Quick answer

If someone is using your name, photo, business identity, or personal details through a fake social media account, do these things immediately and in parallel:

Preserve the account and its activity as evidence before it disappears.
Report the profile to the social media platform for impersonation.
Secure your email, social media, mobile, banking, and e-wallet accounts.
Report possible criminal identity theft to the PNP Anti-Cybercrime Group or NBI Cybercrime Division.
Contact your bank or e-wallet immediately if money, cards, loans, or financial credentials are involved.
Consider a National Privacy Commission complaint when personal data was unlawfully processed and the responsible entity failed to address your written complaint.

A platform report may remove the account, but it does not automatically start a Philippine criminal investigation. Conversely, filing with law enforcement does not guarantee an immediate takedown. Both may be necessary.

When a fake account may be identity theft

Section 4(b)(3) of the Cybercrime Prevention Act of 2012 punishes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of another person’s or organization’s identifying information, without right.

The Supreme Court explained in Disini v. Secretary of Justice that computer-related identity theft requires an illegitimate purpose. Merely acquiring or sharing information that a person has made public is not, by itself, identity theft. The surrounding facts therefore matter.

A fake profile is more likely to raise a criminal issue when it:

Pretends to be you while messaging relatives, customers, employers, or the public;
Solicits money, passwords, one-time PINs, identification documents, or financial information;
Uses your identity to open accounts, apply for loans, sell products, or enter transactions;
Publishes fabricated statements as though they came from you;
Uses altered IDs, signatures, documents, voice recordings, or images to deceive others;
Gains access to your real account without permission; or
Threatens, blackmails, stalks, or distributes intimate material.

Not every parody, fan, commentary, or similarly named account is automatically criminal. Clear labeling, consent, context, the information used, and evidence of deception or other illegitimate purpose can change the legal assessment. Platform policies may also prohibit impersonation even when the available evidence is insufficient for criminal prosecution.

For computer-related identity theft, Section 8 of the Cybercrime Prevention Act provides prision mayor—generally six years and one day to twelve years—or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. If no damage has yet occurred, the law provides for a penalty one degree lower. Lack of financial loss therefore does not necessarily make the conduct harmless or unreportable.

Depending on what the fake account did, investigators may also examine illegal access, fraud or estafa, falsification, threats, cyber libel, unlawful use of financial accounts, or violations of privacy and intimate-image laws. Those offenses have separate elements; impersonation alone does not prove all of them.

Preserve the evidence first

Capture evidence before reporting, blocking, or publicly confronting the account. A quick takedown is useful, but it can also make information harder for you to retrieve.

Preserve:

The complete profile URL, not just the displayed name;
The exact username or handle, including punctuation and numbers;
Profile and cover photos, biography, contact details, and account identifiers;
Screenshots showing the entire screen, date and time, browser address bar, and surrounding context;
A screen recording that opens the profile, posts, comments, and messages in sequence;
Full conversations rather than isolated statements;
Original emails with headers and original message or attachment files;
Audio, video, altered images, advertisements, and livestream recordings;
Payment instructions, account numbers, QR codes, transaction references, receipts, and bank or e-wallet statements;
Messages from people whom the fake account contacted;
Platform acknowledgments, report numbers, and takedown notices; and
A chronological record of when you discovered the account and what happened afterward.

Keep the original files and the device on which they were received. Make separate working copies. Avoid cropping, annotating, compressing, or converting the only copy of an image or recording.

Under the Supreme Court’s Rules on Electronic Evidence, a private electronic document must be authenticated, and its integrity and reliability may need to be shown. A screenshot can be useful, but evidence is stronger when someone can explain when and how it was captured and connect it to the original account, message, or device.

Report the account to the platform

On most platforms, open the fake profile and select Report, followed by Impersonation, Pretending to be someone, or the closest available reason. Report the profile itself as well as fraudulent posts, advertisements, and messages.

Current official resources include:

Use only the platform’s official application or help center. If identity verification is required, upload identification only through the official form. Do not send an unredacted ID to the fake account, an unofficial “support” page, or a stranger offering takedown services.

Save the confirmation email or reference number. If the platform rejects the first report, appeal through its available review process and identify specific deceptive conduct—for example, messages asking your contacts for money—rather than reporting only that the profile copied your photograph.

After preserving the evidence, warn affected contacts through an account or channel you control. Keep the warning factual: identify the fake profile and say that it is unauthorized. Avoid publicly accusing a suspected operator unless the identity has been reliably established.

Report possible cybercrime to Philippine authorities

The Cybercrime Prevention Act designates the PNP and NBI as law-enforcement authorities for cybercrime cases. You may report through either of these channels:

PNP Anti-Cybercrime Group

Contact the PNP Anti-Cybercrime Group or the nearest PNP cybercrime unit. The government’s current consolidated consumer guidance lists acg@pnp.gov.ph as an official PNP-ACG contact.

NBI Cybercrime Division

The NBI’s computer-crime assistance service directs complainants to proceed to its Cybercrime Division to file a complaint or request an investigation. The service has no listed fee or initial documentary checklist, although investigators will need the available evidence and identifying information. You may also use the NBI’s online complaint page or consult its regional and district office directory.

Current government guidance lists ccd@nbi.gov.ph for the NBI Cybercrime Division.

CICC hotline for urgent scams

For an active online scam—particularly one involving a recent financial transfer—contact the Cybercrime Investigation and Coordinating Center through Hotline 1326 or report@cicc.gov.ph. These channels are listed in the BSP’s current complaint guidance for financial consumers.

An initial email, hotline call, or incident report is not always the same as a formal criminal complaint. An investigator may ask you to appear, present the original evidence, identify witnesses, and execute a sworn complaint-affidavit. Obtain and keep the incident, complaint, or reference number.

Your report should state:

Your full name and reliable contact details;
The fake account’s URL, handle, and platform;
Whose identity was used and without whose permission;
When and how the account was discovered;
The specific acts of deception, misuse, access, threats, or solicitation;
Who received the fake account’s messages;
Any money, property, reputation, privacy, or account access affected;
Available information about the suspected operator, clearly separated from assumptions; and
The evidence attached to the report.

Do not access, guess the password of, or attempt to hack the fake account. Only the platform or authorized investigators, using appropriate legal process, can reliably obtain non-public subscriber and traffic information.

Why reporting promptly matters

The Cybercrime Prevention Act requires preservation of certain traffic data and subscriber information for a minimum of six months from the transaction. Content data is preserved for six months from receipt of a lawful preservation order, with a possible one-time extension. Disclosure of protected data generally requires judicial authorization under the applicable cybercrime-warrant rules.

These periods do not guarantee that every platform will still possess every deleted post or message. Report promptly so investigators can assess whether a preservation request is necessary before potentially identifying data is lost.

Computer-related identity theft is generally governed by the 12-year prescriptive period for special-law offenses punishable by imprisonment of six years or more under Act No. 3326. When prescription begins, is interrupted, or resumes can depend on discovery and procedural events. Other possible offenses and civil claims may have different deadlines. Do not treat the long criminal period as a reason to delay.

If money or financial accounts are involved

Call the affected bank, card issuer, lending company, remittance provider, or e-wallet immediately through its official fraud channel. Ask it to:

Block compromised cards or accounts;
Disable unauthorized devices and sessions;
Record the transaction as disputed;
Preserve account and transaction records;
Investigate unauthorized loans or account openings; and
Give you a written acknowledgment and case number.

The Anti-Financial Account Scamming Act covers conduct such as opening a financial account using another person’s identity or documents and obtaining sensitive financial information through fraudulent electronic communications. It authorizes institutions to hold funds involved in a disputed transaction under BSP rules, for a period that cannot exceed 30 calendar days unless extended by a court. A report does not guarantee that funds remain available, will be held, or will be returned.

Complain first to the financial institution’s consumer-assistance channel. If the institution’s response is unsatisfactory, escalate through the BSP’s Consumer Assistance Mechanism. BSP consumer assistance is a second-level remedy and is not a substitute for reporting suspected crime to the PNP, NBI, or CICC.

If identity theft produced a loan or other false entry in your credit report, obtain your report and use the Credit Information Corporation’s Online Dispute Resolution System. The CIC cannot simply erase a lender’s submission without the prescribed dispute process and supporting records.

When to approach the National Privacy Commission

The Data Privacy Act of 2012 may apply when your name, photograph, contact information, identification document, or other personal data was unlawfully collected, used, disclosed, retained, or otherwise processed. It gives data subjects rights that include access, correction, erasure or blocking, damages, and filing a complaint.

An NPC complaint is not a general police report and is not automatically the correct remedy for every fake profile. Jurisdiction may depend on who processed the data, the purpose and circumstances of processing, applicable exclusions or lawful bases, and whether the respondent can be identified.

Under the 2021 NPC Rules of Procedure, a complainant ordinarily must first:

Inform the personal information controller, processor, or concerned entity in writing about the privacy violation or personal data breach; and
Allow it to take appropriate action.

An NPC complaint may proceed when the entity fails to take timely or appropriate action or gives no response within 15 calendar days from receipt of the written notice. Keep proof of delivery and every response.

The NPC may waive this exhaustion requirement for proven good cause or a serious violation, including grave and irreparable harm that only NPC action can prevent or mitigate, lack of an adequate remedy, or patently illegal conduct. If contacting the respondent could expose you to violence, blackmail, or further harm, do not put yourself at risk merely to satisfy the ordinary process; explain the circumstances and request a waiver.

The complaint must generally be verified or use the NPC’s notarized complaint-assisted form and include the material facts, requested relief, supporting documents, witness affidavits when available, correspondence with the respondent, and a certification against forum shopping. The NPC accepts complaints personally, by registered mail, courier, or authorized email. Consult its current formal complaint page and downloadable form before filing because format, fees, addresses, and submission instructions can change.

Filing with the NPC does not prevent a separate police report where the facts indicate a crime.

Secure your identity and accounts

If your real account was hacked, use the platform’s compromised-account recovery process as well as the impersonation report. From a device you reasonably believe is safe:

Change the password of your primary email account first.
Change affected social media, banking, and e-wallet passwords.
Use unique passwords and enable multi-factor authentication, preferably through an authenticator or passkey where available.
Review active sessions and sign out unfamiliar devices.
Remove unauthorized recovery emails, phone numbers, applications, and account delegates.
Check email-forwarding rules and deleted or archived messages.
Contact your mobile provider immediately if your SIM stopped working unexpectedly or you suspect a SIM swap.
Review bank, card, e-wallet, loan, and credit records for unfamiliar activity.
Replace compromised government IDs or credentials through the issuing agency when necessary.
Continue monitoring for new fake profiles; offenders often recreate removed accounts with a slightly different handle.

Common mistakes to avoid

Reporting or mass-reporting the profile before capturing its URL and activity;
Keeping only cropped screenshots with no visible handle, date, or context;
Deleting messages, resetting the device, or discarding the SIM too early;
Assuming a platform report, barangay entry, or social media post automatically creates a formal cybercrime case;
Paying the impersonator, an alleged “insider,” or a recovery service for a takedown;
Sending identification documents through unofficial support accounts;
Publicly naming an unverified suspect or sharing the suspect’s personal information;
Asking friends to threaten or harass the account operator;
Altering evidence or creating a fake exchange to make the complaint appear stronger; and
Waiting for the platform’s decision before securing financial accounts or contacting law enforcement.

When help is urgent

Call 911 or the local police immediately if there is an imminent threat to life or physical safety.

Seek immediate PNP, NBI, CICC, and legal assistance when the fake account is:

Threatening violence or revealing your location;
Blackmailing you or demanding payment;
Distributing or threatening to distribute intimate images;
Targeting a child or using child sexual-abuse material;
Conducting an active scam or directing victims to transfer money;
Using your identity to obtain loans, cards, SIMs, or government benefits;
Taking over your email, mobile number, or financial accounts; or
Causing rapidly escalating harm to employment, business, or personal safety.

A lawyer is not normally required to make an initial platform, police, NBI, or financial-institution report. Legal help becomes especially important when the suspected operator is known, investigators need a detailed complaint-affidavit, substantial losses are involved, urgent court relief may be necessary, or civil damages and several possible offenses must be evaluated.

Frequently asked questions

Is using my name and photo enough to prove identity theft?

Not always. It is important evidence, but criminal liability generally depends on intentional use of identifying information without right and for an illegitimate purpose. Deceptive messages, transactions, altered documents, threats, or harm can help establish the context.

Can I report an account impersonating another person?

Most platforms allow bystander reports, although the person being impersonated or an authorized representative may have to complete identity verification. For an NPC complaint, the data subject normally files personally or through a representative with a special power of attorney.

Should I message the fake account and demand deletion?

You are not required to confront it before reporting cybercrime. Contact can warn the operator to delete evidence or escalate harassment. If written notice is needed for an NPC complaint against a platform or other data controller, send it through a documented official channel. Do not directly contact a dangerous or threatening operator.

Can I file even if I do not know who created the account?

Yes. State that the operator is unknown and provide all available identifiers. Identifying the user may require platform cooperation and lawful investigative process. An unknown or foreign operator can make the investigation slower but does not make reporting pointless.

Will the police immediately obtain the user’s name from the platform?

Not necessarily. Non-public subscriber, traffic, and content data are subject to legal requirements, including preservation and court-authorized disclosure. Platforms may also be abroad, making international cooperation necessary.

What if the account was removed already?

Report anyway. Submit the URL, screenshots, messages, witnesses, and platform notices. The platform or other recipients may still retain relevant records, but preservation should be requested as early as possible.

Can a case proceed if no one lost money?

Potentially. The Cybercrime Prevention Act expressly provides a lower penalty when computer-related identity theft has not yet caused damage. Whether the available facts establish the offense remains a matter for investigators and prosecutors.

Can a foreign-based fake account be investigated in the Philippines?

Potentially. Philippine jurisdiction may exist when an element occurred here, a relevant computer system was situated here, or the conduct caused damage to a person in the Philippines. Identification, evidence collection, and enforcement abroad may still require international cooperation.

Official references and reporting links

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. The appropriate complaint and remedy depend on the actual messages, account records, transactions, parties, and available evidence. Laws, procedures, and official reporting channels were checked against primary and official sources on August 11, 2026.