I. Overview

Using another person’s name, identity, documents, signature, mobile number, online account, or personal information to apply for a loan without that person’s consent is a serious matter in the Philippines. It may give rise to criminal liability, civil liability, data privacy violations, and possible administrative consequences for financial institutions, lending companies, collection agencies, and online lending platforms.

The core wrong is simple: a person is being made to appear as a borrower, co-borrower, guarantor, reference, or applicant without permission. This can damage the victim’s credit reputation, expose them to harassment by collectors, create false debt records, and cause emotional, financial, and legal harm.

Depending on the facts, the act may involve estafa, falsification, identity theft, computer-related fraud, unauthorized processing of personal information, cybercrime, fraudulent use of documents, and violations of consumer-protection and lending regulations.

This article discusses the Philippine legal implications of applying for a loan using someone else’s name without consent.

II. Common Scenarios

This issue may arise in several ways:

A person uses another person’s valid ID, photo, signature, or personal details to apply for a loan.
A relative, friend, partner, employee, or co-worker applies for a loan using the victim’s name.
A person lists someone as a co-maker, guarantor, co-borrower, or reference without consent.
A scammer obtains copies of IDs and uses them for online loans.
A person uses a victim’s SIM card, email address, phone number, e-wallet account, or online banking details to borrow money.
A lending app accesses contacts and starts demanding payment from people who never agreed to be involved.
A fake account is created using the victim’s identity.
A forged signature is placed on a promissory note, loan agreement, disclosure statement, or authorization form.
A person submits false employment, income, address, or identity details in another person’s name.
A company or agent processes a loan despite obvious inconsistencies or without proper verification.

The legal consequences depend on what exactly was done, what documents were used, whether money was released, whether electronic systems were involved, and whether personal data was misused.

III. Is the Victim Liable for the Loan?

As a general rule, a person is not liable for a loan they did not apply for, authorize, sign, ratify, or benefit from.

A valid loan obligation requires consent. Under Philippine civil law principles, a contract generally requires:

consent of the parties;
object certain; and
cause or consideration.

If the supposed borrower never gave consent, the alleged loan contract may be unenforceable or void as to that person. A forged signature or unauthorized use of identity does not ordinarily bind the victim.

However, practical problems may arise. The lender may still record the loan under the victim’s name, send collection notices, report the account to internal systems, or attempt to collect. The victim should act quickly to dispute the loan in writing, demand proof of consent, and preserve evidence.

The victim should not casually acknowledge the debt, make partial payments, or sign restructuring documents unless properly advised, because those acts may later be argued as ratification or admission.

IV. Possible Criminal Offenses

A. Estafa

Applying for a loan using another person’s name may constitute estafa if deceit or fraudulent means were used to obtain money, credit, goods, or financial accommodation.

Estafa may arise when the offender misrepresents identity, authority, consent, or capacity to borrow. For example, if a person pretends to be the victim and obtains loan proceeds, the lender is deceived into releasing money. The victim may also suffer harm because their name and credit standing are compromised.

Potential complainants may include:

the victim whose identity was used;
the lending company or financial institution deceived into releasing funds;
another person who paid or was pressured to pay because of the fraudulent loan.

Estafa focuses on deceit and damage. If the loan proceeds were released because of the false representation, criminal liability may arise.

B. Falsification of Documents

If the offender forged a signature, altered documents, fabricated IDs, used false certifications, or made it appear that the victim signed or consented, the act may involve falsification.

Falsification may apply to public, official, commercial, or private documents depending on the document involved. Loan agreements, promissory notes, disclosure statements, authorization forms, employment certificates, payslips, bank records, IDs, and digital forms may become relevant evidence.

Examples include:

signing the victim’s name on a loan application;
forging a co-maker or guarantor signature;
submitting a fake authorization letter;
altering a government ID;
using a fabricated certificate of employment;
making it appear that the victim consented to data processing;
submitting a false selfie, photo, or digital verification image.

If falsification was used to obtain money, the facts may support both falsification and estafa, depending on the circumstances.

C. Identity Theft and Cybercrime

When the act is committed through electronic means, online platforms, mobile apps, email, websites, digital signatures, e-wallets, online banking, SIM-based verification, or other computer systems, cybercrime laws may become relevant.

Possible cyber-related offenses may include:

identity theft;
computer-related fraud;
computer-related forgery;
unauthorized access;
misuse of electronic data;
illegal interception or unauthorized use of accounts;
use of another person’s credentials or personal information online.

Online loan fraud is often not merely a private debt issue. It may be a cybercrime when the offender used digital systems to impersonate the victim or submit false electronic records.

D. Unauthorized Use or Processing of Personal Information

The Data Privacy Act is highly relevant when someone uses another person’s name, address, phone number, photograph, government ID, signature, contact list, employment information, financial information, or other personal data without consent or lawful basis.

Personal information may include ordinary identifying data such as name, address, contact number, and email. Sensitive personal information may include government-issued identifiers, financial data, health data, marital status in certain contexts, and other protected information.

Unauthorized loan applications often involve unlawful data processing, such as:

collecting a person’s ID without a lawful purpose;
submitting personal information to a lender without consent;
uploading another person’s ID to a lending app;
using another person’s face, selfie, or image;
giving a person’s contact number as borrower, guarantor, or reference without authorization;
allowing a lending app to access phone contacts and use them for collection;
disclosing the supposed debt to friends, family, co-workers, or employers;
threatening or shaming the victim through text, chat, calls, or social media.

The victim may file a complaint with the National Privacy Commission when personal data has been unlawfully collected, processed, shared, retained, or used.

E. Use of False or Fraudulent Identification Documents

If government IDs, company IDs, certificates, or other identifying documents are fabricated, altered, or misused, additional offenses may arise depending on the document involved.

For example, misuse of a government-issued ID, fake identification document, or forged public document may aggravate the legal consequences. If the fraud involved SIM registration, e-wallet verification, banking verification, or electronic Know-Your-Customer procedures, the facts may also raise regulatory and cybercrime issues.

F. Grave Coercion, Unjust Vexation, Threats, or Harassment

The fraudulent loan application is one issue. Collection behavior is another.

If collectors or lenders harass the victim, repeatedly call, threaten public exposure, contact employers, shame the victim, message relatives, or post defamatory accusations, other legal remedies may arise.

Possible issues include:

threats;
unjust vexation;
grave coercion;
slander or libel;
cyberlibel;
data privacy violations;
unfair debt collection practices;
administrative violations by lending companies or financing companies.

Even if a loan exists, collection must still be lawful. A disputed or fraudulent loan does not justify harassment.

V. Civil Liability

The victim may pursue civil remedies against the offender and, in some cases, against negligent or abusive parties.

Possible claims may include:

damages for fraud;
damages for injury to reputation;
moral damages for anxiety, humiliation, embarrassment, sleepless nights, or emotional suffering;
actual damages for expenses, lost income, legal fees, transportation, and documentary costs;
exemplary damages in cases involving bad faith or oppressive conduct;
attorney’s fees where legally justified;
injunction or other relief to stop continued collection or data misuse;
correction or deletion of false loan records.

If the lender or collection agency acted in bad faith, ignored clear proof of identity theft, or continued abusive collection despite notice, it may also face liability.

VI. Data Privacy Issues in Loan Applications

Loan applications require processing personal data. Under Philippine data privacy principles, processing must generally be lawful, fair, transparent, and proportionate.

A lender should not simply accept personal information without verifying authority, especially when the data identifies a borrower, co-borrower, guarantor, co-maker, or reference.

Important data privacy questions include:

Did the victim consent to the processing?
Was there a lawful basis other than consent?
Was the data collected directly from the victim?
Was the victim informed how the data would be used?
Was the data excessive for the loan purpose?
Was the data disclosed to third parties?
Was the victim contacted for collection despite denying the loan?
Was the alleged debt disclosed to others?
Did the lender or app access the borrower’s contact list?
Were contacts used for shaming, pressure, or harassment?

A person whose data was used without consent may demand information, correction, blocking, deletion, or destruction of unlawfully processed personal data, subject to lawful exceptions.

VII. The Role of Consent

Consent is central. Using someone’s name in a loan transaction without consent is not merely a technical defect; it attacks the validity of the supposed obligation.

Consent must be genuine. It should not be forged, implied from silence, manufactured through a fake signature, or assumed merely because the offender had access to the victim’s ID.

Consent may be questioned if:

the victim never signed the loan documents;
the victim never appeared before the lender;
the victim never received loan proceeds;
the victim did not provide the ID copy;
the mobile number or email was not controlled by the victim;
the signature differs from the victim’s true signature;
the borrower selfie or biometric verification is not the victim;
the loan was applied for from an unfamiliar device, IP address, location, or account;
the victim was listed only as a reference but treated as liable;
a guarantor or co-maker obligation was inserted without clear agreement.

For guarantors, sureties, and co-makers, consent must be especially clear because the person is being made answerable for another’s debt.

VIII. Co-Maker, Guarantor, Surety, and Reference: Important Distinctions

Many loan disputes involve misuse of names as “co-maker,” “guarantor,” “surety,” or “reference.” These are not the same.

A reference is usually only a contact person. A reference does not automatically become liable for the loan.

A guarantor generally undertakes to answer if the principal debtor fails, subject to the terms of the guaranty and applicable law.

A surety is usually more directly and solidarily liable with the principal debtor, depending on the agreement.

A co-maker is often treated as a direct obligor, especially in promissory notes, but liability still requires genuine consent and a valid signature or authorization.

Therefore, if a person was merely named as a reference without consent, they should not be treated as a debtor. If they were named as co-maker, guarantor, or surety without consent, the document may be attacked as forged or unauthorized.

IX. Online Lending Apps and Digital Loans

Online lending has increased identity-related loan disputes. Digital loans may involve quick approval based on uploaded IDs, selfies, phone numbers, contact lists, or e-wallet accounts.

Common problems include:

fake borrower accounts;
stolen ID uploads;
unauthorized use of selfies or photos;
SIM cards registered or used by another person;
OTPs intercepted or obtained by deception;
contact-list harvesting;
abusive collection messages;
threats to expose alleged debt;
false claims that contacts are legally liable;
automated approvals with weak identity verification.

A lending company cannot assume that possession of an ID copy always proves consent. Identity documents are often shared for employment, school, delivery, remittance, travel, rentals, verification, and other legitimate purposes. Possession alone should not be treated as conclusive authority to borrow.

X. Liability of the Person Who Used the Name

The person who used another’s name without consent may face several consequences:

criminal prosecution;
civil damages;
restitution of loan proceeds;
liability to the lender;
liability to the identity victim;
possible employment consequences if done in the workplace;
administrative consequences if the offender is a licensed professional or public employee;
additional penalties if documents, IDs, digital accounts, or personal data were misused.

The offender may not escape liability by saying the loan was eventually paid, that the victim was a relative, or that the victim “would have agreed.” Lack of consent at the time of application remains legally significant.

Payment may reduce financial damage, but it does not automatically erase criminal, privacy, or civil liability.

XI. Liability of the Lender or Loan Company

A lender may also face consequences if it negligently approved the loan, failed to verify identity, ignored a dispute, or engaged in abusive collection.

Possible issues include:

failure to conduct proper Know-Your-Customer verification;
processing personal data without lawful basis;
retaining fraudulent records;
refusing to correct or delete false information;
disclosing the alleged debt to third parties;
harassing the victim or contacts;
using unfair collection methods;
relying on forged documents despite notice;
failing to investigate identity theft;
reporting false credit information.

A lender that receives a credible identity theft complaint should investigate, suspend collection against the complainant while verification is pending, preserve records, and provide proof of the alleged obligation.

XII. What the Victim Should Do Immediately

A victim should move quickly and preserve evidence.

Recommended steps include:

Do not admit the debt. Avoid statements such as “I will pay later” or “I will settle” unless the debt is truly yours.
Demand proof in writing. Ask for the loan application, agreement, promissory note, disclosure statement, ID used, selfie or verification record, phone number, email, IP or device logs if available, and proof of disbursement.
Send a written dispute. Clearly state that you did not apply for, authorize, sign, guarantee, or benefit from the loan.
Request suspension of collection. Ask the lender to stop contacting you and third parties while the fraud dispute is being investigated.
Demand correction of records. Require deletion or correction of false borrower, co-maker, guarantor, or reference records.
Preserve all messages. Keep screenshots, call logs, text messages, emails, chat messages, collection letters, and social media posts.
Get a police blotter or report. This may help document the identity misuse.
Execute an affidavit. State the facts clearly, including when you discovered the loan and why you deny it.
Report to proper agencies. Depending on the facts, this may include law enforcement, prosecutors, the National Privacy Commission, the Securities and Exchange Commission for lending company issues, the Bangko Sentral ng Pilipinas for supervised financial institutions, or other relevant bodies.
Secure your identity. Replace compromised IDs if necessary, secure SIMs and email accounts, change passwords, enable multi-factor authentication, and monitor financial accounts.

XIII. Sample Dispute Letter

A victim may send a letter similar to the following:

I am formally disputing the alleged loan account under my name. I did not apply for, authorize, sign, guarantee, co-make, receive, or benefit from this loan. I demand that you provide copies of all documents and records allegedly supporting this obligation, including the loan application, agreement, promissory note, disclosure statement, ID submitted, verification records, disbursement details, and collection history.

Pending investigation, I demand that you stop all collection activity against me and stop contacting my relatives, employer, friends, and other third parties regarding this disputed loan. I also demand that you preserve all records related to this transaction and correct or delete any false personal data or account information associated with me.

The letter should be dated, signed, and sent through a traceable method such as email with delivery proof, registered mail, courier, or official customer service channels.

XIV. Evidence to Collect

Evidence is crucial. The victim should gather:

screenshots of loan app messages;
SMS and chat conversations;
call logs and recordings, if lawfully obtained;
emails and collection letters;
names and numbers of collectors;
account numbers or reference numbers;
copies of fake documents, if provided;
the victim’s true signatures for comparison;
proof that the victim did not receive the loan proceeds;
bank or e-wallet records;
proof of location or employment at the time of application;
proof that the mobile number, email, or account used was not controlled by the victim;
affidavits from witnesses;
police blotter or incident report;
correspondence with the lender.

The victim should avoid deleting messages, even if they are upsetting. Screenshots should show dates, phone numbers, usernames, and full context.

XV. Where to File Complaints

Depending on the facts, complaints may be filed with one or more of the following:

A. Police or Cybercrime Units

If there is impersonation, forged documents, online fraud, hacked accounts, fake profiles, or digital loan applications, the victim may report to law enforcement or cybercrime authorities.

B. Prosecutor’s Office

Criminal complaints for estafa, falsification, identity theft, cybercrime, or related offenses may be filed with the prosecutor’s office, supported by affidavits and evidence.

C. National Privacy Commission

If personal data was used, disclosed, processed, or shared without consent or lawful basis, the victim may consider a privacy complaint.

D. Securities and Exchange Commission

For lending companies and financing companies, complaints involving abusive collection practices, unauthorized lending activity, or regulatory violations may be brought to the appropriate regulatory body.

E. Bangko Sentral ng Pilipinas

If the lender is a bank, e-money issuer, financing institution, credit card issuer, remittance company, or other BSP-supervised financial institution, the victim may use the appropriate BSP consumer assistance channels.

F. Barangay

If the offender is known and lives in the same city or municipality, barangay conciliation may be required for certain disputes before court action, subject to exceptions. Criminal offenses punishable beyond barangay jurisdiction or involving urgent relief may require direct filing with proper authorities.

G. Civil Courts

Civil action may be considered for damages, injunction, declaration of non-liability, correction of records, or other relief.

XVI. The Lender’s Burden to Prove the Loan

A lender claiming that the victim is liable should be able to show competent proof, such as:

signed loan documents;
valid consent;
identity verification records;
proof of disbursement to an account controlled by the victim;
borrower communications;
authentication records;
agreement to act as co-maker, guarantor, or surety;
records showing the victim received and accepted the proceeds.

A mere name, phone number, ID copy, or contact entry is not necessarily enough to prove a valid obligation.

If the signature is forged, the victim may request comparison, verification, or forensic examination if the dispute escalates.

XVII. If the Victim Actually Received the Money

A more complicated situation arises when the victim did not authorize the application but later received or used the proceeds.

Possible questions include:

Did the victim know the source of the money?
Did the victim accept the benefit knowingly?
Did the victim return the money after discovery?
Did the victim make payments?
Did the victim sign any later acknowledgment?
Did the victim ratify the transaction?

If the victim knowingly accepted and retained the benefit, the lender may argue ratification or unjust enrichment. If the victim unknowingly received funds and promptly returned or reported them, the victim’s position is stronger.

XVIII. If a Family Member Used the Victim’s Name

Many cases involve relatives. A spouse, parent, sibling, child, cousin, or in-law may use another family member’s name to obtain a loan.

Family relationship does not automatically create authority to borrow. Marriage, kinship, cohabitation, or shared residence does not mean one person can sign for another.

However, practical and evidentiary issues may be sensitive. The victim should still document the unauthorized use. If criminal action is considered against a relative, legal advice is strongly recommended because family relations may affect strategy, evidence, settlement, and long-term consequences.

XIX. If an Employee Used an Employer’s or Co-Worker’s Information

Workplace identity misuse may occur when HR files, IDs, payroll records, certificates of employment, payslips, or company email addresses are accessed and used for loans.

Potential issues include:

employee misconduct;
breach of confidentiality;
unauthorized access to company records;
data privacy violations by the offender;
employer data security concerns;
forged certificates of employment;
reputational harm to the employee-victim or company.

The victim may notify HR, request confirmation that no certificate or employment verification was validly issued, and ask the employer to preserve records.

XX. If the Victim Was Listed as a Character Reference

Being named as a reference does not make a person liable for the loan.

A reference may be contacted only for legitimate verification purposes and within lawful privacy limits. Collectors should not threaten, shame, or pressure references to pay. They should not disclose unnecessary details about the debt or imply that the reference has legal liability when none exists.

A person listed as a reference without consent may demand that the lender remove their information and stop contacting them.

XXI. Credit Reputation and Blacklisting Concerns

A victim may worry about being “blacklisted.” The Philippines does not have one universal informal blacklist that lawfully determines all credit access, but lenders may use internal records, credit bureaus, shared databases, and risk assessment systems.

If a fraudulent loan is recorded under the victim’s name, the victim should demand correction. The victim may also request confirmation that the account will not be reported as delinquent under their identity.

If the account has already been reported, the victim should dispute the record with the lender and, where applicable, the relevant credit information entity or financial institution.

XXII. Harassment by Collectors

Collectors sometimes pressure victims even after being told that the loan is fraudulent. Victims should document every contact.

Unlawful or abusive acts may include:

repeated calls meant to harass;
threats of arrest without legal basis;
threats to shame the person online;
contacting employers unnecessarily;
telling relatives or co-workers about the alleged debt;
using insults, obscenities, or intimidation;
pretending to be police, lawyers, or court personnel;
sending fake subpoenas or warrants;
posting the victim’s name or photo online;
threatening criminal cases solely to force payment of a disputed civil obligation.

Debt collection must not become harassment, defamation, coercion, or privacy abuse.

XXIII. Defenses of the Victim

A victim may raise several defenses:

lack of consent;
forged signature;
no authority given to the offender;
no receipt of loan proceeds;
no benefit from the loan;
identity theft;
unauthorized data processing;
invalid guaranty, suretyship, or co-maker undertaking;
absence of valid contract;
lender negligence;
abusive or unlawful collection;
mistaken identity.

The strongest defense usually combines documentary denial, proof of non-receipt of funds, proof of forgery or impersonation, and prompt written dispute.

XXIV. Possible Defenses of the Accused Person

The accused person may deny intent, claim consent, claim authorization, claim the victim benefited, claim the victim later ratified the loan, or argue that the matter is merely civil.

These defenses depend heavily on evidence. Written authorization, messages, bank transfers, repayment history, and conduct after discovery may all matter.

However, a claim of verbal consent may be weak if the loan documents required signatures, identity verification, or direct borrower confirmation and none exists.

XXV. Prescription and Timing

Victims should act promptly. Delay can create evidentiary problems. Messages may be deleted, app records may become harder to retrieve, accounts may be closed, and witnesses may become unavailable.

The applicable prescriptive period depends on the specific offense or civil claim. Because the possible charges may vary—estafa, falsification, cybercrime, data privacy violations, civil damages, or regulatory complaints—the timeline should be assessed based on the facts.

Prompt action also helps prevent the lender from arguing that the victim tolerated, accepted, or ratified the transaction.

XXVI. Practical Action Plan for Victims

A victim may follow this sequence:

Write down a timeline of events.
Identify the lender, app, account number, and collector.
Send a formal dispute letter.
Demand copies of all documents and verification records.
Demand suspension of collection.
Demand deletion or correction of personal data.
Preserve all evidence.
File a police or cybercrime report if identity theft or online fraud occurred.
File a privacy complaint if personal data was misused.
File a regulatory complaint if the lender or collector acted abusively.
Consider a criminal complaint against the offender.
Consider civil action if damage is serious.
Monitor credit records and financial accounts.
Avoid paying or signing anything without legal advice.

XXVII. Practical Advice for Lenders

Lenders should adopt safeguards to avoid approving fraudulent loans:

verify borrower identity carefully;
require live verification for high-risk loans;
confirm co-maker, guarantor, or surety consent directly;
avoid relying solely on uploaded ID images;
maintain audit logs;
preserve device, IP, OTP, and disbursement records;
respond promptly to identity theft disputes;
suspend collection during credible investigations;
avoid contacting third parties unnecessarily;
train collectors on privacy and consumer protection;
delete or correct inaccurate personal data;
maintain secure data systems;
document lawful basis for processing personal information.

A lender that ignores identity theft risks may suffer financial loss and regulatory exposure.

XXVIII. Practical Advice for the Public

To reduce risk:

Do not send ID photos casually.
Watermark ID copies with the purpose and date, when possible.
Do not share OTPs.
Use strong passwords and multi-factor authentication.
Secure SIM cards and email accounts.
Avoid posting full names, birthdates, addresses, and ID details online.
Monitor messages from lenders or financial apps.
Revoke access permissions for suspicious apps.
Report lost IDs immediately.
Keep records when submitting IDs to employers, landlords, schools, or service providers.
Be careful when allowing others to use your phone, email, e-wallet, or bank account.
Check whether unknown loans or financial accounts have been created in your name.

XXIX. Frequently Asked Questions

1. Am I required to pay a loan I never applied for?

Generally, no. A person is not usually liable for a loan they did not authorize, sign, ratify, or benefit from. You should formally dispute the loan and demand proof.

2. What if my ID was used?

Using your ID without consent may support claims of identity theft, falsification, fraud, and data privacy violations. Demand copies of the documents and report the misuse.

3. What if my signature was forged?

A forged signature does not normally bind you. Preserve samples of your true signature and dispute the document in writing.

4. What if I was listed as a reference?

A reference is not automatically liable for the debt. You may demand that the lender stop contacting you and remove your information if you did not consent.

5. What if I was listed as a co-maker without consent?

You should immediately dispute the co-maker obligation. A co-maker relationship requires genuine consent.

6. Can collectors contact my family or employer?

They may be limited to lawful and necessary contact, but they should not harass, shame, threaten, or disclose unnecessary debt information. Abusive contact may violate privacy and other laws.

7. Can I file a case against the person who used my name?

Yes, depending on the evidence. Possible complaints include estafa, falsification, identity theft, cybercrime, and civil damages.

8. Can I file a complaint against the lending app?

Yes, if it processed your data without consent, approved a fraudulent account negligently, refused to correct records, or used abusive collection practices.

9. Should I pay just to stop the harassment?

Paying may be interpreted as acknowledgment of the debt. It is usually better to dispute in writing, demand proof, and seek legal assistance.

10. What if the lender threatens me with arrest?

Nonpayment of debt alone is generally not a basis for imprisonment. However, fraud, falsification, or deceit may create criminal issues for the actual offender. If you are the identity theft victim, document the threats and dispute the loan.

XXX. Key Legal Principles

The following principles are central:

No consent, no valid borrower obligation.
Forged signatures do not ordinarily bind the person whose signature was forged.
A reference is not the same as a guarantor or co-maker.
A guarantor, surety, or co-maker must have genuinely agreed.
Identity theft may create criminal and privacy liability.
Online loan fraud may be cybercrime.
Personal data cannot be freely used for loans without lawful basis.
Collection must remain lawful even if a debt exists.
The lender should prove the obligation, not merely assert it.
The victim should dispute promptly and preserve evidence.

XXXI. Conclusion

Applying for a loan using someone else’s name without consent in the Philippines is not a simple misunderstanding or ordinary debt problem. It may involve fraud, falsification, identity theft, cybercrime, data privacy violations, and civil liability.

The victim should not automatically pay, admit liability, or ignore the matter. The proper response is to dispute the loan in writing, demand proof, preserve evidence, report identity misuse, and pursue appropriate remedies.

For lenders, the lesson is equally clear: identity verification, consent, privacy compliance, and fair collection practices are not optional. A loan created through impersonation or unauthorized use of personal data can expose not only the offender but also negligent or abusive institutions to legal consequences.