If a delivery app account was opened using your name, phone number, address, photo, ID, or other personal details without your consent, treat it as both a privacy problem and a possible identity misuse or cybercrime issue. The immediate goal is to stop the account from being used, preserve proof before it disappears, protect your payment accounts and reputation, and know which Philippine office can act depending on what actually happened.

Why this happens and why it matters

A fake or unauthorized delivery account may seem minor at first, especially if “only your name” was used. But in real life, these cases can quickly become serious when the account is used to:

place cash-on-delivery orders under your name;
harass someone by sending unwanted deliveries;
hide the real identity of a scammer;
link your name to unpaid balances, chargebacks, or complaints;
use your address or phone number for stalking or doxing;
upload your ID or selfie for account verification;
register as a rider, seller, merchant, or customer using your identity;
connect the account to an e-wallet, debit card, credit card, or online banking account.

Philippine law does not treat every mistaken or duplicate name as a crime. Many Filipinos have the same name. The legal issue becomes stronger when someone used identifying information belonging to you without authority, especially if it caused damage, exposed you to liability, invaded your privacy, or was done through an app, website, phone number, or electronic system.

Is using someone else’s name for a delivery account illegal in the Philippines?

It can be illegal, depending on the facts.

Using another person’s name, by itself, may not automatically prove a criminal offense. But using someone’s name together with a phone number, address, email, ID, photo, payment account, or delivery history can fall under several Philippine laws.

The most relevant law is usually the Cybercrime Prevention Act of 2012, Republic Act No. 10175. It punishes computer-related identity theft, which involves the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person without right. If the fake delivery account was created through an app or website using your identifying details, this law may apply. (Lawphil)

The Data Privacy Act of 2012, Republic Act No. 10173, is also important because your name, phone number, address, photo, ID number, and similar details are personal information. The law recognizes your rights as a data subject, including the rights to be informed, access your data, object, rectify inaccurate data, request erasure or blocking, file a complaint, and claim damages in proper cases. (National Privacy Commission)

If the account was connected to a credit card, debit card, e-wallet, account number, OTP, PIN, voucher wallet, or other account-access method used to obtain goods or services, the Access Devices Regulation Act of 1998, Republic Act No. 8484, as amended by Republic Act No. 11449, may also become relevant. RA 8484 defines an “access device” broadly to include account numbers, codes, telecommunications identifiers, and other means of account access that can be used to obtain money, goods, services, or anything of value. (Lawphil)

If the delivery-account misuse is part of a scam involving bank accounts, e-wallets, social engineering, or money mule activity, the Anti-Financial Account Scamming Act, Republic Act No. 12010 of 2024, may also be relevant. (Lawphil)

Possible legal bases under Philippine law

1. Computer-related identity theft under RA 10175

This is often the clearest starting point when the fake account was created online.

Examples:

Someone registers a delivery app account using your name and phone number.
Someone uploads your photo or ID to verify an account.
Someone uses your address to place orders and avoid being traced.
Someone creates an account under your name to scam sellers, riders, or customers.
Someone uses your personal details to make it appear that you ordered, received, or authorized a transaction.

The key facts are:

Was the information yours?
Was it identifying information?
Was it used without right or authority?
Was it done intentionally?
Was there damage, attempted damage, fraud, harassment, or concealment?

Even if no financial loss has happened yet, the unauthorized use can still matter because RA 10175 expressly covers unauthorized use or misuse of identifying information.

2. Data privacy rights under RA 10173

Delivery platforms, logistics apps, online marketplaces, and payment providers usually act as personal information controllers or personal information processors when they collect and use customer data. A personal information controller decides why and how personal data is processed, while a processor handles personal data for the controller.

Under the Data Privacy Act, you can demand that the platform:

confirm whether it is processing personal data about you;
tell you what data is linked to the account;
explain the purpose and source of the data, where possible;
correct inaccurate personal data;
block, remove, or delete unlawfully processed personal data;
preserve records relevant to an investigation;
stop using your name or details in an account you did not authorize.

The National Privacy Commission (NPC) recognizes data subject rights such as access, objection, rectification, erasure or blocking, filing a complaint, and damages. (National Privacy Commission)

A practical point: the platform may refuse to disclose another user’s full account details directly to you because that may also involve another person’s data or law-enforcement-sensitive information. But it can still investigate, suspend the account, correct records, preserve logs, and respond to your own data-subject request.

3. Civil liability for damages

The Civil Code may apply if the misuse of your name caused embarrassment, harassment, reputational harm, financial loss, or invasion of privacy.

Civil Code Articles 19, 20, and 21 require people to act with justice, honesty, good faith, and to compensate others for unlawful or wrongful acts. Article 26 specifically protects dignity, personality, privacy, and peace of mind, and allows actions for damages, prevention, and other relief for similar acts that invade privacy or humiliate a person. (Lawphil)

This can matter when the person who used your name is known to you, such as:

an ex-partner sending unwanted deliveries;
a neighbor using your name to avoid paying;
a relative using your address for COD orders;
a co-worker creating fake accounts as a prank;
a seller or rider falsely tagging your name in transactions.

4. Estafa, falsification, or use of fictitious name under the Revised Penal Code

Depending on the facts, traditional crimes under the Revised Penal Code may also be considered.

Possible examples:

Situation	Possible legal issue
Someone used your name to trick a seller, rider, or platform into releasing goods	Estafa or fraud-related offense
Someone uploaded a fake ID, altered document, or false verification document	Falsification
Someone publicly used a false name to conceal a crime, evade liability, or cause damage	Using fictitious name under Article 178
Someone made a sworn statement using your identity	Perjury or falsification, depending on the document
Someone used your name to harass another person	Civil damages, unjust vexation, cybercrime, or other offenses depending on facts

Article 178 of the Revised Penal Code punishes publicly using a fictitious name for purposes such as concealing a crime, evading judgment, or causing damage. (Lawphil)

What to do immediately

1. Do not delete messages, screenshots, or app notifications

Preserve everything. Screenshots are useful, but screenshots alone are sometimes challenged because they can be edited. Keep the original messages, emails, app notifications, SMS, tracking links, and order pages whenever possible.

Save:

account profile screenshot showing your name or details;
order ID, booking ID, transaction number, or tracking number;
date and exact time of the incident;
name of the delivery app or platform;
phone number, email, or username shown;
rider or courier messages;
merchant or seller messages;
payment method shown, even if partially masked;
delivery address used;
proof that you did not create or authorize the account;
any threats, harassment, or repeated deliveries;
your communication with the platform.

Under the E-Commerce Act, electronic data messages and electronic documents have legal recognition, and electronic records can have evidentiary value if properly authenticated. (Lawphil) The Supreme Court’s Rules on Electronic Evidence also recognize electronic documents as equivalent to originals in proper cases. (Lawphil)

2. Secure your phone number, email, and payment accounts

A delivery account is often only one visible part of a bigger identity misuse problem.

Do these checks:

Change passwords for your email, delivery apps, e-wallets, and online banking.
Turn on two-factor authentication where available.
Check your email inbox for OTPs, account-verification emails, and login alerts.
Check SMS history for OTPs you did not request.
Review e-wallet and card transactions for small test charges.
Call your bank or e-wallet provider if any card, account, or wallet was linked without your consent.
Ask the telco for help if your SIM stopped working, because SIM-swap fraud can be involved.
Do not give OTPs, MPINs, card CVV, or passwords to anyone claiming to “verify” the fake account.

If a SIM or phone number appears to have been registered or used fraudulently, the SIM Registration Act, Republic Act No. 11934, may also become relevant, especially where false identity or spoofing is involved. (Lawphil)

3. Report the account to the delivery platform in writing

Use in-app support, email support, and the platform’s Data Protection Officer or privacy contact if available. Written reporting is important because it creates a record.

Your message should clearly say:

you did not create or authorize the account;
your name, number, address, photo, or ID was used without consent;
you request immediate suspension or restriction of the account;
you request preservation of logs, transaction history, device information, and registration records;
you request correction, blocking, or deletion of your personal data from the unauthorized account;
you request confirmation of the action taken;
you are willing to verify your identity through a safe channel, but you will not disclose OTPs or passwords.

Avoid sending a full copy of your ID unless necessary. If the platform requires verification, ask whether you can submit a redacted ID showing only what is needed, such as your name and photo, while covering unrelated numbers. Some platforms require more complete verification, but the principle under the Data Privacy Act is that personal data processing should be legitimate, necessary, and proportionate.

4. Ask the platform to preserve evidence before deletion

Many people immediately demand deletion. That is understandable, but if fraud or harassment happened, deleting the account too early may destroy useful evidence.

A better sequence is:

suspend or freeze the unauthorized account;
preserve logs and transaction records;
investigate the registration source;
provide you a written result or incident reference number;
correct, block, or delete your personal data after evidence is preserved.

This matters because police, NBI, prosecutors, or the NPC may later need records such as login dates, device identifiers, registered phone numbers, transaction IDs, delivery locations, merchant records, and payment metadata. Platforms usually will not give all technical logs directly to a private complainant, but they may preserve and release them through lawful process.

How to file a data privacy complaint with the National Privacy Commission

The NPC is the main Philippine agency for complaints involving misuse, unauthorized processing, malicious disclosure, improper disposal, or violation of personal data rights.

Before filing with the NPC, it is usually best to first send a written complaint to the platform or company and give it a chance to act. NPC guidance states that a complainant should first give the individual or company an opportunity to address the concern; if the company does not act within 15 days or fails to take appropriate action, the complaint may be filed with the NPC, generally within 30 days from the last communication. (National Privacy Commission)

Practical NPC complaint steps

Write to the delivery platform or its Data Protection Officer. State the facts, attach proof, and ask for specific relief.
Wait for action or response. If the issue is urgent, such as ongoing harassment, repeated fraudulent orders, or risk of financial loss, say so clearly.
Prepare a complaint-affidavit or NPC complaint-assisted form. The NPC says formal complaints must be filed in a specific format. (National Privacy Commission)
Attach evidence. Include screenshots, emails, support tickets, order IDs, photos of parcels, bank or e-wallet alerts, and your written communications with the platform.
Have the complaint notarized if required. NPC mechanics state that a filled-out and notarized complaint-assisted form or verified complaint should be filed with evidence and witness affidavits. Filing may be done personally, by registered mail, courier, or authorized electronic mail. (National Privacy Commission)
Keep a copy of everything. Save your sent email, proof of delivery, ticket number, and all annexes.

When to report to PNP Anti-Cybercrime Group or NBI Cybercrime Division

Report to cybercrime authorities if there is fraud, repeated harassment, use of your ID, use of your payment account, threats, extortion, unauthorized account access, or financial damage.

You can approach:

PNP Anti-Cybercrime Group (PNP-ACG) for cybercrime investigation;
NBI Cybercrime Division (NBI-CCD) for investigative assistance;
your local police station for blotter documentation, especially if there are deliveries, threats, or people showing up at your address.

The NBI Citizens Charter for computer-crime victims states that complainants fill up a complaint form and submit it to the Cybercrime Division personnel; the listed processing time for that front-line assistance is short, but the actual investigation can take longer depending on records, platform cooperation, and subpoenas. (National Bureau of Investigation)

What to bring for a cybercrime report

Bring printed and digital copies of:

Requirement	Why it matters
Valid government ID	Confirms you are the person whose identity was used
Complaint-affidavit or written narration	Gives investigators a clear timeline
Screenshots and original files	Shows the unauthorized account or transaction
Order IDs, tracking numbers, booking IDs	Helps trace platform records
Phone numbers, usernames, email addresses	Helps identify accounts used
Proof of payment loss or attempted charge	Supports fraud or damage
Platform support tickets	Shows you tried to resolve and preserve evidence
Photos of parcels or delivery attempts	Useful for COD or harassment cases
Witness statements	Helpful if family, guards, riders, or merchants saw the incident

A cybercrime investigation may require requests to platforms, telcos, payment providers, or banks. This is why complete transaction details are much more useful than a general statement like “someone used my name.”

Should you file a barangay blotter?

A barangay blotter can be useful, but it is not a substitute for a cybercrime complaint.

File a barangay blotter if:

deliveries are going to your house;
the suspected person is a neighbor, relative, ex-partner, or someone in the same area;
barangay officials, guards, or building staff need notice that you did not order the items;
you need a dated record for the platform, police, landlord, school, or employer.

Barangay conciliation under the Katarungang Pambarangay system may be required for certain disputes between parties residing in the same city or municipality before filing in court or other government offices, subject to exceptions. (Lawphil) But many delivery-account identity cases involve unknown persons, online platforms, cybercrime, or parties outside the same locality, so barangay settlement may not be the correct first forum.

If the delivery platform refuses to help

Some support agents treat identity misuse as a normal account issue. Be persistent but precise.

Escalate your request by asking for:

the incident or ticket number;
the platform’s privacy office or Data Protection Officer;
written confirmation that the unauthorized account is suspended;
written confirmation that your personal data will not be used for collections or penalties;
preservation of transaction and registration logs;
correction or blocking of your personal data;
confirmation that your phone number, address, or ID will not be linked to the account.

If the problem involves a seller, merchant, refund, paid order, or online consumer transaction, the Department of Trade and Industry (DTI) may also be relevant. DTI’s e-commerce guidance states that complaints against online sellers may be sent to the DTI Fair-Trade Enforcement Bureau, and DTI’s Consumer CARe system provides an online dispute resolution channel for consumer complaints. (DTI ECommerce)

Special situations

Someone used my name for cash-on-delivery orders

Refuse delivery if you did not order the item. Tell the rider politely that your identity may have been used without authority. Take a photo of the parcel label if allowed, but avoid opening a package not meant for you unless the rider or platform instructs you.

Record:

rider name or rider ID, if visible;
tracking number;
merchant name;
platform;
delivery time;
amount due;
address and phone number printed on the label.

Then report to the platform and request that your address be blocked from unauthorized COD orders while the issue is investigated.

Someone used my phone number only

A phone number is personal information when it identifies or can reasonably identify you. Report it to the platform and ask for removal or verification. Also watch for OTP messages. If you receive repeated OTPs, someone may be attempting to create or access accounts using your number.

Someone used my address but not my full name

Your address can still be personal information if it identifies you or your household. If the deliveries are repeated, targeted, or threatening, preserve proof and consider a barangay blotter, building incident report, police report, or cybercrime complaint.

Someone uploaded my ID or selfie

This is more serious. Government-issued ID numbers can be sensitive personal information under the Data Privacy Act when issued by government agencies and peculiar to an individual. Ask the platform to freeze the account, preserve the uploaded file and verification logs, and confirm deletion or blocking after investigation. Also check whether the same ID may have been used for e-wallets, SIM registration, loans, or marketplace accounts.

I am an OFW or foreigner outside the Philippines

You can still report to the platform online and preserve evidence. If you need to submit a sworn affidavit in the Philippines while abroad, ask whether the receiving office accepts a document notarized abroad. For documents executed abroad, apostille or consular steps may be needed depending on the country and the office receiving the document. The DFA Apostille system is generally for Philippine public documents for use abroad; foreign documents usually must be handled through the issuing country’s competent authority or the relevant embassy/consulate process. (Apostille Authority)

For urgent cybercrime matters, a trusted representative in the Philippines can sometimes help submit documents, but agencies may still require your sworn statement, ID, and contact details.

Sample written report to the delivery platform

Use clear, factual wording:

I am reporting an unauthorized account or transaction using my personal information. I did not create, authorize, or control the account using my name/phone number/address. Please immediately suspend or restrict the account, preserve all registration logs, device information, delivery records, payment metadata, and communications connected to this account, and prevent further use of my personal data.

I am exercising my rights as a data subject under the Data Privacy Act of 2012. Please confirm what personal data of mine is being processed, correct or block inaccurate and unauthorized data, and confirm the action taken. Please provide an incident reference number and the contact details of your Data Protection Officer or privacy team.

Attach only the evidence needed. Do not send passwords, OTPs, card CVV, MPINs, or unnecessary ID numbers.

Documents and evidence checklist

Document or proof	Needed for platform	Needed for NPC	Needed for PNP/NBI
Valid ID	Usually	Yes	Yes
Screenshots of fake account or order	Yes	Yes	Yes
Order, booking, or tracking number	Yes	Yes	Yes
Email or SMS OTP alerts	Yes	Yes	Yes
Platform support ticket history	Yes	Yes	Helpful
Complaint-affidavit	Sometimes	Usually	Usually
Notarized complaint form	Rare	Often	Often
Proof of financial loss	If applicable	If applicable	Important
Bank/e-wallet report	If applicable	Helpful	Important
Barangay blotter or building report	Optional	Helpful	Helpful
Witness affidavit	Optional	Helpful	Helpful

Common mistakes to avoid

Deleting the account yourself before saving evidence. This may make investigation harder.
Posting the suspected person’s name online without proof. This can expose you to defamation or privacy issues.
Sending your full ID to random support accounts on social media. Use official support channels only.
Ignoring small OTP messages. They may be signs of account-creation attempts.
Paying for deliveries you did not order just to avoid embarrassment. This can encourage repeated abuse.
Assuming a barangay blotter is enough. For app-based identity misuse, cybercrime and data privacy channels may be more appropriate.
Making vague reports. Specific order IDs, dates, numbers, and screenshots get better results than general complaints.
Threatening support agents. Firm, documented escalation is more effective.

Frequently Asked Questions

Can someone legally use my name to make a delivery account?

Not without authority if the use involves your identifying personal information, causes damage, misleads others, or is used for fraud, harassment, or concealment. A mere duplicate name may happen, but an account using your name together with your phone number, address, ID, photo, or payment details is much more serious.

What law protects me if someone used my name in a delivery app?

The main laws are the Cybercrime Prevention Act for computer-related identity theft, the Data Privacy Act for unauthorized or improper processing of personal data, the Civil Code for damages and privacy invasion, and possibly the Revised Penal Code, Access Devices Regulation Act, SIM Registration Act, or Anti-Financial Account Scamming Act depending on the facts.

Should I report first to the app, police, NBI, or NPC?

Start with the platform immediately to freeze the account and preserve records. Report to PNP-ACG or NBI-CCD if there is fraud, harassment, use of ID, payment misuse, or repeated incidents. File with the NPC if the platform mishandles your personal data, refuses to correct or block it, or fails to act on a proper data privacy request.

Can I demand the name of the person who created the fake account?

You can ask the platform to investigate, but the platform may not disclose the suspected user’s identity directly to you because of privacy and investigation rules. Law enforcement, prosecutors, courts, or the NPC may be able to require relevant records through proper legal processes.

What if the fake account did not cause financial loss yet?

You can still report it. Under cybercrime and data privacy principles, unauthorized use of identifying information and improper processing of personal data can be actionable even before a major financial loss occurs. Early reporting helps prevent escalation.

Can I sue for damages?

Yes, if you can prove loss, injury, humiliation, privacy invasion, reputational harm, or other legally recognized damage. Civil Code provisions on human relations, privacy, and wrongful acts may support a civil claim, depending on evidence.

What if a relative or ex-partner used my name?

Preserve evidence and avoid relying only on verbal confrontation. If the person is known and lives in the same locality, barangay proceedings may be relevant for some civil disputes. But if the conduct involves cybercrime, threats, stalking, fraud, or identity misuse through an app, police, NBI, NPC, or prosecutor action may still be appropriate.

Can foreigners file complaints in the Philippines for this?

Yes, if the incident involves a Philippine platform, Philippine resident, Philippine transaction, or personal data processed in the Philippines. Foreigners should prepare clear identification, proof of the unauthorized account, and properly executed affidavits if filing through Philippine agencies.

Do screenshots count as evidence?

Screenshots can help, but they are stronger when supported by original emails, SMS, app notifications, transaction IDs, metadata, witness statements, and platform records. Keep originals whenever possible.

Can the delivery app make me pay for orders made under my name?

You should dispute the charges immediately if you did not create the account or authorize the order. Ask the platform to freeze collections, investigate account creation, and confirm in writing that the disputed transactions will not be charged to you while the matter is under review.

Key Takeaways

An unauthorized delivery account using your name can involve identity theft, data privacy violations, fraud, harassment, or civil damages.
Preserve evidence before asking for deletion.
Report the account to the platform in writing and ask for suspension, preservation of logs, correction, and blocking or deletion of unauthorized personal data.
Use the NPC for data privacy violations, PNP-ACG or NBI-CCD for cybercrime, DTI for consumer or online seller disputes, and barangay records when deliveries or known local persons are involved.
Do not share OTPs, passwords, MPINs, CVV codes, or unnecessary ID details with anyone.
The stronger your timeline, screenshots, order IDs, support tickets, and affidavits, the easier it is for a platform, investigator, prosecutor, or regulator to act.