Discovering that a loan has been opened in your name without your knowledge or application can feel overwhelming and unfair. In the Philippines, this situation usually stems from identity theft, data breaches, phishing, SIM swapping, or lax verification practices by some online lending apps and financial institutions. The good news is that Philippine law strongly protects you: a loan contract requires your free, informed, and voluntary consent. Without it, the agreement does not bind you. This article explains your rights and gives you a clear, practical roadmap—based on current laws and how the system actually works in practice—to dispute the account, stop collections, correct your credit records, and protect yourself.

Your Legal Rights When a Loan Is Opened Without Your Consent

Under the Civil Code of the Philippines (Republic Act No. 386), a valid contract needs three essential elements: consent, object, and cause (Article 1318). Consent must be intelligent, free, and spontaneous. If someone forges your signature, uses your personal data without authorization, or obtains “consent” through fraud or mistake, the contract is either voidable (Article 1330) or, more commonly in forgery or total lack of consent cases, inexistent and void from the beginning (Article 1409).

A forged or unauthorized loan does not create any obligation on your part. You are not liable for the principal, interest, penalties, or fees. Lenders and collectors cannot legally enforce it against you. If the perpetrator used falsified documents or your identifying information, this may also constitute criminal offenses under the Revised Penal Code (falsification of documents under Articles 171–172 and estafa by means of false pretenses under Article 315), the Cybercrime Prevention Act (Republic Act No. 10175, particularly computer-related identity theft), and the Data Privacy Act (Republic Act No. 10173) if your personal data was processed without your consent or proper security.

You also have strong rights under the Credit Information System Act (Republic Act No. 9510), which created the Credit Information Corporation (CIC) and gives you the right to accurate credit information and an effective way to dispute errors. The Financial Products and Services Consumer Protection Act (Republic Act No. 11765) further protects you against abusive collection practices, such as harassment, public shaming, or contacting your family and employer without basis.

In short, the law treats you as the victim, not the borrower. Your task is to create a clear, documented paper trail that proves the lack of consent and forces the lender and credit system to remove the fraudulent entry.

Step-by-Step Guide to Resolving an Unauthorized Loan

Act quickly but methodically. The goal is to notify the right parties in writing, gather strong evidence, and use official channels that carry weight with lenders and regulators.

Secure and preserve all evidence immediately.
Take clear, timestamped screenshots or screen recordings of every collection message, call log, app notification, email, social media post, or threat. Note the lender’s name, loan or account/reference number, amount, dates, and any contact details. Save copies of your own bank or e-wallet statements showing you never received the loan proceeds. If you suspect SIM swapping or a data breach, contact your telco right away for a report. Change passwords, enable app-based two-factor authentication, and avoid engaging with collectors (do not reply, negotiate, or make any payment—this can be misinterpreted as acknowledging the debt).
Formally notify the lender or lending company in writing.
Do not rely only on phone calls or in-app chats. Send a formal written notice of dispute and denial via the official email listed in their privacy policy or terms, registered mail with return receipt, or courier. Clearly state that you never applied for, signed, authorized, or received any proceeds from the loan; that this appears to be identity theft or fraud; and that you are taking steps to report it to law enforcement. Demand that they immediately suspend the account and all collection activities, preserve all digital evidence (IP logs, device information, KYC documents, biometrics or signatures used), conduct an internal investigation, and provide written confirmation that you have no liability. Keep copies of everything you send and proof of delivery. This step alone often prompts serious lenders to investigate.
Execute a notarized Affidavit of Denial (or Affidavit of Facts).
This sworn statement before a notary public is one of the most powerful pieces of evidence you can have. In it, state your full personal details, that you did not apply for or sign any documents for the specific loan, did not authorize anyone to do so on your behalf, did not receive any proceeds, and believe this is a case of identity theft or fraud. Include the loan details (lender name, account/reference number, amount, dates) if known, when and how you discovered it, and the actions you have taken or will take. Notarization typically costs ₱150–500. Bring at least one valid government-issued photo ID (PhilID, passport, driver’s license, or UMID). Many victims prepare this early and attach it to every communication with the lender and government agencies.
File an official report with law enforcement.
Start with a blotter entry at your local police station or barangay hall for basic documentation. For stronger evidence—especially in identity theft or online cases—file a detailed complaint with the Philippine National Police Anti-Cybercrime Group (PNP ACG) at Camp General Crame or a regional unit, or with the National Bureau of Investigation (NBI) Cybercrime Division. Bring your valid ID, copies of all evidence, and your notarized affidavit. You will usually receive an official receipt or reference number. These reports create an official record that lenders and the CIC take seriously. There is generally no filing fee for the initial report.
Obtain your CIC credit report and review it.
You are entitled to at least one free credit report per year from the Credit Information Corporation. Request it through accredited channels or their systems (often linked via creditinfo.gov.ph). Carefully check for the unauthorized loan entry and any related negative information.
File a dispute through the CIC’s Online Dispute Resolution System (ODRS).
Go to the CIC’s official dispute portal (creditinfo.gov.ph/dispute). You will need the Transaction Reference Number (TRN) from your credit report. Upload your notarized affidavit of denial, police or NBI report, copies of your communications with the lender, and evidence that you never received the loan proceeds. Clearly indicate that the entry is fraudulent or the result of identity theft. The system marks the entry as “disputed,” automatically notifies the submitting entity (the lender), and requires them to investigate and respond. Successful disputes typically result in the entry being removed or annotated as fraudulent. Updates usually appear within 15–45 days once the process moves forward, though complex cases or slow lender responses can take longer. Follow up using your reference numbers.
Monitor, follow up, and escalate if necessary.
Keep a dedicated folder (physical and digital) with every document, reference number, date, and communication in chronological order. Periodically request updated CIC reports. If collections or harassment continue after your formal denial and dispute, document everything and consider additional complaints to the National Privacy Commission (NPC) for possible violations of the Data Privacy Act, or to the Bangko Sentral ng Pilipinas (BSP) for banks or the Securities and Exchange Commission (SEC) for lending companies. In serious cases involving large amounts, prolonged harassment, or significant credit damage, consult a lawyer about filing a civil case for declaration of nullity of the contract, damages (actual, moral, and exemplary), and injunction to stop collections. Criminal complaints for falsification, estafa, or cybercrime can also be pursued through the prosecutor’s office, supported by your police/NBI report.

Special Considerations for OFWs, Filipinos Abroad, and Foreign Nationals

The core process remains the same, but logistics differ. If you are abroad, you can execute your affidavit at a Philippine Embassy or Consulate (they perform notarial functions). Alternatively, have it notarized locally and then apostilled (under the Hague Apostille Convention, which the Philippines is part of) before sending it or using it here. A Special Power of Attorney (SPA), also executed and authenticated at the embassy or via apostille, allows a trusted lawyer, relative, or representative in the Philippines to file reports, disputes, or court cases on your behalf.

Foreign nationals in the Philippines follow the same steps and can use their passport together with an ACR I-Card or other valid ID. Document authentication (apostille or consularization) adds time and modest cost but is straightforward. Reciprocity rules generally do not block victims from protecting their own rights and credit records.

Common Challenges and How to Overcome Them

Lenders sometimes initially resist or delay, claiming the loan is valid because of “biometrics” or OTPs obtained through phishing. A strong paper trail—especially the notarized affidavit plus police report—usually overcomes this. Similar-name “mixed file” errors in credit reports require extra proof of identity mismatch (birth certificate details, photos, employment records, or affidavits from people who know you). Aggressive collectors may continue calling family or posting on social media; document every incident and report it—these practices violate consumer protection rules. Online lending apps with weak KYC are common sources of these problems; the same evidence-based approach works against them. Court cases for full civil remedies can take one to three years, so prioritize the administrative and regulatory steps first to stop immediate harm and clean your credit.

Frequently Asked Questions

Am I legally responsible for paying a loan I never applied for or signed?
No. Without your valid consent, the contract is void or unenforceable against you under the Civil Code. You have no obligation to pay the principal, interest, or penalties.

What is the single most important document I should prepare first?
A notarized Affidavit of Denial. It serves as sworn evidence that you did not apply for, sign, authorize, or benefit from the loan and is required or strongly requested by lenders, the CIC, police, and regulators.

How do I stop collection calls and messages from harassing me and my family?
Send the formal written denial to the lender immediately and file the CIC dispute. Once they have official notice and evidence of fraud, continued aggressive collection can violate RA 11765. Document everything and escalate to the NPC or your regulator if it persists.

Will this permanently damage my credit score?
Not if you act promptly. After the lender investigates and confirms the fraud (or the CIC dispute succeeds), the negative entry should be removed or annotated as fraudulent. Regular monitoring of your CIC report helps ensure corrections propagate.

Do I need to hire a lawyer right away?
Not necessarily for the initial steps (contacting the lender, filing police reports, and CIC dispute). Many people handle these successfully on their own with the affidavit and police report. For complex cases, large amounts, ongoing harassment, or court action, consult a lawyer. Indigent litigants or those with limited means can seek free assistance from the Public Attorney’s Office (PAO).

Can I file criminal charges against the person or company responsible?
Yes. Your police or NBI report can support a complaint-affidavit filed with the prosecutor’s office for falsification, estafa, or cybercrime offenses. Success depends on evidence identifying the perpetrator, but the report itself helps establish your victim status even if the person is never caught.

How long does the entire process usually take?
Initial actions (evidence gathering, lender notice, affidavit, police report) can be done within days or a week. CIC disputes often resolve in 15–45 days once moving, though lender delays can extend this. Full credit record cleaning and any civil case can take several months to a few years. Prompt action limits further damage.

I’m an OFW abroad. Can I fix this without returning to the Philippines?
Yes. Execute documents at the Philippine Embassy or Consulate, use an apostilled SPA to authorize a representative, and handle many steps (CIC dispute, written notices) online or through your representative. Police and NBI reports can often be supported by sworn statements from abroad.

What if the lender or CIC does not act even after I submit all the evidence?
Follow up persistently in writing with reference numbers. Escalate to the relevant regulator (BSP for banks, SEC for lending companies, NPC for data issues). In persistent cases, a lawyer can file the appropriate civil or administrative action to compel correction and seek damages.

Key Takeaways

A loan opened without your consent is not your legal obligation under the Civil Code.
Create a strong paper trail immediately: preserve evidence, send a formal written denial to the lender, execute a notarized Affidavit of Denial, and file a police or NBI report.
Dispute the entry through the CIC’s Online Dispute Resolution System using your affidavit, police report, and supporting evidence—the system requires the lender to investigate.
Document all collection activity and escalate harassment or privacy violations to the appropriate regulator.
Filipinos abroad and foreign nationals can complete the process with apostilled or consular documents and a properly executed SPA.
Act quickly to limit credit damage and stop collections; most administrative steps have no filing fees and can be started without a lawyer.
Keep organized records of every step—reference numbers, dates, and copies protect you and speed up resolutions.

You have clear rights and workable remedies. Following these steps methodically gives you the best chance of clearing your name, protecting your credit, and holding the right parties accountable.