I. Introduction

Loan identity theft has become one of the most common digital-age financial abuses in the Philippines. It usually happens when a person’s name, mobile number, identification documents, selfie, address, employment details, or other personal information are used without authority to apply for a loan, cash advance, installment credit, buy-now-pay-later account, e-wallet credit line, online lending app loan, or similar financial product.

The victim often learns about the fraud only after receiving collection calls, threatening messages, demand letters, credit-score damage, workplace harassment, or public shaming by collectors. In worse cases, the victim’s contacts are scraped from a phone, the victim is falsely tagged as a debtor, or the victim’s identity is used repeatedly across different platforms.

In the Philippines, a victim may file a cybercrime complaint with the National Bureau of Investigation Cybercrime Division, commonly referred to as the NBI Cybercrime Division or NBI-CCD. Depending on the facts, the complaint may involve identity theft, computer-related fraud, misuse of personal data, cyber libel, unjust vexation, grave threats, coercion, extortion, harassment by online lending collectors, falsification, estafa, and violations of data privacy rules.

This article explains the legal framework, common scenarios, evidence needed, complaint process, remedies, and practical steps for victims of loan identity theft in the Philippines.

II. What Is Loan Identity Theft?

Loan identity theft occurs when another person uses someone else’s personal information without consent to obtain or attempt to obtain credit, money, goods, or financial services.

In the online lending context, this may include unauthorized use of:

Full name;
Mobile number;
Email address;
Home address;
Date of birth;
Government-issued ID;
Taxpayer Identification Number, Social Security System number, Government Service Insurance System number, PhilHealth number, or Pag-IBIG details;
Selfie or facial image;
Signature;
Employment information;
Bank account or e-wallet account;
Contact list;
Social media profile;
Device, SIM card, or account credentials.

The fraud may be committed by a stranger, a scammer, a rogue lending app agent, a former partner, a relative, a co-worker, a person who previously had access to the victim’s ID, or a syndicate engaged in online loan fraud.

III. Common Forms of Loan Identity Theft

A. Unauthorized Online Loan Application

The most direct form occurs when a fraudster applies for a loan using the victim’s identity. The lender or loan app may later demand payment from the victim even though the victim never borrowed money.

B. Use of Stolen ID or Selfie

Some online lenders require a photograph of a government-issued ID and a selfie. Scammers may obtain these through phishing, fake job applications, fake verification links, bogus raffle forms, SIM registration scams, or previous transactions.

C. SIM or Account Takeover

A criminal may gain control of the victim’s mobile number, email, e-wallet, or social media account and use it to pass verification checks for a loan.

D. Contact-List Harassment

Some lending apps or collectors contact the victim’s family, friends, employer, or co-workers. They may falsely claim that the victim is a delinquent borrower, guarantor, co-maker, or reference.

E. Fake Co-Maker or Reference Listing

A person may be listed as a guarantor, co-maker, emergency contact, or reference without consent. A reference is not automatically liable for a loan. A person becomes legally bound only if there is a valid contract or undertaking showing consent to be liable.

F. Repeated Applications Across Multiple Apps

Identity thieves may submit the same stolen documents to several online lending platforms, resulting in repeated collection attempts and reputational damage.

G. Blackmail or Extortion Disguised as Collection

Some collectors threaten to post the victim’s photo, contact relatives, report the victim to an employer, fabricate criminal accusations, or shame the victim online unless payment is made.

IV. Principal Laws That May Apply

A. Cybercrime Prevention Act of 2012

The Cybercrime Prevention Act penalizes certain offenses committed through or with the use of information and communications technology. Loan identity theft may fall under computer-related identity theft, computer-related fraud, and other cyber-enabled offenses depending on the specific facts.

Computer-related identity theft generally involves the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person, whether natural or juridical, without right.

Computer-related fraud may be involved where a person uses unauthorized data, false information, or computer systems to obtain money, credit, or financial benefit.

If threats, libelous posts, extortion messages, or defamatory statements are made online, other cybercrime provisions may also become relevant.

B. Revised Penal Code

Depending on the conduct, the Revised Penal Code may apply to:

Estafa, if deceit is used to obtain money or property;
Falsification, if documents, signatures, IDs, or electronic records are falsified;
Grave threats, if the victim is threatened with harm;
Grave coercion, if the victim is forced to pay or do something against their will;
Unjust vexation, if harassment causes annoyance, distress, or disturbance;
Slander or libel, if defamatory statements are made;
Other fraud-related offenses depending on the evidence.

C. Data Privacy Act of 2012

The Data Privacy Act protects personal information and sensitive personal information. Loan identity theft often involves unauthorized processing, use, disclosure, or retention of personal data.

Victims may consider filing a complaint with the National Privacy Commission if their personal data was misused by a company, online lending app, collector, employer, platform, or data handler.

Sensitive personal information includes government identifiers, health information, biometrics, and other protected data. Unauthorized use of a victim’s ID, selfie, financial details, or contact list may raise data privacy issues.

D. Lending Company Regulation Act, Financing Company Rules, and SEC Regulations

Many online lending apps and financing companies are regulated by the Securities and Exchange Commission. The SEC has issued rules and advisories addressing abusive debt collection, unfair practices, disclosure obligations, and registration requirements for lending and financing companies.

If the complaint involves a lending company, financing company, or online lending app, a victim may file a separate complaint with the SEC, especially where there are abusive collection practices, privacy violations, threats, shaming, or operation without proper authority.

E. Consumer Protection and Financial Regulations

If the loan involves banks, financing companies, credit cards, e-wallets, payment platforms, or financial service providers, additional remedies may exist through the Bangko Sentral ng Pilipinas, the financial institution’s dispute resolution process, or consumer assistance channels.

V. Why File with the NBI Cybercrime Division?

The NBI Cybercrime Division is a law enforcement unit that investigates cybercrime and technology-enabled offenses. A victim may approach the NBI when the identity theft, loan fraud, harassment, or extortion involves digital systems, online lending platforms, mobile applications, electronic messages, fake accounts, emails, or online posts.

Filing with the NBI may help the victim:

Create an official law enforcement record;
Preserve and present evidence;
Request investigation of unknown perpetrators;
Identify account owners, phone numbers, IP logs, email addresses, platform accounts, or digital traces where legally obtainable;
Support disputes with lenders, collectors, banks, and credit bureaus;
Support later prosecution before the prosecutor’s office;
Show that the victim is disputing the loan as fraudulent and unauthorized.

VI. When Should a Victim File an NBI Cybercrime Complaint?

A victim should consider filing promptly if:

A loan was opened without consent;
The victim is being asked to pay a loan they did not obtain;
The victim’s ID, selfie, or personal information was used without permission;
Collectors are harassing the victim or their contacts;
Threatening, defamatory, or humiliating messages were sent online;
The victim’s employer, relatives, or friends were contacted;
The victim’s name appears in lending app records despite no transaction;
The victim suspects account takeover, SIM takeover, or phishing;
The victim’s credit standing has been affected;
There is a risk of repeated misuse of the victim’s identity.

Delay can make digital evidence harder to preserve. Screenshots may be deleted, accounts may disappear, SIM cards may be abandoned, and apps may change records.

VII. Evidence Needed for an NBI Cybercrime Complaint

A strong complaint depends on organized evidence. Victims should preserve both digital and printed copies.

A. Proof of Identity

Prepare:

Government-issued ID;
Proof of address, if relevant;
Contact details;
Any proof that the ID used in the fraudulent loan belongs to the victim.

B. Proof That the Loan Was Unauthorized

Useful evidence includes:

Written denial or affidavit stating that the victim did not apply for the loan;
Screenshots of loan demands;
Loan account numbers, reference numbers, or app names;
Messages from collectors;
Emails from lenders;
Demand letters;
Credit report entries, if available;
Records showing the victim did not receive the loan proceeds;
Bank or e-wallet statements showing no disbursement to the victim;
Proof that the mobile number, email, or bank account used was not controlled by the victim, if applicable.

C. Screenshots and Digital Records

Screenshots should show:

Sender name or number;
Date and time;
Full message content;
App or platform used;
Profile name and profile URL if from social media;
Phone number or email address;
Group chat name, if applicable;
Threats, defamatory statements, or payment demands.

Do not crop out dates, phone numbers, URLs, account names, or context.

D. Call Logs and Voice Records

If collectors called the victim or their contacts, preserve:

Call logs;
Phone numbers;
Date and time of calls;
Recordings, if legally and safely obtained;
Transcripts or notes of what was said;
Names used by the caller.

E. Evidence from Contacts

If relatives, friends, or co-workers were contacted, ask them to preserve:

Screenshots of messages;
Caller numbers;
Voice recordings, if available;
Written statements;
Their own account of what happened.

F. App and Website Information

Collect:

Name of lending app;
App store link;
Website;
Company name;
SEC registration details, if known;
Email address or hotline;
Privacy policy;
Terms and conditions;
Collection agency name, if disclosed.

G. Evidence of Data Breach or Phishing

If the identity theft began from a scam, preserve:

Phishing links;
Fake forms;
Emails or SMS messages;
Transaction history;
Fake job posts;
Chat with scammers;
Account login alerts;
SIM replacement notices;
OTP messages.

H. Financial Records

Prepare:

Bank statements;
E-wallet transaction history;
Loan disbursement records;
Proof that the victim did not receive proceeds;
Proof of unauthorized deductions, if any.

VIII. How to Preserve Digital Evidence

Digital evidence must be preserved carefully because it can be challenged.

A victim should:

Take screenshots immediately;
Export conversations where possible;
Save original messages and avoid deleting them;
Back up evidence to cloud storage or external drive;
Record URLs, usernames, phone numbers, dates, and times;
Print copies for filing;
Keep the original device if possible;
Avoid editing screenshots;
Avoid engaging in unnecessary arguments with collectors or scammers;
Keep a chronological incident log.

For serious cases, a victim may request assistance from the NBI or another qualified authority in preserving digital evidence.

IX. Preparing the Complaint-Affidavit

The complaint-affidavit is the victim’s sworn narrative. It should be clear, factual, chronological, and supported by attachments.

A. Basic Contents

A complaint-affidavit should generally include:

Full name, age, citizenship, civil status, address, and contact details of the complainant;
Statement that the complainant is the victim of loan identity theft;
Description of how the victim discovered the fraudulent loan;
Statement that the victim did not apply for, authorize, receive, benefit from, or consent to the loan;
Details of the lending app, collector, account, phone numbers, emails, and persons involved;
Description of harassment, threats, defamatory posts, or contact-list abuse, if any;
Explanation of damage suffered;
List of evidence attached;
Request for investigation and prosecution;
Signature and jurat before an authorized officer.

B. Important Statements to Include

The victim should clearly state:

“I did not apply for the loan.”
“I did not authorize anyone to use my identity or personal information.”
“I did not receive the proceeds of the loan.”
“I did not consent to be a borrower, co-maker, guarantor, or reference.”
“I dispute the alleged debt as fraudulent.”
“I request investigation for identity theft, cybercrime, fraud, harassment, threats, and other offenses supported by the evidence.”

The wording must match the facts. False statements in an affidavit may create legal exposure.

X. Filing Procedure with the NBI Cybercrime Division

The exact procedure may vary depending on the NBI office, but the usual steps are:

Prepare a written complaint-affidavit;
Organize all evidence and attachments;
Bring valid identification;
Visit or contact the NBI Cybercrime Division or the nearest NBI office handling cybercrime complaints;
Submit the complaint and evidence;
Give a sworn statement or supplemental statement if required;
Allow the investigating agent to review the case;
Provide devices, screenshots, links, phone numbers, or accounts for technical evaluation if requested;
Cooperate with follow-up questions;
Obtain receiving copies, reference numbers, or proof of filing.

In some cases, the NBI may refer the complainant to another agency, coordinate with platforms, or advise filing a complaint with the prosecutor’s office after investigation.

XI. Can a Victim File Against an Unknown Person?

Yes. Many cybercrime complaints begin against an unknown person, often described as “John Doe,” “Jane Doe,” unknown account user, unknown mobile number owner, unknown online lending app agent, or unknown collector.

The complaint should identify all available digital traces, such as:

Phone numbers;
Email addresses;
Usernames;
Profile URLs;
App names;
Transaction references;
Bank or e-wallet accounts;
IP-related records, if known;
Device or login alerts;
Names used in messages.

Law enforcement may investigate further and identify responsible persons if sufficient leads exist.

XII. Potential Respondents

Depending on the evidence, possible respondents may include:

The person who used the victim’s identity;
The person who submitted the loan application;
The holder of the receiving bank or e-wallet account;
The collector who made threats or defamatory statements;
The operator of the lending app;
The collection agency;
Officers, employees, or agents who participated in unlawful conduct;
Unknown persons behind fake accounts, SIM numbers, or fraudulent applications.

Not every company is automatically criminally liable simply because fraud occurred through its platform. Liability depends on participation, negligence, knowledge, authorization, benefit, or specific legal duties.

XIII. Remedies Against the Lending Company or Online Lending App

A victim should separately notify the lender in writing that the loan is fraudulent and disputed.

The notice should demand:

Immediate suspension of collection activity;
Investigation of the fraudulent account;
Copies of the alleged loan documents;
Proof of application, consent, disbursement, and identity verification;
Deletion or correction of inaccurate data;
Removal of the victim from borrower, guarantor, co-maker, or reference records;
Cessation of contact with the victim’s relatives, employer, or contacts;
Written confirmation that the victim is not liable;
Correction of any credit reporting entry;
Preservation of records for investigation.

The victim should send the notice through traceable means, such as email, registered mail, customer support ticket, or official complaint channel.

XIV. Are Victims Required to Pay the Fraudulent Loan?

A person is generally not liable for a loan they did not apply for, authorize, receive, sign, accept, or benefit from.

However, the victim should not ignore the matter. The victim must actively dispute the account and document the dispute. Silence may allow the lender or collector to continue collection efforts, report the account, or pressure the victim.

The victim should never pay merely to stop harassment unless advised by counsel after reviewing the consequences. Payment may be misinterpreted as acknowledgment of the debt, depending on the circumstances.

XV. What If the Victim Was Listed Only as a Reference?

A reference is not the same as a borrower, co-maker, or guarantor. A reference is usually a person listed for contact or verification. Being named as a reference does not automatically create liability.

If a collector demands payment from a mere reference, the reference may respond that:

They did not borrow money;
They did not sign as guarantor or co-maker;
They did not consent to be contacted for collection;
They demand removal of their personal information;
Further harassment may be reported to authorities.

XVI. What If the Victim’s Contacts Are Being Harassed?

Contact-list harassment is common in abusive online lending cases. Collectors may message relatives, friends, co-workers, or employers with accusations such as “scammer,” “runaway debtor,” “fraudster,” or “wanted.”

This may raise issues involving:

Data privacy violations;
Cyber libel;
Grave threats;
Unjust vexation;
Coercion;
Harassment;
Unfair debt collection practices.

Victims should collect screenshots from all contacted persons and include them in the NBI complaint and any complaint to the National Privacy Commission or SEC.

XVII. Cyber Libel in Loan Collection Cases

Cyber libel may arise when a collector or other person publicly posts or sends defamatory statements through online channels. For example, if a collector posts the victim’s photo on social media and falsely calls the victim a criminal, scammer, or thief, this may support a cyber libel complaint.

Private messages can also be relevant, but whether they constitute libel depends on publication to a third person and the surrounding facts. If defamatory statements are sent to the victim’s relatives, employer, group chats, or social media contacts, the publication element may be easier to establish.

XVIII. Threats, Coercion, and Extortion

Some collectors threaten to:

Post the victim’s face online;
Contact the victim’s employer;
Shame the victim’s family;
Fabricate a criminal case;
Visit the victim’s home;
Harm the victim;
Expose private information;
Send edited photos or defamatory notices.

These may support complaints for threats, coercion, unjust vexation, extortion-related conduct, or other offenses depending on the wording and proof.

A victim should preserve the exact words used. The difference between a lawful demand and an unlawful threat often depends on the content, tone, frequency, and method of communication.

XIX. Data Privacy Remedies

The victim may file or consider filing a complaint with the National Privacy Commission where personal data was unlawfully collected, used, shared, retained, accessed, or disclosed.

Possible data privacy issues include:

Use of a victim’s ID without consent;
Unauthorized processing of sensitive personal information;
Scraping and contacting the victim’s phone contacts;
Disclosure of alleged debt to third parties;
Public shaming;
Refusal to correct inaccurate personal data;
Refusal to delete unauthorized records;
Failure to secure personal information;
Processing data beyond legitimate purpose.

The victim may also exercise data subject rights, including the right to access, correction, objection, erasure or blocking, and damages where applicable.

XX. SEC Complaints Against Online Lending Apps

If the case involves an online lending app, lending company, or financing company, the victim may consider filing a complaint with the SEC.

The complaint may involve:

Abusive collection practices;
Misleading or unfair loan terms;
Unauthorized disclosure of borrower or non-borrower information;
Harassment of contacts;
Threats and shaming;
Unregistered or unauthorized lending activity;
False representation by collectors;
Failure to act on identity theft reports.

The SEC complaint is administrative or regulatory in nature. It may complement, but does not necessarily replace, criminal complaints with law enforcement.

XXI. Complaints with Banks, E-Wallets, and Financial Platforms

If the fraudulent loan proceeds were sent to a bank or e-wallet account, the victim may report the receiving account to the bank, e-wallet provider, or financial institution. The victim should request account freezing or investigation where appropriate, subject to the institution’s rules and applicable law.

If the victim’s own bank or e-wallet account was compromised, the victim should immediately:

Change passwords;
Revoke device access;
Report unauthorized transactions;
Request account blocking if needed;
File a dispute;
Preserve transaction history;
Report the incident to law enforcement.

XXII. Credit Reporting Issues

Fraudulent loans can damage a victim’s credit profile. A victim should request correction, deletion, or dispute of inaccurate credit entries.

The victim should submit:

NBI complaint proof or police blotter, if available;
Affidavit of denial;
Government ID;
Written dispute to the lender;
Evidence that the loan was unauthorized;
Any lender acknowledgment or investigation result.

The victim should demand that the lender stop reporting the fraudulent account and correct any adverse entry.

XXIII. Police Blotter Versus NBI Cybercrime Complaint

A police blotter creates a record of an incident at a police station. It may be useful for documentation, immediate threats, or local incidents.

An NBI cybercrime complaint is more appropriate where the case involves digital identity theft, online lending platforms, cyber harassment, fake accounts, electronic evidence, or technical tracing.

A victim may do both. A blotter can support the record, while the NBI complaint can trigger cybercrime investigation.

XXIV. Barangay Proceedings

Barangay conciliation may be relevant for disputes between individuals residing in the same city or municipality, especially if the suspect is known and the matter falls within barangay jurisdiction.

However, cybercrime, serious criminal offenses, unknown online perpetrators, corporate respondents, or cases requiring urgent law enforcement action may not be suitable for barangay settlement. Victims should avoid treating identity theft as a mere personal debt dispute.

XXV. Sample Evidence Checklist

A victim should prepare a folder containing:

Complaint-affidavit;
Valid government ID;
Chronology of events;
Screenshots of all messages;
Call logs;
Phone numbers used by collectors;
Names and profiles of senders;
App name and company information;
Loan reference number;
Demand letters;
Proof of non-receipt of loan proceeds;
Bank and e-wallet statements;
Screenshots from contacted relatives or co-workers;
Social media posts, URLs, and group chat messages;
Proof of account takeover or phishing;
Prior written dispute sent to the lender;
Any response from the lender;
Credit report, if affected;
Police blotter, if already filed;
Other supporting documents.

XXVI. Sample Structure of a Complaint-Affidavit

A complaint-affidavit may follow this structure:

Republic of the Philippines City/Municipality of __________

Affidavit-Complaint

I, [name], of legal age, Filipino, [civil status], and residing at [address], after being duly sworn, state:

I am the complainant in this case.
I recently discovered that my personal information was used in connection with an alleged loan from [name of app/company].
I categorically deny applying for, authorizing, receiving, or benefiting from said loan.
I did not give any person authority to use my name, identification documents, mobile number, image, address, or other personal information for any loan application.
On [date], I received [messages/calls/emails] from [number/person/company] demanding payment.
The messages stated [brief description].
I was also informed that [relatives/friends/employer] received messages about the alleged loan.
Attached are screenshots, call logs, and other evidence showing the unauthorized use of my identity and the harassment committed against me.
Because of these acts, I suffered anxiety, reputational harm, disturbance, and risk of financial and credit damage.
I respectfully request investigation for identity theft, computer-related fraud, cyber harassment, threats, data privacy violations, and such other offenses as the evidence may support.

In witness whereof, I sign this affidavit on [date] at [place].

[Signature] [Name]

Subscribed and sworn to before me on [date] at [place].

This is only a structural sample. A final affidavit should be tailored to the actual facts and reviewed carefully before signing.

XXVII. Demand Letter to the Lending Company

A victim may send a dispute letter to the lending company. It may state:

The victim disputes the alleged loan;
The victim denies applying for or receiving the loan;
The victim demands investigation;
The victim demands suspension of collection;
The victim demands cessation of contact with third parties;
The victim demands correction or deletion of records;
The victim demands preservation of all loan application records;
The victim reserves the right to file complaints with the NBI, NPC, SEC, BSP, and other agencies.

A written dispute is important because it creates a paper trail and places the lender on notice.

XXVIII. What Records Should the Victim Demand from the Lender?

The victim may request:

Copy of the loan application;
Date and time of application;
Device, IP, or account logs, if available and legally disclosable;
Mobile number used;
Email address used;
Bank or e-wallet account where proceeds were disbursed;
Uploaded ID;
Uploaded selfie or biometric verification;
E-signature or consent record;
Loan agreement;
Disclosure statement;
Collection notes;
Third-party collection agency details;
Basis for processing the victim’s personal data;
Basis for reporting the account to credit bureaus.

The lender may refuse to disclose some technical or security data directly, but the request still helps preserve issues for investigation.

XXIX. What Not to Do

A victim should avoid:

Paying the loan without written reservation or legal advice;
Deleting messages;
Arguing emotionally with collectors;
Sending more IDs to unverified collectors;
Clicking suspicious links;
Installing unknown apps;
Giving OTPs;
Posting sensitive documents publicly;
Threatening collectors in return;
Signing settlement documents without understanding them;
Ignoring demand letters;
Assuming a reference is automatically liable;
Assuming the matter is only civil when identity theft is involved.

XXX. Immediate Safety Steps for Victims

The victim should:

Change passwords for email, social media, e-wallets, and banking apps;
Enable two-factor authentication;
Check SIM registration and account recovery settings;
Revoke access to unknown devices;
Report compromised accounts;
Notify banks and e-wallets;
Inform close contacts not to entertain collectors or scammers;
Preserve all evidence;
Send a written dispute to the lender;
File with the NBI Cybercrime Division where appropriate.

XXXI. Possible Legal Outcomes

Depending on the evidence, possible outcomes include:

NBI investigation;
Identification of suspects;
Referral for inquest or preliminary investigation;
Filing of criminal complaint before the prosecutor;
Administrative complaint against lending company or collector;
Data privacy investigation;
Correction or cancellation of fraudulent loan record;
Cessation of collection;
Credit record correction;
Settlement or written clearance from lender;
Prosecution of responsible persons.

Not every complaint results in immediate prosecution. Cybercrime cases often require sufficient evidence linking specific persons to the fraudulent act.

XXXII. Defenses and Issues That May Arise

A lender or collector may claim:

The application passed verification;
The victim’s ID and selfie were submitted;
OTP verification was completed;
The loan proceeds were disbursed;
The victim’s phone number or email was used;
The victim benefited from the loan;
The victim is merely avoiding payment.

The victim should counter with evidence showing:

No consent;
No receipt of proceeds;
No control over the account used;
Compromised identity documents;
Prompt dispute;
Inconsistent application details;
Unauthorized use of personal data;
Harassment or unlawful collection conduct.

The central issue is not merely whether the lender has documents, but whether the victim actually consented, applied, received, or benefited from the loan.

XXXIII. Civil Liability and Damages

Victims may suffer financial loss, reputational harm, anxiety, emotional distress, business disruption, employment embarrassment, or credit damage. Depending on the facts and applicable law, a victim may pursue damages against responsible persons.

Possible claims may involve:

Actual damages;
Moral damages;
Exemplary damages;
Attorney’s fees;
Costs of suit;
Data privacy-related damages;
Civil liability arising from crime.

Civil remedies require proof of damage and causal connection.

XXXIV. Prescription and Urgency

Victims should act promptly. Different offenses have different prescriptive periods, and delays may weaken evidence. Digital evidence is volatile. SIM cards, fake accounts, app records, and logs may disappear.

Prompt reporting also helps show good faith and supports the victim’s position that the alleged debt is disputed and fraudulent.

XXXV. Practical Complaint Strategy

A strong strategy may involve parallel action:

File an NBI cybercrime complaint;
Send a written dispute to the lender;
File a complaint with the National Privacy Commission if data misuse is involved;
File a complaint with the SEC if an online lending app or financing company is involved;
Notify banks, e-wallets, or payment platforms;
Dispute credit report entries;
Preserve evidence from all contacted third parties;
Consult a lawyer for affidavit preparation, prosecution strategy, or civil claims.

Parallel action is often necessary because one agency may handle criminal investigation, another may handle data privacy, another may handle lending regulation, and another may handle financial consumer complaints.

XXXVI. Frequently Asked Questions

1. Can I file with the NBI even if I do not know who used my identity?

Yes. You may file against unknown persons and provide phone numbers, account names, app names, email addresses, links, and other digital traces.

2. Am I liable if my ID was used but I never applied for the loan?

Generally, no. A person is not bound by a loan they did not authorize, sign, accept, or benefit from. But you should dispute the loan immediately and preserve proof.

3. Is being listed as a reference the same as being a guarantor?

No. A reference is not automatically liable. A guarantor or co-maker obligation requires consent and a valid undertaking.

4. Can collectors message my employer or relatives?

Debt collectors should not harass, shame, threaten, or unlawfully disclose personal information. Contacting third parties in abusive ways may raise legal and regulatory issues.

5. Should I pay to stop the harassment?

Payment may create complications. It is better to dispute the loan in writing, file complaints where appropriate, and seek legal advice before paying a debt you deny.

6. Can I complain to the National Privacy Commission?

Yes, if your personal data was unlawfully used, disclosed, retained, or processed.

7. Can I complain to the SEC?

Yes, if the issue involves a lending company, financing company, or online lending app engaged in abusive or unlawful practices.

8. What if the loan app is not registered?

Report the app to the proper authorities and preserve evidence of its name, website, app store listing, messages, and collection activity.

9. Can I sue for damages?

Possibly, depending on proof of wrongdoing, damage, and the responsible persons. A lawyer can assess whether a civil case, criminal complaint, or administrative complaint is strongest.

10. Is an NBI complaint enough to erase the loan?

Not automatically. You should also directly dispute the loan with the lender and request correction or deletion of records.

XXXVII. Conclusion

Loan identity theft is not merely a debt collection problem. It may involve cybercrime, fraud, falsification, data privacy violations, abusive lending practices, harassment, threats, and reputational injury.

A victim should act quickly, preserve evidence, file a clear complaint-affidavit, dispute the loan in writing, and pursue the appropriate remedies before the NBI Cybercrime Division, National Privacy Commission, Securities and Exchange Commission, financial regulators, credit reporting channels, and courts where necessary.

The most important points are simple: do not admit a loan you did not make, do not delete evidence, do not ignore collection activity, and do not allow unauthorized use of your identity to go unchallenged. Prompt documentation and coordinated complaints can protect the victim’s legal rights, financial standing, privacy, and reputation.