A Philippine Legal Article

I. Introduction

Unauthorized loan disbursement occurs when a lending company, financing company, online lending platform, or similar credit provider releases loan proceeds to a person without that person’s valid consent, authority, or knowledge, or releases funds under terms materially different from what the borrower accepted.

In the Philippine context, this problem is especially relevant in online lending arrangements, where loan applications, approvals, e-wallet transfers, bank disbursements, and collection efforts may happen entirely through mobile applications or digital platforms. A consumer may suddenly receive money in a bank account or e-wallet, or receive collection demands for a loan they never knowingly accepted. In other cases, the consumer may have inquired about a loan, clicked through an application, or uploaded identification documents, but never agreed to final loan terms.

The legal issues usually involve contract law, consumer protection, data privacy, lending regulation, unfair debt collection, cybercrime, and possible civil or criminal liability.

This article discusses the Philippine legal framework, consumer rights, potential liabilities of lending companies, defenses available to consumers, and practical remedies.

II. What Counts as an Unauthorized Loan Disbursement?

An unauthorized loan disbursement may take several forms.

1. No application was made by the alleged borrower

This is the clearest case. A person did not apply for a loan, did not authorize anyone to apply, and did not consent to any loan agreement, yet funds were released in their name.

This may involve identity theft, misuse of personal data, fake accounts, forged electronic signatures, or fraudulent use of IDs and selfies.

2. The consumer merely browsed or started an application

A borrower may have downloaded an app, checked possible loan amounts, uploaded information, or explored available terms, but did not finally accept the loan.

If the company disbursed funds before final consent, the borrower may argue that there was no perfected loan contract.

3. The consumer agreed to one set of terms, but the company disbursed under different terms

For example, the consumer expected a ₱10,000 loan payable over six months, but the company disbursed only ₱6,000 after heavy deductions and demanded repayment of ₱10,000 within seven days.

This may raise issues of lack of informed consent, unfair or deceptive terms, abusive charges, or invalid disclosures.

4. Disbursement was made to the wrong account

A loan may have been approved, but the proceeds were sent to an e-wallet, bank account, or payment channel not owned or authorized by the borrower.

In that situation, the lending company may still have failed to deliver the loan proceeds to the borrower.

5. Automatic renewal, rollover, or reloan without consent

Some lending arrangements involve repeat borrowing. A company may disburse another loan after repayment of a previous one without a fresh, valid acceptance by the consumer.

A prior loan relationship does not automatically authorize new loans.

6. Loan obtained through coercion, deception, or app manipulation

A borrower may claim that consent was obtained through misleading app design, hidden buttons, confusing prompts, false representations, or failure to disclose material terms.

Consent must be intelligent, free, and informed.

III. The Legal Nature of a Loan Under Philippine Law

Under the Civil Code of the Philippines, a simple loan or mutuum is a contract where one party delivers money or other consumable goods to another, upon the condition that the same amount of the same kind and quality shall be paid.

A loan is contractual. Like other contracts, it generally requires consent, object, and cause. Without valid consent, there is no valid contract.

A. Consent is essential

For a loan obligation to arise, the alleged borrower must have consented to borrow under identifiable terms. Consent must be given by a person with capacity, must be free from mistake, violence, intimidation, undue influence, or fraud, and must refer to the actual terms of the loan.

A lending company cannot simply create an obligation by sending money to someone without authority and then demanding repayment with interest and penalties.

B. Delivery matters, but delivery alone is not enough

In a loan, delivery of money is important. However, delivery must be connected to a valid agreement. A unilateral deposit or transfer, without the recipient’s consent to borrow, does not automatically create a valid loan contract.

At most, depending on the circumstances, the recipient may have a duty to return money received by mistake or without legal basis. But that is different from owing interest, penalties, service charges, or collection fees under an alleged loan contract.

C. Electronic consent may be valid

Philippine law recognizes electronic documents and electronic signatures under the Electronic Commerce Act. A borrower’s acceptance through an app, one-time password, digital signature, checkbox, PIN, biometric confirmation, or similar method may be legally valid if properly authenticated and if it reflects genuine consent.

However, the lending company must be able to prove that the consumer actually gave consent. A mere internal system record may not be enough if disputed, especially where there are signs of fraud, identity theft, defective disclosure, or unauthorized access.

IV. Regulatory Framework for Lending Companies in the Philippines

Lending companies are generally regulated under the Lending Company Regulation Act and related rules. Financing companies are separately regulated under financing company laws. The Securities and Exchange Commission has authority over lending and financing companies, including many online lending platforms operated by corporations.

A. Lending companies must be registered and authorized

A lending company must generally be organized as a corporation and must have the necessary authority to operate. Engaging in lending without proper registration or authority may expose the company and responsible officers to administrative and possibly criminal consequences.

Consumers should check whether the company is registered, whether it has a Certificate of Authority, and whether the online lending app is disclosed as part of the company’s authorized operations.

B. Online lending platforms are subject to stricter scrutiny

Online lending has been a recurring regulatory concern in the Philippines because of abusive collection practices, excessive access to phone contacts, public shaming, threats, harassment, and misleading loan terms.

Regulators have issued rules and advisories against unfair debt collection practices, misuse of borrower data, and deceptive lending behavior. A company that disburses loans without clear consent may also be investigated for unfair, abusive, or deceptive practices.

C. Disclosure of loan terms is required

A lending company must clearly disclose material loan terms, including principal amount, finance charges, interest, penalties, fees, net proceeds, payment schedule, and consequences of default.

Where the borrower was not clearly informed of the loan amount, deductions, interest, repayment date, or penalties before disbursement, the validity or enforceability of those charges may be challenged.

V. Is the Consumer Required to Return the Money?

This depends on the facts.

A. If the consumer never consented to the loan but received money

The consumer should not treat the money as free money. Even if no valid loan contract exists, the Civil Code principles on unjust enrichment, solutio indebiti, or payment by mistake may require the recipient to return money received without legal basis.

However, the amount to be returned is usually only the amount actually received, not the face amount of the alleged loan, not hidden charges, not interest, and not penalties, unless a valid contract supports those charges.

Example: A company claims the loan was ₱10,000, deducts ₱3,000 as processing fees, and sends only ₱7,000 to the consumer without consent. If the consumer disputes the loan immediately and does not use the funds, the fair position is that the consumer should return the ₱7,000 actually received, while rejecting liability for interest, penalties, and fees.

B. If the consumer uses the money after learning of the disbursement

Using the funds may complicate the dispute. The lending company may argue that the consumer ratified the loan or accepted the benefit.

Still, use of the money does not automatically validate excessive, undisclosed, or illegal charges. The consumer may remain liable only for the amount actually received, or for reasonable obligations established by law, depending on the facts.

C. If the money was not received by the consumer

If the company disbursed to the wrong account or to an account controlled by someone else, the consumer can argue that they never received the loan proceeds and therefore should not be liable.

The lending company should prove actual disbursement to an account authorized by the borrower.

D. If identity theft was involved

Where a fraudster used the consumer’s identity, the consumer should immediately dispute the debt, file reports, preserve evidence, and demand that the lender stop collection while investigating.

The consumer should not be made liable for a loan they did not apply for, authorize, receive, or benefit from.

VI. Valid Consent in Digital Lending

Because many lending companies operate through mobile apps, consent often becomes the central issue.

A. What a lending company should be able to prove

A responsible lending company should be able to show:

the borrower created or accessed the account;
identity verification was properly completed;
the borrower was shown the final loan terms;
the borrower affirmatively accepted those terms;
the disbursement account belonged to or was authorized by the borrower;
the exact amount disbursed and the date and time of disbursement;
the charges, interest, and repayment schedule were disclosed before acceptance.

B. Weak evidence of consent

The following may be insufficient or questionable:

a generic screenshot of app terms;
a system-generated approval record without proof of user action;
a checkbox buried in unreadable terms;
a loan agreement with no verifiable electronic signature;
a disbursement to an account not clearly linked to the borrower;
acceptance allegedly made after suspicious logins or device changes;
records that do not match the borrower’s phone number, e-mail, device, or IP data.

C. Consent cannot be presumed from silence

A consumer’s failure to immediately return money does not automatically mean they agreed to a loan, especially if they were unaware of the transfer, confused about its source, or promptly disputed the transaction upon discovery.

VII. Common Legal Violations by Lending Companies

Unauthorized disbursement may be associated with several violations.

A. Unfair or deceptive lending practices

A company may be acting unfairly or deceptively if it sends funds without clear consent, hides charges, misstates the loan amount, imposes surprise deductions, or represents that a consumer owes a debt that was never validly incurred.

B. Unfair debt collection

Collection practices may become unlawful or abusive when collectors:

threaten violence or criminal prosecution without basis;
shame the borrower publicly;
contact the borrower’s relatives, employer, or phone contacts unnecessarily;
disclose the debt to third parties;
use profane, obscene, insulting, or harassing language;
make repeated calls or messages intended to annoy or intimidate;
impersonate lawyers, police officers, court personnel, or government agents;
threaten arrest for nonpayment of a private debt;
post the borrower’s photo or personal data online;
collect amounts not legally owed.

Even if a valid debt exists, abusive collection methods are not justified.

C. Data privacy violations

Online lending apps often collect sensitive personal information, IDs, selfies, phone numbers, contact lists, location data, and device information.

Under the Data Privacy Act, personal data must be collected and processed lawfully, fairly, and for legitimate purposes. Excessive collection of contacts, unauthorized access to phonebooks, disclosure of debts to third parties, posting personal information, or using data for harassment may constitute data privacy violations.

The lending company may be liable if it processes data beyond what the borrower consented to or beyond what is necessary for the loan.

D. Cybercrime-related conduct

Depending on the facts, conduct involving unauthorized account access, identity theft, threats, online harassment, fake profiles, or unlawful use of personal data may implicate cybercrime laws.

Where a loan was created through hacked accounts, stolen credentials, SIM misuse, phishing, or fraudulent digital identity verification, the borrower should consider reporting the matter as possible cybercrime or identity theft.

E. Misrepresentation or fraud

If the company intentionally misled the consumer into believing that no loan would be released, or that the application was only preliminary, or that charges would be different, civil or criminal fraud issues may arise.

F. Usurious, unconscionable, or excessive charges

While interest rate regulation has changed over time, courts may still reduce unconscionable interest, penalties, and charges. A lender cannot rely on oppressive, shocking, hidden, or grossly disproportionate charges simply because they appear in fine print.

VIII. Consumer Rights in Unauthorized Disbursement Cases

A consumer faced with an unauthorized loan disbursement has several important rights.

1. Right to dispute the debt

The consumer may formally deny liability and demand proof of the alleged loan, including proof of application, acceptance, disbursement, and disclosure of terms.

2. Right to receive clear loan information

The consumer may demand a breakdown of:

principal amount;
net proceeds actually disbursed;
interest;
service fees;
processing fees;
penalties;
repayment date;
payment history;
account or e-wallet where proceeds were sent;
basis for collection.

3. Right not to be harassed

Debt collection must be lawful and fair. A disputed loan does not give the company the right to harass, shame, threaten, or contact third parties.

4. Right to data privacy

The consumer may demand that the company stop unauthorized processing, disclosure, or sharing of personal data. The consumer may also file a complaint if the company misused personal data.

5. Right to return only what was actually received, where appropriate

If the consumer received money without consent, they may offer to return the exact amount actually received without admitting a loan obligation, interest, penalties, or fees.

6. Right to complain to regulators

The consumer may complain to the SEC for lending company violations, to the National Privacy Commission for data privacy issues, to the Department of Trade and Industry for consumer concerns where applicable, and to law enforcement for fraud, threats, identity theft, or cybercrime.

7. Right to seek court relief

A consumer may file a civil action for damages, injunction, declaration of non-liability, or other appropriate relief depending on the facts.

IX. Immediate Steps for Consumers

A consumer who receives an unauthorized loan disbursement should act quickly and carefully.

Step 1: Do not spend the money

If the funds are still intact, keep them separate. Spending the funds may be argued as acceptance or ratification.

Step 2: Take screenshots and preserve records

Preserve:

bank or e-wallet transaction records;
SMS messages;
app notifications;
e-mails;
call logs;
collection messages;
screenshots of threats;
screenshots of the app interface;
loan agreement, if any;
proof that no application was made;
proof of identity theft, if applicable.

Step 3: Send a written dispute immediately

The dispute should be sent through e-mail, in-app support, registered mail, or any official channel. It should clearly say that the consumer does not admit the loan, did not authorize the disbursement, and demands proof.

Step 4: Offer return of the actual amount received, without admission, if appropriate

Where the consumer actually received money and does not claim ownership over it, they may state that they are willing to return the net amount received through a verified official channel, without admitting liability for interest, penalties, or fees.

The consumer should not send payment to random personal accounts. Payment should be made only to a verified company account, with written acknowledgment.

Step 5: Demand suspension of collection

The consumer should demand that the company stop collection activity while the dispute is under investigation.

Step 6: Demand cessation of third-party contact

If collectors contact relatives, friends, employers, or phone contacts, the consumer should demand that the company stop unauthorized disclosure and processing of personal information.

Step 7: File complaints if the company persists

If the company continues to collect, harass, or misuse data, the consumer may file complaints with the appropriate agencies.

X. Sample Dispute Letter

Subject: Formal Dispute of Unauthorized Loan Disbursement

To: [Name of Lending Company] Date: [Date]

I am formally disputing the alleged loan under account/reference number [insert number, if any].

I did not authorize, consent to, or validly accept the alleged loan. I demand that you provide complete proof of the alleged transaction, including the loan application, final loan terms shown to me before approval, proof of my acceptance, proof of electronic signature or authentication, disbursement details, and a complete breakdown of all amounts you claim to be due.

If any amount was transferred to my account, such transfer was not made pursuant to my valid consent to a loan. I do not admit liability for interest, penalties, processing fees, service fees, collection fees, or any other charges.

Pending your investigation and written response, you are directed to suspend all collection activity. You are also directed not to contact my relatives, employer, friends, phone contacts, or any third party regarding this disputed matter. Any unauthorized processing, disclosure, or use of my personal information will be treated as a data privacy violation.

If you claim that I validly entered into this loan, provide all supporting documents and system records in writing.

Sincerely, [Name] [Contact Details]

XI. What Evidence Should the Consumer Collect?

Evidence is critical. The consumer should gather and organize the following:

A. Proof of unauthorized disbursement

transaction history showing receipt of funds;
date and time of transfer;
sender name;
bank or e-wallet reference number;
amount actually received.

B. Proof of lack of consent

no account registration;
no OTP received;
no signed agreement;
no completed application;
no acceptance screenshot;
no disbursement instruction;
device or SIM not used;
proof that the borrower was elsewhere or had no access.

C. Proof of harassment or illegal collection

threatening messages;
abusive calls;
screenshots of posts;
messages sent to third parties;
call recordings, where legally obtained;
names and numbers of collectors;
dates and times of contact.

D. Proof of data privacy violations

evidence that contacts were accessed;
messages sent to relatives or employers;
public disclosure of debt;
unauthorized use of photos or IDs;
app permissions showing excessive access;
privacy notices or lack thereof.

E. Proof of payment or attempted return

e-mail offering return of net proceeds;
payment receipts;
company acknowledgment;
screenshots of payment channels.

XII. Remedies Before Government Agencies

A. Securities and Exchange Commission

The SEC is a key regulator for lending and financing companies. A complaint may be filed where the company:

operates without authority;
uses abusive collection practices;
imposes undisclosed or excessive charges;
engages in unfair or deceptive lending;
uses an online lending app in violation of applicable rules;
disburses loans without valid consent.

The complaint should include the company name, app name, screenshots, loan details, collection messages, and proof of unauthorized disbursement.

B. National Privacy Commission

The NPC may act on complaints involving misuse of personal data, unauthorized access to contacts, public shaming, third-party disclosure, or excessive data collection.

A consumer may complain if the lender or collector:

accessed phone contacts without valid basis;
disclosed the debt to third parties;
posted the borrower’s identity online;
used photos or IDs for harassment;
processed personal data after consent was withdrawn or without lawful basis;
failed to protect personal data from misuse.

C. Philippine National Police Anti-Cybercrime Group or NBI Cybercrime Division

Reports may be appropriate where there is identity theft, hacking, phishing, online threats, fake accounts, extortion, or cyber harassment.

D. Department of Trade and Industry

The DTI may be relevant for consumer protection concerns, especially unfair or deceptive acts in commerce. However, lending companies are often primarily under the SEC for regulatory purposes.

E. Bangko Sentral ng Pilipinas

If the issue involves banks, e-wallets, payment systems, electronic money issuers, or financial institutions supervised by the BSP, a complaint may also be directed to the relevant BSP-supervised entity and, where appropriate, escalated through consumer assistance channels.

XIII. Possible Court Actions

A consumer may consider court action when the amount, harassment, reputational harm, or continuing collection justifies it.

A. Civil action for damages

The consumer may claim damages if the company’s acts caused mental anguish, reputational injury, loss of employment, business harm, or other injury.

Possible damages may include actual damages, moral damages, exemplary damages, attorney’s fees, and costs, depending on proof and legal basis.

B. Injunction

If the company continues harassment, disclosure, or illegal collection, the consumer may seek injunctive relief to stop the conduct.

C. Declaratory relief or action to declare non-liability

Where there is a genuine dispute over whether a loan exists, a consumer may seek judicial relief to clarify rights and obligations.

D. Small claims

If the dispute is limited to a sum of money and no complex injunctive or privacy issues are involved, small claims procedure may be relevant. However, consumers should be cautious because small claims may not be the best forum for complex issues involving identity theft, privacy violations, or regulatory misconduct.

E. Criminal complaints

Depending on the facts, criminal complaints may be considered for fraud, unjust vexation, grave threats, identity theft, cyber-related offenses, or other offenses. Nonpayment of a civil debt alone is generally not a crime, but fraud, threats, identity misuse, and harassment may be.

XIV. The Lending Company’s Possible Defenses

A lending company accused of unauthorized disbursement may raise several defenses.

1. The borrower accepted through the app

The company may present logs, OTP records, device information, electronic signatures, selfies, IDs, and app screenshots.

The consumer should examine whether these records actually prove consent, whether the device or account belonged to the consumer, and whether the final terms were disclosed.

2. The borrower received and used the funds

The company may argue that the borrower benefited from the money and should repay.

This may support return of the amount actually received, but not necessarily the enforcement of undisclosed or unauthorized charges.

3. The borrower previously borrowed from the same company

Prior borrowing may prove familiarity with the app, but it does not automatically prove consent to a new loan.

Each loan must have its own valid acceptance.

4. The borrower’s credentials were used

The company may argue that the borrower is responsible for safeguarding credentials. However, the company may still need to prove adequate verification, fraud prevention, and compliance with data protection obligations.

5. The borrower is falsely denying the loan

This is a factual defense. The outcome will depend on evidence.

XV. The Consumer’s Best Legal Position

The strongest consumer position usually combines the following points:

no valid consent was given;
no final loan terms were accepted;
no valid electronic signature was made;
the company cannot authenticate the alleged transaction;
the disbursement was unsolicited or erroneous;
only the net amount actually received, if any, may be returned;
interest, penalties, fees, and collection charges are disputed;
all collection must stop pending investigation;
third-party contact and data disclosure are unlawful;
regulatory complaints will be filed if the company persists.

The consumer should avoid making statements like “I borrowed but…” unless true. Language matters. It is better to say “I dispute the alleged loan” or “I did not authorize this loan.”

XVI. Interest, Charges, and Penalties

Unauthorized disbursement raises a major issue: can the lender charge interest?

Generally, interest and penalties arise from agreement or law. If there was no valid loan agreement, the lender has no contractual basis to impose interest, processing fees, service fees, late fees, penalties, or collection charges.

Even if a loan agreement exists, charges may still be challenged if they are:

not clearly disclosed;
unconscionable;
excessive;
contrary to law or regulation;
imposed through deception;
based on an invalid or defective contract.

A borrower may admit receipt of money without admitting liability for the lender’s claimed charges.

XVII. Unauthorized Disbursement and Credit Reporting

A lending company may threaten to report the borrower to credit bureaus or databases. If the debt is genuinely disputed, the consumer should notify the company in writing that any adverse reporting would be contested.

A company that reports false or disputed information without proper basis may expose itself to complaints or liability, especially if the report damages the consumer’s credit reputation.

The consumer should keep written proof of the dispute before any negative reporting occurs.

XVIII. Harassment by Online Lending Collectors

A common problem in Philippine online lending disputes is harassment after an unauthorized or disputed disbursement.

A. Common abusive tactics

calling repeatedly throughout the day;
sending threats of arrest;
threatening barangay complaints as intimidation;
threatening lawsuits without basis;
telling employers or relatives about the debt;
sending edited photos or defamatory messages;
posting the borrower on social media;
using shame campaigns;
calling the borrower a scammer or criminal;
demanding payment of inflated amounts.

B. Legal response

The borrower should not engage emotionally. The better response is written, documented, and firm:

dispute the loan;
demand proof;
demand cessation of harassment;
preserve evidence;
block abusive numbers only after screenshots are saved;
report serious threats;
file SEC and NPC complaints when warranted.

C. Threat of imprisonment

A private debt is generally civil in nature. A person is not imprisoned merely for inability or refusal to pay a debt. However, separate criminal acts such as fraud may be prosecuted if the elements are present.

Collectors who threaten automatic arrest for nonpayment of a disputed loan may be engaging in misleading or abusive collection.

XIX. Barangay Proceedings

Some collectors threaten to bring borrowers to the barangay. Barangay conciliation may be required for certain disputes between individuals in the same city or municipality, but corporate lending disputes, online lenders, and parties in different localities may not always fit simple barangay conciliation rules.

A barangay has no power to imprison a borrower for nonpayment of debt. It also cannot force payment of an invalid or disputed loan without due process.

If summoned, the consumer may appear, calmly state that the loan is disputed, and ask that the matter be documented.

XX. Employer and Family Contact

A lending company or collector may not freely contact a borrower’s employer, family, or phone contacts to shame or pressure the borrower.

Contacting third parties may become problematic when it discloses the borrower’s alleged debt, uses personal data without authority, harms reputation, or constitutes harassment.

If third parties are contacted, the consumer should collect screenshots or statements from those persons and include them in complaints.

XXI. Data Privacy in Online Lending

Data privacy is one of the most important parts of unauthorized lending cases.

A. Consent to data collection must be specific

A lending app cannot justify unlimited access to contacts, photos, location, messages, or files merely because the user installed the app. Consent must be informed, specific, and legitimate.

B. Excessive permissions may be unlawful

If the app collects more data than necessary for credit evaluation, the company may violate data minimization principles.

C. Debt shaming is not legitimate processing

Using personal data to shame, threaten, or pressure a borrower is not a legitimate purpose.

D. The consumer may invoke data subject rights

The consumer may demand access, correction, deletion, blocking, or objection to processing, depending on the situation.

E. Evidence of privacy violations should be preserved

Screenshots from relatives, friends, co-workers, or employers are valuable. The consumer should ask them not to delete messages.

XXII. Identity Theft Scenarios

In identity theft cases, the consumer should act immediately.

Recommended actions

file a dispute with the lender;
demand all application records;
report to the bank or e-wallet provider;
change passwords;
secure SIM and e-mail accounts;
file police or cybercrime reports;
file an NPC complaint if personal data was misused;
monitor credit records;
submit affidavits where needed.

The consumer should expressly state that they did not apply, did not receive the benefit, and did not authorize the account or disbursement.

XXIII. Role of Banks and E-Wallet Providers

Where funds are disbursed through banks, e-wallets, or payment providers, the consumer may also need to coordinate with those institutions.

A. If funds were received

The consumer may ask the bank or e-wallet provider for transaction details, sender identity, reference numbers, and official statements.

B. If funds were sent to a wrong account

The consumer should demand proof from the lender and request assistance from the payment provider. If the account is not the consumer’s, that supports the defense of non-receipt.

C. If identity theft involved the consumer’s wallet

The consumer should report account takeover, unauthorized transactions, or SIM-related fraud immediately.

XXIV. Can the Consumer Keep the Money?

Generally, no. If money was received by mistake or without legal basis, the recipient should not unjustly enrich themselves.

The consumer’s stronger legal position is to preserve the funds, dispute the alleged loan, and offer to return only the net amount actually received through a verified official channel without admitting liability for contractual charges.

Keeping or spending the funds may weaken the consumer’s position.

XXV. Can the Company Sue the Consumer?

Yes, a company may sue if it believes a valid debt exists. But it must prove its claim.

The company may need to prove:

the identity of the borrower;
the borrower’s consent;
the loan terms;
actual disbursement;
receipt by the borrower;
computation of the amount due;
legal basis for interest and charges.

The consumer may defend by showing lack of consent, identity theft, defective disclosure, non-receipt, excessive charges, or payment/return of net proceeds.

XXVI. Can the Consumer Sue the Lending Company?

Yes, depending on the facts.

Possible claims may include:

damages for harassment;
damages for defamation;
damages for invasion of privacy;
damages for illegal collection;
complaint for data privacy violations;
complaint for unfair or deceptive practices;
injunction against further harassment;
declaration of non-liability;
recovery of amounts wrongfully collected.

The strength of the case depends heavily on documentation.

XXVII. Practical Strategy for Consumers

The best practical strategy is usually:

act immediately;
do not ignore the issue;
preserve the money if received;
send a written dispute;
demand proof;
avoid emotional calls;
communicate in writing;
return only the net amount received if appropriate and safe;
do not pay inflated charges under pressure;
file regulatory complaints if harassment continues;
consult counsel if the amount is large or threats are serious.

XXVIII. Practical Strategy for Lending Companies

A compliant lending company should:

require clear affirmative consent before disbursement;
provide final loan terms before acceptance;
authenticate electronic signatures;
verify borrower identity carefully;
disburse only to verified borrower-owned accounts;
maintain audit logs;
avoid hidden fees;
suspend collection upon credible dispute;
investigate identity theft claims;
comply with data privacy law;
train collectors;
avoid third-party disclosure;
maintain complaint channels;
correct erroneous disbursements promptly.

Unauthorized disbursement is not merely a customer service issue. It is a legal and regulatory risk.

XXIX. Frequently Asked Questions

1. I received money from a lending app but never applied. Do I have to pay?

You should dispute the loan immediately. If you actually received the money, you may have to return the amount received, but you can dispute interest, penalties, fees, and the existence of a valid loan contract.

2. Can the lender charge interest on an unauthorized loan?

If there was no valid loan agreement, the lender generally has no contractual basis to charge interest or penalties.

3. What if I accidentally clicked something in the app?

The effect depends on what you clicked, what terms were shown, and whether your action clearly indicated acceptance. Accidental or uninformed clicks may be disputed, especially if the app design was misleading.

4. What if I applied but changed my mind before approval?

If you did not finally accept the loan terms, disbursement may be unauthorized. You should dispute immediately.

5. What if the app automatically released a reloan?

A previous loan does not automatically authorize a new one. Each new loan should require valid consent.

6. Can collectors call my contacts?

They should not disclose your debt to third parties or use your contacts for harassment. Such conduct may raise data privacy and unfair collection issues.

7. Can I be arrested for not paying?

Nonpayment of a private debt is generally civil. Arrest threats are often abusive unless there is a separate criminal case with proper legal process.

8. Should I block collectors?

Save evidence first. After documenting harassment, you may block abusive numbers, but keep at least one written channel open for formal dispute communication if possible.

9. Should I pay just to stop harassment?

Paying may stop immediate pressure but can also be treated as acknowledgment. A better approach is to dispute in writing, preserve evidence, and file complaints if collection is abusive.

10. What amount should I return?

If the disbursement was unauthorized but you received funds, the safest disputed position is usually to return only the net amount actually received, not the face amount, interest, penalties, or hidden charges.

XXX. Key Legal Principles

The central principles are:

A loan requires valid consent.
A lending company must prove the borrower accepted the loan.
Electronic consent is valid only if genuine and provable.
Unsolicited disbursement does not automatically create liability for interest and penalties.
Money received by mistake should generally be returned.
Debt collection must be lawful and non-abusive.
Personal data cannot be used for harassment or public shaming.
Identity theft must be investigated, not ignored.
Regulatory complaints are available.
Documentation determines the strength of the case.

XXXI. Conclusion

Unauthorized loan disbursement is a serious consumer protection issue in the Philippines. It sits at the intersection of contract law, lending regulation, electronic transactions, data privacy, cybercrime, and debt collection rules.

A lending company cannot create a binding loan obligation merely by sending money without valid consent. It must prove that the borrower knowingly and voluntarily accepted the loan and its terms. Where no valid consent exists, the consumer may dispute the loan, reject interest and penalties, and demand proof. If money was actually received, the consumer should generally preserve and return the net amount received through a verified official channel, without admitting liability for unauthorized charges.

When unauthorized disbursement is followed by harassment, public shaming, threats, or misuse of contacts, the matter becomes more serious. Consumers may seek help from regulators, privacy authorities, law enforcement, and courts. Lending companies, for their part, must ensure transparent consent, lawful disbursement, fair collection, and responsible data processing.