Quick answer

If someone is using your name, photos, personal details, or business identity in a fake social media account, do these things promptly:

Preserve the account and its activity as evidence before it disappears.
Report the account through the platform’s impersonation process.
Secure your real social media, email, mobile, and financial accounts.
Report suspected identity theft to the PNP Anti-Cybercrime Group or NBI Cybercrime Division, especially if the account is scamming, threatening, harassing, or damaging people.
Consider a National Privacy Commission complaint if personal data was unlawfully used and the platform, organization, or other responsible entity did not act after written notice.

These remedies serve different purposes. A platform report may remove the account but usually will not identify its operator. A police or NBI complaint may lead to an investigation but does not guarantee immediate takedown. An NPC complaint concerns violations of data-privacy rights and has separate procedural requirements.

Is a fake account identity theft under Philippine law?

Possibly—but not every anonymous, fan, parody, duplicate-name, or misleading account automatically constitutes a crime.

Section 4(b)(3) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, punishes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person or organization, without right.

The Supreme Court upheld this provision in Disini v. Secretary of Justice. The Court identified such information as including a person’s name, citizenship, address, contact number, place and date of birth, spouse’s name, occupation, and similar data.

A report is stronger when the facts show that the operator deliberately used another person’s identity without authority—for example, by:

copying the victim’s name, photograph, biography, workplace, contact information, or relationships;
messaging relatives, customers, or followers while pretending to be the victim;
asking for money, passwords, one-time PINs, documents, or sensitive information;
entering transactions or making representations in the victim’s name;
publishing posts intended to make others believe that the victim created or approved them; or
using the account to threaten, extort, stalk, sexually harass, or damage the victim.

A shared name, obvious satire, clearly disclosed fan account, or authorized account may present a different legal situation. Investigators and prosecutors must assess intention, lack of authority, the information used, the account’s presentation, and the resulting or intended harm.

For computer-related identity theft, the statutory penalty is prision mayor—generally six years and one day to twelve years—or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. The law states that if no damage has yet been caused, the imposable penalty is one degree lower. Actual liability and the proper penalty can be determined only through the criminal process.

Depending on what the account did, other laws may also be relevant:

unauthorized processing or use of personal information under the Data Privacy Act of 2012;
computer-related fraud, forgery, illegal access, estafa, threats, or libel;
gender-based online sexual harassment under the Safe Spaces Act, which expressly includes certain online impersonation used to harm victims;
non-consensual sharing of qualifying intimate recordings under the Anti-Photo and Video Voyeurism Act; or
offenses involving children under the Anti-OSAEC and Anti-CSAEM Act.

The proper charge depends on the precise posts, messages, transactions, evidence, and relationship between the people involved.

Preserve the evidence before reporting

Collect evidence before blocking the account or requesting its removal. Once an account is deleted, renamed, made private, or suspended, important content may become difficult to recover.

Preserve:

the complete profile URL, not only the displayed name;
the exact username or handle and any previous usernames you observed;
screenshots showing the profile photo, cover image, biography, account name, follower information, and visible dates;
screenshots and URLs of individual posts, stories, comments, advertisements, listings, and replies;
direct messages, emails, SMS messages, voice notes, call logs, and notification emails;
the date and time when each item was seen;
names and contact details of people who received messages from the account;
requests for money, account details, IDs, passwords, OTPs, intimate material, or other information;
bank or e-wallet receipts, reference numbers, beneficiary details, and communications with financial institutions;
platform report confirmations, reference numbers, and responses;
proof of your real identity or authorized business identity; and
copies showing where the stolen photo or information originally came from.

Keep original files whenever possible. Do not crop, annotate, enhance, or repeatedly resave the only copy. Store duplicates in a secure location and prepare a simple chronology identifying what happened, when it happened, who saw it, and what harm followed.

A screen recording can provide useful context, but it should supplement—not replace—screenshots, URLs, original files, and witness statements. Do not unlawfully access the suspected operator’s account, install spyware, impersonate another person, or secretly obtain private account data.

Platform subscriber information and technical logs normally require lawful process. Under Republic Act No. 10175 and the Supreme Court’s Rule on Cybercrime Warrants, law-enforcement authorities may pursue preservation and court-authorized disclosure of relevant computer data. This is one reason to report promptly instead of waiting for the operator to erase evidence.

Report the account to the social media platform

Use the platform’s dedicated impersonation option, not only a general spam report. Identify whether the account is pretending to be you, a person you represent, or a business or organization.

Official reporting pages include:

For other platforms, open the fake profile, choose Report, and select Impersonation, Pretending to be someone else, Fraud, or the closest accurate category.

When reporting:

submit the direct URL and exact username;
explain briefly how the account creates confusion;
identify the information, photos, or business marks being copied;
mention any scam, threat, harassment, or solicitation;
provide the victim’s real account or official website where relevant;
submit only the identification documents actually requested through the platform’s official form; and
keep the confirmation email or report number.

Friends, customers, or witnesses may submit truthful bystander reports, but the victim or authorized representative should also use the dedicated impersonation form. Do not organize false or misleading reports.

A copyright complaint is not a substitute for an impersonation report. Being shown in a photograph does not necessarily mean that you own its copyright. Use an intellectual-property procedure only if you are the rights holder or are authorized to act for the rights holder.

After preserving and reporting the evidence, block the account where appropriate. Warn affected contacts through your genuine account, website, workplace, or another trusted channel. Keep the warning factual: identify the fake profile, say that it is unauthorized, and tell people not to send money or information. Avoid publicly accusing a named suspect unless the identification is reliable and there is a legitimate reason to publish it.

Report suspected cybercrime to the authorities

Republic Act No. 10175 designates the PNP and NBI as the principal law-enforcement authorities for cybercrime.

PNP Anti-Cybercrime Group

You may report to the PNP Anti-Cybercrime Group or the nearest Regional Anti-Cybercrime Unit. Current announcements and regional contacts are published through the official PNP Anti-Cybercrime Group page.

For initial assistance or referral, the DICT’s Cybercrime Complaint Center may be reached through 1326 or 1326@dict.gov.ph, as listed by the Department of Information and Communications Technology.

Because telephone numbers and local assignments can change, verify the receiving unit through an official government page before sending sensitive documents.

NBI Cybercrime Division

The public may proceed to the NBI Cybercrime Division or an appropriate NBI regional office. The NBI’s Citizen’s Charter for computer-crime victims lists no pre-filing documentary checklist. Its stated process includes:

completing a complaint sheet;
undergoing a preliminary interview and initial investigation;
executing a sworn complaint sheet or sworn statement;
submitting affidavits and supporting documents; and
allowing examination of a relevant device when necessary.

The current NBI directory lists the Cybercrime Division at ccd@nbi.gov.ph. Use the NBI office locator and contact pages to confirm the correct location and office hours before appearing. An email inquiry does not necessarily replace the sworn complaint and interview required for a formal investigation.

What to include in the complaint

Prepare a clear factual account containing:

your name and contact information;
the identity being misused;
the fake account’s URL and username;
when and how you discovered it;
the copied information and unauthorized acts;
names of affected witnesses or recipients;
threats, solicitations, financial loss, reputational harm, or other damage;
any reason you suspect a particular person, clearly separated from facts you personally know;
the steps already taken with the platform, bank, employer, or other entity; and
an indexed set of screenshots, messages, receipts, and original files.

Do not exaggerate damage or present guesses as facts. If the operator is unknown, say so. A complaint can still provide investigators with leads, and lawful process may be needed to obtain subscriber or account information.

Reporting does not guarantee arrest, prosecution, account removal, or recovery of money. Investigators must determine jurisdiction, preserve evidence, identify the operator, and assess whether probable cause exists.

If money or a financial account is involved

Contact the sending bank, e-wallet, card issuer, or other financial institution immediately through its official fraud channel. Ask it to record the transaction as disputed, secure affected accounts, trace the transfer, and explain the documents and deadlines under its fraud process.

The Anti-Financial Account Scamming Act and BSP Circular No. 1215 establish procedures for temporarily holding qualifying disputed funds and conducting coordinated verification. A hold is not automatic, does not guarantee recovery, and generally concerns electronic transfers that remain traceable within covered financial institutions. The regulations allow disputed funds to be held for no more than 30 calendar days, including initial and extended holding periods, unless a court extends the period.

If the institution’s response is unresolved, use the BSP Consumer Assistance Mechanism. BSP generally expects the consumer first to raise the matter through the financial institution’s own complaints mechanism.

Change compromised passwords from a trusted device, sign out unknown sessions, enable multi-factor authentication, and secure the email address and mobile number connected to the account. Never give an OTP, PIN, recovery code, password, or card security code to a caller claiming to investigate the incident.

When a National Privacy Commission complaint may help

A fake account may also involve unlawful processing of personal data, but a criminal identity-theft report and an NPC complaint are separate proceedings.

Under the 2021 NPC Rules of Procedure, as amended in 2024, an affected data subject may file a complaint for a privacy violation or data breach. A representative generally needs proper authority; special rules apply to parents, guardians, minors, organizations, and non-resident complainants.

Before filing, the complainant ordinarily must:

inform the personal information controller, processor, platform, or concerned entity in writing of the violation; and
show that it failed to take timely or appropriate action, or that it gave no response within 15 calendar days from receipt of the written notice.

Preserve proof that the notice was received. The NPC may waive this exhaustion requirement for proven good cause or a serious violation, including circumstances involving grave and irreparable harm, the absence of an adequate remedy from the respondent, or patently illegal action. Waiver is discretionary and should be specifically requested and supported.

A formal NPC complaint must generally be written, signed, and verified. It should identify the parties where possible, narrate the material facts, state the requested relief, and attach:

supporting documents and witness affidavits;
correspondence with the respondent;
proof of compliance with the 15-day exhaustion rule or grounds for waiver; and
the required certification against forum shopping.

Filing fees ordinarily apply, subject to the exemptions and discretionary waiver stated in the NPC Rules. The NPC’s complaint page provides the current form, fee schedule, and authorized filing methods, including personal filing, courier or mail, and authorized electronic submission to complaints@privacy.gov.ph. Check the current instructions before filing because incomplete, unverified, illegible, or improperly submitted complaints may be dismissed or require correction.

Situations requiring urgent action

Seek immediate assistance when the fake account is connected to:

a credible threat of physical harm, kidnapping, stalking, or an emergency—call 911 or contact the nearest police station;
ongoing extortion or a demand for money, intimate images, credentials, or silence;
an unauthorized bank, card, e-wallet, or cryptocurrency transaction;
publication of a home address, live location, identification document, medical information, or other data creating an immediate safety risk;
sexual images or recordings shared without consent;
grooming, sexual exploitation, or sexual material involving a child; or
takeover of your real email, mobile number, financial account, or social media account.

If material may depict child sexual abuse or exploitation, do not download, forward, repost, or circulate it to “prove” the incident. Preserve the URL and surrounding information without creating additional copies, and report it immediately to the platform and law enforcement.

A lawyer should be consulted promptly when an injunction, civil damages, formal demand, protection order, corporate response, cross-border evidence request, or urgent preservation of platform data may be necessary. The Public Attorney’s Office or an Integrated Bar of the Philippines legal-aid office may be able to assist qualified persons.

Common mistakes to avoid

Reporting the account before saving its URLs and contents.
Saving only the display name, which the operator can change.
Cropping screenshots so heavily that dates, usernames, or context disappear.
Publicly confronting the operator and giving them time to delete evidence.
Paying an extortion demand or sending an OTP to “verify” your identity.
Pretending to be another person to trap the suspect without law-enforcement guidance.
Hacking, guessing passwords, installing tracking software, or unlawfully recording communications.
Naming a suspected operator publicly without reliable proof.
Assuming that a platform takedown is the same as a criminal complaint.
Assuming that an NBI or PNP report automatically removes the account.
Sending IDs or sensitive evidence to unofficial pages, personal accounts, or unverified email addresses.
Filing an NPC complaint without the written notice, proof of receipt, 15-day response period, or supported request for waiver.
Deleting messages, wiping devices, or replacing a compromised phone before evidence is preserved.

Frequently asked questions

Can I report a fake account if I do not know who created it?

Yes. Preserve the account URL, username, messages, transactions, and other leads. State honestly that the operator is unknown. Investigators may seek subscriber or technical information through lawful preservation and warrant procedures.

Can I force the platform to reveal the operator’s identity?

Ordinarily, a private user cannot compel disclosure merely by sending a request. Subscriber and technical data may require a court-authorized process pursued by law enforcement. Platforms may also have data in another country, making the process slower or dependent on international cooperation.

Do I need to suffer financial loss before reporting?

No. The identity-theft provision expressly contemplates cases in which no damage has yet occurred, although that circumstance affects the statutory penalty. Evidence of attempted deception, unauthorized use, or threatened harm should still be preserved and reported.

Is using my public photograph automatically lawful?

No. Public visibility does not by itself authorize someone to use your identity deceptively. However, the correct legal claim depends on the photograph’s ownership, the purpose and context of use, consent, applicable privacy rules, and whether the account is actually impersonating you.

Should I message the fake account and demand deletion?

A written demand can sometimes help, particularly when the operator is known, but direct contact may trigger deletion, retaliation, or further harassment. Preserve the evidence first. In cases involving threats, stalking, extortion, sexual material, or an unknown operator, consult law enforcement or counsel before engaging.

How long will removal or investigation take?

There is no universal or guaranteed takedown or investigation period. Platform review times vary, and criminal investigations may require preservation requests, warrants, forensic examination, witness interviews, or foreign cooperation. Report promptly and retain every case or reference number.

Can I pursue more than one remedy?

Yes. A truthful platform report, cybercrime complaint, financial dispute, NPC complaint, and appropriate civil remedy may address different parts of the incident. Coordinate them carefully and disclose related pending proceedings when a form or certification requires it.

Official references

This article provides general legal information, not advice for a particular case and not a prediction of any agency or court outcome. Procedures and liability can change with the facts, evidence, later issuances, and amendments. Official legal and procedural sources were last checked on 2 August 2026.