The first 24 hours: evidence first, voice second
Many companies rush to report the fake account. It disappears, and so does the evidence they will need for the police and for their own defence. Preserve first. Save every public trace the impersonator left: the profile page and its address, the name and picture used, the advertisements posted, conversations with victims, any forged contract or receipt, and the name and final digits of the bank account or e-wallet that took payment. Alongside screenshots, make one continuous screen recording that starts from opening the link and shows the date and time.
With that done, three things happen the same day. One: publish a clarification on your website, official social accounts and at your premises stating which contact details and payee accounts are the only genuine ones, that accounts have recently appeared misusing the company name, that none of them is authorised, and that customers should verify through official channels. State facts only and name no suspect. Two: contact existing customers and partners individually, starting with anyone mid-transaction or about to pay. Three: look inward. Among employees, former employees and outside agents, who could have reached the letterhead, the seal or a copy of the registration papers?
If the impersonator is using copies of your real registration documents, find out how they left the building. Common routes are files once given to a third party, certificates on the wall that were photographed, and soft copies kept by former staff. The answer tells you whether this is purely external or involves an insider, and those two cases are handled differently; for the second see evidence and procedure when an employee harms the company.
When victims arrive: how to receive them and what never to sign
A person holding a receipt with your company name on it and standing at reception will be upset, and reasonably so. Treat that person as a fellow victim, not as a troublemaker. Move the conversation to a meeting room, with one manager and one note-taker present. Listen to the whole account first, then ask to see everything they hold and, with consent, copy it: proof of payment, chats, contact details they were given, the supposed contract. These are the same items your own report needs.
Then say three things clearly. One: this account, this payee and this "officer" do not belong to the company, and show the official channels and genuine payee account for comparison. Two: the company is also a victim, has reported or is about to, will submit their material as evidence, and suggests they file their own report too, following the sequence for stopping payment, gathering proof and reporting. Three: the company will issue a short written statement that the transaction was not its business, which they can show to their bank, the platform and the police.
Words to avoid: "we will take responsibility", "we will advance the money", "we will sort it out internally". Papers never to sign: anything saying the company received the payment, that an employee handled it, or that a refund is promised. A sympathetic private payment can be read in law as acknowledging a connection, and it invites more claimants. If the visitor's documents show that a serving employee was in fact involved, the position changes, liability may arise, and you should stop making statements and bring in counsel. Where a visitor threatens exposure unless paid, follow the response to extortion.
Reporting and takedowns: who, and with what
Reporting to the authorities and complaining to platforms run in parallel, and both are needed. The criminal track: impersonation for gain usually involves both fraud and misuse of identity. If it happened online, the units that handle cybercrime receive it; see reporting online fraud in the Philippines for choosing the office and preserving electronic evidence. If it happened offline, a record at the local police station is the starting point, and how police reports work explains the difference between a blotter entry and a formal complaint. Bring the company registration papers, identification and written authority for the representative, printed and electronic copies of the evidence, and statements from known victims.
The platform track: major social and marketplace platforms have complaint channels for impersonation of a business and for trademark infringement. They normally ask you to prove you are the genuine rights holder, so registration papers and a trademark certificate carry the most weight. A company without a registered mark will find takedowns markedly harder, which is one reason to register early; the steps are in the Philippine trademark application process. For a look-alike domain, complain to the registrar and the hosting provider.
The payee-account track is often forgotten. Notify the bank or payment institution in writing that the account is being used for fraud in your company's name and ask that it be dealt with under their procedures. They may never tell you the outcome, yet the letter is an important record that the company took reasonable steps to limit the harm. Keep every acknowledgment, reference number and reply in one folder.
Clearing your name with regulators, banks and customers
The after-effect of impersonation is that your own company comes under suspicion: a regulator receives a complaint, the bank looks harder at your account, a partner suspends payment. You clear your name with documents, not explanations. Four items form the core: valid registration and licence papers; a list of official channels (site, accounts, telephone, payee accounts) with proof of when each began; the acknowledgments of your police report and platform complaints; and a dated timeline of events.
Assemble these as a clarification pack in Chinese and in English. Send it whenever a customer or partner asks, and attach it when answering any letter from a government office. Mind the deadline in such letters, since silence past the due date is taken as acceptance. If a victim has already named the company in a complaint or a lawsuit, do not argue with them directly. Let counsel respond through the proper procedure; the milestones once a company is a defendant are set out in what to do when your company is sued.
Clear your name internally as well. Staff should know what happened, what the official wording is and who alone may speak externally. An employee lashing out at the impersonator or doubting a victim from a personal account drags the company into a new dispute. One voice, one text. When customers ask, do not deflect; tell them what the company has already done. That is far better than letting them hear it elsewhere. A company that has been impersonated and handled it properly often ends up with customers who know exactly which channel is real.
Five things not to do
One: do not name or hint at a specific person or company in your statement. Before any finding by the authorities, naming someone can become their cause of action against you; the line is drawn in where online libel begins. "Unknown persons are misusing our company name" is enough. Two: do not set up your own sting. Arranging to meet the fraudster privately puts people at physical risk, and evidence gathered improperly may not be usable. Hand leads to investigators.
Three: do not refund on the fraudster's behalf to make the problem go away. Show sympathy by helping victims organise their proof and by issuing a written statement. Once payment starts, neither the legal characterisation nor the number of claimants stays under your control. Four: do not delete anything on your side, whether exchanges with victims, internal chats or old marketing material. Cleaning up after the event looks like guilt, and those records may be exactly what shows the company knew nothing.
Five: do not assume a takedown ends it. Fake accounts routinely reopen under a new name. For the following months someone should search regularly for the company name, the brand and common misspellings, and preserve and report each new page at once. Check too whether the company is being drawn into other forms of harm, such as false reviews posted in its name or attacks on competitors attributed to it; see responding to malicious reviews and online attacks. If a director's personal name has also been used on registrations or signatures, see your name listed as a director of an unknown company.
Making impersonation harder, and what Yixing can do
Impersonation works because customers cannot tell real from fake. The core of prevention is making the genuine article easy to recognise. One: single official channels. Publish every official account and payee-account name on your website with the words "anything else is not us", and take payment only into accounts in the company's name, never through personal accounts. Two: issue a numbered formal receipt for every payment so that a customer can check the number with you. Three: register your trademark early and claim the brand name and its common variants on the main platforms.
Four: control your papers. Mark copies of registration documents with their purpose and date before giving them out, keep letterhead and seals with a named custodian, and recover accounts and files when staff leave. Five: publish a one-page "how to verify us" note on your site and at your premises showing customers how to check the registration number, the payee name and the official telephone line. Customers often ask how to check official papers generally; guides such as how to verify an official document are worth pointing to.
Yixing Travel Consultancy (SEC Registration No. CS202009551, Bureau of Immigration Accredited Agency No. CA-202624381-1) works in a sector that is itself frequently imitated. We provide compliance retainer services for foreign-owned companies in the Philippines: organising licences and the official-channel list, drafting clarification statements and "not our transaction" letters, assembling material for police reports and platform complaints, and introducing licensed counsel where needed. We do not replace a lawyer and we promise no takedown or prosecution outcome. If a victim has already come to your door today, hold back on commitments, put their documents beside the evidence you preserved, and let us help you order the next steps. For your specific case consult a licensed lawyer; this article is not legal advice.
Frequently Asked Questions
Someone used our company name to take a customer's money. Must the company pay?
Should I report the fake account first or capture it first?
A victim asks us to advance the money. May we give part of it as goodwill?
Can our clarification name the person we suspect?
We have no registered trademark. Will platforms act on our complaint?
We reported it and the fraudster is still using our name. What now?
A customer complained about us to a government office because of the impersonation. What do we do?
Let’s talk through your situation — free
Every company is different. Leave your details and a Chinese-speaking advisor will get back within 1 business day with practical, industry-specific guidance and a transparent quote.
Get help with Compliance & Retainer → Free consultation