Quick answer

If someone is using your name, photos, identification details, or accounts to scam people online, act immediately:

Preserve the fake profile, messages, payment instructions, URLs, account numbers, and reports from victims.
Secure your email, social-media, mobile, and financial accounts.
Report the impersonation to the platform and request preservation and removal of the account.
Warn your contacts using a verified channel, without publicly accusing an unverified person.
Report any unauthorized transaction to the bank, e-wallet, or other financial institution through its official fraud channel.
File a complaint with the Philippine National Police Anti-Cybercrime Group or the National Bureau of Investigation Cybercrime Division.
If an organization improperly disclosed, used, or refuses to correct your personal data, consider a complaint with the National Privacy Commission.

Unauthorized online use of another person’s identifying information for an illegitimate purpose may constitute computer-related identity theft under the Cybercrime Prevention Act. Depending on what the scammer did, other offenses—such as estafa, computer-related forgery or fraud, falsification, unauthorized account access, or violations of data-privacy and financial-account laws—may also apply. The proper charge depends on the actual messages, documents, transactions, intent, and resulting harm.

First, confirm what is being misused

“Someone is using my name” can describe several different situations:

A fake social-media or messaging account displays your name and photograph.
A scammer contacts your relatives, customers, or coworkers while pretending to be you.
Your real account has been taken over.
Your name or identification document is being used to open a bank, e-wallet, loan, SIM, seller, or investment account.
A scammer falsely claims to represent you or your business.
A legitimate account merely has the same or a similar name.

A shared name, parody, fan account, mistaken tag, or truthful reference to you is not automatically identity theft. The surrounding facts matter. In Disini v. Secretary of Justice, the Supreme Court explained that computer-related identity theft concerns the acquisition or use of another person’s identifying information without right and for an illegitimate purpose; information that a user has made public is not, by that fact alone, “stolen.” The fraudulent or otherwise illegitimate use is critical.

If you are unsure whether the account is impersonating you, record what it says, whom it contacted, what it requested, and which of your personal details it used.

Preserve evidence before seeking removal

Report the account promptly, but capture the evidence first if doing so is safe. A platform may remove the content before investigators can examine it.

Preserve:

Full screenshots showing the profile name, username, profile URL, date, time, and surrounding context
The direct URL of each account, post, listing, group, or message
Screen recordings showing how the account is reached
Complete conversations rather than selected excerpts
Email headers and original emails, where available
Phone numbers, email addresses, usernames, and SIM details displayed by the scammer
Bank, e-wallet, cryptocurrency, QR-code, or payment details
Transaction reference numbers, receipts, amounts, dates, and times
Fake contracts, IDs, invoices, permits, certificates, or authorization letters
The names and contact details of people who received the scam messages
Messages in which victims explain what they were told and what they paid
Your communications with platforms, banks, telcos, and government offices
Ticket numbers, acknowledgment emails, affidavits, and police or investigative reports
Proof that the genuine account, business, number, or document belongs to you

Keep original files. Do not crop, annotate, rename, compress, or repeatedly forward the only copy. Save backups in at least two secure locations. A written incident timeline is also useful: when you learned of the scam, what appeared online, whom you contacted, and what happened next.

Do not hack the fake account, install tracking software, trick the suspect into opening a malicious file, or impersonate law enforcement. Those actions may be unlawful, dangerous, or harmful to the investigation.

Secure your accounts and identity

If there is any possibility that an account was compromised:

Change the password of the affected account and the linked email account.
Use unique passwords and enable multi-factor authentication.
Sign out unknown devices and terminate active sessions.
Review recovery email addresses, phone numbers, forwarding rules, connected apps, and delegated access.
Save the relevant login history before removing unfamiliar sessions.
Check whether posts, advertisements, marketplace listings, or messages were sent from your real account.
Contact your mobile provider immediately if your SIM suddenly loses service or you suspect a SIM swap.
Inform your bank or e-wallet if identification or financial information may have been exposed.
Review account statements, loan notices, and verification messages for unfamiliar activity.

Use contact details obtained from an institution’s official website, app, card, or statement—not a number or link supplied in the suspicious message.

If an unfamiliar financial, lending, or telecommunications account appears in your name, dispute it in writing. Request copies of the application, identity-verification records, contact details, transaction history, and the institution’s decision, subject to lawful disclosure rules. Ask the institution to flag the account as disputed and prevent further use while it investigates.

Report the fake account to the platform

Use the platform’s impersonation, fraud, account-takeover, or privacy-reporting process. Provide:

The fake account’s exact URL and username
Links to scam posts or messages
A short explanation of how the account is pretending to be you
Proof of your genuine account or identity, if reasonably required
A request to preserve relevant account, login, subscriber, and message records for law-enforcement process
A request to disable the account and prevent confusing duplicates where the platform offers that option

Submit only the identification information genuinely required through the platform’s official reporting page. Redact unrelated information where permitted. Never send an unredacted ID to the suspected scammer or post it publicly.

Record the report number and the date of submission. If the first report is rejected, appeal through the platform’s official channel and identify the specific deceptive conduct—not merely that the account uses the same name.

Removal helps stop further harm, but it does not replace a report to law enforcement.

Warn people without creating another legal problem

A brief warning can prevent more losses. Publish it through an account or channel your contacts already recognize. For example:

An unauthorized account using my name and photos is asking for money. I did not create or authorize it. Please do not transact with that account. Verify any request directly with me through my usual contact details.

Include the fake account’s username or link if necessary for identification, but avoid republishing victims’ private information or the scammer’s payment details more widely than needed.

Do not publicly name a suspected operator unless the identity is reliably established and disclosure is legally justified. A phone number, payment account, photograph, or ID sent by the scammer may itself belong to another victim or a money mule. State verified facts and direct evidence to investigators.

Report financial transactions immediately

If money was transferred, the sender should contact the originating bank, e-wallet, card issuer, or payment service through its official 24/7 fraud-reporting channel. The person whose name was impersonated should also notify any institution at which an account was fraudulently opened or used in their name.

Provide the transaction reference, amount, date and time, originating and receiving account details, and the reason the transaction is disputed. Ask for:

Blocking or securing of a compromised source account
Tracing and, where legally available, temporary holding of disputed funds
Preservation of transaction and account-opening records
A written acknowledgment and complaint reference number
The documents required for continued investigation

Under the Anti-Financial Account Scamming Act and the BSP’s 2025 implementing regulations, BSP-supervised institutions may trace and temporarily hold disputed funds while conducting coordinated verification. The regulations provide for an initial hold of up to five calendar days and, when properly extended, an overall hold of up to 30 calendar days unless a competent court authorizes a further extension. A hold is not a guarantee that the money will be recovered or returned.

Supporting documents—such as a sworn complaint, affidavit, police report, or other records—may be required during the initial holding period. Delay can allow the funds to be transferred or withdrawn, so report first and complete the requested documents promptly.

If the institution does not resolve the complaint, follow the Bangko Sentral ng Pilipinas Consumer Assistance Mechanism. BSP guidance requires consumers to complain first through the institution’s Financial Consumer Protection Assistance Mechanism before escalating the matter to BSP.

File a cybercrime complaint

You may seek assistance from either of these agencies:

The NBI online complaint facility or the NBI Cybercrime Division. The NBI lists ccd@nbi.gov.ph as the division’s email address and publishes its offices and contact information on the NBI website.
The Philippine National Police Anti-Cybercrime Group or the appropriate PNP cybercrime unit.

Use official government websites to verify the current office, email address, and filing channel before submitting sensitive documents.

Bring or prepare:

A valid ID
A chronological statement of facts
Printed and electronic copies of the evidence
URLs, usernames, numbers, and payment details
A list of witnesses and affected victims
Proof that the genuine identity or account is yours
Reports sent to the platform, bank, e-wallet, telco, or other institution
Information about threats, continuing solicitations, or imminent withdrawals

The NBI’s published procedure states that complainants and witnesses may be asked to execute sworn statements or submit prepared affidavits, provide supporting documents, and allow examination of relevant devices.

A barangay or police blotter can document that you reported the incident, but it is not necessarily the same as a complete criminal complaint supported by an affidavit and evidence. Ask the receiving office what further filing or referral is needed.

People who actually sent money should normally make their own reports and preserve their own conversations and transaction records. They may be the direct victims of estafa, while you may separately be affected by the unauthorized use of your identity and resulting reputational or financial harm.

What Philippine laws may apply?

Computer-related identity theft

Section 4(b)(3) of Republic Act No. 10175, the Cybercrime Prevention Act of 2012, covers the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion—without right—of identifying information belonging to another natural or juridical person.

A name can be identifying information, especially when combined with photographs, contact details, residence, birth information, employment, documents, or account details. However, an investigator or prosecutor must assess the unauthorized conduct, illegitimate purpose, intent, and evidence in the particular case.

The Supreme Court upheld this offense in Disini v. Secretary of Justice, while clarifying that legitimate acquisition or dissemination of information made public by the user is not the essence of identity theft.

Estafa and related fraud

If the impersonation deceived another person into parting with money or property, estafa by false pretenses under Article 315(2)(a) of the Revised Penal Code may be considered. Generally, the prosecution must establish a false representation made before or at the time of the fraud, reliance on it, and resulting damage. Merely using a name, without deceit that caused someone to part with property, does not by itself establish estafa.

If an offense under the Revised Penal Code or another special law was committed through information and communications technology, Section 6 of RA 10175 may affect the applicable penalty. The prosecutor should determine the correct charging theory; victims should report facts rather than attempt to select every possible offense.

Computer-related forgery or fraud

Fake electronic contracts, receipts, IDs, authorizations, or account records may raise computer-related forgery issues under Section 4(b)(1) of RA 10175. Unauthorized manipulation of computer data or systems that causes damage with fraudulent intent may fall under computer-related fraud under Section 4(b)(2). Ordinary falsification provisions may also be relevant, depending on the document and how it was made or used.

Unauthorized account access

If the scammer entered your real email, social-media, financial, or other computer account without authority, illegal access under Section 4(a)(1) of RA 10175 may apply. Do not delete login alerts or security records that could help establish when and how access occurred.

Data-privacy violations

The Data Privacy Act of 2012 may apply when personal information is unlawfully processed, accessed, disclosed, or retained by a person or organization covered by the Act. Data subjects may have rights to information, access, correction, blocking or removal in appropriate circumstances, damages, and a complaint before the National Privacy Commission.

Not every act of impersonation is automatically an NPC case. The NPC regulates personal-data processing; law-enforcement agencies investigate crimes. The two processes may overlap, but one does not necessarily replace the other.

Financial-account scamming

Republic Act No. 12010, the Anti-Financial Account Scamming Act, addresses prohibited conduct involving financial accounts, including money-mule activity and social-engineering schemes. It also supports coordinated verification and temporary holding of disputed funds. Its application depends on how the account and transaction were used—not simply on the display of your name.

When to complain to the National Privacy Commission

Consider an NPC complaint when an organization or other covered personal-information controller:

Disclosed or used your personal data without a lawful basis
Failed to secure personal data under its control
Refuses to correct inaccurate account or identity records
Continues processing information tied to a fraudulent account after receiving adequate proof
Fails to act appropriately after being notified of a privacy violation or breach

Under the NPC’s current rules, a complainant ordinarily must first inform the personal-information controller, processor, or concerned entity in writing and allow it an opportunity to act. A complaint may generally proceed if it fails to take timely or appropriate action or gives no response within 15 calendar days after receiving the written notice. Exceptions may apply, so check the current rules where urgent harm or other special circumstances exist.

The NPC’s formal complaint instructions require the prescribed or proper complaint format, notarization, and supporting evidence. The NPC currently lists personal, courier, and authorized electronic submission methods. Verify the latest form, fees, address, and email on the NPC website before filing.

Do not confuse this 15-day administrative step with a general deadline for reporting a crime. You may contact law enforcement and financial institutions immediately.

Request correction from organizations using the false information

If the impersonation resulted in a fake loan, seller profile, customer record, account, or adverse internal listing, send a dated written dispute to the organization’s data-protection officer, fraud team, or complaints office.

Your request should:

Identify the disputed account or record precisely.
State that you did not create, authorize, or benefit from it.
Attach enough proof to verify your identity without oversharing.
Request restriction or blocking while the matter is investigated.
Request correction or erasure where legally appropriate.
Ask that collection activity and adverse reporting tied to the disputed account be suspended or corrected.
Request preservation of applications, device information, verification records, communications, and transaction logs.
Ask for a written decision and copies of records you are legally entitled to access.

Keep proof of delivery. Do not sign an acknowledgment of debt merely to obtain documents. If a collector contacts you, dispute the obligation in writing and preserve every message, call log, demand letter, and envelope.

Why speed matters

There is no single filing deadline covering every possible offense or remedy. Prescription periods and procedural requirements vary according to the offense, forum, date of discovery, and facts. Do not assume that an old post can safely be ignored or that every claim has the same deadline.

Early reporting is especially important because:

Fake accounts can contact more victims.
Stolen funds can move through several accounts quickly.
Platforms may delete or overwrite logs.
Witnesses may lose messages or change devices.
Section 13 of RA 10175 requires service providers to preserve traffic data and subscriber information for a minimum of six months from the transaction; content data is preserved for six months from a law-enforcement preservation order, with a possible one-time extension under the statute.

Those rules do not guarantee that every platform holds every record for six months or that a private person can demand disclosure directly. Disclosure, interception, search, or examination of protected computer data ordinarily requires the appropriate law-enforcement process and, where required, a court-issued cybercrime warrant. Report promptly so investigators can consider preservation measures.

Common mistakes to avoid

Waiting for the scammer to admit what happened
Reporting the account before saving its URL and contents
Posting unredacted IDs, account numbers, or victims’ details as a warning
Negotiating with or paying the scammer to remove the account
Clicking “recovery” links sent by strangers
Trusting someone who promises guaranteed fund recovery for an upfront fee
Deleting your compromised account or resetting a device before preserving evidence
Using only cropped screenshots that omit usernames, dates, or context
Filing only a platform report when money, threats, account takeover, or forged documents are involved
Treating a blotter entry as the end of the legal process
Assuming the holder of the receiving account personally created the scam
Publicly accusing a person based only on a displayed name, photograph, phone number, or bank account
Sending different or exaggerated versions of events to different offices
Failing to keep ticket numbers and proof of submission
Expecting account removal or a temporary fund hold to guarantee reimbursement

When legal help is urgent

Consult a Philippine lawyer promptly if:

You have been arrested, subpoenaed, summoned, or formally accused because of the scam.
A bank, lender, collector, customer, employer, or government office treats the fraudulent activity as yours.
Significant money was taken or moved through an account in your name.
Forged IDs, contracts, corporate documents, deeds, checks, or notarized papers are involved.
The scammer threatens violence, extortion, sexual exploitation, or disclosure of sensitive information.
A child’s identity or images are being used.
You need emergency court relief, preservation of evidence, or coordinated action across several jurisdictions.
A platform or institution refuses to preserve, restrict, or correct records despite documented continuing harm.
The suspected offender is abroad or the evidence is held by a foreign platform.
You are considering a public statement naming a suspected offender.
A filing deadline may be approaching.

If you cannot afford private counsel, inquire with the Public Attorney’s Office about eligibility and available assistance. Victims may also ask the investigating agency or prosecutor’s office what affidavit and supporting documents are required.

Frequently asked questions

Am I liable to people who paid the scammer?

Not merely because the scammer used your name. Liability depends on your own conduct, participation, representations, benefit, negligence where legally relevant, and the available evidence. If you did not authorize or participate in the scheme, document that fact and cooperate with investigators. Seek counsel immediately if a victim, bank, or prosecutor alleges that you were involved.

Should I reimburse the victims?

Do not admit liability or promise repayment without understanding the facts and obtaining legal advice. Helping victims preserve evidence and report the receiving accounts can be appropriate, but reimbursement is a separate legal issue.

Can I ask the platform for the scammer’s IP address or identity?

You may request preservation, but platforms generally will not disclose protected subscriber or traffic data directly to a private complainant. Investigators may seek disclosure through the procedures in RA 10175 and the Supreme Court’s Rule on Cybercrime Warrants.

Is a fake profile automatically a crime?

No. Similar names, satire, commentary, or non-deceptive accounts are not automatically criminal. A fake profile used without right to impersonate you, obtain money, misuse identifying data, forge records, or access accounts presents a much stronger basis for criminal and administrative action.

What if the scammer only used my public photograph?

Public availability does not automatically authorize fraudulent impersonation. At the same time, merely viewing or sharing public information is not automatically identity theft. Preserve evidence showing the illegitimate use—such as solicitations, false claims of identity, forged documents, or payment requests.

Can I file a complaint even if nobody lost money?

Potentially, yes. Section 4(b)(3) of RA 10175 expressly contemplates computer-related identity theft even where damage has not yet occurred, although the absence of damage affects the statutory penalty. Investigators must still establish the required unauthorized and intentional conduct.

Can I report for relatives or customers who were scammed?

You can report the misuse of your identity and provide information about the broader scheme. Each person who lost money should also preserve their own evidence and ordinarily submit their own account of what happened. A representative may need written authority, depending on the institution or proceeding.

Will reporting guarantee that the fake account is removed or the money returned?

No. Removal depends on the platform’s review, and recovery depends on whether funds remain traceable and available, the institutions’ verification, and the legal evidence. Immediate, complete reporting improves the chance of limiting further harm but cannot guarantee an outcome.

Should I get an NBI clearance to prove I am innocent?

An NBI clearance is not conclusive proof that you did not participate in a particular scam. The more useful records are your incident report, affidavits, platform and financial-institution tickets, account-security records, and evidence showing that the identity or account was used without your authority.

Official references

This article provides general Philippine legal information, not legal advice for a specific case. The proper remedy and possible offenses depend on the evidence, documents, transactions, and procedural posture. Official sources and procedures were checked as of July 27, 2026.