If you've received an unexpected SMS, app notification, or call about a loan approval, disbursement, or past-due amount in your name that you never applied for, or if you're worried your personal details from mandatory SIM registration have been misused, this is a stressful but increasingly common experience for many Filipinos.

Rising digital lending combined with the full rollout of SIM registration under Republic Act No. 11934 has created new pathways for identity theft and unauthorized financial transactions. Scammers and unscrupulous actors often piece together personal information from various sources and exploit it to open loans, sometimes using your registered mobile number to receive one-time passwords (OTPs). The good news is that Philippine law gives you clear rights and practical remedies. You are generally not liable for a loan you did not consent to or benefit from. This article walks you through the connections between SIM registration, identity theft risks, and loan alerts, plus exactly what to do step by step.

What SIM Registration Requires and Why It Exists

Republic Act No. 11934, the SIM Registration Act of 2022, mandates that every prepaid and postpaid SIM card in the Philippines must be registered with the subscriber’s full legal name, date of birth, present address, and a valid government-issued ID (such as the Philippine Identification Card or PhilID, driver’s license, passport, or UMID). New SIMs cannot be activated until registration is complete. Existing subscribers had an initial 180-day window (with possible extensions) to register, and unregistered SIMs face deactivation.

The law’s main goal is accountability. By linking every SIM to a real person, authorities can more easily trace perpetrators of text scams, phishing, and other cybercrimes that previously relied on anonymous prepaid SIMs. The National Telecommunications Commission (NTC) oversees implementation in coordination with the Department of Information and Communications Technology (DICT) and the National Privacy Commission (NPC).

Telcos (Globe, Smart, DITO, and others) collect and store this data. They are legally required to protect it under the Data Privacy Act of 2012 (Republic Act No. 10173). Unauthorized disclosure, selling of registered SIMs, or misuse of your information can result in penalties for the telco and gives you grounds to complain.

How SIM Registration Data Can Be Linked to Identity Theft and Loan Scams

While SIM registration was designed to fight fraud, it concentrates sensitive personal information in telco databases. Public concerns about potential breaches or internal misuse are real, even though the NPC actively monitors compliance. In practice, most identity theft cases involving loans do not come from telco hacks alone. Scammers more commonly obtain your details through:

Phishing messages or fake websites that trick you into uploading ID photos or personal information “for verification.”
Data leaks from other apps, websites, or previous breaches.
Social engineering or buying/selling of personal data on underground channels.
SIM swap attacks, where criminals use stolen ID details to convince a telco to transfer your number to a new SIM they control, letting them intercept OTPs for bank accounts or loan apps.

Once scammers have enough information (name, address, birthdate, and a mobile number that can receive OTPs), they can apply to online lending apps or informal lenders that perform only light verification. You may then receive an “alert” via SMS or push notification about an approved loan, a disbursement to a GCash or bank account you don’t recognize, or aggressive collection demands. Many victims first learn of the problem this way.

Your Rights When a Loan Is Taken Out in Your Name

Under Philippine law, a valid loan contract generally requires your free and voluntary consent (Civil Code principles on contracts). If you never applied, signed (physically or electronically), authorized, or received the proceeds, you are not obligated to pay. Taking out a loan in someone else’s name without consent can constitute estafa (swindling) under the Revised Penal Code, a cybercrime under Republic Act No. 10175 if computer systems were used, or a violation of the Data Privacy Act if your personal information was processed without legal basis or consent.

You also have protection against abusive collection. Republic Act No. 11765 (Financial Products and Services Consumer Protection Act) and Securities and Exchange Commission (SEC) rules, including Memorandum Circular No. 18, Series of 2019, prohibit harassment, public shaming, threats, or unfair debt collection practices by lending companies. Banks and other BSP-supervised institutions follow similar ethical collection guidelines.

Step-by-Step Guide: What to Do Immediately

Act quickly and document everything. Here is the practical sequence most victims follow successfully:

Preserve all evidence. Screenshot every SMS, app notification, call log, email, or social media message. Note dates, times, sender numbers or names, and any loan details mentioned. Do not delete anything.
Dispute directly with the lender in writing. Send a formal dispute letter or email (keep a copy and proof of sending). Clearly state that you did not apply for or authorize the loan, demand they immediately cease all collection activities and communications, and request copies of any documents they claim show your consent. Use the official contact channels listed on the lender’s verified website or app, not the number in the alert.
Secure your own accounts. Change passwords for email, banking, GCash, and other financial apps. Enable or strengthen two-factor authentication (preferably app-based, not SMS). Monitor statements daily for any unfamiliar transactions. If you suspect SIM swap, contact your telco immediately to block the line and request re-issuance with proper identity verification.
File a police report. Go to your local Philippine National Police (PNP) station or a cybercrime unit and request a blotter entry or, better, execute a sworn affidavit detailing the incident. Bring your evidence and valid ID. This document is powerful proof when dealing with lenders and credit bureaus. You can also report to the National Bureau of Investigation (NBI) for more complex cases.
Report to the National Privacy Commission (NPC) if data misuse is involved. Download the latest Complaint-Affidavit Form (CAF) from the NPC website. Fill it out completely, have it notarized, and submit it in person, via courier, or by email to complaints@privacy.gov.ph. The NPC has jurisdiction over how telcos and lenders handle your personal data. There may be a schedule of fees—check the current NPC Circular on fees before filing.
Check and dispute your credit information. Request your credit report through the Lista PH app (which connects to CIC data, including options from accredited entities like TransUnion or CIBI). Review it for any unauthorized loans, inquiries, or negative entries. If you find problems, file a dispute directly in the app or through the Credit Information Corporation (CIC) portal at creditinfo.gov.ph (you will need the Transaction Reference Number or TRN from your report). Provide your police affidavit and other evidence. CIC and its partners have processes to investigate and correct records.
Report harassment or unfair collection. If collectors are calling excessively, threatening you, contacting your family or employer, or posting about you online, document everything and escalate. For SEC-registered lending companies, file a complaint with the SEC. For banks or BSP-supervised entities, contact the Bangko Sentral ng Pilipinas (BSP). Serious cases may also warrant additional police reports for grave threats or cyber libel.
Follow up persistently. These processes take time—often weeks to a few months. Keep records of every communication and reference previous dispute dates and reference numbers when following up.

Common Pitfalls and Real-Life Scenarios

Many people initially ignore the alerts or pay a small “settlement” amount hoping the problem goes away. This can backfire: it may be interpreted as acknowledging the debt, and aggressive collectors often continue anyway. Another frequent issue is lenders or collectors ignoring written disputes. Always escalate with proof of your earlier dispute to the regulators (SEC, BSP, or NPC).

OFWs and foreigners face extra coordination challenges. The core process remains the same—use your passport for identification during SIM registration or disputes. If you are abroad, you may need a representative in the Philippines or assistance from the Philippine Embassy or consulate to notarize affidavits. Credit disputes can still be initiated remotely through apps and online portals in many cases.

SIM swap cases are particularly disruptive because the criminal gains control of your number and can intercept OTPs for existing accounts. Report suspected swaps to your telco right away and consider obtaining a new number while you resolve the broader issue.

Documents You Will Likely Need and Where to Submit Them

Police / NBI affidavit or blotter: Your valid ID, detailed written account of events, and all evidence. Submit in person at a station with a cybercrime desk when possible.
NPC complaint: Notarized Complaint-Affidavit Form, supporting evidence (screenshots, etc.), and valid ID. Submit via email, courier, or in person to the NPC.
CIC / credit bureau dispute: Credit report (from Lista app or partner), police affidavit, and any lender communications. File through the app or CIC’s online dispute system.
Lender dispute: Your written letter/email plus evidence. Send to the lender’s official channels.

Most filings have no or very low fees (notarization typically costs a few hundred pesos). Always verify current requirements on the official agency websites.

Frequently Asked Questions

Can someone really get a loan using only my name and registered SIM number?
Yes, if they have gathered enough additional personal details from other sources. Your registered number can be used to receive OTPs during the application, which is why acting fast on any suspicious alert is important.

Will I have to pay a loan I never applied for?
No. Without your consent and authorization, the loan contract is generally not enforceable against you. You must actively dispute it and provide evidence.

How can I tell if a loan alert is legitimate or a scam?
Verify directly using contact information from the lender’s official website or verified app—not the number in the message. Legitimate institutions rarely pressure you solely through SMS or demand immediate action without proper channels.

What if collection agents keep harassing me after I disputed the loan?
Document everything and report it. Unfair debt collection practices are prohibited under SEC rules, RA 11765, and NPC guidelines on personal data. Escalate to the appropriate regulator with proof of your dispute.

How long does it take to remove a fraudulent loan from my credit record?
It varies, but with complete documentation (especially a police affidavit), disputes are usually investigated within regulatory timelines. The Lista app and CIC portal often provide status updates. Persistent follow-up helps.

Is my SIM registration information safe from identity theft?
Telcos must protect your data under the Data Privacy Act, and the NPC oversees compliance. However, no system is 100% immune. Be cautious about sharing ID copies or photos elsewhere, and report any suspected misuse to the NPC.

Do I need a lawyer to dispute an unauthorized loan?
Not necessarily for the initial steps. Many people successfully handle disputes themselves with police reports and written letters. For complex or high-value cases, or if harassment continues, consult the Integrated Bar of the Philippines (IBP) chapter in your area or the Public Attorney’s Office (PAO) if you qualify for free legal aid.

Can foreigners or OFWs follow the same process from abroad?
Yes. Use your passport for identification. You may need to execute documents through a Philippine Embassy or consulate or authorize a representative in the Philippines. Credit report access via the Lista app and some online dispute channels can often be done remotely.

Should I just pay a small amount to make the calls stop?
It is generally better to dispute fully rather than make any payment, which could complicate proving the loan was unauthorized. Focus on documentation and escalation instead.

Where can I download the NPC complaint form or check CIC dispute instructions?
Visit the official National Privacy Commission website (privacy.gov.ph) for the latest Complaint-Affidavit Form and filing instructions. For credit reports and disputes, start with the Lista PH app or creditinfo.gov.ph.

Key Takeaways

SIM registration under RA 11934 ties mobile numbers to real identities to reduce anonymous fraud, but your data must still be protected under the Data Privacy Act.
You are not liable for loans taken without your consent. Philippine law requires voluntary agreement for a valid obligation.
Act immediately: preserve evidence, dispute in writing with the lender, obtain a police affidavit, report data issues to the NPC, and check/dispute your credit record via the Lista app or CIC channels.
Document every step. Persistent, well-documented action resolves most cases, even when collectors or lenders initially resist.
Protect yourself going forward by being extremely careful with personal documents and OTPs, monitoring accounts regularly, and using official channels for any financial matters.

Understanding these processes puts you back in control. Many Filipinos have successfully cleared fraudulent loans and stopped harassment by following these steps methodically. Stay calm, stay organized, and use the official government channels available to you.