An unauthorized loan application can feel frightening because it usually means one of three things: someone used your name or ID to apply for a loan, a lender is treating you as a borrower or guarantor without your consent, or your personal data was pulled from a phone contact list and used in collection messages. In the Philippines, you do not have to simply ignore it or pay just to make the harassment stop. The right response is to preserve evidence, dispute the loan in writing, report to the correct regulator, and correct any credit record before the false loan damages your financial history.

What Counts as an Unauthorized Loan Application?

An unauthorized loan application happens when a person or company uses your personal information for a loan without your valid consent. Common examples include:

Someone used your government ID, selfie, mobile number, or e-wallet account to apply for a loan.
A loan app texted you saying your application was approved even though you never applied.
A collector claims you are a co-maker or guarantor even though you never agreed to guarantee the loan.
A lending app contacted your employer, relatives, or friends about a loan you did not take.
A loan appears in your credit report even though you never signed, clicked, confirmed, or received the loan proceeds.
A scammer used your identity to open or use a bank, credit, or e-wallet account connected to a loan.

A key point: being listed as a character reference is not the same as being a guarantor. A guarantor is someone who expressly agrees to answer for another person’s debt if that person defaults. Government guidance on online lending platforms emphasizes that guarantors must give separate consent before being bound, and lending or financing companies may contact only the guarantor for debt collection—not random people from the borrower’s contact list.

Your Legal Rights Under Philippine Law

Several Philippine laws may apply at the same time. The correct report depends on what happened.

Situation	Main legal basis	Where to report
Loan app or lending company used your data without consent	Data Privacy Act, RA 10173	National Privacy Commission
Lending/financing company or online lending platform used unfair collection practices	RA 9474, RA 11765, SEC rules	Securities and Exchange Commission
Bank, e-wallet, credit card issuer, or BSP-supervised entity allowed an unauthorized transaction	RA 11765, RA 12010	Provider first, then BSP
Someone used your identity online	Cybercrime Prevention Act, RA 10175	NBI Cybercrime Division or PNP Anti-Cybercrime Group
False loan appears in your credit report	Credit Information System Act, RA 9510	Credit Information Corporation dispute process
Forged documents, fake signatures, deception, or falsified loan papers	Revised Penal Code, especially falsification or estafa provisions	Prosecutor, NBI, PNP, or court process
You suffered damage, shame, job problems, or financial loss	Civil Code Articles 19, 20, and 21	Civil action or related claims

Under the Financial Products and Services Consumer Protection Act or RA 11765, financial consumers have rights to fair treatment, disclosure and transparency, protection from fraud and misuse, data privacy, and timely complaint handling. The same law requires financial service providers to maintain a consumer assistance mechanism and allows dissatisfied consumers to elevate complaints to the proper financial regulator. (Supreme Court E-Library)

For lending companies, RA 9474 requires a lending company to be a corporation and prohibits it from conducting lending business unless it has authority to operate from the SEC. It also gives the SEC power to supervise lending companies, require reports, and impose administrative sanctions, including suspension or revocation of authority to operate. (Supreme Court E-Library)

For data privacy, RA 10173 protects personal information and sensitive personal information, including government-issued identifiers. It gives data subjects rights such as access, correction, blocking or removal of unlawfully obtained or outdated data, damages, and the right to file a complaint. Unauthorized processing of personal or sensitive personal information can also carry criminal penalties. (National Privacy Commission)

For online identity misuse, RA 10175 punishes computer-related identity theft, including the unauthorized acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person. (Supreme Court E-Library)

For bank, e-wallet, or financial account scams, RA 12010, the Anti-Financial Account Scamming Act, covers financial accounts such as deposit accounts, credit card accounts, transaction accounts, and e-wallets. It treats using another person’s identity or identification documents to open a financial account as an offense, and it allows institutions to temporarily hold funds in disputed transactions subject to the law and BSP rules. (Lawphil)

First Things to Do Within the First 24 Hours

Do not delete messages, uninstall the app, or block every number immediately. You need evidence.

Take screenshots with timestamps. Capture the app name, sender number, email address, collection message, loan reference number, amount, payment channel, and any threat or demand.
Save the original SMS, email, chat, or call log. Screenshots help, but original messages are better because they show metadata.
Write down a timeline. Include when you first received the notice, whether you ever downloaded the app, whether you submitted any ID, whether money was disbursed, and whether collectors contacted third parties.
Check your bank and e-wallet accounts. Look for unexplained deposits. Some abusive lenders release a smaller amount than advertised and then claim a much larger repayment.
Secure your accounts. Change passwords, activate multi-factor authentication, and report compromised SIMs, email accounts, or e-wallets to the service provider.
Do not admit the debt. Avoid saying “I will pay” or “I borrowed” if you did not. Use clear wording: “I dispute this loan. I did not apply for it, authorize it, receive it, or agree to guarantee it.”
Ask the lender for proof. Request a copy of the loan application, loan agreement, disclosure statement, ID used, selfie or KYC record, consent logs, disbursement account, IP/device record if available, and the basis for treating you as borrower or guarantor.

A simple written dispute can say:

I formally dispute this loan/application. I did not apply for, authorize, receive, or guarantee this loan. Please stop collection activity while this is investigated, provide proof of application and consent, preserve all records, and correct any report made to credit bureaus or the Credit Information Corporation.

Step-by-Step: How to Report an Unauthorized Loan Application

1. Identify the Type of Lender or Platform

Before filing, determine who is behind the loan.

Look for:

exact company name, not just app name;
SEC registration number or Certificate of Authority number;
app developer name in Google Play, App Store, or website;
privacy policy and terms of service;
loan agreement or disclosure statement;
collector phone numbers and email domains;
payment recipient name, GCash/Maya number, bank account, or QR code.

This matters because the SEC handles lending and financing companies, the BSP handles BSP-supervised financial institutions such as banks and e-money issuers, the NPC handles personal data misuse, and law enforcement handles cybercrime and fraud.

2. File a Written Dispute With the Lender or Financial Institution

Under RA 11765, financial service providers must have a financial consumer protection assistance mechanism. If the complaint involves a bank, e-wallet, credit card issuer, or other BSP-supervised financial institution, report first to that provider’s consumer assistance channel. The BSP expects consumers to raise the concern with the institution first before escalating through the BSP Consumer Assistance Mechanism. (Bureau of Small and Medium Enterprises)

Ask for:

confirmation that the loan is under dispute;
suspension of collection, interest, fees, and adverse reporting while investigated;
copies of the application and KYC documents;
deletion or correction of wrong data;
written outcome of the investigation.

RA 11765 specifically provides that, for alleged disputed amounts or unauthorized transactions, a financial service provider should suspend interest, fees, charges, or provide similar reasonable accommodations while its final investigation is pending. (Supreme Court E-Library)

3. Report Lending or Financing Company Abuse to the SEC

Report to the Securities and Exchange Commission if the issue involves:

an online lending platform;
a lending company;
a financing company;
unfair collection practices;
harassment, threats, public shaming, or contacting your employer or relatives;
a company using a loan app without proper SEC recording or authority.

The DICT, NPC, and SEC advisory on online lending platforms directs the public to report unfair debt collection practices to the SEC Financing and Lending Companies Department through the SEC iMessage portal and the 1-4SEC hotline.

Prepare these before filing:

valid government ID;
screenshots of messages, threats, calls, and app pages;
disputed loan reference number;
proof you disputed directly with the lender, if available;
proof you did not receive proceeds, or proof that proceeds went to another account;
names and numbers of collectors;
list of third parties contacted;
any loan agreement, disclosure statement, or collection notice sent to you.

For online filing, use the SEC’s iMessage portal, which allows users to open a ticket and check ticket status. (Securities and Exchange Commission)

4. File a Data Privacy Complaint With the NPC

Report to the National Privacy Commission if the lender, app, collector, or unknown person:

processed your ID, selfie, contact number, address, employer, or references without authority;
accessed your contact list unnecessarily;
messaged your relatives, friends, workmates, or employer;
falsely told others you were a borrower, co-maker, or guarantor;
refused to correct or delete false personal data;
used your personal information for harassment or public shaming.

The NPC complaint process requires a complaint in the proper format; the NPC page instructs complainants to download the form, fill it out, have it notarized, and submit it in person, by courier, or by scanned email to the NPC complaints address. (National Privacy Commission)

The NPC has also publicly acted against online lending practices involving phonebook access, third-party disclosure, harassment, and public shaming. In one decision involving an online lending app, the NPC found criminal liability for unauthorized processing under Section 25 of the Data Privacy Act and referred the matter to the Department of Justice. (National Privacy Commission)

5. Report Identity Theft, Threats, or Fraud to NBI or PNP

Go to cybercrime authorities if there is identity theft, hacking, phishing, fake accounts, forged online applications, threats, extortion, or use of your bank/e-wallet account.

The official 2026 advisory lists the NBI Cybercrime Division, PNP Anti-Cybercrime Group, and DICT Cyber Hotline as reporting channels for harassment, threats, frauds, and scams connected to online lending platforms.

For NBI Cybercrime Division complaints, the NBI Citizen’s Charter describes a process where the complainant proceeds to the Cybercrime Division, undergoes preliminary interview, fills out a complaint sheet, executes sworn statements or submits prepared affidavits, and may submit devices relevant to the probe. The listed processing time for the initial process is about one hour and ten minutes, with no fee stated in the charter. (National Bureau of Investigation)

Bring:

your ID;
phone containing the original messages;
screenshots and printed copies;
URL, app link, email address, or social media account used;
bank/e-wallet account details involved;
notarized affidavit if already prepared;
names and contact details of witnesses or third parties contacted.

6. Escalate Bank, Credit Card, or E-Wallet Issues to the BSP

If the unauthorized loan application involved a bank, credit card, e-wallet, or BSP-supervised financial institution, escalate to the Bangko Sentral ng Pilipinas only after reporting first to the institution.

The BSP Consumer Assistance page says complaints may be filed through BSP Online Buddy, and alternatives include the Complaints, Inquiries and Requests form sent to the BSP consumer affairs email. It also lists the details to include: summary of complaint, requested resolution, contact details, copy of the complaint filed with the institution, the institution’s reply if any, and supporting documents. (Bureau of Small and Medium Enterprises)

BSP escalation is especially important if:

the loan proceeds were sent to an account you do not own;
an e-wallet under your name was used without your consent;
a bank or wallet refuses to investigate;
the institution keeps charging interest after you reported an unauthorized transaction;
a credit card or credit line was opened or used fraudulently.

7. Check and Dispute Your Credit Report

Even if collectors stop, a false loan may still damage your credit record.

The Credit Information Corporation operates an Online Dispute Resolution System for discrepancies in a CIC credit report. The CIC explains that a dispute is meant to resolve erroneous, misleading, incomplete, or outdated credit data appearing in a credit report, and that a person must first acquire a credit report before filing a dispute. The CIC also states that it cannot unilaterally change data and relies on evidence and the concerned submitting entity during the dispute process. (Credit Information Corporation (CIC))

Use the CIC dispute process when:

a loan you did not take appears in your credit report;
the amount, status, or payment history is wrong;
the reporting entity refuses to correct the record;
a rejected loan or unauthorized application affected your credit standing.

Attach your police/NBI/PNP report, lender dispute, SEC/NPC complaint, and proof that the account or disbursement was not yours.

Documents to Prepare

Document	Why it matters
Valid government ID or passport	Proves your identity as complainant
Screenshots with timestamps	Shows collection messages, threats, app notices, or false claims
Original SMS, emails, chats, call logs	Helps investigators verify source and chronology
Loan reference number or account number	Helps the lender/regulator locate the account
Bank or e-wallet transaction history	Shows whether proceeds were received or sent elsewhere
Written dispute to lender/provider	Shows you attempted first-level resolution
Complaint-affidavit or sworn statement	Often needed for NPC, NBI, PNP, or prosecutor action
Credit report	Needed if you are asking CIC to correct a false record
Authority document, if represented by another person	Needed if an OFW, foreigner abroad, or elderly relative asks someone in the Philippines to file

For Filipinos abroad and foreigners dealing with Philippine agencies, affidavits and Special Powers of Attorney may need consular notarization or apostille depending on where the document is executed and where it will be used. Philippine consulates commonly notarize affidavits and powers of attorney for use in the Philippines, while the DFA Apostille system covers authentication of eligible documents. (Philippine Embassy)

Practical Timelines and Bottlenecks

Process	Practical timeline	Common bottleneck
Lender/provider internal dispute	A few days to several weeks	Generic replies or refusal to provide application records
SEC complaint	Varies depending on completeness and respondent	Unknown corporate name behind the app
NPC complaint	Varies; formal complaint must follow required format	Unnotarized or incomplete complaint-affidavit
NBI/PNP cybercrime report	Same-day intake possible; investigation takes longer	No original device, deleted messages, or unclear account trail
BSP escalation	Initial acknowledgment may be quick; referral depends on facts	Consumer did not complain to the financial institution first
CIC dispute	Requires credit report first	Error cannot be corrected without submitting entity response or proof

The biggest mistake is filing vague complaints such as “this app is a scam” without proof. Regulators need names, dates, screenshots, account numbers, app links, phone numbers, and a clear explanation of what was unauthorized.

Common Mistakes to Avoid

Paying a Small Amount “Just to Stop the Calls”

If you did not borrow, paying may be interpreted by the company as recognition of the loan. If you decide to pay for practical reasons, clearly label the payment in writing as under protest and continue disputing the unauthorized account.

Ignoring a False Credit Record

Collectors may disappear, but credit reports can affect later applications for housing loans, car loans, credit cards, or employment-related financial checks. Pull your credit report and dispute the false item through the CIC if it appears.

Filing Only With the Barangay

A barangay blotter may help document harassment by a known person in your area, but it will not usually resolve a corporate lending app, credit reporting error, data privacy violation, or cybercrime. For online lending and identity theft, use SEC, NPC, BSP, CIC, NBI, or PNP as appropriate.

Sending Your ID Again Without Conditions

Many victims send more IDs to “verify” the dispute. If you must submit ID, send it only through official channels, watermark the copy, and state that it is submitted solely for identity verification in the complaint.

Forgetting About Third Parties

If collectors contacted your employer, relatives, or friends, ask those persons to save screenshots and write short statements describing what they received. This helps prove unauthorized disclosure, harassment, and reputational harm.

Frequently Asked Questions

Can I be forced to pay a loan I never applied for?

A person generally cannot be forced to pay a loan merely because a lender says their name or number appears in an application. The lender must prove a valid obligation, consent, identity verification, and release of proceeds. If you did not apply, did not receive proceeds, and did not authorize anyone, dispute the account immediately and ask for proof.

What if I was listed as a guarantor without consent?

Being named in an app is not enough. A guarantor must separately agree to assume responsibility for the debt. The 2026 DICT-NPC-SEC advisory specifically reminds online lending platforms that guarantors must give separate consent before being bound.

Where do I report an online lending app that used my contacts?

Report unfair debt collection to the SEC, personal data misuse to the NPC, and threats or fraud to NBI or PNP. If the app accessed your contact list or messaged people who were not guarantors, that may involve both SEC collection rules and Data Privacy Act issues.

Should I report to the SEC or NPC first?

File with the agency that matches the harm. If the main issue is abusive collection by a lending or financing company, file with the SEC. If the issue is unlawful processing, disclosure, or misuse of your personal data, file with the NPC. Many serious online lending cases justify filing with both.

What if the lender is a bank, credit card company, or e-wallet provider?

Complain first to the bank, card issuer, or e-wallet provider. If unresolved or mishandled, escalate to the BSP Consumer Assistance Mechanism. BSP guidance says consumers may file through BSP Online Buddy or submit the BSP CIR form with the complaint summary, requested resolution, provider complaint, provider reply, and supporting documents. (Bureau of Small and Medium Enterprises)

Can I file a cybercrime case for unauthorized loan applications?

Yes, when the facts show online identity theft, phishing, hacking, fake accounts, fraudulent use of IDs, or electronic threats. RA 10175 covers computer-related identity theft, and NBI/PNP cybercrime units can receive complaints involving digital evidence. (Supreme Court E-Library)

What if a loan appears in my CIC credit report?

Get a copy of your credit report and file a dispute through the CIC Online Dispute Resolution System. The CIC process is for erroneous, misleading, incomplete, or outdated credit data, but the CIC cannot simply change the record on its own without going through the dispute process and the submitting entity. (Credit Information Corporation (CIC))

Do foreigners have remedies in the Philippines?

Yes, if the lender, app, financial institution, transaction, or data processing has a Philippine connection. Foreigners should use their passport, ACR I-Card if available, Philippine address or contact details if relevant, and properly notarized or authenticated documents if filing from abroad.

Can I demand deletion of my data?

You may request correction, blocking, removal, or destruction of personal data that is false, unlawfully obtained, used for unauthorized purposes, outdated, or no longer necessary. The Data Privacy Act recognizes these rights, subject to lawful exceptions such as investigations and legal claims. (National Privacy Commission)

Can I sue for damages?

Possible claims may arise if the unauthorized loan application, data misuse, harassment, or false credit reporting caused actual loss, reputational injury, emotional distress, or financial harm. Civil Code Articles 19, 20, and 21 are commonly relevant because they require people to act with justice, honesty, and good faith and provide liability for wrongful acts causing damage. (Lawphil)

Key Takeaways

Dispute the loan in writing immediately; do not admit the debt if you did not apply or consent.
Save original messages, screenshots, app details, call logs, transaction records, and names of people contacted.
Report lending and collection abuse to the SEC, data privacy violations to the NPC, bank/e-wallet issues to the provider and BSP, cybercrime to NBI or PNP, and false credit records to the CIC.
A character reference is not automatically a guarantor; a guarantor must separately consent to be bound.
Unauthorized use of your ID, selfie, phone number, contact list, bank account, or e-wallet may involve data privacy, cybercrime, financial consumer protection, and civil liability issues.
Correct the credit report, not just the harassment, because a false loan can affect future borrowing and financial reputation.