If someone created a fake Facebook, Instagram, TikTok, X, or other social media account using your child’s photos, treat it as both a child safety issue and a legal evidence issue. Your first goals are to protect your child, preserve proof before the account disappears, report the account correctly, and decide whether the situation needs police, NBI, PNP Anti-Cybercrime Group, National Privacy Commission, or child protection intervention.

A fake account using a minor’s photos can be “just” impersonation, but it can also become cyber identity theft, harassment, cyberlibel, fraud, data privacy misuse, child abuse, or online sexual abuse and exploitation of children depending on what the account does with the photos.

Is It Illegal to Use Your Child’s Photos for a Fake Account in the Philippines?

In many cases, yes. The exact legal basis depends on the facts.

A stranger or even someone you know may be legally exposed if they:

use your child’s name, nickname, face, school, family details, or photos to pretend to be your child;
message other people while pretending to be your child;
post insulting, humiliating, sexualized, or misleading captions;
use the fake account to ask for money, gifts, load, GCash transfers, or “donations”;
use the photos for grooming, sexual fantasy, sextortion, or child sexual abuse material;
continue posting after you clearly demanded removal;
collect or publish your child’s personal information without lawful basis.

A photo of a child is not “just a photo” if the child can be identified from it. Under the Data Privacy Act of 2012, Republic Act No. 10173, personal information includes information from which an individual’s identity is apparent or can reasonably be ascertained. In practical terms, a child’s face, name, school uniform, location tag, birthday post, family photo, or screenshots of messages may become personal data when used to identify or target the child.

Philippine law is especially strict when the content involves a child. Under the Anti-OSAEC and Anti-CSAEM Act, Republic Act No. 11930, a “child” generally means a person below 18 years old, and the law also covers persons depicted or made to appear as children, including computer-generated or digitally crafted images. This matters for AI-edited images, deepfakes, and sexualized fake profiles.

Legal Bases That May Apply

Cybercrime Prevention Act: computer-related identity theft

The most direct cybercrime issue is often computer-related identity theft under the Cybercrime Prevention Act of 2012, Republic Act No. 10175. Section 4(b)(3) penalizes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person, without right.

For a fake child account, the case is stronger when the fake profile uses several identifying details, such as:

the child’s real name or nickname;
the child’s face;
the child’s school, address, age, grade level, family members, or location;
copied photos from a parent’s account;
messages pretending to be from the child.

A single copied photo may already be serious, but investigators usually want to see how the photo was used to mislead others or identify the child.

Cyberlibel, threats, unjust vexation, scams, or other crimes online

If the fake account posts defamatory statements, humiliating claims, accusations, or edited images that damage the child or family’s reputation, cyberlibel may be considered under Section 4(c)(4) of RA 10175 in relation to Articles 353 and 355 of the Revised Penal Code. The Supreme Court in Disini v. Secretary of Justice, G.R. No. 203335, upheld cyberlibel in principle while striking down some other provisions of the Cybercrime Prevention Act.

If the account uses the child’s photos to solicit money, create a fake charity, sell items, or trick relatives, law enforcement may also evaluate estafa, other fraud offenses, or special cybercrime-related violations. Section 6 of RA 10175 also matters because crimes under the Revised Penal Code and special laws may carry higher penalties when committed through information and communications technology.

Data Privacy Act: unauthorized use of a child’s personal data

The Data Privacy Act may apply when someone collects, stores, posts, discloses, or otherwise processes your child’s personal data without a lawful basis. The National Privacy Commission explains that personal information processing must follow the principles of transparency, legitimate purpose, and proportionality.

For parents, the practical point is this: if a fake account publicly displays your child’s face and details, or refuses to remove them after notice, you may have a privacy complaint route in addition to a criminal complaint route.

Before filing a formal privacy complaint, the NPC generally requires exhaustion of remedies. This means you should first notify the respondent in writing and give them a chance to act. The NPC’s complaint mechanics state that the respondent’s failure to take timely or appropriate action, or failure to respond within 15 calendar days, must be shown in the complaint. For anonymous fake accounts, you can still document your platform reports, takedown requests, and any known contact with the suspected person.

Civil Code: privacy, dignity, damages, and family peace

Even when the conduct does not neatly fit a criminal offense, the Civil Code may still provide remedies.

Under Article 26 of the Civil Code, every person must respect the dignity, personality, privacy, and peace of mind of others. Acts that meddle with private life or family relations may give rise to damages, prevention, and other relief even if they are not criminal.

Articles 19, 20, and 21 of the Civil Code may also support a civil claim when a person acts in bad faith, causes damage contrary to law, or willfully injures another in a way contrary to morals, good customs, or public policy.

The Supreme Court has recognized privacy as a serious legal interest in cases such as Ople v. Torres, G.R. No. 127685, and Spouses Hing v. Choachuy, G.R. No. 179736. In Vivares v. St. Theresa’s College, G.R. No. 202666, the Court also discussed privacy expectations in Facebook photos. A practical lesson from Vivares is that privacy settings matter, but public access does not give someone a free pass to impersonate, exploit, or harass a child.

Family Code: parents have authority and responsibility to protect the child

Under the Family Code, parents exercise parental authority over their minor children. This includes the duty to care for, protect, and make decisions affecting the child’s welfare. If the parents are separated, the parent with custody or parental authority is usually the person best positioned to file reports, sign complaint-affidavits, and submit identity documents for the child.

If another relative is reporting because the parent is abroad, unavailable, or incapacitated, agencies may ask for proof of authority such as a Special Power of Attorney, guardianship documents, or written authorization.

Anti-OSAEC and Anti-CSAEM Act: when the fake account becomes a child sexual exploitation case

If the fake account sexualizes your child, uses suggestive captions, invites sexual comments, offers the child for sexual activity, creates AI-generated sexual images, sends the child’s photos to adults for sexual purposes, or uses the photos for sextortion, treat the matter as urgent.

RA 11930 covers online sexual abuse or exploitation of children, child sexual abuse or exploitation materials, grooming, luring, sexualization of children, image-based sexual abuse, and even certain digital or computer-generated depictions. It also requires strict confidentiality of the child’s identity in investigation and court records.

A parent or guardian may file a complaint for offenses under RA 11930. The law also recognizes roles for the DSWD, local social welfare officers, law enforcement, prosecutors, and other child protection actors.

Anti-Photo and Video Voyeurism Act

The Anti-Photo and Video Voyeurism Act of 2009, Republic Act No. 9995, may apply if the account involves sexual acts, private areas, or intimate images taken or shared without consent. It does not usually apply to ordinary family, school, birthday, or travel photos unless the images involve the specific intimate situations covered by the law.

What to Do Immediately

1. Preserve evidence before reporting the account

Do not rush to report the account before saving proof. Platforms sometimes remove accounts quickly, and once the account disappears, you may lose useful evidence.

Save the following:

Full screenshots of the fake profile
- profile name;
- username or handle;
- profile photo;
- bio;
- visible URL;
- number of followers or friends;
- date and time on your device.
Screenshots of each post using your child’s photos
- include captions, comments, reactions, dates, and account name;
- capture the full screen, not just cropped images.
Messages from the fake account
- preserve the conversation thread;
- include timestamps;
- do not delete the chat.
Screen recording
- record yourself opening the profile, scrolling through the posts, tapping the username, and showing the URL or account ID if visible.
Source of the original photos
- identify where the photos were copied from;
- save your original posts, privacy settings, and upload dates.
Reports from other people
- ask trusted relatives or friends who received messages to screenshot them;
- get their full names and contact details in case they need to execute affidavits later.

If the account contains sexualized child content, do not forward the images in group chats or repost them publicly. Capture only what is necessary for reporting, store it securely, and bring it directly to law enforcement.

2. Report the fake account to the platform

Use the platform’s impersonation or child safety reporting channel. Ordinary “spam” reports are often less effective than impersonation, privacy, or child safety reports.

Platform	Useful official reporting route
Facebook	Report an impostor account or use the profile’s report button
Instagram / Threads	Report an impersonation account
TikTok	Report an impersonation account
X	Report impersonation on X

When reporting, state clearly:

you are the parent or legal guardian;
the account is pretending to be your minor child or using your child’s photos without permission;
the child is under 18;
the account creates a safety, privacy, or exploitation risk;
the account URL or username;
links to copied photos if the platform requests them;
proof of your authority if requested.

If the first report is rejected, report again using a more specific category. Many parents mistakenly report under “fake account” only. If there are sexualized captions, grooming, threats, or child endangerment, use the child safety or exploitation category.

3. Lock down your child’s and family’s online footprint

While the report is pending:

set your own posts containing the child to “friends only” or private;
remove public school tags, location tags, birthday details, and uniforms where possible;
ask relatives not to repost the child’s photos publicly;
check whether the same photos appear on other platforms;
search the child’s name, nickname, and image captions;
warn relatives privately not to engage with the fake account.

Avoid publicly posting the fake account link with “Please report this.” This can unintentionally increase the account’s reach, expose your child further, and alert the offender to delete evidence.

4. Decide whether to file a cybercrime complaint

File with cybercrime authorities if any of these are present:

the fake account uses your child’s name and photos to impersonate the child;
the account messages people;
the account has sexual, humiliating, threatening, or fraudulent content;
the person refuses to remove the account;
you suspect grooming, stalking, blackmail, or extortion;
the account keeps coming back after takedowns;
the offender is unknown and needs technical tracing.

In the Philippines, the usual agencies are:

Office	When to go there	Practical notes
NBI Cybercrime Division	Fake accounts, impersonation, cyber identity theft, online harassment, scams, or unknown offenders	The NBI Citizen’s Charter for computer crime complaints states that the general public may request investigative assistance and that the initial process has no listed filing fee.
PNP Anti-Cybercrime Group	Cybercrime complaints, especially when urgent police coordination is needed	You may approach the nearest PNP Anti-Cybercrime Group or Regional Anti-Cybercrime Unit.
Women and Children Protection Desk / local police	If the child is threatened, stalked, sexually exploited, or at immediate risk	They can coordinate child protection response and refer cyber aspects to specialized units.
City or Municipal Social Welfare and Development Office	If the child needs psychosocial support, shelter, protection, or intervention	Especially important for OSAEC, grooming, family involvement, or threats.
National Privacy Commission	Unauthorized processing or disclosure of personal data	The NPC requires a notarized complaint form or verified complaint, evidence, and usually proof of prior written notice to the respondent.

5. Prepare a complaint-affidavit

For NBI, PNP, or prosecutor filing, expect to prepare a complaint-affidavit. This is a sworn written statement explaining what happened, who is involved, what evidence you have, and what laws may have been violated.

A practical complaint-affidavit usually includes:

your full name, address, contact number, and relationship to the child;
the child’s initials or identifying details required by the agency, with care to protect privacy;
how you discovered the fake account;
the account URL, username, display name, and platform;
what photos or personal details were used;
what the account posted or messaged;
why you believe the account is fake;
any suspect’s name, if known;
the harm or risk to the child;
a list of attached screenshots, recordings, links, and witness statements;
your request for investigation, takedown assistance, and appropriate charges.

The affidavit must usually be notarized. Bring valid IDs and originals or clear copies of your attachments.

6. Ask for preservation and investigation, not just takedown

Takedown protects the child quickly. Investigation preserves accountability.

If the account is serious, ask cybercrime authorities about steps to preserve digital evidence. Platforms may require proper legal process before releasing subscriber information, IP logs, login records, or device information. Because many platforms are based abroad, requests can take time and may involve coordination through proper government channels, including the DOJ Office of Cybercrime in appropriate cases.

Do not rely on “we know who did it” unless you have proof. Screenshots of gossip, guesses, or mutual friends are helpful leads, but prosecutors need admissible evidence.

Documents to Prepare

Document or evidence	Why it matters
Parent or guardian’s government ID	Proves who is filing
Child’s birth certificate or proof of guardianship	Shows authority to act for the minor
Screenshots of fake profile, posts, comments, and messages	Basic proof of impersonation or misuse
Screen recording showing the account and URL	Helps authenticate that screenshots came from the actual profile
Original photos and where they were copied from	Shows ownership, source, and timeline
Platform report confirmations	Shows you requested takedown
Written demand or notice, if the suspect is known	Useful for NPC complaints and civil claims
Witness screenshots or affidavits	Helpful if others received messages
School incident report, if classmates are involved	Useful if the offender is another student
Medical or psychological records, if the child is harmed	Supports damages or child protection intervention
Special Power of Attorney, if parent is abroad	Allows a trusted person in the Philippines to file or follow up

For parents abroad, a Philippine embassy or consulate acknowledgment, consular notarization, or apostilled document may be required depending on where the document is executed. If the document is not in English, agencies may require a translation.

Timelines and Practical Expectations

Step	Typical timing	Common bottleneck
Evidence preservation	Same day	Account may disappear or change usernames
Platform report	Hours to several days, sometimes longer	Automated denials or wrong report category
NBI/PNP initial complaint intake	Same day if documents are ready	Need for affidavit, IDs, and clearer screenshots
Technical investigation	Weeks to months	Platform data, foreign-based providers, deleted logs
Prosecutor preliminary investigation	Often several months	Respondent’s counter-affidavit, subpoenas, clarificatory hearings
NPC complaint	After required documents and exhaustion of remedies	Notarization, proof of prior written notice, sufficiency of evidence
Civil action or court relief	Months or longer	Court docket, filing fees, identification of defendant

The NBI’s public Citizen’s Charter for computer crime complaints describes initial interview and complaint processing steps that may be completed during the visit, but the full investigation is separate and may take much longer, especially if the account holder is unknown.

Common Scenarios

The fake account only uses my child’s photo but not the child’s name

Still preserve evidence and report it. The legal case may be stronger if the account uses the child’s identity in a way that makes the child identifiable, but a face can still be personal information when the child can reasonably be identified from it.

If the photo is paired with a fake name, suggestive caption, school uniform, location, or messages to others, the risk increases.

The fake account uses my child’s school uniform

This is serious because a school uniform can identify the child’s school and location pattern. Notify the school privately, especially if classmates are involved or the account is messaging students.

Ask the school to preserve any reports, CCTV logs if relevant, and screenshots from students. If the suspect is a student, the school may conduct its own disciplinary process, but that does not replace a cybercrime or child protection complaint when the conduct is serious.

The suspect is a relative, neighbor, ex-partner, or co-parent

Preserve evidence before confrontation. Family disputes often lead to deleted accounts and changed stories.

If a co-parent or relative is using the child’s photos to harass, shame, threaten, or manipulate the other parent, the Civil Code, child protection laws, and family court remedies may become relevant. If there is a custody case, keep the evidence organized because it may affect parental fitness, visitation arrangements, or protection measures.

The fake account is sexualizing the child

Go directly to law enforcement and child protection authorities. Report to the platform under child sexual exploitation, not merely impersonation.

Under RA 11930, sexualization of children, grooming, luring, CSAEM, image-based sexual abuse, and related acts are treated seriously. Do not repost, forward, or circulate the material. Keep it only for reporting and investigation.

The account is asking for money using my child’s photos

Save all payment details: GCash number, bank account, QR code, mobile number, chat instructions, receipts, and names used. This may involve cyber identity theft, fraud, estafa, or other cyber-enabled financial offenses.

Tell relatives privately not to send money. If anyone already paid, ask them to preserve receipts and execute a statement.

The fake account keeps coming back

Create an incident log. Record each new username, URL, date discovered, date reported, and platform response. Repeated account creation can show persistence, harassment, and intent.

Also review where the offender is getting new photos. The source may be a public family album, a relative’s account, school event page, old birthday post, or messaging group.

Should You Send a Demand Letter?

If you know the person behind the account, a written demand may help. It should be calm, specific, and evidence-based.

A useful demand letter usually says:

you are the parent or guardian of the child;
the person used the child’s photos or identity without authority;
the account URL or screenshots are identified;
you demand immediate removal of the account, posts, messages, and saved copies;
you demand that the person stop using the child’s photos or personal information;
you require written confirmation;
you reserve the right to file complaints with proper authorities.

For NPC complaints, written notice is especially important because of the exhaustion-of-remedies requirement. For urgent child exploitation or cybercrime cases, however, do not delay reporting just to send a demand letter.

Can You File a Case If You Do Not Know Who Created the Account?

Yes. Many cybercrime complaints start with an unknown offender.

You can file based on:

account URL;
username;
screenshots;
messages;
payment details;
phone numbers or email addresses used;
clues from writing style, mutual friends, or timing;
witnesses who interacted with the account.

Cybercrime investigators may then determine whether there is a basis to request platform records or pursue further technical investigation. Identification is often the hardest part, especially when the offender uses VPNs, fake emails, prepaid SIMs, or foreign platforms. That is why speed and complete evidence matter.

When Is Barangay Action Useful?

A barangay blotter can be useful for documentation, especially if you know the suspect and they live in the same area. The Barangay Council for the Protection of Children may also help refer the matter to social welfare or police.

But barangay proceedings are not enough when the case involves:

cyber identity theft;
sexualized child photos;
grooming;
threats;
extortion;
scams;
unknown online offenders;
repeated fake accounts.

Barangay officials cannot compel Facebook, TikTok, Instagram, X, or foreign-based platforms to disclose account data. For cybercrime evidence and tracing, go to NBI Cybercrime Division or PNP Anti-Cybercrime Group.

What Remedies Are Possible?

Depending on the facts, remedies may include:

Remedy	What it can achieve
Platform takedown	Removal of fake account, posts, photos, or messages
Criminal complaint	Investigation and possible prosecution
Data privacy complaint	Orders, penalties, or corrective action for misuse of personal data
Civil case for damages	Compensation for moral damages, reputational harm, or family distress
School intervention	Discipline, safety planning, and student protection
Social welfare intervention	Counseling, protection, shelter, and child-focused services
Writ of habeas data	In serious privacy-security situations, possible court relief involving gathered or stored data

The Rule on the Writ of Habeas Data, A.M. No. 08-1-16-SC, is an extraordinary court remedy for violations or threats to privacy in life, liberty, or security involving the gathering, collecting, or storing of data. It is not the usual first step for every fake account, but it may become relevant in serious cases involving stalking, threats, surveillance, or dangerous data collection.

Frequently Asked Questions

Can I report a fake Facebook account using my child’s photos?

Yes. Report it directly to Facebook using the impersonation or privacy route, preserve screenshots first, and consider filing with NBI Cybercrime Division or PNP Anti-Cybercrime Group if the account pretends to be your child, messages others, harasses, scams, or endangers the child.

Is using my child’s photo without permission a crime in the Philippines?

It can be, depending on how the photo is used. If it is used to impersonate your child, cyber identity theft under RA 10175 may apply. If it is sexualized or used for grooming, RA 11930 may apply. If it is used for humiliation, threats, scams, or defamation, other criminal or civil remedies may also apply.

What if the photo was copied from my public Facebook post?

The fact that a photo was publicly visible may affect privacy arguments, but it does not automatically allow another person to create a fake account, pretend to be your child, scam people, harass your family, or sexualize the child. Your strongest claim may focus on impersonation, misuse, fraud, harassment, or child safety risk.

Should I message the fake account?

Usually, no. Messaging the fake account can alert the offender, cause deletion of evidence, or provoke more harm. Preserve evidence first. If you know the person and need to send a written demand, do it in a documented and calm way after saving proof.

Can the police find out who created the fake account?

Sometimes, but not always quickly. Investigators may need platform records, subscriber information, IP logs, device data, or witness evidence. Foreign platforms usually require proper legal process. The sooner you report, the better the chance that relevant logs still exist.

Can I post publicly asking people to report the fake account?

Be careful. Publicly sharing the fake account link can expose your child further and drive traffic to the account. A safer approach is to message trusted adults privately, ask them not to engage, and have them report through the platform’s impersonation or child safety process.

What if the fake account uses edited or AI-generated sexual images of my child?

Treat it as urgent. RA 11930 covers digital and computer-generated materials that depict or make a person appear to be a child in sexual abuse or exploitation contexts. Preserve limited evidence securely, do not circulate it, report to the platform under child sexual exploitation, and go to NBI, PNP ACG, or local child protection authorities.

Can I file with the National Privacy Commission?

Yes, if the issue involves misuse, disclosure, or improper processing of personal data. The NPC generally requires a notarized complaint or verified complaint, supporting evidence, and proof that you first informed the respondent in writing and gave them an opportunity to address the violation, unless the circumstances justify urgent action or the respondent is unknown.

What if I am overseas and my child is in the Philippines?

You can still report the account to the platform online. For Philippine agency filing, you may authorize a trusted person in the Philippines through a Special Power of Attorney. Depending on the country where it is signed, the SPA may need consular acknowledgment or apostille, and sometimes translation.

Should I delete my child’s photos from my account?

You do not have to delete everything, but you should reduce exposure. Make posts private, remove location and school details, limit tagging, ask relatives not to repost, and avoid public albums showing routines, uniforms, addresses, or frequently visited places.

Key Takeaways

Preserve evidence before reporting the fake account.
A fake account using your child’s photos may involve cyber identity theft, data privacy violations, civil liability, harassment, fraud, or child protection offenses.
If the account sexualizes the child, involves grooming, sextortion, deepfakes, or child sexual abuse material, treat it as urgent and report to law enforcement.
Use the platform’s impersonation, privacy, or child safety reporting channel, not only “spam.”
For serious cases, go to NBI Cybercrime Division, PNP Anti-Cybercrime Group, local police child protection desks, or social welfare offices.
For privacy complaints, prepare a notarized complaint, evidence, and proof of prior written notice when the respondent is known.
Do not publicly circulate the fake account or any sexualized child content.
Tighten privacy settings and reduce public access to your child’s photos, school details, and location information.