Finding out that someone used your name, ID, phone number, or selfie to apply for a loan can be frightening. In the Philippines, the most urgent goals are to stop the collection pressure, create a written record that you deny the debt, report the identity theft, dispute any credit record, and prevent the same data from being reused. The loan may be from a bank, credit card issuer, e-wallet, financing company, online lending app, cooperative, or even an unregistered lender. Your next steps should be organized, documented, and fast.

What identity theft in a loan application usually looks like

Loan-related identity theft happens when another person uses your personal information to obtain credit without your authority. It may involve:

A stolen or photographed government ID
A copied selfie, video verification, or e-signature
A SIM card, email address, or phone number registered in your name
A fake employment certificate, payslip, or barangay certificate
A forged signature on a promissory note or loan application
A loan app account opened with your contacts or social media details
A bank, e-wallet, or credit account used to receive the loan proceeds

The practical problem is that the lender’s records may initially show your name as the borrower. That does not automatically mean you owe the money. But you normally have to dispute it properly, because lenders, collection agencies, and credit-reporting systems often rely on what appears in their account records until corrected.

Legal basis: why a fake loan is not simply “your problem”

A valid loan needs your consent

Under Philippine civil law, a contract generally requires consent, object, and cause. Article 1318 of the Civil Code states that there is no contract unless these essential requisites are present. If your signature was forged, your account was created without authority, or you never accepted the loan, the central issue is the absence of your real consent. The Supreme Court has recognized that forgery cannot simply be presumed, so the person alleging it must support the claim with clear and convincing evidence; in practice, this is why your affidavit, documents, screenshots, logs, and comparison signatures matter. (Lawphil)

A lender may still investigate because its system may show KYC data, OTP logs, selfie verification, IP addresses, or disbursement details. Your job is to force the issue into writing: “I did not apply for, receive, authorize, sign, or benefit from this loan.”

Identity theft is a cybercrime when personal information is misused online

Republic Act No. 10175, the Cybercrime Prevention Act of 2012, punishes computer-related identity theft, which includes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person without right. The Supreme Court upheld the constitutionality of this identity theft provision in Disini v. Secretary of Justice. (Lawphil)

This is highly relevant when the loan was taken through an online lending app, website, e-wallet, email, SMS, social media account, or digital onboarding process.

Access device fraud may apply to credit cards, account numbers, e-wallets, and similar credentials

Republic Act No. 8484, the Access Devices Regulation Act of 1998, covers “access devices” such as cards, codes, account numbers, PINs, and other means of account access used to obtain money, goods, services, or value. It also treats an access device as fraudulently applied for when it was obtained using falsified documents, false information, fictitious identities or addresses, or other misrepresentation. RA 8484 was strengthened by RA 11449 in 2019. (Lawphil)

This may apply when the identity theft involved a credit card, online credit line, e-wallet account, virtual card, account number, or loan facility accessed through digital credentials.

The Data Privacy Act gives you rights over false or unauthorized personal data

Republic Act No. 10173, the Data Privacy Act of 2012, gives data subjects rights such as access, rectification, erasure or blocking, damages, and the right to file a complaint. The National Privacy Commission lists these rights, including the right to access, rectify, erase or block, and complain. (Lawphil)

For identity theft cases, this means you can demand that the lender or collection agency:

Tell you what personal data they processed
Identify the source of the data, when available
Correct false borrower information
Stop using unlawfully obtained or inaccurate data
Preserve records needed for investigation
Stop improper disclosure to contacts, employers, or relatives

Credit records can be disputed

Republic Act No. 9510, the Credit Information System Act of 2008, created the Credit Information Corporation (CIC) and recognizes borrowers’ rights to access their credit information and dispute inaccurate credit information. The CIC has an Online Dispute Resolution System for discrepancies found in a CIC credit report. (Credit Information Corporation)

This matters because a fake loan can harm future applications for a mortgage, car loan, credit card, business loan, visa-related financial review, or employment screening.

Financial institutions must have complaint mechanisms

Republic Act No. 11765, the Financial Products and Services Consumer Protection Act, requires financial service providers to maintain a consumer assistance mechanism and gives financial consumers the right to elevate unresolved concerns to the proper regulator. It also requires financial service providers to respect client data privacy, correct inaccurate or deficient data, and suspend interest, fees, or charges or provide reasonable accommodation while investigating alleged unauthorized transactions.

For banks, e-wallets, credit cards, and BSP-supervised entities, the Bangko Sentral ng Pilipinas (BSP) Consumer Assistance Mechanism is a second-level recourse after you first complain to the institution’s own customer assistance channel.

For financing companies, lending companies, and many online lending apps, complaints are usually directed to the Securities and Exchange Commission (SEC). The BSP itself notes that complaints about financing and lending companies, online lending apps or platforms, and their collection agencies are best directed to the SEC.

First 24 hours: what to do immediately

Do not admit the debt. Do not say “I will pay later,” “I borrowed but forgot,” or “Can I get a discount?” if the loan is fake. Use neutral wording: “I dispute this account. I did not apply for or receive this loan.”
Do not delete messages, emails, or call logs. Preserve SMS, Viber, Messenger, WhatsApp, email headers, app notifications, screenshots, caller IDs, and collection letters.
Ask for the lender’s exact identity. Get the company name, SEC registration name, app name, loan account number, amount, approval date, disbursement channel, and collection agency name.
Secure your accounts. Change passwords for email, banking apps, e-wallets, and social media. Turn on multi-factor authentication. Check whether your SIM or email was used for OTPs.
Prepare a simple incident timeline. Write down when you first learned of the loan, who contacted you, what number or email they used, what they demanded, and what you replied.
Do not send fresh copies of IDs casually. If a lender asks for proof of identity, watermark the copy: “For identity theft dispute with [Company] only, [date].” Avoid sending unwatermarked IDs through random collection agents.

Step-by-step guide to clearing your name

Step 1: Demand the loan file from the lender in writing

Send a written dispute to the lender’s official customer service email, fraud department, Data Protection Officer, or complaint channel. If the company uses an app, also send it through the app’s help center, but keep an external email copy.

Ask for:

The full loan application form
Promissory note or loan agreement
Disclosure statement
Copies of IDs submitted
Selfie, liveness check, or video verification records
E-signature record, if any
Mobile number, email address, device ID, IP address, and date/time logs used for application
Bank or e-wallet account where proceeds were released
Name of any collection agency assigned
Credit bureau or CIC submission status
Basis for processing your personal data

Use direct wording:

I formally dispute this account as identity theft. I did not apply for, sign, receive, authorize, or benefit from this loan. Please mark the account as disputed, suspend collection activity and charges while investigating, preserve all onboarding and disbursement records, and correct or remove any false credit reporting.

Step 2: Execute an Affidavit of Denial or Affidavit of Identity Theft

An affidavit is a sworn written statement. It is often required by lenders, police investigators, the NBI, the PNP Anti-Cybercrime Group, the SEC, the BSP, the NPC, or the CIC dispute process.

Your affidavit should state:

Your full name, address, birthdate, and ID details
How you discovered the fake loan
The lender/app/collector involved
The loan account number, if known
A clear denial that you applied, signed, received proceeds, or authorized anyone
Whether your ID, phone, SIM, email, or device was lost, stolen, copied, or compromised
The collection actions taken against you
The documents attached as evidence
A request for investigation, correction, and clearance of your name

Have it notarized. If you are abroad, you may usually execute it before a Philippine Embassy or Consulate, or sign before a local notary and have the document apostilled if it will be used in the Philippines. DFA apostille guidance recognizes notarized instruments and consular notarization for documents executed abroad in certain situations. (Apostille.gov.ph)

Step 3: File a complaint with the proper regulator

Use the regulator that supervises the lender or financial service provider.

Type of institution	Where to complain	What to emphasize
Bank, credit card issuer, e-wallet, remittance or payment provider under BSP supervision	First complain to the institution, then escalate to BSP Consumer Assistance Mechanism if unresolved	Unauthorized account, disputed transaction, failure to investigate, data misuse, refusal to correct records
Financing company, lending company, online lending app, collection agency	SEC	Identity theft, unfair collection, unregistered or abusive lending, harassment, contact shaming
Cooperative lender	Cooperative Development Authority, and sometimes CIC/NPC depending on the issue	False loan record, credit reporting, privacy violation
Data privacy issue involving any lender or collector	National Privacy Commission	Unauthorized processing, disclosure to contacts, refusal to rectify or erase false data
Credit report error	CIC Online Dispute Resolution System	Incorrect loan record in CIC credit report

SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt collection practices by financing companies, lending companies, and their third-party service providers, including threats, harassment, and other abusive collection practices.

Step 4: Report the identity theft to law enforcement

For online or digital identity theft, file with the PNP Anti-Cybercrime Group, the NBI Cybercrime Division, or the Cybercrime Investigation and Coordinating Center (CICC). The BSP’s own complaint guidance tells scam or fraud victims to report to law enforcement agencies such as the PNP, NBI, or CICC because they can conduct formal investigation and apprehension in criminal matters.

Bring or prepare:

Valid ID
Affidavit of Denial or Affidavit-Complaint
Screenshots and printouts of collection messages
Call logs and phone numbers
Emails and full email headers, if available
Loan account details
Copy of the fake loan agreement, if obtained
Proof that proceeds went to an account not yours
Proof of lost ID, lost phone, SIM replacement, or account compromise, if applicable
Any response from the lender

Possible offenses include computer-related identity theft under RA 10175, access device fraud under RA 8484 as amended, estafa under Article 315 of the Revised Penal Code, falsification under Articles 171 or 172, use of falsified documents, and violations of the Data Privacy Act depending on the facts.

Step 5: Get and dispute your credit report

Do not rely only on the lender’s promise that “we will update it.” Check whether the fake loan was submitted to the CIC or appears in a credit report.

The CIC’s Direct-to-Consumer program allows borrowers to obtain a CIC Credit Report through authorized channels, and the CIC Online Dispute Resolution System is used to dispute incorrect, outdated, or missing credit and personal information in the report. (Credit Information Corporation)

When disputing, attach:

Your credit report reference or transaction number
Affidavit of Denial
Lender dispute letter
Police/NBI/PNP/CICC report, if already filed
Regulator complaint reference number, if any
Proof that the disbursement account, phone number, email, or address was not yours

Ask for the account to be tagged as disputed and corrected or removed once confirmed fraudulent.

Step 6: Stop abusive collection without blocking important evidence

Collectors often pressure victims with repeated calls, threats, or messages to relatives. Preserve the evidence first. Then respond once, in writing:

This account is disputed as identity theft. I deny applying for or receiving this loan. Any further collection should be directed to me through written channels only. Do not contact my relatives, employer, neighbors, or phone contacts. Please provide your authority to collect, the name of your principal, and the basis for processing my personal data.

If they continue threatening, shaming, calling late at night, or contacting unrelated people, include those acts in your SEC and NPC complaints.

Step 7: Respond immediately if you receive court papers

If the lender files a small claims case or collection case, do not ignore the summons just because the loan is fake. A court case must be answered through court procedure.

Small claims cases in first-level courts cover money claims up to ₱1,000,000. The Supreme Court’s Rules on Expedited Procedures increased the small claims threshold to ₱1,000,000 and simplified notices and hearing procedures. (Supreme Court of the Philippines)

Your response should attach your affidavit, identity theft reports, dispute letters, credit report dispute, and proof that you did not receive proceeds. If the case involves forgery, fake KYC, or criminal fraud, state those facts clearly and ask the court to dismiss the claim against you.

Documents you should prepare

Document	Purpose	Practical tip
Valid government ID	Proves your identity when disputing	Watermark copies before emailing
Affidavit of Denial / Identity Theft	Main sworn denial of the fake loan	Include dates, account numbers, and attached evidence
Screenshots of messages and calls	Shows collection, threats, or account details	Capture full number, date, and time
Written dispute to lender	Creates paper trail	Send by official email or portal; keep proof of sending
Police, NBI, PNP-ACG, or CICC report	Supports criminal investigation and lender dispute	Ask for reference number or receiving copy
SEC/BSP/NPC complaint reference	Shows regulator involvement	Use the correct regulator based on lender type
CIC credit report	Confirms whether your credit record is affected	Dispute through CIC ODRS if inaccurate
Lost ID/SIM/phone report, if applicable	Helps explain how data was misused	Include telecom or police documents
SPA, if abroad	Lets someone in the Philippines file or follow up	Consular notarization or apostille may be needed

Common mistakes that make identity theft harder to fix

Paying “just to stop the calls”

Paying a fake loan can create confusion later, especially if the lender treats it as acknowledgment. If you decide to pay for practical reasons, insist on written wording that payment is made under protest, without admission of liability, and without prejudice to your identity theft dispute. But in most cases, the better first step is a written dispute, not payment.

Only complaining by phone

Phone calls are hard to prove. After every call, send an email summary: “As discussed today at 2:15 p.m., I disputed the loan as identity theft and requested the loan file.” This creates a record.

Sending a new clean copy of your ID to a collector

Some victims unknowingly give scammers a better copy of their ID. Send documents only to verified official channels. Watermark them.

Ignoring credit reports

Even if collection stops, the fake loan may remain as a defaulted account. This can hurt you months later when you apply for a legitimate loan.

Assuming the police report automatically clears the debt

A police or NBI report is important, but it usually does not automatically erase the lender’s record or CIC submission. You still need to dispute with the lender, regulator, and CIC.

Treating all lenders the same

Banks and e-wallets are usually BSP-supervised. Financing and lending companies, including many online lending platforms, are generally under SEC supervision. A complaint sent to the wrong office may be referred or delayed.

Special situations for OFWs and foreigners

If you are a Filipino abroad

You can still dispute the loan from overseas. Send your dispute by email, execute an affidavit before the Philippine Embassy or Consulate or through an apostilled notarized document, and authorize a trusted representative in the Philippines through a Special Power of Attorney.

Expect bottlenecks with notarization, courier delivery, and time-zone delays. Keep scanned copies, courier receipts, and embassy appointment records.

If you are a foreigner whose Philippine ID or local number was misused

Foreigners may face added verification problems because lenders may ask for passport pages, ACR I-Card details, visa status, or local address history. Provide only what is necessary and watermark copies. If documents are executed abroad for Philippine use, apostille or consular notarization may be required depending on where and how the document will be submitted.

If a relative or friend used your identity

This is common and emotionally difficult. If you did not authorize the loan, state that clearly. A lender may argue that you benefited from the loan if proceeds went to your household or account. Your evidence should show where the money went, who controlled the phone/email/app, and whether you ever consented.

If the lender says the selfie or ID “matches”

Ask for the actual verification file, date and time, device information, mobile number, email, IP address, disbursement account, and reviewer notes. A matching ID image does not prove you personally applied if the ID was stolen, copied, or submitted by another person.

Sample wording for a lender dispute letter

I formally dispute Loan Account No. [account number] under my name as a case of identity theft. I did not apply for this loan, sign any loan document, receive the proceeds, authorize any person to borrow in my name, or benefit from the transaction.

Please mark the account as disputed, suspend collection activity, interest, penalties, and adverse credit reporting while the matter is under investigation, and preserve all records relating to the application, KYC verification, device logs, IP logs, OTP logs, uploaded IDs, selfie or liveness check, e-signature, approval, and disbursement.

Please provide me with copies of the loan application, promissory note or loan agreement, disclosure statement, proof of disbursement, and the basis for processing my personal data. I also request correction, blocking, or removal of inaccurate personal and credit information pursuant to my rights under the Data Privacy Act and applicable financial consumer protection rules.

Frequently Asked Questions

Am I legally required to pay a loan I never applied for?

No, not if you truly did not apply, consent, receive the proceeds, authorize anyone, or benefit from the loan. But you must dispute it properly and preserve evidence because the lender’s system may initially show your name as the borrower.

Should I file with the police, NBI, or PNP Anti-Cybercrime Group first?

If the loan was made online or through digital accounts, the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or CICC is appropriate. You can also send a lender dispute immediately while preparing the criminal complaint. These steps can happen in parallel.

Can a lending app contact my relatives and employer?

Collectors may use lawful means to collect legitimate debts, but harassment, threats, shaming, misleading statements, and abusive collection practices can violate SEC rules, data privacy rules, and other laws. If you are not the borrower and the debt is disputed as identity theft, contacting unrelated people can become a serious privacy and collection issue.

How do I remove a fake loan from my credit record in the Philippines?

Get your CIC Credit Report, identify the false loan entry, then file a dispute through the CIC Online Dispute Resolution System. Also dispute directly with the lender because the lender or submitting entity must correct the data it submitted.

What if I lost my government ID before the fake loan appeared?

Include that fact in your affidavit and attach any police blotter, loss affidavit, replacement request, or relevant proof. A lost ID does not automatically clear you, but it supports your explanation of how your identity may have been misused.

What if the fake loan proceeds went to a bank or e-wallet account not mine?

That is strong evidence. Ask the lender for proof of disbursement and identify the receiving institution, account name, masked account number, date, and reference number. Law enforcement and regulators may be able to request additional account information through proper legal channels.

Can I sue the lender for damages?

Possibly, especially if the lender ignored obvious fraud, refused to correct false data, continued abusive collection, or unlawfully disclosed your personal information. Depending on the facts, remedies may arise under the Civil Code, Data Privacy Act, Financial Consumer Protection Act, and regulator rules.

How long does it take to clear your name?

Simple internal disputes may be resolved in a few weeks, but cases involving online lending apps, multiple collectors, credit reporting, or criminal investigation can take months. The timeline is usually faster when your affidavit, evidence, regulator complaint, and CIC dispute are complete and consistent.

Can I file everything online?

Some disputes and complaints can start online, especially with lenders, BSP channels, SEC portals, NPC email submission, and CIC ODRS. However, affidavits, criminal complaints, and some agency filings may still require notarization, personal appearance, courier submission, or follow-up.

What if the lender is unregistered or I cannot identify it?

Preserve all messages and numbers, then report to the SEC if it appears to be a lending or financing operation, and to law enforcement if there is fraud or identity theft. Also check whether your name appears in a CIC credit report, because unregistered lenders may not report to CIC but may still harass victims.

Key Takeaways

A loan taken through identity theft is not automatically your valid debt; the key issue is whether you truly consented, received proceeds, or authorized the transaction.
Put your denial in writing immediately and ask the lender to mark the account as disputed.
Execute a notarized Affidavit of Denial or Identity Theft and attach concrete evidence.
Report cyber-enabled identity theft to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or CICC.
Escalate to BSP for BSP-supervised institutions and to SEC for lending companies, financing companies, online lending apps, and their collectors.
Use your Data Privacy Act rights to demand access, correction, blocking, or removal of false and unauthorized personal data.
Check your CIC Credit Report and dispute any false loan entry through the CIC dispute process.
Do not ignore court papers, collection letters, or credit report entries just because the loan is fake; respond with documents and a clear paper trail.