Seeing your face used in a fake Facebook profile, Messenger account, dating app, investment page, job ad, lending post, or “emergency money” scam can be alarming and humiliating. In the Philippines, this is not just a “social media problem.” Depending on what the scammer did, it may involve cyber identity theft, computer-related fraud, estafa, data privacy violations, civil damages, and, in financial scams, violations of the Anti-Financial Account Scamming Act. The most important things to do are to preserve evidence before it disappears, report the account properly, warn people without making careless accusations, and file the right complaint with the right agency.

Is It Illegal to Use Someone’s Photo for an Online Scam in the Philippines?

Usually, yes — especially if the photo is used to pretend to be you, mislead other people, collect money, solicit personal information, or damage your reputation.

A photo is often treated as personal information because it can identify a person. If the scammer also uses your name, nickname, workplace, school, location, social media profile, voice, ID, or other details, the legal issue becomes stronger.

However, it is helpful to separate three situations:

Situation	Legal concern
Someone reposts your public photo without scamming anyone	May involve privacy, civil liability, copyright, or platform rules, depending on context
Someone uses your photo to create a fake account pretending to be you	Possible cyber identity theft, data privacy violation, civil damages
Someone uses your photo to deceive people into sending money, buying products, joining investments, or giving OTPs/passwords	Possible cyber identity theft, computer-related fraud, estafa, AFASA violations, and related offenses

The law looks at the purpose and effect of the use. A stolen photo used for a joke is different from a stolen photo used to convince people to send money to a GCash, Maya, bank, crypto, or remittance account.

Philippine Laws That May Apply

Cybercrime Prevention Act: RA 10175

The main law is the Cybercrime Prevention Act of 2012, Republic Act No. 10175.

The most relevant offenses are:

Computer-related identity theft under Section 4(b)(3) This covers the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person without right.
Computer-related fraud under Section 4(a)(5) This may apply when computer data or a computer system is used to commit fraud, such as fake online selling, investment scams, emergency cash scams, fake job recruitment, romance scams, or phishing.
Other crimes committed through ICT under Section 6 If an offense under the Revised Penal Code or special laws is committed by, through, and with the use of information and communications technology, RA 10175 may also apply, usually with a higher penalty.

In plain English: if someone uses your photo online to pretend to be you or to make a scam look trustworthy, RA 10175 is often the first law investigators will look at.

Revised Penal Code: Estafa Under Article 315

If the scammer used your photo to trick another person into sending money or property, the act may also be estafa, also called swindling, under Article 315 of the Revised Penal Code.

Estafa generally involves:

Deceit or fraud
Reliance by the victim on that deceit
Damage or prejudice, usually money lost

For example, if a fake account uses your picture and says, “Hi, I lost my wallet. Please send ₱5,000 to this GCash number,” and people send money because they believe the account is yours, the scam may involve estafa.

The person whose photo was used is not automatically the complainant for the lost money unless they also suffered damage. The people who sent money are direct victims of the scam. But you are still a victim of identity misuse and may be a witness or complainant for the misuse of your identity.

Data Privacy Act: RA 10173

The Data Privacy Act of 2012, Republic Act No. 10173, protects personal information and gives data subjects rights over their personal data.

A recognizable photo, especially when combined with a name, username, school, employer, location, ID, phone number, or other details, can be personal information. If your image was collected, used, disclosed, or otherwise processed without a lawful basis, a complaint may be possible before the National Privacy Commission (NPC).

The NPC is especially relevant when:

Your photo was used by a company, lending app, online seller, employer, school, organization, or platform user handling personal data.
Your photo was taken from a database, ID submission, customer file, employment record, or private group.
Your personal information was maliciously disclosed, misused, or exposed.
A business refuses to remove or correct personal data after proper request.

The NPC’s own procedure allows a data subject or an authorized representative with a Special Power of Attorney to file a complaint using the NPC complaint process.

Civil Code: Privacy, Dignity, and Damages

Even if a criminal case is difficult, the Civil Code may give you remedies for damages, prevention, or other relief.

Important provisions include:

Article 19 — every person must act with justice, give everyone his due, and observe honesty and good faith.
Article 20 — a person who violates the law and causes damage must indemnify the injured party.
Article 21 — a person who willfully causes loss or injury contrary to morals, good customs, or public policy may be liable.
Article 26 — every person must respect the dignity, personality, privacy, and peace of mind of others.

The Civil Code of the Philippines is useful when the harm is reputational, emotional, personal, or financial, even if the conduct is not easily proven as a specific cybercrime.

The Supreme Court has recognized that the right to privacy under Article 26 should not be read narrowly. In Spouses Hing v. Choachuy, Sr., the Court explained that privacy may extend beyond the home when a person has a reasonable expectation of privacy.

Anti-Financial Account Scamming Act: RA 12010

If the scam involves bank accounts, e-wallets, QR codes, payment links, account rentals, money mules, or phishing for financial credentials, the Anti-Financial Account Scamming Act, Republic Act No. 12010, may also apply.

This law is important because many “photo misuse” scams are really financial-account scams. The fake profile is just the face of the operation. The actual money may move through:

GCash or Maya accounts
Bank accounts
QR PH codes
Remittance centers
Crypto wallets
Payment links
“Pasalo” or rented accounts
Mule accounts opened under false names or another person’s identity

RA 12010 also allows financial institutions to temporarily hold funds subject to disputed transactions under the conditions set by law and BSP rules. This is why speed matters. If money was sent, the victim should report to the bank or e-wallet immediately, not days later.

SIM Registration Act: RA 11934

If the fake account uses a mobile number, text message, OTP phishing link, or messaging app tied to a SIM, the SIM Registration Act, Republic Act No. 11934, may be relevant.

Do not assume that a registered SIM automatically reveals the scammer. Many scams use stolen phones, mule SIMs, fraudulently registered SIMs, or messaging apps. Still, the number is useful evidence for PNP, NBI, telcos, and prosecutors.

Anti-Photo and Video Voyeurism Act and Safe Spaces Act

If the photo is intimate, sexual, edited to look sexual, or used for harassment, blackmail, or humiliation, other laws may apply:

RA 9995 is not for every ordinary profile photo. It generally concerns sexual acts, private areas, or intimate images taken or shared under circumstances covered by the law. But if the scammer uses your image in a sexualized fake profile, revenge-porn threat, escort scam, sextortion scheme, or deepfake-style harassment, this should be raised immediately when reporting.

What to Do Immediately

1. Do Not Delete the Evidence

Your first instinct may be to report the fake account until it disappears. That is understandable, but take evidence first.

Scammers delete posts, change usernames, block victims, and move to new accounts. Platforms may also remove pages quickly, which is good for safety but sometimes bad for evidence.

Before reporting the account, preserve:

Profile URL
Username and display name
Profile photo and cover photo
Screenshots of posts, stories, comments, reels, marketplace listings, ads, or messages
Date and time of each screenshot
Links to the scam post or profile
Phone numbers, email addresses, bank accounts, e-wallet numbers, QR codes, or payment instructions
Names of people who were contacted
Proof that the photo is yours or identifies you
Messages from people who warned you
Any platform report ticket or reference number

For mobile screenshots, include the phone’s date and time when possible. For stronger evidence, take a screen recording showing the fake profile, the URL, and the posts. If using a browser, copy the exact URL and save the page as PDF if possible.

2. Make a Simple Evidence Folder

Create one folder named something like:

Fake Account Using My Photo - Evidence - June 2026

Inside it, place:

01 Fake Profile Screenshots
02 Scam Messages
03 Payment Details
04 My Original Photo Proof
05 Witness Messages
06 Reports Filed

Use clear filenames:

2026-06-20 Facebook fake profile URL screenshot.png
2026-06-20 Messenger request for money from Maria Santos.png
2026-06-20 GCash number used by scammer.png

This sounds basic, but organized evidence helps investigators, prosecutors, banks, and platforms understand the case faster.

3. Warn People Carefully

It is usually helpful to post a short notice on your real account:

“Someone is using my photo/name in a fake account. Please do not transact, send money, or share OTPs with any account pretending to be me. I have not authorized any solicitation or transaction. I am preserving evidence and reporting the account.”

Avoid naming a suspected person unless you have strong proof. Publicly accusing the wrong person can create a separate defamation or cyberlibel issue. Stick to verifiable facts: there is a fake account, it is not you, people should not transact with it, and you are reporting it.

4. Report the Fake Account to the Platform

Use the platform’s built-in impersonation or scam reporting tool. Do this for:

Facebook
Messenger
Instagram
TikTok
X/Twitter
Telegram
Viber
WhatsApp
Dating apps
Online marketplace accounts
Job sites
Lending apps
Crypto or investment groups

When reporting, choose the closest category:

Pretending to be me
Fake account
Scam or fraud
Unauthorized use of my image
Harassment
Non-consensual intimate image, if applicable

Save confirmation emails or report reference numbers.

5. Secure Your Own Accounts

Even if the scammer only copied your photo, check if your real accounts were compromised.

Do these immediately:

Change passwords for email and social media.
Turn on two-factor authentication.
Log out unknown devices.
Check recovery email and phone number.
Review recent login activity.
Remove suspicious connected apps.
Warn close contacts not to send money or OTPs.

If the scammer accessed your account without permission, that may also involve illegal access under RA 10175.

Where to Report in the Philippines

PNP Anti-Cybercrime Group

The Philippine National Police Anti-Cybercrime Group (PNP-ACG) handles cybercrime complaints. Reports may be made through official PNP-ACG channels, including the PNP-ACG website and regional anti-cybercrime units.

PNP-ACG is often practical when:

The fake account is actively scamming people.
You know the suspect or location.
Victims are in the Philippines.
There are e-wallet numbers, phone numbers, or bank accounts to trace.
You need a police report for a bank, e-wallet, employer, school, or platform.

A barangay blotter may help document that you reported the matter locally, but it does not replace a cybercrime complaint. Serious cybercrime and estafa complaints should go to the proper law enforcement agency or prosecutor.

NBI Cybercrime Division

The National Bureau of Investigation Cybercrime Division (NBI-CCD) also receives complaints. The NBI Citizen’s Charter page on investigative assistance for victims of computer crimes states that the service is available to the general public and involves complaint intake, preliminary interview, sworn statements, and collection of supporting documents.

NBI is commonly used when:

The matter is complex or organized.
Several victims are involved.
There are cross-platform or cross-border elements.
The complainant needs a formal investigation record.
The evidence includes devices, accounts, or digital records needing forensic review.

Cybercrime Investigation and Coordinating Center

The Cybercrime Investigation and Coordinating Center (CICC) coordinates cybercrime-related reporting and response. It operates reporting channels such as the CICC report page and is commonly associated with the national anti-scam hotline.

CICC can be useful for urgent online scams, especially when victims need guidance on which agency or reporting path fits the incident.

National Privacy Commission

File with the National Privacy Commission when the main issue is misuse of personal data, unauthorized disclosure, or unlawful processing of your photo and identifying details.

The NPC allows complaints by:

The data subject
An authorized representative with a Special Power of Attorney
The NPC on its own initiative

The NPC process requires a filled-out and notarized complaint or verified complaint, evidence, and witness affidavits. The NPC states that its Complaints and Investigation Division generally has 30 calendar days from receipt to give due course or dismiss without prejudice, and that the full process may take around 10 to 12 months, depending on the case and applications filed.

Use the official NPC complaint page for current forms, formats, submission methods, and fees.

Bank, E-Wallet, or Payment Provider

If money was sent to a bank or e-wallet account, report immediately to the financial institution.

Ask for:

Case or ticket number
Fraud investigation
Temporary hold or verification of the disputed transaction, if legally available
Written acknowledgment
Instructions for submitting police/NBI reports and affidavits

Under RA 12010, disputed transactions involving financial-account scams may trigger temporary holding and verification mechanisms, subject to law and BSP rules. Delay can make recovery harder because funds are often transferred, withdrawn, converted, or moved through mule accounts quickly.

Step-by-Step Guide to Filing a Complaint

Step 1: Identify Your Main Goal

Before filing, be clear about what you need:

Goal	Best first step
Remove fake profile quickly	Report to platform
Stop active scam	Report to platform, PNP-ACG/NBI/CICC, and bank/e-wallet
Preserve official record	Police report, NBI complaint, affidavit
Recover money	Bank/e-wallet fraud report plus law enforcement report
Address personal data misuse	NPC complaint
Claim damages	Civil action, usually after gathering evidence
Deal with intimate or sexualized images	PNP/NBI immediately; raise RA 9995 and RA 11313 issues

You may need more than one route. A platform report removes content. A police or NBI complaint starts investigation. An NPC complaint addresses data privacy. A bank report may help with funds.

Step 2: Prepare an Affidavit-Complaint

An affidavit-complaint is a sworn written statement explaining what happened. It is usually notarized.

It should include:

Your full name, address, contact details, and ID
How you discovered the fake account or scam
Why the photo identifies you
Where the original photo came from
Exact URLs, usernames, numbers, and account names used
Dates and times of relevant posts or messages
Names and contact details of witnesses or victims, if available
How you were harmed
What laws may be involved, if known
A list of attachments

Keep the narration chronological. Investigators appreciate a simple timeline.

Step 3: Attach Evidence

Typical attachments include:

Document or evidence	Why it helps
Valid government ID	Proves your identity
Screenshot of fake account	Shows impersonation or misuse
Screenshot of URL/profile link	Helps locate the account
Screenshot of scam messages	Shows fraud or solicitation
Payment details used by scammer	Helps trace money flow
Original photo or source post	Shows the image is yours or identifies you
Messages from people contacted by scammer	Shows actual harm and witnesses
Bank/e-wallet receipts of victims	Supports estafa or financial scam issues
Platform report confirmation	Shows you already requested takedown
Sworn statements of witnesses	Strengthens the complaint
Special Power of Attorney	Needed if someone files for you

Step 4: File With the Proper Office

Bring printed copies and digital copies. Many offices still prefer printed documents, even for cybercrime.

For PNP or NBI, expect:

Intake or complaint sheet
Preliminary interview
Review of screenshots and digital evidence
Execution or submission of sworn statements
Assignment to investigator or agent
Possible request for additional evidence
Referral for inquest or preliminary investigation, if a suspect is identified

For NPC complaints, follow the official form and submission requirements. The complaint must generally be notarized, with copies of evidence and affidavits.

Step 5: Follow Up Using Reference Numbers

Keep a log:

Date	Office/platform	Person or channel	Reference number	Next step
June 20, 2026	Facebook	Impersonation report	FB-xxxxx	Await takedown
June 20, 2026	GCash/bank	Fraud hotline	Ticket #xxxxx	Submit police report
June 21, 2026	PNP-ACG	Complaint desk	Report #xxxxx	Submit affidavit
June 24, 2026	NPC	Email/courier	Tracking #xxxxx	Await action

Without reference numbers, follow-ups become difficult.

Special Situations

If You Are an OFW or Living Abroad

You can still preserve evidence and report the fake account online. If a Philippine complaint must be filed by someone in the Philippines, you may need a Special Power of Attorney authorizing a trusted representative.

If the SPA or affidavit is executed abroad, Philippine offices may require it to be:

Notarized before a Philippine Embassy or Consulate; or
Notarized locally and apostilled, if the country is part of the Apostille Convention; or
Legalized/authenticated through the proper process if the country is not an Apostille country.

For current rules on authentication, check the DFA’s Apostille and authentication information.

If You Are a Foreigner Whose Photo Is Used in a Philippine Scam

A foreigner may report if the scam affects the Philippines, Filipino victims, Philippine-based accounts, Philippine phone numbers, or Philippine financial institutions.

Practical issues include:

You may need a local representative.
Foreign-language documents may need certified translation.
Affidavits executed abroad may need apostille or consular authentication.
Philippine agencies may prioritize evidence connecting the scam to the Philippines, such as Filipino victims, local bank accounts, e-wallets, SIM numbers, or Philippine-based suspects.

If People Are Accusing You of Being the Scammer

This is common. Stay calm and gather proof.

You can prepare a short written statement:

The fake account is not yours.
You did not authorize use of your photo.
You did not receive money.
You have reported the fake account.
You are willing to cooperate with victims and investigators.

Do not fight with victims online. They may be angry because they lost money. Ask them to preserve their conversations, receipts, and profile links. Their evidence can help prove that someone else used your identity.

If the Scammer Used Your Photo With a Different Name

This can still be actionable. Identity misuse is stronger when your name is also used, but a recognizable photo can still identify you, especially if people who know you can recognize you or if the scam harms your reputation.

Evidence that helps:

Messages from people saying they recognized you
Side-by-side comparison with your original photo
Proof the photo came from your profile or private album
Repeated use of your image across accounts
Captions implying you are the person in the scam

If the Photo Was AI-Edited or Used in a Deepfake

Preserve both the fake content and the original image. Do not rely only on screenshots. Save the video file if possible, the URL, upload date, username, captions, and comments.

Possible laws include RA 10175, RA 10173, Civil Code provisions, RA 9995 if sexual or intimate content is involved, and RA 11313 if the content is gender-based sexual harassment.

Common Mistakes to Avoid

Reporting Before Saving Evidence

If the account is removed before you preserve evidence, the case becomes harder. Take screenshots, URLs, and screen recordings first unless there is immediate danger.

Posting the Suspect’s Name Without Proof

Even if you suspect a person, avoid public accusations unless you have verified evidence. A wrong accusation can expose you to cyberlibel or civil claims.

Paying the Scammer to Stop

Payment may encourage further extortion. If the scam involves intimate images or threats, preserve evidence and report urgently.

Relying Only on Barangay Blotter

A barangay blotter is not the same as a cybercrime investigation. Use it only as supporting documentation. For cyber identity theft, online fraud, or e-wallet scams, go to PNP-ACG, NBI, CICC, the bank/e-wallet, or NPC as appropriate.

Sending Original Phones or Devices Without Backup

If investigators need to inspect a device, make sure you understand what is being taken, get a receipt or acknowledgment, and keep backups of non-sensitive files. Do not alter or edit important evidence.

Ignoring the Money Trail

In online scam cases, the account using your photo may disappear, but the phone number, e-wallet, bank account, QR code, or remittance details may remain traceable. Capture those details immediately.

Documents, Costs, and Timelines

Item	Practical notes
Screenshots and URLs	Free; collect immediately
Affidavit-complaint	Usually notarized; private notary fees vary
Police/NBI complaint	No ordinary filing fee for complaint intake, but bring printed copies
NPC complaint	Follow NPC forms, notarization, evidence, and current fee schedule
Bank/e-wallet fraud report	File immediately; ask for written ticket/reference
Civil case for damages	Court filing fees depend on claims and venue
Platform takedown	May take hours, days, or longer depending on platform response
Law enforcement investigation	Can take weeks or months, especially if subpoenas, warrants, or foreign platforms are involved
Prosecutor preliminary investigation	Often takes months depending on docket, evidence, and respondent participation
Court case	May take years if filed and contested

Online scam cases move slowly when evidence is incomplete, suspects use fake identities, or platforms are abroad. The strongest cases usually have organized evidence, witness statements, payment trails, phone numbers, and preserved URLs.

Frequently Asked Questions

Can I sue someone for using my photo on a fake Facebook account in the Philippines?

Yes, depending on the facts. Possible remedies include a cybercrime complaint under RA 10175, a data privacy complaint before the NPC, and a civil case for damages under the Civil Code. If the fake account was used to get money from people, estafa or financial-account scamming laws may also apply.

Is using my photo for an online scam considered identity theft?

It can be. Under RA 10175, computer-related identity theft involves the intentional use or misuse of identifying information belonging to another person without right. A photo, especially with your name or other identifying details, can support an identity theft complaint.

What if the scammer did not use my name, only my picture?

You may still have a case, but evidence becomes more important. Show that the photo identifies you, that people recognized you, and that the use harmed your reputation, privacy, or safety. Data privacy and civil remedies may still apply.

Where should I report a fake account using my photo?

Report it to the platform for takedown. If it involves fraud, report to PNP-ACG, NBI Cybercrime Division, or CICC. If personal data misuse is the main issue, consider the NPC. If money was sent, report immediately to the bank, e-wallet, or payment provider.

Can I recover money sent to a scammer using my photo?

The person who sent the money should report immediately to the bank or e-wallet and to law enforcement. Recovery depends on how fast the report is made, whether the funds are still available, and whether the receiving account can be temporarily held or traced. RA 12010 may be relevant for disputed financial-account transactions.

Should I message the fake account and threaten the scammer?

Usually, no. Direct engagement can alert the scammer to delete evidence, block you, or move accounts. Preserve evidence first, report through official channels, and avoid threats.

Can I file a complaint if I am abroad?

Yes. You can preserve evidence and report online. For formal Philippine filings, you may need an authorized representative with a Special Power of Attorney. Documents signed abroad may need consular notarization, apostille, or authentication, depending on where they were executed.

Can the barangay help?

The barangay can record a blotter or help with local disputes, but cybercrime, estafa, data privacy, and financial scams usually require PNP-ACG, NBI, NPC, banks/e-wallets, prosecutors, or courts. Do not rely only on a barangay blotter for an online scam.

What if my photo was used in a sexual or humiliating fake profile?

Preserve evidence immediately and report to PNP-ACG or NBI. Depending on the content, RA 9995, RA 11313, RA 10175, RA 10173, and Civil Code remedies may apply. Use the platform’s urgent reporting tools for non-consensual intimate images or sexual harassment.

Can I ask Facebook, TikTok, or another platform for the scammer’s identity?

Ordinary users usually cannot directly force a platform to disclose subscriber or account data. Law enforcement may need proper legal process, such as preservation requests, disclosure orders, cybercrime warrants, or other lawful channels. This is why filing with PNP-ACG or NBI matters when identification is necessary.

Key Takeaways

Using your photo for online scams in the Philippines may involve cyber identity theft, computer-related fraud, estafa, data privacy violations, civil damages, and financial-account scam offenses.
Preserve evidence before reporting the fake account for takedown.
Save screenshots, URLs, usernames, phone numbers, payment details, witness messages, and proof that the photo identifies you.
Report to the platform, PNP-ACG, NBI, CICC, NPC, and the bank or e-wallet depending on what happened.
If money was sent, the victim should report to the financial institution immediately because funds can move quickly.
A barangay blotter may help document the incident but does not replace a cybercrime or fraud complaint.
OFWs and foreigners can still act, but formal filings may require an authorized representative, notarized documents, apostille, or consular authentication.
Avoid public accusations without proof; warn people factually and preserve your legal position.