Quick answer

If someone is using your name, photo, personal details, or hacked account to impersonate you, preserve the evidence first, report the profile through the platform’s impersonation channel, secure every account connected to your identity, and promptly report the incident to Philippine cybercrime authorities. Call the CICC’s 1326 National Anti-Scam Hotline for immediate reporting or file a sworn complaint with the NBI Cybercrime Division, the PNP Anti-Cybercrime Group, or the nearest police station.

A fake or anonymous account is not automatically a crime. It may amount to computer-related identity theft when another person intentionally acquires, uses, misuses, transfers, possesses, alters, or deletes your identifying information without right and for an illegitimate purpose. Scamming, soliciting money in your name, damaging your reputation, accessing your real account, or using your identity to create fraudulent records may also involve separate offenses.

Do not wait for the account to disappear. Platforms may remove content quickly, while subscriber, traffic, and content data needed to identify the operator may be retained only for limited periods.

What to do immediately

1. Preserve the account before reporting or blocking it

Capture enough information to identify exactly what happened:

Take full-screen screenshots and screen recordings showing the profile, username, display name, profile photo, biography, posts, comments, messages, and date and time.
Copy the profile’s complete URL. Usernames and display names can be changed, so a screenshot of the name alone is not enough.
Save the URLs of individual posts, reels, videos, or messages.
Record when you first discovered the account and who informed you.
Save messages from people who were contacted, deceived, threatened, or asked for money.
Ask affected contacts to preserve their own original messages and transaction records.
Download images, videos, voice messages, email headers, and attachments without editing them.
Keep platform report confirmations, ticket numbers, and replies.
If money was requested or transferred, preserve account names and numbers, QR codes, mobile numbers, transaction references, receipts, timestamps, and bank or e-wallet communications.

Keep the original files. Cropped screenshots are useful for explaining the incident, but full copies provide more context and are easier to authenticate. Back up the evidence in at least two secure locations.

2. Secure your real accounts

If your genuine account was accessed or changed, treat the incident as an account compromise—not merely a fake profile.

Change the password using a trusted device.
Use a new, unique password that has not been used elsewhere.
Change the password of the connected email account first.
Sign out unknown devices and revoke unfamiliar app sessions.
Turn on multi-factor authentication, preferably through an authenticator app or security key where available.
Check whether the recovery email, mobile number, forwarding rules, payment method, or advertising account was changed.
Save any login alerts before deleting them.
Contact your mobile provider immediately if your SIM suddenly lost service or you suspect a SIM-swap.
Monitor bank, e-wallet, credit-card, shopping, government, and work accounts that use the same email address, mobile number, password, or identity documents.

Never give a one-time password, recovery code, PIN, or remote access to anyone claiming that these are needed to “investigate” the fake account.

3. Warn people without spreading the impostor’s content

Post a short warning from your genuine account or contact people directly. Identify the fake profile by its username or URL, state that you do not control it, and tell people not to send money or information.

Avoid repeatedly reposting defamatory, intimate, or harmful material. If a child is involved, do not download, forward, or circulate sexual images; report them immediately to law enforcement.

Report the account to the platform

Use the platform’s specific impersonation category, not only “spam.” Report both the profile and any harmful posts or messages. The person being impersonated—or an authorized representative—will usually have the strongest reporting route.

Official reporting channels include:

If the form requests proof of identity, upload it only through the platform’s official website or app. Do not send an ID to the fake account or to a person offering to remove the account for a fee.

In your report, explain briefly:

who is being impersonated;
which details were copied;
how the account is misleading people;
whether it requested money, collected information, made threats, or published harmful content; and
the URL of your genuine account, if you have one.

Save the report number and confirmation email. Platform removal helps stop the immediate harm, but it does not automatically begin a Philippine criminal investigation or preserve all information needed to identify the account holder.

Report the incident to Philippine authorities

CICC National Anti-Scam Hotline

Call 1326 to report online scams and suspicious online activity to the Cybercrime Investigation and Coordinating Center. DICT also lists 1326@dict.gov.ph for feedback or complaints. This is particularly urgent when the fake account is actively asking for money or gathering victims.

A CICC report helps route and coordinate the incident, but follow any instruction to execute a sworn complaint with an investigating agency when you want a formal criminal investigation.

NBI Cybercrime Division

The NBI Cybercrime Division’s official procedure allows any member of the public to request an investigation. The NBI’s Citizen’s Charter lists no filing fee or documentary prerequisite, although investigators will interview the complainant, obtain a sworn complaint or statement, collect supporting evidence, and may examine a relevant device.

You may approach the NBI Cybercrime Division or an appropriate NBI regional or district office. Confirm the current office location through the NBI’s official website before travelling.

Bring:

at least one government-issued ID;
a chronological written account;
printed and electronic copies of the evidence;
the fake profile and post URLs;
your genuine account information;
names and contact details of witnesses or persons approached by the impostor;
proof of financial or reputational harm;
platform report numbers and responses; and
the device containing the original messages, if requested.

Do not factory-reset or replace a relevant phone before consulting the investigator. If a device is taken for examination, ask what will be copied, whether it must be surrendered, and what acknowledgment or receipt will be issued.

PNP Anti-Cybercrime Group or local police

You may also report to the PNP Anti-Cybercrime Group, a regional or provincial anti-cybercrime unit, or the nearest police station. Ask that the report identify the complete URLs, usernames, relevant dates, type of misuse, resulting harm, and possible witnesses.

A barangay blotter can document that you reported an incident, but a barangay cannot compel a social-media platform to disclose subscriber information. For account attribution and digital investigation, report to a cybercrime-capable law-enforcement unit.

Ask about urgent preservation of platform data

Tell the investigator if the account is still active, has started deleting material, or was only recently created. Ask whether a preservation request should promptly be issued to the platform or service provider.

Under Section 13 of the Cybercrime Prevention Act, service providers must preserve traffic data and subscriber information for at least six months from the transaction. Content data must be preserved for six months after a law-enforcement preservation order, with a possible one-time six-month extension. If preserved data becomes evidence in a case, further preservation rules apply.

A private complainant cannot compel disclosure merely by emailing a platform. Subscriber, traffic, or content data generally requires the lawful process described in the statute and the Supreme Court’s Rule on Cybercrime Warrants. This is why prompt law-enforcement reporting matters even when the platform has already removed the account.

How to prepare a useful complaint

Write a factual timeline. Avoid conclusions that you cannot yet prove.

Include:

Your identity and contact details.
Date of discovery. Explain how you found the account and whether it may have existed earlier.
Account identification. Give the platform, profile URL, username, display name, and any known changes.
Identifying information used. Specify the copied name, photograph, workplace, signature, ID, voice, contact details, or other data.
Conduct complained of. Describe what the account posted, represented, requested, or sent.
Lack of authority. State clearly that you did not create, control, or authorize the account or the use described.
Harm or risk. Identify money lost, persons deceived, threats received, employment or business consequences, damaged relationships, or accounts compromised.
Possible suspect information. State only facts—such as a payment destination, mobile number, writing pattern, admission, or prior threat. Do not publicly accuse someone based only on suspicion.
Actions already taken. List platform reports, password changes, bank notices, police reports, and warnings to contacts.
Evidence and witnesses. Number the attachments and identify who can authenticate each conversation or transaction.

If a witness received the impostor’s message, a screenshot forwarded to you is useful, but the witness should preserve the original conversation on their own device and be prepared to execute a sworn statement.

When to report to the National Privacy Commission

Consider a separate complaint with the National Privacy Commission (NPC) when the facts indicate that a platform, employer, school, bank, government office, business, or other person or organization improperly processed, disclosed, or failed to protect your personal data. An NPC case concerns compliance with the Data Privacy Act; it is not a substitute for reporting identity theft, fraud, threats, or account intrusion to law enforcement.

Under the NPC’s current amended Rules of Procedure, a complainant ordinarily must first:

inform the personal information controller, processor, or concerned entity in writing about the privacy violation or breach; and
allow 15 calendar days from receipt for a response or appropriate action.

The NPC may waive this requirement for proven good cause or a serious violation, including situations involving grave and irreparable harm, no adequate remedy from the respondent, or patently illegal action.

A formal NPC complaint must be written, verified, and supported by the correspondence and evidence. Use the current complaint-affidavit form and instructions on the NPC complaint page. Filing fees apply under the NPC’s schedule, subject to the rules for qualified indigent litigants. The NPC currently accepts complaint filings by email at complaints@privacy.gov.ph and in person at its Quezon City office, subject to its published requirements.

If money, credit, or accounts were affected

Contact the bank, card issuer, e-wallet, lending company, or payment provider immediately through its official fraud or consumer-assistance channel. Ask it to:

block or secure the affected account or card;
record the transaction as disputed or unauthorized;
preserve account-opening, device, login, beneficiary, and transaction records;
provide a case or reference number; and
explain any affidavit, police report, or dispute deadline it requires.

Do not send more money to “recover” the first payment. Do not follow instructions from the impostor to return an alleged mistaken transfer; verify directly with the financial institution.

For a complaint involving a BSP-supervised institution, the provider’s consumer-assistance mechanism is the first level of recourse. If unresolved, escalate through the BSP Consumer Assistance Mechanism and BSP Online Buddy. A financial dispute, platform report, and criminal investigation are separate processes; pursue each applicable route.

What Philippine law covers

Computer-related identity theft

Section 4(b)(3) of Republic Act No. 10175 defines computer-related identity theft as the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another natural or juridical person, without right.

In Disini v. Secretary of Justice, the Supreme Court upheld this offense and explained that the prohibited handling of another person’s identifying data must be connected to an illegitimate purpose. Information that the person made public is not automatically “stolen” merely because somebody viewed or reported it.

Accordingly, a clearly disclosed parody, commentary, fan account, pen name, or unrelated person with the same name is not automatically identity theft. The decisive facts may include whether the operator copied identifying details without right, intended to pass as the victim, misled other people, sought gain, or caused or risked harm.

The base penalty for offenses under Section 4(b) is prision mayor—generally six years and one day to twelve years—or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. If identity theft has not yet caused damage, the law provides a penalty one degree lower. The prosecutor and court determine the applicable offense, whether legally cognizable damage occurred, and the proper penalty.

Other possible offenses

Depending on the evidence, the same conduct may also be investigated as:

illegal access, if the genuine account was entered without right;
computer-related forgery or fraud;
estafa or another Revised Penal Code offense committed through information and communications technology;
threats, coercion, harassment, or cyberlibel;
unauthorized processing, disclosure, or another offense under the Data Privacy Act; or
a civil wrong involving privacy, dignity, use of a name, or damage under Articles 19 to 21, 26, 377, and 378 of the Civil Code.

These are not automatic charges. The exact offense depends on the account’s purpose, the information used, the messages or representations made, the resulting harm, and evidence connecting a person to the account.

Filing deadlines

Republic Act No. 10175 does not set a special complaint deadline for computer-related identity theft. Under Act No. 3326, violations of special laws carrying imprisonment of six years or more generally prescribe after 12 years. The period normally runs from commission or, when the violation was unknown, from its discovery; qualifying proceedings interrupt prescription.

Do not treat 12 years as a safe waiting period. A related offense may have a much shorter prescriptive period, the legally relevant start date can be disputed, and electronic evidence may disappear within months. Report as soon as possible.

For an NPC complaint, observe the current 15-calendar-day prior written-notice rule unless grounds for a waiver genuinely apply. Preserve proof that the respondent received your written notice.

Common mistakes to avoid

Reporting before saving the URLs and evidence. Removal can make the profile harder to identify.
Relying only on a barangay blotter or platform report. Neither necessarily starts a cybercrime investigation.
Publicly naming a suspected operator without proof. This can create a separate dispute and alert the person to destroy evidence.
Threatening or bargaining with the impostor. Preserve the communication and let investigators decide whether further contact is appropriate.
Trying to hack, trace, or dox the account yourself. Unauthorized access and publication of another person’s data may create legal problems and contaminate evidence.
Paying an unofficial “agent” for account deletion or tracing. Use official platform and government channels.
Deleting embarrassing messages. Preserve the complete exchange, including messages that may seem unfavorable.
Editing screenshots or combining several images without retaining the originals.
Using the same compromised password after recovery.
Assuming a platform’s refusal to remove the account means no law was violated. Platform policy enforcement and Philippine legal liability are different questions.
Assuming removal proves who operated the account. Attribution normally requires evidence beyond the profile’s displayed name.

When help is urgent

Call the nationwide Unified 911 Emergency Hotline if there is an immediate threat to life, physical safety, or property.

Seek prompt police, NBI, or PNP anti-cybercrime assistance when:

the impostor is threatening violence, kidnapping, sexual harm, or self-harm;
money is being solicited or transferred in real time;
an account, SIM, bank, or e-wallet has been taken over;
intimate images, sexual extortion, or material involving a child is involved;
the account is publishing home addresses, live locations, IDs, medical information, or other data that creates a concrete safety risk;
the operator is deleting evidence or announcing plans to close the account; or
several victims or substantial losses are involved.

Consult a lawyer promptly if you need an injunction, damages, a coordinated response involving an employer or business, help drafting affidavits, or advice about multiple possible offenses. Qualified indigent persons may inquire with the Public Attorney’s Office about eligibility for legal assistance.

Frequently asked questions

Can I report a fake account even if nobody has lost money?

Yes. Financial loss is not required before you report. Republic Act No. 10175 expressly contemplates computer-related identity theft even when no damage has yet been caused, although the prescribed penalty is lower. Investigators must still determine whether the account’s use of identifying information was intentional, without right, and for an illegitimate purpose.

Is using my photo enough to prove identity theft?

Not necessarily. A copied photo is important evidence, but context matters. Investigators will consider the name, biography, communications, representations, purpose, authority, and whether the account was trying to make others believe it was you.

What if the account uses a different name but my photos and details?

It can still be reported. Identity theft is not limited to copying a complete legal name. Photographs, contact information, work details, government identifiers, signatures, account credentials, and combinations of data may identify a person.

Can I force Facebook, TikTok, or another platform to reveal the user?

Usually not through an ordinary personal request. Platforms may disclose limited information under their privacy rules, but subscriber, traffic, and content data sought for a criminal case generally requires lawful law-enforcement and court processes. Promptly give investigators the exact URLs and ask about data preservation.

Should my friends mass-report the account?

Reports from people who actually received deceptive or harmful content may help, but coordinated mass-reporting is not a substitute for a report by the impersonated person. Ask witnesses to preserve their messages before reporting or blocking the account.

What if the fake profile has already been deleted?

Report it anyway if you preserved evidence. Provide former URLs, usernames, screenshots, report confirmations, messages, and transaction records. Tell investigators when the account disappeared so they can assess whether preservation or legal process may still recover relevant data.

Can I file both a cybercrime complaint and an NPC complaint?

Yes, when the facts support both. A cybercrime complaint addresses possible criminal conduct. An NPC complaint addresses possible violations in the processing or protection of personal data. A financial dispute, civil action, and platform report may also proceed through their respective channels.

Do I need to know who created the account before filing?

No. State that the operator is unknown and provide facts that could lead to identification, such as URLs, account numbers, mobile numbers, email addresses, transaction destinations, login alerts, or admissions. Do not guess or identify a suspect as fact without evidence.

Official legal and reporting sources

This article provides general legal information, not legal advice or a prediction of any case outcome. The correct remedy and offense depend on the evidence, documents, jurisdiction, and specific conduct involved. Laws, procedures, and official reporting channels were checked as of 3 August 2026.