Quick answer

If someone created a social media account using your name, photos, personal details, or organization’s identity, act quickly:

Save the evidence before the account disappears.
Report the account through the platform’s impersonation process.
Secure your real accounts, email, mobile number, and financial accounts.
Report suspected identity theft, fraud, threats, or account hacking to the PNP Anti-Cybercrime Group or NBI Cybercrime Division.
Call Hotline 1326 for the government’s 24/7 cybercrime and anti-scam reporting channel.
Notify your bank or e-wallet immediately if money, payment credentials, or financial accounts are involved.
Consider a National Privacy Commission complaint when personal information was improperly collected, disclosed, or used.

A fake account is not automatically a crime merely because it uses a fictitious name. Parody, commentary, fan, and anonymous accounts may be lawful when they do not deceptively assume another person’s identity or commit another offense. Liability depends on what identifying information was used, whether the use was intentional and without right, what the account did, and what the evidence can prove.

When a fake account may amount to identity theft

Section 4(b)(3) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, defines computer-related identity theft as the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion—without right—of identifying information belonging to another natural or juridical person.

The Act’s implementing rules include names, dates of birth, passport and driver’s-license numbers, tax identification numbers, biometric data, electronic identifiers, telecommunications identifiers, and access devices within “identifying information.” Whether a copied name, photograph, biography, or profile amounts to the offense remains fact-dependent, particularly when the account is clearly labeled as parody, commentary, or unofficial.

The Supreme Court upheld the identity-theft provision in Disini v. Secretary of Justice, explaining that the law targets unauthorized acquisition or use of identifying information to cause damage. The statute nevertheless expressly contemplates cases in which no damage has yet occurred and provides a lower penalty for them.

For computer-related identity theft, the statutory penalty is prisión mayor, or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. If no damage has yet been caused, the imposable penalty is one degree lower. The actual charge and penalty depend on the proven facts and may be affected by other applicable laws.

Depending on what the account does, authorities may also consider:

Computer-related fraud or forgery under RA 10175;
Estafa, threats, coercion, falsification, or other offenses under the Revised Penal Code;
Unauthorized processing or malicious disclosure under the Data Privacy Act;
Financial-account scamming under Republic Act No. 12010;
Online sexual harassment, violence against women or children, voyeurism, or child sexual abuse and exploitation laws; or
A civil action for injury to privacy, reputation, property, or other rights.

Do not assume that every copied photograph or matching name proves a crime. Investigators and prosecutors must establish the specific prohibited conduct and connect it to an identifiable offender.

First, stop any immediate harm

If money or financial credentials are involved

Contact the bank, credit-card issuer, remittance company, or e-wallet through its official hotline or app immediately. Ask it to:

Block or temporarily secure the affected account or card;
Record the disputed or unauthorized transactions;
Preserve transaction and login records;
Cancel compromised credentials or tokens;
Provide a complaint or reference number; and
Explain its dispute and account-recovery process.

Do not wait for a police report before alerting the institution. The Bangko Sentral ng Pilipinas advises consumers to report unauthorized or suspicious transactions immediately. If the institution does not resolve the complaint, elevate it through the BSP Consumer Assistance Mechanism. BSP’s directory of supervised institutions’ complaint channels can help you find the correct contact.

If your real account was hacked

A hacked account and a separately created impersonation account are different problems. If your genuine account was taken over:

Secure the email account connected to it first;
Change reused passwords on other services;
End unfamiliar login sessions;
Remove unknown recovery addresses, phone numbers, and connected apps;
Enable multi-factor authentication;
Save login alerts and account-change notices; and
Use the platform’s official compromised-account recovery process.

Do not delete the account, reset the affected device, or erase suspicious messages until evidence has been preserved.

If a SIM or mobile number may be compromised

Contact the telecommunications provider immediately. Request suspension or replacement of the SIM, review changes to the subscriber account, and secure services that use the number for one-time passwords. Preserve messages and notices relating to SIM replacement or loss of signal.

If there is immediate danger

Call 911 or go to the nearest police station if the fake account is making credible threats, stalking you, arranging an in-person encounter, publishing your location, extorting you, or targeting a child. Tell responders if the offender is a spouse, former partner, dating partner, household member, or someone with access to your home or workplace so that appropriate protective remedies can be considered.

Preserve evidence before requesting removal

An account can be renamed, restricted, or deleted within minutes. Capture evidence before blocking it or asking others to mass-report it, unless delaying would create immediate danger.

Save:

The full profile URL, username, display name, and any visible account or page ID;
Screenshots of the profile, photographs, biography, posts, stories, comments, advertisements, and follower or friend solicitations;
The date and exact time of each capture, including your time zone;
A screen recording showing how you navigated to the account and its URL;
Direct messages, call logs, voice notes, emails, and text messages;
Links and screenshots of posts in which the account asks for money or personal information;
Names and contact details of people who received messages from it;
Platform notifications and report acknowledgements;
Bank, e-wallet, remittance, or transaction reference numbers;
Receipts, invoices, delivery records, and communications with financial institutions;
Security alerts, password-reset emails, login-location notices, and recovery notices; and
Copies of the original photographs or documents that the offender copied.

Keep original files. Do not crop, annotate, enhance, rename, or repeatedly re-save your only copy. Store a working copy separately and back up the originals. Preserve the phone or computer used to receive the messages.

Screenshots are useful, but they do not automatically prove who operated an account. The Supreme Court has emphasized that electronic evidence must be authenticated and that attribution may require admissions, witness testimony, account history, device evidence, platform or telecommunications records, and conduct connecting the account to the accused. Its current guidance is summarized in SC: Guide in Proving the Identity of a Social Media Account in Criminal Cases.

Report the account to the platform

Use the platform’s impersonation or deceptive-identity category—not only “spam.” Report both the profile and the harmful posts or messages when the platform permits separate reports.

Platform	Official reporting route
Facebook	Use the profile’s Find support or report function and select impersonation, or consult Facebook’s impersonating-account guidance.
Instagram	Use Report → Report account → It’s pretending to be someone else, or use the Instagram impersonation form.
TikTok	Follow TikTok’s official impersonation-account reporting instructions.
X	Report through the in-app authenticity flow or X’s authenticity and impersonation policy.

For other platforms, use the official help center or in-app reporting function. Interface labels can change.

When submitting a report:

Identify whether the account is impersonating you, a child, a business, or another person you are authorized to represent;
Link your genuine account or official website;
Explain briefly how users are being deceived;
Identify scam messages, threats, or unauthorized transactions;
Attach only the evidence the platform requests;
Save the report number, confirmation email, and exact text submitted; and
Upload identification only through a verified official platform form—not through a link sent by the suspected account.

Platform removal is separate from criminal investigation. A successful takedown does not identify the operator, recover money, or automatically start a government case.

Report to Philippine authorities

PNP Anti-Cybercrime Group

You may report to the PNP Anti-Cybercrime Group (PNP-ACG) or the nearest Regional Anti-Cybercrime Unit. PNP procedures recognize walk-in, electronic, hotline, SMS, and referred cybercrime reports, with electronic reports forwarded to the appropriate office for validation and investigation. See the PNP’s guidelines for reporting cybercrime incidents.

A report or blotter entry documents the incident, but you may still need to execute a sworn complaint, provide your device for examination, identify witnesses, and cooperate with follow-up requests.

NBI Cybercrime Division

You may also proceed to the NBI Cybercrime Division or an NBI Cybercrime Regional Center. The NBI’s published process includes a preliminary interview, a sworn complaint sheet, sworn statements or affidavits, collection of supporting documents, and examination of a relevant device when needed. The intake service itself lists no fee. Check the current NBI computer-crime assistance procedure and regional and district office directory before visiting.

Hotline 1326

The government’s Inter-Agency Response Center Hotline 1326 accepts cybercrime, scam, phishing, and impersonation reports and has been publicized as a 24/7 channel. It can assist with initial reporting and referral. Ask whether your case must also be brought personally to the PNP or NBI for a sworn complaint and evidence examination. See the government’s current Hotline 1326 guidance.

DOJ Office of Cybercrime

The DOJ Office of Cybercrime coordinates cybercrime investigation and prosecution matters, international assistance, preservation, and production of computer data. Its official contact page lists cybercrime@doj.gov.ph and (+632) 8524-8216. Routine field investigation is ordinarily handled by the PNP or NBI, but DOJ-OOC may be relevant when records or suspects are overseas or urgent preservation assistance is required.

What to bring or submit

Prepare a clear folder containing:

A chronological account of what happened;
Your contact details and, if available, identification;
The fake account’s URLs, usernames, and account identifiers;
Unedited screenshots, recordings, messages, and original files;
A list of witnesses and what each person personally observed;
Proof that the copied identity belongs to you or the represented organization;
Proof of damage, such as unauthorized transactions, lost income, false orders, threats, or complaints from deceived contacts;
Platform report confirmations;
Communications with banks, e-wallets, employers, schools, clients, or government agencies; and
Any information suggesting who operated the account, clearly labeled as information—not established fact.

State expressly that the use was unauthorized. If you previously allowed the person to manage a page, use photographs, or access an account, disclose the agreement and explain when and how consent ended.

Ask for the incident, complaint, or reference number and the investigator’s official contact details.

Request prompt preservation of platform records

There is no universal 24-hour or 72-hour deadline for a victim to report a fake account. Nevertheless, delay is risky because accounts and logs may disappear.

Under Section 13 of RA 10175, service providers must preserve specified traffic data and subscriber information for at least six months from the transaction. Content data is preserved for six months after receipt of a lawful preservation order, and law enforcement may order a one-time extension for another six months. These periods do not guarantee that every platform has the information you need or that it will disclose records directly to you.

Tell investigators immediately if deletion appears likely and ask whether a preservation order or cybercrime warrant should be pursued. A private message asking a platform to “preserve evidence” is not a substitute for lawful government or court process. Platforms generally will not disclose private subscriber or login records to an ordinary user simply upon request.

Notify people who may be deceived

Post a short warning through your verified or established channels. State the exact fake username and clarify that you do not control it. Ask contacts not to send money, passwords, one-time PINs, identity documents, or personal information.

Keep the warning factual. Do not publicly accuse a suspected person unless the identity is established and publication is legally justified. Avoid posting addresses, phone numbers, identification documents, or other private information. Public retaliation can create privacy, harassment, or defamation problems and may alert the offender to destroy evidence.

Businesses and professionals should also notify employees, clients, suppliers, payment processors, and relevant marketplaces using trusted contact channels.

When to complain to the National Privacy Commission

A complaint to the National Privacy Commission (NPC) may be appropriate when your personal information was improperly collected, disclosed, shared, or otherwise processed. This is a separate privacy remedy and does not replace a PNP or NBI report.

Under the 2021 NPC Rules of Procedure, as amended, a complainant ordinarily must first:

Inform the personal information controller, processor, platform, or concerned entity of the violation in writing; and
Allow it to act. If it fails to take timely and appropriate action or does not respond within 15 calendar days from receipt, a formal NPC complaint may proceed.

The NPC may waive this exhaustion requirement for good cause or a serious violation, including circumstances involving grave and irreparable harm, lack of an adequate remedy, or patently illegal conduct.

A formal complaint must generally be written, verified, properly signed, and supported by evidence and relevant correspondence. It must identify the respondent or explain circumstances that may lead to identification, state the requested relief, and include a certification against forum shopping. Representatives usually need a special power of attorney, subject to the amended rules for minors and persons unable to act for themselves.

Use the NPC’s current complaint page and form. The current complaints contact is complaints@privacy.gov.ph. Requirements and filing formats should be checked again immediately before submission.

If government IDs or official records were used

Notify the issuing agency if a passport, driver’s license, professional ID, SSS or GSIS record, tax number, PhilHealth information, or other government credential was copied or used. Ask about replacement, annotation, account locking, or an affidavit of loss where appropriate.

An affidavit of loss may be required for a genuinely lost document. It is not automatically required merely because someone copied a photograph or created a fake profile. Follow the issuing agency’s rules and do not make a false declaration that a document was lost if it remains in your possession.

Monitor credit, loans, mobile accounts, government-benefit records, and financial statements for unfamiliar applications or changes.

Common mistakes to avoid

Waiting for actual financial loss before reporting;
Reporting only the account and failing to save its URL and content;
Treating mass-reporting by friends as a substitute for a formal complaint;
Cropping or editing the only copy of a screenshot;
Deleting messages, resetting the device, or closing a compromised account too soon;
Continuing to communicate with the offender without an investigator’s guidance;
Sending more money to “recover” an earlier payment;
Paying an unverified “hacker” or tracing service;
Clicking a report or recovery link sent by the fake account;
Publicly naming an unverified suspect;
Attempting to hack, track, or obtain the offender’s private records yourself;
Assuming that a profile photograph proves who operated the account; and
Believing that platform removal automatically starts a criminal case.

When legal help is urgent

Consult a Philippine lawyer promptly if:

You received a subpoena, demand letter, counter-complaint, or court paper;
The offender is known and disputes consent to use the name, photographs, or account;
The account caused substantial financial or business loss;
Intimate images, sexual extortion, threats, stalking, or child exploitation are involved;
The platform refused removal despite continuing serious harm;
You need a civil injunction, damages, or a protection order;
Evidence or suspects are located overseas;
A bank or e-wallet refuses to act on documented unauthorized transactions; or
You are uncertain about prescription periods or where a formal complaint should be filed.

Frequently asked questions

Can I report the account if I do not know who created it?

Yes. Provide the URLs, messages, transaction details, witnesses, and every available lead. State that the operator is unknown. Law enforcement may seek subscriber, device, telecommunications, or financial records through the proper legal process.

Must I suffer financial loss before reporting identity theft?

No. RA 10175 expressly provides a lower penalty when no damage has yet been caused. Authorities must still prove the intentional, unauthorized conduct and the facts supporting the chosen charge.

Is using my photograph automatically identity theft?

Not necessarily. Context, consent, intent, identifying details, and the account’s conduct matter. Unauthorized use may still violate platform rules, privacy rights, copyright, or civil law even if prosecutors do not establish computer-related identity theft.

Can I demand that the platform tell me who owns the account?

You can ask, but platforms generally do not disclose private subscriber, IP-address, or login information directly to another user. Investigators may seek those records through preservation orders, disclosure warrants, subpoenas, international cooperation, or other lawful process.

What if the fake account has already been deleted?

Report it using saved screenshots, URLs, notifications, messages, witnesses, and transaction records. Prompt reporting may still allow investigators to seek preserved provider records, but recovery is not guaranteed.

Is a police blotter enough?

A blotter entry records the report. It does not by itself establish the offender’s identity, complete the investigation, or guarantee prosecution. Follow instructions concerning a sworn complaint, affidavits, device examination, and prosecutor filing.

Should I block the fake account?

Preserve evidence first, then report and block it if continued contact is unnecessary or unsafe. If an investigator asks you to maintain contact for a controlled purpose, follow official instructions and do not conduct your own entrapment.

Can someone report for me?

A trusted person may help you make an initial report, particularly in an emergency. Formal complaints may require your own sworn statement or proof of authority. For an NPC complaint, an authorized representative ordinarily needs a special power of attorney, subject to the rules for minors and persons unable to act for themselves.

Official legal and procedural references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Procedures and legal conclusions may change depending on the documents, platform records, location, relationship of the parties, and other facts. Official sources and current reporting procedures were checked on August 7, 2026.