Discovering that someone is using your real name online can feel invasive, embarrassing, and frightening—especially if the account is messaging your friends, scamming people, posting false statements, or exposing your personal details. In the Philippines, using another person’s real name online is not automatically a crime in every situation, but it can become legally actionable when it involves impersonation, identity theft, cyberlibel, harassment, fraud, or misuse of personal information. This guide explains how to assess what is happening, preserve evidence, report the account, and choose the right Philippine legal remedy.

First: Is Using Your Real Name Online Illegal in the Philippines?

Not always. Many people can have the same legal name. A person may also mention your name online in a lawful way, such as in a news report, school announcement, review, public discussion, or legitimate business transaction.

The problem begins when the use of your name is connected to something unlawful, such as:

Situation	Possible legal issue
Someone creates a fake Facebook, Instagram, TikTok, X, or email account pretending to be you	Computer-related identity theft under Republic Act No. 10175
The account uses your name and photo to message your contacts, borrow money, sell items, or solicit donations	Identity theft, fraud, estafa, or cybercrime
The account posts accusations, insults, or false stories that damage your reputation	Cyberlibel or civil damages
Someone publishes your full name together with your address, phone number, ID, school, employer, or family details	Data privacy violation, harassment, or possible civil action
A former partner uses your name online to shame, threaten, stalk, or humiliate you	Possible VAWC, Safe Spaces Act, cybercrime, or civil remedies
A page uses your real name for parody or criticism but clearly does not pretend to be you	May not be identity theft, but could still be cyberlibel or harassment depending on the content

The key questions are:

Is the account pretending to be you?
Is it using information that identifies you?
Is it causing harm, confusion, harassment, fraud, or reputational damage?
Is there proof linking the account, posts, messages, or transactions to the unlawful conduct?

Philippine Laws That May Apply

Computer-Related Identity Theft Under RA 10175

The main law for online impersonation is the Cybercrime Prevention Act of 2012, or Republic Act No. 10175.

RA 10175 penalizes computer-related identity theft, which includes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person without right. This is the legal basis often considered when someone uses your real name, photo, account details, or other identifying information online to pretend to be you or misuse your identity. (Supreme Court E-Library)

Your real name alone may not always be enough for a strong case if there is no impersonation, deception, or misuse. But the case becomes stronger when the fake account also uses:

Your photo
Your nickname
Your address, school, employer, or business name
Your phone number or email address
Your IDs or signatures
Screenshots of your real account
Messages pretending to be from you
Posts that make people believe you are the person behind the account

In practice, investigators and prosecutors look at the whole situation. A fake account named “Maria Santos” may not be enough if many people share that name. But a fake account named “Maria Santos” using your exact profile photo, workplace, city, friends list, and messages to your relatives is much more clearly an identity-related complaint.

Cyberlibel If the Account Posts False or Defamatory Statements

If the person using your name posts damaging accusations or humiliating statements, the issue may also involve libel or cyberlibel.

Under the Revised Penal Code, libel is a public and malicious imputation of a crime, vice, defect, act, omission, condition, status, or circumstance that tends to dishonor, discredit, or cause contempt against a person. (Lawphil)

When libel is committed through a computer system or similar online means, it may fall under cyberlibel under RA 10175. The Supreme Court has described cyberlibel as libel under Article 355 of the Revised Penal Code committed through a computer system. (Supreme Court E-Library)

Examples may include:

A fake account using your name posts that you are a scammer, thief, adulterer, drug user, or corrupt employee.
Someone creates a page with your real name and publishes fabricated stories about you.
An impersonator messages your employer or clients with false allegations.
A fake profile posts edited screenshots to make you appear guilty of something.

Cyberlibel is fact-sensitive. Not every insult is automatically cyberlibel. The statement must generally identify you, be defamatory, be published to someone else, and meet the elements required by law.

Timing also matters. In Causing v. People, the Supreme Court discussed the prescriptive period for cyberlibel and referred to the one-year period from discovery under the Revised Penal Code framework. (Supreme Court E-Library) This is one reason to act promptly if the fake account is publishing defamatory content.

Civil Remedies for Violation of Privacy, Dignity, and Reputation

Even when a criminal case is difficult, a civil case for damages may still be possible.

The Civil Code of the Philippines provides important rights that apply to online abuse:

Article 19 requires every person to act with justice, give everyone their due, and observe honesty and good faith.
Article 20 makes a person liable for damages if they willfully or negligently cause damage contrary to law.
Article 21 makes a person liable for damages if they willfully cause loss or injury in a manner contrary to morals, good customs, or public policy. (Lawphil)

Civil Code Article 26 also protects a person’s dignity, personality, privacy, and peace of mind, and allows relief for acts such as meddling with or disturbing another person’s private life, among other privacy-related wrongs. (Lawphil)

The Supreme Court has recognized that even where a criminal cyberlibel route is unavailable or problematic, civil actions under Articles 19, 20, and 21 may still be available for damages. (Supreme Court E-Library)

Civil remedies may be relevant when:

The fake account caused emotional distress.
Your reputation, employment, business, or relationships were harmed.
The person used your identity to harass or humiliate you.
You need compensation for measurable losses.
You want court relief to stop continuing misuse.

Data Privacy Rights Under RA 10173

Your real name is usually personal information when it identifies you or can reasonably identify you. If someone collects, posts, shares, or misuses your name together with other personal details, the Data Privacy Act of 2012, or Republic Act No. 10173, may become relevant.

RA 10173 protects individual personal information and recognizes the fundamental human right of privacy while requiring security for personal information systems. (National Privacy Commission)

This may matter if someone posts or misuses:

Your full legal name
Home address
Phone number
Email address
Government ID details
Passport or driver’s license information
Photos of your IDs
School, workplace, medical, or family information
Screenshots from private conversations

Data subjects have rights under the Data Privacy Act, including rights that may support requests for blocking, removal, or destruction of unlawfully processed personal data in appropriate cases. (National Privacy Commission)

For serious misuse of personal information, complaints may be brought before the National Privacy Commission (NPC). The NPC has rules covering the receipt, investigation, alternative dispute resolution, preliminary conference, and adjudication of privacy complaints.

Safe Spaces Act, VAWC, and Harassment-Related Situations

If the use of your real name online involves sexual harassment, stalking, threats, or gender-based abuse, other laws may apply.

The Safe Spaces Act, or Republic Act No. 11313, covers certain forms of online gender-based sexual harassment. Its rules include conduct such as unwanted sexual remarks, threats, uploading or sharing photos without consent, cyberstalking, and online identity theft in a gender-based sexual harassment context. (Supreme Court E-Library)

If the offender is a current or former spouse, partner, boyfriend, or someone with whom the woman has or had a sexual or dating relationship, Republic Act No. 9262, the Anti-Violence Against Women and Their Children Act, may also be relevant when the online conduct causes mental or emotional anguish, public ridicule, or humiliation. (Lawphil)

These situations are often more urgent because the online identity misuse may be part of a broader pattern of control, stalking, threats, blackmail, or abuse.

What to Do Immediately If Someone Is Using Your Real Name Online

1. Do Not Delete, Argue, or Report Everything Before Saving Evidence

Your first instinct may be to report the account immediately. That is understandable, but if the platform removes the account before you save evidence, you may lose important proof.

Before doing anything else, preserve:

The profile URL
Username, handle, and display name
Profile photo and cover photo
Bio, “about” section, location, workplace, school, or links
Posts, comments, stories, reels, videos, and captions
Private messages
Transaction requests or payment details
Dates and times
Names of people who received messages
Any visible email address, phone number, GCash number, bank account, or wallet address used by the impersonator

For social media, take both screenshots and screen recordings. A screen recording is useful because it can show you opening the profile, scrolling through the posts, clicking the URL bar, and showing that the account exists in real time.

2. Capture Evidence in a Way That Can Be Explained Later

Electronic evidence can be used in Philippine proceedings, but it must be authenticated and shown to be reliable. Philippine rules recognize electronic documents and data messages, but the person presenting electronic evidence may need to prove authenticity and reliability. (Supreme Court E-Library)

Practical evidence tips:

Include the full screen, not only a cropped portion.
Capture the URL or profile link.
Show the date and time if possible.
Save original image or video files.
Do not edit the original screenshots.
If you need to mark or highlight something, make a copy and keep the original untouched.
Ask people who received messages from the fake account to save their own screenshots.
Export chats when the app allows it.
Keep platform report numbers or email confirmations.

If money was involved, also preserve:

GCash, Maya, bank, or remittance receipts
Account names and numbers used by the impersonator
Chat logs showing the request for payment
Delivery receipts or tracking numbers
Marketplace listings
Names and contact details of victims or witnesses

3. Make a Simple Incident Timeline

Create a timeline while the facts are still fresh. This does not need to be complicated.

Example:

Date	What happened	Evidence
March 3, 2026	Friend sent screenshot of fake account using my name and photo	Screenshot from friend
March 4, 2026	Fake account messaged my cousin asking for ₱5,000 via GCash	Messenger screenshots, GCash number
March 5, 2026	Account posted false statement accusing me of stealing money	Screen recording, post URL
March 6, 2026	I reported account to Facebook	Report confirmation email

This timeline helps investigators, prosecutors, platforms, and courts understand the sequence quickly.

4. Secure Your Own Accounts

If someone is using your real name online, assume they may also be trying to access your accounts.

Do these as soon as possible:

Change passwords for your email and major social media accounts.
Use strong, unique passwords.
Turn on two-factor authentication.
Check active login sessions and remove unknown devices.
Review account recovery email addresses and phone numbers.
Check whether your profile photos, public posts, or IDs were copied.
Warn close relatives, coworkers, clients, or customers not to transact with the fake account.
If financial accounts are involved, notify the bank, e-wallet provider, or remittance service.

If your email account is compromised, secure it first. Your email is often the recovery point for Facebook, Instagram, TikTok, banking apps, and work accounts.

5. Report the Fake Account to the Platform

Most platforms have their own impersonation reporting process. Use the correct form or in-app report path because general “harassment” reports may not be reviewed as impersonation.

Official reporting options include:

Platform	Where to report
Facebook	Use Facebook’s official impersonation reporting process. Facebook states that it acts on reports from the person being impersonated or an authorized representative. (Facebook)
Instagram / Threads	Use the official form for accounts pretending to be you or someone you know. (Instagram Help Center)
TikTok	TikTok’s help guidance allows reporting an account for impersonation through the profile’s report options. (TikTok Support)
X / Twitter	X has an impersonation reporting process and policies against deceptive impersonation. (Help Center)

When reporting, upload a clear government ID only through the platform’s official secure form. Do not send your ID to random pages, commenters, or people claiming they can remove the account for a fee.

6. File a Complaint With the NBI Cybercrime Division or PNP Anti-Cybercrime Group

For serious impersonation, fraud, cyberlibel, threats, stalking, or identity theft, report to law enforcement.

The two most common cybercrime agencies are:

National Bureau of Investigation Cybercrime Division (NBI-CCD)
Philippine National Police Anti-Cybercrime Group (PNP-ACG)

The NBI Cybercrime Division’s citizen-facing process includes a preliminary interview, filling out a complaint sheet, sworn statements or affidavits, submission of supporting documents, and possible examination of relevant devices. The listed initial steps indicate no filing fee for that frontline process, but the actual investigation can take longer depending on the case. (National Bureau of Investigation)

The Department of Justice Office of Cybercrime also directs cybercrime victims to the NBI Cybercrime Division or the PNP Anti-Cybercrime Group for investigation assistance. (Cybercrime Division)

Bring both printed and digital copies of your evidence. If the fake account is still active, tell the investigator immediately because timing can matter for preservation requests, trace requests, and platform cooperation.

7. Consider a National Privacy Commission Complaint for Personal Data Misuse

If the main problem is the unauthorized posting, sharing, or misuse of your personal information, consider the NPC route.

This is especially relevant when the person or organization:

Posted your address, phone number, IDs, or private details
Used your personal data without consent
Refused to remove your personal data after a valid request
Collected or disclosed your personal information in a way that caused harm
Operates a page, company, school, employer account, association, or organization processing personal data

The NPC process is different from a criminal complaint. A cybercrime complaint focuses on criminal liability. An NPC complaint focuses on privacy rights, personal data processing, and compliance with the Data Privacy Act.

8. Use Barangay or Local Remedies Only When They Fit

A barangay blotter can help document that you reported the incident, especially if threats, harassment, or neighborhood disputes are involved. But the barangay cannot usually identify anonymous online users, compel a foreign platform to reveal account data, or prosecute cybercrime.

Barangay conciliation may matter for certain disputes between individuals in the same city or municipality before a civil case is filed. But for cybercrime, serious threats, VAWC, or situations needing law enforcement action, go directly to the proper agency.

For online sexual harassment or gender-based harassment, local government units are expected to have anti-sexual harassment desks or mechanisms under the Safe Spaces Act framework. (Supreme Court E-Library)

Documents and Evidence to Prepare

Document or evidence	Why it matters
Valid government ID or passport	Proves your identity and legal name
Screenshot of fake profile	Shows the account name, photo, bio, and identifying details
Profile URL or username	Helps investigators and platforms locate the account
Screen recordings	Shows the account exists and reduces claims that screenshots were edited
Messages sent by the fake account	Shows impersonation, fraud, threats, or harassment
Witness screenshots	Confirms other people saw or received the content
Payment receipts	Important if the account solicited money or sold items
Timeline of events	Helps investigators understand the case quickly
Sworn statement or complaint-affidavit	Often needed for formal complaints
Prior platform reports	Shows you already tried internal reporting
Device used to receive messages	May be examined or used to verify evidence

For affidavits, Philippine agencies and prosecutors commonly require a sworn statement. If signed in the Philippines, this usually means notarization before a notary public. If signed abroad, the document may need consular acknowledgment or apostille treatment depending on where it was executed and where it will be used.

Special Notes for Filipinos Abroad and Foreigners

If You Are a Filipino Abroad

You can still preserve evidence, report the account to the platform, warn contacts, and coordinate with relatives in the Philippines.

Practical steps:

Save complete digital evidence before the account disappears.
Ask trusted relatives in the Philippines to preserve screenshots from their own accounts if they received messages.
Prepare a sworn statement through the Philippine Embassy or Consulate if needed.
Keep copies of your passport, Philippine ID, or PSA documents showing your legal name.
If money was sent in the Philippines, preserve receipts and details of the recipient account.

If You Are a Foreigner

Foreigners can be victims of online identity misuse connected to the Philippines. The practical challenge is usually documentation and coordination.

Prepare:

Passport identity page
ACR I-Card, visa, or Philippine address if applicable
Proof that the online act affected you in the Philippines, targeted people in the Philippines, used Philippine payment channels, or involved a person located in the Philippines
Screenshots showing Filipino contacts, Philippine phone numbers, local bank or e-wallet details, or Philippine-based transactions
Sworn statement, with authentication requirements checked depending on where it is signed

If you are outside the Philippines, having a trusted local representative may help with document submission and follow-up, especially when agencies require physical filing or sworn documents.

Common Mistakes That Weaken a Case

Reporting Too Fast Without Saving Proof

If the platform removes the account, that is good for stopping harm, but it can make investigation harder if you did not save the URL, username, posts, and messages.

Only Taking Cropped Screenshots

A cropped screenshot of a name and photo may not show where the post came from. Capture the full page, URL, date, username, and surrounding context.

Publicly Attacking the Suspected Person

It is risky to post “I know who did this” without proof. You may expose yourself to a defamation complaint. Keep your public warning factual:

“A fake account is using my name and photo. Please do not transact with it. I have reported it.”

Avoid naming suspects unless there is verified evidence.

Hacking the Fake Account

Do not try to access, hack, or trick the impersonator’s account. That can create legal problems for you. Preserve evidence and use platform, law enforcement, or legal processes.

Assuming the Account Owner Is the Person in the Profile

Fake accounts often use stolen photos, fake names, hacked accounts, VPNs, or mule payment accounts. The visible account name may not be the real offender.

Waiting Too Long

Posts can be deleted. Accounts can change usernames. Platforms may retain data only for limited periods. Witnesses may forget details. If cyberlibel is involved, timing is also legally important because prescription periods may apply. (Supreme Court E-Library)

When the Situation Is Urgent

Treat the matter as urgent if the fake account is:

Asking people for money
Posting your address or location
Threatening violence or self-harm
Sharing sexual images or private photos
Contacting your employer, school, clients, or family
Using your name in a scam
Pretending to be you in a romantic, sexual, or financial context
Targeting minors
Using your IDs, bank details, or e-wallet information

In these situations, preserve evidence quickly, secure your accounts, warn affected people, report the account to the platform, and file with the appropriate cybercrime authority.

Frequently Asked Questions

Is it illegal if someone uses my real name on Facebook in the Philippines?

It depends. If the person merely has the same name, it is not automatically illegal. But if the account is pretending to be you, using your photo, contacting your friends, scamming people, harassing you, or posting harmful false statements, it may involve identity theft, cyberlibel, data privacy violations, or civil liability.

What law covers fake accounts using my name and photo?

The most relevant law is usually RA 10175, the Cybercrime Prevention Act, especially computer-related identity theft. If the fake account also posts defamatory content, cyberlibel may also be considered. If it exposes or misuses your personal information, the Data Privacy Act may be relevant.

Should I report the fake account to Facebook first or go to NBI?

Do both when the situation is serious, but preserve evidence first. If the account is merely impersonating you, platform reporting may remove it quickly. If it involves fraud, threats, cyberlibel, sexual harassment, or repeated identity misuse, prepare evidence and report to the NBI Cybercrime Division or PNP Anti-Cybercrime Group.

Can I file a complaint if I do not know who created the fake account?

Yes. Many cybercrime complaints start with an unknown offender. Investigators may use available technical, platform, payment, device, and witness evidence. However, anonymous accounts are harder to trace, especially if the offender used fake details, public Wi-Fi, VPNs, foreign platforms, or mule accounts.

Can I sue someone for using my name online?

Possibly. Depending on the facts, remedies may include a criminal complaint, civil action for damages, privacy complaint, or other legal action. A civil case may be considered if the misuse caused reputational harm, emotional distress, business loss, harassment, or invasion of privacy.

What if the fake account used my name but not my photo?

It can still be actionable if the account clearly identifies you or causes people to believe it is you. Evidence may include the username, posts, contacts messaged, references to your workplace or school, private details, or the way the account interacted with people who know you.

What if someone uses my name to scam people?

Preserve all messages, payment details, receipts, account numbers, and victim statements. This may involve identity theft, fraud, estafa, or cybercrime. Warn affected contacts using a factual notice, report the account to the platform, and file with NBI-CCD or PNP-ACG.

Can I ask Google or social media platforms to remove the fake account?

Yes, but removal depends on the platform’s rules and the evidence you submit. Use official impersonation, privacy, or harassment reporting channels. For search results, removal from Google search is separate from removal from the original website or platform.

What if the impersonator is my ex-partner?

If the conduct involves threats, humiliation, stalking, sexual images, coercion, or emotional abuse, laws such as RA 9262, RA 11313, RA 10175, and civil remedies may be relevant. Preserve evidence showing the relationship, pattern of conduct, threats, posts, messages, and harm caused.

How long does it take to resolve an online impersonation complaint?

Platform takedown can sometimes happen within days, but it may also take longer or fail if the report lacks proof. Law enforcement intake may be relatively quick, but investigation, identification of the offender, subpoenas, prosecutor review, and court proceedings can take months or longer. Cases involving foreign platforms, deleted accounts, fake identities, or cross-border evidence often take more time.

Key Takeaways

Someone using your real name online is not automatically illegal, but it becomes serious when there is impersonation, fraud, harassment, defamation, or misuse of personal information.
Preserve evidence before reporting the account, especially the URL, username, screenshots, screen recordings, messages, and transaction details.
RA 10175 may apply to computer-related identity theft and cyberlibel.
RA 10173 may apply when your personal information is collected, posted, shared, or misused without proper basis.
Civil Code remedies may be available for damage to dignity, privacy, reputation, peace of mind, or business interests.
Report fake accounts through the platform’s official impersonation process, but use NBI-CCD or PNP-ACG for serious cybercrime situations.
Do not hack, threaten, or publicly accuse someone without proof.
Act quickly because online evidence can disappear and legal time limits may apply.