Quick answer

If a loan, credit line, credit card, or similar account was opened using your identity without your authority, dispute it immediately in writing with the lender. State clearly that you did not apply for, consent to, sign, receive, activate, or benefit from the account. Ask the lender to:

block further use and collection activity;
preserve all application and transaction records;
provide copies of the application, contract, identity-verification records, disbursement details, and account history;
investigate the fraud;
suspend interest, fees, and charges while the disputed unauthorized transaction is investigated; and
correct every record reported under your name.

Do not simply ignore collection messages, and do not pay a “small amount” or sign a restructuring agreement merely to stop the calls. Either action could complicate your position. Reporting the incident does not automatically erase the account; the lender, credit-information provider, regulator, or court must evaluate the supporting records.

You may also need to report the matter to the police or National Bureau of Investigation (NBI), dispute inaccurate information with the Credit Information Corporation (CIC), and complain to the appropriate financial regulator or the National Privacy Commission (NPC).

Act quickly, but keep a reliable paper trail

Contact the lender through a verified channel shown on its official website, statement, or regulator listing—not through a link or number supplied by a suspicious collector.

A phone call can stop immediate activity, but follow it with an email, complaint form, branch-received letter, or other written communication. Keep the case number, acknowledgment, delivery receipt, and every reply.

Your notice should identify:

your complete name and reliable contact details;
the disputed account or reference number, if known;
when and how you discovered it;
the specific transactions, balance, or collection demands you dispute;
a direct statement that the application and account were unauthorized;
whether you ever received any proceeds, card, device, SIM, or one-time password;
the correction and protective measures you want; and
the evidence attached.

You may redact unrelated information from copies of IDs, but leave enough information for verification. Mark copies, where practical, with the purpose and date—for example, “For unauthorized-account dispute only, 29 August 2026.”

What to demand from the lender

Ask for a written acknowledgment and a final investigation result. Request that the lender preserve and disclose, subject to lawful security and privacy limits:

the complete application and all versions of it;
the purported contract, promissory note, disclosure statement, and electronic consent records;
copies or images of IDs and selfies submitted;
timestamps, IP addresses, device identifiers, phone numbers, email addresses, and SIM or one-time-password records;
recordings or transcripts of verification calls;
branch, agent, merchant, or loan-app records;
the bank, e-wallet, card, or other destination to which proceeds were released;
withdrawals, purchases, transfers, and repayment history;
collection-agency instructions and communications; and
information supplied to the CIC, a credit bureau, or another reporting entity.

Do not assume that a document bearing your name or a digital image of your signature proves that you authorized the transaction. Authentication, consent, attribution, identity verification, and receipt of the proceeds can all depend on the underlying evidence.

At the same time, do not claim fraud if you actually authorized someone to apply, shared an OTP, received the proceeds, or later adopted the transaction. Those facts do not necessarily settle liability, but they can materially change the legal analysis and should be disclosed to your lawyer.

Ask for collection and account protections

Under the Financial Products and Services Consumer Protection Act, Republic Act No. 11765, covered financial service providers must maintain a free consumer-assistance mechanism. For an alleged disputed amount or unauthorized transaction, the provider must suspend interest, fees, and charges pending its final investigation report, or give a similar reasonable accommodation.

Ask the lender in writing to:

flag the account as disputed for identity fraud;
prevent new drawdowns, purchases, cash advances, or limit increases;
stop automated debits and further disbursements;
suspend interest, penalties, fees, and adverse collection action during the investigation;
tell its collection agency that the debt is disputed;
avoid reporting the account as your valid delinquency;
correct or update information already reported; and
confirm the final action in writing.

The statute does not mean every account will automatically be cancelled. It establishes complaint-handling and interim protections while the provider investigates.

Secure the accounts the fraudster may have used

An unauthorized loan can be a sign that other credentials have been compromised. As soon as possible:

change the passwords of your email, banking, e-wallet, government, and social-media accounts;
use unique passwords and enable multifactor authentication;
sign out unknown devices and review recovery emails and phone numbers;
tell your mobile provider immediately if your SIM unexpectedly lost service or may have been replaced;
notify banks and e-wallet providers connected to suspicious disbursements or debits;
revoke unfamiliar app permissions;
scan your devices and remove suspicious remote-access or lending applications; and
check other statements and credit records for unfamiliar accounts.

Secure the account before deleting an app or resetting a device. Otherwise, useful logs and messages may be lost.

Preserve evidence properly

Keep original electronic evidence whenever possible. Useful material includes:

collection texts, emails, chat threads, call logs, and voicemails;
screenshots showing the full screen, date, sender, account reference, and URL;
original email files with headers;
application links, app names, advertisements, and website addresses;
statements and demand letters;
copies of IDs that may have been exposed;
proof of your actual phone numbers, email addresses, signatures, and addresses at the relevant time;
travel, work, location, or device records that may contradict the application;
bank and e-wallet statements showing that you did not receive the proceeds;
notices to the lender and proof of delivery;
complaint reference numbers and agency replies; and
names, numbers, and claimed affiliations of collectors.

Create a dated chronology. Save copies in at least two secure locations. Avoid editing, cropping, annotating, or repeatedly forwarding the only original file.

A sworn affidavit of denial may be useful, particularly if requested by the lender, regulator, or investigator. It should state only facts you can truthfully attest to. A barangay or police blotter, affidavit, or NBI complaint can support your report, but none by itself conclusively determines whether a contract is valid or who committed the fraud.

Report possible identity theft or cybercrime

If the application or misuse involved a phone, website, app, email account, electronic document, or other computer system, the conduct may fall within the computer-related identity-theft provision of the Cybercrime Prevention Act of 2012, Republic Act No. 10175. Other offenses may apply depending on how the account was opened and used. The facts and evidence—not the label placed on a complaint—determine the possible charges.

You may report to the Philippine National Police or seek investigative assistance from the NBI. The NBI maintains an official online complaint page and accepts requests for assistance through its Cybercrime Division and regional offices.

Bring or attach:

a valid ID;
your chronology;
the lender’s name and account details;
copies of disputed documents and communications;
details of the suspected person, if legitimately known;
disbursement and destination-account information;
device, phone, email, and IP information supplied by the lender; and
proof that you notified the lender.

Report promptly when evidence could disappear. Service providers may not retain every type of technical record indefinitely, and investigators may need legal process to obtain protected information.

Escalate to the correct financial regulator

Complain to the lender first unless immediate law-enforcement action is necessary. If its response is absent or unsatisfactory, escalate based on the institution’s regulator.

For banks and other BSP-supervised institutions

The Bangko Sentral ng Pilipinas advises consumers to lodge a formal complaint first with the BSP-supervised financial institution. An unresolved complaint may then be escalated through the BSP Consumer Assistance Mechanism.

The BSP accepts complaints through its Online Buddy, or through its Complaints, Inquiries and Requests form sent to consumeraffairs@bsp.gov.ph. Include the complaint filed with the institution, its response if any, your requested resolution, contact details, and supporting documents. Keep the BSP case-reference number.

For lending and financing companies regulated by the SEC

Use the Securities and Exchange Commission’s official complaint procedure for lending and financing companies. The SEC requires a completed complaint form, supporting evidence, and a valid government-issued ID, with one complaint form for each respondent company.

The SEC may investigate regulatory violations or refer matters to another agency. Its administrative complaint channel does not, by itself, declare a contract void, cancel a debt, or decide every private contractual issue.

For cooperatives or another regulated provider

A cooperative generally falls under the Cooperative Development Authority, while insurance-related credit products may involve the Insurance Commission. Confirm the provider’s legal name and regulator before filing. An app’s brand name may differ from the company actually extending the credit.

Check and dispute your CIC credit report

Do not assume that correcting the lender’s internal account automatically corrects every credit record.

Obtain your CIC credit report through an authorized CIC channel. If it contains the unauthorized account, use the CIC Online Dispute Resolution System. CIC states that a consumer must first obtain a credit report before disputing erroneous, misleading, incomplete, or outdated information.

Identify the exact account and submitting entity, then upload the strongest available evidence. CIC facilitates the dispute and sends it to the entity that submitted the data; CIC cannot simply alter a lender’s submission unilaterally. Monitor messages and respond promptly, because failure to participate can affect the process.

After correction, obtain a fresh report and verify that the disputed information no longer appears inaccurately. Also check any credit-bureau report that the lender identifies as a recipient of the false information.

File a privacy complaint when personal data was misused

Opening an account with someone else’s identity may involve unauthorized collection, use, access, disclosure, or inaccurate processing of personal data. The Data Privacy Act of 2012, Republic Act No. 10173 gives data subjects rights that include access and correction, subject to applicable legal limitations.

Before filing a formal NPC complaint, notify the respondent in writing of the privacy violation or personal-data breach and allow it to act. Under the NPC’s published complaint mechanics, exhaustion is generally shown when the respondent fails to take timely or appropriate action, or gives no response within 15 calendar days after receiving the written notice. Attach proof of notice and receipt.

A formal NPC complaint generally requires a notarized complaint-assisted form or verified complaint, supporting documents, and witness affidavits where applicable. Follow the NPC’s current filing instructions carefully; incomplete form, insufficient evidence, or failure to show exhaustion of remedies can result in dismissal.

A consumer reporting suspected misuse is not the same as an organization filing a statutory personal-data-breach notification. The NPC’s separate breach-notification system and deadlines principally concern personal information controllers and processors assessing and reporting qualifying breaches.

If the disputed account is a credit card

Move especially quickly. Under the Philippine Credit Card Industry Regulation Law, Republic Act No. 10870, an issuer must give a cardholder up to 30 calendar days from the statement date to report an error or discrepancy in the billing statement and must act within 10 business days after receiving the notice.

That billing-dispute period should not be treated as permission to delay reporting identity theft. Notify the issuer immediately, block the card or account, and ask whether additional fraud forms or deadlines apply.

Handling collectors and demand letters

Tell each collector in writing that:

you dispute the account in full as an identity-fraud account;
you did not authorize the application or receive the benefit;
the lender is investigating, if applicable;
all future communications should be documented; and
the collector should identify the creditor, account, authority to collect, and basis of the claim.

Do not insult or threaten collectors, and do not publish their personal information. Save abusive, deceptive, or threatening communications as evidence.

Do not ignore a summons, subpoena, court pleading, or regulator’s directive. A collection message is not a court judgment, but an actual legal filing has formal response periods. Obtain legal help immediately so a deadline is not missed.

Common mistakes to avoid

Reporting only by phone. A call may leave no usable proof of what was disputed.
Paying to make the problem disappear. Payment may complicate the factual dispute and does not necessarily stop further misuse.
Signing a restructuring or settlement without advice. Its language may contain acknowledgments or waivers.
Sending IDs to unverified collectors. This may expose even more personal data.
Deleting messages or resetting a device too early. Important electronic evidence can be lost.
Disputing only with CIC. CIC cannot independently rewrite data; the submitting lender must be addressed.
Filing with the wrong regulator. Confirm the legal entity behind the app or brand.
Naming a suspected offender without evidence. Distinguish what you know from what you merely suspect.
Assuming a police report automatically cancels the debt. It supports the investigation but does not itself adjudicate contractual liability.
Missing official notices. Court, prosecutor, regulator, and credit-card dispute deadlines require immediate attention.

When legal help is urgent

Consult a Philippine lawyer promptly if:

you receive a summons, subpoena, prosecutor’s notice, or court pleading;
salary, deposit, or property attachment is threatened or attempted;
the account involves a large amount, collateral, a mortgage, or a vehicle;
a forged notarized document, deed, or public instrument is involved;
the lender insists that biometrics, an OTP, or an electronic signature proves authorization;
proceeds entered an account you own or control, even if another person accessed it;
you know the suspected offender and there are family, employment, or agency issues;
several institutions are reporting fraudulent accounts;
the lender refuses to preserve or disclose critical records;
collectors threaten violence, public shaming, arrest without lawful basis, or contact vulnerable family members; or
you may miss a filing or response deadline.

The Public Attorney’s Office may be an option for qualified persons. A lawyer can also help prepare a precise affidavit, demand preservation of electronic records, coordinate civil and criminal remedies, and avoid inconsistent statements across complaints.

Frequently asked questions

Am I required to pay a loan I never authorized?

Not merely because an account appears under your name. The decisive facts may include whether you consented, whether the signature or electronic act is attributable to you, where the proceeds went, whether you received a benefit, and what the lender’s verification records show. Formally dispute the account and obtain advice if the lender maintains that you are liable.

Should I pay while the investigation is pending?

Do not make an uninformed payment on an account you wholly deny. Request the interim accommodation required for alleged unauthorized transactions under Republic Act No. 11765. If the account mixes authorized and unauthorized amounts, obtain advice on how to handle any undisputed portion.

Is a police blotter enough?

No. It documents that a report was made but does not conclusively prove identity theft, cancel a contract, correct a credit report, or convict anyone. Submit the underlying evidence to the lender and relevant agencies.

Can CIC delete the account immediately?

Not unilaterally. CIC’s dispute process involves the entity that submitted the information. Provide documents, participate in the process, and verify the result through a later credit report.

Can I complain to the NPC immediately?

First send the respondent a written privacy complaint and keep proof of receipt. The NPC’s published exhaustion rule generally requires proof that the respondent did not take timely or appropriate action, or did not respond within 15 calendar days. Immediate police or security measures do not need to wait where ongoing fraud or danger exists.

What if the lender is an unregistered loan app?

Preserve the app name, developer, website, payment instructions, phone numbers, advertisements, and messages. Report possible criminal conduct to the PNP or NBI and submit the available entity information to the SEC. Do not install files or send further identity documents merely because the operator demands them.

What if a relative or employee opened the account?

Do not assume that the relationship creates authority. Actual permission, agency, access to devices, receipt of proceeds, and later conduct all matter. Because family or workplace facts can create evidentiary and legal complications, obtain individual legal advice before signing an affidavit or settlement.

How will I know the matter is finished?

Seek written confirmation that the account is closed or corrected, the balance is not attributed to you, collection instructions have been withdrawn, and affected credit-information recipients have been updated. Then obtain a new credit report and keep the complete case file.

This article provides general Philippine legal information, not advice for a particular case and not a substitute for counsel who can examine the documents and facts. Laws, regulations, agency channels, and procedures were checked against official sources current as of 29 August 2026.