Discovering that a fraudulent loan has been recorded under your name in a credit bureau is a modern legal nightmare. In the Philippines, centralized credit reporting is a relatively recent institutional framework, making the mechanisms for correcting these errors critical for consumers. When a identity thief or a rogue agent secures a loan using your stolen personal data, you are left to face the fallout: blacklisting, plummeted credit scores, and unexpected collection demands.

Legally, you are not helpless. Philippine law provides distinct pathways to clear your name, correct malicious or erroneous credit data, and hold negligent financial institutions or credit bureaus accountable.

The Legal Framework: Your Right to Correct Data

The system of credit reporting in the Philippines is governed by specific laws designed to balance the financial sector's need for risk assessment with the citizen's fundamental right to privacy and accurate data.

1. The Credit Information System Act (CISA) or Republic Act No. 9510

CISA established the Credit Information Corporation (CIC), the country’s central registry of credit data. Under Section 6(g) of R.A. 9510, consumers have a explicit Right to Dispute. If the credit information submitted to the CIC is inaccurate, incomplete, outdated, or fraudulent, the data subject has the right to file a dispute and have it corrected or updated.

2. The Data Privacy Act of 2012 (DPA) or Republic Act No. 10173

Fraudulent loan records inherently involve the unauthorized processing or malicious use of your Personal Identifiable Information (PII). Under Section 16 of the DPA, you possess the:

Right to Rectification: The right to dispute the inaccuracy or error in your personal data and have the Personal Information Controller (the bank or credit bureau) correct it immediately.
Right to Blocking or Erasure: The right to suspend, withdraw, or order the blocking, removal, or destruction of your personal data from a filing system upon proof that the data is incomplete, outdated, false, or unlawfully obtained.

Step-by-Step Procedure to Dispute Fraudulent Records

Resolving a fraudulent loan requires a systematic, paper-trailed approach. You must target three distinct entities: the law enforcement authorities, the Submitting Entity (the bank/lending institution), and the Credit Bureau (CIC and its accredited bureaus).

Gather Evidence and Document the Fraud: Immediate. Secure a official copy of your credit report from the CIC or its accredited credit bureaus (like CIBI, TransUnion, or CRIF). Highlight the exact account number, the date the loan was opened, the outstanding balance, and the name of the financial institution that submitted the data.
File a Formal Police Report and Affidavit of Denial: Within 48 hours of discovery. Go to the nearest Philippine National Police (PNP) station or the National Bureau of Investigation (NBI) Cybercrime Division. File a report for Identity Theft under the Cybercrime Prevention Act of 2012 (R.A. 10175). Draft a notarized Affidavit of Denial stating explicitly that you did not apply for, receive, or benefit from the loan in question, and that the signatures or digital footprints used are forged.
Lodge a Formal Dispute with the Submitting Entity: Concurrent with Step 2. Send a formal letter to the compliance or legal department of the bank or financial institution that reported the loan. Attach your Affidavit of Denial, the Police Report, and copies of your valid government IDs (showing your real signature). Demand an internal investigation, the immediate suspension of collection activities, and the cancellation of the fraudulent account.
File an Official Dispute with the CIC: Via the CIC Online Dispute Resolution System. Log on to the Credit Information Corporation's portal and initiate a formal dispute. Provide the ticket or reference number from your complaint with the bank, along with your supporting documents. Under CISA rules, once a dispute is filed, the CIC will tag the account as "Disputed" in the system so future creditors know the record is contested while the investigation is ongoing.

Liability and Recourse Against Errant Institutions

If a financial institution or a credit bureau fails to act, or if they negligently allowed the fraud to happen through poor Know-Your-Customer (KYC) verification, Philippine jurisprudence and statutory laws provide heavy penalties.

Liability of the Submitting Entity (Banks/Lenders)

The Bangko Sentral ng Pilipinas (BSP) mandates strict compliance with Customer Due Diligence (CDO) rules. Under BSP Circulars, financial institutions must verify the true identity of their clients. If a lender approved a loan via an identity thief due to lax, negligent, or automated verification processes without double-checking physical or biometric records, they can be held liable for administrative sanctions by the BSP.

Furthermore, under the DPA, if a company's negligence leads to a data breach or malicious processing of your information, affected individuals can seek civil damages before regional trial courts, while the National Privacy Commission (NPC) can levy hefty fines against the corporation.

Liability of Credit Bureaus and the CIC

Under Section 11 of CISA, the CIC and its accredited bureaus are required to ensure the confidentiality and accuracy of the credit information they hold. While they are generally immune from liability for publishing information sent to them in good faith by banks, that immunity vanishes if they fail to rectify or tag the information as disputed after receiving a valid, formal notice from the consumer.

Key Takeaways for the Accused Consumer

The Status of the Debt: You cannot be legally compelled to pay a loan you did not contract. Under Article 1318 of the Civil Code of the Philippines, a contract requires consent. Fraudulent identity theft means there was a complete absence of consent; therefore, the contract is void from the beginning (void ab initio).

Keep Everything in Writing: Never rely on phone calls with bank agents or credit bureau staff. Send demands via registered mail or official corporate email channels to maintain a clean legal paper trail.
Monitor Annually: Avail of your right to check your credit score at least once a year through the CIC to catch anomalous accounts early before they cause massive damage to your financial standing.