In an increasingly digitized financial landscape, identity theft—specifically the unauthorized use of personal data to secure loans—has become a prevalent threat. In the Philippines, this falls under a complex intersection of cybercrime, data privacy, and consumer protection laws.

If you discover that your identity has been used to apply for credit without your consent, immediate and systematic legal action is required to mitigate financial damage and clear your name.

I. The Governing Legal Framework

Several key Republic Acts (R.A.) provide the basis for prosecution and protection:

R.A. 10175 (Cybercrime Prevention Act of 2012): This is the primary legislation. Section 4(b)(3) specifically penalizes Computer-related Identity Theft, which involves the intentional acquisition, use, or transfer of identifying information belonging to another person without right.
R.A. 10173 (Data Privacy Act of 2012): This law protects the fundamental human right to privacy. Unauthorized processing of personal information and security defaults that lead to data breaches are actionable offenses.
R.A. 9510 (Credit Information System Act): This governs how your credit data is handled and gives you the right to dispute erroneous information in the Credit Information Corporation (CIC) database.
R.A. 11765 (Financial Products and Services Consumer Protection Act): A newer law that grants the Bangko Sentral ng Pilipinas (BSP) and other regulators expanded powers to protect consumers from fraudulent financial schemes and unfair collection practices.

II. Immediate Remedial Steps

The moment you become aware of an unauthorized loan, you must establish a "paper trail" to prove you are the victim and not the delinquent borrower.

Notify the Financial Institution: Contact the bank or lending company immediately. Demand a "Hold" or "Freeze" on the account. Submit a formal written notice stating that the loan is fraudulent and that you did not authorize the application.
Report to the Credit Bureaus: Reach out to the Credit Information Corporation (CIC) and major credit bureaus (like TransUnion Philippines). Request a credit report to see if there are other unauthorized loans in your name and file a formal dispute to prevent your credit score from being destroyed.
Change Credentials: Secure all digital touchpoints. Change passwords for your email, social media, and online banking apps. Enable Two-Factor Authentication (2FA).

III. Formal Legal Actions

To seek justice and permanent resolution, you must engage with the relevant government authorities.

1. Filing a Police Report and Sworn Affidavit

Go to the nearest police station or the PNP Anti-Cybercrime Group (PNP-ACG). You will need to execute a Sworn Affidavit of Identity Theft. This document is crucial as it serves as your primary evidence when dealing with banks and courts.

2. Reporting to the National Privacy Commission (NPC)

If the identity theft resulted from a data breach (e.g., a leaked database from a provider), file a formal complaint with the NPC. They can investigate the entity that failed to protect your data and impose significant fines.

3. Engaging the Bangko Sentral ng Pilipinas (BSP)

If the lending institution is a bank or a BSP-supervised financial institution and they are uncooperative or continue to demand payment for the fraudulent loan, escalate the matter to the BSP Consumer Protection and Market Conduct Office (CPMCO).

4. The National Bureau of Investigation (NBI)

For complex cases involving organized syndicates, the NBI Cybercrime Division is the appropriate venue for a deeper forensic investigation into the origin of the unauthorized application.

IV. Civil and Criminal Liabilities

The perpetrator, if caught, faces severe penalties:

Criminal Penalties: Under the Cybercrime Prevention Act, identity theft is punishable by prision mayor (6 to 12 years imprisonment) or a fine of at least ₱200,000, or both.
Civil Indemnity: You may file a separate civil case for Damages (Moral and Exemplary) under the Civil Code of the Philippines. This compensates for the mental anguish, tarnished reputation, and the time/money spent rectifying the situation.

V. Key Evidence to Collect

Keep a dedicated file of the following:

Screenshots of unauthorized transactions or loan confirmation emails.
Copies of all correspondence with the lending company.
Government-issued IDs (to prove the signature on the loan doesn't match yours).
Call logs or recordings (where legal) of interactions with debt collectors.

Summary of Rights

Under Philippine law, you have the Right to Dispute inaccurate credit information and the Right to Erasure of data that was processed unlawfully. Do not be coerced into paying even a "small portion" of a fraudulent loan, as this can be interpreted as an admission of the debt's validity. Staying vigilant and acting swiftly are your strongest defenses against the long-term effects of identity theft.