If someone has used your name, phone number, government ID details, or other personal information to apply for and obtain loans through mobile lending apps without your knowledge or consent, you are a victim of identity theft. This situation often comes to light when aggressive collection calls, text messages, or social media contacts reach you or your family and friends, demanding payment for debts you never incurred or benefited from. It can damage your credit standing, cause emotional distress, and create serious practical problems in daily life.

This article provides clear, practical guidance on your rights under current Philippine law, the specific violations involved, and the exact steps to report the incident, dispute the fraudulent accounts, stop harassment, and protect or restore your credit record. It draws on established procedures used by government agencies when handling these increasingly common cases involving online lending platforms.

What Happens in Identity Theft Through Loan Apps

Perpetrators typically obtain personal data through data breaches, phishing, SIM swapping, or by exploiting apps with weak identity verification. Some lending apps or their agents have been found to harvest phone contact lists without proper consent, then use that data to pressure victims and their networks.

You may discover the problem when:

Unknown loan accounts appear linked to your mobile number or email.
Collectors contact you or your relatives with demands, threats, or shaming messages that may include your photo or ID details.
You receive OTPs or verification messages for apps you never used.
A suspicious loan shows up later on your credit report.

In these cases, the loan contract lacks your valid consent, making it unenforceable against you under basic principles of Philippine contract law.

Your Legal Protections Under Philippine Law

Several laws directly address this form of identity theft and the resulting harassment or credit damage.

Cybercrime Prevention Act of 2012 (Republic Act No. 10175)

Section 4(b)(3) specifically penalizes computer-related identity theft: the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person without right.

This covers exactly the scenario of using your details to open loan accounts or obtain funds. Penalties include imprisonment (prisión mayor in many cases) and fines ranging from ₱200,000 to ₱1,000,000, or both. When committed through information and communications technology, related crimes under the Revised Penal Code carry a penalty one degree higher.

Data Privacy Act of 2012 (Republic Act No. 10173)

Lending apps act as Personal Information Controllers. They must process personal data only with a lawful basis (such as your informed consent), implement security measures, and respect your rights to access, correct, object to processing, and request deletion of your data.

Unauthorized access to or disclosure of your contact list, failure to verify identity properly before granting a loan, or using your data for harassment all violate this law. The National Privacy Commission (NPC) handles complaints and can order data deletion, impose substantial administrative fines (₱500,000 to ₱5,000,000 in serious cases), and refer matters for criminal prosecution.

Revised Penal Code and Other Laws

Using your identity to obtain a loan through deceit constitutes estafa (swindling) under Article 315. Creating or using falsified documents or images for verification may amount to falsification. Aggressive collection tactics involving threats, public shaming, or unjust vexation can violate additional provisions.

You cannot be imprisoned solely for non-payment of a civil debt. The fraudulent nature of the transaction means no valid obligation exists on your part.

Credit Information System Act (RA 9510)

Credit information must be accurate. Fraudulent loans reported to the Credit Information Corporation (CIC) can and should be disputed and corrected.

These laws work together. A single incident of identity theft in a loan app often triggers violations across multiple statutes, giving you several parallel avenues for relief.

Step-by-Step Guide to Reporting and Resolving the Problem

Act quickly to preserve evidence and create an official record. Many victims successfully clear their names by combining several of the following actions.

1. Secure Evidence and Protect Your Accounts Immediately

Take clear screenshots of all messages, calls, app interfaces showing the loan in your name, threats, or shaming posts. Include timestamps and sender details where possible.
Save call logs, text message threads, and any emails.
Note the exact app name, lending company (if identifiable), website or support contacts, and any SEC registration details.
Check your bank and e-wallet accounts for any unexpected credits or debits related to the loan.
Secure your phone, email, and social media accounts. Change passwords and enable two-factor authentication. If you suspect SIM compromise, contact your telecommunications provider immediately to block or replace the SIM and request a report.
Do not engage in conversations that could be interpreted as acknowledging the debt. Avoid phrases like “I’ll pay to stop the calls.”

Organize everything chronologically in a folder (digital and printed copies). This documentation becomes the foundation of every report you file.

2. Send a Formal Written Denial to the Lending App or Company

Email or message the app’s support, compliance officer, or data protection officer (many list these in their privacy policy or app settings).

State clearly:

You did not apply for, authorize, receive, or benefit from the loan.
You are a victim of identity theft.
Demand that they immediately suspend all collection activities, stop contacting third parties, preserve all records (including IP addresses, device information, verification logs, and disbursement details), investigate the matter, and confirm in writing that you have no liability.
Reserve your right to report to PNP, NBI, NPC, SEC, and CIC.

Send via the app’s in-app support, official email, and registered mail or courier if possible. Keep proof of sending and delivery. This letter often prompts faster internal review and provides strong evidence for later complaints.

3. File an Initial Police Blotter

Visit your local police station or barangay hall and request a blotter entry recording the unauthorized use of your identity. This creates an official timestamped record useful for disputes with the app, CIC, and other agencies. Bring your primary ID and basic evidence.

4. Report to the Philippine National Police Anti-Cybercrime Group (PNP ACG)

The PNP ACG is the primary agency for cyber-related identity theft, online fraud, and electronic harassment involving lending apps.

You can report at:

PNP ACG Headquarters at Camp General Crame, EDSA, Quezon City, or
Regional Anti-Cybercrime Units (RACUs) in your area.

Prepare:

Valid government-issued ID (passport for foreigners).
Printed and digital copies of all evidence organized by date or type.
A sworn statement or affidavit detailing the facts (many stations or notaries can help prepare this).
Chronology of events.

They can investigate digital trails, accounts used by perpetrators, and related transactions. Provide any police blotter reference number. Email inquiries may be sent to acg@pnp.gov.ph for initial guidance on filing.

5. Consider Filing with the National Bureau of Investigation (NBI) Cybercrime Division

You may file in parallel or as an alternative, especially for complex cases.

Contact the NBI Cybercrime Division at their Manila office or regional offices. Bring the same set of evidence and a notarized affidavit. They handle investigation of online fraud and identity theft and can coordinate with other agencies.

6. File a Complaint with the National Privacy Commission (NPC)

Most loan app identity theft cases involve data privacy violations. Use this channel if the app failed to verify identity properly, accessed or disclosed your contact list without consent, or refused to correct or delete your data.

Download the latest Complaint-Affidavit Form from the NPC website (privacy.gov.ph). Fill it out completely, have it notarized, attach all your evidence (screenshots, demand letter, police blotter or PNP/NBI reference if available), and submit:

In person at the NPC office in Pasay City,
Via courier, or
By email to complaints@privacy.gov.ph (scanned copy).

The NPC can investigate, issue cease-and-desist orders, require data correction or deletion, award damages in some cases, and refer the matter for criminal prosecution.

7. Dispute the Fraudulent Loan with the Credit Information Corporation (CIC)

If the loan appears on your credit report, it can affect future loan applications, credit cards, or employment checks.

First, obtain your credit report through the CIC website (creditinfo.gov.ph) or accredited credit bureaus. Then use the CIC Online Dispute Resolution System (ODRS) at creditinfo.gov.ph/dispute/.

You will need the Credit Report Transaction Reference Number from your report. In the dispute form:

Identify the specific loan or contract as fraudulent or not yours.
Indicate it resulted from identity theft.
Upload supporting documents (police report or blotter, your affidavit of denial, evidence of non-receipt of proceeds, and any PNP/NBI or NPC reference numbers).

The system is designed for straightforward resolution of erroneous information. Follow up on the status and request an updated report once resolved.

8. Additional Reports if Needed

Securities and Exchange Commission (SEC): For abusive collection practices or if the lending company appears unregistered or operating illegally.
Bangko Sentral ng Pilipinas (BSP): If the matter involves a bank, e-wallet, or payment service provider.
eGovPH app e-Report feature: For initial scam reporting in some cases.

You can pursue several channels at the same time. A police or NBI report often strengthens your NPC and CIC filings.

Common Challenges and Realistic Expectations

Tracing perpetrators can be difficult when they use virtual numbers, VPNs, or multiple e-wallet accounts. However, the goal for most victims is not necessarily an immediate arrest but to create an official record that protects you from liability and forces the app or collectors to stop.

Some apps delay responses or claim they verified identity properly. Persistent written follow-up combined with an official police report or NPC complaint usually moves things forward. Harassment that continues after you have formally denied the debt and reported it can itself become additional evidence of violations.

For Filipinos abroad or foreigners dealing with Philippine matters: You can often begin the process by email with scanned documents. For formal affidavits or complaints that require notarization, execute them before a Philippine consular officer at the nearest embassy or consulate. A Special Power of Attorney (SPA) notarized and, if executed abroad, apostilled under the Apostille Convention, can authorize a trusted relative or lawyer in the Philippines to file reports on your behalf. Many agencies accept well-documented email submissions with supporting scans as a starting point.

Expect timelines to vary. Initial agency acknowledgments may come within days or weeks. Full investigations and credit corrections can take one to several months depending on complexity and agency workload. Consistent follow-up (politely referencing your reference or case numbers) helps.

Document every interaction with agencies and the lending company. This protects you and demonstrates good faith.

Required Documents (Core Set for Most Reports)

Primary government-issued photo ID (passport, driver’s license, UMID, or PhilID; passport for most foreigners).
Screenshots and printouts of all relevant messages, app screens, and threats (with visible dates/times).
Call logs or recordings (where legally obtained).
Notarized Affidavit of Denial or Sworn Statement detailing the facts and your lack of involvement.
Proof you did not receive loan proceeds (bank or e-wallet statements/certifications).
Any previous blotter or telco reports.
Copies of your dispute letter to the app.

Notarization typically costs a few hundred pesos per document. Most reporting channels themselves have no or minimal filing fees.

Frequently Asked Questions

Can I be held legally or financially liable for a loan taken out in my name without my consent?
No. A valid contract requires your free and informed consent. Identity theft vitiates consent, so the obligation does not bind you. Official reports and your affidavit of denial create the record that protects you from collection efforts and credit damage.

Should I pay anything to stop the collection calls?
No. Payment can be misinterpreted as acknowledgment of the debt. Continue denying liability in writing and escalate through official channels instead.

How long does it take to clear my name and credit record?
It varies. Many victims see collection activity stop or significantly reduce within weeks after submitting a police report and formal denial to the app. Credit report corrections through CIC’s dispute process typically resolve within the agency’s standard timelines once complete documentation is provided. Full investigations by PNP or NBI can take longer.

What if the lending app ignores my dispute letters or continues harassing my contacts?
Document everything and report immediately to the NPC (for data privacy and disclosure violations) and PNP ACG (for continued electronic harassment). Reference your prior dispute and any police blotter in new complaints.

Do I need a lawyer to file these reports?
Not necessarily for initial reports to PNP, NBI, NPC, or CIC. Many people successfully handle these themselves with organized evidence. However, if the amounts are large, harassment is severe, your credit is heavily damaged, or you want to pursue civil damages or a writ of habeas data, consulting a lawyer experienced in cybercrime or data privacy cases is advisable.

Can foreigners or overseas Filipinos file these complaints?
Yes. Start with email submissions supported by scanned evidence and a consular-notarized affidavit where required. A properly executed Special Power of Attorney allows someone in the Philippines to file in person on your behalf.

Will filing a report automatically remove the loan from my credit report?
No, but it provides the key evidence you need to dispute it successfully through CIC’s Online Dispute Resolution System. Attach the police or NBI reference and your affidavit.

What if my family or friends are being contacted and shamed?
This strengthens your case. Preserve those messages as evidence of unauthorized disclosure of personal information and possible defamation or unjust vexation. Include them in your NPC and PNP reports.

How do I check whether other fraudulent accounts exist in my name?
Request your credit report from CIC or accredited bureaus. Monitor your email, phone, and important accounts regularly. Consider placing fraud alerts or additional monitoring if available through your bank or credit providers.

Key Takeaways

You are protected by specific provisions in RA 10175 (computer-related identity theft), RA 10173 (data privacy), the Revised Penal Code (estafa and related offenses), and credit reporting laws. You are not liable for fraudulent loans.
Document everything immediately and send a formal written denial to the lending app or company first.
Report to the PNP Anti-Cybercrime Group (primary for cyber identity theft and fraud) and consider parallel complaints with the NBI, NPC (for data privacy violations), and CIC (for credit record correction).
Combine channels: a police report plus NPC complaint plus CIC dispute is often the most effective approach in practice.
Preserve evidence of harassment, especially contact list disclosures, as these are strong indicators of data privacy violations.
Act methodically and follow up. Official records created through these processes protect you from liability and help stop collection abuse.
If you are abroad, use consular notarization and consider a Special Power of Attorney for in-person filings in the Philippines.

Taking these steps restores control and creates the documentation you need to move forward. Many victims in similar situations have successfully cleared their names and stopped the harassment by following organized reporting procedures.