If someone has used your name, government-issued ID details, contact information, or even a selfie to apply for and obtain a loan from an online lending app or platform without your knowledge or consent, you are a victim of computer-related identity theft. This is a specific cybercrime under Philippine law. You may now be facing aggressive collection calls, threats, messages sent to your family or contacts, or negative entries affecting your credit standing—even though you never borrowed any money and never received the proceeds.

This article explains exactly what the law considers computer-related identity theft in these online lending scams, your rights as the victim, the practical step-by-step process to file a cybercrime complaint with the proper authorities, how to address ongoing harassment and credit issues, common challenges victims face, and clear answers to the questions people most often search for.

What Constitutes Computer-Related Identity Theft in Online Lending Scams

In these cases, a scammer typically obtains or steals your personal identifying information—such as full name, birthdate, address, mobile number, government ID scans or photos, or even a selfie—and uses it to apply for a loan through an online lending application (often called OLAs). The scammer may have acquired the data through data breaches, phishing, previous legitimate loan apps that harvested contacts, or by purchasing lists.

They submit the application in your name, sometimes completing OTP or biometric steps through fraudulently obtained access. Once approved, the loan amount is disbursed to the scammer’s e-wallet, bank account, or chosen channel. Collection efforts then target you using the contact details you “provided” or data scraped from your phone if the app accessed it.

You discover the problem when collection agents start calling or messaging you and your relatives, employer, or social media contacts with demands to pay, threats of shaming, or fabricated legal actions. In many instances, you never received any money or benefit from the transaction.

This matches the legal definition of computer-related identity theft: the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person without right.

Legal Basis Under Philippine Law

The primary law is Republic Act No. 10175, the Cybercrime Prevention Act of 2012. Specifically, Section 4(b)(3) penalizes computer-related identity theft. The Supreme Court upheld this provision as constitutional in the landmark case Disini, Jr. v. Secretary of Justice (G.R. No. 203335, February 18, 2014).

The penalty is imprisonment of prision mayor (6 years and 1 day to 12 years) or a fine of at least ₱200,000 up to an amount commensurate with the damage caused, or both. If no damage has occurred yet, the penalty is one degree lower.

Depending on the facts, prosecutors may also consider computer-related fraud under Section 4(b)(2) of the same law if the unauthorized input or interference in the lending platform’s computer system caused damage.

If the lending platform itself accessed your phone contacts without consent, used them for harassment or shaming, or otherwise processed your personal data improperly, this may also violate the Data Privacy Act of 2012 (Republic Act No. 10173). You can file a separate complaint with the National Privacy Commission (NPC) against the company.

You are not liable for any loan obtained without your authority. Philippine law does not hold identity theft victims responsible for fraudulent contracts entered in their name. The loan agreement is defective for lack of valid consent and authority.

Step-by-Step Practical Guide to Filing a Cybercrime Complaint

Acting quickly helps preserve evidence and stops further harm. Follow these steps in order:

Preserve all evidence immediately. Do not delete messages, call logs, app notifications, or emails. Take clear screenshots that show dates, times, phone numbers, usernames, URLs, and full conversation threads. Record screen activity if elements are dynamic. Note exact details of any financial impact or harassment. Keep original files and make working copies. This digital evidence is crucial for PNP or NBI investigators.
Document the full timeline in writing. Create a clear chronological narrative: when and how you first learned of the loan, what identifying information appears to have been used, all collection contacts (with dates, numbers, and content), and the impact on you and your family. This will form the basis of your complaint-affidavit.
Notify the lending platform or app in writing right away. Send a formal message through the app’s support channel, official email, or registered mail (keep proof). State clearly that any loan or application in your name was made without your consent or authority, demand that all collection activities cease immediately, that your data and any loan record be deleted, and that they confirm in writing within a specific number of days. Attach or reference your evidence. This creates an official record and may prompt the platform to investigate internally or cooperate with authorities.
File a formal complaint with the PNP Anti-Cybercrime Group (ACG) or NBI Cybercrime Division. These are the primary agencies for computer-related identity theft and online fraud.
- PNP ACG is often the most accessible first stop for identity theft and harassment cases. Contact them through official channels listed on pnp.gov.ph or acg.pnp.gov.ph, their hotline, email (acg@pnp.gov.ph), or visit the headquarters at Camp Crame, Quezon City, or a regional ACG unit. Some offices accept initial reports online or via email before requiring in-person submission.
- NBI Cybercrime Division is another strong option, especially for more complex cases. Visit the main office on Taft Avenue in Manila or a regional NBI office. They have a structured complaints process.
Bring or prepare: a valid government-issued ID (original and photocopy), your detailed sworn complaint-affidavit (they often help you execute or notarize it on-site), printed and digital copies of all evidence, and any initial police blotter from your local station if you filed one first for documentation.

Investigators will interview you, evaluate the evidence, assign a case number, and begin investigation. They can coordinate with telcos, banks, e-wallet providers, and the lending platform (sometimes using cyberwarrants) to trace the perpetrator and gather more evidence.
Follow up and cooperate. Provide additional information or documents when requested. Keep records of all your communications with the authorities.
Address credit and financial records in parallel. Request your credit report from the Credit Information Corporation (CIC) through their official channels (creditinfo.gov.ph) or accredited bureaus. Once you have your police or NBI case reference, dispute any inaccurate or unauthorized loan entry using the CIC’s Online Dispute Resolution System (ODRS). Also send a formal dispute letter directly to the lending company demanding removal of the record. Under the Credit Information System Act (RA 9510), you have the right to have erroneous information corrected.
Consider a complementary NPC complaint if the platform misused your data. If collectors accessed or used your contacts for shaming or harassment, file online or through privacy.gov.ph. The NPC can investigate the company’s data practices separately and impose penalties.

Common Challenges and Real-World Scenarios

Many victims initially feel pressured to pay “just to stop the calls.” This is rarely advisable—it can complicate proving the loan was unauthorized and may not end the harassment. Document everything instead and let authorities handle it.

Perpetrators are often difficult to identify quickly. They may use fake SIMs, VPNs, mule accounts, or operate from outside the Philippines. Investigations take time—weeks to several months is common—depending on complexity and agency workload. There is no guaranteed quick financial recovery, but clearing your name and stopping harassment are achievable goals.

Some platforms initially claim the loan was “validly” obtained through OTP or biometrics. Legally, consent obtained through fraud, phishing, or impersonation does not constitute valid authority or right. Your complaint should emphasize the lack of your voluntary participation.

OFWs and Filipinos abroad face extra steps but can still file. Use a trusted representative with a Special Power of Attorney (notarized and, if executed abroad, apostilled). Many agencies accept electronic submission of evidence and sworn statements. Coordinate with the Philippine embassy or consulate if needed for authentication.

Emotional stress is real. Victims often report anxiety, damaged family relationships from shaming messages, and sleep issues. Keep records of the impact—this can support your complaint and any future civil claim for damages under the Civil Code (quasi-delict).

Frequently Asked Questions

Am I legally responsible for repaying a loan taken out in my name without my knowledge or consent?
No. Because the application and any supposed consent were made without your authority, you are not a party to a valid loan contract. Philippine law treats this as identity theft, not your debt. Report it and formally dispute any collection or credit entry.

Which agency should I report to first for an online identity theft loan scam—PNP ACG, NBI, or my local police station?
Start with the PNP Anti-Cybercrime Group (ACG) for most identity theft and online fraud cases involving lending apps, as they handle these frequently and can act on digital evidence and harassment. You can also go directly to the NBI Cybercrime Division. Filing a blotter at your local police station first is helpful for documentation but is usually not sufficient by itself for cyber investigation.

What evidence do I need for a strong cybercrime complaint?
Clear, timestamped screenshots of all messages, calls, and app notifications; chat exports or screen recordings; your chronological narrative; proof of any impact on family or credit; and your valid ID. The more complete and organized your evidence, the faster investigators can act. Never delete anything.

Can the lending app or collectors continue harassing me and my family while my case is under investigation?
They should not. Continue documenting every contact. Persistent threats or shaming can support additional complaints (such as grave threats under the Revised Penal Code or a Data Privacy Act violation). Provide updates to the investigating officer.

How long does a PNP ACG or NBI investigation usually take?
It varies. Straightforward cases with good evidence may see initial action within days or weeks, but full investigation and identification of suspects often take one to several months. Active threats or ongoing harassment receive priority. Stay in touch with the assigned investigator and keep your own records.

Will filing a cybercrime complaint automatically remove negative information from my credit report?
Not automatically, but it is a critical first step. Use the police or NBI case reference to dispute the entry directly with the lending company and through the CIC’s Online Dispute Resolution System. You have a legal right to correction of inaccurate or unauthorized credit data.

Can I file a cybercrime complaint if I live abroad or am an OFW?
Yes. Many agencies accept complaints from overseas Filipinos. Prepare a sworn affidavit (notarized and apostilled if signed abroad), appoint a representative in the Philippines with a Special Power of Attorney, and submit evidence electronically where possible. Contact the PNP ACG or NBI for specific guidance and coordinate with your nearest Philippine embassy or consulate.

What if the scammer used a fake ID or manipulated documents versus my real information?
It does not change the core offense. Using any identifying information belonging to you without right still constitutes computer-related identity theft under RA 10175. The key element is the lack of your authority or consent.

Can I also file a civil case for damages or emotional distress?
Yes. After or alongside the criminal complaint, you may pursue a civil action for damages under the Civil Code (Articles 19, 20, 21, or quasi-delict provisions) against the responsible parties, including possibly the lending platform if it contributed to the harm. A successful criminal conviction can help support the civil claim. Consult a lawyer for this aspect.

How can I protect myself from this happening again?
Monitor your credit report regularly through CIC channels. Be extremely cautious with sharing personal documents or selfies online or with apps. Use strong, unique passwords and enable two-factor authentication. Review app permissions regularly and revoke unnecessary access to contacts or photos. Report suspicious activity early. Consider placing alerts or monitoring services if available.

Key Takeaways

Using your name or personal information to borrow money online without your consent is computer-related identity theft under Section 4(b)(3) of RA 10175 and is a serious criminal offense.
You are not liable for any such loan. The contract lacks valid consent and authority.
Act immediately to preserve evidence (screenshots, timelines, messages) and formally notify the lending platform in writing to cease all collection.
File your complaint primarily with the PNP Anti-Cybercrime Group (ACG) or NBI Cybercrime Division. Bring valid ID and a detailed sworn affidavit supported by evidence.
Simultaneously address harassment (document everything) and credit issues by disputing entries with the lender and the Credit Information Corporation (CIC) using your case reference.
Complementary complaints to the National Privacy Commission (NPC) may be appropriate if the platform misused your data or contacts.
Investigations take time, but persistent, well-documented action protects your name, stops harassment, and upholds your rights under Philippine law.

You have concrete legal remedies and dedicated government agencies equipped to handle these cases. Start with evidence preservation and a formal complaint—the sooner you act, the stronger your position becomes.