Can Ex-Partners Be Prosecuted for Business Identity Theft?

Introduction

A bitter business separation can become legally serious when a former co-founder continues using the company’s name, logo, social-media accounts, website, customer contacts, or other identifying information to appear authorized to act for the business. The conduct may damage goodwill, mislead customers, divert payments, expose confidential information, and create obligations that the original business never approved.

Philippine law provides several possible remedies. Depending on the evidence, the affected business may pursue criminal complaints under the Cybercrime Prevention Act, civil actions for infringement, unfair competition, protection of trade names, damages, injunction, and corporate remedies for unauthorized use of a corporate name. The appropriate remedy depends on what the former partner actually did, whether the business identity or personal identifying information was used, and whether customers or the business suffered damage.

When Does Online Impersonation Become a Cybercrime?

Online impersonation is not automatically a single, standalone offense merely because a former partner claims to represent a business. The conduct must fit the elements of a specific offense under the Cybercrime Prevention Act or another applicable statute.

One potentially relevant offense is computer-related identity theft. It covers the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another, whether natural or juridical, without right. If no damage has yet been caused, the penalty is one degree lower (R.A. No. 10175, Section 4(b)(3)).

A juridical person may have identifying information, including its registered name, business identity, official online accounts, domain name, logos, and other information used to distinguish it from other enterprises. The prosecution must still establish intentional conduct, lack of authority, and the other statutory requirements. Mere disagreement over ownership of an account or business name may not, by itself, prove criminal identity theft.

Computer-related fraud may also apply where the former partner, without authority, inputs, alters, or deletes computer data or interferes with a computer system, causing damage and acting with fraudulent intent (R.A. No. 10175, Section 4(b)(2)). Examples may include redirecting online payments, changing account recovery details, deleting business records, or manipulating a website to cause customers to pay an unauthorized account.

Computer-related forgery may be relevant when computer data is altered or created without authority so that it appears authentic and is intended to be relied upon for legal purposes. Knowingly using the forged computer data to carry out a fraudulent or dishonest design is likewise covered (R.A. No. 10175, Section 4(b)(1)).

When Can Domain-Name Conduct Constitute Cyber-Squatting?

Cyber-squatting involves acquiring a domain name on the internet in bad faith to profit, mislead, destroy reputation, or deprive another person of the rightful opportunity to register it. The domain name must also fall within one of the statutory categories, such as being identical or confusingly similar to an existing registered trademark, identical or similar to another person’s name, or acquired without right or with intellectual-property interests in it (R.A. No. 10175, Section 4(a)(6)).

Bad faith is therefore important. A former co-founder who registers a domain using the company’s name to divert customers, collect payments, or create the impression that the business remains under the former partner’s control presents a stronger case than a person who merely registers a descriptive or unrelated domain without deceptive intent.

The Supreme Court has recognized that the cyber-squatting provision is directed at the evil purpose behind the registration, including the intent to profit, mislead, destroy reputation, or deprive another of a rightful opportunity to register the domain (“Disini, Jr., et al. v. The Secretary of Justice, et al.,” G.R. No. 203335, 2014). The provision was upheld against an equal-protection challenge because the law reasonably targets bad-faith conduct rather than the mere use of a particular name.

Can the Business Sue for Trademark Infringement?

Trademark infringement may arise when a person, without the owner’s consent, uses in commerce a reproduction, counterfeit, copy, or colorable imitation of a registered mark in connection with goods or services, where the use is likely to cause confusion, mistake, or deception. The infringement occurs when the prohibited act is committed, even if there has been no completed sale (R.A. No. 8293, Section 155).

This may cover unauthorized use of a registered business name, logo, product mark, service mark, packaging, online advertisement, website, social-media page, or digital promotional material. The central question is whether the use is likely to mislead customers regarding the source, affiliation, sponsorship, or identity of the business.

The Supreme Court has stated that infringement may be assessed through the dominancy test, which focuses on the dominant visual, aural, and commercial features of the competing marks (“Prosource International, Inc. v. Horphag Research Management SA,” G.R. No. 180073, 2009). In later cases, the Court has also recognized a multifactor approach that considers the resemblance of the marks, the relatedness of the goods or services, and other circumstances affecting consumer confusion (“Kolin Electronics Co., Inc. v. Kolin Philippines International, Inc.,” G.R. No. 226444, 2021).

Registration is particularly important for an infringement action based on a registered mark. However, the existence of a registration does not protect a registration obtained fraudulently, in bad faith, or in violation of law. A registration may remain subject to cancellation where it improperly appropriates another enterprise’s established business identity (“King, et al. v. Panciteria Lido Chinese Cuisine Co.,” G.R. No. 279019, 2026).

Can an Unregistered Business Name Still Be Protected?

Yes. Trade-name protection is not limited to names registered with the Intellectual Property Office. Under the Intellectual Property Code, trade names are protected even before or without registration against unlawful acts by third parties. A subsequent use of the same or a similar trade name or mark that is likely to mislead the public may be unlawful (R.A. No. 8293, Section 165.2).

The Supreme Court has held that prior use in Philippine trade or commerce may support an action involving a trade name even without prior registration. Likelihood of confusion remains a central consideration, and the dominancy and holistic tests may be used where the parties operate in the same or related business (“Coffee Partners, Inc. v. San Francisco Coffee & Roastery, Inc.,” G.R. No. 169504, 2010).

This protection is significant after a business breakup. A former co-founder cannot necessarily claim the right to use the company’s established identity merely because the former partner helped create the business or previously had authority to act for it. The answer may depend on the articles of incorporation, partnership agreement, assignment documents, shareholder arrangements, use of the name in commerce, and the scope and termination of the former partner’s authority.

Can the Conduct Amount to Unfair Competition?

Unfair competition may exist when a person uses artifice, a device, or another means calculated to create the false belief that the person is offering another’s goods or services, or commits a false statement or other bad-faith act calculated to discredit another’s goods, business, or services (R.A. No. 8293, Section 168).

A former co-founder may face an unfair-competition claim if the online account, website, advertisements, product listings, or customer communications are designed to make the public believe that the former partner continues to operate the original business or remains authorized to represent it.

Similarity alone is not always sufficient. The claimant should establish circumstances showing a false association, an intent to deceive or defraud, bad faith, or conduct calculated to mislead the public. The evidence may include copied branding, identical descriptions, misleading statements about ownership, continued use of official contact details, diversion of customers, or instructions to pay into a personal account.

In an administrative trademark dispute, the Intellectual Property Office has recognized that unfair competition may protect business goodwill even where a particular logo is not registered (“Dr. Manuel V. Calayan and Dr. Rosario C. Calayan v. Calayan Medical Group, Inc., May Anne Karen B. Calayan,” IPOPHL Decision No. 2018-04, 2018). The availability and scope of a remedy, however, depend on the facts and the evidence presented.

Can the Former Partner Be Sued for Unauthorized Use of a Corporate Name?

The Revised Corporation Code penalizes the unauthorized use of a corporate name with a fine of P10,000.00 to P200,000.00 (R.A. No. 11232, Section 159). This remedy is distinct from trademark infringement, unfair competition, and cybercrime remedies.

The business should determine whether the disputed name is the corporation’s registered corporate name, a trade name used in commerce, a trademark, or merely a project or brand name. These classifications may overlap, but each has different legal requirements and enforcement mechanisms.

A demand to stop using the corporate name should identify the specific acts complained of, state the authority being withdrawn, require the turnover or disabling of accounts and domains, and set a definite deadline for compliance. The demand should avoid unsupported criminal accusations and should preserve the business’s position for later civil or criminal proceedings.

What Evidence Should Be Preserved?

Digital evidence can disappear quickly. Before confronting the former partner, the business should preserve the original files and document the chain of custody as carefully as possible.

• Account records: screenshots, URLs, profile identifiers, account names, posts, messages, advertisements, and account-access history.
• Domain records: registration data, registrar communications, renewal notices, DNS records, website archives, and evidence of redirection.
• Business records: registration documents, trademark certificates, partnership or shareholder agreements, board resolutions, employment or consultancy contracts, and prior authority granted to the former partner.
• Customer evidence: affidavits, emails, payment instructions, complaints, canceled transactions, and messages showing that customers believed they were dealing with the original business.
• Financial evidence: diverted payments, invoices, transaction records, bank details, and records of lost sales or expenses incurred to restore control.

Screenshots should show the date, time, complete URL, account name, and surrounding context. Where possible, obtain a formal forensic extraction or an affidavit from a competent witness who can explain how the evidence was generated, preserved, and retrieved.

What Immediate Steps Should the Business Take?

1. Secure all accounts. Change passwords, activate multifactor authentication, remove former administrators, revoke active sessions, update recovery email addresses, and review connected applications.
2. Confirm ownership. Gather corporate records, domain registration documents, trademark certificates, invoices, and written agreements showing who owns and controls the relevant identity or account.
3. Notify customers and service providers. Issue a carefully worded notice identifying the official website, telephone numbers, email addresses, payment channels, and authorized representatives.
4. Send a formal demand. Require cessation of the unauthorized use, preservation of evidence, return of access credentials, correction of misleading statements, and accounting for money received.
5. Report platform violations. Use the platform’s impersonation, trademark, fraud, or hacked-account procedures while preserving proof of every report and response.
6. Evaluate legal proceedings. Depending on the evidence, consider a criminal complaint, an action for injunction and damages, an intellectual-property complaint, or corporate proceedings.

Which Authorities May Receive the Complaint?

A cybercrime complaint may be initially referred to the appropriate law-enforcement unit with cybercrime jurisdiction, supported by affidavits and preserved electronic evidence. The complaint should identify the accounts, devices, domain names, dates, acts of unauthorized access or use, persons affected, and resulting damage.

Intellectual-property disputes may be brought before the Intellectual Property Office when the controversy involves trademark registration, opposition, cancellation, infringement, or unfair competition within its jurisdiction. Civil actions for injunction, damages, and other relief may also be filed before the proper court.

The complainant should avoid filing multiple inconsistent narratives before different agencies. The facts, ownership theory, chronology, and requested relief should remain consistent, particularly where the former co-founder claims co-ownership or continuing authority.

What If the Former Co-Founder Claims Co-Ownership?

Ownership and authority are often the decisive issues in disputes between former co-founders. A person who helped establish the business may have legitimate claims under a partnership agreement, shareholder agreement, employment contract, intellectual-property assignment, or separate agreement concerning digital assets.

The business should therefore examine whether the disputed account or domain was created using company funds, registered in the company’s name, assigned to the company, or used continuously as the company’s official channel. It should also determine whether the former partner’s authority was revoked and whether the business gave notice of that revocation.

If the issue is genuinely contractual or proprietary, a criminal complaint may not resolve the dispute by itself. Criminal proceedings should be supported by proof of unauthorized conduct and the specific statutory elements, not merely by the fact that the parties’ business relationship ended badly.

What Civil Remedies May Be Available?

Depending on the cause of action and evidence, the business may seek injunctive relief, damages, accounting, delivery or destruction of infringing materials, correction of misleading representations, and other remedies under the Intellectual Property Code and the Civil Code.

The Civil Code also recognizes remedies for unauthorized or unlawful use of another person’s surname and for usurpation of a name. These provisions may be relevant where the former partner impersonates an individual rather than merely using a corporate or trade identity (R.A. No. 386, Articles 377–378).

Damages should be documented. Lost sales, diverted payments, customer refunds, restoration expenses, reputational harm, and professional fees may require competent proof and a clear causal connection to the former partner’s conduct.

Common Mistakes to Avoid

• Deleting the account or messages before preservation. This may destroy evidence needed to prove identity, intent, timing, and damage.
• Publicly accusing the former partner without verification. Public statements may create separate risks, including defamation or business-disparagement claims.
• Assuming that every unauthorized use is identity theft. The facts must satisfy the elements of the specific cybercrime charged.
• Ignoring ownership documents. A former partner’s authority may depend on contracts, corporate resolutions, partnership records, or assignments.
• Relying only on trademark registration. Trade-name protection and unfair-competition remedies may apply even where a particular mark is unregistered, but their own requirements must be established.

Conclusion

A former co-founder who impersonates a business online may face criminal, civil, intellectual-property, and corporate consequences. The strongest case usually combines proof of ownership or prior use, clear withdrawal of authority, intentional unauthorized conduct, customer confusion or deception, and measurable damage.

The business should first secure its digital assets, preserve evidence, verify the ownership and authority documents, and send a focused demand. If the conduct continues, counsel should assess whether the facts support computer-related identity theft, computer-related fraud, computer-related forgery, cyber-squatting, trademark infringement, unfair competition, unauthorized use of a corporate name, or a civil action for damages and injunctive relief.

About Nicolas and De Vega Law Offices

 Nicolas and de Vega Law Offices is a full-service law firm in the Philippines.  You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines.  You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com.