Finding out that an old SIM number was used in loan applications can feel frightening, especially when collectors start calling, your name appears in a loan record, or you worry that your credit standing in the Philippines may be affected. The key point is this: a mobile number alone does not prove that you borrowed money. What matters is whether the lender can prove that you personally applied for the loan, consented to the processing of your data, received the proceeds, and agreed to the terms. This article explains the Philippine remedies for old SIM number loan misuse, identity theft, online lending harassment, credit record correction, and complaints with the proper agencies.

What usually happens when an old SIM number is used for a loan

This problem commonly appears in several ways:

Your old prepaid SIM expired or was disconnected, and the number was later used by someone else.
Your lost SIM was used before you reported it.
Someone used your name, ID, selfie, address, or contacts to apply for a loan.
A lending app listed you as a borrower, co-borrower, guarantor, reference, or emergency contact without consent.
Collectors call or message you because your old number, current number, or contacts were scraped from a phonebook.
A loan appears in a credit report even though you never applied for it.

Under Philippine law, these situations may involve identity theft, data privacy violations, unfair debt collection, falsification, estafa, or a credit reporting dispute, depending on the facts.

A permanently disconnected prepaid SIM may also become practically impossible to recover. Globe’s prepaid SIM terms, for example, state that a permanently disconnected SIM can no longer be reconnected and the corresponding mobile number may be reassigned. That does not automatically make the former owner liable for what a later user does with the number. It only makes documentation more important. (Globe Telecom)

Legal basis: why an old SIM number is not enough to make you liable

A loan is a contract. The lender must show that there was consent, a definite object, and a valid cause or consideration. In practical terms, that means the lender should be able to show evidence such as:

the loan application;
the borrower’s identity verification records;
the submitted ID and selfie or liveness check;
the mobile number and email used;
the device, IP address, or app logs, if applicable;
the disclosure statement and loan terms;
proof of release of the loan proceeds; and
proof that the proceeds went to an account, wallet, or person connected to the alleged borrower.

If the only link is “this used to be your number,” the evidence is weak. A recycled, expired, or reassigned number can point investigators to a communication channel, but it does not by itself prove that you signed, clicked, received money, or consented to the debt.

SIM Registration Act: registration helps trace users, but it is not a loan contract

Republic Act No. 11934, the SIM Registration Act, requires end-users to register SIMs before activation. It was created to improve accountability in mobile communications and help address scams and cybercrime. It also defines spoofing as transmitting misleading or inaccurate source information with intent to defraud, cause harm, or wrongfully obtain value. (Supreme Court E-Library)

The implementing rules issued through NTC Memorandum Circular No. 001-12-2022 govern registration of new and existing SIMs with telecommunications entities. (Supreme Court E-Library) But SIM registration is not the same as a loan agreement. A person may be the registered user of a number and still not be the borrower. Conversely, if someone used your personal data to register or control a SIM, that may become evidence of identity theft or data misuse.

Data Privacy Act: misuse of your personal information can be actionable

Republic Act No. 10173, the Data Privacy Act of 2012, protects personal information in government and private-sector systems. The law recognizes privacy as a fundamental right and requires personal information controllers, such as lenders and financial service providers, to process personal data lawfully, fairly, and securely. (Lawphil)

For identity theft involving loan apps, the important privacy issues are usually:

Was your name, ID, photo, address, employment information, or contact list processed without authority?
Did the lender verify the applicant properly?
Did the app access contacts, photos, messages, or device data beyond what was necessary?
Did collectors disclose the alleged debt to your family, employer, barangay, coworkers, or social media contacts?
Did the company refuse to correct or delete inaccurate data after you disputed it?

The National Privacy Commission states that a person whose personal information has been misused, maliciously disclosed, improperly disposed, or whose data privacy rights were violated may file a complaint with the NPC. (National Privacy Commission)

Cybercrime Prevention Act: online identity theft is a cybercrime

Republic Act No. 10175, the Cybercrime Prevention Act of 2012, penalizes computer-related identity theft. In plain language, this can cover the unauthorized acquisition, use, misuse, transfer, possession, alteration, or deletion of another person’s identifying information through a computer system. (Lawphil)

This matters when the loan was applied for through:

a mobile loan app;
an online lending platform;
a fake account;
an e-wallet or bank app;
a compromised email or phone number;
stolen ID images uploaded online; or
digital signatures or OTPs obtained through deception.

The Supreme Court decision in Disini v. Secretary of Justice, G.R. No. 203335, is the leading case on the Cybercrime Prevention Act. It reviewed constitutional challenges to RA 10175 and remains an important reference when cybercrime provisions are involved. (Lawphil)

Revised Penal Code: estafa and falsification may apply

If someone used your identity to obtain loan proceeds, the facts may also fall under the Revised Penal Code:

Estafa under Article 315 may apply when a person defrauds another through deceit or abuse of confidence.
Falsification under Article 172 may apply if a private document, loan form, signature, certification, or supporting document was falsified.
Other offenses may be considered depending on whether the person used a fictitious name, false pretense, or fraudulent representation.

The exact charge depends on the evidence. In practice, law enforcement and prosecutors look at who submitted the application, what document was falsified, where the money went, and whether the victim or lender suffered damage.

Financial consumer protection laws: lenders have duties too

Republic Act No. 11765, the Financial Products and Services Consumer Protection Act, gives financial consumers rights to fair treatment, disclosure and transparency, protection of assets against fraud and misuse, data privacy and protection, and timely complaint handling and redress. It covers financial products and services and empowers regulators such as the BSP, SEC, Insurance Commission, and Cooperative Development Authority. (Lawphil)

For lending companies, Republic Act No. 9474, the Lending Company Regulation Act of 2007, allows lending companies to grant loans but requires compliance with the Truth in Lending Act and consumer protection rules. (Supreme Court E-Library) Republic Act No. 3765, the Truth in Lending Act, requires disclosure of finance charges and the true cost of credit. (Bank Secrecy Policy)

These laws are useful when a lender refuses to explain the debt, cannot show proper disclosure, ignores your dispute, or continues collection despite credible identity theft evidence.

What to do first if your old SIM number was used for a loan

1. Do not admit the debt just to stop the calls

Collectors may pressure you to “settle,” “pay a small amount,” or “clear your name.” Be careful. A partial payment may later be used to argue that you recognized the obligation.

A safer written response is:

I dispute this loan. I did not apply for, receive, authorize, or benefit from this loan. Please send the complete loan documents, identity verification records, disclosure statement, disbursement details, and basis for linking this account to me. Pending verification, stop collection calls and do not report or continue reporting this as my debt.

Keep the tone factual. Do not threaten. Do not send more personal IDs unless you know the company is legitimate and you are sending through an official channel.

2. Preserve evidence before accounts or messages disappear

Save everything in a folder. For mobile screenshots, include the top part showing the date, time, number, app name, and sender.

Useful evidence includes:

Evidence	Why it matters
Screenshots of SMS, calls, app messages, emails, and collection threats	Shows dates, numbers, language used, and harassment
Your old SIM documents, telco emails, load history, or deactivation proof	Helps show when you stopped using the number
NTC or telco complaint reference number	Shows you formally reported the SIM issue
Loan demand letters or collection notices	Identifies the lender, collector, amount, and account number
Copies of IDs used in the fake application, if disclosed	May show altered, expired, or mismatched ID details
Bank or e-wallet statements	Helps show you did not receive the proceeds
Travel records, employment records, or proof you were abroad	Useful when the application supposedly happened in the Philippines
Police, NBI, PNP-ACG, NPC, SEC, BSP, or CIC complaint receipts	Shows a documented dispute trail

For serious cases, prepare a simple chronology: date you last used the SIM, date it was lost or expired, date collection started, name of lender, amount claimed, and actions taken.

3. Verify the lender before sending documents

Many fake collectors pretend to represent lending companies. Check whether the entity is a bank, e-wallet, lending company, financing company, cooperative, or completely unregistered operator.

Use the proper regulator:

Type of entity	Main regulator or office
Bank, credit card issuer, e-wallet, remittance company, payment operator	Bangko Sentral ng Pilipinas
Lending company, financing company, online lending platform	Securities and Exchange Commission
Cooperative lender	Cooperative Development Authority
Insurance-linked financial product	Insurance Commission
Data privacy misuse by any company	National Privacy Commission
Cyber identity theft or fake online loan application	NBI Cybercrime Division or PNP Anti-Cybercrime Group
Wrong credit report entry	Credit Information Corporation and accredited credit bureaus
SIM registration, SIM swap, telco records, number reassignment	Telco and National Telecommunications Commission

The SEC now has the SEC iMessage ticketing system for submitting concerns and complaints. (Securities and Exchange Commission) For lending and financing companies, the SEC’s own materials also point users to formal complaint channels and lists of registered lending companies, financing companies, and recorded online lending platforms. (www.foi.gov.ph)

Step-by-step remedies in the Philippines

Step 1: Send a written dispute to the lender or collector

Your first written dispute should ask for proof, not argue emotionally. Request:

the complete loan application;
the name used in the application;
the mobile number, email, address, and ID submitted;
the date and time of application;
the method of identity verification;
the disclosure statement and loan agreement;
the account or e-wallet where proceeds were released;
the basis for treating you as borrower, co-maker, guarantor, or reference;
the source of your personal data; and
written confirmation that collection and credit reporting are suspended while under dispute.

If the company refuses to provide documents because of “privacy,” respond that you are disputing a loan being attributed to you and are requesting records necessary to verify and correct inaccurate processing of your personal data.

Step 2: Report the SIM issue to the telco

Ask the telco for help documenting:

whether the SIM is still active;
whether it is registered under your name;
whether it was replaced, ported, disconnected, or reassigned;
whether you can file a lost SIM, unauthorized SIM registration, or SIM misuse report; and
whether they can issue a reference number or written response.

Telcos may not give you the current registrant’s personal details because of privacy rules. That is normal. However, a complaint reference, written confirmation of your account history, or proof that the number was no longer under your control can help regulators and law enforcement.

Step 3: File a cybercrime complaint if your identity was used online

For fake online loan applications, stolen ID photos, fake accounts, SIM takeover, OTP fraud, or app-based identity theft, file with the NBI Cybercrime Division or PNP Anti-Cybercrime Group.

The NBI Citizens Charter page for computer-crime victims describes investigative assistance through complaint forms submitted to the Cybercrime Division or regional cybercrime centers. (National Bureau of Investigation) The Department of Justice also maintains cybercrime reporting information through the Office of Cybercrime. (Department of Justice)

Prepare:

a government ID;
printed screenshots and digital copies;
a notarized complaint-affidavit, if required;
the lender’s name and contact details;
the mobile number involved;
your proof of non-use or loss of the SIM;
proof you did not receive the money;
names of people contacted by collectors; and
any known suspect details.

In practice, cybercrime investigations can take weeks or months because investigators may need preservation requests, subpoenas, telco data, app platform information, or financial account tracing. File early because digital logs may not be stored forever.

Step 4: File a complaint with the National Privacy Commission

File with the NPC when the issue involves unauthorized use, inaccurate processing, refusal to correct records, excessive app permissions, disclosure of alleged debt to third parties, or harassment through contact scraping.

The NPC requires a formal complaint in a specific format. Its complaint page says the complaint may be downloaded, printed, filled out, notarized, and submitted in person, by courier, or by scanned email submission. (National Privacy Commission) The NPC also announced that a new Complaint-Affidavit template took effect on July 1, 2025, and the previous version would no longer be accepted after the transition period. (National Privacy Commission)

Attach:

your complaint-affidavit;
proof of identity;
screenshots of collection messages;
proof of unauthorized disclosure to contacts;
your written dispute to the lender;
the lender’s response or refusal;
proof the old SIM was not under your control; and
a clear explanation of the relief requested, such as correction, deletion, blocking, investigation, or sanctions.

Step 5: File with the SEC if the lender is a lending or financing company

If the company is a lending company, financing company, or online lending platform, the SEC is usually the regulator.

SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt collection practices by financing companies, lending companies, and their third-party service providers. The prohibited conduct includes abusive, humiliating, threatening, or deceptive collection behavior. (LPR ADB)

A strong SEC complaint should include:

the name of the lending or financing company;
app name, if different from the company name;
screenshots of app store listing or website;
collection messages and call logs;
proof that you disputed the debt;
proof that you did not apply or receive proceeds;
names or numbers of collectors;
screenshots showing disclosure to family, employer, contacts, or social media; and
your requested action, such as investigation, order to stop collection, correction of records, or sanctions.

Step 6: File with BSP if a bank, e-wallet, or BSP-supervised institution is involved

If the loan proceeds, fake account, debit, e-wallet, bank loan, credit card, or payment account involves a BSP-supervised financial institution, use the institution’s own consumer assistance mechanism first.

If unresolved, the BSP allows escalation through BSP Online Buddy (BOB). BSP guidance states that if a consumer has raised a concern with the BSP-supervised financial institution and remains unsatisfied, the complaint may be filed through BOB, which generates a reference number when processed. (Bank Secrecy Policy)

For identity theft cases, attach the written dispute, transaction references, screenshots, and proof that the financial account or loan was not authorized.

Step 7: Dispute wrong credit records with the CIC

If the fake loan appears in your credit history, deal with the credit record separately. Do not assume that filing with the police automatically corrects your credit report.

The Credit Information Corporation (CIC) operates an Online Dispute Resolution System for discrepancies between a person’s CIC Credit Report and the data submitted by financial institutions. (Credit Information Corporation)

A CIC dispute should clearly state:

the disputed lender;
account number, if available;
amount and date appearing in the report;
why it is inaccurate;
proof of identity theft or SIM misuse;
your police, NBI, PNP, NPC, SEC, or BSP complaint references; and
the correction requested.

Credit correction can take time because the CIC generally has to coordinate with the submitting entity. Keep following up until the disputed entry is corrected, tagged, or explained in writing.

What if collectors are calling your family, employer, or contacts?

Debt collectors cannot shame, threaten, or pressure third parties just because their numbers appear in a phonebook. If you are not the borrower, they should not demand payment from you. If you are merely a reference, a reference is not automatically a guarantor or co-maker.

When collectors contact third parties, preserve:

screenshots;
call recordings if lawfully obtained and safe to keep;
names and numbers used;
statements from people contacted;
the exact words used; and
proof that the collector disclosed the alleged debt.

Possible remedies include SEC complaints for unfair collection, NPC complaints for unauthorized disclosure or misuse of personal data, and criminal complaints if threats, coercion, grave threats, unjust vexation, or cyber offenses are involved.

What if you are abroad or you are a foreigner?

OFWs, dual citizens, and foreigners often face extra difficulty because Philippine agencies may ask for sworn documents.

Common practical options include:

signing a complaint-affidavit before a Philippine Embassy or Consulate;
using a consularized Special Power of Attorney for a trusted representative in the Philippines;
having foreign documents notarized abroad and apostilled, if the country is part of the Apostille Convention;
attaching passport stamps, visa records, boarding passes, employment certificates, or residence permits to show you were outside the Philippines when the loan was supposedly made; and
using email filing where the agency allows it, then submitting originals later if required.

Philippine consulates can notarize documents for use in the Philippines, usually requiring personal appearance of the signatory. (Philippine Consulate LA) The DFA’s Apostille office handles authentication concerns for documents that need apostille processing. (Apostille Philippines)

Foreigners should also be careful with local representatives. If someone will file or follow up for you, the Special Power of Attorney should be specific: identity theft complaint, loan dispute, credit report dispute, telco inquiry, and authority to receive notices. Avoid overly broad authority over bank accounts or property unless truly necessary.

What if the lender files a case against you?

Do not ignore a summons, even if the loan is fake. A court case can move forward if the defendant does not respond.

Many collection cases for money claims are filed in first-level courts under the small claims or expedited procedure framework. The Supreme Court has issued rules expanding and updating first-level court procedures, including service through mobile phone calls, SMS, or instant messaging software applications in appropriate cases. (Supreme Court of the Philippines)

Your defense should focus on evidence:

you did not apply for the loan;
you did not sign the agreement;
the ID or selfie is fake, altered, expired, or not yours;
the old SIM was no longer under your control;
proceeds were released to an account you do not own;
you promptly disputed the debt;
you filed complaints with the proper agencies; and
the lender failed to verify the borrower properly.

Bring printed copies of your complaint receipts, telco records, screenshots, written disputes, bank or e-wallet statements, and proof of whereabouts. If the lender cannot prove consent, release of proceeds to you, and a valid obligation, the claim should be seriously challenged.

Common mistakes that make identity theft cases harder

Paying “just to make it go away”

Payment can be misinterpreted as recognition of the debt. If payment is made under pressure, document that it was made under protest, but the better approach is to dispute in writing before paying anything.

Deleting messages after blocking collectors

Blocking may protect your peace, but deleting messages destroys evidence. Screenshot first. Export call logs if possible.

Sending fresh IDs to suspicious collectors

Some scammers use “verification” to collect more IDs. Verify the company through official channels before sending sensitive documents.

Posting the collector’s personal details online

Public shaming can create separate legal problems. Preserve evidence and file with the proper office instead.

Assuming the telco will reveal the current SIM registrant

Because of privacy rules, telcos usually will not disclose another person’s subscriber information directly to you. Law enforcement and regulators are better positioned to request records through proper legal processes.

Waiting until the debt appears in a credit report

The earlier you dispute the fake loan, the easier it is to prevent repeated reporting, collection escalation, and third-party disclosure.

Frequently Asked Questions

Can I be forced to pay a loan just because my old SIM number was used?

No. A mobile number alone does not prove that you borrowed money. The lender should prove that you applied, consented, received the proceeds, and agreed to the loan terms.

What if the SIM was once registered under my name?

SIM registration may show that you used or registered the number at a certain time, but it does not automatically prove that you made a later loan application. If the SIM was lost, expired, disconnected, replaced, or reassigned, gather telco proof and dispute the loan immediately.

Is using someone else’s name or ID for an online loan identity theft?

It can be. If identifying information was acquired, used, or misused through a computer system, RA 10175 on cybercrime may apply. If documents were falsified or money was obtained through deceit, the Revised Penal Code may also apply.

Where should I complain first: police, NPC, SEC, BSP, or CIC?

It depends on the problem. For cyber identity theft, go to NBI Cybercrime Division or PNP Anti-Cybercrime Group. For misuse of personal data, file with the NPC. For lending company harassment, file with the SEC. For banks, e-wallets, and BSP-supervised institutions, use the institution’s complaint channel then BSP BOB. For wrong credit records, dispute with the CIC.

Can collectors call my contacts if I am not the borrower?

They should not harass, shame, threaten, or demand payment from third parties. If they disclose an alleged debt to your contacts, employer, relatives, or social media network, preserve evidence and consider SEC and NPC complaints.

Can I ask the lender to delete my information?

Yes, but be precise. Ask them to correct, block, delete, or stop processing inaccurate or unlawfully obtained data connected to the disputed loan. If they refuse without valid reason, that refusal can be included in an NPC complaint.

What if my ID was used but the money went to someone else’s e-wallet?

That is strong evidence that the proceeds did not go to you. Request the disbursement trail from the lender and report the matter to law enforcement. If a BSP-supervised e-wallet or bank account was used, file through the institution’s fraud channel and escalate to BSP if unresolved.

Do I need a notarized affidavit?

For many formal complaints, yes. The NPC complaint process requires a notarized complaint in the required format. Law enforcement complaints also commonly require a sworn statement. If you are abroad, consular notarization or apostille processing may be needed depending on the document and where it was executed.

How long does it take to clear a fake loan record?

Timelines vary. A lender may respond within days or weeks, but regulator action, cybercrime investigation, and credit record correction can take longer. Credit disputes through CIC depend partly on how quickly the submitting financial institution verifies and corrects its data.

Should I change all accounts linked to my old SIM?

Yes, as a security measure. Update banks, e-wallets, email recovery numbers, social media accounts, government accounts, delivery apps, and loan or shopping apps. Turn on stronger authentication where available and remove the old number from account recovery settings.

Key Takeaways

An old SIM number does not automatically make you liable for a loan. The lender must prove the loan contract and release of proceeds.
Identity theft through loan apps can involve RA 10175, RA 10173, the Revised Penal Code, and financial consumer protection laws.
Preserve evidence before blocking or deleting messages. Screenshots, call logs, telco records, and written disputes are critical.
Dispute the loan in writing and demand the application, verification, and disbursement records.
File with the correct office: NBI or PNP for cybercrime, NPC for data misuse, SEC for lending companies, BSP for banks and e-wallets, CIC for credit report errors, and telco/NTC for SIM-related issues.
If you receive a court summons, respond and appear. A fake loan still needs to be formally challenged.
For OFWs and foreigners, sworn documents may need consular notarization, apostille, or a specific Special Power of Attorney for a Philippine representative.