Quick answer

Report the fake account to the social-media platform and preserve the evidence before it disappears. If the account uses your identity to deceive people, obtain money, damage your reputation, access accounts, threaten you, or harass you, also report it promptly to the PNP Anti-Cybercrime Group or the NBI Cybercrime Division. A platform report can remove an account, but it is not a criminal complaint.

A fake account is not automatically “identity theft.” Under the Cybercrime Prevention Act of 2012, computer-related identity theft involves the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion—without right—of identifying information belonging to another person or organization. The Supreme Court has clarified that the information must be used for an illegitimate purpose; merely accessing or sharing information that the person made public is not, by itself, identity theft. Whether a particular account is criminal therefore depends on what information was used, whether there was authority to use it, and what the operator intended or did. Disini v. Secretary of Justice

What to do immediately

Preserve the account before reporting it. Save the profile URL, exact username, display name, profile photo, bio, posts, messages, comments, follower list, and any payment details or phone numbers displayed. Take full-page screenshots and a screen recording showing how you opened the profile and the relevant content.
Record the date and time. Note when you discovered the account, when each incident occurred, and who alerted you. Keep a short chronological log.
Report the account through the platform’s impersonation process. Use the report option on the profile and, where available, the dedicated form:
Save the platform’s acknowledgment. Keep the report number, confirmation email, submission date, and the exact material you reported.
Secure your real accounts. If there is any possibility that your genuine account or email was compromised, change the email password first, then the social-media password. Use unique passwords, enable multifactor authentication, review active sessions and recovery details, and revoke unfamiliar third-party access.
Notify your bank or e-wallet immediately if money or financial information is involved. Use its official 24/7 fraud channel—not a telephone number or link supplied by the suspicious account.
Warn likely targets privately. Tell family, friends, customers, or employees not to transact with the fake account. Give them the exact username and URL. Avoid publicly naming an unverified suspect.

When a fake account may violate Philippine law

The same conduct can potentially fall under more than one law, but the proper charge depends on evidence and the specific acts committed.

Conduct	Law that may apply
Using another person’s or company’s identifying information without right for an illegitimate purpose	Computer-related identity theft under Section 4(b)(3) of Republic Act No. 10175
Taking over a genuine account by obtaining a password or bypassing security	Illegal access and possibly other offenses under Republic Act No. 10175
Pretending to be someone to solicit money, goods, loans, or confidential information	Identity theft, estafa committed through information and communications technology, or other fraud offenses, depending on how the scheme operated
Using financial accounts in a scam or social-engineering scheme	Anti-Financial Account Scamming Act, where its elements are present
Impersonating a victim as part of gender-based online sexual harassment, threats, cyberstalking, or reputation attacks	Sections 12 to 15 of the Safe Spaces Act
Publishing a malicious defamatory imputation	Cyberlibel, if all elements—including publication, identification, defamation, and malice—are proven
Publishing or distributing sexual images taken under circumstances involving a reasonable expectation of privacy	Anti-Photo and Video Voyeurism Act
Sexual exploitation or sexual-abuse material involving a child	Republic Act No. 11930 and other child-protection laws
Unlawful collection, use, disclosure, or failure to secure personal data	Data Privacy Act of 2012, subject to its scope, lawful-processing grounds, and exceptions
Serious interference with dignity, privacy, or peace of mind even when no crime can be established	A possible civil action under Articles 19, 20, 21, or 26 of the Civil Code, depending on the facts

Computer-related identity theft is punishable by prision mayor—generally six years and one day to twelve years—or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. If no damage has yet occurred, the law provides for a penalty one degree lower. Only a court may determine guilt and the proper penalty.

A pseudonymous, parody, commentary, or fan account is not automatically illegal. A shared name, an obvious satire account, or the use of information that you publicly released may fall outside identity theft. That changes when the account deceptively presents itself as you, uses nonpublic identifying information, or commits fraud, harassment, threats, defamation, or another unlawful act.

How to make a law-enforcement report

Report to the PNP or NBI

Republic Act No. 10175 designates the PNP and NBI as cybercrime law-enforcement authorities. You may:

Approach the nearest police station and ask that the matter be referred to the PNP Anti-Cybercrime Group or the appropriate cyber-response unit.
File with the NBI Cybercrime Division or an NBI regional cybercrime office. The NBI also maintains an online complaint portal and publishes its Cybercrime Division contact information.
For scam-related assistance or referral, contact the DICT-CICC National Anti-Scam Hotline by dialing 1326 or emailing 1326@dict.gov.ph. Current DICT contact information is available on its official contact page.

An online or hotline report may only begin the process. Be prepared to appear personally, undergo an interview, execute a sworn statement, identify your evidence, and allow examination of a relevant device when necessary. The NBI Citizen’s Charter procedure states that complainants and witnesses may execute sworn statements or submit prepared affidavits and supporting documents.

Bring or prepare:

A valid government-issued ID;
Your chronology of events;
The fake account’s URLs and usernames;
Screenshots, screen recordings, original message files, and emails;
Names and contact details of witnesses or people approached by the impersonator;
Platform report confirmations;
Proof that the photos, documents, business name, or account being copied belong to you or your organization;
Transaction records, account numbers, reference numbers, receipts, and bank or e-wallet reports, if money was involved; and
Any known information about the suspected operator, clearly separated from assumptions or hearsay.

Ask for a complaint, blotter, or case reference number and the investigator’s contact details. Clarify whether you must submit an additional complaint-affidavit to the prosecutor.

Ask about immediate preservation of platform data

Tell the investigator if the account may be deleted or if messages are disappearing. Under Section 13 of Republic Act No. 10175, service providers must preserve traffic data and subscriber information for at least six months from the transaction. Content data is preserved for six months from receipt of a lawful preservation order, with a possible one-time six-month extension.

Victims ordinarily cannot compel a platform to disclose an anonymous user’s subscriber details, IP logs, or private messages. Law enforcement may need a court warrant under the Rule on Cybercrime Warrants, and a foreign platform may require additional legal or international-cooperation procedures. Preservation does not guarantee that the requested data exists or will identify the offender, but early reporting improves the chance that relevant records remain available.

When to complain to the National Privacy Commission

An NPC complaint may be appropriate when a personal information controller or processor—such as an organization, service, or other covered entity—unlawfully processes, discloses, retains, or fails to secure your personal data. The Data Privacy Act gives a data subject qualified rights to dispute inaccurate information and seek blocking, removal, or destruction upon substantial proof that data is false, unlawfully obtained, used for unauthorized purposes, or no longer necessary.

The Data Privacy Act does not make every personal dispute on social media an NPC case. Its application depends on who controlled the processing, the purpose, applicable lawful grounds, and statutory exclusions. Individuals processing information solely in connection with personal, family, or household affairs are excluded from the Act’s definition of a personal information controller.

Before filing a formal NPC complaint, ordinarily:

Notify the platform, organization, data protection officer, or other concerned entity in writing about the violation and the relief you want.
Keep proof that the notice was received.
Allow 15 calendar days from receipt for a response or appropriate action.

The NPC may waive these exhaustion requirements for good cause or when the allegations involve a serious violation or breach, such as grave and irreparable harm, lack of an adequate remedy, or patently illegal action. 2021 NPC Rules of Procedure

A formal complaint must use the NPC’s current complaint-affidavit format, be verified and notarized, include supporting evidence and relevant correspondence, and contain a certification against forum shopping. The NPC introduced a new Complaint-Affidavit template effective 1 July 2025, so download the current version from the NPC complaint page rather than using an old saved form.

The listed filing fee is ₱500, subject to the exemptions or waiver provisions for qualifying indigent complainants, government complainants, or good cause. Filing may be made personally, by registered mail, by courier, or by authorized email in accordance with the NPC’s current instructions. An NPC case is separate from a criminal complaint and should not delay an urgent report to police, the NBI, or a financial institution.

If money or a financial account is involved

Contact the source bank, credit-card issuer, e-wallet, or other financial institution immediately through its official fraud-reporting channel. Ask it to:

Disable compromised access or payment functions;
Record the transaction as disputed;
Trace the beneficiary account;
Consider holding available disputed funds;
Preserve account and transaction records; and
Give you a case reference number and written instructions for supporting documents.

Under BSP Circular No. 1215, participating BSP-supervised institutions may initially hold disputed funds for no more than five calendar days while conducting coordinated verification. The source account owner may need to provide a sworn complaint, affidavit, police report, or other supporting documents within that initial period to support an extended hold. Report immediately: funds may already have been withdrawn or transferred, and neither a hold nor a complaint guarantees recovery.

If the institution’s response is unsatisfactory, escalate only after first using its Financial Consumer Protection Assistance Mechanism. The BSP Consumer Assistance Mechanism accepts escalated complaints through BSP Online Buddy and other listed channels.

Evidence worth preserving

Electronic evidence must be authenticated; a screenshot is not automatically conclusive simply because it looks genuine. The Rules on Electronic Evidence place the burden of proving an electronic document’s authenticity on the party offering it.

Preserve:

Original screenshots and recordings, not only cropped or annotated copies;
Complete URLs, usernames, user IDs, and QR codes;
The date, time, and device used to capture the material;
Full conversations, including earlier and later messages that provide context;
Original emails and, if available, their complete headers;
Login alerts, password-reset notices, session histories, and recovery emails;
The original photos or documents copied by the impersonator;
Witness statements from people contacted or deceived;
Transaction histories and unique transaction reference numbers;
Platform, police, NBI, CICC, bank, and NPC reference numbers; and
A dated list of each action you took and each response received.

Keep the original files on a secure device and make a separate backup. Do not edit, rename repeatedly, compress, or repost the only copy. If a disappearing message is involved, record it lawfully and note who personally saw it.

Common mistakes to avoid

Reporting before saving evidence. A successful takedown may remove the material needed to explain what happened.
Assuming a platform report is a police complaint. They serve different purposes and may need to be filed in parallel.
Confronting or threatening the operator. This may provoke deletion, retaliation, or further harm.
Trying to hack the fake account. Unauthorized access can itself be unlawful and may contaminate evidence.
Publicly accusing a suspected person without adequate proof. A mistaken accusation can create separate legal exposure.
Mass-reporting with false reasons. Ask others to make only accurate, good-faith reports.
Sending IDs through unofficial links or direct messages. Provide identity documents only through a verified platform, agency, or financial-institution channel and disclose only what is required.
Deleting embarrassing messages or deactivating your real account too soon. Secure and preserve first.
Waiting for the platform before contacting the bank. Financial reporting is time-sensitive.
Relying only on a barangay blotter. It can document an incident but does not replace a cybercrime investigation or the legal process needed to preserve and disclose platform data.

When help is urgent

Call the nationwide emergency number 911 if there is a credible, immediate threat of physical harm, kidnapping, stalking, or a crime in progress.

Report to law enforcement without waiting for a platform response when:

The impersonator is demanding money or threatening to publish private material;
Funds are being transferred or loans are being opened in your name;
Your email, social-media, government, or financial accounts have been accessed;
The account is contacting children or distributing child sexual-abuse material;
Intimate images or fabricated sexual material are being circulated;
Your home address, identification numbers, or other sensitive data have been exposed;
Customers or relatives are actively being deceived; or
The account is issuing threats or coordinating offline harassment.

Do not pay an extortionist merely because removal is promised. Do not download or forward suspected child sexual-abuse material; preserve the URL, account details, date, and report confirmation instead.

Time limits vary by offense. Notably, the Supreme Court has held that cyberlibel prescribes in one year from discovery by the offended party, authorities, or their agents. Other offenses have different rules, and the filing needed to interrupt prescription is a legal question. Causing v. People, G.R. No. 258524, 8 April 2026 Do not delay while trying to determine the final charge yourself.

Frequently asked questions

Can I report an account if I do not know who created it?

Yes. Identify the respondent as unknown and provide every available lead. Platform-held subscriber or traffic information ordinarily requires law-enforcement and judicial process.

Should I choose the PNP or the NBI?

Either agency is legally responsible for cybercrime enforcement. Choose the accessible specialized unit, especially when rapid data preservation or financial tracing is needed. Avoid filing inconsistent sworn narratives with multiple offices; disclose any earlier reports and their reference numbers.

Can my friend report the account for me?

A friend can flag an account through an in-app process, but platforms commonly require the person impersonated—or an authorized representative—to submit the formal identity-verification report. Criminal and NPC complaints may also require your sworn statement or documented authority for a representative.

Can the platform be forced to reveal the account owner to me?

Usually not through an ordinary user request. Disclosure of subscriber information, traffic data, or private content may require a cybercrime warrant, a valid official investigation, and compliance with the platform’s applicable legal process.

What if the account only copied my photo?

Copying a publicly visible photograph does not automatically establish criminal identity theft. Consider the account’s name, presentation, intent, messages, and actual use of the image. Platform impersonation rules, copyright, privacy, harassment, or civil remedies may still apply.

Should I make a public warning?

A short, factual notice can protect contacts: identify your genuine account, state that the other account is unauthorized, and tell people not to send money or information. Avoid publishing sensitive evidence, repeating defamatory material, or naming a suspected operator unless the identification is reliable and publication is legally appropriate.

Does takedown end the case?

No. Takedown limits further harm but does not identify the operator, recover funds, or determine legal liability. Preserve the removal notice and continue necessary police, bank, NPC, or legal action.

Official references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. The correct remedy and charge depend on the account, communications, documents, intent, harm, and available evidence. Laws, procedures, forms, and reporting channels were checked against official and primary sources as of 3 August 2026.