Discovering that someone has registered a SIM card under your name without your knowledge or consent is a serious form of identity theft that can disrupt your peace of mind and expose you to unwanted investigations or harassment. This situation often arises when scammers use stolen personal data, photocopied government IDs, or information from data breaches to activate a mobile number for scams, unauthorized digital loans, SIM-swap fraud, or other criminal activities. Under current Philippine law, you have strong, enforceable rights to dispute the registration, demand correction or removal of your data from telco records, and protect yourself from liability. This article provides a clear, practical roadmap based on how the system actually works, including the exact steps thousands of Filipinos and foreigners in similar situations have successfully taken.

How Unauthorized SIM Registration Typically Happens

Scammers obtain your full name, date of birth, address, and a clear photo of a valid government-issued ID through phishing, social media scraping, database leaks, or even lax practices when you previously shared copies for legitimate purposes. They then submit these details—sometimes with minimal or no face-to-face verification—to a public telecommunications entity (PTE) such as Globe, Smart, or DITO.

The SIM Card Registration Act made registration mandatory, but implementation gaps have allowed fraudulent registrations to slip through, especially during high-volume periods or via third-party agents. Once activated, the number can receive one-time passwords (OTPs) for lending apps, enable SIM swaps on your legitimate lines, or serve as a tool for text scams.

Many victims only discover the problem when police contact them about crimes committed with “their” number, when collection agencies begin harassing them or their contacts over loans they never took, or when they attempt to register their own SIM and encounter conflicts in the system. The fraudulent registration stays in the telco’s database, with subscriber data generally retained for ten years even after deactivation.

Your Legal Rights and Protections

Republic Act No. 11934, the SIM Card Registration Act of 2022, requires all SIM cards (prepaid and postpaid) to be registered with accurate personal information and a valid government-issued photo ID. It imposes criminal penalties on anyone who provides false or fictitious information or uses fraudulent identification documents: imprisonment from six months to two years, a fine of ₱100,000 to ₱300,000, or both. The law also obliges telcos to maintain secure databases and limits disclosure of subscriber information to specific circumstances, such as a valid court order or subpoena.

Republic Act No. 10173, the Data Privacy Act of 2012, gives you clear rights as a data subject. These include the right to be informed about the processing of your personal data, the right of access to data held about you, the right to rectification or correction of inaccurate or incomplete data, and the right to object to or request erasure of data processed unlawfully or no longer necessary. Telcos act as personal information controllers and must implement reasonable and appropriate security measures. The National Privacy Commission (NPC) enforces these rights and can order correction, deletion, or damages.

Additional protections come from the Cybercrime Prevention Act (RA 10175), which covers computer-related identity theft and fraud, and provisions of the Civil Code on abuse of rights (Articles 19–21) and quasi-delicts, allowing claims for damages if a telco’s negligence in verification or response causes you harm. You are not automatically liable for crimes or debts linked to a fraudulent SIM once you properly document your lack of consent and cooperation with authorities.

Step-by-Step Guide to Disputing the Unauthorized Registration

Act quickly. Prompt documentation creates an official record that rebuts any presumption of involvement and limits further harm.

Gather strong evidence right away.
Collect at least two valid government-issued photo IDs (passport, driver’s license, PhilID, UMID, voter’s ID, or PRC ID). Prepare proof that you could not have registered the SIM yourself—such as travel records, medical certificates, employment documents, or witness statements showing you were abroad, hospitalized, or otherwise unavailable. Take clear screenshots or save any related messages, loan alerts, police notices, or collection calls. Note exactly how and when you discovered the issue and any specific number involved.
Execute a notarized Affidavit of Denial.
This sworn statement is one of the most powerful documents you can create. In it, state your complete personal details, explicitly deny that you registered or authorized registration of the disputed SIM or number, confirm you never provided your ID or personal information for that purpose, describe how you discovered the registration, and formally request that the telco investigate, deactivate or suspend the SIM if active, correct or remove your personal data from all related records, and provide a written investigation report. Bring two copies to any notary public. Notarization typically costs ₱100–₱500. This affidavit carries significant weight with telcos, the NTC, and the NPC.
Report immediately to the relevant telco(s).
Contact the specific PTE (Globe, Smart/TNT/Sun, DITO, or others) through their official fraud or security channels—usually via their mobile app chat, dedicated hotline, email, or a branch. If you do not know which telco holds the registration, report to the major providers. Submit your notarized Affidavit of Denial, photocopies of your IDs, proof of your legitimate registrations (if any), and a clear written request for investigation, deactivation/suspension, data flagging or correction, and written confirmation of actions taken. Ask for a reference or ticket number and follow up in writing (email with read receipt or registered mail) if you do not receive a substantive response within a few days. Many telcos have dedicated teams that handle these reports.
Send a formal written demand letter under the Data Privacy Act.
Even after the initial report, send a separate, signed (and preferably notarized) demand letter via email (with read receipt) or registered mail. Demand that the telco correct or erase the inaccurate personal data linked to the fraudulent registration, provide written confirmation within five to seven business days, and cease any processing that relies on the false record. This step satisfies procedural requirements before escalating to the NPC and creates a clear paper trail.
Escalate to the National Telecommunications Commission (NTC) if the telco fails to act adequately.
If the telco ignores your requests, delays unreasonably, or refuses to investigate or correct the records after 7–14 days, file a consumer complaint with the NTC. You can call the 24/7 consumer hotline at 1682, email consumer@ntc.gov.ph, or submit through the complaint form available on the official NTC website (ntc.gov.ph) or at any regional NTC office. Attach your Affidavit of Denial, all correspondence with the telco, copies of your IDs, and evidence of the problem. The NTC can direct the telco to investigate and take corrective action and may impose administrative sanctions for non-compliance. There is an official NTC Complaint Form (Form No. NTC 1-25) that you can download and accomplish.
File a complaint with the National Privacy Commission (NPC).
Parallel to or after NTC escalation, submit a data privacy complaint if the telco has failed to respect your rights to data accuracy and correction. Download the complaint form from the official NPC website (privacy.gov.ph), notarize it, and attach your Affidavit of Denial, the demand letter with proof of delivery, your IDs, a timeline of events, and evidence of any harm or distress suffered. Submit via email to complaints@privacy.gov.ph, by courier, or in person. The NPC can order the telco to correct or delete the data, investigate further, and in appropriate cases award damages.
Report the criminal aspect to law enforcement.
Visit your nearest police station to have the incident recorded in the police blotter. For the cybercrime dimension (identity theft or fraudulent use of ICT), file a formal complaint with the Philippine National Police Anti-Cybercrime Group (PNP ACG) through their website at pnpacg.ph, hotline 723-0401 (loc. 5313 or appropriate local extension), email, or nearest regional unit, or with the National Bureau of Investigation (NBI) Cybercrime Division. Submit a notarized complaint-affidavit detailing the facts. This creates an official record of your denial and may support any broader investigation, even if identifying the perpetrator proves difficult.
Monitor your accounts and take protective measures.
Immediately check bank accounts, e-wallets, email, and social media for suspicious OTP requests or activity. If you suspect a SIM swap on any of your legitimate numbers, report it to your telco right away and request a new SIM with enhanced security (PIN or biometric). Keep organized copies of every document, reference number, and communication. If the fraudulent SIM was used for digital lending apps, send separate written demands to those lenders for debt validation and cessation of collection activities, citing relevant consumer protection laws.

Common Challenges and Real-Life Scenarios

Ordinary Filipinos often face delayed discovery, making it harder to gather fresh evidence. Telcos may initially resist changes, citing that “the registration is already in the system.” Bureaucracy—multiple follow-ups, branch visits, or back-and-forth emails—can be frustrating, especially for those juggling work or family responsibilities. Proving non-involvement is possible but requires strong documentation when scammers use only photocopied IDs.

OFWs and foreigners abroad encounter extra layers: time zone differences, the need to apostille documents executed overseas (under the Hague Apostille Convention, to which the Philippines is a party), and the practical need for a trusted representative in the Philippines armed with a properly notarized and apostilled Special Power of Attorney. The substantive rights and processes remain the same regardless of nationality or location.

In more complex cases involving ongoing loan harassment or threats, victims sometimes need legal assistance to coordinate responses across telcos, regulators, and lenders simultaneously. Beware of unofficial “fixers” who approach victims offering to remove the registration for a fee—these are often scams. Stick exclusively to official telco and government channels.

Documents, Offices, and Typical Timelines

Core documents you will need:

Two or more valid government-issued photo IDs
Notarized Affidavit of Denial
Proof of legitimate registrations or alibis
All written correspondence with the telco
Screenshots or notices showing discovery or related harm
For NPC and police filings: additional notarized complaint forms or affidavits

Key offices and contacts:

Your telco’s official fraud/security channels (app, hotline, email, or branch)
NTC: Hotline 1682, consumer@ntc.gov.ph, ntc.gov.ph (complaint section and downloadable forms), or any regional office
NPC: privacy.gov.ph for forms; complaints@privacy.gov.ph
PNP Anti-Cybercrime Group: pnpacg.ph, appropriate hotline or regional unit
NBI Cybercrime Division for complex cases

Realistic timelines: With complete documentation, initial telco acknowledgment and basic action often occur within days to one or two weeks. Full investigations or escalations to NTC or NPC typically take several weeks to a few months, depending on complexity and agency workload. Criminal investigations can extend longer. Start immediately—delays weaken your position and allow more potential misuse.

Costs are generally low: notarization is the main out-of-pocket expense for most people. Official complaints to NTC and NPC are free or low-cost. A lawyer is optional for straightforward cases but highly advisable if you face active investigations, significant harassment, or potential court proceedings.

Frequently Asked Questions

What should I do the moment I discover an unauthorized SIM registered under my name?
Gather your evidence immediately, execute a notarized Affidavit of Denial, and report in writing to the telco(s) first. This creates the official record of non-consent that protects you in all subsequent steps.

Can I be held liable for crimes or loans committed using the fraudulent SIM?
Generally no, provided you promptly document your lack of authorization through an affidavit and reports, and cooperate with authorities. Philippine law and regulators recognize identity theft victims. Quick, well-documented action is your best protection.

How do I know which telco holds the unauthorized registration?
Ask for details from whoever informed you (police or a scam victim). If unknown, report the concern in writing to the major telcos (Globe, Smart, DITO). Your affidavit and supporting evidence will prompt them to check records linked to your identity.

Do I need a lawyer for this process?
Many people successfully handle the initial telco, NTC, and NPC steps themselves with proper documentation. Engage an experienced lawyer if you are under active investigation, facing heavy collection harassment, or dealing with complex multi-agency or court matters.

What if I am an OFW or foreigner living abroad?
You can manage much of the process remotely through email, registered mail, or courier. Have affidavits or Special Powers of Attorney notarized and apostilled at a Philippine embassy or consulate (or authorized notary in a Hague member country). Appoint a trusted representative in the Philippines to handle in-person filings and follow-ups.

Is there a deadline for reporting?
There is no strict statutory deadline, but act as soon as possible. Prompt action strengthens your evidence, limits further harm, and demonstrates good faith to regulators and law enforcement.

What happens to the fraudulent registration after I dispute it?
The telco should investigate, deactivate or suspend the SIM if active, and correct or flag your personal data in their records. Some investigative or audit records may be retained in line with the ten-year retention rule under the SIM Registration Act, but properly annotated with your denial.

Can this affect my credit or future transactions?
It can indirectly if scammers used the SIM to open accounts or loans in your name. Dispute those matters separately with the lenders and credit bureaus while using your SIM dispute documentation to show the fraud. Monitor your accounts closely.

What if the telco claims it cannot change or deactivate the registration?
Insist in writing with your full evidence and escalate immediately to the NTC. Telcos have obligations under both the SIM Registration Act and Data Privacy Act to handle fraud reports and maintain accurate data. Regulators have the authority to direct corrective action.

How can I reduce the risk of this happening again?
Be extremely cautious about sharing clear photos or copies of your IDs. Use app-based two-factor authentication instead of SMS where possible. Monitor your accounts regularly. Register your own SIMs only through verified official channels.

Key Takeaways

Unauthorized SIM registration under your name is identity theft that Philippine law equips you to challenge effectively through telcos, the NTC, the NPC, and law enforcement.
Begin with solid evidence and a notarized Affidavit of Denial—this single document carries substantial weight across all agencies.
Report first to the telco in writing, follow up systematically, and escalate to regulators with complete documentation if needed.
Keep meticulous records of every step, reference number, and communication.
Your prompt, documented actions create a powerful official record of non-consent and significantly reduce any risk of unwarranted liability.
The process works best when you stay organized, persistent, and focused on official channels. Many victims successfully resolve these cases and regain control of their personal information and peace of mind.