Quick answer

If a loan, credit card, credit line, or similar account was opened using your identity without your authority, immediately dispute it in writing with the lender. State clearly that you did not apply for, sign, activate, use, or benefit from the account. Ask the lender to freeze the account and collection activity, preserve its records, investigate the application, give you copies of the documents and data linked to your identity, and correct any adverse credit reporting.

Do not pay, promise to pay, agree to a restructuring, or describe the debt as yours merely to stop collection calls. Those actions can complicate the factual dispute. An account bearing your name does not by itself prove that you knowingly entered into the loan, but responsibility ultimately depends on the application records, authentication data, receipt or use of proceeds, and other evidence.

Also secure your compromised accounts, obtain and dispute your Credit Information Corporation credit report if the fraudulent account appears there, and report apparent identity theft or forgery to law enforcement. Escalate unresolved complaints to the regulator that supervises the lender.

Act quickly, but preserve evidence first

Before deleting messages or resetting a compromised device, save what may later establish when and how the fraud occurred:

Collection texts, emails, app notifications, letters, call logs, and voice messages
The lender’s name, app or website, account or loan number, claimed balance, and disbursement date
Screenshots showing the sender, complete URL, date, time, and surrounding conversation
Any unfamiliar one-time password, password-reset, SIM-change, login, or loan-approval notice
Bank or e-wallet statements showing that you did not receive the proceeds—or showing where an unauthorized transfer went
Copies of IDs or personal documents that may have been lost, stolen, photographed, or previously submitted elsewhere
Evidence of a lost phone, SIM, wallet, email account, or data breach
Names, numbers, and representations made by collectors
Complaint reference numbers and proof that each notice was delivered

Keep original electronic files where possible. Screenshots are useful, but exported emails, original attachments, transaction records, and device logs may contain stronger identifying information.

Do not click a link in a suspicious collection message to “verify” the account. Find the lender’s official contact details independently through its website, published customer-assistance channel, or regulator listing.

Report the account to the lender in writing

Send a separate dispute to every institution claiming that you owe money. A phone call may help stop immediate activity, but a dated written complaint creates a clearer record.

Your notice should include:

Your name and safe contact details.
The disputed account or application number, if known.
A direct statement that the account was opened without your knowledge or authority.
A statement identifying what you did not do—for example, that you did not submit the application, sign the agreement, provide the selfie, receive the proceeds, or authorize another person to act for you.
The date and manner in which you discovered the account.
A request to mark the account as disputed and suspend collection while it is investigated.
A request to stop interest, fees, penalties, and adverse reporting while the alleged unauthorized transaction is under investigation.
A request to preserve all application, authentication, disbursement, communication, and collection records.
A request for the lender’s written findings, complaint reference number, and correction of records if the account is unauthorized.

Under the Financial Products and Services Consumer Protection Act, Republic Act No. 11765, covered financial service providers must maintain a free consumer-assistance mechanism. For an alleged disputed amount or unauthorized transaction, the law requires the provider, pending its final investigation report, to suspend interest, fees, and charges or give a similar reasonable accommodation.

Ask the lender to preserve and, subject to lawful limitations, provide records such as:

The complete application and submitted identification documents
The contract, promissory note, disclosure statement, and electronic-signature or consent record
The application date, time, device identifiers, IP address, phone number, email address, and location data
Selfie, facial-verification, liveness-check, or video records
OTP and authentication logs
Call recordings and chat records
The destination bank or e-wallet account and proof of disbursement
Any change-of-contact, activation, withdrawal, purchase, or payment history
The source and recipients of your personal data
The entity to which the account was reported or assigned for collection

Some information may be withheld or redacted to protect another person’s data, security controls, privileged material, or an active investigation. The lender should nevertheless address your access and correction requests lawfully and explain any refusal.

Send only the identification reasonably needed to verify you. Watermark copies—for example, “For identity-theft dispute with [lender], [date]”—and avoid sending full ID images through an unverified personal number or social-media account.

Secure the identity and accounts that may have been compromised

A fraudulent loan application may be only one use of stolen information. Promptly:

Change the passwords of your primary email, banking, e-wallet, shopping, government, and social-media accounts.
Use unique passwords and enable multi-factor authentication.
Sign out unfamiliar devices and review recovery emails, phone numbers, forwarding rules, and connected apps.
Contact your mobile provider if your SIM was lost, replaced, or unexpectedly stopped working.
Lock or report missing government IDs to the issuing agency when that service is available.
Notify your bank or e-wallet provider if its account received, transferred, or was used to withdraw unauthorized loan proceeds.
Ask affected institutions to place appropriate fraud alerts or heightened verification on your customer profile.
Watch for new OTPs, credit applications, collection demands, and password-reset notices.

Do not remotely erase a phone that may contain important evidence until relevant records have been preserved or law enforcement has advised you.

Check and dispute your CIC credit report

The Credit Information Corporation collects credit information submitted by participating financial institutions. Obtain your own report through a channel identified on the CIC’s official credit-report page.

Review:

Lender and account names
Open and closed credit facilities
Original and outstanding balances
Payment status and past-due entries
Dates that do not match your actual transactions
Addresses, phone numbers, or identifying details you do not recognize

If the unauthorized account appears, use the CIC’s Online Dispute Resolution Process. Identify each inaccurate entry precisely and attach supporting documents. A police or NBI report can support the dispute, but it does not automatically compel deletion; CIC and the submitting institution must follow their verification and correction process.

Disputing with CIC is not a substitute for disputing directly with the lender. The lender is normally the source of the submitted account data and must investigate its own records.

A clean CIC report also does not prove that no fraudulent account exists. The lender may not yet have submitted it, may not be a participating submitting entity, or may have reported it through another credit bureau.

Report suspected identity theft to law enforcement

Where another person apparently used your identifying information, forged documents, or applied electronically in your name, consider filing a complaint with the NBI Cybercrime Division, the PNP Anti-Cybercrime Group, or the appropriate local police unit. Obtain a receiving copy, complaint number, or certification showing what you reported.

The Cybercrime Prevention Act, Republic Act No. 10175 covers computer-related identity theft: the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion, without right, of identifying information belonging to another. Depending on the evidence, fraudulent applications may also implicate computer-related forgery or fraud and other penal laws.

The Access Devices Regulation Act, Republic Act No. 8484, as amended by Republic Act No. 11449, separately addresses access devices obtained through falsified documents, false information, fictitious identities, or misrepresentation. The correct charge is for investigators and prosecutors to determine from the evidence.

The NBI provides an online complaint page and describes its investigative assistance for victims of computer crimes. If filing personally, bring valid identification, the disputed account information, your chronology, original devices when requested, and organized copies of your evidence.

A barangay blotter may document that you made a report, but it is not necessarily a substitute for reporting a cybercrime or submitting evidence to the proper investigative agency.

Escalate to the correct financial regulator

First use the lender’s consumer-assistance mechanism and retain its complaint reference number and response. If the lender does not respond adequately, denies the dispute without addressing the evidence, continues improper collection, or refuses to correct verified errors, escalate according to the lender’s regulator.

For BSP-supervised institutions

Banks, digital banks, many non-bank financial institutions, e-money issuers, and other BSP-supervised entities fall under the Bangko Sentral ng Pilipinas. The BSP’s Consumer Assistance Mechanism is an escalation channel; it does not replace the institution’s first-level complaint process.

Use the BSP’s official consumer-assistance channels, including the BSP Online Buddy or the published Complaints, Inquiries and Requests form. Attach:

Your complaint to the institution
Its reply, if any
The institution’s reference number
A concise chronology
Relevant account records and evidence
The specific resolution requested

For lending or financing companies supervised by the SEC

For a lending or financing company under SEC jurisdiction, use the SEC’s official complaint procedure. Its instructions require a complete complaint form, supporting evidence, a valid government-issued ID, and one complaint form per respondent company. Current filing guidance is available on the SEC’s lending and financing company complaints page and through the SEC iMessage portal.

If you are unsure which company operates a lending app, identify both the app or brand name and the corporate entity shown in the agreement, privacy notice, app-store listing, collection notice, or SEC registration.

Other lenders

A cooperative lender may fall under the Cooperative Development Authority, while another type of provider may be supervised by a different financial regulator. Confirm the legal name and regulator before filing. A complaint sent to the wrong agency can delay action, although the underlying lender dispute should still be made immediately.

Use your data-privacy rights

The Data Privacy Act of 2012, Republic Act No. 10173, gives data subjects rights that may be important in an identity-fraud case, including rights to be informed, access personal data, dispute inaccuracies, and seek correction. In qualifying circumstances, a data subject may seek blocking, removal, or destruction of data that is incomplete, outdated, false, unlawfully obtained, used for an unauthorized purpose, or no longer necessary.

Write to the lender’s data protection officer and ask:

Whether it processes personal data associated with the disputed application
What data it holds and where the data came from
The purposes and legal basis for processing
The recipients to whom the data was disclosed
Correction of false information and appropriate restriction or blocking while the dispute is investigated
Notification to relevant recipients when corrected data has been disclosed

Data-subject rights are not unlimited. The lender may retain relevant records where required by law, necessary to establish or defend legal claims, or needed for a legitimate fraud investigation. Requesting erasure should not prevent you from expressly demanding that evidence be preserved.

If you plan to complain to the National Privacy Commission, first notify the respondent in writing of the alleged privacy violation or personal-data breach. Under the NPC’s complaint mechanics, the exhaustion requirement is generally met when the respondent fails to take timely or appropriate action, or gives no response within 15 calendar days after receiving your written notice. The NPC may waive exhaustion in circumstances allowed by its rules.

Follow the current form, oath, attachment, and filing requirements in the 2021 NPC Rules of Procedure, as amended. A privacy complaint is distinct from a criminal complaint and from a credit-report dispute.

If collectors contact you

Reply once in writing that:

You dispute the debt in full.
The account resulted from alleged identity theft or unauthorized use of your information.
The matter has been reported to the lender.
They must preserve their records and direct the dispute to the creditor.
Future communications should be in writing through a stated safe channel.

Do not give collectors OTPs, passwords, card details, contact-list access, or new unwatermarked ID copies. Do not install an app or screen-sharing tool at their request.

Keep evidence of threats, public shaming, disclosure to unrelated contacts, impersonation of officials, or repeated abusive communications. Even when a debt is genuine, collection conduct remains subject to applicable consumer-protection, privacy, and unfair-collection rules. When the debt itself is disputed as fraudulent, collectors should be told that clearly and given the lender’s complaint reference number.

What not to do

Common mistakes include:

Ignoring the first notice because the account is “obviously” not yours
Relying only on calls without sending a written dispute
Paying a small amount or accepting restructuring merely to stop harassment
Signing an acknowledgment that describes you as the borrower
Sending additional IDs to an unverified collector
Deleting texts, emails, app data, or transaction records
Posting complete IDs, account numbers, or case documents publicly
Accusing a specific person without evidence
Reporting only to CIC and not to the lender
Assuming that a police report automatically removes the debt
Waiting for collection or a lawsuit before responding
Requesting immediate deletion of all records without also directing the lender to preserve fraud evidence

When legal help is urgent

Consult a Philippine lawyer promptly if:

You receive a summons, subpoena, demand letter, small-claims notice, or pleading.
A lender has filed or threatened a civil or criminal case.
The proceeds entered an account you own or control, even if another person operated it.
You shared an OTP, selfie, signature, device, SIM, or account access with another person.
A relative, employee, agent, or business partner may have applied using your information.
You signed a document believing it was for a different purpose.
Property, salary, benefits, or another account is threatened.
Multiple fraudulent accounts have appeared.
The incident involves a large amount, organized fraud, falsified public documents, or continuing account takeover.
The lender rejects the dispute based on biometric, device, or electronic-signature evidence that you cannot evaluate.
You need to execute an affidavit, respond under oath, or preserve evidence from a service provider.

Do not ignore court papers because the debt is fraudulent. Procedural deadlines may continue to run until the proper response is filed.

Frequently asked questions

Am I required to pay because the account uses my name and ID?

Not automatically. The key issue is whether you authorized or entered into the transaction. The lender’s application, authentication, signature, disbursement, and usage records matter. If proceeds reached or benefited you, or if you authorized another person, the analysis may be different.

Should I pay first and ask for a refund later?

Usually, payment is not the safest way to dispute a debt you say is entirely unauthorized. It may create confusion about whether you acknowledged the obligation. Seek legal advice before making a payment, settlement, or restructuring agreement.

Is an affidavit of denial enough?

It is useful evidence but is not conclusive by itself. Support it with contemporaneous notices, account statements, device and SIM records, proof of your location or circumstances, and the lender’s application and disbursement data.

Must I obtain a police or NBI report before contacting the lender?

No. Notify the lender immediately. A law-enforcement report can follow and may strengthen the record. Do not delay the lender complaint while gathering every document.

What if the lender refuses to give me the application records?

Make a specific written access request and ask for the legal reason for any refusal or redaction. Escalate unresolved financial-consumer issues to the lender’s regulator and privacy-rights issues to the NPC, following each agency’s requirements.

What if the loan proceeds entered my e-wallet or bank account?

Tell both the lender and the receiving institution immediately. Do not move, spend, return, or transfer disputed funds based only on instructions from a caller. Preserve the transaction trail and obtain legal advice because receipt, control, and subsequent transfers can materially affect the case.

Can I demand immediate deletion of the fraudulent account?

You may demand correction, blocking, or removal where legally justified, but institutions can retain records required by law or needed for fraud investigation and legal claims. Ask them to stop treating the account as your valid debt while preserving the evidence needed to resolve the fraud.

Will a CIC dispute stop collection?

Not necessarily. It addresses credit information in CIC’s system. You must separately dispute the underlying account with the lender and address any collector or court process.

What if I do not recognize the lender at all?

Do not send sensitive information to the person contacting you. Verify the legal entity through official channels, ask for the account details and basis of the claim, and check whether the company is supervised by the BSP, SEC, or another regulator. Report a suspicious or fictitious lender to the appropriate authorities.

This article provides general Philippine legal information, not legal advice for a particular case. The proper response can depend on the documents, authentication method, movement of funds, lender type, and pending proceedings. Official sources and procedures were checked as of 28 August 2026.