HOW-TO

How to Report Identity Theft in the Philippines

If someone is using your name, IDs, or accounts, act fast. Here is how to gather evidence and report identity theft to the PNP, NBI, and National Privacy Commission.

Step by step

1. Secure your accounts immediatelyChange passwords on affected email, bank, and social accounts, and enable two-factor authentication. If a bank or e-wallet is involved, contact the provider through official channels to freeze or flag activity. Do this before reporting so the damage stops spreading.
2. Preserve evidenceTake clear screenshots of fake profiles, messages, transactions, and any account showing misuse. Record URLs, usernames, dates, and times. Do not delete the original messages — preserved digital evidence is what lets authorities act.
3. Warn people who may be targetedIf a fake account is messaging your contacts, alert them not to send money or share information. Report the impersonating account to the platform so it can be taken down, but keep your evidence first.
4. File with the PNP or NBIReport to the PNP Anti-Cybercrime Group (at Camp Crame, a Regional Anti-Cybercrime Unit, or acg.pnp.gov.ph) or the NBI Cybercrime Division. Bring your evidence and a valid ID, and ask for a reference or blotter number for your records.
5. Consider a complaint with the NPCIf your personal data was misused, you can file a parallel complaint with the National Privacy Commission at privacy.gov.ph. This addresses the data-protection side but does not replace the criminal complaint with law enforcement.
6. Report to the national hotlineYou can also report to the DICT/CICC I-ARC hotline 1326, a 24/7 line for scams and cybercrime, which helps coordinate the response across agencies.
7. Follow up and monitorKeep your reference numbers, respond to requests from investigators, and monitor your accounts and credit for further misuse. Keep copies of everything you submit.

Act fast, in the right order

Identity theft in the Philippines has climbed alongside the growth of social media and online banking, from cloned profiles that message your friends for money to stolen details used to open accounts or loans in your name. The law takes it seriously: computer-related identity theft is a crime under Republic Act No. 10175, the Cybercrime Prevention Act of 2012, with penalties that can reach around twelve years’ imprisonment depending on the case. But the outcome depends heavily on how quickly and carefully you respond.

Secure first, then preserve evidence

Your first move is containment. Change the passwords on any affected email, banking, e-wallet, and social media accounts, and switch on two-factor authentication wherever you can. If money or a financial account is involved, contact the bank or provider through their official channels to freeze or flag the activity. Doing this before you report stops the damage from spreading while you build your case.

Next, preserve evidence. Take clear screenshots of fake profiles, fraudulent messages, and any suspicious transactions, and note the URLs, usernames, dates, and times. Resist the urge to delete the offending messages — preserved digital evidence is exactly what allows investigators to act.

No government agency will ask for your OTP, password, or PIN, or charge an upfront fee to process an identity-theft report.

Where to file

The primary channels are law enforcement. Report to the PNP Anti-Cybercrime Group — at Camp Crame, a Regional Anti-Cybercrime Unit, or through acg.pnp.gov.ph — or to the NBI Cybercrime Division. Bring your evidence and a valid ID, explain what happened, and ask for a reference or blotter number so you have a record of the filing. If a fake account is actively messaging your contacts, warn them not to send money, and report the account to the platform for takedown once your evidence is safe.

Where your personal data has been misused, you can file a parallel complaint with the National Privacy Commission at privacy.gov.ph. It is important to understand the boundary here: an NPC complaint addresses the data-protection dimension, but it does not replace a criminal complaint with the PNP or NBI. For a coordinated response, you can also call the DICT and CICC Inter-Agency Response Center on hotline 1326, which operates around the clock for scams and cybercrime.

Follow through

Keep every reference number, respond promptly to investigators, and continue monitoring your accounts and credit for further misuse. Reporting is free at every legitimate channel, so be wary of anyone who offers to ‘recover your identity’ for a fee — that is simply another scam layered on the first.

Understanding the likely misuse helps you know where to check for damage. Stolen identity details are commonly used to open fake social media accounts that solicit money from your friends, to apply for loans or e-wallet accounts in your name, to bypass verification on platforms, or to lend a veneer of legitimacy to further scams targeting others. That is why containment goes beyond the one account you noticed: review your email for unfamiliar sign-up confirmations, check your bank and e-wallet statements for transactions you did not make, and watch for verification codes arriving for services you never joined. The sooner you spot secondary misuse, the easier it is to shut down. Document each instance you find, because a fuller picture of the harm strengthens both your criminal complaint and any NPC filing.

Where these guides connect

Identity theft rarely travels alone. If your details were taken through a fraudulent lender or scam message, read how to avoid online loan and text scams. For the broader reporting process across scam types, see how to report online scams in the Philippines, and to recognise impostor schemes early, learn how to spot government service scams. This article is general information, not legal advice — for a specific situation, consult a qualified professional or the relevant agency directly.

Gabay is an independent guide and is not affiliated with any government agency. Fees, links and steps can change — always confirm on the official portal before you act. This is general information, not legal or financial advice.