Discovering that someone has taken out a loan in your name is a nightmare scenario. With the rapid rise of digital banking and Online Lending Applications (OLAs) in the Philippines, identity theft has become increasingly sophisticated. Victims often only find out when they receive aggressive collection calls, demand letters, or notice a sudden drop in their credit score.

If you are a victim of an unauthorized loan, you are not helpless. Philippine laws protect consumers against cybercrime and identity theft.

The Legal Framework: Your Rights Under Philippine Law

Identity theft and financial fraud cross several legal boundaries. Knowing the specific laws gives you leverage when dealing with banks, lenders, and law enforcement.

Cybercrime Prevention Act of 2012 (Republic Act No. 10175): Section 4(b)(3) explicitly penalizes Computer-related Identity Theft. This is defined as the intentional acquisition, use, misuse, transfer, or possession of personal identifying information belonging to another without right.
Data Privacy Act of 2012 (Republic Act No. 10173): Lenders are "Personal Information Controllers." If they failed to properly verify the identity of the borrower, or if your data was leaked from a secure database, they may be liable for gross negligence under this Act.
Revised Penal Code (RPC): The perpetrator can also be charged with Falsification of Documents (Article 172) and Estafa/Swindling (Article 315) for using deceit to gain financial profit.

Step-by-Step Guide to Disputing an Unauthorized Loan

If you discover a fraudulent loan under your name, act immediately. Follow these steps to protect your financial reputation and build a solid legal defense.

1. Document and Gather Evidence

Do not delete any communications. Create a dedicated folder (both digital and physical) containing:

Screenshots of demand letters, text messages, or emails from the lender or collection agency.
The exact phone numbers, email addresses, or names used by the perpetrators or collectors.
A copy of your official credit report showing the fraudulent account.

2. Execute a Notarized Affidavit of Denial

Go to a notary public and draft an Affidavit of Denial. This is a formal, sworn legal statement declaring that:

You did not apply for, authorize, or receive the proceeds of the loan in question.
The signatures, IDs, or digital credentials used do not belong to you or were used without your consent.
You have no relationship with the lending institution regarding this specific account.

3. File a Police Report or Cybercrime Blotter

Go to the nearest police station or, ideally, specialized cybercrime units to report the identity theft. Bring your evidence and your Affidavit of Denial.

Philippine National Police - Anti-Cybercrime Group (PNP-ACG)
National Bureau of Investigation - Cybercrime Division (NBI-CCD)

Request a certified copy of the Police Report / Blotter Entry. This document proves to financial institutions that you are a victim of a crime, not a defaulting debtor.

4. Formally Dispute the Loan with the Lender

Contact the fraud or compliance department of the bank or lending company. Do not just call; send a formal Dispute Letter via registered mail or official email.

What to include in your Dispute Letter:

Your full name and contact information.

The fraudulent account/loan number.

A clear statement that the account is unauthorized due to identity theft.

Attachments: Copies of your Affidavit of Denial, the Police Report, and a clear copy of your valid government ID to prove your actual identity.

Demand that they freeze the account, halt all collection efforts, and clear your name from their records.

5. File Complaints with Regulatory Authorities

If the lender ignores your dispute, remains uncooperative, or continues to harass you, escalate the matter to their governing regulators:

Type of Institution	Regulatory Body	Action to Take
Traditional Banks, Digital Banks, EMIs (Gcash/Maya)	Bangko Sentral ng Pilipinas (BSP)	File a complaint via the BSP Online Consumer Assistance Mechanism (CAM).
Online Lending Apps (OLAs), Financing Companies	Securities and Exchange Commission (SEC)	Submit a complaint to the SEC Corporate Governance and Finance Department for unfair debt collection practices or unauthorized operations.
Data Leaks / Privacy Violations	National Privacy Commission (NPC)	File a formal complaint if the lender processed your personal data without proper verification or leaked your contact list.

Fixing Your Credit Record

An unauthorized loan can severely damage your credit rating, making it difficult for you to apply for legitimate loans, credit cards, or mortgages in the future.

In the Philippines, the Credit Information Corporation (CIC) is the central repository of credit data.

Request a copy of your credit report through the CIC or its accredited credit bureaus (e.g., TransUnion Philippines) to see the extent of the fraud.
Once the bank or the BSP validates that the loan was indeed fraudulent, ensure that the lender submits a correction to the CIC database.
Follow up until your credit report reflects that the account has been closed and cleared of delinquencies.

Proactive Defense: How to Prevent Future Identity Theft

Never Share OTPs: One-Time Passwords (OTPs) are the final line of defense for your digital accounts. No legitimate bank or lender will ever ask for your OTP.
Watermark Your IDs: When submitting copies of your government IDs for legitimate transactions, write a digital or physical watermark across the image (e.g., "For Digital Bank Verification Purposes Only - Used on [Date]"). Make sure it overlaps but does not obscure your photo and details.
Monitor Credit Regularly: Check your credit report at least once a year through the CIC to spot any anomalous accounts early.
Secure Your Social Media: Avoid posting sensitive personal details (full birthdate, mother's maiden name, address, or photos of ID cards) on public social media profiles.