I. Introduction

Identity theft in loan application cases has become increasingly common in the Philippines, especially with the rise of digital lending platforms, online banking, mobile wallets, buy-now-pay-later services, salary loans, credit cards, motorcycle financing, appliance financing, and other fast-credit products. A person may suddenly receive collection calls, demand letters, text messages, emails, credit bureau alerts, barangay notices, or even court papers for a loan he or she never applied for. In other cases, the victim discovers that someone used his name, identification documents, mobile number, email address, selfie, signature, employment details, or personal information to obtain credit.

The central legal problem is proof. The victim must show that he did not apply for the loan, did not authorize anyone to apply in his name, did not receive the proceeds or goods, and did not benefit from the transaction. At the same time, the lender or collection agency may claim that the application was supported by documents, digital records, a mobile number, an email address, a selfie, an electronic signature, or a one-time password. The dispute therefore often turns on evidence: who submitted the application, what information was used, what device or account was involved, where the proceeds went, and whether the lender performed adequate identity verification.

This article discusses how identity theft may be proven in Philippine loan application cases, the applicable legal concepts, the types of evidence that may be used, remedies against lenders and collectors, possible criminal complaints, data privacy remedies, civil defenses, and practical steps for victims.

II. What Identity Theft Means in Loan Application Cases

Identity theft in a loan application occurs when a person uses another person’s identity or personal information without authority to obtain credit, money, goods, services, or financial accommodation. It may involve the unauthorized use of:

Full name;
Date of birth;
Address;
Government-issued identification card;
Tax identification number;
Social Security System, GSIS, Pag-IBIG, or PhilHealth information;
Mobile number;
Email address;
Photograph or selfie;
Signature;
Employment information;
Bank account or e-wallet details;
Biometric or facial image;
Digital login credentials;
Personal references or emergency contacts.

The identity thief may be a stranger, a scammer, an online seller, a lending agent, a loan broker, a relative, a co-worker, an employer representative, a former partner, a household member, or even someone from within the lender’s sales or verification network.

III. Common Loan Identity Theft Scenarios

Identity theft in loan applications may happen in many ways. Common scenarios include:

A person loses a wallet containing IDs, and the IDs are later used to apply for a loan.
A scammer asks for IDs and selfies under the pretense of job hiring, cash assistance, SIM registration, online selling, investment, parcel delivery, or verification.
A relative or friend borrows a victim’s ID and uses it to obtain financing.
A lending agent fabricates applications using copied documents.
A phone number registered under the victim’s name is used to receive one-time passwords.
A victim’s social media photos are used to create fake accounts.
A stolen phone is used to access mobile lending apps.
A forged signature is used in a paper loan application.
An electronic signature is affixed without the victim’s consent.
A loan is released to a bank account, e-wallet, merchant, or seller controlled by someone else.
A person is named as borrower in a loan used to buy goods delivered to another person.
A collection agency pursues the victim based only on a database record, without proof of consent.

Each situation requires a slightly different evidentiary strategy.

IV. The Central Issue: Consent and Participation

In loan identity theft cases, the core question is whether the alleged borrower personally consented to the loan and participated in the transaction. A lender must generally prove the existence of a valid obligation. A victim who denies the loan should focus on showing absence of consent, absence of authorization, absence of benefit, and irregularity in the documents or digital trail.

Important questions include:

Did the victim sign the loan application?
Did the victim submit the identification documents?
Did the victim own or control the mobile number used?
Did the victim receive and input the one-time password?
Did the victim own the email address used?
Did the victim receive the proceeds?
Was the bank account or e-wallet in the victim’s name?
Did the victim receive the purchased goods?
Was the victim physically present at the time of application?
Was the application made from a device, IP address, or location connected to the victim?
Did the victim ever acknowledge the loan?
Did the lender verify identity properly?

A denial alone may not always be enough. The stronger approach is to combine denial with documentary, digital, testimonial, and circumstantial evidence.

V. Applicable Philippine Legal Framework

Identity theft in loan applications may involve several areas of Philippine law.

1. Civil Code

The Civil Code governs obligations and contracts. A valid loan or credit obligation requires consent, object, and cause. If the victim did not consent, there may be no valid contract binding him. If a signature was forged or an application was submitted without authority, the alleged borrower may deny liability.

Civil remedies may include declaration of inexistence of obligation, damages, injunction, correction of credit records, and defense against collection or civil suits.

2. Revised Penal Code

Depending on the facts, the offender may be liable for crimes such as falsification, use of falsified documents, estafa, other deceits, unjust vexation, grave coercion, threats, or related offenses. If signatures, IDs, certificates, employment records, or public documents were falsified, criminal liability may arise.

3. Cybercrime Prevention Act

If the identity theft was committed through a computer system, online platform, mobile application, email, social media, or digital device, cybercrime laws may apply. Computer-related identity theft, computer-related fraud, computer-related forgery, and related offenses may be relevant.

4. Data Privacy Act

The unauthorized collection, use, disclosure, or processing of personal information may raise data privacy issues. A lender, collector, or third party may face liability if personal data was processed unlawfully, used without consent or lawful basis, inadequately protected, or disclosed to contacts and third persons without authority.

5. Lending and Financing Regulations

Lending companies, financing companies, banks, online lending platforms, credit card issuers, and other financial institutions may be subject to different regulators, depending on their nature. Regulatory complaints may be available where there are abusive collection practices, inadequate disclosures, unfair debt collection, harassment, or failure to investigate identity theft claims.

6. Rules on Electronic Evidence

Digital records may be used as evidence if properly authenticated. Loan application logs, electronic signatures, SMS verification, email confirmations, app records, IP logs, device identifiers, geolocation, screenshots, metadata, audit trails, and database entries may become important.

VI. Burden of Proof in Identity Theft Loan Cases

The burden of proof depends on the proceeding.

In a civil collection case, the lender generally has the burden to prove the loan, the borrower’s consent, release of proceeds, and default. The alleged borrower may raise identity theft, forgery, lack of consent, lack of authority, fraud, or absence of consideration as defenses.

In a criminal complaint, the complainant must present evidence showing probable cause that a crime was committed and that the respondent is probably guilty. At trial, guilt must be proven beyond reasonable doubt.

In a data privacy complaint, the issue may be whether personal information was processed unlawfully, negligently, excessively, or without adequate safeguards.

In a regulatory complaint, the relevant regulator may examine whether the lender complied with verification, disclosure, collection, privacy, and consumer protection obligations.

A victim does not need to prove every technical detail at the beginning, but should gather enough evidence to show that the loan was unauthorized and that the lender or authorities should investigate.

VII. Evidence That the Victim Did Not Apply for the Loan

The victim should gather evidence showing non-participation. Useful evidence may include:

Affidavit of denial explaining that the victim did not apply for the loan;
Police report or blotter regarding lost ID, stolen phone, scam, or identity theft;
Notarized affidavit of loss for missing IDs or documents;
Proof that the victim was elsewhere when the loan was supposedly applied for;
Travel records, work attendance logs, CCTV, receipts, or location evidence;
Proof that the mobile number or email used does not belong to the victim;
Certification from a telecom provider, if obtainable;
Proof that the bank account or e-wallet receiving the loan proceeds is not the victim’s;
Bank or e-wallet statements showing no receipt of proceeds;
Proof that goods financed by the loan were delivered to another person or address;
Screenshots of collection messages and calls;
Copies of demand letters;
Copies of the loan application, promissory note, disclosure statement, or contract;
Comparison of signatures;
NBI, police, or cybercrime complaint records;
Data privacy requests and responses;
Communications with the lender disputing the loan.

The victim should create a chronological file of events.

VIII. The Importance of Obtaining the Loan Documents

A victim cannot properly dispute an alleged loan without seeing the documents or records relied upon by the lender. The victim should request copies of:

Loan application form;
Promissory note;
disclosure statement;
Credit agreement;
Borrower information sheet;
Submitted ID documents;
Selfie or biometric verification image;
Signature specimen or electronic signature record;
Proof of one-time password verification;
Mobile number and email used;
Device, IP, and app logs, if available;
Date and time of application;
Approval records;
Disbursement record;
Bank account or e-wallet where proceeds were released;
Merchant invoice or delivery record;
Collection account records;
Assignment or endorsement to collection agency;
Credit bureau reporting record.

If the lender refuses to provide documents, the victim may record the refusal and raise it in a complaint, regulatory proceeding, civil case, or data privacy request.

IX. Affidavit of Denial

An affidavit of denial is often the first formal document prepared by the victim. It should be specific, not generic.

It may state:

The victim’s identity and address;
How the victim learned of the alleged loan;
The name of the lender or collector;
The alleged account number, if known;
A categorical denial of applying for or authorizing the loan;
A denial of receiving proceeds or goods;
A denial of signing any loan document;
A denial of using the phone number, email, bank account, or e-wallet involved, if applicable;
Facts showing possible identity theft;
Prior loss of ID, stolen phone, phishing incident, scam, or unauthorized use of personal data;
Steps taken to report the matter;
Request for investigation and correction of records.

A bare statement that “I do not owe this” is weaker than a detailed explanation supported by exhibits.

X. Police Blotter, NBI, and Cybercrime Reports

A police blotter or report helps document the victim’s prompt denial. It may not prove the entire case by itself, but it creates an official record.

The victim may consider reporting to:

Local police station;
Philippine National Police Anti-Cybercrime Group, if online or digital means were used;
National Bureau of Investigation Cybercrime Division, if appropriate;
Prosecutor’s office, through a criminal complaint;
Barangay, if harassment or local disputes are involved.

Reports are more useful when supported by evidence such as screenshots, IDs used, account numbers, phone numbers, names of collectors, transaction dates, and copies of documents.

XI. Signature Forgery

If the alleged loan involves a handwritten signature, the victim may deny the signature and request production of the original document. Signature forgery may be proven through:

Testimony of the alleged signer;
Comparison with genuine signatures;
Circumstances showing the victim could not have signed;
Expert handwriting examination;
Evidence that the ID or document used was lost or copied;
Inconsistencies in the application form;
Witness testimony;
Absence of proper identification or personal appearance.

A notarized document carries evidentiary weight, but notarization can be challenged if the person did not appear before the notary, the ID was false, the notarial register is defective, or the notarization was irregular.

XII. Electronic Signatures and Digital Consent

Many loans are now processed digitally. Lenders may claim that the victim electronically signed the agreement or clicked acceptance in an app. The victim should ask for proof of digital consent, including:

Account creation date;
Email or mobile verification;
OTP logs;
IP address;
Device ID;
Device model;
SIM or mobile number used;
Login history;
Geolocation, if collected;
Selfie verification;
Timestamp of acceptance;
Audit trail;
Copy of the electronic document allegedly accepted.

An electronic signature is not automatically conclusive. It must be linked to the alleged signer. If the digital account, device, email, or phone number does not belong to the victim, the lender’s proof may be weak.

XIII. One-Time Passwords and Mobile Numbers

Lenders often rely on one-time passwords as proof of verification. However, OTP verification alone may not be enough if the mobile number was not controlled by the victim or was obtained through fraud.

Issues to examine include:

Was the mobile number registered to the victim?
Was the victim in possession of the SIM at the time?
Was the victim’s phone stolen?
Was the SIM replaced or cloned?
Was the number recycled by the telecom provider?
Did the scammer trick the victim into revealing the OTP?
Did the lender verify that the phone number belonged to the borrower?
Were there other identity checks besides OTP?
Was the OTP sent to a number newly linked to the account?
Were there suspicious changes in contact details?

The victim should not admit liability merely because an OTP was used. The issue is whether the OTP was validly linked to the victim’s consent.

XIV. Selfies, Facial Images, and Liveness Checks

Digital lenders may require a selfie holding an ID. Identity thieves may use manipulated photos, stolen images, deepfake-like edits, printed photos, or another person’s face. Sometimes the selfie may show that the applicant is not the victim.

The victim should request a copy of the selfie or verification image. It may prove:

The person in the photo is not the victim;
The ID was digitally altered;
The image is inconsistent with the victim’s age or appearance;
The background location is unfamiliar;
The image was reused from another source;
The liveness check was inadequate.

If the lender refuses to provide the selfie because of privacy concerns, the victim may request controlled disclosure or verification through formal channels.

XV. Disbursement Trail: Where Did the Money Go?

The disbursement trail is often the strongest evidence. If the victim did not receive the proceeds, the alleged loan becomes highly questionable.

Important records include:

Bank account number receiving the funds;
Name of account holder;
E-wallet account details;
Cash pickup recipient;
Merchant payment record;
Delivery address for financed goods;
Invoice and receipt;
Device or account used to withdraw funds;
ATM or cash-out records;
Transfer history after disbursement.

If proceeds were sent to an account not owned or controlled by the victim, the victim should emphasize this in all disputes and complaints.

XVI. Goods Financing and Merchant Loans

In appliance, gadget, motorcycle, vehicle, or merchant-financed loans, the issue is often whether the victim received the goods. Evidence may include:

Sales invoice;
Delivery receipt;
Release form;
CCTV at store or dealership;
Identification presented at release;
Buyer’s signature;
Delivery address;
Name of person who received the item;
Seller or agent who processed the application;
Serial number or registration details of the item.

If the item was delivered to another address or released to another person, this supports identity theft.

XVII. Employment and Salary Loan Fraud

Some loans are approved based on employment documents. Identity thieves may submit fake certificates of employment, payslips, company IDs, or HR confirmations.

The victim may obtain:

Certificate from employer stating no such loan authorization;
Payroll records showing no salary deduction authorization;
Proof that submitted payslips are fake;
HR certification that the lender did not verify employment;
Proof that the victim was not employed at the claimed company;
Proof that the loan proceeds were not credited to the victim’s payroll account.

Employers should be careful in releasing employee data to lenders without proper authority.

XVIII. Credit Cards and Credit Lines

Identity theft may also involve credit cards, revolving credit, or online credit lines. Proof may focus on:

Application documents;
Address where the card was delivered;
Recipient of the card;
Activation logs;
Phone number used for activation;
Merchant transactions;
Delivery courier records;
CCTV in stores;
Online transaction IP logs;
Dispute history.

The victim should immediately request blocking, investigation, and correction of credit reporting.

XIX. Loan App Harassment and Contact Shaming

Some online lenders or collectors contact the victim’s phone contacts, relatives, employer, co-workers, or social media friends. In identity theft cases, this can cause serious reputational harm.

Victims should document:

Screenshots of messages;
Call logs;
Names and numbers of collectors;
Messages sent to third persons;
Threats, insults, or public shaming;
Disclosure of alleged debt to unauthorized persons;
False statements accusing the victim of fraud;
Contact with employer or clients;
Social media posts or group messages;
Demand letters sent to wrong addresses.

Such conduct may support complaints for abusive collection, data privacy violations, damages, or other remedies.

XX. Data Privacy Rights of the Victim

A victim whose personal information was used in a loan application may invoke data privacy rights. These may include the right to be informed, right to access, right to object, right to dispute inaccuracy, right to erasure or blocking in proper cases, and right to damages when legally justified.

The victim may send a written request to the lender asking:

What personal data was collected;
Source of the personal data;
Purpose of processing;
Basis for processing;
Copies of loan application documents;
Identity of recipients or collection agencies;
Whether data was reported to credit bureaus;
Whether data was shared with third parties;
Correction, blocking, or deletion of inaccurate records;
Investigation of unauthorized processing.

If the lender ignores or denies a valid request without basis, a complaint may be filed with the proper data privacy authority.

XXI. Credit Bureau and Negative Credit Record Issues

Identity theft loans may damage the victim’s credit record. A victim may be rejected for legitimate loans, credit cards, employment screening, housing, or business transactions because of a fraudulent account.

The victim should request:

Investigation by the lender;
Suspension of collection during investigation;
Removal or correction of negative reporting;
Written certification that the account is disputed;
Notice to credit bureaus;
Confirmation that the account was not validly contracted by the victim;
Deletion or correction of inaccurate data.

If the lender refuses, the victim may escalate through complaints and legal action.

XXII. Demand Letter to the Lender

A formal dispute letter should be sent to the lender or collector. It should:

Identify the disputed loan;
Deny the application and obligation;
State that the matter involves suspected identity theft;
Demand copies of all loan documents and verification records;
Demand proof of disbursement;
Demand suspension of collection;
Demand that no negative credit reporting be made or maintained while under dispute;
Demand investigation;
Demand cessation of harassment and third-party disclosure;
Reserve the right to file civil, criminal, regulatory, and data privacy complaints.

The letter should be sent through a trackable method and preserved with proof of receipt.

XXIII. Complaint Against the Identity Thief

If the suspected perpetrator is known, the victim may consider a criminal complaint. Possible evidence includes:

Copy of falsified application;
ID used;
forged signature;
screenshots of communications;
bank or e-wallet trail;
CCTV;
delivery receipt;
witness statements;
admission by the perpetrator;
proof that proceeds or goods went to the perpetrator.

The complaint should clearly connect the suspect to the act of using the victim’s identity.

XXIV. Complaint Against the Lender or Collector

A lender may not be the identity thief. However, the lender may still face liability if it negligently approved the loan, ignored red flags, failed to verify identity, mishandled personal data, continued collection after notice of identity theft, reported inaccurate credit data, or engaged in abusive collection.

Possible claims or complaints may involve:

Negligent verification;
Unfair or abusive collection;
Violation of data privacy rights;
Defamation or reputational harm;
Damages under civil law;
Failure to correct inaccurate records;
Harassment or threats;
Disclosure of personal information to unauthorized third persons.

The strength of the complaint depends on proof of the lender’s conduct and the applicable regulatory framework.

XXV. Civil Action to Declare Non-Liability

If the lender insists on collecting or sues the victim, the victim may raise defenses or file an appropriate civil action. Possible reliefs include:

Declaration of inexistence or nullity of the loan obligation;
Injunction against collection;
Damages for harassment or injury to reputation;
Correction of records;
Removal of negative credit reporting;
Attorney’s fees, where justified;
Return of money wrongfully collected;
Protection against further unauthorized processing of data.

Where the lender files a collection case, the victim should answer on time and raise lack of consent, identity theft, forgery, fraud, absence of consideration, failure to prove loan release, and other defenses.

XXVI. If the Victim Already Paid Under Pressure

Sometimes victims pay because collectors threaten lawsuits, public shaming, employer disclosure, or credit damage. Payment may complicate the defense, but it does not always prove liability.

The victim may argue that payment was made under protest, mistake, intimidation, or to stop harassment. Evidence may include:

Messages showing threats;
Written statement that payment was under protest;
Immediate dispute letters;
Police or regulatory complaints;
Lack of loan documents;
Proof of identity theft;
Receipts of payment.

If possible, victims should avoid making payments on disputed identity theft accounts without legal advice or written reservation of rights.

XXVII. If the Victim’s ID Was Voluntarily Given to Someone Else

Many identity theft cases begin with the victim voluntarily giving copies of IDs or selfies to another person for a different purpose. This does not necessarily mean the victim consented to a loan.

The issue is scope of consent. A person may consent to provide an ID for employment screening, parcel verification, SIM registration assistance, online selling, or a raffle, but not consent to a loan application.

The victim should explain:

Why the ID was given;
To whom it was given;
The limited purpose;
When it was given;
What representations were made;
Why the victim did not authorize a loan;
How the documents may have been misused.

Messages with the person who requested the ID are very important.

XXVIII. If the Victim Was Tricked Into Giving an OTP

A scammer may tell the victim to provide an OTP for a supposed delivery, job application, prize, account verification, or refund. If the OTP was then used for a loan, the lender may argue that the OTP confirms consent.

The victim should show:

The OTP was obtained through deception;
The victim did not know it was for a loan;
The scammer’s messages;
The time sequence of events;
Lack of receipt of proceeds;
Immediate reporting after discovery;
Absence of other borrower verification.

Sharing an OTP may be negligent, but negligence does not automatically create a valid loan obligation if there was no informed consent and no benefit received.

XXIX. If the Victim’s Phone Was Stolen

If a stolen phone was used to obtain a loan, the victim should gather:

Police report for stolen phone;
Affidavit of loss;
Proof of SIM blocking request;
Telecom reference number;
Device purchase records;
Timeline of theft and loan application;
Account login alerts;
Screenshots of unauthorized transactions;
Bank or e-wallet blocking records.

The timeline is crucial. If the loan was applied for after the phone was stolen, the victim has stronger evidence.

XXX. If the Victim’s Relative Used the Identity

Family identity theft is sensitive. A parent, sibling, child, spouse, cousin, or in-law may use the victim’s identity to obtain a loan. The victim may hesitate to file a criminal complaint, but civil liability and credit damage may continue unless the dispute is formally documented.

Options include:

Written admission by the relative;
Settlement with the lender;
Substitution or assumption of liability by the true borrower, if lender agrees;
Complaint for falsification or fraud, if necessary;
Civil action for reimbursement or damages;
Request for correction of credit records.

A private family arrangement does not automatically bind the lender unless the lender agrees or a court rules on the matter.

XXXI. Role of Notarization

Some loan documents are notarized. A notarized document is generally treated as public document and may enjoy evidentiary weight. But notarization does not make a forged signature valid.

The victim may challenge notarization by showing:

He did not personally appear before the notary;
The ID used was not validly presented by him;
The notarial register does not contain proper details;
The signature in the notarial register is not his;
The notary failed to follow required procedures;
The document contains false personal information;
The victim was elsewhere at the time of notarization.

Complaints against notaries may be considered in serious cases.

XXXII. Importance of Timeline

A clear timeline can make or break an identity theft case. The victim should reconstruct:

When the ID was lost, stolen, copied, or submitted;
When the loan was supposedly applied for;
When the loan was approved;
When proceeds were released;
Where proceeds were sent;
When the first collection notice was received;
When the victim disputed the loan;
When reports were filed;
When the lender responded;
When credit reporting occurred.

A timeline helps investigators, lawyers, regulators, and courts understand the case.

XXXIII. Preservation of Digital Evidence

Victims should preserve digital evidence carefully. Screenshots may help, but they should be supported by original messages when possible.

Best practices include:

Do not delete texts, emails, or app notifications;
Take screenshots showing date, time, sender, and full message;
Export chat histories if possible;
Save call logs;
Record collection numbers;
Preserve envelopes and demand letters;
Save emails in original format;
Back up files securely;
Avoid editing images;
Print copies for affidavits and complaints.

For serious cases, digital forensics may be considered.

XXXIV. Witnesses

Witness testimony may help prove identity theft. Potential witnesses include:

Employer confirming work location at the time of application;
Family member confirming loss of phone or ID;
Barangay official who received the complaint;
Store employee who released goods to another person;
Courier who delivered a card or item;
Bank or e-wallet representative;
Telecom representative;
Person who received collection calls;
Person who saw the actual applicant;
Expert witness for handwriting or digital evidence.

Witnesses should execute affidavits when appropriate.

XXXV. Red Flags in Fraudulent Loan Applications

A victim should examine the loan file for red flags, such as:

Wrong address;
Wrong employer;
Wrong income;
Wrong email;
Wrong mobile number;
Photo does not match victim;
Signature differs;
ID appears altered;
Application was made at unusual time;
Proceeds sent to unknown account;
Goods delivered to unrelated address;
Emergency contacts unknown to victim;
Application submitted through an agent;
Multiple loans made in a short period;
No proper proof of borrower’s personal appearance or consent.

These red flags should be highlighted in disputes and affidavits.

XXXVI. Identity Theft as a Defense in Collection Cases

If sued for collection, the alleged borrower must respond within the required period. Ignoring court papers can lead to default and judgment.

Possible defenses include:

No consent to the loan;
Forged signature;
Unauthorized electronic signature;
No receipt of proceeds;
No benefit from the transaction;
Fraud by a third person;
Negligent verification by lender;
Failure to prove identity of borrower;
Failure to authenticate electronic records;
Payment records do not connect to alleged borrower;
Violation of disclosure requirements;
Invalid assignment to collector;
Unconscionable charges or penalties;
Damages from wrongful collection.

The victim may also file counterclaims where appropriate.

XXXVII. Small Claims Cases

Some collection cases may be filed as small claims. In small claims proceedings, the alleged borrower should still raise identity theft clearly and submit evidence.

Useful attachments include:

Affidavit of denial;
Police or NBI report;
Affidavit of loss;
Demand dispute letter;
Lender’s documents showing wrong information;
Screenshots of harassment;
Bank or e-wallet statements;
Proof of non-receipt of proceeds;
Proof that the phone or email used was not the victim’s;
Any admission by the true borrower.

Because small claims procedure is simplified, the evidence should be organized, concise, and easy to understand.

XXXVIII. Criminal Complaint for Falsification

If the loan documents contain forged signatures, false statements, fake IDs, or fabricated certificates, falsification may be considered. The complaint should identify:

The falsified document;
The false entry or forged signature;
Why it is false;
Who prepared, used, or benefited from it;
How it caused damage;
Supporting documents and witnesses.

If the identity thief is unknown, the complaint may initially be against unidentified persons, but evidence should be gathered to identify them.

XXXIX. Criminal Complaint for Estafa or Fraud

If the offender used deceit to obtain money or goods from the lender in the victim’s name, estafa or fraud-related offenses may be considered. The victim may not be the direct financial loser if the lender released the money, but the victim may still suffer injury through credit damage, harassment, and misuse of identity.

The lender may also be a complainant against the true offender. In practice, victims should encourage the lender to investigate the real recipient of proceeds rather than pursue the innocent person named in the fraudulent application.

XL. Computer-Related Identity Theft and Cyber Fraud

If the fraudulent loan was applied for through an app, website, email, or digital system, cybercrime remedies may apply. Relevant evidence includes:

App account records;
Email address used;
Phone number used;
IP address;
Device information;
Location logs;
Digital wallet trail;
Screenshots of phishing;
Scam messages;
Login history.

The victim should report promptly because digital evidence can be deleted, overwritten, or become difficult to obtain.

XLI. Data Privacy Complaint

A data privacy complaint may be appropriate where personal data was processed without authority or where the lender or collector mishandled the victim’s personal information.

Possible grounds include:

Unauthorized use of personal data for a loan;
Failure to secure personal data;
Refusal to correct inaccurate data;
Unlawful disclosure to contacts or employer;
Excessive collection of personal information;
Use of contacts list for collection harassment;
Continued processing after identity theft notice;
Failure to respond to access or correction requests.

The victim should attach evidence of requests, responses, screenshots, and harm suffered.

XLII. Regulatory Complaints

Depending on the type of lender, complaints may be filed with the appropriate regulator. The complaint should focus on:

Failure to verify borrower identity;
Abusive collection practices;
Excessive charges;
Misleading loan records;
Failure to investigate identity theft;
Unauthorized credit reporting;
Data privacy violations;
Harassment of third persons;
Refusal to provide loan documents.

A regulatory complaint may not always erase the debt immediately, but it can pressure the lender to investigate and comply with consumer protection rules.

XLIII. Civil Damages

A victim may claim damages if wrongful collection, credit damage, harassment, or misuse of identity caused injury. Possible damages include:

Actual damages, if proven by receipts or records;
Moral damages for anxiety, humiliation, or reputational harm, where legally justified;
Exemplary damages in proper cases;
Attorney’s fees, where allowed;
Costs of suit;
Damages under data privacy laws, where applicable.

Damages require proof. The victim should document medical consultations, lost opportunities, rejected loan applications, employer issues, reputational harm, and expenses incurred.

XLIV. Demand to Stop Collection

After disputing the loan, the victim may demand that the lender and collection agency stop collection while investigating. The demand may include:

Stop calling and texting except through formal written channels;
Stop contacting relatives, employer, co-workers, and references;
Stop threatening public disclosure;
Stop reporting or maintain a disputed status with credit bureaus;
Provide complete documents;
Identify the basis for claiming the victim is the borrower;
Investigate the real recipient of proceeds;
Confirm closure or correction in writing.

Any continued harassment after formal notice strengthens the victim’s position.

XLV. How to Structure the Evidence File

Victims should organize their evidence in folders:

Folder 1: Identity Documents

Copies of valid IDs, affidavits of loss, police reports, and proof of stolen or compromised documents.

Folder 2: Loan Records

Demand letters, account numbers, application forms, promissory notes, disclosure statements, screenshots, and lender responses.

Folder 3: Proof of Non-Participation

Work attendance, travel records, bank statements, e-wallet records, proof that mobile number or email was not used by the victim.

Folder 4: Disbursement Evidence

Bank, e-wallet, merchant, delivery, or cash-out records showing where the proceeds or goods went.

Folder 5: Harassment and Collection Evidence

Call logs, messages, social media posts, emails, third-party messages, and witness statements.

Folder 6: Complaint Records

Police, NBI, cybercrime, regulatory, data privacy, and court filings.

Organized evidence makes the claim more credible.

XLVI. Sample Theory of the Case

A strong identity theft defense may be presented as follows:

“The alleged loan is not a valid obligation of the victim because the victim did not apply for it, did not sign any loan document, did not authorize any person to use his identity, did not control the mobile number or email used in the application, did not receive the loan proceeds, and did not benefit from the transaction. The application was processed using personal data obtained without authority. The lender failed to verify the identity of the true applicant and released the proceeds to an account or person not connected to the victim. Upon learning of the alleged loan, the victim promptly disputed it, reported the identity theft, and requested investigation and correction of records.”

This theory should be supported by documents, not merely asserted.

XLVII. What Lenders Should Prove

A lender pursuing the alleged borrower should be prepared to prove:

The identity of the borrower;
The borrower’s consent;
The authenticity of signature or electronic acceptance;
Proper verification of identity;
Release of proceeds to the borrower or for the borrower’s benefit;
Compliance with disclosure rules;
Correct computation of balance;
Authority of the collector or assignee;
Compliance with data privacy and collection rules;
Proper credit reporting.

If the lender cannot prove these, the identity theft defense becomes stronger.

XLVIII. Practical Steps for Victims

A victim should act quickly and systematically:

Do not ignore collection notices.
Do not admit liability.
Do not make payment without written reservation or advice.
Ask for complete loan documents.
Send a written dispute letter.
File a police or cybercrime report.
Execute an affidavit of denial.
Report lost IDs or stolen phone.
Secure bank and e-wallet statements.
Document all collection harassment.
Demand correction of credit records.
File regulatory or data privacy complaints if necessary.
Answer court papers on time.
Consult a lawyer for litigation, criminal complaints, or serious credit damage.

Prompt action helps show good faith and reduces the risk of default judgment or worsening credit harm.

XLIX. Mistakes to Avoid

Victims should avoid:

Ignoring demand letters;
Arguing only by phone without written records;
Paying just to stop harassment without documenting protest;
Deleting messages or screenshots;
Failing to request loan documents;
Failing to report lost IDs or stolen phone;
Posting defamatory accusations online;
Missing court deadlines;
Giving more personal information to suspicious collectors;
Signing settlement documents that admit liability without understanding them;
Assuming a police blotter alone will erase the loan;
Waiting too long to dispute credit reports.

L. Conclusion

Proving identity theft in loan application cases in the Philippines requires more than a simple denial. The victim must build a clear, evidence-based story showing lack of consent, lack of authorization, non-receipt of proceeds, and irregularity in the loan application process. The strongest cases usually combine affidavits, police or cybercrime reports, loan documents, digital records, disbursement trails, proof of non-receipt, proof of forged or unauthorized signatures, and documentation of collection conduct.

The alleged borrower should demand the lender’s proof, dispute the loan in writing, report the identity theft, preserve evidence, protect credit records, and respond promptly to any collection case. Depending on the facts, remedies may include civil defenses, criminal complaints, regulatory complaints, data privacy complaints, injunction, damages, correction of credit reports, and declaration of non-liability.

Identity theft cases are evidence-driven. The key is to show that the victim’s personal information was used, but the victim did not knowingly, freely, and personally enter into the loan transaction or receive its benefits. A lender, collector, investigator, prosecutor, regulator, or court will be more likely to act when the victim presents a complete, consistent, and well-documented record.

This article is for general legal information in the Philippine context and is not a substitute for legal advice from counsel based on the specific facts of a case.