I. Introduction

Fraudulent SIM registration occurs when a person registers a subscriber identity module, or SIM, using another person’s name, identity documents, personal information, photograph, biometrics, address, or other identifying details without lawful authority. In the Philippine context, this issue sits at the intersection of telecommunications regulation, cybercrime, identity theft, data privacy, consumer protection, criminal law, and digital evidence.

The problem became more legally significant after the passage of the Subscriber Identity Module Registration Act, commonly known as the SIM Registration Act or Republic Act No. 11934. The law requires end-users to register SIMs with covered public telecommunications entities before activation or continued use. While the statute was designed to deter scams, phishing, smishing, cyber fraud, terrorism-related communications, and anonymous criminal activity, it also created a new risk: bad actors may attempt to use another person’s identity to register a SIM and then use that SIM for unlawful conduct.

A SIM fraudulently registered under another person’s name may later be used for text scams, online marketplace fraud, loan app harassment, e-wallet fraud, romance scams, blackmail, phishing, fake delivery notices, unauthorized account recovery, or other crimes. The innocent person whose name was used may suddenly receive complaints, subpoenas, law enforcement inquiries, debt-collection messages, platform bans, or reputational harm. The legal question is not only who used the SIM, but also who unlawfully caused the registration and whether the registered person knowingly participated.

This article discusses the legal framework, possible liabilities, rights of victims, duties of telecommunications providers, evidentiary issues, and remedies available in the Philippines.

II. What SIM Registration Requires

Under the Philippine SIM registration regime, end-users are generally required to provide identifying information when registering a SIM. The details may include the subscriber’s full name, date of birth, sex, address, valid government-issued identification, and other information required under law or implementing rules. Juridical entities, such as corporations or organizations, are subject to separate documentary requirements.

For individual users, SIM registration links a mobile number to a claimed identity. This does not automatically prove that the named person actually used the SIM, personally registered it, or committed acts later associated with it. Registration is an administrative record, not conclusive proof of authorship, possession, intent, or criminal participation. That distinction is crucial.

Fraudulent registration usually happens in one of several ways:

A person uses a stolen or copied government ID to register a SIM.
A person uses another person’s personal data obtained through phishing, leaked databases, social engineering, or document theft.
A person registers multiple SIMs using identities of relatives, employees, customers, students, applicants, or strangers.
A person causes a vendor, agent, or third party to register a SIM under another person’s name.
A person uses edited, forged, or AI-manipulated documents or images.
A person registers a SIM under another’s name with partial consent but uses it beyond the agreed purpose.
A person registers a SIM under a deceased, missing, fictitious, or non-consenting person’s identity.

The core wrong is the unauthorized use of identity and personal information to create a telecommunications account that falsely appears to belong to another person.

III. Main Legal Framework

Fraudulent SIM registration may trigger several Philippine laws, depending on the facts.

A. SIM Registration Act

The SIM Registration Act penalizes false or fictitious information, fraudulent identification documents, spoofing, and other prohibited acts connected with SIM registration and use. A person who registers a SIM using another person’s identity without authority may be liable if the conduct falls within prohibited acts under the law or its implementing rules.

The law is not limited to the person who physically used the phone. Liability may extend to the person who submitted false registration information, procured the registration, sold or transferred a registered SIM in violation of rules, or participated in a scheme to evade identification.

Important legal issues include:

Whether the registrant personally submitted the false information.
Whether the documents used were genuine, forged, stolen, or altered.
Whether the named person consented.
Whether the SIM was later sold, transferred, or used by another person.
Whether the telco followed verification and recordkeeping obligations.
Whether there was conspiracy or participation by a registration agent, retailer, employee, or third party.

The Act is administrative and penal in character. It seeks to create accountability in mobile communications, but it does not eliminate the constitutional requirement of proof beyond reasonable doubt in criminal prosecution.

B. Revised Penal Code

Several offenses under the Revised Penal Code may become relevant.

1. Falsification

If the offender uses falsified public documents, altered IDs, fake certifications, or forged signatures to register the SIM, criminal liability for falsification may arise. Government-issued IDs are public or official documents. Altering or simulating them can be a serious offense.

Falsification may also be relevant if the offender causes a false narration of facts in a document, imitates signatures, makes untruthful statements in official forms, or knowingly uses falsified documents.

2. Use of Falsified Documents

Even if a person did not personally create the fake document, knowingly using a falsified ID or document may still create criminal liability. In fraudulent SIM registration, this may apply when a person submits another person’s forged ID, edited image, or fake authorization.

3. Estafa or Swindling

If the fraudulently registered SIM is used to deceive victims and obtain money, goods, services, loans, digital-wallet transfers, or account access, estafa may be charged. The false SIM registration may be part of the fraudulent scheme, even if the actual damage arises later through text messages, calls, chats, or digital transactions.

4. Identity-Related Deceit

Although the Revised Penal Code does not always use the modern label “identity theft,” traditional offenses such as falsification, estafa, unjust vexation, grave coercion, threats, or libel may apply depending on how the stolen identity is used.

C. Cybercrime Prevention Act

The Cybercrime Prevention Act of 2012, or Republic Act No. 10175, is highly relevant when the fraudulent registration or subsequent misuse involves information and communications technology.

Potentially relevant cybercrime concepts include:

Computer-related identity theft.
Computer-related fraud.
Computer-related forgery.
Illegal access.
Misuse of devices, depending on the conduct.
Cyber libel, if the SIM is used to publish defamatory statements online or through covered platforms.

Computer-related identity theft is especially important where a person knowingly uses another person’s identifying information through a computer system or digital platform. SIM registration portals, telco systems, online identity submissions, and digital records may all form part of the technological environment.

If an act punishable under the Revised Penal Code is committed by, through, or with the use of information and communications technology, it may also carry consequences under the Cybercrime Prevention Act.

D. Data Privacy Act

The Data Privacy Act of 2012, or Republic Act No. 10173, protects personal information and sensitive personal information. A person’s name, address, date of birth, phone number, identification number, photograph, and government ID details are personal data. Some of these may be sensitive personal information.

Fraudulent SIM registration may involve unauthorized processing of personal data. The offender may have collected, used, stored, disclosed, or submitted another person’s personal information without lawful basis.

Possible privacy violations may include:

Unauthorized processing of personal information.
Processing for unauthorized purposes.
Malicious disclosure.
Unauthorized disclosure.
Improper disposal or handling of personal data.
Concealment of a data breach, where applicable.
Negligence by entities that fail to protect personal data.

The Data Privacy Act may be relevant not only against the individual fraudster but also against institutions that mishandle personal data. For example, if a company, lender, employer, school, retailer, or service provider allowed ID copies to be leaked or misused, separate data privacy remedies may exist.

Telecommunications companies are personal information controllers or processors in relation to SIM registration data. They must handle registration information in accordance with data privacy principles such as transparency, legitimate purpose, proportionality, security, retention limits, and lawful disclosure.

E. Access Devices Regulation Act and Financial Fraud Laws

If the fraudulently registered SIM is used to access e-wallets, online banking, credit cards, debit cards, authentication codes, one-time passwords, or other financial accounts, other special laws may become relevant.

The SIM may be used as a tool for account takeover, unauthorized financial transfers, or fraudulent loan applications. In such cases, liability may extend beyond SIM registration offenses and include financial fraud, access-device violations, estafa, cybercrime, or money-laundering-related concerns.

F. Anti-Money Laundering Concerns

When proceeds from scams are transferred through bank accounts, e-wallets, crypto accounts, remittance centers, or money mules, authorities may examine whether the conduct is connected to money laundering. The SIM may serve as a communication or verification tool in a broader laundering scheme.

The innocent identity holder should avoid engaging with suspicious transfers, should not accept money to “verify” accounts, and should not lend SIMs, IDs, or e-wallet accounts to others.

IV. Elements Commonly Involved in Fraudulent SIM Registration

Although the exact elements depend on the specific offense charged, authorities typically examine the following:

A. Use of Another Person’s Identity

There must be some use of another person’s identifying information. This may include the person’s full name, ID number, photograph, address, birth date, signature, selfie, or scanned document.

B. Lack of Consent or Authority

The use must be unauthorized, fraudulent, or beyond the scope of consent. Consent must be real, informed, and specific. A person who lends an ID for one limited purpose does not automatically consent to SIM registration, account creation, loan applications, or digital transactions.

C. False Representation

The offender represents, expressly or impliedly, that the SIM belongs to the named person or that the named person is the actual subscriber.

D. Knowledge and Intent

Criminal liability generally requires proof that the offender knowingly used false information or intentionally participated in the fraudulent registration. Mere clerical error or innocent mistake may not be criminal, though it may still require correction.

E. Damage or Risk

Some offenses require damage, while others penalize the act itself because of the risk it creates. Even without completed financial loss, fraudulent SIM registration can expose the victim to investigation, harassment, reputational injury, and privacy harm.

V. Who May Be Liable?

A. The Person Who Registered the SIM

The primary offender is usually the person who submitted the false information or caused it to be submitted. This includes a person who uploaded another’s ID, used another’s selfie, submitted fake details, or misrepresented authority.

B. The Person Who Used the Fraudulently Registered SIM

The user of the SIM may be liable if they knew or should be proven to have known that the SIM was fraudulently registered, especially if the SIM was used for scams, threats, extortion, harassment, fraud, or other illegal activity.

Possession alone may not always prove knowledge, but possession combined with suspicious circumstances, account logs, messages, transactions, or admissions may support liability.

C. Middlemen, Sellers, Agents, or Recruiters

Some schemes involve people who collect IDs, recruit “registrants,” sell pre-registered SIMs, or offer “verified SIMs” online. These middlemen may be liable for participating in fraudulent registration, data misuse, identity theft, or related crimes.

D. Telco Personnel or Retail Agents

If telco employees, dealers, or registration agents knowingly assist in false registrations, ignore obvious irregularities, accept fake documents, or participate in schemes, they may face criminal, administrative, contractual, employment, and regulatory consequences.

E. Data Source or Leaking Entity

If the identity information came from a data breach or negligent custody of personal documents, a company or organization that failed to secure personal data may face liability under the Data Privacy Act. This does not automatically mean that the breached entity committed SIM fraud, but it may be responsible for the compromise that enabled it.

F. The Named Person

The person whose name appears in the registration is not automatically criminally liable. A SIM being registered under someone’s name is evidence that must be investigated; it is not conclusive proof that the named person registered, possessed, controlled, or used the SIM.

However, the named person may face exposure if evidence shows that they consented, lent their identity, sold their SIM, allowed another person to register in their name, ignored known misuse, or participated in the scheme.

VI. Is the Innocent Identity Holder Liable?

A person whose name was used without consent should not be treated as the offender merely because their name appears in registration records. Philippine criminal law still requires personal responsibility and proof of participation.

The innocent identity holder should be prepared to show:

They did not own, possess, or use the SIM.
They did not submit the registration.
They did not authorize anyone to register the SIM.
Their ID or personal information may have been lost, stolen, leaked, copied, or misused.
They acted promptly upon discovery.
They reported the matter to the telco, law enforcement, or relevant agencies.
They took steps to protect their accounts and personal data.

The key distinction is between being the “registered name” and being the “actual user or fraudulent registrant.” Investigators and courts should examine digital logs, device identifiers, location data, payment trails, account links, CCTV, IP addresses, registration timestamps, uploaded documents, selfies, and other evidence.

VII. Duties and Responsibilities of Telecommunications Companies

Telecommunications companies play a central role in SIM registration. Their duties generally include collecting registration data, verifying submissions according to the law and implementing rules, protecting subscriber data, maintaining records, deactivating improperly registered SIMs when legally warranted, and cooperating with lawful requests from authorities.

A telco may need to act when a person reports that a SIM has been registered in their name without consent. Possible actions include:

Verifying whether the complainant’s identity appears in registration records.
Receiving and evaluating identity theft or fraud reports.
Requiring supporting documents such as affidavits, police reports, or valid IDs.
Temporarily flagging or investigating the SIM.
Deactivating the SIM if fraud is established or if legal grounds exist.
Preserving registration records and logs.
Assisting law enforcement pursuant to lawful process.
Correcting inaccurate personal data where appropriate.
Handling the complaint under privacy and consumer-protection standards.

Telcos must balance fraud prevention, subscriber rights, data privacy, due process, and law enforcement cooperation. They should not casually disclose registration data to private complainants without proper basis, but they should provide lawful channels for victims to report misuse and protect themselves.

VIII. Evidence in Fraudulent SIM Registration Cases

Evidence is often the decisive issue. A complainant should preserve all relevant proof.

A. Registration Records

Registration records may show the name, ID type, ID number, address, registration date and time, uploaded documents, selfie or photo, SIM number, mobile number, and registration channel.

B. Device and Network Data

Authorities may examine device identifiers, network logs, cell-site information, IP addresses, login timestamps, and usage patterns, subject to legal requirements and privacy rules.

C. Messages and Call Records

Screenshots, SMS logs, call logs, messaging app records, and scam communications may show how the SIM was used. Screenshots should be preserved carefully and, when necessary, authenticated.

D. Financial Trails

If the SIM was used for fraud, e-wallet records, bank transfers, remittance receipts, account opening logs, merchant records, and transaction histories may connect the SIM to actual beneficiaries.

E. Identity Documents

The victim should determine whether the ID used was genuine, altered, expired, stolen, or copied from a prior transaction. If a lost ID was involved, reports of loss or replacement may be relevant.

F. Affidavits

An affidavit of denial, affidavit of non-ownership, affidavit of identity theft, or complaint-affidavit may help establish the victim’s position. The affidavit should be specific, factual, and supported by attachments.

G. Police or Cybercrime Reports

Reports filed with the Philippine National Police Anti-Cybercrime Group, National Bureau of Investigation Cybercrime Division, or local police may help document the incident and trigger investigation.

H. Telco Complaint Records

The victim should keep reference numbers, emails, chat transcripts, complaint forms, ticket numbers, and responses from the telco.

IX. Remedies for the Victim

A victim whose identity was used for fraudulent SIM registration may consider several remedies.

A. Report to the Telecommunications Company

The first practical step is often to report the unauthorized SIM registration to the telco. The victim should ask the telco to investigate, flag the number, prevent further misuse, preserve records, and deactivate the SIM if fraud is confirmed.

The report should include:

Full name of the complainant.
Contact details.
Government ID.
Statement that the SIM was registered without consent.
The mobile number involved, if known.
Screenshots or evidence of misuse.
Affidavit of denial or identity theft, if available.
Police or cybercrime report, if already filed.

B. File a Police or Cybercrime Complaint

If the SIM was used for scams, threats, account takeover, harassment, or financial fraud, the victim may file a complaint with law enforcement. The complaint should identify the number, describe the unauthorized use of identity, attach proof, and request investigation.

C. File a Complaint with the National Privacy Commission

If the matter involves misuse, unauthorized processing, or leakage of personal data, the victim may consider filing a complaint with the National Privacy Commission. This is especially relevant when the victim suspects that a company, app, lender, employer, school, marketplace, or service provider mishandled personal data that was later used for SIM registration.

D. Execute an Affidavit of Denial or Identity Theft

An affidavit can help clarify that the victim did not register, own, possess, or use the SIM. It may be submitted to telcos, law enforcement, banks, e-wallet providers, platforms, or courts.

The affidavit should state:

The victim’s identity.
How they discovered the fraudulent registration.
That they did not authorize the registration.
That they did not possess or use the SIM.
That they did not benefit from any transaction connected to it.
Any known loss, theft, leak, or prior submission of ID documents.
Steps already taken to report the incident.
A request for investigation and correction.

E. Request Deactivation or Correction

If the telco confirms unauthorized registration, the victim may request deactivation of the SIM or correction of inaccurate personal data. The telco may require documentation and must comply with applicable law and due process.

F. Notify Financial Institutions and Platforms

If the number was used for account recovery, loan apps, e-wallets, bank accounts, online marketplaces, or social media accounts, the victim should notify those institutions. This reduces the risk of further account takeover or false attribution.

G. Monitor Credit, E-Wallets, and Online Accounts

Fraudulent SIM registration may be part of a broader identity theft scheme. The victim should change passwords, enable authenticator apps where possible, review account recovery numbers, check linked devices, and monitor suspicious transactions.

H. Seek Legal Counsel

Legal counsel may be necessary if the victim receives a subpoena, demand letter, police invitation, collection notice, platform ban, or court document. Counsel can prepare affidavits, communicate with telcos, request records through proper channels, and defend against false accusations.

X. Criminal Complaint Strategy

A criminal complaint should be organized clearly. It may include the following sections:

Identity of the complainant.
Facts showing unauthorized use of identity.
Description of the SIM number and how it was discovered.
Evidence that the complainant did not register or use the SIM.
Evidence of fraud, threats, scams, or other illegal use.
Possible source of compromised personal data.
Specific laws allegedly violated.
List of witnesses and documents.
Prayer for investigation, preservation of evidence, identification of offenders, and prosecution.

The complaint should avoid exaggeration. It should not accuse specific persons unless there is factual basis. Unsupported accusations may expose the complainant to counterclaims.

XI. Possible Defenses

A person accused of fraudulent SIM registration may raise defenses depending on the facts.

A. Consent

The accused may claim that the named person authorized the registration. The strength of this defense depends on proof: written authorization, messages, admissions, witness testimony, or course of dealing.

B. Mistake or Clerical Error

A registration error may occur if a number, name, or document was incorrectly encoded. Not every incorrect registration is criminal fraud.

C. Lack of Knowledge

A person who merely possessed a SIM may argue that they did not know it was registered under another person’s name. This defense weakens if the person acquired a “pre-registered SIM,” used fake documents, or participated in suspicious transactions.

D. No Participation

A named person may argue that their identity was misused and that they had no participation in the registration or subsequent use.

E. Insufficient Authentication of Digital Evidence

Screenshots and digital records must be authenticated. The defense may question whether messages were edited, whether the number was spoofed, whether the accused controlled the device, or whether the records were lawfully obtained.

F. Chain of Custody and Privacy Objections

Digital evidence should be collected and preserved properly. Evidence obtained through unlawful access, privacy violations, or improper disclosure may be challenged.

XII. SIM Registration Is Not Conclusive Proof of Criminal Use

One of the most important principles is that SIM registration records do not automatically establish criminal responsibility. A mobile number registered under a person’s name may be relevant evidence, but courts and investigators must still determine:

Who physically possessed the SIM?
Who controlled the device?
Who sent the messages?
Who received the proceeds?
Who benefited from the crime?
Who registered the SIM?
Was the registration genuine, coerced, mistaken, or fraudulent?
Was the identity holder a victim, participant, or unrelated person?

This distinction protects innocent persons from being treated as criminals merely because their personal data was misused.

XIII. Relationship to “Pre-Registered SIMs”

The sale or distribution of pre-registered SIMs is a major concern. A pre-registered SIM is a SIM already linked to an identity before being sold or transferred to another user. These SIMs may be registered under fake names, stolen identities, recruited identities, or real persons who were paid to lend their information.

Pre-registered SIMs undermine the purpose of the SIM Registration Act. They allow criminals to appear traceable while actually shifting blame to innocent or disposable identities. Buyers of pre-registered SIMs expose themselves to legal risk because they may be using a telecommunications service obtained through false registration.

XIV. Relationship to “Pasalo,” Lending, or Borrowing of SIMs

Some people casually lend SIMs, register SIMs for relatives, or allow others to use numbers registered under their names. This can create serious legal risk.

A person who knowingly allows another to use a SIM registered in their name may later be asked to explain transactions, messages, or accounts connected to that number. While lending a SIM is not always equivalent to committing fraud, it may create exposure if the SIM is used unlawfully or transferred in violation of registration rules.

Best practice is simple: each person should use and control only SIMs properly registered to them, and no one should lend identity documents for SIM registration.

XV. Minors and SIM Registration

Where a SIM is used by a minor, registration may involve a parent or guardian, depending on applicable rules. Fraud concerns may arise if an adult registers a SIM using a minor’s identity without proper authority or uses a minor’s identity to shield unlawful activity.

If a SIM registered in connection with a minor is used for scams or harmful conduct, investigators should examine adult involvement, device control, parental knowledge, and the actual user.

XVI. Foreign Nationals and Juridical Entities

Foreign nationals and corporate subscribers may have different documentary requirements. Fraudulent registration may involve fake passports, visas, alien certificates, business documents, board resolutions, secretary’s certificates, or authorization letters.

For juridical entities, issues may include:

Whether the company authorized the SIM registration.
Whether the employee had authority.
Whether the SIM was used for company business.
Whether the SIM was transferred after employment ended.
Whether corporate documents were forged or misused.
Whether the company maintained proper inventory of corporate mobile numbers.

Companies should maintain internal controls over corporate SIMs, including assignment records, authorized users, return policies, and deactivation procedures.

XVII. Data Privacy Duties of Organizations Holding ID Copies

Many fraudulent SIM registration cases begin with leaked ID documents. Organizations frequently collect ID copies from customers, employees, tenants, students, patients, borrowers, delivery riders, freelancers, and applicants. These organizations must not collect more data than necessary, must secure the data, must limit access, and must dispose of documents safely.

Poor practices include:

Keeping ID photocopies in unsecured folders.
Sharing ID photos through personal messaging apps.
Allowing staff to download IDs to personal phones.
Using public spreadsheets for personal data.
Failing to delete rejected applications.
Asking for selfies and IDs without clear purpose.
Failing to investigate suspected leaks.

If such practices lead to identity misuse, the organization may face privacy complaints and regulatory consequences.

XVIII. Practical Checklist for Victims

A victim who discovers a SIM registered under their name without consent should consider the following steps:

Write down the mobile number involved.
Take screenshots of messages, complaints, notices, or account links.
Do not contact scammers in a way that may compromise safety.
Report the matter to the telco immediately.
Ask for a complaint reference number.
Request investigation, preservation of records, and deactivation if fraud is confirmed.
File a report with the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or local police if the SIM was used for fraud or threats.
Execute an affidavit of denial or identity theft.
Notify banks, e-wallets, lending apps, and platforms if the number is linked to accounts.
Change passwords and remove unknown recovery numbers.
Check whether any ID was lost, stolen, or submitted to a suspicious party.
Consider filing a complaint with the National Privacy Commission if personal data misuse is involved.
Consult counsel if contacted by investigators, creditors, victims, or courts.

XIX. Practical Checklist for Telcos and Registration Platforms

Telcos and registration platforms should strengthen fraud prevention through:

Robust ID verification.
Liveness checks where appropriate.
Duplicate identity detection.
Detection of mass registrations using similar devices or IP addresses.
Fraud analytics for suspicious registration patterns.
Clear victim reporting channels.
Prompt preservation of evidence.
Privacy-compliant disclosure procedures.
Dealer and agent monitoring.
Audit trails for registration activity.
Sanctions for complicit retailers or employees.
Consumer education on identity misuse.
Secure retention and deletion policies.

XX. Practical Checklist for the Public

Members of the public can reduce risk by following these practices:

Do not send ID photos to strangers or unverified pages.
Watermark ID copies when submitting them, indicating the specific purpose and date.
Do not lend IDs for SIM registration.
Do not buy pre-registered SIMs.
Do not sell or rent SIMs, e-wallets, or verified accounts.
Keep SIM cards physically secure.
Report lost phones and SIMs promptly.
Deactivate old or unused SIMs.
Use strong passwords and avoid SMS-only account recovery where possible.
Be cautious with online job offers requiring ID submission before verification.
Avoid posting personal documents online.
Monitor suspicious calls, texts, loans, or accounts opened in your name.

XXI. Civil Liability

Fraudulent SIM registration can also create civil liability. A victim may suffer reputational damage, emotional distress, business loss, time spent clearing their name, legal expenses, or financial harm. Depending on the case, civil claims may arise from quasi-delict, damages arising from crime, breach of privacy, or other civil law principles.

Potential civil defendants may include the fraudster, conspirators, negligent handlers of personal data, or entities whose failure contributed to harm. However, civil liability requires proof of damage, causation, and legal basis.

XXII. Administrative and Regulatory Consequences

Aside from criminal and civil liability, administrative remedies may arise before regulators. Telcos may face regulatory scrutiny for failure to comply with registration, verification, security, or data-protection obligations. Organizations that mishandle personal data may face proceedings before the privacy regulator. Employees involved in misuse of identity documents may face employment sanctions.

Administrative proceedings have different standards and purposes from criminal cases. They may result in orders, fines, corrective measures, or compliance requirements.

XXIII. Common Scenarios

Scenario 1: A SIM Was Registered Using a Lost ID

A person loses a wallet containing a government ID. Months later, they are contacted because a mobile number registered under their name was used in scams. The person should report the identity misuse, show proof of the lost ID if available, deny ownership or use of the SIM, and request telco investigation.

Scenario 2: A Lending App Used an Applicant’s ID

A borrower submits ID documents to a questionable loan app. Later, a SIM is registered under their name and used for harassment or collection messages. The borrower may have claims involving data privacy, unauthorized processing, and identity misuse.

Scenario 3: A Relative Registered a SIM Under Another Relative’s Name

A family member uses another person’s ID to register a SIM “for convenience.” Even without initial criminal intent, this may become legally serious if the SIM is later used for fraud, threats, or debt. Family relationship does not automatically create authority.

Scenario 4: A Person Bought a Pre-Registered SIM Online

A buyer purchases a SIM already activated and registered. The SIM is later traced to a stolen identity. The buyer may face investigation, especially if the SIM was used for suspicious transactions. Buying pre-registered SIMs is legally risky.

Scenario 5: A Company SIM Remains With a Former Employee

An employee leaves but keeps a company-issued SIM. The number is later used for unauthorized business dealings. The company should have deactivation and turnover procedures. The former employee’s authority and post-employment use must be examined.

XXIV. Draft Affidavit Points for Victims

An affidavit of denial or identity theft may contain the following substance:

The affiant’s full identity and address.
A statement that the affiant discovered that a certain mobile number was registered or used under their name.
A categorical denial that the affiant registered, owned, possessed, controlled, or used the SIM.
A statement that the affiant did not authorize anyone to register a SIM using their identity.
A statement identifying any lost, stolen, leaked, or previously submitted ID documents, if known.
A description of how the affiant learned of the fraudulent registration.
A list of attached evidence.
A statement that the affidavit is executed to report identity misuse, request investigation, and protect the affiant’s rights.

The affidavit should be truthful and should not include speculative accusations.

XXV. Important Cautions

First, victims should not ignore the matter. Silence can make later explanations more difficult.

Second, victims should not fabricate evidence or falsely accuse someone out of suspicion. Digital fraud investigations require technical and documentary proof.

Third, a person should not settle with scammers or pay money merely to have their name removed. Payments may encourage further extortion.

Fourth, a person contacted by law enforcement should respond carefully and preferably with counsel, especially if the matter involves alleged fraud or cybercrime.

Fifth, telcos and platforms should not disclose personal data casually to private individuals. Proper legal process may be required for detailed subscriber records.

XXVI. Policy Issues

Fraudulent SIM registration reveals several policy challenges in the Philippine digital environment.

A. Verification Burden

If verification is weak, fake registrations proliferate. If verification is too burdensome, legitimate access to mobile services may suffer. The challenge is to create secure but inclusive verification.

B. Data Breach Risk

SIM registration creates large databases of personal information. These databases must be secured. Otherwise, a law intended to prevent fraud may become a target for identity thieves.

C. False Attribution

A registered name can create a misleading trail. Investigators must avoid assuming that the registered person is automatically the offender.

D. Pre-Registered SIM Market

The existence of pre-registered SIMs weakens the deterrent effect of the law. Enforcement must target sellers, recruiters, complicit agents, and bulk registration schemes.

E. Digital Literacy

The public must understand that IDs, selfies, and SIMs are valuable identity assets. Many people still treat ID photos casually, sending them through insecure channels.

XXVII. Conclusion

Fraudulent SIM registration under another person’s name is not a minor technical violation. It is a gateway offense that can enable cybercrime, financial fraud, harassment, identity theft, and false attribution. In the Philippines, the issue implicates the SIM Registration Act, Cybercrime Prevention Act, Data Privacy Act, Revised Penal Code, financial fraud rules, and civil liability principles.

The most important legal point is that registration under a person’s name is not conclusive proof that the person committed the acts linked to the SIM. It is evidence that must be tested against actual possession, control, consent, registration records, digital logs, financial trails, and surrounding circumstances.

For victims, prompt reporting, documentation, affidavits, telco coordination, law enforcement complaints, and privacy remedies are essential. For telcos and institutions, strong verification, secure data handling, fraud detection, and responsive complaint mechanisms are necessary. For the public, the rule is clear: do not lend your identity, do not buy pre-registered SIMs, and treat personal data as something that can be weaponized.

Fraudulent SIM registration is ultimately a form of identity abuse. The legal system must respond in a way that punishes offenders, protects innocent identity holders, preserves privacy, and ensures that mobile connectivity remains both accessible and accountable.