Finding out that someone used your name as a fake reference can be upsetting, especially if an employer, lender, landlord, agency, school, or immigration-related office suddenly contacts you about a person you never agreed to recommend. In the Philippines, this can be a simple boundary violation, a data privacy issue, a civil wrong, or even a criminal matter if the person impersonated you, forged your signature, used your contact details online, or caused damage to your reputation. The right response depends on exactly what was used, how it was used, and what harm it caused.

What Counts as a Fake Reference?

A “fake reference” usually means someone used your identity to make their application, transaction, or story look more credible. Common examples include:

Listing your name, mobile number, email, company, job title, or address without permission
Claiming you are a former supervisor, employer, professor, landlord, client, creditor, business partner, or family friend
Creating a fake email account or social media account that looks like it belongs to you
Sending a recommendation letter using your name or signature
Giving your phone number to a company so you will be contacted as a “character reference”
Pretending that you vouched for a loan, rental application, job application, visa-related statement, school admission, or business transaction
Making false statements that appear to come from you

Not every unauthorized use of your name automatically becomes a crime. For example, a person who merely wrote your name as a reference without your consent may first be dealt with through a correction request, privacy complaint, or civil demand. But if the person pretended to be you, created fake documents, used your personal data repeatedly, or caused reputational or financial harm, stronger legal remedies may apply.

Why This Is Legally Serious in the Philippines

Your name is not just a label. It is part of your identity and personal information. When another person uses it to influence someone else’s decision, the issue may involve privacy, reputation, fraud, falsification, or cybercrime.

Civil Code: Your Dignity, Privacy, and Peace of Mind Are Protected

The Civil Code of the Philippines gives you a civil remedy when someone’s actions violate your dignity, privacy, or peace of mind.

Article 19 requires every person to act with justice, give everyone their due, and observe honesty and good faith. Article 20 makes a person liable for damages when they wilfully or negligently cause damage contrary to law. Article 21 covers wilful acts that cause loss or injury in a manner contrary to morals, good customs, or public policy. Article 26 specifically protects a person’s dignity, personality, privacy, and peace of mind, and allows damages, prevention, and other relief for similar wrongful acts. (Lawphil)

This matters because someone who falsely uses your name as a reference may be causing you embarrassment, reputational harm, anxiety, or professional damage, even if the act does not neatly fit a criminal offense.

If the false reference involved defamation, fraud, or similar wrongdoing, Article 33 of the Civil Code may also allow a separate civil action for damages, independent of any criminal case. Moral damages may be available for mental anguish, serious anxiety, besmirched reputation, social humiliation, and similar injury when these are the proximate result of the wrongful act. (Lawphil)

Data Privacy Act: Your Name and Contact Details Are Personal Information

Under Republic Act No. 10173, or the Data Privacy Act of 2012, personal information includes information from which your identity is apparent or can reasonably be ascertained. The law’s implementing rules define personal information broadly, and “processing” includes collection, recording, storage, use, disclosure, blocking, erasure, or destruction of personal data.

In practical terms, your name, mobile number, email address, job title, work history, home address, and relationship to another person can be personal data. If someone gives these details to an employer, lender, online platform, school, or agency as a reference, that may involve personal data processing.

The Data Privacy Act does not mean nobody can ever mention your name. But organizations handling your personal data must generally observe the principles of transparency, legitimate purpose, and proportionality. A data subject also has rights such as access, correction, objection, erasure or blocking, and damages for unauthorized use of personal data.

Cybercrime Law: Online Impersonation Can Be Identity Theft

Republic Act No. 10175, or the Cybercrime Prevention Act of 2012, becomes relevant when the fake reference involves a computer system, email, social media, messaging apps, online forms, job platforms, or digital documents.

The Supreme Court, in Disini v. Secretary of Justice, explained that identifying information includes a person’s name, citizenship, residence address, contact number, place and date of birth, spouse’s name, occupation, and similar data. The Court noted that the law punishes those who acquire or use such identifying information without right, implicitly to cause damage. (Supreme Court E-Library)

The DOJ’s implementing rules for the Cybercrime Prevention Act also provide that the NBI and PNP are responsible for cybercrime enforcement, with the DOJ Office of Cybercrime coordinating their efforts. Philippine jurisdiction may exist if any element of the cybercrime was committed in the Philippines, if a computer system in the Philippines was used, or if damage was caused to a person who was in the Philippines when the offense was committed. (Supreme Court E-Library)

This is especially important if:

Someone created a fake Gmail, Yahoo, Outlook, Facebook, LinkedIn, WhatsApp, Viber, Telegram, or job-platform account using your name
Someone used your photo, email signature, job title, or company name
Someone answered reference checks pretending to be you
Someone uploaded a fake recommendation letter or digital document using your identity
Someone used your personal details to support fraud, recruitment scams, lending scams, or immigration-related misrepresentation

Revised Penal Code: Falsification, Libel, and Use of a False Name May Apply

If the fake reference involved documents, signatures, or false written statements, the Revised Penal Code may become relevant.

Possible offenses include:

Situation	Possible legal issue
Fake recommendation letter using your signature	Falsification of private, commercial, public, or official documents, depending on the document
Fake certificate of employment, reference letter, or company document	Falsification or use of falsified documents
Fake email or online post claiming you said something damaging	Cyber libel, libel, or civil defamation, depending on the facts
Use of another name or false identity to cause damage	Possible use of fictitious name or related offense, depending on proof and circumstances
False statements to obtain employment, credit, rental approval, or money	Possible fraud-related liability, depending on the transaction

Article 178 of the Revised Penal Code, as amended by Republic Act No. 10951, penalizes public use of a fictitious name for purposes such as concealing a crime, evading execution of judgment, or causing damage. (Lawphil)

Cyber libel may apply only when there is a defamatory imputation made through a computer system or similar means. The DOJ’s cybercrime rules state that cyber libel applies to the original author of the post or online libel, not to persons who merely receive or react to it. (Supreme Court E-Library)

First Thing to Do: Confirm What Actually Happened

Before accusing anyone, identify the exact misuse. Many cases become weak because the victim reacts emotionally but does not secure evidence.

Ask yourself:

Who contacted you?
What application, transaction, or account was involved?
What exact information about you was used?
Did the person only list your name, or did they also use your phone, email, address, job title, signature, photo, or company name?
Did anyone pretend to be you?
Was the reference used online, on paper, by phone, or in person?
Did the use cause actual harm, such as lost work, damaged reputation, harassment, denied application, investigation by an employer, or family conflict?

A person who wrote “Juan Dela Cruz, former supervisor” without permission is different from a person who created juandelacruz.reference@gmail.com and sent a fake recommendation letter. The second situation is much more serious.

Step-by-Step Guide: What to Do If Someone Used Your Name as a Fake Reference

1. Preserve Evidence Immediately

Do not rely on memory. Save proof before the post, message, form, or account disappears.

Keep copies of:

Screenshots showing the name, profile, email address, phone number, URL, date, and time
Emails with full headers, if possible
Text messages, Viber/WhatsApp/Telegram messages, DMs, and call logs
The company’s or agency’s message asking you to verify the reference
Any fake recommendation letter, form, résumé, loan application, rental application, school form, or online profile
Names and contact details of people who contacted you
Notes of what was said during phone calls, including date, time, caller, and summary
Any proof that you never gave consent, such as prior messages refusing to be a reference

For electronic evidence, preserve the original file or message where possible. Under the Rules on Electronic Evidence, an electronic document may be admissible if it complies with the rules on admissibility and authentication. (Lawphil)

Avoid secretly recording private calls. Republic Act No. 4200, the Anti-Wiretapping Law, prohibits unauthorized secret recording of private communications or spoken words. Written notes, screenshots, emails, and properly obtained records are safer. (Lawphil)

2. Send a Short Written Denial to the Company or Person Who Contacted You

If an employer, recruiter, lender, landlord, school, or agency contacts you, reply in writing. Keep it factual and calm.

A useful message is:

I am writing to clarify that I did not authorize the use of my name, contact details, job title, signature, or identity as a reference for this person. I have not agreed to provide a reference, recommendation, guarantee, or verification in relation to this application or transaction. Please do not treat any statement attributed to me as valid unless confirmed directly through this email or another verified channel. Please also preserve any documents, forms, emails, phone numbers, accounts, or messages where my name or personal information was used, as I may need them for a formal complaint.

This does three things:

It protects you from being treated as someone who vouched for the person.
It creates a written record.
It asks the recipient to preserve evidence.

If the recipient is a company, ask them to correct, block, or delete your personal data from the applicant’s record unless they have a lawful reason to retain it.

3. Ask for a Copy or Description of the Misuse

The company or agency may refuse to give you the entire application because it contains another person’s personal data. That is common under the Data Privacy Act.

But you can still ask for:

The exact name used
The phone number or email address listed
The relationship claimed
The date the reference was submitted
Whether a document or electronic message was submitted
Whether someone answered as you
A redacted copy showing only the portion where your personal data appears

Phrase the request narrowly. For example:

I understand you may need to protect the applicant’s personal data. I am requesting only the portion showing the use of my own name, contact details, signature, email address, job title, or statements attributed to me.

4. Notify the Person Who Used Your Name, But Do Not Threaten or Defame

If you know the person and the situation is not dangerous, send a written message telling them to stop.

Keep it simple:

I learned that you used my name and/or contact details as a reference without my consent. I do not authorize this. Please stop using my name, number, email, job title, signature, or identity in any application or transaction. Please also notify any person or organization you gave my details to that I did not agree to act as your reference.

Do not post accusations on Facebook, TikTok, LinkedIn, or group chats without careful wording. Publicly calling someone a “scammer,” “fraud,” or “criminal” can expose you to defamation or cyber libel issues if you cannot prove every material statement.

5. Report the Fake Account or Platform Misuse

If the fake reference happened through an online account, report it through the platform’s impersonation, privacy, fraud, or abuse channel. This is not a substitute for legal action, but it can stop the continuing harm.

Report to:

Facebook, Instagram, TikTok, LinkedIn, X, or other social media platforms
Gmail, Yahoo, Outlook, or the email provider
Job platforms such as LinkedIn, JobStreet, Indeed, OnlineJobs.ph, Upwork, or similar sites
Payment, lending, rental, or marketplace platforms if your name was used in a transaction
The company’s Data Protection Officer, HR department, compliance officer, or fraud team

When reporting, attach only the necessary evidence. Do not send excessive personal data.

6. Decide Which Legal Route Fits Your Situation

Different facts require different remedies.

Your situation	Best starting point	Why
Someone merely listed you as a reference without consent	Written denial to recipient and written stop notice to user	Often fastest and proportionate
Your phone/email keeps receiving reference checks	Written correction request and data privacy request	Stops continued processing of your personal data
A company refuses to remove or correct your personal data	National Privacy Commission complaint	Data privacy rights may be involved
Someone created a fake email/social media account as you	NBI Cybercrime Division or PNP Anti-Cybercrime Group	Possible computer-related identity theft
Someone forged your signature or recommendation letter	Police/NBI/prosecutor complaint	Possible falsification
The fake reference caused reputational harm	Civil demand, civil damages case, or defamation complaint depending on facts	Civil Code and defamation remedies may apply
The person lives in the same city/municipality and it is mainly a personal civil dispute	Barangay conciliation may be required before court action	Katarungang Pambarangay can be a precondition in covered disputes
You are abroad but the misuse happened in the Philippines or affected you in the Philippines	Written representative, notarized/apostilled documents, cybercrime/data privacy complaint if applicable	Overseas victims can still preserve rights through proper documents

Filing a Data Privacy Complaint with the National Privacy Commission

A complaint with the National Privacy Commission is appropriate when the issue is mainly about misuse, unauthorized disclosure, retention, refusal to correct, or refusal to delete your personal data.

Consider this route if:

Your name, number, email, address, employer, job title, or signature was used without consent
A company keeps contacting you after you already denied being a reference
A company refuses to tell you what personal data of yours it received
A platform refuses to remove a fake reference profile or false account using your personal details
Your personal data is being processed in a way that is false, outdated, excessive, or unauthorized

The NPC states that formal complaints must follow a specific format: download the form, print and fill it out, have it notarized, then submit it to the NPC in person, by courier, or by scanning and emailing it. (National Privacy Commission)

As published in NPC Circular No. 2023-01, the filing fee for complaints is ₱500, with additional fees for claims of damages and certain applications. Indigent litigants may be exempt if they meet the requirements and submit supporting documents.

Documents to Prepare for an NPC Complaint

Document	Purpose
Notarized complaint-affidavit or NPC complaint form	States the facts under oath
Valid government ID	Proves your identity
Screenshots, emails, forms, messages, or call logs	Shows how your personal data was used
Written request to the company/platform	Shows you tried to correct or stop the misuse
Company/platform response or refusal	Shows the issue remains unresolved
Witness affidavit, if any	Supports your version of events
Proof of harm, if claiming damages	Shows anxiety, reputation damage, lost opportunity, costs, or other injury

The NPC route is useful for correction, blocking, deletion, access, and accountability. It is not always the fastest route if a fake account is actively being used for fraud. In urgent online impersonation cases, report to the platform and consider cybercrime reporting at the same time.

Filing a Cybercrime Complaint with NBI or PNP

A cybercrime complaint is appropriate if the fake reference involved online impersonation, digital identity theft, fake accounts, fake emails, or electronic documents.

The NBI Cybercrime Division’s Citizen’s Charter states that the service is available to the general public, with no checklist requirement listed, no fees indicated, and an initial process involving filing a complaint sheet, preliminary interview, sworn statements, device examination where relevant, and forwarding for authority to investigate. The listed total processing time for the initial assistance is about 1 hour and 10 minutes, although the actual investigation can take much longer. (National Bureau of Investigation)

In practice, bring:

At least one valid government ID
Printed screenshots and soft copies
URLs, usernames, email addresses, phone numbers, profile links, and transaction reference numbers
The device where the messages or account can be viewed
A written timeline of events
A draft affidavit or notes for your sworn statement
Names of witnesses or companies that contacted you

What to Expect

Initial assessment. The receiving officer checks if the matter is cybercrime-related.
Complaint sheet and interview. You narrate what happened.
Sworn statement or affidavit. Your facts are reduced into a sworn statement.
Evidence review. Investigators may examine screenshots, devices, messages, URLs, emails, and account details.
Investigation or referral. The case may be investigated further or referred to the proper office.
Possible prosecutor action. If evidence supports a criminal complaint, the matter may proceed through preliminary investigation.

The criminal process is usually slower than a platform takedown or HR correction. But it is important when the fake reference is part of a bigger scam, repeated impersonation, forgery, or identity theft.

Barangay, Police Blotter, Prosecutor, or Court: Which One Should You Choose?

Many people go first to the barangay or police station because they want an immediate record. That can help, but it is not always the correct final remedy.

Office or forum	Use it when	Practical note
Barangay	The person is known to you, lives in the same locality, and the dispute is personal or civil	Covered disputes may require barangay conciliation before court action
Police blotter	You want an incident officially recorded, especially for harassment, threats, or repeated contact	A blotter is not the same as filing a full criminal case
NBI Cybercrime Division / PNP Anti-Cybercrime Group	Fake account, online impersonation, digital fraud, fake email, electronic document	Better for evidence preservation and cyber investigation
National Privacy Commission	Misuse of personal data, refusal to correct/delete, unauthorized processing	Useful against companies, organizations, or platforms handling your data
Prosecutor’s Office	You have evidence of a criminal offense such as falsification, fraud, libel, or cybercrime	Usually requires complaint-affidavit and supporting evidence
MTC/MeTC/MTCC/MCTC or RTC	You are claiming civil damages, injunction, or other court relief	Court depends on the type and amount of claim

Barangay conciliation is a precondition in many covered disputes under the Katarungang Pambarangay system, subject to exceptions. The Supreme Court has explained that prior barangay conciliation is generally required before filing covered complaints in court or government offices. (Lawphil)

For civil cases, court jurisdiction depends on the nature and amount of the claim. Republic Act No. 11576 expanded the jurisdiction of first-level courts and generally placed civil actions with demands not exceeding ₱2,000,000 within the jurisdiction of first-level courts, while claims beyond the threshold may fall within the Regional Trial Court, subject to the rules on the type of action. (Supreme Court E-Library)

Special Situations

Someone Used You as a Job Reference Without Permission

This is common in Philippine employment applications. The practical first step is to tell HR, in writing, that you did not authorize the reference.

Ask HR to:

Mark the reference as unauthorized
Stop contacting you about the applicant
Remove or restrict your personal data from the applicant’s file unless retention is legally required
Preserve the record showing how your details were submitted

If the applicant is a former coworker, be careful about what you say. You can truthfully state that you did not consent to be a reference without giving unnecessary negative comments about the person.

Someone Claimed You Were Their Employer or Supervisor

This can damage your professional reputation, especially if the person used your company name or job title. Send a written denial to the recipient and, if applicable, notify your company’s HR, legal, or compliance team.

If a fake certificate of employment, service record, recommendation letter, company email, or signature was used, preserve the document and consider a falsification or cybercrime complaint.

Someone Used Your Name for a Loan, Rental, or Guarantee

Being named as a “reference” is not the same as being a guarantor or co-maker. A guarantor or co-maker normally requires clear consent and documentation.

If a lender, landlord, or collection agent contacts you:

State that you did not consent to be a guarantor, co-maker, reference, or contact person.
Ask for the basis for processing your personal data.
Ask them to stop contacting you unless required by law.
If harassment continues, preserve call logs and messages.

Someone Used Your Name in an Immigration, Visa, or School Application

This can be sensitive because false references may affect government, immigration, school, or professional records.

Write a formal denial to the office that contacted you. Keep the tone factual. Do not speculate. Say only what you know:

You did not authorize your name or personal details to be used.
You did not issue the statement or recommendation.
You did not agree to verify the applicant’s character, employment, finances, residence, or relationship.
Any document bearing your signature should be treated as unverified unless authenticated directly with you.

You Are an OFW, Filipino Abroad, or Foreigner Outside the Philippines

If you are outside the Philippines, you can still prepare evidence and authorize a trusted person to act for you where appropriate.

Practical requirements may include:

A notarized affidavit executed abroad
A Special Power of Attorney if someone will file or follow up for you
Apostille or consular authentication, depending on where the document is executed and where it will be used
Certified translation if the document is not in English or Filipino
Clear copies of your passport or valid ID, with sensitive numbers redacted when not necessary

The DFA Apostille system allows document owners or authorized representatives to apply, and DFA materials note that foreign documents may need prior attestation by the issuing country’s embassy or consulate before certification. (DFA Appointment System)

For foreigners affected by a fake reference connected to the Philippines, Philippine remedies may still be relevant if the person, platform, company, transaction, computer system, or damage has a Philippine connection.

Common Mistakes to Avoid

Posting an Angry Public Accusation

It is understandable to feel angry, but public accusations can create a second legal problem. A safer approach is to send private written notices, preserve evidence, and report through proper channels.

Deleting Messages After Taking Screenshots

Do not delete the original message, thread, email, or account access. Screenshots help, but original digital evidence is stronger.

Assuming a Company Must Give You the Entire Application

The company may also have obligations to protect the applicant’s personal data. Ask only for the portion involving your personal data or a confirmation of what information about you was used.

Treating a Blotter as a Full Case

A barangay or police blotter is usually just an incident record. It does not automatically mean a criminal complaint has been filed with the prosecutor or that the offender will be charged.

Recording Calls Secretly

Secretly recording private communications can create Anti-Wiretapping Law issues. Written confirmations, emails, screenshots, call logs, and sworn statements are usually safer.

Waiting Too Long

Online evidence disappears quickly. Accounts are renamed, posts are deleted, phone numbers are changed, and employers close hiring records. Preserve evidence as soon as you learn of the misuse.

Documents Checklist

Purpose	Documents to prepare
Written correction to employer/company	ID, short denial letter, screenshots or copy of message asking you to verify
Platform report	Screenshot, URL, profile link, fake email address, proof of your real identity
NPC complaint	Notarized complaint form or affidavit, ID, evidence, prior written request, response/refusal
Cybercrime report	ID, screenshots, URLs, account names, email headers, device, timeline, witness details
Prosecutor complaint	Complaint-affidavit, witness affidavits, documentary evidence, proof of identity, proof of damage
Civil damages case	Demand letter, evidence, proof of harm, proof of expenses, witness statements
Overseas filing	Notarized/apostilled affidavit, SPA if represented, ID/passport, translations if needed

Frequently Asked Questions

Is it illegal to use my name as a reference without permission in the Philippines?

It can be unlawful depending on the facts. A one-time unauthorized listing may first be a privacy or civil issue. It becomes more serious if the person used your contact details, pretended to be you, forged your signature, submitted a fake document, used your identity online, or caused harm.

Can I demand that the company remove my name from the applicant’s file?

Yes. You can ask the company to correct, block, or delete your personal data if it was submitted without your consent or is false, excessive, or no longer necessary. The company may retain limited records if needed for legal, fraud, or compliance reasons, but it should not continue treating you as a valid reference.

Can I sue someone for using me as a fake character reference?

You may have a civil claim if you can prove wrongful conduct, damage, and a connection between the two. Possible bases include Articles 19, 20, 21, and 26 of the Civil Code. If the act caused reputational harm, serious anxiety, humiliation, or financial loss, damages may be considered.

Is this identity theft?

It may be computer-related identity theft if the person intentionally acquired, used, misused, transferred, possessed, altered, or deleted identifying information belonging to you without right, especially through a computer system and with harm, benefit, or assumption of identity involved. Merely writing your name as a reference is not always enough; impersonation and harmful use make the case stronger.

What if someone made a fake email account under my name?

Report the fake email to the provider, preserve the headers and messages, notify the recipient that the email is not yours, and consider reporting to NBI Cybercrime Division or PNP Anti-Cybercrime Group. A fake email used to answer reference checks may support a cybercrime complaint.

What if HR will not tell me who used my name?

Ask for a limited confirmation of the personal data used, not the full application. You can say you are requesting access only to your own personal data. If the company refuses without adequate explanation, you may consider a data privacy complaint.

Can I file a complaint even if I am abroad?

Yes, but practical filing may require a notarized and apostilled or consular-authenticated affidavit, a Special Power of Attorney for a representative, and proper copies of your evidence and ID. Cybercrime jurisdiction may exist if there is a sufficient Philippine connection.

Should I go to the barangay first?

For a simple dispute with someone in the same locality, barangay conciliation may help and may even be required before certain court actions. For fake accounts, online impersonation, cyber fraud, or urgent evidence preservation, NBI/PNP cybercrime reporting is usually more appropriate.

Can I post the person’s name online to warn others?

Be careful. You may share truthful, limited, non-defamatory information when necessary, but public accusations can trigger defamation or cyber libel issues. A safer approach is to notify affected companies, platforms, agencies, and authorities directly.

What is the fastest way to stop the fake reference?

Usually, the fastest practical step is a written denial to the recipient and a takedown or abuse report to the platform. For repeated misuse, combine this with a written cease notice, data privacy request, and, if online impersonation is involved, a cybercrime report.

Key Takeaways

Someone using your name as a fake reference can involve civil liability, data privacy violations, falsification, defamation, or cybercrime depending on the facts.
Preserve evidence immediately: screenshots, URLs, emails, headers, messages, call logs, forms, and witness details.
Send a calm written denial to the company, employer, lender, school, platform, or agency that contacted you.
Ask for correction, blocking, deletion, or restricted processing of your personal data when appropriate.
Use the NPC route for personal data misuse and NBI/PNP cybercrime routes for fake accounts, online impersonation, and digital identity theft.
A barangay or police blotter is useful for documentation, but it is not the same as a full criminal, civil, or data privacy case.
Avoid public accusations, secret recordings, and emotional posts that may create separate legal problems.
If you are abroad, prepare proper affidavits, authorization documents, and apostille or consular authentication when needed.