When someone creates or uses a fake Facebook, Instagram, TikTok, X, dating-app, or marketplace profile to trick people into sending money, the usual Philippine legal remedy is not just “report the account.” The victim may file a criminal complaint for cybercrime, often together with estafa, depending on how the fake profile was used. The exact case depends on whether the scammer used another person’s name or photos, hacked an existing account, received money through GCash/Maya/bank transfer, posted defamatory content, or merely created the fake profile without yet causing financial loss.

What case should you file?

In most fake social media profile fraud cases, the complaint is commonly framed as:

Computer-related identity theft and/or computer-related fraud under Republic Act No. 10175, the Cybercrime Prevention Act of 2012, with estafa under Article 315 of the Revised Penal Code, as amended by Republic Act No. 10951.

In plain English:

Computer-related identity theft applies when the scammer uses another person’s identifying information, such as name, photos, profile details, business identity, or other personal identifiers, without authority.
Computer-related fraud may apply when computer data or a computer system is used fraudulently to cause damage.
Estafa applies when the scammer deceives someone and, because of that deceit, the victim parts with money, property, or something of value.
If the fake profile posted defamatory accusations, cyber libel may also be involved.
If the scammer hacked a real account, illegal access may also be involved.

The important point is that victims usually do not “file a case in court” immediately. They first file a criminal complaint-affidavit with the NBI Cybercrime Division, PNP Anti-Cybercrime Group, or the prosecutor’s office. The prosecutor evaluates the evidence during preliminary investigation. If probable cause is found, the prosecutor files the criminal information in court.

Quick guide: which case fits your situation?

Situation	Possible criminal complaint	Legal basis
Someone created a fake profile using your name, photos, business name, or identity	Computer-related identity theft	Section 4(b)(3), RA 10175
A fake profile tricked people into sending money	Estafa, usually with cybercrime allegations	Article 315, Revised Penal Code; Section 6, RA 10175
A fake seller account accepted payment but never delivered goods	Estafa; possible computer-related fraud	Article 315, RPC; Sections 4(b)(2) and 6, RA 10175
A hacked real account was used to ask relatives or friends for money	Illegal access, computer-related identity theft, estafa, computer-related fraud	Sections 4(a)(1), 4(b)(2), 4(b)(3), RA 10175; Article 315, RPC
A fake profile posted accusations that harmed your reputation	Cyber libel, if the legal elements are present	Article 353 and Article 355, RPC; Section 4(c)(4), RA 10175
The fake account threatened to expose photos, conversations, or private information unless paid	Threats, coercion, possible cybercrime, possible data privacy violations	Revised Penal Code; RA 10175; RA 10173
Your personal data was collected, posted, or misused without consent	Data Privacy Act complaint may be added or filed separately	RA 10173, Data Privacy Act of 2012

Legal basis under Philippine law

Computer-related identity theft under RA 10175

Section 4(b)(3) of the Cybercrime Prevention Act of 2012 punishes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person or entity, without right.

This is often the most direct cybercrime charge when the fake account uses:

your full name;
your face or photos;
your business name or logo;
your family photos;
your work position;
your school identity;
your phone number or email;
screenshots of your real account;
a cloned profile designed to make others believe it is you.

The law covers both natural persons and juridical persons, so a fake profile impersonating a corporation, online shop, clinic, law office, real estate broker, recruitment agency, or school may also raise identity-theft issues.

If no damage has yet been caused, RA 10175 still recognizes the offense, but the penalty may be one degree lower. This matters when the fake profile was discovered early before anyone sent money.

Computer-related fraud under RA 10175

Section 4(b)(2) of RA 10175 punishes computer-related fraud. This may be relevant when the scammer uses online data, fake account information, manipulated digital details, or computer-system activity to deceive victims and cause financial damage.

In practice, complaints involving fake profiles used for online selling scams, fake loan offers, romance scams, fake job processing fees, cryptocurrency or investment scams, and “send money to this GCash because I’m in an emergency” schemes are commonly assessed under cybercrime provisions together with traditional fraud offenses.

Estafa under Article 315 of the Revised Penal Code

Estafa is the classic fraud case in the Philippines. Under Article 315 of the Revised Penal Code, estafa generally involves deceit or abuse of confidence that causes damage.

For fake social media profile fraud, the most common theory is estafa by deceit under Article 315(2)(a): the offender used a false name, false pretense, fraudulent representation, imaginary transaction, or similar deceit before or at the same time the victim parted with money.

A typical example:

A fake Facebook account uses the name and photo of your cousin abroad. The account messages relatives saying there is an emergency and asks for ₱15,000 through GCash. A relative believes the account is real and sends money. That may support a complaint for computer-related identity theft and estafa.

The Supreme Court has explained in cases such as People v. Mateo, G.R. No. 210612, that estafa by deceit requires, among others, a false pretense or fraudulent representation, reliance by the victim, and damage suffered as a result.

Section 6 of RA 10175: when ordinary crimes are committed through ICT

Section 6 of RA 10175 is important. It provides that crimes under the Revised Penal Code and special laws, if committed by, through, and with the use of information and communications technologies, are covered by the Cybercrime Prevention Act, with the penalty generally one degree higher.

This is why a fake social media profile fraud complaint may be described as:

Estafa under Article 315 of the Revised Penal Code in relation to Section 6 of RA 10175.

In ordinary language, the prosecutor is being told: “This is estafa, but it was done online using a fake digital identity.”

Cyber libel, if the fake account posted defamatory statements

If the fake profile merely scams people, the focus is usually fraud and identity theft. But if the account posts statements accusing a person of a crime, immorality, dishonesty, or other matters that dishonor or discredit the person, cyber libel may also be considered.

Libel is defined under Article 353 of the Revised Penal Code. Article 355 penalizes libel committed through writing or similar means. Section 4(c)(4) of RA 10175 covers libel committed through a computer system.

In Disini v. Secretary of Justice, G.R. No. 203335, February 18, 2014, the Supreme Court upheld key parts of RA 10175, including cyber libel as applied to the original author of the defamatory post, while striking down or limiting other provisions. For fake profile fraud cases, cyber libel is not automatic. There must be a defamatory imputation, publication, identifiability of the offended person, and malice.

Where to file a complaint

You may file with any of the following, depending on urgency, location, and the evidence available:

Office	Best for	Practical notes
NBI Cybercrime Division	Cybercrime complaints requiring digital investigation, account tracing, or coordination with platforms	The NBI’s citizen charter for computer-crime victims includes preliminary interview, complaint sheet, sworn statements, and device/evidence examination. See the NBI computer-crime assistance page.
PNP Anti-Cybercrime Group	Online scams, fake profiles, hacked accounts, cyber harassment, fraud using social media or messaging apps	The DOJ identifies the PNP-ACG as one of the offices where cybercrime complaints may be brought.
Office of the City or Provincial Prosecutor	When you already have organized evidence and want to initiate preliminary investigation	A prosecutor may require complaint-affidavits, supporting affidavits, screenshots, payment proof, and other documents.
CICC / Scam Watch channels	Initial reporting, scam triage, hotline assistance, referral	The Inter-Agency Response Center hotline 1326 is used for scam reports and guidance, especially for online scams and hacked accounts.
National Privacy Commission	Misuse of personal data, unauthorized posting or processing of personal information	The NPC has separate complaint mechanics for privacy violations.

For hacked Facebook accounts used to scam others, the DOJ Office of Cybercrime has also issued guidance on account retrieval and directs the public to the NBI Cybercrime Division or PNP Anti-Cybercrime Group for cybercrime complaints. See the DOJ-OOC page on Facebook account retrieval.

Step-by-step: what to do before filing

1. Preserve evidence before reporting or taking down the account

Do not rely on one screenshot. Fake accounts disappear quickly once reported.

Preserve:

the full profile URL;
username, handle, user ID, profile link, and display name;
profile photo, cover photo, bio, and public posts;
screenshots of the scam conversation from start to finish;
the date and time shown on the device;
the phone number, email, GCash, Maya, bank, crypto wallet, or QR code used;
payment receipts and transaction reference numbers;
proof that the real person or business did not authorize the account;
names and contact details of other victims or witnesses;
links to marketplace listings, group posts, ads, or stories;
screen recordings showing how the account can be reached from the app or browser.

A common mistake is reporting the account to Facebook or TikTok first, causing it to be removed before evidence is saved. Removal may help stop the scam, but it can also make proof harder to collect. Preserve evidence first whenever possible.

2. Keep the original device and account available

Screenshots are useful, but investigators and prosecutors may ask how they were obtained. Keep the phone, laptop, email account, social media account, and SIM card used to communicate with the scammer.

Under the E-Commerce Act of 2000, RA 8792, electronic documents and data messages are recognized in Philippine law. The Rules on Electronic Evidence also deal with authentication. In practical terms, you must be ready to show that the screenshots, chats, payment confirmations, emails, and links are genuine and came from the relevant account or device.

3. Ask the bank or e-wallet to freeze or trace the transaction

If money was sent, report immediately to the bank, GCash, Maya, remittance center, payment gateway, or crypto exchange.

Prepare:

transaction reference number;
exact amount;
date and time;
recipient name or account number;
screenshots of the conversation that induced payment;
police/NBI/prosecutor complaint reference, if already available.

Banks and e-wallets have their own fraud-review processes. A criminal complaint does not guarantee immediate recovery, but early reporting improves the chance of freezing remaining funds or identifying the receiving account.

4. Prepare a clear timeline

Investigators appreciate a simple chronology. Write it this way:

When you discovered the fake profile.
How the fake profile used your identity or deceived the victim.
What representations were made.
When the victim sent money.
Where the money was sent.
What happened after payment.
What steps you took to verify the identity.
Whether the account was deleted, changed, blocked, or renamed.

Avoid emotional conclusions such as “professional scammer” unless supported by facts. Use specific statements: “The account used my photo,” “The account sent this GCash number,” “My aunt sent ₱8,000 after receiving this message.”

5. Execute a complaint-affidavit

A complaint-affidavit is a sworn written statement describing what happened and attaching evidence. It is usually notarized or sworn before the receiving officer, depending on where it is filed.

A strong complaint-affidavit should include:

your full name, address, nationality, and contact details;
your relationship to the fake account or victim;
a statement that you did not authorize the fake profile;
the URL and identifiers of the fake profile;
the acts done by the fake profile;
the amount lost, if any;
the payment trail;
the names of witnesses or other victims;
the offenses you are asking authorities to investigate;
attachments marked in order.

If you are abroad, you may need to execute the affidavit before the Philippine Embassy or Consulate, or have it notarized locally and apostilled if it will be used in the Philippines. Requirements vary depending on the receiving office and the country where the document is signed.

Documents usually needed

Document or evidence	Why it matters
Government ID of complainant	Establishes identity of the person filing
Complaint-affidavit	Main sworn narrative of facts
Screenshots of fake profile	Shows impersonation or fake identity
Profile URL or username	Helps investigators locate the account
Screenshots or export of chat messages	Shows deceit, representations, and timeline
Payment receipts	Proves damage and traces recipient
Bank/e-wallet reports	Supports urgency and financial loss
Affidavit of the impersonated person	Proves lack of authority to use identity
Affidavit of the paying victim	Proves reliance and damage for estafa
Business registration, if a business was impersonated	Proves legitimate identity of the business
Police blotter, if available	Helpful record, but not a substitute for a cybercrime complaint
Device used in communication	May be needed for verification or forensic review

How investigators trace a fake profile

Victims often ask, “Can the police find out who is behind the fake account?” Sometimes yes, but it is not as simple as looking at the profile.

Authorities may need:

account registration details;
login information;
IP-related records;
device or subscriber information;
payment-account KYC records;
SIM registration information;
bank or e-wallet account records;
CCTV from cash-out points, if applicable;
information from foreign platforms through legal channels.

For cybercrime evidence, courts may issue cybercrime warrants under the Supreme Court’s Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC. These include warrants to disclose computer data, intercept computer data, search/seize/examine computer data, or examine lawfully seized computer data.

This is also why early reporting matters. Digital logs may be retained only for limited periods. RA 10175 contains preservation rules for traffic data, subscriber information, and content data, but foreign social media platforms may have their own retention policies and legal-request procedures.

Is barangay conciliation required?

Usually, no.

Fake social media profile fraud involving cybercrime, estafa, identity theft, hacking, or significant financial loss is generally not the type of dispute that must first go through barangay conciliation. Barangay conciliation under the Katarungang Pambarangay system is mainly for certain disputes between individuals who live in the same city or municipality and for offenses within limited penalty thresholds.

A barangay blotter may help document harassment or threats, but it does not replace a complaint with the NBI, PNP-ACG, or prosecutor.

What if the scammer is outside the Philippines?

A cybercrime complaint may still be investigated in the Philippines if elements of the offense occurred in the Philippines, a computer system in the Philippines was used, or damage was caused to a person in the Philippines. RA 10175 also recognizes jurisdiction over violations committed by Filipino nationals regardless of place of commission.

For foreign suspects or foreign-based platforms, expect additional practical hurdles:

identity records may be held by foreign companies;
law enforcement may need international cooperation channels;
platform response times can vary;
foreign bank, remittance, or crypto records may require separate legal processes;
affidavits executed abroad may need consular acknowledgment or apostille.

For OFWs and Filipinos abroad whose identity is used to scam relatives in the Philippines, it is often helpful for both the impersonated person and the paying victim in the Philippines to execute affidavits. The impersonated person proves lack of consent; the paying victim proves deceit, reliance, and damage.

What if you only want the fake account removed?

Account removal and criminal prosecution are different.

To stop ongoing harm, you may report the fake account directly to the platform. Facebook, Instagram, TikTok, X, LinkedIn, and marketplace platforms have impersonation and scam-reporting tools.

But if money was lost, or your identity is being repeatedly used, platform reporting alone is often not enough. Platforms may remove the account without identifying the person behind it to you. Law enforcement may still need preserved evidence, complaint-affidavits, and legal requests to obtain account-related data.

A practical sequence is:

Capture and preserve evidence.
Report to bank/e-wallet if money moved.
File with NBI/PNP-ACG/prosecutor.
Report the fake profile to the platform for takedown.
Keep monitoring for duplicate or renamed accounts.

Common mistakes that weaken fake profile fraud complaints

Reporting too late

Victims sometimes wait weeks hoping the scammer will refund the money. By then, the profile may be deleted, the receiving account emptied, and platform logs harder to obtain.

Only saving cropped screenshots

Cropped screenshots may remove important details like the URL, timestamp, username, browser bar, phone status bar, and surrounding conversation. Save full-screen captures and, when possible, screen recordings.

Deleting the chat out of anger or embarrassment

Do not delete messages. Even humiliating or emotional conversations may contain the exact false representation that proves deceit.

Filing only as “identity theft” when money was lost

If the fake profile actually caused someone to send money, make sure the complaint also explains the fraud and the financial damage. Estafa focuses on deceit and damage. Identity theft focuses on unauthorized use of identifying information. Many cases need both.

Assuming a police blotter is already a criminal case

A blotter is only a record. A formal complaint-affidavit with supporting evidence is usually needed for investigation and prosecution.

Publicly accusing the suspected person without proof

It is understandable to warn others, but naming a suspected person online without sufficient proof can create a separate defamation issue. Stick to verifiable facts: fake account link, scam method, payment details, and official report status.

Typical timeline

Timelines vary widely by city, agency workload, platform cooperation, amount involved, and whether the suspect can be identified.

Stage	Typical practical range
Evidence preservation and complaint preparation	Same day to 1 week
Initial NBI/PNP-ACG interview or intake	Same day to several weeks, depending on office volume
Bank/e-wallet fraud review	Days to several weeks
Cybercrime data preservation or legal requests	Weeks to months
Preliminary investigation at prosecutor level	Around 2 to 6 months, sometimes longer
Filing of information in court, if probable cause is found	After prosecutor resolution
Trial	Often years, especially if contested

Urgent fund-freezing and account-preservation steps should be done as early as possible because recovery and identification become harder with time.

Frequently Asked Questions

What case can I file if someone made a fake Facebook account using my photos to scam people?

You may file a complaint for computer-related identity theft under Section 4(b)(3) of RA 10175. If money was obtained from victims, the complaint may also include estafa under Article 315 of the Revised Penal Code, usually in relation to Section 6 of RA 10175 because the fraud was committed through ICT.

Is creating a fake social media profile automatically a crime in the Philippines?

Not every fake or parody account automatically becomes a criminal case. It becomes legally serious when it uses another person’s identifying information without authority, deceives people, causes damage, hacks an account, posts defamatory statements, threatens someone, or processes personal data unlawfully.

Can I file estafa if the scam happened on Facebook Marketplace?

Yes, if the seller used deceit and you paid because of that deceit. For example, if the seller used a fake profile, fake proof of identity, fake shipping confirmation, or false promise to deliver an item and then disappeared after payment, estafa may be considered. Because it happened online, cybercrime provisions may also be relevant.

What if no money was lost yet?

If no one has paid money yet, estafa may be harder to prove because damage is a key element. However, computer-related identity theft may still be considered if someone’s identifying information was used without right. The law also recognizes situations where no damage has yet been caused, although the penalty may be lower.

Should I file with NBI or PNP Anti-Cybercrime Group?

Either may receive cybercrime complaints. The better choice often depends on accessibility, urgency, local availability, and the nature of the evidence. NBI Cybercrime Division and PNP-ACG both handle cybercrime matters under RA 10175. You may also file directly with the prosecutor if the complaint-affidavit and evidence are already organized.

Can I recover the money from the scammer?

Possible, but not guaranteed. Recovery depends on whether the funds remain in the recipient account, whether the bank or e-wallet can freeze them, whether the receiving account can be identified, and whether restitution is ordered or paid. Report immediately to the bank or e-wallet and include all transaction details in the criminal complaint.

Can I sue if my hacked account was used to scam my friends?

Yes. The hacking may involve illegal access under Section 4(a)(1) of RA 10175. The use of your account and identity may involve computer-related identity theft. If your friends sent money because they believed they were dealing with you, the facts may also support estafa or computer-related fraud allegations.

Do I need notarized screenshots?

Notarized screenshots can help show that printouts existed on a certain date, but notarization does not automatically prove that the account is genuine, who controlled it, or that the content was not manipulated. Keep the original device, links, account access, payment records, and full digital files. Investigators and prosecutors may still require authentication.

Can a foreigner file a complaint in the Philippines?

Yes, if the offense affected the foreigner in the Philippines, involved a Philippine-based victim, used Philippine payment channels, or otherwise falls within Philippine jurisdiction. If documents are signed abroad, the foreigner may need consular acknowledgment, notarization, or apostille depending on where and how the complaint will be filed.

Is cyber libel the right case for a fake profile?

Only if the fake profile published defamatory statements that identify and dishonor a person or entity, and the other elements of libel are present. If the main problem is that the fake profile tricked people into sending money, the more direct issues are usually identity theft, cybercrime, and estafa.

Key Takeaways

A fake social media profile used for fraud in the Philippines commonly leads to a complaint for computer-related identity theft, computer-related fraud, and/or estafa.
If money was actually sent because of the fake profile, estafa under Article 315 of the Revised Penal Code becomes central.
If the fraud was done online, Section 6 of RA 10175 may apply because ordinary crimes committed through ICT can carry cybercrime consequences.
If the account was hacked, include facts supporting illegal access.
If the fake profile posted defamatory accusations, cyber libel may be considered separately.
Preserve evidence before reporting the account for takedown.
File with the NBI Cybercrime Division, PNP Anti-Cybercrime Group, or prosecutor’s office, supported by a complaint-affidavit, screenshots, links, payment proof, and witness affidavits.
Report payment transfers immediately to the bank, GCash, Maya, remittance center, or payment platform because tracing and freezing funds are time-sensitive.
A barangay blotter may help document events, but it usually does not replace a formal cybercrime or estafa complaint.