Discovering that your Facebook account has been used to scam other people can feel overwhelming and deeply unfair. You may have received frantic messages from friends or strangers asking why “you” are asking for money, promoting fake investments, or sending suspicious links. In many cases, this happens because someone gained unauthorized access to your account through phishing, malware, weak passwords, or session hijacking. The good news is that Philippine law treats you primarily as a victim in these situations, and there are clear, practical steps you can take right away to secure your account, create an official record, limit further damage, and protect yourself from potential liability or reputational harm. This guide explains the relevant laws, immediate actions with Meta, how to report to Philippine authorities, what evidence matters most, common challenges (including for overseas Filipinos and foreigners), and answers to the questions people actually ask Google.

How Philippine Law Views Unauthorized Use of Your Facebook Account

When someone hacks into or otherwise gains unauthorized control of your Facebook account and uses it to commit scams, several Philippine laws come into play. The primary statute is Republic Act No. 10175, the Cybercrime Prevention Act of 2012. Key provisions that usually apply include:

Illegal Access (Section 4(a)(1)) — accessing the whole or any part of a computer system (including social media accounts) without right.
Computer-related Identity Theft (Section 4(b)(3)) — the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another without right.
Computer-related Fraud — unauthorized input, alteration, or deletion of computer data or interference with a computer system causing damage with fraudulent intent.

The actual scams (for example, tricking people into sending money for fake investments, loans, or “emergency” help) may also constitute estafa (swindling) under Article 315 of the Revised Penal Code, especially when committed through a computer system. Penalties under RA 10175 generally range from prision mayor (6 years and 1 day to 12 years) up to higher terms depending on damage caused, plus substantial fines. Estafa penalties scale with the amount involved and were updated by RA 10951.

** Crucially, if you did not consent to or participate in the scams, you are generally not criminally liable.** Philippine authorities and courts recognize that account owners are often victims of hacking or identity theft themselves. Prompt reporting and documentation of the unauthorized access strengthen your position significantly. In practice, when victims file complaints against the account, investigators look at login metadata, device information, and patterns of activity. Evidence of access from unfamiliar locations, times, or devices usually leads them to treat the registered owner as a victim or witness rather than a suspect.

Civil liability under the Civil Code (particularly quasi-delict provisions in Article 2176) is also possible in theory if extreme negligence is proven (for example, knowingly sharing passwords or ignoring obvious red flags for a long time), but this is uncommon when clear hacking evidence exists. The Data Privacy Act (RA 10173) may also be relevant if personal data was compromised in the breach.

Step-by-Step: Securing Your Compromised Facebook Account

Act quickly—every hour matters for stopping further scams and preserving evidence.

Go directly to Meta’s dedicated recovery page at facebook.com/hacked on a trusted device you have used before. Follow the prompts to verify ownership. You may need to upload a government-issued ID (passport, driver’s license, or UMID), use a linked email or phone number still under your control, or involve trusted contacts you previously set up.
Once you regain access (or even while trying), immediately change your password to a strong, unique one you have never used elsewhere. Enable two-factor authentication (preferably an authenticator app or hardware key rather than SMS). Review “Where you’re logged in” or active sessions and log out every device or location you do not recognize. Check “Apps and Websites” and revoke any suspicious permissions.
Preserve evidence before cleaning up. Take clear screenshots of:
- Login activity showing unknown locations, IP addresses, or devices
- Messages or posts you did not send
- Any password change or 2FA disable notifications
- Activity log entries with timestamps Do this on another device if possible and save copies offline or in cloud storage you control. Do not delete messages or posts yet—authorities may need them.
Secure linked accounts and devices. Change passwords and enable 2FA on your email, phone number linked to Facebook, and any connected banking or e-wallet apps. Scan your devices for malware. If you suspect spyware, consider a factory reset after backing up important data (but preserve the evidence first).
Notify close contacts privately (via another platform or phone) that your account was compromised so they do not fall for further scams. You can later post a brief public notice once the account is secured.

Meta’s support can disable or restrict the account temporarily if scams are active, but they will not investigate the criminal aspect—that is the role of Philippine law enforcement.

Filing a Report with Philippine Cybercrime Authorities

Reporting creates an official record that protects you and helps authorities investigate the perpetrators and potentially stop ongoing scams. Many people start with the national triage line because it is fast and routes you correctly.

Recommended first step: Call the Cybercrime Investigation and Coordinating Center (CICC) Inter-Agency Response Center hotline 1326 (available 24/7). Alternative numbers tied to networks are 0991-481-4225 (DITO), 0966-976-5971 (Globe), and 0947-714-7105 (Smart). They can provide immediate guidance, coordinate with banks or platforms in urgent cases, and refer you to the appropriate agency.

You can also report directly to:

PNP Anti-Cybercrime Group (ACG) — Primary agency for most cyber incidents with nationwide presence. Use their eComplaint portal at acg.pnp.gov.ph (or the /eComplaint path), email acg@pnp.gov.ph, call their hotlines (commonly listed numbers include (02) 8723-0401 local 7491 or (02) 8414-1560; check current details on their site or Facebook page @anticybercrimegroup), or visit Camp Crame in Quezon City or the nearest Regional Anti-Cybercrime Unit (RACU).
NBI Cybercrime Division — Strong for complex or high-value cases. Hotline (02) 8523-8231 to 38 or email cybercrime@nbi.gov.ph; visit main office or regional branches.

Practical process for filing:

Prepare a detailed sworn statement or complaint-affidavit narrating when and how you discovered the compromise, what unauthorized activity occurred, and a clear statement that you did not authorize or participate in any scams. You can draft it yourself or with help from the agency and have it notarized.
Attach or upload evidence: screenshots, timeline of events, proof of account ownership, and any communications from victims or the scammer.
Submit in person (bring original and multiple photocopies plus valid ID) or through available online portals/email where accepted. Some initial reports can be filed remotely.
Request a reference or blotter number and the name/contact of the assigned investigator. Follow up regularly (every 1–2 weeks) as caseloads can be heavy.

After filing, authorities may issue preservation requests or, with court authorization, disclosure warrants to Meta for IP logs, device data, and account history. They can also coordinate with telecommunications companies (aided by the SIM Registration Act, RA 11934) and financial institutions. If the perpetrator is identified and within reach, they may pursue inquest or preliminary investigation leading to charges under RA 10175 and/or the Revised Penal Code.

What to Do If Scam Victims or Authorities Contact You

Stay calm and professional. Do not argue, admit fault, or offer to “refund” money unless advised by a lawyer after reviewing the facts. Explain clearly that your account was compromised without your knowledge or consent, provide your police or NBI reference number, and direct them to the investigating officer or agency handling your report. Many victims understand once they see the official record. Cooperate fully with any law enforcement requests for statements or additional evidence—this actually helps clear your name faster.

If a formal complaint is filed against you, consult a lawyer experienced in cybercrime or criminal law immediately. You have the right to present evidence of hacking and lack of participation during preliminary investigation or in court.

Common Challenges and Practical Realities

Many people face delays regaining account access because Meta requires strong verification—be persistent and gather every possible proof of ownership (old emails, linked numbers, ID uploads). Evidence can be tricky if the hacker deleted logs or used VPNs; however, Meta often retains backend data that law enforcement can access through proper legal channels.

For OFWs and Filipinos abroad, online portals, email submissions, and hotlines make initial reporting possible without travel. For formal notarized affidavits or court documents, you can execute a Special Power of Attorney (SPA) authorizing a relative or lawyer in the Philippines to act for you. If the SPA is signed abroad, it generally needs apostille authentication from the Philippine Embassy or Consulate (or the DFA Apostille system where applicable) to be valid in the Philippines. Some embassies assist with notarization or coordination.

Foreigners whose Philippine-linked Facebook accounts are misused follow the same process. Jurisdiction is based on the location of the victims or the impact in the Philippines; authorities can still investigate and request data from Meta (a U.S. company) through established channels. Language is rarely a barrier—most cyber units have English-capable personnel, and you can bring a translator if needed.

Other frequent issues include high caseloads (follow up persistently but politely), the emotional toll of reputation damage, and the fact that not every perpetrator is caught (especially if they operate from abroad with strong anonymity tools). Still, your report contributes to broader intelligence and can help identify patterns or linked accounts.

Documents, Costs, and Typical Timelines

You will generally need:

Valid government-issued photo ID (passport, driver’s license, UMID, etc.)
Proof of Facebook account ownership (Meta verification confirmation, linked email/phone records, or old activity screenshots)
Notarized complaint-affidavit or sworn statement detailing the incident and evidence
Copies of all digital evidence (screenshots with visible timestamps and context)
Any prior police blotter or communications from victims

Costs are minimal for the reporting process itself—mostly free at government agencies. Notarization of an affidavit usually costs PHP 100–500 depending on the notary and length. Lawyer consultation fees vary widely (initial meetings often PHP 2,000–10,000+). No filing fees apply for criminal complaints at the investigation stage.

Timelines: Report as soon as possible—ideally within days of discovery. Hotline triage is often immediate. Full investigation and any court process can take weeks to several months (or longer for complex international cases) due to volume and the need for digital forensics and platform cooperation. Early reporting improves outcomes.

Frequently Asked Questions

Can I be held criminally liable or arrested for scams done through my hacked Facebook account?
Generally no, if you had no involvement and can show unauthorized access. Prompt reporting and strong evidence of hacking usually lead authorities to classify you as a victim. Gross negligence cases are rare but possible—consult a lawyer if concerned.

What evidence best proves my account was hacked?
Screenshots of unfamiliar login locations/times/devices, messages sent without your knowledge, sudden security setting changes by someone else, and activity logs. Law enforcement can obtain Meta’s backend records (IP addresses, device IDs) through proper legal requests, which often corroborate your account.

Should I delete the scam messages or posts right away?
No—preserve everything first through screenshots and backups. After securing the account and filing your report, you can remove harmful content to limit further damage while keeping your own records.

How long does a PNP or NBI investigation usually take?
Initial response and evidence gathering can happen within days to weeks. Full resolution varies widely depending on complexity, whether the perpetrator is local or abroad, and current caseload. Regular follow-up with your assigned investigator helps.

Is it better to report to PNP ACG or NBI?
Both are capable. PNP ACG has more regional units and handles the majority of volume. NBI is often chosen for larger or more complex cases. The CICC 1326 hotline can guide you to the most appropriate agency based on your situation.

Can I report everything online without going to an office?
Yes for initial reports via hotlines, eComplaint portals, and email. Formal sworn affidavits may eventually require notarization and, in some cases, personal appearance or a properly authorized representative, but many steps can be handled remotely, especially for those abroad.

What if the scams involved my linked email, phone, or bank details?
Secure those accounts immediately and report any unauthorized transactions to your bank or e-wallet provider right away. Mention the broader compromise in your cybercrime report—it strengthens the overall picture.

Do I need a lawyer?
Not always for the initial report, but highly recommended if victims are pursuing claims against you, if the case becomes complex, or if you want help drafting strong affidavits and following up. Many lawyers offer initial consultations at reasonable rates.

Key Takeaways

Act immediately: Recover and secure your Facebook account through Meta’s hacked account tools, enable strong 2FA, and preserve all evidence of unauthorized access before cleaning up.
Report promptly to Philippine authorities—start with CICC hotline 1326 or directly with PNP ACG or NBI—to create an official record that protects you and triggers investigation of the real perpetrators.
Under RA 10175 you are typically viewed as a victim of illegal access and computer-related identity theft when your account is used without consent.
Document everything thoroughly and keep copies of your complaint reference number for use with victims or any future proceedings.
For those abroad or foreigners, online channels and properly apostilled documents via embassy assistance make the process workable without immediate travel.
Follow up consistently with investigators and consider consulting a lawyer experienced in cybercrime if victims contact you or complications arise.
Prevention going forward includes unique strong passwords, authenticator-app 2FA, regular login reviews, and caution with links or unexpected requests—even from “friends.”

Taking these steps puts you back in control and demonstrates good faith to authorities and anyone affected. Many people in your exact situation have successfully cleared their names and helped stop further harm by acting methodically and documenting the unauthorized use of their account.