If someone made or used a fake Facebook, Instagram, TikTok, LinkedIn, Telegram, WhatsApp, or other social media profile to scam you, the usual Philippine case is estafa or swindling, often charged in relation to the Cybercrime Prevention Act of 2012. But the correct case depends on what the fake profile actually did: did it trick you into sending money, impersonate a real person, steal your identity, hack an account, use a bank or e-wallet mule account, or post defamatory content? This article explains the most likely cases to file, the legal basis, the evidence to prepare, where to report, and the practical steps victims usually need to take in the Philippines.

The Short Answer: What Case Should You File?

For a fake social media profile used for fraud in the Philippines, the common legal options are:

Situation	Possible case or remedy	Legal basis
Fake profile tricked you into sending money, goods, crypto, load, or payment	Estafa / swindling, often in relation to cybercrime	Article 315 of the Revised Penal Code; Section 6 of RA 10175
Fake profile used another person’s name, photo, business name, ID, or identifying details	Computer-related identity theft	Section 4(b)(3), RA 10175
Fraud involved unauthorized manipulation of computer data, fake digital records, altered screenshots, or system interference	Computer-related fraud or computer-related forgery	Section 4(b)(1) or 4(b)(2), RA 10175
Scammer used bank accounts, e-wallets, mule accounts, phishing, or social engineering to access financial accounts	Possible Anti-Financial Account Scamming Act violations	RA 12010, 2024
Your personal data, photos, IDs, or private information were misused	Complaint before the National Privacy Commission and/or criminal complaint if identity theft is involved	RA 10173, Data Privacy Act; RA 10175
Fake profile posted defamatory statements against you	Cyberlibel, but only if the post contains defamatory allegations	Article 355, Revised Penal Code; Section 4(c)(4), RA 10175
Your real account was hacked or taken over	Illegal access, identity theft, data interference, or related cybercrime	Section 4(a), RA 10175

The most common formulation in an online scam is: Estafa under Article 315(2)(a) of the Revised Penal Code, in relation to Section 6 of Republic Act No. 10175, the Cybercrime Prevention Act of 2012. Article 315 punishes swindling, including fraud committed through a fictitious name, false pretense, or similar deceit, while Section 6 of RA 10175 covers crimes under the Revised Penal Code and special laws when committed through information and communications technology, with a higher penalty. (Lawphil)

A Fake Profile Is Not Always a Criminal Case by Itself

A fake profile alone is not automatically estafa. Some accounts use nicknames, stage names, parody identities, or anonymous handles. The criminal case becomes stronger when the fake account is used to commit a legally punishable act, such as:

asking you to send money for a fake product, job, visa, investment, loan, raffle prize, or emergency;
pretending to be a real person, lawyer, immigration officer, recruiter, bank employee, seller, celebrity, relative, or company representative;
using someone else’s name, photos, ID, business documents, or screenshots to gain trust;
sending fake receipts, fake booking confirmations, fake tracking numbers, or fake bank transfer screenshots;
directing you to deposit funds into a bank account, e-wallet, crypto wallet, or remittance account;
collecting passwords, OTPs, bank details, GCash/Maya credentials, or credit card information.

In practice, law enforcement and prosecutors look for deceit plus damage. The fake profile helps prove deceit, but the complaint becomes much stronger when you can show what the scammer represented, why you relied on it, what you gave, and what you lost.

Main Criminal Case: Estafa Through a Fake Social Media Profile

What Is Estafa?

Estafa is swindling. In simple terms, it is fraud where one person deceives another and causes damage, usually financial loss.

For fake social media profile scams, the most relevant provision is usually Article 315(2)(a) of the Revised Penal Code. It covers fraud by false pretenses, including use of a fictitious name, pretending to possess authority, qualifications, agency, business, credit, property, or imaginary transactions, or using similar deceit. (Lawphil)

Common examples include:

a fake seller account offering gadgets, concert tickets, vehicles, rentals, or imported goods;
a fake recruiter asking for placement fees, medical fees, processing fees, or visa payments;
a fake investment mentor promising guaranteed returns;
a fake relative or friend asking for emergency funds;
a fake “customer service” account pretending to represent a bank or e-wallet;
a romance scammer using a fake identity to request money.

Why Estafa Is Often Filed “In Relation to Cybercrime”

If the scam happened through Facebook Messenger, Instagram DM, WhatsApp, Telegram, email, online marketplace, dating app, or another digital platform, the complaint may be framed as estafa in relation to RA 10175.

Section 6 of RA 10175 states that crimes under the Revised Penal Code and special laws are covered by the Cybercrime Prevention Act when committed through ICT, with the penalty one degree higher. (Supreme Court E-Library)

This matters because an online fraud case is not treated exactly like an ordinary face-to-face scam. The digital aspect affects:

where the case may be investigated;
what evidence must be preserved;
whether cybercrime warrants are needed;
which court may have jurisdiction;
how platform, IP, subscriber, and device data may be requested.

Under RA 10175, the NBI and PNP are the law enforcement authorities responsible for cybercrime enforcement, and the law requires them to organize cybercrime units or centers staffed by special investigators. (Supreme Court E-Library)

Computer-Related Identity Theft

If the fake profile used your real name, photo, ID, business name, company logo, address, phone number, email, professional identity, or other identifying information, the case may also involve computer-related identity theft.

Section 4(b)(3) of RA 10175 penalizes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person or juridical entity, without right. (Supreme Court E-Library)

This is especially relevant when:

someone created a fake account pretending to be you;
your photos were copied to scam your friends, clients, or relatives;
your business name or page was cloned;
your government ID was used to register accounts or convince victims;
your name was used to solicit donations, loans, investments, or payments;
the fake profile pretended to be a lawyer, doctor, broker, recruiter, public officer, or licensed professional.

A useful practical distinction is this: estafa focuses on the victim who lost money; identity theft focuses on the misuse of the identity. Sometimes the same incident has both.

Computer-Related Fraud and Forgery

RA 10175 also punishes computer-related forgery and computer-related fraud.

Computer-related forgery may apply when someone inputs, alters, or deletes computer data without right, resulting in inauthentic data intended to be treated as authentic for legal purposes, or knowingly uses forged computer data for a fraudulent or dishonest design. Computer-related fraud involves unauthorized input, alteration, deletion of computer data or interference in a computer system, causing damage with fraudulent intent. (Supreme Court E-Library)

These are not always the best fit for every social media scam. A simple fake Facebook account that chats with a victim and asks for payment is often more naturally charged as estafa in relation to RA 10175. Computer-related fraud or forgery becomes more relevant when the scam involves manipulated digital records, unauthorized system activity, fake electronic documents, altered account data, or computer-system interference.

Examples:

fake or altered payment confirmations;
forged electronic invoices or booking confirmations;
unauthorized changes to account details;
fake platform-generated records made to appear official;
altered screenshots used as proof of payment or identity;
unauthorized manipulation of seller, bank, marketplace, or delivery system data.

When the Scam Involves Bank Accounts, E-Wallets, or Phishing

If the fake profile was used to obtain OTPs, passwords, bank details, e-wallet access, credit card information, or to move money through mule accounts, the Anti-Financial Account Scamming Act, Republic Act No. 12010 of 2024, may also be relevant.

RA 12010 covers financial accounts such as bank accounts, transaction accounts, credit card accounts, e-wallets, and similar accounts. It also defines electronic communications to include social media platform-enabled messages, emails, instant messaging, SMS, and other electronic messages. (Lawphil)

This law is important because it addresses two common realities in online scams:

Money mule accounts — accounts used, borrowed, rented, sold, opened under fictitious names, or opened using another person’s identity to receive or transfer scam proceeds.
Social engineering schemes — deception or fraud used to obtain sensitive identifying information that results in unauthorized access or control over a financial account. (Lawphil)

RA 12010 also allows financial institutions to temporarily hold funds subject of a disputed transaction under conditions set by law and BSP rules, with the hold period not exceeding 30 calendar days unless extended by court order. (Lawphil)

This is why speed matters. If money was sent to a bank or e-wallet, report to the bank, e-wallet provider, and law enforcement immediately. Even a few hours can matter if the funds have not yet been withdrawn or transferred.

Is Cyberlibel the Right Case?

Usually, no — not if the main problem is fraud.

Cyberlibel applies when the fake profile posted or published defamatory statements that identify you and damage your reputation. RA 10175 includes libel committed through a computer system or similar means as a cybercrime offense. (Supreme Court E-Library)

Cyberlibel may be relevant if the fake profile:

accused you of a crime;
posted damaging false statements about your character, business, or profession;
used fake accusations to extort money;
published defamatory content to destroy your reputation.

But if the fake account simply tricked people into paying money, the more direct case is usually estafa, identity theft, computer-related fraud, or AFASA-related offenses.

Where to File a Complaint

1. PNP Anti-Cybercrime Group or NBI Cybercrime Division

For most fake profile fraud cases, victims usually start with either:

PNP Anti-Cybercrime Group (PNP-ACG) or its regional anti-cybercrime units; or
NBI Cybercrime Division (NBI-CCD) or an NBI regional/district office with cybercrime capability.

The NBI Citizen’s Charter identifies “Investigative Assistance for Victims of Computer Crimes” as a service of its CyberCrime Division for the general public. It lists no initial documentary requirement and no fee for the basic intake steps, including the complaint sheet, initial interview, and sworn statements. (National Bureau of Investigation)

2. Office of the City or Provincial Prosecutor

A criminal case normally reaches court only after the prosecutor finds probable cause. The victim usually files a complaint-affidavit with supporting evidence. The respondent may be required to submit a counter-affidavit. If the prosecutor finds probable cause, an Information is filed in court.

For cybercrime cases under RA 10175, the Regional Trial Court has jurisdiction, and special cybercrime courts may be designated to handle these cases. RA 10175 also provides jurisdiction when elements of the offense were committed in the Philippines, when a computer system wholly or partly situated in the Philippines was used, or when damage was caused to a person in the Philippines. (Supreme Court E-Library)

3. National Privacy Commission

If the issue involves misuse of personal information, photos, IDs, private data, or other data privacy violations, the victim may also file with the National Privacy Commission (NPC).

The NPC states that a data subject may file a complaint if personal information has been misused, maliciously disclosed, improperly disposed of, or if data privacy rights have been violated. (National Privacy Commission)

The NPC complaint process generally requires a notarized complaint-assisted form or verified complaint, supporting evidence, and witness affidavits. The NPC also emphasizes exhaustion of remedies, meaning the complainant should generally inform the respondent in writing and allow an opportunity to address the issue, unless circumstances justify otherwise. (National Privacy Commission)

Step-by-Step Guide: What to Do After Discovering the Fake Profile Fraud

1. Preserve the evidence before confronting the scammer

Do not rely on ordinary screenshots alone. Scammers delete profiles, change usernames, unsend messages, block victims, and rename accounts.

Save:

screenshots showing the profile URL, username, profile photo, and bio;
screen recordings scrolling through the profile and conversation;
full chat history, including dates and timestamps;
links to posts, marketplace listings, comments, ads, reels, or stories;
payment instructions sent by the scammer;
bank account names, account numbers, QR codes, e-wallet numbers, crypto wallet addresses, and remittance details;
receipts, proof of transfer, transaction reference numbers, and confirmation emails;
delivery details, tracking numbers, courier receipts, or shipping labels;
any ID, selfie, business permit, DTI registration, SEC document, or “proof” sent by the scammer.

If possible, use another device to record the screen while opening the actual profile and messages. This helps show that the screenshots were taken from a real account and not fabricated.

2. Report the financial transaction immediately

If money was sent, report immediately to:

your bank or e-wallet provider;
the receiving bank or e-wallet, if known;
the payment gateway or remittance center;
the platform where the transaction was arranged;
PNP-ACG or NBI-CCD.

Ask for a written incident report, ticket number, or reference number. Under RA 12010, disputed transactions may trigger coordinated verification and possible temporary holding of funds when legal grounds exist. (Lawphil)

3. Prepare a clear timeline

A good complaint usually tells the story in chronological order:

When you first saw or were contacted by the fake profile.
What the profile claimed.
What made you believe it was legitimate.
What the scammer asked you to do.
When and how you paid or delivered property.
What happened after payment.
When the profile blocked you, disappeared, or changed details.
What financial and non-financial damage you suffered.

Avoid emotional speculation. Focus on facts, dates, names, usernames, links, and transaction records.

4. Execute a complaint-affidavit

A complaint-affidavit is your sworn written statement. It should include:

your full name, address, contact details, and valid ID;
the respondent’s known name, username, profile URL, phone number, email, account number, or other identifiers;
the facts of the fraud;
the amount or property lost;
the laws you believe were violated, if known;
a list of attached evidence;
screenshots and documents marked as annexes.

If you are abroad, Philippine authorities may require a properly notarized, consularized, or apostilled document, depending on where it was executed and how it will be used. Philippine consular offices commonly notarize or acknowledge private documents such as affidavits, sworn statements, and special powers of attorney for use in the Philippines. (Philippine Embassy)

5. File with the proper cybercrime unit or prosecutor

Bring both printed and digital copies. A practical file set usually includes:

Document or evidence	Why it matters
Valid ID of complainant	Confirms identity of the victim
Complaint-affidavit	Main sworn statement
Screenshots and screen recordings	Shows profile, messages, posts, and representations
Profile URL and username history	Helps investigators trace the account
Payment receipts and bank/e-wallet records	Proves damage and money trail
Demand messages or follow-up messages	Shows non-delivery, refusal, blocking, or continued deceit
Witness affidavits	Helps if friends, relatives, or staff saw the transaction
Business or identity documents misused	Supports identity theft or data privacy complaint
Platform reports or takedown confirmations	Shows remedial steps and account details

Common Scenarios and the Likely Case

Fake Online Seller

A fake seller posts phones, gadgets, bags, tickets, rentals, or vehicles, asks for a deposit or full payment, then blocks the buyer.

Likely case: estafa in relation to RA 10175. If fake IDs, fake receipts, or stolen photos were used, add identity theft, forgery, or data privacy issues.

Fake Recruiter or Visa Agent

A fake profile promises jobs abroad, student visas, work permits, or immigration assistance and collects processing fees.

Likely case: estafa in relation to RA 10175. If overseas recruitment is involved, illegal recruitment laws may also be relevant, depending on the facts.

Fake Investment Account

A profile promises guaranteed returns, crypto profits, forex trading, “tasking” income, or commission-based earnings.

Likely case: estafa in relation to RA 10175, possible securities, investment, or financial account violations depending on the structure. If many victims are involved, law enforcement may treat it as a larger fraud operation.

Fake Account Pretending to Be You

Someone uses your photos and name to borrow money from friends or solicit funds from clients.

Likely case: computer-related identity theft, and possibly estafa if money was obtained from victims. You may also have civil and data privacy remedies.

Fake Bank or E-Wallet Customer Service Page

A fake support page asks for OTPs, PINs, passwords, card details, or login credentials.

Likely case: computer-related identity theft, possible AFASA social engineering, and related cybercrime or financial fraud. RA 12010 specifically covers social engineering schemes using electronic communications to obtain sensitive identifying information that results in unauthorized access or control over financial accounts. (Lawphil)

Important Practical Issues Victims Often Miss

The profile may disappear, but platform data may still exist

RA 10175 allows preservation of traffic data and subscriber information for minimum periods, and law enforcement may seek disclosure of computer data through proper legal processes. The law provides for preservation of certain data and, with a court warrant, disclosure of subscriber information, traffic data, or relevant data within 72 hours from receipt of the order. (Supreme Court E-Library)

This does not mean victims can personally demand IP addresses from Facebook, Google, TikTok, or telecom companies. Usually, platform-level subscriber or technical data requires proper law enforcement channels, warrants, or official requests.

Do not delete your chat thread

Even if the conversation is painful or embarrassing, keep it. Deleting your own copy can make reconstruction harder. Archive it, export it if the platform allows, and preserve the device used in the transaction.

Barangay conciliation is usually not the proper first step for serious cyber fraud

Barangay proceedings are designed for covered disputes between parties within the barangay justice system. Serious offenses, including those punishable by imprisonment exceeding one year or a fine over ₱5,000, are outside mandatory barangay conciliation. (Lawphil)

For fake profile fraud, especially when the suspect is unknown, in another city, abroad, or using digital accounts, the practical route is usually law enforcement or prosecutor filing.

The account name on the bank or e-wallet may not be the mastermind

Many scammers use mule accounts. The person whose bank or e-wallet received the money may be:

the scammer;
a recruiter of mule accounts;
someone who sold or rented an account;
a person whose identity documents were misused;
a victim of another layer of the scam.

This is why the complaint should include both the fake profile details and the financial trail.

Civil Damages and Recovery of Money

A criminal case can include civil liability, but actual recovery can be slow. Victims may also consider civil remedies for damages, return of money, injunction, or other relief depending on the facts.

The Civil Code provides general bases for damages when someone, contrary to law, willfully or negligently causes damage, or willfully causes loss or injury in a manner contrary to morals, good customs, or public policy. It also recognizes protection of dignity, personality, privacy, and peace of mind. (Lawphil)

In real life, the biggest challenge is not identifying the legal theory. It is locating the real person behind the fake profile and finding recoverable money or assets.

Frequently Asked Questions

What case do I file if a fake Facebook account scammed me?

Usually, file a criminal complaint for estafa under Article 315 of the Revised Penal Code in relation to RA 10175. If the account used another person’s identity, photos, or personal information, include computer-related identity theft.

Is using a fake social media profile illegal in the Philippines?

Not always. A fake name or anonymous account is not automatically a crime. It becomes legally actionable when used for fraud, identity theft, cyberlibel, hacking, phishing, data privacy violations, or another unlawful act.

Can I file cybercrime even if I do not know the scammer’s real name?

Yes. You can file based on usernames, profile links, phone numbers, e-wallet accounts, bank accounts, transaction records, and screenshots. Investigators may use lawful processes to trace digital and financial records.

Should I file with NBI or PNP Cybercrime?

Either may be appropriate. The NBI Cybercrime Division and PNP Anti-Cybercrime Group both handle cybercrime complaints. The better choice often depends on your location, urgency, available evidence, and whether a regional cybercrime unit is accessible.

Can I get my money back from the bank or e-wallet?

Possibly, but it depends on speed, whether the funds remain in the system, the provider’s fraud process, and applicable law. Under RA 12010, financial institutions may temporarily hold disputed funds under legally defined circumstances, and restitution may be available in situations covered by the law. (Lawphil)

Is cyberlibel the right case if someone made a fake profile of me?

Only if the fake profile published defamatory statements. If the main issue is impersonation or fraud, the more relevant cases are usually computer-related identity theft, estafa, and possibly data privacy violations.

What if the scammer is outside the Philippines?

A Philippine case may still be possible if elements happened in the Philippines, a Philippine-based computer system was used, a Filipino national is involved, or damage was caused to a person in the Philippines. RA 10175 contains jurisdiction rules for cybercrime cases involving Philippine elements. (Supreme Court E-Library)

What evidence is most important?

The most important evidence is the complete chain: the fake profile, the false representations, your reliance, the payment or transfer, the recipient account, and the resulting loss. Screenshots are useful, but transaction records and full message history are often more valuable.

Can the fake profile be taken down immediately?

You can report it to the platform, but takedown does not replace a criminal complaint. Before reporting, preserve evidence carefully because the profile may disappear and make proof harder.

Key Takeaways

The most common case for a fake social media profile used for fraud is estafa in relation to RA 10175.
Add computer-related identity theft if the fake profile used a real person’s identity, photos, IDs, or business identity.
If bank accounts, e-wallets, phishing, OTPs, or mule accounts were used, RA 12010 may also be relevant.
Cyberlibel is only appropriate when the fake profile published defamatory statements, not merely because the profile is fake.
Preserve evidence before confronting the scammer or reporting the account for takedown.
Report money transfers immediately to the bank, e-wallet, platform, and cybercrime authorities.
A strong complaint shows the full chain of deception: fake profile, false representation, reliance, payment, damage, and money trail.