How Are Impostor Charity Accounts Prosecuted Online?
Introduction
Impostor accounts that solicit donations for supposed medical emergencies may expose their operators to criminal liability under Philippine law. The conduct may involve estafa, computer-related identity theft, and other offenses, depending on how the account was created, whose identity was misused, how the solicitation was made, and whether victims actually transferred money.
The use of social-media accounts, messaging applications, electronic wallets, and online banking does not by itself create a separate offense in every case. Rather, digital technology may establish the means by which traditional fraud was committed or may satisfy the elements of a cybercrime expressly defined by statute.
Estafa Through False Online Solicitation
Under Article 315(2)(a) of the Revised Penal Code, estafa may be committed through a fictitious name, a false representation of power or qualifications, an imaginary transaction, or another similar deceit. The false representation must ordinarily be made before or at the time of the fraud and must induce the victim to part with money or property.
The Supreme Court has recognized that a conviction for this form of estafa requires proof that the false representation was the very cause, or the only motive, that induced the complainant to surrender something of value (“People of the Philippines v. Gallo,” G.R. No. 185277, 2010).
Accordingly, a scammer who creates an account falsely claiming that a named person needs funds for surgery, hospitalization, medication, or another medical emergency may be prosecuted for estafa if the representation caused donors to transfer money and resulted in damage.
Elements That Must Be Established
For an online medical-donation scheme to support estafa through deceit, the prosecution generally must establish the following:
First, there was a false representation or fraudulent act. Examples include pretending to be the patient, a relative, a hospital representative, a charitable organization, or an authorized fundraiser.
Second, the false representation preceded or accompanied the transfer. The misrepresentation must have been made before or at the time the donor sent money. A later failure to use the funds as promised may be relevant, but it does not automatically prove the deceit required for estafa.
Third, the victim relied on the deception. The donor must have transferred money because of the representation that the donation would assist a genuine medical emergency or would reach the represented beneficiary.
Fourth, the victim suffered damage. Damage may consist of the money or property transferred because of the fraudulent solicitation.
The offense may remain simple estafa even when the solicitation was conducted through social media. The electronic platform is generally the instrument or channel of the fraud; the prosecution must still prove the elements of the underlying offense.
Computer-Related Identity Theft
Section 4(b)(3) of R.A. No. 10175, or the Cybercrime Prevention Act of 2012, penalizes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another, whether natural or juridical, without right. If no damage has yet been caused, the penalty is one degree lower.
The offense may apply where an impostor uses another person’s name, photograph, contact information, professional identity, organizational identity, or other identifying information to create an account and solicit money without authority.
The Supreme Court explained that identifying information may include a person’s name, citizenship, residence address, contact number, date and place of birth, spouse’s name, occupation, and similar data. It also recognized that the theft of identity information must be intended for an illegitimate purpose (“Disini, Jr., et al. v. The Secretary of Justice, et al.,” G.R. No. 203335, February 11, 2014).
The National Privacy Commission has likewise recognized that names and email addresses may be used to enable identity fraud, particularly where they can support phishing or other conduct leading to identity theft and financial loss (NPC 20-124, 2020).
When Estafa and Identity Theft May Both Apply
Estafa and computer-related identity theft protect different interests and require different proof. Estafa addresses the fraudulent acquisition of money or property. Identity theft addresses the unauthorized use or handling of another person’s identifying information.
Both charges may therefore be considered when the evidence shows that the accused:
Created or controlled an online account using another person’s identity;
Used the account to represent that a medical emergency existed;
Induced donors to transfer money; and
Kept, diverted, or otherwise misused the donated funds.
The filing of both charges does not guarantee conviction on both counts. Each offense must be supported by evidence proving its separate elements. Prosecutors must also examine whether the alleged offenses arise from distinct acts or whether issues concerning duplicity, double jeopardy, or the proper characterization of the conduct may arise.
Possible Liability Under the Cybercrime Prevention Act
R.A. No. 10175 also covers computer-related fraud, defined as the unauthorized input, alteration, or deletion of computer data or programs, or interference with the functioning of a computer system, causing damage with fraudulent intent. The statutory definition must be carefully matched with the actual conduct proven in the complaint and evidence.
Section 6 of R.A. No. 10175 provides an additional penalty when crimes under the Revised Penal Code or special laws are committed through information and communications technologies. Whether the provision applies depends on the charge, the factual allegations, and the manner in which the offense was committed.
In a case involving alleged online fraud, the mere use of text messages, social-media posts, or electronic transfers should not replace an examination of the precise statutory elements. The complaint should identify the specific digital acts, the victims, the representations made, the accounts used, and the resulting financial loss.
Evidence Needed to Support a Criminal Complaint
A complainant should preserve the complete digital trail rather than relying only on screenshots. Useful evidence may include:
Account information: the profile URL, username, account identification number, registration details if obtainable, profile photograph, linked telephone number, and associated email address.
Content of the solicitation: screenshots and screen recordings of posts, stories, messages, donation instructions, medical claims, names of purported beneficiaries, and representations of affiliation.
Payment records: bank transfers, electronic-wallet receipts, transaction references, deposit slips, remittance records, and records showing the recipient account.
Identity evidence: affidavits from the person whose name or photograph was misused, proof of the genuine identity or organization, and evidence that the account operator had no authority to act for that person or organization.
Platform and telecommunications records: preservation requests, subscriber information, access logs, IP-related records, and other data that may be obtained through lawful investigative or judicial processes.
Digital evidence should be preserved in its original form where possible. Investigators should document when and how it was obtained, who handled it, and how it was stored to reduce challenges concerning authenticity and integrity.
Role of the Victim Whose Identity Was Misused
The person whose identity was copied may be a complainant, a witness, or both, depending on the circumstances. That person should clearly state that no authorization was given to create the account, solicit donations, use the photographs or name, or receive money on the person’s behalf.
The identity owner should also document public warnings, takedown requests, reports to the platform, and communications with donors. These records may help prove the absence of authority and establish that the account was operated for an improper purpose.
Reports to Authorities and Preservation Measures
A complaint may be reported to the Philippine National Police Anti-Cybercrime Group, the National Bureau of Investigation Cybercrime Division, or the appropriate prosecutor’s office. The complainant should identify every known victim and transaction instead of presenting only a general allegation that the account was fraudulent.
The complainant should immediately request preservation of relevant platform, telecommunications, and payment records. Delay may make it more difficult to identify the account operator, especially where accounts are deleted, telephone numbers are abandoned, or transaction records become difficult to retrieve.
Where personal information was unlawfully processed or publicly displayed, a separate complaint before the National Privacy Commission may also be considered. However, privacy liability requires evidence connecting the respondent to the unauthorized processing or disclosure; the mere occurrence of fraud does not automatically establish liability under the Data Privacy Act (NPC 20-283, 2023).
Potential Defenses and Evidentiary Issues
An accused may deny creating or controlling the account, claim that the account was hacked, dispute the authenticity of screenshots, or argue that no donor relied on the alleged representation. These defenses make account attribution and transaction tracing especially important.
Evidence should therefore connect the accused to the account and the money. Relevant links may include control of the registered phone number or email address, device or access records, admissions in messages, repeated use of the same payment account, withdrawal records, and communications with donors.
A case may also fail if the complainant cannot show actual damage, cannot identify the person who transferred money, or cannot prove that the representation caused the transfer. A suspicious account or morally reprehensible conduct is not, by itself, proof beyond reasonable doubt of estafa.
Illustrative Example
Suppose an individual creates a Facebook account using a doctor’s name and photograph. The account claims that a child requires urgent surgery and directs donors to an electronic-wallet account controlled by the impostor. Several donors transfer money after reading the posts, and the impostor withdraws the funds for personal use.
On these facts, the evidence may support estafa if the false medical representation induced the donations and caused financial damage. Computer-related identity theft may also be considered because the accused intentionally used another person’s identifying information without authority. The final charges will depend on the evidence establishing account control, unauthorized use, reliance, and damage.
Practical Recommendations
Victims should first preserve the account and payment evidence before requesting deletion of the fraudulent content. They should obtain sworn statements from donors, secure official transaction records, and document the genuine identity or organization being impersonated.
The complaint should distinguish between the false representation, the unauthorized identity use, the specific digital acts, and the resulting financial loss. It should also identify whether the evidence supports estafa, computer-related identity theft, computer-related fraud, or another offense under the facts.
Finally, complainants should avoid conducting unauthorized hacking, surveillance, or retaliation against the suspected scammer. Evidence should be obtained through lawful investigative and prosecutorial processes so that it remains usable in court.
Conclusion
Impostor accounts soliciting charitable donations for fictional medical emergencies may result in prosecution for estafa and computer-related identity theft when the statutory elements are proven. The strongest cases usually combine proof of the false solicitation, unauthorized use of another person’s identity, actual donor transfers, financial damage, and reliable evidence linking the accused to the account and recipient funds.
Because online fraud cases depend heavily on digital attribution and transaction records, immediate preservation of evidence is essential. Criminal complaints should be drafted around the precise statutory elements rather than around the general conclusion that the account was deceptive.
About Nicolas and De Vega Law Offices
Nicolas and de Vega Law Offices is a full-service law firm in the Philippines. You may visit us at the 16th Flr., Suite 1607 AIC Burgundy Empire Tower, ADB Ave., Ortigas Center, 1605 Pasig City, Metro Manila, Philippines. You may also call us at +632 84706126, +632 84706130, +632 84016392 or e-mail us at [email protected]. Visit our website https://ndvlaw.com.
