another and done without right. Consent, context, purpose, deception, parody, public-interest use, and the specific information used may affect the analysis.

Should friends mass-report the account?

They may make truthful reports, especially if they received fraudulent messages. Preserve the evidence first. Ask each affected person to retain their own message thread, URL, and transaction evidence instead of merely sending you a cropped screenshot.

Is there one deadline for filing?

No single filing deadline applies to every fake-account incident. Different possible offenses and remedies have different prescriptive rules. The six-month periods commonly mentioned in cybercrime law concern preservation of certain provider data, not a universal deadline for filing a complaint. Act immediately.

Will reporting guarantee that the account is removed or the offender is charged?

No. The platform applies its own policies, while investigators and prosecutors evaluate jurisdiction, identity, evidence, intent, and the legal elements of an offense. A complete, prompt, and well-documented report gives the authorities a better basis to act but cannot guarantee an outcome.

Official references

This article provides general legal information, not legal advice for a particular case. The correct remedy depends on the evidence, parties, platform, and resulting harm. Laws, agency forms, fees, contact details, and platform procedures were checked against official sources on August 3, 2026; verify the linked official pages before filing.