Discovering a fake Facebook account that uses your photos and is asking people for money is a deeply violating experience. It misappropriates your identity, risks damaging your reputation among friends, family, and colleagues, and can expose others to financial scams. In the Philippines, this conduct is not just unethical — it violates specific provisions of the Cybercrime Prevention Act of 2012 and can give rise to both criminal and civil liability.

This article walks you through exactly what is happening legally, your rights, the practical steps you should take right away to protect yourself and gather strong evidence, how to report it effectively to Facebook and Philippine authorities, realistic timelines and challenges, civil options if you suffered harm, and clear answers to the questions people in your situation most often search for.

Legal Basis Under Philippine Law

The core offense here falls under Republic Act No. 10175, the Cybercrime Prevention Act of 2012.

Section 4(b)(3) specifically penalizes computer-related identity theft: the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person (natural or juridical) without right. Your name, photos, and likeness used to create a fake profile that solicits money squarely fits this definition.

If the fake account is actively used to deceive people into sending money or other benefits through false representations (such as emergencies, investments, or personal requests), computer-related fraud under Section 4(b)(2) also applies. This covers unauthorized interference or deception via a computer system that causes damage or prejudice with fraudulent intent.

Because these acts are committed through information and communications technology, Section 6 of RA 10175 raises the penalty for related Revised Penal Code offenses (such as estafa or swindling under Article 315) by one degree. Even without actual financial loss to you personally, the creation and use of the fake account for deceit is punishable.

Penalties for violations of Section 4(b) include imprisonment of prision mayor (six years and one day to twelve years) or a fine of at least ₱200,000 (up to an amount commensurate with the damage caused), or both. If no damage has yet occurred, the penalty is lowered by one degree.

Your right to privacy and against unauthorized use of your likeness is also protected under the Civil Code (provisions on human relations and abuse of rights) and Republic Act No. 10173 (Data Privacy Act of 2012), which treats photos and personal identifiers as personal data. Violations can support a complaint before the National Privacy Commission, though cybercrime reporting usually takes precedence for impersonation and fraud cases.

Jurisdiction lies with specially designated Regional Trial Court cybercrime courts. Philippine courts have authority even if the perpetrator is abroad, provided any element of the offense occurred in the Philippines, a computer system here was used, or damage was caused to a person in the Philippines.

Immediate Practical Steps You Should Take

Act quickly. Digital evidence can disappear, accounts can be deleted, and funds can move fast.

Preserve every piece of evidence without altering it.
Take clear, full screenshots or screen recordings of the fake profile (including URL, username/handle, profile picture, cover photo, bio, posts, friend list if visible, and any messages). Capture timestamps, dates, and full conversation threads where the account asks for money. Note the exact URLs and any phone numbers, e-wallet details (GCash, Maya, bank accounts), or email addresses mentioned. Save originals in a secure folder and make working copies. Do not delete anything from your own devices or accounts. This evidence must satisfy the Rules on Electronic Evidence.
Report the impersonating account directly to Meta (Facebook).
Use Meta’s dedicated Report an Impostor Account form. You will usually need to attach a clear photo of your government-issued ID for verification. You can also go to the fake profile, click the three dots or Options below the cover photo, select “Report profile,” and choose the option that it is pretending to be you. Meta’s process prioritizes reports from the actual person being impersonated. Provide as much detail and evidence links as possible. While takedown is not guaranteed overnight, this is the fastest platform-level remedy and creates an official record.
Alert your close contacts factually and calmly.
Post a clear notice on your real Facebook account (or message key people privately) stating that any account using your photos or name asking for money is fake and unauthorized. Advise them not to send anything and to report and block it. Keep the language neutral and factual — avoid speculation about who is behind it.
Secure your own accounts.
Change passwords on Facebook and linked email/phone, enable two-factor authentication, review active sessions and authorized apps, and limit who can see your photos and personal information going forward. Consider watermarking future photos or restricting visibility.
Gather supporting statements.
Ask people who received messages from the fake account for their own screenshots and a short written account of what was requested and whether any money changed hands. These strengthen the case by showing actual or attempted damage.

Do not message or confront the fake account yourself — this risks tipping off the perpetrator and evidence being destroyed.

Reporting to Philippine Authorities: PNP ACG or NBI

You can (and should) report to law enforcement even if you do not yet know who created the account. Complaints can be filed against “John Doe” or “unknown person using [specific profile URL/username].”

Philippine National Police – Anti-Cybercrime Group (PNP ACG)

This is usually the most accessible first stop for most impersonation and scam-related cases.

How to report: Use the online e-complaint portal on acg.pnp.gov.ph, email acg@pnp.gov.ph, call the hotline at (02) 8723-0401 local 7491 (or text options such as 0917-847-5757), or visit in person at headquarters (Camp Crame, Quezon City) or any regional Anti-Cybercrime Unit.
Bring or upload: Valid government ID, your sworn complaint-affidavit or detailed narrative (chronological facts, how you discovered it, harm caused or risked), and all digital evidence (preferably on USB or uploaded securely). Police can help you execute the sworn statement.

National Bureau of Investigation – Cybercrime Division (NBI CCD)

Choose NBI for more complex, organized, or cross-border cases, or if you prefer their broader investigative reach.

How to report: Submit via NBI’s online complaint facility, email cybercrime@nbi.gov.ph or ccd@nbi.gov.ph, call (02) 8523-8231 to 38, or file in person at NBI headquarters on Taft Avenue, Manila, or regional offices.
Same documentary requirements apply.

Practical realities: Both agencies can request preservation of data from Meta (up to 30 days, extendable) and later apply for court-issued Warrants to Disclose Computer Data (WDCD) to obtain subscriber information, IP logs, and other records. Investigations often take weeks to several months depending on Meta’s response time, the complexity of tracing (VPNs, mule accounts, foreign IPs), and workload. You will usually receive a reference or blotter number for follow-up. Cooperation from you (providing additional details when asked) is important.

You may also file a complaint-affidavit directly with the Office of the City or Provincial Prosecutor for preliminary investigation, but starting with PNP ACG or NBI is more common and efficient for cyber cases because they handle the technical evidence gathering.

Civil Remedies and Other Options

Beyond criminal reporting, you can pursue civil damages for the harm caused — anxiety, emotional distress, reputational damage, and any actual expenses (for example, lost opportunities or costs to mitigate harm). The Civil Code allows claims for moral damages, actual damages, exemplary damages in appropriate cases, attorney’s fees, and injunctive relief to stop ongoing misuse.

These can be filed separately or alongside the criminal case (civil liability is often deemed instituted with the criminal action unless reserved). Venue is generally the RTC where you reside or where the harmful act occurred or produced effects. A lawyer can help assess the strength of your case and the appropriate amount to claim.

You may also file a complaint with the National Privacy Commission if you believe there was unauthorized processing of your personal data (photos and identifiers), though this is usually secondary to the cybercrime angle.

If the fake account posted defamatory content, cyber libel under RA 10175 Section 4(c)(4) may also apply and can be included in your complaint.

Common Challenges and What to Expect

Perpetrators often use anonymous or foreign-based accounts, making identification and arrest difficult even with IP data. Extradition for this type of offense is rare. Meta generally complies with valid Philippine legal process but response times vary.

Some cases resolve with quick account takedown and no further action if the perpetrator cannot be traced. Others lead to identification through payment trails (especially if money was actually sent by others) and eventual prosecution.

Foreigners and overseas Filipinos (OFWs) can report online or by email and follow up remotely; many agencies accommodate remote filings. If you are abroad, you may coordinate through a Philippine embassy or consulate for notarization or assistance, but direct reporting to PNP ACG or NBI is usually sufficient.

Common pitfalls to avoid: deleting messages or evidence, confronting the scammer, making public accusations without solid proof (which could expose you to counter-claims), or assuming the platform alone will solve everything.

Frequently Asked Questions

Is creating a fake Facebook account using someone else’s photos and name illegal in the Philippines?
Yes. It constitutes computer-related identity theft under Section 4(b)(3) of RA 10175, and if used to solicit money, computer-related fraud under Section 4(b)(2) as well. Penalties include imprisonment and substantial fines.

How do I report a fake Facebook account impersonating me?
First use Meta’s dedicated impostor reporting form (attach government ID proof). Then preserve evidence and report to PNP ACG (acg.pnp.gov.ph or hotline (02) 8723-0401 loc. 7491) or NBI Cybercrime Division. Both accept complaints even when the perpetrator’s real identity is unknown.

What evidence is most important for a cybercrime complaint?
Full screenshots or recordings showing the fake profile URL/username, your photos being used, any posts or messages asking for money, timestamps, and any proof of harm or attempted harm. Keep originals untouched and organize them clearly with a chronological narrative.

Can I claim damages or sue the person behind the fake account?
Yes. You can pursue civil damages for moral and other harm under the Civil Code. If the perpetrator is identified, a civil case (or civil aspect of the criminal case) is possible. Many victims focus first on criminal reporting and platform takedown.

How long does it take for Facebook to remove a fake impersonating account?
It varies. Meta prioritizes verified impersonation reports from the real person, but processing can take days to weeks. Providing strong proof of identity and clear evidence speeds it up. Continue monitoring and follow up if needed.

What if the scammer is outside the Philippines or uses foreign servers?
Philippine courts still have jurisdiction under RA 10175 if any element occurred here or damage was caused to someone in the Philippines. Investigation and enforcement are harder but not impossible, especially if payment trails or other links exist. Report anyway — authorities can still act on what is traceable.

Do I need a lawyer to report this?
No for the initial report to PNP ACG or NBI — the agencies assist complainants and can help with the affidavit. However, consulting a lawyer is advisable if you want to pursue civil damages, need help preparing strong documentation, or the case becomes complex.

Can friends or family who received money requests from the fake account also file complaints?
Yes. They are potential victims of estafa or computer-related fraud. Their reports and evidence of any money sent strengthen the overall case and can lead to separate or joint complaints.

Is this also a violation of the Data Privacy Act?
Potentially. Unauthorized use of your photos and personal identifiers can violate RA 10173. You may file a complaint with the National Privacy Commission in addition to cybercrime reports, though the latter usually addresses the fraud and impersonation more directly.

What happens after I report to the authorities?
You will receive a reference number. Investigators will review evidence, may request more details from you, and can seek court orders to obtain data from Meta and financial institutions. The case may proceed to preliminary investigation and, if probable cause is found, to trial in a cybercrime court. Timelines vary widely.

Key Takeaways

Creating and using a fake Facebook account with your photos to solicit money violates RA 10175’s provisions on computer-related identity theft and fraud (and potentially estafa when committed through ICT).
Act immediately: preserve complete, timestamped evidence; report the account to Meta using their impersonation form with ID proof; alert your contacts factually; and file a report with PNP ACG or NBI.
Both PNP ACG and NBI accept “John Doe” complaints and can use legal process to trace accounts and payments. Provide clear, organized evidence and cooperate with follow-ups.
You have civil remedies for damages (moral, actual, etc.) under the Civil Code if you suffered reputational or emotional harm. These can proceed alongside or separately from criminal action.
Foreigners and OFWs have the same reporting options and can generally file remotely. Jurisdiction extends to acts affecting persons or systems in the Philippines.
Quick platform reporting plus prompt law-enforcement documentation gives you the strongest position to stop the misuse and pursue accountability. Many cases see account takedown even when full identification of the perpetrator takes longer.

Taking these steps puts you back in control and helps protect others from being scammed in your name. Start with evidence preservation and the Meta report today — the rest can follow methodically.