I. Introduction

Identity theft through unauthorized loan accounts has become a serious legal and financial problem in the Philippines. It usually happens when a person’s name, mobile number, identification card, photograph, signature, address, employer information, bank account details, or other personal data is used without consent to open a loan account, obtain credit, borrow money, or create a financial obligation.

The victim may discover the problem only after receiving collection calls, text messages, demand letters, threats, credit score damage, bank notices, app notifications, or reports from relatives and employers. In many cases, the victim never received the loan proceeds, never signed the loan contract, never downloaded the lending app, or never authorized the transaction.

This situation may involve several areas of Philippine law, including cybercrime, data privacy, consumer protection, banking and lending regulation, obligations and contracts, civil liability, criminal fraud, harassment by debt collectors, and credit reporting. It may also involve several possible respondents: the identity thief, lending company, financing company, bank, collection agency, mobile wallet provider, payment processor, employer, insider, data broker, or platform that negligently processed the fraudulent loan.

The key point is this: a person should not be made liable for a loan he or she did not apply for, did not authorize, did not receive, and did not benefit from. But to protect oneself, the victim must act quickly, preserve evidence, dispute the debt in writing, report the fraud, demand correction of records, and pursue appropriate legal remedies.

II. What Is Identity Theft Through Unauthorized Loan Accounts?

Identity theft through unauthorized loan accounts occurs when someone uses another person’s identity or personal information to obtain a loan or credit facility without authority.

It may involve:

Opening a loan account in the victim’s name;
Applying for a digital loan using the victim’s ID;
Using a stolen SIM, email, or mobile wallet account;
Uploading a fake selfie or manipulated image;
Using a forged signature on a loan document;
Using the victim’s employee ID or payroll information;
Using screenshots of government IDs;
Submitting false employment details;
Using the victim’s relatives as references;
Linking a loan to the victim’s bank, e-wallet, or mobile number;
Taking over the victim’s online account to apply for credit;
Creating a fake account on a lending app;
Using the victim’s contact list for collection pressure;
Reporting the unauthorized debt to a credit bureau.

This may happen through online lending apps, banks, credit card issuers, financing companies, informal lenders, salary loan providers, buy-now-pay-later platforms, e-wallet credit products, cooperatives, pawnshop-related loans, appliance loans, motorcycle or vehicle financing, and other credit providers.

III. Common Forms of Unauthorized Loan Identity Theft

A. Digital Lending App Fraud

A fraudster uses the victim’s personal information to apply for a loan through a mobile lending app. The app may require a selfie, ID card, phone number, contact list access, or e-wallet account. If identity verification is weak, the loan may be approved under the victim’s name.

B. SIM or Mobile Number Takeover

The fraudster gains control of the victim’s SIM card or mobile number, receives one-time passwords, and uses them to open or access loan accounts.

C. Stolen ID Loan Application

A lost or photographed government ID is used to apply for credit. The fraudster may alter the photo, signature, address, or supporting details.

D. Forged Signature Loan

A paper-based loan or financing contract is created using the victim’s forged signature. This may happen in consumer loans, motorcycle loans, appliance loans, salary loans, or cooperative lending.

E. Insider-Assisted Loan Fraud

An employee, agent, loan officer, sales agent, dealer, or third-party processor may use customer documents to create unauthorized loan accounts.

F. Fake Employment or Payroll Loan

The victim’s employment information is used to obtain a salary loan, company-based loan, cooperative loan, or payroll-linked credit product.

G. E-Wallet or Bank-Linked Loan Fraud

The fraudster uses the victim’s mobile wallet, online banking access, or linked bank information to create a loan, cash advance, or credit line.

H. Buy-Now-Pay-Later Fraud

A fraudster uses the victim’s identity to buy goods or services on installment. The victim later receives collection notices for items never purchased.

I. Credit Card or Personal Loan Application Fraud

The victim’s identity is used to apply for a credit card, cash loan, personal loan, or balance transfer facility.

J. Harassment-Based Collection Scheme

Even when the loan is fraudulent, collectors may pressure the victim, relatives, friends, coworkers, or employer to pay. Some collectors may threaten public shaming, criminal charges, arrest, or barangay complaints.

IV. Why Unauthorized Loan Accounts Are Legally Serious

Unauthorized loan accounts create multiple harms:

The victim may be falsely treated as a debtor;
Collection agencies may harass the victim and contacts;
The victim’s credit score may be damaged;
The victim may be denied future loans, credit cards, housing, employment, or business opportunities;
The victim may suffer anxiety, embarrassment, reputational damage, and loss of time;
The victim may face fake criminal threats;
The victim’s personal information may be further circulated;
The victim may need to prove that the transaction was unauthorized;
The fraud may indicate a larger data breach or identity theft network.

Because of these consequences, the victim should not ignore the problem.

V. Applicable Philippine Laws and Legal Concepts

Several Philippine laws may apply depending on the facts.

A. Cybercrime Prevention Act

Identity theft committed through computers, mobile apps, online platforms, electronic communications, or digital systems may fall under cybercrime laws.

Relevant acts may include:

Computer-related identity theft;
Computer-related fraud;
Unauthorized access;
Misuse of devices;
Data interference or system interference;
Cyber-related falsification;
Cyber-enabled estafa or fraud.

If the unauthorized loan was made through an online lending app, mobile wallet, online banking, website, or digital identity system, cybercrime remedies should be considered.

B. Data Privacy Act

Personal information such as name, address, contact number, photo, government ID, signature, biometrics, financial information, and employment details is protected under Philippine data privacy law.

Possible violations include:

Unauthorized processing of personal information;
Processing without valid consent or lawful basis;
Negligent handling of personal data;
Failure to implement reasonable security measures;
Unauthorized disclosure of personal information;
Improper sharing with collectors or third parties;
Excessive collection of contacts or phone data;
Failure to correct inaccurate personal data;
Failure to respond to data subject requests;
Failure to protect sensitive personal information.

Victims may complain to the National Privacy Commission if a lender, platform, collector, employer, or other entity mishandled personal data or failed to correct fraudulent records.

C. Revised Penal Code

Traditional criminal offenses may also apply.

1. Estafa

Estafa may be committed when a fraudster obtains money or property through deceit, false pretenses, or fraudulent representations.

In unauthorized loan fraud, the offender may deceive the lender by pretending to be the victim and receiving loan proceeds.

2. Falsification of Documents

If the offender forged a signature, altered an ID, submitted false documents, or created a fake loan application, falsification may apply.

3. Use of Falsified Documents

A person who knowingly uses forged or falsified documents may be liable even if he or she did not personally forge them.

4. Perjury or False Statements

False sworn declarations, affidavits, or notarized documents used in loan processing may give rise to perjury or related offenses.

5. Unjust Vexation, Threats, Coercion, or Grave Coercion

If collectors or fraudsters use threats, intimidation, public shaming, or pressure tactics, criminal liability may arise depending on the conduct.

D. Civil Code on Obligations and Contracts

A loan is a contract. Consent is essential. If the alleged borrower never consented, never signed, never authorized, and never received the proceeds, the alleged loan may be void or unenforceable against the victim.

Possible civil law principles include:

No consent, no valid contract;
A person is not bound by a forged signature;
Fraud vitiates consent;
An unauthorized act does not create personal liability;
The party alleging the debt must prove the obligation;
Damages may be recovered for bad faith, negligence, abuse of rights, or malicious conduct.

The victim may demand that the lender prove the loan and may dispute liability for lack of consent and identity fraud.

E. Consumer Protection Rules

Borrowers and consumers are protected from unfair, deceptive, abusive, or unreasonable collection practices. Lenders and collectors should not use threats, harassment, false claims, public shaming, or unauthorized disclosure of personal information.

Even if a debt exists, collection must be lawful. If the debt is unauthorized, collection pressure becomes even more problematic.

F. Lending Company and Financing Company Regulation

Lending companies, financing companies, online lending platforms, and similar credit providers are subject to regulation. They may be required to follow rules on registration, disclosure, fair collection, privacy, data handling, customer verification, interest rates, fees, and complaint handling.

A victim may complain if a lending company:

Failed to verify identity properly;
Approved a fraudulent loan despite irregular documents;
Refused to investigate a fraud report;
Continued collecting after notice of identity theft;
Reported the victim to credit bureaus without proper basis;
Harassed the victim or contacts;
Used an unregistered or abusive online lending app;
Shared personal information without authority.

G. Credit Information System and Credit Reporting

Unauthorized loans may appear in credit reports or credit databases. If false, inaccurate, or fraudulent information is reported, the victim may seek correction, dispute, deletion, blocking, or notation depending on the system involved.

A false credit record can cause serious harm. The victim should act quickly to dispute the record with the lender and relevant credit reporting entity.

H. Banking, E-Money, and Financial Consumer Protection Rules

If the unauthorized loan involves a bank, e-wallet, financing app, or supervised financial institution, financial consumer protection rules may apply. The institution may have duties to handle complaints, investigate unauthorized transactions, protect accounts, and correct errors.

Victims may elevate complaints to the appropriate regulator if the institution fails to act.

VI. Who May Be Liable?

Liability depends on evidence. Possible liable parties include:

A. The Identity Thief

The person who used the victim’s identity may be liable for fraud, identity theft, falsification, estafa, data privacy violations, and damages.

B. Accomplices

Persons who helped obtain documents, receive loan proceeds, open accounts, provide fake references, create false records, or launder funds may be liable.

C. Lending Company or Financing Company

The lender may be liable if it negligently approved the loan, ignored red flags, mishandled personal data, failed to verify identity, or continued collection despite notice of fraud.

D. Collection Agency

Collectors may be liable if they harass, threaten, shame, disclose personal information, contact third parties unlawfully, or continue abusive collection despite a fraud dispute.

E. Platform or App Operator

An online platform may be liable for weak identity verification, excessive data collection, unlawful contact harvesting, failure to secure data, or improper processing.

F. Insider or Agent

A sales agent, loan officer, dealer, employee, or outsourced processor may be liable if involved in submitting, approving, or concealing the fraudulent application.

G. Recipient of Loan Proceeds

The person or account that received the proceeds may be liable, especially if linked to the fraud.

H. Data Source

If personal data was leaked or improperly shared by an employer, school, landlord, merchant, government-related processor, or private company, that entity may face liability depending on the facts.

VII. Immediate Steps for the Victim

Step 1: Do Not Admit the Debt

Do not say or write that you owe the loan if you did not authorize it. Avoid statements like “I will pay later” or “Please reduce the interest” because they may be misused as admission.

Use clear language: “I dispute this account. I did not apply for, authorize, receive, or benefit from this loan.”

Step 2: Preserve Evidence

Save and screenshot:

Collection texts;
Calls and call logs;
Emails;
Demand letters;
App notifications;
Account numbers;
Loan reference numbers;
Names of collectors;
Phone numbers used;
Threats or harassment;
Proof that relatives or employer were contacted;
Credit report entries;
Messages from the alleged lender;
Any suspicious logins or OTPs.

Keep originals where possible.

Step 3: Ask for Loan Documents

Demand copies of:

Loan application;
Contract or promissory note;
ID submitted;
Selfie or liveness verification record;
Signature record;
IP address or device record, where available;
Date and time of application;
Mobile number used;
Email used;
Bank or e-wallet account that received proceeds;
Disbursement confirmation;
Consent record;
Data privacy consent;
Collection referral details.

The lender must be able to prove the debt.

Step 4: File a Written Dispute With the Lender

Send a written dispute to the lender’s official email, office, or complaint channel. State that the account is fraudulent and unauthorized. Request suspension of collection, investigation, correction of records, and confirmation that the debt will not be reported or collected from you.

Step 5: Demand Cessation of Harassment

If collectors are calling relatives, friends, coworkers, or employers, demand that they stop unauthorized disclosure and harassment.

Step 6: Report to Authorities

Depending on facts, reports may be made to:

Police cybercrime unit;
National Bureau of Investigation cybercrime division;
Prosecutor’s office;
National Privacy Commission;
Securities and Exchange Commission, for lending or financing company issues;
Bangko Sentral ng Pilipinas, for banks, e-money issuers, or BSP-supervised financial institutions;
Credit reporting or credit information entity;
Barangay, for local harassment or threats;
Court, if civil relief or injunction is necessary.

Step 7: Secure Identity and Accounts

Change passwords, secure email, enable two-factor authentication, check SIM security, monitor bank and e-wallet accounts, and review other loans or accounts that may have been opened.

Step 8: Obtain Clearance or Reports

Where useful, obtain NBI clearance, police clearance, credit report, bank statements, and certifications showing your actual account status or identity.

Step 9: Consult a Lawyer

Legal counsel is especially important if the amount is large, harassment continues, a case is filed, the credit record is damaged, or the lender refuses to correct the account.

VIII. Demand Letter to the Lender

A demand letter should be firm and specific. It may include:

Identification of the disputed loan account;
Statement that the victim did not apply for or authorize the loan;
Demand for copies of all documents and verification records;
Demand to suspend collection while investigation is pending;
Demand to stop contacting third parties;
Demand to delete or correct false records;
Demand to withdraw any credit bureau report;
Reservation of rights to file civil, criminal, administrative, and data privacy complaints;
Request for written confirmation.

The letter should be sent through traceable means, such as email with delivery proof, registered mail, courier, or personal filing with receiving copy.

IX. Complaints Before the National Privacy Commission

The National Privacy Commission may be relevant when personal data is misused, processed without consent, disclosed improperly, or not corrected.

A complaint may be appropriate when:

The lender refuses to provide information about how the victim’s data was processed;
The victim’s ID, selfie, contact list, or phonebook was misused;
Collectors contacted relatives, coworkers, or employer without lawful basis;
The lender disclosed the alleged debt to third parties;
The app harvested contacts excessively;
The lender refused to correct fraudulent data;
The victim’s data was obtained from a leak or unauthorized source;
Sensitive personal information was processed negligently.

Possible remedies may include orders to correct, delete, block, or stop processing personal data, plus administrative penalties or referral for prosecution where appropriate.

X. Complaints Before the SEC Against Lending or Financing Companies

Many lending companies and financing companies are supervised by the Securities and Exchange Commission.

A complaint may be appropriate where a lender or online lending platform:

Uses abusive collection practices;
Publicly shames borrowers;
Contacts third parties improperly;
Refuses to investigate identity theft;
Uses unregistered or unauthorized lending operations;
Fails to disclose loan terms;
Uses deceptive practices;
Charges unlawful fees or interest;
Misuses personal information;
Continues collecting a disputed fraudulent account.

The victim should attach screenshots, call logs, demand letters, proof of dispute, and the lender’s responses.

XI. Complaints Before the BSP for Banks and E-Money Issues

If the unauthorized loan involves a bank, credit card, e-wallet, digital bank, or other BSP-supervised institution, the victim may complain through the institution’s consumer assistance channel and, if unresolved, elevate the complaint to the financial regulator.

Possible issues include:

Unauthorized loan or credit line;
Unauthorized e-wallet disbursement;
Account takeover;
Failure to investigate;
Failure to reverse or block fraudulent transactions;
Unauthorized credit reporting;
Weak authentication;
Mishandling of consumer complaint;
Collection despite fraud dispute.

The victim should provide transaction reference numbers, screenshots, complaint ticket numbers, and proof of unauthorized use.

XII. Criminal Complaint for Identity Theft, Estafa, or Falsification

If evidence shows that someone used the victim’s identity to obtain money, a criminal complaint may be filed.

A. Possible Charges

Depending on the facts, charges may include:

Computer-related identity theft;
Computer-related fraud;
Estafa;
Falsification;
Use of falsified documents;
Perjury;
Unauthorized access;
Illegal access to account;
Threats or coercion;
Grave coercion;
Unjust vexation;
Data privacy-related offenses.

B. Evidence Needed

A complaint-affidavit may attach:

Victim’s affidavit denying the loan;
Copy of the demand letter from lender;
Screenshots of collection messages;
Call logs;
Loan account number;
Lender’s documents;
Proof of forged signature or false ID use;
Proof that proceeds went to another account;
Proof of phone or SIM takeover;
Bank or e-wallet statements;
Credit report showing false account;
Witness affidavits;
Police or cybercrime report.

C. Against Unknown Persons

If the identity thief is unknown, the complaint may initially be against “John Doe” or unknown persons, with available identifiers such as phone number, account number, e-wallet number, device information, email address, IP information, or recipient account details.

XIII. Civil Remedies

Civil remedies may be necessary if the lender continues to collect, reports the debt, or refuses to correct records.

A. Declaration of Non-Liability

The victim may seek a court declaration that he or she is not liable for the unauthorized loan.

B. Annulment or Nullity of Loan Contract

If a loan contract or promissory note was created without consent or through forgery, the victim may seek to have it declared void or unenforceable against him or her.

C. Damages

The victim may claim damages for:

Mental anguish;
Reputational harm;
Lost employment opportunity;
Denied loan or credit;
Time and expenses spent resolving the fraud;
Harassment;
Public shaming;
Unlawful disclosure of private information;
Bad faith collection;
Negligent approval of fraudulent loan.

D. Injunction

If collection harassment, credit reporting, or data processing continues, injunction may be considered to stop harmful acts while the dispute is resolved.

E. Correction or Deletion of Records

The victim may seek correction, blocking, deletion, or rectification of false account records, subject to applicable law and procedure.

XIV. What the Lender Must Prove

A lender claiming that a victim owes a loan should be able to prove:

The victim applied for the loan;
The victim consented to the loan terms;
The victim’s identity was properly verified;
The loan proceeds were released to the victim or to an account authorized by the victim;
The victim received the benefit of the loan;
Required disclosures were made;
The alleged contract is authentic;
The collection amount is correct;
Data processing and credit reporting were lawful.

If the lender cannot show these, the victim has strong grounds to dispute the account.

XV. Burden of Proof in Practical Terms

In court, the party alleging a debt generally must prove the obligation. However, in practice, the victim should still gather evidence to show identity theft.

Useful evidence includes:

Proof that the victim did not own the mobile number used;
Proof that the disbursement account belongs to someone else;
Proof that the victim was elsewhere at the time;
Proof of lost ID or data breach;
Proof of different signature;
Proof of no bank deposit received;
Proof that the email or device was not the victim’s;
Affidavit denying the transaction;
Expert or bank confirmation where necessary.

The more evidence gathered early, the easier it is to stop collection and correct records.

XVI. Unauthorized Loans and Credit Reports

A fraudulent loan may damage a victim’s credit standing. The victim should:

Request a copy of his or her credit report where available;
Identify the fraudulent account;
File a written dispute with the lender and credit reporting entity;
Attach proof of identity theft;
Demand investigation and correction;
Ask for written confirmation of deletion or correction;
Follow up until the record is updated.

If the false account causes denial of housing, employment, bank loan, credit card, or business financing, the victim should preserve proof of the denial for possible damages.

XVII. Collection Harassment

Collection harassment is common in unauthorized loan cases. Some collectors pressure the victim to pay simply to stop the embarrassment.

Abusive practices may include:

Threatening arrest for nonpayment of a civil debt;
Calling the victim repeatedly at unreasonable times;
Calling relatives, friends, coworkers, or employer;
Publicly shaming the victim online;
Sending edited photos or defamatory messages;
Threatening barangay blotter or police action without basis;
Misrepresenting themselves as court officers or police;
Adding unauthorized fees;
Using obscene or insulting language;
Disclosing the alleged debt to third parties;
Threatening to visit the workplace;
Harassing contact list entries.

Even if a debt exists, collection must be lawful. If the debt is fraudulent, the victim should immediately dispute it and document every abusive act.

XVIII. Can a Person Be Imprisoned for an Unauthorized Loan?

Nonpayment of debt alone is generally not a criminal offense. However, fraud, falsification, or deceit may be criminal. In an identity theft situation, the victim is not the fraudster if he or she did not apply for or receive the loan.

Collectors sometimes threaten arrest to pressure payment. A victim should not be intimidated by unsupported threats. If a real subpoena, summons, warrant, or court order is received, it should be verified and addressed promptly with counsel.

XIX. Should the Victim Pay to Stop Harassment?

Generally, paying a debt that one does not owe is risky. It may be interpreted as acknowledgment, encourage further collection, or fail to remove the false record.

If the victim pays under protest due to extreme pressure, the payment should be documented clearly as made under protest and without admission of liability. Legal advice is strongly recommended before making any payment.

The better approach is to dispute the loan in writing, demand proof, report harassment, and seek regulatory or legal remedies.

XX. If the Lender Files a Case Against the Victim

If a lender files a collection case or criminal complaint, the victim should act immediately.

A. In a Civil Collection Case

Possible defenses include:

No consent;
Forged signature;
Identity theft;
No receipt of loan proceeds;
No meeting of minds;
Fraud;
Lack of proof of obligation;
Unfair or abusive terms;
Incorrect amount;
Lack of authority of collector;
Violation of consumer protection or privacy rules.

B. In a Criminal Complaint

If accused of fraud or estafa, the victim should show that he or she did not apply for the loan, did not receive the proceeds, and was the victim of identity theft.

C. Do Not Ignore Summons or Subpoena

Even if the case is baseless, deadlines matter. Ignoring a summons, subpoena, or court notice may cause serious consequences.

XXI. If the Victim’s Relatives or Employer Are Contacted

Contacting relatives, coworkers, or employers may create privacy, harassment, and reputational issues.

The victim should:

Save screenshots and call logs;
Ask relatives or coworkers for affidavits or written statements;
Demand the collector stop contacting third parties;
Report the collector and lender to regulators;
Consider data privacy complaint;
Consider civil damages if reputational harm occurred.

The fact that a person is allegedly indebted is personal financial information and should not be casually disclosed.

XXII. If a Lost ID Was Used

If a lost government ID was used for a loan, the victim should:

Execute an affidavit of loss;
Report the lost ID to the issuing agency if necessary;
File a police report if fraud occurs;
Notify lenders and financial institutions;
Monitor credit reports;
Replace the ID where appropriate;
Keep copies of the affidavit and report for disputes.

A lost ID does not automatically make the victim liable for loans taken by another person.

XXIII. If a SIM Card or Mobile Number Was Used

If a SIM or mobile number was compromised:

Contact the telecom provider immediately;
Request SIM blocking or replacement;
Change passwords linked to the number;
Check email, e-wallet, bank, and loan apps;
Preserve records of unauthorized OTPs;
File reports with police cybercrime authorities where appropriate;
Notify affected lenders or platforms.

Because many loan apps rely on mobile numbers and OTPs, SIM security is critical.

XXIV. If an E-Wallet Was Used to Receive Proceeds

If loan proceeds were sent to an e-wallet not owned or authorized by the victim, the victim should demand disclosure of the receiving account subject to lawful process and investigation.

The victim should ask the lender to preserve:

Disbursement records;
Recipient account number;
KYC records of recipient;
Device and IP logs;
Transaction references;
Withdrawal or transfer records.

The e-wallet provider may need to freeze, trace, or investigate the account if promptly notified and legally allowed.

XXV. If the Fraud Was Done by a Relative, Partner, or Friend

Identity theft may be committed by someone known to the victim. A relative, partner, friend, coworker, or housemate may have access to IDs, phones, signatures, or personal information.

Legal remedies remain available. However, family dynamics may complicate reporting.

Possible remedies include:

Demand for settlement and correction;
Criminal complaint;
Civil damages;
Protection against harassment;
Account security changes;
Recovery of money from the offender;
Affidavits confirming unauthorized use.

The victim should avoid signing documents that assume liability unless fully advised.

XXVI. If the Fraud Was Done by a Loan Agent or Dealer

Some unauthorized loans arise from agents who process appliance, motorcycle, gadget, salary, or cash loans. The agent may submit false documents or forge signatures to earn commission.

The victim should complain against:

The agent;
Dealer or merchant;
Lending or financing company;
Collection agency;
Any employee who approved or facilitated the transaction.

Demand copies of the application, dealer invoice, delivery receipt, identity verification, signature specimen, and disbursement or release documents.

XXVII. If Goods Were Purchased Using the Victim’s Identity

For buy-now-pay-later, gadget financing, appliance loans, or motorcycle financing, the victim should determine:

What item was purchased;
Where it was purchased;
Who received it;
Delivery address;
Delivery receipt signature;
Merchant involved;
Agent involved;
ID used;
Payment history;
CCTV availability;
Device IMEI or serial number, if applicable.

This information can help identify the fraudster.

XXVIII. If the Unauthorized Loan Is From an Online Lending App

Online lending app fraud may involve both identity theft and abusive collection.

The victim should:

Identify the exact app and company behind it;
Check official complaint channels;
Preserve app messages and collection texts;
Demand loan documents and proof of consent;
Demand suspension of collection;
Demand deletion or correction of fraudulent account;
Report abusive collection;
Report data privacy violations;
Monitor whether the app contacted the phonebook;
Avoid installing unknown apps or granting contact permissions.

If the app is unregistered, uses fake names, or hides its operator, reports to enforcement authorities may be necessary.

XXIX. If Multiple Unauthorized Loans Appear

Multiple fraudulent loans may indicate a larger identity theft problem.

The victim should:

File a general identity theft affidavit;
Notify all known lenders;
Request credit reports;
Secure all accounts;
Report to cybercrime authorities;
Replace compromised IDs if necessary;
Check bank and e-wallet activity;
Check email forwarding rules and login history;
Monitor SIM activity;
Inform employer if employment data was misused;
Consider a data privacy complaint if a data breach is suspected.

A single fraudulent loan may be part of a wider scheme.

XXX. Evidence Checklist

A victim should gather:

A. Identity Documents

Valid IDs;
Proof of address;
Signature samples;
Affidavit of loss, if ID was lost;
Proof of current mobile number and email.

B. Dispute Evidence

Written dispute letter;
Proof of sending;
Lender’s reply;
Complaint ticket numbers;
Demand for documents;
Follow-up emails.

C. Collection Evidence

SMS screenshots;
Call logs;
Voice recordings where legally obtained;
Emails;
Demand letters;
Social media messages;
Names and numbers of collectors;
Statements from relatives, coworkers, or employer.

D. Fraud Evidence

Loan documents;
Fake IDs or signatures;
Disbursement records;
Recipient account details;
IP, device, or app logs;
CCTV or delivery records;
Bank or e-wallet statement showing no receipt;
Proof of location when application was made.

E. Damage Evidence

Credit report;
Denied loan application;
Employer notice;
Medical or psychological records, if claiming serious distress;
Expenses for legal help, transportation, notarization, printing, and filing;
Lost income due to the incident.

XXXI. Sample Dispute Language

A victim may write:

I formally dispute the alleged loan account under my name. I did not apply for, authorize, receive, or benefit from this loan. I demand that collection be suspended immediately while the matter is investigated. Please provide copies of all loan application documents, identity verification records, consent records, disbursement records, device logs, and the account that received the proceeds. I also demand that you stop reporting or processing this account as my valid debt and stop contacting third parties regarding this disputed account.

This should be adapted to the facts and sent through official channels.

XXXII. Preventive Measures

To reduce the risk of unauthorized loans:

Do not send ID photos casually;
Watermark ID copies with purpose and date;
Avoid posting IDs, tickets, certificates, or documents online;
Do not share OTPs;
Secure SIM cards;
Use strong passwords;
Enable two-factor authentication;
Avoid installing suspicious lending apps;
Review app permissions;
Monitor bank, e-wallet, and credit accounts;
Report lost IDs immediately;
Keep loan and account records;
Avoid leaving IDs with agents or stores unnecessarily;
Use separate email addresses for financial accounts;
Be careful with public Wi-Fi and phishing links.

XXXIII. Watermarking IDs

When submitting ID copies, a person may place a clear but non-obstructive watermark stating:

Purpose: “For [Company] loan verification only”;
Date;
“Not valid for other transactions”;
Contact number or reference.

This may not completely prevent misuse, but it can help show unauthorized reuse if the ID later appears elsewhere.

XXXIV. Data Subject Rights

A victim has rights over personal data, including the right to be informed, access, object, correct, and seek remedies where personal data is unlawfully processed.

In unauthorized loan cases, the victim may request:

Source of personal data;
Purpose of processing;
Recipients of data;
Copies of records;
Correction of inaccurate data;
Blocking or deletion of fraudulent records;
Cessation of unlawful processing;
Information on automated decision-making, where applicable.

The request should be written and addressed to the lender’s data protection officer or official privacy contact.

XXXV. When to Escalate

Escalation is appropriate when:

The lender ignores the dispute;
Collection continues after notice of fraud;
Contacts are harassed;
Credit records are damaged;
The lender refuses to provide documents;
Threats are made;
The amount is large;
Multiple loans appear;
A summons, subpoena, or demand letter is received;
The fraudster is known;
Sensitive personal data was leaked;
The victim suffers employment or reputational harm.

Escalation may involve regulators, police, prosecutors, courts, or private counsel.

XXXVI. Common Mistakes to Avoid

Victims should avoid:

Ignoring collection notices;
Admitting the debt;
Paying without written reservation;
Deleting messages or call logs;
Failing to ask for loan documents;
Communicating only by phone;
Not reporting harassment;
Waiting until credit is damaged;
Sharing more personal data with unknown collectors;
Installing suspicious apps to “verify” the loan;
Signing settlement agreements without legal advice;
Posting accusations online without evidence;
Assuming an NBI clearance alone resolves the issue;
Not checking whether other accounts were opened;
Failing to secure the compromised SIM, email, or ID.

XXXVII. Frequently Asked Questions

1. Am I liable for a loan I never applied for?

Generally, a person should not be liable for a loan he or she did not authorize, did not consent to, did not receive, and did not benefit from. The lender must prove the obligation.

2. What if my ID was used?

A stolen or copied ID does not automatically make you liable. Dispute the loan, report the misuse, and demand proof of application, consent, and disbursement.

3. What if the lender says the loan was approved using my OTP?

Ask for proof of the OTP transaction, device, IP address, mobile number ownership, disbursement account, and verification records. OTP use may show account compromise, not necessarily valid consent.

4. Can collectors call my relatives or employer?

Collectors should not harass, shame, or improperly disclose personal financial information to third parties. Document the conduct and complain if it happens.

5. Can I be arrested for not paying a fraudulent loan?

Nonpayment of debt alone is generally not a basis for imprisonment. If you receive a real subpoena, summons, or warrant, verify it and consult a lawyer immediately.

6. Should I file a police report?

Yes, especially if there is identity theft, forgery, cyber fraud, account takeover, threats, or repeated harassment.

7. Should I file with the National Privacy Commission?

Consider it if your personal data was misused, disclosed, processed without consent, or not corrected after a valid dispute.

8. Should I file with the SEC?

Consider it if the lender or collector is a lending company, financing company, or online lending platform using abusive or improper practices.

9. Should I file with the BSP?

Consider it if the issue involves a bank, credit card issuer, e-wallet, digital bank, or BSP-supervised financial institution.

10. What if the fraudster is unknown?

You may still report the matter against unknown persons and provide available phone numbers, account numbers, device information, transaction references, and recipient accounts.

11. Can I sue for damages?

Yes, if you can prove bad faith, negligence, harassment, unlawful disclosure, false reporting, or other wrongful acts that caused damage.

12. Can I demand deletion from credit records?

Yes, if the account is fraudulent or inaccurate. File a written dispute with the lender and relevant credit reporting entity.

XXXVIII. Practical Legal Strategy

A strong strategy usually combines several actions:

Dispute the debt in writing with the lender;
Demand proof of the loan, consent, identity verification, and disbursement;
Demand suspension of collection during investigation;
Demand correction of records and prevention of credit reporting;
Document harassment and third-party contacts;
File complaints with the appropriate regulator;
Report cybercrime or fraud to authorities;
Secure accounts and IDs to prevent further loans;
Check credit records for additional unauthorized accounts;
Seek damages or injunction if harm continues.

The correct combination depends on whether the lender is a bank, online lending app, financing company, informal lender, cooperative, merchant, or unknown entity.

XXXIX. Conclusion

Identity theft through unauthorized loan accounts is both a financial and legal emergency. In the Philippines, it may involve cybercrime, estafa, falsification, data privacy violations, consumer protection issues, unlawful debt collection, credit reporting damage, and civil liability.

A victim should immediately dispute the loan, avoid admitting liability, demand proof, preserve evidence, report harassment, secure digital accounts, and seek correction of records. If the lender, collector, or platform refuses to act, complaints may be filed with the appropriate regulator or enforcement agency, and civil or criminal remedies may be pursued.

The most important principle is that a person cannot be treated as a valid borrower merely because someone used his or her name, ID, mobile number, or personal information. A lawful loan requires consent, identity verification, and proof that the alleged borrower received or authorized the proceeds. Where those elements are missing, the account should be disputed, investigated, corrected, and, when warranted, made the basis of legal action.