A Legal Article on Identity Misuse, Employment Fraud, Data Privacy, and Remedies

I. Introduction

An unauthorized job application using another person’s identity occurs when someone applies for work, submits a resume, attends an interview, signs employment documents, takes assessments, undergoes onboarding, or communicates with an employer while pretending to be another person or while using another person’s personal information without consent.

In the Philippines, this can happen in many ways. A person may use another individual’s name, photograph, resume, school records, certificates, government ID numbers, employment history, email address, phone number, online job profile, digital signature, professional license, or scanned documents to apply for a job. The impersonator may intend to get hired, pass background checks, obtain salary, steal benefits, hide a disqualification, avoid a blacklist, create a fake employment record, commit fraud, or use the victim’s identity for further scams.

The legal consequences can be serious. Depending on the facts, the conduct may involve identity theft, computer-related identity misuse, falsification, estafa, use of falsified documents, perjury, data privacy violations, unauthorized processing of personal information, employment fraud, professional regulation violations, and civil liability for damages. It may also expose the innocent identity owner to reputational harm, tax issues, benefit record problems, background-check complications, loan or payroll fraud, immigration issues, and criminal suspicion.

This article discusses the Philippine legal context, common forms of unauthorized job applications, possible liabilities, employer obligations, victim remedies, evidence gathering, complaint options, and prevention.

II. What Is an Unauthorized Job Application Using Another Person’s Identity?

It is any job application, employment process, or work-related representation made without authority using another person’s identity or personal data.

The act may include:

submitting a resume under another person’s name;
using another person’s photo in a job profile;
using another person’s government ID;
using another person’s school records;
using another person’s certificate of employment;
using another person’s training certificates;
using another person’s professional license;
using another person’s email address or phone number;
using another person’s LinkedIn, JobStreet, Indeed, Kalibrr, Facebook, or other job profile;
applying through a recruiter using another person’s details;
attending an interview while pretending to be another person;
taking an online examination for another person;
signing employment forms using another person’s name;
submitting pre-employment medical, NBI clearance, police clearance, or background-check documents in another person’s identity;
enrolling payroll, SSS, PhilHealth, Pag-IBIG, or tax records using another person’s information;
accepting a job offer under another person’s name;
working under another person’s identity; and
using another person’s identity to receive salary, commissions, incentives, or benefits.

The act may be done by a stranger, relative, friend, former employer, recruiter, co-worker, online scammer, human resources personnel, document fixer, or organized group.

III. Why This Issue Is Serious

Unauthorized identity use in job applications is not a harmless prank or simple misunderstanding. It can cause serious damage to the victim and to the employer.

For the victim, it may result in:

damaged professional reputation;
false record of application or employment;
failed background check;
tax records connected to income not actually received;
SSS, PhilHealth, or Pag-IBIG record confusion;
payroll or bank account misuse;
identity theft;
fake loan or salary advance applications;
fake employment certificates;
immigration or visa complications;
professional license misuse;
disciplinary complaints;
being linked to fraud or misconduct;
unwanted contact by recruiters or employers;
loss of job opportunity; and
emotional distress and inconvenience.

For the employer, it may result in:

hiring an unqualified person;
payroll fraud;
workplace security risk;
false compliance records;
exposure to data privacy complaints;
invalid employment documents;
tax and benefits reporting errors;
client or customer risk;
professional licensing violations;
reputational damage; and
possible liability if the employer ignored warning signs.

IV. Common Scenarios

A. Using Another Person’s Resume

The impersonator copies another person’s resume and submits it as their own, including the victim’s education, employment history, skills, certifications, and references.

This may be done to pass screening or to appear qualified for a job.

B. Using Another Person’s Name and Photo

The impersonator creates an online job profile using the victim’s name and photograph. This may be used for job applications, recruitment scams, or fake employment.

C. Using Another Person’s Government IDs

The impersonator submits copies of the victim’s passport, driver’s license, national ID, UMID, PRC ID, voter’s ID, postal ID, or other government-issued identification.

This is especially serious because these documents may be used for payroll, bank account opening, SIM registration, loans, travel, or identity verification.

D. Using Another Person’s Professional License

The impersonator uses another person’s PRC license or professional credentials to apply as an engineer, nurse, architect, teacher, accountant, physician, pharmacist, seafarer, real estate professional, or other regulated professional.

This may involve unauthorized practice of a profession and may endanger the public.

E. Applying Through a Recruiter Using Another Person’s Identity

A recruiter may submit an application using a person’s name without consent to meet quotas, create fake applicants, deceive employers, or collect recruitment fees.

This can occur in manpower agencies, overseas recruitment, BPO hiring, work-from-home jobs, or local employment placement.

F. Taking an Interview or Exam for Another Person

A person may attend an interview or take an online test using another applicant’s name. This can happen in remote hiring where identity verification is weak.

If hired, the employer may later discover that the person who works is not the person who applied.

G. Working Under Another Person’s Identity

This is a more advanced and dangerous form of identity misuse. The impersonator not only applies but actually works under the victim’s name.

This may affect tax, benefits, payroll, attendance, disciplinary records, and employment history.

H. Using a Relative’s Identity

Sometimes a person uses a sibling’s, cousin’s, spouse’s, parent’s, or friend’s identity because the relative has better qualifications, clean records, or required documents. Consent may be disputed.

Even family relationship does not automatically authorize use of another person’s identity.

I. Fake Job Application to Harass or Embarrass Someone

A malicious person may submit job applications in the victim’s name to embarrass them, make them appear desperate for employment, damage current employment, or cause recruiters to contact them.

J. Job Application Connected to Scams

A scammer may use the victim’s identity to apply for jobs that are actually fronts for money mule schemes, online fraud, illegal sales, or unauthorized platform accounts.

V. Personal Information Involved

Unauthorized job applications often involve personal information and sensitive personal information, such as:

full name;
date of birth;
address;
contact number;
email address;
photograph;
signature;
resume and employment history;
educational background;
school records;
government ID numbers;
tax identification number;
SSS number;
PhilHealth number;
Pag-IBIG number;
passport number;
PRC license number;
bank details;
emergency contact;
health information;
NBI or police clearance;
civil status;
family information;
biometric data;
video interview recordings;
test results;
psychological assessment results;
background check reports.

Some of these are sensitive or high-risk data. Unauthorized use can trigger data privacy obligations and liabilities.

VI. Possible Criminal Liability

Unauthorized job application using another person’s identity may involve several criminal offenses depending on the facts.

A. Computer-Related Identity Theft

If information and communications technology is used to acquire, use, misuse, transfer, possess, alter, or delete another person’s identifying information, computer-related identity theft may be relevant.

This is common when the impersonator uses online job platforms, email, social media accounts, digital copies of IDs, electronic signatures, fake online forms, or remote hiring systems.

Examples include:

creating an online job profile under another person’s identity;
submitting digital copies of another person’s IDs;
using another person’s email account;
using a stolen resume or profile;
uploading another person’s documents to an employer portal;
using another person’s digital signature;
accessing another person’s job portal account;
impersonating the victim through video or chat;
using another person’s data for remote work onboarding.

The use of technology may aggravate or change the legal analysis.

B. Falsification of Documents

Falsification may arise if the impersonator fabricates, alters, or falsely signs documents used in the job application.

Possible falsified documents include:

resume with false identity;
application form;
employment contract;
job offer acceptance;
personal data sheet;
government ID copies;
certificates of employment;
school records;
training certificates;
medical certificates;
NBI or police clearance;
professional licenses;
payroll forms;
tax forms;
SSS, PhilHealth, or Pag-IBIG forms;
authorization letters;
consent forms;
background check forms;
affidavits;
electronic signatures.

If the document is public, official, commercial, or private, the exact legal treatment may vary.

C. Use of Falsified Documents

Even if the impersonator did not personally create the fake document, knowingly using it may still create liability.

For example, a person who knowingly submits a falsified certificate of employment or fake ID during job application may be liable for use of falsified documents.

D. Estafa or Swindling

Estafa may be involved if the impersonator deceives the employer, recruiter, client, or third party into giving money, salary, benefits, equipment, access, or employment opportunity.

Examples include:

receiving salary under another person’s name;
obtaining company laptop or equipment by pretending to be the victim;
collecting signing bonus;
obtaining relocation allowance;
receiving training allowance;
inducing employer to hire based on false identity;
obtaining loans or cash advances through fake employment;
deceiving a recruiter into paying referral fees;
deceiving clients using false professional credentials.

Employment fraud can become property fraud when money or property is obtained through deceit.

E. Perjury or False Statements Under Oath

If the applicant signs sworn documents, notarized affidavits, or official declarations under another person’s identity, perjury or false statement issues may arise.

F. Unauthorized Practice of Profession

If the impersonator uses another person’s professional license to obtain work in a regulated profession, this may involve unauthorized practice and professional regulation violations.

Examples include impersonating or falsely claiming to be:

nurse;
physician;
engineer;
architect;
teacher;
accountant;
lawyer;
pharmacist;
dentist;
seafarer;
real estate broker;
criminologist;
psychologist;
customs broker;
other licensed professional.

This is especially serious where public health, safety, finance, or legal rights are affected.

G. Data Privacy-Related Offenses

Unlawful processing, unauthorized use, malicious disclosure, improper disposal, or unauthorized access involving personal data may create liability under data privacy principles and related laws.

This may apply not only to the impersonator but also to recruiters, employers, agencies, or insiders who unlawfully obtained, shared, or used the victim’s personal data.

H. Cybercrime-Related Fraud

If the impersonation was done through online platforms, fake emails, fraudulent accounts, digital forms, or remote-work systems, cybercrime-related provisions may be implicated.

I. Identity-Linked Fraud Against Government Agencies

If the impersonator caused false entries in tax, SSS, PhilHealth, Pag-IBIG, immigration, licensing, or professional records, additional administrative or criminal consequences may arise.

VII. Civil Liability

The victim may pursue civil remedies for the injury caused by unauthorized identity use.

Possible civil claims include:

damages for invasion of privacy;
damages for fraudulent use of identity;
damages for reputational harm;
moral damages in proper cases;
exemplary damages in cases of wanton or malicious conduct;
actual damages for expenses incurred;
attorney’s fees;
injunction to stop further use;
accounting of benefits received;
return or destruction of documents;
correction of records;
indemnity for tax or benefit problems;
damages for lost job opportunity;
damages for emotional distress if legally supported;
damages for malicious harassment.

The victim must prove the unauthorized use, the link to the respondent, and the damage suffered.

VIII. Employer’s Duties and Responsibilities

Employers have responsibilities when receiving and processing job applications.

A. Verify Identity

Employers should verify that the applicant is the person they claim to be. This is especially important before onboarding, payroll enrollment, issuance of access credentials, handling of confidential data, or deployment to client sites.

Reasonable verification may include:

government ID check;
live interview;
face-to-ID comparison;
background verification;
reference checks;
video identity verification for remote applicants;
document authenticity checks;
matching bank account name to employee name;
checking professional license status when relevant;
requiring personal appearance for high-risk roles.

B. Protect Applicant Data

Employers must process applicant data lawfully, fairly, and securely. Job applicants are data subjects. Their personal data should not be collected, shared, retained, or used beyond legitimate hiring purposes.

C. Respond to Identity Misuse Reports

If a person reports that their identity was used without consent in a job application, the employer should act promptly.

The employer should:

acknowledge the report;
preserve records;
suspend processing of suspicious application;
verify identity;
restrict access to the application file;
investigate internal involvement;
avoid further disclosure;
correct records;
document findings;
cooperate with lawful requests;
notify appropriate officers;
assess whether breach notification is required;
provide the victim with confirmation where appropriate.

D. Avoid Retaliation or Defamation

The employer should not accuse the identity owner of fraud without basis. The victim may be innocent. Employers should carefully distinguish between the real person and the impersonator.

E. Correct Employment Records

If false employment records were created, the employer should correct them to prevent future harm.

This may include:

canceling fake application;
removing false employment profile;
marking the file as identity misuse;
correcting payroll records;
correcting tax and benefit submissions;
notifying background-check vendors;
revoking access credentials;
disabling email or system accounts;
investigating payments made.

IX. Liability of Recruiters and Agencies

Recruiters, headhunters, manpower agencies, outsourcing firms, and placement agencies may be liable if they knowingly or negligently submit applications using another person’s identity.

Possible wrongful acts include:

submitting fake applicants;
using resumes without consent;
editing resumes to misrepresent identity;
creating fake candidate profiles;
using stolen IDs;
using one person’s credentials for another applicant;
fabricating background checks;
submitting candidates without authorization;
failing to verify identity;
collecting fees through identity misuse;
sharing applicant data without consent;
retaining resumes indefinitely and reusing them;
selling candidate information;
allowing employees to misuse applicant databases.

Recruiters process sensitive employment data and must maintain strong verification and privacy practices.

X. Liability of Current or Former Employers

A current or former employer may become involved if it improperly releases a person’s employment records or certificates to someone else.

Examples:

HR releases certificate of employment to an unauthorized person;
payroll records are leaked;
employee files are copied by a recruiter;
IDs or onboarding documents are reused;
former employee data is sold or shared;
insider uses applicant files for fake job applications;
background-check data is mishandled.

If the identity misuse resulted from poor data security or unauthorized disclosure, the employer or data controller may face liability.

XI. Data Privacy Analysis

Unauthorized job application using another person’s identity is often a data privacy issue because it involves collection, use, storage, sharing, or disclosure of personal information without lawful basis.

A. Personal Information Controller and Processor

An employer, recruiter, or job platform may be a personal information controller or processor depending on its role. It must handle applicant data according to lawful purposes, transparency, proportionality, security, and data subject rights.

B. Consent and Lawful Basis

Consent is not always the only lawful basis for employment data processing, but unauthorized use of another person’s identity usually lacks any lawful basis as to the impersonator.

If a recruiter or third party submits someone’s data without consent or authority, the processing may be unlawful.

C. Data Subject Rights

The victim may exercise rights such as:

right to be informed;
right to access;
right to object;
right to erasure or blocking;
right to rectification;
right to damages;
right to file a complaint;
right to data portability, where applicable.

The victim may ask the employer or recruiter to confirm whether their data was processed and to correct or delete unauthorized records.

D. Security Measures

Employers and recruiters should implement measures such as:

identity verification;
access controls;
audit logs;
secure applicant tracking systems;
limited retention periods;
background-check vendor controls;
staff training;
breach response procedures;
secure deletion;
verification of authorization before releasing records.

E. Data Breach Concerns

If the unauthorized application involved leaked IDs, resumes, or documents from a database, there may be a personal data breach. The responsible organization may need to investigate, contain, notify, and remediate depending on risk and legal requirements.

XII. Unauthorized Use of Government IDs

Using another person’s government ID in a job application is a serious red flag.

Possible consequences include:

identity theft complaint;
falsification complaint;
report to issuing agency;
invalid employment onboarding;
payroll fraud;
SIM or e-wallet misuse;
tax record confusion;
benefits record issues;
bank account or loan fraud;
background-check contamination.

The victim should consider reporting compromised IDs to the issuing agencies and monitoring accounts.

XIII. Unauthorized Use of TIN, SSS, PhilHealth, and Pag-IBIG Numbers

If the impersonator uses the victim’s government numbers for employment, the victim’s records may become inaccurate.

Possible issues:

false employer contributions;
missing actual contributions;
incorrect employment history;
false salary credits;
tax withholding under victim’s name;
BIR Form 2316 issues;
benefit claim confusion;
loan or calamity loan misuse;
maternity, sickness, disability, or other benefit complications;
employer reporting errors.

The victim should request correction with the relevant agency if false records appear.

XIV. Unauthorized Use of Tax Information

If the impersonator is employed under the victim’s identity, income may be reported under the victim’s tax records.

This may cause:

incorrect taxable income;
withholding tax issues;
unexplained income;
conflicting BIR Form 2316 records;
audit concerns;
difficulty in employment transfer;
wrong employer record;
refund or deficiency complications.

The victim should document the identity misuse and request correction through proper channels.

XV. Unauthorized Use of Professional License

Using another person’s professional license in employment can create severe consequences.

The victim may be falsely associated with:

malpractice;
professional misconduct;
defective work;
patient harm;
engineering or architectural failure;
accounting fraud;
teaching misconduct;
unauthorized signing of documents;
regulatory violations;
criminal investigation.

The victim should immediately notify the employer, relevant professional regulator, and law enforcement if the license is misused.

XVI. Unauthorized Job Application by a Family Member

Family relationship does not automatically create authority to use identity documents.

A family member may say:

“I only borrowed your name.”
“I thought it was okay.”
“We are siblings.”
“You were not using the job anyway.”
“I needed work.”
“I used your credentials because we look alike.”
“I planned to tell you later.”

These explanations do not necessarily excuse unauthorized identity use.

However, the victim may choose civil, administrative, or family settlement approaches depending on the damage, intent, and risk. If government IDs, payroll, taxes, benefits, or professional licenses are involved, formal correction and reporting may still be necessary.

XVII. Unauthorized Job Application by a Recruiter

A recruiter may submit a person’s resume to employers without consent. This can damage the applicant’s reputation, especially if the current employer finds out, if the person is bound by confidentiality obligations, or if the recruiter modifies the resume.

The victim may demand:

identification of employers contacted;
withdrawal of unauthorized applications;
deletion of personal data;
correction of records;
disclosure of data sources;
undertaking not to reuse data;
damages if harm occurred.

If the recruiter used IDs, certificates, signatures, or forged consent, stronger remedies may be available.

XVIII. Unauthorized Job Application by a Current Employer or Competitor

A malicious current employer, co-worker, or competitor may submit applications in the victim’s name to create the impression that the person is job hunting, disloyal, or violating a non-compete or confidentiality obligation.

This may involve harassment, unfair labor practice context, defamation, privacy violation, or malicious interference with employment.

Evidence is critical, especially email headers, IP logs, account access logs, recruiter communications, and witness statements.

XIX. Unauthorized Job Application for Remote Work

Remote hiring creates special risks.

An impersonator may:

use the victim’s digital profile;
use deepfake or edited photos;
submit scanned IDs;
use a different person for interview;
outsource work to someone else after hiring;
use the victim’s name for payroll;
receive company equipment at another address;
pass background checks using stolen data;
use fake references;
use the victim’s bank account or a mule account.

Employers should implement stronger verification for remote roles.

XX. Unauthorized Job Application Through Job Platforms

If the misuse occurred on a job platform, the victim should report it to the platform immediately.

The report should request:

takedown of fake profile;
preservation of logs;
disclosure through lawful process;
blocking of the impersonator;
deletion of unauthorized data;
confirmation of employers contacted;
security review;
prevention of future misuse.

The platform may not disclose all information directly due to privacy rules, but it can preserve records for authorities.

XXI. Unauthorized Use of Email or Social Media Accounts

If the impersonator accessed the victim’s email, job portal, LinkedIn, or social media account, the issue becomes account compromise.

The victim should:

change passwords immediately;
enable two-factor authentication;
log out all sessions;
check recovery email and phone number;
review sent messages;
review account activity logs;
delete unauthorized applications only after preserving evidence;
notify platforms;
notify affected employers;
scan devices for malware;
report identity theft.

Unauthorized access strengthens the cybercrime aspect.

XXII. Employer Discovery After Hiring

If an employer discovers that an employee was hired under another person’s identity, it should act carefully.

Steps may include:

suspend access pending investigation;
verify the worker’s true identity;
preserve application documents;
secure company equipment;
review payroll payments;
investigate whether clients were affected;
check whether professional credentials were misused;
notify the real identity owner if appropriate;
correct government reports;
consider termination for fraud;
file criminal or civil complaint if warranted;
review recruitment controls;
assess data breach obligations.

The employer should avoid withholding legally earned wages without proper basis, but may pursue recovery for fraud or damages where justified.

XXIII. Victim’s Immediate Steps

A person who discovers unauthorized job application using their identity should act quickly.

Step 1: Preserve Evidence

Save:

email from employer or recruiter;
screenshots of fake application;
job platform profile;
messages from the impersonator;
employer communications;
copies of documents used;
dates and times;
sender email addresses;
phone numbers;
links and URLs;
IP-related information if available;
payment or payroll evidence;
fake signatures;
interview schedules;
job offer letters;
onboarding forms.

Do not delete suspicious applications until evidence is preserved.

Step 2: Notify the Employer or Recruiter

Send a written notice stating that the application was unauthorized and that the victim did not consent to the use of their identity or documents.

Request:

suspension of processing;
preservation of records;
deletion or blocking of unauthorized data after investigation;
written confirmation;
identification of documents submitted;
confirmation whether any employment, payroll, or benefits record was created;
correction of records;
contact information of data protection officer or HR investigator.

Step 3: Secure Personal Accounts

Change passwords, enable two-factor authentication, check account logs, and revoke unknown sessions.

Step 4: Report Compromised Documents

If government IDs, TIN, SSS, PhilHealth, Pag-IBIG, passport, PRC license, or bank details were used, consider reporting to the relevant agencies.

Step 5: File a Police, NBI, or Cybercrime Report

If there is identity theft, online impersonation, fraud, or forged documents, formal reporting may be necessary.

Step 6: File Data Privacy Complaint if Appropriate

If an organization mishandled personal data, refused access or correction, or allowed unauthorized processing, the victim may consider a data privacy complaint.

Step 7: Monitor Financial and Employment Records

Monitor bank accounts, e-wallets, loans, tax records, government contributions, job platforms, and professional license records.

XXIV. Notice Letter to Employer or Recruiter

A victim may send a letter like this:

Subject: Unauthorized Use of My Identity in Job Application

Dear [Employer/Recruiter]:

I recently learned that a job application was submitted to your company using my name and/or personal information. I did not submit, authorize, or consent to this application.

I request that you immediately suspend processing of the application, preserve all records related to it, and confirm what personal information and documents were submitted under my identity.

Please also confirm whether any employment, payroll, tax, benefits, system access, or background-check record was created under my name. If any record was created, I request correction, blocking, or deletion as appropriate, without prejudice to preservation of evidence for investigation.

Kindly provide the contact details of the person or office handling this matter.

This letter is sent to protect my identity, privacy, employment record, and legal rights.

Sincerely, [Name]

XXV. Demand Letter to the Impersonator

If the impersonator is known, the victim may demand:

immediate cessation of identity use;
withdrawal of all applications;
return or destruction of documents;
list of employers contacted;
written undertaking not to repeat;
correction of records;
reimbursement of expenses;
indemnity for damages;
settlement, if appropriate.

A sample demand:

Subject: Demand to Cease Unauthorized Use of Identity

Dear [Name]:

It has come to my attention that you used my name, personal information, documents, and/or credentials in connection with a job application without my consent.

I demand that you immediately cease using my identity, withdraw all applications submitted under my name, disclose all employers, recruiters, platforms, and third parties to whom my information was submitted, and return or permanently delete all copies of my personal documents.

I further demand that you cooperate in correcting all records created under my name and compensate me for any damage, expense, or liability caused by your unauthorized acts.

This demand is without prejudice to the filing of criminal, civil, administrative, data privacy, and other complaints.

Sincerely, [Name]

XXVI. Complaint-Affidavit Outline

A complaint-affidavit may state:

complainant’s identity;
respondent’s identity, if known;
relationship between complainant and respondent, if any;
how complainant discovered the unauthorized application;
what personal information was used;
what documents were submitted;
what job, employer, or platform was involved;
whether the complainant consented;
how the respondent obtained the information, if known;
false statements made;
forged signatures or documents;
salary, benefit, or property obtained, if any;
damage caused;
steps taken to correct records;
attached evidence;
request for investigation and prosecution.

The affidavit should be factual and chronological.

XXVII. Evidence Checklist

The victim should gather:

copy of unauthorized job application;
job posting;
employer or recruiter email;
fake profile screenshots;
application confirmation emails;
resume used;
ID copies used;
forged signatures;
employment contract or job offer, if any;
background-check request;
onboarding forms;
payroll forms;
tax or benefits records;
platform account logs;
email headers;
phone numbers used;
IP logs, if available through lawful process;
witness statements;
messages from respondent;
proof that victim did not apply;
proof of victim’s actual employment or location at the time;
employer confirmation letter;
police or platform reports;
damage records;
screenshots showing dates and URLs.

XXVIII. Where to File Complaints

Depending on facts, complaints may be filed with:

employer or recruiter’s HR, compliance, or data protection office;
job platform support or abuse reporting channel;
barangay, if appropriate for initial documentation or settlement;
police station for blotter and criminal referral;
cybercrime unit, if online accounts or ICT were used;
National Bureau of Investigation, especially for identity theft, cybercrime, or organized fraud;
City or Provincial Prosecutor for criminal complaint;
National Privacy Commission for data privacy violations;
Professional Regulation Commission if a professional license was misused;
SSS, PhilHealth, Pag-IBIG, or BIR for record correction;
bank or e-wallet provider if financial accounts were used;
regular courts for civil damages or injunction.

The correct forum depends on whether the priority is stopping the application, correcting records, prosecuting the offender, recovering damages, or addressing data misuse.

XXIX. Barangay Considerations

If the impersonator is known and resides in the same city or municipality, barangay conciliation may be required for certain civil disputes before court action.

However, serious criminal cases involving cybercrime, falsification, identity theft, or offenses beyond barangay authority should be reported to proper law enforcement or prosecutors.

Barangay proceedings may still help document admissions and settlement terms.

XXX. Police Blotter

A police blotter may be useful to document the incident quickly, especially when the victim needs proof for employers, banks, platforms, or government agencies.

However, a blotter is not the same as a full criminal complaint. For prosecution, the victim generally needs affidavits and supporting evidence.

XXXI. Data Privacy Complaint

A data privacy complaint may be appropriate if:

an employer or recruiter processed the victim’s data without lawful basis;
a recruiter submitted the victim’s data without authority;
a company refused to provide access to records;
a company refused correction or deletion;
a data breach exposed the victim’s documents;
an employee or insider leaked applicant data;
job platform security failed;
personal data was retained or reused improperly;
sensitive data was disclosed to unauthorized parties;
the organization failed to respond to the victim’s rights request.

The victim should first send a written request to the organization, preserve proof, and then escalate if unresolved.

XXXII. Civil Action for Damages

A civil case may be considered when the victim suffered serious harm.

Examples of compensable harm may include:

lost employment opportunity;
termination or disciplinary action due to mistaken identity;
reputational damage;
professional license investigation;
financial loss;
tax or benefits correction expenses;
psychological or emotional harm in legally recognized cases;
legal fees;
cost of identity restoration;
damage caused by false employment records.

Civil claims are stronger when there is clear evidence of unauthorized use, malice, negligence, and actual harm.

XXXIII. Injunction and Takedown

If the impersonator continues using the victim’s identity, the victim may seek takedown through platforms and, in serious cases, injunctive relief.

Possible relief includes:

order to stop identity use;
removal of fake profiles;
withdrawal of applications;
deletion or blocking of unlawful records;
return of documents;
prohibition on contacting employers;
preservation of evidence;
correction of public or employment records.

Court action may be needed if voluntary takedown fails.

XXXIV. Correcting Employment Records

The victim should request written confirmation that the employer or recruiter has corrected records.

Correction may include:

marking application as fraudulent or unauthorized;
deleting applicant profile where lawful;
blocking further processing;
correcting background-check vendor records;
canceling employee ID or system account;
reversing payroll records;
correcting tax submissions;
correcting benefit contributions;
notifying clients or departments that identity was misused;
providing victim with confirmation letter.

A written confirmation helps the victim avoid future problems.

XXXV. Correcting Government Records

If false employment records reached government agencies, the victim may need to correct them.

A. BIR

If income or withholding was reported under the victim’s TIN, the victim may need to dispute the record and submit proof of identity misuse.

B. SSS

If contributions or employment history were posted under the victim’s SSS number, correction may be requested.

C. PhilHealth

If employer remittances or benefit use were incorrectly made under the victim’s PhilHealth number, the records should be corrected.

D. Pag-IBIG

If contributions, loans, or employer records were affected, correction should be requested.

E. PRC

If a professional license was misused, the professional should notify the regulator and request protective notation or investigation where appropriate.

XXXVI. If Salary Was Paid Under the Victim’s Name

If an impersonator actually worked and received salary under the victim’s name, the situation is serious.

Questions to resolve include:

who received the salary;
what bank account was used;
whether the bank account was under the victim’s name;
whether payroll forms were forged;
whether tax was withheld;
whether benefits were remitted;
whether employment contract was signed;
whether company property was issued;
whether misconduct occurred during employment;
whether the victim is being blamed.

The victim should immediately notify the employer in writing and request correction of all records.

XXXVII. If Company Equipment Was Issued

If the impersonator obtained laptop, phone, ID, uniform, access card, tools, vehicle, or other property under the victim’s name, the victim should ensure the employer does not charge them for loss.

The victim should demand written confirmation that the property was not issued to them personally and that any accountability belongs to the impersonator.

XXXVIII. If the Victim Is Accused by the Employer

Sometimes the employer suspects the real identity owner participated in the fraud.

The victim should respond calmly and in writing:

deny unauthorized application if true;
provide proof of non-participation;
request copies of documents used;
request preservation of records;
ask for investigation;
avoid signing admissions;
request legal counsel if serious;
file identity theft report;
provide police blotter or complaint once available.

The victim should not ignore the accusation because silence may allow false records to remain.

XXXIX. If the Victim’s Current Employer Finds Out

If a fake job application is sent to another company and the victim’s current employer learns about it, the victim may face suspicion of job hunting, conflict of interest, or breach of employment terms.

The victim should:

explain in writing that the application was unauthorized;
provide proof, if available;
request confidentiality;
file a report if necessary;
ask the receiving employer to confirm unauthorized use;
preserve all communications.

If the current employer takes adverse action based on a fake application, labor remedies may become relevant.

XL. If the Application Was Submitted by an AI, Bot, or Automated System

Some platforms or services may submit applications automatically using stored resumes or scraped profiles. If this happens without consent, the victim may demand:

deletion of profile;
disclosure of data source;
list of employers contacted;
withdrawal of applications;
correction of records;
explanation of automated processing;
proof of consent relied upon;
damages if harm occurred.

Automated submission does not excuse unlawful processing.

XLI. If the Victim Previously Gave the Resume to Someone

A person may have once shared a resume with a recruiter, friend, school office, former employer, or job platform. That does not automatically authorize indefinite or unrelated use.

Consent may be limited by:

purpose;
time;
recipient;
position applied for;
geographic scope;
type of employer;
withdrawal of consent;
confidentiality expectations.

A recruiter who reuses old resumes without authority may still face liability.

XLII. If There Was Consent but Scope Was Exceeded

Sometimes the victim consented to one application, but the recruiter used the data for many other applications or modified the identity details.

This may be unauthorized beyond the consent given.

Examples:

applicant authorized submission to Company A only, but recruiter submitted to Companies B to Z;
applicant authorized use of resume but not government IDs;
applicant authorized local job applications but recruiter submitted overseas applications;
applicant authorized one position but recruiter applied for another;
applicant withdrew consent but recruiter continued submitting;
recruiter changed salary history or credentials.

The victim may demand correction, withdrawal, deletion, and accounting.

XLIII. If a School or Training Center Submitted Applications Without Consent

Some schools, bootcamps, training centers, or placement offices may submit graduate profiles to employers. This may be acceptable if authorized, but problematic if done without consent or with false information.

The student or graduate may demand:

copy of consent form;
list of employers contacted;
correction of inaccurate records;
withdrawal of unauthorized applications;
deletion of documents;
assurance against future use.

If the school or training center misused IDs or credentials, stronger remedies may apply.

XLIV. If the Application Used a Fake Signature

A forged signature is strong evidence of unauthorized action.

The victim should preserve:

the document with signature;
genuine specimen signatures;
emails transmitting the document;
identity of person who submitted it;
date and platform used;
witnesses;
notarization details if notarized.

Forgery may support criminal and civil action.

XLV. If the Application Used a Fake Authorization Letter

Some impersonators submit authorization letters claiming the victim allowed them to act.

The victim should immediately deny the authorization in writing and request a copy. If the signature is forged, this may support falsification or use of falsified document.

XLVI. If the Application Used Real Documents Obtained Earlier

The impersonator may have obtained real documents from:

previous job applications;
school records;
shared family files;
old email attachments;
cloud storage;
photocopy shops;
recruitment agencies;
former employers;
social media posts;
lost wallet;
hacked accounts;
discarded documents.

The victim should determine the source to prevent further misuse.

XLVII. Preventive Measures for Individuals

Individuals should protect identity documents by:

watermarking ID copies with purpose and date;
avoiding unnecessary sharing of IDs;
sending documents only through secure channels;
asking who will access the documents;
keeping a list of recruiters and employers who received documents;
deleting old resumes from inactive platforms;
using strong passwords;
enabling two-factor authentication;
monitoring email for application confirmations;
checking job platform accounts;
avoiding public posting of full resume with address and ID numbers;
redacting sensitive numbers where not required;
refusing to send OTPs;
reporting lost IDs;
securely shredding old documents;
monitoring government contribution records;
checking professional license records;
keeping copies of submitted job applications.

XLVIII. Preventive Measures for Employers

Employers should:

verify identity before onboarding;
compare applicant photo with live person;
verify government IDs;
verify professional licenses;
conduct reference checks carefully;
require direct applicant confirmation;
avoid relying solely on recruiters;
use secure applicant tracking systems;
limit access to applicant data;
train HR staff on identity fraud;
maintain audit logs;
verify bank account ownership;
verify remote workers through live checks;
detect duplicate applications;
require signed consent for background checks;
confirm authority when applications come through recruiters;
promptly investigate identity misuse reports;
retain evidence lawfully;
correct false records quickly;
review vendor data privacy agreements.

XLIX. Preventive Measures for Recruiters

Recruiters should:

obtain written consent before submitting candidates;
submit candidates only to authorized employers;
avoid modifying identity details;
keep consent records;
verify candidate identity;
use secure storage;
avoid reusing old resumes without permission;
delete data when no longer needed;
identify themselves clearly to candidates;
disclose employers to whom data is sent;
avoid fake candidate submissions;
train staff on data privacy;
audit recruiter activity;
prohibit use of personal email for candidate data;
respond promptly to withdrawal or deletion requests.

L. Red Flags for Employers

Employers should investigate if:

applicant refuses live video or in-person verification;
applicant’s ID photo does not match;
email address differs from name;
phone number is shared by several applicants;
bank account name differs from applicant;
interviewee looks or sounds different from ID;
documents have inconsistent birthdates;
resume history is too polished or copied;
professional license does not match applicant;
applicant cannot discuss claimed experience;
reference contacts seem fake;
multiple candidates use the same documents;
applicant avoids background check;
application comes from suspicious recruiter;
digital signature appears pasted;
applicant asks equipment to be sent to unrelated address.

LI. Red Flags for Individuals

A person should be alert if they receive:

interview invitations for jobs they did not apply for;
application confirmation emails from unknown companies;
background-check requests they did not authorize;
calls from recruiters about unknown applications;
SSS, PhilHealth, Pag-IBIG, or BIR records showing unknown employer;
job offer letters they did not request;
password reset emails from job platforms;
notices about company equipment under their name;
professional license verification requests;
loan or payroll account messages;
messages from strangers claiming to be HR;
emails about onboarding or medical examination.

These may indicate identity misuse.

LII. Settlement

Settlement may be possible if the impersonator is known and the damage can be corrected.

A settlement should include:

admission or acknowledgment of unauthorized use, if agreed;
list of employers contacted;
withdrawal of applications;
return or deletion of documents;
correction of records;
reimbursement of expenses;
compensation for damages, if any;
undertaking not to repeat;
confidentiality, if appropriate;
cooperation with government record correction;
consequences for breach.

The victim should not sign a settlement that falsely states consent was given if it was not.

LIII. Affidavit of Desistance

If criminal proceedings are involved, the impersonator may ask the victim to sign an affidavit of desistance after apology or settlement.

An affidavit of desistance does not automatically end a criminal case. Public offenses may continue if evidence supports prosecution.

The victim should be careful before signing, especially if government records, professional licenses, employer records, or third-party victims are involved.

LIV. Public Posting and Defamation Risk

Victims may want to warn others online. They should be cautious.

To reduce risk:

state facts only;
avoid unsupported accusations;
avoid insults;
avoid publishing sensitive IDs;
avoid doxxing addresses of family members;
say “unauthorized application using my identity was reported” rather than declaring guilt before investigation;
preserve evidence before posting;
file formal reports where appropriate.

Public posting may help stop harm but can create legal complications if careless.

LV. Time Limits and Delay

Victims should act promptly. Delay may cause:

deletion of online records;
loss of platform logs;
payroll reporting complications;
tax problems;
benefit record errors;
spread of personal documents;
further applications;
difficulty proving non-consent;
reputational damage;
legal prescription issues.

Immediate written notices and reports are important.

LVI. Key Legal Principles

The main principles are:

A person’s identity cannot be used for job applications without consent.
Employment data is personal information and must be processed lawfully.
Family relationship does not automatically authorize identity use.
Recruiters need authority before submitting a candidate.
Online identity misuse may involve cybercrime.
Forged signatures and fake documents may support falsification charges.
Receiving salary, equipment, or benefits through another identity may support fraud claims.
Professional license misuse is especially serious.
Employers must verify identity and correct false records.
Victims should preserve evidence before deletion.
Government records must be corrected if affected.
A police blotter is useful but not the same as prosecution.
Data privacy complaints may be available against organizations that mishandled data.
Civil damages may be claimed if harm is proven.
Settlement should include record correction and non-repetition.
Public accusations should be made carefully to avoid defamation risk.
Prompt action reduces further identity harm.
Strong identity verification protects both employers and applicants.
Unauthorized job applications can affect taxes, benefits, licenses, and reputation.
The proper remedy depends on whether the wrongdoer is an impersonator, recruiter, employer, insider, platform, or family member.

LVII. Recommended Immediate Action Plan

A victim should generally:

preserve all evidence of the unauthorized application;
notify the employer, recruiter, or platform in writing;
demand suspension of processing and preservation of records;
ask what documents and information were submitted;
request correction, blocking, or deletion of unauthorized records;
secure email, job platform, and social media accounts;
change passwords and enable two-factor authentication;
report compromised IDs to relevant agencies;
monitor tax, SSS, PhilHealth, Pag-IBIG, bank, and e-wallet records;
file a police, NBI, or cybercrime report if identity theft or fraud is involved;
file a data privacy complaint if an organization mishandled data;
notify professional regulators if a license was misused;
send a demand letter to the impersonator if known;
seek correction letters from employers or platforms;
consult counsel if there is serious damage, forged documents, payroll fraud, professional license misuse, or criminal accusation.

LVIII. Conclusion

Unauthorized job application using another person’s identity in the Philippines is a serious legal problem. It may begin as a fake resume or online application, but it can quickly affect employment records, payroll, taxes, government contributions, professional licenses, reputation, and financial security.

The act may give rise to criminal, civil, administrative, cybercrime, and data privacy remedies. The impersonator may face liability for identity misuse, falsification, fraud, and related offenses. Recruiters, employers, platforms, or insiders may also face liability if they unlawfully processed or disclosed personal data, ignored verification duties, or failed to correct records after notice.

For victims, the priorities are evidence preservation, immediate written notice, account security, record correction, and formal reporting where necessary. For employers and recruiters, strong identity verification and lawful data handling are essential. In modern hiring, a resume is not just a document; it is a bundle of personal identity, professional reputation, and legal rights. Using it without authority can create consequences far beyond a failed job application.