Quick answer

If someone is using your name, photos, personal details, or organization’s identity in a fake social media account:

Preserve the evidence before it disappears. Save the exact profile URL, username, account ID if visible, screenshots, messages, posts, dates, transaction records, and the names of people contacted.
Secure your real accounts. Change the passwords of your email and social accounts, sign out unknown sessions, and enable multi-factor authentication.
Report the impersonating account to the platform.
Report promptly to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or CICC if there is fraud, unauthorized use of personal information, account hacking, threats, extortion, reputational harm, or continued impersonation.
Contact your bank, e-wallet, lender, or telecommunications provider immediately if money, credit, a SIM, or financial credentials may be affected.
Consider a National Privacy Commission complaint when personal data has been unlawfully collected, disclosed, or used.

A fake profile is not automatically a criminal offense. The surrounding facts matter—particularly whose identifying information was used, whether its use was unauthorized, and whether the account was created for an illegitimate purpose. Reporting to the platform and making a formal law-enforcement complaint are separate steps.

Is a fake account identity theft under Philippine law?

Section 4(b)(3) of the Cybercrime Prevention Act of 2012, Republic Act No. 10175, defines computer-related identity theft as the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion—without right—of identifying information belonging to another natural or juridical person.

The Supreme Court explained in Disini Jr. v. Secretary of Justice that identity theft involves the use of another person’s identifying data for an illegitimate purpose. Merely acquiring or sharing information that the person made public is not, by itself, identity theft.

This means:

An account using a false screen name, without pretending to be a real person or organization, is not necessarily identity theft.
A clearly identified parody, commentary, or fan account is not automatically a crime, although it must still comply with the platform’s rules.
An account that copies your name, photographs, work details, contact information, or documents to deceive other people may fall within computer-related identity theft.
If your genuine account was taken over, illegal access and other cybercrime provisions may also apply.
If the impersonator solicits money, obtains loans, or induces people to transfer funds, estafa, access-device offenses, financial-account scamming laws, or other offenses may be involved.
Defamatory posts, threats, harassment, extortion, or the distribution of intimate images may trigger different laws with different elements and deadlines.

Authorities and prosecutors—not the complainant or the social media platform—determine the appropriate charges from the evidence.

For offenses under Sections 4(a) and 4(b) of RA 10175, including computer-related identity theft, the statutory penalty is prision mayor—generally six years and one day to twelve years—or a fine of at least ₱200,000 up to an amount commensurate with the damage, or both. The identity-theft provision states that the imposable penalty is one degree lower if no damage has yet been caused. The actual penalty can be determined only after conviction and consideration of the proven facts.

First, determine what happened

A cloned or impersonating account

This is a separate profile created to look like you. Your genuine account may still be under your control.

Save and report both:

The fake profile itself
Every post, message, advertisement, payment request, or document in which it used your identity

A hacked or taken-over account

This is your real account, but someone else obtained access or changed its password, email address, phone number, or recovery settings.

Use the platform’s official recovery process immediately. For Facebook, begin at facebook.com/hacked. Secure the email address and mobile number connected to the account as well; recovering social media will not solve the problem if the intruder still controls your email or SIM.

Misuse of an ID or personal data without a social media account

If someone used a photograph of your government ID, signature, address, or other data to open a loan, e-wallet, bank, or telecommunications account, report directly to the institution involved and to law enforcement. A platform takedown alone will not correct the fraudulent account or financial record.

Preserve evidence before blocking or reporting

A platform may remove the account quickly, change its username, or make content inaccessible after a report. Capture the evidence first unless doing so would place someone in immediate danger.

Preserve the following:

The complete profile URL—not only the displayed username
The account name, username, profile photograph, bio, follower details, and account ID if shown
Screenshots showing the browser address bar or the app’s account details
A screen recording that opens the profile and scrolls through relevant posts or conversations
The full message thread, including dates, times, sender details, attachments, voice messages, and call logs
Emails in their original form, including full headers where available
Payment instructions, QR codes, account names, account numbers, e-wallet numbers, receipts, reference numbers, and transaction times
Copies of fake IDs, contracts, invoices, job offers, loan applications, advertisements, or authorization letters
Messages from friends, customers, co-workers, or relatives who were contacted
The URL and screenshot of your genuine account for comparison
The date and time you first discovered the account and each later incident
Copies of every platform, bank, police, or agency report and its reference number

Keep the original files. Do not crop, annotate, rename, compress, or repeatedly resave your only copy. Create a separate working copy if you need to highlight something. Back up the evidence in at least one other secure location.

Electronic evidence must still be shown to be authentic. Under the Supreme Court’s Rules on Electronic Evidence, the person offering an electronic document generally bears the burden of proving its authenticity. Original messages, files, device records, URLs, and a clear account of how the evidence was obtained are more useful than isolated or edited screenshots.

Do not secretly access the suspect’s account, guess passwords, install tracking software, or ask someone to hack it. That can expose you to liability and compromise the investigation.

Report the account to the social media platform

Use the reporting option on the profile and choose impersonation, pretending to be someone, fake account, or the closest available category. Report fraudulent posts and messages separately when the platform permits it.

Official reporting routes include:

Facebook: Report a profile or Page pretending to be someone or use the impostor-account form
Instagram or Threads: Submit an impersonation report
X: Report impersonation; X states that an account is not required when reporting impersonation
Other platforms: Open the account or content, select Report, and use the platform’s official Help Center if the in-app flow does not cover impersonation

Ask people who actually received messages or payment requests to report those specific communications. Do not organize false or misleading mass reports.

A platform may ask for identification to confirm that you are the person being impersonated. Upload it only through the platform’s official app or HTTPS Help Center. Cover information that the form does not require when the platform permits redaction. Never send your ID, password, recovery code, PIN, or one-time password to the fake account or to someone offering paid “account recovery.”

Save the confirmation email, case number, and a copy of what you submitted. A takedown does not automatically identify the operator, recover money, preserve all platform records, or begin a criminal case.

Report to Philippine cybercrime authorities

RA 10175 designates the PNP and NBI as the principal law-enforcement authorities for cybercrime. You may begin with the nearest cybercrime unit or NBI regional office, especially if you cannot travel to Metro Manila.

PNP Anti-Cybercrime Group

Email: acg@pnp.gov.ph
Headquarters: Camp General Crame, Quezon City
The PNP-ACG contacts listed in the BSP’s current law-enforcement referral guide include 0998 598 8116 and (02) 8414 1560

Confirm office hours and the appropriate complaint desk before travelling.

NBI Cybercrime Division

The NBI’s published procedure calls for completing its complaint form and submitting it to the appropriate personnel. A formal investigation may still require your personal appearance, sworn statement, identification, and original or properly preserved evidence.

Cybercrime Investigation and Coordinating Center

The CICC can receive reports, assist with triage, and coordinate referral to the proper agency:

CICC online reporting portal
Hotline: 1326
Email: report@cicc.gov.ph

The DICT identifies 1326 as the national anti-scam hotline. For an active financial scam, call immediately; speed may affect whether financial institutions can trace or restrict remaining funds.

What to submit

Prepare a chronological statement containing:

Your full name and reliable contact details
The URL and username of your genuine account
The URL, username, and visible details of the fake account
When and how you discovered it
What personal information was copied or misused
What the account said or did while pretending to be you
Who received its messages
Whether money, credit, documents, or account access was involved
The amount, institution, recipient account, and transaction reference for every payment
The steps already taken with the platform, bank, employer, school, or other organization
The relief or assistance you are requesting
An indexed list of attachments

Use facts you personally know. Clearly identify information supplied by another witness. Do not guess the offender’s identity or embellish the loss.

Ask for a complaint, docket, or reference number and the investigator’s official contact details. A police blotter entry documents that an incident was reported, but it is not necessarily the same as a sworn criminal complaint, an assigned cybercrime investigation, or a complaint filed with a prosecutor. Ask what additional step is required.

Why reporting promptly matters

There is no single filing deadline for every incident described as “identity theft” or a “fake account.” Prescription depends on the offense eventually charged, its penalty, when it was committed or discovered, and what proceeding interrupts the period.

Do not assume that all cyber-related offenses have a long filing period. For example, the Supreme Court ruled in 2026 that cyberlibel prescribes in one year from discovery by the offended party, authorities, or their agents. See Causing v. People, G.R. No. 258524. Other special-law offenses are governed differently, including under Act No. 3326.

Platform data may also disappear. Section 13 of RA 10175 requires minimum preservation of traffic data and subscriber information for six months from the transaction. Content data is preserved for six months from a law-enforcement preservation order, subject to a permitted one-time extension. Disclosure of protected platform or subscriber data generally requires legal process, including the applicable cybercrime warrant.

Tell the investigator if a profile is being deleted, renamed, or used in an ongoing scam, and ask whether an immediate preservation request is appropriate. A private individual ordinarily cannot compel a platform to disclose an IP address or subscriber identity.

If money, banking, e-wallets, or loans are involved

Contact the affected bank, e-wallet, card issuer, remittance service, or lender through its official fraud channel immediately. Ask it to:

Restrict or secure the affected account
Block or replace compromised cards
Record a fraud or unauthorized-transaction dispute
Trace the transaction and notify the receiving institution where legally permitted
Preserve account-opening, device, authentication, and transaction records
Give you a complaint reference number and written response

Change financial passwords from a trusted device. Revoke unknown linked devices and payment authorizations. Do not share an OTP even with someone claiming to reverse the transaction.

A transfer made after deception is not automatically refundable, and an unauthorized transaction is not automatically charged to the customer. Liability and recovery depend on how the transaction occurred, the institution’s security controls, the notices given, and the evidence.

A BSP-supervised institution’s Financial Consumer Protection Assistance Mechanism is the first level for a consumer complaint. If the institution does not resolve the issue satisfactorily, use the BSP Consumer Assistance Mechanism, including the BSP Online Buddy or the prescribed complaint form. BSP consumer assistance does not replace a criminal report.

If someone may have obtained credit in your name, obtain your credit report through the Credit Information Corporation’s official access channels. If it contains an account you did not open, notify the lender immediately and use the CIC’s Online Dispute Resolution Process.

When to approach the National Privacy Commission

A separate complaint may be appropriate when the incident involves unlawful collection, use, disclosure, retention, or other processing of personal data. The Data Privacy Act of 2012 gives data subjects the right to complain to the NPC.

Under the NPC’s 2021 Rules of Procedure, as amended, a complainant generally must first:

Inform the personal information controller, processor, or concerned entity in writing about the privacy violation or data breach; and
Allow it to take appropriate action. A complaint may proceed if it fails to act appropriately or does not respond within 15 calendar days after receiving the written notice.

The NPC may waive these requirements for good cause or a serious violation, including circumstances involving grave and irreparable damage, the absence of an adequate remedy, or patently illegal action. Explain and support the urgent circumstances rather than assuming the waiver is automatic.

A formal NPC complaint generally must be written, signed, verified, and accompanied by supporting evidence, correspondence with the respondent, the relief requested, and a certification against forum shopping. Filing fees apply unless an exemption or waiver covers the complainant. Follow the NPC’s current formal complaint instructions and form and send authorized electronic filings to complaints@privacy.gov.ph.

An NPC complaint is not a substitute for reporting fraud, threats, hacking, or other crimes to the PNP or NBI.

Protect your identity and warn other people safely

After preserving the evidence:

Tell family, friends, employees, customers, or professional contacts through a separate verified channel that the account is not yours.
State the fake account’s exact username and URL, because display names can change.
Tell recipients not to send money, IDs, passwords, codes, or documents.
Ask anyone who already responded to preserve the entire conversation.
Review the privacy settings of your genuine accounts.
Remove publicly visible photographs of IDs, signatures, boarding passes, account numbers, and documents containing addresses or birth dates.
Search your name, commonly used photographs, business name, phone number, and email address for other copies.
Notify your employer, school, licensing body, customers, or business partners if the impersonation affects that relationship.

Keep any public warning factual. Do not identify an unverified suspect or publish private information. A mistaken public accusation can create a separate dispute and may interfere with the investigation.

Common mistakes to avoid

Deleting messages or blocking the account before saving its URL and evidence
Keeping only cropped screenshots with no username, date, or surrounding context
Assuming a platform report automatically starts a police investigation
Assuming a police blotter entry is already a complete criminal complaint
Confronting the suspected operator or attempting a private entrapment
Paying the impersonator, blackmailer, or a supposed “recovery expert”
Giving an OTP, password, recovery code, or remote access to anyone
Posting an unredacted government ID in a public warning
Fabricating conversations or asking friends to submit reports containing facts they did not witness
Waiting for the platform to act while an active financial scam continues
Assuming account removal means the platform’s subscriber and message records have been preserved
Filing only with the NPC when the incident also requires urgent law-enforcement or financial action

When help is urgent

Seek immediate assistance when:

Someone is in physical danger or has received a credible threat—call 911
Money is moving or a financial account is being accessed—call the institution’s official fraud line and CICC 1326
The impersonator is demanding payment, threatening disclosure, or distributing intimate material
A child is being contacted, exploited, sexualized, or impersonated for sexual purposes
Your email, SIM, bank, e-wallet, or government-account credentials have been compromised
A loan, credit line, or account was opened using your identity
The fake account is soliciting money from the public, customers, or employees
Important evidence is being deleted or the account is repeatedly changing names
A short prescriptive period may apply, particularly where defamatory content is involved

A lawyer is especially useful when there are substantial financial losses, multiple victims, threats, intimate images, a known suspect, cross-border conduct, a business or public-office impersonation, or uncertainty about the proper offense and filing deadline.

Frequently asked questions

Can I report an account if I do not know who created it?

Yes. Provide the profile URL, username, messages, payment details, and any facts that may help identify the operator. Law enforcement may seek subscriber or computer data through the applicable legal process. Identification is not guaranteed, particularly when the operator used stolen accounts, false registration details, or foreign services.

Should I report the account even if nobody lost money?

Yes, particularly if it is using your identifying information without authority or contacting other people. RA 10175 expressly addresses the situation where no damage has yet occurred, although the applicable penalty may differ.

Can a friend report the fake account for me?

A friend can usually flag an impersonating account through the platform’s reporting tools and can report messages personally received. For a formal complaint, the victim should generally participate and provide a sworn statement. NPC representatives require the authority specified in its rules, such as a special power of attorney where applicable.

Do I need a lawyer to make a police or NBI report?

No. You may report directly. Legal assistance becomes valuable when drafting a formal affidavit-complaint, assessing several possible offenses, claiming damages, responding to a counter-allegation, or dealing with urgent court or prosecutor deadlines.

Can I demand the account’s IP address from the platform?

You may ask the platform to preserve information, but it will ordinarily not disclose protected subscriber or connection data directly to a private complainant. Investigators may seek disclosure using the procedures and warrants allowed by RA 10175 and the Rule on Cybercrime Warrants.

Is an account automatically unlawful because it uses my photograph?

Not necessarily. Context, authorization, purpose, and manner of use matter. A copied photograph used with your name to deceive others presents a stronger identity-theft case than a lawful news report, commentary, or clearly labeled fan or parody use. Copyright, privacy, defamation, and platform-policy issues may still require separate analysis.

Will reporting guarantee a takedown, arrest, or refund?

No. The platform applies its own rules, law enforcement must identify a suspect and establish the elements of an offense, and financial recovery depends on the transaction and available funds. Prompt, complete, and properly preserved evidence improves the chances of meaningful action but does not guarantee an outcome.

What if the account operator is abroad?

Report through the platform and to Philippine authorities if you or the affected account is in the Philippines or the conduct has another Philippine connection. The NBI, PNP, CICC, and DOJ can assess jurisdiction and whether international cooperation is available.

Official references

This article provides general legal information, not advice for a particular case. The correct remedy, charge, venue, evidence requirements, and deadlines depend on the facts and available documents. Official sources and procedures were checked as of August 1, 2026.