What to Do If Your Identity Is Used in an Illegal Betting Referral Scheme

If your name, photo, mobile number, ID, e-wallet, or social media profile is being used to recruit people into an illegal betting referral scheme, treat it as both an identity misuse problem and a possible cybercrime. The most important first move is not to argue online with the people behind it, but to preserve evidence, report the fake account or referral activity to the right platform, and file the proper reports with Philippine authorities so there is an official record that you did not authorize the scheme.

What This Problem Usually Looks Like

An illegal betting referral scheme usually involves someone using another person’s identity to make a gambling or betting operation look legitimate. The scheme may promise commissions, “rebates,” “agent bonuses,” “VIP invites,” or “easy money” for every person who signs up using a referral code.

Your identity may be misused in different ways:

  • A fake Facebook, Telegram, WhatsApp, TikTok, or Instagram account uses your name and photo to invite people to bet.
  • Your mobile number is listed as the “agent,” “handler,” or “cash-in contact.”
  • A betting platform, group chat, or referral page shows your real name or ID photo.
  • Someone creates an account with your details and earns referral commissions.
  • Friends or relatives receive messages that appear to come from you.
  • Your e-wallet, bank account, or QR code is used to receive deposits or “top-ups.”
  • A betting operator claims you are part of its “team,” “affiliate network,” or “agent program.”
  • Your identity is used to recruit minors, overseas Filipinos, foreign workers, or people in private group chats.

This is serious because the problem can grow in two directions at the same time. First, people may think you are involved in illegal gambling. Second, victims who lose money may blame you, report you, or post accusations against you online.

Is It Illegal for Someone to Use Your Identity in a Betting Referral Scheme?

Yes, depending on the facts, several Philippine laws may apply.

Using your identity without permission may fall under computer-related identity theft under Section 4(b)(3) of Republic Act No. 10175, the Cybercrime Prevention Act of 2012. The law covers the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person or entity, without right. This is especially relevant when your name, photo, account, mobile number, ID details, or online identity is used through a computer system or digital platform. (Lawphil)

If the scheme involves fake accounts, altered screenshots, false KYC information, or forged digital records, it may also involve computer-related forgery or computer-related fraud under the same law. Computer-related fraud under RA 10175 covers unauthorized input, alteration, or deletion of computer data or interference with a computer system, causing damage with fraudulent intent. (Supreme Court E-Library)

If the betting operation itself is unauthorized, illegal gambling laws may also come in. Presidential Decree No. 1602 consolidated and increased penalties for illegal gambling activities, while Republic Act No. 9287 specifically increased penalties for illegal numbers games such as jueteng, masiao, last two, and similar operations. (Lawphil) (Lawphil)

Philippine law also protects your personal data. Republic Act No. 10173, the Data Privacy Act of 2012, recognizes rights over personal information, including rights to be informed, access, correction, objection, and complaint when personal data is misused. The National Privacy Commission states that data subjects affected by a privacy violation or personal data breach may file complaints for violations of the Data Privacy Act. (Lawphil) (National Privacy Commission)

Why You Should Act Quickly

Digital evidence disappears fast. Fake betting pages, Telegram groups, referral links, and dummy accounts can be deleted within minutes after the operator realizes that you are collecting evidence.

Acting quickly helps you:

  • show that you did not authorize the referral scheme;
  • stop further use of your identity;
  • warn people who may be deceived;
  • preserve digital traces before accounts are deleted;
  • support a criminal complaint;
  • protect your bank, e-wallet, or credit record;
  • avoid being mistaken as an agent, promoter, or accomplice.

In cybercrime cases, screenshots are helpful, but they are not always enough. Investigators may need subscriber data, login records, IP logs, device identifiers, transaction histories, and platform records. The Supreme Court’s Rule on Cybercrime Warrants, A.M. No. 17-11-03-SC, provides procedures for warrants involving preservation, disclosure, interception, search, seizure, examination, custody, and destruction of computer data. (Office of the Court Administrator)

Step-by-Step: What to Do Immediately

1. Preserve the Evidence Before Reporting the Account

Before you click “report,” “block,” or “delete,” collect evidence first. Once a fake account is taken down, it may be harder for you to prove what happened.

Save the following:

  • screenshots of the fake profile, page, group, or referral post;
  • the full URL or username of the fake account;
  • referral codes, QR codes, betting links, or invite links;
  • chat messages where your identity was used;
  • names, numbers, handles, and profile links of people involved;
  • screenshots showing dates and times;
  • proof that your photo, name, ID, or mobile number was used;
  • payment details, wallet numbers, bank accounts, or crypto wallet addresses shown in the scheme;
  • complaints from friends, relatives, or victims who contacted you;
  • any threat, blackmail, or demand connected to the scheme.

For stronger documentation, record your screen while opening the fake page and showing the URL, username, date, and visible content. Do not edit the screenshots except to make duplicate copies. Keep the originals.

2. Write a Simple Timeline

Prepare a short timeline while the details are still fresh. This helps the police, NBI, prosecutor, platform, bank, or e-wallet understand the case quickly.

Include:

  1. when you first discovered the misuse;
  2. who informed you;
  3. what account, link, number, or platform was involved;
  4. what personal information was used;
  5. whether money was collected;
  6. whether anyone was deceived;
  7. whether you know or suspect who did it;
  8. what steps you already took.

Keep the tone factual. Avoid guessing unless you clearly label it as suspicion.

3. Secure Your Own Accounts

If your identity was used in a referral scheme, assume your data may have been exposed.

Do these right away:

  • change passwords for email, Facebook, Instagram, Telegram, TikTok, and e-wallet accounts;
  • enable two-factor authentication;
  • log out of unknown sessions;
  • check account recovery emails and phone numbers;
  • review connected apps and remove suspicious permissions;
  • check e-wallet and bank transaction histories;
  • call your bank or e-wallet if your account, QR code, or number appears in the scheme;
  • ask your mobile network if there are suspicious SIM or account changes connected to your identity.

This matters because some referral schemes begin with account takeover. Others begin with stolen photos, leaked IDs, or personal information copied from public posts.

4. Report the Fake Account or Referral Page to the Platform

Report the account to the platform where the misuse happened.

Use the category closest to:

  • impersonation;
  • fraud or scam;
  • unauthorized use of identity;
  • illegal gambling;
  • fake account;
  • phishing;
  • unauthorized use of personal information.

When possible, include a short explanation:

This account is using my name/photo/mobile number without permission to promote a betting referral scheme. I am not connected with this activity. I request removal and preservation of relevant records for investigation.

Do not rely only on platform reporting. Platforms may remove the page, but that does not automatically create a Philippine police or prosecutor record.

5. File a Cybercrime Report With the NBI or PNP-ACG

For cybercrime complaints, the usual agencies are:

Office When to Go There Practical Notes
NBI Cybercrime Division / regional cybercrime units Identity theft, fake accounts, online fraud, betting links, e-wallet misuse, impersonation The NBI Citizen’s Charter lists investigative assistance for victims of computer crimes and indicates that complainants fill out complaint forms at the division. (National Bureau of Investigation)
PNP Anti-Cybercrime Group (PNP-ACG) Online impersonation, scams, fake accounts, cyber fraud, illegal online activity PNP responses in public records have referred victims of online scams to the PNP-ACG eComplaint channel and email. (www.foi.gov.ph)
Local police station If you need an initial police blotter, if threats are involved, or if victims are nearby A blotter is not the same as a full criminal case, but it helps create an official record.

Bring printed and digital copies of your evidence. If you can, put the files in a USB drive and also keep them in cloud storage.

Typical requirements include:

  • government-issued ID;
  • written narrative or complaint-affidavit;
  • screenshots and URLs;
  • screen recordings;
  • chat logs;
  • transaction receipts, if any;
  • names or contact details of witnesses;
  • proof that the identity used belongs to you;
  • notarized affidavit, if required;
  • authorization or special power of attorney if someone files for you.

6. File a Complaint With the National Privacy Commission if Personal Data Was Misused

If your personal information, ID, image, mobile number, address, or sensitive data was used without consent, you may file a complaint with the National Privacy Commission.

The NPC’s formal complaint process requires the complaint form to be printed, filled out, notarized, and submitted to the NPC through available channels such as personal filing, courier, or scanned email submission. (National Privacy Commission)

This route is especially useful when:

  • a company, platform, payment provider, or operator mishandled your data;
  • your ID was used for account verification;
  • the betting platform refuses to delete your data;
  • your information appears in a user database, referral dashboard, or public page;
  • you need a formal data privacy complaint record.

A data privacy complaint is different from a criminal cybercrime complaint. In many cases, you may need both.

7. Notify the Betting Platform or Operator in Writing

If you can identify the betting platform, send a written notice asking it to:

  • deactivate any account using your identity;
  • preserve all records related to the account;
  • provide a case or reference number;
  • confirm that you are not the verified user or agent;
  • remove your name, photo, number, ID, or referral code;
  • freeze referral commissions connected to your identity;
  • disclose the proper lawful channel for complaints.

Use official support channels only. Do not send your ID to random “agents” in Telegram or Facebook Messenger. If the platform asks for ID verification, redact unnecessary information where possible and mark the copy as “FOR IDENTITY THEFT REPORT ONLY” with the date and recipient.

8. Check Whether the Betting Site Is Licensed

Not all online betting is automatically lawful. Some gaming platforms are regulated; others are illegal or unauthorized. PAGCOR publishes lists of accredited gaming system administrators and registered brands and sub-brands. Its list as of 04 December 2025 includes online gaming categories such as electronic casino games, sports betting, bingo, poker, specialty games, and numeric games.

If the site is not on an official list, or if it uses mirror links, hidden Telegram groups, foreign domains, or “agent-only” deposits, be cautious. The legality of a platform can depend on licensing, target market, game type, location, and actual operations.

You can also raise regulatory concerns with PAGCOR’s relevant regulatory departments, especially if a supposedly licensed operator is allowing identity misuse or illegal referral practices. PAGCOR publishes contact details for regulatory offices including gaming licensing, electronic gaming licensing, and remote operations. (PAGCOR)

9. Notify Your Bank, E-Wallet, or Payment Provider

If your wallet, QR code, bank account, or mobile number was used, report it immediately through official channels.

For e-wallets and banks, ask for:

  • temporary account protection, if needed;
  • investigation ticket number;
  • confirmation that you deny involvement;
  • review of suspicious transactions;
  • blocking of unauthorized linked devices;
  • reversal or hold request if funds are involved;
  • written response for your records.

If the institution’s response is inadequate, the Bangko Sentral ng Pilipinas advises financial consumers to first report the concern to the financial institution’s own customer assistance mechanism. If unresolved, the complaint may be escalated to the BSP Consumer Assistance Mechanism through BSP Online Buddy or other channels. (Bureau of the Treasury)

What Laws May Apply?

Cybercrime Prevention Act: Identity Theft, Fraud, and Forgery

The core law is Republic Act No. 10175, especially if the misuse happened through websites, apps, social media, messaging platforms, databases, or e-wallet systems.

Possible offenses include:

  • Computer-related identity theft — using your identifying information without right.
  • Computer-related fraud — using computer data or systems to cause damage with fraudulent intent.
  • Computer-related forgery — creating or using inauthentic computer data as if it were genuine.
  • Aiding or abetting cybercrime — helping another person commit cybercrime.
  • Cyberlibel — if false online accusations damage your reputation, depending on the content and circumstances.

Data Privacy Act: Misuse of Personal Information

The Data Privacy Act of 2012 protects personal information processed by individuals, businesses, and organizations. If your name, image, contact details, ID, address, or other personal data was collected, used, shared, or displayed without a lawful basis, the NPC may have jurisdiction.

This is important where the scheme involved:

  • uploaded ID photos;
  • KYC forms;
  • referral dashboards;
  • leaked customer databases;
  • unauthorized use of your mobile number;
  • posting your personal details in group chats;
  • refusal to correct or delete false personal data.

Revised Penal Code: Estafa, Falsification, and Other Deceits

The Revised Penal Code may apply when the scheme involves offline or non-cyber elements.

Possible provisions include:

  • Article 315, Estafa or swindling — if people were deceived into paying money.
  • Article 172, falsification by private individuals and use of falsified documents — if documents, signatures, IDs, authorizations, or records were falsified.
  • Article 178, using fictitious name and concealing true name — in some impersonation-related scenarios.
  • Article 318, other deceits — for deceitful acts that may not fit neatly into estafa.
  • Articles 353 to 355, libel — if defamatory statements are published, with cybercrime implications if done online.

Illegal Gambling Laws

If the referral scheme promotes unauthorized betting, illegal numbers games, or unlicensed gambling, gambling laws may apply.

Relevant legal references include:

  • Presidential Decree No. 1602 — illegal gambling law consolidating and increasing penalties for gambling offenses.
  • Republic Act No. 9287 — higher penalties for illegal numbers games.
  • Republic Act No. 10175, Section 6 — crimes under the Revised Penal Code or special laws committed through information and communications technology may be treated as cyber-related offenses.

SIM Registration Act

If your name or ID was used to register a SIM involved in the scheme, Republic Act No. 11934, the SIM Registration Act, may become relevant. The law requires SIM registration and defines spoofing as transmitting misleading or inaccurate information about the source of a call or text with intent to defraud, cause harm, or wrongfully obtain anything of value. (Lawphil) (Supreme Court E-Library)

Should You Post a Public Warning?

A public warning can help stop people from being deceived, but write it carefully. Do not accuse a specific person unless you have solid evidence.

A safe public notice may say:

My name, photo, or contact details are being used without my permission in connection with a betting referral scheme. I am not connected with any such account, page, group, referral code, or betting operation. Please do not send money or personal information to anyone claiming to represent me. I have reported the matter to the relevant platform and authorities.

Avoid:

  • naming suspects without evidence;
  • posting private addresses, ID numbers, or personal data;
  • threatening people online;
  • sharing edited screenshots that remove important context;
  • using words like “criminal,” “scammer,” or “syndicate” against a specific person unless this has been established.

Remember that online accusations can create a separate defamation problem. Be factual, measured, and evidence-based.

What If Victims Are Blaming You?

Stay calm and do not admit liability for something you did not do.

Reply briefly and consistently:

  • You did not authorize the account or referral activity.
  • You are also a victim of identity misuse.
  • You are preserving evidence.
  • You have reported or will report the matter to the platform and authorities.
  • They should also preserve their chats, receipts, and transaction records.

Ask them to send you copies of messages, payment details, and referral links. These may help identify the real operator.

Do not promise refunds unless you actually received the money or are legally responsible. If money went to an account that is not yours, point victims to the correct law enforcement and payment provider reporting channels.

What If the Person Behind It Is Someone You Know?

If the suspect is a friend, co-worker, former partner, relative, tenant, employee, or business contact, do not rely on verbal confrontation alone. Many people lose valuable evidence because they warn the suspect too early.

Practical steps:

  1. Preserve all evidence first.
  2. Check if the person had access to your IDs, phone, photos, documents, or accounts.
  3. Save messages showing admission, apology, or threats.
  4. Avoid private settlement that requires you to “clear” them publicly.
  5. If money or multiple victims are involved, file a formal report.

Barangay conciliation may be relevant for some disputes between residents of the same city or municipality, but serious cybercrime, fraud, identity theft, or illegal gambling concerns usually need law enforcement and prosecutor involvement. Barangay proceedings are not designed to trace IP logs, preserve platform data, or investigate online betting networks.

What If You Are Abroad?

Filipinos abroad and foreigners outside the Philippines may still take protective steps.

You may need:

  • screenshots and screen recordings;
  • copy of passport or valid ID;
  • notarized affidavit;
  • consular acknowledgment or apostille, depending on where the document will be used;
  • special power of attorney if a representative in the Philippines will file documents for you;
  • contact details of witnesses in the Philippines;
  • proof of Philippine connection, such as the platform, victims, bank account, e-wallet, SIM, operator, or suspect being in the Philippines.

For documents executed abroad, Philippine agencies may ask for consular notarization or apostille, depending on the country. If the country is a party to the Apostille Convention, an apostille may replace consular authentication for many public documents. If the document will be used for a criminal complaint, check the receiving office’s exact requirements before sending originals.

Foreigners should also preserve proof of immigration status, passport identity page, local address abroad, and any Philippine contact details used in the scheme. If your passport or foreign ID was used for KYC, notify the issuing authority in your country as well.

Documents to Prepare

Document or Evidence Why It Matters
Government ID Proves your identity as the complainant
Screenshots of fake account or referral page Shows unauthorized use of your identity
Full URLs, usernames, group links, referral codes Helps investigators trace the source
Screen recordings Preserves context before deletion
Chat logs Shows recruitment, deception, or impersonation
Transaction receipts Connects the scheme to payments
E-wallet or bank reports Helps freeze or trace funds
Witness statements Supports your claim that others saw the scheme
Complaint-affidavit Main sworn narrative for law enforcement or prosecutor
Notarized NPC complaint form Needed for formal data privacy complaint filing
Platform report confirmation Shows you acted promptly
Public clarification screenshot Shows you denied involvement early

Typical Timelines and Practical Bottlenecks

Step Typical Timeline Common Bottleneck
Evidence collection Same day Fake account deleted before screenshots are taken
Platform report Same day to several days Automated replies, no human review
Bank or e-wallet report Same day to 7 banking days or more Missing transaction reference numbers
Police blotter Same day Blotter may not include enough cyber details
NBI or PNP-ACG complaint Same day to several weeks Need for complete affidavit and digital evidence
NPC complaint Several weeks to months Complaint form, notarization, jurisdiction screening
Prosecutor action Months or longer Need for evidence identifying the perpetrator
Court case Often years Digital evidence, witnesses, and platform records

The most common bottleneck is identifying the real person behind a fake account. A profile name is rarely enough. Investigators often need platform records, telecom data, e-wallet records, IP logs, and subscriber information, which may require formal requests or court processes.

Mistakes to Avoid

Deleting the Evidence Too Soon

Do not delete messages, emails, or suspicious login alerts. Even embarrassing or stressful messages may become important evidence.

Reporting Before Taking Screenshots

If the platform removes the account, you may lose visible proof. Capture evidence first.

Sending Your ID to Random “Support Agents”

Scammers often pose as betting support, e-wallet support, or cybercrime assistance pages. Use official websites, verified pages, and in-app channels.

Paying to “Remove” Your Name

Some schemes demand payment to delete your photo or stop using your identity. This can lead to more extortion. Preserve the demand and report it.

Posting Angry Accusations Online

A careful public warning is helpful. A public accusation against a named person without evidence can expose you to counterclaims.

Assuming a Police Blotter Is Enough

A blotter is only an initial record. For cybercrime, you usually need a proper complaint, affidavit, evidence package, and follow-up with the NBI, PNP-ACG, prosecutor, platform, or regulator.

Frequently Asked Questions

Can I be arrested if my name was used in an illegal betting referral scheme?

Not automatically. Philippine authorities still need evidence of your participation, intent, and connection to the illegal activity. Your immediate goal is to create a clear record that your identity was used without permission and that you reported it as soon as you discovered it.

Is using my photo and name for a betting referral page identity theft?

It can be, especially if done online without your permission and used to mislead others. Under RA 10175, computer-related identity theft covers the unauthorized use or misuse of identifying information belonging to another person.

Should I file with the barangay first?

For serious online impersonation, fraud, illegal betting, or cybercrime, going directly to the NBI, PNP-ACG, or local police is usually more practical. Barangay conciliation cannot compel platforms to disclose account records or preserve digital evidence.

What if I do not know who created the fake account?

You can still file a report. Many cybercrime complaints start with an unknown suspect. Provide the account links, usernames, screenshots, referral codes, phone numbers, wallet details, and transaction records so investigators have leads.

Can I ask Facebook, Telegram, TikTok, or Instagram to reveal who did it?

As an ordinary user, you can report the account and request action, but platforms usually do not disclose subscriber or login data directly to private individuals. Law enforcement may need to use formal legal channels, preservation requests, or cybercrime warrants.

What if my e-wallet number was posted but no money entered my account?

Still report it. The scheme may be using your number to make you look involved, or the operator may later edit payment instructions. Keep screenshots showing that your number was displayed without permission.

What if the betting site claims it is licensed?

Ask for the exact licensed entity name, PAGCOR accreditation or authority, registered brand, official website, and complaint channel. Then compare it with official PAGCOR information. Even a licensed platform should not allow unauthorized use of your identity.

Can I claim damages?

Possibly. If you suffered reputational harm, financial loss, emotional distress, business loss, or data privacy harm, civil damages may be pursued depending on the evidence and the proper forum. The Data Privacy Act also recognizes remedies for violations of data subject rights.

What if I am an OFW and cannot go home to file?

You may prepare a notarized or apostilled affidavit abroad and authorize a trusted representative in the Philippines through a special power of attorney. Requirements vary by office, so your representative should confirm the exact format accepted by the NBI, PNP, NPC, bank, or prosecutor handling the matter.

Should I message the scammer and demand deletion?

Only if doing so will not compromise your safety or evidence. If you message them, avoid threats. Take screenshots of the conversation. If they admit using your identity, demand money, threaten you, or reveal other operators, preserve everything.

Key Takeaways

  • Unauthorized use of your identity in a betting referral scheme may involve cybercrime, data privacy violations, fraud, falsification, and illegal gambling laws.
  • Preserve evidence before reporting or blocking the fake account.
  • File reports with the platform, NBI or PNP-ACG, and the National Privacy Commission when personal data is misused.
  • Notify your bank, e-wallet, or payment provider if your account, QR code, or mobile number appears in the scheme.
  • A careful public warning can protect others, but avoid unsupported accusations against specific people.
  • A police blotter is useful, but cybercrime cases usually need a proper evidence package, complaint-affidavit, and follow-up investigation.
  • If you are abroad, prepare notarized or apostilled documents and consider authorizing a representative in the Philippines.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.