Quick answer

If you did not apply for, sign, authorize, receive, or benefit from the loan or credit account, dispute it immediately in writing. As a general rule, a loan cannot bind you without your consent because consent is an essential requirement of a valid contract under the Civil Code. However, the lender may investigate whether the application, electronic acceptance, OTP, signature, device, or disbursement records actually came from you.

Take these steps without waiting for collection calls:

Send a written fraud dispute through the lender’s official consumer-assistance channel.
Ask the lender to mark the account as disputed, stop collection, preserve its records, investigate the application, and correct any adverse reporting.
Secure the email, mobile number, bank account, e-wallet, and IDs that may have been compromised.
Preserve evidence and report the identity theft to law enforcement.
Obtain your CIC Credit Report and dispute any false entry separately.
Escalate unresolved complaints to the correct regulator—usually the BSP, SEC, CDA, or NPC, depending on the lender and the violation.

Do not pay, negotiate a settlement, or describe the account as “my loan” merely to stop collection pressure. Those actions do not necessarily prove liability, but they can complicate the factual record. If you previously shared an OTP, allowed someone to use your account or identity, received the proceeds, or later accepted the transaction, obtain legal advice because the result may depend on those facts.

Report the account to the lender first

Use only contact details published on the lender’s official website, app, statement, or regulator filing. Do not rely on a number or link supplied by an unexpected caller or text message.

Submit the dispute through a channel that produces a record, such as email, an in-app ticket, or an online complaint portal. If you first report by phone, ask for a reference number and follow up in writing the same day.

Your notice should accurately state:

Your full name and safe contact details.
The disputed account number, application number, amount, and date, if known.
That you dispute the entire account because you did not apply for or authorize it.
Whether you received any proceeds or benefit. Do not say that you did not receive the proceeds if money actually entered an account you control.
When and how you discovered the account.
Which personal information, ID, phone number, email address, signature, selfie, or device appears to have been misused.
The action you want the lender to take.
A request for written acknowledgment and a complaint reference number.

Under the Financial Products and Services Consumer Protection Act, regulated financial service providers must maintain a free consumer-assistance mechanism. For an alleged disputed amount or unauthorized transaction, the provider must, while its final investigation is pending, suspend interest, fees, and charges or provide a similar reasonable accommodation. Ask expressly for this protection and for collection activity to be placed on hold.

What to request from the lender

Ask the lender to:

Flag the account as disputed and potentially fraudulent.
Suspend collection, automatic debit attempts, interest, fees, penalties, and adverse reporting while the investigation is pending, as applicable.
Prevent further drawdowns, increases, renewals, or transfers involving the account.
Preserve all application, authentication, disbursement, communications, and collection records.
Correct inaccurate personal and credit information and notify recipients of the correction.
Give you the investigation result and reasons in writing.
Confirm whether it reported the account to the Credit Information Corporation or another credit bureau.
Identify its data protection officer and financial-consumer complaint channel.

Also request reasonable access to records that can establish whether the application was yours, including, where applicable:

The application form, contract, promissory note, and disclosure statement.
Copies of IDs, selfies, signatures, or submitted supporting documents.
The phone number, email address, residential address, employer, and references used.
The date, time, IP address, device information, and authentication history.
OTP issuance and verification records.
Branch, agent, merchant, or online platform involved.
The account, e-wallet, card, or other destination to which proceeds were released.
Call recordings, chats, emails, and collection notes concerning the application.

A lender may lawfully redact third-party information or withhold material protected by security, privacy, or investigation rules. It should still explain its decision and provide the personal information and transaction records you are legally entitled to access.

Suggested dispute language

I dispute the above account in full as an unauthorized account created using my identity. I did not apply for, sign, electronically accept, or authorize this credit account. I did not receive or benefit from its proceeds, except as specifically disclosed below. This notice is not an acknowledgment of the debt.

Please mark the account as disputed and suspected fraud; preserve all application, authentication, disbursement, reporting, and collection records; conduct a documented investigation; suspend applicable interest, fees, charges, collection activity, and adverse credit reporting while the investigation is pending; and provide the final result in writing.

Please also provide reasonable access to the personal data and account-opening records used, identify the destination of the proceeds, correct inaccurate information, and notify the CIC, credit bureaus, collection agencies, and other recipients of any correction.

Edit the statement so every fact is true. Do not use a blanket denial if, for example, the proceeds entered your account or you gave another person access to your phone.

Secure your identity and accounts

An unauthorized loan may indicate that the offender still controls an email address, SIM, device, government-ID image, bank account, or e-wallet.

Immediately:

Change passwords from a device you reasonably believe is safe.
Use unique passwords and enable multifactor authentication.
Sign out unknown devices and revoke unfamiliar app permissions.
Contact your mobile provider if your SIM stopped working, was replaced, or may have been ported.
Notify your bank or e-wallet if the proceeds or related transfers passed through an account in your name.
Review transaction alerts, recovery email addresses, forwarding rules, and linked devices.
Replace or report compromised identification documents through the issuing agency when appropriate.
Warn trusted contacts if the offender is impersonating you.

If suspicious loan proceeds appear in your account, do not spend them and do not return them to instructions supplied by a caller or chat contact. Notify the bank and lender through verified channels and allow them or law enforcement to trace the funds.

Preserve evidence before accounts or messages disappear

Keep original electronic files whenever possible. Useful evidence includes:

Collection texts, emails, call logs, voicemails, letters, and envelopes.
Screenshots showing the full sender, date, time, URL, app name, and account details.
Original emails with full headers.
The lender’s acknowledgment, ticket number, replies, and investigation result.
The disputed contract, statement, credit report, and application records.
Bank or e-wallet statements showing where proceeds did—or did not—go.
SIM-replacement, password-reset, OTP, and device-login notifications.
Copies of the genuine ID or signature allegedly imitated.
A chronological account of what happened and when you discovered it.
Names and statements of witnesses with personal knowledge.
Police, NBI, regulator, and CIC reference numbers.

Do not edit original screenshots, reset a compromised device, uninstall the lending app, or delete messages before preserving relevant evidence. Keep a backup in a secure location. Share only what is necessary and redact unrelated account numbers, passwords, PINs, and IDs when the receiving agency does not require them.

Report the possible crime

Using another person’s identifying information without right may constitute computer-related identity theft when committed through an information and communications system. The statutory provision was sustained by the Supreme Court in Disini v. Secretary of Justice. Depending on the evidence, investigators may also consider fraud, falsification, unlawful data processing, or other offenses. The final legal classification belongs to investigators and prosecutors.

You may report to the NBI Cybercrime Division, the PNP Anti-Cybercrime Group, or an appropriate local police unit. The NBI’s official procedure allows members of the public to file a complaint, undergo an interview, execute a sworn statement, and submit relevant devices and supporting documents. The NBI also maintains an online complaint page.

Bring or securely provide:

A government-issued ID.
Your written chronology.
The lender’s account details and complaint

Quick answer

If you did not apply for, authorize, sign, receive, or benefit from the loan or credit account, it is generally not your debt. A valid contract requires consent; without it, there is ordinarily no enforceable loan contract against you. However, a denial alone may not make the account disappear. You should immediately dispute it in writing, preserve evidence, report the identity theft, and correct any credit record.

Take these steps at the same time:

Send a written fraud dispute to the lender through its official consumer-assistance channel.
Ask the lender to stop collection activity and suspend interest, fees, and charges while it investigates.
Secure your phone number, email, financial accounts, and online identities.
Report the incident to the NBI Cybercrime Division, PNP Anti-Cybercrime Group, or your nearest police station.
Obtain your Credit Information Corporation (CIC) credit report and dispute any false entry.
Escalate unresolved complaints to the proper regulator: BSP, SEC, CDA, or the National Privacy Commission, depending on the provider and violation.

Do not pay, negotiate a settlement, or call the account “my loan” merely to stop collection calls. Those actions may complicate the factual dispute. If you shared an OTP, permitted someone to use your identity, received the proceeds, or later accepted the loan, your legal position may be different and should be reviewed based on the documents.

Why an unauthorized account is generally not your debt

Under Article 1318 of the Civil Code of the Philippines, a contract requires the consent of the contracting parties, a certain object, and a lawful cause. Someone who steals your identity cannot normally create your consent simply by submitting your name, identification card, photograph, forged signature, phone number, or other personal information.

That does not mean every dispute is resolved automatically in the victim’s favor. The lender may rely on an electronic signature, selfie, OTP record, application form, recorded call, disbursement record, or other authentication evidence. The outcome may depend on whether those records are genuine, how the fraud occurred, whether you protected or shared your credentials, and whether you received or used the proceeds.

Using another person’s identifying information without right through a computer system may constitute computer-related identity theft under Republic Act No. 10175. The Supreme Court discussed and upheld that offense in Disini v. Secretary of Justice. Depending on the facts, investigators may also consider estafa, falsification, unauthorized processing of personal data, or other offenses. Let investigators and prosecutors determine the appropriate charge rather than naming a crime conclusively in your complaint.

Report the account to the lender immediately

Use only contact details published on the lender’s official website, app, statement, or regulator record. Do not rely on a phone number or link supplied by an unknown collector or text sender.

Call first if necessary to prevent further releases, but follow the call with an email, portal submission, or letter that creates a dated record. Ask for a complaint or case reference number and keep the acknowledgment.

Your notice should state only facts you can truthfully confirm:

I dispute this account in full as an unauthorized account opened using my identity. I did not apply for, authorize, or sign for this account. I did not authorize anyone to act for me. I did not receive or use its proceeds. Please treat the account as disputed identity fraud, stop collection activity, preserve all application and authentication records, and provide written confirmation of the actions taken.

Edit the statement if, for example, proceeds entered your account but were transferred without your authority. Never deny receiving funds if your records show otherwise; explain exactly what happened.

Request the following relief:

Mark the entire account as disputed and under fraud investigation.
Stop collection calls, demands, automatic debits, endorsements to collectors, and adverse credit reporting while the dispute is investigated.
Suspend interest, fees, and charges or provide an equivalent reasonable accommodation.
Prevent any further drawdown, credit-line use, or release of proceeds.
Correct inaccurate personal and credit information and notify the CIC, credit bureaus, collection agencies, insurers, and other recipients that received the false information.
Give you the final investigation result and reasons in writing.
Provide, subject to lawful security and third-party limitations, copies or details of the application, contract, disclosure statement, signature or electronic acceptance, identification documents used, selfie or video verification, registered phone number and email address, OTP or authentication trail, application date and channel, device or IP records, disbursement destination, and the identity of any branch, employee, agent, or merchant involved.
Preserve relevant logs, recordings, CCTV footage, documents, and communications for law-enforcement, regulatory, or court proceedings.

The Financial Products and Services Consumer Protection Act requires covered financial service providers to maintain a free consumer-assistance mechanism. For alleged disputed amounts or unauthorized transactions, the provider must, pending its final investigation, suspend interest, fees, and charges or give a similar reasonable accommodation.

There is no single consumer-reporting deadline that applies to every unauthorized loan. Report it as soon as discovered because digital logs, CCTV footage, account records, and recoverable funds may become harder to obtain over time.

Secure the accounts that may have been compromised

Identity thieves often reuse the same access. After preserving relevant evidence:

Change the passwords of your email, banking, e-wallet, government, shopping, and social-media accounts, starting with your email.
Sign out unknown devices and revoke unfamiliar app sessions.
Turn on multifactor authentication using a secure method you control.
Ask your mobile provider to investigate unexplained SIM replacement, loss of signal, or account changes. Set or replace the account PIN where available.
Notify your banks and e-wallet providers if financial accounts or cards may be exposed.
Review transaction histories, registered devices, beneficiaries, recovery addresses, and notification settings.
Remove sensitive identity documents from unsecured cloud folders or public messages.
Warn close contacts if criminals are impersonating you, but do not publish additional identification details.

If suspicious proceeds entered your account, do not spend them and do not return them using instructions from a caller or text sender. Contact your bank and the lender through verified channels so the funds and transaction trail can be handled safely.

Preserve evidence before deleting anything

Keep original files where possible, not only cropped screenshots. Preserve:

Collection texts, emails, chat messages, call logs, voicemail, envelopes, and demand letters.
Full email headers and the sender’s address.
The lender’s name, app name, website, account number, claimed balance, opening date, and collector details.
Screenshots showing the URL, date, time, and complete conversation.
Copies of the fraudulent application and identity documents used, if obtained.
Your genuine signatures and relevant identification records for comparison.
Bank and e-wallet statements showing where the proceeds did—or did not—go.
SIM-replacement notices, login alerts, OTP messages, password-reset emails, and unfamiliar-device alerts.
Your CIC credit report and later corrected reports.
Every complaint, acknowledgment, reference number, reply, and follow-up.
A chronological incident log written while events are fresh.
Witness names and, when appropriate, sworn statements.

Avoid editing original files. Store working copies separately and back them up. Do not surrender your only copy of a device or document without obtaining a receipt and understanding how it will be handled.

Make a law-enforcement report

Report suspected identity theft to the NBI Cybercrime Division, the PNP Anti-Cybercrime Group, or the nearest police station. Bring your identification, chronology, lender information, evidence, and complaint reference numbers. Be ready to execute a sworn statement.

The NBI provides an online complaint page and publishes its process for investigative assistance to victims of computer crimes. Its Cybercrime Division may interview the complainant, receive sworn statements, collect supporting documents, and examine a relevant device.

A police blotter entry, complaint affidavit, or NBI report is useful evidence, but it does not by itself cancel the loan, bind the lender, or correct a CIC record. Continue the lender and credit-report disputes separately.

Check and correct your CIC credit report

Even if the lender promises to close the account, check whether it was reported under your name.

Obtain your CIC credit report through an authorized channel, review every lender and account, and use the CIC Online Dispute Resolution System for incorrect credit or personal information.

For the current online process:

You need the report’s 14-digit Transaction Reference Number.
The report must be no more than 30 days old when the dispute is filed.
One TRN may be used for a single filing covering multiple lenders.
Keep the acknowledgment and monitor the email thread with the CIC and lender.
Respond promptly to requests for documents or clarification.

Republic Act No. 9510 gives a borrower the right to dispute erroneous, incomplete, outdated, or misleading credit information. It directs the CIC to investigate and verify disputed information within five working days; information whose accuracy cannot be verified or proven must be deleted, with affected recipients informed of the correction or removal. See the Credit Information System Act.

A CIC dispute corrects information in the public credit registry. It does not replace your complaint against the lender or a criminal, privacy, or court remedy.

Escalate to the proper regulator

First use the lender’s own complaint mechanism unless urgent circumstances require simultaneous reporting. Attach the original dispute, acknowledgment, lender’s response, evidence, and the specific remedy requested.

Provider or issue	Where to escalate
Bank, digital bank, credit-card issuer, BSP-supervised non-bank institution, or other BSP-supervised provider	BSP Consumer Assistance Mechanism
Lending or financing company regulated by the SEC, including complaints involving an online lending platform	SEC iMessage under complaints on financing and lending companies
Loan from a cooperative	The cooperative’s consumer-assistance mechanism, then the Cooperative Development Authority
False or inaccurate CIC credit information	CIC Online Dispute Resolution System
Misuse, unlawful disclosure, failure to correct, or other violation involving personal data	The lender’s data protection officer first, then the National Privacy Commission
Suspected identity theft, falsification, or online fraud	NBI Cybercrime Division, PNP Anti-Cybercrime Group, or the appropriate police unit

For a BSP-supervised institution, BSP guidance requires the consumer to report first to the institution’s Financial Consumer Protection Assistance Mechanism. If the result is unsatisfactory, the complaint may be elevated through the BSP Online Buddy or, where appropriate, by submitting the BSP complaint form and supporting documents. Do not send the BSP your PIN, password, OTP, full card credentials, passbook, passport, or original identification document.

Exercise your data-privacy rights

The Data Privacy Act of 2012 gives you rights to reasonable access, correction of inaccurate personal information, and—when the legal conditions are met—blocking, removal, or destruction of false, unlawfully obtained, or unauthorized personal data. You may also request that previous recipients be informed of the inaccuracy and correction.

Send a written request to the lender or its data protection officer. Identify the inaccurate information and supply enough evidence to verify your identity and substantiate the request. Do not send unnecessary data.

Erasure is not absolute. A lender may lawfully retain some records for regulatory compliance, fraud investigation, legal claims, or other lawful purposes. The practical remedy may be to restrict use of the data, remove the false attribution of debt, preserve the records as fraud evidence, and correct disclosures made to third parties.

If the organization does not take timely and appropriate action, you may file a formal complaint with the National Privacy Commission. Under the NPC Rules of Procedure, as amended, a complainant must ordinarily show that:

The organization was informed in writing of the privacy violation or personal-data breach; and
It failed to take timely and appropriate action, or gave no response within 15 calendar days after receiving the written notice.

The NPC may waive exhaustion requirements for good cause or a sufficiently serious violation or breach. A formal complaint generally requires a verified complaint or completed, notarized complaint-assisted form, supporting evidence, and compliance with the NPC’s filing rules. Current forms, submission options, and fees are available on the NPC formal-complaint page.

Common mistakes to avoid

Reporting only by telephone and keeping no written record.
Paying a “small amount” or accepting a restructuring merely to stop calls.
Signing a waiver, settlement, acknowledgment, or quitclaim before understanding it.
Giving an OTP, password, PIN, recovery code, or remote access to a supposed investigator.
Sending an unredacted ID to an unverified email address or collector.
Deleting messages, uninstalling the lending app, or resetting the device before preserving evidence.
Assuming a police report automatically removes the account.
Disputing only with the collector instead of the lender that created or owns the account.
Ignoring CIC emails or failing to provide requested evidence on time.
Posting complete account numbers, IDs, signatures, or complaint documents on social media.
Making inaccurate blanket statements when some proceeds or authentication events did reach an account you control.

When legal help is urgent

Consult a Philippine lawyer promptly if:

You receive a court summons, subpoena, prosecutor’s notice, or formal demand with a stated deadline.
The lender files a collection, foreclosure, replevin, or small-claims case.
Property, a vehicle, or another asset was used as purported collateral.
Salary deductions, automatic debits, or set-offs are occurring.
Several unauthorized accounts or a large amount is involved.
The lender rejects the dispute despite apparent forgery or conflicting authentication records.
A relative, employee, agent, or someone with permitted access may have used your credentials.
Collectors threaten violence, publish your information, impersonate authorities, or contact your employer and family abusively.
The incident affects immigration, employment, housing, business financing, or an imminent legitimate loan application.
You are being asked to sign an admission, settlement, or release.

Do not ignore official process even when the underlying debt is fraudulent. Respond within the deadline stated in the document and obtain advice on the correct pleading or affidavit.

Frequently asked questions

Do I have to pay an account I never opened?

Generally, no valid loan obligation should arise without your consent. But the account must still be disputed and the evidence examined. Liability can change if you authorized another person, knowingly shared authentication credentials, received or used the proceeds, or later ratified the transaction.

Is an affidavit of denial required?

Not necessarily for the first notice to every lender, but a lender, the CIC, law enforcement, a regulator, or a court may request a sworn affidavit. It can be valuable evidence if it is specific, truthful, and supported by records. Avoid generic affidavits that contain assumptions you cannot personally verify.

Is a police blotter enough to clear my credit record?

No. It documents your report but does not adjudicate the debt or automatically change lender and CIC records. Submit separate written disputes to the lender and CIC.

Can I complain to the NPC immediately?

Usually, you must first notify the responsible organization in writing and allow it to act. If it gives no response within 15 calendar days, or its action is untimely or inappropriate, you may generally proceed. The NPC can waive this requirement in qualifying serious or urgent cases.

What if the lender or collector refuses to provide the application?

Repeat the request in writing, identify your access and correction rights, and ask for the specific reason for any refusal. Some technical or third-party information may be restricted, but the lender should still explain its investigation and the evidence on which it attributes the account to you. Escalate to the appropriate regulator if necessary.

What if the lender is unknown or appears unregistered?

Do not pay through a link or account supplied by the caller. Preserve the demand, verify the entity independently, report suspected illegal lending activity to the SEC, report identity theft to law enforcement, and dispute any CIC entry. A fake collection demand may exist even when no actual loan account was opened.

Should all records be deleted?

Request correction, blocking, and removal of the false debt attribution. Complete deletion may not be appropriate where records must be retained as fraud evidence or for a lawful regulatory or legal purpose. The essential result is that you are not treated or reported as the borrower while necessary evidence remains protected.

What if I discover another unauthorized account later?

Open a separate lender dispute, update your law-enforcement report, and file another CIC dispute using a current report and valid TRN. Recheck your email, SIM, devices, and financial accounts for the common point of compromise.

Official sources

This article provides general legal information, not legal advice or a prediction of any case outcome. Rights and procedures may depend on the provider, documents, authentication evidence, and surrounding facts. Official sources and filing procedures were checked on July 30, 2026.